Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Contents
Table of Contents
Chapter 1: Quick Getting Started10
Before You Begin10
Rack Mounting Switch11
Power over Ethernet Considerations12
Configuring Switches14
Configuring Your Switch Using the Console Port16
USB Port17
Switch Features17
System Files93
Firmware Operations95
File Operations 99
File Directory106
DHCP Auto Configuration/Image Update107
Chapter 8: Administration: Stack Management116
Overview116
Types of Units in Stack117
Stack Topology118
Unit ID Assignment119
Master Selection Process120
Stack Changes120
Unit Failure in Stack121
Stack Ports123
Software Auto Synchronization in Stack126
Stack Management130
Chapter 9: Administration: Time Settings132
System Time Configuration133
SNTP Modes134
System Time 135
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.43
Contents
SNTP Unicast137
SNTP Multicast/Anycast140
SNTP Authentication 140
Time Range141
Recurring Time Range143
Chapter 10: Administration: Discovery144
Bonjour144
LLDP and CDP145
Discover - LLDP147
Discovery - CDP168
Chapter 11: Port Management177
Workflow177
Port Settings178
Error Recovery Settings181
Loopback Detection Settings182
Link Aggregation185
PoE193
Green Ethernet202
Chapter 12: Smartport210
Overview210
How the Smartport Feature Works215
Auto Smartport215
Error Handling219
Default Configuration219
Relationships with Other Features220
Common Smartport Tasks220
Configuring Smartport Using The Web-based Interface222
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.44
Contents
Built-in Smartport Macros227
Chapter 13: VLAN Management238
Regular VLANs240
GVRP Settings247
Voice VLAN248
Chapter 14: Spanning Tree261
STP Flavors261
STP Status and Global Settings262
STP Interface Settings264
RSTP Interface Settings266
Multiple Spanning Tree Overview268
MSTP Properties268
VLANs to a MSTP Instance 269
MSTP Instance Settings270
MSTP Interface Settings271
Chapter 15: Managing MAC Address Tables274
Static Addresses275
Dynamic Addresses276
Chapter 16: Multicast277
Multicast Forwarding Overview277
Properties283
MAC Group Address284
IP Multicast Group Address285
IPv4 Multicast Configuration287
IPv6 Multicast Configuration291
IGMP/MLD Snooping IP Multicast Group294
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.45
Overview425
Common Tasks426
SSH User Authentication427
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.47
Contents
SSH Server Authentication428
Chapter 25: Security: SSH Client430
Overview430
SSH User Authentication436
SSH Server Authentication437
Change User Password on the SSH Server439
Chapter 26: Security: IPv6 First Hop Security440
IPv6 First Hop Security Overview440
Router Advertisement Guard443
Neighbor Discovery Inspection444
DHCPv6 Guard444
Neighbor Binding Integrity445
IPv6 Source Guard447
Attack Protection448
Policies, Global Parameters and System Defaults450
Common Tasks452
Default Settings and Configuration454
Configuring IPv6 First Hop Security through Web GUI455
SNA Sessions543
SNA Graphics544
Top Right-Hand Menu546
Topology View547
Right-Hand Information Panel556
Operations570
Overlays575
Tags578
Search582
Dashboard584
Notifications586
Device Authorization Control (DAC)589
DAC Workflow589
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.49
Contents
Services595
Saving SNA Settings613
Technical Details614
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.410
Quick Getting Started
This section covers the following topics:
Before You Begin
Rack Mounting Switch
Power over Ethernet Considerations
Configuring98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212Switches
1
Before You Begin
Configuring Yo ur Switch Using the Console Port
Out-Of-Band Port
USB Port
Stacking the Switches
98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212Switch Features
Before you begin installing your device, ensure that the following items are available:
•RJ-45 Ethernet cables for connecting network devices. A category 6a and higher cable
is required for 10G ports; a category 5e and higher cable is required for all other ports.
•Console cable for using the console port to manage your switch.
•Tools for installing the hardware. The rack-mount kit packed with the switch contains
four rubber feet for desktop placement, and two brackets and twelve screws for rackmounting. If the supplied screws are lost, use replacement screws in the following size:
-Diameter of the screw head: 6.9 mm
-Length of face of screw head to base of screw: 5.9 mm
-Shaft diameter: 3.94 mm
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.49
1
400925
•Computer with Internet Explorer (version 9.0, 10.0, 11.0), or Firefox (version 36.0,
Rack Mounting Switch
You can mount the switches in any standard size, 19-inch (about 48 cm) wide rack. The switch
requires 1 rack unit (RU) of space, which is 1.75 inches (44.45 mm) high.
