Cisco Systems ME3400G2CSA User Manual

Cisco ME 3400 Ethernet Access Switch Software Configuration G uide

Cisco IOS Release 12.2(25)EX November 2005

Corporate Headquarters

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 526-4100

Customer Order Number: DOC-7817058= Text Part Number: 78-17058-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS M ANUAL ARE SUBJECT TO CHA NGE WITHOUT NO TICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSI BILITY FOR THEIR APPLICA TION OF ANY PRODUCT S.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORT H IN THE INFORMATION PACKET T HAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP head er compressi on is an adap tation of a program developed by the Universi ty of Ca lifornia, Berk eley (UCB) as part of UCB ’s public domain version of the UNIX operatin g system. All rights reserved . Copyri ght © 1981 , Rege nts of the Uni versity of Calif ornia.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THE SE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAI M ALL WARRANTIE S, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NO NINFRINGEM ENT OR ARISING FROM A COURS E OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING , WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE S.

CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering th e Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Ex pe rti se, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502 R)

Cisco ME 3400 Ethernet Access Switch Software Configuration Guide

Preface xxxiii

Audience xxxiii Purpose xxxiii Conventions xxxiii Related Publications xxxiv Obtaining Documentation xxxv

Cisco.com xxxv Product Documentation DVD xxxv

Ordering Documentation xxxv Documentation Feedback xxxvi Cisco Product Secu rity Overview xxxvi

Reporting Security Problems in Cisco Products xxxvii

CHAPTER

Obtaining Technical Assistance xxxvii

Cisco Technical Support & Documentation Website xxxvii

Submitting a Service Request xxxviii

Definitions of Service Request Severity xxxviii Obtaining Additional Publications and Information xxxix

1 Overview 1-1

Features 1-1

Performance Feat ures 1-2

Management Options 1-3

Manageability Features 1-3

Availability Features 1-4

VLAN Features 1-5

Security Features 1-5

Quality of Service and Class of Service Features 1-6

Layer 2 Virtual Pr ivate Network Services 1-7

Layer3 Features 1-7

Layer 3 VPN Services 1-8

Monitoring Features 1-8

Subscriber Security 1-5 Switch Security 1-5 Network Security 1-6

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

iii

Contents

Default Settings After Initial Switch Configuration 1-8 Network Configuration Examples 1-11

Multidwelling or Ethernet-to-the-Subscriber Network 1-11 Layer 2 VPN Application 1-13 Multi-VRF CE Applicatio n 1-14

Where to Go Next 1-15

CHAPTER

2 Using the Command-Line Interface 2-1

Understanding Command Modes 2-1 Understanding the Help System 2-3 Understanding Abbreviated Commands 2-3 Understanding no and default Forms of Commands 2-4 Understanding CLI Error Messages 2-4 Using Command History 2-4

Changing the Command Hi story Buffer Size 2-5 Recalling Commands 2-5 Disabling the Command History Feature 2-5

Using Editing Features 2-6

Enabling and Disa bling Editing Features 2-6 Editing Commands through Keystrokes 2-6

Editing Command Lines that Wrap 2-8 Searching and Filtering Output of sho w an d m or e Com ma nds 2-8 Accessing the CLI 2-9

Accessing the CLI through a Console Connection or through Telnet 2-9

CHAPTER

3 Assigning the Switch IP Address and Default Gateway 3-1

Understanding the Boot Process 3-1 Assigning Switch Information 3-2

Default Switch Information 3-3

Understanding DHCP-Based Autoconfiguration 3-3

DHCP Client Request Process 3-3

Configuring DHCP-Based Autoconfiguration 3-5

DHCP Server Configuration Guidelines 3-5 Configuring the TFTP Server 3-5 Configuring the DNS 3-6 Configuring the Relay Device 3-6 Obtaining Configuration Files 3-7 Example Configuration 3-8

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Manually Assigning IP Information 3-9 Checking and Saving the Running Configuration 3-10 Modifying the S ta rtup Configurat ion 3-12

Default Boot Configuration 3-13

Automatically Downloading a Configuration File 3-13

Specifying the Filename to Read and Write the System Configu ration 3-13

Booting Manually 3-14

Booting a Specific Software Image 3-14

Controlling Environment Variables 3-15 Scheduling a Reload of the Software Image 3-16

Configuring a Scheduled Reload 3-17

Displaying Sched uled Reload Information 3-18

Contents

CHAPTER

4 Configuring Cisco IOS CNS Agents 4-1

Understanding Cisco Configuration Engine Software 4-1

Configuration Service 4-2

Event Service 4-3

NameSpace M a pper 4-3

What You Should Know About th e C N S ID s an d De vice Hostname s 4-3

ConfigID 4-3 DeviceID 4-4 Hostname and De viceID 4-4 Using Hostname, DeviceID, and ConfigID 4-4

Understanding Cisco IOS Agents 4-5

Initial Configuration 4-5

Incremental (P ar tia l ) Co nf ig ur ation 4-6

Synchronized Configuration 4-6 Configuring Ci sco IOS Agents 4-6

Enabling Automate d CNS Configuration 4-6

Enabling the C NS Ev e nt Agent 4-8

Enabling the Cisco IOS CNS Agent 4-9

Enabling an Initial Configuration 4-9 Enabling a Partial Configuration 4-11

CHAPTER

78-17058-01

Displaying CNS Configuration 4-12

5 Administering the Switch 5-1

Managing the System Time and Date 5-1

Understanding the System Clock 5-2

Understanding Network Time Protocol 5-2

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

Contents

Configuring NTP 5-4

Default NTP Config uration 5-4 Configuring NTP Authentication 5-5 Configuring NTP Associations 5-6 Configuring NTP Broadcast Service 5-7 Configuring NTP Ac cess Restrictions 5-8 Configuring the Source IP Address for NTP Packets 5-10 Displaying the NTP C onfiguration 5-11

Configuring Ti me and Date Manually 5-11

Setting the System Clock 5-11 Displaying the Time and Date Configuration 5-12 Configuring the Time Zone 5-12 Configuring Summer Time (Daylight Saving Time) 5-13

