Cisco SD208T-NA Instruction Manual

Cisco Small Business 200 Series Smart Switch
Administration Guide Release 1.2.7
ADMINISTRATION
GUIDE

Cisco Small Business 200 Series Smart Switch Administration Guide 2
Contents
Table of Contents
Chapter 1: Getting Started 1
Starting the Web-based Switch Configuration Utility 1
Quick Start Switch Configuration 5
Interface Naming Conventions 5
Window Navigation 7
Chapter 2: Viewing Statistics 11
Viewing Ethernet Interfaces 11
Viewing Etherlike Statistics 12
Viewing 802.1X EAP Statistics 13
Managing RMON 15
Chapter 3: Managing System Logs 18
Setting System Log Settings 18
Setting Remote Logging Settings 20
Viewing Memory Logs 21
Chapter 4: Managing System Files 23
Types of System Files 23
Upgrade/Backup Firmware/Language 27
Downloading or Backing-up a Configuration or Log 29
Viewing Configuration Files Properties 32
Copying Configuration Files 33
DHCP Auto Configuration 34
Chapter 5: General Administrative Information 38
System Information 38
Switch Models 40
Rebooting the Switch 42

Cisco Small Business 200 Series Smart Switch Administration Guide 3
Contents
Monitoring the Fan Status and Temperature 43
Defining Idle Session Timeout 44
Pinging a Host 44
Chapter 6: System Time 46
System Time Options 46
SNTP Modes 48
Configuring System Time 49
Chapter 7: Managing Device Diagnostics 56
Testing Copper Ports 56
Displaying Optical Module Status 58
Configuring Port and VLAN Mirroring 59
Viewing CPU Utilization and Secure Core Technology 61
Chapter 8: Configuring Discovery 63
Configuring Bonjour Discovery 63
LLDP and CDP 64
Configuring LLDP 65
Configuring CDP 86
Chapter 9: Port Management 95
Configuring Ports 95
Setting Basic Port Configuration 96
Configuring Link Aggregation 98
Configuring Green Ethernet 106
Chapter 10: Smartports 113
Overview 113
What is a Smartport 114
Smartport Types 114

Cisco Small Business 200 Series Smart Switch Administration Guide 4
Contents
Smartport Macros 117
Macro Failure and the Reset Operation 118
How the Smartport Feature Works 119
Auto Smartport 120
Error Handling 124
Default Configuration 124
Relationships with Other Features and Backwards Compatibility 125
Common Smartport Tasks 125
Web GUI 127
Built-in Smartport Macros 132
Chapter 11: Managing Power-over-Ethernet Devices 156
PoE on the Switch 156
Configuring PoE Properties 158
Configuring the PoE Power, Priority, and Class 159
Chapter 12: VLAN Management 163
VLANs 163
Configuring Default VLAN Settings 166
Creating VLANs 167
Configuring VLAN Interface Settings 168
Defining VLAN Membership 170
Voice VLAN 174
Chapter 13: Configuring the Spanning Tree Protocol 187
STP Flavors 187
Configuring STP Status and Global Settings 188
Defining Spanning Tree Interface Settings 190
Configuring Rapid Spanning Tree Settings 192

Cisco Small Business 200 Series Smart Switch Administration Guide 5
Contents
Chapter 14: Managing MAC Address Tables 195
Configuring Static MAC Addresses 196
Managing Dynamic MAC Addresses 196
Chapter 15: Configuring Multicast Forwarding 199
Multicast Forwarding 199
Defining Multicast Properties 202
Adding MAC Group Address 204
Adding IP Multicast Group Addresses 206
Configuring IGMP Snooping 207
MLD Snooping 209
Querying IGMP/MLD IP Multicast Group 212
Defining Multicast Router Ports 213
Defining Forward All Multicast 214
Defining Unregistered Multicast Settings 215
Chapter 16: Configuring IP Information 217
Management and IP Interfaces 217
Configuring ARP 229
Domain Name Systems 231
Chapter 17: Configuring Security 235
Defining Users 236
Configuring RADIUS 239
Configuring Management Access Authentication 241
Defining Management Access Method 242
Configuring TCP/UDP Services 247
Defining Storm Control 248
Configuring Port Security 250
Configuring 802.1X 252

