Cisco WS-SUP32-GE-3B - Supervisor Engine 32 User manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst Supervisor Engine 32 PISA
Cisco IOS Software Configuration Guide
Release 12.2(18)ZY and Later Releases
Text Part Number: OL-11439-03

HE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
© 2007–2009, Cisco Systems, Inc. All rights reserved.

iii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
CONTENTS
Preface xxix
Audience 1-xxix
Related Documentation 1-xxix
Conventions 1-xxx
1-xxxi
Product Overview 1-1
Supported Hardware and Software 1-1
User Interfaces 1-1
Configuring Embedded CiscoView Support 1-2
Understanding Embedded CiscoView 1-2
Installing and Configuring Embedded CiscoView 1-2
Displaying Embedded CiscoView Information 1-3
Software Features Supported in Hardware by the PFC3B 1-3
Command-Line Interfaces 2-1
Accessing the CLI 2-1
Accessing the CLI through the EIA/TIA-232 Console Interface 2-2
Accessing the CLI through Telnet 2-2
Performing Command Line Processing 2-3
Performing History Substitution 2-3
Cisco IOS Command Modes 2-4
Displaying a List of Cisco IOS Commands and Syntax 2-5
Securing the CLI 2-6
ROM-Monitor Command-Line Interface 2-7
Configuring the Switch for the First Time 3-1
Default Configuration 3-1
Configuring the Switch 3-2
Using the Setup Facility or the setup Command 3-2
Using Configuration Mode 3-10
Checking the Running Configuration Before Saving 3-10
Saving the Running Configuration Settings 3-11

Contents
iv
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Reviewing the Configuration 3-11
Configuring a Static Route 3-11
Configuring a BOOTP Server 3-13
Protecting Access to Privileged EXEC Commands 3-14
Setting or Changing a Static Enable Password 3-14
Using the enable password and enable secret Commands 3-15
Setting or Changing a Line Password 3-15
Setting TACACS+ Password Protection for Privileged EXEC Mode 3-16
Encrypting Passwords 3-16
Configuring Multiple Privilege Levels 3-17
Recovering a Lost Enable Password 3-18
Modifying the Supervisor Engine Startup Configuration 3-19
Understanding the Supervisor Engine Boot Configuration 3-19
Configuring the Software Configuration Register 3-20
Specifying the Startup System Image 3-23
Understanding Flash Memory 3-24
CONFIG_FILE Environment Variable 3-25
Controlling Environment Variables 3-25
Configuring a Supervisor Engine 32 PISA 4-1
Flash Memory on a Supervisor Engine 32 PISA 4-2
Supervisor Engine 32 PISA Ports 4-2
Supervisor Engine 32 PISA Management Ports 4-2
Supervisor Engine 32 PISA Data Ports 4-2
Configuring Full PISA EtherChannel Bandwidth 4-3
Displaying PISA Platform Statistics 4-4
Configuring NSF with SSO Supervisor Engine Redundancy 5-1
Understanding NSF with SSO Supervisor Engine Redundancy 5-1
NSF with SSO Supervisor Engine Redundancy Overview 5-2
SSO Operation 5-2
NSF Operation 5-2
Cisco Express Forwarding 5-3
Multicast MLS NSF with SSO 5-3
Routing Protocols 5-4
NSF Benefits and Restrictions 5-7

