Cisco Systems Cat2960-Xr User Manual

Catalyst 2960 Switch Software Configuration Guide

Cisco IOS Release 12.2(25)FX September 2005

Corporate Headquarters

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 526-4100

Customer Order Number: DOC-7816881= Text Part Number: 78-16881-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R)

Catalyst 2960 Switch Software Configuration Guide

Preface xxvii

Audience xxvii

Purpose xxvii

Conventions xxviii

Related Publications xxviii

Obtaining Documentation xxix

Cisco.com xxix Product Documentation DVD xxx Ordering Documentation xxx

Documentation Feedback xxx

Cisco Product Security Overview xxxi

Reporting Security Problems in Cisco Products xxxi

CHAPTER

Obtaining Technical Assistance xxxii

Cisco Technical Support & Documentation Website xxxii Submitting a Service Request xxxii Definitions of Service Request Severity xxxiii

Obtaining Additional Publications and Information xxxiii

1 Overview 1-1

Features 1-1

Ease-of-Use and Ease-of-Deployment Features 1-2 Performance Features 1-3 Management Options 1-3 Manageability Features 1-4 Availability Features 1-5 VLAN Features 1-6 Security Features 1-6 QoS and CoS Features 1-7 Monitoring Features 1-8

Default Settings After Initial Switch Configuration 1-8

78-16881-01

Network Configuration Examples 1-11

Design Concepts for Using the Switch 1-11 Small to Medium-Sized Network Using Catalyst 2960 Switches 1-14 Long-Distance, High-Bandwidth Transport Configuration 1-15

Catalyst 2960 Switch Software Configuration Guide

iii

Contents

Where to Go Next 1-16

CHAPTER

2 Using the Command-Line Interface 2-1

Understanding Command Modes 2-1

Understanding the Help System 2-3

Understanding Abbreviated Commands 2-4

Understanding no and default Forms of Commands 2-4

Understanding CLI Error Messages 2-5

Using Command History 2-5

Changing the Command History Buffer Size 2-5 Recalling Commands 2-6 Disabling the Command History Feature 2-6

Using Editing Features 2-6

Enabling and Disabling Editing Features 2-7 Editing Commands through Keystrokes 2-7 Editing Command Lines that Wrap 2-8

Searching and Filtering Output of show and more Commands 2-9

Accessing the CLI 2-9

Accessing the CLI through a Console Connection or through Telnet 2-10

CHAPTER

3 Assigning the Switch IP Address and Default Gateway 3-1

Understanding the Boot Process 3-1

Assigning Switch Information 3-2

Default Switch Information 3-3 Understanding DHCP-Based Autoconfiguration 3-3

DHCP Client Request Process 3-4

Configuring DHCP-Based Autoconfiguration 3-5

DHCP Server Configuration Guidelines 3-5 Configuring the TFTP Server 3-5 Configuring the DNS 3-6 Configuring the Relay Device 3-6 Obtaining Configuration Files 3-7 Example Configuration 3-8

Manually Assigning IP Information 3-9

Checking and Saving the Running Configuration 3-10

Modifying the Startup Configuration 3-11

Default Boot Configuration 3-12 Automatically Downloading a Configuration File 3-12

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Specifying the Filename to Read and Write the System Configuration 3-12 Booting Manually 3-13 Booting a Specific Software Image 3-13 Controlling Environment Variables 3-14

Scheduling a Reload of the Software Image 3-15

Configuring a Scheduled Reload 3-16 Displaying Scheduled Reload Information 3-17

Contents

CHAPTER

4 Configuring IE2100 CNS Agents 4-1

Understanding IE2100 Series Configuration Registrar Software 4-1

CNS Configuration Service 4-2 CNS Event Service 4-3

NameSpace Mapper 4-3

What You Should Know About ConfigID, DeviceID, and Hostname 4-3

ConfigID 4-3 DeviceID 4-4 Hostname and DeviceID 4-4 Using Hostname, DeviceID, and ConfigID 4-4

Understanding CNS Embedded Agents 4-5

Initial Configuration 4-5 Incremental (Partial) Configuration 4-6 Synchronized Configuration 4-6

Configuring CNS Embedded Agents 4-6

Enabling Automated CNS Configuration 4-6 Enabling the CNS Event Agent 4-8 Enabling the CNS Configuration Agent 4-9

Enabling an Initial Configuration 4-9 Enabling a Partial Configuration 4-12

CHAPTER

78-16881-01

Displaying CNS Configuration 4-13

5 Clustering Switches 5-1

Understanding Switch Clusters 5-1

Clustering Overview 5-1 Cluster Command Switch Characteristics 5-2 Standby Cluster Command Switch Characteristics 5-2 Candidate Switch and Cluster Member Switch Characteristics 5-3

Using the CLI to Manage Switch Clusters 5-3

Catalyst 1900 and Catalyst 2820 CLI Considerations 5-4

Using SNMP to Manage Switch Clusters 5-4

Catalyst 2960 Switch Software Configuration Guide

Contents

CHAPTER

6 Administering the Switch 6-1

Managing the System Time and Date 6-1

Understanding the System Clock 6-2 Understanding Network Time Protocol 6-2 Configuring NTP 6-4

Default NTP Configuration 6-4 Configuring NTP Authentication 6-5 Configuring NTP Associations 6-6 Configuring NTP Broadcast Service 6-7 Configuring NTP Access Restrictions 6-8 Configuring the Source IP Address for NTP Packets 6-10 Displaying the NTP Configuration 6-11

Configuring Time and Date Manually 6-11

Setting the System Clock 6-11 Displaying the Time and Date Configuration 6-12 Configuring the Time Zone 6-12 Configuring Summer Time (Daylight Saving Time) 6-13