Cisco Small Business 200 Series Smart Switch Administration Guide 6
Contents
Denial of Service Prevention 259
Chapter 18: Using the SSL Feature 261
SSL Overview 261
Dependencies On Other Features 261
Default Settings and Configuration 262
SSL Server Authentication Settings 262
Chapter 19: Secure Sensitive Data 264
Introduction to the SSD Feature 264
SSD Management 265
SSD Properties 270
Configuration Files 271
Encryption of Sensitive Data 278
SSD Management Channels 279
Menu CLI and Password Recovery 280
Configuring SSD 280
282
Chapter 20: Configuring Quality of Service 283
QoS Features and Components 284
Configuring QoS - General 285
.Managing QoS Statistics 294

1
Cisco Small Business 200 Series Smart Switch Administration Guide 7
Getting Started
This section provides an introduction to the web-based configuration utility, and
covers the following topics:
•Starting the Web-based Switch Configuration Utility
•Quick Start Switch Configuration
•Interface Naming Conventions
•Window Navigation
Starting the Web-based Switch Configuration Utility
This section describes how to navigate the web-based switch configuration utility.
If you are using a pop-up blocker, make sure it is disabled.
Browsers have the following restrictions:
•If you are using older versions of Internet Explorer, you cannot directly use
an IPv6 address to access the switch. You can, however, use the DNS
(Domain Name System) server to create a domain name that contains the
IPv6 address, and then use that domain name in the address bar in place of
the IPv6 address.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of the IPv6 link local address to access the
switch from your browser.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco Small Business 200 Series Smart Switch Administration Guide 8
1
Launching the Configuration Utility
To open the web-based configuration utility:
STEP 1 Open a Web browser.
STEP 2 Enter the IP address of the switch you are configuring in the address bar on the
browser, and then press Enter. The
Login page opens.
NOTE When the switch is using the factory default IP address of 192.168.1.254, its power
LED flashes continuously. When the switch is using a DHCP assigned IP address or
an administrator-configured static IP address, the power LED is on solid.
Logging In
The default username is cisco and the default password is cisco. The first time
that you log in with the default username and password, you are required to enter
a new password.
NOTE If you have not previously selected a language for the GUI, the language of the Login
page is determined by the language(s) requested by your browser and the
languages configured on your switch. If your browser requests Chinese, for
example, and Chinese has been loaded into your switch, the Login page is
automatically displayed in Chinese. If Chinese has not been loaded into your
switch, the Login page is displayed in English.
The languages loaded into the switch have a language and country code (en-US,
en-GB and so on). For the Login page to be automatically displayed in a particular
language, based on the browser request, both the language and country code of
the browser request must match those of the language loaded on the switch. If the
browser request contains only the language code without a country code (for
example: fr). The first embedded language with a matching language code is
taken (without matching the country code, for example: fr_CA).
To log in to the device configuration utility:
STEP 1 Enter the username/password. The password can contain up to 64 ASCII
characters. Password-complexity rules are described in the Setting Password
Complexity Rules section of the Configuring Security chapter.
STEP 2 If you are not using English, select the desired language from the Language drop-
down menu. To add a new language to the switch or update a current one, refer to
the Upgrade/Backup Firmware/Language section.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco Small Business 200 Series Smart Switch Administration Guide 9
1
STEP 3 If this is the first time that you logged on with the default user ID (cisco) and the
default password (cisco) or your password has expired, the
Change Password
Page opens. See Password Expiration for additional information.
STEP 4 Choose whether to select Disable Password Complexity Enforcement or not.
For more information on password complexity, see the Setting Password
Complexity Rules section.
STEP 5 Enter the new password and click Apply.
When the login attempt is successful, the Getting Started page opens.
If you entered an incorrect username or password, an error message is displayed
and the Login page remains displayed on the window.
Select Don’t show this page on startup to prevent the
Getting Started page from
being displayed each time that you log on to the system. If you select this option,
the System Summary page is opened instead of the Getting Started page.
HTTP/HTTPS
You can either open an HTTP session (not secured) by clicking Log In, or you can
open an HTTPS (secured) session, by clicking Secure Browsing (HTTPS). You are
asked to approve the logon with a default RSA key, and an HTTPS session is
opened.
For information on how to configure HTTPS, see SSL Server Authentication
Settings.
Password Expiration
The New Password page is displayed:
•The first time you access the switch with the default username cisco and
password cisco. This page forces you to replace the factory default
password.
•When the password expires, this page forces you to select a new
password.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco Small Business 200 Series Smart Switch Administration Guide 10
1
Logging Out
By default, the application logs out after ten minutes of inactivity. You can change
this default value as described in the Defining Idle Session Timeout section in the
General Administrative Information and Operations chapter.
CAUTION Unless the Running Configuration is copied to the Startup Configuration, rebooting
the switch will remove all changes made since the last time the file was saved. Save
the Running Configuration to the Startup Configuration before logging off to
preserve any changes you made during this session.
A flashing red X icon to the left of the Save application link indicates that Running
Configuration changes have not yet been saved to the Startup Configuration file.
The flashing can be disabled by clicking on the Disable Save Icon Blinking button
on the Copy/Save Configuration page
When the switch auto-discovers a device, such as an IP phone (see Chapter 10,
“What is a Smartport”), and it configures the port appropriately for the device.
These configuration commands are written to the Running Configuration file. This
causes the Save icon to begin blinking when the you log on even though you did not
make any configuration changes.
When you click Save, the Copy/Save Configuration page is displayed. Save the
Running Configuration file by copying it to the Startup Configuration file. After this
save, the red X icon and the Save application link are no longer displayed.
To logout, click Logout in the top right corner of any page. The system logs out of
the switch.
When a timeout occurs or you intentionally log out of the system, a message is
displayed and the
Login page opens, with a message indicating the logged-out
state. After you log in, the application returns to the initial page.
The initial page displayed depends on the “Do not show this page on startup”
option in the Getting Started page. If you did not select this option, the initial page
is the Getting Started page. If you did select this option, the initial page is the
System Summary page.

