Cisco Systems RJ-45-to-AUX

Figure 14.6: The CDP Management page allows you to choose which ports you want defined for CDP.

SPAN—The SPAN Configuration and Port Monitoring page. Here you have the option of selecting

the port to which you want to send the captured frames and the ports to be monitored. See Figure

14.7.

•

Figure 14.7: This page allows you to configure which ports to monitor and where they are monitored from.

CONSOLE—The Console and Upgrade Configuration page. As you can see in Figure 14.8, this page

is self explanatory. However, we wanted to bring to your attention the Accept Upgrade Transfer From

Other Hosts option; it may be a vulnerability if you leave it selected.

•

279

Contents

Main Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Cisco Switching Black Book Page Page Introduction Is This Book for You? How to Use This Book The Black Book Philosophy Chapter 1: Network Switching Fundamentals Physical Media and Switching Types A Bit of History Networking Architectures Page The Pieces of Technology Repeaters Hubs Bridges Page Routers Switches Network Design Collision Domains Broadcast Domains Why Upgrade to Switches? Page Page Switched Forwarding Switched Network Bottlenecks Page The Rule of the Network Road Switched Ethernet Innovations FullDuplex Ethernet Fast Ethernet Gigabit Ethernet The Cisco IOS Connecting to the Switch Powering Up the Switch The following commands are available in Privileged EXEC mode: 26 Finally, the following commands are available in Global Configuration mode: The Challenges Todays Trend Entering and Exiting Privileged EXEC Mode Entering and Exiting Global Configuration Mode Entering and Exiting Interface Configuration Mode Entering and Exiting Subinterface Configuration Mode Saving Configuration Changes Chapter 2: Basic Switch Configuration CommandLine Interfaces Campus Hierarchical Switching Model Access Layer Distribution Layer Core Layer Remote Network Monitoring Connecting to the Console Port Console Cable Pinouts Console Connectors The RJ45toAUX Port Console Connector Pinouts Page Switch IOSs The IOS Configuration Modes Limiting Telnet Access Implementing Privilege Levels Configuring an IOSBased CLI Switch Setting the Login Passwords Setting Privilege Levels Assigning Allowable Commands Setting the Console Port Timeout Value Configuring the Telnet Timeout Value Configuring the Hostname Configuring the Date and Time Configuring an IP Address and Netmask Configuring a Default Route and Gateway Configuring a Set/ClearBased CLI Switch Logging On to a Switch Setting the Login and Enable Passwords Changing the Console Prompt Entering a Contact Name and Location Information Configuring System and Time Information Configuring an IP Address and Netmask Configuring a Default Route and Gateway Viewing the Default Routes Configuring Port Speed and Duplex Enabling SNMP Configuring Trap Message Targets Configuring a MenuDriven IOS Configuring the Console Port Configuring Telnet Configuring the Password Configuring an IP Address and Default Gateway Configuring SNMP Configuring ROM Entering ROM Configuration Mode Booting ROM Mode from a Flash Device Configuring SNMP Configuring RMON Configuring RMON on a Set/ClearBased Interface Using Set/Clear Command Set Recall Key Sequences Using IOSBased Command Editing Keys and Functions Page Chapter 3: WAN Switching WAN Transmission Media Synchronous Transport Signal (STS) Cisco WAN Switches MGX 8200 Series IGX 8400 Series BPX 8600 Series WideArea Switches MGX 8800 Series WideArea Edge Switches WAN Switch Hardware Overview Cisco WAN Switch Network Topologies Network Management The CLI WAN Manager Accessing and Setting Up IGX and BPX Switches Adding New Users Displaying a Users Password Changing a Users Password Page Page Accessing the MGX 8850 and 8220 Adding New Users Changing Passwords Assigning a Switch Hostname Displaying a Summary of All Modules Displaying Detailed Information for the Current Card Changing the Time and Date Displaying the Configuration of the Maintenance and Control Ports Displaying the IP Address Page Chapter 4: LAN Switch Architectures The Catalyst Crescendo Architecture BUS ASICs Page The Crescendo Processors Crescendo Logic Units Other Cisco Switch Processors, Buses, ASICs, and Logic Units CAM AXIS Bus CEF ASIC Page Phoenix ASIC LCP SAGE ASIC QTP ASIC QMAC Bridging