Cisco ESW 500 Series Instruction Manual

Cisco Small Business Pro
ESW 500 Series Switches
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-19128-01
Xd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
A^kZ!EaVn!VcYAZVgcVcY8^hXdHidgZVgZhZgk^XZbVg`h0VcY6XXZhhGZ\^higVg!6^gdcZi!6hncXDH!7g^c\^c\i]ZBZZi^c\IdNdj!8ViVanhi!8896!889E!88>:!88>E!88C6!88CE!88HE!88KE!8^hXd!i]Z8^hXd8Zgi^[^ZY
>ciZgcZildg`:meZgiad\d!8^hXd>DH!8^hXdEgZhh!8^hXdHnhiZbh!8^hXdHnhiZbh8Ve^iVa!i]Z8^hXdHnhiZbhad\d!8^hXdJc^in!8daaVWdgVi^dcL^i]djiA^b^iVi^dc!:i]Zg;Vhi!:i]ZgHl^iX]!:kZci8ZciZg!;VhiHiZe!;daadlBZ
7gdlh^c\!;dgbH]VgZ!<^\V9g^kZ!=dbZA^c`!>ciZgcZiFjdi^Zci!>DH!^E]dcZ!^Fj^X`HijYn!>gdcEdgi!i]Z>gdcEdgiad\d!A^\]iHigZVb!A^c`hnh!BZY^VIdcZ!BZZi^c\EaVXZ!BZZi^c\EaVXZ8]^bZHdjcY!B<M!CZildg`Zgh!CZildg`^c\
6XVYZbn!CZildg`GZ\^higVg!E8Cdl!E>M!EdlZgEVcZah!Egd8dccZXi!HXg^eiH]VgZ!HZcYZg7VhZ!HB6GIcZi!HeZXigjb:meZgi!HiVX`L^hZ!I]Z;VhiZhiLVnid>cXgZVhZNdjg>ciZgcZiFjdi^Zci!IgVchEVi]!LZW:m!VcYi]ZLZW:m
ad\dVgZgZ\^hiZgZYigVYZbVg`hd[8^hXdHnhiZbh!>cX#VcY$dg^ihV[[^a^ViZh^ci]ZJc^iZYHiViZhVcYXZgiV^cdi]ZgXdjcig^Zh#
6aadi]ZgigVYZbVg`hbZci^dcZY^ci]^hYdXjbZcidglZWh^iZVgZi]ZegdeZgind[i]Z^ggZheZXi^kZdlcZgh#I]ZjhZd[i]ZldgYeVgicZgYdZhcdi^beanVeVgicZgh]^egZaVi^dch]^eWZilZZc8^hXdVcYVcndi]ZgXdbeVcn#%-%.G
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh

Contents
ESW 500 Series Switches Administration Guide 3
Chapter 1: Getting Started 1
Introduction 1
Typical Installation Methods 2
Default Configuration settings on the ESW 500 Series Switches 3
Physical Connectivity 3
Connecting to the Switch 6
Using the Default Static IP Address 6
Using a Dynamic IP Address Allocated to the Switch By DHCP 11
Using the Cisco Configuration Assistant (CCA) 13
Navigating The Cisco Switch Configuration Utility 18
Using the Management Buttons 18
Performing Common Configuration Tasks 19
Checking the Software Version 19
Checking the System Information 19
Viewing what Devices are Attached to the Switch 20
Configuring the VLAN Settings for the Switch 21
Configuring individual ports using Cisco Smartport Roles 22
Smartport Roles 23
Checking the Device Power Consumption 27
Saving the Configuration 29
Upgrading the Firmware on the Switch 30
Resetting the Device 35
Manual Reset 36
Logging Off the Device 36
Using The Switch Console Port 37
Selecting Menu Options and Actions 37
Chapter 2: Managing Device Information 41
Understanding the Dashboards 41
Ports 48
Health and Monitoring 48
Common Tasks 49

