Table Of Contents
Creating and Managing Clusters
Planning Your Cluster
Creating Clusters with Different Releases of IOS Software
Command Switch Requirements
Candidate Switch Requirements
Understanding Management VLAN Changes
Creating Clusters
Enabling the Command Switch
Automatically Discovering Cluster Candidates
CLI: Creating a Cluster
When a Cluster is Created
Changes to the Host Name
Changes to the SNMP Community Strings
Changes to Passwords
Adding and Removing Member Switches
Determining Why a Switch Is Not Added to a Cluster
CLI: Adding a Member to a Cluster
CLI: Removing a Member from a Cluster
Building a Redundant Cluster
Understanding HSRP
Recovering from a Failed Command Switch without HSRP
Configuring a Cluster Standby Group
Standby Command Switch Requirements
Using the Standby Configuration Window
CLI: Creating a Standby Group
CLI: Adding Member Switches to a Standby Group
CLI: Removing a Switch from a Standby Group
CLI: Removing a Standby Group from the Network
Managing Switch Clusters
Accessing the Cluster Management Suite
Configuring Initial Cluster Settings
Arranging and Saving the Network Map
Changing User Settings
Rearranging the Order of the Displayed Switches
Changing the Host Name
Saving Configuration Changes
Displaying an Inventory of Cluster Switches
Displaying Link Information
Changing the Management VLAN
Guidelines for Changing the Management VLAN
Changing the Management VLAN for a Cluster
Changing the Management VLAN for a New Switch
CLI: Changing the Management VLAN Through a Telnet Connection
Monitoring and Configuring Ports
Monitoring Port Settings
Monitoring Other Switch LEDs
Guidelines for Configuring Ports
Connecting to Devices That Do Not Autonegotiate
Configuring Ports
Port Statistics
Port Search
CLI: Setting Speed and Duplex Parameters
CLI: Configuring Flow Control on Gigabit Ethernet Ports
Displaying VLAN Membership
Upgrading or Reloading the Switch Software
Guidelines for Upgrading or Reloading Switch Software
Configuring the Cisco TFTP Server to Upgrade Multiple Switches
CLI: Copying the Startup Configuration from the Switch to a PC or Server
Using the Software Upgrade Page to Upgrade Switch Software
CLI: Upgrading a Standalone Switch
CLI: Reloading or Upgrading Catalyst 2950, 2900 XL, or 3500 XL Member Switches
CLI: Upgrading Catalyst 1900 or 2820 Member Switches
Reloading Switch Software
Configuring SNMP for a Cluster
Enabling or Disabling the SNMP Agent
Configuring Community Strings for Cluster Switches
Configuring Trap Managers and Enabling Traps
Creating and Managing Clusters
A cluster is a group of connected switches that are managed as a single entity.
The switches can be in the same location, or they can be distributed across a contiguous Layer 2 network. All communication with cluster switches is through one IP address.
Tips
You can have up to 16 switches in a cluster: 1 command switch and up to 15 member switches. The command switch is the single point of access used to manage, configure, and monitor the member switches.
Clusters can be configured for management redundancy by using the Hot Standby Router Protocol (HSRP). Figure 3-1 shows a cluster of switches with a standby command switch.
This chapter describes how to create and manage clusters of switches by using the Cluster Management Suite (CMS) applications: Cluster Builder, Cluster View, and Cluster Manager. You use Cluster Builder to create the cluster, you use Cluster View to display the devices connected to the cluster, and you use Cluster Manager to configure and monitor your cluster after it has been created.
This chapter describes how to perform the following tasks:
•
Planning your cluster
•
Creating a cluster
•
Building a redundant cluster
•
Managing a cluster
Figure 3-1 A Cluster with a Standby Command Switch
Planning Your Cluster
Anticipating conflicts and compatibility issues is a high priority when you manage several switches through a cluster. This section describes the requirements and caveats that you should understand before you create the cluster.
Before you create a cluster, you might want to consider creating a cluster with a redundant command switch. Cluster redundancy is described in the "Building a Redundant Cluster" section.
Creating Clusters with Different Releases of IOS Software
Some versions of the Catalyst 2900 and 3500 XL software do not support clustering, and other versions do not support the features in this release. To ensure that all cluster switches are operating with the same level of software, we recommend that you upgrade all cluster switches to IOS Release 12.0(5)WC(1).
Note
Catalyst 1900 and 2820 switches are always member switches.
Command Switch Requirements
You must select a switch to be the command switch of your cluster. The command switch must satisfy the following requirements:
•
It is running Cisco IOS Release 12.0(5)XU or later. See "Supported Hardware" section for a list of switches that can run these versions.
Note
If you are running Cisco IOS Release 12.0(5)XW or earlier, a Catalyst 2950 switch will show as an unknown device in Cluster Manager. In this case, you will need to use Visual Switch Manager (VSM) to manage the Catalyst 2950 switch.
•
It is assigned an IP address.
•
It has Cisco Discovery Protocol (CDP) version 2 enabled (the default).
•
It is not a command or member switch of another cluster.
•
It belongs to the same management virtual LAN (VLAN) as the cluster member switches.
