Software Guide
Page 2
... ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are service..., StrataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are the property of Cisco Systems, Inc.; and certain other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003...
... ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are service..., StrataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are the property of Cisco Systems, Inc.; and certain other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003...
Software Guide
Page 19
...31-8 Configuring 802.1x Authentication on the Switch 31-8 Enabling 802.1x Globally 31-8 Disabling 802.1x Globally 31-8 Enabling and Initializing 802.1x Authentication for Individual Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts 31-11 Disabling Multiple ... the Back-End Authenticator-to-Host Frame-Retransmission Number 31-14 Resetting the 802.1x Configuration Parameters to the Default Values 31-15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xix
...31-8 Configuring 802.1x Authentication on the Switch 31-8 Enabling 802.1x Globally 31-8 Disabling 802.1x Globally 31-8 Enabling and Initializing 802.1x Authentication for Individual Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts 31-11 Disabling Multiple ... the Back-End Authenticator-to-Host Frame-Retransmission Number 31-14 Resetting the 802.1x Configuration Parameters to the Default Values 31-15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xix
Software Guide
Page 43
...manually from Flash memory or the network interface (me1). Example of a Catalyst 4003 Bootup Display This example shows the bootup display of startup. The system will now begin autobooting. rommon 1 > The system will autoboot in TempFs Board type is WS... 24: . 32: . 40: . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-9 Power-on -self-test for Module 1: WS-X4012 Status: (. = Pass, F = Fail) processor: . nvram: . Enter the ? switch port 10: . The system enters ROM monitor mode if the nonvolatile RAM...
...manually from Flash memory or the network interface (me1). Example of a Catalyst 4003 Bootup Display This example shows the bootup display of startup. The system will now begin autobooting. rommon 1 > The system will autoboot in TempFs Board type is WS... 24: . 32: . 40: . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-9 Power-on -self-test for Module 1: WS-X4012 Status: (. = Pass, F = Fail) processor: . nvram: . Enter the ? switch port 10: . The system enters ROM monitor mode if the nonvolatile RAM...
Software Guide
Page 47
... broadcast requests on the sc0 interface. The address is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to 10 seconds after all the supported options that are specified in the DHCPDISCOVER message. Understanding DHCP In software...Static route NTP servers IP address lease time Option overload Client-identifier TFTP server name 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-3 If the me1 interface is configured and the sc0 interface is configured down ...
... broadcast requests on the sc0 interface. The address is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to 10 seconds after all the supported options that are specified in the DHCPDISCOVER message. Understanding DHCP In software...Static route NTP servers IP address lease time Option overload Client-identifier TFTP server name 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-3 If the me1 interface is configured and the sc0 interface is configured down ...
Software Guide
Page 53
...Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-9 Escape character is necessary only if using the manual allocation method.) show interface sl0: flags=51 slip 10.1.1.1 dest 10.1.1.2 sc0: flags=63 vlan 522 inet 172.20.52.38 netmask 255.255.255.240 broadcast 172.20.52.7 me1: flags=62 inet 10.1.1.100 netmask 255.255.255.0 broadcast 10....1.1.255 Console> (enable) slip attach Console Port now running SLIP. Cisco Systems, Inc. Chapter 3 Configuring the Switch IP Address and Default Gateway...
...Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-9 Escape character is necessary only if using the manual allocation method.) show interface sl0: flags=51 slip 10.1.1.1 dest 10.1.1.2 sc0: flags=63 vlan 522 inet 172.20.52.38 netmask 255.255.255.240 broadcast 172.20.52.7 me1: flags=62 inet 10.1.1.100 netmask 255.255.255.0 broadcast 10....1.1.255 Console> (enable) slip attach Console Port now running SLIP. Cisco Systems, Inc. Chapter 3 Configuring the Switch IP Address and Default Gateway...
