Benutzerhandbuch für Cisco Systems 3750E

Inhaltsverzeichnis

• Catalyst 3750-E and 3560-E Switch Software Configuration Guide

  1
• Contents

  3
• Preface

  43
  • Audience

    43
  • Purpose

    43
  • Conventions

    43
  • Related Publications

    44
  • Obtaining Documentation, Obtaining Support, and Security Guidelines

    46
• Overview

  47
  • Features

    47
    • Deployment Features

      48
    • Performance Features

      50
    • Management Options

      51
    • Manageability Features

      52
    • Availability and Redundancy Features

      53
    • VLAN Features

      54
    • Security Features

      54
    • QoS and CoS Features

      56
    • Layer3 Features

      57
    • Power over Ethernet Features

      58
    • Monitoring Features

      59
  • Default Settings After Initial Switch Configuration

    59
  • Network Configuration Examples

    62
    • Design Concepts for Using the Switch

      62
    • Small to Medium-Sized Network Using Catalyst 3750-E and 3560-E Switches

      69
    • Large Network Using Catalyst 3750-E and 3560-E Switches

      72
    • Multidwelling Network Using Catalyst 3750-E Switches

      75
    • Long-Distance, High-Bandwidth Transport Configuration

      76
  • Where to Go Next

    77
• Using the Command-Line Interface

  79
  • Understanding Command Modes

    79
  • Understanding the Help System

    81
  • Understanding Abbreviated Commands

    82
  • Understanding no and default Forms of Commands

    82
  • Understanding CLI Error Messages

    83
  • Using Configuration Logging

    83
  • Using Command History

    84
    • Changing the Command History Buffer Size

      84
    • Recalling Commands

      84
    • Disabling the Command History Feature

      85
  • Using Editing Features

    85
    • Enabling and Disabling Editing Features

      85
    • Editing Commands through Keystrokes

      86
    • Editing Command Lines that Wrap

      87
  • Searching and Filtering Output of show and more Commands

    88
  • Accessing the CLI

    88
    • Accessing the CLI through a Console Connection or through Telnet

      89
• Assigning the Switch IP Address and Default Gateway

  91
  • Understanding the Boot Process

    91
  • Assigning Switch Information

    92
    • Default Switch Information

      93
    • Understanding DHCP-Based Autoconfiguration

      93
      • DHCP Client Request Process

        94
    • Configuring DHCP-Based Autoconfiguration

      95
      • DHCP Server Configuration Guidelines

        95
      • Configuring the TFTP Server

        96
      • Configuring the DNS

        96
      • Configuring the Relay Device

        97
      • Obtaining Configuration Files

        97
      • Example Configuration

        98
    • Manually Assigning IP Information

      100
  • Checking and Saving the Running Configuration

    101
  • Modifying the Startup Configuration

    102
    • Default Boot Configuration

      102
    • Automatically Downloading a Configuration File

      102
    • Specifying the Filename to Read and Write the System Configuration

      102
    • Booting Manually

      103
    • Booting a Specific Software Image

      104
    • Controlling Environment Variables

      105
  • Scheduling a Reload of the Software Image

    107
    • Configuring a Scheduled Reload

      107
    • Displaying Scheduled Reload Information

      108
• Configuring Cisco IOS CNS Agents

  109
  • Understanding Cisco Configuration Engine Software

    109
    • Configuration Service

      110
    • Event Service

      111
      • NameSpace Mapper

        111
    • What You Should Know About the CNS IDs and Device Hostnames

      111
      • ConfigID

        111
      • DeviceID

        112
      • Hostname and DeviceID

        112
      • Using Hostname, DeviceID, and ConfigID

        112
  • Understanding Cisco IOS Agents

    113
    • Initial Configuration

      113
    • Incremental (Partial) Configuration

      114
    • Synchronized Configuration

      114
  • Configuring Cisco IOS Agents

    114
    • Enabling Automated CNS Configuration

      114
    • Enabling the CNS Event Agent

      116
    • Enabling the Cisco IOS CNS Agent

      117
      • Enabling an Initial Configuration

        117
      • Enabling a Partial Configuration

        119
  • Displaying CNS Configuration

    120
• Managing Switch Stacks

  121
  • Understanding Switch Stacks

    121
    • Switch Stack Membership

      123
    • Stack Master Election and Re-Election

      125
    • Switch Stack Bridge ID and Router MAC Address

      126
    • Stack Member Numbers

      126
    • Stack Member Priority Values

      127
    • Switch Stack Offline Configuration

      128
      • Effects of Adding a Provisioned Switch to a Switch Stack

        128
      • Effects of Replacing a Provisioned Switch in a Switch Stack

        130
      • Effects of Removing a Provisioned Switch from a Switch Stack

        130
    • Hardware Compatibility and SDM Mismatch Mode in Switch Stacks

      130
    • Switch Stack Software Compatibility Recommendations

      130
    • Stack Protocol Version Compatibility

      131
    • Major Version Number Incompatibility Among Switches

      131
    • Minor Version Number Incompatibility Among Switches

      131
      • Understanding Auto-Upgrade and Auto-Advise

        132
      • Auto-Upgrade and Auto-Advise Example Messages

        133
    • Incompatible Software and Stack Member Image Upgrades

      135
    • Switch Stack Configuration Files

      135
    • Additional Considerations for System-Wide Configuration on Switch Stacks

      136
    • Switch Stack Management Connectivity

      136
      • Connectivity to the Switch Stack Through an IP Address

        137
      • Connectivity to the Switch Stack Through an SSH Session

        137
      • Connectivity to the Switch Stack Through Console Ports or Ethernet Management Ports

        137
      • Connectivity to Specific Stack Members

        137
    • Switch Stack Configuration Scenarios

      138
  • Configuring the Switch Stack

    140
    • Default Switch Stack Configuration

      140
    • Enabling Persistent MAC Address

      140
    • Assigning Stack Member Information

      142
      • Assigning a Stack Member Number

        142
      • Setting the Stack Member Priority Value

        142
      • Provisioning a New Member for a Switch Stack

        143
  • Accessing the CLI of a Specific Stack Member

    144
  • Displaying Switch Stack Information

    144
• Clustering Switches

  147
  • Understanding Switch Clusters

    147
    • Cluster Command Switch Characteristics

      149
    • Standby Cluster Command Switch Characteristics

      149
    • Candidate Switch and Cluster Member Switch Characteristics

      150
  • Planning a Switch Cluster

    150
    • Automatic Discovery of Cluster Candidates and Members

      151
      • Discovery Through CDP Hops

        151
      • Discovery Through Non-CDP-Capable and Noncluster-Capable Devices

        152
      • Discovery Through Different VLANs

        153
      • Discovery Through Different Management VLANs

        154
      • Discovery Through Routed Ports

        155
      • Discovery of Newly Installed Switches

        156
    • HSRP and Standby Cluster Command Switches

      157
      • Virtual IP Addresses

        158
      • Other Considerations for Cluster Standby Groups

        158
      • Automatic Recovery of Cluster Configuration

        159
    • IP Addresses

      160
    • Hostnames

      160
    • Passwords

      161
    • SNMP Community Strings

      161
    • Switch Clusters and Switch Stacks

      162
    • TACACS+ and RADIUS

      163
    • LRE Profiles 

      163
  • Using the CLI to Manage Switch Clusters

    164
    • Catalyst1900 and Catalyst2820 CLI Considerations

      164
  • Using SNMP to Manage Switch Clusters

    165
• Administering the Switch

  167
  • Managing the System Time and Date

    167
    • Understanding the System Clock

      167
    • Understanding Network Time Protocol

      168
    • Configuring NTP

      169
      • Default NTP Configuration

        170
      • Configuring NTP Authentication

        170
      • Configuring NTP Associations

        171
      • Configuring NTP Broadcast Service

        172
      • Configuring NTP Access Restrictions

        174
      • Configuring the Source IP Address for NTP Packets

        176
      • Displaying the NTP Configuration

        177
    • Configuring Time and Date Manually

      177
      • Setting the System Clock

        177
      • Displaying the Time and Date Configuration

        178
      • Configuring the Time Zone

        178
      • Configuring Summer Time (Daylight Saving Time)

