SMC Networks SMC8624T User Manual

TigerSwitch 10/100/1000

Gigabit Ethernet Switch

◆ 24 auto-MDI/MDI-X 10/100/1000BASE-T ports

◆ 4 ports shared with 4 SFP transceiver slots

◆ Non-blocking switching architecture

◆ Support for a redundant power unit

◆ Spanning Tree Protocol, Rapid STP, and Multiple STP

◆ Up to six LACP or static 4-port trunks

◆ Layer 2/3/4 CoS support through 8 priority queues

◆ Layer 3/4 traffic priority with IP Precedence and IP DSCP

◆ Full support for VLANs with GVRP

◆ IGMP multicast filtering and snooping

◆ Support for jumbo frames up to 9 KB

◆ Manageable via console, Web, and SNMP/RMON

Management Guide

SMC8624T

TigerSwitch 10/100/1000 Management Guide

From SMC’s Tiger line of feature-rich workgroup LAN solutions

38 Tesla Irvine, CA 92618 Phone: (949) 679-8000

October 2003

Pub. # 150000041200A

Information furnished by SMC Networks, Inc. (SMC) is believed to be accurate and reliable. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without notice.

SMC Networks, Inc.

38 Tesla

Irvine, CA 92618

Trademarks:

SMC is a registered trademark; and EZ Switch, TigerStack and TigerSwitch are trademarks of SMC Networks, Inc. Other product and company names are trademarks or registered trademarks of their respective holders.

IMITED

Limited Warranty Statement: SMC Networks, Inc. (“SMC”) warrants its products to be free from defects in workmanship and materials, under normal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limited warranty from the date of purchase from SMC or its Authorized Reseller. SMC may, at its own discretion, repair or replace any product not operating as warranted with a similar or functionally equivalent product, during the applicable warranty term. SMC will endeavor to repair or replace any product returned under warranty within 30 days of receipt of the product.

The standard limited warranty can be upgraded to a Limited Lifetime* warranty by registering new products within 30 days of purchase from SMC or its Authorized Reseller. Registration can be accomplished via the enclosed product registration card or online via the SMC web site. Failure to register will not affect the standard limited warranty. The Limited Lifetime warranty covers a product during the Life of that Product, which is defined as the period of time during which the product is an “Active” SMC product. A product is considered to be “Active” while it is listed on the current SMC price list. As new technologies emerge, older technologies become obsolete and SMC will, at its discretion, replace an older product in its product line with one that incorporates these newer technologies. At that point, the obsolete product is discontinued and is no longer an “Active” SMC product. A list of discontinued products with their respective dates of discontinuance can be found at: http://www.smc.com/index.cfm?action=customer_service_warranty.

All products that are replaced become the property of SMC. Replacement products may be either new or reconditioned. Any replaced or repaired product carries either a 30-day limited warranty or the remainder of the initial warranty, whichever is longer. SMC is not responsible for any custom software or firmware, configuration information, or memory data of Customer contained in, stored on, or integrated with any products returned to SMC pursuant to any warranty. Products returned to SMC should have any customer-installed accessory or add-on components, such as expansion modules, removed prior to returning the product for replacement. SMC is not responsible for these items if they are returned with the product.

Customers must contact SMC for a Return Material Authorization number prior to returning any product to SMC. Proof of purchase may be required. Any product returned to SMC without a valid Return Material Authorization (RMA) number clearly marked on the outside of the package will be returned to customer at customer’s expense. For warranty claims within North America, please call our toll-free customer support number at (800) 762-4968. Customers are responsible for all shipping charges from their facility to SMC. SMC is responsible for return shipping charges from SMC to customer.

WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, CUSTOMER’S SOLE REMEDY SHALL BE REPAIR OR REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC’S OPTION. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OR CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. SMC NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER

ARRANTY

IMITED WARRANTY

LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS. SMC SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY CUSTOMER’S OR ANY THIRD PERSON’S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING, OR OTHER HAZARD.

LIMITATION OF LIABILITY: IN NO EVENT, WHETHER BASED IN CONTRACT OR TORT (INCLUDING NEGLIGENCE), SHALL SMC BE LIABLE FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE, LOSS OF BUSINESS, OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS PRODUCTS, EVEN IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES OR THE LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS, SO THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS, WHICH MAY VARY FROM STATE TO STATE. NOTHING IN THIS WARRANTY SHALL BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS.

