Cisco Systems 312 マニュアル

目次

• Cisco Catalyst Switch Module 3110 and 3012 for IBM BladeCenter Software Configuration Guide

  1
• Contents

  3
• Preface

  43
• Overview

  47
  • Features

    47
    • Deployment Features

      49
    • Performance Features

      50
    • Management Options

      51
    • Manageability Features

      52
    • Availability and Redundancy Features

      53
    • VLAN Features

      54
    • Security Features

      55
    • QoS and CoS Features

      56
    • Layer 3 Features

      58
    • Monitoring Features

      59
  • Default Settings After Initial Switch Configuration

    60
  • Network Configuration Examples

    62
    • Design Concepts for Using the Switch

      62
    • Small to Medium-Sized Network

      65
  • Where to Go Next

    66
• Using the Command-Line Interface

  67
  • Understanding Command Modes

    67
  • Understanding the Help System

    69
  • Understanding Abbreviated Commands

    70
  • Understanding no and default Forms of Commands

    70
  • Understanding CLI Error Messages

    71
  • Using Configuration Logging

    71
  • Using Command History

    72
    • Changing the Command History Buffer Size

      72
    • Recalling Commands

      72
    • Disabling the Command History Feature

      73
  • Using Editing Features

    73
    • Enabling and Disabling Editing Features

      73
    • Editing Commands through Keystrokes

      74
    • Editing Command Lines that Wrap

      75
  • Searching and Filtering Output of show and more Commands

    76
  • Accessing the CLI

    76
    • Accessing the CLI through a Console Connection or through Telnet

      77
• Assigning the Switch IP Address and Default Gateway

  79
  • Understanding the Boot Process

    79
  • Assigning Switch Information

    80
    • Default Switch Information

      81
    • Understanding DHCP-Based Autoconfiguration

      81
      • DHCP Client Request Process

        82
    • Configuring DHCP-Based Autoconfiguration

      83
      • DHCP Server Configuration Guidelines

        83
      • Configuring the TFTP Server

        84
      • Configuring the DNS

        84
      • Configuring the Relay Device

        85
      • Obtaining Configuration Files

        85
      • Example Configuration

        86
    • Understanding DHCP-based Autoconfiguration and Image Update

      88
      • DHCP Autoconfiguration

        88
      • DHCP Auto-Image Update

        88
      • Limitations and Restrictions

        88
    • Configuring the DHCP Auto Configuration and Image Update Features

      89
      • Configuring DHCP Autoconfiguration (Only Configuration File)

        89
      • Configuring DHCP Auto-Image Update (Configuration File and Image)

        90
      • Configuring the Client

        91
    • Manually Assigning IP Information

      92
  • Configuring Protected Mode

    93
    • Understanding Protected Mode

      93
    • Configuration Guidelines and Restrictions

      94
    • Enabling Protected Mode

      94
  • Checking and Saving the Running Configuration

    95
  • Modifying the Startup Configuration

    96
    • Default Boot Configuration

      96
    • Automatically Downloading a Configuration File

      96
    • Specifying the Filename to Read and Write the System Configuration

      96
    • Booting Manually

      97
    • Booting a Specific Software Image

      98
    • Controlling Environment Variables

      99
  • Scheduling a Reload of the Software Image

    101
    • Configuring a Scheduled Reload

      101
    • Displaying Scheduled Reload Information

      102
• Configuring Cisco IOS CNS Agents

  103
  • Understanding Cisco Configuration Engine Software

    103
    • Configuration Service

      104
    • Event Service

      105
      • NameSpace Mapper

        105
    • What You Should Know About the CNS IDs and Device Hostnames

      105
      • ConfigID

        105
      • DeviceID

        106
      • Hostname and DeviceID

        106
      • Using Hostname, DeviceID, and ConfigID

        106
  • Understanding Cisco IOS Agents

    107
    • Initial Configuration

      107
    • Incremental (Partial) Configuration

      108
    • Synchronized Configuration

      108
  • Configuring Cisco IOS Agents

    108
    • Enabling Automated CNS Configuration

      108
    • Enabling the CNS Event Agent

      109
    • Enabling the Cisco IOS CNS Agent

      111
      • Enabling an Initial Configuration

        111
      • Enabling a Partial Configuration

        115
  • Displaying CNS Configuration

    116
• Managing Switch Stacks

  117
  • Understanding Switch Stacks

    117
    • Switch Stack Membership

      119
    • Stack Master Election and Re-Election

      122
    • Switch Stack Bridge ID and Router MAC Address

      124
    • Stack Member Numbers

      124
    • Stack Member Priority Values

      125
    • Switch Stack Offline Configuration

      125
      • Effects of Adding a Provisioned Switch to a Switch Stack

        126
      • Effects of Replacing a Provisioned Switch in a Switch Stack

        127
      • Effects of Removing a Provisioned Switch from a Switch Stack

        127
    • Hardware Compatibility and SDM Mismatch Mode in Switch Stacks

      127
    • Switch Stack Software Compatibility Recommendations

      128
    • Stack Protocol Version Compatibility

      128
    • Major Version Number Incompatibility Among Switches

      128
    • Minor Version Number Incompatibility Among Switches

      128
      • Understanding Auto-Upgrade and Auto-Advise

        129
      • Auto-Upgrade and Auto-Advise Example Messages

        130
    • Incompatible Software and Stack Member Image Upgrades

      132
    • Switch Stack Configuration Files

      132
    • Additional Considerations for System-Wide Configuration on Switch Stacks

      133
    • Switch Stack Management Connectivity

      133
      • Connectivity to the Switch Stack Through an IP Address

        134
      • Connectivity to the Switch Stack Through an SSH Session

        134
      • Connectivity to the Switch Stack Through Console Ports or Ethernet Management Ports

        134
      • Connectivity to Specific Stack Members

        134
    • Switch Stack Configuration Scenarios

      135
  • Configuring the Switch Stack

    137
    • Default Switch Stack Configuration

      137
    • Configuration Guidelines

      137
    • Enabling Persistent MAC Address

      138
    • Assigning Stack Member Information

      140
      • Assigning a Stack Member Number

        140
      • Setting the Stack Member Priority Value

        141
      • Provisioning a New Member for a Switch Stack

        141
  • Accessing the CLI of a Specific Stack Member

    142
  • Displaying Switch Stack Information

    143
• Administering the Switch

  145
  • Managing the System Time and Date

    145
    • Understanding the System Clock

      145
    • Understanding Network Time Protocol

      146
    • Configuring NTP

      147
      • Default NTP Configuration

        148
      • Configuring NTP Authentication

        148
      • Configuring NTP Associations

        149
      • Configuring NTP Broadcast Service

        150
      • Configuring NTP Access Restrictions

        152
      • Configuring the Source IP Address for NTP Packets

        154
      • Displaying the NTP Configuration

        155
    • Configuring Time and Date Manually

      155
      • Setting the System Clock

        155
      • Displaying the Time and Date Configuration

        156
      • Configuring the Time Zone

        156
      • Configuring Summer Time (Daylight Saving Time)

        157
  • Configuring a System Name and Prompt

    158
    • Default System Name and Prompt Configuration

      159
    • Configuring a System Name

      159
    • Understanding DNS

      159
      • Default DNS Configuration

        160
      • Setting Up DNS

        160
      • Displaying the DNS Configuration

        161
  • Creating a Banner

    161
    • Default Banner Configuration

      161
    • Configuring a Message-of-the-Day Login Banner

      162
    • Configuring a Login Banner

      162
  • Managing the MAC Address Table

    163
    • Building the Address Table

      164
    • MAC Addresses and VLANs

      164
    • MAC Addresses and Switch Stacks

      164
    • Default MAC Address Table Configuration

      165
    • Changing the Address Aging Time

      165
    • Removing Dynamic Address Entries

      166
    • Configuring MAC Address Notification Traps

      166
    • Adding and Removing Static Address Entries

      168
    • Configuring Unicast MAC Address Filtering

      169
    • Displaying Address Table Entries

      170
  • Managing the ARP Table

    170
• Configuring Switch-Based Authentication

  171
  • Preventing Unauthorized Access to Your Switch

    171
  • Protecting Access to Privileged EXEC Commands

    172
    • Default Password and Privilege Level Configuration

      172
    • Setting or Changing a Static Enable Password

      173
    • Protecting Enable and Enable Secret Passwords with Encryption

      173
    • Disabling Password Recovery

      175
    • Setting a Telnet Password for a Terminal Line

      176
    • Configuring Username and Password Pairs

      176
    • Configuring Multiple Privilege Levels

      177
      • Setting the Privilege Level for a Command

        178
      • Changing the Default Privilege Level for Lines

        179
      • Logging into and Exiting a Privilege Level

        179
  • Controlling Switch Access with TACACS+

    180
    • Understanding TACACS+

      180
    • TACACS+ Operation

      182
    • Configuring TACACS+

      182
      • Default TACACS+ Configuration

        183
      • Identifying the TACACS+ Server Host and Setting the Authentication Key

