Cisco Catalyst 2360 User manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2360 Switch Software
Configuration Guide
Cisco IOS 12.2(53)EY
June 2010
Text Part Number: OL-19808-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/web/siteassets/legal/trademark.html. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not
imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 2360 Switch Software Configuration Guide
© 2010 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
CONTENTS
Preface xxv
Purpose xxv
Conventions xxv
Related Publications xxvi
Obtaining Documentation and Submitting a Service Request xxvii
CHAPTER 1Overview 1-1
Features 1-1
Deployment Features 1-1
Performance Features 1-2
Management Options 1-3
Manageability Features 1-3
Availability and Redundancy Features 1-4
VLAN Features 1-5
Security Features 1-5
QoS and CoS Features 1-6
Monitoring Features 1-6
Default Settings After Initial Switch Configuration 1-6
Where to Go Next 1-8
CHAPTER 2Using the Command-Line Interface 2-1
Understanding Command Modes 2-1
Understanding the Help System 2-3
Understanding Abbreviated Commands 2-4
Understanding no and default Forms of Commands 2-4
Understanding CLI Error Messages 2-5
Using Configuration Logging 2-5
Using Command History 2-6
Changing the Command History Buffer Size 2-6
Recalling Commands 2-6
Disabling the Command History Feature 2-7
Using Editing Features 2-7
Enabling and Disabling Editing Features 2-7

Contents
iv
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Editing Commands through Keystrokes 2-8
Editing Command Lines that Wrap 2-9
Searching and Filtering Output of show and more Commands 2-10
Accessing the CLI 2-10
Accessing the CLI through a Console Connection or through Telnet 2-10
CHAPTER 3Assigning the Switch IP Address and Default Gateway 3-1
Understanding the Boot Process 3-1
Assigning Switch Information 3-2
Default Switch Information 3-3
Understanding DHCP-Based Autoconfiguration 3-3
DHCP Client Request Process 3-3
Understanding DHCP-based Autoconfiguration and Image Update 3-4
DHCP Autoconfiguration 3-5
DHCP Auto-Image Update 3-5
Limitations and Restrictions 3-5
Configuring DHCP-Based Autoconfiguration 3-6
DHCP Server Configuration Guidelines 3-6
Configuring the TFTP Server 3-6
Configuring the DNS 3-7
Configuring the Relay Device 3-7
Obtaining Configuration Files 3-8
Example Configuration 3-9
Manually Assigning IP Information 3-10
Checking and Saving the Running Configuration 3-11
Modifying the Startup Configuration 3-12
Default Boot Configuration 3-13
Automatically Downloading a Configuration File 3-13
Specifying the Filename to Read and Write the System Configuration 3-13
Booting Manually 3-14
Booting a Specific Software Image 3-14
Controlling Environment Variables 3-15
Scheduling a Reload of the Software Image 3-17
Configuring a Scheduled Reload 3-17
Displaying Scheduled Reload Information 3-18
CHAPTER 4Clustering Switches 4-1
Understanding Switch Clusters 4-2
Cluster Command Switch Characteristics 4-3

Contents
v
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Standby Cluster Command Switch Characteristics 4-3
Candidate Switch and Cluster Member Switch Characteristics 4-3
Planning a Switch Cluster 4-4
Automatic Discovery of Cluster Candidates and Members 4-4
Discovery Through CDP Hops 4-5
Discovery Through Non-CDP-Capable and Noncluster-Capable Devices 4-6
Discovery Through Different VLANs 4-7
Discovery Through Different Management VLANs 4-7
Discovery Through Routed Ports 4-8
Discovery of Newly Installed Switches 4-9
IP Addresses 4-10
Hostnames 4-10
Passwords 4-10
SNMP Community Strings 4-11
TACACS+ and RADIUS 4-11
LRE Profiles 4-11
Using the CLI to Manage Switch Clusters 4-11
Catalyst 1900 and Catalyst 2820 CLI Considerations 4-12
Using SNMP to Manage Switch Clusters 4-12
CHAPTER 5Administering the Switch 5-1
Managing the System Time and Date 5-1
Understanding the System Clock 5-1
Understanding Network Time Protocol 5-2
Configuring NTP 5-3
Default NTP Configuration 5-4
Configuring NTP Authentication 5-4
Configuring NTP Associations 5-5
Configuring NTP Access Restrictions 5-7
Configuring the Source IP Address for NTP Packets 5-8
Displaying the NTP Configuration 5-8
Configuring Time and Date Manually 5-9
Setting the System Clock 5-9
Displaying the Time and Date Configuration 5-9
Configuring the Time Zone 5-10
Configuring Summer Time (Daylight Saving Time) 5-11
Configuring a System Name and Prompt 5-12
Default System Name and Prompt Configuration 5-13
Configuring a System Name 5-13

