-
Catalyst 2970 Switch Software Configuration Guide, 12.2(18)SE
-
Index
-
Preface
-
Overview
-
Using the Command-Line Interface
-
Getting Started with CMS
-
Assigning the Switch IP Address and Default Gateway
-
Clustering Switches
-
Administering the Switch
-
Configuring Switch-Based Authentication
-
Configuring 802.1X Port-Based Authentication
-
Configuring Interface Characteristics
-
Configuring SmartPort Macros
-
Configuring VLANs
-
Configuring VTP
-
Configuring Voice VLAN
-
Configuring STP
-
Configuring MSTP
-
Configuring Optional Spanning-Tree Features
-
Configuring DHCP Features
-
Configuring IGMP Snooping and MVR
-
Configuring Port-Based Traffic Control
-
Configuring CDP
-
Configuring UDLD
-
Configuring SPAN and RSPAN
-
Configuring RMON
-
Configuring System Message Logging
-
Configuring SNMP
-
Configuring Network Security with ACLs
-
Configuring QoS
-
Configuring EtherChannels
-
Troubleshooting
-
Supported MIBs
-
Working with the Cisco IOS File System, Configuration Files, and Software Images
-
Unsupported Commands in Cisco IOS Release 12.1(19)EA1
-
Table Of Contents
Numerics - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X -
Index
Numerics
802.1D
802.1Q
and trunk ports 9-3
configuration limitations 11-16
encapsulation 11-14
native VLAN for untagged traffic 11-21
802.1s
802.1w
802.1x
802.1z flow control 9-12
802.3ad
A
abbreviating commands 2-3
access-class command 26-18
access control entries
access-denied response, VMPS 11-25
access groups
applying ACLs to interfaces 26-19
IP 26-19
accessing
clusters, switch 5-12
command switches 5-10
accessing (continued)
member switches 5-12
switch clusters 5-12
access lists
access ports
defined 9-2
in switch clusters 5-8
accounting
with RADIUS 7-28
ACEs
and QoS 27-7
defined 26-2
Ethernet 26-2
IP 26-2
ACLs
ACEs 26-2
any keyword 26-10
applying
time ranges to 26-15
to an interface 26-18
to QoS 27-7
classifying traffic for QoS 27-37
comments in 26-17
compiling 26-19
extended IP
configuring for QoS classification 27-38
creating 26-8
matching criteria 26-6
hardware and software handling 26-19
ACLs (continued)
host keyword 26-11
IP
applying to interface 26-18
applying to interfaces 26-18
creating 26-6
fragments and QoS guidelines 27-29
implicit deny 26-8, 26-12, 26-14
implicit masks 26-8
matching criteria 26-6
named 26-13
terminal lines, setting on 26-17
undefined 26-19
monitoring 26-30
named 26-13
number per QoS class map 27-29
numbers 26-6
port 26-2
precedence of 26-2
resequencing entries 26-13
standard IP
configuring for QoS classification 27-37
creating 26-7
matching criteria 26-6
supported features 26-19
support for 1-6
time ranges 26-15
unsupported features 26-5
VLAN maps
configuration guidelines 26-25
configuring 26-24
address aliasing 18-2
addresses
displaying the MAC address table 6-27
dynamic
accelerated aging 14-8
addresses, dynamic (continued)
changing the aging time 6-21
default aging 14-8
defined 6-20
learning 6-20
removing 6-22
MAC, discovering 6-27
multicast, STP address management 14-8
static
adding and removing 6-24
defined 6-20
address resolution 6-27
Address Resolution Protocol
advertisements
CDP 20-1
aggregated ports
aggregate policers 27-45
aggregate policing 1-7
aging, accelerating 14-8
aging time
accelerated
for MSTP 15-20
MAC address table 6-21
maximum
for MSTP 15-21
for STP 14-21
alarms, RMON 23-3
allowed-VLAN list 11-19
ARP
table
address resolution 6-27
managing 6-27
attributes, RADIUS
vendor-proprietary 7-31
vendor-specific 7-29
audience xxvii
authentication
local mode with AAA 7-36
NTP associations 6-4
RADIUS
key 7-21
login 7-23
See also port-based authentication
TACACS+
defined 7-11
key 7-13
login 7-14
authoritative time source, described 6-2
authorization
with RADIUS 7-27
authorized ports with 802.1x 8-4
autoconfiguration 4-3
automatic discovery
adding member switches 5-16
considerations
beyond a noncandidate device 5-7
brand new switches 5-8
connectivity 5-4
different VLANs 5-6
management VLANs 5-7
non-CDP-capable devices 5-6
noncluster-capable devices 5-6
creating a cluster standby group 5-17
in switch clusters 5-4
automatic QoS
automatic recovery, clusters 5-9
autonegotiation
duplex mode 1-3
interface configuration guidelines 9-10
mismatches 29-12
autosensing, port speed 1-3
auxiliary VLAN
availability, features 1-4
B
BackboneFast
described 16-5
enabling 16-14
support for 1-5
banners
configuring
login 6-19
message-of-the-day login 6-18
default configuration 6-18
when displayed 6-18
blocking packets 19-5
booting
boot loader, function of 4-2
boot process 4-1
manually 4-13
specific image 4-13
boot loader
accessing 4-14
described 4-2
environment variables 4-14
prompt 4-14
trap-door mechanism 4-2
BPDU
error-disabled state 16-2
filtering 16-3
RSTP format 15-9
BPDU filtering
described 16-3
enabling 16-12
support for 1-5
BPDU guard
described 16-2
enabling 16-11
support for 1-5
bridge protocol data unit
broadcast storm-control command 19-3
broadcast storms 19-2
C
cables, monitoring for unidirectional links 21-1
candidate switch
adding 5-16
automatic discovery 5-4
defined 5-3
HC 5-18
passwords 5-16
requirements 5-3
standby group 5-17
See also command switch, cluster standby group, and member switch
caution, described xxviii
CC (command switch) 5-18
CDP
and trusted boundary 27-34
automatic discovery in switch clusters 5-4
configuring 20-2
default configuration 20-2
described 20-1
disabling for routing device 20-3, 20-4
enabling and disabling
on an interface 20-4
on a switch 20-3
monitoring 20-5
CDP (continued)
overview 20-1
support for 1-4
transmission timer and holdtime, setting 20-2
updates 20-2
CGMP
as IGMP snooping learning method 18-8
joining multicast group 18-3
Cisco 7960 IP Phone 13-1
Cisco Discovery Protocol
class maps for QoS
configuring 27-40
described 27-7
displaying 27-65
class of service
clearing interfaces 9-16
CLI
abbreviating commands 2-3
command modes 2-1
described 1-3
editing features
enabling and disabling 2-6
keystroke editing 2-6
wrapped lines 2-8
error messages 2-4
filtering command output 2-8
getting help 2-3
history
changing the buffer size 2-5
described 2-4
disabling 2-5
recalling commands 2-5
managing clusters 5-20
no and default forms of commands 2-4
client mode, VTP 12-3
clock
Cluster Management Suite
cluster requirements
clusters, switch
accessing 5-12
adding member switches 5-16
automatic discovery 5-4
automatic recovery 5-9
