Cisco 300 Series Instruction Manual

Cisco Small Business 300 Series Managed Switch
Administration Guide Release 1.3.5
ADMINISTRATION
GUIDE

Cisco Small Business 300 Series Managed Switch Administration Guide 1
Contents
Table of Contents
Chapter 1: Getting Started 1
Starting the Web-based Configuration Utility 1
Quick Start Device Configuration 4
Interface Naming Conventions 5
/Window Navigation 7
Chapter 2: Status and Statistics 11
System Summary 11
Viewing Ethernet Interfaces 11
Viewing Etherlike Statistics 13
Viewing 802.1X EAP Statistics 14
Health 15
Managing RMON 15
View Log 23
Chapter 3: Administration: System Log 24
Setting System Log Settings 24
Setting Remote Logging Settings 26
Viewing Memory Logs 28
Chapter 4: Administration: File Management 30
System Files 30
Upgrade/Backup Firmware/Language 33
Download/Backup Configuration/Log 37
Configuration Files Properties 42
Copy/Save Configuration 43
Auto Configuration via DHCP 44

Cisco Small Business 300 Series Managed Switch Administration Guide 2
Contents
Chapter 5: Administration 51
Device Models 51
System Settings 53
Management Interface 55
User Accounts 55
Defining Idle Session Timeout 55
Time Settings 56
System Log 56
File Management 56
Rebooting the Device 56
Health 58
Diagnostics 59
Discovery - Bonjour 59
Discovery - LLDP 59
Discovery - CDP 60
Ping 60
Chapter 6: Administration: Time Settings 62
System Time Options 63
SNTP Modes 64
Configuring System Time 65
Chapter 7: Administration: Diagnostics 73
Testing Copper Ports 73
Displaying Optical Module Status 75
Configuring Port and VLAN Mirroring 77
Viewing CPU Utilization and Secure Core Technology 78
Chapter 8: Administration: Discovery 80
Bonjour 80

Cisco Small Business 300 Series Managed Switch Administration Guide 3
Contents
LLDP and CDP 81
Configuring LLDP 82
Configuring CDP 102
Chapter 9: Administration: Unidirectional Link Detection 112
UDLD Overview 112
UDLD Operation 113
Usage Guidelines 116
Dependencies On Other Features 116
Default Settings and Configuration 117
Before You Start 117
Common UDLD Tasks 117
Configuring UDLD 118
Chapter 10: Port Management 122
Configuring Ports 122
Setting Port Configuration 123
Link Aggregation 127
PoE 134
Configuring Green Ethernet 134
Chapter 11: Smartport 143
Overview 143
What is a Smartport 144
Smartport Types 144
Smartport Macros 147
Macro Failure and the Reset Operation 148
How the Smartport Feature Works 149
Auto Smartport 149
Error Handling 153

Cisco Small Business 300 Series Managed Switch Administration Guide 4
Contents
Default Configuration 153
Relationships with Other Features and Backwards Compatibility 154
Common Smartport Tasks 154
Configuring Smartport Using The Web-based Interface 156
Built-in Smartport Macros 161
Chapter 12: Port Management: PoE 174
PoE on the Device 174
Configuring PoE Properties 177
Configuring PoE Settings 178
Chapter 13: VLAN Management 181
VLANs 181
Configuring Default VLAN Settings 184
Creating VLANs 185
Configuring VLAN Interface Settings 186
Defining VLAN Membership 187
Voice VLAN 190
Chapter 14: Spanning Tree 204
STP Flavors 204
Configuring STP Status and Global Settings 205
Defining Spanning Tree Interface Settings 207
Configuring Rapid Spanning Tree Settings 209
Chapter 15: Managing MAC Address Tables 212
Configuring Static MAC Addresses 213
Managing Dynamic MAC Addresses 214
Chapter 16: Multicast 216
Multicast Forwarding 216

Cisco Small Business 300 Series Managed Switch Administration Guide 5
Contents
Defining Multicast Properties 219
Adding MAC Group Address 220
Adding IP Multicast Group Addresses 222
Configuring IGMP Snooping 224
MLD Snooping 226
Querying IGMP/MLD IP Multicast Group 228
Defining Multicast Router Ports 229
Defining Forward All Multicast 230
Defining Unregistered Multicast Settings 231
Chapter 17: IP Configuration 234
Overview 234
IPv4 Management and Interfaces 236
Domain Name 250
Chapter 18: Security 256
Defining Users 257
Configuring RADIUS 260
264
Management Access Method 264
Management Access Authentication 269
Secure Sensitive Data Management 270
SSL Server 270
SSH Client 272
Configuring TCP/UDP Services 273
Defining Storm Control 274
Configuring Port Security 275
802.1X 278
Denial of Service Prevention 278