Contents
vi
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Understanding DNS 5-13
Default DNS Configuration 5-14
Setting Up DNS 5-14
Displaying the DNS Configuration 5-15
Creating a Banner 5-15
Default Banner Configuration 5-15
Configuring a Message-of-the-Day Login Banner 5-16
Configuring a Login Banner 5-17
Managing the MAC Address Table 5-17
Building the Address Table 5-18
MAC Addresses and VLANs 5-18
Default MAC Address Table Configuration 5-18
Changing the Address Aging Time 5-19
Removing Dynamic Address Entries 5-19
Adding and Removing Static Address Entries 5-20
Configuring Unicast MAC Address Filtering 5-21
Displaying Address Table Entries 5-22
Managing the ARP Table 5-22
CHAPTER 6Using the SDM Default Template 6-1
Default SDM Template 6-1
Displaying the SDM Templates 6-1
CHAPTER 7Configuring Switch-Based Authentication 7-1
Preventing Unauthorized Access to Your Switch 7-1
Protecting Access to Privileged EXEC Commands 7-2
Default Password and Privilege Level Configuration 7-2
Setting or Changing a Static Enable Password 7-3
Protecting Enable and Enable Secret Passwords with Encryption 7-3
Disabling Password Recovery 7-5
Setting a Telnet Password for a Terminal Line 7-6
Configuring Username and Password Pairs 7-6
Configuring Multiple Privilege Levels 7-7
Setting the Privilege Level for a Command 7-8
Changing the Default Privilege Level for Lines 7-9
Logging into and Exiting a Privilege Level 7-9
Controlling Switch Access with TACACS+ 7-10
Understanding TACACS+ 7-10
TACACS+ Operation 7-11

Contents
vii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring TACACS+ 7-11
Default TACACS+ Configuration 7-12
Identifying the TACACS+ Server Host and Setting the Authentication Key 7-12
Configuring TACACS+ Login Authentication 7-13
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-15
Starting TACACS+ Accounting 7-16
Displaying the TACACS+ Configuration 7-16
Controlling Switch Access with RADIUS 7-17
Understanding RADIUS 7-17
RADIUS Operation 7-18
Configuring RADIUS 7-19
Default RADIUS Configuration 7-19
Identifying the RADIUS Server Host 7-19
Configuring RADIUS Login Authentication 7-22
Defining AAA Server Groups 7-24
Configuring RADIUS Authorization for User Privileged Access and Network Services 7-26
Starting RADIUS Accounting 7-27
Configuring Settings for All RADIUS Servers 7-28
Configuring the Switch to Use Vendor-Specific RADIUS Attributes 7-28
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 7-29
Displaying the RADIUS Configuration 7-30
Configuring the Switch for Local Authentication and Authorization 7-31
Configuring the Switch for Secure Shell 7-32
Understanding SSH 7-32
SSH Servers, Integrated Clients, and Supported Versions 7-33
Limitations 7-33
Configuring SSH 7-33
Configuration Guidelines 7-34
Setting Up the Switch to Run SSH 7-34
Configuring the SSH Server 7-35
Displaying the SSH Configuration and Status 7-36
Configuring the Switch for Secure Socket Layer HTTP 7-36
Understanding Secure HTTP Servers and Clients 7-37
Certificate Authority Trustpoints 7-37
CipherSuites 7-38
Configuring Secure HTTP Servers and Clients 7-39
Default SSL Configuration 7-39
SSL Configuration Guidelines 7-39
Configuring a CA Trustpoint 7-39

