Table Of Contents

Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V - W - X -

Index

Numerics

802.1D

See STP

802.1Q

and trunk ports     8-2

configuration limitations     13-16

encapsulation     13-14

native VLAN for untagged traffic     13-20

802.1s

See MSTP

802.1w

See RSTP

802.1x

See port-based authentication

802.3x flow control     8-12

A

abbreviating commands     2-3

access control list

See ACL

access-denied response, VMPS     13-25

access list

See ACL

access ports

defined     8-2

accounting

with 802.1x     7-5, 7-21

with RADIUS     6-28

with TACACS+     6-11, 6-17

ACL     1-5

addresses

displaying the MAC address table     5-26

dynamic

accelerated aging     10-8

changing the aging time     5-22

default aging     10-8

defined     5-20

learning     5-21

removing     5-23

MAC, discovering     5-26

multicast STP address management     10-8

static

adding and removing     5-25

defined     5-20

address resolution     5-26

Address Resolution Protocol

See ARP table

advertisements

CDP     19-1

VTP     13-17, 14-3

aggregated ports

See EtherChannel

aging, accelerating     10-8

aging time

accelerated

for MSTP     11-20

for STP     10-8, 10-21

MAC address table     5-22

maximum

for MSTP     11-21

for STP     10-21

alarms, RMON     21-3

allowed-VLAN list     13-18

ARP table

address resolution     5-26

managing     5-26

attributes, RADIUS

vendor-proprietary     6-30

vendor-specific     6-29

audience     xix

authentication

local mode with AAA     6-32

NTP associations     5-4

RADIUS

defined     6-18

key     6-21

login     6-23

TACACS+

defined     6-11

key     6-13

login     6-14

See also port-based authentication

authoritative time source, described     5-2

authorization

with RADIUS     6-27

with TACACS+     6-11, 6-16

authorized ports with 802.1x     7-4

autoconfiguration     3-3

autonegotiation

interface configuration guidelines     8-10

mismatches     26-10

auxiliary VLAN

See voice VLAN

B

BackboneFast

described     12-5

enabling     12-14

support for     1-4

banners

configuring

login     5-20

message-of-the-day login     5-18

default configuration     5-18

when displayed     5-18

booting

boot loader, function of     3-1

boot process     3-1

boot loader

described     3-1

trap-door mechanism     3-2

BPDU

error-disabled state     12-2

filtering     12-3

RSTP format     11-9

BPDU filtering

described     12-3

enabling     12-12

support for     1-4

BPDU guard

described     12-2

enabling     12-11

support for     1-4

broadcast storm control

See storm control

C

cables, monitoring for unidirectional links     18-1

candidate switch

defined     4-2

requirements     4-2

See also command switch, cluster standby group, and member switch

caution, described     xx

CDP

and trusted boundary     24-7

configuring     19-2

CDP (continued)

default configuration     19-2

described     19-1

disabling for routing device     19-3, 19-4

enabling and disabling

on an interface     19-4

on a switch     19-3

monitoring     19-5

overview     19-1

transmission timer and holdtime, setting     19-2

updates     19-2

Cisco Access Analog Trunk Gateway     1-11

Cisco CallManager software     1-11

Cisco Discovery Protocol

See CDP

Cisco IOS command-line interface

See CLI

Cisco IP Phones     1-11

Cisco Network Assistant

See Network Assistant

Cisco SoftPhone software     1-11

CiscoWorks 2000     1-7, 23-4

clearing interfaces     8-15

CLI

abbreviating commands     2-3

command modes     2-1

described     1-6

editing features

enabling and disabling     2-6

keystroke editing     2-6

wrapped lines     2-7

error messages     2-4

getting help     2-3

history

changing the buffer size     2-4

described     2-4

disabling     2-5

recalling commands     2-5

managing clusters     4-3

CLI (continued)

no and default forms of commands     2-3

client mode, VTP     14-3

clock

See system clock

clusters, switch

described     4-1

managing

through CLI     4-3

through SNMP     4-4

planning considerations

CLI     4-3

SNMP     4-4

cluster standby group, requirements     4-2

command-line interface

See CLI

command modes     2-1

commands

abbreviating     2-3

no and default     2-3

setting privilege levels     6-8

command switch

configuration conflicts     26-10

defined     4-1

password privilege levels     4-3

recovery

from failure     26-6

from lost member connectivity     26-10

replacing

with another switch     26-9

with cluster member     26-7

requirements     4-2

See also candidate switch, cluster standby group, member switch, and standby command switch

