Cisco 500 Series Instruction Manual

Cisco 500 Series Stackable Managed Switch
Administration Guide
ADMINISTRATION
GUIDE

Cisco 500 Series Stackable Managed Switch Administration Guide 2
2
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco
trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use
of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco 500 Series Stackable Managed Switch Administration Guide 1
Contents
Chapter 1: Getting Started 10
Starting the Web-based Configuration Utility 10
Quick Start Device Configuration 14
Interface Naming Conventions 15
Differences Between 500 Devices<500> 15
Window Navigation 17
Chapter 2: Status and Statistics 22
System Summary 22
Ethernet Interfaces 22
Etherlike Statistics 24
GVRP Statistics 25
802.1X EAP Statistics 26
ACL Statistics 27
TCAM Utilization 28
Health 29
RMON 29
View Log 37
Chapter 3: Administration: System Log 38
Setting System Log Settings 38
Setting Remote Logging Settings 40
Viewing Memory Logs 42
Chapter 4: Administration: File Management 44
System Files 44
Upgrade/Backup Firmware/Language 47
Active Image 51
Download/Backup Configuration/Log 52
Configuration Files Properties 58

Cisco 500 Series Stackable Managed Switch Administration Guide 2
Contents
Copy/Save Configuration 59
Auto Configuration/Image Update via DHCP 60
70
Chapter 5: Administration: Stack Management 71
Overview 71
Types of Units in Stack 73
Stack Topology 74
Unit ID Assignment 76
Master Selection Process 78
Stack Changes 78
Unit Failure in Stack 80
Software Auto Synchronization in Stack 82
Stack Unit Mode 82
Stack Ports 86
Default Configuration 94
Interactions With Other Features 94
System Modes 94
Chapter 6: Administration 100
Device Models 101
System Settings 103
Console Settings (Autobaud Rate Support) 106
Management Interface 107
System Mode and Stack Management 107
User Accounts 107
Defining Idle Session Timeout 107
Time Settings 108
System Log 108
File Management 108

Cisco 500 Series Stackable Managed Switch Administration Guide 3
Contents
Rebooting the Device 108
Routing Resources 110
Health 114
Diagnostics 116
Discovery - Bonjour 116
Discovery - LLDP 117
Discovery - CDP 117
Ping 117
Traceroute 119
Chapter 7: Administration: Time Settings 122
System Time Options 123
SNTP Modes 124
Configuring System Time 125
Chapter 8: Administration: Diagnostics 136
Copper Ports Tests 136
Displaying Optical Module Status 138
Configuring Port and VLAN Mirroring 140
Viewing CPU Utilization and Secure Core Technology 141
Chapter 9: Administration: Discovery 144
Bonjour 144
LLDP and CDP 146
Configuring LLDP 147
Configuring CDP 168
CDP Statistics 176
Chapter 10: Port Management 178
Configuring Ports 178

Cisco 500 Series Stackable Managed Switch Administration Guide 4
Contents
Loopback Detection 184
Link Aggregation 186
UDLD 194
PoE 194
Configuring Green Ethernet 194
Chapter 11: Port Management: Unidirectional Link Detection 202
UDLD Overview 202
UDLD Operation 203
Usage Guidelines 205
Dependencies On Other Features 206
Default Settings and Configuration 206
Before You Start 207
Common UDLD Tasks 207
Configuring UDLD 208
Chapter 12: Smartport 212
Overview 213
What is a Smartport 214
Smartport Types 214
Smartport Macros 216
Macro Failure and the Reset Operation 218
How the Smartport Feature Works 218
Auto Smartport 219
Error Handling 223
Default Configuration 223
Relationships with Other Features and Backwards Compatibility 224
Common Smartport Tasks 224
Configuring Smartport Using The Web-based Interface 226
Built-in Smartport Macros 231

Cisco 500 Series Stackable Managed Switch Administration Guide 5
Contents
Chapter 13: Port Management: PoE 244
PoE on the Device 244
PoE Properties 247
PoE Settings 248
Chapter 14: VLAN Management 252
Overview 252
Regular VLANs 261
Private VLAN Settings 269
GVRP Settings 270
VLAN Groups 271
Voice VLAN 276
Access Port Multicast TV VLAN 289
Customer Port Multicast TV VLAN 292
Chapter 15: Spanning Tree 296
STP Flavors 296
STP Status and Global Settings 297
Spanning Tree Interface Settings 299
Rapid Spanning Tree Settings 301
Multiple Spanning Tree 304
MSTP Properties 304
VLANs to a MSTP Instance 305
MSTP Instance Settings 306
MSTP Interface Settings 307
Chapter 16: Managing MAC Address Tables 310
Static MAC Addresses 311
Dynamic MAC Addresses 312
Reserved MAC Addresses 313

Cisco 500 Series Stackable Managed Switch Administration Guide 6
Contents
Chapter 17: Multicast 314
Multicast Forwarding 314
Multicast Properties 320
MAC Group Address 320
IP Multicast Group Addresses 322
IPv4 Multicast Configuration 324
IPv6 Multicast Configuration 330
IGMP/MLD Snooping IP Multicast Group 336
Multicast Router Ports 337
Forward All 338
Unregistered Multicast 338
Chapter 18: IP Configuration 340
Overview 340
IPv4 Management and Interfaces 344
DHCP Server 366
IPv6 Management and Interfaces 375
Domain Name 398
Chapter 19: IP Configuration: RIPv2 403
Overview 403
How Rip Operates on the Device 404
Configuring RIP 409
Chapter 20: IP Configuration: VRRP 417
Overview 417
Configurable Elements of VRRP 421
Configuring VRRP 424
Chapter 21: Security 428

Cisco 500 Series Stackable Managed Switch Administration Guide 7
Contents
Defining Users 429
Configuring TACACS+ 432
Configuring RADIUS 437
Key Management 442
Management Access Method 445
Management Access Authentication 450
Secure Sensitive Data Management 452
SSL Server 452
SSH Server 454
SSH Client 455
Configuring TCP/UDP Services 455
Defining Storm Control 456
Configuring Port Security 457
802.1X 460
Denial of Service Prevention 460
DHCP Snooping 470
IP Source Guard 470
ARP Inspection 474
First Hop Security 480
Chapter 22: Security: 802.1X Authentication 481
Overview of 802.1X 481
Authenticator Overview 484
Common Tasks 494
802.1X Configuration Through the GUI 495
Defining Time Ranges 507
Authentication Method and Port Mode Support 508
Chapter 23: Security: IPv6 First Hop Security 511
IPv6 First Hop Security Overview 512

Cisco 500 Series Stackable Managed Switch Administration Guide 8
Contents
Router Advertisement Guard 516
Neighbor Discovery Inspection 516
DHCPv6 Guard 517
Neighbor Binding Integrity 518
IPv6 Source Guard 521
Attack Protection 522
Policies, Global Parameters and System Defaults 523
Common Tasks 525
Default Settings and Configuration 527
Before You Start 527
Configuring IPv6 First Hop Security through Web GUI 528
Chapter 24: Security: SSH Client 546
Secure Copy (SCP) and SSH 546
Protection Methods 547
SSH Server Authentication 549
SSH Client Authentication 550
Before You Begin 551
Common Tasks 551
SSH Client Configuration Through the GUI 552
Chapter 25: Security: SSH Server 557
Overview 557
Common Tasks 558
SSH Server Configuration Pages 559
Chapter 26: Security: Secure Sensitive Data Management 562
Introduction 562
SSD Rules 563
SSD Properties 568