Cisco 220 Series Smart Plus Instruction Manual

Cisco 220 Series Smart Plus Switches
Administration Guide Release 1.0.0.x
ADMINISTRATION
GUIDE

© 2014 Cisco Systems, Inc. All rights reserved. OL-30454-01
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Getting Started 7
Getting Started with the Web-based Interface 7
Before you Begin 8
Logging In To the Web-based Interface 8
HTTP/HTTPS 9
Changing the Administrative Password 10
Logging Out 11
Quick Start Switch Configuration 12
Interface Naming Conventions 13
Window Navigation 14
Application Header 14
Management Buttons 15
Status and Statistics 18
Viewing Ethernet Interface 18
Viewing Etherlike Statistics 20
Viewing TCAM Utilization 21
Viewing Fan Status and Temperature 22
Managing RMON 24
Viewing RMON Statistics 25
Configuring and Viewing RMON Histories 27
Configuring RMON History Control Samples 27
Viewing RMON History Statistics 28
Configuring and Viewing RMON Events 29
Configuring RMON Events 30
Viewing RMON Event Logs 31
Configuring RMON Alarms 31
Administration: System Logs 34
Configuring System Log Settings 34
Configuring Remote Logging Settings 36
Viewing Memory Logs 36
Viewing RAM Memory Logs 37
Viewing Flash Memory Logs 38
Administration: File Management 39
Files and File Types 39
File Actions 41
Upgrade/Backup Firmware/Language 42
Upgrading/Saving the Firmware Image 43
Upgrading the Language File 45
Active Image 46
Download/Backup Configuration or Logs 46
Uploading Configuration File 47
Saving Configuration File or Logs 48
Configuration File Properties 49
Copy/Save Configuration Files 50
DHCP Auto Configuration 51
DHCP Server Options 52

Auto Configuration Process 52
Configuring DHCP Auto Configuration Parameters 52
Administration: General Information 55
Device Models 56
Viewing System Summary 58
Configuring System Settings 60
Configuring Console Settings 61
Rebooting the Switch 61
Defining Idle Session Timeout 62
Ping a Host 63
Using Traceroute 63
Administration: Time Settings 65
System Time Options 66
Configuring System Time 66
Configuring SNTP Server 68
Administration: Diagnostics 69
Testing Copper Ports 69
Viewing Optical Module Status 70
Configuring Port and VLAN Mirroring 71
Viewing CPU Utilization 74
Administration: Discovery 75
Configuring Bonjour 75
LLDP and CDP 76
Configuring LLDP 77
Configuring LLDP Properties 79
Configuring LLDP Port Settings 80
Configuring LLDP MED Network Policy 81
Configuring LLDP MED Port Settings 83
Viewing LLDP Port Status 84
Viewing LLDP Local Information 85
Viewing LLDP Neighbors Information 88
Viewing LLDP Statistics 89
Viewing LLDP Overloading 89
Configuring CDP 92
Configuring CDP Properties 92
Configuring CDP Port Settings 94
Viewing CDP Local Information 95
Displaying CDP Neighbor Information 97
Viewing CDP Statistics 98
Port Management 100
Port Management Workflow 100
Configuring Basic Port Settings 101
Configuring Error Recovery Settings 104
Configuring Link Aggregation 105
Load Balancing 106
LAG Management 106

Static and Dynamic LAG Workflow 107
Configuring LAG Management 108
Configuring LAG Settings 109
Configuring LACP 110
LACP Priotity and Rules 110
LACP With No Link Partner 111
Configuring LACP Parameters 112
Configuring Energy Efficient Ethernet 113
Power-over-Ethernet 114
PoE Considerations 114
PoE on the Switch 116
PoE Features 116
PoE Operation 117
PoE Configuration Considerations 117
Configuring PoE Properties 118
Configuring PoE Port Settings 120
Managing VLANs 122
VLANs 122
VLAN Description 122
VLAN Roles 123
Workflow to Configure VLANs 124
Configuring Default VLAN 125
Creating VLANs 126
Configuring VLAN Interface Settings 127
Configuring Port to VLAN 128
Viewing VLAN Membership 129
Configuring GVRP 131
Configuring Voice VLAN 133
Dynamic Voice VLAN Modes 133
Voice VLAN Constraints 134
Voice VLAN Options 134
Configuring Voice VLAN Properties 135
Configuring Telephony OUI 135
Adding Interfaces to Voice VLAN on Basis of OUIs 137
Spanning Tree Protocol 139
STP Modes 139
Configuring STP Status and Global Settings 140
Configuring STP Interface Settings 142
Configuring RSTP Interface Settings 143
Configuring Multiple Spanning Tree 146
Configuring MSTP Properties 146
Mapping VLANs to an MST Instance 147
Configuring MSTP Instance Settings 148
Configuring MSTP Interface Settings 149
MAC Address Tables 152
Types of MAC Addresses 152

