-
Catalyst 2970 Switch Software Configuration Guide, 12.2(25)SE
-
Index
-
Preface
-
Overview
-
Using the Command-Line Interface
-
Assigning the Switch IP Address and Default Gateway
-
Clustering Switches
-
Administering the Switch
-
Configuring Switch-Based Authentication
-
Configuring 802.1x Port-Based Authentication
-
Configuring Interface Characteristics
-
Configuring Smartports Macros
-
Configuring VLANs
-
Configuring VTP
-
Configuring Voice VLAN
-
Configuring STP
-
Configuring MSTP
-
Configuring Optional Spanning-Tree Features
-
Configuring Flex Links
-
Configuring DHCP Features
-
Configuring IGMP Snooping and MVR
-
Configuring Port-Based Traffic Control
-
Configuring CDP
-
Configuring UDLD
-
Configuring SPAN and RSPAN
-
Configuring RMON
-
Configuring System Message Logging
-
Configuring SNMP
-
Configuring Network Security with ACLs
-
Configuring QoS
-
Configuring EtherChannels
-
Troubleshooting
-
Supported MIBs
-
Working with the Cisco IOS File System, Configuration Files, and Software Images
-
Unsupported Command in Cisco IOS Release 12.2(25)SE
-
Table Of Contents
Numerics - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X -
Index
Numerics
802.1D
802.1Q
and trunk ports 8-3
configuration limitations 10-17
encapsulation 10-15
native VLAN for untagged traffic 10-22
802.1s
802.1w
802.1x
802.3ad
802.3z flow control 8-12
A
abbreviating commands 2-3
access-class command 26-18
access control entries
access-denied response, VMPS 10-26
access groups
applying ACLs to interfaces 26-19
IP 26-19
access lists
access ports
defined 8-2
accounting
with RADIUS 6-28
ACEs
and QoS 27-7
defined 26-2
Ethernet 26-2
IP 26-2
ACLs
ACEs 26-2
any keyword 26-10
applying
time ranges to 26-15
to an interface 26-18
to QoS 27-7
classifying traffic for QoS 27-41
comments in 26-17
compiling 26-19
extended IP
configuring for QoS classification 27-43
creating 26-9
matching criteria 26-6
hardware and software handling 26-19
host keyword 26-11
IP
applying to an interface 26-18
applying to interfaces 26-18
creating 26-6
fragments and QoS guidelines 27-32
implicit deny 26-8, 26-12, 26-14
ACLs, IP (continued)implicit masks 26-8
matching criteria 26-6
named 26-13
terminal lines, setting on 26-18
undefined 26-19
monitoring 26-31
named 26-13
number per QoS class map 27-32
numbers 26-7
port 26-2
precedence of 26-2
resequencing entries 26-13
standard IP
configuring for QoS classification 27-42
creating 26-8
matching criteria 26-6
supported features 26-19
support for 1-6
time ranges 26-15
unsupported features 26-5
VLAN maps
configuration guidelines 26-25
configuring 26-24
active links 16-1
address aliasing 18-2
addresses
displaying the MAC address table 5-27
dynamic
accelerated aging 13-8
changing the aging time 5-22
default aging 13-8
defined 5-20
learning 5-21
removing 5-22
ACLs (continued)MAC, discovering 5-27
multicast, STP address management 13-8
static
adding and removing 5-24
defined 5-20
address resolution 5-27
Address Resolution Protocol
advertisements
CDP 20-1
aggregated ports
aggregate policers 27-56
aggregate policing 1-7
aging, accelerating 13-8
aging time
accelerated
for MSTP 14-20
MAC address table 5-22
maximum
for MSTP 14-21
for STP 13-21
alarms, RMON 23-3
allowed-VLAN list 10-20
ARP
table
address resolution 5-27
managing 5-27
attributes, RADIUS
vendor-proprietary 6-31
vendor-specific 6-29
audience xxvii
authentication
local mode with AAA 6-36
NTP associations 5-5
RADIUS
key 6-21
login 6-23
TACACS+
defined 6-11
key 6-13
login 6-14
See also port-based authentication
authoritative time source, described 5-2
authorization
with RADIUS 6-27
authorized ports with 802.1x 7-4
autoconfiguration 3-3
automatic QoS
autonegotiation
duplex mode 1-3
interface configuration guidelines 8-10
mismatches 29-11
autosensing, port speed 1-3
auxiliary VLAN
availability, features 1-5
B
BackboneFast
described 15-5
disabling 15-14
enabling 15-13
support for 1-5
backup interfaces
backup links 16-1
banners
configuring
login 5-20
message-of-the-day login 5-19
default configuration 5-18
when displayed 5-18
binding table, DHCP snooping
See DHCP snooping binding database
blocking packets 19-6
booting
boot loader, function of 3-2
boot process 3-1
manually 3-13
specific image 3-13
boot loader
accessing 3-14
described 3-2
environment variables 3-14
prompt 3-14
trap-door mechanism 3-2
BPDU
error-disabled state 15-2
filtering 15-3
RSTP format 14-9
BPDU filtering
described 15-3
disabling 15-12
enabling 15-12
support for 1-5
BPDU guard
described 15-2
disabling 15-11
enabling 15-11
support for 1-5
bridge protocol data unit
broadcast storm-control command 19-4
broadcast storms 19-1
C
cables, monitoring for unidirectional links 21-1
candidate switch
defined 4-3
requirements 4-3
See also command switch, cluster standby group, and member switch
CA trustpoint
configuring 6-44
defined 6-42
caution, described xxviii
CDP
and trusted boundary 27-38
configuring 20-2
default configuration 20-2
described 20-1
disabling for routing device 20-3 to 20-4
enabling and disabling
on an interface 20-4
on a switch 20-3
monitoring 20-5
overview 20-1
support for 1-4
transmission timer and holdtime, setting 20-2
updates 20-2
CGMP
as IGMP snooping learning method 18-7
joining multicast group 18-3
CipherSuites 6-43
Cisco 7960 IP Phone 12-1
Cisco Discovery Protocol
Cisco IOS File System
Cisco Network Assistant
class maps for QoS
configuring 27-45
described 27-7
displaying 27-76
class of service
clearing interfaces 8-17
CLI
abbreviating commands 2-3
command modes 2-1
described 1-3
editing features
enabling and disabling 2-6
keystroke editing 2-6
wrapped lines 2-8
error messages 2-4
filtering command output 2-8
getting help 2-3
history
changing the buffer size 2-5
described 2-4
disabling 2-5
recalling commands 2-5
managing clusters 4-3
no and default forms of commands 2-4
client mode, VTP 11-3
clock
cluster requirements xxix
clusters, switch
benefits 1-2
described 4-1
managing
through CLI 4-3
through SNMP 4-4
planning considerations
CLI 4-3
SNMP 4-4
See also Getting Started with Cisco Network Assistant
cluster standby group
requirements 4-2
Coarse Wave Division Multiplexer
command-line interface
command modes 2-1
commands
abbreviating 2-3
no and default 2-4
commands, setting privilege levels 6-8
command switch
configuration conflicts 29-11
defined 4-2
password privilege levels 4-4
recovery
from command-switch failure 29-8
