Table Of Contents
Using the Management Interfaces
Preparing to Use Cluster Management Suite
Accessing CMS for the First Time
Using the Cluster Management Suite
The Common Interface of Cluster Builder and Cluster View
Toolbar Icons for Cluster Builder and Cluster View
Cluster View and Cluster Builder Device and Link Icons
Menu Options for Cluster Builder and Cluster View
Menu Bar Options in Cluster Manager
Using the Port Pop-Up Menu to Configure Ports
Using the Device Pop-Up Menu to Configure a Switch
Toolbar Icons for Cluster Manager
VSM Port Pop-Up Menu and Device Pop-Up Menu Options
Using the IOS Command-Line Interface
Setting Passwords and Privilege Levels
Using the CLI to Manage Cluster Members
Understanding Command-Line Error Messages
Configuring the Switch for Telnet
Starting a Telnet Session from the Browser
Working with Files in Flash Memory
Using FTP to Access the MIB Files
Using SNMP to Access MIB Variables
Managing Cluster Switches Through SNMP
Configuring the Switch for Remote Monitoring
Using the Management Interfaces
This chapter describes the features and characteristics of the management interfaces available on the Catalyst 2950 switches. There is a command-line interface for entering IOS commands, a graphical user interface (GUI) for use with a browser such as Microsoft Internet Explorer or Netscape Navigator, and a Simple Network Management Protocol (SNMP) interface for SNMP management applications such as CiscoWorks2000 and CiscoView 5.0.
This chapter describes the following topics:
•
Preparing to use the Cluster Management Suite (CMS), the HTML-based interface for configuring clusters and individual switches
•
•
•
Note
Preparing to Use Cluster Management Suite
All of the CMS features are based on an embedded HTTP web server in the switch Flash memory.
CMS uses Hypertext Transfer Protocol (HTTP), which is an in-band form of communication with the switch through any one of its Ethernet ports and that allows switch management from a standard web browser. CMS requires that your switch uses HTTP port 80, which is the default HTTP port.
Note
For information about connecting to a switch port, refer to the switch hardware installation guide.
Do no disable or otherwise misconfigure the port through which your management station is communicating with the switch. You might want to write down the port number to which you are connected. Changes to the switch IP information should be done with care.
Refer to the following topics in the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1) for information about accessing CMS:
•
•
•
•
•
You access CMS through the default privilege level 15. For more information, see the "Setting Passwords and Privilege Levels" section.
Accessing CMS for the First Time
Use the IP address of a cluster command switch or standalone switch to access the appropriate web-based application. For instructions on assigning the IP address, see the "CLI: Assigning IP Information to the Switch" section. For information on clustering, see "Creating and Managing Clusters."
If your network is configured with an HSRP standby group for redundancy, enter the virtual IP address to access CMS. See the "Building a Redundant Cluster" section for more information.
For detailed instructions to access Cluster Management, refer to the "Accessing CMS" section in the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1).
Using the Cluster Management Suite
The CMS consists of three related applications that you can use to create clusters of switches, configure and monitor switches and ports, and display link and performance information. Each cluster requires a designated command switch with an IP address to manage communication with the other switches in the cluster.
This section describes how you can use the following CMS applications to manage your network:
•
•
•
These CMS applications support the monitoring and configuration of all cluster and switch features. VSM supports configuration and monitoring of all device-management features for standalone switches.
All CMS applications are supported by an online help system.
Using CMS Windows
CMS windows use consistent techniques to present and save configuration information. In some cases, CMS windows have multiple tabs that present different kinds of information. Tabs are arranged like folder headings across the top of the window. Click the tab to display a new screen of information, and use the Apply button to save information on all tabs without closing the window.
When you are managing a cluster of switches, a drop-down Device List at the top of the window displays the names of all cluster switches. The contents of this list can vary depending on the menu item selected. Click a switch to display the information for that switch. VSM windows, which always operate on a single switch, do not display a Device List.
Listed information can often be changed by selecting an item from a list. To change the information, select one or more items, and click Modify. Changing multiple items is limited to those items that apply to at least one of the selections. For example, when you select multiple ports, a parameter such as flow control is grayed out if the ports are not Gigabit Ethernet ports.
Tips
Figure 2-1 shows the components of a typical CMS window.