benefits 1-2
command switch configuration 5-15
compatibility 5-4
creating 5-15
creating a cluster standby group 5-17
described 5-1
LRE profile considerations 5-14
managing
through CLI 5-20
through SNMP 5-21
planning 5-4
planning considerations
automatic discovery 5-4
automatic recovery 5-9
CLI 5-20
host names 5-13
IP addresses 5-12
LRE profiles 5-14
passwords 5-13
RADIUS 5-14
switch-specific features 5-14
TACACS+ 5-14
redundancy 5-17
troubleshooting 5-20
clusters, switch, planning considerations (continued)
verifying 5-19
cluster standby group
automatic recovery 5-11
considerations 5-10
creating 5-17
defined 5-2
requirements 5-3
virtual IP address 5-10
CMS
benefits 1-2
configuration modes 3-5
Front Panel view, described 3-2
operating systems and supported browsers 3-9
privilege levels 3-7
Topology view 3-15
wizards 3-6
Coarse Wave Division Multiplexer
command-line interface
command modes 2-1
commands
abbreviating 2-3
no and default 2-4
setting privilege levels 7-8
command switch
accessing 5-10
command switch with HSRP disabled (CC) 5-18
configuration conflicts 29-11
defined 5-2
enabling 5-15
command switch (continued)
password privilege levels 5-21
priority 5-9
recovery
from command-switch failure 5-9, 29-8
from lost member connectivity 29-11
replacing
with another switch 29-10
with cluster member 29-8
requirements 5-2
See also candidate switch, cluster standby group, member switch, and standby command switch
community strings
for cluster switches 25-4
in clusters 5-13
overview 25-4
SNMP 5-13
config.text 4-12
configuration, initial
defaults 1-8
setup (CLI) program 1-8
See also hardware installation guide
configuration conflicts, recovering from lost member connectivity 29-11
configuration examples, network 1-10
configuration files
clearing the startup configuration B-19
creating using a text editor B-10
default name 4-12
deleting a stored configuration B-19
described B-8
downloading
automatically 4-12
configuration files, downloading (continued)
reasons for B-8
using FTP B-13
using RCP B-17
using TFTP B-11
guidelines for creating and using B-8
invalid combinations when copying B-5
limiting TFTP server access 25-16
obtaining with DHCP 4-7
password recovery disable considerations 7-5
specifying the filename 4-12
system contact and location information 25-15
types and location B-9
uploading
reasons for B-8
using FTP B-15
using RCP B-18
using TFTP B-11
configuration modes, CMS 3-5
configuration settings, saving 4-10
configure terminal command 9-5
conflicts, configuration 29-11
connections, secure remote 7-38
connectivity problems 29-13 to 29-14, 29-16
consistency checks in VTP Version 2 12-4
console port, connecting to 2-9
conventions
command xxviii
for examples xxviii
publication xxviii
text xxviii
corrupted software, recovery steps with XMODEM 29-2
CoS
in Layer 2 frames 27-2
override priority 13-5
trust priority 13-5
CoS input queue threshold map for QoS 27-14
CoS output queue threshold map for QoS 27-17
CoS-to-DSCP map for QoS 27-48
counters, clearing interface 9-16
crashinfo file 29-23
cryptographic software image
Kerberos 7-32
SSH 7-37
CWDM 1-15
CWDM SFPs 1-15
D
daylight saving time 6-13
debugging
enabling all system diagnostics 29-21
enabling for a specific feature 29-20
redirecting error message output 29-21
using commands 29-20
default commands 2-4
default configuration
802.1x 8-10
auto-QoS 27-18
banners 6-18
booting 4-11
CDP 20-2
DHCP 17-4
DNS 6-16
EtherChannel 28-8
IGMP filtering 18-21
IGMP snooping 18-7
IGMP throttling 18-21
initial switch information 4-3
Layer 2 interfaces 9-9
MAC address table 6-21
MSTP 15-12
MVR 18-15
NTP 6-4
optional spanning-tree configuration 16-10
password and privilege level 7-2
default configuration (continued)
RADIUS 7-20
RMON 23-3
RSPAN 22-9
SNMP 25-7
SPAN 22-9
standard QoS 27-27
STP 14-11
system message logging 24-3
system name and prompt 6-15
TACACS+ 7-13
UDLD 21-4
VLAN, Layer 2 Ethernet interfaces 11-17
VLANs 11-7
VMPS 11-26
voice VLAN 13-3
VTP 12-6
default gateway 4-10
deleting VLANs 11-10
description command 9-14
designing your network, examples 1-10
destination addresses, in ACLs 26-10
destination-IP address-based forwarding, EtherChannel 28-7
destination-MAC address forwarding, EtherChannel 28-6
detecting indirect link failures, STP 16-5
device discovery protocol 20-1
Device Manager 3-15
DHCP-based autoconfiguration
client request message exchange 4-3
configuring
client side 4-3
DNS 4-6
relay device 4-6
server side 4-5
TFTP server 4-5
example 4-8
DHCP-based autoconfiguration (continued)
lease options
for IP address information 4-5
for receiving the configuration file 4-5
overview 4-3
relationship to BOOTP 4-3
relay support 1-4
support for 1-4
DHCP option 82
configuration guidelines 17-5
default configuration 17-4
displaying 17-7
overview 17-2
packet format, suboption
circuit ID 17-3
remote ID 17-3
DHCP snooping
configuration guidelines 17-5
default configuration 17-4
displaying binding tables 17-7
displaying configuration 17-7
message exchange process 17-3
option 82 data insertion 17-2
trusted interface 17-2
untrusted interface 17-2
untrusted messages 17-2
Differentiated Services architecture, QoS 27-1
Differentiated Services Code Point 27-2
directed unicast requests 1-4
directories
changing B-3
creating and removing B-4
displaying the working B-3
discovery, clusters
DNS
and DHCP-based autoconfiguration 4-6
default configuration 6-16
displaying the configuration 6-17
DNS (continued)
overview 6-16
setting up 6-17
support for 1-4
documentation, related xxix
document conventions xxviii
domain names
DNS 6-16
VTP 12-8
Domain Name System
downloading
configuration files
reasons for B-8
using FTP B-13
using RCP B-17
using TFTP B-11
image files
deleting old image B-24
reasons for B-20
using FTP B-26
using RCP B-31
using TFTP B-23
DSCP input queue threshold map for QoS 27-14
DSCP output queue threshold map for QoS 27-17
DSCP-to-CoS map for QoS 27-51
DSCP-to-DSCP-mutation map for QoS 27-52
dynamic access ports
characteristics 11-3
configuring 11-28
defined 9-3
dynamic addresses
dynamic auto trunking mode 11-15
dynamic desirable trunking mode 11-16
Dynamic Host Configuration Protocol
See DHCP-based autoconfiguration
dynamic port VLAN membership
described 11-26
reconfirming 11-28
troubleshooting 11-30
types of connections 11-28
Dynamic Trunking Protocol
E
editing features