from lost member connectivity 29-11
replacing
with another switch 29-10
with cluster member 29-8
requirements 4-2
See also candidate switch, cluster standby group, member switch, and standby command switch
community strings
configuring 25-8
for cluster switches 25-4
overview 25-4
compatibility, feature 19-11
config.text 3-12
configuration, initial
defaults 1-8
Express Setup 1-2
See also getting started guide and hardware installation guide
configuration conflicts, recovering from lost member connectivity 29-11
configuration examples, network 1-10
configuration files
clearing the startup configuration B-19
creating using a text editor B-10
default name 3-12
deleting a stored configuration B-19
described B-8
downloading
automatically 3-12
reasons for B-8
using FTP B-13
using RCP B-17
using TFTP B-11
guidelines for creating and using B-9
invalid combinations when copying B-5
limiting TFTP server access 25-15
obtaining with DHCP 3-7
password recovery disable considerations 6-5
specifying the filename 3-12
system contact and location information 25-14
types and location B-9
uploading
reasons for B-8
using FTP B-14
using RCP B-18
using TFTP B-12
configuration settings, saving 3-10
configure terminal command 8-5
conflicts, configuration 29-11
connections, secure remote 6-38
connectivity problems 29-13, 29-14, 29-16
consistency checks in VTP Version 2 11-4
console port, connecting to 2-9
conventions
command xxviii
for examples xxviii
conventions (continued)publication xxviii
text xxviii
corrupted software, recovery steps with Xmodem 29-2
CoS
in Layer 2 frames 27-2
override priority 12-6
trust priority 12-6
CoS input queue threshold map for QoS 27-15
CoS output queue threshold map for QoS 27-18
CoS-to-DSCP map for QoS 27-58
counters, clearing interface 8-17
crashinfo file 29-22
cryptographic software image
Kerberos 6-32
SSH 6-37
SSL 6-41
CWDM SFPs 1-15
D
daylight saving time 5-13
debugging
enabling all system diagnostics 29-20
enabling for a specific feature 29-19
redirecting error message output 29-20
using commands 29-19
default commands 2-4
default configuration
802.1x 7-11
auto-QoS 27-20
banners 5-18
booting 3-12
CDP 20-2
DHCP 17-5
DHCP option 82 17-5
DHCP snooping 17-5
DNS 5-17
EtherChannel 28-8
default configuration (continued)Flex Links 16-2
IGMP filtering 18-19
IGMP snooping 18-6
IGMP throttling 18-19
initial switch information 3-3
Layer 2 interfaces 8-9
MAC address table 5-21
MSTP 14-12
MVR 18-14
NTP 5-4
optional spanning-tree configuration 15-9
password and privilege level 6-2
RADIUS 6-20
RMON 23-3
RSPAN 22-9
SNMP 25-6
SPAN 22-9
SSL 6-44
standard QoS 27-30
STP 13-11
system message logging 24-3
system name and prompt 5-15
TACACS+ 6-13
UDLD 21-4
VLAN, Layer 2 Ethernet interfaces 10-18
VLANs 10-8
VMPS 10-27
voice VLAN 12-3
VTP 11-6
default gateway 3-10
deleting VLANs 10-10
description command 8-14
designing your network, examples 1-10
destination addresses, in ACLs 26-10
destination-IP address-based forwarding, EtherChannel 28-7
destination-MAC address forwarding, EtherChannel 28-6
detecting indirect link failures, STP 15-5
device B-19
device discovery protocol 20-1
device manager
benefits 1-2
in-band management 1-4
requirements xxviii
upgrading a switch B-19
DHCP-based autoconfiguration
client request message exchange 3-4
configuring
client side 3-3
DNS 3-6
relay device 3-6
server side 3-5
TFTP server 3-5
example 3-8
lease options
for IP address information 3-5
for receiving the configuration file 3-5
overview 3-3
relationship to BOOTP 3-3
relay support 1-4
support for 1-4
DHCP binding table
See DHCP snooping binding database
DHCP option 82
circuit ID suboption 17-4
configuration guidelines 17-6
default configuration 17-5
displaying 17-8
overview 17-3
packet format, suboption
circuit ID 17-4
remote ID 17-4
remote ID suboption 17-4
DHCP snooping
configuration guidelines 17-6
default configuration 17-5
DHCP snooping (continued)displaying binding tables 17-8
message exchange process 17-4
option 82 data insertion 17-3
trusted interface 17-2
untrusted interface 17-2
untrusted messages 17-2
DHCP snooping binding database
binding entries, displaying 17-8
default configuration 17-5
displaying 17-8
DHCP snooping binding table
See DHCP snooping binding database
Differentiated Services architecture, QoS 27-2
Differentiated Services Code Point 27-2
directed unicast requests 1-4
directories
changing B-3
creating and removing B-4
displaying the working B-3
DNS
and DHCP-based autoconfiguration 3-6
default configuration 5-17
displaying the configuration 5-18
overview 5-16
setting up 5-17
support for 1-4
documentation, related xxviii
document conventions xxviii
domain names
DNS 5-16
VTP 11-8
Domain Name System
downloading
configuration files
reasons for B-8
using FTP B-13
downloading, configuration files (continued)using RCP B-17
using TFTP B-11
image files
deleting old image B-23
reasons for B-19
using CMS 1-2
using FTP B-26
using Network Assistant 1-2
using RCP B-31
using TFTP B-22
using the device manager or Network Assistant B-19
DSCP input queue threshold map for QoS 27-15
DSCP output queue threshold map for QoS 27-18
DSCP-to-CoS map for QoS 27-61
DSCP-to-DSCP-mutation map for QoS 27-62
DSCP transparency 27-38
dynamic access ports
characteristics 10-4
configuring 10-29
defined 8-3
dynamic addresses
dynamic auto trunking mode 10-16
dynamic desirable trunking mode 10-17
Dynamic Host Configuration Protocol
See DHCP-based autoconfiguration
dynamic port VLAN membership
described 10-27
reconfirming 10-30
troubleshooting 10-31
types of connections 10-29
Dynamic Trunking Protocol
E
editing features
enabling and disabling 2-6
keystrokes used 2-6
wrapped lines 2-8
enable password 6-4
enable secret password 6-4
encryption, CipherSuite 6-43
encryption for passwords 6-4
environment variables, function of 3-15
error messages during command entry 2-4
EtherChannel
802.3ad, described 28-5
automatic creation of 28-3, 28-5
channel groups
binding physical and logical interfaces 28-3
numbering of 28-3
configuration guidelines 28-9
configuring Layer 2 interfaces 28-10
default configuration 28-8
described 28-2
displaying status 28-17
forwarding methods 28-6, 28-12
interaction
with STP 28-9
with VLANs 28-10
LACP
described 28-5
displaying status 28-17
hot-standby ports 28-14
interaction with other features 28-6
modes 28-5
port priority 28-16
system priority 28-15
EtherChannel (continued)PAgP