Cisco Small Business 300 Series Managed Switch Administration Guide 6
Contents
Chapter 19: Security: 802.1X Authentication 282
Overview of 802.1X 282
Authenticator Overview 284
Common Tasks 288
802.1X Configuration Through the GUI 289
Chapter 20: Security: First Hop Security 296
First Hop Security Overview 297
Router Advertisement Guard 301
Neighbor Discovery Inspection 301
DHCPv6 Guard 302
Neighbor Binding Integrity 303
Attack Protection 305
Policies, Global Parameters and System Defaults 307
Common Tasks 308
Default Settings and Configuration 310
Before You Start 311
Configuring First Hop Security through Web GUI 311
Chapter 21: Security: Secure Sensitive Data Management 323
Introduction 323
SSD Rules 324
SSD Properties 329
Configuration Files 332
SSD Management Channels 337
Menu CLI and Password Recovery 337
Configuring SSD 338
Chapter 22: Security: SSH Client 341
Secure Copy (SCP) and SSH 341

Cisco Small Business 300 Series Managed Switch Administration Guide 7
Contents
Protection Methods 342
SSH Server Authentication 344
SSH Client Authentication 345
Before You Begin 346
Common Tasks 346
SSH Client Configuration Through the GUI 348
Chapter 23: Security: SSH Server 352
Overview 352
Common Tasks 353
SSH Server Configuration Pages 354
Chapter 24: Access Control 358
Access Control Lists 358
Defining MAC-based ACLs 360
IPv4-based ACLs 363
IPv6-Based ACLs 367
Defining ACL Binding 371
Chapter 25: Quality of Service 373
QoS Features and Components 374
Configuring QoS - General 375
Managing QoS Statistics 384
Chapter 26: SNMP 387
SNMP Versions and Workflow 387
Model OIDs 390
SNMP Engine ID 391
Configuring SNMP Views 393
Creating SNMP Groups 394

Cisco Small Business 300 Series Managed Switch Administration Guide 8
Contents
Managing SNMP Users 396
Defining SNMP Communities 398
Defining Trap Settings 400
Notification Recipients 400
SNMP Notification Filters 405

Cisco Small Business 300 Series Managed Switch Administration Guide 9
Contents

1
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 1
Getting Started
This section provides an introduction to the web-based configuration utility, and
covers the following topics:
•Starting the Web-based Configuration Utility
•Quick Start Device Configuration
•Interface Naming Conventions
•Window Navigation
Starting the Web-based Configuration Utility
This section describes how to navigate the web-based switch configuration utility.
If you are using a pop-up blocker, make sure it is disabled.
Browser Restrictions
If you are using IPv6 interfaces on your management station, use the IPv6 global
address and not the IPv6 link local address to access the device from your
browser.
Launching the Configuration Utility
To open the web-based configuration utility:
STEP 1 Open a Web browser.
STEP 2 Enter the IP address of the device you are configuring in the address bar on the
browser, and then press Enter.

Getting Started
Starting the Web-based Configuration Utility
2 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
1
NOTE When the device is using the factory default IP address of 192.168.1.254, its power
LED flashes continuously. When the device is using a DHCP assigned IP address or
an administrator-configured static IP address, the power LED is on solid.
Logging In
The default username is cisco and the default password is cisco. The first time
that you log in with the default username and password, you are required to enter
a new password.
NOTE If you have not previously selected a language for the GUI, the language of the Login
page is determined by the language(s) requested by your browser and the
languages configured on your device. If your browser requests Chinese, for
example, and Chinese has been loaded into your device, the Login page is
automatically displayed in Chinese. If Chinese has not been loaded into your
device, the Login page appears in English.
The languages loaded into the device have a language and country code (en-US,
en-GB and so on). For the Login page to be automatically displayed in a particular
language, based on the browser request, both the language and country code of
the browser request must match those of the language loaded on the device. If the
browser request contains only the language code without a country code (for
example: fr). The first embedded language with a matching language code is
taken (without matching the country code, for example: fr_CA).
To log in to the device configuration utility:
STEP 1 Enter the username/password. The password can contain up to 64 ASCII
characters. Password-complexity rules are described in the Setting Password
Complexity Rules section of the Configuring Security chapter.
STEP 2 If you are not using English, select the desired language from the Language drop-
down menu. To add a new language to the device or update a current one, refer to
the Upgrade/Backup Firmware/Language section.
STEP 3 If this is the first time that you logged on with the default user ID (cisco) and the
default password (cisco) or your password has expired, the Change Password
Page appears. See Password Expiration for additional information.
STEP 4 Choose whether to select Disable Password Complexity Enforcement or not.
For more information on password complexity, see the Setting Password
Complexity Rules section.
STEP 5 Enter the new password and click Apply.