The following are the most common buttons that you use to control a CMS window:
Figure 2-1 Components of a CMS Window
The Common Interface of Cluster Builder and Cluster View
Cluster Builder and Cluster View are related applications that share the same interface. Use Cluster Builder to create and modify clusters of switches and to display a network map of their links and devices. You can create clusters with redundant command switches and display cluster members and the links between them. Cluster View displays a map of the switches in a cluster and the neighboring edge devices and clusters. Once you have displayed Cluster Builder or Cluster View, you can toggle back and forth between the two.
The user interface for Cluster Builder and Cluster View consists of the network map—the switches, links, and other devices in the cluster—and the menus and toolbar. The toolbar is a quick way to access features also available from the menu bar.
Toolbar Icons for Cluster Builder and Cluster View
One of the ways you can configure cluster switches is by clicking a toolbar icon. Figure 2-2 shows the Cluster Builder and Cluster View toolbar icons. Hold the cursor over an icon to display the feature invoked by that icon.
Figure 2-2 Features Available Through the Toolbar
You can invoke the following features from the Cluster Builder or Cluster View toolbar (from left to right):
•
•
•
•
•
•
•
•
Cluster View and Cluster Builder Device and Link Icons
The Cluster Builder and Cluster View legend shows the meaning of the colored labels and icons that represent the links and devices that make up the cluster. Select Help > Legend to display the legend. Figure 2-3 shows the device icons and as they display on the network map. Display the link and label icons by clicking the respective tabs.
Figure 2-3 Icons Used in Cluster Builder and Cluster View
Menu Options for Cluster Builder and Cluster View
Table 2-1 lists the menu options and the tasks you can perform with Cluster Builder and Cluster View.
Using Cluster Builder
Follow the procedure in the "Accessing CMS" section in the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1) to display Cluster Builder. When you are using Cluster Manager, click the double-switch icon on the toolbar (Figure 2-2) to toggle back to Cluster Builder.
Use Cluster Builder to create and manage a cluster of switches. Switches connected to the command switch or cluster-capable devices display themselves as cluster members or candidates. Figure 2-4 shows Cluster Builder displaying a map of cluster devices.
Table 2-2 shows the meanings of the label colors in Cluster Builder. Table 2-3 shows the meanings of the link colors in Cluster Builder. Table 2-4 shows the meanings of the icon colors in Cluster Builder.
Table 2-3 Link Color Meanings in Cluster Builder
Dark blue
Active link
Red
Blocked link
Table 2-4 Icon Color Meanings in Cluster Builder
Green
Device is up.
Red
Device is down.
Yellow
Fault indication.
Figure 2-4 Cluster Builder
Table 2-5 describes the available menu options when you right-click a candidate switch.
Table 2-6 describes the available menu options when you right-click a member switch. For more information on configuring cluster members, see "Managing Switches."
Table 2-6 Cluster Builder Member Pop-Up Menu
Switch Manager
Display the VSM Home page for the selected device.
Bandwidth Graph
Display a graph that plots the total bandwidth used by the switch.
Host Name Config
Change the name of the switch. For more information, see the "Changing the Host Name" section.
Remove from Cluster
Remove the selected switch from the cluster.
Hide Candidates
Toggle between displaying candidate switches and not displaying them.
Clear State
Return switches that were down but are now up to the green (up) state. Switches that are yellow are down or were previously down. Applicable only to yellow member switches.
Table 2-7 describes the available menu options when you right-click a link. For more information on displaying link information, see "Creating Performance Graphs and Link Reports."
Using Cluster View
Cluster View displays a cluster as a double-switch icon with connections to edge devices and candidate switches. To access Cluster View, select Views > Toggle Views from the menu bar in Cluster Builder. Table 2-8 describes the available menu options when you right-click an icon in Cluster View.
Figure 2-5 Cluster View
Using Cluster Manager
For the detailed procedure to display Cluster Manager, refer to the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1). When you are using Cluster Builder, click the double-switch icon on the toolbar (Figure 2-2) to toggle back to Cluster Manager.
Cluster Manager displays images of cluster switches that you can use to monitor and configure the devices. You can configure a cluster member on the port-, switch-, or cluster-level. With this release, many device-management features that were part of Visual Switch Manager (VSM) are available in Cluster Manager and VSM.
Figure 2-6 Cluster Manager
Menu Bar Options in Cluster Manager
Table 2-9 describes the options available from the Cluster Manager menu bar.