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 11
1
Quick Start Switch Configuration
To simplify switch configuration through quick navigation, the Getting Started
page provides links to the most commonly used pages.
There are two hot links on the Getting Started page that take you to Cisco web
pages for more information. Clicking on the Support link takes you to the switch
product support page, and clicking on the Forums link takes you to the Small
Business Support Community page.
Interface Naming Conventions
Within the GUI, interfaces are denoted by concatenating the following elements:
Links on the Getting Started page
Category Link Name (on the Page) Linked Page
Change Management
Applications and Services
TCP/UDP Services page
Change Device IP Address
IPv4 Interface page
Create VLAN
Create VLAN page
Configure Port Settings
Port Setting page
Device Status System Summary System Summary page
Port Statistics
interface page
RMON Statistics
Statistics page
View Log
RAM Memory page
Quick Access Change Device Password User Accounts page
Upgrade Device Software
Upgrade/Backup Firmware/
Language
page
Backup Device Configuration
Download/Backup
Configuration/Log
page
Configure QoS
QoS Properties page
Configure Port Mirroring
Port and VLAN Mirroring page

Getting Started
Interface Naming Conventions
Cisco Small Business 200 Series Smart Switch Administration Guide 12
1
•Type of interface: The following types of interfaces are found on the various
types of devices:
-Fast Ethernet (10/100 bits)—These are displayed as FE.
-Gigabit Ethernet ports (10/100/1000 bits)—These are displayed as
GE.
-LAG (Port Channel)—These are displayed as LAG.
-VLAN—These are displayed as VLAN.
-Tunnel —These are displayed as Tunnel.
•Interface Number: Port, LAG, tunnel or VLAN ID

Getting Started
Window Navigation
Cisco Small Business 200 Series Smart Switch Administration Guide 13
1
Window Navigation
This section describes the features of the web-based switch configuration utility.
Application Header
The Application Header is displayed on every page. It provides the following
application links:
Application Links
Application Link
Name
Description
A flashing red X icon displayed to the left of the Save
application link indicates that Running Configuration
changes have been made that have not yet been saved to
the Startup Configuration file. The flashing of the red X can
be disabled on the Copy/Save Configuration page.
Click Save to display the Copy/Save Configuration page.
Save the Running Configuration file by copying it to the
Startup Configuration file type on the switch. After this
save, the red X icon and the Save application link are no
longer displayed. When the switch is rebooted, it copies
the Startup Configuration file type to the Running
Configuration and sets the switch parameters according to
the data in the Running Configuration.
Username Displays the name of the user logged on to the switch. The
default username is cisco. (The default password is cisco).