enabling and disabling 2-6
keystrokes used 2-6
wrapped lines 2-8
enable password 7-4
enable secret password 7-4
encryption for passwords 7-4
environment variables, function of 4-15
error messages during command entry 2-4
EtherChannel
802.3ad, described 28-5
automatic creation of 28-3, 28-5
channel groups
binding physical and logical interfaces 28-3
numbering of 28-3
configuration guidelines 28-9
configuring Layer 2 interfaces 28-10
default configuration 28-8
described 28-2
displaying status 28-17
forwarding methods 28-6, 28-12
guard
described 16-7
interaction
with STP 28-9
with VLANs 28-10
LACP
described 28-5
displaying status 28-17
hot-standby ports 28-14
interaction with other features 28-6
modes 28-5
port priority 28-16
system priority 28-15
LACP, support for 1-3
PAgP
aggregate-port learners 28-13
compatibility with Catalyst 1900 28-13
described 28-3
desirable 28-4
displaying status 28-17
interaction with other features 28-5
learn method and priority configuration 28-13
modes 28-4
auto 1
desirable 1
on 1
silent 1
support for 1
port-channel interfaces
described 28-3
numbering of 28-3
port groups 9-3
support for 1-3
EtherChannel guard
enabling 16-14
Ethernet VLANs
adding 11-8
defaults and ranges 11-7
modifying 11-8
events, RMON 23-3
examples
conventions for xxviii
network configuration 1-10
expedite queue for QoS
configuring 27-64
expert mode 3-6
See also hardware installation guide
extended-range VLANs
configuration guidelines 11-12
configuring 11-11
creating 11-13
defined 11-1
extended system ID
MSTP 15-14
Extensible Authentication Protocol over LAN 8-1
F
fallback bridging
STP
keepalive messages 14-2
fiber-optic, detecting unidirectional links 21-1
files
copying B-4
crashinfo
description 29-23
displaying the contents of 29-23
location 29-23
deleting B-5
displaying the contents of B-7
tar
creating B-5
displaying the contents of B-6
extracting B-7
image file format B-21
file system
displaying available file systems B-2
displaying file information B-3
local file system names B-1
file system (continued)
network file system names B-4
setting the default B-3
filtering
in a VLAN 26-24
non-IP traffic 26-22
show and more command output 2-8
filtering show and more command output 2-8
filters, IP
flash device, number of B-1
flooded traffic, blocking 19-6
flow-based packet classification 1-6
flowcharts
QoS classification 27-6
QoS egress queueing and scheduling 27-15
QoS ingress queueing and scheduling 27-13
QoS policing and marking 27-9
forward-delay time
MSTP 15-20
STP 14-20
FTP
accessing MIB files A-3
configuration files
downloading B-13
overview B-12
preparing the server B-13
uploading B-15
image files
deleting old image B-28
downloading B-26
preparing the server B-25
uploading B-28
G
get-bulk-request operation 25-3
get-next-request operation 25-3, 25-5
get-request operation 25-3, 25-5
get-response operation 25-3
global configuration mode 2-2
guest VLAN and 802.1x 8-8
guide
audience xxvii
purpose of xxvii
H
HC (candidate switch) 5-18
hello time
MSTP 15-19
STP 14-20
help, for the command line 2-3
history
changing the buffer size 2-5
described 2-4
disabling 2-5
recalling commands 2-5
history table, level and number of syslog messages 24-9
host names
abbreviations appended to 5-18
in clusters 5-13
hosts, limit on dynamic ports 11-30
HP OpenView 1-3
HSRP
automatic cluster recovery 5-11
cluster standby group considerations 5-10
See also clusters, cluster standby group, and standby command switch
I
ICMP
time-exceeded messages 29-16
traceroute and 29-16
ICMP ping
executing 29-13
overview 29-13
IDS appliances
and ingress RSPAN 22-20
and ingress SPAN 22-14
IEEE 802.1p 13-1
ifIndex values, SNMP 25-6
IGMP
joining multicast group 18-3
join messages 18-3
leave processing, enabling 18-11
leaving multicast group 18-5
queries 18-4
report suppression
described 18-6
disabling 18-11
support for 1-3
IGMP filtering
configuring 18-21
default configuration 18-21
described 18-20
monitoring 18-25
support for 1-3
IGMP groups
configuring filtering 18-24
setting the maximum number 18-23
IGMP profile
applying 18-22
configuration mode 18-21
configuring 18-22
IGMP snooping
and address aliasing 18-2
configuring 18-6
default configuration 18-7
definition 18-2
enabling and disabling 18-7
global configuration 18-7
Immediate Leave 18-6
IGMP snooping (continued)
method 18-8
monitoring 18-12
support for 1-3
VLAN configuration 18-7
IGMP throttling
configuring 18-24
default configuration 18-21
described 18-21
displaying action 18-25
Immediate Leave, IGMP 18-6
initial configuration
defaults 1-8
setup (CLI) program 1-8
See also hardware installation guide
interface
number 9-4
range macros 9-7
interface configuration mode 2-2
interfaces
configuration guidelines
duplex and speed 9-10
configuring 9-5
duplex 9-10
speed 9-10
counters, clearing 9-16
described 9-14
descriptive name, adding 9-14
displaying information about 9-16
flow control 9-12
management 1-3
monitoring 9-15
naming 9-14
physical, identifying 9-4
range of 9-5
restarting 9-17
shutting down 9-17
interfaces (continued)
supported 9-4
types of 9-1
interfaces range macro command 9-7
interface types 9-4
Inter-Switch Link
Intrusion Detection System
inventory, cluster 5-19
ip access group command 26-19
IP ACLs
applying to an interface 26-18
extended, creating 26-8
for QoS classification 27-7
implicit deny 26-8, 26-12, 26-14
implicit masks 26-8
named 26-13
standard, creating 26-7
undefined 26-19
virtual terminal lines, setting on 26-17
IP addresses
cluster access 5-2
command switch 5-2, 5-10, 5-12
discovering 6-27
redundant clusters 5-10
standby command switch 5-10, 5-12
ip igmp profile command 18-21
IP information
assigned
manually 4-9
through DHCP-based autoconfiguration 4-3
default configuration 4-3
IP phones
and QoS 13-1
automatic classification and queueing 27-18
configuring 13-4
IP phones (continued)
ensuring port security with QoS 27-34
trusted boundary for QoS 27-34
IP precedence 27-2
IP-precedence-to-DSCP map for QoS 27-49
IP protocols in ACLs 26-10
IP traceroute
executing 29-17
overview 29-16
ISL
and trunk ports 9-3
J
join messages, IGMP 18-3
K
KDC
described 7-32
keepalive messages 14-2
Kerberos
authenticating to
boundary switch 7-35
KDC 7-35
network services 7-35
configuration examples 7-32
configuring 7-36
credentials 7-32
cryptographic software image 7-32
described 7-32
KDC 7-32
operation 7-34