        179
  • Configuring a System Name and Prompt

    180
    • Default System Name and Prompt Configuration

      181
    • Configuring a System Name

      181
    • Understanding DNS

      181
      • Default DNS Configuration

        182
      • Setting Up DNS

        182
      • Displaying the DNS Configuration

        183
  • Creating a Banner

    183
    • Default Banner Configuration

      183
    • Configuring a Message-of-the-Day Login Banner

      184
    • Configuring a Login Banner

      185
  • Managing the MAC Address Table

    185
    • Building the Address Table

      186
    • MAC Addresses and VLANs

      186
    • MAC Addresses and Switch Stacks

      187
    • Default MAC Address Table Configuration

      187
    • Changing the Address Aging Time

      187
    • Removing Dynamic Address Entries

      188
    • Configuring MAC Address Notification Traps

      188
    • Adding and Removing Static Address Entries

      190
    • Configuring Unicast MAC Address Filtering

      191
    • Displaying Address Table Entries

      193
  • Managing the ARP Table

    193
• Configuring SDM Templates

  195
  • Understanding the SDM Templates

    195
    • Dual IPv4 and IPv6 SDM Templates

      196
    • SDM Templates and Switch Stacks

      197
  • Configuring the Switch SDM Template

    198
    • Default SDM Template

      198
    • SDM Template Configuration Guidelines

      198
    • Setting the SDM Template

      199
  • Displaying the SDM Templates

    200
• Configuring Switch-Based Authentication

  203
  • Preventing Unauthorized Access to Your Switch

    203
  • Protecting Access to Privileged EXEC Commands

    204
    • Default Password and Privilege Level Configuration

      204
    • Setting or Changing a Static Enable Password

      205
    • Protecting Enable and Enable Secret Passwords with Encryption

      205
    • Disabling Password Recovery

      207
    • Setting a Telnet Password for a Terminal Line

      208
    • Configuring Username and Password Pairs

      208
    • Configuring Multiple Privilege Levels

      209
      • Setting the Privilege Level for a Command

        210
      • Changing the Default Privilege Level for Lines

        211
      • Logging into and Exiting a Privilege Level

        211
  • Controlling Switch Access with TACACS+

    212
    • Understanding TACACS+

      212
    • TACACS+ Operation

      214
    • Configuring TACACS+

      214
      • Default TACACS+ Configuration

        215
      • Identifying the TACACS+ Server Host and Setting the Authentication Key

        215
      • Configuring TACACS+ Login Authentication

        216
      • Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services

        218
      • Starting TACACS+ Accounting

        219
    • Displaying the TACACS+ Configuration

      219
  • Controlling Switch Access with RADIUS

    219
    • Understanding RADIUS

      220
    • RADIUS Operation

      221
    • Configuring RADIUS

      222
      • Default RADIUS Configuration

        222
      • Identifying the RADIUS Server Host

        222
      • Configuring RADIUS Login Authentication

        225
      • Defining AAA Server Groups

        227
      • Configuring RADIUS Authorization for User Privileged Access and Network Services

        229
      • Starting RADIUS Accounting

        230
      • Configuring Settings for All RADIUS Servers

        231
      • Configuring the Switch to Use Vendor-Specific RADIUS Attributes

        231
      • Configuring the Switch for Vendor-Proprietary RADIUS Server Communication

        232
    • Displaying the RADIUS Configuration

      233
  • Controlling Switch Access with Kerberos

    233
    • Understanding Kerberos

      234
    • Kerberos Operation

      236
      • Authenticating to a Boundary Switch

        236
      • Obtaining a TGT from a KDC

        237
      • Authenticating to Network Services

        237
    • Configuring Kerberos

      237
  • Configuring the Switch for Local Authentication and Authorization

    238
  • Configuring the Switch for Secure Shell

    239
    • Understanding SSH

      240
      • SSH Servers, Integrated Clients, and Supported Versions

        240
      • Limitations

        241
    • Configuring SSH

      241
      • Configuration Guidelines

        241
      • Setting Up the Switch to Run SSH

        242
      • Configuring the SSH Server

        243
    • Displaying the SSH Configuration and Status

      243
  • Configuring the Switch for Secure Socket Layer HTTP

    244
    • Understanding Secure HTTP Servers and Clients

      244
      • Certificate Authority Trustpoints

        244
      • CipherSuites

        246
    • Configuring Secure HTTP Servers and Clients

      246
      • Default SSL Configuration

        246
      • SSL Configuration Guidelines

        247
      • Configuring a CA Trustpoint

        247
      • Configuring the Secure HTTP Server

        248
      • Configuring the Secure HTTP Client

        249
    • Displaying Secure HTTP Server and Client Status

      250
  • Configuring the Switch for Secure Copy Protocol

    250
    • Information About Secure Copy

      251
• Configuring IEEE 802.1x Port-Based Authentication

  253
  • Understanding IEEE 802.1x Port-Based Authentication

    253
    • Device Roles

      254
    • Authentication Process

      255
    • Authentication Initiation and Message Exchange

      257
    • Ports in Authorized and Unauthorized States

      259
    • IEEE 802.1x Authentication and Switch Stacks

      259
    • IEEE 802.1x Host Mode

      260
    • IEEE 802.1x Accounting

      261
    • IEEE 802.1x Accounting Attribute-Value Pairs

      261
    • Using IEEE 802.1x Authentication with VLAN Assignment

      262
    • Using IEEE 802.1x Authentication with Per-User ACLs

      263
    • Using IEEE 802.1x Authentication with Guest VLAN

      264
    • Using IEEE 802.1x Authentication with Restricted VLAN

      265
    • Using IEEE 802.1x Authentication with Inaccessible Authentication Bypass

      266
    • Using IEEE 802.1x Authentication with Voice VLAN Ports

      267
    • Using IEEE 802.1x Authentication with Port Security

      268
    • Using IEEE 802.1x Authentication with Wake-on-LAN

      269
    • Using IEEE 802.1x Authentication with MAC Authentication Bypass

      269
    • Network Admission Control Layer 2 IEEE 802.1x Validation

      271
    • Using Multidomain Authentication

      271
    • Using Web Authentication

      272
  • Configuring IEEE 802.1x Authentication

    273
    • Default IEEE 802.1x Authentication Configuration

      274
    • IEEE 802.1x Authentication Configuration Guidelines

      275
      • IEEE 802.1x Authentication

        275
      • VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass

        276
      • MAC Authentication Bypass

        277
    • Configuring IEEE 802.1x Authentication

      277
    • Configuring the Switch-to-RADIUS-Server Communication

      278
    • Configuring the Host Mode

      280
    • Configuring Periodic Re-Authentication

      281
    • Manually Re-Authenticating a Client Connected to a Port

      281
    • Changing the Quiet Period

      282
    • Changing the Switch-to-Client Retransmission Time

      282
    • Setting the Switch-to-Client Frame-Retransmission Number

      283
    • Setting the Re-Authentication Number

      284
    • Configuring IEEE 802.1x Accounting

      284
    • Configuring a Guest VLAN

      285
    • Configuring a Restricted VLAN

      286
    • Configuring the Inaccessible Authentication Bypass Feature

      288
    • Configuring IEEE 802.1x Authentication with WoL

      290
    • Configuring MAC Authentication Bypass

      291
    • Configuring NAC Layer 2 IEEE 802.1x Validation

      292
    • Configuring Web Authentication

      293
    • Disabling IEEE 802.1x Authentication on the Port

      295
    • Resetting the IEEE 802.1x Authentication Configuration to the Default Values

