Benutzerhandbuch für Cisco Systems 3560

Inhaltsverzeichnis

• Catalyst 3560 Switch Software Configuration Guide

  1
• Contents

  3
• Preface

  47
• Overview

  51
  • Features

    51
    • Ease-of-Deployment and Ease-of-Use Features

      52
    • Performance Features

      53
    • Management Options

      54
    • Manageability Features

      55
    • Availability and Redundancy Features

      57
    • VLAN Features

      57
    • Security Features

      58
    • QoS and CoS Features

      61
    • Layer 3 Features

      62
    • Power over Ethernet Features

      63
    • Monitoring Features

      63
  • Default Settings After Initial Switch Configuration

    64
  • Network Configuration Examples

    67
    • Design Concepts for Using the Switch

      67
    • Small to Medium-Sized Network Using Catalyst 3560 Switches

      70
    • Large Network Using Catalyst 3560 Switches

      71
    • Long-Distance, High-Bandwidth Transport Configuration

      73
  • Where to Go Next

    73
• Using the Command-Line Interface

  75
  • Understanding Command Modes

    75
  • Understanding the Help System

    77
  • Understanding Abbreviated Commands

    78
  • Understanding no and default Forms of Commands

    78
  • Understanding CLI Error Messages

    79
  • Using Configuration Logging

    79
  • Using Command History

    80
    • Changing the Command History Buffer Size

      80
    • Recalling Commands

      80
    • Disabling the Command History Feature

      81
  • Using Editing Features

    81
    • Enabling and Disabling Editing Features

      81
    • Editing Commands through Keystrokes

      81
    • Editing Command Lines that Wrap

      83
  • Searching and Filtering Output of show and more Commands

    84
  • Accessing the CLI

    84
    • Accessing the CLI through a Console Connection or through Telnet

      84
• Assigning the Switch IP Address and Default Gateway

  85
  • Understanding the Boot Process

    85
  • Assigning Switch Information

    86
    • Default Switch Information

      87
    • Understanding DHCP-Based Autoconfiguration

      87
      • DHCP Client Request Process

        88
    • Understanding DHCP-based Autoconfiguration and Image Update

      89
      • DHCP Autoconfiguration

        89
      • DHCP Auto-Image Update

        89
      • Limitations and Restrictions

        89
    • Configuring DHCP-Based Autoconfiguration

      90
      • DHCP Server Configuration Guidelines

        90
      • Configuring the TFTP Server

        91
      • Configuring the DNS

        91
      • Configuring the Relay Device

        92
      • Obtaining Configuration Files

        92
      • Example Configuration

        93
    • Configuring the DHCP Auto Configuration and Image Update Features

      95
      • Configuring DHCP Autoconfiguration (Only Configuration File)

        95
      • Configuring DHCP Auto-Image Update (Configuration File and Image)

        96
      • Configuring the Client

        97
    • Manually Assigning IP Information

      98
  • Checking and Saving the Running Configuration

    99
  • Modifying the Startup Configuration

    100
    • Default Boot Configuration

      100
    • Automatically Downloading a Configuration File

      100
    • Specifying the Filename to Read and Write the System Configuration

      100
    • Booting Manually

      101
    • Booting a Specific Software Image

      102
    • Controlling Environment Variables

      102
  • Scheduling a Reload of the Software Image

    104
    • Configuring a Scheduled Reload

      104
    • Displaying Scheduled Reload Information

      105
• Configuring Cisco EnergyWise

  107
  • Managing Single Entities

    107
    • EnergyWise Entity

      107
    • EnergyWise Domain

      108
    • EnergyWise Network

      108
    • Single PoE Switch Scenario

      109
    • EnergyWise Power Level

      110
    • EnergyWise Importance

      111
    • EnergyWise Names, Roles, and Keywords

      111
    • Configuration Guidelines

      111
    • PoE and EnergyWise Interactions

      111
    • Manually Managing Power

      112
      • Powering the Entity

        112
      • Configuring Entity Attributes

        113
      • Powering the PoE Port

        114
      • Configuring PoE-Port Attributes

        114
    • Automatically Managing Power (Recurrence)

      115
    • Examples

      117
      • Setting Up the Domain

        117
      • Manually Managing Power

        118
      • Automatically Managing Power

        118
  • Managing Multiple Entities

    118
    • Multiple PoE Switch Scenario

      119
    • EnergyWise Query

      119
    • Using Queries to Manage Power in the Domain

      120
    • Examples

      121
      • Querying with the Name Attribute

        121
      • Querying with Keywords

        122
      • Querying to Set Power Levels

        122
  • Troubleshooting EnergyWise

    122
    • Using CLI Commands

      123
    • Verifying the Power Usage

      123
  • Additional Information

    124
    • Managing Power in a LAN

      124
    • Managing Power with IP Routing

      124
• Configuring Cisco IOS Configuration Engine

  127
  • Understanding Cisco Configuration Engine Software

    127
    • Configuration Service

      128
    • Event Service

      129
      • NameSpace Mapper

        129
    • What You Should Know About the CNS IDs and Device Hostnames

      129
      • ConfigID

        129
      • DeviceID

        130
      • Hostname and DeviceID

        130
      • Using Hostname, DeviceID, and ConfigID

        130
  • Understanding Cisco IOS Agents

    131
    • Initial Configuration

      131
    • Incremental (Partial) Configuration

      132
    • Synchronized Configuration

      132
  • Configuring Cisco IOS Agents

    132
    • Enabling Automated CNS Configuration

      132
    • Enabling the CNS Event Agent

      133
    • Enabling the Cisco IOS CNS Agent

      135
      • Enabling an Initial Configuration

        135
      • Enabling a Partial Configuration

        139
  • Displaying CNS Configuration

    140
• Clustering Switches

  141
  • Understanding Switch Clusters

    141
    • Cluster Command Switch Characteristics

      143
    • Standby Cluster Command Switch Characteristics

      143
    • Candidate Switch and Cluster Member Switch Characteristics

      143
  • Planning a Switch Cluster

    144
    • Automatic Discovery of Cluster Candidates and Members

      144
      • Discovery Through CDP Hops

        145
      • Discovery Through Non-CDP-Capable and Noncluster-Capable Devices

        146
      • Discovery Through Different VLANs

        146
      • Discovery Through Different Management VLANs

        147
      • Discovery Through Routed Ports

        148
      • Discovery of Newly Installed Switches

        149
    • HSRP and Standby Cluster Command Switches

      150
      • Virtual IP Addresses

        150
      • Other Considerations for Cluster Standby Groups

        151
      • Automatic Recovery of Cluster Configuration

        152
    • IP Addresses

      153
    • Hostnames

      153
    • Passwords

      153
    • SNMP Community Strings

      154
    • TACACS+ and RADIUS

      154
    • LRE Profiles

      154
  • Using the CLI to Manage Switch Clusters

    155
    • Catalyst 1900 and Catalyst 2820 CLI Considerations

      155
  • Using SNMP to Manage Switch Clusters

    155
• Administering the Switch

  157
  • Managing the System Time and Date

    157
    • Understanding the System Clock

      157
    • Understanding Network Time Protocol

      158
    • Configuring NTP

      159
      • Default NTP Configuration

        160
      • Configuring NTP Authentication

        160
      • Configuring NTP Associations

        161
      • Configuring NTP Broadcast Service

        162
      • Configuring NTP Access Restrictions

        164
      • Configuring the Source IP Address for NTP Packets

        166
      • Displaying the NTP Configuration

        167
    • Configuring Time and Date Manually

      167
      • Setting the System Clock

        167
      • Displaying the Time and Date Configuration

        168
      • Configuring the Time Zone

        168
      • Configuring Summer Time (Daylight Saving Time)

        169
  • Configuring a System Name and Prompt

    170
    • Default System Name and Prompt Configuration

      171
    • Configuring a System Name

      171
    • Understanding DNS

      171
      • Default DNS Configuration

        172
      • Setting Up DNS

        172
      • Displaying the DNS Configuration

        173
  • Creating a Banner

    173
    • Default Banner Configuration

      173
    • Configuring a Message-of-the-Day Login Banner

      174
    • Configuring a Login Banner

      174
  • Managing the MAC Address Table

    175
    • Building the Address Table

      176
    • MAC Addresses and VLANs

      176
    • Default MAC Address Table Configuration

      177
    • Changing the Address Aging Time

      177
    • Removing Dynamic Address Entries

      178
    • Configuring MAC Address Notification Traps

      178
    • Adding and Removing Static Address Entries

      180
    • Configuring Unicast MAC Address Filtering

      181
    • Disabling MAC Address Learning on a VLAN

      182
    • Displaying Address Table Entries

      183
  • Managing the ARP Table

    184
• Configuring SDM Templates

  185
  • Understanding the SDM Templates

    185
    • Dual IPv4 and IPv6 SDM Templates

      186
  • Configuring the Switch SDM Template

    187
    • Default SDM Template

      187
    • SDM Template Configuration Guidelines

      187
    • Setting the SDM Template

      188
  • Displaying the SDM Templates

    189
• Configuring Switch-Based Authentication

  191
  • Preventing Unauthorized Access to Your Switch

    191
  • Protecting Access to Privileged EXEC Commands

    192
    • Default Password and Privilege Level Configuration

      192
    • Setting or Changing a Static Enable Password

      193
    • Protecting Enable and Enable Secret Passwords with Encryption

      193
    • Disabling Password Recovery

      195
    • Setting a Telnet Password for a Terminal Line

      196
    • Configuring Username and Password Pairs

      196
    • Configuring Multiple Privilege Levels

      197
      • Setting the Privilege Level for a Command

        198
      • Changing the Default Privilege Level for Lines

        199
      • Logging into and Exiting a Privilege Level

        199
  • Controlling Switch Access with TACACS+

    200
    • Understanding TACACS+

      200
    • TACACS+ Operation

      202
    • Configuring TACACS+

      202
      • Default TACACS+ Configuration

        203
      • Identifying the TACACS+ Server Host and Setting the Authentication Key