Contents
v
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Supervisor Engine Configuration Synchronization 5-9
Supervisor Engine Redundancy Guidelines and Restrictions 5-9
Redundancy Configuration Guidelines and Restrictions 5-9
Hardware Configuration Guidelines and Restrictions 5-9
Configuration Mode Restrictions 5-10
NSF Configuration Tasks 5-10
Configuring SSO 5-11
Configuring Multicast MLS NSF with SSO 5-11
Verifying Multicast NSF with SSO 5-12
Configuring CEF NSF 5-12
Verifying CEF NSF 5-12
Configuring BGP NSF 5-13
Verifying BGP NSF 5-13
Configuring OSPF NSF 5-14
Verifying OSPF NSF 5-14
Configuring IS-IS NSF 5-15
Verifying IS-IS NSF 5-16
Configuring EIGRP NSF 5-18
Verifying EIGRP NSF 5-18
Synchronizing the Supervisor Engine Configurations 5-19
Copying Files to the Redundant Supervisor Engine 5-19
Configuring RPR Supervisor Engine Redundancy 6-1
Understanding RPR 6-1
Supervisor Engine Redundancy Overview 6-2
RPR Operation 6-2
Supervisor Engine Configuration Synchronization 6-3
Supervisor Engine Redundancy Guidelines and Restrictions 6-3
Redundancy Guidelines and Restrictions 6-3
Hardware Configuration Guidelines and Restrictions 6-3
Configuration Mode Restrictions 6-4
Configuring Supervisor Engine Redundancy 6-4
Configuring Redundancy 6-4
Synchronizing the Supervisor Engine Configurations 6-5
Displaying the Redundancy States 6-5
Performing a Fast Software Upgrade 6-6
Copying Files to the Redundant Supervisor Engine 6-7

Contents
vi
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring Interfaces 7-1
Understanding Interface Configuration 7-2
Using the Interface Command 7-2
Configuring a Range of Interfaces 7-4
Defining and Using Interface-Range Macros 7-5
Configuring Optional Interface Features 7-6
Configuring Ethernet Interface Speed and Duplex Mode 7-7
Configuring Jumbo Frame Support 7-10
Configuring IEEE 802.3x Flow Control 7-13
Configuring the Port Debounce Timer 7-14
Adding a Description for an Interface 7-15
Understanding Online Insertion and Removal 7-16
Monitoring and Maintaining Interfaces 7-16
Monitoring Interface Status 7-17
Clearing Counters on an Interface 7-17
Resetting an Interface 7-18
Shutting Down and Restarting an Interface 7-18
Checking the Cable Status Using the TDR 7-19
Configuring LAN Ports for Layer 2 Switching 8-1
Understanding How Layer 2 Switching Works 8-1
Understanding Layer 2 Ethernet Switching 8-1
Understanding VLAN Trunks 8-2
Layer 2 LAN Port Modes 8-4
Default Layer 2 LAN Interface Configuration 8-5
Layer 2 LAN Interface Configuration Guidelines and Restrictions 8-5
Configuring LAN Interfaces for Layer 2 Switching 8-6
Configuring a LAN Port for Layer 2 Switching 8-7
Configuring a Layer 2 Switching Port as a Trunk 8-8
Configuring a LAN Interface as a Layer 2 Access Port 8-14
Configuring a Custom IEEE 802.1Q EtherType Field Value 8-15
Configuring Flex Links 9-1
Understanding Flex Links 9-1
Configuring Flex Links 9-2
Flex Links Default Configuration 9-2
Flex Links Configuration Guidelines and Restrictions 9-2

Contents
vii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring Flex Links 9-3
Monitoring Flex Links 9-3
Configuring EtherChannels 10-1
Understanding How EtherChannels Work 10-1
EtherChannel Feature Overview 10-1
Understanding How EtherChannels Are Configured 10-2
Understanding Port Channel Interfaces 10-4
Understanding Load Balancing 10-4
EtherChannel Feature Configuration Guidelines and Restrictions 10-5
Configuring EtherChannels 10-6
Configuring Port Channel Logical Interfaces for Layer 3 EtherChannels 10-6
Configuring Channel Groups 10-7
Configuring the LACP System Priority and System ID 10-10
Configuring EtherChannel Load Balancing 10-10
Configuring the EtherChannel Min-Links Feature 10-11
Configuring VTP 11-1
Understanding How VTP Works 11-1
Understanding the VTP Domain 11-2
Understanding VTP Modes 11-2
Understanding VTP Advertisements 11-3
Understanding VTP Version 2 11-3
Understanding VTP Pruning 11-3
VTP Default Configuration 11-5
VTP Configuration Guidelines and Restrictions 11-5
Configuring VTP 11-6
Configuring VTP Global Parameters 11-6
Configuring the VTP Mode 11-8
Displaying VTP Statistics 11-10
Configuring VLANs 12-1
Understanding How VLANs Work 12-1
VLAN Overview 12-1
VLAN Ranges 12-2
Configurable VLAN Parameters 12-3
Understanding Token Ring VLANs 12-3
VLAN Default Configuration 12-6