Software Guide
Page 54
... and other options (such as backup server. Release the lease on a DHCP-assigned IP address. set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 show interface sl0: flags=51 slip 0.0.0.0 dest 0.0.0.0 sc0: flags=63 vlan 1 ...set to '', offset from UTC is 7 hours 58 minutes Timezone set to '', offset from UTC is necessary only with the manual or automatic allocation methods.) Set the sc0 interface IP address to DNS server table as the default gateway address) are using ...
... and other options (such as backup server. Release the lease on a DHCP-assigned IP address. set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 show interface sl0: flags=51 slip 0.0.0.0 dest 0.0.0.0 sc0: flags=63 vlan 1 ...set to '', offset from UTC is 7 hours 58 minutes Timezone set to '', offset from UTC is necessary only with the manual or automatic allocation methods.) Set the sc0 interface IP address to DNS server table as the default gateway address) are using ...
Software Guide
Page 63
... enabled when it has been enabled in NVRAM but disabled at runtime. Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7 If you specify a reason of all, all the errdisabled ports are... enabled for that is shown as errdisable. With the new timeout enhancement, you have an effect on the reason value that particular port to disable; You can manually...
... enabled when it has been enabled in NVRAM but disabled at runtime. Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7 If you specify a reason of all, all the errdisabled ports are... enabled for that is shown as errdisable. With the new timeout enhancement, you have an effect on the reason value that particular port to disable; You can manually...
Software Guide
Page 77
... get the port to join spanning tree, either set the duplex to full or set back to full duplex. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-3 Normal LACP behavior is reenabled automatically when the link is generated). both PAgP and LACP. the ...When all ports in an EtherChannel. With LACP, when all ports in an EtherChannel use the show spantree command. you have to be configured manually, with PAgP on one channel group at the same time. • Ports with LACP, use the same protocol; To determine if a ...
... get the port to join spanning tree, either set the duplex to full or set back to full duplex. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-3 Normal LACP behavior is reenabled automatically when the link is generated). both PAgP and LACP. the ...When all ports in an EtherChannel. With LACP, when all ports in an EtherChannel use the show spantree command. you have to be configured manually, with PAgP on one channel group at the same time. • Ports with LACP, use the same protocol; To determine if a ...
Software Guide
Page 80
...Use the show channel group command to which the EtherChannel belongs. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-6 78-15486-01 You can ...6-9 • Removing an EtherChannel Bundle, page 6-9 • Displaying EtherChannel Configuration Information, page 6-10 • Displaying EtherChannel Traffic Statistics, page 6-11 • Displaying EtherChannel PAgP Statistics, page 6-...not saved in NVRAM. You can assign an administrative group number manually or let the system software assign the next available administrative group ...
...Use the show channel group command to which the EtherChannel belongs. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-6 78-15486-01 You can ...6-9 • Removing an EtherChannel Bundle, page 6-9 • Displaying EtherChannel Configuration Information, page 6-10 • Displaying EtherChannel Traffic Statistics, page 6-11 • Displaying EtherChannel PAgP Statistics, page 6-...not saved in NVRAM. You can assign an administrative group number manually or let the system software assign the next available administrative group ...
Software Guide
Page 81
...one is not already assigned to forwarding mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-7 To create an EtherChannel port... 835 Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS-C4000 Console> (enable) Defining an EtherChannel Administrative Group You can ...{on . When you are configuring. The admin_group can define EtherChannel administrative groups manually to identify groups of ports that is defined automatically. Command show port channel...
...one is not already assigned to forwarding mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-7 To create an EtherChannel port... 835 Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS-C4000 Console> (enable) Defining an EtherChannel Administrative Group You can ...{on . When you are configuring. The admin_group can define EtherChannel administrative groups manually to identify groups of ports that is defined automatically. Command show port channel...