community strings

configuring     23-7

for cluster switches     23-4

overview     23-4

configuration conflicts, recovering from lost member connectivity     26-10

configuration examples, network

collapsed backbone and switch cluster     1-10

design concepts

network performance     1-8

network services     1-8

large campus     1-11

small to medium-sized network     1-9

configuration files

limiting TFTP server access     23-13

obtaining with DHCP     3-7

password recovery disable considerations     6-5

system contact and location information     23-13

VMPS database     13-25

configuration settings, saving     3-10

configure terminal command     8-5

config-vlan mode     2-2, 13-6

conflicts, configuration     26-10

connections, secure remote     6-33

connectivity problems     26-11

consistency checks in VTP version 2     14-4

console port, connecting to     2-9

conventions

command     xx

for examples     xx

publication     xx

text     xx

CoS

configuring     24-2

configuring priority queues     24-9

defining     24-3

override priority     15-5

trust priority     15-5

counters, clearing interface     8-15

crashinfo file     26-16

D

daylight saving time     5-13

debugging

enabling all system diagnostics     26-15

enabling for a specific feature     26-14

redirecting error message output     26-15

using commands     26-14

default commands     2-3

default configuration

802.1x     7-9

banners     5-18

CDP     19-2

DNS     5-17

EtherChannel     25-8

IGMP filtering     16-21

IGMP snooping     16-7

IGMP throttling     16-21

initial switch information     3-3

Layer 2 interfaces     8-9

MAC address table     5-22

MSTP     11-12

MVR     16-16

NTP     5-4

optional spanning-tree features     12-10

password and privilege level     6-2

port security     17-6

QoS     24-4

RADIUS     6-20

RMON     21-3

RSPAN     20-5

SNMP     23-5

SPAN     20-5

storm control     17-2

STP     10-11

system message logging     22-3

system name and prompt     5-15

TACACS+     6-13

UDLD     18-4

default configuration (continued)

VLAN, Layer 2 Ethernet interfaces     13-16

VLANs     13-7

VMPS     13-26

voice VLAN     15-2

VTP     14-6

default gateway     3-10

deleting VLANs     13-9

description command     8-14

detecting indirect link failures, STP     12-5

device discovery protocol     19-1

device manager

described     1-1, 1-6

DHCP-based autoconfiguration

client request message exchange     3-4

configuring

client side     3-3

DNS     3-6

relay device     3-6

server-side     3-5

TFTP server     3-5

example     3-8

lease options

for IP address information     3-5

for receiving the configuration file     3-5

overview     3-3

relationship to BOOTP     3-3

DNS

and DHCP-based autoconfiguration     3-6

default configuration     5-17

displaying the configuration     5-18

overview     5-16

setting up     5-17

documentation, related     xx

document conventions     xx

domain names

DNS     5-16

VTP     14-8

Domain Name System

See DNS

downloading

image files

using HTTP     1-2

using Network Assistant     1-2

DTP     1-4, 13-15

duplex mode, configuring     8-10

dynamic access ports

characteristics     13-3

configuring     13-27

defined     8-2

dynamic addresses

See addresses

dynamic desirable trunking mode     13-15

dynamic port VLAN membership

described     13-25

reconfirming     13-28

troubleshooting     13-30

types of connections     13-27

VMPS database configuration file     13-25

Dynamic Trunking Protocol

See DTP

E

editing features

enabling and disabling     2-6

keystrokes used     2-6

wrapped lines     2-7

enable password     6-4

enable secret password     6-4

encapsulation     24-2

encryption for passwords     6-4

error messages

during command entry     2-4

setting the display destination device     22-4

severity levels     22-8

system message format     22-2

EtherChannel

automatic creation of     25-3

configuration guidelines     25-8

default configuration     25-8

destination MAC address forwarding     25-6

displaying status     25-14

forwarding methods     25-11

load balancing     25-6, 25-11

number of interfaces per     25-2

overview     25-1

PAgP

aggregate-port learners     25-5

compatibility with Catalyst 1900     25-12

displaying status     25-14

interaction with other features     25-6

learn method and priority configuration     25-12

modes     25-4

overview     25-3

silent mode     25-4

support for     1-2

port-channel interfaces

described     25-2

numbering of     25-2

port groups     8-3

source MAC address forwarding     25-6

EtherChannel guard

described     12-7

enabling     12-14

Ethernet VLANs

adding     13-8

defaults and ranges     13-7

modifying     13-8

events, RMON     21-3

examples

conventions for     xx

network configuration     1-8

extended-range VLANs

configuration guidelines     13-12

configuring     13-11

extended-range VLANs (continued)