Contents
viii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
VLAN Configuration Guidelines and Restrictions 12-8
Configuring VLANs 12-9
VLAN Configuration Options 12-9
Creating or Modifying an Ethernet VLAN 12-10
Assigning a Layer 2 LAN Interface to a VLAN 12-11
Configuring the Internal VLAN Allocation Policy 12-12
Configuring VLAN Translation 12-12
Mapping 802.1Q VLANs to ISL VLANs 12-15
Saving VLAN Information 12-16
Configuring Private VLANs 13-1
Understanding How Private VLANs Work 13-1
Private VLAN Domains 13-2
Private VLAN Ports 13-3
Primary, Isolated, and Community VLANs 13-3
Private VLAN Port Isolation 13-4
IP Addressing Scheme with Private VLANs 13-4
Private VLANs Across Multiple Switches 13-5
Private VLAN Interaction with Other Features 13-5
Private VLAN Configuration Guidelines and Restrictions 13-6
Secondary and Primary VLAN Configuration 13-7
Private VLAN Port Configuration 13-9
Limitations with Other Features 13-9
Configuring Private VLANs 13-11
Configuring a VLAN as a Private VLAN 13-11
Associating Secondary VLANs with a Primary VLAN 13-12
Mapping Secondary VLANs to the Layer 3 VLAN Interface of a Primary VLAN 13-13
Configuring a Layer 2 Interface as a Private VLAN Host Port 13-14
Configuring a Layer 2 Interface as a Private VLAN Promiscuous Port 13-15
Monitoring Private VLANs 13-17
Configuring Cisco IP Phone Support 14-1
Understanding Cisco IP Phone Support 14-1
Cisco IP Phone Connections 14-1
Cisco IP Phone Voice Traffic 14-2
Cisco IP Phone Data Traffic 14-3
Cisco IP Phone Power Configurations 14-3

Contents
ix
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Default Cisco IP Phone Support Configuration 14-5
Cisco IP Phone Support Configuration Guidelines and Restrictions 14-6
Configuring Cisco IP Phone Support 14-6
Configuring Voice Traffic Support 14-7
Configuring Data Traffic Support 14-8
Configuring Inline Power Support 14-9
Configuring IEEE 802.1Q Tunneling 15-1
Understanding How 802.1Q Tunneling Works 15-1
802.1Q Tunneling Configuration Guidelines and Restrictions 15-3
Configuring 802.1Q Tunneling 15-6
Configuring 802.1Q Tunnel Ports 15-6
Configuring the Switch to Tag Native VLAN Traffic 15-6
Configuring Layer 2 Protocol Tunneling 16-1
Understanding How Layer 2 Protocol Tunneling Works 16-1
Configuring Support for Layer 2 Protocol Tunneling 16-2
Configuring STP and MST 17-1
Understanding How STP Works 17-1
STP Overview 17-2
Understanding the Bridge ID 17-2
Understanding Bridge Protocol Data Units 17-3
Election of the Root Bridge 17-4
STP Protocol Timers 17-4
Creating the Spanning Tree Topology 17-4
STP Port States 17-5
STP and IEEE 802.1Q Trunks 17-11
Understanding How IEEE 802.1w RSTP Works 17-12
Port Roles and the Active Topology 17-12
Rapid Convergence 17-13
Synchronization of Port Roles 17-14
Bridge Protocol Data Unit Format and Processing 17-15
Topology Changes 17-17
Rapid-PVST 17-17
Understanding MST 17-17
MST Overview 17-18
MST Regions 17-18