Configuring a System Name and Prompt 5-14

Default System Name and Prompt Configuration 5-15 Configuring a System Name 5-15 Understanding DNS 5-15

Default DNS Configuration 5-16 Setting Up DNS 5-16 Displaying the DNS Configuration 5-17

Creating a Banner 5-17

Default Banner Con figuration 5-17 Configuring a Message-of-the-Day Login Banner 5-18 Configuring a Login Banner 5-19

Managing the MAC Address Table 5-19

Building the Address Table 5-20 MAC Addresses and VLANs 5-20 Default MAC Address Tab le Configuration 5-21 Changing the Addres s Aging Time 5-21 Removing Dynamic Address Entries 5-22 Configuring MAC Address Notification Traps 5-22 Adding and Removing Static Address Entries 5-24 Configuring Unicast MAC Address Filtering 5-25 Disabling MAC Address Learning on a VLAN 5-26 Displaying Addre ss Table Entries 5-28

Managing the ARP Table 5-28

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Contents

CHAPTER

6 Configuring SDM Templates 6-1

Understanding the SDM Templates 6-1 Configuring the Switch SDM Template 6-2

Default SDM Template 6-2

SDM Template Configuration Guidelines 6-2

Setting the SDM Template 6-3 Displaying the SDM Temp lates 6-4

7 Configuring Switch-Based Authentication 7-1

Preventing Unauthorized Access to Your Switch 7-1 Protecting Access to Privileged EXEC Commands 7-2

Default Password and Privilege Level Configuration 7-2

Setting or Changing a Static Enable Password 7-3

Protecting Enable and Enable Secret Passwords with Encryption 7-4

Disabling Password Recovery 7-5

Setting a Telnet Password for a Terminal Line 7-6

Configuring User name and Password Pairs 7-7

Configuring Multiple Privilege Levels 7-8

Setting the Priv ilege Level for a Command 7-8 Changing the Default Privilege Level for Lines 7-9 Logging into and Exiting a Privilege Level 7-10

Controlling Switch Access with TACACS+ 7-10

Understanding TACACS+ 7-10

TACACS+ Operation 7-12

Configuring TACACS+ 7-13

Default TACACS+ Confi guration 7-13 Identifying the TACACS+ Server Host and Setting the Authentication Key 7-13 Configuring TACACS+ Login Authentication 7-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-16 Starting TACACS+ Accounting 7-17

Displaying the TA CACS+ Configuration 7-17 Controlling Switch Access with RADIUS 7-18

Understanding RADIUS 7-18

RADIUS Operation 7-19

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

vii

Contents

Configuring RADIUS 7-20

Default RADIUS Configu ration 7-20 Identifying the RADIUS Server Host 7-20 Configuring RADI US Login Authentication 7-23 Defining AAA Server Groups 7-25 Configuring RADIUS Authorization for User Privilege d Access and Network Services 7-27 Starting RADIUS Accounting 7-28 Configuring Set tings for All RADIUS Servers 7-29 Configuring the Switch to Use Vendor-Specific RADIUS Attributes 7-29 Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 7-31

Displaying the RADIUS Configuration 7-31

Controlling Switch Access with Kerberos 7-32

Understanding Kerberos 7-32 Kerberos Operation 7-34

Authenticating to a Boundary Switch 7-35 Obtaining a TGT from a KDC 7-35 Authenticating to Network Services 7-35

Configuring Kerberos 7-36

CHAPTER

Configuring the Switch for Local Authentication and Authorization 7-36 Configuring the Switch for Secure Shell 7-37

Understanding SSH 7-38

SSH Servers, Integrated Clients, and Supported Versions 7-38 Limitations 7-38

Configuring SSH 7-39

Configuration Guidelines 7-39 Setting Up the Switch to Run SSH 7-39 Configuring the SSH Server 7-40

Displaying the SS H C onfiguration and Status 7-41

8 Configuring IEEE 802.1x Port-Based Authentication 8-1

Understanding IEEE 802.1x Port-Based Authentication 8-1

Device Roles 8-2 Authentication Initiation and Message Exchange 8-3 Ports in Authorized and Unauthorized States 8-4 IEEE 802.1x Accounting 8-5 IEEE 802.1x Accounting Attribute-Value Pairs 8-5 IEEE 802.1x Host Mode 8-6 Using IEEE 802.1x with Port Security 8-7 Using IEEE 802.1x with VLAN Assignment 8-8

viii

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Configuring IEEE 802.1x Authentication 8-9

Default IEEE 802.1x Configuration 8-9

IEEE 802.1x Confi guration Guidelines 8-10

Configuring IEEE 802.1x Authentication 8-11

Configuring th e Switch-to-RADIUS-Server Communicat ion 8-12

Configuring Periodic Re-Authentication 8-13

Manually Re-Authenticating a Client Connected to a Port 8-14

Changing the Quiet Period 8-14

Changing the Switch-to-Client Retransmission Time 8-15

Setting the Switch-to-Client Frame-Retransmission Number 8-15

Setting the Re-Aut hentication Number 8-16

Configuring the Host Mode 8-17

Resetting the IE EE 802.1x Configuration to the Default Values 8-17

Configuring IEEE 802.1x Accounting 8-18 Displaying IEEE 802.1x Statistics and Status 8-19

Contents

CHAPTER

9 Configuring Interface Characteristics 9-1

Understanding Interface Types 9-1

Port-Based VLANs 9-2

Switch Ports 9-2

UNI and NNI Ports 9-3

Access Ports 9-3 Trunk Ports 9-4

Tunnel Ports 9-4 Routed Ports 9-4 Switch Virtual Interfaces 9-5 EtherChannel Por t Groups 9-6 Connecting Interfaces 9-6

Using Interface Configuration Mode 9-7

Procedures for Configuring Interfaces 9-7 Configuring a Range of Interfaces 9-8 Configuring and Using Interface Range Macros 9-10

Configuring Ethernet Interfaces 9-11

Default Etherne t Interface Configuration 9-12 Configuring User Network and Network Node Interfaces 9-13 Configuring Interface Speed and Duplex Mode 9-14

