Benutzerhandbuch für Cisco Systems 2960

Inhaltsverzeichnis

• Catalyst 2960 and 2960-S Switch Software Configuration Guide

  1
• Contents

  3
• Preface

  37
  • Audience

    37
  • Purpose

    37
  • Conventions

    38
  • Related Publications

    39
  • Obtaining Documentation, Obtaining Support, and Security Guidelines

    40
• Overview

  41
  • Features

    41
    • Ease-of-Deployment and Ease-of-Use Features

      42
    • Performance Features

      44
    • Management Options

      45
    • Manageability Features

      46
    • Availability and Redundancy Features

      48
    • VLAN Features

      49
    • Security Features

      50
    • QoS and CoS Features

      53
    • Layer 3 Features

      55
    • Power over Ethernet Features

      55
    • Monitoring Features

      55
  • Default Settings After Initial Switch Configuration

    56
  • Network Configuration Examples

    58
    • Design Concepts for Using the Switch

      59
    • Small to Medium-Sized Network Using Catalyst 2960 and 2960-S Switches

      62
    • Long-Distance, High-Bandwidth Transport Configuration

      63
  • Where to Go Next

    64
• Using the Command-Line Interface

  65
  • Understanding Command Modes

    65
  • Understanding the Help System

    67
  • Understanding Abbreviated Commands

    67
  • Understanding no and default Forms of Commands

    68
  • Understanding CLI Error Messages

    68
  • Using Configuration Logging

    68
  • Using Command History

    69
    • Changing the Command History Buffer Size

      69
    • Recalling Commands

      70
    • Disabling the Command History Feature

      70
  • Using Editing Features

    70
    • Enabling and Disabling Editing Features

      70
    • Editing Commands through Keystrokes

      71
    • Editing Command Lines that Wrap

      72
  • Searching and Filtering Output of show and more Commands

    73
  • Accessing the CLI

    73
    • Accessing the CLI through a Console Connection or through Telnet

      74
• Assigning the Switch IP Address and Default Gateway

  75
  • Understanding the Boot Process

    75
  • Assigning Switch Information

    76
    • Default Switch Information

      77
    • Understanding DHCP-Based Autoconfiguration

      77
      • DHCP Client Request Process

        78
    • Understanding DHCP-based Autoconfiguration and Image Update

      79
      • DHCP Autoconfiguration

        79
      • DHCP Auto-Image Update

        79
      • Limitations and Restrictions

        80
    • Configuring DHCP-Based Autoconfiguration

      80
      • DHCP Server Configuration Guidelines

        80
      • Configuring the TFTP Server

        81
      • Configuring the DNS

        82
      • Configuring the Relay Device

        82
      • Obtaining Configuration Files

        83
      • Example Configuration

        84
    • Configuring the DHCP Auto Configuration and Image Update Features

      85
      • Configuring DHCP Autoconfiguration (Only Configuration File)

        85
      • Configuring DHCP Auto-Image Update (Configuration File and Image)

        86
      • Configuring the Client

        88
    • Manually Assigning IP Information

      89
  • Checking and Saving the Running Configuration

    89
    • Configuring the NVRAM Buffer Size

      90
  • Modifying the Startup Configuration

    91
    • Default Boot Configuration

      92
    • Automatically Downloading a Configuration File

      92
    • Specifying the Filename to Read and Write the System Configuration

      92
    • Booting Manually

      93
    • Booting a Specific Software Image

      94
    • Controlling Environment Variables

      95
  • Scheduling a Reload of the Software Image

    96
    • Configuring a Scheduled Reload

      97
    • Displaying Scheduled Reload Information

      98
• Configuring Cisco IOS Configuration Engine

  99
  • Understanding Cisco Configuration Engine Software

    99
    • Configuration Service

      100
    • Event Service

      101
      • NameSpace Mapper

        101
    • What You Should Know About the CNS IDs and Device Hostnames

      101
      • ConfigID

        101
      • DeviceID

        102
      • Hostname and DeviceID

        102
      • Using Hostname, DeviceID, and ConfigID

        102
  • Understanding Cisco IOS Agents

    103
    • Initial Configuration

      103
    • Incremental (Partial) Configuration

      104
    • Synchronized Configuration

      104
  • Configuring Cisco IOS Agents

    104
    • Enabling Automated CNS Configuration

      104
    • Enabling the CNS Event Agent

      105
    • Enabling the Cisco IOS CNS Agent

      107
      • Enabling an Initial Configuration

        107
      • Enabling a Partial Configuration

        110
  • Displaying CNS Configuration

    111
• Administering the Switch

  113
  • Identifying the Switch Image

    113
  • Managing the System Time and Date

    114
    • Understanding the System Clock

      114
    • Understanding Network Time Protocol

      115
    • Configuring NTP

      117
      • Default NTP Configuration

        117
      • Configuring NTP Authentication

        117
      • Configuring NTP Associations

        118
      • Configuring NTP Broadcast Service

        119
      • Configuring NTP Access Restrictions

        121
      • Configuring the Source IP Address for NTP Packets

        123
      • Displaying the NTP Configuration

        124
    • Configuring Time and Date Manually

      124
      • Setting the System Clock

        124
      • Displaying the Time and Date Configuration

        125
      • Configuring the Time Zone

        125
      • Configuring Summer Time (Daylight Saving Time)