aggregate-port learners 28-13
compatibility with Catalyst 1900 28-13
described 28-3
displaying status 28-17
interaction with other features 28-5
learn method and priority configuration 28-13
modes 28-4
support for 1-3
port-channel interfaces
described 28-3
numbering of 28-3
port groups 8-3
support for 1-3
EtherChannel guard
described 15-7
disabling 15-14
enabling 15-14
Ethernet VLANs
adding 10-8
defaults and ranges 10-8
modifying 10-8
events, RMON 23-3
examples
conventions for xxviii
network configuration 1-10
expedite queue for QoS 27-75
Express Setup 1-2
See also getting started guide
extended-range VLANs
configuration guidelines 10-13
configuring 10-12
creating 10-13
defined 10-1
extended system ID
MSTP 14-14
Extensible Authentication Protocol over LAN 7-1
F
fallback bridging
STP
keepalive messages 13-2
features, incompatible 19-11
fiber-optic, detecting unidirectional links 21-1
files
copying B-4
crashinfo
description 29-22
displaying the contents of 29-22
location 29-22
deleting B-5
displaying the contents of B-8
tar
creating B-6
displaying the contents of B-6
extracting B-7
image file format B-20
file system
displaying available file systems B-2
displaying file information B-3
local file system names B-1
network file system names B-4
setting the default B-3
filtering
in a VLAN 26-24
non-IP traffic 26-22
show and more command output 2-8
filtering show and more command output 2-8
filters, IP
flash device, number of B-1
Flex Links
configuration guidelines 16-2
configuring 16-3
default configuration 16-2
Flex Links (continued)description 16-1
monitoring 16-3
flooded traffic, blocking 19-7
flow-based packet classification 1-7
flowcharts
QoS classification 27-6
QoS egress queueing and scheduling 27-16
QoS ingress queueing and scheduling 27-14
QoS policing and marking 27-11
forward-delay time
MSTP 14-20
STP 13-21
FTP
accessing MIB files A-3
configuration files
downloading B-13
overview B-12
preparing the server B-13
uploading B-14
image files
deleting old image B-28
downloading B-26
preparing the server B-25
uploading B-28
G
get-bulk-request operation 25-3
get-next-request operation 25-3, 25-4
get-request operation 25-3, 25-4
get-response operation 25-3
global configuration mode 2-2
guest VLAN and 802.1x 7-8
guide
audience xxvii
purpose of xxvii
guide mode 1-2
GUIs
See device manager and Network Assistant 1-3
H
hello time
MSTP 14-19
STP 13-20
help, for the command line 2-3
hierarchical policy maps 27-8
configuration guidelines 27-32
configuring 27-50
described 27-10
history
changing the buffer size 2-5
described 2-4
disabling 2-5
recalling commands 2-5
history table, level and number of syslog messages 24-9
hosts, limit on dynamic ports 10-31
HP OpenView 1-3
HTTP over SSL
HTTPS 6-42
configuring 6-45
self-signed certificate 6-42
HTTP secure server 6-42
I
ICMP
time-exceeded messages 29-16
traceroute and 29-16
ICMP ping
executing 29-13
overview 29-13
IDS appliances
and ingress RSPAN 22-19
and ingress SPAN 22-13
IEEE 802.1p 12-1
ifIndex values, SNMP 25-5
IFS 1-4
IGMP
joining multicast group 18-3
join messages 18-3
leave processing, enabling 18-9
leaving multicast group 18-4
queries 18-3
report suppression
described 18-5
disabling 18-10
support for 1-3
IGMP filtering
configuring 18-19
default configuration 18-19
described 18-18
monitoring 18-23
support for 1-3
IGMP groups
configuring filtering 18-22
setting the maximum number 18-21
IGMP profile
applying 18-20
configuration mode 18-19
configuring 18-20
IGMP snooping
and address aliasing 18-2
configuring 18-5
default configuration 18-6
definition 18-1
enabling and disabling 18-6
global configuration 18-6
Immediate Leave 18-5
method 18-7
monitoring 18-10
IGMP snooping (continued)support for 1-3
VLAN configuration 18-6
IGMP throttling
configuring 18-22
default configuration 18-19
described 18-19
displaying action 18-23
Immediate Leave, IGMP
described 18-5
enabling 18-9
initial configuration
defaults 1-8
Express Setup 1-2
See also getting started guide and hardware installation guide
interface
number 8-4
range macros 8-7
interface configuration mode 2-2
interfaces
configuration guidelines
duplex and speed 8-10
configuring
procedure 8-5
speed 8-10
counters, clearing 8-17
described 8-14
descriptive name, adding 8-14
displaying information about 8-16
flow control 8-12
management 1-3
monitoring 8-16
naming 8-14
physical, identifying 8-4
range of 8-5
restarting 8-18
shutting down 8-18
interfaces (continued)status 8-16
supported 8-4
types of 8-1
interfaces range macro command 8-7
interface types 8-4
Inter-Switch Link
Intrusion Detection System
ip access group command 26-19
IP ACLs
applying to an interface 26-18
extended, creating 26-9
for QoS classification 27-7
implicit deny 26-8, 26-12, 26-14
implicit masks 26-8
named 26-13
standard, creating 26-8
undefined 26-19
virtual terminal lines, setting on 26-18
IP addresses
candidate or member 4-3
command switch 4-2
discovering 5-27
ip igmp profile command 18-19
IP information
assigned
manually 3-9
through DHCP-based autoconfiguration 3-3
default configuration 3-3
IP phones
and QoS 12-1
automatic classification and queueing 27-19
configuring 12-4
ensuring port security with QoS 27-37
trusted boundary for QoS 27-37
IP precedence 27-2
IP-precedence-to-DSCP map for QoS 27-59
IP protocols in ACLs 26-10
IP traceroute
executing 29-17
overview 29-16
ISL
and trunk ports 8-3
J
join messages, IGMP 18-3
K
KDC
described 6-32
keepalive messages 13-2
Kerberos
authenticating to
boundary switch 6-35
KDC 6-35
network services 6-35
configuration examples 6-32
configuring 6-36
credentials 6-32
cryptographic software image 6-32
described 6-32
KDC 6-32
operation 6-34
realm 6-33
server 6-33
support for 1-7
switch as trusted third party 6-32
terms 6-33
Kerberos (continued)TGT 6-34
tickets 6-32
key distribution center
L
LACP
Layer 2 frames, classification with CoS 27-2
Layer 2 interfaces, default configuration 8-9
Layer 2 traceroute
and ARP 29-15
and CDP 29-15
broadcast traffic 29-14
described 29-14
IP addresses and subnets 29-15
MAC addresses and VLANs 29-15
multicast traffic 29-15
multiple devices on a port 29-15
unicast traffic 29-14
usage guidelines 29-15
Layer 2 trunks 10-16
Layer 3 packets, classification methods 27-2
LEDs, switch
See hardware installation guide
line configuration mode 2-2
Link Aggregation Control Protocol
link redundancy
links, unidirectional 21-1
login authentication
