Cisco 7604 User manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Cisco 7600 Series Router
Cisco IOS Software Configuration Guide
Release 12.2(18)SXF and Rebuilds and Earlier Releases
Text Part Number: OL-4266-08

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX and Rebuilds and Erarlier Releases
© 2001–2009, Cisco Systems, Inc. All rights reserved.

1
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
CONTENTS
Preface 30
Audience 30
Related Documentation 30
Conventions 31
Product Overview 1
Supported Hardware and Software 1
User Interfaces 1
Configuring Embedded CiscoView Support 2
Understanding Embedded CiscoView 2
Installing and Configuring Embedded CiscoView 2
Displaying Embedded CiscoView Information 3
Software Features Supported in Hardware by the PFC and DFC 3
Command-Line Interfaces 1
Accessing the CLI 2
Accessing the CLI through the EIA/TIA-232 Console Interface 2
Accessing the CLI through Telnet 2
Performing Command Line Processing 3
Performing History Substitution 4
Cisco IOS Command Modes 4
Displaying a List of Cisco IOS Commands and Syntax 5
Securing the CLI 6
ROM-Monitor Command-Line Interface 7
Configuring the Router for the First Time 1
Default Configuration 2
Configuring the Router 2
Using the Setup Facility or the setup Command 2
Using Configuration Mode 10
Checking the Running Configuration Before Saving 10
Saving the Running Configuration Settings 11

Contents
2
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Reviewing the Configuration 11
Configuring a Default Gateway 12
Configuring a Static Route 12
Configuring a BOOTP Server 14
Protecting Access to Privileged EXEC Commands 15
Setting or Changing a Static Enable Password 15
Using the enable password and enable secret Commands 15
Setting or Changing a Line Password 16
Setting TACACS+ Password Protection for Privileged EXEC Mode 16
Encrypting Passwords 17
Configuring Multiple Privilege Levels 17
Recovering a Lost Enable Password 19
Modifying the Supervisor Engine Startup Configuration 20
Understanding the Supervisor Engine Boot Configuration 20
Configuring the Software Configuration Register 21
Specifying the Startup System Image 24
Understanding Flash Memory 24
CONFIG_FILE Environment Variable 25
Controlling Environment Variables 26
Configuring a Supervisor Engine 720 1
Using the Bootflash or Bootdisk on a Supervisor Engine 720 2
Using the Slots on a Supervisor Engine 720 2
Configuring Supervisor Engine 720 Ports 2
Configuring and Monitoring the Switch Fabric Functionality 2
Understanding How the Switch Fabric Functionality Works 3
Configuring the Switch Fabric Functionality 4
Monitoring the Switch Fabric Functionality 4
Configuring a Supervisor Engine 32 1
Flash Memory on a Supervisor Engine 32 2
Supervisor Engine 32 Ports 2
Configuring the Supervisor Engine 2 and the Switch Fabric Module 1
Using the Slots on a Supervisor Engine 2 1
Understanding How the Switch Fabric Module Works 2

Contents
3
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Switch Fabric Module Overview 2
Switch Fabric Module Slots 2
Switch Fabric Redundancy 2
Forwarding Decisions for Layer 3-Switched Traffic 2
Switching Modes 3
Configuring the Switch Fabric Module 3
Configuring the Switching Mode 4
Configuring Fabric-Required Mode 4
Configuring an LCD Message 5
Monitoring the Switch Fabric Module 5
Displaying the Module Information 7
Displaying the Switch Fabric Module Redundancy Status 7
Displaying Fabric Channel Switching Modes 7
Displaying the Fabric Status 8
Displaying the Fabric Utilization 8
Displaying Fabric Errors 8
Configuring NSF with SSO Supervisor Engine Redundancy 1
Understanding NSF with SSO Supervisor Engine Redundancy 1
NSF with SSO Supervisor Engine Redundancy Overview 2
SSO Operation 2
NSF Operation 3
Cisco Express Forwarding 3
Multicast MLS NSF with SSO 4
Routing Protocols 4
NSF Benefits and Restrictions 8
Supervisor Engine Configuration Synchronization 9
Supervisor Engine Redundancy Guidelines and Restrictions 9
Redundancy Configuration Guidelines and Restrictions 10
Hardware Configuration Guidelines and Restrictions 10
Configuration Mode Restrictions 11
NSF Configuration Tasks 11
Configuring SSO 12
Configuring Multicast MLS NSF with SSO 12
Verifying Multicast NSF with SSO 13
Configuring CEF NSF 13
Verifying CEF NSF 13
Configuring BGP NSF 14