•
No access lists have been defined for the switch. Access lists can restrict access to a switch but are not usually used in configuring Catalyst 2950, 2900 XL, or 3500 XL switches. (This does not include access class 199 that is created when a device is configured as the command switch.)
Note
To avoid losing contact with cluster members when a command switch fails, you might want to create a redundant cluster. For more information, see the "Building a Redundant Cluster" section.
Candidate Switch Requirements
Before adding a candidate switch to the cluster, you must know any assigned enable or enable secret password.
A candidate switch must satisfy the following requirements to join a cluster.
•
It is running cluster-capable software. See the "Supported Hardware" section for a list of switches that support clustering.
•
It has CDP version 2 enabled.
•
It is connected to a command switch through ports that belong to the same management VLAN (see "Changing the Management VLAN" section).
•
It is not an active member or command switch of another cluster.
A candidate switch can have an IP address, but it is not required.
Note
If you are unable to maintain management contact with a member, see the "Recovering from Lost Member Connectivity" section.
Understanding Management VLAN Changes
Communication with the switch management interfaces is through the switch IP address. The IP address is associated with the management VLAN, which by default is VLAN 1. To manage switches in a cluster, the port connections among the command, member, and candidate switches must be connected through ports that belong to the management VLAN.
You can change the management VLAN on an existing cluster, and the command switch synchronizes activities with member switches to ensure that no loss of management connectivity occurs.
Note
This is only valid for IOS Release 12.0(5)XU and later. Previous releases of the software require that switches be upgraded one at a time.
To change the management VLAN on an existing cluster, see the "Changing the Management VLAN" section.
If you add a new switch to an existing cluster and the cluster is using a management VLAN other than the default VLAN 1, the command switch automatically senses that the new switch has a different management VLAN and has not been configured. The command switch issues commands to change the management VLAN and change the port on the new switch, which is connected to the cluster, to match the one in use by the cluster. This automatic change of the VLAN only occurs for new, out-of-box switches that do not have a config.text file and for which there have been no changes to the running configuration.
Creating Clusters
You create a cluster by performing these tasks:
1.
Cabling together switches running clustering software
2.
Assigning an IP address to one switch (the command switch) and enabling the switch as the command switch
3.
Starting Cluster Builder and adding the candidate switches to the cluster
After the cluster is formed, you can access all switches in the cluster by entering the IP address of the command switch into the browser Location field (Netscape Communicator) or Address field (Internet Explorer).
Enabling the Command Switch
You enable the command-switch functionality through the Switch Manager or through the CLI. Before you enable a switch as a command switch, see the "Command Switch Requirements" section to ensure that the switch meets all the requirements.
Follow these steps to enable the switch as a command switch by using Visual Switch Manager (VSM):
Step 1
Enter the switch IP address in your browser, and press Return. The Cisco Access Page displays.
Step 2
Click Cluster Management Suite or Visual Switch Manager on the Cisco Access Page. The switch home page displays.
Step 3
Select Cluster > Cluster Command Configuration from the menu bar.
Step 4
Select Enable on the Cluster Configuration window. You can use up to 31 characters to name your cluster.
After you have enabled the command switch, select Cluster > Cluster Builder to begin building your cluster. To enable a switch as the command switch by using the command-line interface (CLI), see the "CLI: Creating a Cluster" section.
Automatically Discovering Cluster Candidates
Cluster Builder uses the CDP to discover candidate switches that can be added to a cluster. By using CDP, a switch can automatically discover switches in star or cascaded topologies that are up to three CDP-hops away from the edge of the cluster. You can configure the command switch to discover switches up to seven CDP-hops away.
When an edge device that does not support CDP is connected to the command switch, CDP can still discover the candidate switches that are attached to it. When a switch that does support CDP but does not support clustering is connected to the command switch, the cluster is unable to discover candidates that are attached to it. For example, Cluster Builder cannot create a cluster that includes candidates that are connected to a Catalyst 5000 series or 6000 switch connected to the command switch.
When Cluster Builder starts, it automatically prompts you to create a cluster by adding qualified candidates, as shown in Figure 3-2. The Suggested Candidate window lists each candidate switch with its device type, MAC address, and the switch through which it is connected to the cluster. When new switches are added to the topology, Cluster Builder prompts you the next time it starts to add the latest candidate to the cluster. The Suggested Candidate window does not display after the number of switches in the cluster has reached the maximum of 16.
By default, the suggested candidates are highlighted in the Suggested Candidates window, but you can select one or more switches as long as the number of switches selected does not exceed 16. You can accept the suggested candidates or not. If you do not accept the suggested candidates, none of the switches are added.
Note
You can always select one or more candidates in Cluster Builder and select Add to Cluster to add them to the cluster.
When you accept the suggested candidates, enter the password of the candidate switch if one has been defined. If no password has been defined, click OK to add the switch to the cluster with no password. If you enter a password that does not match the password defined for the candidate, or if the switch does not have a password, it does not look at the password field, and the candidate is not added to the cluster. In all cases, once a candidate switch joins a cluster, it inherits the command-switch password. For more information on setting passwords, see the "Changes to Passwords" section.

