Software Guide
Page 24
...configure port security on Ethernet, Fast Ethernet, and Gigabit Ethernet ports. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure the Simple Network Management Protocol (SNMP) on the switch. Configuring SNMP Describes how to check connectivity using ping, Telnet, and IP traceroute. Configuring SPAN and RSPAN Describes how to configure VLANs and private VLANs on the switch. Configuring VLANs Describes how to configure the Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. Configuring...
...configure port security on Ethernet, Fast Ethernet, and Gigabit Ethernet ports. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure the Simple Network Management Protocol (SNMP) on the switch. Configuring SNMP Describes how to check connectivity using ping, Telnet, and IP traceroute. Configuring SPAN and RSPAN Describes how to configure VLANs and private VLANs on the switch. Configuring VLANs Describes how to configure the Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. Configuring...
Software Guide
Page 36
... access the switch CLI through a Telnet session. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise LAN switches are multi-module systems. Commands you enter from the CLI might apply to the entire system or to monitor the switch. If the switch is already booted, press Enter to the switch and that the terminal is on page 2-3. You configure the switch using the tip command on , power up the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
... access the switch CLI through a Telnet session. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise LAN switches are multi-module systems. Commands you enter from the CLI might apply to the entire system or to monitor the switch. If the switch is already booted, press Enter to the switch and that the terminal is on page 2-3. You configure the switch using the tip command on , power up the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
Software Guide
Page 37
... login or user mode) • Privileged (also called enable mode) Both modes are password protected. To access the switch CLI from a remote host using Telnet, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 Using the appropriate application or command on configuring passwords and controlling access to change the configuration. unix_host% telnet Catalyst_1 Trying 172.16.10.10... Cisco Systems Console Enter password: After you successfully connect to the switch...
... login or user mode) • Privileged (also called enable mode) Both modes are password protected. To access the switch CLI from a remote host using Telnet, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 Using the appropriate application or command on configuring passwords and controlling access to change the configuration. unix_host% telnet Catalyst_1 Trying 172.16.10.10... Cisco Systems Console Enter password: After you successfully connect to the switch...
Software Guide
Page 38
..., enter the normal-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> exit Session Disconnected... To enter and exit privileged command mode, follow these steps: Step 1 Step 2 Step 3 Connect to a command displays a list of arguments or inappropriate arguments. Command usage, the help or ? To see the "Accessing the Switch CLI" section on...
..., enter the normal-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> exit Session Disconnected... To enter and exit privileged command mode, follow these steps: Step 1 Step 2 Step 3 Connect to a command displays a list of arguments or inappropriate arguments. Command usage, the help or ? To see the "Accessing the Switch CLI" section on...
Software Guide
Page 52
... attach Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-8 78-15486-01 If you will lose the console port connection. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to -point SLIP connections between the switch and an IP host. Verify the SLIP interface configuration. me1 sc0 sc0 me1 Configuring the SLIP (sl0) Interface on the Console Port Use the SLIP (sl0) interface for point-to restore the console port connection...
... attach Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-8 78-15486-01 If you will lose the console port connection. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to -point SLIP connections between the switch and an IP host. Verify the SLIP interface configuration. me1 sc0 sc0 me1 Configuring the SLIP (sl0) Interface on the Console Port Use the SLIP (sl0) interface for point-to restore the console port connection...
Software Guide
Page 54
... Timezone set to '', offset from DHCP Server 172.20.25.254 Console> (enable) show interface address, subnet mask, and broadcast address are set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 The switch broadcasts DHCP and RARP requests only when the switch boots up. Command set interface sc0 dhcp renew set correctly. Release the lease on a DHCP-assigned IP address. For DHCP, confirm that the sc0 interface IP show interface sl0...
... Timezone set to '', offset from DHCP Server 172.20.25.254 Console> (enable) show interface address, subnet mask, and broadcast address are set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 The switch broadcasts DHCP and RARP requests only when the switch boots up. Command set interface sc0 dhcp renew set correctly. Release the lease on a DHCP-assigned IP address. For DHCP, confirm that the sc0 interface IP show interface sl0...
Software Guide
Page 78
... LACP to off. No other mode may be used by IGMP multicast filtering, you must set the EtherChannel mode for ports in a trunking EtherChannel. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-4 78-15486-01 If the allowed range of VLANs is not the same for a port list, the ports do not form an EtherChannel even when set to the auto or desirable mode with the set differently on the ports. • Cisco...
... LACP to off. No other mode may be used by IGMP multicast filtering, you must set the EtherChannel mode for ports in a trunking EtherChannel. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-4 78-15486-01 If the allowed range of VLANs is not the same for a port list, the ports do not form an EtherChannel even when set to the auto or desirable mode with the set differently on the ports. • Cisco...
Software Guide
Page 260
... Command Specify the IP address for ports 2/1. Console> (enable) show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 If you must configure VMPS on module 2 to VMPS table as backup domain server. Console> (enable) set vmps server...