Contents
4
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Verifying BGP NSF 14
Configuring OSPF NSF 15
Verifying OSPF NSF 15
Configuring IS-IS NSF 16
Verifying IS-IS NSF 17
Configuring EIGRP NSF 19
Verifying EIGRP NSF 19
Synchronizing the Supervisor Engine Configurations 20
Copying Files to the Redundant Supervisor Engine 20
Configuring RPR and RPR+ Supervisor Engine Redundancy 1
Understanding RPR and RPR+ 2
Supervisor Engine Redundancy Overview 2
RPR Operation 2
RPR+ Operation 3
Supervisor Engine Configuration Synchronization 3
Supervisor Engine Redundancy Guidelines and Restrictions 4
Redundancy Guidelines and Restrictions 4
RPR+ Guidelines and Restrictions 5
Hardware Configuration Guidelines and Restrictions 5
Configuration Mode Restrictions 6
Configuring Supervisor Engine Redundancy 6
Configuring Redundancy 6
Synchronizing the Supervisor Engine Configurations 7
Displaying the Redundancy States 7
Performing a Fast Software Upgrade 8
Copying Files to an MSFC 9
Configuring Interfaces 1
Understanding Interface Configuration 2
Using the Interface Command 2
Configuring a Range of Interfaces 4
Defining and Using Interface-Range Macros 6
Configuring Optional Interface Features 6
Configuring Ethernet Interface Speed and Duplex Mode 7
Configuring Jumbo Frame Support 10

Contents
5
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring IEEE 802.3x Flow Control 13
Configuring the Port Debounce Timer 14
Adding a Description for an Interface 16
Understanding Online Insertion and Removal 16
Monitoring and Maintaining Interfaces 17
Monitoring Interface Status 17
Clearing Counters on an Interface 17
Resetting an Interface 18
Shutting Down and Restarting an Interface 18
Checking the Cable Status Using the TDR 19
Configuring LAN Ports for Layer 2 Switching 1
Understanding How Layer 2 Switching Works 1
Understanding Layer 2 Ethernet Switching 2
Understanding VLAN Trunks 3
Layer 2 LAN Port Modes 4
Default Layer 2 LAN Interface Configuration 5
Layer 2 LAN Interface Configuration Guidelines and Restrictions 5
Configuring LAN Interfaces for Layer 2 Switching 6
Configuring a LAN Port for Layer 2 Switching 7
Configuring a Layer 2 Switching Port as a Trunk 8
Configuring a LAN Interface as a Layer 2 Access Port 14
Configuring a Custom IEEE 802.1Q EtherType Field Value 15
Configuring Flex Links 1
Understanding Flex Links 1
Configuring Flex Links 2
Flex Links Default Configuration 2
Flex Links Configuration Guidelines and Restrictions 2
Configuring Flex Links 3
Monitoring Flex Links 4
Configuring EtherChannels 1
Understanding How EtherChannels Work 1
EtherChannel Feature Overview 2
Understanding How EtherChannels Are Configured 2