Types Source Route Bridging Source Route Transparent Bridging Source Route Translational Bridging Transparent Bridging Source Route Switching Switching Paths Process Switching Fast Switching Autonomous Switching Silicon Switching Optimum Switching Distributed Switching NetFlow Switching System Message Logging Loading an Image on the Supervisor Engine III Booting the Supervisor Engine III from Flash Setting the Boot Configuration Register Configuring Cisco Express Forwarding Enabling CEF Disabling CEF Page Page Page Page Displaying the Logging Configuration Displaying System Logging Messages Page Chapter 5: Virtual Local Area Networks The Flat Network of Yesterday Why Use VLANs? VLAN Basics A Properly Switched Network Switched Internetwork Security Scaling with VLANs VLAN Boundaries VLAN Membership Types Traffic Patterns Flowing through the Network Ciscos VLAN Recommendations VLAN Trunking Trunk Types Page Page LAN Emulation (LANE) VLAN Trunking Protocol (VTP) VTP Versions VTP Advertisements Page VTP Switch Modes Methods for VLAN Identification Dynamic Trunking Protocol InterVLAN Routing Internal Route Processors How InterVLAN Routing Works Configuring a Static VLAN on a Catalyst 5000 Series Switch Configuring Multiple VLANs on a Catalyst 5000 Series Switch Creating VLANs on a Catalyst 1900EN Series Assigning a Static VLAN to an Interface on a 1900EN Series Viewing the VLAN Configuration on a 1900 Series Viewing an Individual VLAN Configuration on a 1900 Series Configuring a Trunk Port on a Cisco 5000 Series Page Mapping VLANs to a Trunk Port Configuring a Trunk Port on a Cisco 1900EN Series Clearing VLANs from Trunk Links on a Cisco 5000 Series Clearing VLANs from Trunk Links on a Cisco 1900EN Series Verifying a Trunk Link Configuration on a 5000 Series Verifying a Trunk Link Configuration on a 1900EN Series Configuring the VTP Version on a Catalyst 5000 Switch Page Configuring VTP Pruning on a Catalyst 1900 Switch Configuring VTP on a Set/Clear CLI Switch Configuring VTP on a 1900 Cisco IOS CLI Switch To set a VTP domain password on a 1900EN to pass1 use the following command: Verifying the VTP Configuration on a Set/Clear CLI 111 Displaying VTP Statistics Configuring VTP Pruning on a Set/Clear CLI Switch Disabling Pruning for Unwanted VLANs Configuring IP InterVLAN Routing on an External Cisco Router Configuring IPX InterVLAN Routing on an External Router Chapter 6: InterVLAN and Basic Module Configuration Internal Route Processors Page Available Route Processors Page Page Page Routing Protocol Assignment Supervisor Engine Modules Supervisor Engines I and II Supervisor Engine III Using the Supervisor Engine Etherport Modules Port Security Manually Configured MAC Addresses Determining the Slot Number in Which a Module Resides Accessing the Internal Route Processor from the Switch Configuring a Hostname on the RSM Assigning an IP Address and Encapsulation Type to an Ethernet Interface Setting the Port Speed and Port Name on an Ethernet Interface Configuring a Default Gateway on a Catalyst 5000 Verifying the IP Configuration on a Catalyst 5000 Enabling RIP on an RSM Viewing the RSMs Running Configuration Configuring InterVLAN Routing on an RSM Configuring IPX InterVLAN Routing on the RSM Configuring AppleTalk InterVLAN Routing on an RSM Viewing the RSM Configuration Just as on a router, you use the show runningconfig to view the running configuration: 129 Assigning a MAC Address to a VLAN Viewing the MAC Addresses Configuring Filtering on an Ethernet Interface Configuring Port Security on an Ethernet Module Clearing MAC Addresses Configuring the Catalyst 5000 Supervisor Engine Module Setting the boot configregister on the Supervisor Engine Module Changing the Management VLAN on a Supervisor Engine Viewing the Supervisor Engine Configuration Configuring the Cisco 2621 External Router for ISL Trunking Configuring Redundancy Using HSRP Page Chapter 7: IP Multicast IP Multicasting Overview Broadcast Unicast Multicast IP Multicasting Addresses The Multicast IP Structure Page Delivery of Multicast Datagrams Multicast Distribution Tree Multicast Forwarding IGMP Protocols Page Internet Group Management Protocol (IGMP) IGMPv1 IGMPv2 Time to Live Multicast at Layer 2 IGMP Snooping Cisco Group Management Protocol Router Group Management Protocol GARP Multicast Registration Protocol Configuring