Contents
ESW 500 Series Switches Administration Guide 4
Help 49
Defining System Information 49
Viewing Device Health 51
Resetting the Device 53
Managing Cisco Discovery Protocol 54
Defining the Bonjour Discovery Protocol 57
TCAM Utilization 59
Chapter 3: Managing Smart Ports 61
Configuring Smart Ports for Desktops 62
Configuring Smart Ports for IP Phones and Desktops 66
Configuring Smart Ports for Access Points 69
Configuring Smart Ports for Switches 71
Configuring Smart Ports for Routers 73
Configuring Smart ports for Guests 76
Configuring Smart ports for Servers 78
Configuring Smart ports for Printers 80
Configuring Smart ports for VS Camera 83
Configuring Smart Ports for Other 85
Chapter 4: Configuring System Time 88
Defining System Time 88
Defining SNTP Settings 92
Defining SNTP Authentication 94
Chapter 5: Configuring Device Security 97
Passwords Management 97
Modifying the Local User Settings 99
Defining Authentication 100
Defining Profiles 100
Modifying an Authentication Profile 103

Contents
ESW 500 Series Switches Administration Guide 5
Mapping Authentication Profiles 104
Defining TACACS+ 106
Modifying TACACS+ Settings 109
Defining RADIUS 111
Modifying RADIUS Server Settings 115
Defining Access Methods 116
Defining Access Profiles 117
Defining Profile Rules 120
Modifying Profile Rules 124
Defining Traffic Control 126
Defining Storm Control 127
Modifying Storm Control 129
Defining Port Security 130
Modifying Port Security 134
Defining 802.1x 135
Defining 802.1X Properties 136
Defining Port Authentication 138
Modifying 8021X Security 141
Defining Authentication 144
Modifying Authentication Settings 146
Authenticated Hosts 147
Defining Access Control 149
Defining MAC Based ACL 149
Adding Rule to MAC Based ACL 153
Modifying MAC Based ACL 155
Defining IP Based ACL 157
Modifying IP Based ACL 163
Adding an IP Based Rule 166
Defining ACL Binding 168
Modifying ACL Binding 169
Defining DoS Prevention 170
DoS Global Settings 170

Contents
ESW 500 Series Switches Administration Guide 6
Defining Martian Addresses 172
Defining DHCP Snooping 174
Defining DHCP Snooping Properties 175
Defining DHCP Snooping on VLANs 177
Defining Trusted Interfaces 178
Binding Addresses to the DHCP Snooping Database 180
Query By 181
Query Results 182
Defining IP Source Guard 184
Configuring IP Source Guard Properties 184
Defining IP Source Guard Interface Settings 186
Querying the IP Source Binding Database 188
TCAM Resources 189
Query By 190
Query Results 190
Defining Dynamic ARP Inspection 191
Defining ARP Inspection Properties 192
Defining ARP Inspection Trusted Interfaces 194
Defining ARP Inspection List 196
Static ARP Inspection Table 197
Adding a Binding List entry 198
Assigning ARP Inspection VLAN Settings 199
Enabled VLAN Table 200
Chapter 6: Configuring Ports 202
Port Settings 202
Modifying Port Settings 204
Chapter 7: Configuring VLANs 208
Defining VLAN Properties 209
Modifying VLANs 211
Defining VLAN Membership 212
Modifying VLAN Membership 213

Contents
ESW 500 Series Switches Administration Guide 7
Assigning Ports to Multiple VLANs 215
Defining Interface Settings 218
Modifying VLAN Interface Settings 219
Defining GVRP Settings 221
Modifying GVRP Settings 223
Defining Protocol Groups 225
Modifying Protocol Groups 226
Defining a Protocol Port 227
Chapter 8: Configuring IP Information 230
IP Addressing 230
Defining DHCP Relay 232
Defining DHCP Relay Interfaces 234
Managing ARP 236
ARP Table 238
Modifying ARP Settings 239
Domain Name System 240
Defining DNS Servers 240
Default Parameters 241
DNS Server Details 242
Mapping DNS Hosts 242
Chapter 9: Defining Address Tables 245
Defining Static Addresses 245
Defining Dynamic Addresses 248
Query By Section 250
Chapter 10: Configuring Multicast Forwarding 251
IGMP Snooping 251
Modifying IGMP Snooping 253
Defining Multicast Group 255

