Software Configuration Guide
Page 7
... Standby Groups 7-12 Automatic Recovery of Cluster Configuration 7-14 IP Addresses 7-14 Host Names 7-15 Passwords 7-15 SNMP Community Strings 7-15 TACACS+ and RADIUS 7-16 Access Modes in CMS 7-16 Management VLAN 7-16 LRE Profiles 7-17 Availability of Switch-Specific Features in Switch Clusters 7-17 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide vii
... Standby Groups 7-12 Automatic Recovery of Cluster Configuration 7-14 IP Addresses 7-14 Host Names 7-15 Passwords 7-15 SNMP Community Strings 7-15 TACACS+ and RADIUS 7-16 Access Modes in CMS 7-16 Management VLAN 7-16 LRE Profiles 7-17 Availability of Switch-Specific Features in Switch Clusters 7-17 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide vii
Software Configuration Guide
Page 9
...Switch-Based Authentication 9-1 Preventing Unauthorized Access to Your Switch 9-1 Protecting Access to Privileged EXEC Commands 9-2 Default Password and Privilege Level Configuration 9-2 Setting or Changing a Static Enable Password 9-3 Protecting Enable and Enable Secret Passwords with Encryption 9-4 Disabling Password Recovery 9-5 Setting a Telnet Password for a Terminal Line 9-6 Configuring Username and Password... 9-17 Controlling Switch Access with RADIUS 9-18 Understanding RADIUS 9-18 RADIUS Operation 9-19 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide ix
...Switch-Based Authentication 9-1 Preventing Unauthorized Access to Your Switch 9-1 Protecting Access to Privileged EXEC Commands 9-2 Default Password and Privilege Level Configuration 9-2 Setting or Changing a Static Enable Password 9-3 Protecting Enable and Enable Secret Passwords with Encryption 9-4 Disabling Password Recovery 9-5 Setting a Telnet Password for a Terminal Line 9-6 Configuring Username and Password... 9-17 Controlling Switch Access with RADIUS 9-18 Understanding RADIUS 9-18 RADIUS Operation 9-19 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide ix
Software Configuration Guide
Page 25
... Software 32-2 Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches 32-2 Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches 32-4 Password Recovery with Password Recovery Enabled 32-5 Procedure with Password Recovery Disabled 32-6 Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches 32-8 Recovering from a Command Switch Failure 32-10 Replacing a Failed Command Switch with a Cluster Member 32-11 Replacing a Failed...
... Software 32-2 Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches 32-2 Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches 32-4 Password Recovery with Password Recovery Enabled 32-5 Procedure with Password Recovery Disabled 32-6 Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches 32-8 Recovering from a Command Switch Failure 32-10 Replacing a Failed Command Switch with a Cluster Member 32-11 Replacing a Failed...
Software Configuration Guide
Page 149
... and managing clusters, refer to Manage Switch Clusters You can configure member switches from the CLI by first logging into member-switch 3 from the command-switch CLI: switch# rcommand 3 If you lose connectivity with a member switch or if a command switch fails, see the "Disabling Password Recovery" section on page 9-5. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 7-23 Using...
... and managing clusters, refer to Manage Switch Clusters You can configure member switches from the CLI by first logging into member-switch 3 from the command-switch CLI: switch# rcommand 3 If you lose connectivity with a member switch or if a command switch fails, see the "Disabling Password Recovery" section on page 9-5. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 7-23 Using...
Software Configuration Guide
Page 182
... 15 (privileged EXEC level). Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-2 78-11380-10 Note For complete syntax and usage information for the commands used in the configuration file. Table 9-1 Default Password and Privilege Levels Feature Enable password and privilege level Enable secret password and privilege level Line password Default Setting No password is written to the...
... 15 (privileged EXEC level). Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-2 78-11380-10 Note For complete syntax and usage information for the commands used in the configuration file. Table 9-1 Default Password and Privilege Levels Feature Enable password and privilege level Enable secret password and privilege level Line password Default Setting No password is written to the...
Software Configuration Guide
Page 185
...-8. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-5 To disable password encryption, use the no enable password [level level] or no service password-encryption global configuration command. When this functionality. If you enable password encryption, it is available only on the switch. With password recovery disabled, you can recover from Lost or Forgotten Passwords on Catalyst 2955 Switches" section on...
...-8. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-5 To disable password encryption, use the no enable password [level level] or no service password-encryption global configuration command. When this functionality. If you enable password encryption, it is available only on the switch. With password recovery disabled, you can recover from Lost or Forgotten Passwords on Catalyst 2955 Switches" section on...
Software Configuration Guide
Page 186
... the configuration by any user. To re-enable password recovery, use . The 0 and 15 mean that is defined. By default, no parity. Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-6 78-11380-10 If you neglected to configure this password during the setup program, you have set the switch to boot manually by using the boot manual...
... the configuration by any user. To re-enable password recovery, use . The 0 and 15 mean that is defined. By default, no parity. Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 9-6 78-11380-10 If you neglected to configure this password during the setup program, you have set the switch to boot manually by using the boot manual...