        126
  • Configuring a System Name and Prompt

    127
    • Default System Name and Prompt Configuration

      128
    • Configuring a System Name

      128
    • Understanding DNS

      128
      • Default DNS Configuration

        129
      • Setting Up DNS

        129
      • Displaying the DNS Configuration

        130
  • Creating a Banner

    130
    • Default Banner Configuration

      130
    • Configuring a Message-of-the-Day Login Banner

      131
    • Configuring a Login Banner

      132
  • Managing the MAC Address Table

    132
    • Building the Address Table

      133
    • MAC Addresses and VLANs

      133
    • MAC Addresses and Switch Stacks

      134
    • Default MAC Address Table Configuration

      134
    • Changing the Address Aging Time

      134
    • Removing Dynamic Address Entries

      135
    • Configuring MAC Address Change Notification Traps

      135
    • Configuring MAC Address Move Notification Traps

      137
    • Configuring MAC Threshold Notification Traps

      138
    • Adding and Removing Static Address Entries

      139
    • Configuring Unicast MAC Address Filtering

      140
    • Disabling MAC Address Learning on a VLAN

      141
    • Displaying Address Table Entries

      142
  • Managing the ARP Table

    143
• Clustering Switches

  145
  • Understanding Switch Clusters

    146
    • Cluster Command Switch Characteristics

      147
    • Standby Cluster Command Switch Characteristics

      147
    • Candidate Switch and Cluster Member Switch Characteristics

      148
  • Planning a Switch Cluster

    149
    • Automatic Discovery of Cluster Candidates and Members

      149
      • Discovery Through CDP Hops

        150
      • Discovery Through Non-CDP-Capable and Noncluster-Capable Devices

        151
      • Discovery Through Different VLANs

        151
      • Discovery Through Different Management VLANs

        152
      • Discovery of Newly Installed Switches

        153
    • HSRP and Standby Cluster Command Switches

      154
      • Virtual IP Addresses

        155
      • Other Considerations for Cluster Standby Groups

        155
      • Automatic Recovery of Cluster Configuration

        156
    • IP Addresses

      157
    • Hostnames

      157
    • Passwords

      157
    • SNMP Community Strings

      158
    • Switch Clusters and Switch Stacks

      158
    • TACACS+ and RADIUS

      160
    • LRE Profiles

      160
  • Using the CLI to Manage Switch Clusters

    160
  • Using SNMP to Manage Switch Clusters

    161
• Managing Switch Stacks

  163
  • Understanding Stacks

    163
    • Stack Membership

      165
    • Master Election

      167
    • Stack MAC Address

      168
    • Member Numbers

      168
    • Member Priority Values

      169
    • Stack Offline Configuration

      169
      • Effects of Adding a Provisioned Switch to a Stack

        169
      • Effects of Replacing a Provisioned Switch in a Stack

        171
      • Effects of Removing a Provisioned Switch from a Stack

        171
    • Stack Software Compatibility Recommendations

      171
    • Stack Protocol Version Compatibility

      171
    • Major Version Number Incompatibility Among Switches

      171
    • Minor Version Number Incompatibility Among Switches

      172
      • Understanding Auto-Upgrade and Auto-Advise

        172
      • Auto-Upgrade and Auto-Advise Example Messages

        173
    • Incompatible Software and Member Image Upgrades

      175
    • Stack Configuration Files

      175
    • Additional Considerations for System-Wide Configuration on Switch Stacks

      175
    • Stack Management Connectivity

      176
      • Stack Through an IP Address

        176
      • Stack Through an SSH Session

        176
      • Stack Through Console Ports

        177
      • Specific Members

        177
    • Stack Configuration Scenarios

      177
    • Data Recovery After Stack Topology Changes

      178
  • Configuring the Switch Stack

    178
    • Default Switch Stack Configuration

      179
    • Enabling Persistent MAC Address

      179
    • Assigning Stack Member Information

      181
      • Assigning a Member Number

        181
      • Setting the Member Priority Value

        182
      • Provisioning a New Member for a Stack

        182
    • Changing the Stack Membership

      183
  • Accessing the CLI of a Specific Member

    183
  • Displaying Stack Information

    184
  • Troubleshooting Stacks

    184
    • Manually Disabling a Stack Port

      184
    • Re-Enabling a Stack Port While Another Member Starts

      185
    • Understanding the show switch stack-ports summary Output

      185
• Configuring SDM Templates

  187
  • Understanding the SDM Templates

    187
    • SDM Templates and Switch Stacks

      188
  • Configuring the Switch SDM Template

    189
    • Default SDM Template

      189
    • SDM Template Configuration Guidelines

      189
    • Setting the SDM Template

      190
  • .Displaying the SDM Templates

    191
• Configuring Switch-Based Authentication

  193
  • Preventing Unauthorized Access to Your Switch

    193
  • Protecting Access to Privileged EXEC Commands

    194
    • Default Password and Privilege Level Configuration

      194
    • Setting or Changing a Static Enable Password

      195
    • Protecting Enable and Enable Secret Passwords with Encryption

      195
    • Disabling Password Recovery

      197
    • Setting a Telnet Password for a Terminal Line

      198
    • Configuring Username and Password Pairs

      199
    • Configuring Multiple Privilege Levels

      200
      • Setting the Privilege Level for a Command

        200
      • Changing the Default Privilege Level for Lines

        201
      • Logging into and Exiting a Privilege Level

        202
  • Controlling Switch Access with TACACS+

    202
    • Understanding TACACS+

      202
    • TACACS+ Operation

      204
    • Configuring TACACS+

      205
      • Default TACACS+ Configuration

        205
      • Identifying the TACACS+ Server Host and Setting the Authentication Key

        205
      • Configuring TACACS+ Login Authentication

        206
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services

        208
      • Starting TACACS+ Accounting

        209
      • Establishing a Session with a Router if the AAA Server is Unreachable

        210
    • Displaying the TACACS+ Configuration

      210
  • Controlling Switch Access with RADIUS

    210
    • Understanding RADIUS

      210
    • RADIUS Operation

      212
    • RADIUS Change of Authorization

      212
      • Overview

        212
      • Change-of-Authorization Requests

        213
      • CoA Request Response Code

        214
      • CoA Request Commands

        215
      • Stacking Guidelines for Session Termination

        218
    • Configuring RADIUS

      219
      • Default RADIUS Configuration

        219
      • Identifying the RADIUS Server Host

        219
      • Configuring RADIUS Login Authentication

        222
      • Defining AAA Server Groups

        224
      • Configuring RADIUS Authorization for User Privileged Access and Network Services

        226
      • Starting RADIUS Accounting

        227
      • Establishing a Session with a Router if the AAA Server is Unreachable

        228
      • Configuring Settings for All RADIUS Servers

        228
      • Configuring the Switch to Use Vendor-Specific RADIUS Attributes

        228
      • Configuring the Switch for Vendor-Proprietary RADIUS Server Communication

