Cisco SF500-24 Instruction Manual

Cisco 500 Series Stackable Managed Switch
Administration Guide
10/100 Switches SF500-24, SF500-24P, SF500-48, SF500-48P
Gigabit Switches SG500-28, SG500-28P, SG500X-24, SG500X 24P, SG500X-48,
SG500X-48P,SG500-52, SG500-52P
ADMINISTRATION
GUIDE

Cisco 500 Series Stackable Managed Series Switches 1
Contents
Table of Contents
Chapter 1: Getting Started 1
Starting the Web-based Switch Configuration Utility 1
Quick Start Switch Configuration 7
Window Navigation 8
Chapter 2: Viewing Statistics 12
Viewing Ethernet Interfaces 13
Viewing Etherlike Statistics 15
Viewing GVRP Statistics 16
Viewing 802.1X EAP Statistics 19
Viewing TCAM Utilization 20
Managing RMON 22
Chapter 3: Managing System Logs 37
Setting System Log Settings 37
Setting Remote Logging Settings 39
Viewing Memory Logs 40
Chapter 4: Managing System Files 42
Upgrade/Backup Firmware/Language 46
Selecting the Active Image 49
Downloading or Backing-up a Configuration or Log 51
Displaying Configuration File Create Date 56
Setting DHCP Auto Configuration 59
Chapter 5: Stack Management 1
Overview 3
Types of Units in Stack 5
Stack Mode 6

Cisco 500 Series Stackable Managed Series Switches 2
Contents
Stacking Ports 10
Stack Topology 12
Unit ID Assignment 14
Software Auto Synchronization in Stack 16
Master Selection Process 17
Stack Changes 18
Unit Failure in Stack 21
Mixed Stack 29
Stack Configuration 30
Development Notes 35
Chapter 6: General Administrative Information and Operations 36
System Information 38
Switch Models 42
Rebooting the Switch 46
Managing Stacked Switches 47
Assigning Unit IDs 53
Managing Stacks 61
TCAM Allocation 63
Monitoring the Fan Status and Temperature 65
Defining Idle Session Timeout 66
Pinging a Host 67
Traceroute 69
Chapter 7: System Time 71
System Time Options 72
Configuring System Time 75
Adding a Unicast SNTP Server 78
Adding Multicast Reception/Transmission 83
Defining SNTP Authentication 84

Cisco 500 Series Stackable Managed Series Switches 3
Contents
Chapter 8: Managing Device Diagnostics 87
Testing Copper Ports 87
Displaying Optical Module Status 89
Configuring Port and VLAN Mirroring 90
Viewing CPU Utilization and Secure Core Technology 92
Chapter 9: Configuring Discovery 94
Configuring Bonjour Discovery 95
LLDP and CDP 98
Configuring LLDP 99
Configuring CDP 132
Chapter 10: Port Management 146
Configuring Ports 146
Setting Basic Port Configuration 147
Configuring Link Aggregation 149
Configuring Green Ethernet 157
Chapter 11: Smartports 164
Overview 164
What is a Smartport 165
Smartport Types 165
Smartport Macros 168
Macro Failure and the Reset Operation 169
How the Smartport Feature Works 170
Auto Smartport 171
Error Handling 175
Default Configuration 175
Relationships with Other Features and Backwards Compatibility 175
Common Smartport Tasks 176

Cisco 500 Series Stackable Managed Series Switches 4
Contents
Web GUI 178
Built-in Smartport Macros 183
Chapter 12: Managing Power-over-Ethernet Devices 206
PoE on the Switch 206
Configuring PoE Properties 208
Configuring the PoE Power, Priority, and Class 210
Chapter 13: VLAN Management 213
VLANs 214
Configuring Default VLAN Settings 217
Creating VLANs 219
Configuring VLAN Interface Settings 221
Defining VLAN Membership 223
GVRP Settings 228
VLAN Groups 232
Voice VLAN 240
Access Port Multicast TV VLAN 255
Customer Port Multicast TV VLAN 260
Chapter 14: Configuring the Spanning Tree Protocol 264
STP Flavors 265
Configuring STP Status and Global Settings 266
Defining Spanning Tree Interface Settings 269
Configuring Rapid Spanning Tree Settings 273
Multiple Spanning Tree 276
Defining MSTP Properties 276
Mapping VLANs to a MSTP Instance 278
Defining MSTP Instance Settings 280
Defining MSTP Interface Settings 282