        203
      • Configuring TACACS+ Login Authentication

        204
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services

        206
      • Starting TACACS+ Accounting

        207
    • Displaying the TACACS+ Configuration

      207
  • Controlling Switch Access with RADIUS

    207
    • Understanding RADIUS

      208
    • RADIUS Operation

      209
    • Configuring RADIUS

      209
      • Default RADIUS Configuration

        210
      • Identifying the RADIUS Server Host

        210
      • Configuring RADIUS Login Authentication

        213
      • Defining AAA Server Groups

        215
      • Configuring RADIUS Authorization for User Privileged Access and Network Services

        217
      • Starting RADIUS Accounting

        218
      • Configuring Settings for All RADIUS Servers

        219
      • Configuring the Switch to Use Vendor-Specific RADIUS Attributes

        219
      • Configuring the Switch for Vendor-Proprietary RADIUS Server Communication

        221
      • Configuring RADIUS Server Load Balancing

        221
    • Displaying the RADIUS Configuration

      222
  • Controlling Switch Access with Kerberos

    222
    • Understanding Kerberos

      222
    • Kerberos Operation

      224
      • Authenticating to a Boundary Switch

        225
      • Obtaining a TGT from a KDC

        225
      • Authenticating to Network Services

        225
    • Configuring Kerberos

      225
  • Configuring the Switch for Local Authentication and Authorization

    226
  • Configuring the Switch for Secure Shell

    227
    • Understanding SSH

      228
      • SSH Servers, Integrated Clients, and Supported Versions

        228
      • Limitations

        229
    • Configuring SSH

      229
      • Configuration Guidelines

        229
      • Setting Up the Switch to Run SSH

        229
      • Configuring the SSH Server

        230
    • Displaying the SSH Configuration and Status

      231
  • Configuring the Switch for Secure Socket Layer HTTP

    232
    • Understanding Secure HTTP Servers and Clients

      232
      • Certificate Authority Trustpoints

        232
      • CipherSuites

        234
    • Configuring Secure HTTP Servers and Clients

      234
      • Default SSL Configuration

        235
      • SSL Configuration Guidelines

        235
      • Configuring a CA Trustpoint

        235
      • Configuring the Secure HTTP Server

        236
      • Configuring the Secure HTTP Client

        237
    • Displaying Secure HTTP Server and Client Status

      238
  • Configuring the Switch for Secure Copy Protocol

    238
    • Information About Secure Copy

      239
• Configuring IEEE 802.1x Port-Based Authentication

  241
  • Understanding IEEE 802.1x Port-Based Authentication

    241
    • Device Roles

      242
    • Authentication Process

      243
    • Authentication Initiation and Message Exchange

      245
    • Authentication Manager

      247
      • Port-Based Authentication Methods

        247
      • Per-User ACLs and Filter-Ids

        248
      • Authentication Manager CLI Commands

        248
    • Ports in Authorized and Unauthorized States

      249
    • 802.1x Host Mode

      250
    • Multidomain Authentication

      251
    • 802.1x Multiple Authentication Mode

      252
    • 802.1x Accounting

      252
    • 802.1x Accounting Attribute-Value Pairs

      253
    • 802.1x Readiness Check

      254
    • 802.1x Authentication with VLAN Assignment

      254
    • Using 802.1x Authentication with Per-User ACLs

      255
    • 802.1x Authentication with Downloadable ACLs and Redirect URLs

      256
      • Cisco Secure ACS and Attribute-Value Pairs for the Redirect URL

        257
      • Cisco Secure ACS and Attribute-Value Pairs for Downloadable ACLs

        257
    • 802.1x Authentication with Guest VLAN

      257
    • 802.1x Authentication with Restricted VLAN

      258
    • 802.1x Authentication with Inaccessible Authentication Bypass

      259
    • 802.1x Authentication with Voice VLAN Ports

      261
    • 802.1x Authentication with Port Security

      261
    • 802.1x Authentication with Wake-on-LAN

      262
    • 802.1x Authentication with MAC Authentication Bypass

      263
    • Network Admission Control Layer 2 802.1x Validation

      264
    • Flexible Authentication Ordering

      264
    • Open1x Authentication

      265
    • Using Voice Aware 802.1x Security

      265
    • 802.1x Switch Supplicant with Network Edge Access Topology (NEAT)

      265
    • Web Authentication

      266
      • Web Authentication with Automatic MAC Check

        267
      • Local Web Authentication Banner

        267
  • Configuring 802.1x Authentication

    269
    • Default 802.1x Authentication Configuration

      270
    • 802.1x Authentication Configuration Guidelines

      271
      • 802.1x Authentication

        271
      • VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass

        272
      • MAC Authentication Bypass

        273
      • Maximum Number of Allowed Devices Per Port

        273
    • Configuring 802.1x Readiness Check

      274
    • Configuring Voice Aware 802.1x Security

      275
    • Configuring 802.1x Violation Modes

      276
    • Configuring 802.1x Authentication

      277
    • Configuring the Switch-to-RADIUS-Server Communication

      278
    • Configuring the Host Mode

      280
    • Configuring Periodic Re-Authentication

      281
    • Manually Re-Authenticating a Client Connected to a Port

      282
    • Changing the Quiet Period

      282
    • Changing the Switch-to-Client Retransmission Time

      283
    • Setting the Switch-to-Client Frame-Retransmission Number

      284
    • Setting the Re-Authentication Number

      284
    • Configuring 802.1x Accounting

      285
    • Configuring a Guest VLAN

      286
    • Configuring a Restricted VLAN

      287
    • Configuring the Inaccessible Authentication Bypass Feature

      289
    • Configuring 802.1x Authentication with WoL

      291
    • Configuring MAC Authentication Bypass

      292
    • Configuring NAC Layer 2 802.1x Validation

      293
    • Configuring 802.1x Switch Supplicant with NEAT

      294
    • Configuring 802.1x Authentication with Downloadable ACLs and Redirect URLs

      296
      • Configuring Downloadable ACLs

        296
      • Configuring a Downloadable Policy

        297
    • Configuring Flexible Authentication Ordering

      298
    • Configuring Open1x

      299
    • Configuring Web Authentication

      299
    • Configuring a Web Authentication Local Banner

      303
    • Disabling 802.1x Authentication on the Port

      303
    • Resetting the 802.1x Authentication Configuration to the Default Values

