Cisco IOS Release 12.1(11)EA1 and 12.1(11)YJ
November 2002
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Customer Order Number: DOC-7814982=
Text Part Number: 78-14982-01
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS M ANUAL ARE SUBJECT TO CHA NGE WITHOUT NO TICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSI BILITY FOR THEIR APPLICA TION OF ANY PRODUCT S.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORT H IN THE INFORMATION PACKET T HAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THE SE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAI M ALL WARRANTIE S, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NO NINFRINGEM ENT OR ARISING FROM A COURS E OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING ,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE S.
CCIP, the Cisco Arrow logo, the Cisco Powered Network mark, the Cisco Systems Verified logo, Cisco Unity, Follow Me Browsing, FormShare, iQ Breakthrough, iQ Expertise,
iQ FastTrack, the iQ Logo, iQ Net Readiness Scorecard, Networking Academy, ScriptShare, SMARTnet, TransPath, and Voice LAN are trademarks of Cisco Systems, Inc.;
Changing the Way We Work, Live, Play, and Learn, Discover All That’s Possible, The Fastest Way to Increase Your Internet Quotient, and iQuick Study are service marks of Cisco
Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo,
Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch, Fast Step,
GigaStack, Internet Quotient, IOS, IP/TV, LightStream, MGX, MICA, the Networkers logo, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar,
SlideCast, StrataView Plus, Stratm, SwitchProbe, TeleRouter, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship
Management Interf ace Options1-7
Advantage s of Us in g CMS and Cluster ing Switches1-7
Network Configuration Examples1-8
Design Concepts for Using the Switch1-8
Small to Medium-Sized Network Configuration1-11
Collapsed Backbone and Switch Cluster Configuration1-13
Large Campus Configuration1-14
Hotel Network Confi guration1-16
Multidwelling Network Using Catalyst 2950 Switches1-18
Long-Distance, High-Bandwidth Transport Configuration1-20
IOS Command Modes2-1
Getting Help2-3
Specifying Ports in Interface Configuration Mode2-4
Abbreviating Commands2-5
Using no and default Forms of Commands2-5
Understanding CLI Messages2-5
Using Command History2-6
Changing the Command Hi story Buffer Size2-6
Recalling Commands2-6
Disabling the Command History Feature2-7
Using Editing Features2-7
Enabling and Disa bling Editing Features2-7
Editing Commands through Keystrokes2-8
Editing Command Lines that Wrap2-9
Searching and Filtering Output of show and more Commands2-10
Accessing the CLI2-10
CHAPTER
Accessing the CLI from a Browser2-11
3Getting Started with CMS3-1
Features3-2
Front Panel View3-4
Cluster Tree3-6
Front-Panel Ima ges3-7
Redundant Power System LED3-8
Port Modes and LEDs3-8
VLAN Membership Modes3-9
Topology View3-10
Topology Icons3-12
Device and Link Labe ls3-13
Colors in the Topol ogy View3-14
Topology Display Options3-15
Menus and Toolbar3-15
Understanding IE2100 Series Configuration Registrar Software5-1
CNS Configuration Service5-2
CNS Event Service5-3
NameSpace M a pper5-3
What You Should Know About ConfigID, DeviceID, and Host Name5-3
ConfigID5-3
DeviceID5-4
Host Name and DeviceID5-4
Using Host Name, DeviceID, and ConfigID5-4
Understanding CNS Embedded Agents5-5
Initial Configuration5-5
Incremental (P ar tial) Configurat ion5-6
Synchronized Configuration5-6
Configuring CNS Embe dded Agents5-6
Enabling Automate d CNS Configuration5-6
Enabling the CNS Event Agent5-8
Enabling the CNS Configuration Agent5-9
Enabling an Initial Configuration5-9
Enabling a Partial Configuration5-12
CHAPTER
vi
Displaying CNS Configuration5-13
6Clustering Switches6-1
Understanding Switch Clusters6-2
Command Switch Characteristics6-3
Standby Command Switch Characteristics6-3
Candidate Switch and Member Switch Characteristics6-4
Planning a Switch Cluster6-5
Automatic Discovery of Cluster Candidates and Members6-5
Discovery th ro ug h CD P H op s6-6
Discovery through Non-CDP-Capable and Noncluster-Capable Devices6-7
Discovery through the Same Management VLAN6-8
Discovery through Di fferent Management VLANs6-9
Discovery of Newly Installed Switches6-10
Other Considerations for Cluster Standby Groups6-13
Automatic Recovery of Cluster Configuration6-15
IP Addresses6-15
Host Names6-16
Passwords6-16
SNMP Community Strings6-16
TACACS+ and RADIUS6-17
Access Modes in CMS6-17
Management VLAN6-18
LRE Profiles 6-18
Availability of Switch-Specific Features in Switch Clusters6-19
Creating a Switch Cluster6-19
Enabling a Command Switch6-19
Adding Member Switches6-20
Creating a Cluster Standby Group6-22
Verifying a Switch Cl uster6-24
Contents
CHAPTER
Using the CLI to Manage Switch Clusters6-25
Catalyst1900 and Catalyst2820 CLI Considerations6-25
Using SNMP to Manage Sw itch Clusters6-26
7Administering the Switch7-1
Preventing Unautho rized Access to Your Switch7-1
Protecting Access to Privileged EXEC Commands7-2
Default Password and Privilege Level Configuration7-2
Setting or Changing a Static Enable Password7-3
Protecting Enable and Enable Secret Passwords with Encryption7-4
Disabling Password Recovery7-5
Setting a Telnet Password for a Terminal Line7-6
Configuring User name and Password Pairs7-7
Configuring Multiple Privilege Lev e ls7-8
Identifying the TACACS+ Server Host and Setting th e Authentication Key7-13
Configuring TACACS+ Login Authentication7-14
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services7-16
Starting TACACS+ Accounting7-17
Default RADIUS Configu ration7-20
Identifying the RADIUS Server Host 7-20
Configuring RADI US Login Authentication7-23
Defining AAA Server Groups7-25
Configuring RADIUS Authorization for User Privileged Access and Network Services7-27
Starting RADIUS Accounting7-28
Configuring Set tings for All RADIUS Servers7-29
Configuring the Switch to Use Vendor-Specific RADIUS Attributes7-29
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication7-30
Displaying the RADIUS Configuration7-31
Configuring the Switch for Local Authenticat ion and Authorization7-32
Configuring the Switch for Secure Shell7-33
Understanding SSH7-33
Configuring SSH7-33
Managing the System Time and Date7-34
Understanding the System Clock 7-34
Understanding Network Time Protocol7-34
Configuring NTP7-36
Default NTP Config uration7-37
Configuring NTP Authentication7-37
Configuring NTP Associations7-38
Configuring NTP Broadcast Service7-39
Configuring NTP Ac cess Restrictions7-40
Configuring the Source IP Address for NTP Packets7-42
Displaying the NTP C onfiguration7-43
Configuring Ti me and Date Manually7-43
Setting the System Clock7-44
Displaying the Time and Date Configuration7-44
Configuring the Time Zone 7-45
Configuring Summer Time (Daylight Saving Time)7-46
Default System Name and Prompt Configuration7-48
Configuring a System Name7-48
Configuring a System Prompt7-49
Understanding DNS7-49
Default DNS Configuration7-50
Setting Up DNS7-50
Displaying the DNS Configuration7-51
Creating a Banner7-51
Default Banner Con figuration7-51
Configuring a Message-of-the-Day Login Banner7-52
Configuring a Login Banner7-53
Managing the MAC Address Table7-54
Building the Address Table7-54
MAC Addresses and VLANs7-55
Default MAC Address Tab le Configuration7-55
Changing the Addres s Aging Time7-55
Removing Dynamic Address Entries7-56
Configuring MAC Address Notification Traps7-56
Adding and Removing Static Address Entries7-58
Adding and Removing Secure Addresses7-59
Displaying Addre ss Table Entries7-60
Contents
CHAPTER
Managing the ARP Table7-61
Switch Software Releases7-61
Changing the Switch-to-Client Retransmission Time8-12
Setting the Switch-to-Client Frame-Retransmission Number8-13
Enabling Multiple Hosts8-13
Resetting the 802 .1X Configuration to the Default Values8-14
Displaying 802.1X Statistics and Status8-14
CHAPTER
9Configuring the Switch Interfaces9-1
Understanding Interface Types9-1
Access Ports9-2
Trunk Ports9-2
Port-Based VLANs9-3
EtherChannel Por t Groups9-3
Connecting Interfaces9-3
Using the Interface Command9-4
Procedures for Configuring Interfaces9-4
Configuring a Range of Interfaces9-6
Configuring and Using Interface-Range Macros9-8
Configuring Switch Interfaces9-9
Default Etherne t Interface Configuration9-10
SFP Configuration9-10
Configuring Interface Speed and Duplex Mode9-11
Configuration Guidelines9-12
Setting the Interface Speed and Duplex Parameters9-13
Configuring Media Types for Gigabit Interfaces9-14
Configuring IEEE 802.3X Flow Control on Gigabit Ethernet Ports9-14
Adding a Descripti on for an Interface9-16
CHAPTER
x
Monitoring and Maintaining the Interfaces9-16
Monitoring Interface and Controller Status9-16
Clearing and Reset ting Interfaces and Counte rs9-19
Shutting Down and Restarting the Interface9-19
10Configuring LRE10-1
Ports on the 295 0 LR E10-1
LRE Links and LRE Profil es10-2
Guidelines for Us ing LRE Profiles10-7
CPE Ethernet Link Guidelines10-7
Considerations for Connected Cisco 575 LRE CPEs10-7
Considerations for Connected Cisco 585 LRE CPEs10-8
Assigning a Global Profile to All LRE Ports10-8
Assigning a Profile to a Specific LRE Port10-9
Assigning a Global Sequence to All LRE Ports10-9
Assigning a Sequence to a Specific LRE Port10-10
Using Rate Selection to Automatically Assign Profiles10-10
Precedence10-11
Profile Lockin g10-11
Link Qualification and SNR Margins10-12
LRE Link Persist ence10-14
LRE Link Monitor10-14
Upgrading LRE Switch Firmware10-15
Configuring for an LRE Upgrade10-15
Performing an LRE Upgrade10-16
Global Configuration of LRE Upgrades10-17
Controller Configuration of LRE Upgrades10-17
LRE Upgrade Behavior Details10-18
LRE Upgrade Example10-18
Contents
CHAPTER
11Configuring STP11-1
Understanding Spanning-Tree Features11-1
STP Overview11-2
Supported Spanning-Tree Instances11-2
Bridge Protocol Data Units11-2
Election of the Root Switch11-3
Bridge ID, Switch Priority, and Extended System ID11-4
Spanning-Tree Timers11-4
Creating the Spann ing-Tree Topology11-5
Spanning-Tree I nterface States11-5
Spanning Tree and Redundant Connectivity11-8
Accelerated Aging to Retain Connectivity11-9
Configuring Spanning-Tree Features11-9
Default STP Confi guration11-10
STP Configuration Guidelines11-10
Disabling STP11-12
Configuring the Root Switch11-12
Configuring a Sec ondary Root Switch11-14
Configuring the Port Priority11-15
Configuring the Path Cost11-16
Configuring the Switch Priority of a VLAN11-18
Configuring the Hello Time11-19
Configuring th e Forwarding-Delay Time for a VLAN11-19
Configuring th e Maximum-Aging Time for a VLAN11-20
Configuring STP for Use in a Cascaded Stack11-20
CHAPTER
Displaying the Spanning-Tree Status11-21
12Configuring RSTP and MSTP12-1
Understanding RSTP12-2
Port Roles and the Active Topology12-2
Rapid Convergence12-3
Synchronization of Port Roles12-4
Bridge Protocol Data Unit Format and Processing12-5
Processing Super ior BPDU Information12-6
Processing Inferior BPDU Information12-6
Topology Changes12-6
Understanding MSTP12-7
Multiple Spanning-Tree Regions12-7
IST, CIST, and CST12-8
Operations Within an MST Region12-8
Operations Betwee n MST Regions12-9
Hop Count12-10
Boundary Ports12-10
xii
Interoperability with 802.1D STP12-11
Configuring RSTP and MSTP Features12-11
Default RSTP and MSTP Configuration12-12
RSTP and MSTP Configuration Guidelines12-12
Specifying the MST Region Configuration and Enabling MSTP12-13
Configuring the Root Switch12-14
Configuring a Secondary Root Switch12-16
Configuring the Port Priority12-17
Configuring the Path Cost12-18
Configuring the Switch Priority12-19
Configuring the Hello Time12-19
Configuring the Forwarding-Delay Time12-20
Configuring th e Maximum-Aging Time12-21
Configuring the Maximum-Hop Count12-21
Specifying the Link Type to Ensure Rapid Transiti ons12-22
Restarting the Protocol Migration Process12-22
Displaying the MST Configuration and Status12-23
Contents
CHAPTER
13Configuring Optional Spanning-Tree Features13-1
Understanding Optional Spanning-Tree Features13-1
Understanding Po rt Fast13-2
Understanding BPD U Guard13-3
Understanding BPDU Filtering13-3
Understanding UplinkFast13-4
Understanding Cross-Stack UplinkFast13-5
How CSUF Works13-6
Events That Cause Fast Convergence13-7
Limitations13-8
VLAN Configuration in VLAN Configuration Mode14-6
Saving VLAN Configuration14-7
Default Etherne t VLAN Configuration14-8
Creating or Modifying an Ethernet VLAN14-8
Deleting a VLAN14-10
Assigning St at ic-Access Port s to a VLAN14-11
802.1Q Configura tion Considerations14-16
Default Layer 2 Ethernet Inte rfa c e VL A N Co nf ig uration14-17
Configuring an Ethernet Interface as a Trunk Port14-17
Interaction with Other Features14-17
Configuring a Trunk Port14-18
Defining the Allo w e d V LA N s on a Tr un k14-19
Changing the Pruning-Eligible List14-20
Configuring the Native VLAN for Untagged Traffic14-20
Load Sharing Using STP14-21
Load Sharing Using STP Port Priorities14-21
Load Sharing Using STP Path Cost14-23
Configuring VMPS14-24
Understanding VMPS14-25
Dynamic Port VLAN Membership14-25
VMPS Databa se Co nfiguration Fi le14-26
Default VMPS Configuration14-27
VMPS Configu ra tion Guidelines14-28
Entering the IP Address of the VMPS14-28
Configuring Dynamic Access Ports on VMPS Clients14-29
Reconfirming VLAN Memberships14-30
Changing the Reconfirmation Interval14-30
Changing the Retry Count14-30
Monitoring the VMPS14-31
Troubleshooting Dynamic Port VLAN Membership14-31
VMPS Configuration Example14-32
Contents
CHAPTER
15Configuring VTP15-1
Understanding VTP15-1
The VTP Domain15-2
VTP Modes15-3
VTP Advertisements15-3
VTP Version 215-4
VTP Pruning15-4
Default Voice VLAN Configuration16-2
Voice VLAN Config uration Guidelines16-3
Configuring a Port to Connect to a Cisco7960 IP Phone16-3
Configuring Ports to Carry Voice Traffic in 802.1Q Frames16-4
Configuring Ports to Carry Voice Traffic in 802.1P Priority Tagged Frames16-4
Overriding the CoS Priority of Incoming Data Frames16-5
Configuring the IP Phone to Trust the CoS Priority of Incoming Data Frames16-6
Displaying Voic e VLAN16-6
CHAPTER
17Configuring IGMP Snooping and MVR17-1
Understanding IGMP Snooping17-1
Joining a Multicast Group17-2
Leaving a Multicast Group17-4
Immediate-Leave Processing17-4
Configuring IGMP Snooping17-5
Default IGMP Snoo ping Configuration17-5
Enabling or Dis a bl in g IG M P Sno o pi ng17-5
Setting the Snooping Method17-6
Configuring a Multicast Router Port17-7
Configuring a Host Statically to Join a Group17-8
Enabling IGMP Immediate-Leave Processing17-9
Understanding Storm Control18-1
Default Storm Control Configuration18-2
Enabling Storm Control18-2
Disabling Storm Control18-3
Configuring Protected Ports18-3
Configuring Port Security18-4
Understanding Po rt Security18-5
Secure MAC Addresses18-5
Security Viol at ions18-6
Default Port Security Configuration18-7
Port Security Configuration Guidelines18-7
Enabling and Configuring Port Security18-7
Enabling and Confi guring Port Security Aging18-10
Displaying Port -Based Traffic Control Settings18-12
19Configuring UDLD19-1
CHAPTER
CHAPTER
Understanding UDLD19-1
Configuring UDLD19-3
Default UDLD Configuration19-3
Enabling UDLD Globally19-4
Enabling UDLD on an Interface19-4
Resetting an Interface Shut Down by UDLD19-5
Displaying UDLD Status19-6
20Configuring CDP20-1
Understanding CDP20-1
Configuring CDP20-2
Default CDP Config uration20-2
Configuring the CDP Characteristics20-2
Disabling and Enabling CDP20-3
Disabling and Enabling CDP on an Interface20-4
SPAN Session21-3
Traffic Typ es21-3
Source Port21-4
Destination Por t21-5
Reflector Port21-5
VLAN-Based SPAN21-6
SPAN Traffic21-6
SPAN and RSPAN Interaction with Other Features21-7
SPAN and RSPAN Session Limit s21-8
Default SPAN and RSPAN Conf iguration21-8
Configuring SPAN21-8
SPAN Configuration Guidelines21-8
Creating a SPAN Session and Specifying Ports to Monitor21-9
Removing Ports from a SPAN Se ss io n21-11