Cisco 500 Series Stackable Managed Series Switches 5
Contents
Chapter 15: Managing MAC Address Tables 286
Configuring Static MAC Addresses 287
Managing Dynamic MAC Addresses 289
Defining Reserved MAC Addresses 291
Chapter 16: Configuring Multicast Forwarding 293
Multicast Forwarding 293
Defining Multicast Properties 296
Adding MAC Group Address 298
Adding IP Multicast Group Addresses 300
Configuring IGMP Snooping 301
MLD Snooping 303
Querying IGMP/MLD IP Multicast Group 306
Defining Multicast Router Ports 307
Defining Forward All Multicast 308
Defining Unregistered Multicast Settings 309
Chapter 17: Configuring IP Information 311
Management and IP Interfaces 312
Defining VRRP 336
Defining IPv4 Routes 337
Defining RIP 339
Access Lists 339
IP Isolation 339
Configuring ARP 340
Enabling ARP Proxy 343
Defining UDP Relay 345
Domain Name Systems 346
Chapter 18: Configuring Security 365

Cisco 500 Series Stackable Managed Series Switches 6
Contents
Defining Users 367
Configuring TACACS+ 372
Configuring RADIUS 376
Configuring Management Access Authentication 380
Defining Access Profiles 382
Configuring TCP/UDP Services 392
Defining Storm Control 395
Configuring Port Security 398
Configuring 802.1X 401
Denial of Service Prevention 420
Defining DHCP Snooping 432
IP Source Guard 432
Dynamic ARP Inspection 439
Chapter 19: Configuring DHCP 448
DHCP Snooping 449
DHCP Relay 449
Option 82 449
Interactions Between DHCP Snooping, DHCP Relay and Option 82 451
DHCP Snooping Binding Database 455
DHCP GUI 459
465
Chapter 20: Access Control 466
Access Control Lists 466
Defining MAC-based ACLs 469
IPv4-based ACLs 470
IPv6-based ACLs 475
Defining ACL Binding 478

Cisco 500 Series Stackable Managed Series Switches 7
Contents
Chapter 21: Configuring Quality of Service 480
QoS Features and Components 481
Configuring QoS - General 482
Managing QoS Statistics 492
Chapter 22: Configuring SNMP 532
SNMP Versions and Workflow 532
Model OIDs 538
SNMP Engine ID 539
Configuring SNMP Views 540
Creating SNMP Groups 541
Managing SNMP Users 543
Defining SNMP Communities 545
Defining Trap Settings 547
Notification Recipients 547
SNMP Notification Filters 551
Chapter 23: RIP 553
Overview 554
Limitations and Constraints 554
RIP Protocol Versions 555
How the RIP Protocol Works 555
How RIP Operates on the Device 561
Configuring RIP With CLI Commands 568
Configuring RIP Through the WEB GUI 573
How to Configure RIP - an Example 590
Chapter 24: VRRP 599
Overview 600
VRRP Features 602

Cisco 500 Series Stackable Managed Series Switches 8
Contents
Basic Terms - To Remove from Admin Guide 603
Multiple Virtual Routers 604
VRRP Router Priority and Preemption 604
VRRP Advertisements 605
Configuring VRRP - To Remove from Admin Guide 605
Constraints and Interactions with Other Features 611
Configuring VRRP With CLI Commands 611
Configuring VRRP Through Web GUI 614
Chapter 25: Console Menu Interface 618
Connecting By Using a Terminal Emulation Application 618
Connecting By Using Telnet 621
Console Configuration Menu Navigation 622
Console Interface Main Menu 623