Configuring a System Name and Prompt 6-14

Default System Name and Prompt Configuration 6-15 Configuring a System Name 6-15 Understanding DNS 6-15

Default DNS Configuration 6-16 Setting Up DNS 6-16 Displaying the DNS Configuration 6-17

Creating a Banner 6-17

Default Banner Configuration 6-17 Configuring a Message-of-the-Day Login Banner 6-18 Configuring a Login Banner 6-18

Managing the MAC Address Table 6-19

Building the Address Table 6-20 MAC Addresses and VLANs 6-20 Default MAC Address Table Configuration 6-20 Changing the Address Aging Time 6-21 Removing Dynamic Address Entries 6-21 Configuring MAC Address Notification Traps 6-21 Adding and Removing Static Address Entries 6-23 Configuring Unicast MAC Address Filtering 6-24 Displaying Address Table Entries 6-25

Managing the ARP Table 6-26

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Contents

CHAPTER

7 Configuring SDM Templates 7-1

Understanding the SDM Templates 7-1

Configuring the Switch SDM Template 7-2

Default SDM Template 7-2 SDM Template Configuration Guidelines 7-2 Setting the SDM Template 7-2

Displaying the SDM Templates 7-3

8 Configuring Switch-Based Authentication 8-1

Preventing Unauthorized Access to Your Switch 8-1

Protecting Access to Privileged EXEC Commands 8-2

Default Password and Privilege Level Configuration 8-2 Setting or Changing a Static Enable Password 8-3 Protecting Enable and Enable Secret Passwords with Encryption 8-3 Disabling Password Recovery 8-5 Setting a Telnet Password for a Terminal Line 8-6 Configuring Username and Password Pairs 8-7 Configuring Multiple Privilege Levels 8-8

Setting the Privilege Level for a Command 8-8 Changing the Default Privilege Level for Lines 8-9 Logging into and Exiting a Privilege Level 8-10

Controlling Switch Access with TACACS+ 8-10

Understanding TACACS+ 8-10 TACACS+ Operation 8-12 Configuring TACACS+ 8-12

Default TACACS+ Configuration 8-13 Identifying the TACACS+ Server Host and Setting the Authentication Key 8-13 Configuring TACACS+ Login Authentication 8-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 8-16 Starting TACACS+ Accounting 8-17

Displaying the TACACS+ Configuration 8-17

Controlling Switch Access with RADIUS 8-17

Understanding RADIUS 8-18 RADIUS Operation 8-19 Configuring RADIUS 8-20

Default RADIUS Configuration 8-20 Identifying the RADIUS Server Host 8-20 Configuring RADIUS Login Authentication 8-23 Defining AAA Server Groups 8-25

78-16881-01

Catalyst 2960 Switch Software Configuration Guide

vii

Contents

Configuring RADIUS Authorization for User Privileged Access and Network Services 8-27 Starting RADIUS Accounting 8-28 Configuring Settings for All RADIUS Servers 8-29 Configuring the Switch to Use Vendor-Specific RADIUS Attributes 8-29 Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 8-30

Displaying the RADIUS Configuration 8-31

Configuring the Switch for Local Authentication and Authorization 8-32

Configuring the Switch for Secure Shell 8-33

Understanding SSH 8-33

SSH Servers, Integrated Clients, and Supported Versions 8-33 Limitations 8-34

Configuring SSH 8-34

Configuration Guidelines 8-34 Setting Up the Switch to Run SSH 8-35 Configuring the SSH Server 8-36

Displaying the SSH Configuration and Status 8-36

CHAPTER

Configuring the Switch for Secure Socket Layer HTTP 8-37

Understanding Secure HTTP Servers and Clients 8-37

Certificate Authority Trustpoints 8-37 CipherSuites 8-39

Configuring Secure HTTP Servers and Clients 8-39

Default SSL Configuration 8-39 SSL Configuration Guidelines 8-40 Configuring a CA Trustpoint 8-40 Configuring the Secure HTTP Server 8-41 Configuring the Secure HTTP Client 8-42

Displaying Secure HTTP Server and Client Status 8-43

9 Configuring IEEE 802.1x Port-Based Authentication 9-1

Understanding IEEE 802.1x Port-Based Authentication 9-1

Device Roles 9-2 Authentication Initiation and Message Exchange 9-3 Ports in Authorized and Unauthorized States 9-4 IEEE 802.1x Accounting 9-5 IEEE 802.1x Accounting Attribute-Value Pairs 9-5 IEEE 802.1x Host Mode 9-6 Using IEEE 802.1x with Port Security 9-7 Using IEEE 802.1x with Voice VLAN Ports 9-8

viii

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Using IEEE 802.1x with VLAN Assignment 9-8 Using IEEE 802.1x with Guest VLAN 9-10

Configuring IEEE 802.1x Authentication 9-10

Default IEEE 802.1x Configuration 9-11 IEEE 802.1x Configuration Guidelines 9-12 Configuring IEEE 802.1x Authentication 9-12 Configuring the Switch-to-RADIUS-Server Communication 9-14 Configuring Periodic Re-Authentication 9-15 Manually Re-Authenticating a Client Connected to a Port 9-15 Changing the Quiet Period 9-16 Changing the Switch-to-Client Retransmission Time 9-16 Setting the Switch-to-Client Frame-Retransmission Number 9-17 Setting the Re-Authentication Number 9-17 Configuring the Host Mode 9-18 Configuring a Guest VLAN 9-19 Resetting the IEEE 802.1x Configuration to the Default Values 9-20 Configuring IEEE 802.1x Accounting 9-21