with RADIUS 6-23
with TACACS+ 6-14
login banners 5-18
log messages
Long-Reach Ethernet (LRE) technology 1-12
loop guard
described 15-9
enabling 15-15
support for 1-5
M
MAC addresses
aging time 5-22
and VLAN association 5-21
building the address table 5-21
default configuration 5-21
discovering 5-27
displaying 5-27
dynamic
learning 5-21
removing 5-22
in ACLs 26-22
static
adding 5-25
allowing 5-26
characteristics of 5-24
dropping 5-26
removing 5-25
MAC address notification, support for 1-8
MAC address-to-VLAN mapping 10-26
MAC extended access lists
applying to Layer 2 interfaces 26-23
configuring for QoS 27-44
creating 26-22
defined 26-22
for QoS classification 27-5
macros
manageability features 1-4
management access
in-band
browser session 1-4
CLI session 1-4
device manager 1-4
SNMP 1-4
out-of-band console port connection 1-4
management options
CLI 2-1
clustering 1-2
Network Assistant 1-2
overview 1-3
mapping tables for QoS
configuring
CoS-to-DSCP 27-58
DSCP 27-58
DSCP-to-CoS 27-61
DSCP-to-DSCP-mutation 27-62
IP-precedence-to-DSCP 27-59
policed-DSCP 27-60
described 27-11
marking
action in policy map 27-47
action with aggregate policers 27-56
matching, ACLs 26-6
maximum aging time
MSTP 14-21
STP 13-21
maximum hop count, MSTP 14-21
membership mode, VLAN port 10-3
member switch
defined 4-2
managing 4-3
recovering from lost connectivity 29-11
requirements 4-3
See also candidate switch, cluster standby group, and standby command switch
messages, to users through banners 5-18
MIBs
accessing files with FTP A-3
location of files A-3
overview 25-1
SNMP interaction with 25-4
supported A-1
mirroring traffic for analysis 22-1
mismatches, autonegotiation 29-11
module number 8-4
monitoring
access groups 26-31
ACL configuration 26-31
cables for unidirectional links 21-1
CDP 20-5
features 1-8
Flex Links 16-3
IGMP
filters 18-23
snooping 18-10
interfaces 8-16
multicast router interfaces 18-11
MVR 18-18
network traffic for analysis with probe 22-2
port
blocking 19-15
protection 19-15
speed and duplex mode 8-12
traffic flowing among switches 23-1
traffic suppression 19-15
VLAN
filters 26-31
maps 26-31
VLANs 10-14
VMPS 10-31
MSTP
boundary ports
configuration guidelines 14-13
described 14-5
BPDU filtering
described 15-3
enabling 15-12
BPDU guard
described 15-2
enabling 15-11
CIST, described 14-3
configuration guidelines 14-12, 15-10
configuring
forward-delay time 14-20
hello time 14-19
link type for rapid convergence 14-22
maximum aging time 14-21
maximum hop count 14-21
MST region 14-13
path cost 14-18
port priority 14-17
root switch 14-14
secondary root switch 14-16
switch priority 14-19
CST
defined 14-3
operations between regions 14-4
default configuration 14-12
default optional feature configuration 15-9
displaying status 14-23
enabling the mode 14-13
EtherChannel guard
described 15-7
enabling 15-14
extended system ID
effects on root switch 14-14
effects on secondary root switch 14-16
unexpected behavior 14-15
instances supported 13-9
MSTP (continued)interface state, blocking to forwarding 15-2
interoperability and compatibility among modes 13-10
interoperability with 802.1D
described 14-5
restarting migration process 14-22
IST
defined 14-3
master 14-3
operations within a region 14-3
loop guard
described 15-9
enabling 15-15
mapping VLANs to MST instance 14-13
MST region
CIST 14-3
configuring 14-13
described 14-2
hop-count mechanism 14-5
IST 14-3
supported spanning-tree instances 14-2
optional features supported 1-5
overview 14-2
Port Fast
described 15-2
enabling 15-10
preventing root switch selection 15-8
root guard
described 15-8
enabling 15-14
root switch
configuring 14-15
effects of extended system ID 14-14
unexpected behavior 14-15
shutdown Port Fast-enabled port 15-2
status, displaying 14-23
multicast groups
Immediate Leave 18-5
joining 18-3
multicast groups (continued)leaving 18-4
static joins 18-8
multicast packets, blocking 19-7
multicast router interfaces, monitoring 18-11
multicast router ports, adding 18-8
multicast storm 19-1
multicast storm-control command 19-4
Multicast VLAN Registration
MVR
and address aliasing 18-15
configuring interfaces 18-16
default configuration 18-14
described 18-11
modes 18-16
monitoring 18-18
setting global parameters 18-15
support for 1-3
N
named IP ACLs 26-13
native VLAN
configuring 10-22
default 10-22
Network Assistant
benefits 1-2
described 1-3
downloading image files 1-2
guide mode 1-2
management options 1-2
requirements xxviii
upgrading a switch B-19
wizards 1-2
network configuration examples
increasing network performance 1-11
long-distance, high-bandwidth transport 1-15
providing network services 1-11
network configuration examples (continued)server aggregation and Linux server cluster 1-13
small to medium-sized network 1-14
network design
performance 1-11
services 1-11
network management
CDP 20-1
RMON 23-1
SNMP 25-1
Network Time Protocol
no commands 2-4
nonhierarchical policy maps
configuration guidelines 27-32
configuring 27-47
described 27-9
non-IP traffic filtering 26-22
nontrunking mode 10-16
normal-range VLANs
configuration modes 10-6
defined 10-1
note, described xxviii
NTP
associations
authenticating 5-5
defined 5-2
enabling broadcast messages 5-7
peer 5-6
server 5-6
default configuration 5-4
displaying the configuration 5-11
overview 5-2
restricting access
creating an access group 5-9
disabling NTP services per interface 5-10
source IP address, configuring 5-10
stratum 5-2
support for 1-4
NTP (continued)synchronizing devices 5-6
time
services 5-2
synchronizing 5-2
O
options, management 1-3
out-of-profile markdown 1-7
P
packet modification, with QoS 27-18
PAgP
passwords
default configuration 6-2
disabling recovery of 6-5
encrypting 6-4
for security 1-6
overview 6-1
recovery of 29-3
setting
enable 6-3
enable secret 6-4
Telnet 6-6
with usernames 6-7
VTP domain 11-8
path cost
MSTP 14-18
STP 13-18
performance, network design 1-11
performance features 1-3
persistent self-signed certificate 6-42
per-VLAN spanning-tree plus
physical ports 8-2
PIM-DVMRP, as snooping method 18-7
ping
character output description 29-13
executing 29-13
overview 29-13
policed-DSCP map for QoS 27-60
policers
configuring
for each matched traffic class 27-47
for more than one traffic class 27-56
described 27-4
displaying 27-76
number of 27-32
types of 27-9
policing
described 27-4
hierarchical
token-bucket algorithm 27-9
policy maps
