Benutzerhandbuch für Cisco Systems WSC4500X16SFP

Inhaltsverzeichnis

• Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide

  1
• Contents

  3
• Preface

  23
  • Audience

    23
  • Organization

    23
  • Related Documentation

    25
  • Conventions

    26
    • Commands in Task Tables

      27
  • Obtaining Documentation

    27
    • Cisco.com

      27
    • Product Documentation DVD

      27
    • Ordering Documentation

      28
  • Documentation Feedback

    28
  • Cisco Product Security Overview

    28
    • Reporting Security Problems in Cisco Products

      29
  • Obtaining Technical Assistance

    29
    • Cisco Technical Support & Documentation Website

      30
    • Submitting a Service Request

      30
    • Definitions of Service Request Severity

      31
  • Obtaining Additional Publications and Information

    31
• Product Overview

  33
  • Layer 2 Software Features

    33
    • 802.1Q and Layer 2 Protocol Tunneling

      34
    • CDP

      34
    • EtherChannel Bundles

      34
    • Jumbo Frames

      34
    • MST

      34
    • PVRST+

      35
    • QoS

      35
    • Spanning Tree Protocol

      35
    • SSO

      36
    • UBRL

      36
    • UDLD

      36
    • Unidirectional Ethernet

      36
    • VLANs

      37
  • Layer 3 Software Features

    37
    • CEF

      38
    • HSRP

      38
    • IP Routing Protocols

      38
      • RIP

        38
      • OSPF

        38
      • IS-IS

        39
      • IGRP

        39
      • EIGRP

        39
      • BGP

        40
    • Multicast Services

      40
    • Policy-Based Routing

      41
    • Unidirectional Link Routing

      41
    • VRF-lite

      41
  • Management Features

    41
    • Cisco Network Assistant and Embedded CiscoView

      42
    • Dynamic Host Control Protocol

      42
    • Forced 10/100 Autonegotiation

      42
    • Intelligent Power Management

      42
    • NetFlow Statistics

      43
    • Secure Shell

      43
    • Simple Network Management Protocol

      43
    • SPAN and RSPAN

      43
  • Security Features

    44
    • Network Admission Control (NAC)

      44
    • 802.1X Identity-Based Network Security

      45
    • Dynamic ARP Inspection

      45
    • Dynamic Host Configuration Protocol Snooping

      45
    • Flood Blocking

      45
    • IP Source Guard

      46
    • Local Authentication, RADIUS, and TACACS+ Authentication

      46
    • Network Security with ACLs

      46
    • Port Security

      46
    • Storm Control

      47
    • Utilities

      47
      • Layer 2 Traceroute

        47
      • Time Domain Reflectometry

        47
      • Debugging Features

        47
• Command-Line Interfaces

  49
  • Accessing the Switch CLI

    49
    • Accessing the CLI Using the EIA/TIA-232 Console Interface

      49
    • Accessing the CLI Through Telnet

      50
  • Performing Command-Line Processing

    51
  • Performing History Substitution

    51
  • Understanding Cisco IOS Command Modes

    52
  • Getting a List of Commands and Syntax

    53
  • ROMMOM Command-Line Interface

    54
• Configuring the Switch for the First Time

  55
  • Default Switch Configuration

    55
  • Configuring DHCP-Based Autoconfiguration

    56
    • Understanding DHCP-Based Autoconfiguration

      56
    • DHCP Client Request Process

      57
    • Configuring the DHCP Server

      58
    • Configuring the TFTP Server

      58
    • Configuring the DNS Server

      59
    • Configuring the Relay Device

      59
    • Obtaining Configuration Files

      60
    • Example Configuration

      61
  • Configuring the Switch

    62
    • Using Configuration Mode to Configure Your Switch

      63
    • Verifying the Running Configuration Settings

      63
    • Saving the Running Configuration Settings to Your Start-Up File

      64
    • Reviewing the Configuration in NVRAM

      64
    • Configuring a Default Gateway

      65
    • Configuring a Static Route

      65
  • Controlling Access to Privileged EXEC Commands

    67
    • Setting or Changing a Static enable Password

      67
    • Using the enable password and enable secret Commands

      68
    • Setting or Changing a Privileged Password

      68
    • Setting TACACS+ Password Protection for Privileged EXEC Mode

      69
    • Encrypting Passwords

      69
    • Configuring Multiple Privilege Levels

      70
      • Setting the Privilege Level for a Command

        70
      • Changing the Default Privilege Level for Lines

        71
      • Logging In to a Privilege Level

        71
      • Exiting a Privilege Level

        71
      • Displaying the Password, Access Level, and Privilege Level Configuration