IP Multicast Routing Disabling IP Multicast Routing Enabling PIM on an Interface Disabling PIM on an Interface Configuring the Rendezvous Point Adding a Router to a Multicast Group Configuring a Router to Be a Static Multicast Group Member Restricting Access to a Multicast Group Changing the IGMP Version Changing the IGMP HostQuery Message Interval Configuring Multicast Groups Removing Multicast Groups Configuring Multicast Router Ports Displaying Multicast Routers Configuring IGMP Snooping Disabling IGMP Snooping Configuring IGMP FastLeave Processing Disabling IGMP FastLeave Processing Displaying IGMP Statistics Displaying Multicast Routers Learned from IGMP Displaying IGMP Multicast Groups Configuring CGMP Disabling CGMP Enabling CGMP FastLeave Processing Disabling CGMP FastLeave Processing Displaying CGMP Statistics Configuring RGMP on the Switch Disabling RGMP on the Switch Configuring RGMP on the Router Disabling RGMP on the Router Displaying RGMP Groups Displaying RGMPCapable Router Ports 156 To display the ports to which RGMP routers are connected, use the following command: Displaying RGMP VLAN Statistics To display RGMP statistics, use the following command: Disabling GMRP Enabling GMRP on Individual Ports Disabling GMRP on Individual Ports Enabling GMRP ForwardAll Disabling GMRP ForwardAll Displaying the GMRP Configuration Setting GMRP Timers Displaying GMRP Timers Configuring BandwidthBased Suppression Configuring PacketBased Suppression Disabling Multicast Suppression Chapter 8: WAN Cell Switching ATM Overview LANE ATM Protocols ATM Circuit Switching ATM Cells Page The ATM Switch and ATM Endpoints The ATM Reference Model Page Specifying ATM Connections ATM Addressing Local Area Network Emulation (LANE) LANE Components Page Page Page Integrated Local Management Interface (ILMI) LANE Communication Page LANE Configuration Guidelines How LANE Works Implementing LANE Configuring ATM on the 5000 Switch Page Connecting in an ATM Network Monitoring and Maintaining LANE Accessing the ATM LANE Module Displaying the Selector Field Configuring the LES/BUS Verifying the LES/BUS Configuration Configuring a LEC for an ELAN Verifying a LEC Configuration on an ELAN Configuring the LECS Viewing the LANE Database Binding the LECS Address to an Interface Verifying the LECS Configuration Verify the proper setup with the following command: 182 Chapter 9: LightStream Switches LightStream 100 LightStream 1010 LightStream 2020 Neighborhood Discovery Function Virtual Path Connections LightStream Troubleshooting Tools LightStream Boot Process Supported Troubleshooting Protocols Snooping Mechanisms Multiprotocol Over ATM Configuring the Hostname Configuring an Enable Password Configuring the Processor Card Ethernet Interface Configuring Virtual Private Tunnels Verifying an ATM Interface Connection Status Viewing the Configured Virtual Connections Configuring the LECS ATM Address on a LightStream 1010 Configuring the Advertised LECS Address Viewing the LANE Configuration Related solution: Found on page: Verifying a LEC Configuration on an ELAN 272 Viewing the Installed Modules 192 Configuring the MPC Configuring the MPS Changing the MPS Variables Monitoring the MPS Enabling ILMI Autoconfiguration Configuring LANE on a LightStream 1010 Powering on the LightStream 100 ATM Switch Configuring the LS100 Switch Recovering a Lost Password 196 Page Page Chapter 10: Layer 2 Redundant Links Layer 2 Switching Overview Frames Broadcast and Multicast Frames Unknown Unicasts Layer 2 Network Loops Danger! Data Loops! Edsger Dijkstras Graph Theory STP Root Bridges Bridge Protocol Data Units Page Root Bridge Selection Page Spanning Tree Convergence Time STP Port States PerVLAN Spanning Tree EtherChannel Link Failure Port Aggregation Protocol Fast Convergence Components of STP PortFast UplinkFast BackboneFast Enabling STP on a Set/Clear CommandBased Switch Enabling STP on a Set/Clear CommandBased Switch for All VLANs Disabling STP on a Set/Clear CommandBased Switch Disabling STP on a Set/Clear CommandBased Switch by VLAN Viewing the STP Configuration on a Set/Clear CommandBased Configuring STP on an IOS CommandBased Switch Disabling STP on an IOS CommandBased Switch Viewing the STP Configuration on a Command Line Switch Configuring the STP Root Switch Configuring the STP Secondary Root Switch Setting the