Note
The Suggested Candidates window displays prequalified candidates whether or not they are in the same management VLAN as the command switch. If you enter the password for a candidate in a different management VLAN than the cluster and click OK, this switch is not added to the cluster. It appears as a candidate switch in Cluster Builder. For information on how to change the management VLAN, see the "Understanding Management VLAN Changes" section.
You can set Cluster Builder to not automatically display suggested candidates. For more information, see the "Changing User Settings" section.
Figure 3-2 Suggested Candidate Window
CLI: Creating a Cluster
This procedure assumes that the candidate switches and the command switch are connected through ports that belong to the same management VLAN. The "Changing the Management VLAN" section describes the characteristics of the management VLAN.
Beginning in privileged EXEC mode on the command switch, follow these steps to enable the command switch and add candidate switches to the cluster:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
Enter global configuration mode.
|
Step 2
|
cluster enable name
|
Enable the command switch and name the cluster (up to 31 characters).
|
Step 3
|
end
|
Return to privileged EXEC mode.
|
Step 4
|
show cluster candidates
|
Display a list of candidates.
|
Step 5
|
show cluster members
|
Display a list of current cluster members.
|
Step 6
|
configure terminal
|
Enter global configuration mode.
|
Step 7
|
cluster member n mac-address hw-addr password password
|
Add candidates to the cluster.
Assign a unique number from 1 to 15 for n. Do not use any switch number (SN) that appears in the show cluster members display. Enter the candidate switch MAC address, which can be obtained from the show cluster candidates display.
|
Step 8
|
end
|
Return to privileged EXEC mode.
|
Step 9
|
show cluster members
|
Display the status of the cluster.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
When a Cluster is Created
When a cluster is created, Network Address Translation (NAT) commands are added to the configuration file of the command switch. Do not remove these commands. The command switch also automatically makes configuration changes to the member switch host name, password, and SNMP community string.
Changes to the Host Name
If you did not assign a host name to a member switch, the command switch appends a unique member number to its own host name and assigns it sequentially to the switch when it joins the cluster. The number indicates the order in which the switch was added to the cluster. For example, a command switch named eng-cluster could name cluster member 5 eng-cluster-5.
If you did not assign a host name to the command switch, it keeps the default host name of Switch.
If you assigned a host name to a member switch, it retains that name when it joins the cluster. A host name is also retained even after removing the switch from the cluster.
However, if your switch was part of a cluster, received its host name from the command switch, was removed and then added back to a new cluster, its host name (such as eng-cluster-5) is not overwritten with the new version of the command switch host name.
Changes to the SNMP Community Strings
The following SNMP community strings are added to a member switch when it joins a cluster:
•
commander-readonly-community-string@esN, where N is the member-switch number.
•
commander-readwrite-community-string@esN, where N is the member-switch number.
If the command switch has multiple read-only or read-write community strings, only the first read-only and read-write strings are propagated to the member switch.
Catalyst 2950, 2900 XL, and 3500 XL switches support an unlimited number of community strings and string lengths.
The Catalyst 1900 and 2820 switches support up to four read-only and four read-write community strings; each string contains up to 32 characters. When these switches join the cluster, the first read-only and read-write community string on the command switch is propagated and overwrites the fourth read-only and read-write community string on the member switches. To support the 32-character string-length limitation on the Catalyst 1900 and 2820 switches, the command-switch community strings are truncated to 27 characters when propagating them to these switches, and the @esN (where N refers to the member switch number and can be up to two digits) is appended to them.
For more information about configuring community strings through Cluster Manager, see the "Configuring SNMP" section.
Changes to Passwords
The member switch inherits the command-switch enable-secret or enable password when it joins the cluster and retains it when it leaves the cluster. If no command-switch password is configured, the member switch inherits a null password. Member switches only inherit the command-switch password privilege level 15.
However, certain caveats apply to Catalyst 1900 and 2820 switches as cluster members. Their passwords and privilege levels are altered in the following ways:
•
Password length
–
If the command-switch enable password is longer than 8 characters, the member-switch enable password is truncated to 8 characters.
–
If the command-switch enable password is between 1 and 8 characters inclusive, the member-switch enable password will be the same as the command switch password. (Though the password length for Catalyst 1900 and 2820 switches is from 4 to 8 characters, the length is only checked when the password is configured from the menu console or with the CLI.)
–
Both the command switch and member switch support up to 25 characters (52 characters encrypted) in the enable secret password.
•
Privilege level
The command switch supports up to 15 privilege levels. Catalyst 1900 and 2820 member switches support only levels 1 and 15.
–
Command-switch privilege levels 1 to 14 map to level 1 on the member switch.
–
Command-switch privilege level 15 maps to level 15 on the member switch.
Adding and Removing Member Switches
You can use the network map in Cluster Builder (Figure 3-3) to add a switch or switches to a cluster. Clustered switches have green labels, and candidates have blue labels. To add a single switch to a cluster, right-click the candidate, and click Add to Cluster from the pop-up menu. If the candidate is in a different management VLAN than the command switch, a message is displayed indicating that this candidate is unreachable, and you will not be able to add it to the cluster.
To add several switches to a cluster, press Ctrl, and left-click the candidates you want to add. The candidates are added if they all have the same password. If any of the candidates cannot be added, Cluster Builder displays a message explaining which candidates were not added and why.