        183
      • Configuring TACACS+ Login Authentication

        184
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services

        186
      • Starting TACACS+ Accounting

        187
    • Displaying the TACACS+ Configuration

      187
  • Controlling Switch Access with RADIUS

    187
    • Understanding RADIUS

      188
    • RADIUS Operation

      189
    • Configuring RADIUS

      189
      • Default RADIUS Configuration

        190
      • Identifying the RADIUS Server Host

        190
      • Configuring RADIUS Login Authentication

        193
      • Defining AAA Server Groups

        195
      • Configuring RADIUS Authorization for User Privileged Access and Network Services

        197
      • Starting RADIUS Accounting

        198
      • Configuring Settings for All RADIUS Servers

        199
      • Configuring the Switch to Use Vendor-Specific RADIUS Attributes

        199
      • Configuring the Switch for Vendor-Proprietary RADIUS Server Communication

        201
    • Displaying the RADIUS Configuration

      201
  • Controlling Switch Access with Kerberos

    202
    • Understanding Kerberos

      202
    • Kerberos Operation

      204
      • Authenticating to a Boundary Switch

        204
      • Obtaining a TGT from a KDC

        205
      • Authenticating to Network Services

        205
    • Configuring Kerberos

      205
  • Configuring the Switch for Local Authentication and Authorization

    206
  • Configuring the Switch for Secure Shell

    207
    • Understanding SSH

      207
      • SSH Servers, Integrated Clients, and Supported Versions

        208
      • Limitations

        208
    • Configuring SSH

      209
      • Configuration Guidelines

        209
      • Setting Up the Switch to Run SSH

        209
      • Configuring the SSH Server

        210
    • Displaying the SSH Configuration and Status

      211
  • Configuring the Switch for Secure Socket Layer HTTP

    211
    • Understanding Secure HTTP Servers and Clients

      212
      • Certificate Authority Trustpoints

        212
      • CipherSuites

        213
    • Configuring Secure HTTP Servers and Clients

      214
      • Default SSL Configuration

        214
      • SSL Configuration Guidelines

        214
      • Configuring a CA Trustpoint

        215
      • Configuring the Secure HTTP Server

        215
      • Configuring the Secure HTTP Client

        217
    • Displaying Secure HTTP Server and Client Status

      218
  • Configuring the Switch for Secure Copy Protocol

    218
    • Information About Secure Copy

      218
• Configuring SDM Templates

  219
  • Understanding the SDM Templates

    219
    • Dual IPv4 and IPv6 SDM Templates

      220
    • SDM Templates and Switch Stacks

      221
  • Configuring the Switch SDM Template

    222
    • Default SDM Template

      222
    • SDM Template Configuration Guidelines

      222
    • Setting the SDM Template

      223
  • Displaying the SDM Templates

    224
• Configuring IEEE 802.1x Port-Based Authentication

  227
  • Understanding IEEE 802.1x Port-Based Authentication

    227
    • Device Roles

      228
    • Authentication Process

      229
    • Authentication Initiation and Message Exchange

      231
    • Ports in Authorized and Unauthorized States

      233
    • IEEE 802.1x Authentication and Switch Stacks

      234
    • IEEE 802.1x Host Mode

      234
    • IEEE 802.1x Accounting

      235
    • IEEE 802.1x Accounting Attribute-Value Pairs

      235
    • Using IEEE 802.1x Authentication with VLAN Assignment

      236
    • Using IEEE 802.1x Authentication with Per-User ACLs

      238
    • Using IEEE 802.1x Authentication with Guest VLAN

      239
    • Using IEEE 802.1x Authentication with Restricted VLAN

      240
    • Using IEEE 802.1x Authentication with Inaccessible Authentication Bypass

      241
    • Using IEEE 802.1x Authentication with Voice VLAN Ports

      242
    • Using IEEE 802.1x Authentication with Port Security

      243
    • Using IEEE 802.1x Authentication with Wake-on-LAN

      244
    • Using IEEE 802.1x Authentication with MAC Authentication Bypass

      244
    • Network Admission Control Layer 2 IEEE 802.1x Validation

      246
    • Using Multidomain Authentication

      246
    • Using Web Authentication

      247
      • Web Authentication with Automatic MAC Check

        248
  • Configuring IEEE 802.1x Authentication

    248
    • Default IEEE 802.1x Authentication Configuration

      249
    • IEEE 802.1x Authentication Configuration Guidelines

      250
      • IEEE 802.1x Authentication

        250
      • VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass

        251
      • MAC Authentication Bypass

        252
    • Configuring IEEE 802.1x Authentication

      252
    • Configuring the Switch-to-RADIUS-Server Communication

      254
    • Configuring the Host Mode

      255
    • Configuring Periodic Re-Authentication

      256
    • Manually Re-Authenticating a Client Connected to a Port

      256
    • Changing the Quiet Period

      257
    • Changing the Switch-to-Client Retransmission Time

      257
    • Setting the Switch-to-Client Frame-Retransmission Number

      258
    • Setting the Re-Authentication Number

      258
    • Configuring IEEE 802.1x Accounting

      259
    • Configuring a Guest VLAN

      260
    • Configuring a Restricted VLAN

      261
    • Configuring the Inaccessible Authentication Bypass Feature

      263
    • Configuring IEEE 802.1x Authentication with WoL

      265
    • Configuring MAC Authentication Bypass

      266
    • Configuring NAC Layer 2 IEEE 802.1x Validation

      267
    • Configuring Web Authentication

      268
    • Disabling IEEE 802.1x Authentication on the Port

      270
    • Resetting the IEEE 802.1x Authentication Configuration to the Default Values