Contents
x
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
IST, CIST, and CST 17-19
Hop Count 17-22
Boundary Ports 17-22
Standard-Compliant MST Implementation 17-23
Interoperability with IEEE 802.1D-1998 STP 17-25
Configuring STP 17-25
Default STP Configuration 17-26
Enabling STP 17-26
Enabling the Extended System ID 17-28
Configuring the Root Bridge 17-28
Configuring a Secondary Root Bridge 17-29
Configuring STP Port Priority 17-30
Configuring STP Port Cost 17-32
Configuring the Bridge Priority of a VLAN 17-33
Configuring the Hello Time 17-34
Configuring the Forward-Delay Time for a VLAN 17-35
Configuring the Maximum Aging Time for a VLAN 17-35
Enabling Rapid-PVST 17-36
Configuring MST 17-37
Default MST Configuration 17-37
MST Configuration Guidelines and Restrictions 17-38
Specifying the MST Region Configuration and Enabling MST 17-38
Configuring the Root Bridge 17-40
Configuring a Secondary Root Bridge 17-41
Configuring Port Priority 17-42
Configuring Path Cost 17-43
Configuring the Switch Priority 17-44
Configuring the Hello Time 17-45
Configuring the Forwarding-Delay Time 17-46
Configuring the Transmit Hold Count 17-46
Configuring the Maximum-Aging Time 17-47
Configuring the Maximum-Hop Count 17-47
Specifying the Link Type to Ensure Rapid Transitions 17-47
Designating the Neighbor Type 17-48
Restarting the Protocol Migration Process 17-49
Displaying the MST Configuration and Status 17-49

Contents
xi
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring Optional STP Features 18-1
Understanding How PortFast Works 18-2
Understanding How BPDU Guard Works 18-2
Understanding How PortFast BPDU Filtering Works 18-2
Understanding How UplinkFast Works 18-3
Understanding How BackboneFast Works 18-4
Understanding How EtherChannel Guard Works 18-6
Understanding How Root Guard Works 18-6
Understanding How Loop Guard Works 18-6
Enabling PortFast 18-8
Enabling PortFast BPDU Filtering 18-10
Enabling BPDU Guard 18-11
Enabling UplinkFast 18-12
Enabling BackboneFast 18-13
Enabling EtherChannel Guard 18-14
Enabling Root Guard 18-14
Enabling Loop Guard 18-15
Configuring Layer 3 Interfaces 19-1
Layer 3 Interface Configuration Guidelines and Restrictions 19-1
Configuring Subinterfaces on Layer 3 Interfaces 19-2
Configuring IPv4 Routing and Addresses 19-3
Configuring IPX Routing and Network Numbers 19-6
Configuring AppleTalk Routing, Cable Ranges, and Zones 19-7
Configuring Other Protocols on Layer 3 Interfaces 19-8
Configuring UDE and UDLR 20-1
Understanding UDE and UDLR 20-1
UDE and UDLR Overview 20-1
Supported Hardware 20-2
Understanding UDE 20-2
Understanding UDLR 20-3
Configuring UDE and UDLR 20-3
Configuring UDE 20-3
Configuring UDLR 20-6