Contents
ESW 500 Series Switches Administration Guide 8
Modifying a Multicast Group 257
Defining Multicast Forwarding 258
Modifying Multicast Forwarding 260
Defining Unregistered Multicast Settings 261
Chapter 11: Configuring Spanning Tree 264
Defining STP Properties 264
Global Settings 265
Defining Spanning Tree Interface Settings 267
Modifying Interface Settings 271
Defining Rapid Spanning Tree 273
Modifying RTSP 276
Defining Multiple Spanning Tree 278
Defining MSTP Properties 279
Defining MSTP Instance to VLAN 280
Defining MSTP Instance Settings 282
Defining MSTP Interface Settings 283
Chapter 12: Configuring Quality of Service 290
Managing QoS Statistics 291
Policer Statistics 291
Add Aggregated Policer Statistics 293
Resetting Aggregate Policer Statistics Counters 296
Queues Statistics 296
Adding Queues Statistics 298
Resetting Queue Statistics Counters 298
Defining General Settings 299
Defining CoS 299
Modifying Interface Priorities 301
Defining QoS Queue 302
Mapping CoS to Queue 305
Mapping DSCP to Queue 307

Contents
ESW 500 Series Switches Administration Guide 9
Configuring Bandwidth 308
Modifying Bandwidth Settings 309
Configuring VLAN Rate Limit 311
Modifying the VLAN Rate Limit 313
Defining Advanced QoS Mode 313
Configuring DSCP Mapping 314
Defining Class Mapping 316
Defining Aggregate Policer 318
Modifying QoS Aggregate Policer 320
Configuring Policy Table 321
Modifying the QoS Policy Profile 324
Defining Policy Binding 326
Modifying QoS Policy Binding Settings 328
Defining QoS Basic Mode 329
Rewriting DSCP Values 330
Chapter 13: Configuring SNMP 332
SNMP Versions 332
SNMP v1 and v2 332
SNMP v3 332
Configuring SNMP Security 333
Defining the SNMP Engine ID 333
Defining SNMP Views 335
Defining SNMP Users 337
Modifying SNMP Users 339
Define SNMP Groups 340
Modifying SNMP Group Profile Settings 343
Defining SNMP Communities 344
Modifying SNMP Community Settings 347
Defining Trap Management 348
Defining Trap Settings 348
Configuring Station Management 350

Contents
ESW 500 Series Switches Administration Guide 10
Modifying SNMP Notifications 354
Defining SNMP Filter Settings 356
Managing Cisco Discovery Protocol 359
Chapter 14: Managing System Files 362
Software Upgrade 363
Save Configuration 364
Copy Configuration 366
Via TFTP 367
Via HTTP 368
Active Image 368
DHCP Auto Configuration 370
Chapter 15: Managing Power-over-Ethernet Devices 371
Defining PoE Settings 371
Chapter 16: Managing System Logs 375
Enabling System Logs 375
Viewing the Device Memory Logs 377
Clearing Message Logs 378
Viewing the System Flash Logs 379
Clearing Flash Logs 380
Remote Log Servers 380
Modifying Syslog Server Settings 383
Chapter 17: Viewing Statistics 386
Viewing Ethernet Statistics 386
Defining Interface Statistics 386
Resetting Interface Statistics Counters 388
Viewing Etherlike Statistics 388
Resetting Etherlike Statistics Counters 390
Viewing GVRP Statistics 390

Contents
ESW 500 Series Switches Administration Guide 11
Resetting GVRP Statistics Counters 392
Viewing EAP Statistics 392
Managing RMON Statistics 394
Viewing RMON Statistics 395
Resetting RMON Statistics Counters 397
Configuring RMON History 397
Defining RMON History Control 397
Viewing the RMON History Table 400
Defining RMON Events Control 402
Modifying RMON Event Log Settings 404
Viewing the RMON Events Logs 405
Defining RMON Alarms 406
Modifying RMON Alarm Settings 410
Chapter 18: Aggregating Ports 413
Defining EtherChannel Management 414
Defining EtherChannel Settings 416
Modifying EtherChannel Settings 418
Configuring LACP 420
Chapter 19: Managing Device Diagnostics 423
Ethernet Port Testing 423
Performing GBIC Uplink Testing 426
Configure Span (Port Mirroring) 427
Monitoring CPU Utilization 429