      271
  • Displaying IEEE 802.1x Statistics and Status

    271
• Configuring Interface Characteristics

  273
  • Understanding Interface Types

    273
    • Port-Based VLANs

      274
    • Switch Ports

      274
      • Access Ports

        275
      • Trunk Ports

        275
      • Tunnel Ports

        276
    • Routed Ports

      276
    • Switch Virtual Interfaces

      277
    • EtherChannel Port Groups

      277
    • 10-Gigabit Ethernet Interfaces

      278
    • Connecting Interfaces

      278
  • Using Interface Configuration Mode

    279
    • Procedures for Configuring Interfaces

      280
    • Configuring a Range of Interfaces

      281
    • Configuring and Using Interface Range Macros

      282
  • Using the Internal Ethernet Management Port

    284
    • Understanding the Internal Ethernet Management Port

      284
    • Supported Features on the Ethernet Management Port

      285
    • Layer 3 Routing Configuration Guidelines

      286
    • Monitoring the Ethernet Management Port

      286
  • Configuring Ethernet Interfaces

    286
    • Default Ethernet Interface Configuration

      287
    • Configuring Interface Speed and Duplex Mode

      288
      • Speed and Duplex Configuration Guidelines

        288
      • Setting the Interface Speed and Duplex Parameters

        289
    • Configuring IEEE 802.3x Flow Control

      290
    • Configuring Auto-MDIX on an Interface

      291
    • Adding a Description for an Interface

      292
  • Configuring Layer 3 Interfaces

    292
  • Configuring the System MTU

    294
  • Monitoring and Maintaining the Interfaces

    296
    • Monitoring Interface Status

      296
    • Clearing and Resetting Interfaces and Counters

      297
    • Shutting Down and Restarting the Interface

      297
• Configuring Smartports Macros

  299
  • Understanding Smartports Macros

    299
  • Configuring Smartports Macros

    300
    • Default Smartports Macro Configuration

      300
    • Smartports Macro Configuration Guidelines

      301
    • Creating Smartports Macros

      302
    • Applying Smartports Macros

      303
    • Applying Cisco-Default Smartports Macros

      304
  • Displaying Smartports Macros

    306
• Configuring VLANs

  307
  • Understanding VLANs

    307
    • Supported VLANs

      308
    • VLAN Port Membership Modes

      309
  • Configuring Normal-Range VLANs

    310
    • Token Ring VLANs

      312
    • Normal-Range VLAN Configuration Guidelines

      312
    • VLAN Configuration Mode Options

      313
      • VLAN Configuration in config-vlan Mode

        313
      • VLAN Configuration in VLAN Database Configuration Mode

        313
    • Saving VLAN Configuration

      313
    • Default Ethernet VLAN Configuration

      314
    • Creating or Modifying an Ethernet VLAN

      315
    • Deleting a VLAN

      316
    • Assigning Static-Access Ports to a VLAN

      317
  • Configuring Extended-Range VLANs

    318
    • Default VLAN Configuration

      318
    • Extended-Range VLAN Configuration Guidelines

      319
    • Creating an Extended-Range VLAN

      320
    • Creating an Extended-Range VLAN with an Internal VLAN ID

      321
  • Displaying VLANs

    322
  • Configuring VLAN Trunks

    322
    • Trunking Overview

      322
      • Encapsulation Types

        325
      • IEEE 802.1Q Configuration Considerations

        325
    • Default Layer 2 Ethernet Interface VLAN Configuration

      326
    • Configuring an Ethernet Interface as a Trunk Port

      326
      • Interaction with Other Features

        326
      • Configuring a Trunk Port

        327
      • Defining the Allowed VLANs on a Trunk

        328
      • Changing the Pruning-Eligible List

        329
      • Configuring the Native VLAN for Untagged Traffic

        330
    • Configuring Trunk Ports for Load Sharing

      330
      • Load Sharing Using STP Port Priorities

        331
      • Load Sharing Using STP Path Cost

        333
  • Configuring VMPS

    334
    • Understanding VMPS

      334
      • Dynamic-Access Port VLAN Membership

        335
    • Default VMPS Client Configuration

      336
    • VMPS Configuration Guidelines

      336
    • Configuring the VMPS Client

      336
      • Entering the IP Address of the VMPS

        337
      • Configuring Dynamic-Access Ports on VMPS Clients

        337
      • Reconfirming VLAN Memberships

        338
      • Changing the Reconfirmation Interval

        338
      • Changing the Retry Count

        338
    • Monitoring the VMPS

      339
    • Troubleshooting Dynamic-Access Port VLAN Membership

      339
    • VMPS Configuration Example

      340
• Configuring VTP

  341
  • Understanding VTP

    341
    • The VTP Domain

      342
    • VTP Modes

      343
    • VTP Advertisements

      343
    • VTP Version 2

      344
    • VTP Pruning

      344
    • VTP and Switch Stacks

      346
  • Configuring VTP

    346
    • Default VTP Configuration

      347
    • VTP Configuration Options

      347
      • VTP Configuration in Global Configuration Mode

        347
      • VTP Configuration in VLAN Database Configuration Mode

        348
    • VTP Configuration Guidelines

      348
      • Domain Names

        348
      • Passwords

        348
      • VTP Version

        349
      • Configuration Requirements

        349
    • Configuring a VTP Server

      349
    • Configuring a VTP Client

      351
    • Disabling VTP (VTP Transparent Mode)

      352
    • Enabling VTP Version 2

      353
    • Enabling VTP Pruning

      354
    • Adding a VTP Client Switch to a VTP Domain

      354
  • Monitoring VTP

    356
• Configuring Voice VLAN

  357
  • Understanding Voice VLAN

    357
    • Cisco IP Phone Voice Traffic

      358
    • Cisco IP Phone Data Traffic

      358
  • Configuring Voice VLAN

    359
    • Default Voice VLAN Configuration

      359
    • Voice VLAN Configuration Guidelines

      359
    • Configuring a Port Connected to a Cisco 7960 IP Phone

      360
      • Configuring Cisco IP Phone Voice Traffic

        361
      • Configuring the Priority of Incoming Data Frames

        362
  • Displaying Voice VLAN

    363
• Configuring Private VLANs

  365
  • Understanding Private VLANs

    365
    • IP Addressing Scheme with Private VLANs

      367
    • Private VLANs across Multiple Switches

      368
    • Private-VLAN Interaction with Other Features

      368
      • Private VLANs and Unicast, Broadcast, and Multicast Traffic

        369
      • Private VLANs and SVIs

        369
      • Private VLANs and Switch Stacks

        369
  • Configuring Private VLANs

    370
    • Tasks for Configuring Private VLANs

      370
    • Default Private-VLAN Configuration

      370
    • Private-VLAN Configuration Guidelines

      371
      • Secondary and Primary VLAN Configuration

        371
      • Private-VLAN Port Configuration

        372
      • Limitations with Other Features

        373
    • Configuring and Associating VLANs in a Private VLAN

      374
    • Configuring a Layer 2 Interface as a Private-VLAN Host Port

      375
    • Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port

      377
    • Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface

      378
  • Monitoring Private VLANs

    379
• Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling

  381
  • Understanding IEEE 802.1Q Tunneling

    381
  • Configuring IEEE 802.1Q Tunneling

    384
    • Default IEEE 802.1Q Tunneling Configuration

      384
    • IEEE 802.1Q Tunneling Configuration Guidelines

      384
      • Native VLANs

        384
      • System MTU

        385
    • IEEE 802.1Q Tunneling and Other Features

      386
    • Configuring an IEEE 802.1Q Tunneling Port

      386
  • Understanding Layer 2 Protocol Tunneling

    387
  • Configuring Layer 2 Protocol Tunneling

    390
    • Default Layer 2 Protocol Tunneling Configuration

      391
    • Layer 2 Protocol Tunneling Configuration Guidelines

      392
    • Configuring Layer 2 Protocol Tunneling

      393
    • Configuring Layer 2 Tunneling for EtherChannels

      394
      • Configuring the SP Edge Switch

        394
      • Configuring the Customer Switch

        396
  • Monitoring and Maintaining Tunneling Status

    398
• Configuring STP

  399
  • Understanding Spanning-Tree Features

    399
    • STP Overview

      400
    • Spanning-Tree Topology and BPDUs

      401
    • Bridge ID, Switch Priority, and Extended System ID

      402
    • Spanning-Tree Interface States

      403
      • Blocking State

        404
      • Listening State

        405
      • Learning State

        405
      • Forwarding State

        405
      • Disabled State

        405
    • How a Switch or Port Becomes the Root Switch or Root Port

      406
    • Spanning Tree and Redundant Connectivity

      406
    • Spanning-Tree Address Management

      407
    • Accelerated Aging to Retain Connectivity

      407
    • Spanning-Tree Modes and Protocols

      408
    • Supported Spanning-Tree Instances

      408
    • Spanning-Tree Interoperability and Backward Compatibility

      409
    • STP and IEEE 802.1Q Trunks

      409
    • VLAN-Bridge Spanning Tree

      409
    • Spanning Tree and Switch Stacks

      410
  • Configuring Spanning-Tree Features

    410
    • Default Spanning-Tree Configuration

      411
    • Spanning-Tree Configuration Guidelines

      411
    • Changing the Spanning-Tree Mode.