Specifying VLANs to Monitor21-12
Specifying VLANs to Filter21-13
CHAPTER
CHAPTER
Configuring RSPAN21-14
RSPAN Configuration Guidelines21-14
Creating an RSPAN Session21-15
Creating an RSPAN Destination Session21-16
Removing Ports from an RSPAN Se s sion21-17
Specifying VLANs to Monitor21-18
Specifying VLANs to Filter21-19
Displaying SPAN and RSPAN Status21-20
22Configuring RMON22-1
Understanding RMON22-1
Configuring RMON22-2
Default RMON Configuration22-3
Configuring RMON Alarms and Events22-3
Configuring RMON Col lection on an Interface22-5
Displaying RMON Status22-6
23Configuring System Message Logging23-1
xviii
Understanding System Message Logging23-1
Configuring System Message Logging23-2
System Log Message Format23-2
Default System Message Logging Configuration23-3
Disabling and Enabling Message Logging23-4
Setting the Message D isplay Destination Device23-4
Synchronizing Log Messages23-6
Enabling and Disa bling Timestamps on Log Messages23-7
Enabling and Disabling Sequence Numbers in Log Messages23-8
Defining the Message Severity Level23-8
Limiting Syslog Messages Sent to the History Table and to SNMP23-10
Configuring UNIX Syslog Servers23-10
Logging Messages to a UNIX Syslog Daemon23-11
Configuring the UNIX System Logging Facility23-11
Displaying the Lo gging Configuration23-12
Contents
CHAPTER
24Configuring SNMP24-1
Understanding SNMP24-1
SNMP Versions24-2
SNMP Manager Functions24-3
SNMP Agent Fu nc ti on s24-3
SNMP Community Strings24-4
Using SNMP to Access MIB Variables 24-4
SNMP Notifications24-5
Configuring SNMP24-5
Default SNMP Configuration24-6
SNMP Configuration Guidelines24-6
Disabling the SNMP Agent24-7
Configuring Commun ity Strings24-7
Configuring SNMP Groups and Users24-8
Configuring SNMP Notifications24-10
Setting the Agent Contact and Location Informat ion24-13
Limiting TFTP Servers Used Through SNMP24-13
SNMP Exampl es24-14
CHAPTER
78-14982-01
Displaying SNMP Status24-15
25Configuring Network Security with ACLs25-1
Understanding ACLs25-2
Handling Fragmented and Unfragmented Traffic25-3
Understanding Access Control Parameters25-4
Guidelines for Applying ACLs to Physical Interfaces25-6
Configuring ACLs25-6
Unsupported Features25-7
Creating Standard and Extended IP ACLs25-7
Classifying Tr affic by Using ACLs26-16
Classifying Tr affic by Using Class Maps26-20
Classifying, Policing, and Marking Traffic by Using Policy Maps 26-21
Configuring CoS Map s26-24
Configuring the CoS-to-DSCP Map26-25
Configuring the DSCP-to-CoS Map26-26
Replacing a Failed Command Switch with a Cluster Member28-9
Replacing a Failed Command Switch with Another Switch28-10
Recovering from Lost Member Connectivity28-11
Preventing Auton egotiation Mismatches28-12
Troubleshooting LRE Port Configuration28-12
GBIC and SFP Module Secur ity and Identification28-13
Using Debug Commands28-14
Enabling Debuggi ng on a Specific Feature28-14
Enabling All-System Diagnostics28-15
Redirecting Debu g and Error Message Output28-15
Using the crashinfo File28-15
APPENDIX
APPENDIX
ASupported MIBsA-1
MIB ListA-1
Using FTP to Access th e MI B FilesA-2
BWorking with the IOS File System, Configuration Files, and Software ImagesB-1
Working with th e Fl ash File SystemB-1
Displaying Available File SystemsB-2
Setting the Default File SystemB-3
Displaying Information about Files on a File SystemB-3
Changing Directo ries and Displaying the Working DirectoryB-4
Creating and Removing DirectoriesB-4
Copying FilesB-5
Deleting FilesB-5
Creating, Displaying, and Extracting tar FilesB-6
Creating a tar FileB-6
Displaying the Co ntents of a tar FileB-7
Extracting a ta r Fil eB-7
Displaying the Contents of a FileB-8
xxii
Working with Configuration FilesB-8
Guidelines for Creating and Using Configuration FilesB-9
Configuration File Types and LocationB-10
Creating a Configuration File By Using a Text EditorB-10
Copying Configuration Files By Using TFTPB-11
Preparing to Download or Upload a Configuration File By Using TFTPB-11
Downloading the Con figuration File By Using TFTPB-12
Uploading the Configuration File By Using TFTPB-12
Preparing to Download or Upload a Configuration File By Using FTPB-13
Downloading a Configuration File By Using FTPB-14
Uploading a Confi guration File By Using FTPB-15
Copying Configuration Files By Using RCPB-16
Preparing to Download or Upload a Configuration File By Using RCPB-17
Downloading a Configuration File By Using RCPB-17
Uploading a Confi guration File By Using RCPB-18
Clearing Configuration InformationB-19
Clearing the St a rtu p Co nfiguration Fi leB-19
Deleting a Stored Configuration FileB-20
Working with So ft w a re Ima g esB-20
Image Location on the SwitchB-20
tar File Format of Images on a Server or Cisco.comB-21
Copying Image Files By Using TFTPB-22
Preparing to Downl oad or Upload an Image File By Using TFTPB-22
Downloading an Image File By Using TFTPB-23
Uploading an Image Fi le By Using TFTPB-24
Copying Image Files By Using FTPB-25
Preparing to Downl oad or Upload an Image File By Using FTPB-25
Downloading an Image File By Using FTPB-26
Uploading an Image Fi le By Using FTPB-28
Copying Image Files By Using RCPB-29
Preparing to Downl oad or Upload an Image File By Using RCPB-29
Downloading an Image File By Using RCPB-30
Uploading an Image File By Using RCPB-32
The Catalyst 2 950 Desktop Switch Software Configuration G uide i s for t he n etwor k mana ger
responsible for configuring the Catalyst 2950 switches, hereafter referred to as the switches. Before
using this guide, you should be familiar with the concepts and terminology of Ethernet and local area
networking.
Purpose
This guide provides information about configuring and troubleshooting a Catalyst 2950 or Catalyst 2950
Long-Reach Ethe rnet (LRE) sw itch o r s witc h cl uste rs. It inc lude s d escri ption s of th e ma na geme nt
interface options and the features supported by the switch software. The non-LRE switch is supp o rted by
either the standard software image (SI) or the enhanced software image (EI). The EI provides a richer set of
features, including access control lists (ACLs), enhanced quality of service (QoS) features, the Secure Shell
Protocol, extended-range VLANs, and Remote Switch Port Analyzer (RSPAN). For a list of switches that
support the SI and the EI, see Table 1-1 on page 1. The 2950 LRE switch is suppo rted by an a v ariation of the
enhanced software image [12.1(11)LRE].
Use this guide with other documents for information about these topics:
• Requirements—This guide assumes that you have met the hardware and software requirements and
cluster compatibility requirements described in the release notes.
• Start-up information—This guide assumes that you have assigned switch IP info rmati on and
passwords by using the setup program descri bed in the rele ase notes .
• Cluster Management Sui te (CMS) i nformat ion—This guide provides an overview of the CMS
web-based, switch mana geme nt int erface. For inf orm ation a bout CMS r e quireme nts an d the
procedures for browser and plug-in configuration and accessing CMS, refer to the release notes. For
CMS field-level window descriptions and procedures, re fer to th e CMS online he lp.
• Cluster configuration—This guide provides inform ation a bout planni ng for, creating, and
maintaining switch clusters. Because configuring switch clusters is most easily performed through
CMS, this guide does not provide the command-line interface (CLI) procedures. For the cluster
commands, refer to the comm and re ferenc e for th is releas e.
78-14982-01
• CLI command information—This guide provides an overview for using the CLI. For complete
syntax and usage information about the commands that have been specifically created or changed
for the switches, re fer to th e comm and ref erence for this re lease .
This guide does not descri be system message s you might enc ounter or how to install your switch. For
more inform ation, refer to the Catalyst 2950 Desktop Switch System Message Guide for this release and
to the Catalyst 2950 Desktop Sw itch Ha rdware Installation Guide .
NoteThis guide does not repe at the conc epts and CLI proce dures provided in the st andar d Cisco IOS
Release 12.1 docume ntation . For informa tion ab out the stan dard IO S Releas e 12.1 co mmands, re fer to
the IOS documen tation se t available fro m t he Ci sco.c om ho me p ag e at Service and Support > T echni cal Documents. On t he Cisco Produ ct Documentation hom e page, select Release 12.1 from the Ci sco
IOS Software drop-down list.
NoteThis guide describes the featu res for Catalyst 295 0 sw itches. Cisco IOS Rel ease 12.1(11)EA1 is not for
use with the Long-Reach Ethernet (LRE) switches. Do not install release 12.1(11)EA1 on Catalyst 2950
LRE switches, and do not instal l releas e 12.1(11) YJ on non-LR E switches.
Organization
Preface
This guide is organized into these chapters:
Chapter 1, “Ove rv i ew,” lists the software features of this release and provides examples of how the
switch can be deployed in a network.
Chapter 2, “Using the Command-Line Interface,” describes how to access the command modes, use the
CLI, and describes CLI messa ges that you migh t receive. It also describes how to get help, abbr eviate
commands, use no and default forms of commands, use command history and editing features, and how
to search and filter the output of show and more commands.
Chapter 3, “Getting Started with CMS,” describes the CMS web-based , switch ma nagement interface.
For information about configuring your web browser and accessing CMS, refer to the release notes. For
field-level descriptions of all CMS wi ndows and pr oc edure s f or usi ng t h e CM S wi ndows, refer to the
online help.
Chapter 4, “Assigning the Switch IP Address and Default Gateway,” describes how to create the initial
switch configuration (for example, assign the switch IP address and default gateway information) by
using a variety of automatic and manua l metho ds.
Chapter 5, “Configuring IE2100 CNS Agents,” describes how to conf igure Cisco I ntelligence Engine 2 100
(IE2100) Series Cisco Networking Services (CNS) embedded agents on your switch. By using the
IE2100 Series Configuration Registrar network management application, you can automate initial
configurations and conf iguration upd ates by generatin g switch-specific con figuration changes, sending t hem
to the switch, executing the configuration change, and logging the results.
Chapter 6, “Clust ering Switches,” describes switch c luster s and the cons ider ation s for creat ing and
maintaining them. The online help provides the CMS procedures for configuring switch clusters.
Configuring switch cl usters is mo st e asily pe rfo rmed t hroug h C MS; th eref or e, CL I pr ocedu re s are not
provided. Cluster comman ds are de scribed in the Ca tal yst 295 0 De skto p S witch Comm an d Re ference.
xxvi
Chapter 7, “Administering the Switch,” descr ibes how to perform one-tim e operat ions to admi nister
your switch. It de scr ibes how to prevent una uthor ized ac cess to y our swit ch t hroug h t he use of
passwords, privilege levels, the Terminal Access Controller Access Control System Plus (TACACS+),
and the Remote Authenticat ion Dia l-In User Ser vice (RA DIUS) a nd the Sec ure Shell (SSH) Proto col. It
also describes how to set the syste m date an d ti me, set syste m n ame and pro mp t, c reate a lo gin ba nn er,
and how to manage the MAC address and Address Resolut ion Protocol (ARP) tabl es.
Chapter 8, “Configuring 802.1X Port-Based Authentication,” d escri bes how to configu re 80 2.1X
port-based authenti ca tion to prevent unauthorized devices (clients) from gaining access to the network.
As LANs extend t o hote ls, air por ts , and c or por ate lob bi es , in sec ure environme nts cou l d b e cr ea te d.
Chapter 9, “Configuring the Switch Interfaces,” defines the types of interfaces on the switch. It describes
the interface global configuration comma nd an d prov ides pr ocedu re s f or c onfiguri ng physi cal
interfaces.
Chapter 10, “Configuring LRE,” describes how to configure LRE-spe cific fe ature s o n your sw itch .
Chapter 11, “Configuring STP,” describes how to configure the Spanning Tree Protocol (STP) on your
switch.
Chapter 12, “Configuring RSTP and MSTP,” describes how to configure the Cisco implementation o f
the IEEE 802.1W Rapid STP (RSTP) and the IEEE 802.1S Multiple STP (MSTP) on your switch. RSTP
provides rapid convergence, and M STP en ab les VLA Ns t o be g rou pe d in to a sp an ning- tre e i nstan ce .
Chapter 13, “Configuring Optional Spanning-Tree Features,” describes how to configure optional
spanning-tree featur es that can be used when you r switc h is running the per-VLAN spann ing-tr ee
(PVST) or the MS TP.
Chapter 14, “Configuring VLANs,” describes how to create and maintain VLANs. It includes
information about t he V LAN data base , VLAN c onfiguration m ode s, ext ende d-r ange VLA Ns , V LAN
trunks, and the VLAN Membership Policy Server (VMPS).
Chapter 15, “Configuring VTP,” describes how to use the VLA N Trunking Pro toco l (VT P) VLA N
database for managin g V LANs. I t inc ludes V T P cha racteri stic s and c onfiguration .
Chapter 16, “Configuring Voice VLAN,” describes how to configure voice VLANs on the switch for a
connection to an IP phone.
Chapter 17, “Configuring IGMP Snooping and MV R,” describes how to configure Intern et Group
Management Protocol (IGMP) snooping. It also describes Multicast VLAN Registration (MVR), a local
IGMP snooping fea tur e available on t he swit ch, and how to u se IG MP filterin g to c ontro l mul tica st
group membership.
Chapter 18, “Configuring Port-Based Traffic Control,” describes how to reduce traffic storms by setting
broadcast, multicast, and unicast storm-control threshold levels; how to protect ports from receiving
traffic from other ports on a switch; how to configure port security by using secure MAC addresses; and
how to set the aging time for all secure addresses.
Chapter 20, “Configuring CDP,” describes how to con figure C isco Di scovery Prot ocol (CD P) on you r
switch.
Chapter 21, “Configuring SPAN and RSPAN,” describes how to configure Switched Port Analyzer
(SPAN) and Remot e SPAN (RSPAN), which sel ect n e twork t r affic for analy si s by a ne twor k ana lyz er
such as a SwitchProbe device or other Remote Monitoring (RMON) probe.
Chapter 22, “Configuring RMON,” describes how to configure remote monitoring (RMON). The
RMON feature, which is used with the Simple Network Management Protocol (SNMP) agent in the
switch, means that you can monitor all the traffic flowing among switches on all connected LAN
segments.
Chapter 23, “Configuring System Message Logging,” describes how to configure syst em messa ge
logging. It describes the message format and how to change the message display destination device, limit
the type of message s sent , c onfigure t he U NIX ser ver sy slog daem on, and define t he U NIX syste m
logging facility and timestamp messages.
78-14982-01
Chapter 24, “Configuring SNMP,” describes how to configure the Simp le Networ k Ma nage ment
Protocol (SNMP). It describes how to configure community strings, enable trap managers and traps, set
the agent contact and location information, and how to limit TFTP servers used through SNMP.
You can order printed copies of documents with a D OC-xxxxxx= number from the Cisco.com sites and
from the telephone numbers listed in the “Obtaining Docu me nta tio n” section on page xxix.
• Release Notes for the Catalyst 2950 Switch (not orderable but is available on Cisco.com)
• Release Notes for the Catalyst 2900 Series and Catalyst 3500 Series XL Switches (not orderable but
is available on Cisco.com)
NoteSwitch requirements and procedures for initial configurations and software upgrades tend to change and
therefore appear only in the release note s . Before installing, configuring, or upgrading the switch, refer
to the release notes on Cisco.com for the latest information.