* SMC will provide warranty service for one year following discontinuance from the active SMC price list. Under the limited lifetime warranty, internal and external power supplies, fans, and cables are covered by a standard one-year warranty from date of purchase.

SMC Networks, Inc.

38 Tesla

Irvine, CA 92618

IMITED WARRANTY

ONTENTS

1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1

Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

Description of Software Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

System Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7

2 Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

Required Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3

Remote Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4

Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Setting Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Setting an IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6

Manual Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6

Dynamic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8

Enabling SNMP Management Access . . . . . . . . . . . . . . . . . . . . . 2-9

Community Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9

Trap Receivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Saving Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11

Managing System Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12

3 Configuring the Switch . . . . . . . . . . . . . . . . . . . . . . . . 3-1

Using the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1

Navigating the Web Browser Interface . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3

Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Panel Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Main Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5

Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-12

Displaying System Information . . . . . . . . . . . . . . . . . . . . . . . . . 3-12

Displaying Switch Hardware/Software Versions . . . . . . . . . . . 3-14

Field Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-14

Displaying Bridge Extension Capabilities . . . . . . . . . . . . . . . . . 3-16

Setting the Switch’s IP Address . . . . . . . . . . . . . . . . . . . . . . . . 3-18

vii

ONTENTS

Manual Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19

Using DHCP/BOOTP . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21

Managing Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22

Downloading System Software from a Server . . . . . . . . . . 3-23

Saving or Restoring Configuration Settings . . . . . . . . . . . . . . . 3-25

Downloading Configuration Settings from a Server . . . . . 3-25

Resetting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-27

Setting the System Clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-27

Configuring SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-28

Setting the Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-29

Simple Network Management Protocol . . . . . . . . . . . . . . . . . . . . . . . . 3-31

Setting Community Access Strings . . . . . . . . . . . . . . . . . . . . . . 3-31

Specifying Trap Managers and Trap Types . . . . . . . . . . . . . . . . 3-33

Filtering Addresses for SNMP Client Access . . . . . . . . . . . . . . 3-35

User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-37

Configuring the Logon Password . . . . . . . . . . . . . . . . . . . . . . . 3-37

Configuring Local/Remote Logon Authentication . . . . . . . . . 3-39

Configuring HTTPS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-43

Replacing the Default Secure-site Certificate . . . . . . . . . . 3-45

Configuring the Secure Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-46

Generating the Host Key Pair . . . . . . . . . . . . . . . . . . . . . . 3-49

Configuring the SSH Server . . . . . . . . . . . . . . . . . . . . . . . . 3-52

Configuring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54

Configuring 802.1x Port Authentication . . . . . . . . . . . . . . . . . . 3-56

Displaying 802.1x Global Settings . . . . . . . . . . . . . . . . . . . 3-58

Configuring 802.1x Global Settings . . . . . . . . . . . . . . . . . . 3-61

Configuring Port Authorization Mode . . . . . . . . . . . . . . . 3-63

Displaying 802.1x Statistics . . . . . . . . . . . . . . . . . . . . . . . . 3-64

Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-67

Configuring Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . 3-67

Setting the ACL Name and Type . . . . . . . . . . . . . . . . . . . . 3-69

Configuring a Standard IP ACL . . . . . . . . . . . . . . . . . . . . . 3-70

Configuring an Extended IP ACL . . . . . . . . . . . . . . . . . . . 3-71

Configuring a MAC ACL . . . . . . . . . . . . . . . . . . . . . . . . . . 3-74

Configuring ACL Masks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-77

Specifying the Mask Type . . . . . . . . . . . . . . . . . . . . . . . . . . 3-77

Configuring an IP ACL Mask . . . . . . . . . . . . . . . . . . . . . . . 3-78

viii

ONTENTS

Configuring a MAC ACL Mask . . . . . . . . . . . . . . . . . . . . . 3-81

Binding a Port to an Access Control List . . . . . . . . . . . . . . . . . 3-84

Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-86

Displaying Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . 3-86

Configuring Interface Connections . . . . . . . . . . . . . . . . . . . . . . 3-90

Creating Trunk Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-93

Statically Configuring a Trunk . . . . . . . . . . . . . . . . . . . . . . 3-94

Enabling LACP on Selected Ports . . . . . . . . . . . . . . . . . . . 3-96

Configuring LACP Parameters . . . . . . . . . . . . . . . . . . . . . . 3-99

Displaying LACP Port Counters . . . . . . . . . . . . . . . . . . . 3-101

Displaying LACP Settings and Status for the Local Side 3-103 Displaying LACP Settings and Status for the Remote Side . . .

