Cisco Catalyst 2360 User manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2360 Switch Software
Configuration Guide
Cisco IOS 12.2(53)EY
June 2010
Text Part Number: OL-19808-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/web/siteassets/legal/trademark.html. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not
imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 2360 Switch Software Configuration Guide
© 2010 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
CONTENTS
Preface xxv
Purpose xxv
Conventions xxv
Related Publications xxvi
Obtaining Documentation and Submitting a Service Request xxvii
CHAPTER 1Overview 1-1
Features 1-1
Deployment Features 1-1
Performance Features 1-2
Management Options 1-3
Manageability Features 1-3
Availability and Redundancy Features 1-4
VLAN Features 1-5
Security Features 1-5
QoS and CoS Features 1-6
Monitoring Features 1-6
Default Settings After Initial Switch Configuration 1-6
Where to Go Next 1-8
CHAPTER 2Using the Command-Line Interface 2-1
Understanding Command Modes 2-1
Understanding the Help System 2-3
Understanding Abbreviated Commands 2-4
Understanding no and default Forms of Commands 2-4
Understanding CLI Error Messages 2-5
Using Configuration Logging 2-5
Using Command History 2-6
Changing the Command History Buffer Size 2-6
Recalling Commands 2-6
Disabling the Command History Feature 2-7
Using Editing Features 2-7
Enabling and Disabling Editing Features 2-7

Contents
iv
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Editing Commands through Keystrokes 2-8
Editing Command Lines that Wrap 2-9
Searching and Filtering Output of show and more Commands 2-10
Accessing the CLI 2-10
Accessing the CLI through a Console Connection or through Telnet 2-10
CHAPTER 3Assigning the Switch IP Address and Default Gateway 3-1
Understanding the Boot Process 3-1
Assigning Switch Information 3-2
Default Switch Information 3-3
Understanding DHCP-Based Autoconfiguration 3-3
DHCP Client Request Process 3-3
Understanding DHCP-based Autoconfiguration and Image Update 3-4
DHCP Autoconfiguration 3-5
DHCP Auto-Image Update 3-5
Limitations and Restrictions 3-5
Configuring DHCP-Based Autoconfiguration 3-6
DHCP Server Configuration Guidelines 3-6
Configuring the TFTP Server 3-6
Configuring the DNS 3-7
Configuring the Relay Device 3-7
Obtaining Configuration Files 3-8
Example Configuration 3-9
Manually Assigning IP Information 3-10
Checking and Saving the Running Configuration 3-11
Modifying the Startup Configuration 3-12
Default Boot Configuration 3-13
Automatically Downloading a Configuration File 3-13
Specifying the Filename to Read and Write the System Configuration 3-13
Booting Manually 3-14
Booting a Specific Software Image 3-14
Controlling Environment Variables 3-15
Scheduling a Reload of the Software Image 3-17
Configuring a Scheduled Reload 3-17
Displaying Scheduled Reload Information 3-18
CHAPTER 4Clustering Switches 4-1
Understanding Switch Clusters 4-2
Cluster Command Switch Characteristics 4-3

Contents
v
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Standby Cluster Command Switch Characteristics 4-3
Candidate Switch and Cluster Member Switch Characteristics 4-3
Planning a Switch Cluster 4-4
Automatic Discovery of Cluster Candidates and Members 4-4
Discovery Through CDP Hops 4-5
Discovery Through Non-CDP-Capable and Noncluster-Capable Devices 4-6
Discovery Through Different VLANs 4-7
Discovery Through Different Management VLANs 4-7
Discovery Through Routed Ports 4-8
Discovery of Newly Installed Switches 4-9
IP Addresses 4-10
Hostnames 4-10
Passwords 4-10
SNMP Community Strings 4-11
TACACS+ and RADIUS 4-11
LRE Profiles 4-11
Using the CLI to Manage Switch Clusters 4-11
Catalyst 1900 and Catalyst 2820 CLI Considerations 4-12
Using SNMP to Manage Switch Clusters 4-12
CHAPTER 5Administering the Switch 5-1
Managing the System Time and Date 5-1
Understanding the System Clock 5-1
Understanding Network Time Protocol 5-2
Configuring NTP 5-3
Default NTP Configuration 5-4
Configuring NTP Authentication 5-4
Configuring NTP Associations 5-5
Configuring NTP Access Restrictions 5-7
Configuring the Source IP Address for NTP Packets 5-8
Displaying the NTP Configuration 5-8
Configuring Time and Date Manually 5-9
Setting the System Clock 5-9
Displaying the Time and Date Configuration 5-9
Configuring the Time Zone 5-10
Configuring Summer Time (Daylight Saving Time) 5-11
Configuring a System Name and Prompt 5-12
Default System Name and Prompt Configuration 5-13
Configuring a System Name 5-13