        71
  • Recovering a Lost Enable Password

    72
  • Modifying the Supervisor Engine Startup Configuration

    72
    • Understanding the Supervisor Engine Boot Configuration

      72
      • Understanding the ROM Monitor

        73
    • Configuring the Software Configuration Register

      73
      • Modifying the Boot Field and Using the boot Command

        74
      • Modifying the Boot Field

        75
      • Verifying the Configuration Register Setting

        76
    • Specifying the Startup System Image

      77
      • Using Flash Memory

        77
      • Flash Memory Features

        77
      • Security Precautions

        77
      • Configuring Flash Memory

        78
    • Controlling Environment Variables

      78
  • Resetting a Switch to Factory Default Settings

    79
• Configuring Interfaces

  81
  • Overview of Interface Configuration

    81
  • Using the interface Command

    82
  • Configuring a Range of Interfaces

    84
  • Defining and Using Interface-Range Macros

    85
  • Deploying 10-Gigabit Ethernet and a Gigabit Ethernet SFP Ports

    86
  • Configuring Optional Interface Features

    87
    • Configuring Ethernet Interface Speed and Duplex Mode

      87
      • Speed and Duplex Mode Configuration Guidelines

        87
      • Setting the Interface Speed

        88
      • Setting the Interface Duplex Mode

        89
      • Displaying the Interface Speed and Duplex Mode Configuration

        89
      • Adding a Description for an Interface

        90
    • Configuring Jumbo Frame Support

      90
      • Ports and Modules that Support Jumbo Frames

        90
      • Understanding Jumbo Frame Support

        91
        • Jumbo Frame Support Overview

          91
        • Ethernet Ports

          91
          • Ethernet Port Overview

            91
          • Layer 3 and Layer 2 EtherChannels

            92
        • VLAN Interfaces

          92
      • Configuring MTU Sizes

        92
    • Interacting with the Baby Giants Feature

      93
  • Understanding Online Insertion and Removal

    93
  • Monitoring and Maintaining the Interface

    93
    • Monitoring Interface and Controller Status

      94
    • Clearing and Resetting the Interface

      94
    • Shutting Down and Restarting an Interface

      95
    • Configuring Interface Link Status and Trunk Status Events

      95
      • Configuring Link Status Event Notification for an Interface

        96
      • Global Settings

        96
      • Configuring a Switch Global Link Status Logging Event

        96
      • Result

        97
• Checking Port Status and Connectivity

  99
  • Checking Module Status

    99
  • Checking Interfaces Status

    100
  • Displaying MAC Addresses

    101
  • Checking Cable Status Using TDR

    101
    • Overview

      102
    • Running the TDR Test

      102
    • Guidelines

      103
  • Using Telnet

    103
  • Changing the Logout Timer

    104
  • Monitoring User Sessions

    104
  • Using Ping

    105
    • Understanding How Ping Works

      105
    • Running Ping

      105
  • Using IP Traceroute

    106
    • Understanding How IP Traceroute Works

      106
    • Running IP Traceroute

      107
  • Using Layer 2 Traceroute

    107
    • Layer 2 Traceroute Usage Guidelines

      107
    • Running Layer 2 Traceroute

      108
  • Configuring ICMP

    109
    • Enabling ICMP Protocol Unreachable Messages

      109
    • Enabling ICMP Redirect Messages

      110
    • Enabling ICMP Mask Reply Messages

      111
• Configuring Supervisor Engine Redundancy Using RPR and SSO

  113
  • Understanding Cisco IOS NSF-Awareness Support

    114
  • Understanding Supervisor Engine Redundancy

    115
    • Overview

      115
    • RPR Operation

      116
    • SSO Operation

      116
  • Understanding Supervisor Engine Redundancy Synchronization

    118
    • RPR Supervisor Engine Configuration Synchronization

      118
    • SSO Supervisor Engine Configuration Synchronization

      119
  • Supervisor Engine Redundancy Guidelines and Restrictions

    119
  • Configuring Supervisor Engine Redundancy

    120
    • Configuring Redundancy

      120
    • Synchronizing the Supervisor Engine Configurations

      122
  • Performing a Manual Switchover

    123
  • Performing a Software Upgrade

    124
  • Manipulating Bootflash on the Redundant Supervisor Engine

    126
• Environmental Monitoring and Power Management

  129
  • Understanding Environmental Monitoring

    129
    • Using CLI Commands to Monitor your Environment

      130
    • System Alarms

      130
  • Power Management

    131
    • Power Management for the Catalyst 4948 Switches

      131
      • Power Management Modes

        132
    • Power Management for the Catalyst 4500 Series Switches

      132
      • Supported Power Supplies

        132
      • Power Management Modes

        133
      • Selecting a Power Management Mode

        134
      • Power Management Limitations in Catalyst 4500 Series Switches

        134
        • Configuring Redundant Mode on a Catalyst 4500 Series Switch

          136
        • Configuring Combined Mode on a Catalyst 4500 Series Switch

          137
      • Insufficient Inline Power Handling for Supervisor Engine II-TS

        138
      • Available Power for Catalyst 4500 Series Switches Power Supplies

        140
      • Special Considerations for the 1400 W DC Power Supply

        140
        • Configuring the DC Input for a Power Supply

          141
      • Special Considerations for the 1400 W DC SP Triple Input Power Supply

