Catalyst 2950 and Catalyst 2955 Switch
Software Configuration Guide
Cisco IOS Release 12.1(22)EA5
July 2005
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Customer Order Number: DOC-7811380=
Text Part Number: 78-11380-12
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn,
and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the
Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet
Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise,
the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX,
Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient,
and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0502R)
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Cisco Technical Support & Documentation Websitexxxii
Submitting a Service Requestxxxiii
Definitions of Service Request Severityxxxiii
Obtaining Additional Publications and Informationxxxiii
1Overview1-1
Features1-1
Ease of Use and Ease of Deployment1-2
Performance1-3
Manageability1-4
Redundancy1-5
VLAN Support1-6
Security1-6
Quality of Service and Class of Service1-7
Monitoring1-8
LRE Features (available only on Catalyst 2950 LRE switches)1-8
Management Options1-9
Management Interface Options1-9
Advantages of Using Network Assistant and Clustering Switches1-10
78-11380-12
Network Configuration Examples1-11
Design Concepts for Using the Switch1-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
iii
Contents
Small to Medium-Sized Network Configuration1-15
Collapsed Backbone and Switch Cluster Configuration1-16
Hotel Network Configuration1-17
Service-Provider Central-Office Configuration1-20
Large Campus Configuration1-21
Multidwelling Network Using Catalyst 2950 Switches1-22
Long-Distance, High-Bandwidth Transport Configuration1-24
Where to Go Next1-24
CHAPTER
2Using the Command-Line Interface2-1
Cisco IOS Command Modes2-1
Getting Help2-3
Abbreviating Commands2-4
Using no and default Forms of Commands2-4
Understanding CLI Messages2-5
Using Command History2-5
Changing the Command History Buffer Size2-5
Recalling Commands2-6
Disabling the Command History Feature2-6
Using Editing Features2-6
Enabling and Disabling Editing Features2-6
Editing Commands through Keystrokes2-7
Editing Command Lines that Wrap2-8
Searching and Filtering Output of show and more Commands2-9
Accessing the CLI2-9
CHAPTER
iv
3Configuring Catalyst 2955 Switch Alarms3-1
Understanding Catalyst 2955 Switch Alarms3-1
Global Status Monitoring Alarms3-2
FCS Error Hysteresis Threshold3-2
Port Status Monitoring Alarms3-3
Triggering Alarm Options3-3
Configuring Catalyst 2955 Switch Alarms3-4
Default Catalyst 2955 Switch Alarm Configuration3-4
Configuring the Power Supply Alarm3-5
Setting the Power Mode3-5
Setting the Power Supply Alarm Options3-5
Configuring the Switch Temperature Alarms3-6
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Setting a Secondary Temperature Threshold for the Switch3-6
Associating the Temperature Alarms to a Relay3-7
Configuring the FCS Bit Error Rate Alarm3-7
Setting the FCS Error Threshold3-8
Setting the FCS Error Hysteresis Threshold3-8
Configuring Alarm Profiles3-9
Creating or Modifying an Alarm Profile3-9
Attaching an Alarm Profile to a Specific Port3-10
Enabling SNMP Traps3-11
Displaying Catalyst 2955 Switch Alarms Status3-11
Contents
CHAPTER
4Assigning the Switch IP Address and Default Gateway4-1
DHCP Server Configuration Guidelines4-5
Configuring the TFTP Server4-6
Configuring the DNS4-6
Configuring the Relay Device4-7
Obtaining Configuration Files4-8
Example Configuration4-9
Manually Assigning IP Information4-10
Checking and Saving the Running Configuration4-11
Modifying the Startup Configuration4-11
Default Boot Configuration4-12
Automatically Downloading a Configuration File4-12
Specifying the Filename to Read and Write the System Configuration4-12
Booting Manually4-13
Booting a Specific Software Image4-13
Controlling Environment Variables4-14
78-11380-12
Scheduling a Reload of the Software Image4-16
Configuring a Scheduled Reload4-16
Displaying Scheduled Reload Information4-17
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
v
Contents
CHAPTER
5Configuring IE2100 CNS Agents5-1
Understanding IE2100 Series Configuration Registrar Software5-1
CNS Configuration Service5-2
