Cisco SGE2000 - Cisco - Gigabit Switch Instruction Manual

Cisco Small Business
SFE/SGE Managed Switches
ADMINISTRATION
GUIDE

© 2009 Cisco Systems, Inc. All rights reserved. OL-20139-01
Xd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh
8^hXd]VhbdgZi]Vc'%%d[[^XZhldgaYl^YZ#6YYgZhhZh!e]dcZcjbWZgh!VcY[VmcjbWZghVgZa^hiZYdci]Z8^hXdLZWh^iZVilll#X^hXd#Xdb$\d$d[[^XZh#
889:!88:CI!8^hXd:dh!8^hXdAjb^c!8^hXdCZmjh!8^hXdHiVY^jbK^h^dc!8^hXdIZaZEgZhZcXZ!8^hXdLZW:m!i]Z8^hXdad\d!98:!VcYLZaXdbZidi]Z=jbVcCZildg`VgZigVYZbVg`h08]Vc\^c\i]ZLVnLZLdg`!
A^kZ!EaVn!VcYAZVgcVcY8^hXdHidgZVgZhZgk^XZbVg`h0VcY6XXZhhGZ\^higVg!6^gdcZi!6hncXDH!7g^c\^c\i]ZBZZi^c\IdNdj!8ViVanhi!8896!889E!88>:!88>E!88C6!88CE!88HE!88KE!8^hXd!i]Z8^hXd8Zgi^[^ZY
>ciZgcZildg`:meZgiad\d!8^hXd>DH!8^hXdEgZhh!8^hXdHnhiZbh!8^hXdHnhiZbh8Ve^iVa!i]Z8^hXdHnhiZbhad\d!8^hXdJc^in!8daaVWdgVi^dcL^i]djiA^b^iVi^dc!:i]Zg;Vhi!:i]ZgHl^iX]!:kZci8ZciZg!;VhiHiZe!;daadlBZ
7gdlh^c\!;dgbH]VgZ!<^\V9g^kZ!=dbZA^c`!>ciZgcZiFjdi^Zci!>DH!^E]dcZ!^Fj^X`HijYn!>gdcEdgi!i]Z>gdcEdgiad\d!A^\]iHigZVb!A^c`hnh!BZY^VIdcZ!BZZi^c\EaVXZ!BZZi^c\EaVXZ8]^bZHdjcY!B<M!CZildg`Zgh!CZildg`^c\
6XVYZbn!CZildg`GZ\^higVg!E8Cdl!E>M!EdlZgEVcZah!Egd8dccZXi!HXg^eiH]VgZ!HZcYZg7VhZ!HB6GIcZi!HeZXigjb:meZgi!HiVX`L^hZ!I]Z;VhiZhiLVnid>cXgZVhZNdjg>ciZgcZiFjdi^Zci!IgVchEVi]!LZW:m!VcYi]ZLZW:m
ad\dVgZgZ\^hiZgZYigVYZbVg`hd[8^hXdHnhiZbh!>cX#VcY$dg^ihV[[^a^ViZh^ci]ZJc^iZYHiViZhVcYXZgiV^cdi]ZgXdjcig^Zh#
6aadi]ZgigVYZbVg`hbZci^dcZY^ci]^hYdXjbZcidglZWh^iZVgZi]ZegdeZgind[i]Z^ggZheZXi^kZdlcZgh#I]ZjhZd[i]ZldgYeVgicZgYdZhcdi^beanVeVgicZgh]^egZaVi^dch]^eWZilZZc8^hXdVcYVcndi]ZgXdbeVcn#%-%.G
6bZg^XVh=ZVYfjVgiZgh
8^hXdHnhiZbh!>cX#
HVc?dhZ!86
6h^VEVX^[^X=ZVYfjVgiZgh
8^hXdHnhiZbhJH6EiZ#AiY#
H^c\VedgZ
:jgdeZ=ZVYfjVgiZgh
8^hXdHnhiZbh>ciZgcVi^dcVa7K
6bhiZgYVb!I]ZCZi]ZgaVcYh

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 1
Contents
Chapter 1: Getting Started 1
Starting the Application 1
Understanding the Interface 3
Using the Cisco Management Buttons 5
Using Screen and Table Options 5
Adding Device Information 5
Modifying Device Information 6
Deleting Device Information 7
Logging Off of the Device 7
The About Page 7
Chapter 2: Managing Device Information 9
Defining System Information 9
Managing Stacking 11
Understanding Switch Operating Modes 11
Configuring a Stack 12
Stack Membership 14
Defining Stacking Unit ID 15
Adding, Replacing and Removing Stacking Members — Examples 21
Managing Stacks 23
Viewing Device Health 25
Resetting the Device 26
Defining Bonjour 27
Disabling Bonjour 29
TCAM Utilization 30
Chapter 3: Configuring System Time 33
Defining System Time 33
Defining SNTP Settings 36