• Catalyst 2950 D esktop Sw itch Comm and Refe rence (or der n um ber D OC -781 1381 =)
Related Publications
• Catalyst 2950 Desktop Switch System Message Guide (order num ber DOC-781 4233= )
Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM
package, which is shipped with your product. The Documentation CD-ROM is updated monthly and may
be more current than printed documentation. The CD-ROM package is available as a single unitor
through an annual subscription.
Ordering Documentation
You can order Cisco documen tation in th ese ways:
• Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from
the Networking Produ cts Market Pla ce:
http://www.cisco.com/cgi-bin/order/order_root.pl
• Registered Cisco.com users can order the Documentation CD-ROM through the online Subscription
Store:
http://www.cisco.com/go/subscription
Preface
• Nonregistered Cisco.co m u ser s can o rd er docum en tati on th rou gh a l oc al ac count r epre sen tative by
calling Cisco Systems Corpo rate Headqu arter s (Califo rnia, U.S.A. ) at 408 526-7208 or, elsewhere
in North America, by calli ng 800 55 3-NE TS (6387).
Documentation Feedback
If you are reading Cisco product documentation on the World Wide W eb, you can send us your comments
by completing the online survey. When you display the document listing fo r this platfor m, cli ck Give
Us Your Feedback. After you display the survey , select the manual that you wish to comment on. Click
Submit to send your comments to the Cisc o document ation gro up.
You can e-mail your comm ents t o bug-doc@c isco.co m.
To submit you r co mme nts by ma il, u se th e r esponse ca rd behi nd the fro nt c over of your d oc um ent, o r
write to the following address:
Cisco Systems
Attn: Document Resour ce Connec tion
170 West Tasman Drive
San Jose, CA 95134- 988 3
We apprec iate yo ur comm en ts.
Obtaining Technical Assistanc e
xxx
Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can
obtain online documentation, troubleshooting tips, and sample configurations from online tools by using
the Cisco Technical Assistance Center (TAC) Web Site. Cisco.com registered users have complete
access to the technical support resources on the Cisco TAC Web Site.
Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open
access to Cisco information,networking solutions, service s, pr ogram s, a nd resour ce s at any time , from
anywhere in the wor ld.
Cisco.com is a highly int egrated In ternet a pplicat ion and a powerful , easy- to-use t ool that provi des a
broad range of f eat ures an d s er vices to hel p you w it h th ese tasks:
• Streamline business processes and improve productivity
• Resolve technical issues with online support
• Download and te st so ft war e pa ck ag es
• Order Cisco learning m ateri als and me rcha ndise
• Register for online skill assessment, training, and certification programs
If you want to obtain customized information and service, you can self-register on Cisco.com. To access
Cisco.com, go to this URL:
http://www.cisco.com
Technical Assistance Center
The Cisco Technical Assistan ce Center ( TAC) is av ailab le to all c ustomers who need technica l assistan ce
with a Cisco product, technology, or solution. Two levels of support are available: the Cisco TAC
Web S i te an d t h e C is co TAC Escalation Cen ter.
Cisco TAC inquiries are categorized accordi ng to the urgency of the issue :
• Priority level 4 (P4)—You need information or assistance concerning Cisco product capabilities,
product installation, or basi c product configuration.
• Priority level 3 (P3)—Your network performance is degraded. Ne twork functio nality i s noticeab ly
impaired, but most business operations continue.
• Priority level 2 (P2)—Your production network is severely degraded, affecting signi ficant aspect s
of business operations. No workar oun d is available.
• Priority leve l 1 (P1)—Your production network is down, and a critical impact to business operations
will occur if se rv ice is n ot r esto re d qui ck ly. No workaround i s available.
The Cisco TAC resource that you choose is ba sed on the prio rity of th e proble m and the co nditions of
service cont rac ts , w h en appl ic ab le .
Cisco TAC Website
You can use the Cisco TAC Web Site to resolve P3 and P4 issues yourself, saving both cost and time.
The site provides around-the-clock access to online tools, knowledge bases, and software. To access the
Cisco TAC Web Site, go to t his URL:
http://www.cisco.com/tac
78-14982-01
All customers, partners, and resellers who have a valid Cisco service contract have complete access to
the technical support resources on the Cisco TAC Web Site. The Cisco TAC Web Site requires a
Cisco.com login I D a nd passwor d. If yo u have a valid servi ce con tra ct but do no t have a login ID or
password, go to this URL to register:
If you are a Cisco.com registere d user, and you cannot resol ve your tech ni cal issues by using the Cisco
TAC Web Site, you can open a case onl ine by using the TAC Case Open too l at this URL :
http://www.cisco.com/tac/caseopen
If you have Internet access, we recommend that you open P3 and P4 cases through t he Cisco TAC
Web Site.
Cisco TAC Escalation Center
The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These
classifications are assigned when severe network degradation significantly impacts business operations.
When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer
automatically opens a case.
To obtain a d ir ect or y of t oll- free C isco TAC telephone numbers for yo ur co unt ry, go to this URL:
Before calling, please check with your network operationscenter to determine the le v el of Cisco suppor t
services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network
Supported Accounts (NSA). When you call the center, please have available your service agreement
number and your product se rial numbe r.
This section describes the features supported in this release:
NoteSome features require that you have the EI installed on your switch. For a list of the switches that support
the EI, see Table 1-1, or refer to the release notes for this release.
LRE Switch-Specific Support
The Long-Reach Ethernet (LRE) switches support all of these listed EI features in addition to some
specific features for LRE.
• Data, voice, and video transmi ssion through categorize d and nonc ategorized uns hielde d
twisted-pair cable (Category 1, 2, and 3 structured and unstructured cable, such as existing
telephone lines) in multi-unit, multidwelling, and multitenant buildings
• Up to 15 Mbps of bandwidth to remote Ethernet devices at distances of up to 4921 feet (1500 m) on
each switch LRE port
• Compliance with American Nation al Stan dar ds Institute ( ANSI ) a nd Eu ropean Telecommunicatio n
Standards Institute (ETSI) standards for spectral-mode compatibility with asymmetric digital
subscriber line (ADSL), Integrated Services Digital Network (ISDN), and digital telephone
networks
• Configuration and monitoring of c onnec tions betwe en:
–
Switch LRE ports and the Ethernet ports on remote LRE customer premises equipment (CPE)
devices, such as the Cisco 575 LRE CPE and Cisco 585 LRE CPE
–
CPE Ethernet ports and remote Ethernet devices, such as a PC
• Support for connecting to the pub lic switche d telephon e network (PSTN ) through plai n old
telephone service (POTS) splitters such as the Cisco LRE 48 POTS Splitter
• Support for the rate selection, a utility that allows for automatic selection of transmission rates
through profiles and p rofile se que nce s
• A set of additional rate profiles
• Support for Reed-Solomo n error cor rection
• Additional MIB suppor t
• Support for the secure shell (SSH) and SNMPv 3 crypto, with a protected po rt on 585 CPE devices
• Support for small form-factor plugga ble (SFP) devices instead of g igabit interface converters
(GBIC); GigaStack is not suppor ted on the 2950 LRE
NoteMost Catalyst 29 50 fe atu re s a lso work on t he C atal yst 2 950 L RE switc h, wi th th e di fference th at LRE
switches use Long-Reac h Ether net rathe r than Fast Ethernet and Giga bit for th e Gigabit por ts.
For information about the Cisco LRE CP E devices, refer to the Cisco L RE CP E Hardware Installation
Guide. For information about the nonhomologated Cisco LRE POTS splitter, refer to the Installation
Notes for the Cisco LRE 48 POTS Splitter.
1-2
Ease of Use and Ease of Deployment
• Cluster Management Sui te (C MS) sof tware for si mplif y ing switc h and sw itch c luste r ma nag eme nt
through a web browser, such as Netscape Communicator or Microsoft Internet Explorer, from
anywhere in your intranet
• Switch clusterin g te ch nology u sed wi th CM S for
–
Unified configuration, monitoring, authentication, and software upgrade of multiple switches
(refer to the release notes for a list of eligible cluster members).
–
Automatic discovery of candidate switches and creation of clusters of up to 16 switches that can
be managed throug h a s in gle IP ad dre ss.
–
Extended discovery of cluster candidates that are not directly connected to the command switch.
• Hot Standby Router Prot ocol (H SRP) for c om mand- swi tch re du ndancy. The redundant c omm and
switches used f or HS RP m ust have comp atibl e so ft ware re le ases.
NoteSee the “Advantages of Using CMS and Clustering Switches” section on page 1- 7. Refer to the
release notes fo r th e CM S, clust er ha rdware , sof t ware, and br owser req ui reme nts.
Performance
• Autosensing of speed o n t he 10/100 and 10/100/1000 ports and autonegotiation of duplex mode on
the 10/100 ports f or optim izing ba nd width
• IEEE 802.3X fl ow control on G iga bit Eth erne t po rts o pe rat ing i n fu l l-dup lex mo de
• Fast EtherChannel and Gigabit EtherCh annel fo r enhance d fault tolera nce and for providing up
to 2 Gbps of bandwidth between switches, routers, and servers
• Support for frames larger th an 1500 bytes. The Catalys t 2950G-12-EI, 2950G-24-EI, 2950G-24-EI-DC,
and 2950G-48-EI switches running Cisco IOS Release 12.1(6)EA2 or later support frame sizes from
1500 to 1530 bytes
• Per-port broadcast storm control for pr eventing faulty end stations from degrading overall system
performance with broadcast storms
• Port Aggregation Protocol (PAgP) for automatic creation of Ether Chann el links
• Internet Group Manage ment Protoc ol (IGMP) snoo ping suppor t to limit floo ding of IP multi cast
traffic
• Multicast VLAN registration (MVR) to continuously send multicast streams in a multicast VLAN
while isolating the streams from subscriber VLANs for bandwidth and security reasons
• IGMP filtering for con trolling th e set of mu lticast grou ps to which hosts on a swit ch port ca n belong
• Protected port (private VLAN edge port) option for restricting the forwarding of traffic to
designated ports on the same switch
• Dynamic address l ear ning fo r en hance d secu ri ty
Manageability
• Cisco Intelligence Engine 2100 (IE210 0) Series Cisc o Networking Ser vices (CN S) embedd ed
agents for automating swit ch ma nage ment , con figurati on stor age a nd de livery(available only with
the EI)
• Dynamic Host Configuration Protocol (DHCP)-based autoconfiguration for automatically
configuring the switch duri ng startup wit h IP addre ss informa tion an d a configurati on file that it
receives during DHCP-based au toc onfigurati on
NoteDHCP replaces the Bootstrap Protocol (BOOTP) feature autoconfiguration to ensure retrieval of
configuration files by unicast TFTP messages. BOOTP is available in earlier software releases
for this switch.
The switches are desig ned for plug-and-play operation: you only need to assign basic IP informat ion to
the switch and connect it t o the othe r devices in you r ne twork . If yo u have specific network needs , yo u
can config ur e a nd m oni tor the switch—on an individual basis or as part of a switch cluster—through its
various management interfaces.
This section discusses these topics:
• Management Interface Option s, page 1-7
• Advantages of Using CMS and Clustering Switches, page 1-7
Management Interface Options
You can configure and monitor ind ividual switches and sw itch cluste rs by using these inte rfaces:
• CMS—CMS is a grap hic al use r int erface tha t c an be laun ch ed from a nywhere in yo ur network
through a web browser suc h as N etsc ape Commu nica tor or M ic roso ft Int erne t E xplor er. CMS is
already installed on the switc h. U sing CM S, you c an c onfigure an d mon itor a st anda lon e switc h, a
specific cluster member, or an entire switch cluster. You can also display network topo logies to
gather link information and display switch images to modify switch and port level settings.
For more information about CMS, see Chapter 3, “Getting Started with CMS.”
Management Options
• CLI—The switch IOS CLI software is enh anced to suppo rt desktop- switchi ng feature s. You can
configure and monitor the switch and switch cluster members from the CLI. Y ou can access the CLI
either by connecting your management station directly to the switch console port or by using Telnet
from a remote management sta tion.
For more information about the CLI, see Chapter 2, “Using the Comm an d-Li ne I nter face. ”
• IE2100—Cisco Intelligence Engine 2100 Series Configuration Registrar is a network management
device that works with embedded CNS Agents in the switch software. You can automate initial
configurations and configurat ion up da tes by gene ratin g sw it ch-sp ec ific con figurati on chan ges ,
sending them to the switch, executing the configuration change, and logging the results.
For more informati on abou t IE21 00, se e Ch apter 5, “Configuring IE2100 CNS A gent s.”
• SNMP—SNMP provides a means to monitor and control the switch and switch cluster members.
You can manage sw it ch c onfiguratio n se tt ings, per forma nc e, a nd sec urity an d c olle ct st atis tics by
using SNMP managem ent ap pl icati ons such as Cisc oWorks2000 LAN Managemen t Suit e ( LMS)
and HP OpenView.
You can manage the switch from an SNMP-compatible management station that is running
platforms such as HP OpenView or SunNet Manager. The switch supports a comprehensive set of
MIB extensions and four RMON groups.
For more information about using SNMP, see the Chapter 24, “Configuring SNMP.”
Advantages of Using CMS and Clustering Switches
78-14982-01
Using CMS and switch clusters can simplify and minimize your configuration and monitoring tasks. Y ou
can use Cisco switch cluster ing techno logy to manage up to 16 in tercon nected and support ed Cataly st
switches through one IP address as if they were a single entity. This can conserve IP addresses if you
have a limited number of them. CMS is the easiest int erface to use and makes switch and switch cluster
management accessible to authorize d users from any PC on your ne twork.
• Manage and monitor interconnected Catalyst switches (refer to the release notes for a list of
supported switches), regardless of their geographic proximity and interconnection media, including
Ethernet, Fast Ether net , Fast Ethe rCh annel , Ci sco G igaStac k G igabit I nte rface Co nverter (GBIC),
Gigabit Ethernet, and Giga bit EtherCh annel co nnec tions.
• Accomplish multiple conf iguration tasks from a single CMS window without needing to remembe r
CLI commands to accomplish specific tasks.
• Apply actions from CMS to multiple ports and multiple switches at the same time to avoid
re-entering the same co mmands for e ach individual por t or switch . Here are som e examples of
globally setting and mana ging multip le ports and sw itches:
• Vi ew a topology of interconnected devices to identify existing switch clusters an d eli gible switc h es
that can join a cluster. You can also use the topo logy to qui ckly ident ify link i nform ation bet ween
switches.
• Monitor real-time status of a sw itch o r mul tip le swit ch es f rom t he LED s on the f ro nt-p anel images.
The system, redundant power system (RPS), and port LED colors on the images are similar to those
on the physical L EDs.
Chapter 1 Overview
–
Port configuration such a s spe ed an d d uplex set tin gs
–
Port and console po rt s ecur ity set ting s
–
NTP, STP, VLAN, and quality of service (QoS) configurations
–
Inventory and statistic reporti ng and li nk and sw it ch-l evel monitori ng and trou bles hoot ing
–
Group software upgr ades
• Use an interactive mode that takes you step-by -step throu gh configurin g complex feat ures such as
VLANs, ACLs, and QoS.
• Use a wizard that prompts you to provide the minimum required inform ation to configure complex
features such as QoS priorities for video traffic, priority levels for data applications, and security.
For more information about CMS, see Chapter 3, “Getting Started with CMS.” For more information
about switch clusters, see Chapter 6, “Clustering Switches.”
Network Configuration Examples
This section provide s network co nfigurati on conc ept s and i ncl udes examples of usin g t he s wit ch t o
create dedicated network segments and interconnecting the segments through Fast Ethernet and Gigabit
Ethernet connec tions.
Design Concepts for Using the Switch
As your network u sers c om pete for ne twork b an dwi dth, it t akes lon ge r to send a nd rec eive data. Whe n
you configure your net work, co nside r the ba nd wid th r eq uired by your n etwork u s ers a nd the re lative
priority of the network applications they use.
Table 1-2 desc ribes wh at can cause network pe rform ance to degrade and how you can configur e your
network to increase the bandwidt h available to your network users.
Too many users on a singl e network segment
and a growing number of users accessing the
Internet
• Increased power of new PCs,
workstations, and servers
• High demand f rom n etwor ked
applications (such as e-mail with large
attached files) and from
bandwidth-intensive applicatio ns ( such
as multimedia)
• Create smaller network segments so that fewer users share the
bandwidth, and use V L ANs and I P subne ts t o pla ce the ne twork
resources in the same logical network as the users who access those
resources most.
• Use full-duplex operation between the switch and its connected
workstatio n s.