Contents
6
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Understanding Port Channel Interfaces 5
Understanding Load Balancing 5
EtherChannel Feature Configuration Guidelines and Restrictions 5
Configuring EtherChannels 7
Configuring Port Channel Logical Interfaces for Layer 3 EtherChannels 7
Configuring Channel Groups 8
Configuring the LACP System Priority and System ID 10
Configuring EtherChannel Load Balancing 11
Configuring the EtherChannel Min-Links Feature 12
Configuring VTP 1
Understanding How VTP Works 1
Understanding the VTP Domain 2
Understanding VTP Modes 2
Understanding VTP Advertisements 3
Understanding VTP Version 2 3
Understanding VTP Pruning 4
VTP Default Configuration 5
VTP Configuration Guidelines and Restrictions 5
Configuring VTP 6
Configuring VTP Global Parameters 6
Configuring the VTP Mode 9
Displaying VTP Statistics 10
Configuring VLANs 1
Understanding How VLANs Work 1
VLAN Overview 2
VLAN Ranges 2
Configurable VLAN Parameters 3
Understanding Token Ring VLANs 3
VLAN Default Configuration 6
VLAN Configuration Guidelines and Restrictions 8
Configuring VLANs 9
VLAN Configuration Options 9
Creating or Modifying an Ethernet VLAN 10
Assigning a Layer 2 LAN Interface to a VLAN 12

Contents
7
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring the Internal VLAN Allocation Policy 12
Configuring VLAN Translation 13
Mapping 802.1Q VLANs to ISL VLANs 16
Saving VLAN Information 17
Configuring Private VLANs 1
Understanding How Private VLANs Work 1
Private VLAN Domains 2
Private VLAN Ports 3
Primary, Isolated, and Community VLANs 3
Private VLAN Port Isolation 4
IP Addressing Scheme with Private VLANs 4
Private VLANs Across Multiple Routers 5
Private VLAN Interaction with Other Features 5
Private VLAN Configuration Guidelines and Restrictions 6
Secondary and Primary VLAN Configuration 7
Private VLAN Port Configuration 9
Limitations with Other Features 9
Configuring Private VLANs 11
Configuring a VLAN as a Private VLAN 11
Associating Secondary VLANs with a Primary VLAN 12
Mapping Secondary VLANs to the Layer 3 VLAN Interface of a Primary VLAN 13
Configuring a Layer 2 Interface as a Private VLAN Host Port 14
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port 15
Monitoring Private VLANs 17
Configuring Cisco IP Phone Support 1
Understanding Cisco IP Phone Support 1
Cisco IP Phone Connections 2
Cisco IP Phone Voice Traffic 2
Cisco IP Phone Data Traffic 3
Cisco IP Phone Power Configurations 3
Other Cisco IP Phone Features 4
Default Cisco IP Phone Support Configuration 5
Cisco IP Phone Support Configuration Guidelines and Restrictions 5
Configuring Cisco IP Phone Support 6

Contents
8
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring Voice Traffic Support 6
Configuring Data Traffic Support 7
Configuring Inline Power Support 8
Configuring IEEE 802.1Q Tunneling 1
Understanding How 802.1Q Tunneling Works 1
802.1Q Tunneling Configuration Guidelines and Restrictions 3
Configuring 802.1Q Tunneling 6
Configuring 802.1Q Tunnel Ports 6
Configuring the Router to Tag Native VLAN Traffic 6
Configuring Layer 2 Protocol Tunneling 1
Understanding How Layer 2 Protocol Tunneling Works 1
Configuring Support for Layer 2 Protocol Tunneling 2
Configuring Standard-Compliant IEEE MST 1
Understanding MST 1
MST Overview 2
MST Regions 2
IST, CIST, and CST 3
Hop Count 6
Boundary Ports 6
Standard-Compliant MST Implementation 7
Interoperability with IEEE 802.1D-1998 STP 9
Understanding RSTP 9
Port Roles and the Active Topology 10
Rapid Convergence 11
Synchronization of Port Roles 12
Bridge Protocol Data Unit Format and Processing 13
Topology Changes 15
Configuring MST 15
Default MST Configuration 16
MST Configuration Guidelines and Restrictions 16
Specifying the MST Region Configuration and Enabling MST 17
Configuring the Root Bridge 19
Configuring a Secondary Root Bridge 20
Configuring Port Priority 21
Configuring Path Cost 22

