Download this chapter

Configuration Examples

Table of Contents

Comprehensive Configuration Examples

Sample Catalyst 8540 CSR with ISL and VLAN
Sample Catalyst 8540 CSR with HSRP

Comprehensive Configuration Examples

This chapter provides real-world examples of Layer 3 switching configurations.

---

Note The IP, IPX, and network addresses in these examples are generic addresses, so you must replace them with the appropriate addresses for your network.

---

Sample Catalyst 8540 CSR with ISL and VLAN

This sample configuration focuses on the Inter-Switch Link (ISL) and virtual LANs (VLANs). The Cisco proprietary Inter-Switch Link allows any Fast Ethernet port to be configured as a trunk. The Spanning-Tree Protocol detects and breaks loops on all the VLANs carried across the trunk. The Gigabit Ethernet interface information applies to a two-port Gigabit Ethernet interface for a Catalyst 8540 campus switch router. This sample configuration includes port snooping configuration information.

version 12.0
no service pad
no service password-encryption
!
hostname Cat8540_NY
!
ip multicast-routing
ip dvmrp route-limit 7000
ipx routing 0090.2fff.8800
!
!
interface FastEthernet0/0/0
no ip address
no ip directed-broadcast
no keepalive

!
interface FastEthernet0/0/0.128
ip address 172.68.16.10 255.255.255.0
ip helper-address 172.68.16.15
no ip redirects
no ip directed-broadcast
ip pim dense-mode
ip multicast ttl-threshold 1
encapsulation isl 128
ipx encapsulation ARPA
ipx network 96A44FFF

!
interface FastEthernet0/0/0.199
ip address 172.68.17.15 255.255.255.0
ip helper-address 172.68.16.16
ip helper-address 172.68.16.17
ip helper-address 172.68.16.18
no ip redirects
no ip directed-broadcast
ip pim dense-mode
ip multicast ttl-threshold 1
encapsulation isl 199

!
interface FastEthernet0/0/0.201
ip address 172.68.18.10 255.255.255.0
ip helper-address 172.68.16.16
ip helper-address 172.68.16.17
ip helper-address 172.68.16.18
no ip redirects
no ip directed-broadcast
ip pim dense-mode
ip multicast ttl-threshold 1
encapsulation isl 201

!
interface FastEthernet0/0/1
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/2
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/3
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/4
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/5
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/6
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/7
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/8
ip address 172.68.19.10 255.255.255.0
ip helper-address 172.68.16.16
ip helper-address 172.68.16.17
ip helper-address 172.68.16.18
no ip redirects
no ip directed-broadcast
ip pim dense-mode
ip multicast ttl-threshold 1
ip sdr listen
no keepalive
ipx network 95B12FFF

!
interface FastEthernet0/0/9
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/10
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/11
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/12
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/13
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/14
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface FastEthernet0/0/15
no ip address
no ip directed-broadcast
no keepalive
shutdown

!
interface GigabitEthernet1/0/0 snoop interface FastEthernet2/0/3 direction both
 snoop interface FastEthernet2/0/4 direction both
 snoop interface FastEthernet2/0/5 direction both
ip address 172.68.21.10 255.255.255.0
ip helper-address 172.68.16.19
ip helper-address 172.68.16.20
ip helper-address 172.68.16.21

!
interface gigabitEthernet1/0/0.233
ip address 172.68.20.10 255.255.255.0
ip helper-address 172.68.16.16
ip helper-address 172.68.16.17
ip helper-address 172.68.16.18
no ip directed-broadcast
no keepalive
encapsulation dot1Q 233

!
interface Ethernet0
ip address 172.68.20.10 255.255.255.0
no ip directed-broadcast

!
router igrp 87
network 100.70.0.0
network 101.75.0.0

!
ip http server
!
line con 0
line aux 0
line vty 0 4
login

!
end

Sample Catalyst 8540 CSR with HSRP

This sample configuration for a Catalyst 8540 campus switch router focuses on the Hot Standby Router Protocol (HSRP), which provides high network availability. HSRP makes network topology changes transparent to the host. The active router is monitored by other standby routers, and as soon as an active router becomes unavailable, the standby router takes its place.

Helper addresses facilitate connectivity by forwarding certain broadcasts to a target server. In this example, an IP Helper address identifies the Dynamic Host Configuration Protocol (DHCP) server IP address. This configuration also includes configuration for IP multicast, Distance Vector Multicast Routing Protocol (DVRMP), tunneling, and Protocol Independent Multicast (PIM) in sparse mode.

version 11.3
service slave-coredump
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname mozart
!
aaa new-model
aaa authentication login admin tacacs+ enable
enable password 7 105D100A0618
!
no ip rcmd domain-lookup
ip rcmd rcp-enable
ip rcmd rsh-enable
ip rcmd remote-host root 172.69.1.162 root enable
ip rcmd remote-host root 172.69.2.81 root enable
ip rcmd remote-host root 172.69.6.66 root enable
ip rcmd remote-host root 172.69.43.19 root enable
ip rcmd remote-username root
ip domain-name CISCO.COM
ip name-server 172.69.2.132
ip name-server 198.92.30.32
ip multicast-routing
ip dvmrp route-limit 7000
clock timezone PST -8
clock summer-time PDT recurring
!
interface FastEthernet1/0/0
ip address 172.69.95.197 255.255.255.192
no ip directed-broadcast
no keepalive

