Cisco Aironet 350 Series Instruction Manual

Cisco 350, 350X and 550X Series Managed Switches, Firm-
ware Release 2.4, ver 0.4
ADMINISTRATION
GUIDE

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 1
Contents
Table of Contents
Chapter 1: Quick Getting Started 10
Before You Begin 10
Rack Mounting Switch 11
Power over Ethernet Considerations 12
Configuring Switches 14
Configuring Your Switch Using the Console Port 16
USB Port 17
Switch Features 17
Chapter 2: General Information 23
Basic or Advanced Display Mode 23
Quick Start Device Configuration 25
Interface Naming Conventions 26
Window Navigation 27
Search Facility 30
Chapter 3: Dashboard 31
Grid Management 31
System Health 33
Resource Utilization 34
Identification 35
Port Utilization 36
PoE Utilization 37
Latest Logs 38
Suspended Interfaces 38
Traffic Errors 40

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 2
Contents
Chapter 4: Configuration Wizards 41
Getting Started Wizard 41
VLAN Configuration Wizard 43
ACL Wizard 44
Chapter 5: Status and Statistics 47
System Summary 48
CPU Utilization 50
Interface 50
Etherlike 52
Port Utilization 53
GVRP 53
802.1X EAP 54
ACL 56
Hardware Resource Utilization 56
Health and Power 57
Switched Port Analyzer (SPAN) 61
Diagnostics 62
RMON 66
View Logs 74
Chapter 6: Administration 77
System Settings 78
User Accounts 79
Idle Session Timeout 80
Time Settings 80
System Log 80
File Management 84
Plug-n-Play (PNP) 84
Reboot 88

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 3
Contents
Discovery - Bonjour 89
Discovery - LLDP 89
Discovery - CDP 89
Locate Device 90
Ping 90
Traceroute 92
Chapter 7: Administration: File Management 93
System Files 93
Firmware Operations 95
File Operations 99
File Directory 106
DHCP Auto Configuration/Image Update 107
Chapter 8: Administration: Stack Management 116
Overview 116
Types of Units in Stack 117
Stack Topology 118
Unit ID Assignment 119
Master Selection Process 120
Stack Changes 120
Unit Failure in Stack 121
Stack Ports 123
Software Auto Synchronization in Stack 126
Stack Management 130
Chapter 9: Administration: Time Settings 132
System Time Configuration 133
SNTP Modes 134
System Time 135

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 4
Contents
SNTP Unicast 137
SNTP Multicast/Anycast 140
SNTP Authentication 140
Time Range 141
Recurring Time Range 143
Chapter 10: Administration: Discovery 144
Bonjour 144
LLDP and CDP 145
Discover - LLDP 147
Discovery - CDP 168
Chapter 11: Port Management 177
Workflow 177
Port Settings 178
Error Recovery Settings 181
Loopback Detection Settings 182
Link Aggregation 185
PoE 193
Green Ethernet 202
Chapter 12: Smartport 210
Overview 210
How the Smartport Feature Works 215
Auto Smartport 215
Error Handling 219
Default Configuration 219
Relationships with Other Features 220
Common Smartport Tasks 220
Configuring Smartport Using The Web-based Interface 222

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 5
Contents
Built-in Smartport Macros 227
Chapter 13: VLAN Management 238
Regular VLANs 240
GVRP Settings 247
Voice VLAN 248
Chapter 14: Spanning Tree 261
STP Flavors 261
STP Status and Global Settings 262
STP Interface Settings 264
RSTP Interface Settings 266
Multiple Spanning Tree Overview 268
MSTP Properties 268
VLANs to a MSTP Instance 269
MSTP Instance Settings 270
MSTP Interface Settings 271
Chapter 15: Managing MAC Address Tables 274
Static Addresses 275
Dynamic Addresses 276
Chapter 16: Multicast 277
Multicast Forwarding Overview 277
Properties 283
MAC Group Address 284
IP Multicast Group Address 285
IPv4 Multicast Configuration 287
IPv6 Multicast Configuration 291
IGMP/MLD Snooping IP Multicast Group 294

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 6
Contents
Multicast Router Port 295
Forward All 295
Unregistered Multicast 296
Chapter 17: IP Configuration 298
Overview 298
Loopback Interface 300
IPv4 Management and Interfaces 300
IPv6 Management and Interfaces 309
Domain Name System 329
Chapter 18: IP Configuration: RIPv2 334
Overview 334
How Rip Operates on the Device 335
Configuring RIP 338
Access Lists 343
Chapter 19: IP Configuration: VRRP 346
Overview 346
VRRP Topology 347
Configurable Elements of VRRP 348
Configuring VRRP 351
Chapter 20: IP Configuration: SLA 355
Overview 355
Using SLA 358
Chapter 21: Security 362
RADIUS 363
Password Strength 366
Management Access Method 368

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 7
Contents
Management Access Authentication 373
SSL Server 374
SSH Client 377
TCP/UDP Services 377
Storm Control 379
Port Security 382
802.1X Authentication 384
Denial of Service Prevention 384
Chapter 22: Security: 802.1X Authentication 393
Overview 393
Properties 401
Port Authentication 403
Host and Session Authentication 405
Authenticated Hosts 406
Chapter 23: Security: Secure Sensitive Data Management 407
Introduction 407
SSD Management 408
SSD Rules 408
SSD Properties 413
Configuration Files 416
SSD Management Channels 420
Menu CLI and Password Recovery 421
Configuring SSD 421
Chapter 24: Security: SSH Server 425
Overview 425
Common Tasks 426
SSH User Authentication 427

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 8
Contents
SSH Server Authentication 428
Chapter 25: Security: SSH Client 430
Overview 430
SSH User Authentication 436
SSH Server Authentication 437
Change User Password on the SSH Server 439
Chapter 26: Security: IPv6 First Hop Security 440
IPv6 First Hop Security Overview 440
Router Advertisement Guard 443
Neighbor Discovery Inspection 444
DHCPv6 Guard 444
Neighbor Binding Integrity 445
IPv6 Source Guard 447
Attack Protection 448
Policies, Global Parameters and System Defaults 450
Common Tasks 452
Default Settings and Configuration 454
Configuring IPv6 First Hop Security through Web GUI 455
Chapter 27: Access Control 474
Overview 474
MAC-Based ACLs Creation 478
IPv4-based ACL Creation 480
IPv6-Based ACL Creation 485
ACL Binding 488
Chapter 28: Quality of Service 491
QoS Features and Components 492

Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 9
Contents
General 496
QoS Basic Mode 506
QoS Advanced Mode 508
QoS Statistics 519
Chapter 29: SNMP 523
Overview 523
Engine ID 527
Views 529
Groups 530
Users 532
Communities 534
Trap Settings 536
Notification Recipients 536
Notification Filter 541
Chapter 30: Smart Network Application (SNA) 542
SNA Sessions 543
SNA Graphics 544
Top Right-Hand Menu 546
Topology View 547
Right-Hand Information Panel 556
Operations 570
Overlays 575
Tags 578
Search 582
Dashboard 584
Notifications 586
Device Authorization Control (DAC) 589
DAC Workflow 589