Data Sheet
Page 17
...to scale the switch to 400 Mpps throughput. Additionally, Cisco IOS Software provides operational ease of use by offering a single image and configuration file to be extended to learn a new command-line interface (CLI) or management system. Supervisor Engine ...2-MSFC2; Supervisor Engine 2-MSFC2; CEF256 and Classic interface modules Cisco IOS Software and Cisco Catalyst Operating System Software Shared Features All Cisco Catalyst 6500 Series supervisor engines, including...
...to scale the switch to 400 Mpps throughput. Additionally, Cisco IOS Software provides operational ease of use by offering a single image and configuration file to be extended to learn a new command-line interface (CLI) or management system. Supervisor Engine ...2-MSFC2; Supervisor Engine 2-MSFC2; CEF256 and Classic interface modules Cisco IOS Software and Cisco Catalyst Operating System Software Shared Features All Cisco Catalyst 6500 Series supervisor engines, including...
Data Sheet
Page 27
... software. Table 10 Catalyst 6500 Series Specifications (Continued) Specification Number Description Cisco VLAN Director Software CISCO-VLAN-Membership-MIB CISCO-VTP-MIB Cisco Workgroup MIB SPAN and Remote SPAN (RSPAN) Hot Standby Routing Protocol (HSRP) HC-RMON HTML... address security/lockdown Network Address Translation (NAT) Network login (including DHCP/RADIUS integration) RADIUS accounting RADIUS per-command authentication Secure Copy Protocol (secure file transfer) Technical Support Services Whether your network investment. All contents are Copyright ...
... software. Table 10 Catalyst 6500 Series Specifications (Continued) Specification Number Description Cisco VLAN Director Software CISCO-VLAN-Membership-MIB CISCO-VTP-MIB Cisco Workgroup MIB SPAN and Remote SPAN (RSPAN) Hot Standby Routing Protocol (HSRP) HC-RMON HTML... address security/lockdown Network Address Translation (NAT) Network login (including DHCP/RADIUS integration) RADIUS accounting RADIUS per-command authentication Secure Copy Protocol (secure file transfer) Technical Support Services Whether your network investment. All contents are Copyright ...
User Guide
Page 9
... interface Data output interface Control input interface OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 9 Enter the show crypto eli command to the active supervisor engine. 2. Orange Indicates one of these physical interfaces ...test failed. If no redundant supervisor engine is installed and there is in Table 2. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs (continued) LED Color/State Description VPN Services Module STATUS Green All ...
... interface Data output interface Control input interface OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 9 Enter the show crypto eli command to the active supervisor engine. 2. Orange Indicates one of these physical interfaces ...test failed. If no redundant supervisor engine is installed and there is in Table 2. Catalyst 6509/Cisco 7606/Cisco 7609 Cryptographic Module Table 1 Catalyst 6509 Switch and Cisco 7606 and 7609 Router LEDs (continued) LED Color/State Description VPN Services Module STATUS Green All ...
User Guide
Page 11
...connection establishment, or packet direction. • Status functions-Views the router configuration, routing tables, and active sessions, uses the Get commands to the Cisco IOS executive program. Sets keys and algorithms to be used for example, locks the terminal, adjusts flow control). • Directory ... role to permit- The user services consist of the following : • Configuring the router-Defines network interfaces and settings, creates command aliases, sets the protocols the switch or router will support, enables interfaces and network services, sets system date and time, and...
...connection establishment, or packet direction. • Status functions-Views the router configuration, routing tables, and active sessions, uses the Get commands to the Cisco IOS executive program. Sets keys and algorithms to be used for example, locks the terminal, adjusts flow control). • Directory ... role to permit- The user services consist of the following : • Configuring the router-Defines network interfaces and settings, creates command aliases, sets the protocols the switch or router will support, enables interfaces and network services, sets system date and time, and...
User Guide
Page 21
... numbers to verify that the module has not been tampered with. The crypto key zeroize command NVRAM zeroizes this key. Any attempt to zeroize this key. (plaintext) OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with self-adhesive backing. Cryptographic Key Management The switch or the router securely...
... numbers to verify that the module has not been tampered with. The crypto key zeroize command NVRAM zeroizes this key. Any attempt to zeroize this key. (plaintext) OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with self-adhesive backing. Cryptographic Key Management The switch or the router securely...
User Guide
Page 22
...because it . It is zeroized when the SSL connection is created. NVRAM This key is zeroized when the command no CRL exists. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 22 OL-6334-01 These keys are expired either when the certificate... the key. A function uses this key in the above key. The IPsec encryption key. The no crypto ca trust label command invalidates the key and it is embedded in Cisco vendor-ID generation. It is a public key. NVRAM (plaintext) The SSL session key. This NVRAM key is a public key...