CNS Event Service5-3
NameSpace Mapper5-3
What You Should Know About ConfigID, DeviceID, and Host Name5-3
ConfigID5-3
DeviceID5-4
Host Name and DeviceID5-4
Using Host Name, DeviceID, and ConfigID5-4
Enabling Automated CNS Configuration5-6
Enabling the CNS Event Agent5-8
Enabling the CNS Configuration Agent5-9
Enabling an Initial Configuration5-9
Enabling a Partial Configuration5-12
CHAPTER
CHAPTER
Displaying CNS Configuration5-12
6Clustering Switches6-1
Understanding Switch Clusters6-1
Clustering Overview6-1
Cluster Command Switch Characteristics6-2
Standby Command Switch Characteristics6-2
Candidate Switch and Member Switch Characteristics6-3
Using the CLI to Manage Switch Clusters6-4
Catalyst 1900 and Catalyst 2820 CLI Considerations6-4
Using SNMP to Manage Switch Clusters6-4
7Administering the Switch7-1
Managing the System Time and Date7-1
Understanding the System Clock 7-1
Understanding Network Time Protocol7-2
Configuring NTP7-3
Default NTP Configuration7-4
vi
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Configuring NTP Authentication7-4
Configuring NTP Associations7-5
Configuring NTP Broadcast Service7-6
Configuring NTP Access Restrictions7-8
Configuring the Source IP Address for NTP Packets7-10
Displaying the NTP Configuration7-11
Configuring Time and Date Manually7-11
Setting the System Clock7-11
Displaying the Time and Date Configuration7-12
Configuring the Time Zone 7-12
Configuring Summer Time (Daylight Saving Time)7-13
Configuring a System Name and Prompt7-14
Default System Name and Prompt Configuration7-15
Configuring a System Name7-15
Understanding DNS7-15
Default DNS Configuration7-16
Setting Up DNS7-16
Displaying the DNS Configuration7-17
Contents
CHAPTER
Creating a Banner7-17
Default Banner Configuration7-17
Configuring a Message-of-the-Day Login Banner7-18
Configuring a Login Banner7-19
Managing the MAC Address Table7-19
Building the Address Table7-20
MAC Addresses and VLANs7-20
Default MAC Address Table Configuration7-21
Changing the Address Aging Time7-21
Removing Dynamic Address Entries7-21
Configuring MAC Address Notification Traps7-22
Adding and Removing Static Address Entries7-24
Configuring Unicast MAC Address Filtering7-25
Displaying Address Table Entries7-26
Managing the ARP Table7-26
8Configuring Switch-Based Authentication8-1
Preventing Unauthorized Access to Your Switch8-1
78-11380-12
Protecting Access to Privileged EXEC Commands8-2
Default Password and Privilege Level Configuration8-2
Setting or Changing a Static Enable Password8-3
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
vii
Contents
Protecting Enable and Enable Secret Passwords with Encryption8-4
Disabling Password Recovery8-5
Setting a Telnet Password for a Terminal Line8-6
Configuring Username and Password Pairs8-7
Configuring Multiple Privilege Levels8-8
Setting the Privilege Level for a Command8-8
Changing the Default Privilege Level for Lines8-9
Logging into and Exiting a Privilege Level8-10
Default TACACS+ Configuration8-13
Identifying the TACACS+ Server Host and Setting the Authentication Key8-13
Configuring TACACS+ Login Authentication8-14
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services8-16
Starting TACACS+ Accounting8-17
Default RADIUS Configuration8-20
Identifying the RADIUS Server Host 8-20
Configuring RADIUS Login Authentication8-23
Defining AAA Server Groups8-25
Configuring RADIUS Authorization for User Privileged Access and Network Services8-27
Starting RADIUS Accounting8-28
Configuring Settings for All RADIUS Servers8-29
Configuring the Switch to Use Vendor-Specific RADIUS Attributes8-29
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication8-30
Displaying the RADIUS Configuration8-31
Configuring the Switch for Local Authentication and Authorization8-32
Configuring the Switch for Secure Shell8-33
Understanding SSH8-33
SSH Servers, Integrated Clients, and Supported Versions8-33
Limitations8-34
Configuring SSH8-34
Configuration Guidelines8-34
viii
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Cryptographic Software Image Guidelines8-35
Setting Up the Switch to Run SSH8-35
Configuring the SSH Server8-36
Displaying the SSH Configuration and Status8-37
Configuring the Switch for Secure Copy Protocol8-37