      304
  • Displaying 802.1x Statistics and Status

    304
• Configuring Interface Characteristics

  305
  • Understanding Interface Types

    305
    • Port-Based VLANs

      306
    • Switch Ports

      306
      • Access Ports

        307
      • Trunk Ports

        307
      • Tunnel Ports

        307
    • Routed Ports

      308
    • Switch Virtual Interfaces

      308
      • SVI Autostate Exclude

        309
    • EtherChannel Port Groups

      310
    • Dual-Purpose Uplink Ports

      310
    • Power over Ethernet Ports

      311
      • Supported Protocols and Standards

        311
      • Powered-Device Detection and Initial Power Allocation

        311
      • Power Management Modes

        312
    • Connecting Interfaces

      313
  • Using Interface Configuration Mode

    314
    • Procedures for Configuring Interfaces

      315
    • Configuring a Range of Interfaces

      315
    • Configuring and Using Interface Range Macros

      317
  • Configuring Ethernet Interfaces

    318
    • Default Ethernet Interface Configuration

      319
    • Setting the Type of a Dual-Purpose Uplink Port

      320
    • Configuring Interface Speed and Duplex Mode

      321
      • Speed and Duplex Configuration Guidelines

        322
      • Setting the Interface Speed and Duplex Parameters

        322
    • Configuring IEEE 802.3x Flow Control

      324
    • Configuring Auto-MDIX on an Interface

      325
    • Configuring a Power Management Mode on a PoE Port

      326
    • Budgeting Power for Devices Connected to a PoE Port

      327
    • Adding a Description for an Interface

      328
  • Configuring Layer 3 Interfaces

    329
    • Configuring SVI Autostate Exclude

      331
  • Configuring the System MTU

    331
  • Monitoring and Maintaining the Interfaces

    333
    • Monitoring Interface Status

      333
    • Clearing and Resetting Interfaces and Counters

      334
    • Shutting Down and Restarting the Interface

      335
• Configuring Auto Smartports Macros

  337
  • Understanding Auto Smartports and Static Smartports Macros

    337
  • Configuring Auto Smartports

    338
    • Default Auto Smartports Configuration

      338
    • Auto Smartports Configuration Guidelines

      339
    • Enabling Auto Smartports

      339
    • Configuring Auto Smartports Built-in Macros

      340
    • Configuring Event Triggers

      342
    • Configuring Auto Smartports User-Defined Macros

      345
  • Configuring Static Smartports Macros

    347
    • Default Static Smartports Configuration

      347
    • Static Smartports Configuration Guidelines

      348
    • Applying Static Smartports Macros

      348
  • Displaying Auto Smartports and Static Smartports Macros

    350
• Configuring VLANs

  351
  • Understanding VLANs

    351
    • Supported VLANs

      352
    • VLAN Port Membership Modes

      353
  • Configuring Normal-Range VLANs

    354
    • Token Ring VLANs

      356
    • Normal-Range VLAN Configuration Guidelines

      356
    • VLAN Configuration Mode Options

      357
      • VLAN Configuration in config-vlan Mode

        357
      • VLAN Configuration in VLAN Database Configuration Mode

        357
    • Saving VLAN Configuration

      357
    • Default Ethernet VLAN Configuration

      358
    • Creating or Modifying an Ethernet VLAN

      359
    • Deleting a VLAN

      360
    • Assigning Static-Access Ports to a VLAN

      361
  • Configuring Extended-Range VLANs

    362
    • Default VLAN Configuration

      362
    • Extended-Range VLAN Configuration Guidelines

      363
    • Creating an Extended-Range VLAN

      363
    • Creating an Extended-Range VLAN with an Internal VLAN ID

      365
  • Displaying VLANs

    366
  • Configuring VLAN Trunks

    366
    • Trunking Overview

      366
      • Encapsulation Types

        368
      • IEEE 802.1Q Configuration Considerations

        369
    • Default Layer 2 Ethernet Interface VLAN Configuration

      369
    • Configuring an Ethernet Interface as a Trunk Port

      369
      • Interaction with Other Features

        370
      • Configuring a Trunk Port

        370
      • Defining the Allowed VLANs on a Trunk

        371
      • Changing the Pruning-Eligible List

        373
      • Configuring the Native VLAN for Untagged Traffic

        373
    • Configuring Trunk Ports for Load Sharing

      374
      • Load Sharing Using STP Port Priorities

        374
      • Load Sharing Using STP Path Cost

        376
  • Configuring VMPS

    377
    • Understanding VMPS

      378
      • Dynamic-Access Port VLAN Membership

        378
    • Default VMPS Client Configuration

      379
    • VMPS Configuration Guidelines

      379
    • Configuring the VMPS Client

      380
      • Entering the IP Address of the VMPS

        380
      • Configuring Dynamic-Access Ports on VMPS Clients

        380
      • Reconfirming VLAN Memberships

        381
      • Changing the Reconfirmation Interval

        381
      • Changing the Retry Count

        382
    • Monitoring the VMPS

      382
    • Troubleshooting Dynamic-Access Port VLAN Membership

      383
    • VMPS Configuration Example

      383
• Configuring Voice VLAN

  385
  • Understanding Voice VLAN

    385
    • Cisco IP Phone Voice Traffic

      386
    • Cisco IP Phone Data Traffic

      386
  • Configuring Voice VLAN

    387
    • Default Voice VLAN Configuration

      387
    • Voice VLAN Configuration Guidelines

      387
    • Configuring a Port Connected to a Cisco 7960 IP Phone

      388
      • Configuring Cisco IP Phone Voice Traffic

        389
      • Configuring the Priority of Incoming Data Frames

        390
  • Displaying Voice VLAN

    391
• Configuring VTP

  393
  • Understanding VTP

    393
    • The VTP Domain

      394
    • VTP Modes

      395
    • VTP Advertisements

      395
    • VTP Version 2

      396
    • VTP Pruning

      396
  • Configuring VTP

    398
    • Default VTP Configuration

      398
    • VTP Configuration Options

      399
      • VTP Configuration in Global Configuration Mode

        399
      • VTP Configuration in VLAN Database Configuration Mode

        399
    • VTP Configuration Guidelines

      400
      • Domain Names

        400
      • Passwords

        400
      • VTP Version

        400
      • Configuration Requirements

        401
    • Configuring a VTP Server

      401
    • Configuring a VTP Client

      403
    • Disabling VTP (VTP Transparent Mode)

      404
    • Enabling VTP Version 2

      405
    • Enabling VTP Pruning

      406
    • Adding a VTP Client Switch to a VTP Domain

      406
  • Monitoring VTP

    408
• Configuring Private VLANs

  409
  • Understanding Private VLANs

    409
    • IP Addressing Scheme with Private VLANs

      411
    • Private VLANs across Multiple Switches

      412
    • Private-VLAN Interaction with Other Features

      412
      • Private VLANs and Unicast, Broadcast, and Multicast Traffic

        413
      • Private VLANs and SVIs

        413
  • Configuring Private VLANs

    413
    • Tasks for Configuring Private VLANs

      414
    • Default Private-VLAN Configuration

      414
    • Private-VLAN Configuration Guidelines

      414
      • Secondary and Primary VLAN Configuration

        414
      • Private-VLAN Port Configuration

        416
      • Limitations with Other Features

        416
    • Configuring and Associating VLANs in a Private VLAN

      417
    • Configuring a Layer 2 Interface as a Private-VLAN Host Port

      419
    • Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port

      420
    • Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface

      421
  • Monitoring Private VLANs

    422
• Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling

  423
  • Understanding IEEE 802.1Q Tunneling

    423
  • Configuring IEEE 802.1Q Tunneling

    426
    • Default IEEE 802.1Q Tunneling Configuration

      426
    • IEEE 802.1Q Tunneling Configuration Guidelines

      426
      • Native VLANs

        426
      • System MTU

        427
    • IEEE 802.1Q Tunneling and Other Features

      428
    • Configuring an IEEE 802.1Q Tunneling Port

      428
  • Understanding Layer 2 Protocol Tunneling

    429
  • Configuring Layer 2 Protocol Tunneling

    432
    • Default Layer 2 Protocol Tunneling Configuration

      433
    • Layer 2 Protocol Tunneling Configuration Guidelines

      433
    • Configuring Layer 2 Protocol Tunneling

      434
    • Configuring Layer 2 Tunneling for EtherChannels

      436
      • Configuring the SP Edge Switch

        436
      • Configuring the Customer Switch

        437
  • Monitoring and Maintaining Tunneling Status

    439
• Configuring STP

  441
  • Understanding Spanning-Tree Features

    441
    • STP Overview

      442
    • Spanning-Tree Topology and BPDUs

      443
    • Bridge ID, Switch Priority, and Extended System ID

      444
    • Spanning-Tree Interface States

      444
      • Blocking State

        445
      • Listening State

        446
      • Learning State

        446
      • Forwarding State

        446
      • Disabled State

        447
    • How a Switch or Port Becomes the Root Switch or Root Port

      447
    • Spanning Tree and Redundant Connectivity

      448
    • Spanning-Tree Address Management

      448
    • Accelerated Aging to Retain Connectivity

      448
    • Spanning-Tree Modes and Protocols

      449
    • Supported Spanning-Tree Instances

      449
    • Spanning-Tree Interoperability and Backward Compatibility

      450
    • STP and IEEE 802.1Q Trunks

      450
    • VLAN-Bridge Spanning Tree

      450
  • Configuring Spanning-Tree Features

    451
    • Default Spanning-Tree Configuration

      451
    • Spanning-Tree Configuration Guidelines

      452
    • Changing the Spanning-Tree Mode.