• Connect global resources—such as servers and routers to which network
users require equal access—directly to t he Fa st E ther net or G iga bit
Ethernet switch ports so th at they have their own Fast Ethernet or
Gigabit Ethernet segment.
• Use the Fast EtherChannel or Gigabit EtherChannel feature between the
switch and its connected servers and routers.
Network Configuration Examples
Bandwidth alone is not th e only conside ration w hen desig ning your ne twork. As your net work traffic
profiles evolve, consider providing network services that can support applications such as voice and data
integration and security.
Table 1-3 desc ribes some net work demands and how you can meet those de mand s.
Table 1-3Providing Networ k Service s
Network Deman dsSuggested Des ign Metho ds
High demand f or mul tim ed ia support
High demand for protecting mission-critical
applications
• Use IGMP and MVR to efficiently forward multicast traffic.
• Use VLANs and protecte d ports to provide sec urity and port isola tion.
• Use VLAN trunks, cross-stack UplinkFast, and BackboneFast for
traffic-load balancing on the uplink ports so that the uplink port with a
lower relative port cost is selected to carry the VLAN traffic.
An evolving demand for I P t el ephony
• Use QoS to prioritize applications such as IP telephony during
congestion and to help control bo th delay and jitter with in the netw ork.
• Use switches that support at least two q ueues per por t to priorit ize vo ice
and data traffic as eithe r high- or low-prior it y, based on 802.1P /Q.
A growing demand for us ing exi sti ng
infrastructure t o transpor t data and voice from
• Use the Catalyst 2950 LRE switches to provide up to 15 Mb of IP
connectivity over existing infrastructure (existing telephone lines).
a home or off ice to th e Internet or an intr anet at
higher speeds
78-14982-01
Figure 1-1 shows configuration examples of using the Catalyst switches to create these networks:
• Cost-effective wiring closet—A cost-effective way to connect many users to the wiring closet is to
connect up to nine Catalyst 2900 XL, Catalyst 2950, Catalyst 3500 XL, and Catalyst 3550 switches
through GigaStack G BIC c on nect ions. W he n y ou use a stac k of Ca talyst 295 0G -48 sw it ches, y ou
can connect up to 432 users. To pr eserv e switch connecti vit y if on e switch in the stack fails, connec t
the bottom switch to the top switch to create a GigaStack loopback, and enable cross-stack
UplinkFast on the cross-st ack Gi gabit upli nks .
You can create backup pa ths by using Fast Ethernet, Gigabit, Fast Eth erChanne l, or Gigab it
EtherChannel links. Using Gigabit modules on t wo of the switches, you can have redundant uplink
connections to a Gigabi t backbon e switch suc h as the Cataly st 3550-12G switc h. If one of the
redundant connection s fails, the other can serve as a backup pat h. You can configure the stack
members and the Catalyst 3550-12G switch as a switch cluster to manage them through a single IP
address.
• High-performance workgroup—For users who require high-speed access to network resources, use
Gigabit modules to connec t the switches directly to a backbone switch in a star co nfiguration. Each
switch in this configuration provides users with a dedicated 1-Gbps connection to network resources
in the backbone. Compare this with the switches in a GigaStack configuration, where the 1-Gbps
connection is shared among the switches. With the high speed uplink to the distribution server, the
user can efficiently obt ain and store d ata f rom ser vers. Us ing t hese Gi gabi t m odule s a lso pr ovides
flexibility in media and distance options:
• Redundant Gigabit back bon e—Using HSRP, you can create backup paths between
Catalyst 3550-12T-L3 switches. To enhance network reliability and load balancing for different
VLANs and subnets, you can connect the Catalyst 2 950 switches, again in a star configuration, to
two backbone switches. If one of the backbone switches fails, the second backbone switch preserves
connectivity between the swi tches an d network re sources.
Chapter 1 Overview
–
1000BASE-T GBIC: copper c onnec ti ons of up t o 328 f eet ( 100 m ete rs)
–
1000BASE-SX GBIC: fiber-optic con necti on s of u p t o 1804 feet (550 meters)
–
1000BASE-LX/LH GBIC: fiber-optic c onn ecti ons of up t o 32, 808 feet (10 kil omet ers)
–
1000BASE-ZX GBIC: fiber-optic connections of up to 328 ,084 feet (100 kilome ters)
–
GigaStack GBIC mo dule for c reati ng a 1- Gbps st ack configur ation of u p to nine supp orted
switches. The GigaStack GBIC supports one full-duplex link (in a point-to-point configuration)
or up to nine half-duplex links (in a st ack configur ation ) to other Gi gabit Ethe rnet devices.
Using the required Cisco proprietary signaling and cabling, the GigaStack GBIC-to-GigaStack
GBIC connection ca nnot excee d 3 feet (1 me ter).
–
Catalyst 2950 LRE switches support SFP GBIC as well as 1 0/100/100 0 copper connections
Figure 1-2 shows a configura tion for a n etwor k th at ha s up t o 250 u s ers. U sers i n this net work requi re
e-mail, file-sharing, database, and Internet access.
You optimize network performance by placing workstations on the same logical segment as the servers
they access most often. This divides the network into smaller segments (or workgroups) and reduces the
amount of traffic that tr avels over a networ k back bon e, the reby i ncre asin g t he ba ndwi dth available to
each user and improving server response time.
A network backbone is a high-bandwi dth conne ction (suc h as Fast Ethern et or Gigabit Ethernet ) that
interconnects segments and network resources. It is re qu i re d i f nu me r ou s s eg me n ts re q ui re ac ce s s t o th e
servers. The Catalyst 2900, Catalyst 2950, Catalyst 3500, and Catalyst 3550 switches in this network are
connected through a Gi gaSta ck G BI C on eac h swi tc h to fo rm a 1- Gbps ne twork bac kbo ne. This
GigaStack can also be configured as a switch cluster, with primary and secondary command switches for
redundant cluster ma nage ment .
Workstations are connected directly to the 10/100 switch ports for their own 10- or 100-Mbps access to
network resources (such as web and mail servers). When a workstation is configured for full-duplex
operation, it receives up to 200 Mbps of dedicated ba ndwidth fr om the switch .
Servers are connected to the G BIC module ports on the sw itches, allowing 1-Gbp s throughput to users
when needed. When the switch and server ports are configured for full-duplex operation, the links
provide 2 Gbps of band w idth . For ne tworks tha t do n ot requ ire Gi gab it perf orm ance f rom a ser ver,
connect the server to a Fast Ethernet or Fast EtherChannel switch port.
Connecting a router to a Fast Eth ernet swi tch port pro vides mu ltiple, s imultan eous acces s to the Intern et
through one l ine.
Figure 1-2Small to Medium-Sized Network Configuration
Collapsed Backbone and Switch Cluster Configuration
Figure 1-3 shows a con figurati on for a n etwork of ap pro xima te ly 50 0 employees. This ne twor k us es a
collapsed backbone a nd switch cl usters. A collapse d backbon e has high-b andw idth upli nks from all
segments and subnetworks to a single device, such as a Gigabit switch, that serves as a single point for
monitoring and c ontro llin g th e network. You can use a Catalyst 3550-12T-L3 swit ch, as shown, or a
Catalyst 3508G XL switch to crea te a G igab it back bone . A C atal yst 3550-12T-L3 ba ckbo ne swi tch
provides the benefits of inter-VLAN routing and allows the router to focus on WAN access.
The workgroups are created b y clustering all the Catalyst switch es except the Catalyst 4908G-L3 switch.
Using CMS and Cisco sw itch c luste ring tec hnol ogy, you can group the swi tches i n to mu ltip le cl uste rs,
as shown, or into a single cluster. You can manage a cluster through the IP address of its active and
standby command switche s, regardless of the geo graphic locati on of the cluster members.
This network uses VLANs t o segme nt the network logically int o well-defined broadcast groups and for
security management. Data a nd multimedia tr af fic a re conf igured on th e same VLAN. Voice traff ic from
the Cisco IP Phone s ar e co nfigured on se pa rate voice VL AN IDs (V VIDs ). You can have up to
four VVIDs per wiring closet. If data, multimedia, and v oice traff ic are assigned to the same VLAN, only
one VLAN can be configured pe r wiring cl oset. For any switch port connec ted to Cisco IP Phones,
802.1P/Q QoS gives forwarding priority to voice traffic over data traffic.
Grouping servers in a centralized location provides benefits such as security and easier maintenance.
The Gigabit connections to a server farm provide the workgroups full access to the network resources
(such as a call-processing server running Cisco CallManager software, a DHCP server, or an IP/TV
multicast server).
Network Configuration Examples
Cisco IP Phones are connected—us ing s tand ar d s traig ht -thr ough, t wiste d-p air cab le with RJ- 45
connectors—to the 10/100 inline-power ports on the Catalyst 3524-PWR XL switches and to the
10/100 ports on the Catalyst 2950 switches. These multiservice switch ports automatically detect if an
IP phone is connected . Cisc o Cal lMa nage r con tr ols c all pr oc essin g, r outi ng, a nd I P pho ne fe atu re s an d
configuration. Users with workstations running Cisco SoftPhone software can place, receive, and control
calls from their PCs. Using Cisco I P Phone s, Cisc o CallMan ager software, and Cisco SoftPho ne
software integrates tel ephony a nd IP ne tworks, a nd the IP n etwork supp orts both voice and d ata .
Each 10/100 inline-power port on the Catalyst 3524-PWR XL switches provides –48 VDC power to the
Cisco IP Phone. The IP pho ne can receive redundan t power when it also is conn ected to a n AC power
source. IP phones n ot c on necte d to the C atal yst 3524-PWR XL switc hes rec eive power from an AC
power source.
Figure 1-3Collapsed Backbone and Switch Cluster Configuration
Gigabit
servers
Cisco
CallManager
Catalyst 3550-12T or
Catalyst 3550-12G switch
Chapter 1 Overview
(2 Gbps full duplex)
Catalyst 2950, 2900,
3550, and 3500
GigaStack cluster
Workstations running
Cisco SoftPhone software
1 Gbps
3550, and 3500
GigaStack cluster
Catalyst
2950, 2900,
Si
IPIPIP
Cisco IP Phones
Cisco 2600 router
200 Mbps
Fast EtherChannel
(400-Mbps full-duplex
Fast EtherChannel)
Catalyst
3524-PWR
GigaStack cluster
IP
IP
Cisco
IP Phones
81635
Large Campus Configuration
Figure 1-4 shows a confi gur atio n fo r a n etwork of more than 1000 users. Because it can ag gr e gate up to
130 Gigabit connections, a Catalyst 6500 multilayer switch is used as the backbone switch.
You can use the wo rkg roup co nfigurat ions shown in previous exa mple s to c reate workg rou ps with
Gigabit uplinks to the Catalyst 6500 switch. For example, you can use swit ch clusters th at have a mix
of Catalyst 2950 switche s.
The Catalyst 650 0 sw itc h p rovides the workgr oups w it h Giga bit acce ss to c ore r esour ce s:
• Cisco 7000 series router for access to the WAN and the Internet.
• Server farm that incl udes a cal l-pr ocessi ng se rver ru nnin g C isco Cal lMana ger soft ware. Ci sco
CallManager controls call proc essing, ro uting, and IP phone fea tures an d configurati on.
• Cisco Access gateway (such as Cisco Access Digital Trunk Gateway or Cisco Access Analog Trunk
Gateway) that connects the IP network to the Public Switched Telephone Network (PSTN) or to
users in an IP telephony network.
Figure 1-5 shows the Catalyst 2950 LRE switches in a hotel network environment with approximately
200 rooms. This net work inc lude s a PBX sw itch board , a ro uter, and hig h-sp eed servers.
Connected to the telephone line in each hotel room is an LRE CPE device, such as a Cisco LRE CPE
device. The LRE CPE device pr ovides :
• Two RJ-11 ports, one for connecting to the telephone jack on the wall and one for connecting to a
POTS telephone.
• One or more RJ-45 Et hern et po rts for connec ting to de vic es s uch as a cu stome r’s laptop, the room’s
IP phone, the television set-top box, or a room environmental control device. A Cisco 575 LRE CPE
provides one Ethernet c onnect ion; a Cisco 585 LRE CP E provides four.
When connected to the CPE device, the Ethern et devices an d room tele phon e share th e same telep hon e
line.
NoteAll telephones not directly connec ted to the ho tel room CPE de vic e require mi crof ilter s with a 300 -ohm
termination. Microfilters improve voice call quality when voice and data equipment are using the same
telephone line. They also pre v ent nonf iltered tel ephone rings and nonf iltered t elephone transitions ( such
as on-hook to o ff-hook) fr om i nte rru pti ng t he E th erne t c onn ect ion.
Chapter 1 Overview
Through a patch panel, the t elep hone lin e f rom ea ch r oom connects to a nonhomologated POTS splitter ,
such as the Cisco LRE 48 POTS Splitter. The splitter routes data (high-frequency) and voice
(low-frequency) traffic from the telephone line to a Catalyst 2950 LRE switch and digital private branch
exchange (PBX). The PBX routes voice traffic to the PSTN.
If a PBX is not on-site, a homologated POTS splitter is required to connect directly to the PSTN.
NoteConsult the regulations for connecting to the PSTN in your area.
If a connection to a phone network is not required at all, a splitter is not needed, and the switch can
connect directly to t he pa tc h p anel .
NoteCisco LRE products can share lines with analog telephones, Integrated Services Digital Network (ISDN)
telephone network, and PBX switch es that use the 0 to 700 kHz fr equency rang e.
Data to and from the room devices (such as e-mail for the laptop and IP multicast traffic for the
television) are transferred through the LRE link, which is established betw een the CPE RJ-11 wall port
and the LRE port on an LRE switch. The upstream and downstream rates on the LRE link are controlled
by a profile configured on each LRE port. If the LRE switch was connected to the PSTN through a
homologated POTS splitter, all LRE ports would use an ANS I-com pl ia nt L RE pr ofile name d
LRE-998-15-4.
The Catalyst 2950 LRE switches are cascaded through their 10/100/1000 switch ports. Each switch also
has a 10/100/1000 connection to an a ggregation sw it ch, such as a 35 50- 12G swit ch. The aggr egation
switch can connect to:
1-16
• Accounting, billing, and provisioning servers.
• A router that provid es In tern et acc ess to th e pr emis es.
You can manage the switches as a switch cluster and throug h the clu s te r management suite (CMS). You
can also manage and mon itor the i ndividual CPE devices from t he LRE switc hes to whic h they are
connected. The C ata lyst 2950 L RE swi tch port s su ppor t the s ame sof tware feat ur es a s 10 /100 /1 000
switch ports. For example, you can configure port-based VLANs on the LRE ports to provide individual
port security an d p rote c ted port s to fu rt her prevent unwan ted br oadc asts w ith in the V LA Ns.
Multidwelling Network Using Catalyst 2950 Switches
A growing segment of residential and commercial customers are requiring high-speed access to Ethernet
metropolitan-area netwo rks (MANs). Figure 1-6 shows a co nfigur ation for a Gig abit Ethe rnet MAN ring
using Catalyst 3550 multilayer switches as aggregation switches in the mini-point-of-presence (POP)
location. These sw itch es ar e conn ec ted thr oug h 1000 BASE-X GBIC po rts.
The resident switches can be Catalyst 2950 switches, providing customers with high-speed connections
to the MAN. Cataly s t L RE Layer 2 only switches also can be used as residential switches for customers
requiring connectivity through existing telephone lines. The Catalyst LRE switches can then be
connected to another resid ential switch or to an aggregati on switch. Fo r more informatio n about the LRE
switches, refer to th e Catalyst 2950 Series Hardware Installation Guide.
All ports on the residential Catalyst 2950 switches (and Catalyst LRE switches if they are included) are
configured as 802.1Q trunks with protected port and STP root guard features enabled. The protected port
feature provides security and isolation between ports on the switch, ensuring that subscribers cannot
view packets destined for other subscri bers. STP ro ot guard prevents unauthor ized devices fro m
becoming the STP r oot switc h. A ll po rt s have IGMP sn oop ing or CGM P e nabled f or mu ltic ast tra ffic
management. ACLs on the uplink ports to the aggregating Catalyst 3550 multilayer switches provide
security and bandwidth management.
The aggregating switches and routers provide services such as those described in the previous examples,
“Small to Medium-Si zed Network Configuration” and “L arge Camp us Configuration.”
Long-Distance, High-Bandwidth Transport Configuration
NoteT o use the fe ature describ ed in this section, you must ha ve the EI installed on your Catalyst 2950 swit ch.
This feature does not apply to the Catalyst 2950 LRE switches.