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 2
Defining SNTP Authentication 39
Chapter 4: Configuring Device Security 41
Passwords Management 41
Modifying the Local User Settings 43
Defining Authentication 44
Defining Profiles 44
Modifying an Authentication Profile 47
Mapping Authentication Profiles 48
Defining TACACS+ 50
Defining RADIUS 55
Defining Access Methods 60
Defining Access Profiles 61
Defining Profile Rules 65
Defining Traffic Control 72
Defining Storm Control 73
Defining Port Security 76
Defining 802.1X 80
Defining 802.1X Properties 81
Defining Port Authentication 82
Defining Authentication 87
Defining Authenticated Hosts 91
Defining Access Control 92
Defining MAC Based ACL 92
Defining IP Based ACL 100
Defining IPv6 Based ACLs 112
Defining ACL Binding 121
Defining DoS Prevention 123
DoS Global Settings 123
Defining Martian Addresses 125
Defining DHCP Snooping 127

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 3
Defining DHCP Snooping Properties 128
Defining DHCP Snooping on VLANs 129
Defining Trusted Interfaces 130
Binding Addresses to the DHCP Snooping Database 132
Defining IP Source Guard 135
Defining Dynamic ARP Inspection 141
Defining ARP Inspection Properties 142
Defining ARP Inspection Trusted Interfaces 144
Defining ARP Inspection List 146
Assigning ARP Inspection VLAN Settings 148
Chapter 5: Configuring Ports 151
Configuring Ports Settings for Layer 2 Enabled Devices 151
Configuring Ports Settings for Layer 3 Enabled Devices 157
157
Chapter 6: Configuring VLANs 163
Defining VLAN Properties 164
Modifying VLANs 166
Defining VLAN Membership 167
Modifying VLAN Membership 169
Assigning Ports to Multiple VLANs 170
Defining GVRP Settings 173
Modifying GVRP Settings 174
Defining VLAN Interface Settings 176
Modifying VLAN Interface Settings 178
Defining Customer VLANs Using QinQ 180
Defining Multicast TV VLAN 181
Defining CPE VLAN Mapping 183
Defining Protocol Groups 184
Defining a Protocol Port 187

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 4
Chapter 7: Configuring IP Information 190
IP Addressing 190
Managing IPv6 190
Viewing IPv6 Routes Table 203
Layer 2 IP Addressing 204
Layer 3 IP Addressing 204
Defining IPv4 Interface (Layer 2) 205
Defining IPv4 Interface (Layer 3) 206
Enabling ARP Proxy (Layer 3) 209
Defining UDP Relay (Layer 3) 210
Defining DHCP Relay (Layer 2) 212
Defining DHCP Relay Interfaces 214
Defining DHCP Relay (Layer 3) 216
ARP 218
Defining IP Routing 221
Domain Name System 224
Defining DNS Servers 224
Mapping DNS Hosts 226
Chapter 8: Defining Address Tables 230
Defining Static Addresses 230
Defining Dynamic Addresses 233
Chapter 9: Configuring Multicast Forwarding 235
IGMP Snooping 235
Modifying IGMP Snooping 237
Defining Multicast Group 238
Modifying a Multicast Group 240
Configuring IGMP Snooping Mapping 242
Defining Multicast TV Membership 243
Defining Multicast Forwarding 244

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 5
Modifying Multicast Forwarding 245
Defining Unregistered Multicast Settings 246
Chapter 10: Configuring Spanning Tree 249
Defining Spanning Tree 249
Defining STP Properties 249
Defining Spanning Tree Interface Settings 252
Modifying Interface Settings 256
Defining Rapid Spanning Tree 258
Modifying RTSP 261
Defining Multiple Spanning Tree 263
Defining MSTP Properties 263
Defining MSTP Instance to VLAN 265
Defining MSTP Instance Settings 266
Defining MSTP Interface Settings 267
Chapter 11: Configuring Quality of Service 273
Defining General Settings 274
Defining CoS 274
Defining QoS Queue 276
Mapping CoS to Queue 278
Mapping DSCP to Queue 279
Configuring Bandwidth 280
Configuring VLAN Rate Limit 282
Defining Advanced QoS Mode 285
Configuring DSCP Mapping 286
Defining Class Mapping 288
Defining Aggregate Policer 290
Configuring Policy Table 293
Defining Policy Binding 297
Defining QoS Basic Mode 299
Rewriting DSCP Values 300