Contents

CHAPTER

Displaying IEEE 802.1x Statistics and Status 9-22

10 Configuring Interface Characteristics 10-1

Understanding Interface Types 10-1

Port-Based VLANs 10-2 Switch Ports 10-2

Access Ports 10-2

Trunk Ports 10-3 EtherChannel Port Groups 10-3 Dual-Purpose Uplink Ports 10-4 Connecting Interfaces 10-4

Using Interface Configuration Mode 10-4

Procedures for Configuring Interfaces 10-5 Configuring a Range of Interfaces 10-6 Configuring and Using Interface Range Macros 10-7

Configuring Ethernet Interfaces 10-9

Default Ethernet Interface Configuration 10-9 Configuring Interface Speed and Duplex Mode 10-10

Speed and Duplex Configuration Guidelines 10-11

Setting the Type of a Dual-Purpose Uplink Port 10-11

Setting the Interface Speed and Duplex Parameters 10-13

78-16881-01

Catalyst 2960 Switch Software Configuration Guide

Contents

Configuring IEEE 802.3x Flow Control 10-14 Configuring Auto-MDIX on an Interface 10-15 Adding a Description for an Interface 10-16

Configuring the System MTU 10-16

Monitoring and Maintaining the Interfaces 10-18

Monitoring Interface Status 10-18 Clearing and Resetting Interfaces and Counters 10-19 Shutting Down and Restarting the Interface 10-19

CHAPTER

11 Configuring Smartports Macros 11-1

Understanding Smartports Macros 11-1

Configuring Smartports Macros 11-2

Default Smartports Macro Configuration 11-2 Smartports Macro Configuration Guidelines 11-3 Creating Smartports Macros 11-4 Applying Smartports Macros 11-5 Applying Cisco-Default Smartports Macros 11-6

Displaying Smartports Macros 11-8

12 Configuring VLANs 12-1

Understanding VLANs 12-1

Supported VLANs 12-2 VLAN Port Membership Modes 12-3

Configuring Normal-Range VLANs 12-4

Token Ring VLANs 12-5 Normal-Range VLAN Configuration Guidelines 12-5 VLAN Configuration Mode Options 12-6

VLAN Configuration in config-vlan Mode 12-6

VLAN Configuration in VLAN Database Configuration Mode 12-6 Saving VLAN Configuration 12-6 Default Ethernet VLAN Configuration 12-7 Creating or Modifying an Ethernet VLAN 12-8 Deleting a VLAN 12-9 Assigning Static-Access Ports to a VLAN 12-10

Configuring Extended-Range VLANs 12-11

Default VLAN Configuration 12-11 Extended-Range VLAN Configuration Guidelines 12-12 Creating an Extended-Range VLAN 12-12

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Displaying VLANs 12-13

Configuring VLAN Trunks 12-14

Trunking Overview 12-14

IEEE 802.1Q Configuration Considerations 12-15 Default Layer 2 Ethernet Interface VLAN Configuration 12-16 Configuring an Ethernet Interface as a Trunk Port 12-16

Interaction with Other Features 12-16

Configuring a Trunk Port 12-17

Defining the Allowed VLANs on a Trunk 12-18

Changing the Pruning-Eligible List 12-19

Configuring the Native VLAN for Untagged Traffic 12-19 Configuring Trunk Ports for Load Sharing 12-20

Load Sharing Using STP Port Priorities 12-20

Load Sharing Using STP Path Cost 12-22

Configuring VMPS 12-23

Understanding VMPS 12-24

Dynamic-Access Port VLAN Membership 12-24 Default VMPS Client Configuration 12-25 VMPS Configuration Guidelines 12-25 Configuring the VMPS Client 12-26

Entering the IP Address of the VMPS 12-26

Configuring Dynamic-Access Ports on VMPS Clients 12-26

Reconfirming VLAN Memberships 12-27

Changing the Reconfirmation Interval 12-27

Changing the Retry Count 12-28 Monitoring the VMPS 12-28 Troubleshooting Dynamic-Access Port VLAN Membership 12-29 VMPS Configuration Example 12-29

Contents

CHAPTER

78-16881-01

13 Configuring VTP 13-1

Understanding VTP 13-1

The VTP Domain 13-2 VTP Modes 13-3 VTP Advertisements 13-3 VTP Version 2 13-4 VTP Pruning 13-4

Configuring VTP 13-6

Default VTP Configuration 13-6 VTP Configuration Options 13-7

Catalyst 2960 Switch Software Configuration Guide

Contents

VTP Configuration in Global Configuration Mode 13-7 VTP Configuration in VLAN Database Configuration Mode 13-7

VTP Configuration Guidelines 13-8

Domain Names 13-8 Passwords 13-8 VTP Version 13-8

Configuration Requirements 13-9 Configuring a VTP Server 13-9 Configuring a VTP Client 13-11 Disabling VTP (VTP Transparent Mode) 13-12 Enabling VTP Version 2 13-13 Enabling VTP Pruning 13-14 Adding a VTP Client Switch to a VTP Domain 13-14

Monitoring VTP 13-16

CHAPTER

14 Configuring Voice VLAN 14-1

Understanding Voice VLAN 14-1

Cisco IP Phone Voice Traffic 14-2 Cisco IP Phone Data Traffic 14-2

Configuring Voice VLAN 14-3

Default Voice VLAN Configuration 14-3 Voice VLAN Configuration Guidelines 14-3 Configuring a Port Connected to a Cisco 7960 IP Phone 14-4

Configuring IP Phone Voice Traffic 14-5

Configuring the Priority of Incoming Data Frames 14-6

Displaying Voice VLAN 14-6

15 Configuring STP 15-1

Understanding Spanning-Tree Features 15-1

STP Overview 15-2 Spanning-Tree Topology and BPDUs 15-3 Bridge ID, Switch Priority, and Extended System ID 15-4 Spanning-Tree Interface States 15-4