!
interface FastEthernet1/0/1
description Bldg 1 Network A
ip address 172.69.93.1 255.255.255.192
ip helper-address 172.69.2.74
ip helper-address 172.69.2.123
ip helper-address 172.69.30.31
ip helper-address 172.69.2.121
ip helper-address 172.71.84.140
ip helper-address 172.69.67.35
no ip redirects
no ip directed-broadcast
ip pim sparse-mode
ntp broadcast key 10
standby priority 200
standby preempt
standby ip 172.69.93.6

!
interface FastEthernet1/0/2
ip address 172.69.90.1 255.255.255.0
 ip helper-address 172.69.2.74
 ip helper-address 172.69.2.123
 ip helper-address 172.69.30.31
 ip helper-address 172.69.2.121
 ip helper-address 172.71.84.140
 ip helper-address 172.69.67.35
 no ip redirects
 no ip directed-broadcast
 ip pim sparse-mode
 ntp broadcast key 10
 standby priority 200
 standby preempt
 standby ip 172.69.90.6
 standby track FastEthernet1/0/3 150

!
interface FastEthernet1/0/3
ip address 172.69.91.1 255.255.255.0
ip helper-address 172.69.2.74
ip helper-address 172.69.2.123
ip helper-address 172.69.30.31
ip helper-address 172.69.2.121
ip helper-address 172.71.84.140
ip helper-address 172.69.67.35
no ip redirects
no ip directed-broadcast
ip pim sparse-mode
ntp broadcast key 10
standby priority 200
standby preempt
standby ip 172.69.91.6

!
 interface FastEthernet1/0/4
description Building 2 Network A
ip address 172.69.88.1 255.255.255.192
ip helper-address 172.69.2.74
ip helper-address 172.69.2.123
ip helper-address 172.69.30.31
ip helper-address 172.69.2.121
ip helper-address 172.71.84.140
ip helper-address 172.69.67.35
no ip redirects
no ip directed-broadcast
ip pim sparse-mode
ntp broadcast key 10
standby priority 200
standby preempt
standby ip 172.69.88.6

!
interface FastEthernet1/0/5
description Building 3 Network A
ip address 172.69.89.1 255.255.255.192
ip helper-address 172.69.2.74
ip helper-address 172.69.2.123
ip helper-address 172.69.30.31
ip helper-address 172.69.2.121
ip helper-address 172.71.84.140
ip helper-address 172.69.67.35
no ip redirects
no ip directed-broadcast
ip pim sparse-mode
ntp broadcast key 10
standby priority 200
standby preempt
standby ip 172.69.89.6

!
interface FastEthernet1/0/6
no ip address
no ip directed-broadcast
no keepalive

!
interface FastEthernet1/0/7
no ip address
no ip directed-broadcast
no keepalive

!
interface FastEthernet1/0/8
no ip address
no ip directed-broadcast
no keepalive

!
interface FastEthernet1/0/9
no ip address
no ip directed-broadcast

!
interface FastEthernet1/0/10
no ip address
no ip directed-broadcast

!
 interface FastEthernet1/0/11
no ip address
no ip directed-broadcast

!
interface FastEthernet1/0/12
no ip address
no ip directed-broadcast

!
interface FastEthernet1/0/13
no ip address
no ip directed-broadcast

!
interface FastEthernet1/0/14
no ip address
no ip directed-broadcast

!
 interface FastEthernet1/0/15
no ip address
no ip directed-broadcast

! 
interface Ethernet0
no ip address
no ip directed-broadcast
shutdown

!
router eigrp 109
network 172.69.0.0
no auto-summary
!
ip forward-protocol udp sunrpc
ip pim accept-rp auto-rp
ip pim accept-rp 172.69.10.13
logging 172.69.43.19
snmp-server community 8540 RO 98
snmp-server community Cisco RW 99
snmp-server host 172.69.43.19 traps public
tacacs-server host 172.69.2.210
tacacs-server host 172.69.35.87
tacacs-server timeout 15
!
line con 0
password 7 071B245F5A
transport input none
line aux 0
password 7 071B245F5A

line vty 0
exec-timeout 0 0
login authentication admin

line vty 1
exec-timeout 0 0
login authentication admin
length 57

line vty 2 4
exec-timeout 0 0
login authentication admin

!
exception dump 172.69.43.19
exception memory minimum 1000000
ntp authentication-key 1 md5 06030C3242410A 7
ntp authentication-key 10 md5 15360E1F2F3E2434 7
ntp authenticate
ntp trusted-key 1
ntp update-calendar
ntp peer 172.69.95.196 key 1
ntp server 172.69.95.194 key 1
ntp server 172.69.95.193 key 1
end