Cisco ESW 500 Series Instruction Manual

Cisco Small Business Pro
ESW 500 Series Switches
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-19128-01
Xd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
A^kZ!EaVn!VcYAZVgcVcY8^hXdHidgZVgZhZgk^XZbVg`h0VcY6XXZhhGZ\^higVg!6^gdcZi!6hncXDH!7g^c\^c\i]ZBZZi^c\IdNdj!8ViVanhi!8896!889E!88>:!88>E!88C6!88CE!88HE!88KE!8^hXd!i]Z8^hXd8Zgi^[^ZY
>ciZgcZildg`:meZgiad\d!8^hXd>DH!8^hXdEgZhh!8^hXdHnhiZbh!8^hXdHnhiZbh8Ve^iVa!i]Z8^hXdHnhiZbhad\d!8^hXdJc^in!8daaVWdgVi^dcL^i]djiA^b^iVi^dc!:i]Zg;Vhi!:i]ZgHl^iX]!:kZci8ZciZg!;VhiHiZe!;daadlBZ
7gdlh^c\!;dgbH]VgZ!<^\V9g^kZ!=dbZA^c`!>ciZgcZiFjdi^Zci!>DH!^E]dcZ!^Fj^X`HijYn!>gdcEdgi!i]Z>gdcEdgiad\d!A^\]iHigZVb!A^c`hnh!BZY^VIdcZ!BZZi^c\EaVXZ!BZZi^c\EaVXZ8]^bZHdjcY!B<M!CZildg`Zgh!CZildg`^c\
6XVYZbn!CZildg`GZ\^higVg!E8Cdl!E>M!EdlZgEVcZah!Egd8dccZXi!HXg^eiH]VgZ!HZcYZg7VhZ!HB6GIcZi!HeZXigjb:meZgi!HiVX`L^hZ!I]Z;VhiZhiLVnid>cXgZVhZNdjg>ciZgcZiFjdi^Zci!IgVchEVi]!LZW:m!VcYi]ZLZW:m
ad\dVgZgZ\^hiZgZYigVYZbVg`hd[8^hXdHnhiZbh!>cX#VcY$dg^ihV[[^a^ViZh^ci]ZJc^iZYHiViZhVcYXZgiV^cdi]ZgXdjcig^Zh#
6aadi]ZgigVYZbVg`hbZci^dcZY^ci]^hYdXjbZcidglZWh^iZVgZi]ZegdeZgind[i]Z^ggZheZXi^kZdlcZgh#I]ZjhZd[i]ZldgYeVgicZgYdZhcdi^beanVeVgicZgh]^egZaVi^dch]^eWZilZZc8^hXdVcYVcndi]ZgXdbeVcn#%-%.G
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh

Contents
ESW 500 Series Switches Administration Guide 3
Chapter 1: Getting Started 1
Introduction 1
Typical Installation Methods 2
Default Configuration settings on the ESW 500 Series Switches 3
Physical Connectivity 3
Connecting to the Switch 6
Using the Default Static IP Address 6
Using a Dynamic IP Address Allocated to the Switch By DHCP 11
Using the Cisco Configuration Assistant (CCA) 13
Navigating The Cisco Switch Configuration Utility 18
Using the Management Buttons 18
Performing Common Configuration Tasks 19
Checking the Software Version 19
Checking the System Information 19
Viewing what Devices are Attached to the Switch 20
Configuring the VLAN Settings for the Switch 21
Configuring individual ports using Cisco Smartport Roles 22
Smartport Roles 23
Checking the Device Power Consumption 27
Saving the Configuration 29
Upgrading the Firmware on the Switch 30
Resetting the Device 35
Manual Reset 36
Logging Off the Device 36
Using The Switch Console Port 37
Selecting Menu Options and Actions 37
Chapter 2: Managing Device Information 41
Understanding the Dashboards 41
Ports 48
Health and Monitoring 48
Common Tasks 49