Using the Port Pop-Up Menu to Configure Ports
For port-level configuration, right-click a port to display the port pop-up menu. To configure several ports as a time, press the Ctrl key, and right-click ports on the same or different switches. Table 2-10 describes the items available from this menu.
Table 2-10 Cluster Manager Port Pop-up Menu
Port Configuration
Configure the status, speed, duplex settings and other port-level parameters. For more information, see the "Monitoring and Configuring Ports" section.
VLAN Membership
Define the VLAN mode for a port or ports, and add ports to VLANs.
Flooding Controls
Block the normal flooding of unicast and multicast packets, and enable the switch to block packet storms.
Port Security
Enable port security on a port.
Link Graph
Right-click a port that is green to display the performance graph for the link. You can plot the link utilization percentage and the total packets, bytes, and errors recorded on the link. For more information, see the "Displaying Link Graphs" section.
Note
Using the Device Pop-Up Menu to Configure a Switch
For device-level configuration, right-click the switch chassis or a switch in the cluster tree to display the device pop-up menu. The options listed on the pop-up menu are the same as those available in the drop-down menu, with the exception of the Cluster menu. Table 2-11 describes the items available from this menu.
Table 2-11 Cluster Manager Device Pop-up Menu
Inventory
Displays the device type, software version, IP address, and other information about a switch or cluster of switches.
IP Management
Configure IP information for a switch.
Software Upgrade
Upgrade the software for a cluster or a switch.
SNMP Management
Enter SNMP community strings and configure end stations as trap managers.
Console Baud Rate
Change the baud rate for one or more switches.
ARP Table
Manage the Address Resolution Protocol (ARP) table.
Save Configuration
Save the configuration on one or all of the cluster switches.
System Reload
Reboot the software on a switch or a cluster.
Spanning Tree Protocol (STP)
Display and configure STP parameters for a switch.
IGMP Snooping
Enable and disable IGMP snooping and IGMP Immediate-Leave processing on the switch. Join or leave multicast groups and configure multicast routers.
CoS and WRR
Assign packets to an output queue based on their priorities. Enable WRR and assign relative weights to the output queues.
Port Configuration
Display and configure port parameters on a switch.
Port Statistics
Display detailed port statistics on link performance, dropped packages, and total errors.
Port Search
Search for ports based on a description criteria.
Port Grouping (EC)
Group ports into logical units for high-speed links between switches.
Switch Port Analyzer (SPAN)
Enable SPAN port monitoring.
Flooding Control
Enable broadcast, unicast, and multicast flooding storm control.
VLAN Membership
Display VLAN membership, assign ports to VLANs, and configure IEEE 802.1Q trunks.
VTP Management
Display and configure the VLAN Trunk Protocol (VTP) for interswitch VLAN membership.
Address Management
Enter dynamic, secure, and static addresses into a switch address table, and define the forwarding behavior of static addresses.
Port Security
Enable port security on a port.
Display a graph that plots the total bandwidth in use by the switch. For more information, see the "Displaying Link Graphs" section.
Using the Cluster Tree
The cluster tree displays the name of the cluster and the status of cluster members. Left-click a switch icon in the cluster tree to select it, and right-click to display the device pop-up menu.
Toolbar Icons for Cluster Manager
You can click the toolbar icon to invoke some Cluster Manager features. As shown in Figure 2-7, a description of the icon displays when you move the cursor over it.
Figure 2-7 Cluster Manager Toolbar Icons
Click a Cluster Manager toolbar to invoke the following features, from left to right:
•
•
•
•
•
•
•
•
•
Using VSM
VSM is a web-based device-management application for configuring and monitoring a clustered or standalone switch. If your switch is part of a cluster, you can also perform many VSM tasks from within Cluster Manager.
For the detailed procedure to display VSM, refer to the Release Notes for the Catalyst 2950 Cisco IOS Release 12.0(5)WC(1). To display VSM from within Cluster Builder or Cluster View, click a switch, and select Device > Launch Switch Manager from the menu bar.
The VSM Home page displays a real-time image of the switch that you can use to monitor and reconfigure the switch and switch ports. The images of the LEDs displayed by VSM convey the same information as the LEDs on the front panel of the switch. You can configure a port or ports by right-clicking them and selecting a item from the Port Pop-Up menu.