Device Roles9-2
Authentication Initiation and Message Exchange9-3
Ports in Authorized and Unauthorized States9-4
IEEE 802.1x Accounting9-5
IEEE 802.1x Accounting Attribute-Value Pairs9-5
IEEE 802.1x Host Mode9-6
Using IEEE 802.1x with Port Security9-7
Using IEEE 802.1x with Voice VLAN Ports9-8
Using IEEE 802.1x with VLAN Assignment9-8
Using IEEE 802.1x with Guest VLAN9-9
Using IEEE 802.1x with Wake-on-LAN9-10
Unidirectional State9-10
Bidirectional State9-10
Configuring IEEE 802.1x Authentication9-11
Default IEEE 802.1x Configuration9-11
IEEE 802.1x Configuration Guidelines9-12
Upgrading from a Previous Software Release9-13
Enabling IEEE 802.1x Authentication9-14
Configuring the Switch-to-RADIUS-Server Communication9-15
Configuring IEEE 802.1x Authentication Using a RADIUS Server9-16
Enabling Periodic Re-Authentication9-17
Manually Re-Authenticating a Client Connected to a Port9-18
Changing the Quiet Period9-18
Changing the Switch-to-Client Retransmission Time9-19
Setting the Switch-to-Client Frame-Retransmission Number9-19
Configuring the Host Mode9-20
Configuring a Guest VLAN9-21
Resetting the IEEE 802.1x Configuration to the Default Values9-22
Configuring IEEE 802.1x Authentication9-23
Configuring IEEE 802.1x Accounting9-24
78-11380-12
Displaying IEEE 802.1x Statistics and Status9-25
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Procedures for Configuring Interfaces10-5
Configuring a Range of Interfaces10-6
Configuring and Using Interface-Range Macros10-7
Configuring Ethernet Interfaces10-9
Default Ethernet Interface Configuration10-9
Configuring Interface Speed and Duplex Mode10-10
Configuration Guidelines10-11
Setting the Interface Speed and Duplex Parameters on a Non-LRE Switch Port10-12
Setting the Interface Speed and Duplex Parameters on an LRE Switch Port10-13
Configuring Media Types for Gigabit Ethernet Interfaces on LRE Switches10-13
Configuring IEEE 802.3z Flow Control on Gigabit Ethernet Ports10-13
Adding a Description for an Interface10-15
Configuring Loopback Detection10-15
CHAPTER
Monitoring and Maintaining the Interfaces10-16
Monitoring Interface and Controller Status10-16
Clearing and Resetting Interfaces and Counters10-17
Shutting Down and Restarting the Interface10-17
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
x
78-11380-12
Contents
CHAPTER
12Configuring LRE12-1
Understanding LRE Features12-1
Ports on the Catalyst 2950 LRE Switches12-1
LRE Links and LRE Profiles12-2
LRE Profiles12-2
LRE Sequences12-5
CPE Ethernet Links12-6
LRE Link Monitor12-7
LRE Message Logging Process12-8
Configuring LRE Ports12-8
Default LRE Configuration12-9
Environmental Guidelines for LRE Links12-9
Guidelines for Using LRE Profiles12-10
CPE Ethernet Link Guidelines12-11
Guidelines for Configuring Cisco 575 LRE CPEs and 576 LRE 997 CPEs12-11
Guidelines for Configuring Cisco 585 LRE CPEs12-12
Assigning a Global Profile to All LRE Ports12-12
Assigning a Profile to a Specific LRE Port12-13
Assigning a Global Sequence to All LRE Ports12-13
Assigning a Sequence to a Specific LRE Port12-14
Using Rate Selection to Automatically Assign Profiles12-14
Precedence12-15
Profile Locking12-15
Link Qualification and SNR Margins12-16
Configuring LRE Link Persistence12-19
Configuring LRE Link Monitor12-20
Configuring LRE Interleave12-20
Configuring Upstream Power Back-Off12-21
Configuring CPE Toggle12-22
Configuring Syslog Export12-23
78-11380-12
Upgrading LRE Switch Firmware12-24
Configuring for an LRE Upgrade12-24
Performing an LRE Upgrade12-25
Global Configuration of LRE Upgrades12-25
Controller Configuration of LRE Upgrades12-25
LRE Upgrade Details12-26
LRE Upgrade Example12-27
Displaying LRE Status12-27
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xi
Contents
CHAPTER
13Configuring STP13-1
Understanding Spanning-Tree Features13-1
STP Overview13-2
Spanning-Tree Topology and BPDUs13-2
Bridge ID, Switch Priority, and Extended System ID13-3
Spanning-Tree Interface States13-4
Disabled State13-7
How a Switch or Port Becomes the Root Switch or Root Port13-7
Spanning Tree and Redundant Connectivity13-8
Spanning-Tree Address Management13-8
Accelerated Aging to Retain Connectivity13-8
Spanning-Tree Modes and Protocols13-9
Supported Spanning-Tree Instances13-9