hierarchical 27-8
policy maps for QoS
characteristics of 27-47
described 27-7
displaying 27-77
hierarchical on SVIs
configuration guidelines 27-32
configuring 27-50
described 27-10
nonhierarchical on physical ports
configuration guidelines 27-32
configuring 27-47
described 27-9
port ACLs
defined 26-2
types of 26-2
Port Aggregation Protocol
port-based authentication
accounting 7-5
authentication server
defined 7-2
RADIUS server 7-2
client, defined 7-2
configuration guidelines 7-12
configuring
802.1x authentication 7-13
guest VLAN 7-20
host mode 7-19
manual re-authentication of a client 7-16
periodic re-authentication 7-16
quiet period 7-16
RADIUS server 7-15
RADIUS server parameters on the switch 7-14
switch-to-client frame-retransmission number 7-18
switch-to-client retransmission time 7-17
default configuration 7-11
described 7-1
device roles 7-2
displaying statistics 7-22
EAPOL-start frame 7-3
EAP-request/identity frame 7-3
EAP-response/identity frame 7-3
encapsulation 7-3
guest VLAN
configuration guidelines 7-9
described 7-8
host mode 7-5
initiation and message exchange 7-3
method lists 7-13
multiple-hosts mode, described 7-5
per-user ACLs
AAA authorization 7-13
configuration tasks 7-10
described 7-9
RADIUS server attributes 7-9
port-based authentication (continued)ports
authorization state and dot1x port-control command 7-4
authorized and unauthorized 7-4
voice VLAN 7-7
port security
and voice VLAN 7-6
described 7-6
interactions 7-6
multiple-hosts mode 7-5
resetting to default values 7-21
statistics, displaying 7-22
switch
as proxy 7-2
RADIUS client 7-2
upgrading from a previous release 7-13, 27-25
VLAN assignment
AAA authorization 7-13
characteristics 7-8
configuration tasks 7-8
described 7-7
voice VLAN
described 7-7
PVID 7-7
VVID 7-7
port-channel
Port Fast
described 15-2
enabling 15-10
mode, spanning tree 10-28
support for 1-5
port membership modes, VLAN 10-3
port priority
MSTP 14-17
STP 13-16
ports
access 8-2
blocking 19-6
dynamic access 10-4
protected 19-5
secure 19-7
switch 8-2
VLAN assignments 10-11
port security
aging 19-14
and QoS trusted boundary 27-37
configuring 19-11
default configuration 19-10
described 19-7
displaying 19-15
on trunk ports 19-12
sticky learning 19-8
violations 19-9
with other features 19-10
port-shutdown response, VMPS 10-26
preferential treatment of traffic
preventing unauthorized access 6-1
primary links 16-1
priority
overriding CoS 12-6
trusting CoS 12-6
private VLAN edge ports
privileged EXEC mode 2-2
privilege levels
changing the default for lines 6-9
command switch 4-4
exiting 6-10
logging into 6-10
mapping on member switches 4-4
privilege levels (continued)setting a command with 6-8
pruning, VTP
disabling
in VTP domain 11-14
on a port 10-22
enabling
in VTP domain 11-14
on a port 10-21
examples 11-5
overview 11-4
pruning-eligible list
changing 10-21
for VTP pruning 11-4
VLANs 11-14
PVST+
802.1Q trunking interoperability 13-10
described 13-9
instances supported 13-9
Q
QoS
and MQC commands 27-1
auto-QoS
categorizing traffic 27-20
configuration and defaults display 27-29
configuration guidelines 27-24
described 27-19
disabling 27-26
displaying generated commands 27-26
displaying the initial configuration 27-29
effects on running configuration 27-24
egress queue defaults 27-20
enabling for VoIP 27-26
example configuration 27-27
QoS (continued)ingress queue defaults 27-20
list of generated commands 27-21
basic model 27-4
classification
class maps, described 27-7
defined 27-4
DSCP transparency, described 27-38
flowchart 27-6
forwarding treatment 27-3
in frames and packets 27-3
MAC ACLs, described 27-5, 27-7
options for IP traffic 27-5
options for non-IP traffic 27-5
policy maps, described 27-7
trust DSCP, described 27-5
trusted CoS, described 27-5
trust IP precedence, described 27-5
class maps
configuring 27-45
displaying 27-76
configuration guidelines
auto-QoS 27-24
standard QoS 27-32
configuring
aggregate policers 27-56
auto-QoS 27-19
default port CoS value 27-36
DSCP maps 27-58
DSCP transparency 27-38
DSCP trust states bordering another domain 27-39
egress queue characteristics 27-69
ingress queue characteristics 27-64
IP extended ACLs 27-43
IP standard ACLs 27-41
MAC ACLs 27-44
policy maps, hierarchical 27-50
policy maps on physical ports 27-47
QoS (continued)port trust states within the domain 27-34
trusted boundary 27-37
default auto configuration 27-20
default standard configuration 27-30
displaying statistics 27-76
DSCP transparency 27-38
egress queues
allocating buffer space 27-69
buffer allocation scheme, described 27-17
configuring shaped weights for SRR 27-73
configuring shared weights for SRR 27-74
described 27-4
displaying the threshold map 27-72
flowchart 27-16
mapping DSCP or CoS values 27-71
scheduling, described 27-4
setting WTD thresholds 27-69
WTD, described 27-18
enabling globally 27-33
flowcharts
classification 27-6
egress queueing and scheduling 27-16
ingress queueing and scheduling 27-14
policing and marking 27-11
implicit deny 27-7
ingress queues
allocating bandwidth 27-67
allocating buffer space 27-66
buffer and bandwidth allocation, described 27-15
configuring shared weights for SRR 27-67
configuring the priority queue 27-68
described 27-4
displaying the threshold map 27-65
flowchart 27-14
mapping DSCP or CoS values 27-65
priority queue, described 27-15
scheduling, described 27-4
QoS (continued)setting WTD thresholds 27-65
WTD, described 27-15
IP phones
automatic classification and queueing 27-19
detection and trusted settings 27-19, 27-37
limiting bandwidth on egress interface 27-75
mapping tables
CoS-to-DSCP 27-58
displaying 27-76
DSCP-to-CoS 27-61
DSCP-to-DSCP-mutation 27-62
IP-precedence-to-DSCP 27-59
policed-DSCP 27-60
types of 27-11
marked-down actions 27-48, 27-53
overview 27-2
packet modification 27-18
policers
configuring 27-48, 27-53, 27-56
described 27-8
displaying 27-76
number of 27-32
types of 27-9
policies, attaching to an interface 27-8
policing
token bucket algorithm 27-9
policy maps
characteristics of 27-47
displaying 27-77
hierarchical 27-8
hierarchical on SVIs 27-50
nonhierarchical on physical ports 27-47
QoS label, defined 27-4
queues
configuring egress characteristics 27-69
configuring ingress characteristics 27-64
QoS, queues (continued)high priority (expedite) 27-18, 27-75
location of 27-12
SRR, described 27-13
WTD, described 27-12
rewrites 27-18
support for 1-7