Figure 1-7 shows a configuration for transporting Gigabits of data from one location to an off-site
backup facility over a single fiber-optic cable. The Catalyst switches have Coarse Wave Division
Multiplexer (CWDM) fiber-optic GBIC modules installed. The CWDM GBIC modules can connect to
distances of up to 393,701 feet (74.5 miles or 120 kilometers). Depending on the CWDM GBIC module,
data is sent at wavelengths from 1470 to 1610 nanomet ers (nm ). The high er the wavelength, the farth er
the transmission can travel. A common wavelength for long-distanc e transmission s is 1550 nm.
Up to eight CW DM GB IC modul es , w ith any co mbi n ation of wavelengths, c an c onn ect to a Cisc o
CWDM Passive Optical System. It combines (or multiplexes) the different CWDM wavelengths,
allowing them to trav el simulta neously on the same fib er-opt ic cable. The Cisco CWDM Passi v e Optical
System on the receiving end separates (or demultiplexes) the different wavelengths.
Using CWDM technology with the switche s translates t o farther data tra nsmissio n and an increa sed
bandwidth capacity (up to 8 Gbp s) on a single fiber-optic cable.
Chapter 1 Overview
For more information about the CWDM GBIC modules and CWDM Passive Optical System, refer to the
CWDM Passive Optical System Installation Note.
Figure 1-7Long-Distance, High-Bandwidth Transport Configuration
This chapter d escri b es t he IO S co mman d-l ine int erfa ce (C LI) t hat you ca n u se to con figure your
switches. It contains these sections:
• IOS Command Modes, page 2-1
• Getting Help, page 2-3
• Abbreviating Commands, page 2- 5
• Using no and default Forms of Commands , page 2-5
• Understanding CLI Mess ages , pa ge 2-5
• Using Command History, page 2-6
• Using Editing Features, page 2-7
• Searching and Filtering Output of show and more Commands, page 2-10
• Accessing the CLI, page 2-10
IOS Command Modes
The Cisco IOS user interface is divided into many different modes. The commands available to you
depend on which mode you are curre ntl y in. En ter a ques tion ma rk (? ) at the system prom pt to ob tain a
list of commands available for each command mode.
When you start a sessio n on the swi tch, you b egin in us er mo de, o ften c alle d user EX EC m ode . Onl y a
limited subset of the commands are available in user EXEC mode. For example, most of the user EXEC
commands are one -time comm ands, s uch as show commands, which show the current configuration
status, and cle ar commands, which clear counters or interfaces. The user EXEC commands are not saved
when the switch reboots.
To have access to all commands, you must enter privileged EXEC mode. Normally, you must enter a
password to enter privileged EXE C m od e. Fr om this mode , you c an en ter any privileged E XEC
command or enter glob al co nfigurati on mode.
Using the configurat ion m odes ( gl ob al, i nte rface , and l ine ), y ou ca n ma ke ch ang es to the ru nning
configuration. If you save the configuration, these commands are stored and used when the switch
reboots. To access the various configuration modes, you must sta rt at glo bal c onfigura tion mo de . Fro m
global configuration mo de, you can enter inte rface con figuration mod e and line configurati on mode.
While in global
configuration mode,
enter the interface
command (with a
specific interface).
Line configurationWhile in global
configuration mode,
specify a line with
the line vty or line console command.
Switch(vlan)#
Switch(config-if)#
Switch(config-line)#
To exit to privileged
EXEC mode, enter
exit.
To exit to global
configuration mode,
enter exit.
To return to
privileged EXEC
mode, press Ctrl-Z or
enter end.
To exit to global
configuration mode,
enter exit.
To return to
privileged EXEC
mode, press Ctrl-Z or
enter end.
Use this mode to configure
VLAN parameters for
VLANs 1 to 10 05 i n the
VLAN database.
Use this mode to configure
parameters for the switch
and LRE CPE Ether net
interfaces.
To configure multiple
interfaces with the same
parameters, see the
“Configuring a Range of
Interfaces” section on
page 9-6.
Use this mode to configure
parameters for t he t erm ina l
line.
Getting Help
Getting Help
You can enter a question mark (?) at the system prom p t to di s play a lis t of co mm an d s a vailable for each
command mode. You can also obtain a list of associated keywords and arguments for any command, as
shown in Table 2-2.
Tabl e 2-2He lp Su mmar y
CommandPurpose
helpObtain a brief descript ion of the help syst em in any comman d mode.
abbreviated-command-en try?Obtain a list of commands that begin with a parti cular characte r string .
For example:
Switch# di?
dir disable disconnect
abbreviated-command-en try<Tab>Complete a partial command name.
For example:
Switch# sh conf<tab>
Switch# show configuration
?List all comma nds available for a part ic ular c omma nd mo de.
command?List the associated keywords for a command.
For example:
Switch> show ?
command keyword?List the associ ated a rguments for a keyword.
For example:
Switch(config)# cdp holdtime ?
<10-255> Length of time (in sec) that receiver must keep this packet
Specifying Ports in Interface Configuration Mode
To configure a port, you need to specif y the inter face type, slot, a nd switch- port numbe r with the
interface configuration comma nd. For exam ple , to c onfigure p ort 4 o n a switc h, you ent er:
switch(config)#interface fa 0/4
To configure port 4 on a 10/1 00 module in the first module slot on the switch, yo u enter:
switch(config)#interface fa 1/4
• Interface type—Each switch in the Catalyst 2950 and Cata lyst 3550 pla tform support s different
types of interfaces. To display a complete list of the interface types supported on your switch, enter
the interface ? global configuration comma nd. This exam ple shows what the interface ? command
displays on a Catalyst 2950 LRE switch:
• Port number—The numb er of the physic al por t on the swi tch . Re fe r to y our sw it ch fo r the por t
numbers.
Abbreviating Commands
You have to enter only enou gh cha ra cters for the switc h to re cogn ize the comma nd as u niqu e. T his
example shows how to enter the show configuration privileged EXEC command:
Switch# show conf
Using no and default Forms of Commands
Almost e ver y conf igu ration co mmand a lso ha s a no form. In ge neral , use the no form to disable a feature
or function or reverse th e a c tio n of a co mm an d. For exam pl e, t he no shutdown interface c onfigura tion
command reverses the shutdown of an interface. Use the command without the keyword no to re-enable
a disabled feature or to enable a featur e that is disabled by default.
Configuration commands can also have a default form. The default form of a command returns the
command setting to its default. Most commands are disabled by default, so the default form is the same
as the no form. However , some c ommands are enab led by de fault and ha ve v ariable s set to certa in default
values. In thes e case s, th e default command enables the command and sets variables to their default
values.
Abbreviating Commands
Understanding CLI Messages
Table 2-3 l ist s so me e rror me ssage s tha t y ou migh t e ncoun ter w hile using t he C LI to co nfigure you r
switch.
Table 2-3Common CLI Error Messages
Error MessageMeaningHow to Get Help
% Ambiguous command:
"show con"
% Incomplete command.
% Invalid input detected
at ‘^’ marker.
You did not enter enough characters
for your switch to recognize the
command.
You did not enter all the keywords or
values required by this command.
You entered th e comm and
incorrectly. The caret (^) marks the
point of the error.
Re-enter the command followed by a question mark (?)
with a space between the command and the question
mark.
The possible keywords that y ou can en ter wi th the
command are displayed.
Re-enter the command followed by a question mark (?)
with a space between the command and the question
mark.
The possible keywords that y ou can en ter wi th the
command are displayed.
Enter a question mark (?) to display all the commands
that are available in this command mode.
The possible keywords that y ou can en ter wi th the
command are displayed.
The IOS provides a history or reco rd of comma nds that you have entered. Th is featu re is particu larly
useful for recalling long or complex commands or entries, including access lists. You can customize the
command history fea ture to suit y our n eeds as desc ribe d in the se se c tions:
• Changing the Command History Buffer Size, page 2-6
• Recalling Commands, page 2-6
• Disabling the Comm and Histo ry Feat ure, pa ge 2-7
Changing the Command History Buffer Size
By default, the switch records ten command lines in its history buffer. Beginning in privileged EXEC
mode, enter this command to change the number of command lines that the switch records during the
current terminal session:
Switch# terminal history [sizenumber-of-lines]
The range is from 0 to 256.
Chapter 2 Using the Command-Line Interfac e
Beginning in line configur ati on mode , en ter thi s co mmand to c onfigure t he nu mb er of c om ma nd l ine s
the switch records for all sessions on a particular line:
Switch(config-line)# history[sizenumber-of-lines]
The range is from 0 to 256.
Recalling Commands
To recall comm ands fro m the histor y buffer, perform one of the actions listed in Table 2-4:
Table 2-4Recalling Commands
1
Action
Press Ctrl-P or the up arrow key.Recall commands in t he hi stor y buffer, beginning with the most rec ent c omma nd.
Press Ctrl-N or the down arrow key.Return to more recent commands in the history buffer after recalling commands
show historyWhile in privileged EXEC mode, list the last several commands that you just
1. The arrow keys function only on ANSI-compatible terminals such as VT100s.
Result
Repeat the key sequence to recall successively older commands.
with Ctrl-P or the up arrow key. Repeat the key sequence to recall succ essively
more recent co mman ds.
entered. The nu mb er of c om ma nds th at a re di spla yed i s de term ine d by the se ttin g
of the terminal history global configuration com mand an d hi s t o ry line
configuration comm and.
The command history feature is automatically enabled.
To disable the feature during the current terminal session, enter the terminal no history privileged
EXEC command.
To disable command history for the line, enter the no history line configuration comman d.
Using Editing Features
This section describes th e editin g featur es that can he lp you manip ulate the command line. It con tains
these sections:
• Enabling and Disabling Editing Features, page 2-7
Although enhan ced ed iting m ode is au toma ti cal ly e nabl ed, yo u c an di sable it.
To re-enable the enhanced editing mode for the current terminal session, enter this command in
privileged EXEC mode:
Switch# terminal editing
To reconfigure a specific line to have enhanced editing mode, enter this command in line configuration
mode:
Switch(config-line)# editing
To globally disable enhanced editing mode, enter this command in line configuration mode:
Table 2-5 shows the keystrokes that you need to edit command lines.
Table 2-5Editing Commands through Keystrokes
Chapter 2 Using the Command-Line Interfac e
CapabilityKeystroke
Move around the command line to
make changes or correc tions.
Press Ctrl-B, or press the
left arrow key.
Press Ctrl-F, or press the
right arrow key.
Press Ctrl-A.Move the cursor to th e b eginni ng of t he c om ma nd l ine.
Press Ctrl-E.Move the cursor to the end of the command line.
Press Esc B.Move the cursor back one word.
Press Esc F.Move the cursor forward one word.
Press Ctrl-T.Transpose the character to the left of the cursor with the
Recall comm ands from th e buffer
Press Ctrl-Y.Recall the most recent entry in the buffer.
and paste them in the command line.
The switch provides a bu ffer with th e
last ten items that you deleted.
Press Esc Y.Recall the next buffer entry.
Delete entries if you make a mistake
or change your mind .
Press the Delete or
Backspace key.
Press Ctrl-D.Delete the ch ar ac ter a t t he cu rsor.
Press Ctrl-K.Delete all characters from the cursor to the end of the
Press Ctrl-U or Ctrl-X.Delete all characters from the cursor to the beginning of
Press Ctrl-W.Delete the word to the left of the cursor.
Press Esc D.Delete from the cursor to the end of the word.
Capitalize or lowercase words or
Press Esc C.Capitalize at the cursor.
capitalize a set of letters.
Press Esc L.Change the word at the cursor to lowercase.
Press Esc U.Capitalize letters from the cursor to the end of the word.
Designate a part ic ula r keystroke as
Press Ctrl-V or Esc Q.
an executab le command, per haps as a
shortcut.
1
Purpose
Move the cursor back one ch arac ter.
Move the cursor forward one character.
character located at the cursor.
The buffer contains only the last 10 items tha t you have
deleted or cut. If you press Esc Y more than ten times, you
cycle to the first buffer entry.
Table 2-5Editing Commands through Keystrokes (continued)
Using Editing Features
CapabilityKeystroke
Scroll down a line or screen on
Press the Return key.Scrol l down on e li ne.
1
displays that are longer than the
terminal screen can display.
NoteThe More pr ompt is used for
any output that has mo re
lines than can b e di spla yed
on the terminal screen,
including show command
output. You can use the
Return and Space bar
keystrokes whenever you see
the More prompt .
Press the Space bar.Scroll down one scre en .
Redisplay the current command line
Press Ctrl-L or Ctrl-R.Redisplay the current command line.
if the switch sudde nly sends a
message to your screen.
1. The arrow keys function only on ANSI-compatible terminals such as VT100s.
Editing Command Lines that Wrap
Purpose
You can use a wraparound feat ure for com mands that extend beyond a single line on the scre en. When
the cursor reaches the right margin, the command line shifts ten spaces to the left. You cannot see the
first ten characters of the line, but you can scrol l back and ch eck the syntax at the beginning of the
command.
T o scroll back to the be ginning of the command entry, press Ctrl-B or the left arrow key repeatedly. You
can also press Ctrl-A to immediately m ove to t he begi nn ing o f th e l ine .
NoteThe arrow keys function only on ANSI-co mpati ble termi nals such as VT100 s.
In this example, the access-list global configuration command entry extends beyond one line. When the
cursor first reaches the en d of the line, the line is shifted ten spaces to the left and redisplaye d. The dollar
sign ($) sho ws t hat the lin e ha s be en scr olled to the le ft. E ach tim e the curso r re aches the end o f th e line,
the line is again shifted ten spaces to the left.
After you complete the entry, press Ctrl-A to check the comple te synt ax before pressi ng the Return key
to execute t he co mm an d. Th e d ollar s ig n ( $) ap p ea rs at t he en d o f the line to show that the line has b een
scrolled to the right:
The software assumes you have a terminal screen that is 80 columns wide. If you have a width other than
that, use the terminal width privileged EXEC comm a nd to se t th e width of y our te rmin al.
Searching and Filtering Output of show and more Commands
Use line wrapping wit h the comm and hi story fea ture to rec all and modi fy previous comp lex command
entries. For info rmation a bout rec alling pr e vious command entries, see th e “Editing Commands through
Keystrokes” section on page 2-8.
Searching and Filtering Output of show and more Commands
You can search and filte r the output f or show and more commands. This is useful when you need to sort
through large amou nts o f outpu t or i f you want to exclu de ou tput th at y ou do no t ne ed t o see.
To use this functionality, enter a show or more command followed by the pipe character (|), one of the
keywords begin, include, or exclude, and an expression that you want to se arch f or or filter out:
command| {begin | include | exclude} regular-expression
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output
are not displayed, but the lines tha t contain Output are displayed.
This example shows how to include in the output disp lay only line s where th e expression protocol
appears:
Switch# show interfaces | include protocol
Vlan1 is up, line protocol is up
Vlan10 is up, line protocol is down
GigabitEthernet0/1 is up, line protocol is down
GigabitEthernet0/2 is up, line protocol is up
Accessing the CLI
Before you can access the CLI, you need to connect a terminal or PC to the switch console port and
power on the switch as described in the hardware installation guide that shipped with your switch. Then,
to understand the b oot pro cess a nd the opt ions available for assigni ng IP inf ormat ion , see Chapter 4,
“Assigning the Switch IP Address and Default Gateway.”
If your switch is a lre ad y con figure d, y ou ca n ac c ess t he C LI t hro ugh a l oca l c onso le co nnec tio n o r
through a remote Telnet session, but your switch must first be configured for th is type of acc ess. For
more information, see the “Setting a Telnet Password for a Terminal Line” section on page 7-6.
You can establish a connection with the switch in one of two ways:
• Connecting the swi tch cons ol e por t t o a ma nage me nt stati on or di al -up m ode m. For in for mat ion
about connecting to the console port, refer to the switch hardware installation guide.
• Using any Telnet TC P/IP pack ag e fr om a rem ot e ma nage ment station. T he sw it ch m ust h ave
network connectivity with the Telnet client, and the switch must have an enable secret password
configured.
For information about configuring the switch for Telnet access, see the “Setting a Telnet Password
for a Terminal Line” section on page 7-6. The switch supports up to 16 simultaneous Telnet sessions.
Changes made by one Telnet user are reflected in all other Telnet sessions.
After you connect through th e co nsole port or th rough a Telnet session, the user E XEC pro mpt ap pear s
on the management station.
This procedure assume s you have met the software requir ements (in cludin g browser and Java plug-in
configurations) and have assigned IP information and a Telnet password to the switch or command
switch, as described in the release notes.
To access the CLI from a web browser, follow these steps:
Step 1Start one of the supported browsers.
Step 2In the URL field, enter the IP address of the command switch.
Step 3When the Cisco Systems Access page appears, click Telnet to start a Telnet session.