Spanning-Tree Interoperability and Backward Compatibility13-10
STP and IEEE 802.1Q Trunks13-10
Configuring Spanning-Tree Features13-11
Default Spanning-Tree Configuration13-11
Spanning-Tree Configuration Guidelines13-12
Changing the Spanning-Tree Mode13-13
Disabling Spanning Tree13-14
Configuring the Root Switch13-14
Configuring a Secondary Root Switch13-16
Configuring the Port Priority13-17
Configuring the Path Cost13-18
Configuring the Switch Priority of a VLAN13-20
Configuring Spanning-Tree Timers13-20
Configuring the Hello Time13-21
Configuring the Forwarding-Delay Time for a VLAN13-22
Configuring the Maximum-Aging Time for a VLAN13-22
Configuring Spanning Tree for Use in a Cascaded Stack13-23
Displaying the Spanning-Tree Status13-24
xii
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Contents
CHAPTER
14Configuring MSTP14-1
Understanding MSTP14-2
Multiple Spanning-Tree Regions14-2
IST, CIST, and CST14-3
Operations Within an MST Region14-3
Operations Between MST Regions14-4
Hop Count14-5
Boundary Ports14-5
Interoperability with IEEE 802.1D STP14-5
Understanding RSTP14-6
Port Roles and the Active Topology14-6
Rapid Convergence14-7
Synchronization of Port Roles14-8
Bridge Protocol Data Unit Format and Processing14-9
Default MSTP Configuration14-12
MSTP Configuration Guidelines14-12
Specifying the MST Region Configuration and Enabling MSTP14-13
Configuring the Root Switch14-14
Configuring a Secondary Root Switch14-16
Configuring the Port Priority14-17
Configuring the Path Cost14-18
Configuring the Switch Priority14-19
Configuring the Hello Time14-19
Configuring the Forwarding-Delay Time14-20
Configuring the Maximum-Aging Time14-21
Configuring the Maximum-Hop Count14-21
Specifying the Link Type to Ensure Rapid Transitions14-22
Restarting the Protocol Migration Process14-22
CHAPTER
78-11380-12
Displaying the MST Configuration and Status14-23
15Configuring Optional Spanning-Tree Features15-1
Understanding Optional Spanning-Tree Features15-1
Understanding Port Fast15-2
Understanding BPDU Guard15-2
Understanding BPDU Filtering15-3
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
VLAN Configuration in VLAN Configuration Mode16-6
Saving VLAN Configuration16-7
Default Ethernet VLAN Configuration16-7
Creating or Modifying an Ethernet VLAN16-8
Deleting a VLAN16-10
Assigning Static-Access Ports to a VLAN16-11
xiv
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Default IGMP Snooping Configuration20-8
Enabling or Disabling IGMP Snooping20-8
Setting the Snooping Method20-9
Configuring a Multicast Router Port20-10
Configuring a Host Statically to Join a Group20-10
Enabling IGMP Immediate-Leave Processing20-11
Configuring the IGMP Leave Timer20-12
Disabling IGMP Report Suppression20-12
Disabling IP Multicast-Source-Only Learning20-13
Configuring the Aging Time20-14
Configuring the IGMP Snooping Querier20-14
78-11380-12
Displaying IGMP Snooping Information20-15
Understanding Multicast VLAN Registration20-16
Using MVR in a Multicast Television Application20-17
Configuring MVR20-19
Default MVR Configuration20-19
MVR Configuration Guidelines and Limitations20-19
Configuring MVR Global Parameters20-20
Configuring MVR Interfaces20-21
Displaying MVR Information20-22
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xvii
Contents
Configuring IGMP Filtering and Throttling20-23
Default IGMP Filtering and Throttling Configuration20-23
Configuring IGMP Profiles20-24
Applying IGMP Profiles20-25
Setting the Maximum Number of IGMP Groups20-26
Configuring the IGMP Throttling Action20-26
Displaying IGMP Filtering and Throttling Configuration20-28
CHAPTER
21Configuring Port-Based Traffic Control21-1
Configuring Storm Control21-1
Understanding Storm Control21-1
Default Storm Control Configuration21-2
Configuring Storm Control and Threshold Levels21-2
Configuring Protected Ports21-4
Configuring Port Blocking21-5
Blocking Flooded Traffic on an Interface21-5
Resuming Normal Forwarding on a Port21-6
Configuring Port Security21-6
Understanding Port Security21-6
Secure MAC Addresses21-6
Security Violations21-7
Default Port Security Configuration21-8
Port Security Configuration Guidelines21-8
Enabling and Configuring Port Security21-9