trust states
bordering another domain 27-39
described 27-5
trusted device 27-37
within the domain 27-34
quality of service
queries, IGMP 18-3
R
RADIUS
attributes
vendor-proprietary 6-31
vendor-specific 6-29
configuring
accounting 6-28
authentication 6-23
authorization 6-27
communication, global 6-21, 6-29
communication, per-server 6-20, 6-21
multiple UDP ports 6-20
default configuration 6-20
defining AAA server groups 6-25
displaying the configuration 6-31
identifying the server 6-20
limiting the services to the user 6-27
method list, defined 6-20
operation of 6-19
overview 6-18
suggested network environments 6-18
RADIUS (continued)support for 1-6
tracking services accessed by user 6-28
range
macro 8-7
of interfaces 8-6
rapid convergence 14-7
rapid per-VLAN spanning-tree plus
rapid PVST+
802.1Q trunking interoperability 13-10
described 13-9
instances supported 13-9
Rapid Spanning Tree Protocol
rcommand command 4-3
RCP
configuration files
downloading B-17
overview B-15
preparing the server B-16
uploading B-18
image files
deleting old image B-32
downloading B-31
preparing the server B-29
uploading B-33
reconfirmation interval, VMPS, changing 10-30
recovery procedures 29-1
redundancy
EtherChannel 28-2
STP
backbone 13-8
path cost 10-24
port priority 10-23
redundant links and UplinkFast 15-12
reloading software 3-16
Remote Authentication Dial-In User Service
Remote Copy Protocol
Remote Network Monitoring
Remote SPAN
report suppression, IGMP
described 18-5
disabling 18-10
requirements
cluster xxix
device manager xxviii
Network Assistant xxviii
resequencing ACL entries 26-13
resetting a UDLD-shutdown interface 21-6
restricting access
NTP services 5-8
overview 6-1
passwords and privilege levels 6-2
RADIUS 6-17
TACACS+ 6-10
retry count, VMPS, changing 10-30
RFC
1112, IP multicast and IGMP 18-2
1157, SNMPv1 25-2
1305, NTP 5-2
1757, RMON 23-2
1901, SNMPv2C 25-2
1902 to 1907, SNMPv2 25-2
2236, IP multicast and IGMP 18-2
2273-2275, SNMPv3 25-2
RMON
default configuration 23-3
displaying status 23-6
enabling alarms and events 23-3
groups supported 23-2
overview 23-1
RMON (continued)statistics
collecting group Ethernet 23-6
collecting group history 23-5
support for 1-8
root guard
described 15-8
enabling 15-14
support for 1-5
root switch
MSTP 14-14
STP 13-14
RSPAN
characteristics 22-7
configuration guidelines 22-15
default configuration 22-9
destination ports 22-6
displaying status 22-22
interaction with other features 22-8
monitored ports 22-5
monitoring ports 22-6
received traffic 22-4
session limits 22-10
sessions
creating 22-16
defined 22-3
limiting source traffic to specific VLANs 22-21
specifying monitored ports 22-16
with ingress traffic enabled 22-19
source ports 22-5
transmitted traffic 22-5
VLAN-based 22-6
RSTP
active topology 14-6
BPDU
format 14-9
processing 14-10
designated port, defined 14-6
RSTP (continued)designated switch, defined 14-6
interoperability with 802.1D
described 14-5
restarting migration process 14-22
topology changes 14-10
overview 14-6
port roles
described 14-6
synchronized 14-8
proposal-agreement handshake process 14-7
rapid convergence
described 14-7
edge ports and Port Fast 14-7
point-to-point links 14-7, 14-22
root ports 14-7
root port, defined 14-6
running configuration, saving 3-10
S
scheduled reloads 3-16
secure HTTP client
configuring 6-47
displaying 6-48
secure HTTP server
configuring 6-46
displaying 6-48
secure MAC addresses
deleting 19-13
maximum number of 19-8
types of 19-8
secure ports, configuring 19-7
secure remote connections 6-38
Secure Socket Layer
security, port 19-7
security features 1-6
sequence numbers in log messages 24-7
server mode, VTP 11-3
service-provider network, MSTP and RSTP 14-1
set-request operation 25-4
setup program
failed command switch replacement 29-10
replacing failed command switch 29-8
severity levels, defining in system messages 24-8
SFPs
monitoring status of 1-8, 8-17, 29-12
security and identification 29-12
status, displaying 1-8
shaped round robin
show access-lists hw-summary command 26-19
show and more command output, filtering 2-8
show cdp traffic command 20-5
show cluster members command 4-3
show configuration command 8-14
show forward command 29-20
show interfaces command 8-12, 8-14
show platform forward command 29-20
show running-config command
displaying ACLs 26-18, 26-19, 26-25, 26-28
interface description in 8-14
shutdown command on interfaces 8-18
Simple Network Management Protocol
Smartports macros
applying Cisco-default macros 9-6
applying global parameter values 9-5, 9-6
applying macros 9-5
applying parameter values 9-5, 9-7
configuration guidelines 9-3
creating 9-4
default configuration 9-2
defined 9-1
Smartports macros (continued)displaying 9-8
tracing 9-3
website 9-2
SNAP 20-1
SNMP
accessing MIB variables with 25-4
agent
described 25-4
disabling 25-8
authentication level 25-10
community strings
configuring 25-8
for cluster switches 25-4
overview 25-4
configuration examples 25-15
default configuration 25-6
engine ID 25-7
host 25-7
ifIndex values 25-5
in-band management 1-4
informs
and trap keyword 25-11
described 25-5
differences from traps 25-5
disabling 25-14
enabling 25-14
limiting access by TFTP servers 25-15
limiting system log messages to NMS 24-9
managing clusters with 4-4
MIBs
location of A-3
supported A-1
notifications 25-5
security levels 25-3
status, displaying 25-16
SNMP (continued)system contact and location 25-14
trap manager, configuring 25-13
traps
differences from informs 25-5
disabling 25-14
enabling 25-11
enabling MAC address notification 5-23
types of 25-11
versions supported 25-2
SNMPv1 25-2
SNMPv2C 25-2
SNMPv3 25-2
snooping, IGMP 18-1
software images
location in flash B-20
recovery procedures 29-2
scheduling reloads 3-16
tar file format, described B-20
See also downloading and uploading
source addresses, in ACLs 26-10
source-and-destination-IP address based forwarding, EtherChannel 28-7
source-and-destination MAC address forwarding, EtherChannel 28-6
source-IP address based forwarding, EtherChannel 28-6
source-MAC address forwarding, EtherChannel 28-6
SPAN
configuration guidelines 22-10
default configuration 22-9
destination ports 22-6
displaying status 22-22
interaction with other features 22-8
monitored ports 22-5
monitoring ports 22-6
SPAN (continued)ports, restrictions 19-11
received traffic 22-4
session limits 22-10
sessions