Contents
xii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring Multiprotocol Label Switching 21-1
MPLS Label Switching 21-1
Understanding MPLS 21-2
Understanding MPLS Label Switching 21-2
Supported Hardware Features 21-4
Supported Cisco IOS Features 21-5
MPLS Guidelines and Restrictions 21-7
MPLS Supported Commands 21-7
Configuring MPLS 21-7
MPLS Per-Label Load Balancing 21-7
MPLS Configuration Examples 21-8
VPN Switching 21-9
VPN Switching Operation 21-10
MPLS VPN Guidelines and Restrictions 21-11
MPLS VPN Supported Commands 21-11
Configuring MPLS VPN 21-11
MPLS VPN Sample Configuration 21-12
Any Transport over MPLS 21-13
AToM Load Balancing 21-14
Understanding EoMPLS 21-14
EoMPLS Guidelines and Restrictions 21-14
Configuring EoMPLS 21-16
Configuring IPv4 Multicast VPN Support 22-1
Understanding How MVPN Works 22-1
MVPN Overview 22-1
Multicast Routing and Forwarding and Multicast Domains 22-2
Multicast Distribution Trees 22-2
Multicast Tunnel Interfaces 22-5
PE Router Routing Table Support for MVPN 22-6
Multicast Distributed Switching Support 22-6
Hardware-Assisted IPv4 Multicast 22-6
MVPN Configuration Guidelines and Restrictions 22-7
Configuring MVPN 22-8
Forcing Ingress Multicast Replication Mode (Optional) 22-8
Configuring a Multicast VPN Routing and Forwarding Instance 22-9

Contents
xiii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring Multicast VRF Routing 22-15
Configuring Interfaces for Multicast Routing to Support MVPN 22-20
Sample Configurations for MVPN 22-22
MVPN Configuration with Default MDTs Only 22-22
MVPN Configuration with Default and Data MDTs 22-24
Configuring IP Unicast Layer 3 Switching 23-1
Understanding How Layer 3 Switching Works 23-1
Understanding Hardware Layer 3 Switching 23-2
Understanding Layer 3-Switched Packet Rewrite 23-2
Default Hardware Layer 3 Switching Configuration 23-4
Configuration Guidelines and Restrictions 23-4
Configuring Hardware Layer 3 Switching 23-4
Displaying Hardware Layer 3 Switching Statistics 23-5
Configuring IPv6 Multicast PFC3B Layer 3 Switching 24-1
Features that Support IPv6 Multicast 24-1
IPv6 Multicast Guidelines and Restrictions 24-2
New or Changed IPv6 Multicast Commands 24-3
Configuring IPv6 Multicast Layer 3 Switching 24-3
Using show Commands to Verify IPv6 Multicast Layer 3 Switching 24-3
Verifying MFIB Clients 24-4
Displaying the Switching Capability 24-4
Verifying the (S,G) Forwarding Capability 24-4
Verifying the (*,G) Forwarding Capability 24-5
Verifying the Subnet Entry Support Status 24-5
Verifying the Current Replication Mode 24-5
Displaying the Replication Mode Auto Detection Status 24-5
Displaying the Replication Mode Capabilities 24-5
Displaying Subnet Entries 24-6
Displaying the IPv6 Multicast Summary 24-6
Displaying the NetFlow Hardware Forwarding Count 24-6
Displaying the FIB Hardware Bridging and Drop Counts 24-7
Displaying the Shared and Well-Known Hardware Adjacency Counters 24-7