      296
  • Displaying IEEE 802.1x Statistics and Status

    296
• Configuring Interface Characteristics

  297
  • Understanding Interface Types

    297
    • Port-Based VLANs

      298
    • Switch Ports

      298
      • Access Ports

        299
      • Trunk Ports

        299
      • Tunnel Ports

        300
    • Routed Ports

      300
    • Switch Virtual Interfaces

      301
    • EtherChannel Port Groups

      301
    • 10-Gigabit Ethernet Interfaces

      302
    • Power over Ethernet Ports

      302
      • Supported Protocols and Standards

        302
      • Powered-Device Detection and Initial Power Allocation

        303
      • Power Management Modes

        304
      • Power Monitoring and Power Policing

        305
    • Connecting Interfaces

      307
    • Ethernet Management Port

      308
  • Using Interface Configuration Mode

    311
    • Procedures for Configuring Interfaces

      312
    • Configuring a Range of Interfaces

      313
    • Configuring and Using Interface Range Macros

      315
  • Configuring Ethernet Interfaces

    316
    • Default Ethernet Interface Configuration

      317
    • Configuring Interface Speed and Duplex Mode

      318
      • Speed and Duplex Configuration Guidelines

        318
      • Setting the Interface Speed and Duplex Parameters

        319
    • Configuring IEEE 802.3x Flow Control

      320
    • Configuring Auto-MDIX on an Interface

      321
    • Configuring a Power Management Mode on a PoE Port

      322
    • Budgeting Power for Devices Connected to a PoE Port

      323
    • Configuring Power Policing

      325
    • Adding a Description for an Interface

      326
    • Configuring Ethernet Management Ports

      327
  • Configuring Layer 3 Interfaces

    327
  • Configuring the System MTU

    329
  • Configuring the Cisco Redundant Power System 2300

    331
  • Configuring the Power Supplies

    333
  • Monitoring and Maintaining the Interfaces

    334
    • Monitoring Interface Status

      334
    • Clearing and Resetting Interfaces and Counters

      335
    • Shutting Down and Restarting the Interface

      336
• Configuring Smartports Macros

  337
  • Understanding Smartports Macros

    337
  • Configuring Smartports Macros

    338
    • Default Smartports Macro Configuration

      338
    • Smartports Macro Configuration Guidelines

      339
    • Creating Smartports Macros

      340
    • Applying Smartports Macros

      341
    • Applying Cisco-Default Smartports Macros

      342
  • Displaying Smartports Macros

    344
• Configuring VLANs

  345
  • Understanding VLANs

    345
    • Supported VLANs

      347
    • VLAN Port Membership Modes

      347
  • Configuring Normal-Range VLANs

    348
    • Token Ring VLANs

      350
    • Normal-Range VLAN Configuration Guidelines

      350
    • VLAN Configuration Mode Options

      351
      • VLAN Configuration in config-vlan Mode

        351
      • VLAN Configuration in VLAN Database Configuration Mode

        351
    • Saving VLAN Configuration

      351
    • Default Ethernet VLAN Configuration

      352
    • Creating or Modifying an Ethernet VLAN

      353
    • Deleting a VLAN

      354
    • Assigning Static-Access Ports to a VLAN

      355
  • Configuring Extended-Range VLANs

    356
    • Default VLAN Configuration

      356
    • Extended-Range VLAN Configuration Guidelines

      357
    • Creating an Extended-Range VLAN

      358
    • Creating an Extended-Range VLAN with an Internal VLAN ID

      359
  • Displaying VLANs

    360
  • Configuring VLAN Trunks

    360
    • Trunking Overview

      360
      • Encapsulation Types

        362
      • IEEE 802.1Q Configuration Considerations

        363
    • Default Layer 2 Ethernet Interface VLAN Configuration

      363
    • Configuring an Ethernet Interface as a Trunk Port

      363
      • Interaction with Other Features

        364
      • Configuring a Trunk Port

        364
      • Defining the Allowed VLANs on a Trunk

        365
      • Changing the Pruning-Eligible List

        366
      • Configuring the Native VLAN for Untagged Traffic

        367
    • Configuring Trunk Ports for Load Sharing

      368
      • Load Sharing Using STP Port Priorities

        368
      • Load Sharing Using STP Path Cost

        370
  • Configuring VMPS

    372
    • Understanding VMPS

      372
      • Dynamic-Access Port VLAN Membership

        373
    • Default VMPS Client Configuration

      373
    • VMPS Configuration Guidelines

      373
    • Configuring the VMPS Client

      374
      • Entering the IP Address of the VMPS

        374
      • Configuring Dynamic-Access Ports on VMPS Clients

        375
      • Reconfirming VLAN Memberships

        375
      • Changing the Reconfirmation Interval

        376
      • Changing the Retry Count

        376
    • Monitoring the VMPS

      377
    • Troubleshooting Dynamic-Access Port VLAN Membership

      377
    • VMPS Configuration Example

      377
• Configuring VTP

  379
  • Understanding VTP

    379
    • The VTP Domain

      380
    • VTP Modes

      381
    • VTP Advertisements

      381
    • VTP Version 2

      382
    • VTP Pruning

      382
    • VTP and Switch Stacks

      384
  • Configuring VTP

    384
    • Default VTP Configuration

      385
    • VTP Configuration Options

      385
      • VTP Configuration in Global Configuration Mode

        385
      • VTP Configuration in VLAN Database Configuration Mode

        386
    • VTP Configuration Guidelines

      386
      • Domain Names

        386
      • Passwords

        386
      • VTP Version

        387
      • Configuration Requirements

        387
    • Configuring a VTP Server

      387
    • Configuring a VTP Client

      389
    • Disabling VTP (VTP Transparent Mode)

      390
    • Enabling VTP Version 2

      391
    • Enabling VTP Pruning

      392
    • Adding a VTP Client Switch to a VTP Domain

      392
  • Monitoring VTP

    394
• Configuring Voice VLAN

  395
  • Understanding Voice VLAN

    395
    • Cisco IP Phone Voice Traffic

      396
    • Cisco IP Phone Data Traffic

      396
  • Configuring Voice VLAN

    397
    • Default Voice VLAN Configuration

      397
    • Voice VLAN Configuration Guidelines

      397
    • Configuring a Port Connected to a Cisco7960 IP Phone

      398
      • Configuring Cisco IP Phone Voice Traffic

        399
      • Configuring the Priority of Incoming Data Frames

        400
  • Displaying Voice VLAN

    401
• Configuring Private VLANs

  403
  • Understanding Private VLANs

    403
    • IP Addressing Scheme with Private VLANs

      405
    • Private VLANs across Multiple Switches

      406
    • Private-VLAN Interaction with Other Features

      406
      • Private VLANs and Unicast, Broadcast, and Multicast Traffic

        407
      • Private VLANs and SVIs

        407
      • Private VLANs and Switch Stacks

        408
  • Configuring Private VLANs

    408
    • Tasks for Configuring Private VLANs

      408
    • Default Private-VLAN Configuration

      409
    • Private-VLAN Configuration Guidelines

      409
      • Secondary and Primary VLAN Configuration

        409
      • Private-VLAN Port Configuration

        410
      • Limitations with Other Features

        411
    • Configuring and Associating VLANs in a Private VLAN

      412
    • Configuring a Layer 2 Interface as a Private-VLAN Host Port

      414
    • Configuring a Layer 2 Interface as a Private-VLAN Promiscuous Port

      415
    • Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface

      416
  • Monitoring Private VLANs

    417
• Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling

  419
  • Understanding IEEE 802.1Q Tunneling

    419
  • Configuring IEEE 802.1Q Tunneling

    422
    • Default IEEE 802.1Q Tunneling Configuration

      422
    • IEEE 802.1Q Tunneling Configuration Guidelines

      422
      • Native VLANs

        422
      • System MTU

        423
    • IEEE 802.1Q Tunneling and Other Features

      424
    • Configuring an IEEE 802.1Q Tunneling Port

      425
  • Understanding Layer 2 Protocol Tunneling

    426
  • Configuring Layer 2 Protocol Tunneling

    428
    • Default Layer 2 Protocol Tunneling Configuration

      429
    • Layer 2 Protocol Tunneling Configuration Guidelines

      430
    • Configuring Layer 2 Protocol Tunneling

      431
    • Configuring Layer 2 Tunneling for EtherChannels

      432
      • Configuring the SP Edge Switch

        432
      • Configuring the Customer Switch

        434
  • Monitoring and Maintaining Tunneling Status

    436
• Configuring STP

  437
  • Understanding Spanning-Tree Features

    437
    • STP Overview

      438
    • Spanning-Tree Topology and BPDUs

      439
    • Bridge ID, Switch Priority, and Extended System ID

      440
    • Spanning-Tree Interface States

      441
      • Blocking State

        443
      • Listening State

        443
      • Learning State

        443
      • Forwarding State

        443
      • Disabled State

        444
    • How a Switch or Port Becomes the Root Switch or Root Port

      444
    • Spanning Tree and Redundant Connectivity

      445
    • Spanning-Tree Address Management

      445
    • Accelerated Aging to Retain Connectivity

      445
    • Spanning-Tree Modes and Protocols

      446
    • Supported Spanning-Tree Instances

      446
    • Spanning-Tree Interoperability and Backward Compatibility

      447
    • STP and IEEE 802.1Q Trunks

      447
    • VLAN-Bridge Spanning Tree

      447
    • Spanning Tree and Switch Stacks

      448
  • Configuring Spanning-Tree Features

    448
    • Default Spanning-Tree Configuration

      449
    • Spanning-Tree Configuration Guidelines

      449
    • Changing the Spanning-Tree Mode.