3-106

Setting Broadcast Storm Thresholds . . . . . . . . . . . . . . . . . . . . 3-108

Configuring Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-110

Configuring Rate Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-111

Showing Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-113

Address Table Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-120

Setting Static Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-120

Displaying the Address Table . . . . . . . . . . . . . . . . . . . . . . . . . . 3-121

Changing the Aging Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-123

Spanning Tree Algorithm Configuration . . . . . . . . . . . . . . . . . . . . . . 3-123

Displaying Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-125

Configuring Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-129

Displaying Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 3-135

Configuring Interface Settings . . . . . . . . . . . . . . . . . . . . . . . . . 3-140

Configuring Multiple Spanning Trees . . . . . . . . . . . . . . . . . . . 3-144

Displaying Interface Settings for MSTP . . . . . . . . . . . . . . . . . 3-148

Configuring Interface Settings for MSTP . . . . . . . . . . . . . . . . 3-150

VLAN Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-153

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-153

Assigning Ports to VLANs . . . . . . . . . . . . . . . . . . . . . . . . 3-154

Forwarding Tagged/Untagged Frames . . . . . . . . . . . . . . 3-156

Enabling or Disabling GVRP (Global Setting) . . . . . . . . . . . 3-157

Displaying Basic VLAN Information . . . . . . . . . . . . . . . . . . . 3-158

Displaying Current VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-159

Creating VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-161

ONTENTS

Adding Static Members to VLANs (VLAN Index) . . . . . . . . 3-162

Adding Static Members to VLANs (Port Index) . . . . . . . . . . 3-165

Configuring VLAN Behavior for Interfaces . . . . . . . . . . . . . . 3-166

Configuring Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 3-170

Enabling Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . 3-170

Configuring Uplink and Downlink Ports . . . . . . . . . . . . 3-171

Configuring Protocol-Based VLANs . . . . . . . . . . . . . . . . . . . 3-171

Configuring Protocol Groups . . . . . . . . . . . . . . . . . . . . . 3-172

Mapping Protocols to VLANs . . . . . . . . . . . . . . . . . . . . . 3-173

Class of Service Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-175

Setting the Default Priority for Interfaces . . . . . . . . . . . . . . . . 3-175

Mapping CoS Values to Egress Queues . . . . . . . . . . . . . . . . . 3-177

Selecting the Queue Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-179

Setting the Service Weight for Traffic Classes . . . . . . . . . . . . 3-180

Mapping Layer 3/4 Priorities to CoS Values . . . . . . . . . . . . . 3-181

Selecting IP Precedence/DSCP Priority . . . . . . . . . . . . . . . . . 3-182

Mapping IP Precedence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-183

Mapping DSCP Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-185

Mapping CoS Values to ACLs . . . . . . . . . . . . . . . . . . . . . . . . . 3-187

Changing Priorities Based on ACL Rules . . . . . . . . . . . . . . . . 3-188

Multicast Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-191

Layer 2 IGMP (Snooping and Query) . . . . . . . . . . . . . . . . . . . 3-192

Configuring IGMP Snooping and Query Parameters . . . 3-192 Displaying Interfaces Attached to a Multicast Router . . 3-195

Specifying Static Interfaces for a Multicast Router . . . . . 3-196

Displaying Port Members of Multicast Services . . . . . . . 3-198

Assigning Ports to Multicast Services . . . . . . . . . . . . . . . 3-199

Configuring Domain Name Service . . . . . . . . . . . . . . . . . . . . . . . . . . 3-201

Configuring General DNS Server Parameters . . . . . . . . . . . . 3-201

Configuring Static DNS Host to Address Entries . . . . . . . . . 3-204

Displaying the DNS Cache . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-206

4 Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . 4-1

Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

Telnet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2

ONTENTS

Entering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Keywords and Arguments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Minimum Abbreviation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4

Command Completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5

Getting Help on Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5

Showing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6

Partial Keyword Lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7

Negating the Effect of Commands . . . . . . . . . . . . . . . . . . . . . . . 4-7