      413
    • Disabling Spanning Tree

      414
    • Configuring the Root Switch

      414
    • Configuring a Secondary Root Switch

      416
    • Configuring Port Priority

      416
    • Configuring Path Cost

      418
    • Configuring the Switch Priority of a VLAN

      419
    • Configuring Spanning-Tree Timers

      420
      • Configuring the Hello Time

        420
      • Configuring the Forwarding-Delay Time for a VLAN

        421
      • Configuring the Maximum-Aging Time for a VLAN

        421
      • Configuring the Transmit Hold-Count

        422
  • Displaying the Spanning-Tree Status

    422
• Configuring MSTP

  423
  • Understanding MSTP

    424
    • Multiple Spanning-Tree Regions

      424
    • IST, CIST, and CST

      424
      • Operations Within an MST Region

        425
      • Operations Between MST Regions

        425
      • IEEE 802.1s Terminology

        427
    • Hop Count

      427
    • Boundary Ports

      428
    • IEEE 802.1s Implementation

      428
      • Port Role Naming Change

        428
      • Interoperation Between Legacy and Standard Switches

        429
      • Detecting Unidirectional Link Failure

        429
    • MSTP and Switch Stacks

      430
    • Interoperability with IEEE 802.1D STP

      430
  • Understanding RSTP

    431
    • Port Roles and the Active Topology

      431
    • Rapid Convergence

      432
    • Synchronization of Port Roles

      433
    • Bridge Protocol Data Unit Format and Processing

      434
      • Processing Superior BPDU Information

        435
      • Processing Inferior BPDU Information

        435
    • Topology Changes

      435
  • Configuring MSTP Features

    436
    • Default MSTP Configuration

      436
    • MSTP Configuration Guidelines

      437
    • Specifying the MST Region Configuration and Enabling MSTP

      438
    • Configuring the Root Switch

      439
    • Configuring a Secondary Root Switch

      441
    • Configuring Port Priority

      441
    • Configuring Path Cost

      443
    • Configuring the Switch Priority

      443
    • Configuring the Hello Time

      444
    • Configuring the Forwarding-Delay Time

      445
    • Configuring the Maximum-Aging Time

      445
    • Configuring the Maximum-Hop Count

      446
    • Specifying the Link Type to Ensure Rapid Transitions

      446
    • Designating the Neighbor Type

      447
    • Restarting the Protocol Migration Process

      447
  • Displaying the MST Configuration and Status

    448
• Configuring Optional Spanning-Tree Features

  449
  • Understanding Optional Spanning-Tree Features

    449
    • Understanding Port Fast

      450
    • Understanding BPDU Guard

      450
    • Understanding BPDU Filtering

      451
    • Understanding UplinkFast

      451
    • Understanding Cross-Stack UplinkFast

      453
      • How CSUF Works

        454
      • Events that Cause Fast Convergence

        455
    • Understanding BackboneFast

      455
    • Understanding EtherChannel Guard

      458
    • Understanding Root Guard

      458
    • Understanding Loop Guard

      459
  • Configuring Optional Spanning-Tree Features

    459
    • Default Optional Spanning-Tree Configuration

      460
    • Optional Spanning-Tree Configuration Guidelines

      460
    • Enabling Port Fast

      460
    • Enabling BPDU Guard

      461
    • Enabling BPDU Filtering

      462
    • Enabling UplinkFast for Use with Redundant Links

      463
    • Enabling Cross-Stack UplinkFast

      464
    • Enabling BackboneFast

      464
    • Enabling EtherChannel Guard

      465
    • Enabling Root Guard

      466
    • Enabling Loop Guard

      466
  • Displaying the Spanning-Tree Status

    467
• Configuring Flex Links and the MAC Address-Table Move Update Feature

  469
  • Understanding Flex Links and the MAC Address-Table Move Update

    469
    • Flex Links

      469
    • VLAN Flex Link Load Balancing and Support

      470
    • MAC Address-Table Move Update

      471
  • Configuring Flex Links and MAC Address-Table Move Update

    472
    • Configuration Guidelines

      473
    • Default Configuration

      473
    • Configuring Flex Links

      474
    • Configuring VLAN Load Balancing on Flex Links

      476
    • Configuring the MAC Address-Table Move Update Feature

      477
  • Monitoring Flex Links and the MAC Address-Table Move Update Information

    479
• Configuring DHCP Features and IP Source Guard

  481
  • Understanding DHCP Features

    481
    • DHCP Server

      482
    • DHCP Relay Agent

      482
    • DHCP Snooping

      482
    • Option-82 Data Insertion

      483
    • Cisco IOS DHCP Server Database

      486
    • DHCP Snooping Binding Database

      486
    • DHCP Snooping and Switch Stacks

      488
  • Configuring DHCP Features

    488
    • Default DHCP Configuration

      488
    • DHCP Snooping Configuration Guidelines

      489
    • Configuring the DHCP Server

      490
    • DHCP Server and Switch Stacks

      490
    • Configuring the DHCP Relay Agent

      491
    • Specifying the Packet Forwarding Address

      491
    • Enabling DHCP Snooping and Option 82

      492
    • Enabling DHCP Snooping on Private VLANs

      494
    • Enabling the Cisco IOS DHCP Server Database

      494
    • Enabling the DHCP Snooping Binding Database Agent

      494
  • Displaying DHCP Snooping Information

    495
  • Understanding IP Source Guard

    496
    • Source IP Address Filtering

      496
    • Source IP and MAC Address Filtering

      497
  • Configuring IP Source Guard

    497
    • Default IP Source Guard Configuration

      497
    • IP Source Guard Configuration Guidelines

      497
    • Enabling IP Source Guard

      498
  • Displaying IP Source Guard Information

    499
• Configuring Dynamic ARP Inspection

  501
  • Understanding Dynamic ARP Inspection

    501
    • Interface Trust States and Network Security

      503
    • Rate Limiting of ARP Packets

      504
    • Relative Priority of ARP ACLs and DHCP Snooping Entries

      504
    • Logging of Dropped Packets

      505
  • Configuring Dynamic ARP Inspection

    505
    • Default Dynamic ARP Inspection Configuration

      505
    • Dynamic ARP Inspection Configuration Guidelines

      506
    • Configuring Dynamic ARP Inspection in DHCP Environments

      507
    • Configuring ARP ACLs for Non-DHCP Environments

      508
    • Limiting the Rate of Incoming ARP Packets

      510
    • Performing Validation Checks

      511
    • Configuring the Log Buffer

      512
  • Displaying Dynamic ARP Inspection Information

    514
• Configuring IGMP Snooping and MVR

  517
  • Understanding IGMP Snooping

    518
    • IGMP Versions

      519
    • Joining a Multicast Group

      519
    • Leaving a Multicast Group

      521
    • Immediate Leave

      522
    • IGMP Configurable-Leave Timer

      522
    • IGMP Report Suppression

      522
    • IGMP Snooping and Switch Stacks

      523
  • Configuring IGMP Snooping

    523
    • Default IGMP Snooping Configuration

      523
    • Enabling or Disabling IGMP Snooping

      524
    • Setting the Snooping Method

      525
    • Configuring a Multicast Router Port

      526
    • Configuring a Blade Server Statically to Join a Group

      526
    • Enabling IGMP Immediate Leave

      527
    • Configuring the IGMP Leave Timer

      528
    • Configuring TCN-Related Commands

      528
      • Controlling the Multicast Flooding Time After a TCN Event

        529
      • Recovering from Flood Mode

        529
      • Disabling Multicast Flooding During a TCN Event

        530
    • Configuring the IGMP Snooping Querier

      530
    • Disabling IGMP Report Suppression

      532
  • Displaying IGMP Snooping Information

    532
  • Understanding Multicast VLAN Registration

    534
    • Using MVR in a Multicast Television Application

      534
  • Configuring MVR

    536
    • Default MVR Configuration

      536
    • MVR Configuration Guidelines and Limitations

      536
    • Configuring MVR Global Parameters

      537
    • Configuring MVR Interfaces

      538
  • Displaying MVR Information

    540
  • Configuring IGMP Filtering and Throttling

    540
    • Default IGMP Filtering and Throttling Configuration

      541
    • Configuring IGMP Profiles

      541
    • Applying IGMP Profiles

      543
    • Setting the Maximum Number of IGMP Groups

      543
    • Configuring the IGMP Throttling Action

      544
  • Displaying IGMP Filtering and Throttling Configuration

    545
• Configuring IPv6 MLD Snooping

  547
  • Understanding MLD Snooping

    547
    • MLD Messages

      548
    • MLD Queries

      549
    • Multicast Client Aging Robustness

      549
    • Multicast Router Discovery

      550
    • MLD Reports

      550
    • MLD Done Messages and Immediate-Leave

      550
    • Topology Change Notification Processing

      551
    • MLD Snooping in Switch Stacks

      551
  • Configuring IPv6 MLD Snooping

    551
    • Default MLD Snooping Configuration

      552
    • MLD Snooping Configuration Guidelines

      552
    • Enabling or Disabling MLD Snooping

      553
    • Configuring a Static Multicast Group

      554
    • Configuring a Multicast Router Port

      555
    • Enabling MLD Immediate Leave

      555
    • Configuring MLD Snooping Queries

      556
    • Disabling MLD Listener Message Suppression

      557
  • Displaying MLD Snooping Information

    558
• Configuring Port-Based Traffic Control

  559
  • Configuring Storm Control

    559
    • Understanding Storm Control

      559
    • Default Storm Control Configuration

      561
    • Configuring Storm Control and Threshold Levels

      561
  • Configuring Protected Ports

    563
    • Default Protected Port Configuration

      563
    • Protected Port Configuration Guidelines

      564
    • Configuring a Protected Port

      564
  • Configuring Port Blocking

    564
    • Default Port Blocking Configuration