      453
    • Disabling Spanning Tree

      454
    • Configuring the Root Switch

      454
    • Configuring a Secondary Root Switch

      456
    • Configuring Port Priority

      457
    • Configuring Path Cost

      458
    • Configuring the Switch Priority of a VLAN

      459
    • Configuring Spanning-Tree Timers

      460
      • Configuring the Hello Time

        460
      • Configuring the Forwarding-Delay Time for a VLAN

        461
      • Configuring the Maximum-Aging Time for a VLAN

        461
      • Configuring the Transmit Hold-Count

        462
  • Displaying the Spanning-Tree Status

    462
• Configuring MSTP

  463
  • Understanding MSTP

    464
    • Multiple Spanning-Tree Regions

      464
    • IST, CIST, and CST

      464
      • Operations Within an MST Region

        465
      • Operations Between MST Regions

        465
      • IEEE 802.1s Terminology

        467
    • Hop Count

      467
    • Boundary Ports

      468
    • IEEE 802.1s Implementation

      468
      • Port Role Naming Change

        468
      • Interoperation Between Legacy and Standard Switches

        469
      • Detecting Unidirectional Link Failure

        469
    • Interoperability with IEEE 802.1D STP

      470
  • Understanding RSTP

    470
    • Port Roles and the Active Topology

      471
    • Rapid Convergence

      472
    • Synchronization of Port Roles

      473
    • Bridge Protocol Data Unit Format and Processing

      474
      • Processing Superior BPDU Information

        475
      • Processing Inferior BPDU Information

        475
    • Topology Changes

      475
  • Configuring MSTP Features

    476
    • Default MSTP Configuration

      476
    • MSTP Configuration Guidelines

      477
    • Specifying the MST Region Configuration and Enabling MSTP

      478
    • Configuring the Root Switch

      479
    • Configuring a Secondary Root Switch

      480
    • Configuring Port Priority

      481
    • Configuring Path Cost

      482
    • Configuring the Switch Priority

      483
    • Configuring the Hello Time

      484
    • Configuring the Forwarding-Delay Time

      485
    • Configuring the Maximum-Aging Time

      485
    • Configuring the Maximum-Hop Count

      486
    • Specifying the Link Type to Ensure Rapid Transitions

      486
    • Designating the Neighbor Type

      487
    • Restarting the Protocol Migration Process

      487
  • Displaying the MST Configuration and Status

    488
• Configuring Optional Spanning-Tree Features

  489
  • Understanding Optional Spanning-Tree Features

    489
    • Understanding Port Fast

      490
    • Understanding BPDU Guard

      490
    • Understanding BPDU Filtering

      491
    • Understanding UplinkFast

      491
    • Understanding BackboneFast

      493
    • Understanding EtherChannel Guard

      495
    • Understanding Root Guard

      496
    • Understanding Loop Guard

      497
  • Configuring Optional Spanning-Tree Features

    497
    • Default Optional Spanning-Tree Configuration

      497
    • Optional Spanning-Tree Configuration Guidelines

      498
    • Enabling Port Fast

      498
    • Enabling BPDU Guard

      499
    • Enabling BPDU Filtering

      500
    • Enabling UplinkFast for Use with Redundant Links

      501
    • Enabling BackboneFast

      501
    • Enabling EtherChannel Guard

      502
    • Enabling Root Guard

      503
    • Enabling Loop Guard

      503
  • Displaying the Spanning-Tree Status

    504
• Configuring Flex Links and the MAC Address-Table Move Update Feature

  505
  • Understanding Flex Links and the MAC Address-Table Move Update

    505
    • Flex Links

      505
    • VLAN Flex Link Load Balancing and Support

      506
    • Flex Link Multicast Fast Convergence

      507
      • Learning the Other Flex Link Port as the mrouter Port

        507
      • Generating IGMP Reports

        507
      • Leaking IGMP Reports

        508
      • Configuration Examples

        508
    • MAC Address-Table Move Update

      510
  • Configuring Flex Links and the MAC Address-Table Move Update

    511
    • Default Configuration

      512
    • Configuration Guidelines

      512
    • Configuring Flex Links

      513
    • Configuring VLAN Load Balancing on Flex Links

      515
    • Configuring the MAC Address-Table Move Update Feature

      516
  • Monitoring Flex Links and the MAC Address-Table Move Update

    518
• Configuring DHCP Features and IP Source Guard

  519
  • Understanding DHCP Snooping

    519
    • DHCP Server

      520
    • DHCP Relay Agent

      520
    • DHCP Snooping

      520
    • Option-82 Data Insertion

      521
    • Cisco IOS DHCP Server Database

      524
    • DHCP Snooping Binding Database

      524
  • Configuring DHCP Snooping

    526
    • Default DHCP Snooping Configuration

      526
    • DHCP Snooping Configuration Guidelines

      527
    • Configuring the DHCP Server

      528
    • Configuring the DHCP Relay Agent

      528
    • Specifying the Packet Forwarding Address

      528
    • Enabling DHCP Snooping and Option 82

      530
    • Enabling DHCP Snooping on Private VLANs

      531
    • Enabling the Cisco IOS DHCP Server Database

      532
    • Enabling the DHCP Snooping Binding Database Agent

      532
  • Displaying DHCP Snooping Information

    533
  • Understanding IP Source Guard

    533
    • Source IP Address Filtering

      534
    • Source IP and MAC Address Filtering

      534
  • Configuring IP Source Guard

    534
    • Default IP Source Guard Configuration

      534
    • IP Source Guard Configuration Guidelines

      535
    • Enabling IP Source Guard

      535
  • Displaying IP Source Guard Information

    537
  • Understanding DHCP Server Port-Based Address Allocation

    537
  • Configuring DHCP Server Port-Based Address Allocation

    537
    • Default Port-Based Address Allocation Configuration

      537
    • Port-Based Address Allocation Configuration Guidelines

      538
    • Enabling DHCP Server Port-Based Address Allocation

      538
  • Displaying DHCP Server Port-Based Address Allocation

    540
• Configuring Dynamic ARP Inspection

  541
  • Understanding Dynamic ARP Inspection

    541
    • Interface Trust States and Network Security

      543
    • Rate Limiting of ARP Packets

      544
    • Relative Priority of ARP ACLs and DHCP Snooping Entries

      544
    • Logging of Dropped Packets

      544
  • Configuring Dynamic ARP Inspection

    545
    • Default Dynamic ARP Inspection Configuration

      545
    • Dynamic ARP Inspection Configuration Guidelines

      546
    • Configuring Dynamic ARP Inspection in DHCP Environments

      547
    • Configuring ARP ACLs for Non-DHCP Environments

      548
    • Limiting the Rate of Incoming ARP Packets

      550
    • Performing Validation Checks

      551
    • Configuring the Log Buffer

      552
  • Displaying Dynamic ARP Inspection Information

    554
• Configuring IGMP Snooping and MVR

  557
  • Understanding IGMP Snooping

    558
    • IGMP Versions

      559
    • Joining a Multicast Group

      559
    • Leaving a Multicast Group

      561
    • Immediate Leave

      561
    • IGMP Configurable-Leave Timer

      562
    • IGMP Report Suppression

      562
  • Configuring IGMP Snooping

    562
    • Default IGMP Snooping Configuration

      563
    • Enabling or Disabling IGMP Snooping

      563
    • Setting the Snooping Method

      564
    • Configuring a Multicast Router Port

      565
    • Configuring a Host Statically to Join a Group

      566
    • Enabling IGMP Immediate Leave

      566
    • Configuring the IGMP Leave Timer

      567
    • Configuring TCN-Related Commands

      568
      • Controlling the Multicast Flooding Time After a TCN Event

        568
      • Recovering from Flood Mode

        569
      • Disabling Multicast Flooding During a TCN Event

        569
    • Configuring the IGMP Snooping Querier

      570
    • Disabling IGMP Report Suppression

      571
  • Displaying IGMP Snooping Information

    571
  • Understanding Multicast VLAN Registration

    573
    • Using MVR in a Multicast Television Application

      573
  • Configuring MVR

    575
    • Default MVR Configuration

      575
    • MVR Configuration Guidelines and Limitations

      575
    • Configuring MVR Global Parameters

      576
    • Configuring MVR Interfaces

      577
  • Displaying MVR Information

    579
  • Configuring IGMP Filtering and Throttling

    579
    • Default IGMP Filtering and Throttling Configuration

      580
    • Configuring IGMP Profiles

      580
    • Applying IGMP Profiles

      582
    • Setting the Maximum Number of IGMP Groups

      582
    • Configuring the IGMP Throttling Action

      583
  • Displaying IGMP Filtering and Throttling Configuration

    584
• Configuring Port-Based Traffic Control

  585
  • Configuring Storm Control

    585
    • Understanding Storm Control

      585
    • Default Storm Control Configuration

      587
    • Configuring Storm Control and Threshold Levels

      587
    • Configuring Small-Frame Arrival Rate

      589
  • Configuring Protected Ports

    590
    • Default Protected Port Configuration

      590
    • Protected Port Configuration Guidelines

      591
    • Configuring a Protected Port

      591
  • Configuring Port Blocking

    591
    • Default Port Blocking Configuration

      592
    • Blocking Flooded Traffic on an Interface

      592
  • Configuring Port Security

    592
    • Understanding Port Security

      593
      • Secure MAC Addresses

        593
      • Security Violations

        594
    • Default Port Security Configuration

      595
    • Port Security Configuration Guidelines

      595
    • Enabling and Configuring Port Security

      597
    • Enabling and Configuring Port Security Aging

      601
    • Port Security and Private VLANs

      602
  • Displaying Port-Based Traffic Control Settings

    603
• Configuring CDP

  605
  • Understanding CDP

    605
  • Configuring CDP

    606
    • Default CDP Configuration

      606
    • Configuring the CDP Characteristics

      606
    • Disabling and Enabling CDP

      607
    • Disabling and Enabling CDP on an Interface

      608
  • Monitoring and Maintaining CDP

    608
• Configuring UDLD

  611
  • Understanding UDLD

    611
    • Modes of Operation

      611
    • Methods to Detect Unidirectional Links

      612
  • Configuring UDLD

    613
    • Default UDLD Configuration

      614
    • Configuration Guidelines

      614
    • Enabling UDLD Globally

      615
    • Enabling UDLD on an Interface

      615
    • Resetting an Interface Disabled by UDLD

      616
  • Displaying UDLD Status

    616
• Configuring LLDP, LLDP-MED, and Wired Location Service

  617
  • Understanding LLDP, LLDP-MED, and Wired Location Service

    617
    • LLDP

      617
    • LLDP-MED

      618
    • Wired Location Service

      619
  • Configuring LLDP, LLDP-MED, and Wired Location Service

    620
    • Default LLDP Configuration

      620
    • Configuration Guidelines

      621
    • Enabling LLDP

      621
    • Configuring LLDP Characteristics

      621
    • Configuring LLDP-MED TLVs

      622
    • Configuring Network-Policy TLV

      623
    • Configuring Location TLV and Wired Location Service

      625
  • Monitoring and Maintaining LLDP, LLDP-MED, and Wired Location Service

    626
• Configuring SPAN and RSPAN

  629
  • Understanding SPAN and RSPAN

    629
    • Local SPAN

      630
    • Remote SPAN

      630
    • SPAN and RSPAN Concepts and Terminology

      631
      • SPAN Sessions

        631
      • Monitored Traffic

        632
      • Source Ports

        633
      • Source VLANs

        634
      • VLAN Filtering

        634
      • Destination Port

        635
      • RSPAN VLAN

        636
    • SPAN and RSPAN Interaction with Other Features

      636
  • Configuring SPAN and RSPAN

    637
    • Default SPAN and RSPAN Configuration

      637
    • Configuring Local SPAN

      638
      • SPAN Configuration Guidelines

        638
      • Creating a Local SPAN Session

        639
      • Creating a Local SPAN Session and Configuring Incoming Traffic

        641
      • Specifying VLANs to Filter

        643
    • Configuring RSPAN

      644
      • RSPAN Configuration Guidelines

        644
      • Configuring a VLAN as an RSPAN VLAN

        645
      • Creating an RSPAN Source Session

        646
      • Creating an RSPAN Destination Session

        647
      • Creating an RSPAN Destination Session and Configuring Incoming Traffic