Speed and Duplex Configuration Guidelines 9-15

Setting the Interface Speed and Duplex Parameters 9-15 Configuring IEEE 802.3x Flow Control 9-17

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

Contents

Configuring Auto-MDIX on an Interface 9-18

Adding a Descripti on for an Interface 9-19 Configuring Layer 3 Interfaces 9-20 Configuring the System MTU 9-21 Monitoring and Maintaining the Interfaces 9-22

Monitoring Interface Status 9-23

Clearing and Reset ting Interfaces and Counters 9-24

Shutting Down and Restarting the Interface 9-24

CHAPTER

10 Configuring Command Macros 10-1

Understanding Command Macros 10-1 Configuring Comman d Macros 10-2

Default Command Macro Configuration 10-2

Command Macro Configuration Guidelines 10-2

Creating Command Macros 10-3

Applying Command Macros 10-4 Displaying Command Macros 10-5

11 Configuring VLANs 11-1

Understanding VLANs 11-1

Supported VLANs 11-3

Normal-Range VLANs 11-3

Extended-Range VL ANs 11-4

VLAN Port Membership Modes 11-4

UNI VLANs 11-5 Creating and Modifying VLANs 11-6

Default Etherne t VLAN Configuration 11-7

VLAN Configuration Guidelines 11-8

Creating or Modifying an Ethernet VLAN 11-9

Assigning St at ic-Access Port s to a VLAN 11-10

Creating an Extended-Range VLAN with an Internal VLAN ID 11-11

Configuring UNI VL ANs 11-12

Configuration Guidelines 11-12

Configuring UNI VL ANs 11-13 Displaying VLANs 11-14 Configuring VLAN Tr unks 11-14

Trunking Overview 11-14

IEEE 802.1Q Confi guration Considerations 11-15

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Default Layer 2 Ethernet Inte rfa c e VL A N Co nf ig ur ation 11-16 Configuring an Ethernet Interface as a Trunk Port 11-16

Interaction with Other Features 11-16 Configuring a Trunk Port 11-17 Defining the Allo w e d V LA N s on a Tr un k 11-17 Configuring the Native VLAN for Untagged Traffic 11-19

Configuring Trunk Ports for Load Sharing 11-19

Load Sharing Using STP Port Priorities 11-20 Load Sharing Using STP Path Cost 11-21

Configuring VMPS 11-23

Understanding VMPS 11-23

Dynamic-Access Port VLAN Membership 11-24 Default VMPS Client Configuration 11-24 VMPS Configuration Guidelines 11-25 Configuring the VMPS Client 11-25

Entering the IP Address of the VMPS 11-25

Configuring Dynamic-Access Ports on VMPS Clients 11-26

Reconfirming VLAN Memberships 11-26

Changing the Reconfirmation Interval 11-27

Changing the Retry Count 11-27 Monitoring the VMPS 11-27 Troubleshooting Dynamic-Access Port VLAN Membership 11-28 VMPS Configuration Example 11-28

Contents

CHAPTER

78-17058-01

12 Configuring Private VLANs 12-1

Understanding Private VLANs 12-1

Types of Private VLANs and Private-VLAN Ports 12-2 IP Addressing Scheme with Private VLANs 12-4 Private VLANs across Multiple Switches 12-4 Private VLANs and Unicast, Broadcast, and Multicast Traffic 12-5 Private VLANs and SVIs 12-5

Configuring Private VLANs 12-5

Tasks for Configuring Private VLANs 12-6 Default Private-VLAN Configuration 12-6 Private-VLAN Configuration Guidelines 12-6

Secondary and Primary VLAN Configuration 12-7

Private-VLAN Po rt Co nfiguration 12-8

Limitations with Other Features 12-9 Configuring and Associating VLANs in a Private VLAN 12-10

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

Contents

Configuring a Lay er 2 Interface as a Private-VLAN Host Port 12-12 Configuring a Lay er 2 Interface as a Private-VLAN Promi scuous Port 12-13 Mapping Secondary VLANs to a Primary VLAN Layer 3 VLAN Interface 12-14

Monitoring Private VLANs 12-15

CHAPTER

13 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling 13-1

Understanding IEEE 802.1Q Tunneling 13-1 Configuring IEEE 802.1Q Tunneling 13-4

Default IEEE 802.1Q Tunneling Configuration 13-4 IEEE 802.1Q Tunnel ing Configuration Guidelines 13-4

Native VLANs 13-4

System MTU 13-5 IEEE 802.1Q Tunneling and Other Features 13-6 Configuring an IEEE 802.1Q Tunneling Port 13-6

Understanding Layer 2 Protocol Tunneling 13-8 Configuring Layer 2 Protocol Tunneling 13-10

Default Layer 2 Protocol Tunneling Configuration 13-11 Layer 2 Protocol Tu nneling Configuration Guidelines 13-11 Configuring Layer 2 Protocol Tunneling 13-12 Configuring Layer 2 Tunneling for EtherChannels 13-14

Configuring the SP Edge Switch 13-14

Configuring the Customer Switch 13-15

Monitoring and Maintaining Tunneling Status 13-18

CHAPTER

xii

14 Configuring STP 14-1

Understanding Spanning-Tree Features 14-1

STP Overview 14-2 Spanning-Tree To pology and BPDUs 14-3 Bridge ID, Switch Priority, and Extended System ID 14-4 Spanning-Tree I nterface States 14-4

Blocking State 14-6

Listening State 14-6

Learning State 14-6

Forwarding State 14-7

Disabled State 14-7 How a Switch or Port Becomes the Root Switch or Root Port 14-7 Spanning Tree and Redundant Connectivity 14-8 Spanning-Tree Add ress Management 14-8 Accelerated Aging to Retain Connectivity 14-9

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Spanning-Tree Mode s and Protocols 14-9 Supported Spanning-Tree Instances 14-10 Spanning-Tree Interoperability and Backward Compat ibility 14-10 STP and IEEE 802.1Q Tr unks 14-10