1
Cisco 500 Series Stackable Managed Switch Administration Guide 1
Getting Started
This section provides an introduction to the user interface, and covers the
following topics:
•Starting the Web-based Switch Configuration Utility
•Quick Start Switch Configuration
•Interface Naming Conventions
•Window Navigation
Starting the Web-based Switch Configuration Utility
This section describes how to navigate the web-based switch configuration utility.
If you are using a pop-up blocker, make sure it is disabled.
Browsers have the following restrictions:
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the switch. You can, however, use the DNS (Domain Name
System) server to create a domain name that contains the IPv6 address,
and then use that domain name in the address bar in place of the IPv6
address.
•In Firefox, the automatic pop-up on top option is disabled by default. Certain
add-ons enable this feature during installation. To disable this option, go to
Tools -> Options. Click on the Content Tab and then click on Enable JavaScript, then
Advanced. Select the option Raise or lower windows.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of IPv6 link local address to access the switch
from your browser.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco 500 Series Stackable Managed Switch Administration Guide 2
1
Launching the Configuration Utility
To open the user interface:
STEP 1 Open a Web browser.
STEP 2 Enter the IP address of the switch you are configuring in the address bar on the
browser, and then press Enter. The
Login page opens.
NOTE When the switch is using the factory default IP address of 192.168.1.254, its power
LED flashes continuously. When the switch is using a DHCP assigned IP address or
an administrator-configured static IP address, the power LED is on solid.
Logging In
The default username is cisco and the default password is cisco. The first time
that you log in with the default username and password, you are required to enter
a new password.
NOTE If you have not previously selected a language for the GUI, the language of the Login
page is determined by the language(s) requested by your browser and the
languages configured on your switch. If your browser requests Chinese, for
example, and Chinese has been loaded into your switch, the Login page is
automatically displayed in Chinese. If Chinese has not been loaded into your
switch, the Login page is displayed in English.
The languages loaded into the switch have a language and country code (en-US,
en-GB and so on). For the Login page to be automatically displayed in a particular
language, based on the browser request, both the language and country code of
the browser request must match those of the language loaded on the switch. If the
browser request contains only the language code without a country code (for
example: fr.) the first embedded language with a matching language code is taken
(without matching the country code, for example: fr_CA).
To log in to the device configuration utility:
STEP 1 Enter the username/password. The password can contain up to 64 ASCII
characters. Password-complexity rules are described in the Setting Password
Complexity Rules section of the Configuring Security chapter.
STEP 2 If you are not using English, select the desired language from the Language drop-
down menu. To add a new language to the switch or update a current one, refer to
the Upgrade/Backup Firmware/Language section.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco 500 Series Stackable Managed Switch Administration Guide 3
1
STEP 3 If this is the first time that you logged on with the default user ID (cisco) and the
default password (cisco) or your password has expired, the
Change Password
Page opens. See Password Expiration for additional information.
STEP 4 Choose whether to select Disable Password Complexity Enforcement or not.
For more information on password complexity, see the Setting Password
Complexity Rules section.
STEP 5 Enter the new password and click Apply.
When the login attempt is successful, the Getting Started page opens.
If you entered an incorrect username or password, an error message is displayed
and the Login page remains displayed on the window.
Select Don’t show this page on startup to prevent the
Getting Started page from
being displayed each time that you logon to the system. If you select this option,
the System Summary page is opened instead of the Getting Started page.
Password Expiration
The New Password page is displayed:
•The first time you access the switch with the default username cisco and
password cisco. This page forces you to replace the factory default
password.
•When the password expires, this page forces you to select a new
password.
Logging Out
By default, the application logs out after ten minutes of inactivity. You can change
this default value as described in the Defining Idle Session Timeout section in the
General Administrative Information and Operations chapter.
!
CAUTION Unless the Running Configuration is copied to the Startup Configuration, all
changes made since the last time the file was saved are lost if the switch is
rebooted. Save the Running Configuration to the Startup Configuration before
logging off to preserve any changes you made during this session.