Contents
ESW 500 Series Switches Administration Guide 4
Help 49
Defining System Information 49
Viewing Device Health 51
Resetting the Device 53
Managing Cisco Discovery Protocol 54
Defining the Bonjour Discovery Protocol 57
TCAM Utilization 59
Chapter 3: Managing Smart Ports 61
Configuring Smart Ports for Desktops 62
Configuring Smart Ports for IP Phones and Desktops 66
Configuring Smart Ports for Access Points 69
Configuring Smart Ports for Switches 71
Configuring Smart Ports for Routers 73
Configuring Smart ports for Guests 76
Configuring Smart ports for Servers 78
Configuring Smart ports for Printers 80
Configuring Smart ports for VS Camera 83
Configuring Smart Ports for Other 85
Chapter 4: Configuring System Time 88
Defining System Time 88
Defining SNTP Settings 92
Defining SNTP Authentication 94
Chapter 5: Configuring Device Security 97
Passwords Management 97
Modifying the Local User Settings 99
Defining Authentication 100
Defining Profiles 100
Modifying an Authentication Profile 103

Contents
ESW 500 Series Switches Administration Guide 5
Mapping Authentication Profiles 104
Defining TACACS+ 106
Modifying TACACS+ Settings 109
Defining RADIUS 111
Modifying RADIUS Server Settings 115
Defining Access Methods 116
Defining Access Profiles 117
Defining Profile Rules 120
Modifying Profile Rules 124
Defining Traffic Control 126
Defining Storm Control 127
Modifying Storm Control 129
Defining Port Security 130
Modifying Port Security 134
Defining 802.1x 135
Defining 802.1X Properties 136
Defining Port Authentication 138
Modifying 8021X Security 141
Defining Authentication 144
Modifying Authentication Settings 146
Authenticated Hosts 147
Defining Access Control 149
Defining MAC Based ACL 149
Adding Rule to MAC Based ACL 153
Modifying MAC Based ACL 155
Defining IP Based ACL 157
Modifying IP Based ACL 163
Adding an IP Based Rule 166
Defining ACL Binding 168
Modifying ACL Binding 169
Defining DoS Prevention 170
DoS Global Settings 170

Contents
ESW 500 Series Switches Administration Guide 6
Defining Martian Addresses 172
Defining DHCP Snooping 174
Defining DHCP Snooping Properties 175
Defining DHCP Snooping on VLANs 177
Defining Trusted Interfaces 178
Binding Addresses to the DHCP Snooping Database 180
Query By 181
Query Results 182
Defining IP Source Guard 184
Configuring IP Source Guard Properties 184
Defining IP Source Guard Interface Settings 186
Querying the IP Source Binding Database 188
TCAM Resources 189
Query By 190
Query Results 190
Defining Dynamic ARP Inspection 191
Defining ARP Inspection Properties 192
Defining ARP Inspection Trusted Interfaces 194
Defining ARP Inspection List 196
Static ARP Inspection Table 197
Adding a Binding List entry 198
Assigning ARP Inspection VLAN Settings 199
Enabled VLAN Table 200
Chapter 6: Configuring Ports 202
Port Settings 202
Modifying Port Settings 204
Chapter 7: Configuring VLANs 208
Defining VLAN Properties 209
Modifying VLANs 211
Defining VLAN Membership 212
Modifying VLAN Membership 213

Contents
ESW 500 Series Switches Administration Guide 7
Assigning Ports to Multiple VLANs 215
Defining Interface Settings 218
Modifying VLAN Interface Settings 219
Defining GVRP Settings 221
Modifying GVRP Settings 223
Defining Protocol Groups 225
Modifying Protocol Groups 226
Defining a Protocol Port 227
Chapter 8: Configuring IP Information 230
IP Addressing 230
Defining DHCP Relay 232
Defining DHCP Relay Interfaces 234
Managing ARP 236
ARP Table 238
Modifying ARP Settings 239
Domain Name System 240
Defining DNS Servers 240
Default Parameters 241
DNS Server Details 242
Mapping DNS Hosts 242
Chapter 9: Defining Address Tables 245
Defining Static Addresses 245
Defining Dynamic Addresses 248
Query By Section 250
Chapter 10: Configuring Multicast Forwarding 251
IGMP Snooping 251
Modifying IGMP Snooping 253
Defining Multicast Group 255