        230
      • Configuring CoA on the Switch

        231
      • Monitoring and Troubleshooting CoA Functionality

        232
      • Configuring RADIUS Server Load Balancing

        232
    • Displaying the RADIUS Configuration

      232
  • Configuring the Switch for Local Authentication and Authorization

    232
  • Configuring the Switch for Secure Shell

    233
    • Understanding SSH

      234
      • SSH Servers, Integrated Clients, and Supported Versions

        234
      • Limitations

        235
    • Configuring SSH

      235
      • Configuration Guidelines

        235
      • Setting Up the Switch to Run SSH

        235
      • Configuring the SSH Server

        236
    • Displaying the SSH Configuration and Status

      237
  • Configuring the Switch for Secure Socket Layer HTTP

    238
    • Understanding Secure HTTP Servers and Clients

      238
      • Certificate Authority Trustpoints

        238
      • CipherSuites

        240
    • Configuring Secure HTTP Servers and Clients

      240
      • Default SSL Configuration

        240
      • SSL Configuration Guidelines

        241
      • Configuring a CA Trustpoint

        241
      • Configuring the Secure HTTP Server

        242
      • Configuring the Secure HTTP Client

        243
    • Displaying Secure HTTP Server and Client Status

      244
  • Configuring the Switch for Secure Copy Protocol

    244
    • Information About Secure Copy

      245
• Configuring IEEE 802.1x Port-Based Authentication

  247
  • Understanding IEEE 802.1x Port-Based Authentication

    247
    • Device Roles

      249
    • Authentication Process

      250
    • Authentication Initiation and Message Exchange

      252
    • Authentication Manager

      254
      • Port-Based Authentication Methods

        254
      • Per-User ACLs and Filter-Ids

        255
      • Authentication Manager CLI Commands

        256
    • Ports in Authorized and Unauthorized States

      257
    • 802.1x Authentication and Switch Stacks

      258
    • 802.1x Host Mode

      259
    • Multidomain Authentication

      259
    • 802.1x Multiple Authentication Mode

      261
    • MAC Move

      262
    • MAC Replace

      262
    • 802.1x Accounting

      263
    • 802.1x Accounting Attribute-Value Pairs

      263
    • 802.1x Readiness Check

      264
    • 802.1x Authentication with VLAN Assignment

      265
    • Using 802.1x Authentication with Per-User ACLs

      266
    • 802.1x Authentication with Downloadable ACLs and Redirect URLs

      267
      • Cisco Secure ACS and Attribute-Value Pairs for the Redirect URL

        269
      • Cisco Secure ACS and Attribute-Value Pairs for Downloadable ACLs

        269
      • VLAN ID-based MAC Authentication

        269
    • 802.1x Authentication with Guest VLAN

      270
    • 802.1x Authentication with Restricted VLAN

      271
    • 802.1x Authentication with Inaccessible Authentication Bypass

      272
      • Support on Multiple-Authentication Ports

        272
      • Authentication Results

        272
      • Feature Interactions

        273
    • 802.1x Authentication with Voice VLAN Ports

      273
    • 802.1x Authentication with Port Security

      274
    • 802.1x Authentication with Wake-on-LAN

      275
    • 802.1x Authentication with MAC Authentication Bypass

      276
    • 802.1x User Distribution

      277
      • 802.1x User Distribution Configuration Guidelines

        277
    • Network Admission Control Layer 2 802.1x Validation

      278
    • Flexible Authentication Ordering

      278
    • Open1x Authentication

      279
    • Using Voice Aware 802.1x Security

      279
    • 802.1x Supplicant and Authenticator Switches with Network Edge Access Topology (NEAT)

      279
      • Guidelines

        280
    • Using IEEE 802.1x Authentication with ACLs and the RADIUS Filter-Id Attribute

      281
    • Common Session ID

      281
  • Configuring 802.1x Authentication

    282
    • Default 802.1x Authentication Configuration

      283
    • 802.1x Authentication Configuration Guidelines

      284
      • 802.1x Authentication

        284
      • VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass

        285
      • MAC Authentication Bypass

        286
      • Maximum Number of Allowed Devices Per Port

        286
    • Configuring 802.1x Readiness Check

      286
    • Configuring Voice Aware 802.1x Security

      287
    • Configuring 802.1x Violation Modes

      289
    • Configuring 802.1x Authentication

      290
    • Configuring the Switch-to-RADIUS-Server Communication

      291
    • Configuring the Host Mode

      292
    • Configuring Periodic Re-Authentication

      294
    • Manually Re-Authenticating a Client Connected to a Port

      295
    • Changing the Quiet Period

      295
    • Changing the Switch-to-Client Retransmission Time

      296
    • Setting the Switch-to-Client Frame-Retransmission Number

      296
    • Setting the Re-Authentication Number

      297
    • Enabling MAC Move

      298
    • Enabling MAC Replace

      298
    • Configuring 802.1x Accounting

      299
    • Configuring a Guest VLAN

      300
    • Configuring a Restricted VLAN

      301
    • Configuring the Inaccessible Authentication Bypass Feature

      303
    • Configuring 802.1x Authentication with WoL

      306
    • Configuring MAC Authentication Bypass

      307
    • Configuring 802.1x User Distribution

      308
    • Configuring NAC Layer 2 802.1x Validation

      309
    • Configuring an Authenticator and a Supplicant Switch with NEAT

      310
      • Configuring NEAT with Auto Smartports Macros

        311
    • Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs

      311
      • Configuring Downloadable ACLs

        312
      • Configuring a Downloadable Policy

        312
    • Configuring VLAN ID-based MAC Authentication

      314
    • Configuring Flexible Authentication Ordering

      314
    • Configuring Open1x

      315
    • Disabling 802.1x Authentication on the Port

      316
    • Resetting the 802.1x Authentication Configuration to the Default Values

      316
  • Displaying 802.1x Statistics and Status

    317
• Configuring Web-Based Authentication

  319
  • Understanding Web-Based Authentication

    319
    • Device Roles

      320
    • Host Detection

      320
    • Session Creation

      321
    • Authentication Process

      321
    • Local Web Authentication Banner

      322
    • Web Authentication Customizable Web Pages

      324
      • Guidelines

        324
    • Web-based Authentication Interactions with Other Features

      325
      • Port Security

        325
      • LAN Port IP

        326
      • Gateway IP

        326
      • ACLs

        326
      • Context-Based Access Control

        326
      • 802.1x Authentication

        326
      • EtherChannel

        326
  • Configuring Web-Based Authentication

    327
    • Default Web-Based Authentication Configuration

      327
    • Web-Based Authentication Configuration Guidelines and Restrictions

      327
    • Web-Based Authentication Configuration Task List

      328
    • Configuring the Authentication Rule and Interfaces

      328
    • Configuring AAA Authentication

      329
    • Configuring Switch-to-RADIUS-Server Communication

      329
    • Configuring the HTTP Server

      331
      • Customizing the Authentication Proxy Web Pages

        331
      • Specifying a Redirection URL for Successful Login

        333
    • Configuring an AAA Fail Policy

      333
    • Configuring the Web-Based Authentication Parameters

      334
    • Configuring a Web Authentication Local Banner

      334
    • Removing Web-Based Authentication Cache Entries

      335
  • Displaying Web-Based Authentication Status

    335
• Configuring Interface Characteristics

  337
  • Understanding Interface Types

    337
    • Port-Based VLANs

      338
    • Switch Ports

      338
      • Access Ports

        339
      • Trunk Ports

        339
    • Switch Virtual Interfaces

      340
    • EtherChannel Port Groups

      340
    • Dual-Purpose Uplink Ports

      340
    • Power over Ethernet Ports

      341
      • Supported Protocols and Standards

        341
      • Powered-Device Detection and Initial Power Allocation

        342
      • Power Management Modes

        343
      • Power Monitoring and Power Policing

        344
    • Connecting Interfaces

      346
  • Using the Switch USB Ports (Catalyst 2960-S Switches Only)

    347
    • USB Mini-Type B Console Port

      347
      • Console Port Change Logs

        347
      • Configuring the Console Media Type

        348
      • Configuring the USB Inactivity Timeout

        349
    • USB Type A Port

      350
  • Using Interface Configuration Mode

    351
    • Procedures for Configuring Interfaces

      352
    • Configuring a Range of Interfaces

      353
    • Configuring and Using Interface Range Macros

      355
  • Using the Ethernet Management Port (Catalyst 2960-S Only)