!
CAUTION For stability , load the rack from the bottom to the top, with the heaviest devices on the bottom.
A top-heavy rack is likely to be unstable and might tip over.
Quick Getting Started
Rack Mounting Switch
37.0 or higher), or Chrome (version 40,41,42 or higher) for using the web-based
interface or the console port to manage your switch.
To install the switch into a 19-inch standard chassis:
STEP 1 Place one of the supplied brackets on the side of the switch so that the four holes of the
brackets align to the screw holes, and then use the four supplied screws to secure it.
STEP 2 Repe at the prev ious step to attach the other bracket to the opposite side of the switch.
STEP 3 After the brackets are securely attached, the switch is now ready to be installed into a standard
19-inch rack.
.
10Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Quick Getting Started
Power over Ethernet Considerations
Power over Ethernet Considerations
WARNING The switch is to be connected only to PoE networks without routing to the outside plant.
Some devices support PoE while others do not. Models that support PoE have a P at the end of
the model number, such as: SF350-48HP.
PoE fields are described on all relevant pages although they are only supported on devices that
support PoE.
If your switch is one of the Power over Ethernet (PoE) models, consider the following power
requirement
Table 1Switches with Power Over Ethernet
1
SKU NameDescriptionPoE PD Chipset
Type
SF352-08PSF352-08P 8-Port
10/100 PoE
Managed Switch
SF352-08MPSF352-08MP 8-
Port 10/100 PoE
Managed Switch
SF350-24PSF350-24P 24-
Port 10/100 PoE
Managed Switch
SF350-24MPSF350-24MP 24-
Port 10/100 PoE
Managed Switch
SF350-48PSF350-48P 48-
Port 10/100 PoE
Managed Switch
2x PD70210 + 2x
PD70222 + 1?x
LX7309
2x PD70210 + 2x
PD70222 + 1?x
LX7309
N/A3*69208M
N/A3*69208M
N/A7* PD69208
PoE PSE Chipset
Type
1*69208M
(0x4B42)
1*69208M
(0x4B42)
(0x4B42) +
1*69204
(0x4B42) +
1*69204
(0x4AC2) /
7*69208M
(0x4B42) (as of
2.2.7)
PoE PD AF/
AT/60W
AF/AT/60WAT
AF/AT/60WAT
N/AAF/AT/60W
N/AAF/AT/60W
N/AAF/AT/60W
PoE PSE AF/AT/
60W
SF350-48PSF350-48P 48-
Port 10/100 PoE
Managed Switch
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.411
N/A7*69208M
(0x4B42)
N/AAF/AT/60W
1
Table 1Switches with Power Over Ethernet (Continued)
Quick Getting Started
Power over Ethernet Considerations
SKU NameDescriptionPoE PD Chipset
Type
SF350-48MPSF350-48MP 48-
Port 10/100 PoE
Managed Switch
SG350-08PDSG350-8PD 8-
Port 2.5G PoE
Managed Switch
SG350-10PSG350-10P 10-
Port Gigabit PoE
Managed Switch
SG355-10PSG355-10P 10-
Port Gigabit PoE
Managed Switch
SG350-10MPSG350-10MP 10-
Port Gigabit PoE
Managed Switch
N/A7* PD69208
NA1*69208M
2x PD70210 + 2x
PD70222 + 1?x
LX7309
2x PD70210 + 2x
PD70222 + 1?x
LX7309
2x PD70210 + 2x
PD70222 + 1?x
LX7309
PoE PSE Chipset
Type
(0x4AC2) /
7*69208M
(0x4B42)
(0x4B42)
1* PD69208
(0x4AC2) /
1*69208M
(0x4B42)
1* PD69208
(0x4AC2) /
1*69208M
(0x4B42)
1* PD69208
(0x4AC2) /
1*69208M
(0x4B42)
PoE PD AF/
AT/60W
N/AAF/AT/60W
NAAF/AT
AF/AT/60WAT
AF/AT/60WAT
AF/AT/60WAT
PoE PSE AF/AT/
60W
SG350-10SFPSG350-10SFP 10-
Port Gigabit SFP
Managed Switch
SG350-28PSG350-28P 28-
Port Gigabit PoE
Managed Switch
SG350-28MPSG350-28MP 28-
Port Gigabit PoE
Managed Switch
12Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
N/AN/AN/AN/A
N/A3x PD69208+
1*PD69204