        142
      • Special Considerations for the 4200 W AC Power Supply

        142
    • Power Management for the Catalyst 4006 Switch

      144
      • Limitations of the 1+1 Redundancy Mode

        145
      • Setting the Power Redundancy Mode

        146
    • Power Consumption of Chassis Components

      147
    • Powering Down a Module

      147
• Configuring Power over Ethernet

  149
  • Power Management Modes

    150
  • Configuring Power Consumption for Powered Devices on an Interface

    151
    • Overview

      151
    • Intelligent Power Management

      153
    • PoE and Supported Cabling Topology

      153
  • Displaying the Operational Status for an Interface

    154
  • Displaying the PoE Consumed by a Module

    155
• Configuring Switches with Web-Based Tools

  161
  • Configuring and Using the Network Assistant

    161
    • Installation Requirements

      162
    • Software and Hardware Requirements

      162
    • Network Assistant-Related Features and Their Defaults

      164
    • Overview of the CLI Commands

      164
    • Installing Network Assistant

      165
    • Getting Started with Network Assistant

      165
    • Launching the Network Assistant

      166
    • Connecting Network Assistant to a Device

      167
    • Using Community Mode to Manage a Network

      168
      • Candidate and Member Characteristics

        168
      • Automatic Discovery of Candidates and Members

        169
      • Community Names

        169
      • Hostnames

        170
      • Passwords

        170
      • Communication Protocols

        170
      • Access Modes in Network Assistant

        170
      • Community Information

        170
      • Adding Devices

        170
    • Converting a Cluster into a Community

      171
    • Using Cluster Mode to Manage a Network of Switches

      172
      • Understanding Switch Clusters

        172
        • Clustering Overview

          173
        • Cluster Command Switch Characteristics

          173
        • Network Assistant and VTY

          173
        • Candidate Switch and Cluster Member Switch Characteristics

          174
      • Using the CLI to Manage Switch Clusters

        174
    • Configuring Network Assistant in Community or Cluster Mode

      175
      • Configuring Network Assistant in on a Networked Switch in Community Mode

        175
      • Configuring Network Assistant in a Networked Switch in Cluster Mode

        178
  • Configuring Embedded CiscoView Support

    181
    • Understanding Embedded CiscoView

      181
    • Installing and Configuring Embedded CiscoView

      181
    • Displaying Embedded CiscoView Information

      184
• Understanding and Configuring VLANs, VTP, andVMPS

  187
  • VLANs

    187
    • Overview of VLANs

      187
    • VLAN Configuration Guidelines and Restrictions

      189
      • VLAN Ranges

        189
      • Configurable Normal-Range VLAN Parameters

        190
    • VLAN Default Configuration

      190
    • Configuring VLANs

      190
      • Configuring VLANs in Global Configuration Mode

        191
      • Configuring VLANs in VLAN Database Mode

        193
      • Assigning a Layer 2 LAN Interface to a VLAN

        194
  • VLAN Trunking Protocol

    194
    • Overview of VTP

      194
      • Understanding the VTP Domain

        195
      • Understanding VTP Modes

        195
      • Understanding VTP Advertisements

        195
      • Understanding VTP Version 2

        196
      • Understanding VTP Pruning

        196
    • VTP Configuration Guidelines and Restrictions

      198
    • VTP Default Configuration

      198
    • Configuring VTP

      199
      • Configuring VTP Global Parameters

        199
        • Configuring a VTP Password

          199
        • Enabling VTP Pruning

          199
        • Enabling VTP Version 2

          200
      • Configuring the Switch as a VTP Server

        200
      • Configuring the Switch as a VTP Client

        201
      • Disabling VTP (VTP Transparent Mode)