      451
    • Disabling Spanning Tree

      452
    • Configuring the Root Switch

      452
    • Configuring a Secondary Root Switch

      454
    • Configuring Port Priority

      454
    • Configuring Path Cost

      456
    • Configuring the Switch Priority of a VLAN

      457
    • Configuring Spanning-Tree Timers

      458
      • Configuring the Hello Time

        458
      • Configuring the Forwarding-Delay Time for a VLAN

        459
      • Configuring the Maximum-Aging Time for a VLAN

        459
      • Configuring the Transmit Hold-Count

        460
  • Displaying the Spanning-Tree Status

    460
• Configuring MSTP

  461
  • Understanding MSTP

    462
    • Multiple Spanning-Tree Regions

      462
    • IST, CIST, and CST

      463
      • Operations Within an MST Region

        463
      • Operations Between MST Regions

        464
      • IEEE 802.1s Terminology

        465
    • Hop Count

      465
    • Boundary Ports

      466
    • IEEE 802.1s Implementation

      466
      • Port Role Naming Change

        467
      • Interoperation Between Legacy and Standard Switches

        467
      • Detecting Unidirectional Link Failure

        468
    • MSTP and Switch Stacks

      468
    • Interoperability with IEEE 802.1D STP

      469
  • Understanding RSTP

    469
    • Port Roles and the Active Topology

      469
    • Rapid Convergence

      470
    • Synchronization of Port Roles

      471
    • Bridge Protocol Data Unit Format and Processing

      472
      • Processing Superior BPDU Information

        473
      • Processing Inferior BPDU Information

        473
    • Topology Changes

      473
  • Configuring MSTP Features

    474
    • Default MSTP Configuration

      475
    • MSTP Configuration Guidelines

      475
    • Specifying the MST Region Configuration and Enabling MSTP

      476
    • Configuring the Root Switch

      477
    • Configuring a Secondary Root Switch

      479
    • Configuring Port Priority

      480
    • Configuring Path Cost

      481
    • Configuring the Switch Priority

      482
    • Configuring the Hello Time

      482
    • Configuring the Forwarding-Delay Time

      483
    • Configuring the Maximum-Aging Time

      484
    • Configuring the Maximum-Hop Count

      484
    • Specifying the Link Type to Ensure Rapid Transitions

      484
    • Designating the Neighbor Type

      485
    • Restarting the Protocol Migration Process

      486
  • Displaying the MST Configuration and Status

    486
• Configuring Optional Spanning-Tree Features

  487
  • Understanding Optional Spanning-Tree Features

    487
    • Understanding Port Fast

      488
    • Understanding BPDU Guard

      488
    • Understanding BPDU Filtering

      489
    • Understanding UplinkFast

      489
    • Understanding Cross-Stack UplinkFast

      491
      • How CSUF Works

        492
      • Events that Cause Fast Convergence

        493
    • Understanding BackboneFast

      493
    • Understanding EtherChannel Guard

      496
    • Understanding Root Guard

      496
    • Understanding Loop Guard

      497
  • Configuring Optional Spanning-Tree Features

    497
    • Default Optional Spanning-Tree Configuration

      498
    • Optional Spanning-Tree Configuration Guidelines

      498
    • Enabling Port Fast

      498
    • Enabling BPDU Guard

      499
    • Enabling BPDU Filtering

      500
    • Enabling UplinkFast for Use with Redundant Links

      501
    • Enabling Cross-Stack UplinkFast

      502
    • Enabling BackboneFast

      502
    • Enabling EtherChannel Guard

      503
    • Enabling Root Guard

      504
    • Enabling Loop Guard

      504
  • Displaying the Spanning-Tree Status

    505
• Configuring Flex Links and the MAC Address-Table Move Update Feature

  507
  • Understanding Flex Links and the MAC Address-Table Move Update

    507
    • Flex Links

      507
    • VLAN Flex Link Load Balancing and Support

      508
    • MAC Address-Table Move Update

      509
  • Configuring Flex Links and MAC Address-Table Move Update

    511
    • Configuration Guidelines

      511
    • Default Configuration

      511
  • Configuring Flex Links and MAC Address-Table Move Update

    512
    • Configuring Flex Links

      512
    • Configuring VLAN Load Balancing on Flex Links

      514
    • Configuring the MAC Address-Table Move Update Feature

      515
  • Monitoring Flex Links and the MAC Address-Table Move Update

    517
• Configuring DHCP Features and IP Source Guard

  519
  • Understanding DHCP Features

    519
    • DHCP Server

      520
    • DHCP Relay Agent

      520
    • DHCP Snooping

      520
    • Option-82 Data Insertion

      521
    • Cisco IOS DHCP Server Database

      524
    • DHCP Snooping Binding Database

      524
    • DHCP Snooping and Switch Stacks

      526
  • Configuring DHCP Features

    526
    • Default DHCP Configuration

      526
    • DHCP Snooping Configuration Guidelines

      527
    • Configuring the DHCP Server

      528
    • DHCP Server and Switch Stacks

      528
    • Configuring the DHCP Relay Agent

      529
    • Specifying the Packet Forwarding Address

      529
    • Enabling DHCP Snooping and Option 82

      530
    • Enabling DHCP Snooping on Private VLANs

      532
    • Enabling the Cisco IOS DHCP Server Database

      532
    • Enabling the DHCP Snooping Binding Database Agent

      532
  • Displaying DHCP Snooping Information

    533
  • Understanding IP Source Guard

    534
    • Source IP Address Filtering

      534
    • Source IP and MAC Address Filtering

      535
  • Configuring IP Source Guard

    535
    • Default IP Source Guard Configuration

      535
    • IP Source Guard Configuration Guidelines

      535
    • Enabling IP Source Guard

      536
  • Displaying IP Source Guard Information

    537
• Configuring Dynamic ARP Inspection

  539
  • Understanding Dynamic ARP Inspection

    539
    • Interface Trust States and Network Security

      541
    • Rate Limiting of ARP Packets

      542
    • Relative Priority of ARP ACLs and DHCP Snooping Entries

      542
    • Logging of Dropped Packets

      543
  • Configuring Dynamic ARP Inspection

    543
    • Default Dynamic ARP Inspection Configuration

      543
    • Dynamic ARP Inspection Configuration Guidelines

      544
    • Configuring Dynamic ARP Inspection in DHCP Environments

      545
    • Configuring ARP ACLs for Non-DHCP Environments

      546
    • Limiting the Rate of Incoming ARP Packets

      548
    • Performing Validation Checks

      549
    • Configuring the Log Buffer