Blocking State 15-6

Listening State 15-6

Learning State 15-6

Forwarding State 15-6

Disabled State 15-7

xii

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

How a Switch or Port Becomes the Root Switch or Root Port 15-7 Spanning Tree and Redundant Connectivity 15-8 Spanning-Tree Address Management 15-8 Accelerated Aging to Retain Connectivity 15-8 Spanning-Tree Modes and Protocols 15-9 Supported Spanning-Tree Instances 15-9 Spanning-Tree Interoperability and Backward Compatibility 15-10 STP and IEEE 802.1Q Trunks 15-10

Configuring Spanning-Tree Features 15-10

Default Spanning-Tree Configuration 15-11 Spanning-Tree Configuration Guidelines 15-11 Changing the Spanning-Tree Mode. 15-12 Disabling Spanning Tree 15-13 Configuring the Root Switch 15-14 Configuring a Secondary Root Switch 15-15 Configuring Port Priority 15-16 Configuring Path Cost 15-17 Configuring the Switch Priority of a VLAN 15-19 Configuring Spanning-Tree Timers 15-19

Configuring the Hello Time 15-20 Configuring the Forwarding-Delay Time for a VLAN 15-21 Configuring the Maximum-Aging Time for a VLAN 15-21

Contents

CHAPTER

Displaying the Spanning-Tree Status 15-22

16 Configuring MSTP 16-1

Understanding MSTP 16-2

Multiple Spanning-Tree Regions 16-2 IST, CIST, and CST 16-3

Operations Within an MST Region 16-3

Operations Between MST Regions 16-4 Hop Count 16-5 Boundary Ports 16-5 Interoperability with IEEE 802.1D STP 16-5

Understanding RSTP 16-6

Port Roles and the Active Topology 16-6 Rapid Convergence 16-7 Synchronization of Port Roles 16-8

78-16881-01

Catalyst 2960 Switch Software Configuration Guide

xiii

Contents

Bridge Protocol Data Unit Format and Processing 16-9

Processing Superior BPDU Information 16-10 Processing Inferior BPDU Information 16-10

Topology Changes 16-10

Configuring MSTP Features 16-11

Default MSTP Configuration 16-11 MSTP Configuration Guidelines 16-12 Specifying the MST Region Configuration and Enabling MSTP 16-13 Configuring the Root Switch 16-14 Configuring a Secondary Root Switch 16-15 Configuring Port Priority 16-16 Configuring Path Cost 16-17 Configuring the Switch Priority 16-18 Configuring the Hello Time 16-19 Configuring the Forwarding-Delay Time 16-20 Configuring the Maximum-Aging Time 16-20 Configuring the Maximum-Hop Count 16-21 Specifying the Link Type to Ensure Rapid Transitions 16-21 Restarting the Protocol Migration Process 16-22

CHAPTER

Displaying the MST Configuration and Status 16-22

17 Configuring Optional Spanning-Tree Features 17-1

Understanding Optional Spanning-Tree Features 17-1

Understanding Port Fast 17-2 Understanding BPDU Guard 17-3 Understanding BPDU Filtering 17-3 Understanding UplinkFast 17-4 Understanding BackboneFast 17-5 Understanding EtherChannel Guard 17-7 Understanding Root Guard 17-8 Understanding Loop Guard 17-9

Configuring Optional Spanning-Tree Features 17-9

Default Optional Spanning-Tree Configuration 17-9 Optional Spanning-Tree Configuration Guidelines 17-10 Enabling Port Fast 17-10 Enabling BPDU Guard 17-11 Enabling BPDU Filtering 17-12 Enabling UplinkFast for Use with Redundant Links 17-13 Enabling BackboneFast 17-14

xiv

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Enabling EtherChannel Guard 17-14 Enabling Root Guard 17-15 Enabling Loop Guard 17-15

Displaying the Spanning-Tree Status 17-16

Contents

CHAPTER

18 Configuring Flex Links 18-1

Understanding Flex Links 18-1

Configuring Flex Links 18-2

Default Flex Link Configuration 18-2 Flex Link Configuration Guidelines 18-2 Configuring Flex Links 18-3

Monitoring Flex Links 18-3

19 Configuring DHCP Features 19-1

Understanding DHCP Features 19-1

DHCP Server 19-2 DHCP Relay Agent 19-2 DHCP Snooping 19-2 Option-82 Data Insertion 19-3 DHCP Snooping Binding Database 19-5

Configuring DHCP Features 19-6

Default DHCP Configuration 19-7 DHCP Snooping Configuration Guidelines 19-7 Configuring the DHCP Relay Agent 19-8 Enabling DHCP Snooping and Option 82 19-9 Enabling the DHCP Snooping Binding Database Agent 19-10

CHAPTER

78-16881-01

Displaying DHCP Snooping Information 19-11

20 Configuring IGMP Snooping and MVR 20-1

Understanding IGMP Snooping 20-1

IGMP Versions 20-2 Joining a Multicast Group 20-3 Leaving a Multicast Group 20-4 Immediate Leave 20-5 IGMP Configurable-Leave Timer 20-5 IGMP Report Suppression 20-5

Catalyst 2960 Switch Software Configuration Guide

Contents

Configuring IGMP Snooping 20-6

Default IGMP Snooping Configuration 20-6 Enabling or Disabling IGMP Snooping 20-6 Setting the Snooping Method 20-7 Configuring a Multicast Router Port 20-8 Configuring a Host Statically to Join a Group 20-9 Enabling IGMP Immediate Leave 20-9 Configuring the IGMP Leave Timer 20-10 Configuring TCN-Related Commands 20-11

Controlling the Multicast Flooding Time After a TCN Event 20-11 Recovering from Flood Mode 20-12