Configuring Static MAC Addresses 153
Configuring Static MAC Address Filter 154
Configuring Dynamic MAC Address Aging Time 154
Querying Dynamic Addresses 155
Configuring Reserved MAC Addresses 156
Multicast Forwarding 157
Multicast Forwarding 157
Typical Multicast Setup 158
Multicast Address Properties 160
Configuring Multicast Properties 160
Configuring IP Multicast Group Addresses 161
Configuring IGMP Snooping 162
Configuring MLD Snooping 165
Querying IGMP/MLD IP Multicast Groups 167
Configuring Multicast Router Ports 167
Configuring Forward All Multicast 168
Configuring Maximum IGMP and MLD Groups 169
Configuring Multicast Filtering 170
Configuring Multicast Filter Profiles 170
Configuring Interface Filter Settings 171
IP Configuration 172
IP Addressing 172
IPv4 Management and Interface 174
IPv6 Management and Interface 175
Configuring Domain Name System 176
Configuring General DNS Settings 177
Viewing Static and Dynamic DNS Servers 178
Configuring Host Mapping 178
Configuring Security 180
Configuring Users 181
Configuring TACACS+ Servers 182
Configuring RADIUS Servers 184
Configuring Management Access Methods 186
Access Profile Rules, Filters, and Elements 186
Active Access Profile 187
Configuring Access Profiles 188
Configuring Profile Rules 190
Configuring Password Complexity Rules 192
Configuring Management Access Authentication 193
Configuring TCP/UDP Services 195
Configuring Storm Control 197
Configuring Port Security 198
Configuring 802.1X 200
Guest VLAN 201
Workflow to configure 802.1X 201
Configuring 802.1X Properties 202

Configuring 802.1X Port Authentication 202
Viewing Authenticated Hosts 204
Configuring DoS Protection 205
Secure Core Technology (SCT) 205
Default Configuration 205
Configuring DoS Security Suite Settings 206
Configuring DoS Interface Settings 207
Configuring SYN Protection 208
Configuring DHCP Snooping 209
Configuring DHCP Snooping Properties 210
Configuring DHCP Snooping on VLANs 211
Configuring DHCP Snooping Trusted Interfaces 211
Querying DHCP Snooping Binding Database 212
Viewing Option 82 Statistics 213
Configuring Option 82 Interface Settings 214
Configuring Option 82 Port CID Settings 214
Configuring IP Source Guard 215
Configuring IP Source Guard Interface Settings 215
Quering IP Source Binding Database 216
Configuring Dynamic ARP Inspection 217
ARP Cache Poisoning 218
How ARP Prevents Cache Poisoning 219
Interaction Between ARP Inspection and DHCP Snooping 220
Workflow to configure ARP Inspection 220
Configuring ARP Inspection Properties 221
Configuring ARP Inspection Trusted Interfaces 221
Viewing ARP Inspection Statistics 222
Configuring ARP Inspection VLAN Settings 223
Access Control 224
Access Control Lists 224
Creating ACLs Workflow 226
Modifying ACLs Workflow 227
Configuring MAC-based ACLs 227
Configuring MAC-based ACEs 228
Configuring IPv4-based ACLs 229
Configuring IPv4-Based ACEs 230
Configuring IPv6-based ACLs 234
Configuring IPv6-based ACEs 234
Configuring ACL Binding 237
Quality of Service 239
QoS Features and Components 239
Workflow to Configure QoS Settings 241
Configuring QoS Properties 242
Configuring QoS Queues 243
Mapping CoS/802.1p to a Queue 244
Mapping IP Precedence to Queue 246