Root Bridge for More than One VLAN on a Set/Clear Assigning a Port Cost to a Port Using the Set/Clear Assigning a Port Cost to a Port Using a CLIBased Switch Page Page Adjusting the MaxAge Timer on a Set/Clear CommandBased Preparing to Enable EtherChannel Viewing the Port Setting for EtherChannel on a Set/Clear Creating an EtherChannel on a Set/Clear CommandBased another port that is in the desirable or auto mode. Verifying the EtherChannel Configuration 221 To verify the EtherChannel configuration on a Set/Clear commandbased switch, use this command: Defining an EtherChannel Administrative Group To define the administrative group, use the following Privileged mode command: Configuring EtherChannel on an IOSBased Switch Identifying the Template Port Verifying the EtherChannel Configuration on a Command Line Interface IOS Enabling PortFast on a Set/Clear CommandBased Switch Disabling PortFast on a Set/Clear CommandBased Switch Enabling PortFast on a CLIBased IOS Switch Disabling PortFast on a CLIBased IOS Switch Verifying the PortFast Configuration Enabling UplinkFast on a Set/Clear CommandBased Switch Disabling UplinkFast on a Set/Clear CommandBased Switch Verifying the UplinkFast Configuration Enabling UplinkFast on a Cisco IOS CommandBased Switch Disabling UplinkFast on a Cisco IOS CommandBased Switch Page Chapter 11: Multilayer Switching How MLS Works MLS Components Page MLS Flows Access List Flow Masks MLS Troubleshooting Notes Configuring MLS MLS Cache Aging Timers VLAN ID VTP Domain Management Interfaces Configuring an External MLS Route Processor Page Enabling MLS on an Individual Interface Disabling MLS on an External Router Interface Configuring the MLS Switch Engine Reenabling MLS on a Catalyst 6000 Page Page Monitoring and Viewing the MLS Configuration Viewing the MLS Aging Configuration on a Catalyst 6000 Displaying the IP MLS Configuration Viewing MLSRPs Viewing MLSRP Specifics Displaying MLS VTP Domain Information To display the MLS VTP domain information, enter the following command: 241 Viewing the MLS VLAN Interface Information Viewing MLS Statistics on the Catalyst 5000 Viewing MLS Statistics on the Catalyst 6000 242 Viewing MLS Entries To display all entries in the MLS cache, enter the following command: Chapter 12: Hot Standby Routing Protocol Routing Problems Routing Information Protocol Proxy ARP ICMP Router Discovery Protocol The Solution Page HSRP Message Format The HSRP States HSRP Configuration HSRP Interface Tracking Opening a Session on an Internal Route Processor Entering Configuration Mode on an RSM Enabling HSRP and Assigning an IP Address to a Standby Group Assigning an HSRP Interface Priority Assigning a Preempt Delay to a Standby Group Removing a Preempt Delay from a Standby Group Setting the HSRP Hello and Hold Timers Removing the HSRP Hello and Hold Timers Configuring a ClearText Password for HSRP Authentication Configuring Two RSFC Interfaces as One HSRP Group Enabling Interface Tracking Using the show standby Command Using the debug Command Chapter 13: Policy Networking Access Security Policies Core Layer Policies Distribution Layer Policies Page Page Page Page Page Security at the Access Layer Configuring Passwords Limiting Telnet Access Implementing Privilege Levels Configuring Banner Messages Physical Device Security Port Security VLAN Management Creating a Standard Access List Creating an Extended Access List Page Applying Access Lists Using accessclass Applying Access Lists Using distributelist Configuring a Telnet Session TimeOut Value Implementing Privilege Levels on a 1900EN Configuring Line Console TimeOut Values Configuring Banner Messages Enabling HTTP Access Enabling Port Security Displaying the MAC Address Table Page Chapter 14: Web Management Standard and Enterprise Edition CVSM CVSM Client Requirements CVSM Access Levels CVSM Default Home Page The Switch Image Configuring the Switch with an IP Address and Setting the Default Web Administration Port Connecting to the Web Management Console Page Page Page Page Configuring the Switch Port Analyzer Page Chapter 15: The Standard Edition IOS The 1900 and 2820 Series Switches Main Menu Choices [C] Console Settings [S] System Menu [N] Network Management Page Page [P] Port Configuration Page Page [A] Port Addressing [D] Port Statistics Detail [M] Monitor [V] Virtual LAN [R] Multicast