    356
    • Understanding the Ethernet Management Port

      357
    • Supported Features on the Ethernet Management Port

      357
    • Configuring the Ethernet Management Port

      358
    • TFTP and the Ethernet Management Port

      358
  • Configuring Ethernet Interfaces

    359
    • Default Ethernet Interface Configuration

      359
    • Setting the Type of a Dual-Purpose Uplink Port

      361
    • Configuring Interface Speed and Duplex Mode

      362
      • Speed and Duplex Configuration Guidelines

        362
      • Setting the Interface Speed and Duplex Parameters

        363
    • Configuring IEEE 802.3x Flow Control

      364
    • Configuring Auto-MDIX on an Interface

      365
    • Configuring a Power Management Mode on a PoE Port

      366
    • Budgeting Power for Devices Connected to a PoE Port

      367
    • Configuring Power Policing

      369
    • Adding a Description for an Interface

      370
  • Configuring Layer 3 SVIs

    371
  • Configuring the System MTU

    372
  • Monitoring and Maintaining the Interfaces

    373
    • Monitoring Interface Status

      374
    • Clearing and Resetting Interfaces and Counters

      374
    • Shutting Down and Restarting the Interface

      375
• Configuring VLANs

  377
  • Understanding VLANs

    377
    • Supported VLANs

      378
    • VLAN Port Membership Modes

      379
  • Configuring Normal-Range VLANs

    380
    • Token Ring VLANs

      381
    • Normal-Range VLAN Configuration Guidelines

      382
    • Configuring Normal-Range VLANs

      382
    • Default Ethernet VLAN Configuration

      383
    • Creating or Modifying an Ethernet VLAN

      384
    • Deleting a VLAN

      385
    • Assigning Static-Access Ports to a VLAN

      385
  • Configuring Extended-Range VLANs

    386
    • Default VLAN Configuration

      387
    • Extended-Range VLAN Configuration Guidelines

      387
    • Creating an Extended-Range VLAN

      387
  • Displaying VLANs

    389
  • Configuring VLAN Trunks

    389
    • Trunking Overview

      389
      • IEEE 802.1Q Configuration Considerations

        390
    • Default Layer 2 Ethernet Interface VLAN Configuration

      391
    • Configuring an Ethernet Interface as a Trunk Port

      391
      • Interaction with Other Features

        391
      • Configuring a Trunk Port

        392
      • Defining the Allowed VLANs on a Trunk

        393
      • Changing the Pruning-Eligible List

        394
      • Configuring the Native VLAN for Untagged Traffic

        394
    • Configuring Trunk Ports for Load Sharing

      395
      • Load Sharing Using STP Port Priorities

        395
      • Load Sharing Using STP Path Cost

        397
  • Configuring VMPS

    398
    • Understanding VMPS

      399
      • Dynamic-Access Port VLAN Membership

        399
    • Default VMPS Client Configuration

      400
    • VMPS Configuration Guidelines

      400
    • Configuring the VMPS Client

      401
      • Entering the IP Address of the VMPS

        401
      • Configuring Dynamic-Access Ports on VMPS Clients

        401
      • Reconfirming VLAN Memberships

        402
      • Changing the Reconfirmation Interval

        402
      • Changing the Retry Count

        403
    • Monitoring the VMPS

      403
    • Troubleshooting Dynamic-Access Port VLAN Membership

      404
    • VMPS Configuration Example

      404
• Configuring VTP

  407
  • Understanding VTP

    407
    • The VTP Domain

      408
    • VTP Modes

      409
    • VTP Advertisements

      410
    • VTP Version 2

      411
    • VTP Version 3

      411
    • VTP Pruning

      412
    • VTP and Switch Stacks

      414
  • Configuring VTP

    414
    • Default VTP Configuration

      415
    • VTP Configuration Guidelines

      415
      • Domain Names

        416
      • Passwords

        416
      • VTP Version

        416
      • Configuration Requirements

        417
    • Configuring VTP Mode

      417
      • Configuring a VTP Version 3 Password

        420
      • Configuring a VTP Version 3 Primary Server

        420
    • Enabling the VTP Version

      421
    • Enabling VTP Pruning

      422
    • Configuring VTP on a Per-Port Basis

      422
    • Adding a VTP Client Switch to a VTP Domain

      423
  • Monitoring VTP

    424
• Configuring Voice VLAN

  425
  • Understanding Voice VLAN

    425
    • Cisco IP Phone Voice Traffic

      426
    • Cisco IP Phone Data Traffic

      426
  • Configuring Voice VLAN

    427
    • Default Voice VLAN Configuration

      427
    • Voice VLAN Configuration Guidelines

      427
    • Configuring a Port Connected to a Cisco 7960 IP Phone

      428
      • Configuring Cisco IP Phone Voice Traffic

        429
      • Configuring the Priority of Incoming Data Frames

        430
  • Displaying Voice VLAN

    431
• Configuring STP

  433
  • Understanding Spanning-Tree Features

    433
    • STP Overview

      434
    • Spanning-Tree Topology and BPDUs

      435
    • Bridge ID, Switch Priority, and Extended System ID

      436
    • Spanning-Tree Interface States

      437
      • Blocking State

        438
      • Listening State

        439
      • Learning State

        439
      • Forwarding State

        439
      • Disabled State

        439
    • How a Switch or Port Becomes the Root Switch or Root Port

      440
    • Spanning Tree and Redundant Connectivity

      440
    • Spanning-Tree Address Management

      441
    • Accelerated Aging to Retain Connectivity

      441
    • Spanning-Tree Modes and Protocols

      442
    • Supported Spanning-Tree Instances

      442
    • Spanning-Tree Interoperability and Backward Compatibility

      443
    • STP and IEEE 802.1Q Trunks

      443
    • Spanning Tree and Switch Stacks

      444
  • Configuring Spanning-Tree Features

    444
    • Default Spanning-Tree Configuration

      445
    • Spanning-Tree Configuration Guidelines

      445
    • Changing the Spanning-Tree Mode

      447
    • Disabling Spanning Tree

      448
    • Configuring the Root Switch

      448
    • Configuring a Secondary Root Switch

      450
    • Configuring Port Priority

      450
    • Configuring Path Cost

      452
    • Configuring the Switch Priority of a VLAN

      453
    • Configuring Spanning-Tree Timers

      454
      • Configuring the Hello Time

        454
      • Configuring the Forwarding-Delay Time for a VLAN

        455
      • Configuring the Maximum-Aging Time for a VLAN

        455
      • Configuring the Transmit Hold-Count

        456
  • Displaying the Spanning-Tree Status

    456
• Configuring MSTP

  457
  • Understanding MSTP

    458
    • Multiple Spanning-Tree Regions

      458
    • IST, CIST, and CST

      459
      • Operations Within an MST Region

        459
      • Operations Between MST Regions

        460
      • IEEE 802.1s Terminology

        461
    • Hop Count

      462
    • Boundary Ports

      462
    • IEEE 802.1s Implementation

      463
      • Port Role Naming Change

        463
      • Interoperation Between Legacy and Standard Switches

        463
      • Detecting Unidirectional Link Failure

        464
    • MSTP and Switch Stacks

      465
    • Interoperability with IEEE 802.1D STP

      465
  • Understanding RSTP

    466
    • Port Roles and the Active Topology

      466
    • Rapid Convergence

      467
    • Synchronization of Port Roles

      468
    • Bridge Protocol Data Unit Format and Processing

      469
      • Processing Superior BPDU Information

        470
      • Processing Inferior BPDU Information

        470
    • Topology Changes

      470
  • Configuring MSTP Features

    471
    • Default MSTP Configuration

      472
    • MSTP Configuration Guidelines

      472
    • Specifying the MST Region Configuration and Enabling MSTP

      473
    • Configuring the Root Switch

      475
    • Configuring a Secondary Root Switch

      476
    • Configuring Port Priority

      477
    • Configuring Path Cost

      479
    • Configuring the Switch Priority

      480