You can add a candidate to a cluster if no more than 16 switches are in the cluster; otherwise, you must remove a member before adding a new one. If a password has been configured on the switch, you are prompted to enter.
Note
The Add to Cluster option is disabled when the number of switches in the cluster reaches 16.
To remove a member switch, right-click it, and select Remove from Cluster from the pop-up menu. The switch retains the password configured for it when it leaves the cluster. You can also use the CLI to remove a member switch, as described in the "CLI: Removing a Member from a Cluster" section.
Figure 3-3 Cluster Builder
Determining Why a Switch Is Not Added to a Cluster
If a switch does not become part of the cluster, you can learn why by selecting Views > Toggle View from the menu bar in Cluster Builder. Cluster View displays the cluster as a double-switch icon and shows connections to devices outside of the cluster (Figure 3-4). Right-click the device (yellow label), and select Disqualification Code to display the reason it did not join the cluster.
Figure 3-4 Cluster View
CLI: Adding a Member to a Cluster
You can use the cluster setup command to add members to an existing cluster or to create a cluster. This command generates a script that proposes configuration changes and prompts you to approve or disapprove them. Enter this command from a switch that is enabled as a command switch.
Note
Only candidate switches that are one hop away and have not been assigned an IP address are displayed by this command. You can display all valid candidates by using the show cluster candidates command, and you can display all cluster members by using the show cluster members command.
Beginning in privileged EXEC mode on a command switch, follow these steps to add a member switch to a cluster:
| |
Command
|
Purpose
|
Step 1
|
cluster setup
|
Start the setup script. You can end the script at any time by entering ctrl-c.
|
Step 2
|
Continue with cluster configuration dialog? [yes/no]: yes
The following configuration command script was created: cluster member n mac-address hw-addr
|
The current cluster members and candidates are displayed. When prompted by the script, enter yes to accept the proposed cluster configuration or no to reject it.
If you enter yes, the script displays candidates that have been added to the cluster. If you enter no, the cluster setup command ends.
|
| |
Step 3
|
Use this configuration? [yes/no]: yes
|
Enter yes to accept the proposed configuration or no to reject it.
If you enter yes, the candidate switches are added to the cluster. If you enter no, the cluster setup command ends.
|
Step 4
|
end
|
Return to privileged EXEC mode.
|
Step 5
|
show cluster members
|
Verify that all members have been added to the cluster.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
CLI: Removing a Member from a Cluster
You remove a cluster member by entering commands on the command switch.
Beginning in privileged EXEC mode on the command switch, follow these steps to remove a member switch from the cluster:
| |
Command
|
Purpose
|
Step 1
|
show cluster members
|
Display the status of the cluster, and note the MAC address and member number of the switch you want to remove.
|
Step 2
|
configure terminal
|
Enter global configuration mode.
|
Step 3
|
no cluster member n
|
Remove the switch from the cluster, where n is the switch member number.
|
Step 4
|
end
|
Return to privileged EXEC mode.
|
Step 5
|
show cluster members
|
Display the status of the new cluster.
|
You can remove a member by entering commands on the member itself, but the member is not entirely removed from the cluster until you also enter commands on the cluster command switch. A member switch that is removed by entering commands only on the member switch is considered by the command switch to be down until it is explicitly removed on the command switch.
Beginning in privileged EXEC mode on a Catalyst 2950, 2900 XL, or 3500 XL member switch, follow these steps to remove it from a cluster:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
On the member switch, enter global configuration mode.
|
Step 2
|
no cluster commander-address
|
Remove the member switch from the cluster.
|
Step 3
|
end
|
Return to privileged EXEC mode.
|
Step 4
|
show cluster
|
Verify that the member switch is no longer part of the cluster.
|
Step 5
|
show cluster members
|
On the command switch, display the status of the cluster, and note the MAC address and switch number of the switch you want to remove.
|
Step 6
|
configure terminal
|
Enter global configuration mode.
|
Step 7
|
no cluster member n
|
Remove the switch from the cluster.
|
Step 8
|
end
|
Return to privileged EXEC mode.
|
Step 9
|
show cluster members
|
Display the status of the new cluster.
|
For information on how to remove Catalyst 1900 or 2820 member switches, refer to the Catalyst 1900 Series Installation and Configuration Guide or the Catalyst 2820 Series Installation and Configuration Guide.
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
Building a Redundant Cluster
Because a cluster command switch manages the forwarding of all configuration information to cluster members, a redundant command switch is necessary to take over if the command switch fails. Cisco IOS Release 12.0(5)WC(1) supports a version of the HSRP so that you can configure a standby group of Catalyst 2950, 2900 XL, or 3500 XL switches. When this standby group is bound to the cluster, one of the switches acts as a standby command switch that becomes active when the command switch fails. The "Understanding HSRP" section describes how the protocol works.
Redundant cabling is also required for a standby switch to automatically take over when a command switch fails. Figure 3-5 shows a network cabled to allow the standby switch to maintain management contact with the member switches if the cluster command switch fails. Spanning Tree Protocol prevents the loops in such a configuration from reducing performance.