      565
    • Blocking Flooded Traffic on an Interface

      565
  • Configuring Port Security

    565
    • Understanding Port Security

      566
      • Secure MAC Addresses

        566
      • Security Violations

        567
    • Default Port Security Configuration

      568
    • Port Security Configuration Guidelines

      568
    • Enabling and Configuring Port Security

      570
    • Enabling and Configuring Port Security Aging

      574
    • Port Security and Switch Stacks

      575
    • Port Security and Private VLANs

      575
  • Displaying Port-Based Traffic Control Settings

    576
• Configuring CDP

  577
  • Understanding CDP

    577
    • CDP and Switch Stacks

      578
  • Configuring CDP

    578
    • Default CDP Configuration

      578
    • Configuring the CDP Characteristics

      578
    • Disabling and Enabling CDP

      579
    • Disabling and Enabling CDP on an Interface

      580
  • Monitoring and Maintaining CDP

    581
• Configuring LLDP and LLDP-MED

  583
  • Understanding LLDP and LLDP-MED

    583
    • Understanding LLDP

      583
    • Understanding LLDP-MED

      584
  • Configuring LLDP and LLDP-MED

    585
    • Default LLDP Configuration

      585
    • Configuring LLDP Characteristics

      586
    • Disabling and Enabling LLDP Globally

      586
    • Disabling and Enabling LLDP on an Interface

      587
    • Configuring LLDP-MED TLVs

      588
  • Monitoring and Maintaining LLDP and LLDP-MED

    589
• Configuring UDLD

  591
  • Understanding UDLD

    591
    • Modes of Operation

      591
    • Methods to Detect Unidirectional Links

      592
  • Configuring UDLD

    593
    • Default UDLD Configuration

      594
    • Configuration Guidelines

      594
    • Enabling UDLD Globally

      595
    • Enabling UDLD on an Interface

      596
    • Resetting an Interface Disabled by UDLD

      596
  • Displaying UDLD Status

    597
• Configuring SPAN and RSPAN

  599
  • Understanding SPAN and RSPAN

    599
    • Local SPAN

      600
    • Remote SPAN

      601
    • SPAN and RSPAN Concepts and Terminology

      602
      • SPAN Sessions

        602
      • Monitored Traffic

        603
      • Source Ports

        604
      • Source VLANs

        605
      • VLAN Filtering

        605
      • Destination Port

        606
      • RSPAN VLAN

        607
    • SPAN and RSPAN Interaction with Other Features

      607
    • SPAN and RSPAN and Switch Stacks

      608
  • Configuring SPAN and RSPAN

    608
    • Default SPAN and RSPAN Configuration

      609
    • Configuring Local SPAN

      609
      • SPAN Configuration Guidelines

        609
      • Creating a Local SPAN Session

        610
      • Creating a Local SPAN Session and Configuring Incoming Traffic

        612
      • Specifying VLANs to Filter

        613
    • Configuring RSPAN

      614
      • RSPAN Configuration Guidelines

        614
      • Configuring a VLAN as an RSPAN VLAN

        615
      • Creating an RSPAN Source Session

        616
      • Specifying VLANs to Filter

        617
      • Creating an RSPAN Destination Session

        618
      • Creating an RSPAN Destination Session and Configuring Incoming Traffic

        619
  • Displaying SPAN and RSPAN Status

    621
• Configuring RMON

  623
  • Understanding RMON

    623
  • Configuring RMON

    624
    • Default RMON Configuration

      625
    • Configuring RMON Alarms and Events

      625
    • Collecting Group History Statistics on an Interface

      627
    • Collecting Group Ethernet Statistics on an Interface

      627
  • Displaying RMON Status

    628
• Configuring System Message Logging

  629
  • Understanding System Message Logging

    629
  • Configuring System Message Logging

    630
    • System Log Message Format

      630
    • Default System Message Logging Configuration

      632
    • Disabling Message Logging

      632
    • Setting the Message Display Destination Device

      633
    • Synchronizing Log Messages

      634
    • Enabling and Disabling Time Stamps on Log Messages

      636
    • Enabling and Disabling Sequence Numbers in Log Messages

      636
    • Defining the Message Severity Level

      637
    • Limiting Syslog Messages Sent to the History Table and to SNMP

      638
    • Enabling the Configuration-Change Logger

      639
    • Configuring UNIX Syslog Servers

      640
      • Logging Messages to a UNIX Syslog Daemon

        640
      • Configuring the UNIX System Logging Facility

        641
  • Displaying the Logging Configuration

    642
• Configuring SNMP

  643
  • Understanding SNMP

    643
    • SNMP Versions

      644
    • SNMP Manager Functions

      645
    • SNMP Agent Functions

      646
    • SNMP Community Strings

      646
    • Using SNMP to Access MIB Variables

      646
    • SNMP Notifications

      647
    • SNMP ifIndex MIB Object Values

      647
  • Configuring SNMP

    648
    • Default SNMP Configuration

      648
    • SNMP Configuration Guidelines

      648
    • Disabling the SNMP Agent

      649
    • Configuring Community Strings

      650
    • Configuring SNMP Groups and Users

      651
    • Configuring SNMP Notifications

      653
    • Setting the Agent Contact and Location Information

      657
    • Limiting TFTP Servers Used Through SNMP

      657
    • SNMP Examples

      658
  • Displaying SNMP Status

    659
• Configuring Network Security with ACLs

  661
  • Understanding ACLs

    661
    • Supported ACLs

      662
      • Port ACLs

        663
      • Router ACLs

        664
      • VLAN Maps

        665
    • Handling Fragmented and Unfragmented Traffic

      665
    • ACLs and Switch Stacks

      666
  • Configuring IPv4 ACLs

    667
    • Creating Standard and Extended IPv4 ACLs

      667
      • Access List Numbers

        668
      • ACL Logging

        669
      • Creating a Numbered Standard ACL

        670
      • Creating a Numbered Extended ACL

        671
      • Resequencing ACEs in an ACL

        675
      • Creating Named Standard and Extended ACLs

        675
      • Using Time Ranges with ACLs

        677
      • Including Comments in ACLs

        679
    • Applying an IPv4 ACL to a Terminal Line

      679
    • Applying an IPv4 ACL to an Interface

      680
    • Hardware and Software Treatment of IP ACLs

      682
    • IPv4 ACL Configuration Examples

      682
      • Numbered ACLs

        684
      • Extended ACLs

        684
      • Named ACLs

        685
      • Time Range Applied to an IP ACL

        685
      • Commented IP ACL Entries

        685
      • ACL Logging

        686
  • Creating Named MAC Extended ACLs

    687
    • Applying a MAC ACL to a Layer 2 Interface

      688
  • Configuring VLAN Maps

    689
    • VLAN Map Configuration Guidelines

      690
    • Creating a VLAN Map

      691
      • Examples of ACLs and VLAN Maps

        692
    • Applying a VLAN Map to a VLAN

      694
    • Using VLAN Maps in Your Network

      694
      • Denying Access to a Server on Another VLAN

        694
  • Using VLAN Maps with Router ACLs

    695
    • VLAN Maps and Router ACL Configuration Guidelines

      695
    • Examples of Router ACLs and VLAN Maps Applied to VLANs

      696
      • ACLs and Switched Packets

        696
      • ACLs and Bridged Packets

        697
      • ACLs and Routed Packets

        698
      • ACLs and Multicast Packets

        698
  • Displaying IPv4 ACL Configuration

    699
• Configuring IPv6 ACLs

  701
  • Supported IPv6 ACLs

    702
  • Understanding IPv6 ACLs

    702
    • Supported ACL Features

      702
    • IPv6 ACL Limitations

      703
    • IPv6 ACLs and Switch Stacks

      704
  • Configuring IPv6 ACLs

    704
    • Default IPv6 ACL Configuration

      705
    • Interaction with Other Features and Switches

      705
    • Creating IPv6 ACLs

      705
    • Applying an IPv6 ACL to an Interface

      708
  • Displaying IPv6 ACLs

    709
• Configuring QoS

  711
  • Understanding QoS

    712
    • Basic QoS Model

      713
    • Classification

      715
      • Classification Based on QoS ACLs

        717
      • Classification Based on Class Maps and Policy Maps

        717
    • Policing and Marking

      718
      • Policing on Physical Ports

        719
      • Policing on SVIs

        720
    • Mapping Tables

      722
    • Queueing and Scheduling Overview

      723
      • Weighted Tail Drop

        723
      • SRR Shaping and Sharing

        724
      • Queueing and Scheduling on Ingress Queues

        725
      • Queueing and Scheduling on Egress Queues

        727
    • Packet Modification

      729
  • Configuring Auto-QoS

    730
    • Generated Auto-QoS Configuration

      731
    • Effects of Auto-QoS on the Configuration

      735
    • Auto-QoS Configuration Guidelines

      735
    • Enabling Auto-QoS for VoIP

      736
    • Auto-QoS Configuration Example

      737
  • Displaying Auto-QoS Information

    739
  • Configuring Standard QoS

    739
    • Default Standard QoS Configuration

      740
      • Default Ingress Queue Configuration

        740
      • Default Egress Queue Configuration

        741
      • Default Mapping Table Configuration

        742
    • Standard QoS Configuration Guidelines

      742
      • QoS ACL Guidelines

        742
      • Applying QoS on Interfaces

        742
      • Policing Guidelines

        743
      • General QoS Guidelines

        743
    • Enabling QoS Globally

      744
    • Enabling VLAN-Based QoS on Physical Ports

      744
    • Configuring Classification Using Port Trust States

      745
      • Configuring the Trust State on Ports within the QoS Domain

        745
      • Configuring the CoS Value for an Interface

        747
      • Configuring a Trusted Boundary to Ensure Port Security

        748
      • Enabling DSCP Transparency Mode

        749
      • Configuring the DSCP Trust State on a Port Bordering Another QoS Domain