Contents
xiv
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring IPv4 Multicast Layer 3 Switching 25-1
Understanding How IPv4 Multicast Layer 3 Switching Works 25-1
IPv4 Multicast Layer 3 Switching Overview 25-2
Multicast Layer 3 Switching Cache 25-2
Layer 3-Switched Multicast Packet Rewrite 25-3
Partially and Completely Switched Flows 25-3
Non-RPF Traffic Processing 25-5
Understanding How IPv4 Bidirectional PIM Works 25-6
Default IPv4 Multicast Layer 3 Switching Configuration 25-6
IPv4 Multicast Layer 3 Switching Configuration Guidelines and Restrictions 25-7
Restrictions 25-7
Unsupported Features 25-8
Configuring IPv4 Multicast Layer 3 Switching 25-8
Source-Specific Multicast with IGMPv3, IGMP v3lite, and URD 25-9
Enabling IPv4 Multicast Routing Globally 25-9
Enabling IPv4 PIM on Layer 3 Interfaces 25-9
Enabling IP Multicast Layer 3 Switching Globally 25-10
Enabling IP Multicast Layer 3 Switching on Layer 3 Interfaces 25-10
Specifying the Maximum Number of Multicast Routes 25-11
Configuring the Layer 3 Switching Global Threshold 25-11
Enabling Installation of Directly Connected Subnets 25-12
Specifying the Flow Statistics Message Interval 25-12
Enabling Shortcut-Consistency Checking 25-12
Configuring ACL-Based Filtering of RPF Failures 25-13
Displaying RPF Failure Rate-Limiting Information 25-13
Displaying IPv4 Multicast Layer 3 Hardware Switching Summary 25-14
Displaying the IPv4 Multicast Routing Table 25-16
Displaying IPv4 Multicast Layer 3 Switching Statistics 25-17
Configuring IPv4 Bidirectional PIM 25-18
Enabling IPv4 Bidirectional PIM Globally 25-18
Configuring the Rendezvous Point for IPv4 Bidirectional PIM Groups 25-19
Setting the IPv4 Bidirectional PIM Scan Interval 25-19
Displaying IPv4 Bidirectional PIM Information 25-20
Using IPv4 Debug Commands 25-22
Clearing IPv4 Multicast Layer 3 Switching Statistics 25-22
Redundancy for Multicast Traffic 25-23

Contents
xv
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Configuring MLDv2 Snooping for IPv6 Multicast Traffic 26-1
Understanding How MLDv2 Snooping Works 26-1
MLDv2 Snooping Overview 26-2
MLDv2 Messages 26-2
Source-Based Filtering 26-3
Explicit Host Tracking 26-3
MLDv2 Snooping Proxy Reporting 26-3
Joining an IPv6 Multicast Group 26-4
Leaving a Multicast Group 26-6
Understanding the MLDv2 Snooping Querier 26-7
Default MLDv2 Snooping Configuration 26-7
MLDv2 Snooping Configuration Guidelines and Restrictions 26-7
MLDv2 Snooping Querier Configuration Guidelines and Restrictions 26-8
Enabling the MLDv2 Snooping Querier 26-8
Configuring MLDv2 Snooping 26-9
Enabling MLDv2 Snooping 26-9
Configuring a Static Connection to a Multicast Receiver 26-10
Configuring a Multicast Router Port Statically 26-11
Configuring the MLD Snooping Query Interval 26-11
Enabling Fast-Leave Processing 26-12
Enabling SSM Safe Reporting 26-12
Configuring Explicit Host Tracking 26-13
Configuring Report Suppression 26-13
Displaying MLDv6 Snooping Information 26-14
Configuring IGMP Snooping for IPv4 Multicast Traffic 27-1
Understanding How IGMP Snooping Works 27-1
IGMP Snooping Overview 27-2
Joining a Multicast Group 27-2
Leaving a Multicast Group 27-4
Understanding the IGMP Snooping Querier 27-5
Understanding IGMP Version 3 Support 27-5
Default IGMP Snooping Configuration 27-7
IGMP Snooping Configuration Guidelines and Restrictions 27-7
IGMP Snooping Querier Configuration Guidelines and Restrictions 27-8
Enabling the IGMP Snooping Querier 27-8
Configuring IGMP Snooping 27-9