You can also access the CLI by clicking Monitor the rout er- HTML acces s to the comma nd li ne
interface from the Cisco Systems Access page. For information about the Cisco Systems Access page,
see the “Accessing CMS” section in the release notes.
Step 4Enter the switch password.
The user EXEC prompt appears on the management station.
Accessing the CLI from a Browser
NoteCopies of the CMS pages that you display are saved in your browser memory cache until you exit the
browser session. A password is not re quired t o re displa y the se p ag es, inc lud ing th e Cisco Sy stem s
Access page. You can access the CLI by clicking Web Console - HTML access to the command line interface from a cached copy of the Cisco Systems Access page. To prevent unauthorized access to CMS
and the CLI, exit your browser to end the browser session.
CMS provides these featu res (see Figure 3 -1) for managing switch clusters and individual switches from
Web browsers such as Ne tscape Communi cato r or Micros oft Intern et Ex plorer:
• Two views of your network that can be display ed at the same time:
–
The Front Panel view displays the front- panel i mage of a spec ific switch or t he front- panel
images of all switches in a cluster. From this view, you can select multiple ports or multiple
switches and configure them with the same settings.
When CMS is launched from a comma nd switch, the Front Panel view displays the front-panel
images of all switches in the cluster. When CMS is launched from a noncommand switch, the
Front Panel view displays only the front panel of the specific switch.
NoteCMS from a stand alon e sw itch or fr om a no ncom mand sw itch is re fer red t o a s Device
Manager (also referred to as Switch Manager). Device Manager is for configuring an
individual switch. When you select Device Manager for a specific switch in the cluster,
you launch a separate CMS session. The Device Manage r inter face can vary between
the Catalyst switch platforms.
–
The Topology view displays a network map that uses icons that represent switch clusters, cluster
members, cluster candidates, n eighbor ing de vic es that are not eligi ble to join a cluster, and link
types. From this vie w , you can se lect multiple switches and conf igure them to run with the same
settings. You can also display link information in the form of link reports and link graphs.
This view is available only whe n CMS i s la unche d from a com ma nd sw itch.
• Menus and toolbar t o ac cess c onfiguration and m anage ment opti on s:
–
The menu bar provides the compl ete list of op tions for mana ging a singl e switch and swit ch
clusters .
–
The toolbar provides buttons for co mmonly use d switch and cluste r configurati on option s and
information windows such as legends and online help.
–
The port popup menu, in the Front Panel view, provides options specific for configuring and
monitoring switch ports.
–
The device popup me nu, i n e ith er the Front Panel o r th e Topology views, provides switch and
cluster configuration and monitoring options.
–
The candidate, member, and link popup menus provide options for configuring and monitoring
devices and links in the Topology view.
The toolbar and popup menus provide quick ways to access frequ ently used menu-bar opt ions.
• Tools to simplify configuration tasks:
–
Interactive modes—guide mode and expert mode—that control the presentation of some
complex configuration option s.
3-2
–
Wizards that require minimal information from you to configure some complex features.
–
Comprehensive online hel p t ha t pr ovides h ig h-level co ncep ts and pr oced ure s f or perf orm ing
tasks from the window.
When CMS is launched from a command swi tch, the Fron t Panel view displays the fr ont-p anel im ages
of all the switches in the cluster (see Figure 3-2 for an 2950 L RE sw itch and Figur e 3- 3 for a 2950
non-LRE switch). You can use the cursor to re-arrange the order of the switches in th is window.
Figure 3-2Front Panel View from a 2950 LRE Command Switch
Figure 3-3Front Panel View from a 2950 Command Switch
Front Panel View
cluster1
Cluster tree.
10.1.1.2
Right-click a member
switch image to display
the device pop-up
menu, and select an
option to view or change
system-related settings.
Right-click the
command switch
image to display the
cluster pop-up menu,
and select a cluster-
related option.
65718
When CMS is launched from a standal one or nonco mman d member switc h, the Front Panel view
displays only the front pa nel of the specific switch (see Figur e 3-5 for a 2950 switch and Figure 3 -4 for
a 2950 LRE switch).
Figure 3-4Front Panel View from a Standalone 2950 LRE Switch
Figure 3-5Front Panel View from a 2950 non-LRE Standalone Switch
Cluster Tree
2950-24
Left-click the Mode
button to change
the meaning of the
port LEDs.
2950-24
LEDs display the
current port mode
and the status of the
switch and
connected RPS.
Right-click a port to
display the port pop-up
menu, and select an
option to view or change
port-related settings.
Press Ctrl, and then
left-click ports to select
multiple ports. The color
of the port LED reflects
port or link status.
65719
The cluster tree (see Figure 3-2 for LRE switches and Figure 3-3 for non-LRE swit che s) appe ar s in the
left frame of the Fr ont Panel v iew and sh ows the n am e of the cl uste r an d a list of its me m bers. Th e
sequence of the cl uste r-tree ico ns (se e Figure 3-6) mirror the sequence of th e Front-Panel im ages. You
can change the seq uence by select ing View > Arrange F ront Panel. The colors of the devices in the
cluster tree show the status of the devices (see Table 3-1).
If you want to configure switch or cluster settings on one or more switches, select the appropriate
Front-Panel image.
• To select a fr ont-p anel im age, cl ick ei ther th e cluste r-tree icon or t he corre spon ding front -pan el
image. The front-panel image is then highlighted with a yellow outline.
• To select multiple front-panel images, press the Ctrl key, and left-click the cluster-tree ic ons or the
front-panel images. To deselect an icon or image, press the Ctrl key, and left-click the icon or image.
If the cluster has many switches, you might need to scroll down the window to display the rest of the
front-panel image s. In stea d of scrol ling, you c an click a n icon in the cluste r tree , and CM S then scro lls
and displays the co rre spondi n g f ront -pane l i mage .
Figure 3-6Cluster-Tree Icons
Table 3-1Cluster Tree Icon Colors
ColorDevice S tat us
GreenSwitch is operating normally.
Y el lo wThe internal fan of the switch is not operating, or the switch is re cei ving po wer from an RPS.
RedSwitch is not powered up, has lost power , or the command switc h is unable to communicate
You can manage the switch fro m a remote sta tion by using the fron t-pane l images . The front -panel
images are updated b ased on t he ne twor k pol ling in terval tha t you se t f rom CMS > Preferences.
This section includes descriptions of the LED images. Similar descriptions of the switch LEDs are
provided in the switch hardware installation guide.
NoteThe Preference s wi ndow is not available if y our swit ch a cces s level is read- onl y. For more information
about the read-only ac cess mo de, see the “Access Modes in CMS” section on page 3-31.
Figure 3-7 shows the port icons as they appear in the Front Panel. To select a port, click the port on the
Front Panel. The port is t hen hi ghligh ted w ith a y ell ow outlin e. To select multiple por ts, you can :
• Press the left mouse button, drag the pointer over the group of ports that you want to select, and then
release the mouse button.
• Press the Ctrl key, and click the ports that you want to select.
• Right-click a port, a nd se lect Select All Ports from the port popup menu.
Front Panel View
Figure 3-7Port Icons
Table 3-2 desc ribes the co lors repr esentin g the wavelengths on the CWDM GB IC module s. For port
status LED infor ma tion, se e t he “Port Modes and LEDs” section on page 3-8.
• Cisco RPS 600 (mode l PWR6 00- AC-RPS)—Cataly st 2900 XL and Catalyst 3 500 X L switches,
except the Catalyst 2900 LRE XL and Catalyst 3524-PWR XL switches
Refer to the appropriate swi tch hardwa re docume ntat ion for RPS desc riptions spe cific for the swi tch.
Table 3-3RPS LED
ColorRPS Status
Black (off)RPS is off or is not installed.
GreenRPS is connected and operational.
Blinking greenRPS is provid ing power to another sw itch in the st ack.
AmberRPS is connected but not functioning.
The RPS could be in standby mode. To put the RPS in Active mode, press the Standby/Active button on the
RPS, and the LED should turn gr een. If it does no t, one of thes e conditi ons could exist:
• One of the RPS power supplies could be down. Contact Cisco Systems.
• The RPS fan could have failed. Co ntac t C isco Syste ms.
Blinking amber Internal power supply of the swi tch is d own, and re dunda ncy is lo st. Th e sw itch is op erat ing on the R PS.
Port Modes and LEDs
3-8
The port modes (see Table 3-4) determine the type of information displayed through the port LEDs.
When you change port modes, t he meaning s of the por t LED color s (see Table 3-5) a lso ch an ge .
NoteThe bandwidth utilization mode (UTIL LED) does not appear on the front-panel images. Select
Reports > Bandwidth Graphs to display the total bandwidth in use by the switch. Refer to the switch
hardware installation guide for information about using the UTIL LED.
To select or ch an ge a m ode , c lick t he M ode button u ntil the de sire d mo de L ED i s gree n.
Table 3-4Port Modes
Mode LEDDescription
STATLink status of the ports or the Etherne t link status on the remote customer premises equipment
(CPE) device. This is the default mode except for the Catalyst 2950 LRE switches.
DUPLXDuplex setting on the ports. The default setting on the 10/100 ports is auto. The default settin g
on the 10/100/1000 por ts is full.
SPEEDSpeed setting on the ports. The defau lt setting on the 10/10 0 and 10 /100 /1 000 po rts i s au to.
Table 3-5Port LEDs
Port ModePort LED ColorDescription
STATCyan (off)No link.
GreenLink present.
AmberLink fault. Error frames can affect connectivity, and errors such as excessive
collisions, CRC errors, and alignment an d jabber errors are monitore d for a link-fault
indication.
Front Panel View
Port is not forwardin g. Por t was di sabl ed by m an agem ent , by an a ddress viol at ion,
or by Spanning Tree Protocol (S TP).
NoteAft er a port i s reconfigu red, the port LE D can rem ain am ber fo r up to
30 seconds as STP checks the switch for possib le loops.
BrownNo link and port is administra tively shut down.
DUPLXCyan (off)Port is operating in half-dupl ex mode.
GreenPort is op erat ing i n full- dupl ex m od e.
SPEEDCyan (off)Port is operating at 10 Mbps (10/100 ports) or no link (10/100/1000 ports and GBIC
module ports).
GreenPort i s op erat ing at 10 0 Mbps (10/100 ports) o r 100 0 M bp s (G BIC modul e po rts) .
Blinking greenPort is op er ati ng a t 10 00 M bps (10 / 100/1 000 po rts).
VLAN Membership Modes
Ports in the Front Panel view are outlined by colors (see Table 3-6) when you clic k Highlight VLAN
Port Membership Modes on the Configure VLANs tab on th e V LAN w ind ow
(VLAN > VLAN > Configure VLANs). The colors show the VLAN membership mode of each port.
The VLAN membe rship mode determ ines the kind of traffic the port carries and the number of VLANs
it can belong to. For m ore in forma ti on ab out th ese mod es, se e the “VLAN Port Membership Modes”
section on page 14-3 .
78-14982-01
NoteThis feature is not supported on the Catalyst 1900 and Catalyst 2820 sw itches.
The Topology view displays how the devices within a switch cluster are connected and how the switch
cluster is con necte d to oth er cl uster s an d devices . Fr om t his vi ew, you can add and re move cluste r
members. This view provide s two levels of deta il of t h e ne twork topo l ogy:
• When you right-click a cluster ic on and selec t Expand Cluste r, the Topology view displays th e
switch cluster in detail. This view shows the command switch and member switches in a cluster. It
also shows candidate switches that can join the cluster. This view does not display the details of any
neighboring switch c luster s. (See Figur e 3- 8).
Chapter 3 Getting Started with CMS
• When you right-click a command-switch icon and select Collapse Cluster, the cluster is collapsed
and represented by a single ico n. The vi ew shows how the cluster is connecte d to other clusters,
candidate switches, and devices that are not eligible to join the cluster (such as routers, access
points, IP phones, and so on). (Se e Figure 3-9).
NoteThe Topology vie w displays only the switch cluster and network neighborhood of the specific command
or member switch that you access. T o display a different switch cluster, you need to access the command
switch or member swit ch of th at clus ter.
You can arrange the device icons i n this view. To move a device icon, click and drag the icon. To select
multiple device icons, you ca n eithe r:
• Press the left mouse button, drag the pointer over the group of device icons that you want to select,
and then releas e th e mouse button.
• Press the Ctrl key, and click the device icons that yo u want to se lect .
After selecting the icons, drag the icons to any area in the view.
The Topology view and the cluster tree use the same set of device icons to represent clusters, command
and standby command swit ches, and m embe r switche s (see Figur e 3-10). The Topology view also uses
additional icons to represent these types of neighboring devices:
TipNeighboring devices are only displ ayed if th ey are connec ted to cluste r memb ers. To display
neighboring devices in the T opology view , either add the switch to which they are connected to a cluster,
or enable that switch as a command switch.
Chapter 3 Getting Started with CMS
• Customer premises equipment (CPE) devices that are connected to Long-Reach Ethernet (LRE)
switches
• Devices that are not eligible to join the cluster, such as Cisco IP phones, Cisco access points, and
Cisco Discovery Protocol (CDP)-capable hubs and rou ters
NoteThe System Switch Processor (SSP) card in the Cisco Integrated Communications System
(ICS) 7750 appears as a Layer 2 switch. SSP cards are not eligible to join switch clusters.
• Devices that are identified as unknown devices, su ch as some Cisco devices and third-party devices
NoteCandidate switches ar e disti ngu ished by t he c olo r o f thei r device lab el. Device l abe ls a nd the ir c olo rs
are described in the “Colors in the Topology View” section on page 3- 14.
T o sel ect a de vice, cl ick the icon. The icon is t hen highlight ed. To select multiple de vic es, you can e ither:
• Press the left mouse button, drag the pointer over the group of icons that you want to select, and then
release the mouse button.
• Press the Ctrl key, and click the icons that you want to select.
Figure 3-10 Topology-View Device Icons
3-12
The Topology view also uses a set of lin k ic on s (s ee Figure 3-11) to show the link type and status
between two devices. To select a link, click the link that you want to select. To select multiple links,
press the Ctrl key, and click the links that you want to select.
The colors of the T opology view icons show the status of the devices and links (see Table 3-7, Table 3-8,
and Table 3-9).
Table 3-7Device Icon Colors
Icon Color Color Meaning
GreenThe device is operating.
1
Yellow
1
Red
1. Available only on the cluster members.
Table 3-8Single Link Icon Colors
Link Color Color Meaning
GreenActive link
RedDown or blocked link
The internal fan of the switch is not operating, or the switch is receiving power from an
RPS.
The device is not operating.
Chapter 3 Getting Started with CMS
Table 3-9Multiple Link Icon Colors
Link ColorColor Meaning
Both greenAll links are active.
One green; one red At least one link is active, an d at least one othe r link is do wn
or blocked.
Both redAll li nks are d own or bloc ked.
The color of a device label shows the cluster membership of the device (see Table 3-10).
Table 3-10 Device Label Colors
Label
ColorColor Meaning
GreenA cluster member, either a member switch or the command switch
CyanA candidate switch that is eligible to join the cluster
Y ello wAn unknown device or a de vice that is not eligible to join the cluster
You can set the type of informa tion displa yed in the Topology view by changing the settings in the
Topology Optio ns w ind ow. To display this wi ndow, select View > Topology Options. From this
window, you can select:
• Device icons (including I P Pho ne s, CPE devices , N ei ghbors, A cce ss Point s, a nd Candi dat es) t hat
you want displayed i n or filtere d from th e Topology View window
• Interface IDs and Actua l Sp ee d values th at yo u want displa ye d in the L ink wi ndow
• Host Names, IP addresses, and MAC address label s that you want disp layed in the No de window
Menus and Toolbar
The configuration and mo nito ring op tion s for c onfiguring sw it ches an d s witc h cl uste rs ar e available
from menus and a toolbar.
Menus and Toolbar
Menu Bar
The menu bar provides the compl ete list of op tions for mana ging a sin gle switch a nd switch clust er.
Options displayed from the me nu bar can vary:
NoteThe menu-bar options on a Catalyst 2950 switch change depending on whether the switch is running the
enhanced software image (EI) or the standard image (SI). The footnotes in Table 3-11 list the options
available if the switch is running the EI. The Catalyst 2950 LRE switch has only one software image
available, and it contains both standard and e nhanc ed func ti onal ity.
• Access modes affect the av ailability of fea tures from CMS. The footnotes in Table 3-11 describe the
availability of an option based on your access mode in CMS: read-only (access level 1–14) and
read-write (access level 15). For more information about how access modes affect CMS, see the
“Access Modes in CMS” section on page 3-31.