Getting Started
Window Navigation
Cisco Small Business 200 Series Smart Switch Administration Guide 14
1
Language Menu This menu provides the following options:
•Select a language: Select one of the languages that
appear in the menu. This language will be the web-
based configuration utility language.
•Download Language: Add a new language to the
switch.
•Delete Language: Deletes the second language on
the switch. The first language (English) cannot be
deleted.
•Debug: Used for translation purposes. If you select
this option, all web-based configuration utility labels
disappear and in their place are the IDs of the
strings that correspond to the IDs in the language
file.
NOTE To upgrade a language file, use the Upgrade/
Backup Firmware/Language page.
Logout Click to log out of the web-based switch configuration
utility.
About Click to display the switch name and switch version
number.
Help Click to display the online help.
The SYSLOG Alert Status icon is displayed when a
SYSLOG message, above the critical severity level, is
logged. Click the icon to open the RAM Memory page.
After you access this page, the SYSLOG Alert Status icon
is no longer displayed. To display the page when there is
not an active SYSLOG message, Click Status and
Statistics > View Log > RAM Memory.
Application Links (Continued)
Application Link
Name
Description

Getting Started
Window Navigation
Cisco Small Business 200 Series Smart Switch Administration Guide 15
1
Management Buttons
The following table describes the commonly-used buttons that appear on various
pages in the system.
Management Buttons
Button Name Description
Use the pull-down menu to configure the number of
entries per page.
Indicates a mandatory field.
Add Click to display the related Add page and add an entry to a
table. Enter the information and click Apply to save it to the
Running Configuration. Click Close to return to the main
page. Click Save to display the Copy/Save Configuration
page and save the Running Configuration to the Startup
Configuration file type on the switch.
Apply Click to apply changes to the Running Configuration on the
switch. If the switch is rebooted, the Running Configuration
is lost, unless it is saved to the Startup Configuration file
type or another file type. Click Save to display the Copy/
Save Configuration page and save the Running
Configuration to the Startup Configuration file type on the
switch.
Cancel Click to reset changes made on the page.
Clear All
Interfaces
Counters
Click to clear the statistic counters for all interfaces.
Clear Interface
Counters
Click to clear the statistic counters for the selected
interface.
Clear Logs Clears log files.
Clear Table Clears table entries.
Close Returns to main page. If any changes were not applied to
the Running Configuration, a message is displayed.

Getting Started
Window Navigation
Cisco Small Business 200 Series Smart Switch Administration Guide 16
1
Copy Settings A table typically contains one or more entries containing
configuration settings. Instead of modifying each entry
individually, it is possible to modify one entry and then
copy the selected entry to multiple entries, as described
below:
1. Select the entry to be copied. Click Copy Settings to
display the popup.
2. Enter the destination entry numbers in the to field.
3. Click Apply to save the changes and click Close to
return to the main page.
Delete After selecting an entry in the table, click Delete to
remove.
Details Click to display the details associated with the entry
selected.
Edit Select the entry and click Edit. The Edit page opens, and
the entry can be modified.
1. Click Apply to save the changes to the Running
Configuration.
2. Click Close to return to the main page.
Go Enter the query filtering criteria and click Go. The results
are displayed on the page.
Test Click Te st to perform the related tests.
Management Buttons (Continued)
Button Name Description

2
Cisco Small Business 200 Series Smart Switch Administration Guide 18
Viewing Statistics
This section describes how to view switch statistics.
It covers the following topics:
•Viewing Ethernet Interfaces
•Viewing Etherlike Statistics
•Viewing 802.1X EAP Statistics
•Managing RMON
Viewing Ethernet Interfaces
The Interface page displays traffic statistics per port. The refresh rate of the
information can be selected.
This page is useful for analyzing the amount of traffic that is both sent and
received and its dispersion (Unicast, Multicast, and Broadcast).
To display Ethernet statistics and/or set the refresh rate:
STEP 1 Click Status and Statistics > Interface. The Interface page is displayed.
STEP 2 Enter the parameters.
•Interface—Select the type of interface and specific interface for which
Ethernet statistics are to be displayed.
•Refresh Rate—Select the time period that passes before the interface
Ethernet statistics are refreshed. The available options are:
-No Refresh—Statistics are not refreshed.
-15 Sec—Statistics are refreshed every 15 seconds.
-30 Sec—Statistics are refreshed every 30 seconds.