Contents
vi
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Understanding DNS 5-13
Default DNS Configuration 5-14
Setting Up DNS 5-14
Displaying the DNS Configuration 5-15
Creating a Banner 5-15
Default Banner Configuration 5-15
Configuring a Message-of-the-Day Login Banner 5-16
Configuring a Login Banner 5-17
Managing the MAC Address Table 5-17
Building the Address Table 5-18
MAC Addresses and VLANs 5-18
Default MAC Address Table Configuration 5-18
Changing the Address Aging Time 5-19
Removing Dynamic Address Entries 5-19
Adding and Removing Static Address Entries 5-20
Configuring Unicast MAC Address Filtering 5-21
Displaying Address Table Entries 5-22
Managing the ARP Table 5-22
CHAPTER 6Using the SDM Default Template 6-1
Default SDM Template 6-1
Displaying the SDM Templates 6-1
CHAPTER 7Configuring Switch-Based Authentication 7-1
Preventing Unauthorized Access to Your Switch 7-1
Protecting Access to Privileged EXEC Commands 7-2
Default Password and Privilege Level Configuration 7-2
Setting or Changing a Static Enable Password 7-3
Protecting Enable and Enable Secret Passwords with Encryption 7-3
Disabling Password Recovery 7-5
Setting a Telnet Password for a Terminal Line 7-6
Configuring Username and Password Pairs 7-6
Configuring Multiple Privilege Levels 7-7
Setting the Privilege Level for a Command 7-8
Changing the Default Privilege Level for Lines 7-9
Logging into and Exiting a Privilege Level 7-9
Controlling Switch Access with TACACS+ 7-10
Understanding TACACS+ 7-10
TACACS+ Operation 7-11

Contents
vii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring TACACS+ 7-11
Default TACACS+ Configuration 7-12
Identifying the TACACS+ Server Host and Setting the Authentication Key 7-12
Configuring TACACS+ Login Authentication 7-13
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-15
Starting TACACS+ Accounting 7-16
Displaying the TACACS+ Configuration 7-16
Controlling Switch Access with RADIUS 7-17
Understanding RADIUS 7-17
RADIUS Operation 7-18
Configuring RADIUS 7-19
Default RADIUS Configuration 7-19
Identifying the RADIUS Server Host 7-19
Configuring RADIUS Login Authentication 7-22
Defining AAA Server Groups 7-24
Configuring RADIUS Authorization for User Privileged Access and Network Services 7-26
Starting RADIUS Accounting 7-27
Configuring Settings for All RADIUS Servers 7-28
Configuring the Switch to Use Vendor-Specific RADIUS Attributes 7-28
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 7-29
Displaying the RADIUS Configuration 7-30
Configuring the Switch for Local Authentication and Authorization 7-31
Configuring the Switch for Secure Shell 7-32
Understanding SSH 7-32
SSH Servers, Integrated Clients, and Supported Versions 7-33
Limitations 7-33
Configuring SSH 7-33
Configuration Guidelines 7-34
Setting Up the Switch to Run SSH 7-34
Configuring the SSH Server 7-35
Displaying the SSH Configuration and Status 7-36
Configuring the Switch for Secure Socket Layer HTTP 7-36
Understanding Secure HTTP Servers and Clients 7-37
Certificate Authority Trustpoints 7-37
CipherSuites 7-38
Configuring Secure HTTP Servers and Clients 7-39
Default SSL Configuration 7-39
SSL Configuration Guidelines 7-39
Configuring a CA Trustpoint 7-39