• The option for en ab lin g a co mma nd sw it ch i s only available from a C MS se ssion laun ch ed f rom a
command-capable switch.
• Cluster management tasks, such as upgrading the software of groups of switches, are available only
from a CMS session launched from a comm and switc h.
• If you launch CMS from a specific switch, the menu bar displays the features supported only by that
switch.
• If you launch CM S f rom a co mman d sw itch , the menu b ar di spla ys t he f eat ures supp ort ed on the
switches in the cluster, with these exceptions:
–
If the command switch is a Layer 3 switch, such as a Catalyst 3550 switch, the menu bar
displays the features of all Layer 3 and Layer 2 switches in the cluster.
78-14982-01
–
If the command switch is a Layer 2 switch, such as a Catalyst 2950 or Catalys t 3500 XL switch,
the menu bar displays the features of all Layer 2 switches in the cluster. The menu bar does not
display Layer 3 featur es even if the cluster has Catalyst 3550 Layer 3 membe r switche s.
Note• We strongly recommend that the highest-end, command-capable switch in the cluster be the
command swit ch:
–
If your switch cluster has a Catalyst 3550 switch, that switch should be the command switch.
–
If your switch cluster has Catalyst 2900 XL, Catalyst 2950, and Catalyst 3500 XL switches, the
Catalyst 2950 sh ould be t he co mm an d swit ch.
–
If your switch cluster has Catalyst 1900, Catalyst 2820 , Catalyst 2900 XL, and
Catalyst 3500 XL switches, either the Catalyst 2900 XL or Catalyst 3500 XL should be the
command swit ch.
• Standby command switches must meet these requirements:
–
When the command switch is a Catalyst 3550 switch, all standby command switches must be
Catalyst 3550 switc hes .
–
When the command switch is a Catalyst 2950 switch running Release 12.1(9)EA1 or later, all
standby command s witche s m ust b e Ca talyst 2950 switches ru nning Rel ease 12.1(9)EA1 or
later.
–
When the command switch is a Catalyst 2950 switch running Release 12.1(6)EA2 or later, all
standby command s witche s m ust b e Ca talyst 2950 switches ru nning Re lease 1 2.1(6 )E A2 or
later.
Chapter 3 Getting Started with CMS
–
When the command switch is runni ng Rele ase 12.0(5)WC2 or earlier, the standby comman d
switches can be these swi tches: C ata lyst 2900 XL, Catalyst 2950, and Catalyst 3500 XL
switches.
We strongly recommend that the command switch and standby command switches are of the same
switch platform and that both are running the same level of software (SI or EI). In the event of a
failover, the standby command switc h must support the same configu ratio n a nd serv ice s tha t a re
running on the com ma nd sw it ch.
–
If you have a Catalyst 35 50 co mman d sw itc h, the st andby c om mand switc hes sh oul d be
Catalyst 3550 switc hes .
–
If you have a Catalyst 29 50 co mman d sw itc h, the st andby c om mand switc hes sh oul d be
Catalyst 2950 switc hes .
–
If you have a Catalyst 2900 XL or Catalyst 3500 XL command sw itch, the stand by command
switches should be Catalyst 2 900 X L and Catalyst 3500 XL switches.
Refer to the release notes for the Catalyst switches that can be part of a switch cluster.
NoteUnless note d ot herw is e, Table 3-11 lists the menu-bar options available from a Catalyst 2950 command
switch when the cluster contains only Catalyst 2950 member switches. The menu bar of the command
switch displays all menu-bar options available from the cluster, including options from member switches
from other cluster-capable switch platforms.
Page SetupSet default docum en t pr in ter p rop er ties to be use d w hen pr int ing fro m CMS.
Print PreviewView the way the CMS window or help file will appear when printed.
PrintPrint a CMS window or help file.
Guide Mode/Expe rt Mo de
Preferences
Administration
IP Addresses
SNMP
System Time
HTTP Port
2
2
2
2
2
Users and PasswordsConfigure usernames an d pas s words f or privilege levels 0 to 15 .
Console Baud Rate
MAC Addresses
2
ARP
2
Save Configuration
Restore Configuration
Software Upg rade
1
LRE Software Upgra deU pgra de t he b in ary on the swi tch.
System Reload
1
Event NotificationCreate notification IDs that generate e-mail notifications when system events occur.
Cluster
Cluster Manager
Create Cluster
Delete Cluster
Add to Cluster
3
1 4
1 5
1 5
Remove from Cluster
Standby Command Switches
Hop Count
Device
Device Manager
Host Name
2 5
5
1
1
Select which interaction mod e to use when you sel ect a configuration opti on.
Set CMS display properties, such as polling intervals, the default views to open at
startup, and the color of administratively shutdown ports.
Configure IP information for a switc h.
Enable and disabl e Simple Ne twork Man ag emen t Pro toc ol ( SNMP), en ter co mm unit y
strings, and configure end s tations as trap manage rs.
Configure the system t ime or c onfigure the Networ k Time Protocol (N TP).
Configure the Hypertext Transfer Prot ocol (H TT P) por t nu mbe r.
2
Change the baud rate for the switch console port.
Enter dynamic, secure, and static addresses in a switch address table. You can also define
the forwarding behavior of static addresse s.
Display the device Ad dress Res ol ution Proto col (A RP) t abl e, a nd configure the ARP
cache timeout setting.
1
Save the configuration for the cluster or swi tch to Flash memory.
Restore the configuration file to one or more switches in the cluster.
Upgrade the software for the cluster or a switch.
Reboot the switch with the latest installed software.
Launch a CMS session from the member switch.
Designate a comman d switch, a nd name a clust er.
Delete a cluster.
Add a candidat e t o a clust er.
1 5
Remove a member from th e cluste r.
2 5
Create a Hot Stand by Route r Proto co l (HSRP) sta ndby gr oup t o pr ovide
command-switch redun dancy.
Enter the num ber of hop s away t hat a c om mand swi tch look s f or memb er s a nd fo r
candidate switches.
Launch Device Manager for a specific switch.
Change the host name of a switch.
LRE ProfilesSet profiles for a switch.
LRE Rate SelectionSet rate selection parameters for automatically assigning prof iles, settin g signal-to-noise
Port
Port Settings
2
Port SearchSearch for a port through its de script ion.
Port Security
EtherChannels
SPAN
Protected Port
Flooding Control
VLAN
VLAN
1
2
2
2
2
2
(guide mode available1)
Management VLAN
2
VMPS
2
Display and configure STP parameters for a switch.
Enable and disable Intern et Group Manage ment Protoc ol (IGMP) snoo ping and IG MP
Immediate-Leave proc essing on the switch. Join or lea ve multicast grou ps, and configure
multicast routers.
Configure 802.1X authen ticat ion of devices as they are att ached to LAN ports in a
point-to-point infrastructure.
Create and maintain access control lists (ACLs), and attach ACLs to specific ports.
Filter certain traf fic, su ch as HTTP tr af fic, to certain ne tworks or de vic es. Restrict access
to servers, networks, or a ppli cat ion da ta from c ert ain net works or d evices.
Display submenu options to enable and disable quality of service (QoS) and to conf igure
or modify these p aram eters :
• Trust settings
• Queues
• Maps
• Classes
• Policies
• Voice Wizard
• Video Wizard
• Data Wizard
2
2
2
2
(guide mode available1)
2
(guide mode available1)
1
—Configure a por t to sen d or rece ive voice traffic.
1
—Optimize m ul tipl e vi deo ser vers f or se nding v ideo tra ffic.
1
—Provide a higher priority to specific applications.
(SNR) margins, locking profiles, and qual ifying link s.
Display and configure port para mete rs on a swi tch .
Enable port security on a port.
Group ports into logical units for high-speed links between switches.
Enable Switch Port Analyzer (SPAN) port monitoring.
Configure a port to prevent it from receiving bridge d traffic from another port on the
same switch.
Block the normal floodi ng of unica st and multic ast packets, and enabl e the switch to
block packet storms.
Display VLAN me mber ship, a ssign po rts to V LAN s, a nd co nfigure 802.1 Q trun ks.
Display and configure t he V LA N Trunking Prot oco l (V TP ) for int ersw itch VLA N
membership.
Change the man agem e nt VLA N on the sw itch.
Configure the VLAN Membership Policy Server (VMPS).
InventoryDisplay the device type, software version, IP addre ss, and othe r inform ation about a
Port StatisticsDisplay port statistics.
Bandwidth GraphsDisplay graphs that plot t he t otal band width in use by the swit ch.
Link GraphsDisplay a graph showing th e ba ndwid th bei ng used f or the sel ect ed l ink .
Link ReportsDisplay the link report for two connected devices. If one device is an unknown device or
ACL Reports Display a repor t about ACL statistics.
MulticastDisplay reports about multic ast or IGMP statistics.
Resource MonitorDisplay masks for ACL and Qo S po licy ma ps.
System MessagesDisplay the most recent system messages (IOS messages and switch-specific messages)
2
Configure a port to use a v oice VLAN for voice traf fic, separating it fro m the VLANs for
data traffic.
switch.
a candidate, only the cluster-member side of the link displays.
sent by the switch softwa re.
This option is availabl e on the Catalyst 2950 or Catalyst 3550 switches. It is not availab le
from the Catalyst 2900 XL and Catalyst 3 500 X L switches. You can display the system
messages of the Catalyst 2900 XL and Catalyst 3500 XL switches when they are in a
cluster where the comman d switch is a Catalyst 2950 switch running
Release 12.1(6) EA 2 or l ater or a Catalyst 3 550 swi tch ru nning Rel ease 12.1(8)EA1 or
later. For more information about system messages, refer to the switch system message
guide.
Tools
Ping and TracePerform a ping, Layer 2 trace route , or Layer 3 tra cerout e operation on or to a specific
address.
NoteIf you perform a Layer 3 traceroute operation, information about Layer 2 devices
in the path are not displaye d.
View
RefreshUpdate the views with the latest status.
Front PanelDisplay the Front Panel view.
1 5
Arrange Front Panel
Topology
5
Topology Options
Automatic Topology Layout
Save Topology Layout
pppRearrange the order in which switches appear in the Front Panel view.
Display the Topology view.
5
1 5
Select the informa tion to b e displa yed i n the Topology view.
5
Request CMS to rearrange th e topology la yout.
Save the presentation of the cluster icons that you arranged in the Topology view to Flash
memory.
Window
Help
List the open windows in your CMS session.
OverviewObtain an overview of the CMS interface.
What’s NewObtain a des crip tion o f the new CMS f eat ures.
Help For Active WindowDis play the help for the active open window. This is the same as clicking He lp from the
active window.
ContentsList all of the available online help topics.
LegendDisplay the legend that describe s the icons, lab els, and li nks.
AboutDisplay the CMS version number.
1. Not available in read-only mode. For more information about the read-only and read-write access modes, see the “Access Modes in CMS” s ection on
page 3-31.
2. Some options from this menu option are not available in read-only mode.
3. Available only from a Device Manager session on a cluster member.
4. Available only from a Device Manager session on a command-capable switch that is not a cluster member.
5. Available only from a cluster management session.
Toolbar
The toolbar buttons display commonl y-used swit ch and cluster configuration opti ons and info rmation
windows such as legends and online help. Hover the cursor over an icon to display the feature.
Table 3-12 describes the toolbar options, from left to right on the toolbar.
Table 3-12 Toolbar Buttons
Keyboard
Toolbar Option
ShortcutTask
PrintCtrl-PPrint a CMS window or help file.
Preferences
1
Ctrl-RSet CMS display properties, such as polli ng interv als, the views to open at CMS
startup, and the colo r of administ ratively shutdown ports.
Save Configuration
Software Upg ra de
Port Settings
VLAN
1
1
2
2
Ctrl-SSave the configuration for th e clus ter or sw itch to Flash memory.
Ctrl-UUpgrade the software for the cluster or a switch.
–Display an d c onfigure port para met ers on a swi tc h.
–Display VLA N me m bership, assi gn port s to VL ANs, and c onfigure 80 2.1 Q
trunks.
Inventory–Display the device type , the soft ware version, the IP add ress, and othe r
information about a switch.
Refresh–Update the views with the latest status.
Front Panel–Display the Front Panel view.
Topology
Topology O ptions
3
3
Save Topology Layout
–Display the Topology view.
–Select the infor mat ion to b e di spla yed in t he Topology view.
2 3
–Save the presentatio n of the clu ster ico ns that you arrange d in the Topology
view to Flash memory.
Legend–Display the legend that describes the icons, labels, and links.
Help For Active WindowF1 keyDisplay the help for the active open window. This is the same as clicking Help
1. Not available in read-only mode. For more information about the read-only and read-write access modes, see the “Access Modes in CMS” section
on page 3-31.
2. Some options from this menu option are not available in read-only mode.
3. Available only from a cluster-management session.
Front Panel View Popup Menus
These popup menus ar e available in the Fr ont Panel v iew.
Device Popup Menu
You can display al l swi tch and c luster configu ratio n wind ows from t he me nu ba r, or you ca n d isplay
commonly used configurati on windows from the device popup menu (see Table 3-13). To display the
device popup menu, cl ick the swi tc h ic on from t he c lust er t ree o r the fr ont- pa nel ima ge i ts elf, an d
right-click.
Table 3-13 Device Popup Menu
Port Popup Menu
Popup Menu Opt ionTask
Device Manager
Host Name
Delete Cluster
1
2
2 3 4
Remove from Cluster
2 4
Launch Device Manager for the switch.
Change the na me of th e sw itch.
Delete a cluster.
Remove a member from the cluster.
Bandwidth Grap hsDisplay graphs that plo t t he t ota l b andw idt h in use.
PropertiesDisplay information about the device and port on either end o f the link and
the state of th e li n k.
1. Available from a cluster member switch but not from the command switch.
2. Not available in read-only mode. For more information about the read-only mode, see the “Access Modes in CMS” section
on page 3-31.
3. Available only from the command switch.
4. Available only from a cluster-management session.
You can display all port configuration windows from the Port menu on the menu bar, or you can display
commonly used port configuration windows from the port popup menu (see Table 3-14). To display the
port popup menu, click a spe cific port imag e, and righ t-c lick.
Table 3-14 Port Popup Menu
78-14982-01
Popup Menu Opt ionTask
Port Settings
1
VLAN
1
Display and configure port setti ngs.
Define the VLAN mod e fo r a por t or po rts an d a dd port s to V LANs . N ot
available for the Catalyst 1900 and Catalyst 2820 switches.
Select All PortsSelect all ports on the switch for global configuration.
1. Some options from this menu option are not available in read-only mode.
2. Available on switches that support the Port Security feature.
3. Available only when there is an active link on the port (that is, the port LED is green when in port status mode).
Topology View Popup Menus
These popup menus ar e available in t he Topology view.
Link Popup Menu
You can display reports an d gra phs for a spec ific link displ aye d in the Topology view (see Table 3-15).
To display t he link p opu p men u, cl ick t he l ink ico n, and right - clic k.
Chapter 3 Getting Started with CMS
Display a graph showing the band width used by the selec ted link.
Table 3-15 Link Popup Menu
Popup Menu OptionTask
Link ReportDisplay the link report for two connected devices. If one device is an unknown
device or a candidate, o nly the c lust er m embe r sid e of the li nk di sp lays.
Link GraphDisplay a graph showing the current bandwidth used by the selected link. You
can change the graph polling interval by selecting CMS > Preferences.
PropertiesDisplay information about the device and port on either end of the link and the
state of the link.
The Link Repo rt a nd L ink G raph opt ion s a re n ot availabl e if a t b oth en ds o f th e l ink ar e
• Candidate switches
• Catalyst 1900 and Ca talyst 2820 switches
• Devices that are not eligible to join the cluster
If multiple lin ks are co nfigured bet wee n two devices, wh en you c li ck t he l ink i con an d right- cli ck, t he
Multilink Content window app ears (see Figure 3-12). Click the link icon in this window, and right-click
to display the li nk popup m en u s peci fic for t hat li nk .
Specific devices in the Topology view display a specific popup m e nu:
• Cluster (see Table 3-16)
• Command switch (see Table 3-17)
• Member or stan dby co mm an d swi tc h (s ee Table 3-18)
• Candidate switch with an IP address (se e Table 3-19)
• Candidate switch without an IP address (see Table 3-20)
• Neighboring devices (see Table 3-21)
NoteThe Device Manager optio n i n the se pop up m en us is available in r ead- only m od e o n Cat alyst 2900 XL
and Catalyst 3500 XL switches running Releas e 12 .0(5)WC2 a nd later. It is also available on
Catalyst 2950 swit ches ru nnin g R ele ase 12.1(6)EA2 and late r and on Ca talyst 3550 switch runn ing
Release 12.1(8)EA 1 or later. It is not available on the Catalyst 1900 and Catalyst 2820 switches.