Software Configuration Guide
Page 617
... 32-2 • Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches, page 32-2 • Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches, page 32-4 • Recovering from Lost or Forgotten Passwords on your non-Long-Reach Ethernet (LRE) Catalyst 2950 switch. Depending on the nature of these sections: • Using Recovery Procedures, page 32-1 • Preventing Autonegotiation...
... 32-2 • Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches, page 32-2 • Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches, page 32-4 • Recovering from Lost or Forgotten Passwords on your non-Long-Reach Ethernet (LRE) Catalyst 2950 switch. Depending on the nature of these sections: • Using Recovery Procedures, page 32-1 • Preventing Autonegotiation...
Software Configuration Guide
Page 618
... cord. For more information, refer to the switch. Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches Follow these steps to recover from corrupted software: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Connect a PC with terminal emulation software to 9600 baud. Using Recovery Procedures Chapter 32 Troubleshooting Recovering from a corrupt or wrong image file...
... cord. For more information, refer to the switch. Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches Follow these steps to recover from corrupted software: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Connect a PC with terminal emulation software to 9600 baud. Using Recovery Procedures Chapter 32 Troubleshooting Recovering from a corrupt or wrong image file...
Software Configuration Guide
Page 619
...switch# rename flash:config.text.old flash:config.text Step 13 Copy the configuration file into memory: switch...helper files: switch# load_helper Step 8 Display the contents of the switch console port....to the switch. This file contains the password definition. Chapter 32 Troubleshooting Using Recovery Procedures Step...password. Several lines of information about the software appear, as do instructions: The system has been interrupted prior to that of flash memory: switch# dir flash: Step 9 The switch...Step 5 Initialize the flash file system: switch# flash_init Step 6 Step 7 If ...
...switch# rename flash:config.text.old flash:config.text Step 13 Copy the configuration file into memory: switch...helper files: switch# load_helper Step 8 Display the contents of the switch console port....to the switch. This file contains the password definition. Chapter 32 Troubleshooting Using Recovery Procedures Step...password. Several lines of information about the software appear, as do instructions: The system has been interrupted prior to that of flash memory: switch# dir flash: Step 9 The switch...Step 5 Initialize the flash file system: switch# flash_init Step 6 Step 7 If ...
Software Configuration Guide
Page 620
... 32-5, and follow the steps. 32-4 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 The following commands will initialize the flash file system go to the "Password Recovery with physical access to the switch can recover from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches An end user with Password Recovery Enabled" section on and by interrupting the...
... 32-5, and follow the steps. 32-4 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 The following commands will initialize the flash file system go to the "Password Recovery with physical access to the switch can recover from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches An end user with Password Recovery Enabled" section on and by interrupting the...
Software Configuration Guide
Page 621
... dialog? [yes/no]: N At the switch prompt, enter privileged EXEC mode: Switch> enable Rename the configuration file to the "Procedure with Password Recovery Enabled If the password-recovery mechanism is currently disabled. go to its original name: Switch# rename flash:config.text.old flash:config.text 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-5 Change the...
... dialog? [yes/no]: N At the switch prompt, enter privileged EXEC mode: Switch> enable Rename the configuration file to the "Procedure with Password Recovery Enabled If the password-recovery mechanism is currently disabled. go to its original name: Switch# rename flash:config.text.old flash:config.text 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-5 Change the...
Software Configuration Guide
Page 622
... switch and VLAN configuration files. 32-6 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 To re-enable the interface, enter the interface vlan vlan-id global configuration command, and specify the VLAN ID of all existing configurations. Step 10 Press Return in a shutdown state. You can start with Password Recovery Disabled If the password-recovery...
... switch and VLAN configuration files. 32-6 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 To re-enable the interface, enter the interface vlan vlan-id global configuration command, and specify the VLAN ID of all existing configurations. Step 10 Press Return in a shutdown state. You can start with Password Recovery Disabled If the password-recovery...
Software Configuration Guide
Page 623
...cannot access the boot loader prompt, and you can start the setup program. To continue with password recovery, enter N at the prompt: Continue with the configuration dialog? [yes/no ), the ...password: Switch (config)# enable secret password The secret password can be from 1 to 25 alphanumeric characters, can reset the password. Boot the system: Switch# boot You are deleted. Y Load any helper files: Switch# load_helper Display the contents of flash memory: switch# dir flash: The switch file system appears in the startup configuration. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
...cannot access the boot loader prompt, and you can start the setup program. To continue with password recovery, enter N at the prompt: Continue with the configuration dialog? [yes/no ), the ...password: Switch (config)# enable secret password The secret password can be from 1 to 25 alphanumeric characters, can reset the password. Boot the system: Switch# boot You are deleted. Y Load any helper files: Switch# load_helper Display the contents of flash memory: switch# dir flash: The switch file system appears in the startup configuration. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
Software Configuration Guide
Page 624
...Passwords on Catalyst 2955 Switches The Catalyst 2955 switch boot loader uses break-key detection to the console port. On a PC running Windows 2000, Ctrl-Break is the break key. Step 1 Connect a terminal or PC with terminal emulation software to stop the automatic boot sequence for the password recovery...more information, refer to the switch. Connect the power cord to the switch, and apply power to the switch hardware installation guide. With the switch in a shutdown state. After the switch performs POST, the switch begins the autoboot process. Cisco TAC has tabulated break keys...