creating     13-12

defined     13-1

extended system ID

MSTP     11-14

STP     10-3, 10-14

Extensible Authentication Protocol over LAN     7-1

F

fallback VLAN name     13-26

fiber-optic, detecting unidirectional links     18-1

files, crashinfo

description     26-16

displaying the contents of     26-16

location     26-16

filtering show and more command output     2-8

flow control     8-12

forward-delay time

MSTP     11-20

STP     10-5, 10-21

forwarding

See storm control

FTP

accessing MIB files     A-2

G

GBICs

security and identification     26-11

get-bulk-request operation     23-3

get-next-request operation     23-3, 23-4

get-request operation     23-3, 23-4

get-response operation     23-3

global configuration mode     2-2

guide

audience     xix

purpose of     xix

guide mode     1-1

GUIs

See device manager and Network Assistant     1-6

H

hello time

MSTP     11-19

STP     10-20

help, for the command line     2-3

history

changing the buffer size     2-4

described     2-4

disabling     2-5

recalling commands     2-5

history table, level and number of syslog messages     22-10

hosts, limit on dynamic ports     13-30

HP OpenView     1-7

I

ICMP ping

executing     26-12

overview     26-11

IDS, using with SPAN     20-2

IEEE 802.1p     15-1

IGMP

joining multicast group     16-3

join messages     16-3

leave processing, enabling     16-10

leaving multicast group     16-5

queries     16-3

report suppression

described     16-5

disabling     16-11

throttling action     16-21

IGMP, joining multicast group     16-3

IGMP filtering

configuring     16-21

default configuration     16-21

described     16-20

monitoring     16-26

IGMP groups

configuring the throttling action     16-24

setting the maximum number     16-24

IGMP profile

applying     16-23

configuration mode     16-21

configuring     16-22

IGMP snooping

configuring     16-6

default configuration     16-7

definition     16-2

enabling and disabling     16-7

global configuration     16-7

Immediate Leave     16-5

method     16-8

monitoring     16-12

VLAN configuration     16-8

IGMP throttling

configuring     16-24

default configuration     16-21

described     16-21

displaying action     16-26

Immediate-Leave, IGMP     16-5

ingress port scheduling     24-3

interface

number     8-4

range macros     8-7

interface command     8-4, 8-5

interface configuration mode     2-2

interfaces

Cisco IOS supported     1-6

configuration guidelines     8-10

configuring     8-5

configuring duplex mode     8-10

interfaces (continued)

configuring speed     8-10

counters, clearing     8-15

described     8-14

descriptive name, adding     8-14

displaying information about     8-14

flow control     8-12

IOS supported     1-6

monitoring     8-14

naming     8-14

physical, identifying     8-4

range of     8-5

restarting     8-16

shutting down     8-16

supported     8-8

types of     8-1

interfaces range macro command     8-7

Intrusion Detection System

See IDS

IP addresses

candidate or member     4-2

command switch     4-2

discovering     5-26

See also IP information

ip igmp profile command     16-21

IP information

assigned

manually     3-9

through DHCP-based autoconfiguration     3-3

default configuration     3-3

IP multicast routing and IGMP snooping     16-2, 16-6

IP phones

and 802.1x authentication     7-7

and QoS     15-1

configuring     15-3

trusted boundary for QoS     24-7

IPv4     1-1

IPv6     1-1

IP version 4     1-1

IP version 6     1-1

J

join messages, IGMP     16-3

L

LACP

See EtherChannel

Layer 2 frames, classification with CoS     24-1

Layer 2 interfaces, default configuration     8-9

Layer 2 traceroute

and ARP     26-13

and CDP     26-13

described     26-13

IP addresses and subnets     26-13

MAC addresses and VLANs     26-13

multicast traffic     26-13

multiple devices on a port     26-14

unicast traffic     26-13

usage guidelines     26-13

leave processing, IGMP     16-10

line configuration mode     2-2

links, unidirectional     18-1

login authentication

with RADIUS     6-23

with TACACS+     6-14

login banners     5-18

log messages

See system message logging

loop guard

described     12-9

enabling     12-16

support for     1-4

M

MAC addresses

aging time     5-22

and VLAN association     5-21

building the address table     5-21

default configuration     5-22

discovering     5-26

displaying     5-26

dynamic

learning     5-21

removing     5-23

static

adding     5-25

characteristics of     5-25

removing     5-25

sticky secure, adding     17-5

MAC address multicast entries, monitoring     16-13

MAC address-to-VLAN mapping     13-24

macros

See Smartports macros

management options

benefits

clustering     1-7

Network Assistant     1-7

CLI     2-1

Network Assistant     1-1

overview     1-6

maximum aging time

MSTP     11-21

STP     10-21

maximum hop count, MSTP     11-21

membership mode, VLAN port     13-3

member switch

defined     4-1

managing     4-3

recovering from lost connectivity     26-10

requirements     4-2

member switch (continued)