        750
    • Configuring a QoS Policy

      752
      • Classifying Traffic by Using ACLs

        753
      • Classifying Traffic by Using Class Maps

        756
      • Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps

        758
      • Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps

        762
      • Classifying, Policing, and Marking Traffic by Using Aggregate Policers

        768
    • Configuring DSCP Maps

      770
      • Configuring the CoS-to-DSCP Map

        770
      • Configuring the IP-Precedence-to-DSCP Map

        771
      • Configuring the Policed-DSCP Map

        772
      • Configuring the DSCP-to-CoS Map

        773
      • Configuring the DSCP-to-DSCP-Mutation Map

        774
    • Configuring Ingress Queue Characteristics

      776
      • Mapping DSCP or CoS Values to an Ingress Queue and Setting WTD Thresholds

        777
      • Allocating Buffer Space Between the Ingress Queues

        778
      • Allocating Bandwidth Between the Ingress Queues

        778
      • Configuring the Ingress Priority Queue

        779
    • Configuring Egress Queue Characteristics

      780
      • Configuration Guidelines

        781
      • Allocating Buffer Space to and Setting WTD Thresholds for an Egress Queue-Set

        781
      • Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID

        783
      • Configuring SRR Shaped Weights on Egress Queues

        785
      • Configuring SRR Shared Weights on Egress Queues

        786
      • Configuring the Egress Expedite Queue

        786
      • Limiting the Bandwidth on an Egress Interface

        787
  • Displaying Standard QoS Information

    788
• Configuring EtherChannels and Link-State Tracking

  789
  • Understanding EtherChannels

    789
    • EtherChannel Overview

      790
    • Port-Channel Interfaces

      792
    • Port Aggregation Protocol

      793
      • PAgP Modes

        793
      • PAgP Interaction with Other Features

        794
    • Link Aggregation Control Protocol

      794
      • LACP Modes

        794
      • LACP Interaction with Other Features

        795
    • EtherChannel On Mode

      795
    • Load-Balancing and Forwarding Methods

      795
    • EtherChannel and Switch Stacks

      797
  • Configuring EtherChannels

    798
    • Default EtherChannel Configuration

      798
    • EtherChannel Configuration Guidelines

      799
    • Configuring Layer 2 EtherChannels

      800
    • Configuring Layer 3 EtherChannels

      802
      • Creating Port-Channel Logical Interfaces

        802
      • Configuring the Physical Interfaces

        803
    • Configuring EtherChannel Load-Balancing

      805
    • Configuring the PAgP Learn Method and Priority

      806
    • Configuring LACP Hot-Standby Ports

      807
      • Configuring the LACP System Priority

        808
      • Configuring the LACP Port Priority

        809
  • Displaying EtherChannel, PAgP, and LACP Status

    810
  • Understanding Link-State Tracking

    810
  • Configuring Link-State Tracking

    812
    • Default Link-State Tracking Configuration

      812
    • Link-State Tracking Configuration Guidelines

      812
    • Configuring Link-State Tracking

      813
    • Displaying Link-State Tracking Status

      814
• Configuring IP Unicast Routing

  815
  • Supported IPv4 Features

    816
  • Understanding IP Routing

    817
    • Types of Routing

      817
    • IP Routing and Switch Stacks

      818
  • Steps for Configuring Routing

    820
  • Configuring IP Addressing

    820
    • Default Addressing Configuration

      821
    • Assigning IP Addresses to Network Interfaces

      822
      • Use of Subnet Zero

        822
      • Classless Routing

        823
    • Configuring Address Resolution Methods

      824
      • Define a Static ARP Cache

        825
      • Set ARP Encapsulation

        826
      • Enable Proxy ARP

        827
    • Routing Assistance When IP Routing is Disabled

      827
      • Proxy ARP

        827
      • Default Gateway

        827
      • ICMP Router Discovery Protocol (IRDP)

        828
    • Configuring Broadcast Packet Handling

      829
      • Enabling Directed Broadcast-to-Physical Broadcast Translation

        830
      • Forwarding UDP Broadcast Packets and Protocols

        831
      • Establishing an IP Broadcast Address

        831
      • Flooding IP Broadcasts

        832
    • Monitoring and Maintaining IP Addressing

      833
  • Enabling IP Unicast Routing

    834
  • Configuring RIP

    835
    • Default RIP Configuration

      836
    • Configuring Basic RIP Parameters

      836
    • Configuring RIP Authentication

      838
    • Configuring Summary Addresses and Split Horizon

      838
    • Configuring Split Horizon

      840
  • Configuring Stub Routing

    840
    • Understanding PIM Stub Routing

      840
    • Configuring PIM Stub Routing

      841
      • PIM Stub Routing Configuration Guidelines

        842
      • Enabling PIM Stub Routing

        842
    • Understanding EIGRP Stub Routing

      843
    • Configuring EIGRP Stub Routing

      844
  • Configuring OSPF

    845
    • Default OSPF Configuration

      846
      • OSPF Nonstop Forwarding

        847
    • Configuring Basic OSPF Parameters

      849
    • Configuring OSPF Interfaces

      849
    • Configuring OSPF Area Parameters

      850
    • Configuring Other OSPF Parameters

      852
    • Changing LSA Group Pacing

      853
    • Configuring a Loopback Interface

      854
    • Monitoring OSPF

      854
  • Configuring EIGRP

    855
    • Default EIGRP Configuration

      857
      • EIGRP Nonstop Forwarding

        858
    • Configuring Basic EIGRP Parameters

      859
    • Configuring EIGRP Interfaces

      860
    • Configuring EIGRP Route Authentication

      861
    • Monitoring and Maintaining EIGRP

      862
  • Configuring BGP

    863
    • Default BGP Configuration

      865
      • Nonstop Forwarding Awareness

        867
    • Enabling BGP Routing

      867
    • Managing Routing Policy Changes

      870
    • Configuring BGP Decision Attributes

      871
    • Configuring BGP Filtering with Route Maps

      873
    • Configuring BGP Filtering by Neighbor

      874
    • Configuring Prefix Lists for BGP Filtering

      875
    • Configuring BGP Community Filtering

      876
    • Configuring BGP Neighbors and Peer Groups

      878
    • Configuring Aggregate Addresses

      880
    • Configuring Routing Domain Confederations

      880
    • Configuring BGP Route Reflectors

      881
    • Configuring Route Dampening

      882
    • Monitoring and Maintaining BGP

      883
  • Configuring Multi-VRF CE

    884
    • Understanding Multi-VRF CE

      885
    • Default Multi-VRF CE Configuration

      887
    • Multi-VRF CE Configuration Guidelines

      887
    • Configuring VRFs

      888
    • Configuring VRF-Aware Services

      889
      • User Interface for ARP

        889
      • User Interface for PING

        889
      • User Interface for SNMP

        890
      • User Interface for HSRP

        890
      • User Interface for uRPF

        890
      • User Interface for Syslog

        891
      • User Interface for Traceroute

        891
      • User Interface for FTP and TFTP

        892
    • Configuring Multicast VRFs

      892
    • Configuring a VPN Routing Session

      893
    • Configuring BGP PE to CE Routing Sessions

      894
    • Multi-VRF CE Configuration Example

      894
    • Displaying Multi-VRF CE Status

      898
  • Configuring Unicast Reverse Path Forwarding

    899
  • Configuring Protocol-Independent Features

    899
    • Configuring Cisco Express Forwarding and Distributed Cisco Express Forwarding

      899
    • Configuring the Number of Equal-Cost Routing Paths

      901
    • Configuring Static Unicast Routes

      902
    • Specifying Default Routes and Networks

      903
    • Using Route Maps to Redistribute Routing Information

      903
    • Configuring Policy-Based Routing

      907
      • PBR Configuration Guidelines

        908
      • Enabling PBR

        909
    • Filtering Routing Information

      911
      • Setting Passive Interfaces

        911
      • Controlling Advertising and Processing in Routing Updates

        912
      • Filtering Sources of Routing Information

        913
    • Managing Authentication Keys

      913
  • Monitoring and Maintaining the IP Network

    915
• Configuring IPv6 Host Functions and Unicast Routing

  917
  • Supported IPv6 Host Functions and Unicast Routing Features

    918
  • Understanding IPv6

    918
    • IPv6 Addresses

      919
    • Supported IPv6 Host Functions and Unicast Routing Features

      920
      • 128-Bit Wide Unicast Addresses

        920
      • DNS for IPv6

        921
      • Path MTU Discovery for IPv6 Unicast

        921
      • ICMPv6

        921
      • Neighbor Discovery

        921
      • IPv6 Stateless Autoconfiguration and Duplicate Address Detection

        922
      • IPv6 Applications

        923
      • Dual IPv4 and IPv6 Protocol Stacks

        923
      • EIGRP IPv6

        924
    • Unsupported IPv6 Host Functions and Unicast Routing Features

      927
    • Limitations

      928
    • IPv6 and Switch Stacks

      928
    • SDM Templates

      929
      • Dual IPv4-and IPv6 SDM Templates

        930
  • Configuring IPv6

    931
    • Default IPv6 Configuration

      931
    • Configuring IPv6 Addressing and Enabling IPv6 Host Functions or Routing