realm 7-33
server 7-33
support for 1-6
Kerberos (continued)
switch as trusted third party 7-32
terms 7-33
TGT 7-34
tickets 7-32
key distribution center
L
LACP
Layer 2 frames, classification with CoS 27-2
Layer 2 interfaces, default configuration 9-9
Layer 2 traceroute
and ARP 29-15
and CDP 29-15
described 29-14
IP addresses and subnets 29-15
MAC addresses and VLANs 29-15
multicast traffic 29-15
multiple devices on a port 29-15
unicast traffic 29-14
usage guidelines 29-15
Layer 2 trunks 11-15
Layer 3 packets, classification methods 27-2
leave processing, IGMP 18-11
LEDs, switch
See hardware installation guide
line configuration mode 2-2
Link Aggregation Control Protocol
links, unidirectional 21-1
login authentication
with RADIUS 7-23
with TACACS+ 7-14
login banners 6-18
log messages
Long-Reach Ethernet (LRE) technology 1-11
loop guard
described 16-9
enabling 16-16
support for 1-5
LRE profiles, considerations in switch clusters 5-14
M
MAC addresses
aging time 6-21
and VLAN association 6-21
building the address table 6-20
default configuration 6-21
discovering 6-27
displaying 6-27
displaying in DHCP snooping binding table 17-7
dynamic
learning 6-20
removing 6-22
in ACLs 26-22
static
adding 6-25
allowing 6-26
characteristics of 6-24
dropping 6-26
removing 6-25
MAC address notification, support for 1-7
MAC address-to-VLAN mapping 11-25
MAC extended access lists
applying to Layer 2 interfaces 26-23
configuring for QoS 27-39
creating 26-22
defined 26-22
for QoS classification 27-5
macros
manageability features 1-4
management access
in-band
browser session 1-4
CLI session 1-4
SNMP 1-4
out-of-band console port connection 1-4
management options
CLI 2-1
clustering 1-2
CMS 1-2
overview 1-3
management VLAN
considerations in switch clusters 5-7
discovery through different management VLANs 5-7
mapping tables for QoS
configuring
CoS-to-DSCP 27-48
DSCP 27-47
DSCP-to-CoS 27-51
DSCP-to-DSCP-mutation 27-52
IP-precedence-to-DSCP 27-49
policed-DSCP 27-50
described 27-10
marking
action in policy map 27-42
action with aggregate policers 27-45
matching, ACLs 26-6
maximum aging time
MSTP 15-21
STP 14-21
maximum hop count, MSTP 15-21
membership mode, VLAN port 11-3
member switch
adding 5-16
automatic discovery 5-4
defined 5-2
managing 5-20
member switch (continued)
passwords 5-12
recovering from lost connectivity 29-11
requirements 5-3
See also candidate switch, cluster standby group, and standby command switch
menu bar variations 3-4
messages
to users through banners 6-18
MIBs
accessing files with FTP A-3
location of files A-3
overview 25-1
SNMP interaction with 25-5
supported A-1
mirroring traffic for analysis 22-1
mismatches, autonegotiation 29-12
module number 9-4
monitoring
access groups 26-31
ACL configuration 26-30
cables for unidirectional links 21-1
CDP 20-5
features 1-7
IGMP
filters 18-25
snooping 18-12
interfaces 9-15
multicast router interfaces 18-12
MVR 18-20
network traffic for analysis with probe 22-2
port
blocking 19-14
protection 19-14
speed and duplex mode 9-11
traffic flowing among switches 23-1
traffic suppression 19-14
monitoring (continued)
VLAN
filters 26-31
maps 26-31
VLANs 11-14
VMPS 11-29
VTP 12-15
MSTP
boundary ports
configuration guidelines 15-13
described 15-5
BPDU filtering
described 16-3
enabling 16-12
BPDU guard
described 16-2
enabling 16-11
CIST, described 15-3
configuration guidelines 15-12, 16-10
configuring
forward-delay time 15-20
hello time 15-19
link type for rapid convergence 15-22
maximum aging time 15-21
maximum hop count 15-21
MST region 15-13
path cost 15-18
port priority 15-17
root switch 15-14
secondary root switch 15-16
switch priority 15-19
CST
defined 15-3
operations between regions 15-4
default configuration 15-12
default optional feature configuration 16-10
displaying status 15-23
enabling the mode 15-13
MSTP (continued)
EtherChannel guard
enabling 16-14
extended system ID
effects on root switch 15-14
effects on secondary root switch 15-16
unexpected behavior 15-15
instances supported 14-9
interface state, blocking to forwarding 16-2
interoperability and compatibility among modes 14-10
interoperability with 802.1D
described 15-5
restarting migration process 15-22
IST
defined 15-3
master 15-3
operations within a region 15-3
loop guard
described 16-9
enabling 16-16
mapping VLANs to MST instance 15-13
MST region
CIST 15-3
configuring 15-13
described 15-2
hop-count mechanism 15-5
IST 15-3
supported spanning-tree instances 15-2
optional features supported 1-5
overview 15-2
Port Fast
described 16-2
enabling 16-10
preventing root switch selection 16-8
root guard
described 16-8
enabling 16-15
MSTP (continued)
root switch
configuring 15-15
effects of extended system ID 15-14
unexpected behavior 15-15
shutdown Port Fast-enabled port 16-2
status, displaying 15-23
multicast groups
Immediate Leave 18-6
joining 18-3
leaving 18-5
static joins 18-10
multicast packets, blocking 19-6
multicast router interfaces, monitoring 18-12
multicast router ports, adding 18-9
multicast storm-control command 19-4
multicast storms 19-2
Multicast VLAN Registration
Multiple Spanning Tree Protocol
MVR
and address aliasing 18-16
configuring interfaces 18-18
default configuration 18-15
described 18-13
modes 18-17
monitoring 18-20
setting global parameters 18-16
support for 1-3
N
named IP ACLs 26-13
native VLAN
configuring 11-21
default 11-21
network configuration examples
increasing network performance 1-10
long-distance, high-bandwidth transport 1-15
network configuration examples (continued)
providing network services 1-11
server aggregation and Linux server cluster 1-13
small to medium-sized network 1-14
network design
performance 1-11
services 1-11
network management
CDP 20-1
RMON 23-1
SNMP 25-1
Network Time Protocol
no commands 2-4
non-IP traffic filtering 26-22
nontrunking mode 11-15
normal-range VLANs
configuration modes 11-6
defined 11-1
note, described xxviii
NTP
associations
authenticating 6-4
defined 6-2
enabling broadcast messages 6-7
peer 6-6
server 6-6
default configuration 6-4
displaying the configuration 6-11
overview 6-2
restricting access
creating an access group 6-9
disabling NTP services per interface 6-10
source IP address, configuring 6-10
stratum 6-2
support for 1-4
NTP (continued)
synchronizing devices 6-6
time
services 6-2
synchronizing 6-2
O
options, management 1-3
out-of-profile markdown 1-7
P