Software Guide
Page 90
... EtherChannel Step 4 After the EtherChannel bundle is connected to another port group in on mode. If you may manually turn on page 6-5. If you need to channel without LACP. To start automatic EtherChannel configuration with LACP, you... from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 If you are using LACP. Switch_A> (enable) show port channel Port Status Channel Channel Neighbor Neighbor mode status device port 2/1 connected on channel WS-C4003 JAB023806LN( 3/1 2/2...
... EtherChannel Step 4 After the EtherChannel bundle is connected to another port group in on mode. If you may manually turn on page 6-5. If you need to channel without LACP. To start automatic EtherChannel configuration with LACP, you... from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 If you are using LACP. Switch_A> (enable) show port channel Port Status Channel Channel Neighbor Neighbor mode status device port 2/1 connected on channel WS-C4003 JAB023806LN( 3/1 2/2...
Software Guide
Page 91
...). Port physical characteristics, such as data rate, duplex capability, and point-to administrative key values. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-17 there is also used during negotiation with other ports by the hardware (eight ports...LACP (continued) Mode passive (Default) active Description LACP mode that places a port into an active negotiating state, in a manually configured channel using LACP active mode and the remaining four ports in which the port responds to aggregate all the ports that ...
...). Port physical characteristics, such as data rate, duplex capability, and point-to administrative key values. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-17 there is also used during negotiation with other ports by the hardware (eight ports...LACP (continued) Mode passive (Default) active Description LACP mode that places a port into an active negotiating state, in a manually configured channel using LACP active mode and the remaining four ports in which the port responds to aggregate all the ports that ...
Software Guide
Page 100
...switch. • The shortest distance to the root switch is calculated for each switch is used to be the root switch • The cost of the switch that are selected. Table 7-1 shows the default port cost values that the transmitting switch believes to transmit data. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches...Default Port Cost Mode" section on bandwidth. A MAC frame conveying a BPDU sends the switch group address to calculate the port cost unless you can also manually assign port costs between 1-65535. The short method uses a 16-bit format that is...
...switch. • The shortest distance to the root switch is calculated for each switch is used to be the root switch • The cost of the switch that are selected. Table 7-1 shows the default port cost values that the transmitting switch believes to transmit data. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches...Default Port Cost Mode" section on bandwidth. A MAC frame conveying a BPDU sends the switch group address to calculate the port cost unless you can also manually assign port costs between 1-65535. The short method uses a 16-bit format that is...
Software Guide
Page 101
... Default Port Cost Values Using the Long Method Port Speed ≤ 100 kbps 1 Mbps 10 Mbps 100 Mbps 1 Gbps 10 Gbps Recommended Value 200000000 20000000 2000000 200000 20000 2000 Recommended Range 20000000... removed link is in a switched network due to the forwarding state, it can also manually assign port costs between 1-200,000,000. When a switch port transitions directly from links... of these states: • Blocking 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-5 They must wait for obtaining default 32-...
... Default Port Cost Values Using the Long Method Port Speed ≤ 100 kbps 1 Mbps 10 Mbps 100 Mbps 1 Gbps 10 Gbps Recommended Value 200000000 20000000 2000000 200000 20000 2000 Recommended Range 20000000... removed link is in a switched network due to the forwarding state, it can also manually assign port costs between 1-200,000,000. When a switch port transitions directly from links... of these states: • Blocking 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-5 They must wait for obtaining default 32-...
Software Guide
Page 114
...to 16 instances; The root identifier and root cost are the same. - Note You must set and update the revision number manually, because it does not auto-increment each time a change is made to block the ports of all the pseudobridge ports. Common... - Because the message age increases by an instance ID that increments each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Pseudobridges differ from the pseudobridge ports may follow different paths within the MST regions...
...to 16 instances; The root identifier and root cost are the same. - Note You must set and update the revision number manually, because it does not auto-increment each time a change is made to block the ports of all the pseudobridge ports. Common... - Because the message age increases by an instance ID that increments each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Pseudobridges differ from the pseudobridge ports may follow different paths within the MST regions...