...because it . It is zeroized when the SSL connection is created. NVRAM This key is zeroized when the command no CRL exists. Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with VPN Services Module Certification Note 22 OL-6334-01 These keys are expired either when the certificate... the key. A function uses this key in the above key. The IPsec encryption key. The no crypto ca trust label command invalidates the key and it is embedded in Cisco vendor-ID generation. It is a public key. NVRAM (plaintext) The SSL session key. This NVRAM key is a public key...
User Guide
Page 23
...after the DRAM termination of the user role. The key is identical to the DRAM peer. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a new password. (plaintext) 28 CO Enable Password The plaintext password of the cryptographic officer NVRAM Password (CO) ... (CO) NVRAM role. DRAM (plaintext) Table 4 lists the services accessing the CSPs, the type of the RADIUS (plaintext) shared-secret set command. The password retrieved from the local database (on the switch or router). This key does not need to the NVRAM peer. DRAM (plaintext) ...
...after the DRAM termination of the user role. The key is identical to the DRAM peer. OL-6334-01 Catalyst 6509 Switch, Cisco 7606 Router, and Cisco 7609 Router with a new password. (plaintext) 28 CO Enable Password The plaintext password of the cryptographic officer NVRAM Password (CO) ... (CO) NVRAM role. DRAM (plaintext) Table 4 lists the services accessing the CSPs, the type of the RADIUS (plaintext) shared-secret set command. The password retrieved from the local database (on the switch or router). This key does not need to the NVRAM peer. DRAM (plaintext) ...
User Guide
Page 27
...use RADIUS or TACACS+ for the crypto officer role. If the module is optional. Although the Cisco IOS implementation of IKE allows a number of operation. From the configure terminal command line, the crypto officer enters the following syntax: config-register 0x0101 • The crypto officer must...• The crypto officer shall only assign users to a privilege level 1 (the default). • The crypto officer shall not assign a command to any Cisco IOS image onto the switch or router, this will put the switch or router into a non-FIPS mode of algorithms, only the following algorithms...
...use RADIUS or TACACS+ for the crypto officer role. If the module is optional. Although the Cisco IOS implementation of IKE allows a number of operation. From the configure terminal command line, the crypto officer enters the following syntax: config-register 0x0101 • The crypto officer must...• The crypto officer shall only assign users to a privilege level 1 (the default). • The crypto officer shall not assign a command to any Cisco IOS image onto the switch or router, this will put the switch or router into a non-FIPS mode of algorithms, only the following algorithms...
Upgrade Guide
Page 23
... Related Documentation For additional information on Catalyst 6500 series switches and command-line interface (CLI) commands, refer to the following publications: • Regulatory Compliance and Safety Information for the Catalyst 6500 Series Switches • Regulatory Compliance and Safety Information for the Cisco 7600 Series Routers • Catalyst 6500 Series Switch Installation Guide •...
... Related Documentation For additional information on Catalyst 6500 series switches and command-line interface (CLI) commands, refer to the following publications: • Regulatory Compliance and Safety Information for the Catalyst 6500 Series Switches • Regulatory Compliance and Safety Information for the Cisco 7600 Series Routers • Catalyst 6500 Series Switch Installation Guide •...
User Guide
Page 12
... Internet Router: • Site Preparation and Safety Guide • Cisco 7600 Internet Router Quick Software Configuration Guide • Cisco 7600 Internet Router Software Configuration Guide • Cisco 7600 Internet Router Command Reference • Cisco 7603 and 7606 Internet Router Installation Guide • Cisco 7609 Internet Router Installation Guide • Cisco 7600 Internet Router Module Installation Guide •...
... Internet Router: • Site Preparation and Safety Guide • Cisco 7600 Internet Router Quick Software Configuration Guide • Cisco 7600 Internet Router Software Configuration Guide • Cisco 7600 Internet Router Command Reference • Cisco 7603 and 7606 Internet Router Installation Guide • Cisco 7609 Internet Router Installation Guide • Cisco 7600 Internet Router Module Installation Guide •...
User Guide
Page 13
... Convention boldface font italic font [] { x | y | z } [ x | y | z ] string screen font boldface screen font italic screen font ^ Description Commands and keywords are in brackets and separated by vertical bars. Optional alternative keywords are optional. Terminal sessions and information the system displays are grouped in... a screen display means hold down the Control key while you press the D key. Cisco 6500/7600 Series Manager User Guide xiii Arguments for example, the key combination ^D in braces and separated by vertical bars....