        202
      • Displaying VTP Statistics

        202
  • VLAN Membership Policy Server

    203
    • Overview of VMPS

      203
      • Understanding the VMPS Server

        203
      • Security Modes for VMPS Server

        204
        • Open Mode

          204
        • Secure Mode

          205
        • Multiple Mode

          205
      • Fallback VLAN

        205
      • Illegal VMPS Client Requests

        206
    • Overview of VMPS Clients

      206
      • Understanding Dynamic VLAN Membership

        206
      • Default VMPS Client Configuration

        207
      • Configuring a Switch as a VMPS Client

        207
        • Configuring the IP Address of the VMPS Server

          207
        • Configuring Dynamic Access Ports on a VMPS Client

          208
        • Voice Ports

          209
        • Reconfirming VLAN Memberships

          209
        • Configuring Reconfirmation Interval

          209
        • Configuring the Retry Interval

          210
      • Administering and Monitoring the VMPS

        210
      • Troubleshooting Dynamic Port VLAN Membership

        211
    • Dynamic Port VLAN Membership Configuration Example

      212
    • VMPS Database Configuration File Example

      215
• Configuring Layer 2 Ethernet Interfaces

  217
  • Overview of Layer 2 Ethernet Switching

    217
    • Understanding Layer 2 Ethernet Switching

      217
      • Switching Frames Between Segments

        218
      • Building the MAC Address Table

        218
    • Understanding VLAN Trunks

      219
      • Encapsulation Types

        219
    • Layer 2 Interface Modes

      220
  • Default Layer 2 Ethernet Interface Configuration

    220
  • Layer 2 Interface Configuration Guidelines and Restrictions

    221
  • Configuring Ethernet Interfaces for Layer 2 Switching

    221
    • Configuring an Ethernet Interface as a Layer 2 Trunk

      222
    • Configuring an Interface as a Layer 2 Access Port

      224
    • Clearing Layer 2 Configuration

      225
• Configuring SmartPort Macros

  227
  • Understanding SmartPort Macros

    227
  • Configuring Smart-Port Macros

    228
    • Default SmartPort Macro Configuration

      228
      • cisco-desktop

        228
      • cisco-phone

        228
      • cisco-switch

        229
      • cisco-router

        229
    • SmartPort Macro Configuration Guidelines

      230
    • Creating and Applying SmartPort Macros

      230
      • cisco-desktop

        231
      • cisco-phone

        232
      • cisco-switch

        233
      • cisco-router

        233
  • Displaying SmartPort Macros

    234
• Understanding and ConfiguringSTP

  235
  • Overview of STP

    235
    • Understanding the Bridge ID

      236
      • Bridge Priority Value

        236
      • Extended System ID

        236
      • STP MAC Address Allocation

        237
    • Bridge Protocol Data Units

      237
    • Election of the Root Bridge

      238
    • STP Timers

      238
    • Creating the STP Topology

      238
    • STP Port States

      239
    • MAC Address Allocation

      239
    • STP and IEEE 802.1Q Trunks

      240
    • Per-VLAN Rapid Spanning Tree

      240
  • Default STP Configuration

    240
  • Configuring STP

    241
    • Enabling STP

      241
    • Enabling the Extended System ID

      242
    • Configuring the Root Bridge

      243
    • Configuring a Secondary Root Switch

      246
    • Configuring STP Port Priority

      247
    • Configuring STP Port Cost

      249
    • Configuring the Bridge Priority of a VLAN

      250
    • Configuring the Hello Time

      251
    • Configuring the Maximum Aging Time for a VLAN

      252
    • Configuring the Forward-Delay Time for a VLAN

      252
    • Disabling Spanning Tree Protocol

      253
    • Enabling Per-VLAN Rapid Spanning Tree

      254
      • Specifying the Link Type

        255
      • Restarting Protocol Migration

        255
• Configuring STP Features

  257
  • Overview of Root Guard

    258
  • Enabling Root Guard

    258
  • Overview of Loop Guard

    259
  • Enabling Loop Guard

    260
  • Overview of PortFast

    261
  • Enabling PortFast

    262
  • Overview of BPDU Guard

    263
  • Enabling BPDU Guard

    263
  • Overview of PortFast BPDU Filtering

    264
  • Enabling PortFast BPDU Filtering

    264
  • Overview of UplinkFast

    266
  • Enabling UplinkFast

    267
  • Overview of BackboneFast

    268
  • Enabling BackboneFast

    271
• Understanding and Configuring Multiple Spanning Trees

  273
  • Overview of MST

    273
    • IEEE 802.1s MST

      274
    • IEEE 802.1w RSTP

      275
      • RSTP Port Roles

        275
      • RSTP Port States

        276
    • MST-to-SST Interoperability

      276
    • Common Spanning Tree

      277
    • MST Instances

      277
    • MST Configuration Parameters

      277
    • MST Regions

      278
      • MST Region Overview

        278
      • Boundary Ports

        278
      • IST Master

        279
      • Edge Ports

        279
      • Link Type

        279
    • Message Age and Hop Count

      279
    • MST-to-PVST+ Interoperability

      280
  • MST Configuration Restrictions and Guidelines

    280
  • Configuring MST

    281
    • Enabling MST

      281
    • Configuring MST Instance Parameters

      283
    • Configuring MST Instance Port Parameters

      284
    • Restarting Protocol Migration

      284
    • Displaying MST Configurations

      285
• Understanding and Configuring EtherChannel

  289
  • Overview of EtherChannel

    289
    • Understanding Port-Channel Interfaces

      290
    • Understanding How EtherChannels Are Configured

      290
      • EtherChannel Configuration Overview

        290
      • Understanding Manual EtherChannel Configuration

        291
      • Understanding PAgP EtherChannel Configuration

        291
      • Understanding IEEE 802.3ad LACP EtherChannel Configuration

        291
    • Understanding Load Balancing

      293
  • EtherChannel Configuration Guidelines and Restrictions

    293
  • Configuring EtherChannel

    294
    • Configuring Layer3 EtherChannels