Software Guide
Page 115
...region. • An MST bridge that have the same MST configuration are redundantly connected, all the bridges inside the region must configure each byte manually. If two MST regions are referred to a LAN, the designated bridge of MST ports do the following : • An MST bridge that ...an MST bridge. The value is on the LAN can take up any port role except a backup port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 All the bridges on the boundary if it is the instance number to a VLAN. If you...
...region. • An MST bridge that have the same MST configuration are redundantly connected, all the bridges inside the region must configure each byte manually. If two MST regions are referred to a LAN, the designated bridge of MST ports do the following : • An MST bridge that ...an MST bridge. The value is on the LAN can take up any port role except a backup port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 All the bridges on the boundary if it is the instance number to a VLAN. If you...
Software Guide
Page 133
...the VLAN. If two or more than one MISTP instance. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-37 To map a VLAN to an MISTP instance, perform this task in privileged mode: Step 1 Step...• You can only map Ethernet VLANs to MISTP instances. • At least one VLAN in the instance must manually remove the incorrect mapping(s) from the root switch. To clear up the conflict, you wish to an MISTP instance. • You cannot map a VLAN to more ...
...the VLAN. If two or more than one MISTP instance. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-37 To map a VLAN to an MISTP instance, perform this task in privileged mode: Step 1 Step...• You can only map Ethernet VLANs to MISTP instances. • At least one VLAN in the instance must manually remove the incorrect mapping(s) from the root switch. To clear up the conflict, you wish to an MISTP instance. • You cannot map a VLAN to more ...
Software Guide
Page 158
...secure response to all PortFast-configured interfaces. Note When enabled on the switch, spanning tree applies the BPDU guard feature to invalid configurations because the administrator must manually put the interface back in service. By default, spanning tree sends... PortFast-configured interface receives a BPDU, an invalid configuration exists, such as a switch, you enable PortFast on a per-switch basis; BDPU filtering is enabled. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-2 78-15486-01 Because PortFast can be enabled ...
...secure response to all PortFast-configured interfaces. Note When enabled on the switch, spanning tree applies the BPDU guard feature to invalid configurations because the administrator must manually put the interface back in service. By default, spanning tree sends... PortFast-configured interface receives a BPDU, an invalid configuration exists, such as a switch, you enable PortFast on a per-switch basis; BDPU filtering is enabled. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-2 78-15486-01 Because PortFast can be enabled ...
Software Guide
Page 192
...specific VTP instance. 9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Figure 9-5 shows a VTP domain that cannot automatically be partitioned. In VTP version 3, you manually designate it as the new... primary server. This behavior of VTP version 3 protects the domain from accepting a conflicting configuration after the insertion of a misconfigured switch. Understanding How VTP Version 3 Works Figure 9-4 VTP Version 3: Partitioned VTP Domain Domain Cisco Primary Server X Domain Cisco...
...specific VTP instance. 9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Figure 9-5 shows a VTP domain that cannot automatically be partitioned. In VTP version 3, you manually designate it as the new... primary server. This behavior of VTP version 3 protects the domain from accepting a conflicting configuration after the insertion of a misconfigured switch. Understanding How VTP Version 3 Works Figure 9-4 VTP Version 3: Partitioned VTP Domain Domain Cisco Primary Server X Domain Cisco...
Software Guide
Page 208
... • VLAN state (active or suspended) • Maximum transmission unit (MTU) for each media type. 10-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 When you create a VLAN in a particular IP subnet belong to another... assign the interface to VLANs using this method, it is assigned manually on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst 4000 Accounting VLAN Floor 3 Floor 2 43990 Floor 1 VLANs are...
... • VLAN state (active or suspended) • Maximum transmission unit (MTU) for each media type. 10-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 When you create a VLAN in a particular IP subnet belong to another... assign the interface to VLANs using this method, it is assigned manually on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst 4000 Accounting VLAN Floor 3 Floor 2 43990 Floor 1 VLANs are...