Using Command History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7

Understanding Command Modes . . . . . . . . . . . . . . . . . . . . . . . . 4-8

Exec Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8

Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9

Command Line Processing . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12

Command Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13

Line Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15

line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16

password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-18

exec-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19

password-thresh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-20

silent-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-21

databits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-22

parity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-23

speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-24

stopbits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-25

disconnect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-26

show line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-27

General Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-28

enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-28

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-29

configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-30

show history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-31

reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-32

end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-33

exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-33

quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-34

System Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-35

ONTENTS

Device Designation Commands . . . . . . . . . . . . . . . . . . . . . . . . 4-36

prompt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-36

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-37

User Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-37

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-38

enable password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-39

IP Filter Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-40

management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-41

show management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-42

Web Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-43

ip http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-44

ip http server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-44

ip http secure-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-45

ip http secure-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-47

Secure Shell Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-48

ip ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-51

ip ssh timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-52

ip ssh authentication-retries . . . . . . . . . . . . . . . . . . . . . . . . 4-53

ip ssh server-key size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-54

delete public-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-55

ip ssh crypto host-key generate . . . . . . . . . . . . . . . . . . . . . 4-55

ip ssh crypto zeroize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-56

ip ssh save host-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-57

show ip ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-58

show ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-58

show public-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-60

Event Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-61

logging on . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-62

logging history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-63

logging host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-64

logging facility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-65

logging trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-66

clear logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-66

show logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-67

SMTP Alert Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-70

logging sendmail host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-70

logging sendmail level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-71

xii

ONTENTS

logging sendmail source-email . . . . . . . . . . . . . . . . . . . . . . 4-72

logging sendmail destination-email . . . . . . . . . . . . . . . . . . 4-73

logging sendmail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-73

show logging sendmail . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-74

Time Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-75

sntp client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-75

sntp server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-77

sntp poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-78

sntp broadcast client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-78

show sntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-79

clock timezone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-80

calendar set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-81

show calendar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-81

System Status Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-82

show startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-82

show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-85

show system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-87

show users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-88

show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-88

Frame Size Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-89

jumbo frame . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-89

Flash/File Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-91

copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-91

delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-94

dir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-95

whichboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-96

boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-97

Authentication Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-98

Authentication Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-98

authentication login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-98

RADIUS Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-100

radius-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-100

radius-server port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-101

radius-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-101

radius-server retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . 4-102

radius-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-103

show radius-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-103

xiii

ONTENTS

TACACS+ Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-104

tacacs-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-104

tacacs-server port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-105

tacacs-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-105

show tacacs-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-106

Port Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-107

port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-107

802.1x Port Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-110

authentication dot1x default . . . . . . . . . . . . . . . . . . . . . . . 4-111

dot1x default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-111

dot1x max-req . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-112

dot1x port-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-112

dot1x operation-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-113

dot1x re-authenticate . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-114

dot1x re-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-114

dot1x timeout quiet-period . . . . . . . . . . . . . . . . . . . . . . . . 4-115

dot1x timeout re-authperiod . . . . . . . . . . . . . . . . . . . . . . 4-115

dot1x timeout tx-period . . . . . . . . . . . . . . . . . . . . . . . . . . 4-116

show dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-117

Access Control List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-120

IP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-122

access-list ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-123

permit, deny (Standard ACL) . . . . . . . . . . . . . . . . . . . . . 4-124

permit, deny (Extended ACL) . . . . . . . . . . . . . . . . . . . . . 4-126

show ip access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-128

access-list ip mask-precedence . . . . . . . . . . . . . . . . . . . . . 4-129

mask (IP ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-130

show access-list ip mask-precedence . . . . . . . . . . . . . . . . 4-134

ip access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-135

show ip access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-136

map access-list ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-136

show map access-list ip . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-138

match access-list ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-139

show marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-140

MAC ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-141

access-list mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-142

permit, deny (MAC ACL) . . . . . . . . . . . . . . . . . . . . . . . . . 4-143

xiv

ONTENTS

show mac access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-145

access-list mac mask-precedence . . . . . . . . . . . . . . . . . . . 4-145

mask (MAC ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-147

show access-list mac mask-precedence . . . . . . . . . . . . . . 4-149

mac access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-150

show mac access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-151

map access-list mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-151

show map access-list mac . . . . . . . . . . . . . . . . . . . . . . . . . 4-152

match access-list mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-153

ACL Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-154

show access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-154

show access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-155

SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-155

snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-156

snmp-server contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-157

snmp-server location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-157

snmp-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-158

snmp-server enable traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-160

snmp ip filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-161

show snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-162

DHCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-164

DHCP Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-164

ip dhcp client-identifier . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-164

ip dhcp restart client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-165

DNS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-167

ip host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-168

clear host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-169

ip domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-169

ip domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-170

ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-172

ip domain-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-173

show hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-174

show dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-175

show dns cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-175

clear dns cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-176

Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-177

interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-178

ONTENTS

description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-178

speed-duplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-179

negotiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-181

capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-182

flowcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-183

combo-forced-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-185

shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-185

switchport broadcast packet-rate . . . . . . . . . . . . . . . . . . . . . . . 4-186

clear counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-187

show interfaces status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-188

show interfaces counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-189

show interfaces switchport . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-191