    • Configuring the Hello Time

      481
    • Configuring the Forwarding-Delay Time

      481
    • Configuring the Maximum-Aging Time

      482
    • Configuring the Maximum-Hop Count

      482
    • Specifying the Link Type to Ensure Rapid Transitions

      483
    • Designating the Neighbor Type

      483
    • Restarting the Protocol Migration Process

      484
  • Displaying the MST Configuration and Status

    484
• Configuring Optional Spanning-Tree Features

  485
  • Understanding Optional Spanning-Tree Features

    485
    • Understanding Port Fast

      486
    • Understanding BPDU Guard

      486
    • Understanding BPDU Filtering

      487
    • Understanding UplinkFast

      487
    • Understanding Cross-Stack UplinkFast

      489
      • How CSUF Works

        490
      • Events that Cause Fast Convergence

        491
    • Understanding BackboneFast

      491
    • Understanding EtherChannel Guard

      494
    • Understanding Root Guard

      494
    • Understanding Loop Guard

      495
  • Configuring Optional Spanning-Tree Features

    496
    • Default Optional Spanning-Tree Configuration

      496
    • Optional Spanning-Tree Configuration Guidelines

      496
    • Enabling Port Fast

      497
    • Enabling BPDU Guard

      498
    • Enabling BPDU Filtering

      499
    • Enabling UplinkFast for Use with Redundant Links

      500
    • Enabling Cross-Stack UplinkFast

      501
    • Enabling BackboneFast

      501
    • Enabling EtherChannel Guard

      502
    • Enabling Root Guard

      502
    • Enabling Loop Guard

      503
  • Displaying the Spanning-Tree Status

    504
• Configuring Flex Links and the MAC Address-Table Move Update Feature

  505
  • Understanding Flex Links and the MAC Address-Table Move Update

    505
    • Flex Links

      506
    • VLAN Flex Link Load Balancing and Support

      507
    • Flex Link Multicast Fast Convergence

      507
      • Learning the Other Flex Link Port as the mrouter Port

        507
      • Generating IGMP Reports

        508
      • Leaking IGMP Reports

        508
      • Configuration Examples

        508
    • MAC Address-Table Move Update

      510
  • Configuring Flex Links and the MAC Address-Table Move Update

    511
    • Default Configuration

      512
    • Configuration Guidelines

      512
    • Configuring Flex Links

      513
    • Configuring VLAN Load Balancing on Flex Links

      515
    • Configuring the MAC Address-Table Move Update Feature

      516
  • Monitoring Flex Links and the MAC Address-Table Move Update

    518
• Configuring DHCP Features and IP Source Guard Features

  519
  • Understanding DHCP Snooping

    520
    • DHCP Server

      520
    • DHCP Relay Agent

      520
    • DHCP Snooping

      520
    • Option-82 Data Insertion

      522
    • DHCP Snooping Binding Database

      525
    • DHCP Snooping and Switch Stacks

      526
  • Configuring DHCP Snooping

    527
    • Default DHCP Snooping Configuration

      527
    • DHCP Snooping Configuration Guidelines

      527
    • Configuring the DHCP Relay Agent

      529
    • Enabling DHCP Snooping and Option 82

      529
    • Enabling the DHCP Snooping Binding Database Agent

      531
  • Displaying DHCP Snooping Information

    532
  • Understanding IP Source Guard

    532
    • Source IP Address Filtering

      533
    • Source IP and MAC Address Filtering

      533
    • IP Source Guard for Static Hosts

      533
  • Configuring IP Source Guard

    534
    • Default IP Source Guard Configuration

      534
    • IP Source Guard Configuration Guidelines

      534
    • Enabling IP Source Guard

      535
    • Configuring IP Source Guard for Static Hosts

      536
      • Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port

        536
  • Displaying IP Source Guard Information

    540
  • Understanding DHCP Server Port-Based Address Allocation

    540
  • Configuring DHCP Server Port-Based Address Allocation

    540
    • Default Port-Based Address Allocation Configuration

      541
    • Port-Based Address Allocation Configuration Guidelines

      541
    • Enabling DHCP Server Port-Based Address Allocation

      541
  • Displaying DHCP Server Port-Based Address Allocation

    543
• Configuring Dynamic ARP Inspection

  545
  • Understanding Dynamic ARP Inspection

    545
    • Interface Trust States and Network Security

      547
    • Rate Limiting of ARP Packets

      548
    • Relative Priority of ARP ACLs and DHCP Snooping Entries

      548
    • Logging of Dropped Packets

      549
  • Configuring Dynamic ARP Inspection

    549
    • Default Dynamic ARP Inspection Configuration

      549
    • Dynamic ARP Inspection Configuration Guidelines

      550
    • Configuring Dynamic ARP Inspection in DHCP Environments

      551
    • Configuring ARP ACLs for Non-DHCP Environments

      553
    • Limiting the Rate of Incoming ARP Packets

      555
    • Performing Validation Checks

      556
    • Configuring the Log Buffer

      557
  • Displaying Dynamic ARP Inspection Information

    559
• Configuring IGMP Snooping and MVR

  561
  • Understanding IGMP Snooping

    562
    • IGMP Versions

      563
    • Joining a Multicast Group

      563
    • Leaving a Multicast Group

      565
    • Immediate Leave

      565
    • IGMP Configurable-Leave Timer

      566
    • IGMP Report Suppression

      566
    • IGMP Snooping and Switch Stacks

      566
  • Configuring IGMP Snooping

    567
    • Default IGMP Snooping Configuration

      567
    • Enabling or Disabling IGMP Snooping

      567
    • Setting the Snooping Method

      568
    • Configuring a Multicast Router Port

      569
    • Configuring a Host Statically to Join a Group

      570
    • Enabling IGMP Immediate Leave

      570
    • Configuring the IGMP Leave Timer

      571
    • Configuring TCN-Related Commands

      572
      • Controlling the Multicast Flooding Time After a TCN Event

        572
      • Recovering from Flood Mode

        573
      • Disabling Multicast Flooding During a TCN Event

        573
    • Configuring the IGMP Snooping Querier

      574
    • Disabling IGMP Report Suppression

      575
  • Displaying IGMP Snooping Information

    576
  • Understanding Multicast VLAN Registration

    577
    • Using MVR in a Multicast Television Application

      578
  • Configuring MVR

    579
    • Default MVR Configuration

      579
    • MVR Configuration Guidelines and Limitations

      580
    • Configuring MVR Global Parameters

      580
    • Configuring MVR Interfaces

      581
  • Displaying MVR Information

    583
  • Configuring IGMP Filtering and Throttling

    583
    • Default IGMP Filtering and Throttling Configuration

      584
    • Configuring IGMP Profiles

      584
    • Applying IGMP Profiles

      585
    • Setting the Maximum Number of IGMP Groups

      586
    • Configuring the IGMP Throttling Action

      587
  • Displaying IGMP Filtering and Throttling Configuration

    588
• Configuring Port-Based Traffic Control

  589
  • Configuring Storm Control

    589
    • Understanding Storm Control

      589
    • Default Storm Control Configuration

      591
    • Configuring Storm Control and Threshold Levels

      591
    • Configuring Small-Frame Arrival Rate

      593
  • Configuring Protected Ports

    594
    • Default Protected Port Configuration

      594
    • Protected Port Configuration Guidelines

      595
    • Configuring a Protected Port

      595
  • Configuring Port Blocking

    595
    • Default Port Blocking Configuration

      596
    • Blocking Flooded Traffic on an Interface

      596
  • Configuring Port Security

    596
    • Understanding Port Security

      597
      • Secure MAC Addresses

        597
      • Security Violations

        598
    • Default Port Security Configuration

      599
    • Port Security Configuration Guidelines

      599
    • Enabling and Configuring Port Security

      601
    • Enabling and Configuring Port Security Aging

      605
    • Port Security and Switch Stacks