...Passwords on Catalyst 2955 Switches The Catalyst 2955 switch boot loader uses break-key detection to the console port. On a PC running Windows 2000, Ctrl-Break is the break key. Step 1 Connect a terminal or PC with terminal emulation software to stop the automatic boot sequence for the password recovery...more information, refer to the switch. Connect the power cord to the switch, and apply power to the switch hardware installation guide. With the switch in a shutdown state. After the switch performs POST, the switch begins the autoboot process. Cisco TAC has tabulated break keys...
Software Configuration Guide
Page 625
...with the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-9 On the Catalyst 2955C-12 and Catalyst 2955S-12 switches, the port 13 LED blinks green, and the port 14 LED ...Load any helper files: switch# load_helper Step 8 Display the contents of flash memory as in this example: switch# dir flash: Directory of the switch console port. Destination filename [running -config Source filename [config.text]? Chapter 32 Troubleshooting Using Recovery Procedures Step 4 When the...
...with the configuration dialog? [yes/no]: N Step 11 At the switch prompt, change the password. 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 32-9 On the Catalyst 2955C-12 and Catalyst 2955S-12 switches, the port 13 LED blinks green, and the port 14 LED ...Load any helper files: switch# load_helper Step 8 Display the contents of flash memory as in this example: switch# dir flash: Directory of the switch console port. Destination filename [running -config Source filename [config.text]? Chapter 32 Troubleshooting Using Recovery Procedures Step 4 When the...
Software Configuration Guide
Page 626
... a member switch or another switch For information on command-capable switches, refer to the release notes. 32-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 For more information, see Chapter 7, "Clustering Switches." Using Recovery Procedures Step 14 Enter global configuration mode: switch# configure terminal Step 15 Change the password: switch(config)# enable secret or switch(config)# enable password Step...
... a member switch or another switch For information on command-capable switches, refer to the release notes. 32-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 For more information, see Chapter 7, "Clustering Switches." Using Recovery Procedures Step 14 Enter global configuration mode: switch# configure terminal Step 15 Change the password: switch(config)# enable secret or switch(config)# enable password Step...
Software Configuration Guide
Page 627
... At the switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the failed command switch, and duplicate its connections to configure the switch IP information. Switch(config)# no ]: 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration...about using Telnet. Insert the member switch in place of the failed command switch. System Configuration Dialog --- Chapter 32 Troubleshooting Using Recovery Procedures Replacing a Failed Command Switch with a Cluster Member To replace a failed command switch with a command-capable member in...
... At the switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the failed command switch, and duplicate its connections to configure the switch IP information. Switch(config)# no ]: 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch Software Configuration...about using Telnet. Insert the member switch in place of the failed command switch. System Configuration Dialog --- Chapter 32 Troubleshooting Using Recovery Procedures Replacing a Failed Command Switch with a Cluster Member To replace a failed command switch with a command-capable member in...
Software Configuration Guide
Page 628
...browser, and enter the IP address of the failed command switch. 32-12 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 Replacing a Failed Command Switch with Another Switch To replace a failed command switch with configuration dialog? [yes/no]: y or Configuring ...any switch. For details about using Telnet. You can be the command switch: Continue with a switch that the addresses are correct. At the switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the new command switch. on the new command switch. When...
...browser, and enter the IP address of the failed command switch. 32-12 Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide 78-11380-10 Replacing a Failed Command Switch with Another Switch To replace a failed command switch with configuration dialog? [yes/no]: y or Configuring ...any switch. For details about using Telnet. You can be the command switch: Continue with a switch that the addresses are correct. At the switch prompt, enter privileged EXEC mode: Switch> enable Switch# Enter the password of the new command switch. on the new command switch. When...
Software Configuration Guide
Page 683
... guidelines for creating and using B-9 invalid combinations when copying B-5 limiting TFTP server access 28-14 obtaining with DHCP 5-8 password recovery disable considerations 9-5 specifying the filename 5-12 system contact and location information 28-14 types and location B-10 uploading preparing ...Cisco 585 LRE CPE 13-12 Ethernet links, described 13-2 hotel network configuration example 1-15, 1-18 LRE links 13-2 CPE link, transitioning state 13-7 CPE toggle configuring 13-22 described 13-7 disabling 13-22 enabling 13-22 crashinfo file 32-23 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...
... guidelines for creating and using B-9 invalid combinations when copying B-5 limiting TFTP server access 28-14 obtaining with DHCP 5-8 password recovery disable considerations 9-5 specifying the filename 5-12 system contact and location information 28-14 types and location B-10 uploading preparing ...Cisco 585 LRE CPE 13-12 Ethernet links, described 13-2 hotel network configuration example 1-15, 1-18 LRE links 13-2 CPE link, transitioning state 13-7 CPE toggle configuring 13-22 described 13-7 disabling 13-22 enabling 13-22 crashinfo file 32-23 78-11380-10 Catalyst 2950 and Catalyst 2955 Switch...