Disabling Multicast Flooding During a TCN Event 20-12 Configuring the IGMP Snooping Querier 20-13 Disabling IGMP Report Suppression 20-14

Displaying IGMP Snooping Information 20-14

CHAPTER

Understanding Multicast VLAN Registration 20-16

Using MVR in a Multicast Television Application 20-16

Configuring MVR 20-18

Default MVR Configuration 20-18 MVR Configuration Guidelines and Limitations 20-18 Configuring MVR Global Parameters 20-19 Configuring MVR Interfaces 20-20

Displaying MVR Information 20-21

Configuring IGMP Filtering and Throttling 20-22

Default IGMP Filtering and Throttling Configuration 20-23 Configuring IGMP Profiles 20-23 Applying IGMP Profiles 20-24 Setting the Maximum Number of IGMP Groups 20-25 Configuring the IGMP Throttling Action 20-25

Displaying IGMP Filtering and Throttling Configuration 20-27

21 Configuring Port-Based Traffic Control 21-1

Configuring Storm Control 21-1

Understanding Storm Control 21-1 Default Storm Control Configuration 21-3 Configuring Storm Control and Threshold Levels 21-3

xvi

Configuring Protected Ports 21-5

Default Protected Port Configuration 21-5 Protected Port Configuration Guidelines 21-6

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Configuring a Protected Port 21-6

Configuring Port Blocking 21-6

Default Port Blocking Configuration 21-6 Blocking Flooded Traffic on an Interface 21-7

Configuring Port Security 21-7

Understanding Port Security 21-8

Secure MAC Addresses 21-8

Security Violations 21-9 Default Port Security Configuration 21-10 Port Security Configuration Guidelines 21-10 Enabling and Configuring Port Security 21-11 Enabling and Configuring Port Security Aging 21-15

Displaying Port-Based Traffic Control Settings 21-16

Contents

CHAPTER

22 Configuring CDP 22-1

Understanding CDP 22-1

Configuring CDP 22-2

Default CDP Configuration 22-2 Configuring the CDP Characteristics 22-2 Disabling and Enabling CDP 22-3 Disabling and Enabling CDP on an Interface 22-4

Monitoring and Maintaining CDP 22-5

23 Configuring SPAN and RSPAN 23-1

Understanding SPAN and RSPAN 23-1

Local SPAN 23-2 Remote SPAN 23-2 SPAN and RSPAN Concepts and Terminology 23-3

SPAN Sessions 23-3

Monitored Traffic 23-4

Source Ports 23-5

Source VLANs 23-6

VLAN Filtering 23-6

Destination Port 23-6

RSPAN VLAN 23-8 SPAN and RSPAN Interaction with Other Features 23-8

78-16881-01

Configuring SPAN and RSPAN 23-9

Default SPAN and RSPAN Configuration 23-9 Configuring Local SPAN 23-10

Catalyst 2960 Switch Software Configuration Guide

xvii

Contents

SPAN Configuration Guidelines 23-10 Creating a Local SPAN Session 23-10 Creating a Local SPAN Session and Configuring Incoming Traffic 23-13 Specifying VLANs to Filter 23-15

Configuring RSPAN 23-16

RSPAN Configuration Guidelines 23-16 Configuring a VLAN as an RSPAN VLAN 23-17 Creating an RSPAN Source Session 23-18 Creating an RSPAN Destination Session 23-19 Creating an RSPAN Destination Session and Configuring Incoming Traffic 23-20 Specifying VLANs to Filter 23-22

Displaying SPAN and RSPAN Status 23-23

CHAPTER

24 Configuring UDLD 24-1

Understanding UDLD 24-1

Modes of Operation 24-1 Methods to Detect Unidirectional Links 24-2

Configuring UDLD 24-4

Default UDLD Configuration 24-4 Configuration Guidelines 24-4 Enabling UDLD Globally 24-5 Enabling UDLD on an Interface 24-5 Resetting an Interface Disabled by UDLD 24-6

Displaying UDLD Status 24-6

25 Configuring RMON 25-1

Understanding RMON 25-1

Configuring RMON 25-2

Default RMON Configuration 25-3 Configuring RMON Alarms and Events 25-3 Collecting Group History Statistics on an Interface 25-5 Collecting Group Ethernet Statistics on an Interface 25-6

CHAPTER

xviii

Displaying RMON Status 25-6

26 Configuring System Message Logging 26-1

Understanding System Message Logging 26-1

Configuring System Message Logging 26-2

System Log Message Format 26-2

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Default System Message Logging Configuration 26-3 Disabling Message Logging 26-3 Setting the Message Display Destination Device 26-4 Synchronizing Log Messages 26-5 Enabling and Disabling Time Stamps on Log Messages 26-7 Enabling and Disabling Sequence Numbers in Log Messages 26-7 Defining the Message Severity Level 26-8 Limiting Syslog Messages Sent to the History Table and to SNMP 26-9 Configuring UNIX Syslog Servers 26-10

Logging Messages to a UNIX Syslog Daemon 26-11

Configuring the UNIX System Logging Facility 26-11

Displaying the Logging Configuration 26-12

Contents

CHAPTER

27 Configuring SNMP 27-1

Understanding SNMP 27-1

SNMP Versions 27-2 SNMP Manager Functions 27-3 SNMP Agent Functions 27-4 SNMP Community Strings 27-4 Using SNMP to Access MIB Variables 27-4 SNMP Notifications 27-5 SNMP ifIndex MIB Object Values 27-5