Contents
viii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring the Secure HTTP Server 7-40
Configuring the Secure HTTP Client 7-42
Displaying Secure HTTP Server and Client Status 7-43
Configuring the Switch for Secure Copy Protocol 7-43
Information About Secure Copy 7-43
CHAPTER 8Configuring Interface Characteristics 8-1
Understanding Interface Types 8-1
Port-Based VLANs 8-1
Switch Ports 8-2
Access Ports 8-2
Trunk Ports 8-2
Ethernet Management Port 8-3
Switch Virtual Interfaces 8-3
SVI Autostate Exclude 8-3
EtherChannel Port Groups 8-4
10-Gigabit Ethernet Interfaces 8-4
Connecting Interfaces 8-5
Using the Switch USB Ports 8-5
USB Mini-Type B Console Port 8-5
Console Port Change Logs 8-6
Configuring the Console Media Type 8-6
Configuring the USB Inactivity Timeout 8-7
USB Type A Port 8-8
Using Interface Configuration Mode 8-9
Procedures for Configuring Interfaces 8-10
Configuring a Range of Interfaces 8-11
Configuring and Using Interface Range Macros 8-12
Using the Ethernet Management Port 8-14
Understanding the Ethernet Management Port 8-14
Supported Features on the Ethernet Management Port 8-14
Configuring the Ethernet Management Port 8-15
TFTP and the Ethernet Management Port 8-15
Configuring Ethernet Interfaces 8-16
Default Ethernet Interface Configuration 8-16
Configuring Interface Speed and Duplex Mode 8-17
Speed and Duplex Configuration Guidelines 8-17
Setting the Interface Speed and Duplex Parameters 8-18
Configuring IEEE 802.3x Flow Control 8-19

Contents
ix
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring Auto-MDIX on an Interface 8-20
Adding a Description for an Interface 8-21
Configuring SVI Autostate Exclude 8-21
Configuring the System MTU 8-22
Configuring Small-Frame Arrival Rate 8-23
Monitoring and Maintaining the Interfaces 8-24
Monitoring Interface Status 8-24
Clearing and Resetting Interfaces and Counters 8-25
Shutting Down and Restarting the Interface 8-26
CHAPTER 9Configuring VLANs 9-1
Understanding VLANs 9-1
Supported VLANs 9-2
VLAN Port Membership Modes 9-3
Configuring Normal-Range VLANs 9-3
Token Ring VLANs 9-5
Normal-Range VLAN Configuration Guidelines 9-5
VLAN Configuration Mode Options 9-6
VLAN Configuration in config-vlan Mode 9-6
VLAN Configuration in VLAN Database Configuration Mode 9-6
Saving VLAN Configuration 9-6
Default Ethernet VLAN Configuration 9-7
Creating or Modifying an Ethernet VLAN 9-8
Deleting a VLAN 9-9
Assigning Static-Access Ports to a VLAN 9-10
Configuring Extended-Range VLANs 9-11
Default VLAN Configuration 9-11
Extended-Range VLAN Configuration Guidelines 9-12
Creating an Extended-Range VLAN 9-12
Displaying VLANs 9-14
Configuring VLAN Trunks 9-14
Trunking Overview 9-14
IEEE 802.1Q Configuration Considerations 9-15
Default Layer 2 Ethernet Interface VLAN Configuration 9-16
Configuring an Ethernet Interface as a Trunk Port 9-16
Interaction with Other Features 9-17
Configuring a Trunk Port 9-17
Defining the Allowed VLANs on a Trunk 9-18
Changing the Pruning-Eligible List 9-19

Contents
x
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring the Native VLAN for Untagged Traffic 9-20
Configuring Trunk Ports for Load Sharing 9-20
Load Sharing Using STP Port Priorities 9-21
Load Sharing Using STP Path Cost 9-22
CHAPTER 10 Configuring VTP 10-1
Understanding VTP 10-1
The VTP Domain 10-2
VTP Modes 10-3
VTP Advertisements 10-3
VTP Version 2 10-4
VTP Pruning 10-4
Configuring VTP 10-6
Default VTP Configuration 10-6
VTP Configuration Options 10-7
VTP Configuration in Global Configuration Mode 10-7
VTP Configuration in VLAN Database Configuration Mode 10-7
VTP Configuration Guidelines 10-8
Domain Names 10-8
Passwords 10-8
VTP Version 10-8
Configuration Requirements 10-9
Configuring a VTP Server 10-9
Configuring a VTP Client 10-11
Disabling VTP (VTP Transparent Mode) 10-12
Enabling VTP Version 2 10-13
Enabling VTP Pruning 10-14
Adding a VTP Client Switch to a VTP Domain 10-14
Monitoring VTP 10-16
CHAPTER 11 Configuring STP 11-1
Understanding Spanning-Tree Features 11-1
STP Overview 11-2
Spanning-Tree Topology and BPDUs 11-3
Bridge ID, Switch Priority, and Extended System ID 11-4
Spanning-Tree Interface States 11-4
Blocking State 11-5
Listening State 11-6
Learning State 11-6