(0x4AC2) /
3*69208M
(0x4B42) +
1*69204
N/A3x PD69208+
1*PD69204
(0x4AC2) /
3*69208M
(0x4B42) +
1*69204
N/AAF/AT/60W
N/AAF/AT/60W
Quick Getting Started
Power over Ethernet Considerations
Table 1Switches with Power Over Ethernet (Continued)
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.413
N/A3x PD69208+
1*PD69204
(0x4AC2) /
3*69208M
(0x4B42) +
1*69204
NA3*69208M
(0x4B42) +
1*69204
N/A7* PD69208
(0x4AC2) /
7*69208M
(0x4B42)
N/Aaf/at/60w
NAAF/AT/60W
N/Aaf/at/60w
1
Table 1Switches with Power Over Ethernet (Continued)
Quick Getting Started
Power over Ethernet Considerations
SKU NameDescriptionPoE PD Chipset
Type
SG350X-48MPSG350X-48MP
48-Port Gigabit
PoE Stackable
Managed Switch
SF550X-24PSF550X-24P 24-
Port 10/100 PoE
Stackable
Managed Switch
SF550X-24MPSF550X-24MP
24-Port 10/100
PoE Stackable
Managed Switch
SF550X-48PSF550X-48P 48-
Port 10/100 PoE
Stackable
Managed Switch
N/A7* PD69208
N/A4* PD69208
N/A4* PD69208
N/A7* PD69208
PoE PSE Chipset
Type
(0x4AC2) /
7*69208M
(0x4B42)
(0x4AC2) /
4*69208M
(0x4B42)
(0x4AC2) /
4*69208M
(0x4B42)
(0x4AC2) /
7*69208M
(0x4B42)
PoE PD AF/
AT/60W
N/Aaf/at/60w
N/Aaf/at/60w
N/Aaf/at/60w
N/Aaf/at/60w
PoE PSE AF/AT/
60W
SF550X-48MPSF550X-48MP
48-Port 10/100
PoE Stackable
Managed Switch
SG550X-24PSG550X-24P 24-
Port Gigabit PoE
Stackable
Managed Switch
SG550X-24MPSG550X-24MP
24-Port Gigabit
PoE Stackable
Managed Switch
SG550X-24MPPSG550X-24MPP
24-Port Gigabit
PoE Stackable
Managed Switch
N/A7* PD69208
(0x4AC2) /
7*69208M
(0x4B42)
N/A4* PD69208
(0x4AC2) /
4*69208M
(0x4B42)
N/A4* PD69208
(0x4AC2) /
4*69208M
(0x4B42)
N/A4* PD69208
(0x4AC2) /
4*69208M
(0x4B42)
N/Aaf/at/60w
N/Aaf/at/60w
N/Aaf/at/60w
N/Aaf/at/60w
14Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Quick Getting Started
!
Power over Ethernet Considerations
Table 1Switches with Power Over Ethernet (Continued)
1
SKU NameDescriptionPoE PD Chipset
Type
SG550X-48PSG550X-48P 48-
Port Gigabit PoE
Stackable
Managed Switch
SG550X-48MPSG550X-48MP
48-Port Gigabit
PoE Stackable
Managed Switch
NOTE 60-Watt PoE extends the IEEE Power of Ethernet Pl us standard to double the power per port to
60 W atts.
CAUTION Consider the following when connecting switches capable of supplying PoE:
The PoE models of the switches are PSE (Power Sourcing Equipment) that are capable of
supplying DC power to attaching PD (Powered Devices). These devices include VoIP phones,
IP cameras, and wireless access points. The PoE switches can detect and supply power to prestandard legacy PoE Powered Devices. Due to the support of legacy PoE, it is possible that a
PoE switch acting as a PSE may mistakenly detect and supply power to an attaching PSE,
including other PoE switches, as a legacy PD.
Even though PoE switches are PSE, and as such should be powered by AC, they could be
powered up as a legacy PD by another PSE due to false detection. When this happens, the PoE
switch may not operate properly and may not be ab le to properly supply power to its attaching
PDs.
To prevent false detection, you should disable PoE on the ports on the PoE switches that are
used to connect to PSEs. You should also first power up a PSE device before connecting it to a
PoE switch. When a device is being falsely detected as a PD, you should disconnect the device
from the PoE port and power recycle the device with AC power before reconnecting its PoE
ports.
