Cisco SF 300-08 Instruction Manual

Cisco Small Business 300 Series Managed Switch
Administration Guide
10/100 Switches SF 300-08, SF 302-08, SF 302-08MP, SF 302-08P, SF 300-24,
SF 300-24P, SF 300-48, SF 300-48P
Gigabit Switches SG 300-10, SG 300-10MP, SG 300-10P, SG 300-20, SG 300-28, SG 300-
28P, SG 300-52
ADMINISTRATION
GUIDE

Cisco Small Business 300 Series Managed Switch Administration Guide 2
Contents
Chapter 1: Getting Started 1
Starting the Web-based Switch Configuration Utility 1
Launching the Configuration Utility 2
Logging In 2
Password Expiration 3
Logging Out 3
Quick Start Switch Configuration 4
Window Navigation 6
Application Header 6
Management Buttons 7
Chapter 2: Viewing Statistics 10
Viewing Ethernet Interface 10
Viewing Etherlike Statistics 12
Viewing GVRP Statistics 13
Viewing 802.1X EAP Statistics 14
Viewing TCAM Utilization 15
Managing RMON Statistics 17
Viewing RMON Statistics 17
Configuring RMON History 19
Viewing the RMON History Table 20
Defining RMON Events Control 21
Viewing the RMON Events Logs 22
Defining RMON Alarms 23
Chapter 3: Managing System Logs 25
Setting System Log Settings 25
Setting Remote Logging Settings 27
Viewing Memory Logs 28
RAM Memory 28
Flash Memory 29

Cisco Small Business 300 Series Managed Switch Administration Guide 3
Contents
Chapter 4: Managing System Files 30
Upgrade/Backup Firmware/Language 33
Uploading a New Firmware or Language File 33
Selecting the Active Image 36
Downloading or Backing-up a Configuration or Log 37
Displaying Configuration File Properties 39
Copying or Saving Switch Configuration File Types 40
Setting DHCP Auto Configuration 41
Chapter 5: General Administrative Information and Operations 43
System Information 43
Displaying the System Summary 43
Configuring the System Settings 45
Switch Models 46
Rebooting the Switch 47
Monitoring the Fan Status and Temperature 49
Defining Idle Session Timeout 49
Chapter 6: System Time 50
System Time Options 51
Configuring System Time 52
Setting SNTP 54
Defining SNTP Authentication 56
Chapter 7: Managing Device Diagnostics 58
Testing Copper Ports 58
Displaying Optical Module Status 61
Configuring Port and VLAN Mirroring 62
Viewing CPU Utilization 64

Cisco Small Business 300 Series Managed Switch Administration Guide 4
Contents
Chapter 8: Configuring Discovery 65
Configuring Bonjour Discovery 65
Bonjour for a System in Layer 2 Mode 65
Bonjour for a System in Layer 3 Mode 66
Configuring LLDP 67
Setting LLDP Properties 68
Editing LLDP Port Settings 69
LLDP MED Protocol 71
Setting LLDP MED Network Policy 72
Configuring LLDP MED Port Settings 73
Displaying LLDP Port Status 74
Displaying LLDP Local Information 76
Displaying LLDP Neighbors Information 79
Accessing LLDP Statistics 83
LLDP Overloading 84
Chapter 9: Port Management 87
Port Management Workflow 87
Setting the Basic Port Configuration 88
Configuring Link Aggregation 92
Static and Dynamic LAG Workflow 93
Defining LAG Management 94
Defining Member Ports in a LAG 94
Configuring LAG Settings 95
Configuring LACP 97
Setting Port LACP Parameter Settings 98
Green Ethernet 99
Setting Global Green Ethernet Properties 100
Setting per Port Green Ethernet Properties 101

Cisco Small Business 300 Series Managed Switch Administration Guide 5
Contents
Chapter 10: Managing Power-over-Ethernet Devices 103
PoE on the Switch 103
PoE Features 103
PoE Operation 104
PoE Configuration Considerations 105
Configuring PoE Properties 105
Configuring the PoE Power, Priority, and Class 107
Chapter 11: VLAN Management 109
VLANs 109
Configuring Default VLAN Settings 112
Creating VLANs 113
Configuring VLAN Interface Settings 115
Defining VLAN Membership 117
Configuring Port to VLAN 117
Configuring VLAN to Port 118
Viewing VLAN Membership 119
GVRP Settings 120
Defining GVRP Settings 120
VLAN GROUPS 121
Assigning MAC-based VLAN Groups 121
Assigning VLAN Group ID to VLAN Per Interface 122
Voice VLAN 123
Voice VLAN Options 124
Voice VLAN Constraints 125
Configuring Voice VLAN Properties 126
Configuring Telephony OUI 127
Chapter 12: Configuring the Spanning Tree Protocol 129
STP Flavors 129
Configuring STP Status and Global Settings 131