Viewing Statistics
Viewing Etherlike Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 19
2
-60 Sec—Statistics are refreshed every 60 seconds.
The Receive Statistics area displays information about incoming packets.
•Total By te s (O ctets)—Octets received, including bad packets and FCS
octets, but excluding framing bits.
•Unicast Packets—Good Unicast packets received.
•Multicast Packets—Good Multicast packets received.
•Broadcast Packets—Good Broadcast packets received.
•Packets with Errors—Packets with errors received.
The Transmit Statistics area displays information about outgoing packets.
•Total By te s (O ctets)—Octets transmitted, including bad packets and FCS
octets, but excluding framing bits.
•Unicast Packets—Good Unicast packets transmitted.
•Multicast Packets—Good Multicast packets transmitted.
•Broadcast Packets—Good Broadcast packets transmitted.
To clear statistics counters:
•Click Clear Interface Counters to clear counters for the interface displayed.
•Click Clear All Interface Counters to clear counters for all interfaces.
Viewing Etherlike Statistics
The Etherlike page displays statistics per port according to the Etherlike MIB
standard definition. The refresh rate of the information can be selected. This page
provides more detailed information regarding errors in the physical layer (Layer 1),
which might disrupt traffic.
To view Etherlike Statistics and/or set the refresh rate:
STEP 1 Click Status and Statistics > Etherlike. The Etherlike page is displayed.
STEP 2 Enter the parameters.

Viewing Statistics
Viewing 802.1X EAP Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 20
2
•Interface—Select the type of interface and specific interface for which
Ethernet statistics are to be displayed.
•Refresh Rate—Select the amount of time that passes before the Etherlike
statistics are refreshed.
The fields are displayed for the selected interface.
•Frame Check Sequence (FCS) Errors—Received frames that failed the
CRC (cyclic redundancy checks).
•Single Collision Frames—Frames that were involved in a single collision,
but were successfully transmitted.
•Late Collisions—Collisions that have been detected after the first 512 bits
of data.
•Excessive Collisions—Number of transmissions rejected due to excessive
collisions.
•Oversize Packets—Packets greater than 2000 octets received.
•Internal MAC Receive Errors—Frames rejected because of receiver errors.
•Pause Frames Received—Received flow control pause frames.
•Pause Frames Transmitted—Flow control pause frames transmitted from
the selected interface.
To clear statistics counters:
•Click Clear Interface Counters to clear the selected interface’s counters.
•Click Clear All Interface Counters to clear the counters of all interfaces.
Viewing 802.1X EAP Statistics
The 802.1x EAP page displays detailed information regarding the EAP (Extensible
Authentication Protocol) frames that were sent or received. To configure the
802.1X feature, see the 802.1X Properties page.
To view the EAP Statistics and/or set the refresh rate:

Viewing Statistics
Viewing 802.1X EAP Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 21
2
STEP 1 Click Status and Statistics > 802.1x EAP. The 802.1x EAP page is displayed.
STEP 2 Select the Interface that is polled for statistics.
STEP 3 Select the time period (Refresh Rate) that passes before the EAP statistics are
refreshed.
The values are displayed for the selected interface.
•EAPOL Frames Received—Valid EAPOL frames received on the port.
•EAPOL Frames Transmitted—Valid EAPOL frames transmitted by the port.
•EAPOL Start Frames Received—EAPOL Start frames received on the port.
•EAPOL Logoff Frames Received—EAPOL Logoff frames received on the
port.
•EAP Response/ID Frames Received—EAP Resp/ID frames received on the
port.
•EAP Response Frames Received—EAP Response frames received by the
port (other than Resp/ID frames).
•EAP Request/ID Frames Transmitted—EAP Req/ID frames transmitted by
the port.
•EAP Request Frames Transmitted—EAP Request frames transmitted by
the port.
•Invalid EAPOL Frames Received—Unrecognized EAPOL frames received
on this port.
•EAP Length Error Frames Received—EAPOL frames with an invalid Packet
Body Length received on this port.
•Last EAPOL Frame Version—Protocol version number attached to the most
recently received EAPOL frame.
•Last EAPOL Frame Source—Source MAC address attached to the most
recently received EAPOL frame.
To clear statistics counters:
•Click Clear Interface Counters to clear the selected interface’s counters.
•Click Clear All Interface Counters to clear the counters of all interfaces.