Mirror Port Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-193

port monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-193

show port monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-194

Rate Limit Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-195

rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-196

Link Aggregation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-197

channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-199

lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-199

lacp system-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-202

lacp admin-key (Ethernet Interface) . . . . . . . . . . . . . . . . . . . . 4-203

lacp admin-key (Port Channel) . . . . . . . . . . . . . . . . . . . . . . . . . 4-204

lacp port-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-205

show lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-206

Address Table Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-212

mac-address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-212

clear mac-address-table dynamic . . . . . . . . . . . . . . . . . . . . . . . 4-213

show mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-214

mac-address-table aging-time . . . . . . . . . . . . . . . . . . . . . . . . . . 4-215

show mac-address-table aging-time . . . . . . . . . . . . . . . . . . . . . 4-215

Spanning Tree Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-216

spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-218

spanning-tree mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-219

spanning-tree forward-time . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-220

spanning-tree hello-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-221

spanning-tree max-age . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-222

xvi

ONTENTS

spanning-tree priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-223

spanning-tree pathcost method . . . . . . . . . . . . . . . . . . . . . . . . 4-224

spanning-tree transmission-limit . . . . . . . . . . . . . . . . . . . . . . . 4-224

spanning-tree mst-configuration . . . . . . . . . . . . . . . . . . . . . . . 4-225

mst vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-226

mst priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-227

name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-228

revision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-228

max-hops . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-229

spanning-tree spanning-disabled . . . . . . . . . . . . . . . . . . . . . . . 4-230

spanning-tree cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-231

spanning-tree port-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-232

spanning-tree edge-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-233

spanning-tree portfast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-234

spanning-tree link-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-235

spanning-tree mst cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-236

spanning-tree mst port-priority . . . . . . . . . . . . . . . . . . . . . . . . 4-237

spanning-tree protocol-migration . . . . . . . . . . . . . . . . . . . . . . 4-238

show spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-239

show spanning-tree mst configuration . . . . . . . . . . . . . . . . . . . 4-241

VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-242

Editing VLAN Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-242

vlan database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-243

vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-244

Configuring VLAN Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . 4-245

interface vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-246

switchport mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-247

switchport acceptable-frame-types . . . . . . . . . . . . . . . . . 4-248

switchport ingress-filtering . . . . . . . . . . . . . . . . . . . . . . . 4-249

switchport native vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-250

switchport allowed vlan . . . . . . . . . . . . . . . . . . . . . . . . . . 4-251

switchport forbidden vlan . . . . . . . . . . . . . . . . . . . . . . . . . 4-252

Displaying VLAN Information . . . . . . . . . . . . . . . . . . . . . . . . 4-253

show vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-253

Configuring Protocol-based VLANs . . . . . . . . . . . . . . . . . . . . 4-254

protocol-vlan protocol-group (Configuring Groups) . . . 4-255 protocol-vlan protocol-group (Configuring Interfaces) . 4-256

xvii

ONTENTS

show protocol-vlan protocol-group . . . . . . . . . . . . . . . . . 4-257

show interfaces protocol-vlan protocol-group . . . . . . . . 4-258

Configuring Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . 4-259

pvlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-259

show pvlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-260

GVRP and Bridge Extension Commands . . . . . . . . . . . . . . . . . . . . . 4-261

bridge-ext gvrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-261

show bridge-ext . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-262

switchport gvrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-263

show gvrp configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 4-263

garp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-264

show garp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-265

Priority Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-266

Priority Commands (Layer 2) . . . . . . . . . . . . . . . . . . . . . . . . . . 4-267

switchport priority default . . . . . . . . . . . . . . . . . . . . . . . . 4-267

queue mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-269

queue bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-270

queue cos-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-271

show queue mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-272

show queue bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-273

show queue cos-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-273

Priority Commands (Layer 3 and 4) . . . . . . . . . . . . . . . . . . . . . 4-274