        648
      • Specifying VLANs to Filter

        650
  • Displaying SPAN and RSPAN Status

    651
• Configuring RMON

  653
  • Understanding RMON

    653
  • Configuring RMON

    654
    • Default RMON Configuration

      655
    • Configuring RMON Alarms and Events

      655
    • Collecting Group History Statistics on an Interface

      657
    • Collecting Group Ethernet Statistics on an Interface

      657
  • Displaying RMON Status

    658
• Configuring System Message Logging

  659
  • Understanding System Message Logging

    659
  • Configuring System Message Logging

    660
    • System Log Message Format

      660
    • Default System Message Logging Configuration

      661
    • Disabling Message Logging

      662
    • Setting the Message Display Destination Device

      663
    • Synchronizing Log Messages

      664
    • Enabling and Disabling Time Stamps on Log Messages

      665
    • Enabling and Disabling Sequence Numbers in Log Messages

      666
    • Defining the Message Severity Level

      666
    • Limiting Syslog Messages Sent to the History Table and to SNMP

      668
    • Enabling the Configuration-Change Logger

      668
    • Configuring UNIX Syslog Servers

      670
      • Logging Messages to a UNIX Syslog Daemon

        670
      • Configuring the UNIX System Logging Facility

        670
  • Displaying the Logging Configuration

    671
• Configuring SNMP

  673
  • Understanding SNMP

    673
    • SNMP Versions

      674
    • SNMP Manager Functions

      675
    • SNMP Agent Functions

      675
    • SNMP Community Strings

      676
    • Using SNMP to Access MIB Variables

      676
    • SNMP Notifications

      677
    • SNMP ifIndex MIB Object Values

      677
  • Configuring SNMP

    678
    • Default SNMP Configuration

      678
    • SNMP Configuration Guidelines

      678
    • Disabling the SNMP Agent

      679
    • Configuring Community Strings

      680
    • Configuring SNMP Groups and Users

      681
    • Configuring SNMP Notifications

      683
    • Setting the CPU Threshold Notification Types and Values

      687
    • Setting the Agent Contact and Location Information

      688
    • Limiting TFTP Servers Used Through SNMP

      688
    • SNMP Examples

      689
  • Displaying SNMP Status

    690
• Configuring Embedded Event Manager

  691
  • Understanding Embedded Event Manager

    691
    • Event Detectors

      692
    • Embedded Event Manager Actions

      694
    • Embedded Event Manager Policies

      694
    • Embedded Event Manager Environment Variables

      695
  • Configuring Embedded Event Manager

    695
    • Registering and Defining an Embedded Event Manager Applet

      695
    • Registering and Defining an Embedded Event Manager TCL Script

      696
  • Displaying Embedded Event Manager Information

    697
• Configuring Network Security with ACLs

  699
  • Understanding ACLs

    699
    • Supported ACLs

      700
      • Port ACLs

        701
      • Router ACLs

        702
      • VLAN Maps

        703
    • Handling Fragmented and Unfragmented Traffic

      703
  • Configuring IPv4 ACLs

    704
    • Creating Standard and Extended IPv4 ACLs

      705
      • Access List Numbers

        706
      • ACL Logging

        706
      • Creating a Numbered Standard ACL

        707
      • Creating a Numbered Extended ACL

        708
      • Resequencing ACEs in an ACL

        712
      • Creating Named Standard and Extended ACLs

        712
      • Using Time Ranges with ACLs

        714
      • Including Comments in ACLs

        716
    • Applying an IPv4 ACL to a Terminal Line

      716
    • Applying an IPv4 ACL to an Interface

      717
    • Hardware and Software Treatment of IP ACLs

      719
    • Troubleshooting ACLs

      719
    • IPv4 ACL Configuration Examples

      720
      • Numbered ACLs

        722
      • Extended ACLs

        722
      • Named ACLs

        722
      • Time Range Applied to an IP ACL

        723
      • Commented IP ACL Entries

        723
      • ACL Logging

        724
  • Creating Named MAC Extended ACLs

    725
    • Applying a MAC ACL to a Layer 2 Interface

      726
  • Configuring VLAN Maps

    727
    • VLAN Map Configuration Guidelines

      728
    • Creating a VLAN Map

      729
      • Examples of ACLs and VLAN Maps

        730
    • Applying a VLAN Map to a VLAN

      732
    • Using VLAN Maps in Your Network

      732
      • Wiring Closet Configuration

        732
      • Denying Access to a Server on Another VLAN

        733
  • Using VLAN Maps with Router ACLs

    734
    • VLAN Maps and Router ACL Configuration Guidelines

      735
    • Examples of Router ACLs and VLAN Maps Applied to VLANs

      736
      • ACLs and Switched Packets

        736
      • ACLs and Bridged Packets

        736
      • ACLs and Routed Packets

        737
      • ACLs and Multicast Packets

        738
  • Displaying IPv4 ACL Configuration

    738
• Configuring QoS

  741
  • Understanding QoS

    742
    • Basic QoS Model

      743
    • Classification

      745
      • Classification Based on QoS ACLs

        747
      • Classification Based on Class Maps and Policy Maps

        747
    • Policing and Marking

      748
      • Policing on Physical Ports

        749
      • Policing on SVIs

        750
    • Mapping Tables

      752
    • Queueing and Scheduling Overview

      753
      • Weighted Tail Drop

        753
      • SRR Shaping and Sharing

        754
      • Queueing and Scheduling on Ingress Queues

        755
      • Queueing and Scheduling on Egress Queues

        756
    • Packet Modification

      759
  • Configuring Auto-QoS

    760
    • Generated Auto-QoS Configuration

      760
    • Effects of Auto-QoS on the Configuration

      765
    • Auto-QoS Configuration Guidelines

      765
    • Upgrading from a Previous Software Release

      766
    • Enabling Auto-QoS for VoIP

      767
    • Auto-QoS Configuration Example

      768
  • Displaying Auto-QoS Information

    769
  • Configuring Standard QoS

    770
    • Default Standard QoS Configuration

      770
      • Default Ingress Queue Configuration

        771
      • Default Egress Queue Configuration

        771
      • Default Mapping Table Configuration

        772
    • Standard QoS Configuration Guidelines

      773
      • QoS ACL Guidelines

        773
      • Applying QoS on Interfaces

        773
      • Policing Guidelines

        774
      • General QoS Guidelines

        774
    • Enabling QoS Globally

      775
    • Enabling VLAN-Based QoS on Physical Ports

      775
    • Configuring Classification Using Port Trust States

      776
      • Configuring the Trust State on Ports within the QoS Domain

        776
      • Configuring the CoS Value for an Interface

        778
      • Configuring a Trusted Boundary to Ensure Port Security

        778
      • Enabling DSCP Transparency Mode

        780
      • Configuring the DSCP Trust State on a Port Bordering Another QoS Domain

        780
    • Configuring a QoS Policy

      782
      • Classifying Traffic by Using ACLs

        783
      • Classifying Traffic by Using Class Maps

        786
      • Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps

        788
      • Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps

        792
      • Classifying, Policing, and Marking Traffic by Using Aggregate Policers

        798
    • Configuring DSCP Maps

      800
      • Configuring the CoS-to-DSCP Map

        800
      • Configuring the IP-Precedence-to-DSCP Map

        802
      • Configuring the Policed-DSCP Map

        803
      • Configuring the DSCP-to-CoS Map

        804
      • Configuring the DSCP-to-DSCP-Mutation Map

        805
    • Configuring Ingress Queue Characteristics

      806
      • Mapping DSCP or CoS Values to an Ingress Queue and Setting WTD Thresholds

        807
      • Allocating Buffer Space Between the Ingress Queues

        808
      • Allocating Bandwidth Between the Ingress Queues

        808
      • Configuring the Ingress Priority Queue

        809
    • Configuring Egress Queue Characteristics

      810
      • Configuration Guidelines

        811
      • Allocating Buffer Space to and Setting WTD Thresholds for an Egress Queue-Set