Configuring Spanning-Tree Features 14-11

Default Spanning -Tree Configuration 14-11 Spanning-Tree Configuration Guidelines 14-12 Changing the Spanning-Tree Mode. 14-13 Disabling Spanning Tree 14-14 Configuring the Root Switch 14-14 Configuring a Secondary Root Switch 14-16 Configuring Port Priority 14-16 Configuring Path Cost 14-18 Configuring the Switch Priority of a VLAN 14-19 Configuring Spanning-Tree Timers 14-20

Configuring the Hello Time 14-20 Configuring the Forwarding-Delay Time for a VLAN 14-21 Configuring th e Maximum-Aging Time for a VLAN 14-21

Contents

CHAPTER

Displaying the Spanning-Tree Status 14-22

15 Configuring MSTP 15-1

Understanding MSTP 15-2

Multiple Spanning-Tree Regions 15-2 IST, CIST, and CST 15-2

Operations Within an MST Region 15-3

Operations Betwee n MST Regions 15-3 Hop Count 15-4 Boundary Ports 15-5 Interoperabi lity with IEEE 802.1D STP 15-5

Understanding RSTP 15-6

Port Roles and the Active Topology 15-6 Rapid Convergence 15-7 Synchronization of Port Roles 15-8 Bridge Protocol Data Unit Format and Processing 15-9

Processing Super ior BPDU Information 15-10

Processing Inferior BPDU Information 15-10 Topology Changes 15-10

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xiii

Contents

Configuring MSTP Features 15-11

Default MSTP Config uration 15-12 MSTP Configuration Gui delines 15-12 Specifying the MST Region Configuration and Enabling MSTP 15-13 Configuring the Root Switch 15-14 Configuring a Sec ondary Root Switch 15-16 Configuring Port Priority 15-17 Configuring Path Cost 15-18 Configuring the Switch Priority 15-19 Configuring the Hello Time 15-19 Configuring th e Forwarding-Delay Time 15-20 Configuring th e Maximum-Aging Time 15-21 Configuring the Maximum-Hop Count 15-21 Specifying the Link Type to Ensure Rapid Transitions 15-22 Restarting the Protocol Migration Process 15-22

CHAPTER

Displaying the MST Configuration and Status 15-23

16 Configuring Optional Spanning-Tree Features 16-1

Understanding Optional Spanning-Tree Features 16-1

Understanding Port Fast 16-2 Understanding BPD U Guard 16-2 Understanding BPDU Filtering 16-3 Understanding EtherChannel Guard 16-3 Understanding Root Guard 16-3 Understanding Loop Guard 16-4

Configuring Optional Spanning-Tree Features 16-5

Default Optional Spanning-Tree Configuration 16-5 Optional Spanning-Tree Configuration Guidelines 16-5 Enabling Port Fast 16-5 Enabling BPDU Guard 16-6 Enabling BPDU Filtering 16-7 Enabling EtherChannel Guard 16-8 Enabling Root Guard 16-9 Enabling Loop Guard 16-9

xiv

Displaying the Spanning-Tree Status 16-10

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Contents

CHAPTER

17 Configuring Flex Links 17-1

Understanding Flex Links 17-1 Configuring Flex Links 17-2

Default Flex Link Configuration 17-2 Flex Link Config uration Guidelines 17-2 Configuring Flex Links 17-3

Monitoring Flex Links 17-4

18 Configuring DHCP Features and IP Source Guard 18-1

Understanding DHCP Features 18-1

DHCP Server 18-2 DHCP Relay Agent 18-2 DHCP Snooping 18-2 Option-82 Data Insertion 18-3 DHCP Snooping Binding Database 18-5

Configuring DHCP Features 18-6

Default DHCP Config uration 18-7 DHCP Snooping Configuration Guidelines 18-7 Configuring the DHCP Relay Agent 18-8 Specifying the Packet Forwarding Address 18-9 Enabling DHCP Snoopi ng and Option 82 18-10 Enabling DHCP Snoopi ng on Private VLANs 18-11 Enabling the DHCP Snooping Binding Database Agent 18-12

78-17058-01

Displaying DHCP Sno oping Information 18-13 Understanding IP Source Guard 18-13

Source IP Address Filtering 18-14 Source IP and MAC Address Filtering 18-14

Configuring IP Source Guard 18-14

Default IP Source Guard Configuration 18-14 IP Source Guard Configuration Guidelines 18-15 Enabling IP Source Guard 18-15

Displaying IP Source Guard Information 18-16

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

Contents

CHAPTER

19 Configuring Dynamic ARP Inspection 19-1

Understanding Dynamic ARP Inspection 19-1

Interface Trust States and Network Security 19-3 Rate Limiting of ARP Packets 19-4 Relative Priority of ARP ACLs and DHCP Snooping Entries 19-4 Logging of Dropped Packets 19-4

Configuring Dynamic ARP Inspection 19-5

Default Dynamic ARP Inspection Configuration 19-5 Dynamic ARP Inspection Configuration Guidelines 19-6 Configuring Dynamic ARP Inspection in DHCP Environments 19-7 Configuring ARP ACL s for Non-DHCP Environments 19-8 Limiting the Rate of Incoming ARP Packets 19-10 Performing Validation Checks 19-12 Configuring the Log Buffer 19-13

Displaying Dynamic ARP Inspection Information 19-14

20 Configuring IGMP Snooping and MVR 20-1

Understanding IGMP Snooping 20-1

IGMP Versions 20-2 Joining a Multicast Group 20-3 Leaving a Multicast Group 20-5 Immediate Leave 20-5 IGMP Configurable-Leave Timer 20-5 IGMP Report Suppression 20-6

xvi

Configuring IGMP Snooping 20-6

Default IGMP Snoo ping Configuration 20-6 Enabling or Dis a bl in g IG M P Sno o pi ng 20-7 Configuring a Multicast Router Port 20-8 Configuring a Host Statically to Join a Group 20-8 Enabling IGMP Immediate Leave 20-9 Configuring the IGMP Leave Timer 20-10 Configuring TCN-Related Commands 20-11

Controlling the Multicast Flooding Time After a TCN Event 20-11 Recovering from Flood Mode 20-11