N/A7* PD69208
N/A7* PD69208
PoE PSE Chipset
Type
(0x4AC2) /
7*69208M
(0x4B42)
(0x4AC2) /
7*69208M
(0x4B42)
PoE PD AF/
AT/60W
N/Aaf/at/60w
N/Aaf/at/60w
PoE PSE AF/AT/
60W
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.415
Quick Getting Started
1
Configuring98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212 Switches
Configuring98DX4203, 98DX4204, 98DX4210, 98DX4211, and
98DX4212 Switches
Before You Begin
The switch can be accessed and managed by two different methods; over your IP network
using the web-based interface, or by using the switch’s comman d-line interface through the
console port. Using the console port requires advanced user skills.
The following table shows the default settings used when configuring your switch for the first
time.
ParameterDefault Value
Usernamecisco
Passwordcisco
LAN IP192.168.1.254
Configuring Your Switch Using the We b-based Interface
T o access the switch with a web-based interface, you must know the IP address that the switch
is using. The switch uses the factory default IP address of 192.168.1.254, with a subnet of /24.
When the switch is using the factory default IP address, the System LED flashes continuously.
When the switch is using a DHCP server-assigned IP address or an administrator has
configured a static IP address, the System LED is a steady green (DHCP is enabled by
default).
If you are managing the switch through a network connection and the switch IP address is
changed, either by a DHCP server or manually, your access to the switch will be lost. You
must enter the new IP address that the switch is using into your browser to use the web-based
interface. If you are managing the switch through a console port connection, the link is
retained.
To configure the switch using the web-based interface:
STEP 1Power on the computer and your switch.
STEP 2 For Cisco 350-550 XG switches, connect the computer to the OOB port found on the front
panel. For all other switches, connect the computer to any network port.
16Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Quick Getting Started
!
Configuring98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212 Switches
STEP 3 Set up the IP configuration on your computer.
a. If the switch is using the default static IP address of 192.168.1.254/24, you must choose an
IP address for the co mputer in the range of 192.168.1.2 to 192.1 68.1.253 that is not already
in use.
b. If the IP addresses will be assigned b y DHCP, make sure that your DHCP server is running
and can be reached from the switch and the computer. You may need to disconnect and
reconnect the devices for them to discover their new IP addresses from the DHCP server.
NOTE Details on how to change the IP address on your computer depend upon the type
of architecture and operating system that you are using. Use your computers local Help
and Support functionality and search for “IP Addressing.”
STEP 4 Open a web browser window. If you are prompted to install an ActiveX plug-in when
connecting to the device, follow the prompts to accept the plug-in.
STEP 5 Enter the switch IP address in the address bar and press Enter. For example,
http://192.168.1.254.
1
STEP 6 When the login page appears, choose the language that you prefer to use in the web-based
interface and enter the username and password.
The default username is cisco. The default password is cisco. Usernames and passwords are
both case sensitive.
STEP 7 Click Log In.
If this is the first time that you have logged on with the default username and password, the
Change Password page opens. The rules for constructing a new password are displayed on the
page.
STEP 8 Enter a new password and confirm the password.
NOTE Password complexity is enabled by default. The password must comply with the
default complexity rules or it can be disabled temporarily by checking Disable next to
the Password Strength Enforcement option.
STEP 9 Click Apply.
CAUTION Make sure that any configuration changes made a re saved before exiting from the web-based
interface by clicking on the Save icon. Exiting before you save your configuration results in all
changes being lost.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.417
1
The Getting Started page opens. You are now ready to configure the switch. Refer to the
Administration Guide or see the help pages for further information.
Configuring Your Switch Using the Console Port
Browser Restrictions
If you are using IPv6 interfaces on your management station, use the IPv6 global address and
not the IPv6 link local address to access the device from your browser.
Configuring Your Switch Using the Console Port
To configure the switch using the console port:
Quick Getting Started
STEP 1Connect a computer to the switch console port using the supplied console cable.
STEP 2 Start a console port utility such as HyperTerminal on the computer.
STEP 3 Configure the utility with the following parameters:
•115200 bits per second
•8 data bits
•no parity
•1 stop bit
•no flow control
STEP 4 Enter a username and password. The default username is cisco, and the default password is
cisco. Usernames and passwords are both case sensitive.
If this is the first time that you have logged on with the default username and password, the
following message appears:
Please change your password from the default settings. Please change the
password for better protection of your network. Do you want to change the
password (Y/N) [Y]?
STEP 5 Enter Y, and set a new administrator password.