      294
      • Creating Port-Channel Logical Interfaces

        294
      • Configuring Physical Interfaces as Layer 3 EtherChannels

        295
    • Configuring Layer2 EtherChannels

      297
    • Configuring the LACP System Priority and System ID

      299
    • Configuring EtherChannel Load Balancing

      300
    • Removing an Interface from an EtherChannel

      301
    • Removing an EtherChannel

      302
• Configuring IGMP Snooping and Filtering

  303
  • Overview of IGMP Snooping

    303
    • Immediate-Leave Processing

      305
    • Explicit Host Tracking

      305
  • Configuring IGMP Snooping

    306
    • Default IGMP Snooping Configuration

      306
    • Enabling IGMP Snooping

      307
    • Configuring Learning Methods

      308
      • Configuring PIM/DVMRP Learning

        308
      • Configuring CGMP Learning

        308
    • Configuring a Multicast Router Port Statical

      309
    • Enabling IGMP Immediate-Leave Processing

      309
    • Configuring Explicit Host Tracking

      310
    • Configuring a Host Statically

      310
    • Suppressing Multicast Flooding

      311
      • IGMP Snooping Interface Configuration

        311
      • IGMP Snooping Switch Configuration

        312
  • Displaying IGMP Snooping Information

    313
    • Displaying Querier Information

      314
    • Displaying IGMP Host Membership Information

      314
    • Displaying Group Information

      315
    • Displaying Multicast Router Interfaces

      316
    • Displaying MAC Address Multicast Entries

      317
    • Displaying IGMP Snooping Information on a VLAN Interface

      317
  • Configuring IGMP Filtering

    318
    • Default IGMP Filtering Configuration

      319
    • Configuring IGMP Profiles

      319
    • Applying IGMP Profiles

      320
    • Setting the Maximum Number of IGMP Groups

      321
  • Displaying IGMP Filtering Configuration

    322
• Configuring 802.1Q and Layer 2 Protocol Tunneling

  325
  • Understanding 802.1Q Tunneling

    325
  • Configuring 802.1Q Tunneling

    328
    • 802.1Q Tunneling Configuration Guidelines

      328
      • Native VLANs

        328
      • System MTU

        329
    • 802.1Q Tunneling and Other Features

      329
    • Configuring an 802.1Q Tunneling Port

      330
  • Understanding Layer 2 Protocol Tunneling

    331
  • Configuring Layer 2 Protocol Tunneling

    333
    • Default Layer 2 Protocol Tunneling Configuration

      333
    • Layer 2 Protocol Tunneling Configuration Guidelines

      334
    • Configuring Layer 2 Tunneling

      334
  • Monitoring and Maintaining Tunneling Status

    336
• Understanding and Configuring CDP

  337
  • Overview of CDP

    337
  • Configuring CDP

    338
    • Enabling CDP Globally

      338
    • Displaying the CDP Global Configuration

      338
    • Enabling CDP on an Interface

      339
    • Displaying the CDP Interface Configuration

      339
    • Monitoring and Maintaining CDP

      339
• Configuring UDLD

  341
  • Overview of UDLD

    341
  • Default UDLD Configuration

    342
  • Configuring UDLD on the Switch

    342
    • Enabling UDLD Globally

      343
    • Enabling UDLD on Individual Interfaces

      343
    • Disabling UDLD on Non-Fiber-Optic Interfaces

      343
    • Disabling UDLD on Fiber-Optic Interfaces

      344
    • Resetting Disabled Interfaces

      344
• Configuring Unidirectional Ethernet

  345
  • Overview of Unidirectional Ethernet

    345
  • Configuring Unidirectional Ethernet

    345
• Configuring Layer 3 Interfaces

  349
  • Overview of Layer 3 Interfaces

    349
    • Logical Layer 3 VLAN Interfaces

      350
    • Physical Layer 3 Interfaces

      350
  • Configuration Guidelines

    351
  • Configuring Logical Layer 3 VLAN Interfaces

    351
  • Configuring Physical Layer 3 Interfaces

    352
• Configuring Cisco Express Forwarding

  355
  • Overview of CEF

    355
    • Benefits of CEF

      355
    • Forwarding Information Base

      356
    • Adjacency Tables

      356
      • Adjacency Discovery

        356
      • Adjacency Resolution

        356
      • Adjacency Types That Require Special Handling

        357
      • Unresolved Adjacency

        357
  • Catalyst 4500 Series Switch Implementation of CEF

    357
    • Hardware and Software Switching

      358
      • Hardware Switching

        359
      • Software Switching

        359
    • Load Balancing

      360
    • Software Interfaces

      360
  • CEF Configuration Restrictions

    360
  • Configuring CEF

    360
    • Enabling CEF

      360
    • Configuring Load Balancing for CEF

      361
      • Configuring Per-Destination Load Balancing

        361
      • Configuring Load Sharing Hash Function

        361
      • Viewing CEF Information

        362
  • Monitoring and Maintaining CEF

    362
    • Displaying IP Statistics

      362
• Understanding and Configuring IP Multicast

  365
  • Overview of IP Multicast

    365
    • IP Multicast Protocols

      366
      • Internet Group Management Protocol

        367
      • Protocol-Independent Multicast

        367
        • PIM Dense Mode

          367
        • PIM Sparse Mode

          367
      • IGMP Snooping and CGMP

        368
    • IP Multicast on the Catalyst 4500 Series Switch

      368
      • CEF, MFIB, and Layer 2 Forwarding

        369
      • IP Multicast Tables

        371
      • Hardware and Software Forwarding

        372
        • Partial Routes

          373
        • Software Routes

          373
      • Non-Reverse Path Forwarding Traffic

        373
      • Multicast Fast Drop

        374
      • Multicast Forwarding Information Base

        375
      • S/M, 224/4

        376
    • Unsupported Features

      376
  • Configuring IP Multicast Routing

    376
    • Default Configuration in IP MUlticast Routing

      377
    • Enabling IP Multicast Routing

      377
    • Enabling PIM on an Interface

      377
      • Enabling Dense Mode

        378
      • Enabling Sparse Mode

        378
      • Enabling Sparse-Dense Mode

        378
  • Monitoring and Maintaining IP Multicast Routing