Contents
9
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring the Switch Priority 23
Configuring the Hello Time 24
Configuring the Forwarding-Delay Time 25
Configuring the Transmit Hold Count 25
Configuring the Maximum-Aging Time 26
Configuring the Maximum-Hop Count 26
Specifying the Link Type to Ensure Rapid Transitions 26
Designating the Neighbor Type 27
Restarting the Protocol Migration Process 28
Displaying the MST Configuration and Status 28
Configuring STP and Prestandard IEEE 802.1s MST 1
Understanding How STP Works 2
STP Overview 2
Understanding the Bridge ID 2
Understanding Bridge Protocol Data Units 4
Election of the Root Bridge 4
STP Protocol Timers 5
Creating the Spanning Tree Topology 5
STP Port States 6
STP and IEEE 802.1Q Trunks 12
Understanding How IEEE 802.1w RSTP Works 13
IEEE 802.1w RSTP Overview 13
RSTP Port Roles 13
RSTP Port States 14
Rapid-PVST 14
Understanding How Prestandard IEEE 802.1s MST Works 14
IEEE 802.1s MST Overview 15
MST-to-PVST Interoperability 16
Common Spanning Tree 18
MST Instances 18
MST Configuration Parameters 18
MST Regions 19
Message Age and Hop Count 20
Default STP Configuration 21
STP and MST Configuration Guidelines and Restrictions 21
Configuring STP 22
Enabling STP 22

Contents
10
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Enabling the Extended System ID 24
Configuring the Root Bridge 24
Configuring a Secondary Root Bridge 26
Configuring STP Port Priority 27
Configuring STP Port Cost 28
Configuring the Bridge Priority of a VLAN 30
Configuring the Hello Time 31
Configuring the Forward-Delay Time for a VLAN 32
Configuring the Maximum Aging Time for a VLAN 32
Enabling Rapid-PVST 33
Configuring Prestandard IEEE 802.1s MST 33
Enabling MST 34
Displaying MST Configurations 35
Configuring MST Instance Parameters 39
Configuring MST Instance Port Parameters 40
Restarting Protocol Migration 40
Configuring Optional STP Features 1
Understanding How PortFast Works 2
Understanding How BPDU Guard Works 2
Understanding How PortFast BPDU Filtering Works 2
Understanding How UplinkFast Works 3
Understanding How BackboneFast Works 4
Understanding How EtherChannel Guard Works 6
Understanding How Root Guard Works 7
Understanding How Loop Guard Works 7
Enabling PortFast 8
Enabling PortFast BPDU Filtering 10
Enabling BPDU Guard 12
Enabling UplinkFast 12
Enabling BackboneFast 13
Enabling EtherChannel Guard 14
Enabling Root Guard 14
Enabling Loop Guard 15

Contents
11
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring Layer 3 Interfaces 1
Layer 3 Interface Configuration Guidelines and Restrictions 2
Configuring Subinterfaces on Layer 3 Interfaces 2
Configuring IPv4 Routing and Addresses 4
Configuring IPX Routing and Network Numbers 8
Configuring AppleTalk Routing, Cable Ranges, and Zones 9
Configuring Other Protocols on Layer 3 Interfaces 10
Configuring UDE and UDLR 1
Understanding UDE and UDLR 1
UDE and UDLR Overview 1
Supported Hardware 2
Understanding UDE 2
Understanding UDLR 3
Configuring UDE and UDLR 3
Configuring UDE 3
Configuring UDLR 6
Configuring PFC3BXL and PFC3B Mode Multiprotocol Label Switching 1
PFC3BXL and PFC3B Mode MPLS Label Switching 1
Understanding MPLS 2
Understanding PFC3BXL and PFC3B Mode MPLS Label Switching 2
Supported Hardware Features 5
Supported Cisco IOS Features 5
MPLS Guidelines and Restrictions 7
PFC3BXL and PFC3B Mode MPLS Supported Commands 7
Configuring MPLS 8
MPLS Per-Label Load Balancing 8
MPLS Configuration Examples 8
PFC3BXL or PFC3B Mode VPN Switching 10
PFC3BXL or PFC3B Mode VPN Switching Operation 10
MPLS VPN Guidelines and Restrictions 11
PFC3BXL or PFC3B Mode MPLS VPN Supported Commands 11
Configuring MPLS VPN 11
MPLS VPN Sample Configuration 12
Any Transport over MPLS 13
AToM Load Balancing 14