packet modification, with QoS 27-17
PAgP
passwords
default configuration 7-2
disabling recovery of 7-5
encrypting 7-4
for security 1-5
overview 7-1
recovery of 29-4
setting
enable 7-3
enable secret 7-4
Telnet 7-6
with usernames 7-7
VTP domain 12-8
path cost
MSTP 15-18
STP 14-17
PC (passive command switch) 5-9, 5-18
performance, network design 1-10
performance features 1-3
per-VLAN spanning-tree plus
physical ports 9-2
PIM-DVMRP, as snooping method 18-8
ping
character output description 29-13
executing 29-13
overview 29-13
policed-DSCP map for QoS 27-50
policers
configuring
for each matched traffic class 27-42
for more than one traffic class 27-45
described 27-3
displaying 27-65
number of 27-29
types of 27-8
policing
described 27-3
token-bucket algorithm 27-9
policy maps for QoS
characteristics of 27-42
configuring 27-42
described 27-7
displaying 27-66
port ACLs
defined 26-2
types of 26-2
Port Aggregation Protocol
port-based authentication
authentication server
defined 8-2
RADIUS server 8-2
client, defined 8-2
configuration guidelines 8-11
configuring
802.1x authentication 8-12
guest VLAN 8-19
host mode 8-18
port-based authentication, configuring (continued)
manual re-authentication of a client 8-15
periodic re-authentication 8-15
quiet period 8-15
RADIUS server 8-14
RADIUS server parameters on the switch 8-13
switch-to-client frame-retransmission number 8-17
switch-to-client retransmission time 8-16
default configuration 8-10
described 8-1
device roles 8-2
displaying statistics 8-20
EAPOL-start frame 8-3
EAP-request/identity frame 8-3
EAP-response/identity frame 8-3
encapsulation 8-2
guest VLAN
configuration guidelines 8-8
described 8-8
initiation and message exchange 8-3
method lists 8-12
multiple-hosts mode, described 8-18
per-user ACLs
AAA authorization 8-12
configuration tasks 8-9
described 8-8
RADIUS server attributes 8-8
ports
authorization state and dot1x port-control command 8-4
authorized and unauthorized 8-4
voice VLAN 8-6
port security
and voice VLAN 8-6
described 8-5
interactions 8-5
multiple-hosts mode 8-18
resetting to default values 8-20
statistics, displaying 8-20
port security (continued)
switch
as proxy 8-2
RADIUS client 8-2
topologies, supported 8-4
upgrading from a previous release 8-12
VLAN assignment
AAA authorization 8-12
characteristics 8-7
configuration tasks 8-7
described 8-7
voice VLAN
described 8-6
PVID 8-6
VVID 8-6
port-channel
Port Fast
described 16-2
enabling 16-10
mode, spanning tree 11-26
support for 1-5
port membership modes, VLAN 11-3
port priority
MSTP 15-17
STP 14-16
ports
access 9-2
blocking 19-5
dynamic access 11-3
protected 19-4
secure 19-6
switch 9-2
VLAN assignments 11-10
port security(continued)
aging 19-13
and QoS trusted boundary 27-34
configuring 19-10
default configuration 19-9
described 19-6
displaying 19-14
on trunk ports 19-11
sticky learning 19-7
violations 19-8
with other features 19-9
port-shutdown response, VMPS 11-25
preferential treatment of traffic
preventing unauthorized access 7-1
priority
overriding CoS 13-5
trusting CoS 13-5
private VLAN edge ports
privileged EXEC mode 2-2
privilege levels
changing the default for lines 7-9
command switch 5-21
exiting 7-10
in CMS 3-7
logging into 7-10
mapping on member switches 5-21
setting a command with 7-8
pruning, VTP
enabling 12-13
enabling on a port 11-20
examples 12-5
overview 12-4
pruning-eligible list
changing 11-20
for VTP pruning 12-4
VLANs 12-14
PVST+
802.1Q trunking interoperability 14-10
described 14-9
instances supported 14-9
Q
QoS
auto-QoS
categorizing traffic 27-18
configuration and defaults display 27-26
configuration guidelines 27-22
described 27-18
disabling 27-23
displaying generated commands 27-22
displaying the initial configuration 27-26
effects on running configuration 27-21
egress queue defaults 27-19
enabling for VoIP 27-22
example configuration 27-24
ingress queue defaults 27-19
list of generated commands 27-20
basic model 27-3
classification
class maps, described 27-7
defined 27-3
flowchart 27-6
forwarding treatment 27-3
in frames and packets 27-2
MAC ACLs, described 27-5, 27-7
options for IP traffic 27-5
options for non-IP traffic 27-5
policy maps, described 27-7
trust DSCP, described 27-5
QoS, classification (continued)
trusted CoS, described 27-5
trust IP precedence, described 27-5
class maps
configuring 27-40
displaying 27-65
configuration guidelines
auto-QoS 27-22
standard QoS 27-29
configuring
aggregate policers 27-45
auto-QoS 27-18
default port CoS value 27-33
DSCP maps 27-47
DSCP trust states bordering another domain 27-35
egress queue characteristics 27-58
ingress queue characteristics 27-53
IP extended ACLs 27-38
IP standard ACLs 27-37
MAC ACLs 27-39
policy maps 27-42
port trust states within the domain 27-31
trusted boundary 27-34
default auto configuration 27-18
default standard configuration 27-27
displaying statistics 27-65
egress queues
allocating buffer space 27-58
buffer allocation scheme, described 27-16
configuring shaped weights for SRR 27-62
configuring shared weights for SRR 27-63
described 27-4
displaying the threshold map 27-61
flowchart 27-15
mapping DSCP or CoS values 27-60
scheduling, described 27-4
setting WTD thresholds 27-58
WTD, described 27-17
enabling globally 27-30
QoS (continued)
flowcharts
classification 27-6
egress queueing and scheduling 27-15
ingress queueing and scheduling 27-13
policing and marking 27-9
implicit deny 27-7
ingress queues
allocating bandwidth 27-56
allocating buffer space 27-55
buffer and bandwidth allocation, described 27-14
configuring shared weights for SRR 27-56
configuring the priority queue 27-57
described 27-3
displaying the threshold map 27-54
flowchart 27-13
mapping DSCP or CoS values 27-54
priority queue, described 27-14
scheduling, described 27-3
setting WTD thresholds 27-54
WTD, described 27-14
IP phones
automatic classification and queueing 27-18
detection and trusted settings 27-18, 27-34
limiting bandwidth on egress interface 27-64
mapping tables
CoS-to-DSCP 27-48
displaying 27-65
DSCP-to-CoS 27-51
DSCP-to-DSCP-mutation 27-52
IP-precedence-to-DSCP 27-49
policed-DSCP 27-50
types of 27-10
marked-down actions 27-43
overview 27-1
packet modification 27-17
QoS (continued)
policers
described 27-8
displaying 27-65
number of 27-29
types of 27-8
policies, attaching to an interface 27-9
policing
token bucket algorithm 27-9
policy maps