        811
      • Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID

        813
      • Configuring SRR Shaped Weights on Egress Queues

        814
      • Configuring SRR Shared Weights on Egress Queues

        815
      • Configuring the Egress Expedite Queue

        816
      • Limiting the Bandwidth on an Egress Interface

        817
  • Displaying Standard QoS Information

    818
• Configuring EtherChannels and Link-State Tracking

  819
  • Understanding EtherChannels

    819
    • EtherChannel Overview

      820
    • Port-Channel Interfaces

      821
    • Port Aggregation Protocol

      822
      • PAgP Modes

        822
      • PAgP Interaction with Virtual Switches and Dual-Active Detection

        823
      • PAgP Interaction with Other Features

        823
    • Link Aggregation Control Protocol

      823
      • LACP Modes

        824
      • LACP Interaction with Other Features

        824
    • EtherChannel On Mode

      824
    • Load Balancing and Forwarding Methods

      825
  • Configuring EtherChannels

    826
    • Default EtherChannel Configuration

      827
    • EtherChannel Configuration Guidelines

      827
    • Configuring Layer 2 EtherChannels

      828
    • Configuring Layer 3 EtherChannels

      831
      • Creating Port-Channel Logical Interfaces

        831
      • Configuring the Physical Interfaces

        832
    • Configuring EtherChannel Load Balancing

      834
    • Configuring the PAgP Learn Method and Priority

      834
    • Configuring LACP Hot-Standby Ports

      836
      • Configuring the LACP System Priority

        837
      • Configuring the LACP Port Priority

        837
  • Displaying EtherChannel, PAgP, and LACP Status

    838
  • Understanding Link-State Tracking

    839
  • Configuring Link-State Tracking

    841
    • Default Link-State Tracking Configuration

      842
    • Link-State Tracking Configuration Guidelines

      842
    • Configuring Link-State Tracking

      842
    • Displaying Link-State Tracking Status

      843
• Configuring IP Unicast Routing

  845
  • Understanding IP Routing

    846
    • Types of Routing

      846
  • Steps for Configuring Routing

    847
  • Configuring IP Addressing

    848
    • Default Addressing Configuration

      848
    • Assigning IP Addresses to Network Interfaces

      849
      • Use of Subnet Zero

        850
      • Classless Routing

        850
    • Configuring Address Resolution Methods

      852
      • Define a Static ARP Cache

        853
      • Set ARP Encapsulation

        853
      • Enable Proxy ARP

        854
    • Routing Assistance When IP Routing is Disabled

      854
      • Proxy ARP

        855
      • Default Gateway

        855
      • ICMP Router Discovery Protocol (IRDP)