... Convention boldface font italic font [] { x | y | z } [ x | y | z ] string screen font boldface screen font italic screen font ^ Description Commands and keywords are in brackets and separated by vertical bars. Optional alternative keywords are optional. Terminal sessions and information the system displays are grouped in... a screen display means hold down the Control key while you press the D key. Cisco 6500/7600 Series Manager User Guide xiii Arguments for example, the key combination ^D in braces and separated by vertical bars....
User Guide
Page 19
...provides standard element-management functionality, such as fault, configuration, accounting, performance, and security (FCAPS). Cisco 6500/7600 Series Manager Software Overview The Cisco 6500/7600 Series Manager (C65/76M) software adds custom windows and modeling behavior to the standard ... one or more Catalyst 6000 family switches or Cisco 7600 series Internet Routers using Cisco Element Management Framework (CEMF), version 3.2. Product Overview CH A P T E R 1 This chapter consists of the Cisco IOS or Catalyst OS required commands. Multiple Element Managers can be installed onto a...
...provides standard element-management functionality, such as fault, configuration, accounting, performance, and security (FCAPS). Cisco 6500/7600 Series Manager Software Overview The Cisco 6500/7600 Series Manager (C65/76M) software adds custom windows and modeling behavior to the standard ... one or more Catalyst 6000 family switches or Cisco 7600 series Internet Routers using Cisco Element Management Framework (CEMF), version 3.2. Product Overview CH A P T E R 1 This chapter consists of the Cisco IOS or Catalyst OS required commands. Multiple Element Managers can be installed onto a...
User Guide
Page 31
... series Internet Router • Power supplies-The source of power for the Catalyst 6000 family switch or the Cisco 7600 series Internet Router • Supervisor Engine modules-Contain the route and switch processors • Ethernet interfaces-Ports on Ethernet ..., EtherChannels, and routing protocols. • Network element-Represents the entire Catalyst 6000 family multilayer switch or Cisco 7600 series Internet Router managed through a single SNMP agent and IOS command-line interface. Chapter 2 Basic Concepts C65/76M Objects and Interfaces C65/76M Objects and Interfaces The C65/...
... series Internet Router • Power supplies-The source of power for the Catalyst 6000 family switch or the Cisco 7600 series Internet Router • Supervisor Engine modules-Contain the route and switch processors • Ethernet interfaces-Ports on Ethernet ..., EtherChannels, and routing protocols. • Network element-Represents the entire Catalyst 6000 family multilayer switch or Cisco 7600 series Internet Router managed through a single SNMP agent and IOS command-line interface. Chapter 2 Basic Concepts C65/76M Objects and Interfaces C65/76M Objects and Interfaces The C65/...
User Guide
Page 34
... of the C65/76M components is a logical container representing the entire Catalyst 6000 family multilayer switch or Cisco 7600 series Internet Router managed through the supervisor and/or MSFC SNMP agents and Catalyst OS/IOS command-line interface. This class acts as follows: Network Element Chassis Power Supplies Supervisor Modules Ethernet Interfaces... OSM POS Sub-interfaces Content Switching Modules Software EtherChannels Syslog EIGRP BGP OSPF VTP VLAN STP IS-IS ACL NDE Loopback QoS QoS Policy Map Cisco 6500/7600 Series Manager User Guide 2-6
... of the C65/76M components is a logical container representing the entire Catalyst 6000 family multilayer switch or Cisco 7600 series Internet Router managed through the supervisor and/or MSFC SNMP agents and Catalyst OS/IOS command-line interface. This class acts as follows: Network Element Chassis Power Supplies Supervisor Modules Ethernet Interfaces... OSM POS Sub-interfaces Content Switching Modules Software EtherChannels Syslog EIGRP BGP OSPF VTP VLAN STP IS-IS ACL NDE Loopback QoS QoS Policy Map Cisco 6500/7600 Series Manager User Guide 2-6
User Guide
Page 40
... user session, do the following: Step 1 From the command line on the terminal window, type the following: Cisco EMF_ROOT/bin/Cisco EMF session Note Replace Cisco EMF_ROOT with the root directory in which Cisco EMF is installed (for using Cisco EMF. Figure 3-1 Login Window Cisco 6500/7600 Series Manager User Guide 3-2 Note Before you can be running...
... user session, do the following: Step 1 From the command line on the terminal window, type the following: Cisco EMF_ROOT/bin/Cisco EMF session Note Replace Cisco EMF_ROOT with the root directory in which Cisco EMF is installed (for using Cisco EMF. Figure 3-1 Login Window Cisco 6500/7600 Series Manager User Guide 3-2 Note Before you can be running...