Enabling and Configuring Port Security Aging21-11
Displaying Port-Based Traffic Control Settings21-13
CHAPTER
xviii
22Configuring UDLD22-1
Understanding UDLD22-1
Modes of Operation22-1
Methods to Detect Unidirectional Links22-2
Configuring UDLD22-4
Default UDLD Configuration22-4
Configuration Guidelines22-4
Enabling UDLD Globally22-5
Enabling UDLD on an Interface22-6
Resetting an Interface Shut Down by UDLD22-6
Displaying UDLD Status22-7
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Contents
CHAPTER
CHAPTER
23Configuring CDP23-1
Understanding CDP23-1
Configuring CDP23-2
Default CDP Configuration23-2
Configuring the CDP Characteristics23-2
Disabling and Enabling CDP23-3
Disabling and Enabling CDP on an Interface23-4
SPAN Traffic24-5
SPAN and RSPAN Interaction with Other Features24-6
SPAN and RSPAN Session Limits24-7
Default SPAN and RSPAN Configuration24-7
CHAPTER
Configuring SPAN24-7
SPAN Configuration Guidelines24-7
Creating a SPAN Session and Specifying Ports to Monitor24-8
Creating a SPAN Session and Enabling Ingress Traffic24-9
Removing Ports from a SPAN Session24-11
Configuring RSPAN24-12
RSPAN Configuration Guidelines24-12
Configuring a VLAN as an RSPAN VLAN24-13
Creating an RSPAN Source Session24-14
Creating an RSPAN Destination Session24-15
Removing Ports from an RSPAN Session24-16
Displaying SPAN and RSPAN Status24-17
25Configuring RMON25-1
Understanding RMON25-1
Configuring RMON25-2
Default RMON Configuration25-3
78-11380-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xix
Contents
Configuring RMON Alarms and Events25-3
Configuring RMON Collection on an Interface25-5
Displaying RMON Status25-6
CHAPTER
CHAPTER
26Configuring System Message Logging26-1
Understanding System Message Logging26-1
Configuring System Message Logging26-2
System Log Message Format26-2
Default System Message Logging Configuration26-3
Disabling and Enabling Message Logging26-4
Setting the Message Display Destination Device26-4
Synchronizing Log Messages26-6
Enabling and Disabling Timestamps on Log Messages26-7
Enabling and Disabling Sequence Numbers in Log Messages26-8
Defining the Message Severity Level26-8
Limiting Syslog Messages Sent to the History Table and to SNMP26-9
Configuring UNIX Syslog Servers26-10
Logging Messages to a UNIX Syslog Daemon26-11
Configuring the UNIX System Logging Facility26-11
Displaying the Logging Configuration26-12
27Configuring SNMP27-1
xx
Understanding SNMP27-1
SNMP Versions27-2
SNMP Manager Functions27-3
SNMP Agent Functions27-4
SNMP Community Strings27-4
Using SNMP to Access MIB Variables 27-4
SNMP Notifications27-5
Configuring SNMP27-6
Default SNMP Configuration27-6
SNMP Configuration Guidelines27-6
Disabling the SNMP Agent27-7
Configuring Community Strings27-8
Configuring SNMP Groups and Users27-9
Configuring SNMP Notifications27-11
Setting the Agent Contact and Location Information27-14
Limiting TFTP Servers Used Through SNMP27-14
SNMP Examples27-15
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Displaying SNMP Status27-16
Contents
CHAPTER
28Configuring Network Security with ACLs28-1
Understanding ACLs28-2
Handling Fragmented and Unfragmented Traffic28-3
Understanding Access Control Parameters28-4
Guidelines for Applying ACLs to Physical Interfaces28-6
Configuring ACLs28-6
Unsupported Features28-7
Creating Standard and Extended IP ACLs28-7
ACL Numbers28-8
Creating a Numbered Standard ACL28-8
Creating a Numbered Extended ACL28-10
Creating Named Standard and Extended ACLs28-13
Applying Time Ranges to ACLs28-14
Including Comments About Entries in ACLs28-16
Creating Named MAC Extended ACLs28-17
Creating MAC Access Groups28-18
Applying ACLs to Terminal Lines or Physical Interfaces28-18
Applying ACLs to a Terminal Line28-19
Applying ACLs to a Physical Interface28-20
Numbered ACL Examples28-24
Extended ACL Examples28-24
Named ACL Example28-24
Commented IP ACL Entry Examples28-25
29Configuring QoS29-1
Understanding QoS29-2
Basic QoS Model29-4
Classification29-5
Classification Based on QoS ACLs29-5
Classification Based on Class Maps and Policy Maps29-6
Policing and Marking29-7
Mapping Tables29-8
Queueing and Scheduling29-8
78-11380-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xxi
Contents
How Class of Service Works29-8
Port Priority29-8