Contents
viii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring the Secure HTTP Server 7-40
Configuring the Secure HTTP Client 7-42
Displaying Secure HTTP Server and Client Status 7-43
Configuring the Switch for Secure Copy Protocol 7-43
Information About Secure Copy 7-43
CHAPTER 8Configuring Interface Characteristics 8-1
Understanding Interface Types 8-1
Port-Based VLANs 8-1
Switch Ports 8-2
Access Ports 8-2
Trunk Ports 8-2
Ethernet Management Port 8-3
Switch Virtual Interfaces 8-3
SVI Autostate Exclude 8-3
EtherChannel Port Groups 8-4
10-Gigabit Ethernet Interfaces 8-4
Connecting Interfaces 8-5
Using the Switch USB Ports 8-5
USB Mini-Type B Console Port 8-5
Console Port Change Logs 8-6
Configuring the Console Media Type 8-6
Configuring the USB Inactivity Timeout 8-7
USB Type A Port 8-8
Using Interface Configuration Mode 8-9
Procedures for Configuring Interfaces 8-10
Configuring a Range of Interfaces 8-11
Configuring and Using Interface Range Macros 8-12
Using the Ethernet Management Port 8-14
Understanding the Ethernet Management Port 8-14
Supported Features on the Ethernet Management Port 8-14
Configuring the Ethernet Management Port 8-15
TFTP and the Ethernet Management Port 8-15
Configuring Ethernet Interfaces 8-16
Default Ethernet Interface Configuration 8-16
Configuring Interface Speed and Duplex Mode 8-17
Speed and Duplex Configuration Guidelines 8-17
Setting the Interface Speed and Duplex Parameters 8-18
Configuring IEEE 802.3x Flow Control 8-19

Contents
ix
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring Auto-MDIX on an Interface 8-20
Adding a Description for an Interface 8-21
Configuring SVI Autostate Exclude 8-21
Configuring the System MTU 8-22
Configuring Small-Frame Arrival Rate 8-23
Monitoring and Maintaining the Interfaces 8-24
Monitoring Interface Status 8-24
Clearing and Resetting Interfaces and Counters 8-25
Shutting Down and Restarting the Interface 8-26
CHAPTER 9Configuring VLANs 9-1
Understanding VLANs 9-1
Supported VLANs 9-2
VLAN Port Membership Modes 9-3
Configuring Normal-Range VLANs 9-3
Token Ring VLANs 9-5
Normal-Range VLAN Configuration Guidelines 9-5
VLAN Configuration Mode Options 9-6
VLAN Configuration in config-vlan Mode 9-6
VLAN Configuration in VLAN Database Configuration Mode 9-6
Saving VLAN Configuration 9-6
Default Ethernet VLAN Configuration 9-7
Creating or Modifying an Ethernet VLAN 9-8
Deleting a VLAN 9-9
Assigning Static-Access Ports to a VLAN 9-10
Configuring Extended-Range VLANs 9-11
Default VLAN Configuration 9-11
Extended-Range VLAN Configuration Guidelines 9-12
Creating an Extended-Range VLAN 9-12
Displaying VLANs 9-14
Configuring VLAN Trunks 9-14
Trunking Overview 9-14
IEEE 802.1Q Configuration Considerations 9-15
Default Layer 2 Ethernet Interface VLAN Configuration 9-16
Configuring an Ethernet Interface as a Trunk Port 9-16
Interaction with Other Features 9-17
Configuring a Trunk Port 9-17
Defining the Allowed VLANs on a Trunk 9-18
Changing the Pruning-Eligible List 9-19

Contents
x
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring the Native VLAN for Untagged Traffic 9-20
Configuring Trunk Ports for Load Sharing 9-20
Load Sharing Using STP Port Priorities 9-21
Load Sharing Using STP Path Cost 9-22
CHAPTER 10 Configuring VTP 10-1
Understanding VTP 10-1
The VTP Domain 10-2
VTP Modes 10-3
VTP Advertisements 10-3
VTP Version 2 10-4
VTP Pruning 10-4
Configuring VTP 10-6
Default VTP Configuration 10-6
VTP Configuration Options 10-7
VTP Configuration in Global Configuration Mode 10-7
VTP Configuration in VLAN Database Configuration Mode 10-7
VTP Configuration Guidelines 10-8
Domain Names 10-8
Passwords 10-8
VTP Version 10-8
Configuration Requirements 10-9
Configuring a VTP Server 10-9
Configuring a VTP Client 10-11
Disabling VTP (VTP Transparent Mode) 10-12
Enabling VTP Version 2 10-13
Enabling VTP Pruning 10-14
Adding a VTP Client Switch to a VTP Domain 10-14
Monitoring VTP 10-16
CHAPTER 11 Configuring STP 11-1
Understanding Spanning-Tree Features 11-1
STP Overview 11-2
Spanning-Tree Topology and BPDUs 11-3
Bridge ID, Switch Priority, and Extended System ID 11-4
Spanning-Tree Interface States 11-4
Blocking State 11-5
Listening State 11-6
Learning State 11-6