Disabling Multicast Flooding During a TCN Event 20-12 Configuring the IGMP Snooping Querier 20-13 Disabling IGMP Report Suppression 20-14

Displaying IGMP Sno oping Information 20-15

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Understanding Multicast VLAN Registration 20-16

Using MVR in a Multicast Television Application 20-16

Configuring MV R 20-18

Default MVR Configuration 20-18 MVR Configuration Guidelines and Limitations 20-19 Configuring MVR Global Parameters 20-19

Configuring MVR Interfaces 20-20 Displaying MVR Information 20-22 Configuring IG M P Fi lt ering and Throttling 20-22

Default IGMP Filtering and Throttling Configuration 20-23

Configuring IGMP Profiles 20-23

Applying IGMP Profil es 20-25

Setting the Maximum Number of IGMP Groups 20-25

Configuring the IGMP Throttling Action 20-26 Displaying IGMP Filtering and Throttling Configuration 20-28

Contents

CHAPTER

21 Configuring Port-Based Traffic Control 21-1

Configuring Sto rm Control 21-1

Understanding Storm Control 21-1

Default Storm Control Configuration 21-3

Configuring Storm Control and Threshold Levels 21-3 Configuring Protected Ports 21-5

Default Protected Port Configuration 21-5

Protected Port Configuration Guidelines 21-6

Configuring a Protected Port 21-6 Configuring Port Blocking 21-7

Default Port Blocking Configuration 21-7

Blocking Flooded Traffic on an Interface 21-7 Configuring Port Security 21-8

Understanding Po rt Security 21-8

Secure MAC Addresses 21-8

Security Viol at ions 21-9 Default Port Security Configuration 21-10 Port Security Configuration Guidelines 21-10 Enabling and Configuring Port Security 21-11 Enabling and Confi guring Port Security Aging 21-15

78-17058-01

Displaying Port -Based Traffic Control Settings 21-17

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xvii

Contents

CHAPTER

22 Configuring CDP 22-1

Understanding CDP 22-1 Configuring CDP 22-2

Default CDP Config uration 22-2 Configuring the CDP Characteristics 22-2 Disabling and Enabling CDP 22-3 Disabling and Enabling CDP on an Interface 22-4

Monitoring and Maintaining CDP 22-5

23 Configuring UDLD 23-1

Understanding UDLD 23-1

Modes of Operation 23-1 Methods to Detect Unidirectional Links 23-2

Configuring UDLD 23-4

Default UDLD Configuration 23-4 Configuratio n Guidelines 23-4 Enabling UDLD Globally 23-5 Enabling UDLD on an Interface 23-5 Resetting an Interf ace Disabled by UDLD 23-6

CHAPTER

Displaying UDLD Status 23-6

24 Configuring SPAN and RSPAN 24-1

Understanding SPAN and RSPAN 24-1

Local SPAN 24-2 Remote SPAN 24-2 SPAN and RSPAN Concepts and Terminology 24-3

SPAN Sessions 24-3 Monitored Traffic 24-4 Source Ports 24-5 Source VLANs 24-6 VLAN Filtering 24-6 Destination Por t 24-7 RSPAN VLAN 24-8

SPAN and RSPAN Interaction with Other Features 24-8

Configuring SPAN an d RSPAN 24-9

Default SPAN and RSPAN Conf iguration 24-10

xviii

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Configuring Local SPAN 24-10

SPAN Configuration Guidelines 24-10

Creating a Local SPAN Session 24-11

Creating a Local SP AN S ession and Configuring Ingress Traffic 24-13

Specifying VLANs to Filter 24-15 Configuring RSPAN 24-16

RSPAN Configuration Guidelines 24-16

Configuring a VLAN as an RSPAN VLAN 24-17

Creating an RSPAN Source Session 24-17

Creating an RSPAN Destination Session 24-19

Creating an RSPAN Destination Session and Configuring Ingress Traffic 24-20

Specifying VLANs to Filter 24-21

Displaying SPAN and RSPAN Status 24-22

Contents

CHAPTER

25 Configuring RMON 25-1

Understanding RMON 25-1 Configuring RMON 25-2

Default RMON Configuration 25-3 Configuring RMON Alarms and Events 25-3 Collecting Group History Statistics on an Interface 25-5 Collecting Group Ethernet Statistics on an Interface 25-6

Displaying RMON Status 25-6

26 Configuring System Message Logging 26-1

Understanding System Message Logging 26-1 Configuring System Message Logging 26-2

System Log Message Format 26-2 Default System Message Logging Configuration 26-3 Disabling Message Logging 26-3 Setting the Message D isplay Destination Device 26-4 Synchronizing Log Messages 26-5 Enabling and Disa bling Time Stamps on Log Messages 26-7 Enabling and Disabling Sequence Numbers in Log Messages 26-7 Defining the Message Severity Level 26-8 Limiting Syslog Messages Sent to the History Table and to SNMP 26-9 Configuring UNIX Syslog Servers 26-10

Logging Messages to a UNIX Syslog Daemon 26-10

Configuring the UNIX System Logging Facility 26-11

78-17058-01

Displaying the Lo gging Configuration 26-12

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xix

Contents

CHAPTER

27 Configuring SNMP 27-1

Understanding SNMP 27-1

SNMP Versions 27-2 SNMP Manager Functions 27-3 SNMP Agent Fu nc ti on s 27-4 SNMP Community Strings 27-4 Using SNMP to Access MIB Variables 27-4 SNMP Notifications 27-5 SNMP ifIndex MIB Objec t Va lu es 27-5

Configuring SNMP 27-6

Default SNMP Configuration 27-6 SNMP Configuration Guidelines 27-6 Disabling the SNMP Agent 27-7 Configuring Commun ity Strings 27-8 Configuring SNMP Gro ups and Users 27-9 Configuring SNMP Not ifications 27-11 Setting the Agent Co ntact and Location Information 27-14 Limiting TFTP Servers Used Through SNMP 27-15 SNMP Exampl es 27-15