        855
    • Configuring Broadcast Packet Handling

      857
      • Enabling Directed Broadcast-to-Physical Broadcast Translation

        857
      • Forwarding UDP Broadcast Packets and Protocols

        858
      • Establishing an IP Broadcast Address

        859
      • Flooding IP Broadcasts

        860
    • Monitoring and Maintaining IP Addressing

      861
  • Enabling IP Unicast Routing

    862
  • Configuring RIP

    862
    • Default RIP Configuration

      863
    • Configuring Basic RIP Parameters

      864
    • Configuring RIP Authentication

      865
    • Configuring Summary Addresses and Split Horizon

      866
    • Configuring Split Horizon

      867
  • Configuring OSPF

    868
    • Default OSPF Configuration

      869
      • OSPF NSF Awareness

        870
    • Configuring Basic OSPF Parameters

      870
    • Configuring OSPF Interfaces

      871
    • Configuring OSPF Area Parameters

      872
    • Configuring Other OSPF Parameters

      873
    • Changing LSA Group Pacing

      875
    • Configuring a Loopback Interface

      876
    • Monitoring OSPF

      876
  • Configuring EIGRP

    877
    • Default EIGRP Configuration

      878
      • EIGRP NSF Awareness

        880
    • Configuring Basic EIGRP Parameters

      880
    • Configuring EIGRP Interfaces

      881
    • Configuring EIGRP Route Authentication

      882
    • Configuring EIGRP Stub Routing

      883
    • Monitoring and Maintaining EIGRP

      884
  • Configuring BGP

    884
    • Default BGP Configuration

      887
      • Nonstop Forwarding Awareness

        889
    • Enabling BGP Routing

      889
    • Managing Routing Policy Changes

      891
    • Configuring BGP Decision Attributes

      893
    • Configuring BGP Filtering with Route Maps

      895
    • Configuring BGP Filtering by Neighbor

      895
    • Configuring Prefix Lists for BGP Filtering

      897
    • Configuring BGP Community Filtering

      898
    • Configuring BGP Neighbors and Peer Groups

      899
    • Configuring Aggregate Addresses

      901
    • Configuring Routing Domain Confederations

      902
    • Configuring BGP Route Reflectors

      902
    • Configuring Route Dampening

      903
    • Monitoring and Maintaining BGP

      904
  • Configuring ISO CLNS Routing

    905
    • Configuring IS-IS Dynamic Routing

      906
      • Default IS-IS Configuration

        907
      • Nonstop Forwarding Awareness

        908
      • Enabling IS-IS Routing

        908
      • Configuring IS-IS Global Parameters

        910
      • Configuring IS-IS Interface Parameters

        912
    • Monitoring and Maintaining ISO IGRP and IS-IS

      914
  • Configuring Multi-VRF CE

    915
    • Understanding Multi-VRF CE

      916
    • Default Multi-VRF CE Configuration

      918
    • Multi-VRF CE Configuration Guidelines

      918
    • Configuring VRFs

      919
    • Configuring Multicast VRFs

      920
    • Configuring VRF-Aware Services

      921
      • User Interface for ARP

        921
      • User Interface for PING

        922
      • User Interface for SNMP

        922
      • User Interface for HSRP

        922
      • User Interface for uRPF

        923
      • User Interface for Syslog

        923
      • User Interface for Traceroute

        924
      • User Interface for FTP and TFTP

        924
    • Configuring a VPN Routing Session

      924
    • Configuring BGP PE to CE Routing Sessions

      925
    • Multi-VRF CE Configuration Example

      926
    • Displaying Multi-VRF CE Status

      930
  • Configuring Protocol-Independent Features

    930
    • Configuring Cisco Express Forwarding

      930
    • Configuring the Number of Equal-Cost Routing Paths

      932
    • Configuring Static Unicast Routes

      932
    • Specifying Default Routes and Networks

      933
    • Using Route Maps to Redistribute Routing Information

      934
    • Configuring Policy-Based Routing

      938
      • PBR Configuration Guidelines

        938
      • Enabling PBR

        939
    • Filtering Routing Information

      941
      • Setting Passive Interfaces

        941
      • Controlling Advertising and Processing in Routing Updates

        942
      • Filtering Sources of Routing Information

        943
    • Managing Authentication Keys

      943
  • Monitoring and Maintaining the IP Network

    944
• Configuring IPv6 Unicast Routing

  947
  • Understanding IPv6

    947
    • IPv6 Addresses

      948
    • Supported IPv6 Unicast Routing Features

      948
      • 128-Bit Wide Unicast Addresses

        949
      • DNS for IPv6

        950
      • Path MTU Discovery for IPv6 Unicast

        950
      • ICMPv6

        950
      • Neighbor Discovery

        950
      • Default Router Preference

        950
      • IPv6 Stateless Autoconfiguration and Duplicate Address Detection

        951
      • IPv6 Applications

        951
      • Dual IPv4 and IPv6 Protocol Stacks

        951
      • DHCP for IPv6 Address Assignment

        952
      • Static Routes for IPv6

        952
      • RIP for IPv6

        952
      • OSPF for IPv6

        952
      • EIGRP for IPv6

        953
      • HSRP for IPv6

        953
      • SNMP and Syslog Over IPv6

        953
      • HTTP(S) Over IPv6

        954
    • Unsupported IPv6 Unicast Routing Features

      954
    • Limitations

      954
  • Configuring IPv6

    955
    • Default IPv6 Configuration

      956
    • Configuring IPv6 Addressing and Enabling IPv6 Routing

      956
    • Configuring Default Router Preference

      958
    • Configuring IPv4 and IPv6 Protocol Stacks

      959
    • Configuring DHCP for IPv6 Address Assignment

      960
      • Default DHCPv6 Address Assignment Configuration

        960
      • DHCPv6 Address Assignment Configuration Guidelines

        960
      • Enabling DHCPv6 Server Function

        961
      • Enabling DHCPv6 Client Function

        963
    • Configuring IPv6 ICMP Rate Limiting

      963
    • Configuring CEF for IPv6

      964
    • Configuring Static Routes for IPv6

      964
    • Configuring RIP for IPv6

      966
    • Configuring OSPF for IPv6

      967
    • Configuring EIGRP for IPv6

      969
    • Configuring HSRP for IPv6

      969
      • Enabling HSRP Version 2

        970
      • Enabling an HSRP Group for IPv6

        970
  • Displaying IPv6

    971
• Configuring IPv6 MLD Snooping

  977
  • Understanding MLD Snooping

    977
    • MLD Messages

      978
    • MLD Queries

      978
    • Multicast Client Aging Robustness

      979
    • Multicast Router Discovery

      979
    • MLD Reports

      980
    • MLD Done Messages and Immediate-Leave

      980
    • Topology Change Notification Processing

      980
  • Configuring IPv6 MLD Snooping

    981
    • Default MLD Snooping Configuration

      981
    • MLD Snooping Configuration Guidelines

      982
    • Enabling or Disabling MLD Snooping

      982
    • Configuring a Static Multicast Group

      983
    • Configuring a Multicast Router Port

      984
    • Enabling MLD Immediate Leave

      984
    • Configuring MLD Snooping Queries

      985
    • Disabling MLD Listener Message Suppression

      986
  • Displaying MLD Snooping Information

    987
• Configuring IPv6 ACLs

  989
  • Understanding IPv6 ACLs

    990
    • Supported ACL Features

      990
    • IPv6 ACL Limitations

      991
  • Configuring IPv6 ACLs

    991
    • Default IPv6 ACL Configuration

      992
    • Interaction with Other Features

      992
    • Creating IPv6 ACLs

      992
    • Applying an IPv6 ACL to an Interface

      995
  • Displaying IPv6 ACLs

    996
• Configuring HSRP

  997
  • Understanding HSRP

    997
    • HSRP Versions

      999
    • Multiple HSRP

      1000
  • Configuring HSRP

    1000
    • Default HSRP Configuration

      1001
    • HSRP Configuration Guidelines

      1001
    • Enabling HSRP

      1002
    • Configuring HSRP Priority

      1003
    • Configuring MHSRP

      1006
    • Configuring HSRP Authentication and Timers

      1006
    • Enabling HSRP Support for ICMP Redirect Messages

      1008
    • Configuring HSRP Groups and Clustering

      1008
    • Troubleshooting HSRP

      1008
  • Displaying HSRP Configurations

    1009
• Configuring Cisco IOS IP SLAs Operations

  1011
  • Understanding Cisco IOS IP SLAs

    1011
    • Using Cisco IOS IP SLAs to Measure Network Performance

      1013
    • IP SLAs Responder and IP SLAs Control Protocol

      1014
    • Response Time Computation for IP SLAs

      1014
    • IP SLAs Operation Scheduling

      1015
    • IP SLAs Operation Threshold Monitoring

      1015
  • Configuring IP SLAs Operations

    1016
    • Default Configuration

      1016
    • Configuration Guidelines

      1016
    • Configuring the IP SLAs Responder

      1018
    • Analyzing IP Service Levels by Using the UDP Jitter Operation

      1018
    • Analyzing IP Service Levels by Using the ICMP Echo Operation

      1021
  • Monitoring IP SLAs Operations

    1023
• Configuring Enhanced Object Tracking

  1025
  • Understanding Enhanced Object Tracking

    1025
  • Configuring Enhanced Object Tracking Features

    1026
    • Default Configuration

      1026
    • Tracking Interface Line-Protocol or IP Routing State

      1026
    • Configuring a Tracked List

      1027
      • Configuring a Tracked List with a Boolean Expression

        1027
      • Configuring a Tracked List with a Weight Threshold

        1028
      • Configuring a Tracked List with a Percentage Threshold

        1029
    • Configuring HSRP Object Tracking

      1031
    • Configuring Other Tracking Characteristics

      1032
    • Configuring IP SLAs Object Tracking

      1033
    • Configuring Static Routing Support

      1034
      • Configuring a Primary Interface

        1034
      • Configuring a Cisco IP SLAs Monitoring Agent and Track Object

        1035
      • Configuring a Routing Policy and Default Route

        1036
  • Monitoring Enhanced Object Tracking

    1036
• Configuring Web Cache Services By Using WCCP

  1039
  • Understanding WCCP

    1039
    • WCCP Message Exchange

      1040
    • WCCP Negotiation

      1041
    • MD5 Security

      1041
    • Packet Redirection and Service Groups

      1041
    • Unsupported WCCP Features

      1042
  • Configuring WCCP

    1043
    • Default WCCP Configuration

      1043
    • WCCP Configuration Guidelines

      1043
    • Enabling the Web Cache Service

      1044
  • Monitoring and Maintaining WCCP

    1047
• Configuring IP Multicast Routing

  1049
  • Understanding Cisco’s Implementation of IP Multicast Routing

    1050
    • Understanding IGMP

      1051
      • IGMP Version 1

        1051
      • IGMP Version 2

        1051
    • Understanding PIM

      1052
      • PIM Versions

        1052
      • PIM Modes

        1052
      • PIM Stub Routing

        1053
      • IGMP Helper

        1054
      • Auto-RP

        1054
      • Bootstrap Router

        1055
      • Multicast Forwarding and Reverse Path Check

        1055
    • Understanding DVMRP

      1056
    • Understanding CGMP

      1057
  • Configuring IP Multicast Routing

    1057
    • Default Multicast Routing Configuration

      1058
    • Multicast Routing Configuration Guidelines

      1058
      • PIMv1 and PIMv2 Interoperability

        1058
      • Auto-RP and BSR Configuration Guidelines

        1059
    • Configuring Basic Multicast Routing

      1059
    • Configuring Source-Specific Multicast

      1061
      • SSM Components Overview

        1061
      • How SSM Differs from Internet Standard Multicast

        1062
      • SSM IP Address Range

        1062
      • SSM Operations

        1062
      • IGMPv3 Host Signalling

        1063
      • Configuration Guidelines

        1063
      • Configuring SSM

        1064
      • Monitoring SSM

        1064
    • Configuring Source Specific Multicast Mapping

      1064
      • Configuration Guidelines

        1065
      • SSM Mapping Overview

        1065
      • Configuring SSM Mapping

        1067
      • Monitoring SSM Mapping

        1069
    • Configuring PIM Stub Routing

      1070
      • PIM Stub Routing Configuration Guidelines

        1070
      • Enabling PIM Stub Routing

        1070
    • Configuring a Rendezvous Point

      1071
      • Manually Assigning an RP to Multicast Groups

        1071
      • Configuring Auto-RP

        1073
      • Configuring PIMv2 BSR

        1077
    • Using Auto-RP and a BSR

      1081
    • Monitoring the RP Mapping Information

      1081
    • Troubleshooting PIMv1 and PIMv2 Interoperability Problems

      1082
  • Configuring Advanced PIM Features

    1082
    • Understanding PIM Shared Tree and Source Tree

      1082
    • Delaying the Use of PIM Shortest-Path Tree

      1083
    • Modifying the PIM Router-Query Message Interval

      1084
  • Configuring Optional IGMP Features

    1085
    • Default IGMP Configuration

      1086
    • Configuring the Switch as a Member of a Group

      1086
    • Controlling Access to IP Multicast Groups

      1087
    • Changing the IGMP Version

      1088
    • Modifying the IGMP Host-Query Message Interval

      1088
    • Changing the IGMP Query Timeout for IGMPv2

      1089
    • Changing the Maximum Query Response Time for IGMPv2