Contents
xi
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Forwarding State 11-6
Disabled State 11-7
How a Switch or Port Becomes the Root Switch or Root Port 11-7
Spanning Tree and Redundant Connectivity 11-8
Spanning-Tree Address Management 11-8
Accelerated Aging to Retain Connectivity 11-8
Spanning-Tree Modes and Protocols 11-9
Supported Spanning-Tree Instances 11-9
Spanning-Tree Interoperability and Backward Compatibility 11-10
STP and IEEE 802.1Q Trunks 11-10
Configuring Spanning-Tree Features 11-10
Default Spanning-Tree Configuration 11-11
Spanning-Tree Configuration Guidelines 11-11
Changing the Spanning-Tree Mode. 11-13
Disabling Spanning Tree 11-14
Configuring the Root Switch 11-14
Configuring a Secondary Root Switch 11-16
Configuring Port Priority 11-16
Configuring Path Cost 11-18
Configuring the Switch Priority of a VLAN 11-19
Configuring Spanning-Tree Timers 11-20
Configuring the Hello Time 11-20
Configuring the Forwarding-Delay Time for a VLAN 11-21
Configuring the Maximum-Aging Time for a VLAN 11-21
Configuring the Transmit Hold-Count 11-22
Displaying the Spanning-Tree Status 11-22
CHAPTER 12 Configuring MSTP 12-1
Understanding MSTP 12-2
Multiple Spanning-Tree Regions 12-2
IST, CIST, and CST 12-3
Operations Within an MST Region 12-3
Operations Between MST Regions 12-4
IEEE 802.1s Terminology 12-5
Hop Count 12-5
Boundary Ports 12-6
IEEE 802.1s Implementation 12-6
Port Role Naming Change 12-7
Interoperation Between Legacy and Standard Switches 12-7

Contents
xii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Detecting Unidirectional Link Failure 12-8
Interoperability with IEEE 802.1D STP 12-8
Understanding RSTP 12-8
Port Roles and the Active Topology 12-9
Rapid Convergence 12-10
Synchronization of Port Roles 12-11
Bridge Protocol Data Unit Format and Processing 12-12
Processing Superior BPDU Information 12-13
Processing Inferior BPDU Information 12-13
Topology Changes 12-13
Configuring MSTP Features 12-14
Default MSTP Configuration 12-14
MSTP Configuration Guidelines 12-15
Specifying the MST Region Configuration and Enabling MSTP 12-16
Configuring the Root Switch 12-17
Configuring a Secondary Root Switch 12-18
Configuring Port Priority 12-19
Configuring Path Cost 12-20
Configuring the Switch Priority 12-21
Configuring the Hello Time 12-22
Configuring the Forwarding-Delay Time 12-23
Configuring the Maximum-Aging Time 12-23
Configuring the Maximum-Hop Count 12-24
Specifying the Link Type to Ensure Rapid Transitions 12-24
Designating the Neighbor Type 12-25
Restarting the Protocol Migration Process 12-25
Displaying the MST Configuration and Status 12-26
CHAPTER 13 Configuring Optional Spanning-Tree Features 13-1
Understanding Optional Spanning-Tree Features 13-1
Understanding Port Fast 13-2
Understanding BPDU Guard 13-2
Understanding BPDU Filtering 13-3
Understanding UplinkFast 13-3
Understanding BackboneFast 13-5
Understanding EtherChannel Guard 13-7
Understanding Root Guard 13-8
Understanding Loop Guard 13-9
Configuring Optional Spanning-Tree Features 13-9