    379
    • Displaying System and Network Statistics

      379
    • Displaying the Multicast Routing Table

      380
    • Displaying IP MFIB

      382
    • Displaying IP MFIB Fast Drop

      383
    • Displaying PIM Statistics

      384
    • Clearing Tables and Databases

      384
  • Configuration Examples

    385
    • PIM Dense Mode Example

      385
    • PIM Sparse Mode Example

      385
    • BSR Configuration Example

      385
• Configuring Policy-Based Routing

  387
  • Overview of Policy-Based Routing

    387
    • Understanding PBR

      388
    • Understanding PBR Flow Switching

      388
    • Using Policy-Based Routing

      388
  • Policy-Based Routing Configuration Task List

    389
    • Enabling PBR

      389
    • Enabling Local PBR

      391
    • Unsupported Commands

      391
  • Policy-Based Routing Configuration Examples

    391
    • Equal Access Example

      391
    • Differing Next Hops Example

      392
    • Deny ACE Example

      392
• Configuring VRF-lite

  393
  • Understanding VRF-lite

    394
  • Default VRF-lite Configuration

    395
  • VRF-lite Configuration Guidelines

    396
  • Configuring VRFs

    397
  • Configuring a VPN Routing Session

    397
  • Configuring BGP PE to CE Routing Sessions

    398
  • VRF-lite Configuration Example

    399
    • Configuring Switch S8

      400
    • Configuring Switch S20

      401
    • Configuring Switch S11

      402
    • Configuring the PE Switch S3

      402
  • Displaying VRF-lite Status

    403
• Configuring Quality of Service

  405
  • Overview of QoS

    405
    • Prioritization

      406
    • QoS Terminology

      407
    • Basic QoS Model

      409
    • Classification

      410
      • Classification Based on QoS ACLs

        413
      • Classification Based on Class Maps and Policy Maps

        413
    • Policing and Marking

      414
      • Internal DSCP Values

        417
        • Internal DSCP Sources

          417
        • Egress ToS and CoS Sources

          417
    • Mapping Tables

      418
    • Queueing and Scheduling

      418
      • Active Queue Management

        418
      • Sharing Link Bandwidth Among Transmit Queues

        419
      • Strict Priority / Low Latency Queueing

        419
      • Traffic Shaping

        419
    • Packet Modification

      420
    • Per Port Per VLAN QoS

      420
    • QoS and Software Processed Packets

      420
  • Configuring Auto-QoS

    421
    • Generated Auto-QoS Configuration

      421
    • Effects of Auto-QoS on the Configuration

      422
    • Configuration Guidelines

      422
    • Enabling Auto-QoS for VoIP

      423
    • Displaying Auto-QoS Information

      424
    • Auto-QoS Configuration Example

      425
  • Configuring QoS

    427
    • Default QoS Configuration

      427
    • Configuration Guidelines

      429
    • Enabling QoS Globally

      429
    • Configuring a Trusted Boundary to Ensure Port Security

      430
    • Enabling Dynamic Buffer Limiting

      431
    • Creating Named Aggregate Policers

      431
    • Configuring a QoS Policy

      433
      • Overview of QoS Policy Configuration

        433
      • Configuring a Class Map (Optional)

        434
        • Creating a Class Map

          434
        • Configuring Filtering in a Class Map

          434
      • Verifying Class Map Configuration

        435
      • Configuring a Policy Map

        435
        • Creating a Policy Map

          436
        • Configuring Policy-Map Class Actions

          436
          • Configuring the Policy-Map Class Trust State

            436
          • Configuring the Policy Map Class DBL State

            436
          • Configuring Policy-Map Class Policing

            437
          • Using a Named Aggregate Policer

            437
          • Configuring a Per-Interface Policer

            437
      • Verifying Policy-Map Configuration

        438
      • Attaching a Policy Map to an Interface

        439
    • Configuring User Based Rate Limiting

      440
      • Examples

        440
        • Example 1

          440
        • Example 2

          441
        • Example 3

          441
        • Example 4

          442
        • Example 5

          442
      • Hierarchical policers

        443
    • Enabling Per-Port Per-VLAN QoS

      445
      • Example 1

        446
      • Example 2

        447
      • Example 3

        447
      • Example 4

        447
    • Enabling or Disabling QoS on an Interface

      448
    • Configuring VLAN-Based QoS on Layer 2 Interfaces

      449
    • Configuring the Trust State of Interfaces

      450
    • Configuring the CoS Value for an Interface

      451
    • Configuring DSCP Values for an Interface

      451
    • Configuring Transmit Queues

      452
      • Mapping DSCP Values to Specific Transmit Queues

        452
      • Allocating Bandwidth Among Transmit Queues

        453
      • Configuring Traffic Shaping of Transmit Queues

        454
      • Configuring a High Priority Transmit Queue

        454
    • Configuring DSCP Maps

      455
      • Configuring the CoS-to-DSCP Map

        455
      • Configuring the Policed-DSCP Map

        456
      • Configuring the DSCP-to-CoS Map

        457
• Configuring Voice Interfaces

  459
  • Overview of Voice Interfaces

    459
  • Configuring a Port to Connect to a Cisco 7960 IP Phone

    460
  • Configuring Voice Ports for Voice and Data Traffic

    460
  • Overriding the CoS Priority of Incoming Frames

    462
  • Configuring Power

    462
• Understanding and Configuring 802.1X Port-Based Authentication

  463
  • Understanding 802.1X Port-Based Authentication

    463
    • Device Roles

      464
    • 802.1x and Network Access Control

      465
    • Authentication Initiation and Message Exchange

      465
    • Ports in Authorized and Unauthorized States

      466
    • Using 802.1X with VLAN Assignment

      467
    • Using 802.1X Authentication for Guest VLANs

      468
      • Usage Guidelines for Using 802.1X Authentication with Guest VLANs on Windows-XP Hosts