      932
    • Configuring IPv4 and IPv6 Protocol Stacks and Enabling IPv6 Routing

      934
    • Configuring IPv6 ICMP Rate Limiting

      935
    • Configuring CEF and dCEF for IPv6

      936
    • Configuring Static Routes for IPv6

      937
    • Configuring RIP for IPv6

      939
    • Configuring OSPF for IPv6

      941
  • Displaying IPv6

    943
• Configuring HSRP

  947
  • Understanding HSRP

    947
    • Multiple HSRP

      949
    • HSRP and Switch Stacks

      950
  • Configuring HSRP

    950
    • Default HSRP Configuration

      951
    • HSRP Configuration Guidelines

      951
    • Enabling HSRP

      951
    • Configuring HSRP Priority

      953
    • Configuring MHSRP

      955
    • Configuring HSRP Authentication and Timers

      956
    • Enabling HSRP Support for ICMP Redirect Messages

      957
  • Displaying HSRP Configurations

    957
• Configuring Cisco IOS IP SLAs Operations

  959
  • Understanding Cisco IOS IP SLAs

    959
    • Using Cisco IOS IP SLAs to Measure Network Performance

      961
    • IP SLAs Responder and IP SLAs Control Protocol

      962
    • Response Time Computation for IP SLAs

      962
    • IP SLAs Operation Scheduling

      963
    • IP SLAs Operation Threshold Monitoring

      963
  • Configuring IP SLAs Operations

    964
    • Default Configuration

      964
    • Configuration Guidelines

      964
    • Configuring the IP SLAs Responder

      966
    • Analyzing IP Service Levels by Using the UDP Jitter Operation

      966
    • Analyzing IP Service Levels by Using the ICMP Echo Operation

      969
  • Monitoring IP SLAs Operations

    972
• Configuring Enhanced Object Tracking

  973
  • Understanding Enhanced Object Tracking

    973
  • Configuring Enhanced Object Tracking Features

    974
    • Default Configuration

      974
    • Tracking Interface Line-Protocol or IP Routing State

      974
    • Configuring a Tracked List

      975
      • Configuring a Tracked List with a Boolean Expression

        975
      • Configuring a Tracked List with a Weight Threshold

        976
      • Configuring a Tracked List with a Percentage Threshold

        977
    • Configuring HSRP Object Tracking

      979
    • Configuring Other Tracking Characteristics

      980
    • Configuring IP SLAs Object Tracking

      981
  • Monitoring Enhanced Object Tracking

    982
• Configuring Web Cache Services By Using WCCP

  983
  • Understanding WCCP

    983
    • WCCP Message Exchange

      984
    • WCCP Negotiation

      985
    • MD5 Security

      985
    • Packet Redirection and Service Groups

      985
    • WCCP and Switch Stacks

      986
    • Unsupported WCCP Features

      987
  • Configuring WCCP

    987
    • Default WCCP Configuration

      987
    • WCCP Configuration Guidelines

      987
    • Enabling the Web Cache Service

      988
  • Monitoring and Maintaining WCCP

    992
• Configuring IP Multicast Routing

  993
  • Understanding Cisco’s Implementation of IP Multicast Routing

    994
    • Understanding IGMP

      995
      • IGMP Version 1

        995
      • IGMP Version 2

        995
    • Understanding PIM

      996
      • PIM Versions

        996
      • PIM Modes

        996
      • PIM Stub Routing

        997
      • IGMP Helper

        998
      • Auto-RP

        999
      • Bootstrap Router

        999
      • Multicast Forwarding and Reverse Path Check

        1000
    • Understanding DVMRP

      1001
    • Understanding CGMP

      1001
  • Multicast Routing and Switch Stacks

    1002
  • Configuring IP Multicast Routing

    1002
    • Default Multicast Routing Configuration

      1003
    • Multicast Routing Configuration Guidelines

      1003
      • PIMv1 and PIMv2 Interoperability

        1003
      • Auto-RP and BSR Configuration Guidelines

        1004
    • Configuring Basic Multicast Routing

      1004
    • Enabling PIM Stub Routing

      1006
    • Configuring a Rendezvous Point

      1007
      • Manually Assigning an RP to Multicast Groups

        1008
      • Configuring Auto-RP

        1009
      • Configuring PIMv2 BSR

        1013
    • Using Auto-RP and a BSR

      1017
    • Monitoring the RP Mapping Information

      1018
    • Troubleshooting PIMv1 and PIMv2 Interoperability Problems

      1018
  • Configuring Advanced PIM Features

    1018
    • Understanding PIM Shared Tree and Source Tree

      1018
    • Delaying the Use of PIM Shortest-Path Tree

      1020
    • Modifying the PIM Router-Query Message Interval

      1021
  • Configuring Optional IGMP Features

    1021
    • Default IGMP Configuration

      1022
    • Configuring the Switch as a Member of a Group

      1022
    • Controlling Access to IP Multicast Groups

      1023
    • Changing the IGMP Version

      1024
    • Modifying the IGMP Host-Query Message Interval

      1024
    • Changing the IGMP Query Timeout for IGMPv2

      1025
    • Changing the Maximum Query Response Time for IGMPv2

      1026
    • Configuring the Switch as a Statically Connected Member

      1026
  • Configuring Optional Multicast Routing Features

    1027
    • Enabling CGMP Server Support

      1027
    • Configuring sdr Listener Support

      1028
      • Enabling sdr Listener Support

        1029
      • Limiting How Long an sdr Cache Entry Exists

        1029
    • Configuring an IP Multicast Boundary

      1029
  • Configuring Basic DVMRP Interoperability Features

    1031
    • Configuring DVMRP Interoperability

      1032
    • Configuring a DVMRP Tunnel

      1034
    • Advertising Network 0.0.0.0 to DVMRP Neighbors

      1035
    • Responding to mrinfo Requests

      1036
  • Configuring Advanced DVMRP Interoperability Features

    1036
    • Enabling DVMRP Unicast Routing

      1037
    • Rejecting a DVMRP Nonpruning Neighbor

      1038
    • Controlling Route Exchanges

      1039
      • Limiting the Number of DVMRP Routes Advertised

        1040
      • Changing the DVMRP Route Threshold

        1040
      • Configuring a DVMRP Summary Address

        1041
      • Disabling DVMRP Autosummarization

        1043
      • Adding a Metric Offset to the DVMRP Route

        1043
  • Monitoring and Maintaining IP Multicast Routing

    1044
    • Clearing Caches, Tables, and Databases

      1044
    • Displaying System and Network Statistics

      1045
    • Monitoring IP Multicast Routing

      1046
• Configuring MSDP

  1047
  • Understanding MSDP

    1047
    • MSDP Operation

      1048
    • MSDP Benefits

      1049
  • Configuring MSDP

    1049
    • Default MSDP Configuration

      1050
    • Configuring a Default MSDP Peer

      1050
    • Caching Source-Active State

      1052
    • Requesting Source Information from an MSDP Peer

      1054
    • Controlling Source Information that Your Switch Originates

      1054
      • Redistributing Sources

        1055
      • Filtering Source-Active Request Messages

        1056
    • Controlling Source Information that Your Switch Forwards

      1057
      • Using a Filter

        1058
      • Using TTL to Limit the Multicast Data Sent in SA Messages

        1059
    • Controlling Source Information that Your Switch Receives

      1059
    • Configuring an MSDP Mesh Group

      1061
    • Shutting Down an MSDP Peer

      1061
    • Including a Bordering PIM Dense-Mode Region in MSDP

      1062
    • Configuring an Originating Address other than the RP Address

      1063
  • Monitoring and Maintaining MSDP

    1064
• Configuring Fallback Bridging

  1065
  • Understanding Fallback Bridging

    1065
    • Fallback Bridging Overview

      1065
    • Fallback Bridging and Switch Stacks

      1067
  • Configuring Fallback Bridging

    1067
    • Default Fallback Bridging Configuration

      1068
    • Fallback Bridging Configuration Guidelines

      1068
    • Creating a Bridge Group

      1068
    • Adjusting Spanning-Tree Parameters

      1070
      • Changing the VLAN-Bridge Spanning-Tree Priority

        1070
      • Changing the Interface Priority

        1071
      • Assigning a Path Cost

        1071
      • Adjusting BPDU Intervals

        1072
      • Disabling the Spanning Tree on an Interface

        1074
  • Monitoring and Maintaining Fallback Bridging

    1075
• Troubleshooting

  1077
  • Recovering from a Software Failure

    1078
  • Recovering from a Lost or Forgotten Password

    1079