Contents
xiii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Default Optional Spanning-Tree Configuration 13-9
Optional Spanning-Tree Configuration Guidelines 13-10
Enabling Port Fast 13-10
Enabling BPDU Guard 13-11
Enabling BPDU Filtering 13-12
Enabling UplinkFast for Use with Redundant Links 13-13
Enabling BackboneFast 13-13
Enabling EtherChannel Guard 13-14
Enabling Root Guard 13-15
Enabling Loop Guard 13-15
Displaying the Spanning-Tree Status 13-16
CHAPTER 14 Configuring DHCP Features 14-1
Understanding DHCP Features 14-1
DHCP Server 14-2
DHCP Relay Agent 14-2
Configuring DHCP Features 14-2
Default DHCP Configuration 14-2
Configuring the DHCP Server 14-3
Configuring the DHCP Relay Agent 14-3
Specifying the Packet Forwarding Address 14-3
Enabling the Cisco IOS DHCP Server Database 14-4
CHAPTER 15 Configuring IGMP Snooping 15-1
Understanding IGMP Snooping 15-1
IGMP Versions 15-2
Joining a Multicast Group 15-3
Leaving a Multicast Group 15-5
Immediate Leave 15-5
IGMP Configurable-Leave Timer 15-5
IGMP Report Suppression 15-5
Configuring IGMP Snooping 15-6
Default IGMP Snooping Configuration 15-6
Enabling or Disabling IGMP Snooping 15-7
Setting the Snooping Method 15-8
Configuring a Multicast Router Port 15-9
Configuring a Host Statically to Join a Group 15-9
Enabling IGMP Immediate Leave 15-10
Configuring the IGMP Leave Timer 15-10

Contents
xiv
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring TCN-Related Commands 15-11
Controlling the Multicast Flooding Time After a TCN Event 15-11
Recovering from Flood Mode 15-12
Disabling Multicast Flooding During a TCN Event 15-12
Configuring the IGMP Snooping Querier 15-13
Disabling IGMP Report Suppression 15-15
Displaying IGMP Snooping Information 15-15
Configuring IGMP Filtering and Throttling 15-16
Default IGMP Filtering and Throttling Configuration 15-17
Configuring IGMP Profiles 15-18
Applying IGMP Profiles 15-19
Setting the Maximum Number of IGMP Groups 15-19
Configuring the IGMP Throttling Action 15-20
Displaying IGMP Filtering and Throttling Configuration 15-21
CHAPTER 16 Configuring IPv6 MLD Snooping 16-1
Understanding MLD Snooping 16-1
MLD Messages 16-3
MLD Queries 16-3
Multicast Client Aging Robustness 16-3
Multicast Router Discovery 16-4
MLD Reports 16-4
MLD Done Messages and Immediate-Leave 16-4
Topology Change Notification Processing 16-5
Configuring IPv6 MLD Snooping 16-5
Default MLD Snooping Configuration 16-5
MLD Snooping Configuration Guidelines 16-6
Enabling or Disabling MLD Snooping 16-6
Configuring a Static Multicast Group 16-8
Configuring a Multicast Router Port 16-8
Enabling MLD Immediate Leave 16-9
Configuring MLD Snooping Queries 16-10
Disabling MLD Listener Message Suppression 16-11
Displaying MLD Snooping Information 16-11
CHAPTER 17 Configuring CDP 17-1
Understanding CDP 17-1
Configuring CDP 17-2
Default CDP Configuration 17-2

Contents
xv
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring the CDP Characteristics 17-2
Disabling and Enabling CDP 17-3
Disabling and Enabling CDP on an Interface 17-4
Monitoring and Maintaining CDP 17-5
CHAPTER 18 Configuring LLDP and LLDP-MED 18-1
Understanding LLDP and LLDP-MED 18-1
Understanding LLDP 18-1
Understanding LLDP-MED 18-2
Configuring LLDP and LLDP-MED 18-3
Default LLDP Configuration 18-3
Configuring LLDP Characteristics 18-4
Disabling and Enabling LLDP Globally 18-5
Disabling and Enabling LLDP on an Interface 18-5
Configuring LLDP-MED TLVs 18-6
Monitoring and Maintaining LLDP and LLDP-MED 18-7
CHAPTER 19 Configuring UDLD 19-1
Understanding UDLD 19-1
Modes of Operation 19-1
Methods to Detect Unidirectional Links 19-2
Configuring UDLD 19-3
Default UDLD Configuration 19-3
Configuration Guidelines 19-4
Enabling UDLD Globally 19-4
Enabling UDLD on an Interface 19-5
Resetting an Interface Disabled by UDLD 19-5
Displaying UDLD Status 19-6
CHAPTER 20 Configuring SPAN 20-1
Understanding SPAN 20-1
Local SPAN 20-2
SPAN Concepts and Terminology 20-2
SPAN Sessions 20-2
Monitored Traffic 20-3
Source Ports 20-3
Source VLANs 20-4
VLAN Filtering 20-4