        469
    • Using 802.1X with Authentication Failed VLAN Assignment

      469
      • Usage Guidelines for Using Authentication Failed VLAN Assignment

        469
    • Using 802.1X with Port Security

      470
    • Using 802.1X with RADIUS-Provided Session Timeouts

      471
    • Using 802.1X with RADIUS Accounting

      472
    • Using 802.1X with Voice VLAN Ports

      474
    • Supported Topologies

      475
  • How to Configure 802.1X

    475
    • Default 802.1X Configuration

      476
    • 802.1X Configuration Guidelines

      477
    • Enabling 802.1X Authentication

      478
    • Configuring Switch-to-RADIUS-Server Communication

      479
    • Configuring RADIUS-Provided Session Timeouts

      481
    • Enabling 802.1X Accounting

      481
    • Configuring 802.1X with Guest VLANs

      482
    • Configuring 802.1X with Authentication Failed VLAN Assignment

      484
    • Configuring 802.1X with Voice VLAN

      486
    • Enabling Periodic Reauthentication

      486
    • Manually Reauthenticating a Client Connected to a Port

      487
    • Changing the Quiet Period

      487
    • Changing the Switch-to-Client Retransmission Time

      488
    • Setting the Switch-to-Client Frame-Retransmission Number

      489
    • Enabling Multiple Hosts

      489
    • Resetting the 802.1X Configuration to the Default Values

      490
  • Displaying 802.1X Statistics and Status

    490
• Configuring Port Security and Trunk Port Security

  491
  • Overview of Port Security

    491
    • Port mode changes

      493
  • Default Port Security Configuration

    493
  • Port Security Guidelines and Restrictions

    493
  • Configuring Port Security

    494
    • Configuring Port Security on an Interface

      494
    • Configuring Trunk Port Security

      497
      • Configuration Guidelines

        499
    • Configuring Port Security Aging

      499
  • Displaying Port Security Settings

    501
• Configuring DHCP Snooping and IP Source Guard

  505
  • Overview of DHCP Snooping

    505
    • Overview of the DHCP Snooping Database Agent

      506
  • Configuring DHCP Snooping on the Switch

    507
    • Default Configuration for DHCP Snooping

      507
    • Enabling DHCP Snooping

      508
    • Enabling DHCP Snooping on Aggregration Switch

      509
    • Enabling DHCP Snooping on Private VLAN

      510
    • Enabling the DHCP Snooping Database Agent

      510
    • Configuration Examples for the Database Agent

      511
      • Example 1: Enabling the Database Agent

        511
      • Example 2: Reading Binding Entries from a TFTP File

        512
      • Example 3: Adding Information to the DHCP Snooping Database

        513
  • Displaying DHCP Snooping Information

    514
    • Displaying a Binding Table

      514
    • Displaying the DHCP Snooping Configuration

      515
  • Overview of IP Source Guard

    515
  • Configuring IP Source Guard on the Switch

    516
    • Configuring IP Source Guard on Private VLANs

      517
  • Displaying IP Source Guard Information

    517
  • Displaying IP Source Binding Information

    518
• Understanding and Configuring Dynamic ARP Inspection

  521
  • Overview of Dynamic ARP Inspection

    521
    • ARP Cache Poisoning

      522
    • Purpose of Dynamic ARP Inspection

      522
    • Interface Trust State, Security Coverage and Network Configuration

      523
    • Relative Priority of Static Bindings and DHCP Snooping Entries

      524
    • Logging of Dropped Packets

      524
    • Rate Limiting of ARP Packets

      524
    • Port Channels and Their Behavior

      524
  • Configuring Dynamic ARP Inspection

    525
    • Configuring Dynamic ARP Inspection in DHCP Environments

      525
      • On Switch A

        527
      • On Switch B

        528
    • Configuring ARP ACLs for Non-DHCP Environments

      530
    • Configuring the Log Buffer

      534
    • Limiting the Rate of Incoming ARP Packets

      536
    • Performing Validation Checks

      538
• Configuring Network Security with ACLs

  541
  • Understanding ACLs

    541
    • ACL Overview

      542
    • Supported Features That Use ACLs

      542
    • Router ACLs

      543
    • Port ACLs

      544
    • VLAN Maps

      545
  • Hardware and Software ACL Support

    545
  • TCAM Programming and ACLs

    546
  • Layer 4 Operators in ACLs

    547
    • Restrictions for Layer 4 Operations

      548
    • Configuration Guidelines for Layer 4 Operations

      548
    • How ACL Processing Impacts CPU

      549
  • Configuring Unicast MAC Address Filtering

    551
  • Configuring Named MAC Extended ACLs

    551
  • Configuring VLAN Maps

    552
    • VLAN Map Configuration Guidelines

      553
    • Creating and Deleting VLAN Maps

      553
      • Examples of ACLs and VLAN Maps

        554
        • Example 1

          554
        • Example 2

          555
        • Example 3

          555
        • Example 4

          556
    • Applying a VLAN Map to a VLAN

      556
    • Using VLAN Maps in Your Network

      556
      • Denying Access to a Server on Another VLAN

        558
  • Displaying VLAN Access Map Information

    559
  • Using VLAN Maps with Router ACLs

    559
    • Guidelines for Using Router ACLs and VLAN Maps

      560
    • Examples of Router ACLs and VLAN Maps Applied to VLANs

      560
      • ACLs and Switched Packets

        560
      • ACLs and Routed Packets

        561
  • Configuring PACLs

    562
    • Creating a PACL

      562
    • PACL Configuration Guidelines

      563
    • Configuring IP and MAC ACLs on a Layer 2 Interface

      563
    • Using PACL with Access-Group Mode

      564
    • Configuring Access-group Mode on Layer 2 Interface

      564
    • Applying ACLs to a Layer 2 Interface

      565
    • Displaying an ACL Configuration on a Layer 2 Interface

      565