When you use VSM to reconfigure a switch, the change becomes part of the running configuration of the switch. The image of the switch and VSM windows always display the switch running configuration. However, the running configuration is not necessarily the startup configuration that is used when the switch restarts. To ensure that your changes are saved after a restart in VSM, select System > Save Configuration from the menu bar. If you are using the CLI, you can save the configuration by entering the write memory command in privileged EXEC mode.
Figure 2-8 VSM Home Page
VSM Menu Bar Options
You can access the device-management features from the Home page menu bar. Table 2-12 describes the menu options and their function.
VSM Port Pop-Up Menu and Device Pop-Up Menu Options
The options available through the port pop-up and device pop-up menus in VSM are the same as those described in Table 2-10 and Table 2-11.
Using Online Help
To get online help for CMS, do either of the following:
•
•
You can navigate within the Help window to find whatever CMS information you need. By expanding the topics on the Contents tab and scrolling, you can see the breadth of topics in the help system. Double-click any one, and information for it appears in the right pane. A glossary is also available; it is the bottom topic on the tab. You can also find information by clicking the Index tab. Use its entry field and Find button to look for a specific entry, or scroll until you find what you need. Double-click an index entry, and information for it appears in the right pane.
In addition to these navigation features, the online help offers:
•
•
Using the IOS Command-Line Interface
This section introduces the Cisco IOS command-line interface (CLI). The
Catalyst 2950 Desktop Switch Command Reference contains a complete description of commands that have been created or changed for the Catalyst 2950 switches.This section describes how to perform the following tasks:
•
•
•
•
•
Note
Understanding the CLI
This section describes the Cisco IOS command-mode structure. Each command mode supports specific Cisco IOS commands. For example, the interface command is used only from global configuration mode.
The switch supports the following command modes:
•
•
•
•
•
•
Table 2-13 describes how to access each mode, the prompt you see in that mode, and how to exit the mode. The examples in the table use the host name switch.
Table 2-13 Command Modes Summary
User EXEC
Begin a session with your switch.
Enter logout or quit.
Use this mode to
•
•
•
Privileged EXEC
Enter the enable command while in user EXEC mode.
Enter disable to exit.
Use this mode to verify commands you have entered. Access to this mode should be protected with a password.
VLAN database
Enter the vlan database command while in privileged EXEC mode.
To exit to privileged EXEC mode, enter exit.
Use this mode to configure VLAN-specific parameters.
Global configuration
Enter the configure command while in privileged EXEC mode.
To exit to privileged EXEC mode, enter exit or end, or press Ctrl-Z.
Use this mode to configure parameters that apply to your switch as a whole.
Interface configuration
Enter the interface command (with a specific interface) while in global configuration mode.
To exit to global configuration mode, enter exit.
To exit to privileged EXEC mode, enter Ctrl-Z or end.
Use this mode to configure parameters for the Ethernet interfaces.
Line configuration
Specify a line with the line vty or line console command while in global configuration mode.
To exit to global configuration mode, enter exit.
To exit to privileged EXEC mode, enter Ctrl-Z or end.
Use this mode to configure parameters for the terminal line.
1 For any of the modes, you can see a comprehensive list of the available commands by entering a question mark (?) at the prompt.
Setting Passwords and Privilege Levels
Because many privileged EXEC commands are used to set operating parameters, you should password-protect these commands to prevent unauthorized use.
Catalyst 2950 switches have two commands for setting passwords:
•
•
You must enter one of these passwords to gain access to privileged EXEC mode. It is recommended that you use the enable secret password.
If you enter the enable secret command, the text is encrypted before it is written to the config.text file, and it is unreadable. If you enter the enable password command, the text is written as entered to the config.text file where you can
read it.
Note
Both types of passwords can contain from 1 to 25 uppercase and lowercase alphanumeric characters, and both can start with a number. Spaces are also valid password characters; for example, two words is a valid password. Leading spaces are ignored; trailing spaces are recognized. The password is case sensitive.
To remove a password, use the no version of the commands: no enable secret or no enable password. If you lose or forget your enable password, see the "Recovering from a Lost or Forgotten Password" section.
When the Cluster Builder suggests a candidate to add to a cluster, you enter the password of the candidate switch, if one was defined, and the switch joins the cluster. Then the member switch inherits the command switch password. For more information on managing passwords for the Cluster Management Suite, see the "Changes to Passwords" section.