Figure 3-5 Redundant Cabling to Support HSRP
Understanding HSRP
To build a redundant cluster, you use HSRP to configure a stand-by group that contains a cluster command switch and one or more eligible member switches. The standby group is configured with a unique virtual IP address. When the standby group is bound on the command switch, the command switch receives member traffic destined for the virtual IP address.
To manage the redundant cluster, access the command switch through the virtual IP address and not the command-switch IP address. If HSRP is enabled and you use the command-switch IP address, you can be prompted a second time for a password when you move between Cluster Builder and VSM.
Other switches in the standby group are candidates to become the standby command switch and are ranked according to a set of user-defined priorities. The member switch with the highest priority in the group is the standby command switch. To ensure that the standby command switch can take over the cluster if the command switch fails, the command switch continually forwards cluster configuration information to the standby command switch.
Note
The command switch forwards cluster configuration information to the standby switch but not device-configuration information. The standby command switch is informed of new cluster members but not the configuration of any given switch.
If the command switch fails, the standby command switch assumes ownership of the virtual IP address and MAC address and begins acting as the command switch. The remaining switches in the group compare their assigned priorities to determine the new standby command switch. To configure an HSRP standby group, see the "Configuring a Cluster Standby Group" section.
If a standby switch replaces a command switch and the command switch becomes active again, the command switch resumes its role as the active command switch. An automatic recovery procedure can add cluster members that were added to the cluster while the command switch was down.
Recovering from a Failed Command Switch without HSRP
If a command switch fails and no standby command switch is configured, member switches continue forwarding among themselves, and they retain the ability to be managed through normal standalone means. You can configure member switches through the console-port CLI, and they can be managed through SNMP, HTML, and Telnet after you assign an IP address to them.
The password you enter when you log into the command switch gives you access to member switches. If the command switch fails and there is no standby command switch, you can use the command-switch password to recover. For more information, see "Recovering from a Command Switch Failure" section.
Configuring a Cluster Standby Group
This section describes how to create a standby group and bind it to a cluster, how to add and remove members from a standby group, and how to remove a standby group from the network.
Use the Standby Command Configuration window (Figure 3-6) to create a standby group. When an active command switch fails, a new command switch is chosen from this group according to their order in their Selected list in the window.
Standby Command Switch Requirements
To be eligible to join a standby group, a switch must meet the following requirements:
•
It is running Cisco IOS Release 12.0(5)XU or later.
•
It has its own IP address.
Any number of eligible switches can belong to a standby group.
Note
Switches running earlier releases of the IOS software can belong to clusters supported by HSRP but cannot belong to a standby group.
For redundancy, we also recommend that a switch belonging to a standby group have the following characteristics:
•
It is a member of a cluster.
•
It is cabled so that connectivity to cluster members is maintained even if the command switch fails.
Using the Standby Configuration Window
You create a standby group by moving candidates from the Candidates list to the Selected list in the Standby Command Configuration window (Figure 3-6). Eligible switches are listed in the Candidates list according to an eligibility ranking. Switches are ranked first by the number of links they have and second by the speed of the switch. If switches have the same number of links and speed, they are listed alphabetically.
When you add a switch to the standby group, you can configure the priority of group members by using the Add and Remove buttons. The command switch has the highest priority and is always at the top of the list. The standby switch is below the command switch, and the priority of the other switches is represented by their place in the list. The last switch in the list has the lowest priority.
Figure 3-6 Standby Command Configuration
The following abbreviations are appended to the switch host names in the Selected list to indicate their status in the standby group:
AC
|
Active command switch
|
SC
|
Standby command switch
|
PC
|
Passive command switch (member of the standby group but is not the standby command switch)
|
CC
|
Command switch when HSRP is disabled
|
The virtual IP address (VIP) must be in the same subnet as the IP addresses of the switches, and the group number must be unique within the IP subnet. It can be from 0 to 255, and the default is 0. The VIP should be different from the commander IP address to avoid duplicate IP addresses.
The Standby Command Configuration window uses default values for the preempt and name commands that you can explicitly set by using the CLI. If you use this window to create the HSRP group, all switches in the group have the preempt command enabled, and the name for the group is clustername_standby.
CLI: Creating a Standby Group
There are two steps to configuring a standby group through the CLI:
1.
Entering the name, number, and virtual IP address of the HSRP group on each switch in the group, including the command switch.
2.
Binding the HSRP group to the cluster by entering the redundancy-enable command on the cluster command switch.
Follow these guidelines when you configure a standby group by using the CLI:
•
Configure one HSRP group per cluster.
•
Assign the unique virtual IP address to every switch in the group.
•
Assign the unique name to every switch in the group.
•
Assign the standby priority to each switch in relation to the active command switch. That is, the active command switch has the highest priority, the switch with the most redundant connectivity has the next highest priority, and so on.
•
Enter the preempt command on each switch to ensure that the priority is maintained.