  • Using PACL with VLAN Maps and Router ACLs

    566
• Configuring Private VLANs

  569
  • Overview of PVLANs

    569
    • PVLAN Trunks

      570
    • PVLANs and VLAN ACL/QoS

      570
  • How to Configure PVLANs

    571
    • PVLAN Configuration Guidelines and Restrictions

      571
    • Configuring a VLAN as a PVLAN

      573
    • Associating a Secondary VLAN with a Primary VLAN

      574
    • Configuring a Layer 2 Interface as a PVLAN Promiscuous Port

      575
    • Configuring a Layer 2 Interface as a PVLAN Host Port

      576
    • Configuring a Layer 2 Interface as a PVLAN Trunk Port

      577
    • Permitting Routing of Secondary VLAN Ingress Traffic

      579
• Port Unicast and Multicast Flood Blocking

  581
  • Overview of Flood Blocking

    581
  • Configuring Port Blocking

    581
    • Blocking Flooded Traffic on an Interface

      582
    • Resuming Normal Forwarding on a Port

      583
• Configuring Storm Control

  585
  • Overview of Storm Control

    585
    • Hardware-based Storm Control Implementation

      586
    • Software-based Storm Control Implementation

      586
  • Enabling Storm Control

    587
  • Disabling Storm Control

    588
  • Displaying Storm Control

    588
  • Multicast Storm Control

    590
    • Multicast Suppression on the WS-X4516 Supervisor Engine

      590
    • Multicast Suppression on the WS-X4515, WS-X4014, and WS-X4013+ Supervisor Engines

      591
• Configuring SPAN and RSPAN

  593
  • Overview of SPAN and RSPAN

    593
    • SPAN and RSPAN Concepts and Terminology

      595
      • SPAN Session

        595
      • Traffic Types

        595
      • Source Port

        596
      • Destination Port

        597
      • VLAN-Based SPAN

        597
      • SPAN Traffic

        598
    • SPAN and RSPAN Session Limits

      598
    • Default SPAN and RSPAN Configuration

      598
  • Configuring SPAN

    598
    • SPAN Configuration Guidelines and Restrictions

      599
    • Configuring SPAN Sources

      600
    • Configuring SPAN Destinations

      601
    • Monitoring Source VLANs on a Trunk Interface

      601
    • Configuration Scenario

      602
    • Verifying a SPAN Configuration

      602
  • CPU Port Sniffing

    602
  • Encapsulation Configuration

    604
  • Ingress Packets

    604
  • Access List Filtering

    605
    • ACL Configuration Guidelines

      605
    • Configuring Access List Filtering

      606
  • Packet Type Filtering

    606
  • Configuration Example

    607
  • Configuring RSPAN

    608
    • RSPAN Configuration Guidelines

      608
    • Creating an RSPAN Session

      609
    • Creating an RSPAN Destination Session

      610
    • Creating an RSPAN Destination Session and Enabling Ingress Traffic

      611
    • Removing Ports from an RSPAN Session

      613
    • Specifying VLANs to Monitor

      614
    • Specifying VLANs to Filter

      615
  • Displaying SPAN and RSPAN Status

    616
• Configuring NetFlow

  619
  • Overview of NetFlow Statistics Collection

    619
    • NDE Versions

      620
    • Information Derived from Hardware

      621
    • Information Derived from Software

      622
    • Assigning the Input and Output Interface and AS Numbers

      622
      • Assigning the Inferred Fields

        622
      • Assigning the Output Interface and Output Related Inferred Fields

        622
      • Assigning the Input Interface and Input Related Inferred Fields

        623
    • Feature Interaction of Netflow Statistics with UBRL and Microflow Policing

      623
    • VLAN Statistics

      623
  • Configuring NetFlow Statistics Collection

    624
    • Checking for Required Hardware

      624
    • Enabling NetFlow Statistics Collection

      625
    • Configuring Switched/Bridged IP Flows

      626
    • Exporting NetFlow Statistics

      627
    • Managing NetFlow Statistics Collection

      627
    • Configuring an Aggregation Cache

      628
      • Verifying Aggregation Cache Configuration and Data Export

        628
    • Configuring a NetFlow Minimum Prefix Mask for Router-Based Aggregation

      629
      • Configuring the Minimum Mask of a Prefix Aggregation Scheme

        629
      • Configuring the Minimum Mask of a Destination-Prefix Aggregation Scheme

        629
      • Configuring the Minimum Mask of a Source-Prefix Aggregation Scheme

        630
      • Monitoring and Maintaining Minimum Masks for Aggregation Schemes

        630
    • Configuring NetFlow Aging Parameters

      630
  • NetFlow Statistics Collection Configuration Example

    631
  • NetFlow Configuration Examples

    632
    • Sample NetFlow Enabling Schemes

      632
    • Sample NetFlow Aggregation Configurations

      632
      • Autonomous System Configuration

        633
      • Destination Prefix Configuration

        633
      • Prefix Configuration

        633
      • Protocol Port Configuration

        633
      • Source Prefix Configuration

        633
    • Sample NetFlow Minimum Prefix Mask Router-Based Aggregation Schemes

      634
      • Prefix Aggregation Scheme

        634
      • Destination-Prefix Aggregation Scheme

        634
      • Source-Prefix Aggregation Scheme

        634
• Diagnostics on the Catalyst 4500 Switch

  635
  • Online Diagnostics

    635
    • Troubleshooting with Online Diagnostics

      636
  • Power-On-Self-Test Diagnostics

    637
    • Overview

      637
  • Sample POST Results

    638
  • Power-On-Self-Test Results for Supervisor Engine V-10GE

    641
    • POST on the Active Supervisor Engine

      641
    • Sample POST Results on an Active Supervisor Engine

      641
    • POST on Standby Supervisor Engine

      644
    • Sample Display of the POST on Standby Supervisor Engine

      644
  • Causes of Failure and Troubleshooting

    646
• A

  649
• Acronyms and Abbreviations

  649
• Index 

  657