Contents
12
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Understanding EoMPLS 14
EoMPLS Guidelines and Restrictions 14
Configuring EoMPLS 16
Configuring IPv4 Multicast VPN Support 1
Understanding How MVPN Works 1
MVPN Overview 2
Multicast Routing and Forwarding and Multicast Domains 2
Multicast Distribution Trees 2
Multicast Tunnel Interfaces 5
PE Router Routing Table Support for MVPN 6
Multicast Distributed Switching Support 6
Hardware-Assisted IPv4 Multicast 6
MVPN Configuration Guidelines and Restrictions 7
Configuring MVPN 8
Forcing Ingress Multicast Replication Mode (Optional) 8
Configuring a Multicast VPN Routing and Forwarding Instance 9
Configuring Multicast VRF Routing 15
Configuring Interfaces for Multicast Routing to Support MVPN 20
Sample Configurations for MVPN 22
MVPN Configuration with Default MDTs Only 22
MVPN Configuration with Default and Data MDTs 24
Configuring IP Unicast Layer 3 Switching 1
Understanding How Layer 3 Switching Works 2
Understanding Hardware Layer 3 Switching 2
Understanding Layer 3-Switched Packet Rewrite 2
Default Hardware Layer 3 Switching Configuration 4
Configuration Guidelines and Restrictions 4
Configuring Hardware Layer 3 Switching 5
Displaying Hardware Layer 3 Switching Statistics 6
Configuring IPv6 Multicast PFC3 and DFC3 Layer 3 Switching 1
Features that Support IPv6 Multicast 2
IPv6 Multicast Guidelines and Restrictions 2
New or Changed IPv6 Multicast Commands 3
Configuring IPv6 Multicast Layer 3 Switching 3

Contents
13
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Using show Commands to Verify IPv6 Multicast Layer 3 Switching 3
Verifying MFIB Clients 4
Displaying the Switching Capability 5
Verifying the (S,G) Forwarding Capability 5
Verifying the (*,G) Forwarding Capability 5
Verifying the Subnet Entry Support Status 5
Verifying the Current Replication Mode 5
Displaying the Replication Mode Auto Detection Status 6
Displaying the Replication Mode Capabilities 6
Displaying Subnet Entries 6
Displaying the IPv6 Multicast Summary 6
Displaying the NetFlow Hardware Forwarding Count 7
Displaying the FIB Hardware Bridging and Drop Counts 7
Displaying the Shared and Well-Known Hardware Adjacency Counters 8
Configuring IPv4 Multicast Layer 3 Switching 1
Understanding How IPv4 Multicast Layer 3 Switching Works 1
IPv4 Multicast Layer 3 Switching Overview 2
Multicast Layer 3 Switching Cache 2
Layer 3-Switched Multicast Packet Rewrite 3
Partially and Completely Switched Flows 4
Non-RPF Traffic Processing 5
Multicast Boundary 7
Understanding How IPv4 Bidirectional PIM Works 7
Default IPv4 Multicast Layer 3 Switching Configuration 7
IPv4 Multicast Layer 3 Switching Configuration Guidelines and Restrictions 8
Restrictions 8
Unsupported Features 9
Configuring IPv4 Multicast Layer 3 Switching 9
Source-Specific Multicast with IGMPv3, IGMP v3lite, and URD 10
Enabling IPv4 Multicast Routing Globally 10
Enabling IPv4 PIM on Layer 3 Interfaces 10
Enabling IP Multicast Layer 3 Switching Globally 11
Enabling IP Multicast Layer 3 Switching on Layer 3 Interfaces 11
Configuring the Replication Mode 12
Enabling Local Egress Replication 14
Configuring the Layer 3 Switching Global Threshold 15
Enabling Installation of Directly Connected Subnets 15