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 6
Chapter 12: Configuring SNMP 302
Configuring SNMP Security 303
Defining the SNMP Engine ID 303
Defining SNMP Views 305
Defining SNMP Users 307
Defining SNMP Groups 310
Defining SNMP Communities 314
Defining Trap Management 319
Defining Trap Settings 319
Configuring Station Management 320
Defining SNMP Filter Settings 327
Chapter 13: Managing System Files 329
Firmware Upgrade 330
Save Configuration 331
Copy Files 333
Active Image 335
Chapter 14: Managing Power-over-Ethernet Devices 336
Defining PoE Settings 336
Chapter 15: Managing Device Diagnostics 340
Viewing Integrated Cable Tests 340
Performing Optical Tests 344
Configuring Port Mirroring 345
Modifying Port Mirroring 347
Viewing CPU Utilization 348
Chapter 16: Managing System Logs 350
Enabling System Logs 350
Viewing the Device Memory Logs 352

Contents
Cisco Small Business SFE/SGE Managed Switches Administration Guide 7
Clearing Message Logs 353
Viewing the Flash Logs 353
Clearing Flash Logs 354
Viewing Remote Logs 355
Modifying Syslog Server Settings 358
Chapter 17: Viewing Statistics 361
Viewing Ethernet Statistics 361
Defining Ethernet Interface 361
Viewing Etherlike Statistics 363
Viewing GVRP Statistics 365
Viewing EAP Statistics 367
Managing RMON Statistics 369
Viewing RMON Statistics 370
Resetting RMON Statistics Counters 372
Configuring RMON History 372
Defining RMON History Control 372
Viewing the RMON History Table 375
Defining RMON Events Control 377
Viewing the RMON Events Logs 380
Defining RMON Alarms 381
Managing QoS Statistics 387
Viewing Policer Statistics 387
Viewing Aggregated Policer Statistics 389
Viewing Queues Statistics 389
Chapter 18: Aggregating Ports 393
Defining LAG Management 394
Defining LAG Settings 396
Configuring LACP 400

Getting Started
Starting the Application
Cisco Small Business SFE/SGE Managed Switches Administration Guide 1
1
Getting Started
This section provides an introduction to the user interface, and includes the
following topics:
•Starting the Application
•Understanding the Interface
•Using the Cisco Management Buttons
•Using Screen and Table Options
•Logging Off of the Device
•The About Page
Starting the Application
To open the User Interface:
STEP 1 Open a web browser.
STEP 2 Enter the device’s IP address in the address bar and press Enter. An Enter Network
Password Page
opens:

Getting Started
Starting the Application
Cisco Small Business SFE/SGE Managed Switches Administration Guide 2
1
Enter Network Password Page
STEP 3 When the Enter Network Password Page initially loads, both fields are empty.
Enter a Username and Password and click Log In. The default user name is admin.
The default password is admin. Passwords are alpha-numeric and case-sensitive.
While the system is verifying the login attempt, the Login Progress Indicator
appears . The indicator dots rotate clockwise to indicate that the system is still
working.
If the login attempt is successful, the System Information Page opens.

Getting Started
Understanding the Interface
Cisco Small Business SFE/SGE Managed Switches Administration Guide 3
1
System Information Page
If the login attempt fails because the user typed an incorrect username or
password, the following message appears: “Invalid Username or Password.
Please try again.”
If the login attempt fails due to another problem one of the following error
messages appears:
“Login failed since too many users are logged in.”
“Login failed due to PC configuration problems.”
“There is no response from the server.”
Understanding the Interface
The Interface Components Page displays the interface components with their
corresponding numbers.

Getting Started
Understanding the Interface
Cisco Small Business SFE/SGE Managed Switches Administration Guide 4
1
Interface Components Page
The following table lists the interface components with their corresponding
numbers:
Interface Components
Component Description
1 Tree View The Tree View provides easy navigation through the
configurable device features. The main branches expand
to provide the subfeatures.
2 Device View The device view provides information about device ports,
current configuration and status, table information, and
feature components.The device view also displays other
device information and dialog boxes for configuring
parameters.
3 Device Information
Area
The Device Information area displays some basic
information regarding the device and the configuration.