Getting Started
Quick Start Switch Configuration
Cisco 500 Series Stackable Managed Switch Administration Guide 4
1
A flashing red X icon displayed to the left of the Save application link indicates that
Running Configuration changes have been made that have not yet been saved to
the Startup Configuration file. The flashing can be disabled by clicking on the
Disable Save Icon Blinking button on the Copy/Save Configuration page
When the switch auto-discovers a device, such as an IP phone, it configures the
port appropriately for the device. These configuration commands are written to the
Running Configuration file. This causes the Save icon to begin blinking when the
user logs on even though the user did not make any configuration changes.
When you click Save, the Copy/Save Configuration page is displayed. Save the
Running Configuration file by copying it to the Startup Configuration file. After this
save, the red X icon and the Save application link are no longer displayed.
To logout, click Logout in the top right corner of any page. The system logs out of
the switch.
When a timeout occurs or you intentionally log out of the system, a message is
displayed and the
Login page opens, with a message indicating the logged-out
state. After you log in, the application returns to the initial page.
The initial page displayed depends on the “Do not show this page on startup”
option in the Getting Started page. If you did not select this option, the initial page
is the Getting Started page. If you did select this option, the initial page is the
System Summary page.
Quick Start Switch Configuration
To simplify switch configuration through quick navigation, the Getting Started
page provides links to the most commonly used pages.
Links on the Getting Started page
Category Link Name (on the Page) Linked Page
Initial Setup Change System Mode
System Mode and Stack
Management
page
Change Management
Applications and Services
TCP/UDP Services page
Change Device IP Address
IPv4 Interface page

Getting Started
Interface Naming Conventions
Cisco 500 Series Stackable Managed Switch Administration Guide 5
1
There are two hot links on the Getting Started page that take you to Cisco web
pages for more information. Clicking on the Support link takes you to the switch
product support page, and clicking on the Forums link takes you to the Small
Business Support Community page.
Interface Naming Conventions
Within the GUI, interfaces are denoted by concatenating the following elements:
•Type of interface: The following types of interfaces are found on the
various types of devices:
-Fast Ethernet (10/100 bits) - This are displayed as FE.
-Gigabit Ethernet ports (10/100/1000 bits) - This are displayed as GE.
Create VLAN
Create VLAN page
Configure Port Settings
Port Setting page
Device
Status
System Summary
System Summary page
Port Statistics
interface page
RMON Statistics
Statistics page
View Log RAM Memory page
Quick
Access
Change Device Password
User Accounts page
Upgrade Device Software
Upgrade/Backup Firmware/
Language
page
Backup Device Configuration
Download/Backup
Configuration/Log
page
Create MAC Based ACL
MAC Based ACL page
Create IP Based ACL
IPv4 Based ACL page
Configure QoS
QoS Properties page
Configure Port Mirroring Port and VLAN Mirroring page
Links on the Getting Started page (Continued)
Category Link Name (on the Page) Linked Page

Getting Started
Interface Naming Conventions
Cisco 500 Series Stackable Managed Switch Administration Guide 6
1
-Ten Gigabit Ethernet ports (10000 bits) - These are displayed as XG.
-LAG (Port Channel) - These are displayed as LAG.
-VLAN - This are displayed as VLAN.
-Tunnel -This are displayed as Tunnel.
•Unit Number - Unit in stack. In standalone models this is always 1.
•Slot Number - The slot number is either 1 or 2. Slot number 1 identifies an
SG500 or SG500X device. Slot number 2 identifies an SF500.
•Interface Number: Port, LAG, tunnel or VLAN ID

Getting Started
Window Navigation
Cisco 500 Series Stackable Managed Switch Administration Guide 7
1
Window Navigation
This section describes the features of the web-based switch configuration utility.
Application Header
The Application Header is displayed on every page. It provides the following
application links:
Application Links
Application Link
Name
Description
A flashing red X icon displayed to the left of the Save
application link indicates that Running Configuration
changes have been made that have not yet been saved to
the Startup Configuration file. The flashing of the red X can
be disabled on the Copy/Save Configuration page.
Click Save to display the Copy/Save Configuration page.
Save the Running Configuration file type by copying it to
the Startup Configuration file type on the switch. After this
save, the red X icon and the Save application link are no
longer displayed. When the switch is rebooted, it copies
the Startup Configuration file type to the Running
Configuration and sets the switch parameters according to
the data in the Running Configuration.
Username Displays the name of the user logged on to the switch. The
default username is cisco. (The default password is cisco.)
Language Menu Select a language or load a new language file into the
switch. If the language required is displayed in the menu,
select it. If it is not displayed, select Download Language.
For more information about adding a new language, refer
to the Upgrade/Backup Firmware/Language.
Logout Click to logout of the web-based switch configuration
utility.
About Click to display the switch name and switch version
number.