Contents
14
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Specifying the Flow Statistics Message Interval 16
Enabling Shortcut-Consistency Checking 16
Configuring ACL-Based Filtering of RPF Failures 17
Displaying RPF Failure Rate-Limiting Information 17
Configuring Multicast Boundary 18
Displaying IPv4 Multicast Layer 3 Hardware Switching Summary 18
Displaying the IPv4 Multicast Routing Table 21
Displaying IPv4 Multicast Layer 3 Switching Statistics 22
Configuring IPv4 Bidirectional PIM 23
Enabling IPv4 Bidirectional PIM Globally 23
Configuring the Rendezvous Point for IPv4 Bidirectional PIM Groups 24
Setting the IPv4 Bidirectional PIM Scan Interval 24
Displaying IPv4 Bidirectional PIM Information 25
Using IPv4 Debug Commands 27
Clearing IPv4 Multicast Layer 3 Switching Statistics 27
Redundancy for Multicast Traffic 28
Configuring MLDv2 Snooping for IPv6 Multicast Traffic 1
Understanding How MLDv2 Snooping Works 2
MLDv2 Snooping Overview 2
MLDv2 Messages 3
Source-Based Filtering 3
Explicit Host Tracking 3
MLDv2 Snooping Proxy Reporting 4
Joining an IPv6 Multicast Group 4
Leaving a Multicast Group 6
Understanding the MLDv2 Snooping Querier 7
Default MLDv2 Snooping Configuration 8
MLDv2 Snooping Configuration Guidelines and Restrictions 8
MLDv2 Snooping Querier Configuration Guidelines and Restrictions 8
Enabling the MLDv2 Snooping Querier 9
Configuring MLDv2 Snooping 10
Enabling MLDv2 Snooping 10
Configuring a Static Connection to a Multicast Receiver 11
Configuring a Multicast Router Port Statically 11
Configuring the MLD Snooping Query Interval 12
Enabling Fast-Leave Processing 13

Contents
15
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Enabling SSM Safe Reporting 13
Configuring Explicit Host Tracking 14
Configuring Report Suppression 14
Displaying MLDv2 Snooping Information 15
Configuring IGMP Snooping for IPv4 Multicast Traffic 1
Understanding How IGMP Snooping Works 1
IGMP Snooping Overview 2
Joining a Multicast Group 2
Leaving a Multicast Group 4
Understanding the IGMP Snooping Querier 5
Understanding IGMP Version 3 Support 5
Default IGMP Snooping Configuration 7
IGMP Snooping Configuration Guidelines and Restrictions 8
IGMP Snooping Querier Configuration Guidelines and Restrictions 8
Enabling the IGMP Snooping Querier 9
Configuring IGMP Snooping 9
Enabling IGMP Snooping 10
Configuring a Static Connection to a Multicast Receiver 11
Configuring a Multicast Router Port Statically 11
Configuring the IGMP Snooping Query Interval 11
Enabling IGMP Fast-Leave Processing 12
Configuring Source Specific Multicast (SSM) Mapping 12
Enabling SSM Safe Reporting 13
Configuring IGMPv3 Explicit Host Tracking 13
Displaying IGMP Snooping Information 14
Configuring PIM Snooping 1
Understanding How PIM Snooping Works 1
Default PIM Snooping Configuration 4
PIM Snooping Configuration Guidelines and Restrictions 4
Configuring PIM Snooping 5
Enabling PIM Snooping Globally 5
Enabling PIM Snooping in a VLAN 5
Disabling PIM Snooping Designated-Router Flooding 6