    • Procedure with Password Recovery Enabled

      1081
    • Procedure with Password Recovery Disabled

      1082
  • Preventing Switch Stack Problems

    1084
  • Preventing Autonegotiation Mismatches

    1085
  • Monitoring Temperature

    1085
  • Using Ping

    1086
    • Understanding Ping

      1086
    • Executing Ping

      1086
  • Using Layer 2 Traceroute

    1087
    • Understanding Layer 2 Traceroute

      1087
    • Usage Guidelines

      1088
    • Displaying the Physical Path

      1089
  • Using IP Traceroute

    1089
    • Understanding IP Traceroute

      1089
    • Executing IP Traceroute

      1090
  • Using TDR

    1091
    • Understanding TDR

      1091
    • Running TDR and Displaying the Results

      1091
  • Using Debug Commands

    1092
    • Enabling Debugging on a Specific Feature

      1092
    • Enabling All-System Diagnostics

      1093
    • Redirecting Debug and Error Message Output

      1093
  • Using the show platform forward Command

    1093
  • Using the crashinfo Files

    1096
    • Basic crashinfo Files

      1096
    • Extended crashinfo Files

      1096
  • Using On-Board Failure Logging

    1097
    • Understanding OBFL

      1097
    • Configuring OBFL

      1097
    • Displaying OBFL Information

      1098
• Configuring Online Diagnostics

  1099
  • Understanding Online Diagnostics

    1099
  • Configuring Online Diagnostics

    1100
    • Scheduling Online Diagnostics

      1100
    • Configuring Health-Monitoring Diagnostics

      1101
  • Running Online Diagnostic Tests

    1103
    • Starting Online Diagnostic Tests

      1103
    • Displaying Online Diagnostic Tests and Test Results

      1104
• Supported MIBs

  1105
  • MIB List

    1105
  • Using FTP to Access the MIB Files

    1108
• Working with the Cisco IOS File System, Configuration Files, and Software Images

  1109
  • Working with the Flash File System

    1109
    • Displaying Available File Systems

      1110
    • Setting the Default File System

      1111
    • Displaying Information about Files on a File System

      1111
    • Changing Directories and Displaying the Working Directory

      1112
    • Creating and Removing Directories

      1113
    • Copying Files

      1113
    • Deleting Files

      1114
    • Creating, Displaying, and Extracting Files

      1114
  • Working with Configuration Files

    1117
    • Guidelines for Creating and Using Configuration Files

      1118
    • Configuration File Types and Location

      1118
    • Creating a Configuration File By Using a Text Editor

      1119
    • Copying Configuration Files By Using TFTP

      1119
      • Preparing to Download or Upload a Configuration File By Using TFTP

        1119
      • Downloading the Configuration File By Using TFTP

        1120
      • Uploading the Configuration File By Using TFTP

        1120
    • Copying Configuration Files By Using FTP

      1121
      • Preparing to Download or Upload a Configuration File By Using FTP

        1122
      • Downloading a Configuration File By Using FTP

        1122
      • Uploading a Configuration File By Using FTP

        1123
    • Copying Configuration Files By Using RCP

      1124
      • Preparing to Download or Upload a Configuration File By Using RCP

        1125
      • Downloading a Configuration File By Using RCP

        1126
      • Uploading a Configuration File By Using RCP

        1127
    • Clearing Configuration Information

      1127
      • Clearing the Startup Configuration File

        1128
      • Deleting a Stored Configuration File

        1128
    • Replacing and Rolling Back Configurations

      1128
      • Understanding Configuration Replacement and Rollback

        1128
      • Configuration Guidelines

        1129
      • Configuring the Configuration Archive

        1130
      • Performing a Configuration Replacement or Rollback Operation

        1131
  • Working with Software Images

    1131
    • Image Location on the Switch

      1133
    • File Format of Images on a Server or Cisco.com

      1133
    • Copying Image Files By Using TFTP

      1134
      • Preparing to Download or Upload an Image File By Using TFTP

        1134
      • Downloading an Image File By Using TFTP

        1135
      • Uploading an Image File By Using TFTP

        1137
    • Copying Image Files By Using FTP

      1137
      • Preparing to Download or Upload an Image File By Using FTP

        1138
      • Downloading an Image File By Using FTP

        1139
      • Uploading an Image File By Using FTP

        1141
    • Copying Image Files By Using RCP

      1142
      • Preparing to Download or Upload an Image File By Using RCP

        1143
      • Downloading an Image File By Using RCP

        1144
      • Uploading an Image File By Using RCP

        1146
    • Copying an Image File from One Stack Member to Another

      1147
• Unsupported Commands in Cisco IOS Release 12.2(40)EX2

  1149
  • Access Control Lists

    1149
    • Unsupported Privileged EXEC Commands

      1149
    • Unsupported Global Configuration Commands

      1149
    • Unsupported Route-Map Configuration Commands

      1149
  • Archive Commands

    1150
    • Unsupported Privileged EXEC Commands

      1150
  • ARP Commands

    1150
    • Unsupported Global Configuration Commands

      1150
    • Unsupported Interface Configuration Commands

      1150
  • Boot Loader Commands

    1150
    • Unsupported User EXEC Commands

      1150
    • Unsupported Global Configuration Commands

      1150
  • Debug Commands

    1150
    • Unsupported Privileged EXEC Commands

      1151
  • Embedded Event Manager

    1151
    • Unsupported Privileged EXEC Commands

      1151
    • Unsupported Global Configuration Commands

      1151
    • Unsupported Commands in Applet Configuration Mode

      1151
  • Fallback Bridging

    1151
    • Unsupported Privileged EXEC Commands

      1151
    • Unsupported Global Configuration Commands

      1152
    • Unsupported Interface Configuration Commands

      1152
  • HSRP

    1153
    • Unsupported Global Configuration Commands

      1153
    • Unsupported Interface Configuration Commands

      1153
  • IGMP Snooping Commands

    1154
    • Unsupported Global Configuration Commands

      1154
  • Interface Commands

    1154
    • Unsupported Privileged EXEC Commands

      1154
    • Unsupported Global Configuration Commands

      1154
    • Unsupported Interface Configuration Commands

      1154
  • IP Multicast Routing

    1154
    • Unsupported Privileged EXEC Commands

      1154
    • Unsupported Global Configuration Commands

      1155
    • Unsupported Interface Configuration Commands

      1155
  • IP Unicast Routing

    1156
    • Unsupported Privileged EXEC or User EXEC Commands

      1156
    • Unsupported Global Configuration Commands

      1156
    • Unsupported Interface Configuration Commands

      1157
    • Unsupported BGP Router Configuration Commands

      1157
    • Unsupported VPN Configuration Commands

      1157
    • Unsupported Route Map Commands

      1157
  • MAC Address Commands

    1158
    • Unsupported Privileged EXEC Commands

      1158
    • Unsupported Global Configuration Commands

      1158
  • Miscellaneous

    1158
    • Unsupported Privileged EXEC Commands

      1158
    • Unsupported Global Configuration Commands

      1159
  • MSDP

    1159
    • Unsupported Privileged EXEC Commands

      1159
    • Unsupported Global Configuration Commands

      1159
  • NetFlow Commands

    1159
    • Unsupported Global Configuration Commands

      1159
  • Network Address Translation (NAT) Commands

    1160
    • Unsupported Privileged EXEC Commands

      1160
  • QoS

    1160
    • Unsupported Global Configuration Command

      1160
    • Unsupported Interface Configuration Commands

      1160
    • Unsupported Policy-Map Configuration Command

      1160
  • RADIUS

    1160
    • Unsupported Global Configuration Commands

      1160
  • SNMP

    1161
    • Unsupported Global Configuration Commands

      1161
  • Spanning Tree

    1161
    • Unsupported Global Configuration Command

      1161
    • Unsupported Interface Configuration Command

      1161
  • VLAN

    1161
    • Unsupported Global Configuration Command

      1161
    • Unsupported User EXEC Commands

      1161
  • VTP

    1161
    • Unsupported Privileged EXEC Command

      1161
• Index

  1163