Cisco SF220-24 Instruction Manual

Cisco 220 Series Smart Switches
Administration Guide Release 1.1.0.x
July 21, 2017
ADMINISTRATION
GUIDE

© 2016, 2017 Cisco Systems, Inc. All rights reserved.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks,
go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner
does not imply a partnership relationship between Cisco and any other company. (1110R)

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 1
Contents
Chapter 1: Getting Started 10
Getting Started with the Web-based Interface 10
Before You Begin 11
Logging In to the Web-based Interface 11
HTTP/HTTPS 12
Changing the Administrative Password 13
Logging Out 14
Quick Start Switch Configuration 15
Interface Naming Conventions 16
Window Navigation 17
Chapter 2: Status and Statistics 21
Viewing Ethernet Interface 21
Viewing Etherlike Statistics 23
Viewing TCAM Utilization 24
Viewing Fan Status and Temperature 25
Managing RMON 27
Viewing RMON Statistics 28
Configuring and Viewing RMON Histories 30
Configuring and Viewing RMON Events 32
Configuring RMON Alarms 34
Chapter 3: Administration: System Logs 37
Configuring System Log Settings 37
Configuring Remote Logging Settings 39
Viewing Memory Logs 39
Viewing RAM Memory Logs 40
Viewing Flash Memory Logs 41
Chapter 4: Administration: File Management 42
Files and File Types 42

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 2
Contents
File Actions 44
Upgrade/Backup Firmware/Language 45
Active Image 48
Download/Backup Configuration or Logs 49
Configuration File Properties 51
Copy/Save Configuration Files 52
DHCP Auto Configuration 53
Chapter 5: Administration: General Information 58
Device Models 59
Viewing System Summary 61
Configuring System Settings 63
Configuring Console Settings 64
Rebooting the Switch 64
Defining Idle Session Timeout 65
Ping a Host 66
Using Traceroute 66
Chapter 6: Administration: Time Settings 68
System Time Options 69
Configuring System Time 69
Configuring SNTP Server 71
Time Range 72
Absolute Time Range 73
Periodic Time Range 73
Chapter 7: Administration: Diagnostics 75
Testing Copper Ports 75
Viewing Optical Module Status 76
Configuring Port and VLAN Mirroring 77

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 3
Contents
Viewing CPU Utilization 80
Chapter 8: Administration: Discovery 81
Configuring Bonjour 81
LLDP and CDP 82
Configuring LLDP 83
Configuring LLDP Properties 85
Configuring LLDP Port Settings 86
Configuring LLDP MED Network Policy 87
Configuring LLDP MED Port Settings 89
Viewing LLDP Port Status 90
Viewing LLDP Local Information 91
Viewing LLDP Neighbors Information 94
Viewing LLDP Statistics 95
Viewing LLDP Overloading 95
Configuring CDP 98
Configuring CDP Properties 98
Configuring CDP Port Settings 100
Viewing CDP Local Information 101
Displaying CDP Neighbor Information 103
Viewing CDP Statistics 104
Chapter 9: Port Management 106
Port Management Workflow 106
Configuring Basic Port Settings 107
Configuring Error Recovery Settings 110
Loopback Detection 111
How LBD Works 112
Configuring Loopback Detection 112
Default Settings and Configuration 112
Interactions with Other Features 112
Configuring LBD Workflow 113

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 4
Contents
To configure Loopback Detection: 113
Configuring Link Aggregation 114
Load Balancing 114
LAG Management 115
Static and Dynamic LAG Workflow 116
Configuring LAG Management 116
Configuring LAG Settings 117
Configuring LACP 119
Configuring Energy Efficient Ethernet 121
Chapter 10: Power over Ethernet 123
PoE Considerations 123
PoE on the Switch 124
Configuring PoE Properties 126
Configuring PoE Port Settings 128
Chapter 11: Managing VLANs 131
VLANs 131
Configuring Default VLAN 133
Creating VLANs 134
Configuring Interface’s VLAN Settings 135
Configuring Port to VLAN 137
Viewing VLAN Membership 138
Configuring GVRP 140
Configuring Voice VLAN 141
Configuring Voice VLAN Properties 143
Configuring Telephony OUI 143
Adding Interfaces to Voice VLAN on Basis of OUIs 145
Chapter 12: Spanning Tree Protocol 147
STP Modes 147