Contents
16
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Configuring RGMP 1
Understanding How RGMP Works 1
Default RGMP Configuration 2
RGMP Configuration Guidelines and Restrictions 2
Enabling RGMP on Layer 3 Interfaces 3
Configuring Network Security 1
Configuring MAC Address-Based Traffic Blocking 2
Configuring TCP Intercept 2
Configuring Unicast Reverse Path Forwarding Check 2
Understanding PFC3 Unicast RPF Check Support 2
Understanding PFC2 Unicast RPF Check Support 3
Unicast RPF Check Guidelines and Restrictions 3
Configuring Unicast RPF Check 3
Understanding Cisco IOS ACL Support 1
Cisco IOS ACL Configuration Guidelines and Restrictions 1
Hardware and Software ACL Support 2
Configuring IPv6 Address Compression 3
Optimized ACL Logging with a PFC3 5
Understanding OAL 5
OAL Guidelines and Restrictions 5
Configuring OAL 6
Guidelines and Restrictions for Using Layer 4 Operators in ACLs 7
Determining Layer 4 Operation Usage 8
Determining Logical Operation Unit Usage 8
Configuring VLAN ACLs 1
Understanding VACLs 1
VACL Overview 2
Bridged Packets 2
Routed Packets 3
Multicast Packets 4
Configuring VACLs 4
VACL Configuration Overview 5
Defining a VLAN Access Map 5
Configuring a Match Clause in a VLAN Access Map Sequence 6
Configuring an Action Clause in a VLAN Access Map Sequence 7

Contents
17
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Applying a VLAN Access Map 8
Verifying VLAN Access Map Configuration 8
VLAN Access Map Configuration and Verification Examples 9
Configuring a Capture Port 9
Configuring VACL Logging 11
Configuring Denial of Service Protection 1
Understanding How DoS Protection Works 2
DoS Protection with a PFC2 2
DoS Protection with a PFC3 10
DoS Protection Default Configuration 21
DoS Protection Configuration Guidelines and Restrictions 22
PFC2 22
PFC3 23
Monitoring Packet Drop Statistics 24
Displaying Rate-Limiter Information 26
Understanding How Control Plane Policing Works 28
CoPP Default Configuration 28
CoPP Configuration Guidelines and Restrictions 28
Configuring CoPP 29
Monitoring CoPP 31
Defining Traffic Classification 32
Traffic Classification Overview 32
Traffic Classification Guidelines 33
Sample Basic ACLs for CoPP Traffic Classification 33
Configuring Sticky ARP 34
Configuring DHCP Snooping 1
Understanding DHCP Snooping 1
Overview of DHCP Snooping 2
Trusted and Untrusted Sources 2
DHCP Snooping Binding Database 2
Packet Validation 3
DHCP Snooping Option-82 Data Insertion 3
Overview of the DHCP Snooping Database Agent 5
Default Configuration for DHCP Snooping 6

Contents
18
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
DHCP Snooping Configuration Restrictions and Guidelines 7
DHCP Snooping Configuration Restrictions 7
DHCP Snooping Configuration Guidelines 7
Minimum DHCP Snooping Configuration 8
Configuring DHCP Snooping 9
Enabling DHCP Snooping Globally 9
Enabling DHCP Option-82 Data Insertion 10
Enabling the DHCP Option-82 on Untrusted Port Feature 10
Enabling DHCP Snooping MAC Address Verification 11
Enabling DHCP Snooping on VLANs 12
Configuring the DHCP Trust State on Layer 2 LAN Interfaces 13
Configuring DHCP Snooping Rate Limiting on Layer 2 LAN Interfaces 14
Configuring the DHCP Snooping Database Agent 14
Configuration Examples for the Database Agent 15
Displaying a Binding Table 18
Configuring Dynamic ARP Inspection 1
Understanding DAI 1
Understanding ARP 2
Understanding ARP Spoofing Attacks 2
Understanding DAI and ARP Spoofing Attacks 2
Interface Trust States and Network Security 3
Rate Limiting of ARP Packets 4
Relative Priority of ARP ACLs and DHCP Snooping Entries 4
Logging of Dropped Packets 5
Default DAI Configuration 5
DAI Configuration Guidelines and Restrictions 6
Configuring DAI 6
Enabling DAI on VLANs 7
Configuring the DAI Interface Trust State 8
Applying ARP ACLs for DAI Filtering 8
Configuring ARP Packet Rate Limiting 9
Enabling DAI Error-Disabled Recovery 11
Enabling Additional Validation 11
Configuring DAI Logging 13
Displaying DAI Information 15
DAI Configuration Samples 16