Contents
ESW 500 Series Switches Administration Guide 8
Modifying a Multicast Group 257
Defining Multicast Forwarding 258
Modifying Multicast Forwarding 260
Defining Unregistered Multicast Settings 261
Chapter 11: Configuring Spanning Tree 264
Defining STP Properties 264
Global Settings 265
Defining Spanning Tree Interface Settings 267
Modifying Interface Settings 271
Defining Rapid Spanning Tree 273
Modifying RTSP 276
Defining Multiple Spanning Tree 278
Defining MSTP Properties 279
Defining MSTP Instance to VLAN 280
Defining MSTP Instance Settings 282
Defining MSTP Interface Settings 283
Chapter 12: Configuring Quality of Service 290
Managing QoS Statistics 291
Policer Statistics 291
Add Aggregated Policer Statistics 293
Resetting Aggregate Policer Statistics Counters 296
Queues Statistics 296
Adding Queues Statistics 298
Resetting Queue Statistics Counters 298
Defining General Settings 299
Defining CoS 299
Modifying Interface Priorities 301
Defining QoS Queue 302
Mapping CoS to Queue 305
Mapping DSCP to Queue 307

Contents
ESW 500 Series Switches Administration Guide 9
Configuring Bandwidth 308
Modifying Bandwidth Settings 309
Configuring VLAN Rate Limit 311
Modifying the VLAN Rate Limit 313
Defining Advanced QoS Mode 313
Configuring DSCP Mapping 314
Defining Class Mapping 316
Defining Aggregate Policer 318
Modifying QoS Aggregate Policer 320
Configuring Policy Table 321
Modifying the QoS Policy Profile 324
Defining Policy Binding 326
Modifying QoS Policy Binding Settings 328
Defining QoS Basic Mode 329
Rewriting DSCP Values 330
Chapter 13: Configuring SNMP 332
SNMP Versions 332
SNMP v1 and v2 332
SNMP v3 332
Configuring SNMP Security 333
Defining the SNMP Engine ID 333
Defining SNMP Views 335
Defining SNMP Users 337
Modifying SNMP Users 339
Define SNMP Groups 340
Modifying SNMP Group Profile Settings 343
Defining SNMP Communities 344
Modifying SNMP Community Settings 347
Defining Trap Management 348
Defining Trap Settings 348
Configuring Station Management 350

Contents
ESW 500 Series Switches Administration Guide 10
Modifying SNMP Notifications 354
Defining SNMP Filter Settings 356
Managing Cisco Discovery Protocol 359
Chapter 14: Managing System Files 362
Software Upgrade 363
Save Configuration 364
Copy Configuration 366
Via TFTP 367
Via HTTP 368
Active Image 368
DHCP Auto Configuration 370
Chapter 15: Managing Power-over-Ethernet Devices 371
Defining PoE Settings 371
Chapter 16: Managing System Logs 375
Enabling System Logs 375
Viewing the Device Memory Logs 377
Clearing Message Logs 378
Viewing the System Flash Logs 379
Clearing Flash Logs 380
Remote Log Servers 380
Modifying Syslog Server Settings 383
Chapter 17: Viewing Statistics 386
Viewing Ethernet Statistics 386
Defining Interface Statistics 386
Resetting Interface Statistics Counters 388
Viewing Etherlike Statistics 388
Resetting Etherlike Statistics Counters 390
Viewing GVRP Statistics 390