NOTE Password complexity is enabled by default. The password must comply with the
default complexity rules.
18Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Quick Getting Started
!
Out-Of-Band Port
CAUTION Make sure that any configuration changes made are saved before exiting.
Out-Of-Band Port
1
You are now ready to configure the switch. See the CLI Guide for your switch.
NOTE If you are not using DHCP on yo ur network, set the IP address t ype on the switch
to Static and change the static IP address and subnet mask to match your network
topology . Failure to do so may result in multiple switches using the same factory default
IP address of 192.168.1.2 54.
OOB is only supported on SG350XG/SX350X and SG550XG/SX550X devices.
The switch supports an Out-of-Band (OOB) port. This port is used for the management
network. The out-of-band and the in-band ports share the same IP routing table, therefore you
cannot use the same subnet on both in-band and out-of-band interfaces.
The OOB port is assigned an MAC address which is different from the base MAC
address and the addresses of the in-band ports. This MAC address is used as the
source MAC address in all frames (including IP frames) sent by the switch on the
OOB port.
The IP address assigned to this port cannot be assigned to the in-band ports at the same time.
In addition, the IP address assigned to the OOB port must not belong to any IP subnet
configured at the in-band interfaces of the devices.
By default, the OOB port is configured with the default IP address 192.168.1.254. This default
IP address is used when no other address was assigned (dynamically or statically). This sub net
is a reserved one and cannot be assigned on the in-band interfaces.
Bridging
Bridging between the OOB port and the in-band Layer 2 interfaces is not
supported. The OOB port cannot be a member of VLAN or LAG, and the bridge’s
protocols (for example, STP, GVRP, etc.) cannot be enabled on the OOB port.
Only untagged traffic is supported on the OOB port.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.419
1
Quick Getting Started
Out-Of-Band Port
Port Configuration
The following Ethernet configuration is supported for the OOB port:
•Speed (10/100/1000)
•Duplex
•Auto-negotiation
DHCP Client
DHCP client (IPv4 and IPv6) is enabled by default on the OOB por t and on the d efault VLAN.
Static route on OOB port
Static routes are supported on the OOB port.
IPv4 Address on OOB port
Only one IPv4 address can be defined on the OOB port.
The default static IP address is set only on the OOB.
IP Applications
All IP applications, such as telnet, SSH, except for the following ones are supported on the
OOB port:
•ARP Proxy
•Routing protocols
•Relay applications (DHCP, DHCPv6 and UDP)
QoS & ACL
QoS and ACL are not supported on the OOB port (so all TCAM-based features like DOS
Attack Prevention are also not supported).
Only Management ACLs are supported.
20Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Quick Getting Started
USB Port
USB Port
1
Stack Support
The OOB port name is always mapped to the physical OOB port of master unit. The physical
OOB ports of slaves are not functional and will not establish a link when connected to a
neighbor device or PC.
The USB port can be used for connecting external storage (disk-on-key) devices. It can hold
configuration, SYSLOG and image files. In a stack, only the master’s USB port is active. The
USB port fully supports the FAT32 file system, and provides partial support (read only) for the
NTFS file system.
Both relative path or fully qualified paths can be used.
The system supports the following user actions on the USB port through the GUI:
•Display the USB contents
•Copy files to/from USB (the same as with TFTP)
•Delete, rename and display the contents of USB files
Stacking the Switches
By default, the ports on a switch function as regular Ethernet ports, except if you configure
them to do stacking. You cannot mix the stack speeds between the switches or ports.
See the front panel figures in 98DX4203, 98DX4204, 98DX4210, 98DX4211, and
98DX4212Switch Features to help with the stack port descriptions and supported modules.
WARNING Stack ports must be either configured with the sa m e port sp e ed or have th e sa m e sp ee d
capability on the module or cable plug in. If the port speed is configured as auto, then the
module plugged into these two ports will need to have the same speed capability, otherwise the
switch will not be able to form as a stack with multiple units.
A stack can have up to four 350X devices or eight 550X devices in it. Any 10G port of the
switch can be used for stacking. The switch can only be stacked without Mesh topology.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.421
Quick Getting Started
1
The switches in the same stack are connected together through their stack ports. Depending on
the type of stack ports and the desired speed, you may need Cat6a Ethernet cables or Cisco
approved modules or cables for the switches.
98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212Switch Features
98DX4203, 98DX4204, 98DX4210, 98DX4211, and 98DX4212Switch
Features
This section describes the exterior of the switch to help familiarize you with your switch.