      606
  • Displaying Port-Based Traffic Control Settings

    606
• Configuring UDLD

  609
  • Understanding UDLD

    609
    • Modes of Operation

      609
    • Methods to Detect Unidirectional Links

      610
  • Configuring UDLD

    612
    • Default UDLD Configuration

      612
    • Configuration Guidelines

      612
    • Enabling UDLD Globally

      613
    • Enabling UDLD on an Interface

      614
    • Resetting an Interface Disabled by UDLD

      614
  • Displaying UDLD Status

    615
• Configuring CDP

  617
  • Understanding CDP

    617
    • CDP and Switch Stacks

      618
  • Configuring CDP

    618
    • Default CDP Configuration

      618
    • Configuring the CDP Characteristics

      619
    • Disabling and Enabling CDP

      619
    • Disabling and Enabling CDP on an Interface

      620
  • Monitoring and Maintaining CDP

    621
• Configuring LLDP, LLDP-MED, and Wired Location Service

  623
  • Understanding LLDP, LLDP-MED, and Wired Location Service

    623
    • LLDP

      623
    • LLDP-MED

      624
    • Wired Location Service

      625
  • Configuring LLDP, LLDP-MED, and Wired Location Service

    627
    • Default LLDP Configuration

      627
    • Configuration Guidelines

      627
    • Enabling LLDP

      628
    • Configuring LLDP Characteristics

      628
    • Configuring LLDP-MED TLVs

      629
    • Configuring Network-Policy TLV

      630
    • Configuring Location TLV and Wired Location Service

      631
  • Monitoring and Maintaining LLDP, LLDP-MED, and Wired Location Service

    633
• Configuring SPAN and RSPAN

  635
  • Understanding SPAN and RSPAN

    635
    • Local SPAN

      636
    • Remote SPAN

      637
    • SPAN and RSPAN Concepts and Terminology

      638
      • SPAN Sessions

        638
      • Monitored Traffic

        639
      • Source Ports

        640
      • Source VLANs

        641
      • VLAN Filtering

        641
      • Destination Port

        642
      • RSPAN VLAN

        643
    • SPAN and RSPAN Interaction with Other Features

      643
    • SPAN and RSPAN and Switch Stacks

      644
  • Configuring SPAN and RSPAN

    644
    • Default SPAN and RSPAN Configuration

      645
    • Configuring Local SPAN

      645
      • SPAN Configuration Guidelines

        645
      • Creating a Local SPAN Session

        646
      • Creating a Local SPAN Session and Configuring Incoming Traffic

        648
      • Specifying VLANs to Filter

        650
    • Configuring RSPAN

      651
      • RSPAN Configuration Guidelines

        651
      • Configuring a VLAN as an RSPAN VLAN

        652
      • Creating an RSPAN Source Session

        653
      • Creating an RSPAN Destination Session

        654
      • Creating an RSPAN Destination Session and Configuring Incoming Traffic

        655
      • Specifying VLANs to Filter

        657
  • Displaying SPAN and RSPAN Status

    658
• Configuring RMON

  659
  • Understanding RMON

    659
  • Configuring RMON

    660
    • Default RMON Configuration

      661
    • Configuring RMON Alarms and Events

      661
    • Collecting Group History Statistics on an Interface

      663
    • Collecting Group Ethernet Statistics on an Interface

      663
  • Displaying RMON Status

    664
• Configuring System Message Logging

  665
  • Understanding System Message Logging

    665
  • Configuring System Message Logging

    666
    • System Log Message Format

      666
    • Default System Message Logging Configuration

      668
    • Disabling Message Logging

      668
    • Setting the Message Display Destination Device

      669
    • Synchronizing Log Messages

      670
    • Enabling and Disabling Time Stamps on Log Messages

      672
    • Enabling and Disabling Sequence Numbers in Log Messages

      672
    • Defining the Message Severity Level

      673
    • Limiting Syslog Messages Sent to the History Table and to SNMP

      674
    • Enabling the Configuration-Change Logger

      675
    • Configuring UNIX Syslog Servers

      676
      • Logging Messages to a UNIX Syslog Daemon

        677
      • Configuring the UNIX System Logging Facility

        677
  • Displaying the Logging Configuration

    678
• Configuring SNMP

  679
  • Understanding SNMP

    679
    • SNMP Versions

      680
    • SNMP Manager Functions

      681
    • SNMP Agent Functions

      682
    • SNMP Community Strings

      682
    • Using SNMP to Access MIB Variables

      682
    • SNMP Notifications

      683
    • SNMP ifIndex MIB Object Values

      683
  • Configuring SNMP

    684
    • Default SNMP Configuration

      684
    • SNMP Configuration Guidelines

      685
    • Disabling the SNMP Agent

      685
    • Configuring Community Strings

      686
    • Configuring SNMP Groups and Users

      687
    • Configuring SNMP Notifications

      690
    • Setting the CPU Threshold Notification Types and Values

      693
    • Setting the Agent Contact and Location Information

      694
    • Limiting TFTP Servers Used Through SNMP

      694
    • SNMP Examples

      695
  • Displaying SNMP Status

    696
• Configuring Network Security with ACLs

  697
  • Understanding ACLs

    697
    • Supported ACLs

      698
      • Port ACLs

        699
      • Router ACLs

        700
    • Handling Fragmented and Unfragmented Traffic

      700
    • ACLs and Switch Stacks

      701
  • Configuring IPv4 ACLs

    702
    • Creating Standard and Extended IPv4 ACLs

      703
      • Access List Numbers

        703
      • Creating a Numbered Standard ACL

        704
      • Creating a Numbered Extended ACL

        705
      • Resequencing ACEs in an ACL

        709
      • Creating Named Standard and Extended ACLs

        709
      • Using Time Ranges with ACLs

        711
      • Including Comments in ACLs

        712
    • Applying an IPv4 ACL to a Terminal Line

      713
    • Applying an IPv4 ACL to an Interface

      714
    • Hardware and Software Treatment of IP ACLs

      715
    • Troubleshooting ACLs

      715
    • IPv4 ACL Configuration Examples

      716
      • Numbered ACLs

        717
      • Extended ACLs

        717
      • Named ACLs

        717
      • Time Range Applied to an IP ACL

        717
      • Commented IP ACL Entries

        718
  • Creating Named MAC Extended ACLs

    718
    • Applying a MAC ACL to a Layer 2 Interface

      719
  • Displaying IPv4 ACL Configuration

    720
• Configuring Cisco IOS IP SLAs Operations

  723
  • Understanding Cisco IOS IP SLAs

    724
    • Using Cisco IOS IP SLAs to Measure Network Performance

      725
    • IP SLAs Responder and IP SLAs Control Protocol

      726
    • Response Time Computation for IP SLAs

      726
  • Configuring IP SLAs Operations

    727
    • Default Configuration

      727
    • Configuration Guidelines

      727
    • Configuring the IP SLAs Responder

      728
  • Monitoring IP SLAs Operations

    728
• Configuring QoS

  729
  • Understanding QoS

    730
    • Basic QoS Model

      732
    • Classification

      733
      • Classification Based on QoS ACLs

        736
      • Classification Based on Class Maps and Policy Maps

        736
    • Policing and Marking

      737
      • Policing on Physical Ports

        738
    • Mapping Tables

      739
    • Queueing and Scheduling Overview

      740
      • Weighted Tail Drop

        741
      • SRR Shaping and Sharing

        742
      • Queueing and Scheduling on Ingress Queues

        743
      • Queueing and Scheduling on Egress Queues

        745
    • Packet Modification

      748
  • Configuring Auto-QoS

    749
    • Generated Auto-QoS Configuration

      750
      • VOIP Device Specifics

        750
      • Enhanced Auto-QoS for Video, Trust, and Classification

        751
      • Auto-QoS Configuration Migration

        752
      • Global Auto-QoS Configuration

        753
      • Auto-QoS Generated Configuration For VoIP Devices

        756
      • Auto-QoS Generated Configuration For Enhanced Video, Trust, and Classify Devices