      1090
    • Configuring the Switch as a Statically Connected Member

      1090
  • Configuring Optional Multicast Routing Features

    1091
    • Enabling CGMP Server Support

      1091
    • Configuring sdr Listener Support

      1092
      • Enabling sdr Listener Support

        1093
      • Limiting How Long an sdr Cache Entry Exists

        1093
    • Configuring an IP Multicast Boundary

      1093
  • Configuring Basic DVMRP Interoperability Features

    1095
    • Configuring DVMRP Interoperability

      1096
    • Configuring a DVMRP Tunnel

      1098
    • Advertising Network 0.0.0.0 to DVMRP Neighbors

      1099
    • Responding to mrinfo Requests

      1100
  • Configuring Advanced DVMRP Interoperability Features

    1100
    • Enabling DVMRP Unicast Routing

      1101
    • Rejecting a DVMRP Nonpruning Neighbor

      1102
    • Controlling Route Exchanges

      1103
      • Limiting the Number of DVMRP Routes Advertised

        1104
      • Changing the DVMRP Route Threshold

        1104
      • Configuring a DVMRP Summary Address

        1105
      • Disabling DVMRP Autosummarization

        1107
      • Adding a Metric Offset to the DVMRP Route

        1107
  • Monitoring and Maintaining IP Multicast Routing

    1108
    • Clearing Caches, Tables, and Databases

      1108
    • Displaying System and Network Statistics

      1109
    • Monitoring IP Multicast Routing

      1110
• Configuring MSDP

  1111
  • Understanding MSDP

    1111
    • MSDP Operation

      1112
    • MSDP Benefits

      1113
  • Configuring MSDP

    1113
    • Default MSDP Configuration

      1114
    • Configuring a Default MSDP Peer

      1114
    • Caching Source-Active State

      1116
    • Requesting Source Information from an MSDP Peer

      1118
    • Controlling Source Information that Your Switch Originates

      1118
      • Redistributing Sources

        1119
      • Filtering Source-Active Request Messages

        1120
    • Controlling Source Information that Your Switch Forwards

      1121
      • Using a Filter

        1122
      • Using TTL to Limit the Multicast Data Sent in SA Messages

        1123
    • Controlling Source Information that Your Switch Receives

      1123
    • Configuring an MSDP Mesh Group

      1125
    • Shutting Down an MSDP Peer

      1125
    • Including a Bordering PIM Dense-Mode Region in MSDP

      1126
    • Configuring an Originating Address other than the RP Address

      1127
  • Monitoring and Maintaining MSDP

    1128
• Configuring Fallback Bridging

  1129
  • Understanding Fallback Bridging

    1129
  • Configuring Fallback Bridging

    1130
    • Default Fallback Bridging Configuration

      1131
    • Fallback Bridging Configuration Guidelines

      1131
    • Creating a Bridge Group

      1131
    • Adjusting Spanning-Tree Parameters

      1133
      • Changing the VLAN-Bridge Spanning-Tree Priority

        1133
      • Changing the Interface Priority

        1134
      • Assigning a Path Cost

        1134
      • Adjusting BPDU Intervals

        1135
      • Disabling the Spanning Tree on an Interface

        1137
  • Monitoring and Maintaining Fallback Bridging

    1138
• Troubleshooting

  1139
  • Recovering from a Software Failure

    1140
  • Recovering from a Lost or Forgotten Password

    1141
    • Procedure with Password Recovery Enabled

      1142
    • Procedure with Password Recovery Disabled

      1144
  • Recovering from a Command Switch Failure

    1145
    • Replacing a Failed Command Switch with a Cluster Member

      1146
    • Replacing a Failed Command Switch with Another Switch

      1148
  • Recovering from Lost Cluster Member Connectivity

    1149
  • Preventing Autonegotiation Mismatches

    1149
  • Troubleshooting Power over Ethernet Switch Ports

    1150
    • Disabled Port Caused by Power Loss

      1150
    • Disabled Port Caused by False Link Up

      1150
  • SFP Module Security and Identification

    1150
  • Monitoring SFP Module Status

    1151
  • Monitoring Temperature

    1151
  • Using Ping

    1151
    • Understanding Ping

      1151
    • Executing Ping

      1152
  • Using Layer 2 Traceroute

    1153
    • Understanding Layer 2 Traceroute

      1153
    • Usage Guidelines

      1153
    • Displaying the Physical Path

      1154
  • Using IP Traceroute

    1154
    • Understanding IP Traceroute

      1154
    • Executing IP Traceroute

      1155
  • Using TDR

    1156
    • Understanding TDR

      1156
    • Running TDR and Displaying the Results

      1157
  • Using Debug Commands

    1157
    • Enabling Debugging on a Specific Feature

      1157
    • Enabling All-System Diagnostics

      1158
    • Redirecting Debug and Error Message Output

      1158
  • Using the show platform forward Command

    1158
  • Using the crashinfo Files

    1161
    • Basic crashinfo Files

      1161
    • Extended crashinfo Files

      1161
  • Troubleshooting Tables

    1162
    • Troubleshooting CPU Utilization

      1162
      • Possible Symptoms of High CPU Utilization

        1162
      • Verifying the Problem and Cause

        1162
    • Troubleshooting Power over Ethernet (PoE)

      1164
    • Troubleshooting Stackwise

      1167
• Configuring Online Diagnostics

  1169
  • Understanding How Online Diagnostics Work

    1169
  • Scheduling Online Diagnostics

    1169
  • Configuring Health-Monitoring Diagnostics

    1170
  • Running Online Diagnostic Tests

    1171
    • Starting Online Diagnostic Tests

      1171
  • Displaying Online Diagnostic Tests and Test Results

    1171
• Supported MIBs

  1173
  • MIB List

    1173
  • Using FTP to Access the MIB Files

    1175
• Working with the Cisco IOS File System, Configuration Files, and Software Images

  1177
  • Working with the Flash File System

    1177
    • Displaying Available File Systems

      1178
    • Setting the Default File System

      1179
    • Displaying Information about Files on a File System

      1179
    • Changing Directories and Displaying the Working Directory

      1180
    • Creating and Removing Directories

      1180
    • Copying Files

      1181
    • Deleting Files

      1181
    • Creating, Displaying, and Extracting tar Files

      1182
      • Creating a tar File

        1182
      • Displaying the Contents of a tar File

        1183
      • Extracting a tar File

        1183
    • Displaying the Contents of a File

      1184
  • Working with Configuration Files

    1184
    • Guidelines for Creating and Using Configuration Files

      1185
    • Configuration File Types and Location n

      1186
    • Creating a Configuration File By Using a Text Editor

      1186
    • Copying Configuration Files By Using TFTP

      1186
      • Preparing to Download or Upload a Configuration File B y Using TFTP

        1186
      • Downloading the Configuration File By Using TFTP

        1187
      • Uploading the Configuration File By Using TFTP

        1188
    • Copying Configuration Files By Using FTP

      1188
      • Preparing to Download or Upload a Configuration File By Using FTP

        1189
      • Downloading a Configuration File By Using FTP

        1189
      • Uploading a Configuration File By Using FTP

        1190
    • Copying Configuration Files By Using RCP

      1191
      • Preparing to Download or Upload a Configuration File By Using RCP

        1192
      • Downloading a Configuration File By Using RCP

        1193
      • Uploading a Configuration File By Using RCP

        1194
    • Clearing Configuration Information

      1194
      • Clearing the Startup Configuration File

        1195
      • Deleting a Stored Configuration File

        1195
    • Replacing and Rolling Back Configurations

      1195
      • Understanding Configuration Replacement and Rollback

        1195
      • Configuration Guidelines

        1197
      • Configuring the Configuration Archive

        1197
      • Performing a Configuration Replacement or Rollback Operation

        1198
  • Working with Software Images

    1199
    • Image Location on the Switch

      1200
    • tar File Format of Images on a Server or Cisco.com

      1200
    • Copying Image Files By Using TFTP

      1201
      • Preparing to Download or Upload an Image File By Using TFTP

        1201
      • Downloading an Image File By Using TFTP

        1202
      • Uploading an Image File By Using TFTP

        1204
    • Copying Image Files By Using FTP

      1204
      • Preparing to Download or Upload an Image File By Using FTP

        1205
      • Downloading an Image File By Using FTP

        1206
      • Uploading an Image File By Using FTP

        1207
    • Copying Image Files By Using RCP

      1208
      • Preparing to Download or Upload an Image File By Using RCP

        1209
      • Downloading an Image File By Using RCP

        1210
      • Uploading an Image File By Using RCP

        1212
• Unsupported Commands in Cisco IOS Release 12.2(50)SE

  1215
  • Access Control Lists

    1216
    • Unsupported Privileged EXEC Commands

      1216
    • Unsupported Global Configuration Commands

      1216
    • Unsupported Route-Map Configuration Commands

      1216
  • Archive Commands

    1216
    • Unsupported Privileged EXEC Commands

      1216
  • ARP Commands

    1217
    • Unsupported Global Configuration Commands

      1217
    • Unsupported Interface Configuration Commands

      1217
  • Boot Loader Commands

    1217
    • Unsupported Global Configuration Commands

      1217
  • Embedded Event Manager

    1217
    • Unsupported Privileged EXEC Commands

      1217
    • Unsupported Global Configuration Commands

      1217
    • Unsupported Commands in Applet Configuration Mode

      1218
  • Debug Commands

    1218
    • Unsupported Privileged EXEC Commands

      1218
  • FallBack Bridging

    1218
    • Unsupported Privileged EXEC Commands

      1218
    • Unsupported Global Configuration Commands

      1218
    • Unsupported Interface Configuration Commands

      1219
  • High Availability

    1220
    • Unsupported SSO-Aware HSRP Commands

      1220
  • HSRP

    1220
    • Unsupported Global Configuration Commands

      1220
    • Unsupported Interface Configuration Commands

      1220
  • IGMP Snooping Commands

    1220
    • Unsupported Global Configuration Commands

      1220
  • Interface Commands

    1221
    • Unsupported Privileged EXEC Commands

      1221
    • Unsupported Global Configuration Commands

      1221
    • Unsupported Interface Configuration Commands

      1221
  • IP Multicast Routing

    1221
    • Unsupported Privileged EXEC Commands

      1221
    • Unsupported Global Configuration Commands

      1222
    • Unsupported Interface Configuration Commands

      1222
  • IP SLA

    1222
    • Unsupported MPLS Health Monitor Commands

      1222
    • Unsupported Ethernet Gatekeeper Registration Commands

      1222
    • Unsupported VoIP Call Setup Probe Commands

      1222
  • IP Unicast Routing

    1223
    • Unsupported Privileged EXEC or User EXEC Commands

      1223
    • Unsupported Global Configuration Commands

      1223
    • Unsupported Interface Configuration Commands

      1224
    • Unsupported BGP Router Configuration Commands

      1224
    • Unsupported VPN Configuration Commands

      1224
    • Unsupported Route Map Commands

      1224
  • IPv6

    1225
    • IPv4-v6 Tunneling Commands

      1225
  • Layer 3

    1225
    • BGP

      1225
      • Other Unsupported BGP Commands

        1225
    • OSPF

      1226
    • VRF aware AAA

      1227
  • MAC Address Commands

    1227
    • Unsupported Privileged EXEC Commands

      1227
    • Unsupported Global Configuration Commands

      1227
  • Miscellaneous

    1228
    • Unsupported User EXEC Commands

      1228
    • Unsupported Privileged EXEC Commands

      1228
    • Unsupported Global Configuration Commands

      1228
  • MSDP

    1228
    • Unsupported Privileged EXEC Commands

      1228
    • Unsupported Global Configuration Commands

      1228
  • Multicast

    1229
    • Unsupported BiDirectional PIM Commands

      1229
    • Unsupported Multicast Routing Manager Commands

      1229
    • Unsupported IP Multicast Rate Limiting Commands

      1229
    • Unsupported UDLR Commands

      1229
    • Unsupported Multicast Over GRE Commands

      1229
  • NetFlow Commands

    1229
    • Unsupported Global Configuration Commands

      1229
  • Network Address Translation (NAT) Commands

    1229
    • Unsupported Privileged EXEC Commands

      1229
  • QoS

    1230
    • Unsupported Global Configuration Command

      1230
    • Unsupported Interface Configuration Commands

      1230
    • Unsupported Policy-Map Configuration Command

      1230
  • RADIUS

    1230
    • Unsupported Global Configuration Commands

      1230
  • SNMP

    1230
    • Unsupported Global Configuration Commands

      1230
  • SNMPv3

    1231
    • Unsupported 3DES Encryption Commands

      1231
  • Spanning Tree

    1231
    • Unsupported Global Configuration Command

      1231
    • Unsupported Interface Configuration Command

      1231
  • VLAN

    1231
    • Unsupported Global Configuration Command

      1231
    • Unsupported User EXEC Commands

      1231
  • VTP

    1231
    • Unsupported Privileged EXEC Commands

      1231
• Index

  1233