Contents
xvi
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Enabling IGMP Snooping 27-10
Configuring a Static Connection to a Multicast Receiver 27-11
Configuring a Multicast Router Port Statically 27-11
Configuring the IGMP Snooping Query Interval 27-11
Enabling IGMP Fast-Leave Processing 27-12
Configuring Source Specific Multicast (SSM) Mapping 27-12
Configuring IGMPv3 Explicit Host Tracking 27-13
Displaying IGMP Snooping Information 27-14
Configuring PIM Snooping 28-1
Understanding How PIM Snooping Works 28-1
Default PIM Snooping Configuration 28-4
PIM Snooping Configuration Guidelines and Restrictions 28-4
Configuring PIM Snooping 28-4
Enabling PIM Snooping Globally 28-5
Enabling PIM Snooping in a VLAN 28-5
Disabling PIM Snooping Designated-Router Flooding 28-6
Configuring RGMP 29-1
Understanding How RGMP Works 29-1
Default RGMP Configuration 29-2
RGMP Configuration Guidelines and Restrictions 29-2
Enabling RGMP on Layer 3 Interfaces 29-3
Configuring Network Security 30-1
Configuring MAC Address-Based Traffic Blocking 30-1
Configuring TCP Intercept 30-2
Configuring Unicast Reverse Path Forwarding Check 30-2
Understanding PFC3B Unicast RPF Check Support 30-2
Unicast RPF Check Guidelines and Restrictions 30-3
Configuring Unicast RPF Check 30-3
Understanding Cisco IOS ACL Support 31-1
Cisco IOS ACL Configuration Guidelines and Restrictions 31-1
Hardware and Software ACL Support 31-2
Optimized ACL Logging with a PFC3B 31-3
Understanding OAL 31-3

Contents
xvii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
OAL Guidelines and Restrictions 31-3
Configuring OAL 31-4
Guidelines and Restrictions for Using Layer 4 Operators in ACLs 31-5
Determining Layer 4 Operation Usage 31-6
Determining Logical Operation Unit Usage 31-6
Configuring VLAN ACLs 32-1
Understanding VACLs 32-1
VACL Overview 32-1
Bridged Packets 32-2
Routed Packets 32-2
Multicast Packets 32-4
Configuring VACLs 32-4
VACL Configuration Overview 32-5
Defining a VLAN Access Map 32-6
Configuring a Match Clause in a VLAN Access Map Sequence 32-6
Configuring an Action Clause in a VLAN Access Map Sequence 32-7
Applying a VLAN Access Map 32-8
Verifying VLAN Access Map Configuration 32-8
VLAN Access Map Configuration and Verification Examples 32-9
Configuring a Capture Port 32-9
Configuring VACL Logging 32-11
Configuring Denial of Service Protection 33-1
Understanding How DoS Protection Works 33-2
DoS Protection Default Configuration 33-13
DoS Protection Configuration Guidelines and Restrictions 33-14
Monitoring Packet Drop Statistics 33-14
Displaying Rate-Limiter Information 33-17
Understanding How Control Plane Policing Works 33-18
CoPP Default Configuration 33-19
CoPP Configuration Guidelines and Restrictions 33-19
Configuring CoPP 33-20
Monitoring CoPP 33-21
Defining Traffic Classification 33-22
Traffic Classification Overview 33-22

Contents
xviii
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Traffic Classification Guidelines 33-23
Sample Basic ACLs for CoPP Traffic Classification 33-24
Configuring Sticky ARP 33-25
Configuring DHCP Snooping 34-1
Overview of DHCP Snooping 34-1
DHCP Snooping Option-82 Data Insertion 34-2
Overview of the DHCP Snooping Database Agent 34-4
Default Configuration for DHCP Snooping 34-5
DHCP Snooping Configuration Guidelines and Restrictions 34-6
Configuring DHCP Snooping 34-7
Enabling DHCP Snooping Globally 34-7
Enabling DHCP Option-82 Data Insertion 34-8
Enabling the DHCP Option 82 on Untrusted Port Feature 34-8
Enabling DHCP Snooping MAC Address Verification 34-9
Enabling DHCP Snooping on VLANs 34-9
Configuring the DHCP Trust State on Layer 2 LAN Interfaces 34-11
Configuring DHCP Snooping Rate Limiting on Layer 2 LAN Interfaces 34-12
Configuring the DHCP Snooping Database Agent 34-12
Configuration Examples for the Database Agent 34-13
Displaying a Binding Table 34-16
Configuring Dynamic ARP Inspection 35-1
Understanding DAI 35-1
Understanding ARP 35-1
Understanding ARP Spoofing Attacks 35-2
Understanding DAI and ARP Spoofing Attacks 35-2
Interface Trust States and Network Security 35-3
Rate Limiting of ARP Packets 35-4
Relative Priority of ARP ACLs and DHCP Snooping Entries 35-4
Logging of Dropped Packets 35-4
Default DAI Configuration 35-5
DAI Configuration Guidelines and Restrictions 35-5
Configuring DAI 35-6
Enabling DAI on VLANs 35-7
Configuring the DAI Interface Trust State 35-7