      550
  • Displaying Dynamic ARP Inspection Information

    552
• Configuring IGMP Snooping and MVR

  555
  • Understanding IGMP Snooping

    556
    • IGMP Versions

      557
    • Joining a Multicast Group

      557
    • Leaving a Multicast Group

      559
    • Immediate Leave

      560
    • IGMP Configurable-Leave Timer

      560
    • IGMP Report Suppression

      560
    • IGMP Snooping and Switch Stacks

      561
  • Configuring IGMP Snooping

    561
    • Default IGMP Snooping Configuration

      561
    • Enabling or Disabling IGMP Snooping

      562
    • Setting the Snooping Method

      563
    • Configuring a Multicast Router Port

      564
    • Configuring a Host Statically to Join a Group

      565
    • Enabling IGMP Immediate Leave

      565
    • Configuring the IGMP Leave Timer

      566
    • Configuring TCN-Related Commands

      567
      • Controlling the Multicast Flooding Time After a TCN Event

        567
      • Recovering from Flood Mode

        567
      • Disabling Multicast Flooding During a TCN Event

        568
    • Configuring the IGMP Snooping Querier

      569
    • Disabling IGMP Report Suppression

      570
  • Displaying IGMP Snooping Information

    571
  • Understanding Multicast VLAN Registration

    572
    • Using MVR in a Multicast Television Application

      573
  • Configuring MVR

    574
    • Default MVR Configuration

      574
    • MVR Configuration Guidelines and Limitations

      575
    • Configuring MVR Global Parameters

      575
    • Configuring MVR Interfaces

      576
  • Displaying MVR Information

    578
  • Configuring IGMP Filtering and Throttling

    578
    • Default IGMP Filtering and Throttling Configuration

      579
    • Configuring IGMP Profiles

      579
    • Applying IGMP Profiles

      581
    • Setting the Maximum Number of IGMP Groups

      581
    • Configuring the IGMP Throttling Action

      582
  • Displaying IGMP Filtering and Throttling Configuration

    583
• Configuring IPv6 MLD Snooping

  585
  • Understanding MLD Snooping

    585
    • MLD Messages

      587
    • MLD Queries

      587
    • Multicast Client Aging Robustness

      587
    • Multicast Router Discovery

      588
    • MLD Reports

      588
    • MLD Done Messages and Immediate-Leave

      588
    • Topology Change Notification Processing

      589
    • MLD Snooping in Switch Stacks

      589
  • Configuring IPv6 MLD Snooping

    589
    • Default MLD Snooping Configuration

      590
    • MLD Snooping Configuration Guidelines

      590
    • Enabling or Disabling MLD Snooping

      591
    • Configuring a Static Multicast Group

      592
    • Configuring a Multicast Router Port

      592
    • Enabling MLD Immediate Leave

      593
    • Configuring MLD Snooping Queries

      594
    • Disabling MLD Listener Message Suppression

      595
  • Displaying MLD Snooping Information

    595
• Configuring Port-Based Traffic Control

  597
  • Configuring Storm Control

    597
    • Understanding Storm Control

      597
    • Default Storm Control Configuration

      599
    • Configuring Storm Control and Threshold Levels

      599
  • Configuring Protected Ports

    601
    • Default Protected Port Configuration

      601
    • Protected Port Configuration Guidelines

      602
    • Configuring a Protected Port

      602
  • Configuring Port Blocking

    602
    • Default Port Blocking Configuration

      603
    • Blocking Flooded Traffic on an Interface

      603
  • Configuring Port Security

    603
    • Understanding Port Security

      604
      • Secure MAC Addresses

        604
      • Security Violations

        605
    • Default Port Security Configuration

      606
    • Port Security Configuration Guidelines

      606
    • Enabling and Configuring Port Security

      608
    • Enabling and Configuring Port Security Aging

      612
    • Port Security and Switch Stacks

      613
    • Port Security and Private VLANs

      613
  • Displaying Port-Based Traffic Control Settings

    614
• Configuring CDP

  615
  • Understanding CDP

    615
    • CDP and Switch Stacks

      616
  • Configuring CDP

    616
    • Default CDP Configuration

      616
    • Configuring the CDP Characteristics

      616
    • Disabling and Enabling CDP

      617
    • Disabling and Enabling CDP on an Interface

      618
  • Monitoring and Maintaining CDP

    619
• Configuring LLDP and LLDP-MED

  621
  • Understanding LLDP and LLDP-MED

    621
    • Understanding LLDP

      621
    • Understanding LLDP-MED

      622
  • Configuring LLDP and LLDP-MED

    623
    • Default LLDP Configuration

      623
    • Configuring LLDP Characteristics

      623
    • Disabling and Enabling LLDP Globally

      624
    • Disabling and Enabling LLDP on an Interface

      625
    • Configuring LLDP-MED TLVs

      626
  • Monitoring and Maintaining LLDP and LLDP-MED

    627
• Configuring UDLD

  629
  • Understanding UDLD

    629
    • Modes of Operation

      629
    • Methods to Detect Unidirectional Links

      630
  • Configuring UDLD

    631
    • Default UDLD Configuration

      632
    • Configuration Guidelines

      632
    • Enabling UDLD Globally

      633
    • Enabling UDLD on an Interface

      634
    • Resetting an Interface Disabled by UDLD

      634
  • Displaying UDLD Status

    635
• Configuring SPAN and RSPAN

  637
  • Understanding SPAN and RSPAN

    637
    • Local SPAN

      638
    • Remote SPAN

      639
    • SPAN and RSPAN Concepts and Terminology

      640
      • SPAN Sessions

        640
      • Monitored Traffic

        641
      • Source Ports

        642
      • Source VLANs

        643
      • VLAN Filtering

        643
      • Destination Port

        644
      • RSPAN VLAN

        645
    • SPAN and RSPAN Interaction with Other Features

      645
    • SPAN and RSPAN and Switch Stacks

      646
  • Configuring SPAN and RSPAN

    646
    • Default SPAN and RSPAN Configuration

      647
    • Configuring Local SPAN

      647
      • SPAN Configuration Guidelines

        647
      • Creating a Local SPAN Session

        648
      • Creating a Local SPAN Session and Configuring Incoming Traffic

        650
      • Specifying VLANs to Filter

        651
    • Configuring RSPAN

      652
      • RSPAN Configuration Guidelines

        652
      • Configuring a VLAN as an RSPAN VLAN

        653
      • Creating an RSPAN Source Session

        654
      • Creating an RSPAN Destination Session

        655
      • Creating an RSPAN Destination Session and Configuring Incoming Traffic