Beginning in privileged EXEC mode on the command switch, follow these steps to create the HSRP group and bind it to the command switch:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
Enter global configuration mode.
|
Step 2
|
interface vlan1
|
Set the switch to configure the management interface in VLAN 1.
|
Step 3
|
standby number ip ip_address
|
Create the standby group, and give it a number and virtual IP address. The group number must be unique within the IP subnet. It can be from 0 to 255, and the default is 0.
|
Step 4
|
standby number name name
|
Give the standby group a name. This name is used to bind the group to the command switch. The name can be a string up to 32 characters long.
|
Step 5
|
standby number priority priority
|
Set the priority of the switch to a number between 0 and 255. Assign the highest priority to the command switch. The default priority is 100.
|
Step 6
|
standby number preempt
|
Set the standby group to always maintain the priority ranking, even when the command switch fails and becomes active again.
|
Step 7
|
end
|
Return to privileged EXEC mode.
|
Step 8
|
show running-config
|
Verify the creation of the standby group.
|
Step 9
|
|
Repeat Steps 1 through 6 on each switch eligible to belong to the group. Configure the priority to ensure that the best-suited standby switch has the highest priority after the active command switch.
|
Step 10
|
configure terminal
|
After all eligible switches have been added to the group, return to the command switch CLI, and enter global configuration mode.
|
Step 11
|
cluster standby-group name
|
Enable command-switch redundancy for the cluster by entering the name of the standby group you created in Step 4.
|
Step 12
|
|
Begin to use the virtual IP address that you entered in Step 3 as the means to manage the cluster.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
CLI: Adding Member Switches to a Standby Group
Member switches must have an IP address and be running Cisco IOS
Release 12.0(5)XU or later before they can be added to an existing HSRP group. Beginning in privileged EXEC mode on the command switch, follow these steps to add the switch to the HSRP group:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
Enter global configuration mode.
|
Step 2
|
interface vlan1
|
Set the switch to configure the management interface in VLAN 1.
|
Step 3
|
show cluster
|
Display the HSRP group number to which the cluster is bound.
|
Step 4
|
show standby
|
Display the information defined for the existing HSRP group, and note the virtual IP address, name, and priority.
|
Step 5
|
show cluster members
|
Display the members that are part of the cluster. From the display, get the number of the member switch that you want to add to the group. The member number is listed in the SN column of the display. You need the member number for Step 6.
|
Step 6
|
rcommand n
|
Access the CLI for the member switch that you want to add to the group.
For n, enter the switch number that you obtained in Step 5.
|
Step 7
|
configure terminal
|
On the member switch, enter global configuration mode.
|
Step 8
|
standby number ip ip_address
|
Enter the group number and the virtual IP address.
|
Step 9
|
standby number name name
|
Enter the HSRP group number and name.
|
Step 10
|
standby number priority priority
|
Set the priority of the switch to a number between 0 and 255.
|
Step 11
|
standby number preempt
|
Set the standby group to always maintain the priority ranking, even when the command switch fails and becomes active again.
|
Step 12
|
end
|
Return to privileged EXEC mode.
|
Step 13
|
show cluster members
|
Verify that the member was added to the cluster.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
CLI: Removing a Switch from a Standby Group
You can remove standby switches from a standby group, but you cannot remove an active command switch from a standby group. Beginning in privileged EXEC mode on the command switch, follow these steps to remove a switch from the HSRP group:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
Enter global configuration mode.
|
Step 2
|
interface vlan1
|
Set the switch to configure the management interface in VLAN 1.
|
Step 3
|
show cluster
|
Display the standby group number to which the cluster is bound. Note the number.
|
Step 4
|
show cluster members
|
Display the members that are part of the cluster. From the display, get the number of the member switch that you want to remove from the group. The member number is listed in the SN column of the display. You need the member number for Step 5.
|
Step 5
|
rcommand n
|
Access the CLI for the member switch you want to remove from the group.
For n, enter the switch number that you obtained in Step 4.
|
Step 6
|
configure terminal
|
Enter global configuration mode.
|
Step 7
|
no standby number ip
|
Use the group number to remove the virtual IP address.
|
Step 8
|
no standby number name
|
Use the group number to remove the name setting.
|
Step 9
|
no standby number priority
|
Use the group number to remove the priority setting.
|
Step 10
|
no standby number preempt
|
Use the group number to remove the preempt setting.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
CLI: Removing a Standby Group from the Network
You remove a standby group from your network by disabling the standby group on the command switch and entering the no version of the HSRP CLI commands on all switches in the HSRP group. When all HSRP parameters have been removed from all the members of the group, including the command switch, the group has been removed from the network.
Beginning in privileged EXEC mode on the command switch, follow these steps to remove a standby group:
| |
Command
|
Purpose
|
Step 1
|
show cluster
|
Display the standby group number.
|
Step 2
|
configure terminal
|
Enter global configuration mode.
|
Step 3
|
no cluster standby-group
|
Unbind the command switch from the standby group.
|
Step 4
|
no standby number ip
|
Use the group number to remove the virtual IP address of the standby group.
|
Step 5
|
no standby number name
|
Use the group number to remove the name setting.
|
Step 6
|
no standby number priority
|
Use the group number to remove the priority setting.
|
Step 7
|
no standby number preempt
|
Use the group number to remove the preempt setting.
|
Step 8
|
show cluster members
|
Display the members that are part of the cluster. From the display, get the number of the switch that you want to remove from the group. You need the member number for Step 9.
|
Step 9
|
rcommand n
|
Access the CLI for each switch in the group, enter global configuration mode, and repeat Steps 4 through 7.