Contents
xix
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Applying ARP ACLs for DAI Filtering 35-8
Configuring ARP Packet Rate Limiting 35-9
Enabling DAI Error-Disabled Recovery 35-10
Enabling Additional Validation 35-11
Configuring DAI Logging 35-12
Displaying DAI Information 35-15
DAI Configuration Samples 35-16
Sample One: Two Switches Support DAI 35-16
Sample Two: One Switch Supports DAI 35-20
Configuring Traffic Storm Control 36-1
Understanding Traffic Storm Control 36-1
Default Traffic Storm Control Configuration 36-2
Configuration Guidelines and Restrictions 36-3
Enabling Traffic Storm Control 36-3
Displaying Traffic Storm Control Settings 36-5
Configuring Unknown Unicast and Multicast Flood Blocking 37-1
Understanding Unknown Traffic Flood Control 37-1
Configuring UUFB or UMFB 37-2
Configuring PFC QoS 38-1
Understanding How PFC QoS Works 38-2
Overview 38-2
Component Overview 38-5
Understanding Classification and Marking 38-14
Policers 38-17
Understanding Port-Based Queue Types 38-19
PFC QoS Default Configuration 38-25
PFC QoS Global Settings 38-26
Default Values with PFC QoS Enabled 38-27
Default Values with PFC QoS Disabled 38-38
PFC QoS Configuration Guidelines and Restrictions 38-39
General Guidelines 38-39
PFC3B Guidelines 38-41
Class Map Command Restrictions 38-42
Policy Map Command Restrictions 38-42

Contents
xx
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
OL-11439-03
Policy Map Class Command Restrictions 38-42
Supported Granularity for CIR and PIR Rate Values 38-42
Supported Granularity for CIR and PIR Token Bucket Sizes 38-43
IP Precedence and DSCP Values 38-44
Configuring PFC QoS 38-44
Enabling PFC QoS Globally 38-45
Enabling Ignore Port Trust 38-46
Configuring DSCP Transparency 38-46
Enabling Queueing-Only Mode 38-47
Enabling Microflow Policing of Bridged Traffic 38-48
Enabling VLAN-Based PFC QoS on Layer 2 LAN Ports 38-48
Enabling Egress ACL Support for Remarked DSCP 38-49
Creating Named Aggregate Policers 38-50
Configuring a PFC QoS Policy 38-52
Configuring Egress DSCP Mutation on a PFC3B 38-68
Configuring Ingress CoS Mutation on IEEE 802.1Q Tunnel Ports 38-70
Configuring DSCP Value Maps 38-72
Configuring the Trust State of Ethernet LAN Ports 38-76
Configuring the Ingress LAN Port CoS Value 38-78
Configuring Standard-Queue Drop Threshold Percentages 38-78
Mapping QoS Labels to Queues and Drop Thresholds 38-84
Allocating Bandwidth Between Standard Transmit Queues 38-88
Setting the Receive-Queue Size Ratio 38-90
Configuring the Transmit-Queue Size Ratio 38-91
Common QoS Scenarios 38-92
Sample Network Design Overview 38-92
Classifying Traffic from PCs and IP Phones in the Access Layer 38-93
Accepting the Traffic Priority Value on Interswitch Links 38-96
Prioritizing Traffic on Interswitch Links 38-97
Using Policers to Limit the Amount of Traffic from a PC 38-100
PFC QoS Glossary 38-102
Configuring MPLS QoS 39-1
Terminology 39-2
MPLS QoS Features 39-3
MPLS Experimental Field 39-3
Trust 39-3
Classification 39-3