Getting Started
Introduction
ESW 500 Series Switches Administration Guide 1
1
Getting Started
Introduction
Thank you for choosing the Cisco Small Business Pro ESW 500 Series Switch. The
ESW 500 series is a family of Ethernet switches that addresses network
infrastructure and access needs of small business customers for voice, data, PCs,
Servers, and video applications. They are simple to deploy and manage for use
with IP phones, Access Points, IP cameras, and Network Attached Storage
servers as well as most any Ethernet device. The ESW 500 series includes seven
Fast Ethernet and GigE switches in both 24- and 48-port configurations with PoE
and non-PoE options. The ESW 500 series also includes two 8 port PoE switches
in Fast Ethernet and GigE models. The switch models covered in this guide are:
This section provides information about the different methods to connect to the
switch, as well as some examples of a typical installation. It also provides an
introduction to the user interface, and includes the following:
•Typical Installation Methods, page 2
•Connecting to the Switch, page 6
-Using the Default Static IP Address, page 6
-Using a Dynamic IP Address Allocated to the Switch By DHCP, page 11
-Using the Cisco Configuration Assistant (CCA), page 13
•Navigating The Cisco Switch Configuration Utility, page 18
ESW 500 Series Switch Port Configuration
ESW 520-8P 8 Port 10/100 PoE
ESW 540-8P 8 Port 10/100/1000 PoE
ESW 520-24 24 Port 10/100
ESW 520-24P 24 Port 10/100 PoE
ESW 520-48 48 Port 10/100
ESW 520-48P 48 Port 10/100 PoE
ESW 540-24 24 Port 10/100/1000
ESW 540-24P 24 Port 10/100/1000 PoE
ESW-540-48 48 Port 10/100/1000

Getting Started
Typical Installation Methods
ESW 500 Series Switches Administration Guide 2
1
•Performing Common Configuration Tasks, page 19
•Using The Switch Console Port, page 37
Typical Installation Methods
The first step in any installation scenario is to connect to the switch and configure
basic connectivity to ensure it communicates with the rest of the network.
The following diagram illustrates three common installation scenarios:
In the first two scenarios, called VOICE and SECURITY DATA, you are adding an
ESW 500 switch to a new or existing Cisco Smart Business Communications
Systems (SBCS) network deployment. This deployment is either a VOICE network
with UC520 being the anchor device or SECURITY / DATA network with the
SR520 being the anchor device.

Getting Started
Typical Installation Methods
ESW 500 Series Switches Administration Guide 3
1
In the third scenario, called Heterogeneous Network, you are adding an ESW 500
switch to a network which does not have any Cisco Small Business products.
Default Configuration settings on the ESW 500 Series
Switches
The ESW 500 series switches ship with a default configuration that enables
simplified installation and plug and play when connected into a Cisco Small
Business network such as SBCS. The default settings are as follows:
•Management VLAN is VLAN 1
•Management IP Address is obtained via DHCP by default. If the switch
times out on a Dynamic Host Configuration Protocol (DHCP) response, it
falls back to a static IP address 192.168.10.2 with subnet mask of
255.255.255.0.
•Voice VLAN is VLAN 100
•Cisco Discovery Protocol (CDP) is enabled on all ports
Physical Connectivity
Physical connections to the switch are described in the tables and graphics on the
next two pages.
NOTE On the 8 port devices, the Uplink and the GBIC ports can not be used at the same
time.
Uplink Ports
ESW 500 Series Switch Copper SFP (mini-GBIC) Layer 2 Ethernet Ports
ESW 520-8P GE1 GE1 1-8
ESW 540-8P GE1 GE1 1-8
ESW 520-24/24P GE1-GE4 GE3-GE4 1-24
ESW 520-48/48P GE1-GE2 GE3-GE4 1-48
ESW 540-24/24P 11-12, 23-24 GE1-GE4 1-10, 13-22
ESW 540-48 23-24, 47-48 GE1-GE4 1-22, 25-46

Getting Started
Typical Installation Methods
ESW 500 Series Switches Administration Guide 4
1
The ESW 540-24/24P and ESW 540-48 use shared ports. When connecting to
uplink ports, the GE ports take precedence over the Copper ports. For example,
on an ESW 540-24, if you plug a device into GE1, you cannot use port 11. The other
port relationships are shown in the following table:
Compare the following table with the four examples of switch front panels that are
on the next page:
ESW 500 Series Switch GE Port Takes Precedence Over Copper Port
ESW 540-24/24P GE1 11
ESW 540-24/24P GE2 23
ESW 540-24/24P GE3 12
ESW 540-24/24P GE4 24
ESW 540-48 GE1 23
ESW 540-48 GE2 47
ESW 540-48 GE3 24
ESW 540-48 GE4 48
# Port Description
1Switch
Ports
The switch is equipped with auto-sensing, Ethernet (802.3) network ports
which use RJ-45 connectors. The Ethernet ports support network
speeds of 10 Mbps, 100 Mbps, or 1000 Mbps. They can operate in half
and full-duplex modes. Auto-sensing technology enables each port to
automatically detect the speed of the device connected to it, and adjust
its speed and duplex accordingly. These ports are typically used for
devices such as PCs, servers, IP phones and Access Points., and are
highlighted RED in the examples.
2Uplink
Ports
These ports are typically used for connecting to other switches, routers,
or network backbone devices, and are highlighted in YELLOW in the
examples. The mini-GBIC ports are a type of uplink port.
3mini-
GBIC
Ports
The mini-GBIC (Gigabit Interface Converter) port is a connection point for
a mini-GBIC expansion module, allowing the switch to be uplinked via
fiber to another switch. Each mini-GBIC port provides a link to a high-
speed network segment or individual workstation at speeds of up to
1000 Mbps. The mini-GBIC ports are highlighted in GREEN in the
examples.