Contents
xvi
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Destination Port 20-5
SPAN Interaction with Other Features 20-5
Configuring SPAN 20-6
Default SPAN Configuration 20-6
Configuring Local SPAN 20-7
SPAN Configuration Guidelines 20-7
Creating a Local SPAN Session 20-7
Creating a Local SPAN Session and Configuring Incoming Traffic 20-10
Specifying VLANs to Filter 20-11
Displaying SPAN Status 20-12
CHAPTER 21 Configuring RMON 21-1
Understanding RMON 21-1
Configuring RMON 21-2
Default RMON Configuration 21-3
Configuring RMON Alarms and Events 21-3
Collecting Group History Statistics on an Interface 21-5
Collecting Group Ethernet Statistics on an Interface 21-5
Displaying RMON Status 21-6
CHAPTER 22 Configuring System Message Logging 22-1
Understanding System Message Logging 22-1
Configuring System Message Logging 22-2
System Log Message Format 22-2
Default System Message Logging Configuration 22-3
Disabling Message Logging 22-4
Setting the Message Display Destination Device 22-5
Synchronizing Log Messages 22-6
Enabling and Disabling Time Stamps on Log Messages 22-7
Enabling and Disabling Sequence Numbers in Log Messages 22-8
Defining the Message Severity Level 22-8
Limiting Syslog Messages Sent to the History Table and to SNMP 22-10
Enabling the Configuration-Change Logger 22-10
Configuring UNIX Syslog Servers 22-12
Logging Messages to a UNIX Syslog Daemon 22-12
Configuring the UNIX System Logging Facility 22-12
Displaying the Logging Configuration 22-13

Contents
xvii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
CHAPTER 23 Configuring SNMP 23-1
Understanding SNMP 23-1
SNMP Versions 23-2
SNMP Manager Functions 23-3
SNMP Agent Functions 23-4
SNMP Community Strings 23-4
Using SNMP to Access MIB Variables 23-4
SNMP Notifications 23-5
SNMP ifIndex MIB Object Values 23-6
Configuring SNMP 23-6
Default SNMP Configuration 23-7
SNMP Configuration Guidelines 23-7
Disabling the SNMP Agent 23-8
Configuring Community Strings 23-8
Configuring SNMP Groups and Users 23-10
Configuring SNMP Notifications 23-12
Setting the Agent Contact and Location Information 23-15
Limiting TFTP Servers Used Through SNMP 23-15
SNMP Examples 23-16
Displaying SNMP Status 23-17
CHAPTER 24 Managing Network Security with ACLs 24-1
Understanding ACLs 24-1
Handling Fragmented and Unfragmented Traffic 24-2
Configuring IPv4 ACLs 24-3
Creating Standard and Extended IPv4 ACLs 24-3
Access List Numbers 24-4
Creating a Numbered Standard ACL 24-5
Creating a Numbered Extended ACL 24-6
Resequencing ACEs in an ACL 24-8
Creating Named Standard and Extended ACLs 24-8
Using Time Ranges with ACLs 24-10
Including Comments in ACLs 24-12
Applying an IPv4 ACL to a Terminal Line 24-12
Applying an IPv4 ACL to a Management VLAN 24-13
IPv4 ACL Configuration Examples 24-14
Numbered ACLs 24-14
Extended ACLs 24-14
Named ACL 24-15

