Cisco 4500-M Quick start guide

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 4500 Series Switch Cisco IOS
Software Configuration Guide
Release 12.2(25)EW
Customer Order Number: DOC-OL6696=
Text Part Number: OL-6696-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and
iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco
Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation,
Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo,
iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing,
Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient,
TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0411R)
Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide
Copyright © 1999–2004 Cisco Systems, Inc. All rights reserved.

iii
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
CONTENTS
Preface xxi
Audience xxi
Organization xxi
Related Documentation xxiii
Conventions xxiv
Commands in Task Tables xxv
Obtaining Documentation xxv
Cisco.com xxv
Ordering Documentation xxv
Documentation Feedback xxvi
Obtaining Technical Assistance xxvi
Cisco Technical Support Website xxvi
Submitting a Service Request xxvii
Definitions of Service Request Severity xxvii
Obtaining Additional Publications and Information xxvii
CHAPTER 1Product Overview 1-1
Layer 2 Software Features 1-1
802.1Q and Layer 2 Protocol Tunneling 1-2
Storm Control 1-2
CDP 1-2
DHCP Snooping 1-2
EtherChannel Bundles 1-3
IP Source Guard 1-3
Jumbo Frames 1-3
Layer 2 Traceroute 1-3
MST 1-4
PVRST+ 1-4
Spanning Tree Protocol 1-4
UDLD 1-5
Unidirectional Ethernet 1-5
VLANs 1-5
Layer 3 Software Features 1-6
CEF 1-6

Contents
iv
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
HSRP 1-6
IP Routing Protocols 1-6
Multicast Services 1-9
Network Security with ACLs 1-9
Policy-Based Routing 1-10
Unidirectional Link Routing 1-10
VRF-lite 1-10
QoS Features 1-10
Management and Security Features 1-11
CHAPTER 2Command-Line Interfaces 2-1
Accessing the Switch CLI 2-1
Accessing the CLI Using the EIA/TIA-232 Console Interface 2-1
Accessing the CLI Through Telnet 2-2
Performing Command-Line Processing 2-3
Performing History Substitution 2-3
Understanding Cisco IOS Command Modes 2-4
Getting a List of Commands and Syntax 2-5
ROMMOM Command-Line Interface 2-6
CHAPTER 3Configuring the Switch for the First Time 3-1
Default Switch Configuration 3-1
Configuring DHCP-Based Autoconfiguration 3-2
Understanding DHCP-Based Autoconfiguration 3-2
DHCP Client Request Process 3-3
Configuring the DHCP Server 3-3
Configuring the TFTP Server 3-4
Configuring the DNS Server 3-5
Configuring the Relay Device 3-5
Obtaining Configuration Files 3-6
Example Configuration 3-7
Configuring the Switch 3-8
Using Configuration Mode to Configure Your Switch 3-9
Checking the Running Configuration Settings 3-9
Saving the Running Configuration Settings to Your Start-up File 3-10
Reviewing the Configuration in NVRAM 3-10
Configuring a Default Gateway 3-11
Configuring a Static Route 3-11

Contents
v
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Controlling Access to Privileged EXEC Commands 3-13
Setting or Changing a Static enable Password 3-13
Using the enable password and enable secret Commands 3-14
Setting or Changing a Privileged Password 3-14
Setting TACACS+ Password Protection for Privileged EXEC Mode 3-15
Encrypting Passwords 3-15
Configuring Multiple Privilege Levels 3-16
Recovering a Lost Enable Password 3-18
Modifying the Supervisor Engine Startup Configuration 3-18
Understanding the Supervisor Engine Boot Configuration 3-18
Configuring the Software Configuration Register 3-19
Specifying the Startup System Image 3-23
Controlling Environment Variables 3-24
CHAPTER 4Configuring Interfaces 4-1
Overview of Interface Configuration 4-1
Using the interface Command 4-2
Configuring a Range of Interfaces 4-4
Defining and Using Interface-Range Macros 4-5
Configuring Optional Interface Features 4-6
Configuring Ethernet Interface Speed and Duplex Mode 4-7
Configuring Jumbo Frame Support 4-10
Interacting with the Baby Giants Feature 4-12
Understanding Online Insertion and Removal 4-13
Monitoring and Maintaining the Interface 4-13
Monitoring Interface and Controller Status 4-13
Clearing and Resetting the Interface 4-14
Shutting Down and Restarting an Interface 4-14
CHAPTER 5Checking Port Status and Connectivity 5-1
Checking Module Status 5-1
Checking Interfaces Status 5-2
Checking MAC Addresses 5-3
Using Telnet 5-3
Changing the Logout Timer 5-4
Monitoring User Sessions 5-4
Using Ping 5-5
Understanding How Ping Works 5-5