See also candidate switch, cluster standby group, and standby command switch

messages to users through banners     5-18

MIBs

accessing files with FTP     A-2

location of files     A-2

overview     23-1

SNMP interaction with     23-4

supported     A-1

mirroring traffic for analysis     20-1

mismatches, autonegotiation     26-10

monitoring

cables for unidirectional links     18-1

CDP     19-5

IGMP

filters     16-26

snooping     16-12

interfaces     8-14

multicast router interfaces     16-13

MVR     16-20

network traffic for analysis with probe     20-1

port protection     17-11

speed and duplex mode     8-11

traffic flowing among switches     21-1

traffic suppression     17-11

VLANs     13-13

VMPS     13-29

VTP     14-15

MSTP

boundary ports

configuration guidelines     11-12

described     11-5

BPDU filtering

described     12-3

enabling     12-12

MSTP (continued)

BPDU guard

described     12-2

enabling     12-11

CIST, described     11-3

configuration guidelines     11-12, 12-10

configuring

forward-delay time     11-20

hello time     11-19

link type for rapid convergence     11-22

maximum aging time     11-21

maximum hop count     11-21

MST region     11-13

path cost     11-18

port priority     11-17

root switch     11-14

secondary root switch     11-16

switch priority     11-19

CST

defined     11-3

operations between regions     11-3

default configuration     11-12

default optional feature configuration     12-10

described     11-2

displaying status     11-23

enabling the mode     11-13

EtherChannel guard

described     12-7

enabling     12-14

extended system ID

effects on root switch     11-14

effects on secondary root switch     11-16

unexpected behavior     11-15

instances supported     10-9

interface state, blocking to forwarding     12-2

interoperability and compatibility among modes     10-10

interoperability with 802.1D

described     11-5

restarting migration process     11-22

MSTP (continued)

IST

defined     11-2

master     11-3

operations within a region     11-3

loop guard

described     12-9

enabling     12-16

mapping VLANs to MST instance     11-13

MST region

described     11-2

hop-count mechanism     11-4

supported spanning-tree instances     11-2

Port Fast

described     12-2

enabling     12-10

preventing root switch selection     12-8

root guard

described     12-8

enabling     12-15

root switch

configuring     11-15

effects of extended system ID     11-14

unexpected behavior     11-15

shutdown Port Fast-enabled port     12-2

multicast groups

and IGMP snooping     16-6

Immediate Leave     16-5

joining     16-3

leaving     16-5

static joins     16-9

multicast router interfaces, monitoring     16-13

multicast router ports, adding     16-9

multicast storm control

See storm control

Multicast VLAN Registration

See MVR

Multiple Spanning Tree Protocol

See MSTP

MVR

configuring interfaces     16-18

default configuration     16-16

described     16-13

modes     16-17

monitoring     16-20

setting global parameters     16-17

N

native VLAN

configuring     13-20

default     13-20

Network Assistant

advantages with switch clustering     1-7

described     1-6

guide mode     1-1

management options     1-1

wizards     1-2

network examples

collapsed backbone and switch cluster     1-10

design concepts

network performance     1-8

network services     1-8

large campus     1-11

small to medium-sized network     1-9

network management

CDP     19-1

RMON     21-1

SNMP     23-1

Network Time Protocol

See NTP

no commands     2-3

nontrunking mode     13-15

normal-range VLANs

configuration modes     13-6

defined     13-1

note, described     xx

NTP

associations

authenticating     5-4

defined     5-2

enabling broadcast messages     5-6

peer     5-5

server     5-5

default configuration     5-4

displaying the configuration     5-10

overview     5-2

restricting access

creating an access group     5-8

disabling NTP services per interface     5-9

source IP address, configuring     5-10

stratum     5-2

synchronizing devices     5-5

time

services     5-2

synchronizing     5-2

P

PAgP

See EtherChannel

pass-through mode     24-8

passwords

default configuration     6-2

disabling recovery of     6-5

encrypting     6-4

overview     6-1

setting

enable     6-3

enable secret     6-4

Telnet     6-6

with usernames     6-7

VTP domain     14-8

path cost

MSTP     11-18

STP     10-18

per-VLAN spanning-tree plus

See PVST+

physical ports     8-1

PIM-DVMRP, as snooping method     16-8

ping

character output description     26-12

executing     26-12

overview     26-11

Port Aggregation Protocol

See EtherChannel

See PAgP

port-based authentication

accounting     7-5

accounting services     1-5

authentication server

defined     7-2

RADIUS server     7-2

client, defined     7-2

configuration guidelines     7-10

configuring

802.1x accounting     7-21

802.1x authentication     7-11, 7-19

guest VLAN     7-17

host mode     7-17

manual re-authentication of a client     7-14

periodic re-authentication     7-14

quiet period     7-15

RADIUS server     7-14

RADIUS server parameters on the switch     7-13

switch-to-client frame-retransmission number     7-16

switch-to-client retransmission time     7-15

default configuration     7-9

described     7-1

device roles     7-2

displaying statistics     7-22

EAPOL-start frame     7-3