Cisco HWIC-4ESW - EtherSwitch HWIC Switch User manual

Corporate Headquarters:
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
© 2006 Cisco Systems, Inc. All rights reserved.
Cisco HWIC-4ESW and HWIC-D-9ESW
EtherSwitch Interface Cards
First Published: May 17, 2005
Last Updated: April 15, 2006
This document provides configuration tasks for the 4-port Cisco HWIC-4ESW and the 9-port
Cisco HWIC-D-9ESW EtherSwitch high-speed WAN interface cards (HWICs) hardware feature
supported on Cisco 1800 (modular), Cisco 2800, and Cisco 3800 series integrated services routers.
Cisco EtherSwitch HWICs are 10/100BASE-T Layer 2 Ethernet switches with Layer 3 routing
capability. (Layer 3 routing is forwarded to the host and is not actually performed at the switch.) Traffic
between different VLANs on a switch is routed through the router platform. Any one port on a
Cisco EtherSwitch HWIC may be configured as a stacking port to link to another Cisco EtherSwitch
HWIC or EtherSwitch network module in the same system. An optional power module can also be added
to provide inline power for IP telephones. The HWIC-D-9ESW HWIC requires a double-wide card slot.
This hardware feature does not introduce any new or modified Cisco IOS commands.
Finding Feature Information in This Module
Your Cisco IOS software release may not support all of the features documented in this module. To reach
links to specific feature documentation in this module and to see a list of the releases in which each feature is
supported, use the “Feature Information for the Cisco HWIC-4ESW and the Cisco HWIC-D-9ESW
EtherSwitch Cards” section on page 117.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
Contents
2
Book Title
Contents
The following sections provide information about the Cisco EtherSwitch HWICs.
•Prerequisites for EtherSwitch HWICs, page 2
•Restrictions for EtherSwitch HWICs, page 2
•Information About EtherSwitch HWICs, page 3
•How to Configure EtherSwitch HWICs, page 5
•Configuration Examples for EtherSwitch HWICs, page 106
•Additional References, page 116
•Command Reference, page 117
Prerequisites for EtherSwitch HWICs
The following are prerequisites to configuring EtherSwitch HWICs:
•Configuration of IP routing. (Refer to the Cisco IOS IP Configuration Guide.)
•Use of the Cisco IOS T release, beginning with Release 12.3(8)T4 or later for Cisco HWIC-4ESW
and Cisco HWIC-D-9ESW support. (Refer to the Cisco IOS documentation.)
Restrictions for EtherSwitch HWICs
The following restrictions apply to the Cisco HWIC-4ESW and the Cisco HWIC-D-9ESW EtherSwitch
HWICs:
•No more than two Ethernet Switch HWICs or network modules may be installed in a host router.
Multiple Ethernet Switch HWICs or network modules installed in a host router will not act
independently of each other. They must be stacked, as they will not work at all otherwise.
•The ports of a Cisco EtherSwitch HWIC must NOT be connected to the Fast Ethernet/Gigabit
onboard ports of the router.
•There is no inline power on the ninth port (port 8) of the HWIC-D-9ESW card.
•There is no Auto MDIX support on the ninth port (port 8) of the HWIC-D-9ESW card when either
speed or duplex is not set to auto.
•There is no support for online insertion/removal (OIR) of the EtherSwitch HWICs.
•When Ethernet Switches have been installed and configured in a host router, OIR of the
CompactFlash memory card in the router must not occur. OIR of the CompactFlash memory card
will compromise the configuration of the Ethernet Switches.
•VTP pruning is not supported.
•There is a limit of 200 secure MAC addresses per module that can be supported by an EtherSwitch
HWIC.

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
Prerequisites for Installing Two Ethernet Switch Network Modules in a Single Chassis
3
Book Title
Prerequisites for Installing Two Ethernet Switch Network
Modules in a Single Chassis
A maximum of two Ethernet switch network modules can be installed in a single chassis. If two Ethernet
switch network modules of any type are installed in the same chassis, the following configuration
requirements must be met:
•Both Ethernet switch network modules must have an optional Gigabit Ethernet expansion board
installed.
•An Ethernet crossover cable must be connected to the two Ethernet switch network modules using
the optional Gigabit Ethernet expansion board ports.
•Intrachassis stacking for the optional Gigabit Ethernet expansion board ports must be configured.
For information about intrachassis stacking configuration, see the 16- and 36-Port Ethernet Switch
Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 series feature document.
Note Without this configuration and connection, duplications will occur in the VLAN databases, and
unexpected packet handling may occur.
Information About EtherSwitch HWICs
To configure the Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch HWICs, you should understand the
following concepts:
•VLANs, page 3
•Inline Power for Cisco IP Phones, page 4
•Layer 2 Ethernet Switching, page 4
•802.1x Authentication, page 4
•Spanning Tree Protocol, page 4
•Cisco Discovery Protocol, page 4
•Switched Port Analyzer, page 4
•IGMP Snooping, page 4
•Storm Control, page 5
•Intrachassis Stacking, page 5
•Fallback Bridging, page 5
VLANs
For information on the concept of VLANs, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1047027