Contents
vi
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Running Ping 5-6
Using IP Traceroute 5-7
Understanding How IP Traceroute Works 5-7
Running IP Traceroute 5-7
Using Layer 2 Traceroute 5-8
Understanding Layer 2 Traceroute 5-8
Layer 2 Traceroute Usage Guidelines 5-8
Running Layer 2 Traceroute 5-9
Configuring ICMP 5-10
Enabling ICMP Protocol Unreachable Messages 5-10
Enabling ICMP Redirect Messages 5-11
Enabling ICMP Mask Reply Messages 5-11
CHAPTER 6Configuring Supervisor Engine Redundancy Using RPR and SSO 6-1
Understanding Cisco IOS NSF-Awareness Support 6-2
Understanding Supervisor Engine Redundancy 6-3
Overview 6-3
RPR Operation 6-4
SSO Operation 6-4
Understanding Supervisor Engine Redundancy Synchronization 6-6
RPR Supervisor Engine Configuration Synchronization 6-6
SSO Supervisor Engine Configuration Synchronization 6-7
Supervisor Engine Redundancy Guidelines and Restrictions 6-7
Configuring Supervisor Engine Redundancy 6-8
Configuring Redundancy 6-8
Synchronizing the Supervisor Engine Configurations 6-10
Performing a Manual Switchover 6-11
Performing a Software Upgrade 6-12
Manipulating Bootflash on the Redundant Supervisor Engine 6-14
CHAPTER 7Environmental Monitoring and Power Management 7-1
Understanding Environmental Monitoring 7-1
Using CLI Commands to Monitor your Environment 7-2
System Alarms 7-2
Power Management 7-3
Power Management for the Catalyst 4948 Switches 7-3
Power Management for the Catalyst 4500 Series Switches 7-4
Power Management for the Catalyst 4006 Switch 7-12

Contents
vii
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
Power Consumption of Chassis Components 7-15
Powering Down a Module 7-15
CHAPTER 8Configuring Power over Ethernet 8-1
Power Management Modes 8-1
Configuring Power Consumption for Powered Devices on an Interface 8-3
Displaying the Operational Status for an Interface 8-6
Displaying the PoE Consumed by a Module 8-7
CHAPTER 9Configuring Switches with Web-based Tools 9-1
Configuring and Using the Network Assistant 9-1
Understanding How the Network Assistant Works 9-2
Installation Requirements 9-2
Software and Hardware Requirements 9-2
Network Assistant-related Default Configuration 9-3
Installing the Network Assistant 9-3
Overview of the CLI Commands 9-4
Configuring the Cisco Device for Use with Network Assistant 9-4
Displaying the Network Assistant-Related Configuration 9-9
Launching the Network Assistant 9-10
Connecting Network Assistant to a Device 9-10
Clustering Switches 9-10
Understanding Switch Clusters 9-11
Using the CLI to Manage Switch Clusters 9-13
Configuring Embedded CiscoView Support 9-13
Understanding Embedded CiscoView 9-13
Installing and Configuring Embedded CiscoView 9-14
Displaying Embedded CiscoView Information 9-16
CHAPTER 10 Understanding and Configuring VLANs 10-1
Overview of VLANs 10-1
VLAN Configuration Guidelines and Restrictions 10-3
VLAN Ranges 10-3
Configurable Normal-Range VLAN Parameters 10-4
VLAN Default Configuration 10-4
Configuring VLANs 10-4
Configuring VLANs in Global Configuration Mode 10-5
Configuring VLANs in VLAN Database Mode 10-7
Assigning a Layer 2 LAN Interface to a VLAN 10-8