Contents
xviii
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Time Range Applied to an IP ACL 24-15
Commented IP ACL Entries 24-15
Displaying IPv4 ACL Configuration 24-16
CHAPTER 25 Configuring QoS 25-1
Understanding QoS 25-1
Basic QoS Model 25-2
Classification 25-2
Configuring QoS 25-3
Default QoS Configuration 25-3
Default Egress Queue Configuration 25-3
Standard QoS Configuration Guidelines 25-4
Applying QoS on Interfaces 25-4
General QoS Guidelines 25-4
Enabling QoS Globally 25-4
Configuring Classification Using Port Trust States 25-4
Configuring the Trust State on Ports within the QoS Domain 25-5
Configuring the CoS Value for an Interface 25-6
Configuring a Trusted Boundary to Ensure Port Security 25-7
Configuring the Egress Expedite Queue 25-8
Displaying QoS Information 25-8
CHAPTER 26 Configuring EtherChannels and Link-State Tracking 26-1
Understanding EtherChannels 26-1
EtherChannel Overview 26-2
Port-Channel Interfaces 26-4
Port Aggregation Protocol 26-5
PAgP Modes 26-5
PAgP Interaction with Virtual Switches and Dual-Active Detection 26-6
PAgP Interaction with Other Features 26-6
Link Aggregation Control Protocol 26-6
LACP Modes 26-7
LACP Interaction with Other Features 26-7
EtherChannel On Mode 26-7
Load-Balancing and Forwarding Methods 26-8
Configuring EtherChannels 26-9
Default EtherChannel Configuration 26-10
EtherChannel Configuration Guidelines 26-10
Configuring Layer 2 EtherChannels 26-11

Contents
xix
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Configuring EtherChannel Load-Balancing 26-13
Configuring the PAgP Learn Method and Priority 26-14
Configuring LACP Hot-Standby Ports 26-15
Configuring the LACP System Priority 26-16
Configuring the LACP Port Priority 26-16
Displaying EtherChannel, PAgP, and LACP Status 26-17
Understanding Link-State Tracking 26-18
Configuring Link-State Tracking 26-21
Default Link-State Tracking Configuration 26-21
Link-State Tracking Configuration Guidelines 26-21
Configuring Link-State Tracking 26-21
Displaying Link-State Tracking Status 26-22
CHAPTER 27 Configuring IPv6 Unicast Hosts 27-1
Understanding IPv6 27-1
IPv6 Addresses 27-2
Supported IPv6 Host Features 27-2
128-Bit Wide Unicast Addresses 27-3
DNS for IPv6 27-3
ICMPv6 27-3
Default Router Preference 27-3
IPv6 Stateless Autoconfiguration and Duplicate Address Detection 27-4
IPv6 Applications 27-4
SNMP and Syslog Over IPv6 27-4
HTTP(s) Over IPv6 27-5
Configuring IPv6 27-5
Default IPv6 Configuration 27-5
Configuring IPv6 Addressing and Enabling IPv6 Host 27-6
Configuring Default Router Preference 27-7
Configuring IPv6 ICMP Rate Limiting 27-8
Displaying IPv6 27-8
CHAPTER 28 Troubleshooting 28-1
Recovering from a Software Failure 28-2
Recovering from a Lost or Forgotten Password 28-3
Procedure with Password Recovery Enabled 28-4
Procedure with Password Recovery Disabled 28-6
Recovering from a Command Switch Failure 28-8

Contents
xx
Catalyst 2360 Switch Software Configuration Guide
OL-19808-01
Replacing a Failed Command Switch with a Cluster Member 28-8
Replacing a Failed Command Switch with Another Switch 28-10
Recovering from Lost Cluster Member Connectivity 28-11
Preventing Autonegotiation Mismatches 28-11
SFP Module Security and Identification 28-12
Monitoring SFP Module Status 28-12
Monitoring Temperature 28-12
Using Ping 28-13
Understanding Ping 28-13
Executing Ping 28-13
Using Layer 2 Traceroute 28-14
Understanding Layer 2 Traceroute 28-14
Usage Guidelines 28-14
Displaying the Physical Path 28-15
Using IP Traceroute 28-15
Understanding IP Traceroute 28-16
Executing IP Traceroute 28-16
Using Debug Commands 28-17
Enabling Debugging on a Specific Feature 28-18
Enabling All-System Diagnostics 28-18
Redirecting Debug and Error Message Output 28-18
Using the show platform forward Command 28-19
Using the crashinfo Files 28-21
Basic crashinfo Files 28-21
Extended crashinfo Files 28-21
Using On-Board Failure Logging 28-22
Understanding OBFL 28-22
Configuring OBFL 28-23
Displaying OBFL Information 28-23
CHAPTER 29 Configuring Online Diagnostics 29-1
Understanding Online Diagnostics 29-1
Configuring Online Diagnostics 29-2
Scheduling Online Diagnostics 29-2
Configuring Health-Monitoring Diagnostics 29-3
Running Online Diagnostic Tests 29-5
Starting Online Diagnostic Tests 29-5
Displaying Online Diagnostic Tests and Test Results 29-6