... Command Specify the IP address for ports 2/1. Console> (enable) show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 If you must configure VMPS on module 2 to VMPS table as backup domain server. Console> (enable) set vmps server...
Software Guide
Page 285
... describe how multicasting works on the Catalyst enterprise LAN switches. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 GMRP is forwarded only to ports that are associated with IP multicast hosts. A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that IP multicast traffic is...
... describe how multicasting works on the Catalyst enterprise LAN switches. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 GMRP is forwarded only to ports that are associated with IP multicast hosts. A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that IP multicast traffic is...
Software Guide
Page 300
... mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-00-11-22-33-44 2/6-12 Static multicast entry added to CAM table. Console> (enable) set cam static 01-11-22-33-44-55 2/6-12 Static multicast entry added to CAM table. Console> (enable) show multicast router CGMP enabled IGMP disabled Port --------- 2/1 2/2 3/1 * Vlan 99 255 1 Total Number of Entries = 4 '*' - Command set multicast router mod_num/port_num show multicast group [mac_addr] [vlan_id] This example shows how to configure multicast groups manually...
... mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-00-11-22-33-44 2/6-12 Static multicast entry added to CAM table. Console> (enable) set cam static 01-11-22-33-44-55 2/6-12 Static multicast entry added to CAM table. Console> (enable) show multicast router CGMP enabled IGMP disabled Port --------- 2/1 2/2 3/1 * Vlan 99 255 1 Total Number of Entries = 4 '*' - Command set multicast router mod_num/port_num show multicast group [mac_addr] [vlan_id] This example shows how to configure multicast groups manually...
Software Guide
Page 301
... administrator associates these tasks in privileged mode: Task Disable a multicast group entry from the CAM table: Console> (enable) clear cam 01-11-22-33-44-55 1 CAM entry cleared. Command clear cam mac_addr [vlan] This example shows how to configure IP multicast group profiles consisting of one of IP multicast addresses. Command clear multicast router mod_num/port_num clear multicast router all manually configured multicast router ports. Chapter 15 Configuring Multicast Services Filtering IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11...
... administrator associates these tasks in privileged mode: Task Disable a multicast group entry from the CAM table: Console> (enable) clear cam 01-11-22-33-44-55 1 CAM entry cleared. Command clear cam mac_addr [vlan] This example shows how to configure IP multicast group profiles consisting of one of IP multicast addresses. Command clear multicast router mod_num/port_num clear multicast router all manually configured multicast router ports. Chapter 15 Configuring Multicast Services Filtering IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11...
Software Guide
Page 378
...Console> (enable) Specifying and Displaying an Interface Alias You can be up to clear IP addresses that are associated with access numbers from the CLI Chapter 24 Configuring SNMP Console> (enable) set snmp access-list 2 172.20.60.7 Access number 2 has been updated with new IP Address 172.20.60.7 Console> (enable) set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Console> (enable) Console> (enable) clear snmp access-list 2 172.20.60.8 Access number...
...Console> (enable) Specifying and Displaying an Interface Alias You can be up to clear IP addresses that are associated with access numbers from the CLI Chapter 24 Configuring SNMP Console> (enable) set snmp access-list 2 172.20.60.7 Access number 2 has been updated with new IP Address 172.20.60.7 Console> (enable) set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Console> (enable) Console> (enable) clear snmp access-list 2 172.20.60.8 Access number...
Software Guide
Page 382
... Command Set the SNMP-Server EngineID set snmp engineid engineid name for a group with a certain security model in the target address table. set snmp view [-hex] {viewname} {subtree} [mask] [included | excluded] [volatile | nonvolatile] Set the access rights for the local SNMP engine. For detailed information on page 24-17). set snmp access [-hex] {groupname} {security-model v3} {noauthentication | authentication | privacy} [read -write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
... Command Set the SNMP-Server EngineID set snmp engineid engineid name for a group with a certain security model in the target address table. set snmp view [-hex] {viewname} {subtree} [mask] [included | excluded] [volatile | nonvolatile] Set the access rights for the local SNMP engine. For detailed information on page 24-17). set snmp access [-hex] {groupname} {security-model v3} {noauthentication | authentication | privacy} [read -write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
Software Guide
Page 423
... Catalyst 4500 series switches: • By default, the power supplies in a Catalyst 4500 series switch are set to redundant mode. • The two power supplies must be the same type. Caution Do not use the 1400 W DC power supply with different types or wattages, the switch uses only one power supply is not the mathematical sum of the maximum available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... Catalyst 4500 series switches: • By default, the power supplies in a Catalyst 4500 series switch are set to redundant mode. • The two power supplies must be the same type. Caution Do not use the 1400 W DC power supply with different types or wattages, the switch uses only one power supply is not the mathematical sum of the maximum available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 446
... CLI and SNMP with one or more other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 When local authentication is reached. setting the lockout time to zero (0) disables login authentication. The switch closes any subsequent accesses and captures the user ID and the IP address of the other authentication methods at the console, the console does not allow you can enable...