        656
      • Specifying VLANs to Filter

        658
  • Displaying SPAN and RSPAN Status

    659
• Configuring RMON

  661
  • Understanding RMON

    661
  • Configuring RMON

    662
    • Default RMON Configuration

      663
    • Configuring RMON Alarms and Events

      663
    • Collecting Group History Statistics on an Interface

      665
    • Collecting Group Ethernet Statistics on an Interface

      665
  • Displaying RMON Status

    666
• Configuring System Message Logging

  667
  • Understanding System Message Logging

    667
  • Configuring System Message Logging

    668
    • System Log Message Format

      668
    • Default System Message Logging Configuration

      670
    • Disabling Message Logging

      670
    • Setting the Message Display Destination Device

      671
    • Synchronizing Log Messages

      672
    • Enabling and Disabling Time Stamps on Log Messages

      674
    • Enabling and Disabling Sequence Numbers in Log Messages

      674
    • Defining the Message Severity Level

      675
    • Limiting Syslog Messages Sent to the History Table and to SNMP

      676
    • Enabling the Configuration-Change Logger

      677
    • Configuring UNIX Syslog Servers

      678
      • Logging Messages to a UNIX Syslog Daemon

        678
      • Configuring the UNIX System Logging Facility

        679
  • Displaying the Logging Configuration

    680
• Configuring SNMP

  681
  • Understanding SNMP

    681
    • SNMP Versions

      682
    • SNMP Manager Functions

      683
    • SNMP Agent Functions

      684
    • SNMP Community Strings

      684
    • Using SNMP to Access MIB Variables

      684
    • SNMP Notifications

      685
    • SNMP ifIndex MIB Object Values

      686
  • Configuring SNMP

    686
    • Default SNMP Configuration

      687
    • SNMP Configuration Guidelines

      687
    • Disabling the SNMP Agent

      688
    • Configuring Community Strings

      688
    • Configuring SNMP Groups and Users

      690
    • Configuring SNMP Notifications

      692
    • Setting the Agent Contact and Location Information

      695
    • Limiting TFTP Servers Used Through SNMP

      696
    • SNMP Examples

      696
  • Displaying SNMP Status

    697
• Configuring Network Security with ACLs

  699
  • Understanding ACLs

    699
    • Supported ACLs

      700
      • Port ACLs

        701
      • Router ACLs

        702
      • VLAN Maps

        703
    • Handling Fragmented and Unfragmented Traffic

      703
    • ACLs and Switch Stacks

      704
  • Configuring IPv4 ACLs

    705
    • Creating Standard and Extended IPv4 ACLs

      706
      • Access List Numbers

        706
      • ACL Logging

        707
      • Creating a Numbered Standard ACL

        708
      • Creating a Numbered Extended ACL

        709
      • Resequencing ACEs in an ACL

        713
      • Creating Named Standard and Extended ACLs

        713
      • Using Time Ranges with ACLs

        715
      • Including Comments in ACLs

        717
    • Applying an IPv4 ACL to a Terminal Line

      717
    • Applying an IPv4 ACL to an Interface

      718
    • Hardware and Software Treatment of IP ACLs

      720
    • IPv4 ACL Configuration Examples

      720
      • Numbered ACLs

        722
      • Extended ACLs

        722
      • Named ACLs

        723
      • Time Range Applied to an IP ACL

        723
      • Commented IP ACL Entries

        723
      • ACL Logging

        724
  • Creating Named MAC Extended ACLs

    725
    • Applying a MAC ACL to a Layer 2 Interface

      726
  • Configuring VLAN Maps

    727
    • VLAN Map Configuration Guidelines

      728
    • Creating a VLAN Map

      729
      • Examples of ACLs and VLAN Maps

        730
    • Applying a VLAN Map to a VLAN

      732
    • Using VLAN Maps in Your Network

      732
      • Wiring Closet Configuration

        732
      • Denying Access to a Server on Anothera VLAN

        733
  • Using VLAN Maps with Router ACLs

    734
    • VLAN Maps and Router ACL Configuration Guidelines

      735
    • Examples of Router ACLs and VLAN Maps Applied to VLANs

      736
      • ACLs and Switched Packets

        736
      • ACLs and Bridged Packets

        736
      • ACLs and Routed Packets

        737
      • ACLs and Multicast Packets

        738
  • Displaying IPv4 ACL Configuration

    738
• Configuring IPv6 ACLs

  741
  • Understanding IPv6 ACLs

    742
    • Supported ACL Features

      743
    • IPv6 ACL Limitations

      743
    • IPv6 ACLs and Switch Stacks

      743
  • Configuring IPv6 ACLs

    744
    • Default IPv6 ACL Configuration

      744
    • Interaction with Other Features and Switches

      744
    • Creating IPv6 ACLs

      745
    • Applying an IPv6 ACL to an Interface

      748
  • Displaying IPv6 ACLs

    749
• Configuring QoS

  751
  • Understanding QoS

    752
    • Basic QoS Model

      753
    • Classification

      755
      • Classification Based on QoS ACLs

        757
      • Classification Based on Class Maps and Policy Maps

        757
    • Policing and Marking

      758
      • Policing on Physical Ports

        759
      • Policing on SVIs

        760
    • Mapping Tables

      762
    • Queueing and Scheduling Overview

      763
      • Weighted Tail Drop

        764
      • SRR Shaping and Sharing

        764
      • Queueing and Scheduling on Ingress Queues

        765
      • Queueing and Scheduling on Egress Queues

        768
    • Packet Modification

      771
  • Configuring Auto-QoS

    772
    • Generated Auto-QoS Configuration

      773
    • Effects of Auto-QoS on the Configuration

      777
    • Auto-QoS Configuration Guidelines

      777
    • Enabling Auto-QoS for VoIP

      778
    • Auto-QoS Configuration Example

      780
  • Displaying Auto-QoS Information

    782
  • Configuring Standard QoS

    782
    • Default Standard QoS Configuration

      783
      • Default Ingress Queue Configuration

        783
      • Default Egress Queue Configuration

        784
      • Default Mapping Table Configuration

        785
    • Standard QoS Configuration Guidelines

      785
      • QoS ACL Guidelines

        785
      • Applying QoS on Interfaces

        785
      • Policing Guidelines

        786
      • General QoS Guidelines

        786
    • Enabling QoS Globally

      787
    • Enabling VLAN-Based QoS on Physical Ports

      787
    • Configuring Classification Using Port Trust States

      788
      • Configuring the Trust State on Ports within the QoS Domain

        788
      • Configuring the CoS Value for an Interface

        790
      • Configuring a Trusted Boundary to Ensure Port Security

        791
      • Enabling DSCP Transparency Mode

        792
      • Configuring the DSCP Trust State on a Port Bordering Another QoS Domain

        793
    • Configuring a QoS Policy

      795
      • Classifying Traffic by Using ACLs

        796
      • Classifying Traffic by Using Class Maps

        799
      • Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps

        801
      • Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps

        805
      • Classifying, Policing, and Marking Traffic by Using Aggregate Policers

        811
    • Configuring DSCP Maps

      813
      • Configuring the CoS-to-DSCP Map

        813
      • Configuring the IP-Precedence-to-DSCP Map

        814
      • Configuring the Policed-DSCP Map

        815
      • Configuring the DSCP-to-CoS Map

        816
      • Configuring the DSCP-to-DSCP-Mutation Map

        817
    • Configuring Ingress Queue Characteristics

      819
      • Mapping DSCP or CoS Values to an Ingress Queue and Setting WTD Thresholds

        820
      • Allocating Buffer Space Between the Ingress Queues

        821
      • Allocating Bandwidth Between the Ingress Queues

        821
      • Configuring the Ingress Priority Queue

        822
    • Configuring Egress Queue Characteristics

      823
      • Configuration Guidelines

        824
      • Allocating Buffer Space to and Setting WTD Thresholds for an Egress Queue-Set

        824
      • Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID

        826
      • Configuring SRR Shaped Weights on Egress Queues

        828
      • Configuring SRR Shared Weights on Egress Queues

        829
      • Configuring the Egress Expedite Queue

        829
      • Limiting the Bandwidth on an Egress Interface

        830
  • Displaying Standard QoS Information

    831
• Configuring EtherChannels and Link-State Tracking

  833
  • Understanding EtherChannels

    833
    • EtherChannel Overview

      834
    • Port-Channel Interfaces

      836
    • Port Aggregation Protocol

      837
      • PAgP Modes

        838
      • PAgP Interaction with Other Features

        838
    • Link Aggregation Control Protocol

      839
      • LACP Modes

        839
      • LACP Interaction with Other Features

        839
    • EtherChannel On Mode

      840
    • Load-Balancing and Forwarding Methods

      840
    • EtherChannel and Switch Stacks

      842
  • Configuring EtherChannels

    843
    • Default EtherChannel Configuration

      843
    • EtherChannel Configuration Guidelines

      844
    • Configuring Layer2 EtherChannels

      845
    • Configuring Layer3 EtherChannels

      847
      • Creating Port-Channel Logical Interfaces

        847
      • Configuring the Physical Interfaces

        848
    • Configuring EtherChannel Load-Balancing

      850
    • Configuring the PAgP Learn Method and Priority

      851
    • Configuring LACP Hot-Standby Ports

      852
      • Configuring the LACP System Priority

        853
      • Configuring the LACP Port Priority

        854
  • Displaying EtherChannel, PAgP, and LACP Status

    855
  • Understanding Link-State Tracking

    855
  • Configuring Link-State Tracking

    857
    • Default Link-State Tracking Configuration

      858
    • Link-State Tracking Configuration Guidelines

      858
    • Configuring Link-State Tracking

      858
    • Displaying Link-State Tracking Status

      859
• Configuring IP Unicast Routing

  861
  • Understanding IP Routing

    862
    • Types of Routing

      862
    • IP Routing and Switch Stacks

      863
  • Steps for Configuring Routing

    865
  • Configuring IP Addressing

    865
    • Default Addressing Configuration

      866
    • Assigning IP Addresses to Network Interfaces

      867
      • Use of Subnet Zero

        867
      • Classless Routing

        868
    • Configuring Address Resolution Methods

      869
      • Define a Static ARP Cache

        870
      • Set ARP Encapsulation

        871
      • Enable Proxy ARP

        872
    • Routing Assistance When IP Routing is Disabled

      872
      • Proxy ARP

        872
      • Default Gateway

        872
      • ICMP Router Discovery Protocol (IRDP)