map ip precedence (Global Configuration) . . . . . . . . . . . 4-274

map ip precedence (Interface Configuration) . . . . . . . . . 4-275

map ip dscp (Global Configuration) . . . . . . . . . . . . . . . . 4-276

map ip dscp (Interface Configuration) . . . . . . . . . . . . . . . 4-277

show map ip precedence . . . . . . . . . . . . . . . . . . . . . . . . . 4-278

show map ip dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-279

Multicast Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-280

IGMP Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 4-281

ip igmp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-281

ip igmp snooping vlan static . . . . . . . . . . . . . . . . . . . . . . . 4-282

ip igmp snooping version . . . . . . . . . . . . . . . . . . . . . . . . . 4-283

show ip igmp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-284

show mac-address-table multicast . . . . . . . . . . . . . . . . . . 4-284

IGMP Query Commands (Layer 2) . . . . . . . . . . . . . . . . . . . . 4-286

ip igmp snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . 4-286

xviii

ONTENTS

ip igmp snooping query-count . . . . . . . . . . . . . . . . . . . . . 4-287

ip igmp snooping query-interval . . . . . . . . . . . . . . . . . . . . 4-288

ip igmp snooping query-max-response-time . . . . . . . . . . 4-288

ip igmp snooping router-port-expire-time . . . . . . . . . . . . 4-289

Static Multicast Routing Commands . . . . . . . . . . . . . . . . . . . . 4-290

ip igmp snooping vlan mrouter . . . . . . . . . . . . . . . . . . . . 4-291

show ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . 4-292

IP Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-293

Basic IP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-293

ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-293

ip default-gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-295

show ip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-295

show ip redirects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-296

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-296

A Software Specifications . . . . . . . . . . . . . . . . . . . . . . . . A-1

Software Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1

Management Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-3

Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-3

Management Information Bases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-4

B Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-1

Glossary

Index

xix

ONTENTS

HAPTER

NTRODUCTION

This switch provides a broad range of features for Layer 2 switching. It includes a management agent that allows you to configure the features listed in this manual. The default configuration can be used for most of the features provided by this switch. However, there are many options that you should configure to maximize the switch’s performance for your particular network environment.

Key Features

Feature Description

Configuration Backup and Restore

Authentication Console, Telnet, web – User name / password, RADIUS,

Access Control Lists

DHCP Client Supported

DNS Server Supported

Port Configuration Speed, duplex mode and flow control

Rate Limiting Input and output rate limiting per port

Port Mirroring One or more ports mirrored to single analysis port

Backup to TFTP server

TACACS+

Web – HTTPS; Telnet – SSH

SNMP – Community strings, IP address filtering

Port – IEEE 802.1x, MAC address filtering

Supports up to 32 IP or MAC ACLs

1-1

NTRODUCTION

Feature Description

Port Trunking Supports up to 6 trunks using either static or dynamic

Broadcast Storm Control

Static Address Up to 16K MAC addresses in the forwarding table

IEEE 802.1D Bridge

Store-and-Forward Switching

Spanning Tree Protocol

Virtual LANs Up to 255 using IEEE 802.1Q, port-based, protocol-based, or

Traffic Prioritization

Multicast Filtering Supports IGMP snooping and query

trunking (LACP)

Supported

Supports dynamic data switching and addresses learning

Supported to ensure wire-speed switching while eliminating bad frames

Supports standard STP, Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Trees (MSTP)

private VLANs

Default port priority, traffic class map, queue scheduling, IP Precedence, or Differentiated Services Code Point (DSCP)

Description of Software Features

The switch provides a wide range of advanced performance enhancing features. Flow control eliminates the loss of packets due to bottlenecks caused by port saturation. Broadcast storm suppression prevents broadcast traffic storms from engulfing the network. Port-based and protocol-based VLANs, plus support for automatic GVRP VLAN registration provide traffic security and efficient use of network bandwidth. CoS priority queueing ensures the minimum delay for moving real-time multimedia data across the network. While multicast filtering provides support for real-time network applications. Some of the management features are briefly described below.

1-2

ESCRIPTION OF SOFTWARE FEATURES

Configuration Backup and Restore – You can save the current configuration settings to a file on a TFTP server, and later download this file to restore the switch configuration settings.