        757
    • Effects of Auto-QoS on the Configuration

      760
    • Auto-QoS Configuration Guidelines

      760
      • Auto-QoS Enhanced Considerations

        761
    • Enabling Auto-QoS

      761
    • Troubleshooting Auto QoS Commands

      762
  • Displaying Auto-QoS Information

    763
  • Configuring Standard QoS

    763
    • Default Standard QoS Configuration

      764
      • Default Ingress Queue Configuration

        764
      • Default Egress Queue Configuration

        765
      • Default Mapping Table Configuration

        766
    • Standard QoS Configuration Guidelines

      766
      • QoS ACL Guidelines

        766
      • Policing Guidelines

        767
      • General QoS Guidelines

        767
    • Enabling QoS Globally

      768
    • Configuring Classification Using Port Trust States

      768
      • Configuring the Trust State on Ports within the QoS Domain

        768
      • Configuring the CoS Value for an Interface

        770
      • Configuring a Trusted Boundary to Ensure Port Security

        771
      • Enabling DSCP Transparency Mode

        772
      • Configuring the DSCP Trust State on a Port Bordering Another QoS Domain

        773
    • Configuring a QoS Policy

      775
      • Classifying Traffic by Using ACLs

        776
      • Classifying Traffic by Using Class Maps

        779
      • Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps

        781
      • Classifying, Policing, and Marking Traffic by Using Aggregate Policers

        786
    • Configuring DSCP Maps

      789
      • Configuring the CoS-to-DSCP Map

        789
      • Configuring the IP-Precedence-to-DSCP Map

        790
      • Configuring the Policed-DSCP Map

        791
      • Configuring the DSCP-to-CoS Map

        792
      • Configuring the DSCP-to-DSCP-Mutation Map

        793
    • Configuring Ingress Queue Characteristics

      795
      • Mapping DSCP or CoS Values to an Ingress Queue and Setting WTD Thresholds

        795
      • Allocating Buffer Space Between the Ingress Queues

        797
      • Allocating Bandwidth Between the Ingress Queues

        798
      • Configuring the Ingress Priority Queue

        799
    • Configuring Egress Queue Characteristics

      800
      • Configuration Guidelines

        800
      • Allocating Buffer Space to and Setting WTD Thresholds for an Egress Queue-Set