        873
    • Configuring Broadcast Packet Handling

      874
      • Enabling Directed Broadcast-to-Physical Broadcast Translation

        875
      • Forwarding UDP Broadcast Packets and Protocols

        876
      • Establishing an IP Broadcast Address

        877
      • Flooding IP Broadcasts

        877
    • Monitoring and Maintaining IP Addressing

      878
  • Enabling IP Unicast Routing

    879
  • Configuring RIP

    880
    • Default RIP Configuration

      881
    • Configuring Basic RIP Parameters

      881
    • Configuring RIP Authentication

      883
    • Configuring Summary Addresses and Split Horizon

      883
    • Configuring Split Horizon

      884
  • Configuring OSPF

    885
    • Default OSPF Configuration

      886
      • OSPF Nonstop Forwarding

        887
    • Configuring Basic OSPF Parameters

      889
    • Configuring OSPF Interfaces

      889
    • Configuring OSPF Area Parameters

      891
    • Configuring Other OSPF Parameters

      892
    • Changing LSA Group Pacing

      894
    • Configuring a Loopback Interface

      894
    • Monitoring OSPF

      895
  • Configuring EIGRP

    895
    • Default EIGRP Configuration

      897
      • EIGRP Nonstop Forwarding

        898
    • Configuring Basic EIGRP Parameters

      899
    • Configuring EIGRP Interfaces

      900
    • Configuring EIGRP Route Authentication

      901
    • EIGRP Stub Routing

      902
    • Monitoring and Maintaining EIGRP

      903
  • Configuring BGP

    903
    • Default BGP Configuration

      905
      • Nonstop Forwarding Awareness

        907
    • Enabling BGP Routing

      908
    • Managing Routing Policy Changes

      910
    • Configuring BGP Decision Attributes

      912
    • Configuring BGP Filtering with Route Maps

      914
    • Configuring BGP Filtering by Neighbor

      914
    • Configuring Prefix Lists for BGP Filtering

      916
    • Configuring BGP Community Filtering

      917
    • Configuring BGP Neighbors and Peer Groups

      918
    • Configuring Aggregate Addresses

      920
    • Configuring Routing Domain Confederations

      921
    • Configuring BGP Route Reflectors

      921
    • Configuring Route Dampening

      922
    • Monitoring and Maintaining BGP

      923
  • Configuring Multi-VRF CE

    924
    • Understanding Multi-VRF CE

      925
    • Default Multi-VRF CE Configuration

      927
    • Multi-VRF CE Configuration Guidelines

      927
    • Configuring VRFs

      928
    • Configuring a VPN Routing Session

      929
    • Configuring BGP PE to CE Routing Sessions

      930
    • Multi-VRF CE Configuration Example

      930
    • Displaying Multi-VRF CE Status

      935
  • Configuring Unicast Reverse Path Forwarding

    935
  • Configuring Protocol-Independent Features

    936
    • Configuring Distributed Cisco Express Forwarding

      936
    • Configuring the Number of Equal-Cost Routing Paths

      937
    • Configuring Static Unicast Routes

      938
    • Specifying Default Routes and Networks

      939
    • Using Route Maps to Redistribute Routing Information

      940
    • Configuring Policy-Based Routing

      943
      • PBR Configuration Guidelines

        944
      • Enabling PBR

        945
    • Filtering Routing Information

      947
      • Setting Passive Interfaces

        947
      • Controlling Advertising and Processing in Routing Updates

        948
      • Filtering Sources of Routing Information

        948
    • Managing Authentication Keys

      949
  • Monitoring and Maintaining the IP Network

    950
• Configuring IPv6 Unicast Routing

  953
  • Understanding IPv6

    953
    • IPv6 Addresses

      954
    • Supported IPv6 Unicast Routing Features

      955
      • 128-Bit Wide Unicast Addresses

        955
      • DNS for IPv6

        956
      • Path MTU Discovery for IPv6 Unicast

        956
      • ICMPv6

        956
      • Neighbor Discovery

        956
      • IPv6 Stateless Autoconfiguration and Duplicate Address Detection

        957
      • IPv6 Applications

        957
      • Dual IPv4 and IPv6 Protocol Stacks

        958
    • Unsupported IPv6 Unicast Routing Features

      958
    • Limitations

      959
    • IPv6 and Switch Stacks

      959
    • SDM Templates

      961
      • Dual IPv4-and IPv6 SDM Templates

        961
  • Configuring IPv6

    962
    • Default IPv6 Configuration

      963
    • Configuring IPv6 Addressing and Enabling IPv6 Routing

      963
    • Configuring IPv4 and IPv6 Protocol Stacks

      965
    • Configuring IPv6 ICMP Rate Limiting

      967
    • Configuring CEF and dCEF for IPv6

      967
    • Configuring Static Routing for IPv6

      968
    • Configuring RIP for IPv6

      970
    • Configuring OSPF for IPv6

      972
  • Displaying IPv6

    974
• Configuring HSRP and Enhanced Object Tracking

  979
  • Understanding HSRP

    979
    • Multiple HSRP

      981
    • HSRP and Switch Stacks

      982
  • Configuring HSRP

    982
    • Default HSRP Configuration

      983
    • HSRP Configuration Guidelines

      983
    • Enabling HSRP

      983
    • Configuring HSRP Priority

      985
    • Configuring MHSRP

      987
    • Configuring HSRP Authentication and Timers

      987
    • Enabling HSRP Support for ICMP Redirect Messages

      989
    • Configuring HSRP Groups and Clustering

      989
  • Displaying HSRP Configurations

    989
  • Configuring Enhanced Object Tracking

    990
    • Understanding Enhanced Object Tracking

      990
    • Configuring Enhanced Object Tracking Features

      991
      • Tracking Interface Line-Protocol or IP Routing State

        991
      • Configuring a Tracked List

        992
      • Configuring HSRP Object Tracking

        995
      • Configuring Other Tracking Characteristics

        996
• Configuring Web Cache Services By Using WCCP

  997
  • Understanding WCCP

    997
    • WCCP Message Exchange

      998
    • WCCP Negotiation

      999
    • MD5 Security

      999
    • Packet Redirection and Service Groups

      999
    • WCCP and Switch Stacks

      1000
    • Unsupported WCCP Features

      1001
  • Configuring WCCP

    1001
    • Default WCCP Configuration

      1001
    • WCCP Configuration Guidelines

      1001
    • Enabling the Web Cache Service

      1002
  • Monitoring and Maintaining WCCP

    1005
• Configuring IP Multicast Routing

  1007
  • Understanding Cisco’s Implementation of IP Multicast Routing

    1008
    • Understanding IGMP

      1009
      • IGMP Version 1

        1009
      • IGMP Version 2

        1009
    • Understanding PIM

      1010
      • PIM Versions

        1010
      • PIM Modes

        1010
      • PIM Stub Routing

        1011
      • Auto-RP

        1012
      • Bootstrap Router

        1013
      • Multicast Forwarding and Reverse Path Check

        1013
    • Understanding DVMRP

      1014
    • Understanding CGMP

      1015
  • Multicast Routing and Switch Stacks

    1015
  • Configuring IP Multicast Routing

    1016
    • Default Multicast Routing Configuration

      1016
    • Multicast Routing Configuration Guidelines

      1016
      • PIMv1 and PIMv2 Interoperability

        1017
      • Auto-RP and BSR Configuration Guidelines

        1017
    • Configuring Basic Multicast Routing

      1018
    • Configuring PIM Stub Routing

      1019
    • Configuring a Rendezvous Point

      1020
      • Manually Assigning an RP to Multicast Groups

        1020
      • Configuring Auto-RP

        1022
      • Configuring PIMv2 BSR

        1026
    • Using Auto-RP and a BSR

      1030
    • Monitoring the RP Mapping Information

      1031
    • Troubleshooting PIMv1 and PIMv2 Interoperability Problems

      1031
  • Configuring Advanced PIM Features

    1031
    • Understanding PIM Shared Tree and Source Tree

      1031
    • Delaying the Use of PIM Shortest-Path Tree

      1033
    • Modifying the PIM Router-Query Message Interval

      1034
  • Configuring Optional IGMP Features

    1034
    • Default IGMP Configuration

      1035
    • Configuring the Switch as a Member of a Group

      1035
    • Controlling Access to IP Multicast Groups

      1036
    • Changing the IGMP Version

      1037
    • Modifying the IGMP Host-Query Message Interval

      1037
    • Changing the IGMP Query Timeout for IGMPv2

      1038
    • Changing the Maximum Query Response Time for IGMPv2

      1039
    • Configuring the Switch as a Statically Connected Member

      1039
  • Configuring Optional Multicast Routing Features

    1040
    • Enabling CGMP Server Support

      1040
    • Configuring sdr Listener Support

      1041
      • Enabling sdr Listener Support

        1042
      • Limiting How Long an sdr Cache Entry Exists

        1042
    • Configuring an IP Multicast Boundary

      1043
  • Configuring Basic DVMRP Interoperability Features

    1044
    • Configuring DVMRP Interoperability

      1045
    • Configuring a DVMRP Tunnel

      1047
    • Advertising Network 0.0.0.0 to DVMRP Neighbors

      1048
    • Responding to mrinfo Requests

      1049
  • Configuring Advanced DVMRP Interoperability Features

    1049
    • Enabling DVMRP Unicast Routing

      1050
    • Rejecting a DVMRP Nonpruning Neighbor

      1051
    • Controlling Route Exchanges

      1053
      • Limiting the Number of DVMRP Routes Advertised

        1053
      • Changing the DVMRP Route Threshold

        1053
      • Configuring a DVMRP Summary Address

        1054
      • Disabling DVMRP Autosummarization

        1056
      • Adding a Metric Offset to the DVMRP Route

        1057
  • Monitoring and Maintaining IP Multicast Routing

    1058
    • Clearing Caches, Tables, and Databases

      1058
    • Displaying System and Network Statistics

      1058
    • Monitoring IP Multicast Routing

      1059
• Configuring MSDP

  1061
  • Understanding MSDP

    1061
    • MSDP Operation

      1062
    • MSDP Benefits

      1063
  • Configuring MSDP

    1064
    • Default MSDP Configuration

      1064
    • Configuring a Default MSDP Peer

      1064