To display a d evice p opup men u, c lick an ic on, a nd righ t-c lic k.
Table 3-16 Device Popup Menu of a Cluster Icon
Popup Menu Opt ionTask
Expand clusterView a cluster-specific topology view.
PropertiesDisplay information about the device.
Table 3-21 Device Popup Menu of a Neighboring-Device Icon
Popup Menu OptionTask
Device Manager
Disqualification CodeDisplay the reason why the device could not join the cluster.
PropertiesDisplay in for mat ion abo ut t h e device.
1. Available from a cluster member switch but not from the command switch.
Interaction Modes
You can change the int era c tion m ode of CM S to ei the r gu id e or expe rt m ode. Gui de mod e step s yo u
through each feature option an d provides info rmation ab out the paramete r. Expert mode displays a
configuration window in wh ich you co nfigure the f eat ur e opt ion s.
Interaction Modes
1
Access the web managem ent inter face of the device.
NoteThis option is available on Cisco access points, but not on Cisco IP
phones, hubs, route rs and o n u nknown d evices such as so me Cisco
devices and third-party devices.
Guide Mode
NoteGuide mode is not available if your switch acc ess level is read-only. For more information about the
Expert Mode
read-only access mode, see the “Access Modes in CMS” section on page 3-31.
Guide mode is for users who want a step-by-step approach for completing a specific configuration task.
This mode is not available for all featur es. A menu- bar option t hat has a person icon mea ns that guide
mode is available for that option.
When you click Guide Mode and then select a menu-bar option that supports guide mode, CMS displays
a specific parameter of the feature with information about the parameter field. To configure the feature,
you provide the information that CMS requests in each step until you click Finish in the last step.
Clicking Cance l a t a ny time c loses a nd en ds th e co nfigurati on ta sk wi thou t a pply in g any c ha nges.
If Expert Mode is selected and you want to use guide m ode, yo u must clic k Guide Mode before
selecting an option from the menu bar, tool bar, or popup menu. If you change the interaction mode after
selecting a configuration option, the mode change does not take effect until you select another
configuration optio n.
Expert mode is for users who prefer to display all the parameter fields of a feature in a single CMS
window. Information about the parameter fields is available by clicking the Help button.
NoteWizards are not available if your switch access level is read-only. For more information about the
Tool Tips
Chapter 3 Getting Started with CMS
read-only access mode, see the “Access Modes in CMS” section on page 3-31.
Wizards simplify some configuration tasks on the switch. Similar to the guide mode, wizards provide a
step-by-step approa ch f or co mp leti ng a spe cific c onfigura tio n ta sk. U nli ke gui de m od e, a w iz ard d oe s
not prompt you to provi de i nforma ti on for al l o f the fea ture opt ions. In stead, it prompt s y ou to provide
minimal information an d then uses the default set tings of the remainin g options to set up default
configurations.
Wizards are not available for all features. A menu-bar option that has wizard means that selecting that
option launches t h e wi za rd for t h at f e atur e.
Online Help
CMS displays a popup messa ge when yo u move your m ouse over the se devices:
• A yellow device icon in the c lust er tre e or i n Topology view—A popup displays a fault message,
such as that the RPS is faulty or that the switch is unavailable because you are in read-only mode.
• A red device icon in the c luste r tr ee o r in Topology view—A popup displa ys a message tha t the
switch is down.
If you move your mouse over a table column heading , a popup displa ys the fu ll headin g.
CMS provides comprehensive online help to assist you i n understand ing an d performing configuratio n
and monitoring tasks from the CM S windows (see Figure 3-13Figure 3-14).
• Feature help, available from the menu ba r by selecting Help > Contents, provides background
information and co ncepts on the feat ures.
• Dialog-specific help, available from Help on the CMS windows, provides procedures for
performing tasks.
• Index of help topic s.
• Glossary of terms used in the online help.
You can send us feedback about the inf orma tion pr ovided in the online help. Click Feedback to display
an online form. After completin g the form, click Submit to se nd your comments to Cisco. We appreciate
and value your comments.
Glossary of terms used in the online help.
Legend of icons and color codes.
Feature help, such as concepts.
Information about the CMS interface.
Figure 3-14 Help Contents and Index
Supplemental help information.
Glossary of terms used in the online help.
Legend of icons and color codes.
Feature help, such as concepts.
Information about the CMS interface.
CMS windows consistently present configuration information. Figure 3-15 shows the components of a
typical CMS window.
Figure 3-15 CMS Window Components
Chapter 3 Getting Started with CMS
Host Name List
65580
OK saves your changes and
closes the window.
Modify displays a secondary
window from which you can
change settings.
Click a row to select it. Press Shift,
and left-click another row to select
contiguous multiple rows. Press Ctrl,
and left-click rows to select noncontiguous rows.
Click a tab to display more
information.
Apply saves your changes and leaves
the window open.
Refresh refreshes the window to display
the latest information.
Cancel closes the window without saving
the changes.
Help displays help for the window and the
menu of Help topics.
Select a cluster member from the
Host Name list to display its settings.
To display or change the configuration of a cluster member, you need to select the specific switch from
the Host Name drop-down list. The list appears in the configuration window of each feature and lists
only the cluster members that support that feature. For example, the Host Name list on the VLAN
window does not includ e Catal yst 1900 and Catalys t 2820 switches even though they ar e pa rt o f the
cluster. Similarly, the Host Name list on the LRE Profiles window only lists the LRE switches in the
cluster.
Some CMS windows have tabs that present different sets of information. Tabs are arranged like folder
headings across the top of the window. Click the tab to display its information.
Listed information can often be changed by selecting an item from a list. To change the information,
select one or more items , and c lick Modify. Changing multiple items is limited to those ite ms that apply
to at least one of the selections.
Some CMS windows present information in a table format. You can edit the information in these tables.
NoteYou can resi ze t he wid th of t h e colu mn s to di spla y th e co lumn he adi ngs , o r you c an hover your c urso r
over the heading to d isp lay a po pup desc ript ion of the co lumn.
Filter Editor
When you click Filter in a CMS window that contains a table, the Filter Editor window appears. The
column names in the table become the field names in this window. You can enter selection criteria in
these field names to filter out table rows that you do not want displayed. For procedur es on using the
Filter Editor, refer to the online help.
CMS Window Components
Icons Used in Win dows
Some window have icons for sorting information in tables, for showing which cells in a table are
editable, and for displaying further information from Cisco.com (see Figure 3-16).
These are the most common buttons that you use to change the information in a CMS window:
• OK—Save any ch an ge s and clo s e the window . If you made no changes, the win d ow closes. If CMS
detects errors in your entry, the window remains open. For more information about error detection,
see the “Er ror Ch ecki ng ” se ction on page 3 -32.
• Apply—Save any changes made in the window and leave the window open. If you made no changes,
the Apply button is disabl ed.
• Refresh—Update the CMS window with the latest status of the device. Unsaved changes are lost.
• Cancel—Do not save any changes made in the window and clo se the w indow.
• Help—Display procedure s on perfor ming tasks fro m the window.
• Modify—Disp lay the sec ondar y w ind ow for ch angi ng info rm ati on on t he se le cte d it em or it ems .
You usually select an item from a list or table and click Modify.
Accessing CMS
Chapter 3 Getting Started with CMS
This section assumes the following:
• Y ou know the IP address and password of the command switch or a specific switch. This information
is either:
–
Assigned to the switch by following the setup program, as describ ed in the release notes.
–
Changed on the switch by following the information in the “Assigning Switch Information”
section on page 4-2 and “Preventing Unauthorize d Access to Your Switch” section on page 7-1.
Considerations f or a ssigni ng IP addr esses an d p asswords to a co mm an d s witc h and c luster
members are described in the “IP Addresses” section on page 6-15 and the “Passwords” section
on page 6-16.
• You know your access privilege level to the switch.
• You hav e referr ed to the r elease no tes for sy stem re quiremen ts and ha v e follo wed th e proced ures for
installing the required Java plug-ins and configuring your browser.
CautionCopies of the CMS p ages you display are sa ved in your bro wser memory cache u ntil you exit the browser
session. A password is not required to redisplay these pages, including the Cisco Systems Access page.
You can access the CLI b y clicking Mo nitor the r outer - HTML ac cess to the command li ne interface
from a cached copy of the Cisco Systems Access page. To prevent unauthorized access to CMS and the
CLI, exit your browser to end the browser session.
NoteIf you have configured the Terminal Access Controlle r A ccess Co nt rol Syste m Plu s (TACACS+) or
Remote Authentication Dial-In User Service (RADIUS) feature on the switch, you can still access the
switch through CMS. For information about how inconsistent authentication configurations in switch
clusters can affect access through CMS, see the “TACACS+ and RADIUS” section on page 6-17.
Step 1Enter the switch IP address and your privilege level in the browser Location field (Netscape
Communicator) or Addre ss field (Micr osoft Inter net Ex plorer ). For example:
http://10.1.126.45:184/level/14/
where 10.1.126.45 is the switch IP address, 184 is the HTTP port, and level/14 is the privilege level.
You do not need to enter the HT TP port if the sw itch is u sing HTTP po rt 80 (the default) or ente r the
privilege level if you have read-write access to the switch (privilege level is 15). For information about
the HTTP port, see the “HTTP Access to CMS” section on page 3-32. For information about privilege
levels, see the “Access Modes in CMS” section on page 3-31 .
Step 2When prompted for a username and password, enter only the switch enable password. CMS prompts you
a second time for a usernam e and password . Enter onl y the enabl e password agai n.
If you configure a loca l u ser na me a nd passwor d, m ake sure you en abl e i t by usin g t h e ip http
authentication g lo bal configur ation c om mand. E nte r you r u ser na me a nd passwo rd when p rom pte d.
Step 3Click Web Console.
If you access CM S from a st anda lon e or me mb er sw itch , D evice Manag er a ppea rs. I f you a cce ss CMS
from a command switch, you ca n display the Fron t Panel and Topology views.
Accessing CMS
Access Modes in C MS
CMS provides two le v e ls of acce ss to the co nf igurat ion options: read-wr ite ac cess and read -only ac cess.
Privilege levels 0 to 15 are supported.
• Privilege level 15 provides you with read-write access to CMS.
• Privilege levels 1 to 14 provide you with read-only access to CMS. Any options in the CMS
windows, menu bar, toolbar, and popu p m enus t hat ch an ge t he switch or clust er co nfigurat ion a re
not shown in read-only mode.
• Privilege level 0 denies access to CMS.
If you do not include a privilege level when you access CMS, the switch verifies if you have
privilege-level 15. If you do not, you are denied ac cess to CMS. If you do have privilege-level 15, you
are granted read-write access. Therefore, you do not need to include the privilege level if it is 15.
Entering zero denies access to CMS. For more information about privilege levels, see the “Preventing
Unauthorized Access to Your Switch” section on page 7-1.
Note• If your cluster has these member switches run ning earlie r software re leases and if you have
read-only access to these memb er switches , some co nf iguration windo ws fo r those switch es dis play
incomplete information:
–
Catalyst 2900 X L o r C atal yst 3500 XL member swi tches ru nning Rel ease 12.0(5)WC2 or
earlier
–
Catalyst 2950 member sw itches runni ng Release 12.0(5)WC2 or earlier
78-14982-01
–
Catalyst 3550 member sw itches run ning Releas e 12 .1(6)EA1 or ea rlier
For more information about this limitation, refer to the release notes.
• These switches do n ot su ppo rt r ead- only mo de on CM S:
–
Catalyst 1900 and Ca taly st 28 20
–
Catalyst 2900 XL switches with 4-MB CPU DRAM
In read-only mod e, the se sw it ches a ppe ar a s unavailable devices an d c anno t be c onfigure d from
CMS.
HTTP Access to CMS
CMS uses Hypertext Transfer Pro toc ol ( HTTP) , whi ch i s an i n- band for m of c omm unic atio n wi th the
switch through any one of its Ethern et port s and that allows switch ma nageme nt from a st andard w eb
browser. The default HTTP port is 80.
If you change the HTTP port, you mu st include the new port number when you ent er the IP address in
the browser Location or Address fi eld (f or e xamp le, ht tp:/ /10. 1.126 .45: 184 whe re 18 4 is t he ne w HTTP
port number).
Do not disable o r otherw is e mi scon figure t he por t thro ugh w hic h your m an agem ent statio n i s
communicating w ith th e switc h. You might want to write down the p ort num ber to whi ch you are
connected. Change s to t he sw itch I P i nform at ion sh ould be d one wi th care .
Chapter 3 Getting Started with CMS
For information about connecting to a switch port, refer to the switch hardware installation guide.
Verifying Your Changes
CMS provides notification cues to help you track and confirm the changes you make.
Change Notification
A green border around a field or t abl e cel l mea ns tha t you ma de a n unsaved chan ge to the field or tabl e
cell. Previous information in that field or table cell is displayed in the window status bar. When you save
the changes or if you cancel the change, the green border disappears.
Error Checking
A red border around a field mean s that you en tered invalid data in the field. An erro r messag e also
displays in the window status bar. When you enter valid data in the field, a green border replaces the red
border until you either save or cancel the change.
If there is an error in communica ting with the switc h or if you mak e an error wh ile performing an action,
a message notifies you about the erro r.
NoteThe Save Configuration option is not available if your switch access level is read-only. For more
information about the read-onl y access mo de, see th e “Access Modes in CMS” section on pag e 3-31.
TipAs you make cluster configuration ch ange s (except for ch anges to th e Topology view and in the
Preferences window), make sure that you per iodically sa v e the configuration from the comm and switc h.
The configuration is saved on the c omma nd a nd me mb er sw it ches.
The front-panel images and CMS windows always display the running configuration of the switch.
When you make a configuration change to a switch or switch cluster, the change becomes part of the
running configuration. The change does not automatically become part of the con f igurat ion f ile in Flash
memory, which is the startup configuration used each time the switch resta rts. If you do not save your
changes to Flash memory, they are lost when the switch restarts.
Saving Your Configuration
NoteCatalyst 1900 and Catalyst 2820 switches automatically save configuration changes to Flash memory as
they occur.
To save all configuration chan ges, you must select Administration > Save Configuration.For CMS
procedures for saving your sw itch c onfiguration , refe r to t he onli ne h elp.
Restoring Your Configuration
After you save a switch configura tion, you ca n r estore the con figurati on to o ne or m ore switc hes f or
these reasons:
• You made an in corre c t c hange to th e c ur rent runn in g configura tion a nd want t o r elo ad a saved
configuration.
• You need to reload a switch after a switch failure or power failure.
• You want to copy the configurat ion of a switc h to oth er swit ches.
For CMS procedures for restoring a sw itch configurati on, refe r to the online help.
CMS Preferences
When you exit from CMS, your CMS preferences are saved to your PC in a file called .cms_properties.
You can copy this file to other PCs. The file is store d in a default configuration dir ectory, such as
C:\Documents and Settings\username. If you cannot locate the CMS preferences file, select
Start > Search > For Files or Folders..., and search for .cms_properties.
78-14982-01
NoteIn previous CMS versions, the preferen ces were saved in Flash memory whe n you exited from CM S.
When managing switch clusters through CMS, remember that clusters can have a mix of switch models
using diffe rent IOS releases and that CMS in earl ier IOS release s and on dif ferent switch p latforms mi ght
look and function differently from CMS in this IOS release.
When you select Device > Device Manager for a clu ster m embe r, a new browser session i s laun ch ed,
and the CMS version for that switch is displayed.
Here are examples of how CMS can differ between IO S releases an d switch pl atform s:
• On Catalyst switches run ning Re le ase 12.0(5)WC2 or earlier or Rele as e 12.1(6)EA1 or earlier, the
CMS versions in those software releases might appear similar but are not the same as this release.
For example, the Topology view in this release is not the same as the Topology view or Cluster View
in those earlier software releases.
• CMS on the Catalyst 1900 and Catalyst 2820 switches is referred to as Switch Manager. Cluster
management options are not available on these switches. This is the earliest version of CMS.
Refer to the documentation specific to the switch and its IOS release for descrip tions of the CMS version
you are using.
Chapter 3 Getting Started with CMS
Where to Go Next
Before configuring the switch, refer to these places for start-up information:
• Switch release notes on Cisco.com:
–
CMS software requ ir eme nts
–
Procedures for running t he setup progr am
–
Procedures for browser configuration
–
Procedures for acc essing CMS
• Chapter 4, “Assigning the Switch IP Addre ss and Default Gateway”
• Chapter 7, “Administering the Switch”
The rest of this guide provides information about and CLI procedures for the software features supported
in this release. For CMS procedures and window descriptions, refer to the online help.