        800
      • Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID

        802
      • Configuring SRR Shaped Weights on Egress Queues

        804
      • Configuring SRR Shared Weights on Egress Queues

        805
      • Configuring the Egress Expedite Queue

        806
      • Limiting the Bandwidth on an Egress Interface

        806
  • Displaying Standard QoS Information

    807
• Configuring Static IP Unicast Routing

  809
  • Understanding IP Routing

    809
    • Types of Routing

      810
    • IP Routing and Switch Stacks

      810
  • Steps for Configuring Routing

    811
  • Enabling IP Unicast Routing

    812
  • Assigning IP Addresses to SVIs

    812
  • Configuring Static Unicast Routes

    813
  • Monitoring and Maintaining the IP Network

    813
• Configuring IPv6 Host Functions

  815
  • Understanding IPv6

    815
    • IPv6 Addresses

      816
    • Supported IPv6 Host Features

      816
      • 128-Bit Wide Unicast Addresses

        817
      • DNS for IPv6

        817
      • ICMPv6

        817
      • Neighbor Discovery

        817
      • IPv6 Stateless Autoconfiguration and Duplicate Address Detection

        818
      • IPv6 Applications

        818
      • Dual IPv4 and IPv6 Protocol Stacks

        818
      • SNMP and Syslog Over IPv6

        819
      • HTTP(S) Over IPv6

        819
    • IPv6 and Switch Stacks

      820
  • Configuring IPv6

    820
    • Default IPv6 Configuration

      820
    • Configuring IPv6 Addressing and Enabling IPv6 Host

      821
    • Configuring IPv6 ICMP Rate Limiting

      823
    • Configuring Static Routes for IPv6

      824
  • Displaying IPv6

    825
• Configuring IPv6 MLD Snooping

  829
  • Understanding MLD Snooping

    830
    • MLD Messages

      831
    • MLD Queries

      831
    • Multicast Client Aging Robustness

      831
    • Multicast Router Discovery

      832
    • MLD Reports

      832
    • MLD Done Messages and Immediate-Leave

      832
    • Topology Change Notification Processing

      833
    • MLD Snooping in Switch Stacks

      833
  • Configuring IPv6 MLD Snooping

    833
    • Default MLD Snooping Configuration

      834
    • MLD Snooping Configuration Guidelines

      834
    • Enabling or Disabling MLD Snooping

      835
    • Configuring a Static Multicast Group

      836
    • Configuring a Multicast Router Port

      836
    • Enabling MLD Immediate Leave

      837
    • Configuring MLD Snooping Queries

      838
    • Disabling MLD Listener Message Suppression

      839
  • Displaying MLD Snooping Information

    840
• Configuring EtherChannels and Link-State Tracking

  841
  • Understanding EtherChannels

    842
    • EtherChannel Overview

      842
    • Port-Channel Interfaces

      844
    • Port Aggregation Protocol

      845
      • PAgP Modes

        846
      • PAgP Interaction with Virtual Switches and Dual-Active Detection

        846
      • PAgP Interaction with Other Features

        847
    • Link Aggregation Control Protocol

      847
      • LACP Modes

        847
      • LACP Interaction with Other Features

        848
    • EtherChannel On Mode

      848
    • Load Balancing and Forwarding Methods

      848
    • EtherChannel and Switch Stacks

      850
  • Configuring EtherChannels

    851
    • Default EtherChannel Configuration

      851
    • EtherChannel Configuration Guidelines

      852
    • Configuring Layer 2 EtherChannels

      853
    • Configuring EtherChannel Load Balancing

      855
    • Configuring the PAgP Learn Method and Priority

      856
    • Configuring LACP Hot-Standby Ports

      858
      • Configuring the LACP System Priority

        858
      • Configuring the LACP Port Priority

        859
  • Displaying EtherChannel, PAgP, and LACP Status

    860
  • Understanding Link-State Tracking

    860
  • Configuring Link-State Tracking

    863
    • Default Link-State Tracking Configuration

      863
    • Link-State Tracking Configuration Guidelines

      863
    • Configuring Link-State Tracking

      863
    • Displaying Link-State Tracking Status

      864
• Troubleshooting

  865
  • Recovering from a Software Failure

    866
  • Recovering from a Lost or Forgotten Password

    867
    • Procedure with Password Recovery Enabled

      868
    • Procedure with Password Recovery Disabled

      870
  • Preventing Switch Stack Problems

    872
  • Recovering from a Command Switch Failure

    872
    • Replacing a Failed Command Switch with a Cluster Member

      873
    • Replacing a Failed Command Switch with Another Switch

      875
  • Recovering from Lost Cluster Member Connectivity

    876
  • Preventing Autonegotiation Mismatches

    876
  • Troubleshooting Power over Ethernet Switch Ports

    877
    • Disabled Port Caused by Power Loss

      877
    • Disabled Port Caused by False Link Up

      877
  • SFP Module Security and Identification

    877
  • Monitoring SFP Module Status

    878
  • Using Ping

    878
    • Understanding Ping

      878
    • Executing Ping

      879
  • Using Layer 2 Traceroute

    879
    • Understanding Layer 2 Traceroute

      880
    • Usage Guidelines

      880
    • Displaying the Physical Path

      881
  • Using IP Traceroute

    881
    • Understanding IP Traceroute

      881
    • Executing IP Traceroute

      882
  • Using TDR

    883
    • Understanding TDR

      883
    • Running TDR and Displaying the Results

      883
  • Using Debug Commands

    884
    • Enabling Debugging on a Specific Feature

      884
    • Enabling All-System Diagnostics

      885
    • Redirecting Debug and Error Message Output

      885
  • Using the show platform forward Command

    886
  • Using the crashinfo Files

    887
    • Basic crashinfo Files

      887
    • Extended crashinfo Files

      888
  • Using On-Board Failure Logging

    888
    • Understanding OBFL

      888
    • Configuring OBFL

      889
    • Displaying OBFL Information

      890
  • Memory Consistency Check Routines

    890
    • Displaying TCAM Memory Consistency Check Errors

      891
  • Troubleshooting Tables

    891
    • Troubleshooting CPU Utilization

      892
      • Possible Symptoms of High CPU Utilization

        892
      • Verifying the Problem and Cause

        892
    • Troubleshooting Power over Ethernet (PoE)

      893
    • Troubleshooting Switch Stacks

      896
• Configuring Online Diagnostics

  899
  • Understanding How Online Diagnostics Work

    899
  • Scheduling Online Diagnostics

    900
  • Configuring Health-Monitoring Diagnostics

    900
  • Running Online Diagnostic Tests

    901
    • Starting Online Diagnostic Tests

      901
  • Displaying Online Diagnostic Tests and Test Results

    902
• Working with the Cisco IOS File System, Configuration Files, and Software Images

  905
  • Working with the Flash File System

    905
    • Displaying Available File Systems

      906
    • Setting the Default File System

      907
    • Displaying Information about Files on a File System

      907
    • Changing Directories and Displaying the Working Directory

      908
    • Creating and Removing Directories

      908
    • Copying Files

      909
    • Deleting Files

      909
    • Creating, Displaying, and Extracting tar Files

      910
      • Creating a tar File

        910
      • Displaying the Contents of a tar File

        911
      • Extracting a tar File

        911
    • Displaying the Contents of a File

      912
  • Working with Configuration Files

    912
    • Guidelines for Creating and Using Configuration Files

      913
    • Configuration File Types and Location n

      914
    • Creating a Configuration File By Using a Text Editor

      914
    • Copying Configuration Files By Using TFTP

      914
      • Preparing to Download or Upload a Configuration File B y Using TFTP

        915
      • Downloading the Configuration File By Using TFTP

        915
      • Uploading the Configuration File By Using TFTP

        916
    • Copying Configuration Files By Using FTP

      916
      • Preparing to Download or Upload a Configuration File By Using FTP

        917
      • Downloading a Configuration File By Using FTP

        917
      • Uploading a Configuration File By Using FTP

        919
    • Copying Configuration Files By Using RCP

      919
      • Preparing to Download or Upload a Configuration File By Using RCP

        920
      • Downloading a Configuration File By Using RCP

        921
      • Uploading a Configuration File By Using RCP

        922
    • Clearing Configuration Information

      923
      • Clearing the Startup Configuration File

        923
      • Deleting a Stored Configuration File

        923
    • Replacing and Rolling Back Configurations

      923
      • Understanding Configuration Replacement and Rollback

        923
      • Configuration Guidelines

        925
      • Configuring the Configuration Archive

        925
      • Performing a Configuration Replacement or Rollback Operation

        926
  • Working with Software Images

    927
    • Image Location on the Switch

      928
    • tar File Format of Images on a Server or Cisco.com

      928
    • Copying Image Files By Using TFTP

      929
      • Preparing to Download or Upload an Image File By Using TFTP

        929
      • Downloading an Image File By Using TFTP

        930
      • Uploading an Image File By Using TFTP

        932
    • Copying Image Files By Using FTP

      932
      • Preparing to Download or Upload an Image File By Using FTP

        933
      • Downloading an Image File By Using FTP

        934
      • Uploading an Image File By Using FTP

        936
    • Copying Image Files By Using RCP

      937
      • Preparing to Download or Upload an Image File By Using RCP

        937
      • Downloading an Image File By Using RCP

        938
      • Uploading an Image File By Using RCP

        940
    • Copying an Image File from One Stack Member to Another

      941
• Supported MIBs

  943
  • MIB List

    943
  • Using FTP to Access the MIB Files

    946
• Unsupported Commands in Cisco IOS Release 12.2(55)SE

  947
  • Access Control Lists

    947
    • Unsupported Privileged EXEC Commands

      947
    • Unsupported Global Configuration Commands

      948
    • Unsupported Route-Map Configuration Commands

      948
  • Boot Loader Commands

    948
    • Unsupported Global Configuration Commands

      948
  • Debug Commands

    948
    • Unsupported Privileged EXEC Commands

      948
  • IGMP Snooping Commands

    948
    • Unsupported Global Configuration Commands

      948
  • Interface Commands

    949
    • Unsupported Privileged EXEC Commands

      949
    • Unsupported Global Configuration Commands

      949
    • Unsupported Interface Configuration Commands

      949
  • MAC Address Commands

    949
    • Unsupported Privileged EXEC Commands

      949
    • Unsupported Global Configuration Commands

      949
  • Miscellaneous

    950
    • Unsupported User EXEC Commands

      950
    • Unsupported Privileged EXEC Commands

      950
    • Unsupported Global Configuration Commands

      950
  • Network Address Translation (NAT) Commands

    950
    • Unsupported Privileged EXEC Commands

      950
  • QoS

    950
    • Unsupported Global Configuration Command

      950
    • Unsupported Interface Configuration Commands

      951
    • Unsupported Policy-Map Configuration Command

      951
  • RADIUS

    951
    • Unsupported Global Configuration Commands

      951
  • SNMP

    951
    • Unsupported Global Configuration Commands

      951
  • SNMPv3

    952
    • Unsupported 3DES Encryption Commands

      952
  • Spanning Tree

    952
    • Unsupported Global Configuration Command

      952
    • Unsupported Interface Configuration Command

      952
  • VLAN

    952
    • Unsupported Global Configuration Command

      952
    • Unsupported vlan-config Command

      952
    • Unsupported User EXEC Commands

      952
    • Unsupported vlan-config Command

      952
    • Unsupported VLAN Database Commands

      953
  • VTP

    953
    • Unsupported Privileged EXEC Commands

      953
• Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 2960 Switch

  955
  • Configuration Compatibility Issues

    955
  • Feature Behavior Incompatibilities

    959
• Index

  961