Configuring SNMP 27-6

Default SNMP Configuration 27-6 SNMP Configuration Guidelines 27-7 Disabling the SNMP Agent 27-8 Configuring Community Strings 27-8 Configuring SNMP Groups and Users 27-9 Configuring SNMP Notifications 27-11 Setting the Agent Contact and Location Information 27-14 Limiting TFTP Servers Used Through SNMP 27-15 SNMP Examples 27-15

CHAPTER

78-16881-01

Displaying SNMP Status 27-16

28 Configuring Network Security with ACLs 28-1

Understanding ACLs 28-1

Port ACLs 28-2 Handling Fragmented and Unfragmented Traffic 28-3

Catalyst 2960 Switch Software Configuration Guide

xix

Contents

Configuring IPv4 ACLs 28-4

Creating Standard and Extended IPv4 ACLs 28-5

Access List Numbers 28-6 Creating a Numbered Standard ACL 28-7 Creating a Numbered Extended ACL 28-8 Resequencing ACEs in an ACL 28-12 Creating Named Standard and Extended ACLs 28-12 Using Time Ranges with ACLs 28-14

Including Comments in ACLs 28-15 Applying an IPv4 ACL to a Terminal Line 28-16 Applying an IPv4 ACL to an Interface 28-17 Hardware and Software Treatment of IP ACLs 28-17 IPv4 ACL Configuration Examples 28-18

Numbered ACLs 28-18

Extended ACLs 28-18

Named ACLs 28-19

Time Range Applied to an IP ACL 28-19

Commented IP ACL Entries 28-19

CHAPTER

Creating Named MAC Extended ACLs 28-20

Applying a MAC ACL to a Layer 2 Interface 28-21

Displaying IPv4 ACL Configuration 28-22

29 Configuring QoS 29-1

Understanding QoS 29-1

Basic QoS Model 29-3 Classification 29-5

Classification Based on QoS ACLs 29-7

Classification Based on Class Maps and Policy Maps 29-7 Policing and Marking 29-8

Policing on Physical Ports 29-9 Mapping Tables 29-10 Queueing and Scheduling Overview 29-11

Weighted Tail Drop 29-12

SRR Shaping and Sharing 29-12

Queueing and Scheduling on Ingress Queues 29-13

Queueing and Scheduling on Egress Queues 29-15 Packet Modification 29-18

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Configuring Auto-QoS 29-19

Generated Auto-QoS Configuration 29-19 Effects of Auto-QoS on the Configuration 29-24 Auto-QoS Configuration Guidelines 29-24 Enabling Auto-QoS for VoIP 29-25 Auto-QoS Configuration Example 29-26

Displaying Auto-QoS Information 29-28

Configuring Standard QoS 29-28

Default Standard QoS Configuration 29-29

Default Ingress Queue Configuration 29-29 Default Egress Queue Configuration 29-30 Default Mapping Table Configuration 29-31

Standard QoS Configuration Guidelines 29-31

QoS ACL Guidelines 29-31 Policing Guidelines 29-31

General QoS Guidelines 29-32 Enabling QoS Globally 29-32 Configuring Classification Using Port Trust States 29-32

Configuring the Trust State on Ports within the QoS Domain 29-33

Configuring the CoS Value for an Interface 29-34

Configuring a Trusted Boundary to Ensure Port Security 29-35

Enabling DSCP Transparency Mode 29-36

Configuring the DSCP Trust State on a Port Bordering Another QoS Domain 29-37 Configuring a QoS Policy 29-39

Classifying Traffic by Using ACLs 29-40

Classifying Traffic by Using Class Maps 29-43

Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps 29-45

Classifying, Policing, and Marking Traffic by Using Aggregate Policers 29-48 Configuring DSCP Maps 29-51

Configuring the CoS-to-DSCP Map 29-51

Configuring the IP-Precedence-to-DSCP Map 29-52

Configuring the Policed-DSCP Map 29-53

Configuring the DSCP-to-CoS Map 29-54

Configuring the DSCP-to-DSCP-Mutation Map 29-55 Configuring Ingress Queue Characteristics 29-57

Mapping DSCP or CoS Values to an Ingress Queue and Setting WTD Thresholds 29-57

Allocating Buffer Space Between the Ingress Queues 29-59

Allocating Bandwidth Between the Ingress Queues 29-60

Configuring the Ingress Priority Queue 29-61

Contents

78-16881-01

Catalyst 2960 Switch Software Configuration Guide

xxi

Contents

Configuring Egress Queue Characteristics 29-62

Configuration Guidelines 29-62 Allocating Buffer Space to and Setting WTD Thresholds for an Egress Queue-Set 29-62 Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID 29-64 Configuring SRR Shaped Weights on Egress Queues 29-66 Configuring SRR Shared Weights on Egress Queues 29-67 Configuring the Egress Expedite Queue 29-68 Limiting the Bandwidth on an Egress Interface 29-68

Displaying Standard QoS Information 29-69

CHAPTER

30 Configuring EtherChannels 30-1

Understanding EtherChannels 30-1

EtherChannel Overview 30-2 Port-Channel Interfaces 30-3 Port Aggregation Protocol 30-4

PAgP Modes 30-4 PAgP Interaction with Other Features 30-5

Link Aggregation Control Protocol 30-5

LACP Modes 30-5

LACP Interaction with Other Features 30-6 EtherChannel On Mode 30-6 Load Balancing and Forwarding Methods 30-6

Configuring EtherChannels 30-8

Default EtherChannel Configuration 30-9 EtherChannel Configuration Guidelines 30-9 Configuring Layer 2 EtherChannels 30-10 Configuring EtherChannel Load Balancing 30-12 Configuring the PAgP Learn Method and Priority 30-13 Configuring LACP Hot-Standby Ports 30-14