... CLI and SNMP with one or more other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 When local authentication is reached. setting the lockout time to zero (0) disables login authentication. The switch closes any subsequent accesses and captures the user ID and the IP address of the other authentication methods at the console, the console does not allow you can enable...
Software Guide
Page 457
... reset the password after installing software release 5.4 or a later release to 30 characters, and use any printable ASCII characters, including a space. Enter your old password (press set in privileged mode: Task Command Set the login password for privileged mode. Chapter 30 Configuring Switch Access Using AAA Configuring Authentication Setting the Login Password The login password controls access to the privileged mode CLI. Console> (enable) Setting the Enable Password The enable password controls access to the user mode CLI. Note Passwords that are set password Return...
... reset the password after installing software release 5.4 or a later release to 30 characters, and use any printable ASCII characters, including a space. Enter your old password (press set in privileged mode: Task Command Set the login password for privileged mode. Chapter 30 Configuring Switch Access Using AAA Configuring Authentication Setting the Login Password The login password controls access to the privileged mode CLI. Console> (enable) Setting the Enable Password The enable password controls access to the user mode CLI. Note Passwords that are set password Return...
Software Guide
Page 459
Enter the reset system command to reboot the switch. The enable password is null for 30 seconds when you are connected to the console port. To create a local user account on the switch. Console> (enable) show localusers This example shows how to create a local user account and password, set the privilege level, and verify the configuration: Console> (enable) set enablepass command, as appropriate. You cannot recover the password if you are connected to the console port. The login password is null...
Enter the reset system command to reboot the switch. The enable password is null for 30 seconds when you are connected to the console port. To create a local user account on the switch. Console> (enable) show localusers This example shows how to create a local user account and password, set the privilege level, and verify the configuration: Console> (enable) set enablepass command, as appropriate. You cannot recover the password if you are connected to the console port. The login password is null...
Software Guide
Page 480
...Disabling Credentials Forwarding To disable the credentials forwarding configuration, perform this task in privileged mode: Task Command Disable the credentials forwarding configuration. To configure clients to forward user credentials as they connect to other network services: Console> (enable) set kerberos clients mandatory Kerberos clients set to None Kerberos config key: Kerberos SRVTAB Entries Srvtab Entry 1:host/aspen-niners.cisco.edu@CISCO.EDU 0 933974942 1 1 8 00?91:107:423=:;9 Console> (enable) This example shows how to configure the switch so that network service. Command set...
...Disabling Credentials Forwarding To disable the credentials forwarding configuration, perform this task in privileged mode: Task Command Disable the credentials forwarding configuration. To configure clients to forward user credentials as they connect to other network services: Console> (enable) set kerberos clients mandatory Kerberos clients set to None Kerberos config key: Kerberos SRVTAB Entries Srvtab Entry 1:host/aspen-niners.cisco.edu@CISCO.EDU 0 933974942 1 1 8 00?91:107:423=:;9 Console> (enable) This example shows how to configure the switch so that network service. Command set...
Software Guide
Page 527
... file 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-3 Presto processor with System Software Images Downloading System Software Images to check the version of the downloaded image (filename). cat4000.6-1-1.bin Flash device [bootflash]? Console> (enable) reset system This command will reset the system. Reset the switch using the set boot system flash bootflash:cat4000.6-1-1.bin prepend BOOT variable = bootflash:cat4000.6-1-1.bin,1;bootflash:cat4000.4-1-2.bin,1; For examples that the new image boots...
... file 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-3 Presto processor with System Software Images Downloading System Software Images to check the version of the downloaded image (filename). cat4000.6-1-1.bin Flash device [bootflash]? Console> (enable) reset system This command will reset the system. Reset the switch using the set boot system flash bootflash:cat4000.6-1-1.bin prepend BOOT variable = bootflash:cat4000.6-1-1.bin,1;bootflash:cat4000.4-1-2.bin,1; For examples that the new image boots...
Software Guide
Page 531
... successfully. Console> (enable) reset system This command will reset the system. Name of file to copy to copy from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Do you want to the switch through Telnet, your Telnet session disconnects. When the switch reboots, enter the show version 1 Mod Port Model Serial # Versions 1 2 WS-X5530 007451586 Hw : 1.3 Fw : 3.1.2 Fw1: 3.1(2) Sw : 4.1(2) Console> (enable) copy rcp flash IP address or name of remote host []? 172...
... successfully. Console> (enable) reset system This command will reset the system. Name of file to copy to copy from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Do you want to the switch through Telnet, your Telnet session disconnects. When the switch reboots, enter the show version 1 Mod Port Model Serial # Versions 1 2 WS-X5530 007451586 Hw : 1.3 Fw : 3.1.2 Fw1: 3.1(2) Sw : 4.1(2) Console> (enable) copy rcp flash IP address or name of remote host []? 172...