CHAPTER

Displaying SNMP Status 27-16

28 Configuring Network Security with ACLs 28-1

Understanding ACLs 28-1

Supported ACLs 28-2

Port ACLs 28-3 Router ACLs 28-4 VLAN Maps 28-5

Handling Fragmented and Unfragmented Traffic 28-5

Configuring IPv4 ACLs 28-6

Creating Standard and Extended IPv4 ACLs 28-7

IPv4 Access List Number s 28-8 ACL Logging 28-8 Creating a Numbered Standard ACL 28-9 Creating a Numbered Extended ACL 28-10 Resequencing ACEs in an ACL 28-14 Creating Named Standard and Extended ACLs 28-14 Using Time Ranges with ACLs 28-16 Including Comments in ACLs 28-18

Applying an IPv4 ACL to a Terminal Line 28-18

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Applying an IPv4 ACL to an Interface 28-19 Hardware and Software Treatment of IP ACLs 28-21 IPv4 ACL Configuration Examples 28-21

Numbered ACLs 28-23

Extended ACLs 28-23

Named ACLs 28-23

Time Range Applied to an IP ACL 28-24

Commented IP AC L En tr ie s 28-24

ACL Logging 28-25

Creating Named MAC Extended ACLs 28-26

Applying a MAC ACL to a Layer 2 Interface 28-28

Configuring VLAN Map s 28-29

VLAN Map Configuration Guidelines 28-30 Creating a VLAN Map 28-31

Examples of ACLs and VLAN Maps 28-31 Applying a VLAN Map to a VLAN 28-33 Using VLAN Maps in Your Netwo rk 28-34

Wiring Closet Configuration 28-34

Denying Access to a Server on Another VLAN 28-35

Contents

CHAPTER

Using VLAN Maps with Router ACLs 28-36

VLAN Maps and Router ACL Configuration Guidelines 28-36 Examples of Router ACLs an d VLAN Maps Applied to VLANs 28-37

ACLs and Switched Packets 28-37

ACLs and Routed Packets 28-38

ACLs and Multicast Packets 28-39

Displaying IPv4 ACL Configuration 28-39

29 Configuring Control-Plane Security 29-1

Understanding Control-Plane Security 29-1 Configuring Control-Plane Security 29-4 Monitoring Control-Plane Security 29-5

30 Configuring QoS 30-1

Understanding QoS 30-1

Modular QoS CLI 30-3 Input and Output Policies 30-4

Input Policy Maps 30-4

Output Policy Maps 30-5

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xxi

Contents

Classification 30-5

Class Maps 30-6 The match Command 30-7 Classification Based on Layer 2 CoS 30-7 Classification Based on IP Precedence 30-8 Classification Based on IP DSCP 30-8 Classification Comparisons 30-9 Classification Based on QoS ACLs 30-10

Classification Based on QoS Groups 30-10 Table Maps 30-11 Policing 30-12

Individual Policing 30-13

Aggregate Policing 30-14

Unconditiona l Pr iority Policing 30-15 Marking 30-16 Congestion Management and Scheduling 30-18

Traffic Shapi ng 30-19

Class-Based Weighted Fair Queuing 30-21

Priority Queuing 30-22 Congestion Avoidance and Queuing 30-24

Configuring QoS 30-26

Default QoS Config uration 30-27 QoS Configuration Guidelines 30-27 Using ACLs to Classify Traffic 30-27

Creating IP Standard ACLs 30-28

Creating IP Extended ACLs 30-29

Creating Layer 2 MAC ACLs 30-30 Using Class Maps to Define a Traffic Class 30-31 Configuring Table Maps 30-33 Attaching a Traffic Policy to an Interface 30-35 Configuring Input Policy Maps 30-35

Configuring Input Policy Maps with Individual P olicing 30-36

Configuring Input Policy Maps with Aggregate Policing 30-39

Configuring Input Policy Maps with Marking 30-41 Configuring Out put Policy Maps 30-43

Configuring Out put Policy Maps with Class-Based-Weighted-Queuing 30-44

Configuring Out put Policy Maps with Class-Based Shaping 30-46

Configuring Out put Policy Maps with Port Shaping 30-47

Configuring Output Policy Maps with Class-Based Priority Queuing 30-48

Configuring Output Policy Maps with Weighted Tail Drop 30-53

xxii

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Displaying QoS Information 30-55

QoS Statistics 30-55

Configuration Examples for Policy Maps 30-56

QoS Configuration for Customer A 30-56 QoS Configuration for Customer B 30-58 Modifying Out pu t Po licies and Adding or Deleting Cla ss if ic ation Criteria 30-59 Modifying Output Policies and Changing Queuing or Scheduling Parameters 30-60 Modifying Out pu t Policies and Ad d in g or De le tin g Configured Ac ti ons 30-60 Modifying Output Policies and Adding or Deleting a Class 30-61

Contents

CHAPTER

31 Configuring EtherChannels 31-1

Understanding EtherChannels 31-1

EtherChannel Over view 31-2 Port-Channel I n terfaces 31-3 Port Aggregation Protocol 31-4

PAgP Modes 31-5 PAgP Interaction with Other Features 31-5

Link Aggregatio n Control Protocol 31-6

LACP Modes 31-6

LACP Interaction with Other Features 31-6 EtherChannel On Mode 31-7 Load Balancing and Forwarding Methods 31-7

Configuring EtherChannels 31-9

Default EtherCha nnel Configuration 31-9 EtherChannel Con figuration Guidelines 31-10 Configuring Layer 2 EtherChannels 31-11 Configuring Layer 3 EtherChannels 31-13

Creating Port-Channel Logical Interfaces 31-13

Configuring the Physical Interfaces 31-14 Configuring EtherChannel Load Balancing 31-16 Configuring the PAgP Learn Method and Priority 31-17 Configuring LACP Hot-Standby Ports 31-18

Configuring the LACP System Priority 31-19

Configuring the LACP Port Priority 31-20

78-17058-01

Displaying EtherChannel, PAgP, and LACP Status 31-21

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xxiii

Contents

CHAPTER

32 Configuring IP Unicast Routing 32-1

Understanding IP Routing 32-2

Types of Routing 32-2 Steps for Configuring Routing 32-3 Configuring IP Addressing 32-4