Configuring the LACP System Priority 30-15

Configuring the LACP Port Priority 30-15

CHAPTER

xxii

Displaying EtherChannel, PAgP, and LACP Status 30-16

31 Troubleshooting 31-1

Recovering from a Software Failure 31-2

Recovering from a Lost or Forgotten Password 31-3

Procedure with Password Recovery Enabled 31-4 Procedure with Password Recovery Disabled 31-6

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Recovering from a Command Switch Failure 31-7

Replacing a Failed Command Switch with a Cluster Member 31-8 Replacing a Failed Command Switch with Another Switch 31-9

Recovering from Lost Cluster Member Connectivity 31-11

Preventing Autonegotiation Mismatches 31-11

SFP Module Security and Identification 31-11

Monitoring SFP Module Status 31-12

Using Ping 31-12

Understanding Ping 31-12 Executing Ping 31-13

Using Layer 2 Traceroute 31-13

Understanding Layer 2 Traceroute 31-14 Usage Guidelines 31-14 Displaying the Physical Path 31-15

Contents

APPENDIX

Using IP Traceroute 31-15

Understanding IP Traceroute 31-15 Executing IP Traceroute 31-16

Using TDR 31-17

Understanding TDR 31-17 Running TDR and Displaying the Results 31-17

Using Debug Commands 31-18

Enabling Debugging on a Specific Feature 31-18 Enabling All-System Diagnostics 31-19 Redirecting Debug and Error Message Output 31-19

Using the show platform forward Command 31-19

Using the crashinfo File 31-21

A Supported MIBs A-1

MIB List A-1

Using FTP to Access the MIB Files A-3

B Working with the Cisco IOS File System, Configuration Files, and Software Images B-1

78-16881-01

Working with the Flash File System B-1

Displaying Available File Systems B-2 Setting the Default File System B-3 Displaying Information about Files on a File System B-3 Changing Directories and Displaying the Working Directory B-3 Creating and Removing Directories B-4

Catalyst 2960 Switch Software Configuration Guide

xxiii

Contents

Copying Files B-4 Deleting Files B-5 Creating, Displaying, and Extracting tar Files B-5

Creating a tar File B-6

Displaying the Contents of a tar File B-6

Extracting a tar File B-7 Displaying the Contents of a File B-8

Working with Configuration Files B-8

Guidelines for Creating and Using Configuration Files B-9 Configuration File Types and Location B-9 Creating a Configuration File By Using a Text Editor B-10 Copying Configuration Files By Using TFTP B-10

Preparing to Download or Upload a Configuration File By Using TFTP B-10

Downloading the Configuration File By Using TFTP B-11

Uploading the Configuration File By Using TFTP B-11 Copying Configuration Files By Using FTP B-12

Preparing to Download or Upload a Configuration File By Using FTP B-13

Downloading a Configuration File By Using FTP B-13

Uploading a Configuration File By Using FTP B-14 Copying Configuration Files By Using RCP B-15

Preparing to Download or Upload a Configuration File By Using RCP B-16

Downloading a Configuration File By Using RCP B-17

Uploading a Configuration File By Using RCP B-18 Clearing Configuration Information B-18

Clearing the Startup Configuration File B-19

Deleting a Stored Configuration File B-19

xxiv

Working with Software Images B-19

Image Location on the Switch B-20 tar File Format of Images on a Server or Cisco.com B-20 Copying Image Files By Using TFTP B-21

Preparing to Download or Upload an Image File By Using TFTP B-21

Downloading an Image File By Using TFTP B-22

Uploading an Image File By Using TFTP B-24 Copying Image Files By Using FTP B-24

Preparing to Download or Upload an Image File By Using FTP B-25

Downloading an Image File By Using FTP B-26

Uploading an Image File By Using FTP B-28

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Copying Image Files By Using RCP B-29

Preparing to Download or Upload an Image File By Using RCP B-29 Downloading an Image File By Using RCP B-31 Uploading an Image File By Using RCP B-32

Contents

APPENDIX

C Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 2960 Switch C-1

Configuration Compatibility Issues C-1

Feature Behavior Incompatibilities C-5

D Unsupported Commands in Cisco IOS Release 12.2(25)FX D-1

Access Control Lists D-1

Unsupported Privileged EXEC Commands D-1 Unsupported Global Configuration Commands D-1

Debug Commands D-1

Unsupported Privileged EXEC Commands D-1

IGMP Snooping Commands D-2

Unsupported Global Configuration Commands D-2

Interface Commands D-2

Unsupported Privileged EXEC Commands D-2 Unsupported Global Configuration Commands D-2 Unsupported Interface Configuration Commands D-2

MAC Address Commands D-2

Unsupported Privileged EXEC Commands D-2 Unsupported Global Configuration Commands D-3

78-16881-01

Miscellaneous D-3

Unsupported Privileged EXEC Commands D-3 Unsupported Global Configuration Commands D-3

Network Address Translation (NAT) Commands D-3

Unsupported Privileged EXEC Commands D-3

QoS D-3

Unsupported Global Configuration Commands D-3 Unsupported Interface Configuration Commands D-4

RADIUS D-4

Unsupported Global Configuration Commands D-4

SNMP D-4

Unsupported Global Configuration Commands D-4

Catalyst 2960 Switch Software Configuration Guide

xxv

NDEX

Contents

Spanning Tree D-4

Unsupported Global Configuration Command D-4 Unsupported Interface Configuration Command D-4

VLAN D-4

Unsupported Global Configuration Commands D-4 Unsupported vlan-config Command D-5 Unsupported User EXEC Commands D-5

VTP D-5

Unsupported Privileged EXEC Commands D-5

xxvi

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Audience

Purpose

Preface

This guide is for the networking professional managing the Catalyst 2960 switch, hereafter referred to as the switch. Before using this guide, you should have experience working with the Cisco IOS software and be familiar with the concepts and terminology of Ethernet and local area networking.