Getting Started
Using the Cisco Management Buttons
Cisco Small Business SFE/SGE Managed Switches Administration Guide 5
1
Using the Cisco Management Buttons
Device Management buttons provide an easy method of configuring device
information, and include the following:
Using Screen and Table Options
The User Interface contains screens and tables for configuring devices. This
section contains the following topics:
•Adding Device Information
•Modifying Device Information
•Deleting Device Information
Adding Device Information
User defined information can be added to specific interface pages, by opening a
new Add page. To add information to tables or interface pages:
STEP 1 Open an interface page.
STEP 2 Click the Add button. An add page opens, for example, the Add SNTP Server
Page
:
Device Management Buttons
Button Name Description
Apply Applies changes to the device
Clear Counters Clears statistic counters
Clear Logs Clears log files
Add Opens an Add page
Delete Removes entries from tables
Test Performs cable tests

Getting Started
Using Screen and Table Options
Cisco Small Business SFE/SGE Managed Switches Administration Guide 6
1
Add SNTP Server Page
STEP 3 Define the fields.
STEP 4 Click Apply. The configuration information is saved, and the device is updated.
Modifying Device Information
STEP 1 Open the interface page.
STEP 2 Select a table entry.
STEP 3 Click the Edit Button. A Modify page opens, for example, the Edit RMON Events
Page
opens:
Edit RMON Events Page
STEP 4 Define the fields.
STEP 5 Click Apply. The fields are modified, and the information is saved to the device.

Getting Started
Logging Off of the Device
Cisco Small Business SFE/SGE Managed Switches Administration Guide 7
1
Deleting Device Information
STEP 1 Open the interface page.
STEP 2 Select a table row.
STEP 3 Check the Remove checkbox.
STEP 4 Click the Delete button. The information is deleted, and the device is updated.
Logging Off of the Device
The application may automatically log out after ten minutes. When this occurs, the
following message is displayed “You have been logged out as a result of being
inactive for 10 minutes. Use the fields to login.” The
Enter Network Password Page
opens and, after login, the application returns to the
System Information Page . In all
logout instances, a message is displayed on the
Enter Network Password Page to
indicate the logged-out state.
To intentionally log out, click Logout in the top right corner of any screen. The
system logs out and the following message appears: “You have logged out of the
Cisco Unified Managed Switch
The About Page
Click About in the top right corner of any screen to display The About Page . This
page displays the device name and version number.

Getting Started
The About Page
Cisco Small Business SFE/SGE Managed Switches Administration Guide 8
1
The About Page

Managing Device Information
Defining System Information
Cisco Small Business SFE/SGE Managed Switches Administration Guide 9
2
Managing Device Information
This section provides information for defining both basic and advanced system
information. This section contains the following topics:
•Defining System Information
•Managing Stacks
•Viewing Device Health
•Resetting the Device
•Defining Bonjour
•TCAM Utilization
Defining System Information
The System Information Page contains parameters for configuring general device
information.
To open the
System Information Page :

Managing Device Information
Defining System Information
Cisco Small Business SFE/SGE Managed Switches Administration Guide 10
2
STEP 1 Click System > System Management > System Information. The System
Information Page
opens:
System Information Page
The
System Information Page contains the following fields:
•Model Name — Displays the model name and number of ports supported by
the system.
•System Name — Displays the user configured name of the system.
•System Location — Defines the location where the system is currently running.
The field range is up to 0-160 characters.
•System Contact — Defines the name of the contact person. The field range is
up to 0-160 characters.
•System Object ID — Displays the vendor’s authoritative identification of the
network management subsystem contained in the entity.
•System Up Time — Displays the amount of time that has elapsed since the last
device reset. The system time is displayed in the following format: Days, Hours,
Minutes and Seconds. For example: 41 days, 2 hours, 22 minutes and 15
seconds.
•Base MAC Address — Displays the device MAC address. If the system is in
stack mode, the Base MAC Address of the master unit is displayed.

Managing Device Information
Managing Stacking
Cisco Small Business SFE/SGE Managed Switches Administration Guide 11
2
•Hardware Version — Displays the hardware version number.
•Software Version — Displays the software version number. If the system is in
stack mode, the version of the master unit is displayed.
•Boot Version — Indicates the system boot version currently running on the
device. If the system is in stack mode, the version of the master unit is
displayed.
•Switch Operation Mode After Reset — Indicates the mode the device operates
in after the system is reset. The possible field values are:
-Standalone — Indicates the device operates as a stand-alone device
after the system is reset.
-Stack — Indicates the device operates as a Stacked unit after the
system is reset.
Managing Stacking
This section contains information for understanding and configuring stacking.
•Configuring a Stack
•Stack Membership
•Defining Stacking Unit ID
•Adding, Replacing and Removing Stacking Members — Examples
•Managing Stacks
Understanding Switch Operating Modes
The device has the following operating modes:
•Stack
•Stand-alone.
Both the Stack and Stand-alone mode can be selected by the user during
software boot or using the device GUI System Information page. The selected
operating mode is enabled after the unit is reset. The factory default is Stack
mode.