Getting Started
Starting the Web-based Configuration Utility
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 3
1
When the login attempt is successful, the Getting Started page appears.
If you entered an incorrect username or password, an error message appears and
the Login page remains displayed on the window. If you are having problems
logging in, please see the Launching the Configuration Utility section in the
Administration Guide for additional information.
Select Don't show this page on startup to prevent the Getting Started page from
being displayed each time that you log on to the system. If you select this option,
the System Summary page is opened instead of the Getting Started page.
HTTP/HTTPS
You can either open an HTTP session (not secured) by clicking Log In, or you can
open an HTTPS (secured) session, by clicking Secure Browsing (HTTPS). You are
asked to approve the logon with a default RSA key, and an HTTPS session is
opened.
NOTE There is no need to input the username/password prior to clicking the Secure
Browsing (HTTPS) button.
For information on how to configure HTTPS, see SSL Server.
Password Expiration
The New Password page appears:
•The first time you access the device with the default username cisco and
password cisco. This page forces you to replace the factory default
password.
•When the password expires, this page forces you to select a new
password.
Logging Out
By default, the application logs out after ten minutes of inactivity. You can change
this default value as described in the Defining Idle Session Timeout section.
!
CAUTION Unless the Running Configuration is copied to the Startup Configuration, rebooting
the device will remove all changes made since the last time the file was saved.
Save the Running Configuration to the Startup Configuration before logging off to
preserve any changes you made during this session.
A flashing red X icon to the left of the Save application link indicates that Running

Getting Started
Starting the Web-based Configuration Utility
4 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
1
Configuration changes have not yet been saved to the Startup Configuration file.
The flashing can be disabled by clicking on the Disable Save Icon Blinking button
on the Copy/Save Configuration page
When the device auto-discovers a device, such as an IP phone (see What is a
Smartport), and it configures the port appropriately for the device. These
configuration commands are written to the Running Configuration file. This causes
the Save icon to begin blinking when the you log on even though you did not make
any configuration changes.
When you click Save, the Copy/Save Configuration page appears. Save the
Running Configuration file by copying it to the Startup Configuration file. After this
save, the red X icon and the Save application link are no longer displayed.
To l o g o u t , c l i c k Logout in the top right corner of any page. The system logs out of
the device.
When a timeout occurs or you intentionally log out of the system, a message
appears and the Login page appears, with a message indicating the logged-out
state. After you log in, the application returns to the initial page.
The initial page displayed depends on the “Do not show this page on startup”
option in the Getting Started page. If you did not select this option, the initial page
is the Getting Started page. If you did select this option, the initial page is the
System Summary page.

Getting Started
Quick Start Device Configuration
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 5
1
Quick Start Device Configuration
To simplify device configuration through quick navigation, the Getting Started
page provides links to the most commonly used pages.
There are two hot links on the Getting Started page that take you to Cisco web
pages for more information. Clicking on the Support link takes you to the device
product support page, and clicking on the Forums link takes you to the Small
Business Support Community page.
Category Link Name (on the Page) Linked Page
Change Management
Applications and Services
TCP/UDP Services page
Change Device IP Address IPv4 Interface page
Create VLAN Create VLAN page
Configure Port Settings Port Setting page
Device Status System Summary System Summary page
Port Statistics Interface page
RMON Statistics Statistics page
View Log RAM Memory page
Quick Access Change Device Password User Accounts page
Upgrade Device Software Upgrade/Backup Firmware/
Language page
Backup Device Configuration Download/Backup
Configuration/Log page
Create MAC Based ACL MAC Based ACL page
Create IP Based ACL IPv4 Based ACL page
Configure QoS QoS Properties page
Configure Port Mirroring Port and VLAN Mirroring page