This guide provides the information that you need to configure Cisco IOS software features on your switch. The Catalyst 2960 software provides enterprise-class intelligent services such as access control lists (ACLs) and quality of service (QoS) features.

This guide provides procedures for using the commands that have been created or changed for use with the Catalyst 2960 switch. It does not provide detailed information about these commands. For detailed information about these commands, see the Catalyst 2960 Switch Command Reference for this release. For information about the standard Cisco IOS Release 12.2 commands, see the Cisco IOS documentation set available from the Cisco.com home page at Technical Support & Documentation > Cisco IOS Software.

This guide does not provide detailed information on the graphical user interfaces (GUIs) for the embedded device manager or for Cisco Network Assistant (hereafter referred to as Network Assistant) that you can use to manage the switch. However, the concepts in this guide are applicable to the GUI user. For information about the device manager, see the switch online help. For information about Network Assistant, see Getting Started with Cisco Network Assistant, available on Cisco.com

This guide does not describe system messages you might encounter or how to install your switch. For more information, see the Catalyst 2960 Switch System Message Guide for this release and to the Catalyst 2960 Switch Hardware Installation Guide.

For documentation updates, see the release notes for this release.

78-16881-01

Catalyst 2960 Switch Software Configuration Guide

xxvii

Conventions

This publication uses these conventions to convey instructions and information:

Command descriptions use these conventions:

Interactive examples use these conventions:

Notes, cautions, and timesavers use these conventions and symbols:

Preface

• Commands and keywords are in boldface text.

• Arguments for which you supply values are in italic.

• Square brackets ([ ]) mean optional elements.

• Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.

• Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional

element.

• Terminal sessions and system displays are in screen font.

• Information you enter is in boldface screen font.

• Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).

Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in

this manual.

Caution Means reader be careful. In this situation, you might do something that could result in equipment

damage or loss of data.

Related Publications

These documents provide complete information about the switch and are available from this Cisco.com site:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2960/index.htm

Note Before installing, configuring, or upgrading the switch, see these documents:

• For initial configuration information, see the “Using Express Setup” chapter in the getting started

guide or the “Configuring the Switch with the CLI-Based Setup Program” appendix in the hardware installation guide.

• For device manager requirements, see the “System Requirements” section in the release notes (not

orderable but available on Cisco.com).

xxviii

• For Network Assistant requirements, see the Getting Started with Cisco Network Assistant (not

orderable but available on Cisco.com).

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

Preface

Obtaining Documentation

• For cluster requirements, see the Release Notes for Cisco Network Assistant (not orderable but

available on Cisco.com).

• For upgrading information, see the “Downloading Software” section in the release notes.

You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and from the telephone numbers listed in the “Obtaining Documentation” section on page xxix.

• Release Notes for the Catalyst 2960 Switches (not orderable but available on Cisco.com)

• Catalyst 2960 Switch Software Configuration Guide (order number DOC-7816881=)

• Catalyst 2960 Switch Command Reference (order number DOC-7816882=)

• Catalyst 2960 Switch System Message Guide (order number DOC-7816883=)

• Device manager online help (available on the switch)

• Catalyst 2960 Switch Hardware Installation Guide (not orderable but available on Cisco.com)

• Catalyst 2960 Switch Getting Started Guide (order number DOC-7816879=)

• Regulatory Compliance and Safety Information for the Catalyst 2960 Switch (order number

DOC-7816880=)

• Getting Started with Cisco Network Assistant (not orderable but available on Cisco.com)

• Release Notes for Cisco Network Assistant (not orderable but available on Cisco.com)

• Cisco Small Form-Factor Pluggable Modules Installation Notes (order number DOC-7815160=)

• Cisco CWDM GBIC and CWDM SFP Installation Note (not orderable but available on Cisco.com)

• Cisco RPS 300 Redundant Power System Hardware Installation Guide (order number

DOC-7810372=)

• Cisco RPS 675 Redundant Power System Hardware Installation Guide (order number

DOC-7815201=)

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

You can access the Cisco website at this URL:

78-16881-01

http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Catalyst 2960 Switch Software Configuration Guide

xxix

Documentation Feedback

Product Documentation DVD

Cisco documentation and additional literature are available in the Product Documentation DVD package, which may have shipped with your product. The Product Documentation DVD is updated regularly and may be more current than printed documentation.

The Product Documentation DVD is a comprehensive library of technical product documentation on portable media. The DVD enables you to access multiple versions of hardware and software installation, configuration, and command guides for Cisco products and to view technical documentation in HTML. With the DVD, you have access to the same documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .pdf versions of the documentation available.

The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com users (Cisco direct customers) can order a Product Documentation DVD (product number DOC-DOCDVD=) from Cisco Marketplace at this URL:

http://www.cisco.com/go/marketplace/

Ordering Documentation

Preface

Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL:

http://www.cisco.com/go/marketplace/

Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m. (0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by calling 011 408 519-5055. You can also order documentation by e-mail at

tech-doc-store-mkpl@external.cisco.com or by fax at 1 408 519-5001 in the United States and Canada,

or elsewhere at 011 408 519-5001.

Documentation Feedback

You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com.

You can send comments about Cisco documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems Attn: Customer Document Ordering 170 West Tasman Drive San Jose, CA 95134-9883

xxx

We appreciate your comments.

Catalyst 2960 Switch Software Configuration Guide

78-16881-01

+ 650 hidden pages

Cisco Systems Cat2960-Xr User Manual

CONTENTS

Audience

Purpose

Preface

Conventions

Related Publications

Obtaining Documentation

Cisco.com

Documentation Feedback

Product Documentation DVD

Ordering Documentation