Port Scheduling29-9
Egress CoS Queues29-9
Configuring Auto-QoS29-10
Generated Auto-QoS Configuration29-10
Effects of Auto-QoS on the Configuration29-12
Configuration Guidelines29-13
Upgrading from a Previous Software Release29-13
Enabling Auto-QoS for VoIP29-14
Displaying Auto-QoS Information29-15
Auto-QoS Configuration Example29-15
Configuring Standard QoS29-18
Default Standard QoS Configuration29-18
Configuration Guidelines29-19
Configuring Classification Using Port Trust States29-20
Configuring the Trust State on Ports within the QoS Domain29-20
Configuring the CoS Value for an Interface29-22
Configuring Trusted Boundary29-23
Enabling Pass-Through Mode29-25
Configuring a QoS Policy29-26
Classifying Traffic by Using ACLs29-27
Classifying Traffic by Using Class Maps29-30
Classifying, Policing, and Marking Traffic by Using Policy Maps 29-31
Configuring CoS Maps29-34
Configuring the CoS-to-DSCP Map29-35
Configuring the DSCP-to-CoS Map29-36
Configuring the Egress Queues29-37
Configuring CoS Priority Queues29-37
Configuring WRR Priority29-38
Enabling the Expedite Queue and Configuring WRR Priority29-38
CHAPTER
xxii
Displaying Standard QoS Information29-39
Standard QoS Configuration Examples29-39
QoS Configuration for the Existing Wiring Closet29-40
QoS Configuration for the Intelligent Wiring Closet29-41
30Configuring EtherChannels30-1
Understanding EtherChannels30-1
Understanding Port-Channel Interfaces30-2
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Understanding the Port Aggregation Protocol and Link Aggregation Protocol30-3
PAgP and LACP Modes30-4
Physical Learners and Aggregate-Port Learners30-5
PAgP and LACP Interaction with Other Features30-6
Understanding Load Balancing and Forwarding Methods30-6
Configuring EtherChannels30-7
Default EtherChannel Configuration30-8
EtherChannel Configuration Guidelines30-8
Configuring Layer 2 EtherChannels30-9
Configuring EtherChannel Load Balancing30-11
Configuring the PAgP Learn Method and Priority30-12
Configuring the LACP Port Priority30-12
Configuring Hot Standby Ports30-13
Configuring the LACP System Priority30-13
Displaying EtherChannel, PAgP, and LACP Status30-14
Contents
CHAPTER
31Troubleshooting31-1
Using Recovery Procedures31-1
Recovering from a Software Failure31-2
Recovering from Lost or Forgotten Passwords on Non-LRE Catalyst 2950 Switches31-2
Recovering from Lost or Forgotten Passwords on Catalyst 2950 LRE Switches31-4
Password Recovery with Password Recovery Enabled31-5
Procedure with Password Recovery Disabled31-6
Recovering from Lost or Forgotten Passwords on Catalyst 2955 Switches31-8
Recovering from a Command Switch Failure31-10
Replacing a Failed Command Switch with a Cluster Member31-10
Replacing a Failed Command Switch with Another Switch31-12
Recovering from Lost Member Connectivity31-13
Preventing Autonegotiation Mismatches31-14
GBIC and SFP Module Security and Identification31-14
Diagnosing Connectivity Problems31-14
Using Ping31-15
Understanding Ping 31-15
Executing Ping31-15
Using Layer 2 Traceroute31-16
Understanding Layer 2 Traceroute31-16
Usage Guidelines31-16
Displaying the Physical Path31-17
78-11380-12
Diagnosing LRE Connection Problems31-18
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xxiii
Contents
Using Debug Commands31-19
Enabling Debugging on a Specific Feature31-20
Enabling All-System Diagnostics31-20
Redirecting Debug and Error Message Output31-20
Using the debug auto qos Command31-21
Using the show controllers Commands31-22
Using the crashinfo File31-22
APPENDIX
APPENDIX
ASupported MIBsA-1
MIB ListA-1
Using FTP to Access the MIB FilesA-3
BWorking with the Cisco IOS File System, Configuration Files, and Software ImagesB-1
Working with the Flash File SystemB-1
Displaying Available File SystemsB-2
Setting the Default File SystemB-3
Displaying Information about Files on a File SystemB-3
Changing Directories and Displaying the Working DirectoryB-4
Creating and Removing DirectoriesB-4
Copying FilesB-5
Deleting FilesB-5
Creating, Displaying, and Extracting tar FilesB-6
Creating a tar FileB-6
Displaying the Contents of a tar FileB-7
Extracting a tar FileB-7
Displaying the Contents of a FileB-8
xxiv
Working with Configuration FilesB-8