Getting Started
Typical Installation Methods
ESW 500 Series Switches Administration Guide 5
1
ESW-520-24/24P
ESW-520-48/48P
ESW-540-24/24P
ESW-540-48

Getting Started
Connecting to the Switch
ESW 500 Series Switches Administration Guide 6
1
Connecting to the Switch
This section contains information for starting the Switch Configuration Utility to
provision the switch features. There are four different options to connect to the
switch, three of which launch the
Switch Configuration Utility. They are:
•Using the default static IP address of the switch
•Using Cisco Configuration Assistant
•Using a dynamic IP address allocated to the switch via DHCP (from DHCP
server)
•Using the Console
The first three options to connect to the switch will open the ESW 500 Series
Switch Configuration Utility, which is a web-based device manager used to
provision the switch. The console option uses a terminal emulation program such
as HyperTerminal (bundled with Windows) or Putty (freeware).
NOTE Using the Console does not launch the Switch Configuration Utility and is
recommended for advanced users only. Using the Console is discussed at the end
of this chapter.
Using the Default Static IP Address
To start configuring the switch, follow these steps:
STEP 1 Make sure that there are no devices connected to the switch, the switch is not
connected to the network, and then power up the switch by connecting the power
cord.
NOTE If the switch was previously connected to the network, it may have obtained
an IP address from a DHCP server. To perform a static IP address installation,
disconnect all devices and remove the switch from the network. Then
perform a power cycle of the switch by unplugging the power cable, waiting
5 seconds, and plugging it back in.
STEP 2 Connect a PC to port 1 of the switch with an ethernet cable.

Getting Started
Connecting to the Switch
ESW 500 Series Switches Administration Guide 7
1
STEP 3 If your PC is using a static IP address, make note of your current IP address
settings, and record them for future use.
STEP 4 Place the PC on the same subnet of the switch by configuring the PC with the
following parameters:
•Static IP address — 192.168.10.11
•Subnet mask — 255.255.255.0
•Default gateway — 192.168.10.2
NOTE Details on how to change the IP address on your PC are dependent upon the
type of architecture and operating system installed. Use your PC’s local Help
and Support functionality and search for “IP Addressing”.
STEP 5 Open a web browser. Cisco recommends Internet Explorer version 6 or higher, or
Firefox version 3. Accept any requests to install Active-X plugin.
Enter http://192.168.10.2 in the address bar and press Enter. The
Log In page
opens:

Getting Started
Connecting to the Switch
ESW 500 Series Switches Administration Guide 8
1
Log In page
STEP 6 Enter a user name and password. The default user name is cisco and the default
password is
cisco . Passwords are both case sensitive and alpha-numeric. Click
Log In.
STEP 7 While the system is verifying the login attempt, the Log In Progress Indicator
appears. The indicator dots rotate clockwise to indicate that the system is still
working. If the login attempt is successful, the Change Username/Password Page
opens.
NOTE After logging in using the default username and password you must change
to a new username and password. Only after the change has been made, can
you operate the device through the web browser. Every time you log in using
cisco as the username and password, you will be redirected to the Change
Username/Password Page.
STEP 8 Click Apply. The Switch Configuration Utility - System Dashboard Page opens.

Getting Started
Connecting to the Switch
ESW 500 Series Switches Administration Guide 9
1
Switch Configuration Utility - System Dashboard
STEP 9 Click Monitor & Device Properties > System Management > IP Addressing > IPv4
Interface
. The IPv4 Interface page opens.