characteristics of 27-42
configuring 27-42
displaying 27-66
QoS label, defined 27-3
queues
configuring egress characteristics 27-58
configuring ingress characteristics 27-53
high priority (expedite) 27-17, 27-64
location of 27-11
SRR, described 27-12
WTD, described 27-11
rewrites 27-17
support for 1-6
trust states
bordering another domain 27-35
described 27-5
trusted device 27-34
within the domain 27-31
quality of service
queries, IGMP 18-4
R
RADIUS
attributes
vendor-proprietary 7-31
vendor-specific 7-29
configuring
accounting 7-28
authentication 7-23
authorization 7-27
communication, global 7-21, 7-29
communication, per-server 7-20, 7-21
multiple UDP ports 7-21
default configuration 7-20
defining AAA server groups 7-25
displaying the configuration 7-31
identifying the server 7-20
in clusters 5-14
limiting the services to the user 7-27
method list, defined 7-20
operation of 7-19
overview 7-18
suggested network environments 7-18
support for 1-6
tracking services accessed by user 7-28
range
macro 9-7
of interfaces 9-6
rapid convergence 15-7
rapid per-VLAN spanning-tree plus
rapid PVST+
802.1Q trunking interoperability 14-10
described 14-9
instances supported 14-9
Rapid Spanning Tree Protocol
rcommand command 5-20
RCP
configuration files
downloading B-17
overview B-16
preparing the server B-16
uploading B-18
image files
deleting old image B-32
downloading B-31
preparing the server B-29
uploading B-33
reconfirmation interval, VMPS, changing 11-28
recovery procedures 29-1
redundancy
EtherChannel 28-2
STP
backbone 14-8
path cost 11-23
port priority 11-22
redundant clusters
redundant links and UplinkFast 16-13
reloading software 4-16
Remote Authentication Dial-In User Service
Remote Copy Protocol
Remote Network Monitoring
Remote SPAN
report suppression, IGMP
described 18-6
disabling 18-11
requirements
cluster
resequencing ACL entries 26-13
resetting a UDLD-shutdown interface 21-6
restricting access
NTP services 6-8
overview 7-1
passwords and privilege levels 7-2
RADIUS 7-18
TACACS+ 7-10
retry count, VMPS, changing 11-29
RFC
1112, IP multicast and IGMP 18-2
1157, SNMPv1 25-2
1305, NTP 6-2
1757, RMON 23-2
1901, SNMPv2C 25-2
1902 to 1907, SNMPv2 25-2
2236, IP multicast and IGMP 18-2
2273-2275, SNMPv3 25-2
RMON
default configuration 23-3
displaying status 23-6
enabling alarms and events 23-3
groups supported 23-2
overview 23-1
statistics
collecting group Ethernet 23-6
collecting group history 23-5
support for 1-7
root guard
described 16-8
enabling 16-15
support for 1-5
root switch
MSTP 15-14
STP 14-14
RSPAN
characteristics 22-8
configuration guidelines 22-16
default configuration 22-9
destination ports 22-7
displaying status 22-23
RSPAN (continued)
interaction with other features 22-8
monitored ports 22-5
monitoring ports 22-7
received traffic 22-4
session limits 22-10
sessions
creating 22-17
defined 22-3
limiting source traffic to specific VLANs 22-22
specifying monitored ports 22-17
with ingress traffic enabled 22-20
source ports 22-5
transmitted traffic 22-5
VLAN-based 22-6
RSTP
active topology 15-6
BPDU
format 15-9
processing 15-10
designated port, defined 15-6
designated switch, defined 15-6
interoperability with 802.1D
described 15-5
restarting migration process 15-22
topology changes 15-10
overview 15-6
port roles
described 15-6
synchronized 15-8
proposal-agreement handshake process 15-7
rapid convergence
described 15-7
edge ports and Port Fast 15-7
point-to-point links 15-7, 15-22
root ports 15-7
root port, defined 15-6
running configuration, saving 4-10
S
SC (standby command switch) 5-9, 5-18
scheduled reloads 4-16
secure MAC addresses
deleting 19-12
maximum number of 19-7
types of 19-7
secure ports, configuring 19-6
secure remote connections 7-38
security, port 19-6
security features 1-5
sequence numbers in log messages 24-7
server mode, VTP 12-3
service-provider network, MSTP and RSTP 15-1
set-request operation 25-5
setup (CLI) program 1-8
See also hardware installation guide
setup program, replacing a failed command switch 29-8, 29-10
severity levels, defining in system messages 24-8
SFPs
security and identification 29-12
shaped round robin
show access-lists hw-summary command 26-19
show and more command output, filtering 2-8
show cdp traffic command 20-5
show cluster members command 5-20
show configuration command 9-14
show forward command 29-21
show interfaces command 9-11, 9-14
show platform forward command 29-21
show running-config command
displaying ACLs 26-18, 26-19, 26-25, 26-28
interface description in 9-14
shutdown command on interfaces 9-17
Simple Network Management Protocol
SmartPort macros
applying Cisco-default macros 10-5
applying parameter values 10-3, 10-5
configuration guidelines 10-2
creating and applying 10-3
default configuration 10-2
defined 10-1
displaying 10-6
tracing 10-2
SNAP 20-1
SNMP
accessing MIB variables with 25-5
agent
described 25-4
disabling 25-8
authentication level 25-11
community strings
configuring 25-8
for cluster switches 25-4
overview 25-4
configuration examples 25-16
default configuration 25-7
engine ID 25-7
host 25-7
ifIndex values 25-6
in-band management 1-4
in clusters 5-13
informs
and trap keyword 25-12
described 25-5
differences from traps 25-5
enabling 25-15
SNMP (continued)
limiting access by TFTP servers 25-16
limiting system log messages to NMS 24-9
managing clusters with 5-21
MIBs
location of A-3
supported A-1
notifications 25-5
security levels 25-3
status, displaying 25-17
system contact and location 25-15
trap manager, configuring 25-14
traps
differences from informs 25-5
enabling 25-12
enabling MAC address notification 6-22
types of 25-12
versions supported 25-2
SNMPv1 25-2
SNMPv2C 25-2
SNMPv3 25-2
snooping, IGMP 18-2
software images
location in flash B-20
recovery procedures 29-2
scheduling reloads 4-16
tar file format, described B-21
See also downloading and uploading
source addresses, in ACLs 26-10
source-and-destination-IP address based forwarding, EtherChannel 28-7
source-and-destination MAC address forwarding, EtherChannel 28-6
source-IP address based forwarding, EtherChannel 28-6
source-MAC address forwarding, EtherChannel 28-6
SPAN
configuration guidelines 22-10
default configuration 22-9
destination ports 22-7
displaying status 22-23
interaction with other features 22-8
monitored ports 22-5
monitoring ports 22-7
received traffic 22-4
session limits 22-10