For n, enter the switch number that you obtained in Step 8.
|

Note
After the last switch has been removed from the standby group, start accessing the cluster by using the IP address of the command switch.
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
Managing Switch Clusters
This section describes how to perform tasks on switch clusters. Cluster members could be Catalyst 1900, 2820, 2950, 2900 XL, or 3500 XL switches. These management tasks operate on all switches in the cluster and are distinct from configuring individual switches. For information on managing individual devices, see "Managing Switches."
This section describes how to perform the following tasks:
•
Accessing CMS
•
Configuring initial cluster settings
•
Saving configuration changes
•
Displaying an inventory of cluster switches
•
Monitoring and configuring ports
•
Changing the management VLAN for a cluster
•
Displaying link information
•
Displaying VLAN membership information
•
Upgrading the switch software on all switches in the cluster
•
Enabling and configuring SNMP
Accessing the Cluster Management Suite
If you have not already configured your browser for CMS, refer to the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1) for detailed instructions on configuring the browsers.
When you enter the switch IP address in the browser Location field (Netscape Communicator) or Address field (Internet Explorer), the Cisco Systems Access page (Figure 3-7) is displayed. Click Cluster Management Suite or Visual Switch Manager. Cluster Builder or Cluster Manager displays (Figure 3-8).
Figure 3-7 Cisco Systems Access Page
After you have created a cluster, you can use Cluster Manager to monitor and configure the cluster switches. Figure 3-8 shows a cluster displayed in Cluster Manager. The switch software updates the LEDs displayed on these images in real time, making the images displayed by Cluster Manager as informative as the switch LEDs themselves. You can also use Cluster Builder and Cluster View to manage your cluster.
Figure 3-8 Cluster Manager
Configuring Initial Cluster Settings
This section describes how to customize the CMS environment to meet
your needs.
Arranging and Saving the Network Map
You can reposition devices in Cluster Builder and Cluster View and save this information. Before arranging and saving the network map, make sure that the command switch discovered all the devices and that you have added them to the cluster.
You arrange the layout by clicking and holding the left mouse-button on a device and dragging it to a new location on the map. Select Options > Save Layout from the menu bar to save the arrangement displayed by Cluster Builder and Cluster View.
If the topology did not change, the saved version of the network map displays the next time you start Cluster Builder or Cluster View. If a topology change occurs, you can arrange the devices and save the map again.
Changing User Settings
Select Cluster > User Settings from the menu bar in Cluster View, Cluster Builder, or Cluster Manager to change the parameters described in the following list. The user settings are automatically saved in permanent storage on the command switch.
•
Cluster Builder and Cluster Manager polling interval—Select the number of seconds the switch waits before polling the switch for new cluster and port information by clicking on the slide bar and moving it to the left or right. Lowering the polling interval can be useful when you are changing or testing cluster switches. The default is 120 seconds.
Reload the page for the new setting to take effect.
Tips
A long polling interval reduces the number of requests made on the command switch, and topology updates are not reported as frequently. A short polling interval has the opposite effect. We recommend that you use a short interval only for troubleshooting or while building a cluster.
•
Link and device graph polling interval—Select the number of seconds the switch waits before the application polls it for new graph information by clicking on the slide bar and moving it to the left or right. The default is
24 seconds. Reload the page for the new setting to take effect.
•
Show the splash screen when the Cluster Management Suite starts—Select Show Splash Screen at startup to always see the splash screen.
•
Change the default view—Choose Cluster Manager or Cluster Builder as the default view to display when CMS starts. For example, you might make Cluster Manager the default after the cluster-creation process is compete.
Rearranging the Order of the Displayed Switches
You can arrange the order in which switches are displayed in Cluster Manager to match the arrangement in your wiring closet. Select Cluster > Device Position from the menu bar to display the Device Position window (Figure 3-9). Select a device in the Device Position window, and use the arrows to move it up or down in the list. Click OK when you are finished.
Figure 3-9 Device Position
Changing the Host Name
You can change the host name of any switch in the cluster by using Cluster Builder.
To change the host name of a member switch in Cluster Builder, right-click the switch, and select Host Name Config from the pop-up menu. Enter a host name of up to 28 characters in the field, and click OK. Member switch host names must be unique in the cluster. Do not use a number as the last character in a host name on any switch.
When you change the host name on the command switch, assign a name no longer than 28 characters. Limiting the command switch host name to 28 characters ensures that each member switch host name is unique and viewable in the application. The "Changes to the Host Name" section describes how the command switch appends a member number to its host name and propagates it to new switches not originally configured with a name when they joined the cluster.
Saving Configuration Changes
Configuration changes on the Catalyst 2950 switches are not written to Flash memory until you select System > Save Configuration in Cluster Manager or Options > Save Configuration in Cluster Builder or Cluster View.
As you make cluster configuration changes (except for changes to the network map and in the User Settings window), make sure you periodically save the configuration. The configuration is saved on the command and member switches.
Displaying an Inventory of Cluster Switches
You can display a summary table of all the switches in a cluster. The cluster inventory contains the following information:
•
Cisco model numbers and serial numbers
•
IOS version running on the switches
•
IP information for the switches
•
Location of the switches
•
Modules installed in the switches, if applicable
To display the Inventory window (Figure 3-10), select System > Inventory. To display this information for a single switch, select the switch, right-click with the mouse, and select System > Inventory.