You can also specify up to 15 privilege levels and define passwords for them by using the enable password [level level] {password} or enable secret [level level] {password} command. Level 1 is normal EXEC-mode user privileges. If you do not specify a level, the privilege level defaults to 15 (traditional enable privileges).
Note
You can specify a level, set a password, and give the password only to users who need to have access at this level. Use the privilege level global configuration command to specify commands accessible at various levels. For information on other IOS Release 12.0 commands, refer to the Cisco IOS Release 12.0 documentation set available on Cisco.com.
Using the CLI to Manage Cluster Members
You can configure member switches from the CLI by first logging into the command switch. Enter the EXEC mode rcommand command and the member switch number to start a Telnet session (through a console or Telnet connection) and access the member switch CLI. Except when connecting to a Catalyst 1900 or 2820 switch running standard edition software with the command switch at privilege level 1 to 14, you are not prompted for a password because the member switch inherited the password of the command switch when it joined the cluster.
The following example shows how to log into member-switch 3 from the command-switch CLI:
switch# rcommand 3If you do not know the member-switch number, enter the EXEC mode show cluster members command on the command switch.
For Catalyst 2950 switches, the Telnet session accesses the member-switch CLI at the same privilege level as on the command switch. The IOS commands then operate as usual. For instructions on configuring the Catalyst 2950 switch for a Telnet session, see the "Configuring the Switch for Telnet" section.
For Catalyst 1900 and 2820 switches running standard edition software, the Telnet session accesses the menu console (the menu-driven interface) if the command switch is at privilege level 15. If the command switch is at privilege level 14, you are prompted for the password before being able to access the menu console.
Command switch privilege levels map to the Catalyst 1900 and 2820 member switches running standard and Enterprise Edition Software as follows:
•
•
The Catalyst 1900 and 2820 CLI is available only on switches running Enterprise Edition Software.
Getting Help
You can use the question mark (?) and arrow keys to help you enter commands.
For a list of available commands in a command mode, enter a question mark:
switch> ?To complete a command, enter a few known characters followed by a tab (with no space):
switch# sh conf<tab> switch# sh configurationFor a list of command variables, enter the command followed by a space and a question mark:
switch> show ?To redisplay a command you previously entered, press the up-arrow key. You can continue to press the up-arrow key for more commands.
Abbreviating Commands
You only have to enter enough characters for the switch to recognize the command as unique. This example shows how to enter the show configuration command:
switch# show confUsing no Commands
The word no creates a no form of a command. The no form of a command does the following:
•
or
•
Understanding Command-Line Error Messages
Table 2-14 lists some error messages that you might encounter while using the CLI to configure your switch.
Configuring the Switch for Telnet
Follow these steps to configure a Telnet password:
The "Finding More Information About IOS Commands" section contains the path to the complete IOS documentation.
Starting a Telnet Session from the Browser
Follow this procedure to start a Telnet session by using a browser:
Step 1
Step 2
Step 3
Working with Files in Flash Memory
You can use the file system in Flash memory to copy files and to troubleshoot configuration problems. This could be useful if you wanted to save configuration files on an external server in case a switch fails. You can then copy the configuration file back to a replacement switch and avoid having to reconfigure the switch.
As in the following example, use the privileged EXEC dir flash: command to display the contents of Flash memory:
Switch#dirDirectory of flash:/3 drwx 10176 Mar 01 2001 00:04:34 html6 -rwx 2343 Mar 01 2001 03:18:16 config.text171 -rwx 1667997 Mar 01 2001 00:02:39 c2950-c3h2s-mz.120-5.WC.1.bin7 -rwx 3060 Mar 01 2001 00:14:20 vlan.dat172 -rwx 100 Mar 01 2001 00:02:54 env_vars7741440 bytes total (4788224 bytes free)The file system uses a URL-based file specification. The following example uses the TFTP protocol to copy the file config.text from the host arno to the switch Flash memory:
switch# copy tftp://arno//2950/config.text flash:config.textYou can enter the following parameters as part of a filename:
•
•
•
•
Use the copy running-config startup-config command to save your configuration changes to Flash memory so that they are not lost if there is a system reload or power outage. This example shows how to use this command to save your changes:
switch# copy running-config startup-configBuilding configuration...It might take a minute or two to save the configuration to Flash memory. After it has been saved, the following message appears:
[OK]switch#Using SNMP Management
This section describes how to access Management Information Base (MIB) objects to configure and manage your switch. It provides the following information:
•
•
•
Note