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 5
Contents
Configuring STP Status and Global Settings 148
Configuring STP Interface Settings 150
Configuring RSTP Interface Settings 151
Configuring Multiple Spanning Tree 153
Configuring MSTP Properties 154
Mapping VLANs to MST Instance 155
Configuring MSTP Instance Settings 156
Configuring MSTP Interface Settings 156
Chapter 13: MAC Address Tables 159
Types of MAC Addresses 159
Configuring Static MAC Addresses 160
Configuring Static MAC Address Filter 161
Configuring Dynamic MAC Address Aging Time 161
Querying Dynamic MAC Addresses 162
Configuring Reserved MAC Addresses 163
Chapter 14: Multicast Forwarding 164
Multicast Forwarding 164
Configuring Multicast Properties 167
Configuring IP Multicast Group Addresses 168
Configuring IGMP Snooping 169
Configuring MLD Snooping 171
Querying IGMP/MLD IP Multicast Groups 173
Configuring Multicast Router Ports 174
Configuring Forward All Multicast 175
Configuring Maximum IGMP and MLD Groups 176
Configuring Multicast Filtering 176
Configuring Multicast Filter Profiles 177
Configuring Interface Filter Settings 177

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 6
Contents
Chapter 15: IP Configuration 179
IP Addressing 179
IPv4 Management and Interface 181
IPv6 Management and Interface 182
Configuring Domain Name System 183
Configuring General DNS Settings 184
Viewing Static and Dynamic DNS Servers 185
Configuring Host Mapping 185
Chapter 16: Configuring Security 187
Configuring Users 188
Configuring TACACS+ Servers 189
Configuring RADIUS Servers 191
Configuring Management Access Methods 193
Access Profile Rules, Filters, and Elements 193
Active Access Profile 194
Configuring Access Profiles 194
Configuring Profile Rules 196
Configuring Password Complexity Rules 198
Configuring Management Access Authentication 200
Configuring TCP/UDP Services 201
Configuring Storm Control 203
Configuring Port Security 205
Configuring 802.1X 207
802.1X Parameters Workflow 208
Defining 802.1X Properties 209
Defining 802.1X Port Authentication 209
Defining Host and Session Authentication 212
Viewing Authenticated Hosts 213
Configuring DoS Protection 214
Secure Core Technology (SCT) 214

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 7
Contents
Default Configuration 214
Configuring DoS Security Suite Settings 215
Configuring DoS Interface Settings 216
Configuring SYN Protection 217
Configuring DHCP Snooping 218
Configuring DHCP Snooping Properties 219
Configuring DHCP Snooping on VLANs 220
Configuring DHCP Snooping Trusted Interfaces 220
Querying DHCP Snooping Binding Database 221
Viewing Option 82 Statistics 222
Configuring Option 82 Interface Settings 223
Configuring Option 82 Port CID Settings 223
Configuring IP Source Guard 224
Configuring IP Source Guard Interface Settings 224
Querying IP Source Binding Database 225
Configuring Dynamic ARP Inspection 226
ARP Cache Poisoning 227
How ARP Prevents Cache Poisoning 227
Interaction Between ARP Inspection and DHCP Snooping 228
Workflow to Configure ARP Inspection 228
Configuring ARP Inspection Properties 229
Configuring ARP Inspection Trusted Interfaces 230
Viewing ARP Inspection Statistics 231
Configuring ARP Inspection VLAN Settings 231
Chapter 17: Access Control 233
Access Control Lists 234
Configuring MAC-based ACLs 236
Configuring MAC-based ACEs 237
Configuring IPv4-based ACLs 239
Configuring IPv4-Based ACEs 240

Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 8
Contents
Configuring IPv6-based ACLs 243
Configuring IPv6-based ACEs 243
Configuring ACL Binding 246
Chapter 18: Quality of Service 248
QoS Features and Components 248
Workflow to Configure QoS Settings 250
Configuring QoS Properties 251
Configuring QoS Queues 252
Mapping CoS/802.1p to a Queue 253
Mapping IP Precedence to Queue 255
Mapping DSCP to Queue 255
Mapping Queues to CoS/802.1p 256
Mapping Queue to IP Precedence 256
Mapping Queue to DSCP 257
Configuring Interface Remark 257
Configuring Bandwidth 258
Configuring Egress Shaping per Queue 258
Configuring VLAN Rate Limit 259
Configuring VLAN Port Rate Limit 260
Configuring TCP Congestion Avoidance 261
Configuring QoS Basic Mode 261
Configuring Basic QoS Trust Mode 262
Configuring Basic QoS Interface Settings 263
Configuring QoS Advanced Mode 263
Configuring Advanced QoS Global Settings 265
Configuring Class Mapping 266
QoS Policers 267
Configuring Aggregate Policers 268
Configuring QoS Policies 269
Configuring Policy Class Maps 270
Configuring Policy Binding 271