configuring ingress forwarding 22-14, 22-20
creating 22-10
defined 22-3
limiting source traffic to specific VLANs 22-14
removing destination (monitoring) ports 22-12
specifying monitored ports 22-10
with ingress traffic enabled 22-13
source ports 22-5
transmitted traffic 22-5
VLAN-based 22-6
spanning tree and native VLANs 10-17
Spanning Tree Protocol
SPAN traffic 22-4
speed, configuring on interfaces 8-10
SRR
configuring
shaped weights on egress queues 27-73
shared weights on egress queues 27-74
shared weights on ingress queues 27-67
described 27-13
shaped mode 27-13
shared mode 27-13
support for 1-7
SSH
configuring 6-39
cryptographic software image 6-37
encryption methods 6-38
user authentication methods, supported 6-38
SSL
configuration guidelines 6-44
configuring a secure HTTP client 6-47
configuring a secure HTTP server 6-45
SSL (continued)cryptographic software image 6-41
described 6-41
monitoring 6-48
standby command switch, requirements 4-2
standby links 16-1
startup configuration
booting
manually 3-13
specific image 3-13
clearing B-19
configuration file
automatically downloading 3-12
specifying the filename 3-12
default boot configuration 3-12
static access ports
assigning to VLAN 10-11
static addresses
static MAC addressing 1-6
static VLAN membership 10-2
statistics
802.1x 7-22
CDP 20-5
interface 8-17
QoS ingress and egress 27-76
RMON group Ethernet 23-6
RMON group history 23-5
SNMP input and output 25-16
VTP 11-15
sticky learning 19-8
storm control
configuring 19-3
described 19-1
disabling 19-5
displaying 19-15
support for 1-3
thresholds 19-1
STP
802.1D and bridge ID 13-4
802.1D and multicast addresses 13-8
802.1t and VLAN identifier 13-4
accelerating root port selection 15-4
BackboneFast
described 15-5
disabling 15-14
enabling 15-13
BPDU filtering
described 15-3
disabling 15-12
enabling 15-12
BPDU guard
described 15-2
disabling 15-11
enabling 15-11
BPDU message exchange 13-3
configuration guidelines 13-11, 15-10
configuring
forward-delay time 13-21
hello time 13-20
maximum aging time 13-21
path cost 13-18
port priority 13-16
root switch 13-14
secondary root switch 13-16
spanning-tree mode 13-13
switch priority 13-19
counters, clearing 13-22
default configuration 13-11
default optional feature configuration 15-9
designated port, defined 13-3
designated switch, defined 13-3
detecting indirect link failures 15-5
disabling 13-14
displaying status 13-22
EtherChannel guard
described 15-7
STP (continued)disabling 15-14
enabling 15-14
extended system ID
effects on root switch 13-14
effects on the secondary root switch 13-16
overview 13-4
unexpected behavior 13-14
features supported 1-5
inferior BPDU 13-3
instances supported 13-9
interface state, blocking to forwarding 15-2
interface states
blocking 13-6
disabled 13-7
learning 13-6
listening 13-6
overview 13-4
interoperability and compatibility among modes 13-10
keepalive messages 13-2
limitations with 802.1Q trunks 13-10
load sharing
overview 10-23
using path costs 10-24
using port priorities 10-23
loop guard
described 15-9
enabling 15-15
modes supported 13-9
multicast addresses, effect of 13-8
optional features supported 1-5
overview 13-2
Port Fast
described 15-2
enabling 15-10
port priorities 10-23
preventing root switch selection 15-8
STP (continued)protocols supported 13-9
redundant connectivity 13-8
root guard
described 15-8
enabling 15-14
root port, defined 13-3
root switch
configuring 13-14
effects of extended system ID 13-4, 13-14
election 13-3
unexpected behavior 13-14
shutdown Port Fast-enabled port 15-2
status, displaying 13-22
superior BPDU 13-3
timers, described 13-20
UplinkFast
described 15-3
enabling 15-12
stratum, NTP 5-2
success response, VMPS 10-27
summer time 5-13
SunNet Manager 1-3
switch clustering technology 4-1
switch console port 1-4
Switched Port Analyzer
switched ports 8-2
switchport block multicast command 19-7
switchport block unicast command 19-7
switchport protected command 19-6
switch priority
MSTP 14-19
STP 13-19
switch software features 1-1
syslog
system clock
configuring
daylight saving time 5-13
manually 5-11
summer time 5-13
time zones 5-12
displaying the time and date 5-12
overview 5-2
system message logging
default configuration 24-3
defining error message severity levels 24-8
disabling 24-3
displaying the configuration 24-12
enabling 24-4
facility keywords, described 24-12
level keywords, described 24-9
limiting messages 24-9
message format 24-2
overview 24-1
sequence numbers, enabling and disabling 24-7
setting the display destination device 24-4
synchronizing log messages 24-5
syslog facility 1-8
time stamps, enabling and disabling 24-7
UNIX syslog servers
configuring the daemon 24-10
configuring the logging facility 24-11
facilities supported 24-12
system name
default configuration 5-15
default setting 5-15
manual configuration 5-15
system prompt
manual configuration 5-16
T
TACACS+
accounting, defined 6-11
authentication, defined 6-11
authorization, defined 6-11
configuring
accounting 6-17
authentication key 6-13
authorization 6-16
login authentication 6-14
default configuration 6-13
displaying the configuration 6-17
identifying the server 6-13
limiting the services to the user 6-16
operation of 6-12
overview 6-10
support for 1-6
tracking services accessed by user 6-17
tar files
creating B-6
displaying the contents of B-6
extracting B-7
image file format B-20
TDR 1-8
Telnet
accessing management interfaces 2-9
number of connections 1-4
setting a password 6-6
temporary self-signed certificate 6-42
Terminal Access Controller Access Control System Plus
terminal lines, setting a password 6-6
TFTP
configuration files
downloading B-11
preparing the server B-10
uploading B-12
configuration files in base directory 3-6
TFTP (continued)configuring for autoconfiguration 3-5
image files
deleting B-23
downloading B-22
preparing the server B-22
uploading B-24
limiting access by servers 25-15
TFTP server 1-4
threshold, traffic level 19-2
time
Time Domain Reflector
time-range command 26-15
time ranges in ACLs 26-15
time stamps in log messages 24-7
time zones 5-12
Token Ring VLANs
support for 10-5
VTP support 11-4
ToS 1-7
traceroute, Layer 2
and ARP 29-15
and CDP 29-15
broadcast traffic 29-14
described 29-14
IP addresses and subnets 29-15
MAC addresses and VLANs 29-15
multicast traffic 29-15
multiple devices on a port 29-15
unicast traffic 29-14
usage guidelines 29-15
traceroute command 29-17