Getting Started
Interface Naming Conventions
6 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
1
Interface Naming Conventions
Within the GUI, interfaces are denoted by concatenating the following elements:
•Type of interface: The following types of interfaces are found on the various
types of devices:
-Fast Ethernet (10/100 bits)—These are displayed as FE.
-Gigabit Ethernet ports (10/100/1000 bits)—These are displayed as
GE.
-LAG (Port Channel)—These are displayed as LAG.
-VLAN—These are displayed as VLAN.
-Tunnel —These are displayed as Tunnel.
•Interface Number: Port, LAG, tunnel or VLAN ID

Getting Started
Window Navigation
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 7
1
Window Navigation
This section describes the features of the web-based switch configuration utility.
Application Header
The Application Header appears on every page. It provides the following
application links:
Application Link
Name
Description
A flashing red X icon displayed to the left of the Save
application link indicates that Running Configuration
changes have been made that have not yet been saved to
the Startup Configuration file. The flashing of the red X can
be disabled on the Copy/Save Configuration page.
Click Save to display the Copy/Save Configuration page.
Save the Running Configuration file by copying it to the
Startup Configuration file type on the device. After this
save, the red X icon and the Save application link are no
longer displayed. When the device is rebooted, it copies
the Startup Configuration file type to the Running
Configuration and sets the device parameters according
to the data in the Running Configuration.
Username Displays the name of the user logged on to the device. The
default username is cisco. (The default password is cisco).

Getting Started
Window Navigation
8 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
1
Language Menu This menu provides the following options:
•Select a language: Select one of the languages that
appear in the menu. This language will be the web-
based configuration utility language.
•Download Language: Add a new language to the
device.
•Delete Language: Deletes the second language on
the device. The first language (English) cannot be
deleted.
•Debug: Used for translation purposes. If you select
this option, all web-based configuration utility labels
disappear and in their place are the IDs of the
strings that correspond to the IDs in the language
file.
NOTE To upgrade a language file, use the Upgrade/
Backup Firmware/Language page.
Logout Click to log out of the web-based switch configuration
utility.
About Click to display the device name and device version
number.
Help Click to display the online help.
The SYSLOG Alert Status icon appears when a SYSLOG
message, above the critical severity level, is logged. Click
the icon to open the RAM Memory page. After you access
this page, the SYSLOG Alert Status icon is no longer
displayed. To display the page when there is not an active
SYSLOG message, Click Status and Statistics > View
Log > RAM Memory.
Application Link
Name
Description

Getting Started
Window Navigation
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 9
1
Management Buttons
The following table describes the commonly-used buttons that appear on various
pages in the system.
Button Name Description
Use the pull-down menu to configure the number of
entries per page.
Indicates a mandatory field.
Add Click to display the related Add page and add an entry to a
table. Enter the information and click Apply to save it to the
Running Configuration. Click Close to return to the main
page. Click Save to display the Copy/Save Configuration
page and save the Running Configuration to the Startup
Configuration file type on the device.
Apply Click to apply changes to the Running Configuration on the
device. If the device is rebooted, the Running
Configuration is lost, unless it is saved to the Startup
Configuration file type or another file type. Click Save to
display the Copy/Save Configuration page and save the
Running Configuration to the Startup Configuration file
type on the device.
Cancel Click to reset changes made on the page.
Clear All
Interfaces
Counters
Click to clear the statistic counters for all interfaces.
Clear Interface
Counters
Click to clear the statistic counters for the selected
interface.
Clear Logs Clears log files.
Clear Table Clears table entries.
Close Returns to main page. If any changes were not applied to
the Running Configuration, a message appears.

Getting Started
Window Navigation
10 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
1
Copy Settings A table typically contains one or more entries containing
configuration settings. Instead of modifying each entry
individually, it is possible to modify one entry and then
copy the selected entry to multiple entries, as described
below:
1. Select the entry to be copied. Click Copy Settings to
display the popup.
2. Enter the destination entry numbers in the to field.
3. Click Apply to save the changes and click Close to
return to the main page.
Delete After selecting an entry in the table, click Delete to
remove.
Details Click to display the details associated with the entry
selected.
Edit Select the entry and click Edit. The Edit page appears,
and the entry can be modified.
1. Click Apply to save the changes to the Running
Configuration.
2. Click Close to return to the main page.
Go Enter the query filtering criteria and click Go. The results
are displayed on the page.
Refresh Clich Refresh to refresh the counter values.
Test Click Test to perform the related tests.
Button Name Description