Cisco Small Business 300 Series Managed Switch Administration Guide 6
Contents
Defining Spanning Tree Interface Settings 132
Configuring Rapid Spanning Tree Settings 134
Multiple Spanning Tree 136
Defining MSTP Properties 137
Mapping VLANs to a MST Instance 138
Defining MST Instance Settings 139
Defining MSTP Interface Settings 140
Chapter 13: Managing MAC Address Tables 143
Configuring Static MAC Addresses 143
Dynamic MAC Addresses 144
Configuring Dynamic MAC Address Parameters 145
Querying Dynamic Addresses 145
Defining Reserved MAC Addresses 146
Chapter 14: Configuring Multicast Forwarding 148
Multicast Forwarding 148
Typical Multicast Setup 149
Multicast Operation 150
Multicast Registration 150
Multicast Address Properties 151
Defining Multicast Properties 152
MAC Group Address 153
IP Multicast Group Address 156
IGMP Snooping 158
MLD Snooping 161
IGMP/MLD IP Multicast Group 163
Multicast Router Port 164
Defining Forward All Multicast 165
Defining Unregistered Multicast Settings 166

Cisco Small Business 300 Series Managed Switch Administration Guide 7
Contents
Chapter 15: Configuring IP Information 168
Management and IP Interfaces 168
Managing IPv6 170
IP Addressing 170
Defining IPv6 Global Configuration 175
Defining an IPv6 Interface 175
Defining IPv6 Addresses 177
Defining an IPv6 Default Router List 178
Configuring IPv6 Tunnels 179
Defining IPv6 Neighbors Information 181
Viewing IPv6 Route Tables 184
Defining IPv4 Static Routing 185
Enabling ARP Proxy 186
Defining UDP Relay 186
DHCP Relay 187
Defining DHCP Relay Properties 188
Defining DHCP Relay Interfaces 189
Configuring ARP 190
Domain Name Systems 191
Defining DNS Servers 192
Mapping DNS Hosts 193
Chapter 16: Configuring Security 195
Defining Users 196
Setting User Accounts 196
Setting Password Complexity Rules 197
TACACS+ Configuration 198
Configuring Default TACACS+ Parameters 199
Adding a TACACS+ Server 199
Configuring RADIUS Parameters 200
Adding a RADIUS Server 201

Cisco Small Business 300 Series Managed Switch Administration Guide 8
Contents
Management Access Authentication 203
Access Profiles 204
Displaying, Adding, or Activating an Access Profile 206
Defining Profile Rules 208
Configuring TCP/UDP Services 210
Defining Storm Control 211
Configuring Port Security 212
802.1X 214
802.1X Parameters Workflow 218
Defining 802.1X Properties 219
Configuring Unauthenticated VLANs 220
Defining 802.1X Port Authentication 220
Defining Host and Session Authentication 224
Viewing Authenticated Hosts 226
Defining Time Ranges 226
Defining a Recurring Range 228
Denial of Service Prevention 228
Denial of Service Security Suite Settings 229
Chapter 17: Access Control 235
Access Control Lists 235
Defining MAC-based ACLs 238
Adding Rules to a MAC-based ACL 238
IPv4-based ACLs 239
Defining an IPv4-based ACL 240
Adding Rules (ACEs) to an IPv4-Based ACL 240
IPv6-based ACLs 244
Defining an IPv6-based ACL 244
Defining ACL Binding 247

Cisco Small Business 300 Series Managed Switch Administration Guide 9
Contents
Chapter 18: Configuring Quality of Service 249
QoS Features and Components 249
QoS Modes 250
QoS Workflow 251
Configuring QoS 252
Displaying QoS Properties 252
Modifying Interface Default CoS Value 253
Configuring QoS Queues 254
Mapping CoS/802.1p to a Queue 255
Mapping DSCP to Queue 257
Configuring Bandwidth 258
Configuring Egress Shaping per Queue 259
Configuring VLAN Rate Limit 260
TCP Congestion Avoidance 261
QoS Basic Mode 261
Workflow to Configure Basic QoS Mode 261
Configuring Global Settings 262
Interface QoS Settings 263
QoS Advanced Mode 263
Workflow to Configure Advanced QoS Mode 265
Configuring Out-of-Profile DSCP Remarking 265
Defining Class Mapping 267
QoS Policers 268
Defining Aggregate Policers 269
Configuring a Policy 270
Policy Class Maps 271
Policy Binding 273
Managing QoS Statistics 273
Viewing Policer Statistics 273
Viewing Queues Statistics 275

Cisco Small Business 300 Series Managed Switch Administration Guide 10
Contents
Chapter 19: Configuring SNMP 277
SNMP Versions and Workflow 277
SNMP v1 and v2 277
SNMP v3 278
SNMP Workflow 279
Supported MIBs 279
Model OIDs 282
SNMP Engine ID 283
Configuring SNMP Views 284
Creating SNMP Groups 286
Managing SNMP Users 288
Defining SNMP Communities 290
Defining Trap Settings 292
Notification Recipients 292
Defining SNMPv1,2 Notification Recipients 293
Defining SNMPv3 Notification Recipients 294
SNMP Notification Filters 296
Chapter 20: Console Menu Interface 298
Connecting By Using a Terminal Emulation Application 298
Communicating by Using a Serial Cable Connection 299
Communicating By Using a TCP/IP Connection 300
Connecting By Using Telnet 301
Console Configuration Menu Navigation 302
Console Interface Main Menu 303
System Configuration Menu 303
System Information 304
Management Settings 304
Username & Password Settings 306
Security Settings 307
VLAN Management 307