Guidelines for Creating and Using Configuration FilesB-9
Configuration File Types and LocationB-10
Creating a Configuration File By Using a Text EditorB-10
Copying Configuration Files By Using TFTPB-10
Preparing to Download or Upload a Configuration File By Using TFTPB-10
Downloading the Configuration File By Using TFTPB-11
Uploading the Configuration File By Using TFTPB-12
Copying Configuration Files By Using FTPB-12
Preparing to Download or Upload a Configuration File By Using FTPB-13
Downloading a Configuration File By Using FTPB-13
Uploading a Configuration File By Using FTPB-14
Copying Configuration Files By Using RCPB-15
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Preparing to Download or Upload a Configuration File By Using RCPB-16
Downloading a Configuration File By Using RCPB-17
Uploading a Configuration File By Using RCPB-18
Clearing Configuration InformationB-19
Clearing the Startup Configuration FileB-19
Deleting a Stored Configuration FileB-19
Working with Software ImagesB-19
Image Location on the SwitchB-20
tar File Format of Images on a Server or Cisco.comB-20
Copying Image Files By Using TFTPB-21
Preparing to Download or Upload an Image File By Using TFTPB-22
Downloading an Image File By Using TFTPB-22
Uploading an Image File By Using TFTPB-24
Copying Image Files By Using FTPB-24
Preparing to Download or Upload an Image File By Using FTPB-25
Downloading an Image File By Using FTPB-26
Uploading an Image File By Using FTPB-27
Copying Image Files By Using RCPB-28
Preparing to Download or Upload an Image File By Using RCPB-29
Downloading an Image File By Using RCPB-30
Uploading an Image File By Using RCPB-32
Contents
I
NDEX
78-11380-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xxv
Contents
xxvi
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Audience
Purpose
Preface
This guide is for the networking professional managing the Catalyst 2950 and 2955 switches, hereafter
referred to as the switches. Before using this guide, you should have experience working with the Cisco
IOS and be familiar with the concepts and terminology of Ethernet and local area networking.
This guide provides the information you need to configure software features on your switch. The
Catalyst 2950 switch is supported by either the standard software image (SI) or the enhanced software image
(EI). The Catalyst 2955 and Catalyst 2950 Long-Reach Ethernet (LRE) switches are supported only by the EI.
The EI provides a richer set of features, including access control lists (ACLs), enhanced quality of service
(QoS) features, extended-range VLANs, Remote Switched Port Analyzer (RSPAN), and unicast MAC
address filtering. The cryptographic EI provides support for the Secure Shell Protocol (SSP). For a list of
switches that support the SI and the EI, see Tabl e 1-1 in Chapter 1, “Overview.”
The Catalyst 2955 switch also supports an additional set of features that are described in Chapter 3,
“Configuring Catalyst 2955 Switch Alarms.” The switch has facilities to process alarms related to the
temperature, power supply conditions, and status of the Ethernet ports.
Use this guide with other documents for information about these topics:
• Requirements—This guide assumes that you have met the hardware and software requirements and
cluster compatibility requirements described in the release notes.
• Start-up information—This guide assumes that you have assigned switch IP information and
passwords by using the browser setup program described in the switch hardware installation guide.
• Embedded device manager and Network Assistant graphical user interfaces (GUIs)—This guide
does not provide detailed information on the GUIs. However, the concepts in this guide are
applicable to the GUI user. For information about the device manager, see the switch online help.
For information about Network Assistant, see the Getting Started with Cisco Network Assistant,
available on Cisco.com.
• Cluster configuration—For information about planning for, creating, and maintaining switch
clusters, see the Getting Started with Cisco Network Assistant, available on Cisco.com. For
information about the clustering-related command-line interface (CLI) commands, see the
command reference for this release.