sessions
configuring ingress forwarding 22-15, 22-21
creating 22-11
defined 22-3
limiting source traffic to specific VLANs 22-15
removing destination (monitoring) ports 22-12
specifying monitored ports 22-11
with ingress traffic enabled 22-14
source ports 22-5
transmitted traffic 22-5
VLAN-based 22-6
spanning tree and native VLANs 11-16
Spanning Tree Protocol
SPAN traffic 22-4
speed, configuring on interfaces 9-10
SRR
configuring
shaped weights on egress queues 27-62
shared weights on egress queues 27-63
shared weights on ingress queues 27-56
described 27-12
shaped mode 27-12
shared mode 27-12
support for 1-7
SSH
configuring 7-39
cryptographic software image 7-37
encryption methods 7-38
user authentication methods, supported 7-38
Standby Command Configuration window 5-19
standby command switch
considerations 5-10
defined 5-2
priority 5-9
requirements 5-3
virtual IP address 5-10
See also cluster standby group and HSRP
standby group, cluster
See cluster standby group and HSRP
startup configuration
booting
manually 4-13
specific image 4-13
clearing B-19
configuration file
automatically downloading 4-12
specifying the filename 4-12
default boot configuration 4-11
static access ports
assigning to VLAN 11-10
static addresses
static MAC addressing 1-6
static VLAN membership 11-2
statistics
802.1x 8-20
CDP 20-5
interface 9-16
QoS ingress and egress 27-65
RMON group Ethernet 23-6
statistics (continued)
RMON group history 23-5
SNMP input and output 25-17
VTP 12-15
sticky learning 19-7
storm control
configuring 19-3
described 19-2
displaying 19-14
support for 1-3
thresholds 19-2
STP
802.1D and bridge ID 14-4
802.1D and multicast addresses 14-8
802.1t and VLAN identifier 14-4
accelerating root port selection 16-4
BackboneFast
described 16-5
enabling 16-14
BPDU filtering
described 16-3
enabling 16-12
BPDU guard
described 16-2
enabling 16-11
BPDU message exchange 14-3
configuration guidelines 14-11, 16-10
configuring
forward-delay time 14-20
hello time 14-20
maximum aging time 14-21
path cost 14-17
port priority 14-16
root switch 14-14
secondary root switch 14-15
spanning-tree mode 14-12
switch priority 14-18
counters, clearing 14-22
default configuration 14-11
STP (continued)
default optional feature configuration 16-10
designated port, defined 14-3
designated switch, defined 14-3
detecting indirect link failures 16-5
disabling 14-13
displaying status 14-21
EtherChannel
guard
described 1
EtherChannel guard
enabling 16-14
extended system ID
effects on root switch 14-14
effects on the secondary root switch 14-15
overview 14-4
unexpected behavior 14-14
features supported 1-4
inferior BPDU 14-3
instances supported 14-9
interface state, blocking to forwarding 16-2
interface states
blocking 14-6
disabled 14-7
learning 14-6
listening 14-6
overview 14-4
interoperability and compatibility among modes 14-10
keepalive messages 14-2
limitations with 802.1Q trunks 14-10
load sharing
overview 11-21
using path costs 11-23
using port priorities 11-22
loop guard
described 16-9
enabling 16-16
modes supported 14-9
STP (continued)
multicast addresses, effect of 14-8
optional features supported 1-5
overview 14-2
Port Fast
described 16-2
enabling 16-10
port priorities 11-22
preventing root switch selection 16-8
protocols supported 14-9
redundant connectivity 14-8
root guard
described 16-8
enabling 16-15
root port, defined 14-3
root switch
configuring 14-14
effects of extended system ID 14-14
election 14-3
unexpected behavior 14-14
shutdown Port Fast-enabled port 16-2
status, displaying 14-21
superior BPDU 14-3
timers, described 14-19
UplinkFast
described 16-3
enabling 16-13
stratum, NTP 6-2
success response, VMPS 11-25
summer time 6-13
SunNet Manager 1-3
switch clustering technology 5-1
switch console port 1-4
Switched Port Analyzer
switched ports 9-2
Switch Manager 3-15
switchport block multicast command 19-6
switchport block unicast command 19-6
switchport protected command 19-5
switch priority
MSTP 15-19
STP 14-18
switch software features 1-1
syslog
system clock
configuring
daylight saving time 6-13
manually 6-11
summer time 6-13
time zones 6-12
displaying the time and date 6-12
overview 6-2
system message logging
default configuration 24-3
defining error message severity levels 24-8
disabling 24-3
displaying the configuration 24-12
enabling 24-4
facility keywords, described 24-12
level keywords, described 24-8
limiting messages 24-9
message format 24-2
overview 24-1
sequence numbers, enabling and disabling 24-7
setting the display destination device 24-4
synchronizing log messages 24-5
syslog facility 1-7
time stamps, enabling and disabling 24-6
system message logging (continued)
UNIX syslog servers
configuring the daemon 24-10
configuring the logging facility 24-11
facilities supported 24-12
system name
default configuration 6-15
default setting 6-15
manual configuration 6-15
system prompt
manual configuration 6-15
T
TACACS+
accounting, defined 7-11
authentication, defined 7-11
authorization, defined 7-11
configuring
accounting 7-17
authentication key 7-13
authorization 7-16
login authentication 7-14
default configuration 7-13
displaying the configuration 7-17
identifying the server 7-13
in clusters 5-14
limiting the services to the user 7-16
operation of 7-12
overview 7-10
support for 1-6
tracking services accessed by user 7-17
tar files
creating B-5
displaying the contents of B-6
extracting B-7
image file format B-21
TDR 1-7
Telnet
accessing management interfaces 2-9
from a browser 2-9
number of connections 1-4
setting a password 7-6
Terminal Access Controller Access Control System Plus
terminal lines, setting a password 7-6
TFTP
configuration files
downloading B-11
preparing the server B-10
uploading B-11
configuration files in base directory 4-5
configuring for autoconfiguration 4-5
image files
deleting B-24
downloading B-23
preparing the server B-22
uploading B-24
limiting access by servers 25-16
TFTP server 1-4
threshold, traffic level 19-2
time
Time Domain Reflector
time-range command 26-15
time ranges in ACLs 26-15
time stamps in log messages 24-6
time zones 6-12
Token Ring VLANs
support for 11-5
VTP support 12-4
Topology view, described 3-2, 3-15
TOS 1-6
traceroute, Layer 2
and ARP 29-15
and CDP 29-15
described 29-14
IP addresses and subnets 29-15
MAC addresses and VLANs 29-15
multicast traffic 29-15
multiple devices on a port 29-15