Getting Started
Window Navigation
Cisco 500 Series Stackable Managed Switch Administration Guide 8
1
Management Buttons
The following table describes the commonly-used buttons that appear on various
pages in the system.
Help Click to display the online help.
The SYSLOG Alert Status icon is displayed when a
SYSLOG message, above the critical severity level, is
logged. Click the icon to open the RAM Memory page.
After you access this page, the SYSLOG Alert Status icon
is no longer displayed. To display the page when there is
not an active SYSLOG message, follow the Status and
Statistics > View Log > RAM Memory page path.
Management Buttons
Button Name Description
The Administrator can use the pull-down menu to
configure how many entries per page they wish to see at a
time.
Indicates a mandatory field.
Add Click to display the related Add page and add an entry to a
table. Enter the information and click Apply to save it to the
Running Configuration. Click Close to return to the main
page. Click Save to display the Copy/Save Configuration
page and save the Running Configuration to the Startup
Configuration file type on the switch.
Application Links (Continued)
Application Link
Name
Description

Getting Started
Window Navigation
Cisco 500 Series Stackable Managed Switch Administration Guide 9
1
Apply Click to apply changes to the Running Configuration on the
switch. If the switch is rebooted, the Running Configuration
is lost, unless it is saved to the Startup Configuration file
type or another file type. Click Save to display the Copy/
Save Configuration page and save the Running
Configuration to the Startup Configuration file type on the
switch.
Cancel Click to reset changes made on the page.
Clear All
Interfaces
Counters
Click to clear the statistic counters for all interfaces.
Clear Interface
Counters
Click to clear the statistic counters for the selected
interface.
Clear Logs Clears log files.
Clear Table Clears table entries.
Close Returns to main page. If there are changes that were not
applied to the Running Configuration, a message is
displayed.
Copy Settings A table typically contains one or more entries containing
configuration settings. Instead of modifying each entry
individually, it is possible to modify one entry and then
copy it to multiple entries, as described below:
1. Select the entry to be copied. Click Copy Settings to
display the popup.
2. Enter the destination entry numbers in the to field.
3. Click Apply to save the changes and click Close to
return to the main page.
Delete Select the entry in the table to be deleted and click Delete
to remove entries from a table. The entry is deleted.
Details Click to display the details associated with the entry
selected on the main page.
Management Buttons (Continued)
Button Name Description

Getting Started
Window Navigation
Cisco 500 Series Stackable Managed Switch Administration Guide 10
1
Edit Select the entry and click Edit to open the entries for
editing. The Edit page opens, and the entry can be
modified.
1. Click Apply to save the changes to the Running
Configuration.
2. Click Close to return to the main page.
Go Enter the query filtering criteria and click Go. The results
are displayed on the page.
Test Click Te st to perform the related tests.
Management Buttons (Continued)
Button Name Description

2
Cisco 500 Series Stackable Managed Switch Administration Guide 11
Viewing Statistics
This section describes how to view switch statistics.
It covers the following topics:
•Viewing Ethernet Interfaces
•Viewing Etherlike Statistics
•Viewing GVRP Statistics
•Viewing 802.1X EAP Statistics
•Viewing TCAM Utilization
•Managing RMON
Viewing Ethernet Interfaces
The Interface page displays traffic statistics per port. The refresh rate of the
information can be selected.
This page is useful for analyzing the amount of traffic that is both sent and
received and its dispersion (Unicast, Multicast, and Broadcast).