traffic
blocking flooded 19-6
fragmented 26-4
unfragmented 26-4
traffic policing 1-7
traffic suppression 19-1
transparent mode, VTP 11-3, 11-12
trap-door mechanism 3-2
traps
configuring MAC address notification 5-23
configuring managers 25-11
defined 25-3
notification types 25-11
troubleshooting
connectivity problems 29-13, 29-14, 29-16
detecting unidirectional links 21-1
displaying crash information 29-22
setting packet forwarding 29-20
SFP security and identification 29-12
show forward command 29-20
with CiscoWorks 25-4
with debug commands 29-19
with ping 29-13
with system message logging 24-1
with traceroute 29-16
trunking encapsulation 1-5
trunk ports
configuring 10-19
encapsulation 10-19, 10-24, 10-25
secure MAC addresses on 19-12
trunks
allowed-VLAN list 10-20
configuring 10-19, 10-24, 10-25
ISL 10-15
load sharing
setting STP path costs 10-24
using STP port priorities 10-23
native VLAN for untagged traffic 10-22
parallel 10-24
pruning-eligible list 10-21
trunks (continued)to non-DTP device 10-16
understanding 10-16
trusted boundary for QoS 27-37
trusted port states
between QoS domains 27-39
classification options 27-5
ensuring port security for IP phones 27-37
support for 1-7
within a QoS domain 27-34
trustpoints, CA 6-42
twisted-pair Ethernet, detecting unidirectional links 21-1
type of service
U
UDLD
default configuration 21-4
disabling
fiber-optic interfaces 21-5
globally 21-5
per interface 21-5
echoing detection mechanism 21-3
enabling
globally 21-4
per interface 21-5
link-detection mechanism 21-1
neighbor database 21-2
overview 21-1
resetting an interface 21-6
status, displaying 21-6
support for 1-5
unauthorized ports with 802.1x 7-4
unicast MAC address filtering 1-4
and adding static addresses 5-26
and broadcast MAC addresses 5-25
and CPU packets 5-25
and multicast addresses 5-25
unicast MAC address filtering (continued)and router MAC addresses 5-25
configuration guidelines 5-25
described 5-25
unicast storm 19-1
unicast storm control command 19-4
unicast traffic, blocking 19-7
UniDirectional Link Detection protocol
UNIX syslog servers
daemon configuration 24-10
facilities supported 24-12
message logging configuration 24-11
unrecognized Type-Length-Value (TLV) support 11-4
upgrading information
upgrading software images
UplinkFast
described 15-3
disabling 15-13
enabling 15-12
support for 1-5
uploading
configuration files
reasons for B-8
using FTP B-14
using RCP B-18
using TFTP B-12
image files
reasons for B-19
using FTP B-28
using RCP B-33
using TFTP B-24
user EXEC mode 2-2
username-based authentication 6-7
V
version-dependent transparent mode 11-4
vlan.dat file 10-4
VLAN 1, disabling on a trunk port 10-20
VLAN 1 minimization 10-20
VLAN ACLs
vlan-assignment response, VMPS 10-26
VLAN configuration
at bootup 10-7
saving 10-7
VLAN configuration mode 2-2, 10-7
VLAN database
and startup configuration file 10-7
and VTP 11-1
VLAN configuration saved in 10-7
VLANs saved in 10-4
vlan database command 10-7
VLAN filtering and SPAN 22-6
vlan global configuration command 10-7
VLAN ID, discovering 5-27
VLAN management domain 11-2
VLAN Management Policy Server
VLAN map entries, order of 26-25
VLAN maps
applying 26-28
common uses for 26-28
configuration example 26-29
configuration guidelines 26-25
configuring 26-24
creating 26-25
denying access example 26-30
denying and permitting packets 26-26
displaying 26-31
examples 26-30
removing 26-28
VLAN maps (continued)
support for 1-6
with router ACLs 26-31
VLAN membership
confirming 10-30
modes 10-3
VLAN Query Protocol
VLANs
adding 10-8
adding to VLAN database 10-8
aging dynamic addresses 13-9
allowed on trunk 10-20
and spanning-tree instances 10-3, 10-6, 10-13
configuration guidelines, extended-range VLANs 10-13
configuration guidelines, normal-range VLANs 10-6
configuration options 10-6
configuring 10-1
configuring IDs 1006 to 4094 10-13
creating in config-vlan mode 10-9
creating in VLAN configuration mode 10-10
default configuration 10-8
deleting 10-10
displaying 10-14
features 1-5
illustrated 10-2
limiting source traffic with RSPAN 22-21
limiting source traffic with SPAN 22-14
modifying 10-8
native, configuring 10-22
number supported 1-5
parameters 10-5
port membership modes 10-3
static-access ports 10-11
STP and 802.1Q trunks 13-10
supported 10-3
VLANs (continued)Token Ring 10-5
traffic between 10-2
VTP modes 11-3
VLAN Trunking Protocol
VMPS
administering 10-31
configuration example 10-31
configuration guidelines 10-28
default configuration 10-27
description 10-26
dynamic port membership
described 10-27
reconfirming 10-30
troubleshooting 10-31
entering server address 10-28
mapping MAC addresses to VLANs 10-26
monitoring 10-31
reconfirmation interval, changing 10-30
reconfirming membership 10-30
retry count, changing 10-30
voice-over-IP 12-1
voice VLAN
Cisco 7960 phone, port connections 12-1
configuration guidelines 12-3
configuring IP phones for data traffic
override CoS of incoming frame 12-6
trust CoS priority of incoming frame 12-6
configuring ports for voice traffic in
802.1p priority tagged frames 12-5
802.1Q frames 12-5
connecting to an IP phone 12-4
default configuration 12-3
described 12-1
displaying 12-6
VTP
adding a client to a domain 11-14
and extended-range VLANs 11-1
and normal-range VLANs 11-2
client mode, configuring 11-11
configuration
global configuration mode 11-7
guidelines 11-8
privileged EXEC mode 11-7
requirements 11-9
saving 11-7
VLAN configuration mode 11-7
configuration mode options 11-7
configuration requirements 11-9
configuration revision number
guideline 11-14
resetting 11-15
configuring
client mode 11-11
server mode 11-9
transparent mode 11-12
consistency checks 11-4
default configuration 11-6
described 11-1
disabling 11-12
domain names 11-8
domains 11-2
modes
transitions 11-3
monitoring 11-15
passwords 11-8
pruning
disabling 11-14
enabling 11-14
examples 11-5
VTP, pruning (continued)overview 11-4
support for 1-6
pruning-eligible list, changing 10-21
server mode, configuring 11-9
statistics 11-15
support for 1-6
Token Ring support 11-4
transparent mode, configuring 11-12
using 11-1
version, guidelines 11-8
Version 1 11-4
Version 2
configuration guidelines 11-8
disabling 11-13
enabling 11-13
overview 11-4
W
weighted tail drop
wizards 1-2
WTD
described 27-12
setting thresholds
egress queue-sets 27-69
ingress queues 27-65
support for 1-7
X
Xmodem protocol 29-2