Mapping DSCP to Queue 246
Mapping Queues to CoS/802.1p 247
Mapping Queues to IP Precedences 247
Mapping Queue to DSCP 248
Configuring Interface Remark 248
Configuring Bandwidth 249
Configuring Egress Shaping per Queue 250
Configuring VLAN Rate Limit 251
Configuring VLAN Port Rate Limit 251
Configuring TCP Congestion Avoidance 252
Configuring QoS Basic Mode 253
Configuring Basic QoS Global Settings 254
Configuring Interface QoS Settings 254
Configuring QoS Advanced Mode 255
Configuring Advanced QoS Global Settings 257
Configuring Class Mapping 258
QoS Policers 259
Configuring Aggregate Policers 260
Configuring QoS Policies 261
Configuring Policy Class Maps 262
Configuring Policy Binding 263
SNMP 264
SNMP Versions and Workflow 264
SNMP v1 and v2 265
SNMP v3 265
SNMP Workflow 266
Supported MIBs 267
Model Object IDs 268
Configuring SNMP Engine ID 269
Configuring SNMP Views 270
Configuring SNMP Groups 271
Managing SNMP Users 273
Configuring SNMP Communities 274
Configuring SNMP Notification Recipients 275
Configuring SNMPv1,2 Notification Recipients 276
Configuring SNMPv3 Notification Recipients 277
Using the Console Interface 279
Connecting By Using a Terminal Emulation Application 279
Communicating by Using a Console Cable Connection 281
Communicating By Using a TCP/IP Connection 283
Connecting By Using Telnet 284
Where to Go From Here 285

1
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 7
Getting Started
This chapter provides an introduction to the web-based interface of the Cisco 220
switch and includes the following topics:
•Getting Started with the Web-based Interface
•Quick Start Switch Configuration
•Interface Naming Conventions
•Window Navigation
Getting Started with the Web-based Interface
The Cisco 220 switch can be accessed and managed by two methods; over your
IP network by using the web-based interface, or by using the command-line
interface through the console interface. Using the console interface requires
advanced user skills. See the
Cisco 220 Series Smart Plus Switches Command
Line Interface Reference Guide
for more information about using the console
interface.
This section includes the following topics:
•Before you Begin
•Logging In To the Web-based Interface
•HTTP/HTTPS
•Changing the Administrative Password
•Logging Out

Getting Started
Getting Started with the Web-based Interface
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x 8
1
Before you Begin
Before you begin to use the web-based interface, make sure that you have a
computer with Internet Explorer 8.0 (or higher), Firefox 20.0 (or higher), Chrome
23.0 (or higher), or Safari 5.7 (or higher).
These are the default settings used when configuring your switch for the first time:
Logging In To the Web-based Interface
To access the switch with the web-based interface, you must know the IP address
that the switch is using. The default configuration of the switch is to use its factory
default IP address of 192.168.1.254 until it has obtained an IP address from a
DHCP server.
NOTE If you are managing the switch through a network connection and the switch IP
address is changed, either by a DHCP server or manually, your access to the switch
will be lost. You must enter the new IP address that the switch is using into your
browser to use the web-based interface. If you are managing the switch through a
console port connection, the link is retained.
To configure the switch using the web-based interface:
STEP 1 Power on the computer and your switch.
STEP 2 Connect the computer to the switch.
You can connect to the same IP subnet as the switch by connecting them directly
with an Ethernet cable, or by connecting to the same LAN where the switch is
located through other switches. You can also connect your computer to the switch
from another IP subnet through one or more IP routers.
STEP 3 Locate the IP address of the switch.
a. The switch can be accessed and managed by Cisco network tools and
services including the Cisco FindIT Network Discovery Utility that enables you
to automatically discover all supported Cisco devices in the same local
network segment as your computer. You can get a snapshot view of each
Parameter Default Value
Username cisco
Password cisco
Switch IP 192.168.1.254