Contents
viii
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
CHAPTER 11 Configuring Dynamic VLAN Membership 11-1
Understanding VMPS 11-1
VMPS Server Overview 11-1
Security Modes for VMPS Server 11-2
Fall-back VLAN 11-3
Illegal VMPS client requests 11-3
Understanding VMPS clients 11-4
Dynamic VLAN Membership Overview 11-4
Default VMPS Client Configuration 11-4
Configuring a Switch as a VMPS Client 11-5
Administering and Monitoring the VMPS 11-8
Troubleshooting Dynamic Port VLAN Membership 11-9
CHAPTER 12 Configuring Layer 2 Ethernet Interfaces 12-1
Overview of Layer 2 Ethernet Switching 12-1
Understanding Layer 2 Ethernet Switching 12-1
Understanding VLAN Trunks 12-3
Layer 2 Interface Modes 12-4
Default Layer 2 Ethernet Interface Configuration 12-4
Layer 2 Interface Configuration Guidelines and Restrictions 12-5
Configuring Ethernet Interfaces for Layer 2 Switching 12-5
Configuring an Ethernet Interface as a Layer 2 Trunk 12-6
Configuring an Interface as a Layer 2 Access Port 12-8
Clearing Layer 2 Configuration 12-9
CHAPTER 13 Configuring SmartPort Macros 13-1
Understanding SmartPort Macros 13-1
Configuring Smart-Port Macros 13-2
Default SmartPort Macro Configuration 13-2
SmartPort Macro Configuration Guidelines 13-4
Creating and Applying SmartPort Macros 13-4
Displaying SmartPort Macros 13-8
CHAPTER 14 Understanding and Configuring STP 14-1
Overview of STP 14-1
Understanding the Bridge ID 14-2
Bridge Protocol Data Units 14-3
Election of the Root Bridge 14-4

Contents
ix
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
STP Timers 14-4
Creating the STP Topology 14-4
STP Port States 14-5
MAC Address Allocation 14-5
STP and IEEE 802.1Q Trunks 14-6
Per-VLAN Rapid Spanning Tree 14-6
Default STP Configuration 14-6
Configuring STP 14-7
Enabling STP 14-7
Enabling the Extended System ID 14-8
Configuring the Root Bridge 14-9
Configuring a Secondary Root Switch 14-12
Configuring STP Port Priority 14-13
Configuring STP Port Cost 14-15
Configuring the Bridge Priority of a VLAN 14-16
Configuring the Hello Time 14-17
Configuring the Maximum Aging Time for a VLAN 14-18
Configuring the Forward-Delay Time for a VLAN 14-18
Disabling Spanning Tree Protocol 14-19
Enabling Per-VLAN Rapid Spanning Tree 14-20
CHAPTER 15 Configuring STP Features 15-1
Overview of Root Guard 15-2
Overview of Loop Guard 15-2
Overview of PortFast 15-3
Overview of BPDU Guard 15-4
Overview of PortFast BPDU Filtering 15-4
Overview of UplinkFast 15-5
Overview of BackboneFast 15-6
Enabling Root Guard 15-8
Enabling Loop Guard 15-9
Enabling PortFast 15-11
Enabling BPDU Guard 15-12
Enabling PortFast BPDU Filtering 15-12
Enabling UplinkFast 15-14
Enabling BackboneFast 15-15

Contents
x
Software Configuration Guide—Release 12.2(25)EW
OL-6696-01
CHAPTER 16 Understanding and Configuring Multiple Spanning Trees 16-1
Overview of MST 16-1
IEEE 802.1s MST 16-2
IEEE 802.1w RSTP 16-3
MST-to-SST Interoperability 16-4
Common Spanning Tree 16-5
MST Instances 16-5
MST Configuration Parameters 16-5
MST Regions 16-6
Message Age and Hop Count 16-7
MST-to-PVST+ Interoperability 16-8
MST Configuration Restrictions and Guidelines 16-8
Configuring MST 16-9
Enabling MST 16-9
Configuring MST Instance Parameters 16-11
Configuring MST Instance Port Parameters 16-12
Restarting Protocol Migration 16-12
Displaying MST Configurations 16-13
CHAPTER 17 Understanding and Configuring EtherChannel 17-1
Overview of EtherChannel 17-1
Understanding Port-Channel Interfaces 17-2
Understanding How EtherChannels Are Configured 17-2
Understanding Load Balancing 17-5
EtherChannel Configuration Guidelines and Restrictions 17-5
Configuring EtherChannel 17-6
Configuring Layer 3 EtherChannels 17-6
Configuring Layer 2 EtherChannels 17-9
Configuring the LACP System Priority and System ID 17-11
Configuring EtherChannel Load Balancing 17-12
Removing an Interface from an EtherChannel 17-13
Removing an EtherChannel 17-14
CHAPTER 18 Configuring IGMP Snooping and Filtering 18-1
Overview of IGMP Snooping 18-1
Immediate-Leave Processing 18-3
Explicit Host Tracking 18-3
Configuring IGMP Snooping 18-4