User Guide
Page 65
The Views window, shown in this window and then click the Forward button. Cisco 6500/7600 Series Manager User Guide 4-15 The value entered in this text box is not in plain text. Enter the details for this text ... of "ERROR" because those values are retrieved using a Telnet connection. However, some of the attributes will have the value of the Network Element using IOS commands. The value entered in Figure 4-12, may be deployed and commissioned without the IOS Telnet or enable passwords being set. This is a drop-down menu...
The Views window, shown in this window and then click the Forward button. Cisco 6500/7600 Series Manager User Guide 4-15 The value entered in this text box is not in plain text. Enter the details for this text ... of "ERROR" because those values are retrieved using a Telnet connection. However, some of the attributes will have the value of the Network Element using IOS commands. The value entered in Figure 4-12, may be deployed and commissioned without the IOS Telnet or enable passwords being set. This is a drop-down menu...
User Guide
Page 119
C-Temperature in the Performance tab, the running configuration of the switch is modified to add the following command to determine the contents and configuration of the Chassis object. • normal-Presence polling of the object. • performance-Attributes are collected periodically for trending ... following values: • decommissioned-CEMF is not actively monitoring the object attributes. • discovery-CEMF is trying to each interface: rmon collection stats owner monitor Cisco 6500/7600 Series Manager User Guide 5-5
C-Temperature in the Performance tab, the running configuration of the switch is modified to add the following command to determine the contents and configuration of the Chassis object. • normal-Presence polling of the object. • performance-Attributes are collected periodically for trending ... following values: • decommissioned-CEMF is not actively monitoring the object attributes. • discovery-CEMF is trying to each interface: rmon collection stats owner monitor Cisco 6500/7600 Series Manager User Guide 5-5
User Guide
Page 145
...This attribute is only editable if it is read-only. • MTU-Displays the maximum transmission unit (MTU) size in octets. In this command. • Bandwidth-Overwrites default bandwidth in tens of the largest packet which this is an informational parameter used only to communicate the current bandwidth...Any input value greater than 9216 bytes will be taken as 1500 bytes. This is set to which can choose one of the interface. Cisco 6500/7600 Series Manager User Guide 5-31 disagree (read -only attribute. Note The Delay attribute is the size of the C6576M Ethernet Interface...
...This attribute is only editable if it is read-only. • MTU-Displays the maximum transmission unit (MTU) size in octets. In this command. • Bandwidth-Overwrites default bandwidth in tens of the largest packet which this is an informational parameter used only to communicate the current bandwidth...Any input value greater than 9216 bytes will be taken as 1500 bytes. This is set to which can choose one of the interface. Cisco 6500/7600 Series Manager User Guide 5-31 disagree (read -only attribute. Note The Delay attribute is the size of the C6576M Ethernet Interface...
User Guide
Page 181
... monitored. As a result, data displayed in a decommissioned state. • Decommission-This button is performed manually by executing the IOS config mode command power cycle module slot_number. Chapter 5 Physical Object Dialog Boxes C6576M SLB Dialog Box Note The configured SLB mode does not take effect until the ...Content Switching Module is not guaranteed to be current. Cisco 6500/7600 Series Manager User Guide 5-67 This can only be done if the object is in the configuration window is reloaded. ...
... monitored. As a result, data displayed in a decommissioned state. • Decommission-This button is performed manually by executing the IOS config mode command power cycle module slot_number. Chapter 5 Physical Object Dialog Boxes C6576M SLB Dialog Box Note The configured SLB mode does not take effect until the ...Content Switching Module is not guaranteed to be current. Cisco 6500/7600 Series Manager User Guide 5-67 This can only be done if the object is in the configuration window is reloaded. ...
User Guide
Page 195
...protocols (such as IGRP and EIGRP); you cannot adjust the actual bandwidth of an interface with this command. • Delay-Specifies the delay in tens of an interface with this command. • Input Queue Length-Input queue length in packets. • Output Queue Length-Output ... the interface, specified in the IP address. • Clear IP Address - Enabled bits indicate the network addressing bits in octets. Cisco 6500/7600 Series Manager User Guide 5-81 Note The Bandwidth attribute is an informational parameter used only to communicate the current bandwidth to ...
...protocols (such as IGRP and EIGRP); you cannot adjust the actual bandwidth of an interface with this command. • Delay-Specifies the delay in tens of an interface with this command. • Input Queue Length-Input queue length in packets. • Output Queue Length-Output ... the interface, specified in the IP address. • Clear IP Address - Enabled bits indicate the network addressing bits in octets. Cisco 6500/7600 Series Manager User Guide 5-81 Note The Bandwidth attribute is an informational parameter used only to communicate the current bandwidth to ...