Authentication – This switch authenticates management access via the console port, Telnet or web browser. User names and passwords can be configured locally or can be verified via a remote authentication server (i.e., RADIUS or TACACS+). Port-based authentication is also supported via the IEEE 802.1x protocol. This protocol uses the Extensible Authentication Protocol over LANs (EAPOL) to request a user name and password from the 802.1x client, and then verifies the client’s right to access the network via an authentication server.

Other authentication options include HTTPS for secure management access via the web, SSH for secure management access over a Telnet-equivalent connection, IP address filtering for SNMP/web/Telnet management access, and MAC address filtering for port access.

Access Control Lists – ACLs provide packet filtering for IP frames (based on address, protocol, TCP/UDP port number or TCP control code) or any frames (based on MAC address or Ethernet type). ACLs can by used to improve performance by blocking unnecessary network traffic or to implement security controls by restricting access to specific network resources or protocols.

Port Configuration – You can manually configure the speed, duplex mode, and flow control used on specific ports, or use auto-negotiation to detect the connection settings used by the attached device. Use the full-duplex mode on ports whenever possible to double the throughput of switch connections. Flow control should also be enabled to control network traffic during periods of congestion and prevent the loss of packets when port buffer thresholds are exceeded. The switch supports flow control based on the IEEE 802.3x standard.

1-3

NTRODUCTION

Rate Limiting – This feature controls the maximum rate for traffic transmitted or received on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount of traffic are dropped.

Port Mirroring – The switch can unobtrusively mirror traffic from any port to a monitor port. You can then attach a protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity.

Port Trunking – Ports can be combined into an aggregate connection. Trunks can be manually set up or dynamically configured using IEEE

802.3ad Link Aggregation Control Protocol (LACP). The additional ports dramatically increase the throughput across any connection, and provide redundancy by taking over the load if a port in the trunk should fail. The switch supports up to 6 trunks.

Broadcast Storm Control – Broadcast suppression prevents broadcast traffic from overwhelming the network. When enabled on a port, the level of broadcast traffic passing through the port is restricted. If broadcast traffic rises above a pre-defined threshold, it will be throttled until the level falls back beneath the threshold.

Static Addresses – A static address can be assigned to a specific interface on this switch. Static addresses are bound to the assigned interface and will not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. Static addresses can be used to provide network security by restricting access for a known host to a specific port.

IEEE 802.1D Bridge – The switch supports IEEE 802.1D transparent bridging. The address table facilitates data switching by learning addresses, and then filtering or forwarding traffic based on this information. The address table supports up to 16K addresses.

1-4

ESCRIPTION OF SOFTWARE FEATURES

Store-and-Forward Switching – The switch copies each frame into its memory before forwarding them to another port. This ensures that all frames are a standard Ethernet size and have been verified for accuracy with the cyclic redundancy check (CRC). This prevents bad frames from entering the network and wasting bandwidth.

To avoid dropping frames on congested ports, the switch provides 1 MB for frame buffering. This buffer can queue packets awaiting transmission on congested networks.

Spanning Tree Protocol – The switch supports these spanning tree protocols:

Spanning Tree Protocol (STP, IEEE 802.1D) – This protocol adds a level of fault tolerance by allowing two or more redundant connections to be created between a pair of LAN segments. When there are multiple physical paths between segments, this protocol will choose a single path and disable all others to ensure that only one route exists between any two stations on the network. This prevents the creation of network loops. However, if the chosen path should fail for any reason, an alternate path will be activated to maintain the connection.

Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol reduces the convergence time for network topology changes to about 10% of that required by the older IEEE 802.1D STP standard. It is intended as a complete replacement for STP, but can still interoperate with switches running the older standard by automatically reconfiguring ports to STP-compliant mode if they detect STP protocol messages from attached devices.

Multiple Spanning Tree Protocol (MSTP, IEEE 802.1s) – This protocol is a direct extension of RSTP. It can provide an independent spanning tree for different VLANs. It simplifies network management, provides for even faster convergence than RSTP by limiting the size of each region, and prevents VLAN members from being segmented from the rest of the group (as sometimes occurs with IEEE 802.1D STP).

1-5

NTRODUCTION

Virtual LANs – The switch supports up to 255 VLANs. A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network. The switch supports tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN groups can be dynamically learned via GVRP, or ports can be manually assigned to a specific set of VLANs. This allows the switch to restrict traffic to the VLAN groups to which a user has been assigned. By segmenting your network into VLANs, you can:

• Eliminate broadcast storms which severely degrade performance in a flat network.