78-11380-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xxvii
Conventions
This guide provides procedures for using the commands that have been created or changed for use with
the switch. It does not provide detailed information about these commands. For detailed information
about these commands, see the command reference for this release.
This guide does not repeat the concepts and CLI procedures provided in the standard Cisco IOS
Release 12.1 documentation. For information about the standard Cisco IOS Release 12.1 commands, see
the Cisco IOS documentation set available from the Cisco.com home page at Service and Support > Technical Documents. On the Cisco Product Documentation home page, select Release 12.1 from the Cisco
IOS Software drop-down list.
This guide does not describe system messages you might encounter or how to install your switch. For
this information, see the system message guide for this release and to the hardware installation guide.
For documentation updates, see the release notes for this release.
Conventions
Preface
• CLI command information—This guide provides an overview for using the CLI. For complete
syntax and usage information about the commands that have been specifically created or changed
for the switches, see the command reference for this release.
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
• Commands and keywords are in boldface text.
• Arguments for which you supply values are in italic.
• Square brackets ([ ]) mean optional elements.
• Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
• Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.
Interactive examples use these conventions:
• Terminal sessions and system displays are in screen font.
• Information you enter is in boldface screen font.
• Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and timesavers use these conventions and symbols:
NoteMeans reader take note. Notes contain helpful suggestions or references to materials not contained in
this manual.
CautionMeans reader be careful. In this situation, you might do something that could result equipment damage
or loss of data.
xxviii
TimesaverMeans the following will help you solve a problem. The tips information might not be troubleshooting
or even an action, but could be useful information.
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-12
Preface
Related Publications
These documents provide complete information about the switch and are available from this Cisco.com
site:
You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and
from the telephone numbers listed in the “Obtaining Documentation” section on page Boilerplate 1.
• Release Notes for the Catalyst 2950 and Catalyst 2955 Switches (not orderable but available on
Cisco.com)
NoteSwitch requirements and procedures for initial configurations and software upgrades tend to change and
therefore appear only in the release notes. Before installing, configuring, or upgrading the switch, see
the release notes on Cisco.com for the latest information.
For information about the switch, see these documents:
• Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide (order number
DOC-7811380=)
Related Publications
• Catalyst 2950 and Catalyst 2955 Switch Command Reference (order number DOC-7811381=)
• Catalyst 2950 and Catalyst 2955 Switch System Message Guide (order number DOC-7814233=)
• Device manager online help (available on the switch)
• Catalyst 2950 Switch Hardware Installation Guide (not orderable but available on Cisco.com)
• Catalyst 2950 Switch Getting Started Guide (order number DOC-1786521=)
• Regulatory Compliance and Safety Information for the Catalyst 2950 Switch (order number
DOC-7816625=)
• Catalyst 2955 Switch Hardware Installation Guide (order number DOC-7814944=)
For information about related products, see these documents:
• Getting Started with Cisco Network Assistant (not orderable but available on Cisco.com)
• Release Notes for Cisco Network Assistant (not orderable but available on Cisco.com)
• CWDM Passive Optical System Installation Note (not orderable but is available on Cisco.com)
• 1000BASE-T Gigabit Interface Converter Installation Notes (not orderable but is available on
Cisco.com)
• Cisco Small Form-Factor Pluggable Modules Installation Notes (order number DOC-7815160=)
• Cisco CWDM GBIC and CWDM SFP Installation Note (not orderable but available on Cisco.com)
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.
78-11380-12
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
xxix
Obtaining Documentation
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
http://www.cisco.com
You can access international Cisco websites at this URL:
Cisco documentation and additional literature are available in the Product Documentation DVD package,
which may have shipped with your product. The Product Documentation DVD is updated regularly and
may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on
portable media. The DVD enables you to access multiple versions of hardware and software installation,
configuration, and command guides for Cisco products and to view technical documentation in HTML.
With the DVD, you have access to the same documentation that is found on the Cisco website without
being connected to the Internet. Certain products also have .pdf versions of the documentation available.
Preface
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com
users (Cisco direct customers) can order a Product Documentation DVD (product number
DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.
Cisco Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
Cisco Marketplace:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product
Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Cisco will continue to support documentation orders using the Ordering tool:
• Registered Cisco.com users (Cisco direct customers) can order documentation from the
Ordering tool:
http://www.cisco.com/en/US/partner/ordering/
• Instructions for ordering documentation using the Ordering tool are at this URL: