Cisco 220 Series Smart Plus Instruction Manual

Cisco 220 Series Smart Plus Switches
Administration Guide Release 1.0.0.x
ADMINISTRATION
GUIDE

© 2014 Cisco Systems, Inc. All rights reserved. OL-30454-01
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Getting Started 7
Getting Started with the Web-based Interface 7
Before you Begin 8
Logging In To the Web-based Interface 8
HTTP/HTTPS 9
Changing the Administrative Password 10
Logging Out 11
Quick Start Switch Configuration 12
Interface Naming Conventions 13
Window Navigation 14
Application Header 14
Management Buttons 15
Status and Statistics 18
Viewing Ethernet Interface 18
Viewing Etherlike Statistics 20
Viewing TCAM Utilization 21
Viewing Fan Status and Temperature 22
Managing RMON 24
Viewing RMON Statistics 25
Configuring and Viewing RMON Histories 27
Configuring RMON History Control Samples 27
Viewing RMON History Statistics 28
Configuring and Viewing RMON Events 29
Configuring RMON Events 30
Viewing RMON Event Logs 31
Configuring RMON Alarms 31
Administration: System Logs 34
Configuring System Log Settings 34
Configuring Remote Logging Settings 36
Viewing Memory Logs 36
Viewing RAM Memory Logs 37
Viewing Flash Memory Logs 38
Administration: File Management 39
Files and File Types 39
File Actions 41
Upgrade/Backup Firmware/Language 42
Upgrading/Saving the Firmware Image 43
Upgrading the Language File 45
Active Image 46
Download/Backup Configuration or Logs 46
Uploading Configuration File 47
Saving Configuration File or Logs 48
Configuration File Properties 49
Copy/Save Configuration Files 50
DHCP Auto Configuration 51
DHCP Server Options 52

Auto Configuration Process 52
Configuring DHCP Auto Configuration Parameters 52
Administration: General Information 55
Device Models 56
Viewing System Summary 58
Configuring System Settings 60
Configuring Console Settings 61
Rebooting the Switch 61
Defining Idle Session Timeout 62
Ping a Host 63
Using Traceroute 63
Administration: Time Settings 65
System Time Options 66
Configuring System Time 66
Configuring SNTP Server 68
Administration: Diagnostics 69
Testing Copper Ports 69
Viewing Optical Module Status 70
Configuring Port and VLAN Mirroring 71
Viewing CPU Utilization 74
Administration: Discovery 75
Configuring Bonjour 75
LLDP and CDP 76
Configuring LLDP 77
Configuring LLDP Properties 79
Configuring LLDP Port Settings 80
Configuring LLDP MED Network Policy 81
Configuring LLDP MED Port Settings 83
Viewing LLDP Port Status 84
Viewing LLDP Local Information 85
Viewing LLDP Neighbors Information 88
Viewing LLDP Statistics 89
Viewing LLDP Overloading 89
Configuring CDP 92
Configuring CDP Properties 92
Configuring CDP Port Settings 94
Viewing CDP Local Information 95
Displaying CDP Neighbor Information 97
Viewing CDP Statistics 98
Port Management 100
Port Management Workflow 100
Configuring Basic Port Settings 101
Configuring Error Recovery Settings 104
Configuring Link Aggregation 105
Load Balancing 106
LAG Management 106

Static and Dynamic LAG Workflow 107
Configuring LAG Management 108
Configuring LAG Settings 109
Configuring LACP 110
LACP Priotity and Rules 110
LACP With No Link Partner 111
Configuring LACP Parameters 112
Configuring Energy Efficient Ethernet 113
Power-over-Ethernet 114
PoE Considerations 114
PoE on the Switch 116
PoE Features 116
PoE Operation 117
PoE Configuration Considerations 117
Configuring PoE Properties 118
Configuring PoE Port Settings 120
Managing VLANs 122
VLANs 122
VLAN Description 122
VLAN Roles 123
Workflow to Configure VLANs 124
Configuring Default VLAN 125
Creating VLANs 126
Configuring VLAN Interface Settings 127
Configuring Port to VLAN 128
Viewing VLAN Membership 129
Configuring GVRP 131
Configuring Voice VLAN 133
Dynamic Voice VLAN Modes 133
Voice VLAN Constraints 134
Voice VLAN Options 134
Configuring Voice VLAN Properties 135
Configuring Telephony OUI 135
Adding Interfaces to Voice VLAN on Basis of OUIs 137
Spanning Tree Protocol 139
STP Modes 139
Configuring STP Status and Global Settings 140
Configuring STP Interface Settings 142
Configuring RSTP Interface Settings 143
Configuring Multiple Spanning Tree 146
Configuring MSTP Properties 146
Mapping VLANs to an MST Instance 147
Configuring MSTP Instance Settings 148
Configuring MSTP Interface Settings 149
MAC Address Tables 152
Types of MAC Addresses 152

Configuring Static MAC Addresses 153
Configuring Static MAC Address Filter 154
Configuring Dynamic MAC Address Aging Time 154
Querying Dynamic Addresses 155
Configuring Reserved MAC Addresses 156
Multicast Forwarding 157
Multicast Forwarding 157
Typical Multicast Setup 158
Multicast Address Properties 160
Configuring Multicast Properties 160
Configuring IP Multicast Group Addresses 161
Configuring IGMP Snooping 162
Configuring MLD Snooping 165
Querying IGMP/MLD IP Multicast Groups 167
Configuring Multicast Router Ports 167
Configuring Forward All Multicast 168
Configuring Maximum IGMP and MLD Groups 169
Configuring Multicast Filtering 170
Configuring Multicast Filter Profiles 170
Configuring Interface Filter Settings 171
IP Configuration 172
IP Addressing 172
IPv4 Management and Interface 174
IPv6 Management and Interface 175
Configuring Domain Name System 176
Configuring General DNS Settings 177
Viewing Static and Dynamic DNS Servers 178
Configuring Host Mapping 178
Configuring Security 180
Configuring Users 181
Configuring TACACS+ Servers 182
Configuring RADIUS Servers 184
Configuring Management Access Methods 186
Access Profile Rules, Filters, and Elements 186
Active Access Profile 187
Configuring Access Profiles 188
Configuring Profile Rules 190
Configuring Password Complexity Rules 192
Configuring Management Access Authentication 193
Configuring TCP/UDP Services 195
Configuring Storm Control 197
Configuring Port Security 198
Configuring 802.1X 200
Guest VLAN 201
Workflow to configure 802.1X 201
Configuring 802.1X Properties 202

Configuring 802.1X Port Authentication 202
Viewing Authenticated Hosts 204
Configuring DoS Protection 205
Secure Core Technology (SCT) 205
Default Configuration 205
Configuring DoS Security Suite Settings 206
Configuring DoS Interface Settings 207
Configuring SYN Protection 208
Configuring DHCP Snooping 209
Configuring DHCP Snooping Properties 210
Configuring DHCP Snooping on VLANs 211
Configuring DHCP Snooping Trusted Interfaces 211
Querying DHCP Snooping Binding Database 212
Viewing Option 82 Statistics 213
Configuring Option 82 Interface Settings 214
Configuring Option 82 Port CID Settings 214
Configuring IP Source Guard 215
Configuring IP Source Guard Interface Settings 215
Quering IP Source Binding Database 216
Configuring Dynamic ARP Inspection 217
ARP Cache Poisoning 218
How ARP Prevents Cache Poisoning 219
Interaction Between ARP Inspection and DHCP Snooping 220
Workflow to configure ARP Inspection 220
Configuring ARP Inspection Properties 221
Configuring ARP Inspection Trusted Interfaces 221
Viewing ARP Inspection Statistics 222
Configuring ARP Inspection VLAN Settings 223
Access Control 224
Access Control Lists 224
Creating ACLs Workflow 226
Modifying ACLs Workflow 227
Configuring MAC-based ACLs 227
Configuring MAC-based ACEs 228
Configuring IPv4-based ACLs 229
Configuring IPv4-Based ACEs 230
Configuring IPv6-based ACLs 234
Configuring IPv6-based ACEs 234
Configuring ACL Binding 237
Quality of Service 239
QoS Features and Components 239
Workflow to Configure QoS Settings 241
Configuring QoS Properties 242
Configuring QoS Queues 243
Mapping CoS/802.1p to a Queue 244
Mapping IP Precedence to Queue 246

Mapping DSCP to Queue 246
Mapping Queues to CoS/802.1p 247
Mapping Queues to IP Precedences 247
Mapping Queue to DSCP 248
Configuring Interface Remark 248
Configuring Bandwidth 249
Configuring Egress Shaping per Queue 250
Configuring VLAN Rate Limit 251
Configuring VLAN Port Rate Limit 251
Configuring TCP Congestion Avoidance 252
Configuring QoS Basic Mode 253
Configuring Basic QoS Global Settings 254
Configuring Interface QoS Settings 254
Configuring QoS Advanced Mode 255
Configuring Advanced QoS Global Settings 257
Configuring Class Mapping 258
QoS Policers 259
Configuring Aggregate Policers 260
Configuring QoS Policies 261
Configuring Policy Class Maps 262
Configuring Policy Binding 263
SNMP 264
SNMP Versions and Workflow 264
SNMP v1 and v2 265
SNMP v3 265
SNMP Workflow 266
Supported MIBs 267
Model Object IDs 268
Configuring SNMP Engine ID 269
Configuring SNMP Views 270
Configuring SNMP Groups 271
Managing SNMP Users 273
Configuring SNMP Communities 274
Configuring SNMP Notification Recipients 275
Configuring SNMPv1,2 Notification Recipients 276
Configuring SNMPv3 Notification Recipients 277
Using the Console Interface 279
Connecting By Using a Terminal Emulation Application 279
Communicating by Using a Console Cable Connection 281
Communicating By Using a TCP/IP Connection 283
Connecting By Using Telnet 284
Where to Go From Here 285

1
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 7
Getting Started
This chapter provides an introduction to the web-based interface of the Cisco 220
switch and includes the following topics:
•Getting Started with the Web-based Interface
•Quick Start Switch Configuration
•Interface Naming Conventions
•Window Navigation
Getting Started with the Web-based Interface
The Cisco 220 switch can be accessed and managed by two methods; over your
IP network by using the web-based interface, or by using the command-line
interface through the console interface. Using the console interface requires
advanced user skills. See the
Cisco 220 Series Smart Plus Switches Command
Line Interface Reference Guide
for more information about using the console
interface.
This section includes the following topics:
•Before you Begin
•Logging In To the Web-based Interface
•HTTP/HTTPS
•Changing the Administrative Password
•Logging Out

Getting Started
Getting Started with the Web-based Interface
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 8
1
Before you Begin
Before you begin to use the web-based interface, make sure that you have a
computer with Internet Explorer 8.0 (or higher), Firefox 20.0 (or higher), Chrome
23.0 (or higher), or Safari 5.7 (or higher).
These are the default settings used when configuring your switch for the first time:
Logging In To the Web-based Interface
To access the switch with the web-based interface, you must know the IP address
that the switch is using. The default configuration of the switch is to use its factory
default IP address of 192.168.1.254 until it has obtained an IP address from a
DHCP server.
NOTE If you are managing the switch through a network connection and the switch IP
address is changed, either by a DHCP server or manually, your access to the switch
will be lost. You must enter the new IP address that the switch is using into your
browser to use the web-based interface. If you are managing the switch through a
console port connection, the link is retained.
To configure the switch using the web-based interface:
STEP 1 Power on the computer and your switch.
STEP 2 Connect the computer to the switch.
You can connect to the same IP subnet as the switch by connecting them directly
with an Ethernet cable, or by connecting to the same LAN where the switch is
located through other switches. You can also connect your computer to the switch
from another IP subnet through one or more IP routers.
STEP 3 Locate the IP address of the switch.
a. The switch can be accessed and managed by Cisco network tools and
services including the Cisco FindIT Network Discovery Utility that enables you
to automatically discover all supported Cisco devices in the same local
network segment as your computer. You can get a snapshot view of each
Parameter Default Value
Username cisco
Password cisco
Switch IP 192.168.1.254

Getting Started
Getting Started with the Web-based Interface
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 9
1
device or launch the product configuration utility to view and configure the
settings. For more information about FindIT, see www.cisco.com/go/findit.
b. Locate the IP address assigned by your DHCP server by accessing your router
or DHCP server; see your DHCP server instructions for information. Make sure
that your DHCP server is running and can be reached.
STEP 4 Set up the IP configuration on your computer.
•If the switch is using the default static IP address of 192.168.1.254, you
must choose an IP address in the range of 192.168.1.2 to 192.168.1.253 that
is not already in use.
•If the IP addresses will be assigned by DHCP, make sure that your DHCP
server is running and can be reached from the switch and the computer. You
may need to disconnect and reconnect the devices for them to discover their
new IP addresses from the DHCP server.
NOTE Details on how to change the IP address on your computer depend upon the
type of architecture and operating system that you are using. Use your computers
local Help and Support functionality and search for “IP Addressing.”
STEP 5 Open a web browser window. If you are prompted to install an Active-X plug-in
when connecting to the switch, follow the prompts to accept the plug-in.
STEP 6 Enter the IP address of the switch that you are configuring in the address bar on
the browser, and then press Enter. For example, http://192.168.1.254.
STEP 7 When the login page appears, choose the language that you prefer to use in the
web-based interface and enter the username and password.
The default username is cisco and the default password is cisco. Both username
and password are case sensitive.
STEP 8 Click Log In.
The first time that you log in with the default username and password, you are
required to enter a new password. The Change Password page opens.
HTTP/HTTPS
You can either open an HTTP session (not secured) by clicking Log In, or you can
open an HTTPS (secured) session by clicking Secure Browsing (HTTPS). You are
asked to approve the logon with a default RSA key, and an HTTPS session is
opened.

Getting Started
Getting Started with the Web-based Interface
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 10
1
NOTE There is no need to input the username or password prior to clicking Secure
Browsing (HTTPS).
Changing the Administrative Password
For security purposes you are required to change the administrative password at
your first login or when the current administrative password expires.
Password complexity is enabled by default. The minimum password complexity
requirements are shown on the page. The new password must comply with the
default complexity rules or it can be disabled temporarily by selecting Disable
Password Strength Enforcement. See the Configuring Password Complexity
Rules section for more details about password complexity.
To change the password:
STEP 1 Enter the following fields to set a new administrative password:
•Old Password—Enter the current password (default is cisco).
•Password—Enter a new password.
•Confirm Password—Enter the new password again for confirmation.
•Password Strength Meter—Displays the strength of the new password.
•Disable Password Strength Enforcement—The password strength
enforcement enabled by default requires the password to conform to the
following default settings:
-Is different from the current username.
-Has a minimum length of eight characters.
-Contains characters from at least three character classes (uppercase
letters, lowercase letters, numbers, and special characters available on a
standard keyboard).
NOTE If you do not want to change the password, check Disable Password
Strength Enforcement and click Apply. You are not required to set a new
password and can be directed to the Getting Started page.
STEP 2 Click Apply.

Getting Started
Getting Started with the Web-based Interface
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 11
1
The Getting Started page page opens. You are now ready to configure the switch.
STEP 3 Check Do not show this page on startup to prevent the Getting Started page
from being displayed each time that you logon to the switch. If you select this
option, the System Summary page is opened instead of the Getting Started page.
Logging Out
By default, the application logs out after ten minutes of inactivity. You can change
this default value as described in the Defining Idle Session Timeout section.
!
CAUTION Unless the Running Configuration is copied to the Startup Configuration, all
changes made since the last time the file was saved are lost if the switch is
rebooted. Save the Running Configuration to the Startup Configuration before
logging off to preserve any changes that you made during this session.
A red X icon displayed to the left of the Save application link indicates that Running
Configuration changes have been made have not yet been saved to the Startup
Configuration file. The flashing red Xcan be displayed by clicking the Disable Save
Icon Blinking button on the Copy/Save Configuration page.
When the switch auto-discovers a device, such as an IP phone, it configures the
port appropriately for the device. These configuration commands are written to the
Running Configuration file. This causes the Save icon to begin blinking when the
user logs on even though the user did not make any configuration changes.
When you click Save, the Copy/Save Configuration page is displayed. Save the
Running Configuration file by copying it to the Startup Configuration file. After this
save, the red Xicon and the Save application link are no longer displayed.
To logout, click Logout at the top right corner of any page. The system logs out of
the switch.
When a timeout occurs or you intentionally log out of the switch, a message is
displayed and the login page opens, with a message indicating the logged-out
state. After you log in, the application returns to the initial page.

Getting Started
Quick Start Switch Configuration
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 12
1
The initial page displayed depends on the “Do not show this page on startup”
option on the Getting Started page. If you did not select this option, the initial page
is the Getting Started page. If you did select this option, the initial page is the
System Summary page.
Quick Start Switch Configuration
To simplify switch configuration through quick navigation, the Getting Started
page provides links to the most commonly used pages.
Category Link Name (on the Page) Linked Page
Initial
Setup
Change Management
Applications and Services
Security > TCP/UDP Services
page
Change Device IP Address Administration > Management
Interface > IPv4 Interface page
Create VLAN VLAN Management > Create
VLAN page
Configure Port Settings Port Management > Port Setting
page
Device
Status
System Summary Status and Statistics > System
Summary page
Port Statistics Status and Statistics > Interface
page
RMON Statistics Status and Statistics > RMON >
Statistics page
View Log Status and Statistics > View Log >
RAM Memory page

Getting Started
Interface Naming Conventions
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 13
1
There are two hot links on the Getting Started page that take you to Cisco web
pages for more information. Clicking on the Support link takes you to the device
product support page, and clicking on the Forums link takes you to the Cisco
Support Community page.
Interface Naming Conventions
Within the web-based interface, interfaces are denoted by concatenating the
following elements:
•Type of interface—The following types of interfaces are found on the
various types of devices:
-Fast Ethernet (10/100 bits)—These are displayed as FE.
-Gigabit Ethernet (10/100/1000 bits)—These are displayed as GE.
-LAG (Port Channel)—These are displayed as LAG.
-VLAN—These are displayed as VLAN.
Quick
Access
Change Device Password Administration > User Accounts
page
Upgrade Device Software Administration > File Management
> Upgrade/Backup Firmware/
Language page
Backup Device
Configuration
Administration > File Management
> Download/Backup
Configuration/Log page
Create MAC-Based ACL Access Control > MAC-Based ACL
page
Create IP-Based ACL Access Control > IPv4-Based ACL
page
Configure QoS Quality of Service > General >
QoS Properties page
Configure Port Mirroring Administration > Diagnostics >
Port and VLAN Mirroring page
Category Link Name (on the Page) Linked Page

Getting Started
Window Navigation
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 14
1
-Tunnel —These are displayed as Tunnel.
•Interface Number—Port, LAG, tunnel, or VLAN ID.
Window Navigation
This section describes the features of the web-based interface.
Application Header
Application Header
The Application Header appears on every page. It provides the following
application links:
Application Link
Name
Description
Save
A flashing red Xicon displayed to the left of the Save
application link indicates that Running Configuration
changes have been made have not yet been saved to
the Startup Configuration file. The flashing of the red X
can be disabled on the Copy/Save Configuration page.
Click Save to display the Copy/Save Configuration
page. Save the Running Configuration file by copying it
to the Startup Configuration file type on the switch.
After this save, the red Xicon and the Save application
link are no longer displayed. When the switch is
rebooted, it copies the Startup Configuration to the
Running Configuration and sets the switch parameters
according to the data in the Running Configuration.
Username Displays the name of the user logged on to the switch.
The default username is cisco. (The default password
is cisco)

Getting Started
Window Navigation
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 15
1
Management Buttons
Management Buttons
The following table describes the commonly-used buttons that appear on various
pages in the system.
Language Menu This menu provides the following options:
•Select a language: Select one of the languages
that appear in the menu. This language will be
the web-based interface language.
•Download Language: Add a new language to
the switch. To upgrade a language file, use the
Upgrade/Backup Firmware/Language page.
•Delete Language: Deletes the second
language on the switch. The first language
(English) cannot be deleted.
Logout Click to log out of the web-based interface.
About Click to display the switch name and device version
number.
Help Click to display the online help.
Alert
The SYSLOG Alert Status icon appears when a
SYSLOG message, above the critical severity level, is
logged. Click the icon to open the RAM Memory page.
After you access this page, the SYSLOG Alert Status
icon is no longer displayed. To display the page when
there is not an active SYSLOG message, click Status
and Statistics > View Log > RAM Memory.
Application Link
Name
Description
Button Name Description
Use the pull-down menu to configure the number of
entries per page.

Getting Started
Window Navigation
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 16
1
Indicates a mandatory field.
Add Click to display the related Add page and add an entry
to a table. Enter the information and click Apply to save
it to the Running Configuration. Click Close to return to
the main page. Click Save to display the Copy/Save
Configuration page and save the Running
Configuration to the Startup Configuration file type on
the switch.
Apply Click to apply the changes to the Running
Configuration on the switch. If the switch is rebooted,
the Running Configuration is lost, unless it is saved to
the Startup Configuration file type or another file type.
Click Save to display the Copy/Save Configuration
page and save the Running Configuration to the
Startup Configuration file type on the switch.
Cancel Click to reset the changes made on the page.
Clear All Interfaces
Counters
Click to clear the statistics counters for all interfaces.
Clear Interface
Counters
Click to clear the statistics counters for the selected
interface.
Clear Logs Clears log files.
Clear Table Clears table entries.
Close Returns to the main page. If any changes were not
applied to the Running Configuration, a message
appears.
Copper Test Click Copper Test to perform the related test.
Button Name Description

Getting Started
Window Navigation
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 17
1
Copy Settings A table typically contains one or more entries
containing configuration settings. Instead of modifying
each entry individually, it is possible to modify one
entry and then copy the selected entry to multiple
entries, as described below:
1. Select the entr y to be copied. Click Copy Settings
to display the popup.
2. Enter the destination entry numbers in the to field.
3. Click Apply to save the changes and click Close to
return to the main page.
Delete After selecting an entry in the table, click Delete to
remove.
Details Click to display the details associated with the entry
selected.
Edit Select the entry and click Edit. The Edit page appears,
and the entry can be modified.
1. Click Apply to save the changes to the Running
Configuration.
2. Click Close to return to the main page.
Go Enter the query filtering criteria and click Go. The
results are displayed on the page.
Refresh Click to manually refresh the data on the page.
View All Interfaces
Statistics
Click to see the statistics counters for all interfaces on
a single page.
View Interface
Statistics
Click to see the statistics counters for the selected
interface on a single page.
Button Name Description

2
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 18
Status and Statistics
This chapter describes how to view switch statistics, and includes the following
topics:
•Viewing Ethernet Interface
•Viewing Etherlike Statistics
•Viewing TCAM Utilization
•Viewing Fan Status and Temperature
•Managing RMON
Viewing Ethernet Interface
The Interface page displays traffic statistics per interface. The refresh rate of the
information can be selected. This page is useful for analyzing the amount of traffic
that is both sent and received and its dispersion (Unicast, Multicast, and
Broadcast).
To view Ethernet statistics and/or set the refresh rate:
STEP 1 Click Status and Statistics > Interface.
STEP 2 Enter the following information:
•Interface—Select the port or LAG for which the Ethernet statistics are
displayed.
•Refresh Rate—Select the time period that passes before the Ethernet
statistics are refreshed. The available options are:
-
No Refresh —Statistics are not refreshed.
-
15 sec —Statistics are refreshed every 15 seconds.
-
30 sec —Statistics are refreshed every 30 seconds.