Default Addressi ng Configuration 32-4

Assigning IP Add re sses to Networ k In te rf ac es 32-5

Use of Subnet Zero 32-6 Classless Routing 32-6

Configuring Address Resolution Methods 32-7

Define a Static ARP Cache 32-8 Set ARP Encapsulation 32-9 Enable Proxy AR P 32-10

Routing Assistance When IP Routing is Disabled 32-10

Proxy ARP 32-10 Default Gateway 32-11 ICMP Router Discovery Protocol (IRDP) 32-11

Configuring Broadcast Packet Handling 32-12

Enabling Directed Broadcast-to-Physical Broadcast Translation 32-13 Forwarding UDP Broadcast Packets and Protocols 32-14 Establishing an IP Broadcast Address 32-15 Flooding IP Broadcasts 32-15

Monitoring and Maintaining IP Addressing 32-17

xxiv

Enabling IPv4 Unicast Routing 32-17 Configuring RIP 32-18

Default RIP Configuration 32-19

Configuring Ba sic RIP Parame te rs 32-19

Configuring RI P Authentication 32-21

Configuring Summary Addresses and Split Horizon 32-21

Configuring Spl it Horizon 32-23 Configuring OSPF 32-23

Default OSPF Configuration 32-24

Configuring Basic OSPF Parameters 32-26

Configuring OSPF Interfaces 32-26

Configuring OSPF Area Parameters 32-27

Configuring Other OSPF Parameters 32-29

Changing LSA Group Pacing 32-30

Configuring a Loopback Interface 32-31

Monitoring OSPF 32-31

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Configuring EI GRP 32-32

Default EIGRP Configuration 32-34 Configuring Bas ic EIGRP Parameters 32-35 Configuring EI GRP Interfaces 32-36 Configuring EI GRP Route Authentication 32-37 Monitoring and Maintaining EIGRP 32-38

Configuring BGP 32-38

Default BGP Config uration 32-40 Enabling BGP Routing 32-42 Managing Routing Policy Changes 32-45 Configuring BGP Decision Attributes 32-46 Configuring BGP Filtering with Route Maps 32-48 Configuring BGP Fi ltering by Neighbor 32-49 Configuring Prefix Lists for BGP Filtering 32-50 Configuring BGP Community Filtering 32-51 Configuring BGP Neighbors and Peer Groups 32-52 Configuring Aggr egate Addresses 32-54 Configuring Routing Domain Confederations 32-55 Configuring BGP Route Reflectors 32-56 Configuring Route Dampening 32-57 Monitoring and Maintaining BGP 32-58

Contents

Configuring Multi-VRF CE 32-59

Understanding Multi -VRF CE 32-59 Default Multi-VRF CE Configuration 32-61 Multi-VRF CE Configuration Guidelines 32-61 Configuring VRFs 32-62 Configuring a VPN Routing Session 32-63 Configuring BGP PE to CE Routing Sessions 32-64 Multi-VRF CE Configuration Example 32-64 Displaying Multi-VRF CE Status 32-68

Configuring Protocol-Independent Features 32-69

Configuring Ci sco Express Forwarding 32-69 Configuring the Number of Equal-Cost Routing Paths 32-70 Configuring Static Unicast Routes 32-71 Specifying Default Routes and Networks 32-72 Using Route Maps to Redistribute Routing Information 32-73 Configuring Policy-Based Routing 32-76

PBR Configuration Guidelines 32-77 Enabling PBR 32-78

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xxv

Contents

Filtering Rou tin g Info r m at ion 32-79

Setting Passive Interfaces 32-79 Controlling Advertising and Processing in Routing Updates 32-80 Filtering Sources of Routing Information 32-81

Managing Authentication Keys 32-82 Monitoring and Maintaining the IP Network 32-83

CHAPTER

33 Configuring HSRP 33-1

Understanding HSRP 33-1

Multiple HSRP 33-3 Configuring HSRP 33-4

Default HSRP Configuration 33-4

HSRP Configuration Guidelines 33-5

Enabling HSRP 33-5

Configuring HSRP Priority 33-6

Configuring MHSRP 33-9

Configuring HSRP Authentication and Timers 33-9

Enabling HSRP Support for ICMP Redirect Messages 33-11 Displaying HSRP Configurations 33-11

34 Configuring IP Multicast Routing 34-1

Understanding Cisco’s Implementation of IP Multicast Routing 34-2

Understanding IGMP 34-2

IGMP Version 1 34-3 IGMP Version 2 34-3

Understanding PIM 34-3

PIM Versions 34-3 PIM Modes 34-4 Auto-RP 34-4 Bootstrap Router 34-5 Multicast Forwarding and Reverse Path Check 34-5

xxvi

Configuring IP Multicast Routing 34-7

Default Multicast Routing Configuration 34-7

Multicast Routing Configuration Guidelines 34-7

PIMv1 and PIMv 2 In te roperability 34-8 Auto-RP and BSR Configuration Guidelines 34-8

Configuring Basic Multicast Routing 34-9

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Configuring a Rendezvous Point 34-10

Manually Assigning an RP to Multicast Groups 34-11 Configuring Auto-RP 34-12

Configuring PI Mv2 BSR 34-16 Using Auto-RP and a BSR 34-20 Monitoring the RP Mapping Information 34-21 Troubleshooting PIMv1 and PIMv2 Interoperability Problems 34-21

Configuring Adva nced PIM Features 34-21

Understanding PIM Shared Tree and Source Tree 34-21 Delaying the Use of PIM Shortest-Path Tree 34-23 Modifying the PIM Router-Query Message Interval 34-24

Configuring Opt ional IGMP Features 34-25

Default IGMP Configuration 34-25 Configuring the Switch as a Member of a Group 34-25 Controlling Access to IP Multicast Groups 34-26 Changing the IGMP Version 34-27 Modifying the IGMP Host-Query Message Interval 34-28 Changing the IGMP Query Timeout for IGMPv2 34-29 Changing the Maximum Que ry Response Time for IGMPv2 34-29 Configuring the Switch as a Statically Connected Member 34-30