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
Information About EtherSwitch HWICs
4
Book Title
Inline Power for Cisco IP Phones
For information on the concept of inline power for Cisco IP phones, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1048439
Layer 2 Ethernet Switching
For information on the concept of Layer 2 Ethernet switching, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1048478
802.1x Authentication
For information on the concept of 802.1x authentication, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1051006
Spanning Tree Protocol
For information on the concept of Spanning Tree Protocol, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1048458
Cisco Discovery Protocol
For information on the concept of the Cisco Discovery Protocol, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1048498
Switched Port Analyzer
For information on the concept of switched port analyzer, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1053663
IGMP Snooping
For information on the concept of IGMP snooping, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1053727

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
5
Book Title
Storm Control
For information on the concept of storm control, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1051018
Intrachassis Stacking
For information on the concept of intrachassis stacking, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1051061
Fallback Bridging
For information on the concept of fallback bridging, refer to the material at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt1636nm.ht
m#1054833
How to Configure EtherSwitch HWICs
See the following sections for configuration tasks for the EtherSwitch HWICs.
•Configuring VLANs, page 6
•Configuring VLAN Trunking Protocol, page 10
•Configuring Layer 2 Interfaces, page 13
•Configuring 802.1x Authentication, page 23
•Configuring Spanning Tree, page 35
•Configuring MAC Table Manipulation, page 46
•Configuring Cisco Discovery Protocol, page 50
•Configuring the Switched Port Analyzer (SPAN), page 53
•Configuring Power Management on the Interface, page 56
•Configuring IP Multicast Layer 3 Switching, page 57
•Configuring IGMP Snooping, page 61
•Configuring Per-Port Storm Control, page 68
•Configuring Stacking, page 71
•Configuring Fallback Bridging, page 73
•Configuring Separate Voice and Data Subnets, page 89
•Managing the EtherSwitch HWIC, page 92

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
6
Book Title
Configuring VLANs
This section describes how to configure VLANs on the switch and contains the following sections:
•Adding a VLAN Instance, page 6
•Deleting a VLAN Instance from the Database, page 8
Adding a VLAN Instance
A total of 15 VLANs can be supported by an EtherSwitch HWIC.
Follow the steps below to configure a Fast Ethernet interface as Layer 2 access.
SUMMARY STEPS
1. enable
2. vlan database
3. vlan vlan_id
4. exit
DETAILED STEPS
Verifying the VLAN Configuration
You can verify the VLAN configuration in VLAN database mode.
Use the show command in VLAN database mode to verify the VLAN configuration, as shown below:
Router(vlan)# show
VLAN ISL Id: 1
Name: default
Command Purpose
Step 1 enable
Example:
Router> enable
Enables privileged EXEC mode.
•Enter your password if prompted.
Step 2 vlan database
Example:
Router# vlan database
Enters VLAN configuration mode.
Step 3 vlan vlan_id
Example:
Router(vlan)# vlan 1
Adds an Ethernet VLAN.
Step 4 exit
Example:
Router(vlan)# exit
Updates the VLAN database, propagates it throughout the
administrative domain, and returns to privileged EXEC mode.

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
7
Book Title
Media Type: Ethernet
VLAN 802.10 Id: 100001
State: Operational
MTU: 1500
Translational Bridged VLAN: 1002
Translational Bridged VLAN: 1003
VLAN ISL Id: 2
Name: VLAN0002
Media Type: Ethernet
VLAN 802.10 Id: 100002
State: Operational
MTU: 1500
VLAN ISL Id: 3
Name: Red_VLAN
Media Type: Ethernet
VLAN 802.10 Id: 100003
State: Operational
MTU: 1500
VLAN ISL Id: 1002
Name: fddi-default
Media Type: FDDI
VLAN 802.10 Id: 101002
State: Operational
MTU: 1500
Bridge Type: SRB
Translational Bridged VLAN: 1
Translational Bridged VLAN: 1003
VLAN ISL Id: 1003
Name: token-ring-default
Media Type: Token Ring
VLAN 802.10 Id: 101003
State: Operational
MTU: 1500
Bridge Type: SRB
Ring Number: 0
Bridge Number: 1
Parent VLAN: 1005
Maximum ARE Hop Count: 7
Maximum STE Hop Count: 7
Backup CRF Mode: Disabled
Translational Bridged VLAN: 1
Translational Bridged VLAN: 1002
VLAN ISL Id: 1004
Name: fddinet-default
Media Type: FDDI Net
VLAN 802.10 Id: 101004
State: Operational
MTU: 1500
Bridge Type: SRB
Bridge Number: 1
STP Type: IBM
VLAN ISL Id: 1005
Name: trnet-default
Media Type: Token Ring Net
VLAN 802.10 Id: 101005
State: Operational
MTU: 1500
Bridge Type: SRB