unicast traffic 29-14
usage guidelines 29-15
traceroute command 29-17
traffic
blocking flooded 19-6
fragmented 26-4
unfragmented 26-4
traffic policing 1-7
traffic suppression 19-2
transparent mode, VTP 12-3, 12-12
trap-door mechanism 4-2
traps
configuring MAC address notification 6-22
configuring managers 25-12
defined 25-3
notification types 25-12
troubleshooting
connectivity problems 29-13, 29-14, 29-16
detecting unidirectional links 21-1
displaying crash information 29-23
setting packet forwarding 29-21
SFP security and identification 29-12
show forward command 29-21
with CiscoWorks 25-5
with debug commands 29-20
with ping 29-13
with system message logging 24-1
with traceroute 29-16
trunking encapsulation 1-5
trunk ports
configuring 11-18
encapsulation 11-18, 11-23, 11-24
secure MAC addresses on 19-10
trunks
allowed-VLAN list 11-19
configuring 11-18, 11-23, 11-24
ISL 11-14
load sharing
setting STP path costs 11-23
using STP port priorities 11-22
native VLAN for untagged traffic 11-21
parallel 11-23
pruning-eligible list 11-20
to non-DTP device 11-15
understanding 11-15
trusted boundary for QoS 27-34
trusted port states
between QoS domains 27-35
classification options 27-5
ensuring port security for IP phones 27-34
support for 1-6
within a QoS domain 27-31
twisted-pair Ethernet, detecting unidirectional links 21-1
type of service
U
UDLD
default configuration 21-4
echoing detection mechanism 21-2
enabling
globally 21-5
per interface 21-6
link-detection mechanism 21-1
neighbor database 21-2
UDLD (continued)
overview 21-1
resetting an interface 21-6
status, displaying 21-7
support for 1-4
unauthorized ports with 802.1x 8-4
unicast MAC address filtering 1-4
and adding static addresses 6-26
and broadcast MAC addresses 6-25
and CPU packets 6-25
and multicast addresses 6-25
and router MAC addresses 6-25
configuration guidelines 6-25
described 6-25
unicast storm control command 19-4
unicast storms 19-2
unicast traffic, blocking 19-6
UniDirectional Link Detection protocol
UNIX syslog servers
daemon configuration 24-10
facilities supported 24-12
message logging configuration 24-11
unrecognized Type-Length-Value (TLV) support 12-4
upgrading information
upgrading software images
UplinkFast
described 16-3
enabling 16-13
support for 1-5
uploading
configuration files
reasons for B-8
using FTP B-15
using RCP B-18
using TFTP B-11
uploading (continued)
image files
reasons for B-20
using FTP B-28
using RCP B-33
using TFTP B-24
user EXEC mode 2-2
username-based authentication 7-7
V
version-dependent transparent mode 12-4
virtual IP address
cluster standby group 5-10, 5-18
vlan.dat file 11-4
VLAN 1, disabling on a trunk port 11-19
VLAN 1 minimization 11-19
VLAN ACLs
vlan-assignment response, VMPS 11-25
VLAN configuration
at bootup 11-7
saving 11-7
VLAN configuration mode 2-2, 11-6
VLAN database
and startup configuration file 11-7
and VTP 12-1
VLAN configuration saved in 11-7
VLANs saved in 11-4
vlan database command 11-6
VLAN filtering and SPAN 22-6
vlan global configuration command 11-6
VLAN ID, discovering 6-27
VLAN management domain 12-2
VLAN Management Policy Server
VLAN map entries, order of 26-25
VLAN maps
applying 26-28
common uses for 26-28
configuration example 26-29
configuration guidelines 26-25
configuring 26-24
creating 26-25
denying access example 26-30
denying and permitting packets 26-26
displaying 26-31
examples 26-30
support for 1-6
with router ACLs 26-30
VLAN membership
confirming 11-28
modes 11-3
VLAN Query Protocol
VLANs
adding 11-8
adding to VLAN database 11-8
aging dynamic addresses 14-9
allowed on trunk 11-19
and spanning-tree instances 11-2, 11-6, 11-12
configuration guidelines, extended-range VLANs 11-12
configuration guidelines, normal-range VLANs 11-5
configuration options 11-6
configuring 11-1
configuring IDs 1006 to 4094 11-12
creating in config-vlan mode 11-8
creating in VLAN configuration mode 11-9
default configuration 11-7
deleting 11-10
displaying 11-14
features 1-5
VLANs (continued)
illustrated 11-2
limiting source traffic with RSPAN 22-22
limiting source traffic with SPAN 22-15
modifying 11-8
native, configuring 11-21
number supported 1-5
parameters 11-4
port membership modes 11-3
static-access ports 11-10
STP and 802.1Q trunks 14-10
supported 11-2
Token Ring 11-5
traffic between 11-2
VTP modes 12-3
VLAN Trunking Protocol
VMPS
administering 11-29
configuration example 11-30
configuration guidelines 11-26
default configuration 11-26
description 11-25
dynamic port membership
described 11-26
reconfirming 11-28
troubleshooting 11-30
entering server address 11-27
mapping MAC addresses to VLANs 11-25
monitoring 11-29
reconfirmation interval, changing 11-28
reconfirming membership 11-28
retry count, changing 11-29
voice-over-IP 13-1
voice VLAN
Cisco 7960 phone, port connections 13-1
configuration guidelines 13-3
voice VLAN (continued)
configuring IP phones for data traffic
override CoS of incoming frame 13-5
trust CoS priority of incoming frame 13-5
configuring ports for voice traffic in
802.1p priority tagged frames 13-5
802.1Q frames 13-4
connecting to an IP phone 13-4
default configuration 13-3
described 13-1
displaying 13-6
VTP
adding a client to a domain 12-14
and extended-range VLANs 12-1
and normal-range VLANs 12-2
client mode, configuring 12-11
configuration
global configuration mode 12-7
guidelines 12-8
privileged EXEC mode 12-7
requirements 12-9
saving 12-7
VLAN configuration mode 12-7
configuration mode options 12-7
configuration requirements 12-9
configuration revision number
guideline 12-14
resetting 12-15
configuring
client mode 12-11
server mode 12-9
transparent mode 12-12
consistency checks 12-4
default configuration 12-6
described 12-1
disabling 12-12
domain names 12-8
VTP (continued)
domains 12-2
modes
transitions 12-3
monitoring 12-15
passwords 12-8
pruning
disabling 12-14
enabling 12-13
examples 12-5
overview 12-4
support for 1-5
pruning-eligible list, changing 11-20
server mode, configuring 12-9
statistics 12-15
support for 1-5
Token Ring support 12-4
transparent mode, configuring 12-12
using 12-1
version, guidelines 12-8
Version 1 12-4
Version 2
configuration guidelines 12-8
disabling 12-13
enabling 12-13
overview 12-4
W
weighted tail drop
WTD
described 27-11
WTD (continued)
setting thresholds
egress queue-sets 27-58
ingress queues 27-54
support for 1-7
X
XMODEM protocol 29-2