• Simplify network management for node changes/moves by remotely configuring VLAN membership for any port, rather than having to manually change the network connection.

• Provide data security by restricting all traffic to the originating VLAN.

• Use private VLANs to restrict traffic to pass only between data ports and the uplink ports, thereby isolating adjacent ports within the same VLAN, and allowing you to limit the total number of VLANs that need to be configured.

Traffic Prioritization – This switch prioritizes each packet based on the required level of service, using four priority queues with strict or Weighted Round Robin Queuing. It uses IEEE 802.1p and 802.1Q tags to prioritize incoming traffic based on input from the end-station application. These functions can data and best-effort data.

be used to provide independent priorities for delay-sensitive

This switch also supports several common methods of prioritizing layer 3/ 4 traffic to meet application requirements. Traffic can be prioritized based on the priority bits in the IP frame’s Type of Service (ToS) octet. When these services are enabled, the priorities are mapped to a Class of Service value by the switch, and the traffic then sent to the corresponding output queue.

Multicast Filtering – Specific multicast traffic can be assigned to its own VLAN to ensure that it does not interfere with normal network traffic and to guarantee real-time delivery by setting the required priority level for the designated VLAN. The switch uses IGMP Snooping and Query to manage multicast group registration.

1-6

System Defaults

The switch’s system defaults are provided in the configuration file “Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as the startup configuration file (page 3-26).

The following table lists some of the basic system defaults.

Function Parameter Default

Console Port Connection

Authentication Privileged Exec Level Username “admin”

Web Management HTTP Server Enabled

SNMP Community Strings “public” (read only)

Baud Rate auto

Data bits 8

Stop bits 1

Parity none

Local Console Timeout 0 (disabled)

Password “admin”

Normal Exec Level Username “guest”

Enable Privileged Exec from Normal Exec Level

RADIUS Authentication Disabled

TACACS Authentication Disabled

802.1x Port Authentication Disabled

HTTPS Enabled

SSH Enabled

Port Security Disabled

HTTP Port Number 80

HTTP Secure Server Enabled

HTTP Secure Port Number 443

Traps Authentication traps: enabled

IP Filtering Disabled

Password “guest”

Password “super”

“private” (read/write)

Link-up-down events: enabled

YSTEM DEFAULTS

1-7

NTRODUCTION

Function Parameter Default

Port Configuration

Rate Limiting Input and output limits Disabled

Port Trunking Static Trunks None

Broadcast Storm Protection

Spanning Tree Protocol

Address Table Aging Time 300 seconds

Admin Status Enabled

Auto-negotiation Enabled

Flow Control Disabled

Port Capability 1000BASE-T –

10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 Mbps full duplex 1000 Mbps full duplex Full-duplex flow control disabled Symmetric flow control disabled

1000BASE-SX/LX/LH –

1000 Mbps full duplex Full-duplex flow control disabled Symmetric flow control disabled

LACP (all ports) Disabled

Status Enabled (all ports)

Broadcast Limit Rate 500 packets per second

Status Enabled, MSTP

(Defaults: All values based on IEEE 802.1s)

Fast Forwarding (Edge Port) Disabled

1-8

YSTEM DEFAULTS

Function Parameter Default

Virtual LANs Default VLAN 1

PVID 1

Acceptable Frame Type All

Ingress Filtering Disabled

Switchport Mode (Egress Mode)

GVRP (global) Disabled

GVRP (port interface) Disabled

Traffic Prioritization

IP Settings IP Address 0.0.0.0

DNS Server Lookup Disabled

Multicast Filtering IGMP Snooping Snooping: Enabled

System Log Status Enabled

SMTP Email Alerts

SNTP Clock Synchronization Disabled

Ingress Port Priority 0

Weighted Round Robin Queue: 0 1 2 3 4 5 6 7

IP Precedence Priority Disabled

IP DSCP Priority Disabled

Subnet Mask 255.0.0.0

Default Gateway 0.0.0.0

DHCP Client: Disabled

BOOTP Disabled

Messages Logged Levels 0-7 (all)

Messages Logged to Flash Levels 0-3

Event Handler Disabled

Hybrid: tagged/untagged frames

Priority: 2 0 1 3 4 5 6 7

Querier: Enabled

1-9

NTRODUCTION

1-10

+ 540 hidden pages

SMC Networks SMC8624T User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Key Features

Description of Software Features

System Defaults