Figure 3-10 Inventory
Displaying Link Information
You can see how the cluster members are interconnected by using the Cluster Builder network map. It shows how the switches are connected and the type of connection between each device. Click Help > Legend in Cluster Builder to learn the meaning of each icon, link, and color.
To display port-connection information, select Views > Toggle Labels. By clicking Toggle Labels, you display the port numbers for each end of the link.
Changing the Management VLAN
Access to all switch management facilities is through the switch IP address, and the switch IP address always belongs to the management VLAN, VLAN 1, by default. This section describes how to configure a cluster to support management connectivity when the management VLAN is other than the default.
Guidelines for Changing the Management VLAN
The management VLAN has the following characteristics:
•
It is created by the VSM or the CLI on static-access, multi-VLAN, and dynamic-access and trunk ports. You cannot create or remove the management VLAN through SNMP.
•
Only one management VLAN can be administratively active at a time.
•
With the exception of VLAN 1, the management VLAN can be deleted.
•
When created, the management VLAN is administratively down.
Before changing the management VLAN on your switch network, make sure you follow these guidelines:
•
The new management VLAN should not have an HSRP standby group configured on it.
•
You must be able to move your network management station to a switch port assigned to the same VLAN as the new management VLAN.
•
Connectivity through the network must exist from the network management station to all switches involved in the management VLAN change.
•
For switches running a version of IOS software that is earlier than Cisco IOS 12.0(5)XP, you cannot change the management VLAN.
Changing the Management VLAN for a Cluster
To manage switches in a cluster, the port connections among the command, member, and candidate switches must all be in the management VLAN. You can use the VLAN Management window (Figure 3-11) or the CLI to change the management VLAN of the command and member switches. Any VLAN can serve as the management VLAN as long as there are links between the command switch and the member switches for both the old and the new management VLANs.
Figure 3-11 Management VLAN
When you select the new VLAN to be the management VLAN, the IOS software coordinates the change on the member switches to ensure that the cluster continues running without a loss in management connectivity.
If your cluster includes members that are running a software release earlier than
Cisco IOS Release 12.0(5)XP, you cannot change the management VLAN of the cluster. If your cluster includes member switches that are running Cisco IOS Release 12.0(5)XP, those members need to have the VLAN changed before using the Management VLAN window. The procedure for changing member switches running Cisco IOS Release 12.0(5)XP is included in the Cisco IOS Desktop Switching Software Configuration Guide for Catalyst 2900 Series XL and Catalyst 3500 Series XL Cisco IOS Release 12.0(5)XP.
Caution 
Changing the management VLAN ends your HTTP or Telnet session. You must restart the HTTP session by entering the switch IP address in the browser
Location field (Netscape Communicator) or
Address field (Internet Explorer) or by restarting your CLI session through Telnet. You can change the management VLAN through a console connection without interruption.
Changing the Management VLAN for a New Switch
For a new switch to be added to a cluster, it must first be connected to a port that belongs to the management VLAN of the cluster. If the cluster is configured with a management VLAN other than the default, the command switch changes the management VLAN for new switches when they are connected to the cluster. In this way, the new switch can exchange CDP messages with the command switch and be proposed as a cluster candidate.
Note
For the command switch to change the management VLAN on a new switch, there must be no changes to the switch configuration, and there must be no config.text file.
Because the switch is new and unconfigured, its management VLAN is changed to the cluster management VLAN when it is first added to the cluster. All ports that have an active link at the time of this change become members of the new management VLAN.
CLI: Changing the Management VLAN Through a Telnet Connection
Before you start, review the "Guidelines for Changing the Management VLAN" section. Beginning in privileged EXEC mode on the command switch, follow these steps to configure the management VLAN interface through a Telnet connection:
| |
Command
|
Purpose
|
Step 1
|
configure terminal
|
Enter global configuration mode.
|
Step 2
|
cluster management-vlan vlanid
|
Change the management VLAN for the cluster. This ends your Telnet session. Move the port through which you are connected to the switch to a port in the new management VLAN.
|
Step 3
|
show running-config
|
Verify the change.
|
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
Monitoring and Configuring Ports
You can configure one or more ports on the same switch by clicking them from Cluster Manager. You can also configure groups of ports from different switches as a group, and you can display the settings for each port. Table 3-1 describes the parameters that you can monitor and configure.
Table 3-1 Port Configuration Parameters
Feature
|
Description
|
Status
|
Administratively enables or disables the port.
|
Description
|
Displays the description for the port.
|
Duplex
|
Sets a port to full-duplex (Full), half-duplex (Half), or autonegotiate (Auto). The default is Auto.
Note The Gigabit Ethernet ports can operate in either half- or full-duplex mode when they are set to 10 or 100 Mbps, but when they are set to 1000 Mbps, they can only operate in full-duplex mode.
|
Speed
|
Sets a 10/100 port to 10 Mbps (10), 100 Mbps (100), or autonegotiate (Auto). The default is Auto.
Sets a 10/100/1000 port to 10 Mbps (10), 100 Mbps (100), 1000 Mbps ( |