Contents

CHAPTER

Configuring Optional Multicast Routing Features 34-31

Configuring sdr Listener Support 34-31

Enabling sdr Li stener Support 34-31

Limiting How Long an sdr Cache Entry Exists 34-32 Configuring an IP Multicast Boundary 34-32

Monitoring and Maintaining IP Multicast Routing 34-34

Clearing Caches, Tables, and Databases 34-34 Displaying System and Network Statistics 34-34 Monitoring IP Multicast Routing 34-35

35 Configuring MSDP 35-1

Understanding MSDP 35-1

MSDP Operation 35-2 MSDP Benefits 35-3

Configuring MSDP 35-4

Default MSDP Configuration 35-4 Configuring a Def ault MSDP Peer 35-4 Caching Source-Active State 35-6 Requesting Sourc e Information from an MSDP Peer 35-8

78-17058-01

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xxvii

Contents

Controlling Source Information that Your Switch Originates 35-8

Redistributing Sources 35-9 Filtering Sou rc e- A ctive Request Mes sages 35-11

Controlling Source Information that Your Switch Forwards 35-12

Using a Filter 35-12

Using TTL to Limit the Multicast Data Sent in SA Messages 35-14 Controlling Source Information that Your Switch Receives 35-14 Configuring an MSDP Mes h Group 35-16 Shutting Down an MSDP Peer 35-16 Including a Borderi ng PIM Dense-Mode Region in MSDP 35-17 Configuring an Originating Address other than the RP Address 35-18

Monitoring and Maintaining MSDP 35-19

CHAPTER

36 Troubleshooting 36-1

Recovering from Corrupted Software By Using the XmodemProtocol 36-2 Recovering from a Lost or Forgotten Password 36-3

Procedure with Password Recovery Enabled 36-5 Procedure with Password Recovery Disabled 36-7

Preventing Autoneg otiation Mismatches 36-8 SFP Module Sec urity and Ident ifi cation 36-9 Monitoring SFP Module Status 36-9 Monitoring Temperature 36-9 Using Ping 36-10

Understanding Ping 36-10 Using Ping 36-10

All Software Ve rs io ns 36-11

Metro IP Access Image 36-11

Ping Responses 36-12

Summary 36-13

Using Layer 2 Tr ac e r o ut e 36-13

Understanding Layer 2 Traceroute 36-13 Layer 2 Tracerout e Usage Guidelines 36-14 Displaying the Ph ysical Path 36-15

xxviii

Using IP Traceroute 36-15

Understanding IP Traceroute 36-15 Executing IP Traceroute 36-16

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

Using TDR 36-17

Understanding TDR 36-17 Running TDR and Displaying the Results 36-17

Using Debug Commands 36-18

Enabling Debuggi ng on a Specific Feature 36-18 Enabling All-System Diagnostics 36-19

Redirecting Debu g and Error Message Output 36-19 Using the show platform forward Command 36-19 Using the crashinfo File 36-22

Contents

APPENDIX

A Supported MIBs A-1

MIB List A-1 Using FTP to Access th e MI B Files A-3

B Working with the Cisco IOS File System, Configuration Files, and Software Images B-1

Working with th e Fl ash File System B-1

Displaying Available File Systems B-2

Setting the Default File System B-3

Displaying Information about Files on a File System B-3

Changing Directo ries and Displaying the Working Directory B-3

Creating and Removing Directories B-4

Copying Files B-4

Deleting Files B-5

Creating, Displaying, and Extracting tar Files B-5

Creating a tar Fi le B-6 Displaying the Co ntents of a tar File B-6 Extracting a ta r Fil e B-7

Displaying the Contents of a File B-7

78-17058-01

Working with Configuration Files B-8

Guidelines for Creating and Using Configuration Files B-8

Configuration File Types and Location B-9

Creating a Configuration File By Using a Text Editor B-9

Copying Configuration Files By Using TFTP B-10

Preparing to Download or Upload a Configuration File By Using TFTP B-10 Downloading the Configuration File By Using TFTP B-10 Uploading the Configuration File By Using TFTP B-11

Cisco ME 3400 EthernetAccess Switch SoftwareConfiguration Guide

xxix

Contents

Copying Configuration Files By Using FTP B-11

Preparing to Download or Upload a Configuration File By Using FTP B-12 Downloading a Configuration File By Using FTP B-13 Uploading a Configuration File By Using FTP B-14

Copying Configuration Files By Using RCP B-15

Preparing to Download or Upload a Configuration File By Using RCP B-15 Downloading a Configuration File By Using RCP B-16 Uploading a Configuration File By Using RCP B-17

Clearing Configuration Information B-18

Clearing the St a rtu p Co nfiguration Fi le B-18 Deleting a Stored Configuration File B-18

Working with So ft w a re Ima g es B-18

Image Location on the Switch B-19 tar File Format of Images on a Server or Cisco.com B-19 Copying Image Files By Using TFTP B-20

Preparing to Downl oad or Upload an Image File By Using TFTP B-21 Downloading an Image File By Using TFTP B-21 Uploading an Image File By Using TFTP B-23

Copying Image Files By Using FTP B-23

Preparing to Downl oad or Upload an Image File By Using FTP B-24 Downloading an Image File By Using FTP B-25 Uploading an Image File By Using FTP B-27

Copying Image Files By Using RCP B-28

Preparing to Downl oad or Upload an Image File By Using RCP B-28 Downloading an Image File By Using RCP B-29 Uploading an Image File By Using RCP B-31

APPENDIX

xxx

C Unsupported Commands in CiscoIOS Release 12.2(25)EX C-1

Access Control Lists C-1

Unsupported Privileged EXEC Commands C-1 Unsupported Global Configuration Commands C-1

ARP Commands C-1

Unsupported Global Configuration Commands C-1

Unsupported Interface Configuration Commands C-2 Unsupported Debug Commands C-2 HSRP C-2

Unsupported Global Configuration Commands C-2

Unsupported Interface Configuration Commands C-2

Cisco ME 3400 EthernetAccess Switch Software Configuration Guide

78-17058-01

+ 855 hidden pages

Cisco Systems ME3400G2CSA User Manual

CONTENTS