Registration [F] Firmware [I] RS232 Interface [U] Usage Summaries 297 298 [X] ExitThis option returns you to the Main Menu. Configuring Network Settings on the 1900 and 2820 Series 1. Configuring Broadcast Storm Control on Switch Ports Configuring SNMP on the 1900 Series Page Page Configuring Port Monitoring on the Standard Edition IOS Configuring VLANs on the Standard Edition IOS Page Page Configuring Spanning Tree Protocol Page Chapter 16: Switch Troubleshooting Hardware Troubleshooting No Power POST Indicator Lights Switch Cabling Cable Problems CrossOver Cables Switch Troubleshooting Tools CiscoWorks for Switched Internetworks IOS Software Troubleshooting Commands Page Page Viewing the Set/Clear IOS Configuration Page Page Page Viewing the CLIBased IOS Configuration 320 Viewing the Software Version on a Set/Clear CommandBased IOS Module Viewing the IOS Version Information on a CLIBased IOS Using the show flash Command on a Set/Clear Note There is no comparable command on the 1900EN series switches. Testing the Supervisor Engine Hardware on a Set/Clear 322 Testing External Module Hardware on a Set/Clear Viewing the System Configuration on a Set/Clear Viewing the VTP Domain Configuration on a Set/Clear IOS Viewing the VTP Domain Configuration on a CLIBased IOS Viewing the VLAN Configuration on a Set/Clear Viewing the VLAN Configuration on a CLIBased IOS 325 Viewing the Spanning Tree Configuration on a Set/Clear Viewing the Spanning Tree Configuration on a CLIBased IOS 326 Page Viewing the CAM (MAC Address) Table on a Set/Clear Viewing the CAM (MAC Address) Table on a CLIBased IOS Viewing the CDP Neighbors on a Set/Clear CommandBased Viewing the CDP Neighbors on a CLIBased IOS Viewing Individual Port CAM Tables on a CLIBased IOS 330 Viewing Port Statistics on a Set/Clear IOS Page Viewing Port Statistics on a CLIBased IOS 332 Here is the output using the exception syntax: Using the Port Configuration on a Set/Clear CommandBased 333 Using the show port Command on a CLIBased IOS Using the show vlan Command on a Set/Clear CommandBased 334 Using the show vlan Command on a CLIBased IOS Using the show interface Command on a Set/Clear 335 Using the show interface Command on a CLIBased IOS Using the show log Command on a Set/Clear CommandBased 336 Configuring SPAN for Port Monitoring on a Set/Clear Configuring SPAN for VLAN Monitoring on a Set/Clear Launching the Diagnostic Console on a Cisco 1900 or 2820 Series Switch Using the Diagnostic Console to Upgrade the Firmware on a Cisco 1900 or 2820 Series Switch Using the Diagnostic Console for Debugging the Firmware and Hardware Here is an example of the output from the [M] Memory (CPU) I/O option: Here is an example of the output from the [F] Return System To Factory Defaults option: 340 Here is an example of the output from the [V] View management console password option: Appendix A: Study Resources Books Cisco Group Study and Users Groups Live Cisco Training/InternetBased Labs/Study Resources Online Resources Asynchronous Transfer Mode Cisco IOS Hot Standby Router Protocol InterSwitch Link Standards Organizations Cisco Job Search Sites Appendix B: Basic IOS CLItoSet/Clear Commands Page Appendix C: The Cisco Consultant Establishing Credibility Come Off As an Expert Designing a Solution Estimating the Cost Presenting the Final Proposal and Creating Expectations Contracting Document, Document, Document The Way to Fail Failing to Be There When Promised, or Rushing through the Job Failing to Manage Your Time Assuming You Know What the Customer Needs Failing to Take Responsibility Conclusion Appendix D: Cisco 1912EN and Catalyst 5000 Configuration Practice Lab Required Equipment Lab Objectives Possible Solution The 1912 Basic Configuration Page The Catalyst 5000 Basic Configuration Configuring the Cisco 2621 Interface for ISL Trunking Appendix E: Switch Features Access Layer Switches Cisco Catalyst 1900 Cisco Catalyst 2820 Cisco Catalyst 2900 Page Cisco Catalyst 3000 Cisco Catalyst 3500 Series XL Cisco Catalyst 3900 Series Distribution Layer Switches Cisco Catalyst 4000 Series Catalyst 5000 Series Catalyst 6000 Series Core Layer/WAN Switches Cisco Catalyst 8400 Series Cisco Catalyst 8500 Series BPX 8600 Series MGX 8800 Series 12000 Series Gigabit Switch Routers A Page B C Page D Page EF Page GI Page Page KL MN Page OP Page QR S Page T Page UX