    • Caching Source-Active State

      1066
    • Requesting Source Information from an MSDP Peer

      1068
    • Controlling Source Information that Your Switch Originates

      1069
      • Redistributing Sources

        1069
      • Filtering Source-Active Request Messages

        1071
    • Controlling Source Information that Your Switch Forwards

      1072
      • Using a Filter

        1072
      • Using TTL to Limit the Multicast Data Sent in SA Messages

        1074
    • Controlling Source Information that Your Switch Receives

      1074
    • Configuring an MSDP Mesh Group

      1076
    • Shutting Down an MSDP Peer

      1076
    • Including a Bordering PIM Dense-Mode Region in MSDP

      1077
    • Configuring an Originating Address other than the RP Address

      1078
  • Monitoring and Maintaining MSDP

    1079
• Configuring Fallback Bridging

  1081
  • Understanding Fallback Bridging

    1081
    • Fallback Bridging Overview

      1081
    • Fallback Bridging and Switch Stacks

      1083
  • Configuring Fallback Bridging

    1083
    • Default Fallback Bridging Configuration

      1084
    • Fallback Bridging Configuration Guidelines

      1084
    • Creating a Bridge Group

      1084
    • Adjusting Spanning-Tree Parameters

      1086
      • Changing the VLAN-Bridge Spanning-Tree Priority

        1087
      • Changing the Interface Priority

        1087
      • Assigning a Path Cost

        1088
      • Adjusting BPDU Intervals

        1089
      • Disabling the Spanning Tree on an Interface

        1091
  • Monitoring and Maintaining Fallback Bridging

    1091
• Troubleshooting

  1093
  • Recovering from a Software Failure

    1094
  • Recovering from a Lost or Forgotten Password

    1095
    • Procedure with Password Recovery Enabled

      1097
    • Procedure with Password Recovery Disabled

      1099
  • Preventing Switch Stack Problems

    1100
  • Recovering from a Command Switch Failure

    1101
    • Replacing a Failed Command Switch with a Cluster Member

      1102
    • Replacing a Failed Command Switch with Another Switch

      1103
  • Recovering from Lost Cluster Member Connectivity

    1105
  • Preventing Autonegotiation Mismatches

    1105
  • Troubleshooting Power over Ethernet Switch Ports

    1105
    • Disabled Port Caused by Power Loss

      1106
    • Disabled Port Caused by False Link Up

      1106
  • SFP Module Security and Identification

    1106
  • Monitoring SFP Module Status

    1107
  • Monitoring Temperature

    1107
  • Using Ping

    1107
    • Understanding Ping

      1107
    • Executing Ping

      1108
  • Using Layer 2 Traceroute

    1109
    • Understanding Layer 2 Traceroute

      1109
    • Usage Guidelines

      1109
    • Displaying the Physical Path

      1110
  • Using IP Traceroute

    1110
    • Understanding IP Traceroute

      1110
    • Executing IP Traceroute

      1111
  • Using TDR

    1112
    • Understanding TDR

      1112
    • Running TDR and Displaying the Results

      1113
  • Using Debug Commands

    1113
    • Enabling Debugging on a Specific Feature

      1113
    • Enabling All-System Diagnostics

      1114
    • Redirecting Debug and Error Message Output

      1114
  • Using the show platform forward Command

    1115
  • Using the crashinfo Files

    1117
    • Basic crashinfo Files

      1117
    • Extended crashinfo Files

      1118
  • Using On-Board Failure Logging

    1118
    • Understanding OBFL

      1118
    • Configuring OBFL

      1119
    • Displaying OBFL Information

      1120
• Configuring Online Diagnostics

  1121
  • Understanding Online Diagnostics

    1121
  • Configuring Online Diagnostics

    1122
    • Scheduling Online Diagnostics

      1122
    • Configuring Health-Monitoring Diagnostics

      1123
  • Running Online Diagnostic Tests

    1125
    • Starting Online Diagnostic Tests

      1125
    • Displaying Online Diagnostic Tests and Test Results

      1126
• Supported MIBs

  1127
  • MIB List

    1127
  • Using FTP to Access the MIB Files

    1130
• Working with the Cisco IOS File System, Configuration Files, and Software Images

  1131
  • Working with the Flash File System

    1131
    • Displaying Available File Systems

      1132
    • Setting the Default File System

      1133
    • Displaying Information about Files on a File System

      1134
    • Changing Directories and Displaying the Working Directory

      1134
    • Creating and Removing Directories

      1135
    • Copying Files

      1135
    • Deleting Files

      1136
    • Creating, Displaying, and Extracting Files

      1136
  • Working with Configuration Files

    1139
    • Guidelines for Creating and Using Configuration Files

      1140
    • Configuration File Types and Location

      1140
    • Creating a Configuration File By Using a Text Editor

      1141
    • Copying Configuration Files By Using TFTP

      1141
      • Preparing to Download or Upload a Configuration File By Using TFTP

        1141
      • Downloading the Configuration File By Using TFTP

        1142
      • Uploading the Configuration File By Using TFTP

        1142
    • Copying Configuration Files By Using FTP

      1143
      • Preparing to Download or Upload a Configuration File By Using FTP

        1144
      • Downloading a Configuration File By Using FTP

        1144
      • Uploading a Configuration File By Using FTP

        1145
    • Copying Configuration Files By Using RCP

      1146
      • Preparing to Download or Upload a Configuration File By Using RCP

        1147
      • Downloading a Configuration File By Using RCP

        1148
      • Uploading a Configuration File By Using RCP

        1149
    • Clearing Configuration Information

      1149
      • Clearing the Startup Configuration File

        1150
      • Deleting a Stored Configuration File

        1150
  • Working with Software Images

    1150
    • Image Location on the Switch

      1151
    • File Format of Images on a Server or Cisco.com

      1151
    • Copying Image Files By Using TFTP

      1152
      • Preparing to Download or Upload an Image File By Using TFTP

        1153
      • Downloading an Image File By Using TFTP

        1153
      • Uploading an Image File By Using TFTP

        1155
    • Copying Image Files By Using FTP

      1156
      • Preparing to Download or Upload an Image File By Using FTP

        1156
      • Downloading an Image File By Using FTP

        1157
      • Uploading an Image File By Using FTP

        1159
    • Copying Image Files By Using RCP

      1160
      • Preparing to Download or Upload an Image File By Using RCP

        1161
      • Downloading an Image File By Using RCP

        1162
      • Uploading an Image File By Using RCP

        1164
    • Copying an Image File from One Stack Member to Another

      1165
• Unsupported Commands in CiscoIOSRelease12.2(37)SE

  1167
  • Access Control Lists

    1167
    • Unsupported Privileged EXEC Commands

      1167
    • Unsupported Global Configuration Commands

      1167
    • Unsupported Route-Map Configuration Commands

      1167
  • Archive Commands

    1168
    • Unsupported Privileged EXEC Commands

      1168
  • ARP Commands

    1168
    • Unsupported Global Configuration Commands

      1168
    • Unsupported Interface Configuration Commands

      1168
  • Boot Loader Commands

    1168
    • Unsupported Global Configuration Commands

      1168
  • Debug Commands

    1168
    • Unsupported Privileged EXEC Commands

      1168
  • Fallback Bridging

    1169
    • Unsupported Privileged EXEC Commands

      1169
    • Unsupported Global Configuration Commands

      1169
    • Unsupported Interface Configuration Commands

      1169
  • HSRP

    1170
    • Unsupported Global Configuration Commands

      1170
    • Unsupported Interface Configuration Commands

      1171
  • IGMP Snooping Commands

    1171
    • Unsupported Global Configuration Commands

      1171
  • Interface Commands

    1171
    • Unsupported Privileged EXEC Commands

      1171
    • Unsupported Global Configuration Commands

      1171
    • Unsupported Interface Configuration Commands

      1171
  • IP Multicast Routing

    1171
    • Unsupported Privileged EXEC Commands

      1171
    • Unsupported Global Configuration Commands

      1172
    • Unsupported Interface Configuration Commands

      1172
  • IP Unicast Routing

    1173
    • Unsupported Privileged EXEC or User EXEC Commands

      1173
    • Unsupported Global Configuration Commands

      1173
    • Unsupported Interface Configuration Commands

      1174
    • Unsupported BGP Router Configuration Commands

      1174
    • Unsupported VPN Configuration Commands

      1174
    • Unsupported Route Map Commands

      1174
  • MAC Address Commands

    1175
    • Unsupported Privileged EXEC Commands

      1175
    • Unsupported Global Configuration Commands

      1175
  • Miscellaneous

    1175
    • Unsupported Privileged EXEC Commands

      1175
    • Unsupported Global Configuration Commands

      1176
  • MSDP

    1176
    • Unsupported Privileged EXEC Commands

      1176
    • Unsupported Global Configuration Commands

      1176
  • NetFlow Commands

    1176
    • Unsupported Global Configuration Commands

      1176
  • Network Address Translation (NAT) Commands

    1177
    • Unsupported Privileged EXEC Commands

      1177
  • QoS

    1177
    • Unsupported Global Configuration Command

      1177
    • Unsupported Interface Configuration Commands

      1177
    • Unsupported Policy-Map Configuration Command

      1177
  • RADIUS

    1177
    • Unsupported Global Configuration Commands

      1177
  • SNMP

    1178
    • Unsupported Global Configuration Commands

      1178
  • Spanning Tree

    1178
    • Unsupported Global Configuration Command

      1178
    • Unsupported Interface Configuration Command

      1178
  • VLAN

    1178
    • Unsupported Global Configuration Command

      1178
    • Unsupported User EXEC Commands

      1178
  • VTP

    1178
    • Unsupported Privileged EXEC Command

      1178
• Index

  1179