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
8
Book Title
Bridge Number: 1
STP Type: IBM
Router(vlan)# exit
APPLY completed.
Exiting....
Router#
Router#
Enter the show vlan-switch command in EXEC mode using the Cisco IOS CLI to verify the VLAN
configuration, as shown below.
Router# show vlan-switch
VLAN Name Status Ports
---- -------------------------------- --------- ----------------------------------
1 default active Fa0/1/1, Fa0/1/2, Fa0/1/3, Fa0/1/4
Fa0/1/5, Fa0/1/6, Fa0/1/7, Fa0/1/8
Fa0/3/0, Fa0/3/2, Fa0/3/3, Fa0/3/4
Fa0/3/5, Fa0/3/6, Fa0/3/7, Fa0/3/8
2 VLAN0002 active Fa0/1/0
3 Red_VLAN active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
2 enet 100002 1500 - - - - - 0 0
3 enet 100003 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 1 1003
1003 tr 101003 1500 1005 0 - - srb 1 1002
1004 fdnet 101004 1500 - - 1 ibm - 0 0
1005 trnet 101005 1500 - - 1 ibm - 0 0
Router#
Deleting a VLAN Instance from the Database
You cannot delete the default VLANs for the different media types: Ethernet VLAN 1 and FDDI or
Token Ring VLANs 1002 to 1005.
Follow the steps below to delete a VLAN from the database.
SUMMARY STEPS
1. enable
2. vlan database
3. no vlan vlan_id
4. exit

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
9
Book Title
DETAILED STEPS
Verifying VLAN Deletion
You can verify that a VLAN has been deleted from the switch in VLAN database mode.
Use the show command in VLAN database mode to verify that a VLAN has been deleted from the
switch, as shown in the following output example:
Router(vlan)# show
VLAN ISL Id: 1
Name: default
Media Type: Ethernet
VLAN 802.10 Id: 100001
State: Operational
MTU: 1500
Translational Bridged VLAN: 1002
Translational Bridged VLAN: 1003
VLAN ISL Id: 1002
Name: fddi-default
Media Type: FDDI
VLAN 802.10 Id: 101002
State: Operational
MTU: 1500
Bridge Type: SRB
Translational Bridged VLAN: 1
Translational Bridged VLAN: 1003
<output truncated>
Router(vlan)#
Command Purpose
Step 1 enable
Example:
Router> enable
Enables privileged EXEC mode.
•Enter your password if prompted.
Step 2 vlan database
Example:
Router# vlan database
Enters VLAN configuration mode.
Step 3 no vlan vlan_id
Example:
Router(vlan)# no vlan 1
Deletes an Ethernet VLAN.
Step 4 exit
Example:
Router(vlan)# exit
Updates the VLAN database, propagates it throughout the
administrative domain, and returns to privileged EXEC mode.

Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards
How to Configure EtherSwitch HWICs
10
Book Title
Enter the show vlan-switch brief command in EXEC mode, using the Cisco IOS CLI to verify that a
VLAN has been deleted from the switch, as shown in the following output example:
Router# show vlan-switch brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1/0, Fa0/1/1, Fa0/1/2
Fa0/1/3, Fa0/1/4, Fa0/1/5
Fa0/1/6, Fa0/1/7, Fa0/1/8
300 VLAN0300 active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
Router#
Configuring VLAN Trunking Protocol
This section describes how to configure the VLAN Trunking Protocol (VTP) on an EtherSwitch HWIC,
and contains the following tasks:
•Configuring a VTP Server, page 10
•Configuring a VTP Client, page 12
•Disabling VTP (VTP Transparent Mode), page 12
•Verifying VTP, page 13
Note VTP pruning is not supported by EtherSwitch HWICs.
Configuring a VTP Server
When a switch is in VTP server mode, you can change the VLAN configuration and have it propagate
throughout the network.
Follow the steps below to configure the switch as a VTP server.
SUMMARY STEPS
1. enable
2. vlan database
3. vtp server
4. vtp domain domain_name
5. vtp password password_value
6. exit