Cisco Small Business 200 Series Instruction Manual

Cisco Small Business
200 Series Smart Switch Administration Guide
ADMINISTRATION
GUIDE

Cisco Small Business 200 Series Smart Switch Administration Guide 3
Contents
Chapter 1: Getting Started 1
Starting the Web-based Switch Configuration Utility 1
Launching the Configuration Utility 1
Logging In 2
Password Expiration 5
Logging Out 5
Quick Start Switch Configuration 6
Window Navigation 7
Application Header 7
Management Buttons 9
Chapter 2: Viewing Statistics 12
Viewing Ethernet Interface 12
Viewing Etherlike Statistics 15
Viewing 802.1X EAP Statistics 17
Managing RMON Statistics 18
Viewing RMON Statistics 19
Viewing the RMON Events Logs 27
Chapter 3: Managing System Logs 31
Setting System Log Settings 31
Setting Remote Logging Settings 34
Viewing Memory Logs 36
RAM Memory 36
Flash Memory 38
Chapter 4: Managing System Files 39
Upgrade/Backup Firmware/Language 42
Downloading or Backing-up a Configuration or Log 45
Displaying Configuration File Properties 49
Copying Configuration Files 50

Cisco Small Business 200 Series Smart Switch Administration Guide 4
Contents
Setting DHCP Auto Configuration 52
Chapter 5: System Time 55
System Time Options 56
Configuring System Time 57
Adding an SNTP Server 59
Defining SNTP Authentication 63
Chapter 6: General Administrative Information and Operations 66
System Information 67
Displaying the System Summary 67
Configuring the System Settings 69
Switch Models 70
Rebooting the Switch 71
Monitoring the Fan Status and Temperature 73
Defining Idle Session Timeout 74
Pinging a Host 75
Chapter 7: Configuring Discovery 77
Configuring Bonjour Discovery 77
Configuring LLDP 78
Setting LLDP Properties 80
Editing LLDP Port Settings 81
LLDP MED Protocol 85
Setting LLDP MED Network Policy 85
Configuring LLDP MED Port Settings 88
Displaying LLDP Port Status 90
Displaying LLDP Local Information 92
Displaying LLDP Neighbors Information 96
Accessing LLDP Statistics 101
LLDP Overloading 102

Cisco Small Business 200 Series Smart Switch Administration Guide 5
Contents
Chapter 8: Port Management 106
Configuring Ports 106
Port Management Workflow 106
Setting the Basic Port Configuration 107
Configuring Link Aggregation 111
Static and Dynamic LAG Workflow 112
Defining LAG Management 113
Defining Member Ports in a LAG 114
Configuring LAG Settings 115
Configuring LACP 117
Setting Port LACP Parameter Settings 118
Green Ethernet 120
Setting Global Green Ethernet Properties 121
Setting Green Ethernet Properties for Ports 123
Chapter 9: Managing Device Diagnostics 125
Testing Copper Ports 125
Displaying Optical Module Status 129
Configuring Port and VLAN Mirroring 131
Viewing CPU Utilization 134
Chapter 10: Managing Power-over-Ethernet Devices 135
PoE on the Switch 135
PoE Features 135
PoE Operation 136
PoE Configuration Considerations 136
Configuring PoE Properties 137
Configuring the PoE Power, Priority, and Class 139
Chapter 11: VLAN Management 143
VLANs 143

Cisco Small Business 200 Series Smart Switch Administration Guide 6
Contents
Configuring Default VLAN Settings 145
Creating VLANs 147
Configuring VLAN Interface Settings 150
Defining VLAN Membership 153
Configuring Port to VLAN 154
Configuring VLAN to Port 155
Viewing VLAN Membership 158
Voice VLAN 159
Voice VLAN Options 160
Configuring Voice VLAN Properties 161
Configuring Telephony OUI 163
Chapter 12: Configuring the Spanning Tree Protocol 165
STP Flavors 165
Configuring STP Status and Global Settings 166
Defining Spanning Tree Interface Settings 169
Configuring Rapid Spanning Tree Settings 172
Chapter 13: Managing MAC Address Tables 176
Configuring Static MAC Addresses 176
Dynamic MAC Addresses 178
Configuring Dynamic MAC Address Parameters 179
Querying Dynamic Addresses 179
Chapter 14: Configuring Multicast Forwarding 182
Multicast Forwarding 182
Typical Multicast Setup 183
Multicast Operation 183
Multicast Registration 184
Multicast Address Properties 185
Defining Multicast Properties 185

Cisco Small Business 200 Series Smart Switch Administration Guide 7
Contents
Adding MAC Group Address 188
Adding IP Multicast Group Address 192
Configuring IGMP Snooping 195
Configuring MLD Snooping 199
Viewing IGMP/MLD IP Multicast Groups 202
Defining Multicast Router Ports 203
Defining Forward All Multicast 205
Defining Unregistered Multicast Settings 207
Chapter 15: Configuring IP Information 210
Management and IP Interfaces 210
IP Addressing 212
Defining an IPv4 Interface 213
Defining IPv6 Global Configuration 215
Defining an IPv6 Interface 216
Defining IPv6 Addresses 218
Viewing the IPv6 Default Router List 220
Configuring IPv6 Tunnels 223
Defining IPv6 Neighbors Information 225
Viewing IPv6 Route Tables 229
Configuring ARP 230
Domain Name Systems 233
Defining DNS Servers 233
Mapping DNS Hosts 235
Chapter 16: Configuring Security 238
Defining Users 240
Setting User Accounts 240
Setting Password Complexity Rules 242
Configuring RADIUS Parameters 244
Configuring Management Access Authentication 248

Cisco Small Business 200 Series Smart Switch Administration Guide 8
Contents
Defining Access Profiles 250
Displaying, Adding, or Activating an Access Profile 251
Defining Profile Rules 254
Configuring TCP/UDP Services 257
Defining Storm Control 259
Configuring Port Security 262
Configuring 802.1X 265
802.1X Parameters Workflow 266
Defining 802.1X Properties 267
Defining 802.1X Port Authentication 268
Defining Host and Session Authentication 271
Viewing Authenticated Hosts 274
Chapter 17: Configuring Quality of Service 275
QoS Features and Components 275
Configuring QoS 277
Displaying QoS Properties 277
Defining QoS InterfaceSettings 279
Configuring QoS Queues 281
Mapping CoS/802.1p to a Queue 283
Mapping DSCP to Queue 285
Configuring Bandwidth 286
Configuring Egress Shaping per Queue 288
Managing QoS Statistics 290
Viewing Queues Statistics 290

1
Cisco Small Business 200 Series Smart Switch Administration Guide 9
Getting Started
This chapter provides an introduction to the user interface, and includes the
following topics:
•Starting the Web-based Switch Configuration Utility
•Quick Start Switch Configuration
Starting the Web-based Switch Configuration Utility
This section describes how to navigate the web-based switch configuration utility.
Browser Restrictions
•If you are using a pop-up blocker, make sure it is disabled.
Browsers have the following restrictions:
•If you are using Internet Explorer 6, you cannot directly use an IPv6 address
to access the switch. You can, however, use the DNS (Domain Name
System) server to create a domain name that contains the IPv6 address,
and then use that domain name in the address bar in place of the IPv6
address.
•If you have multiple IPv6 interfaces on your management station, use the
IPv6 global address instead of IPv6 link local address to access the switch
from your browser.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco Small Business 200 Series Smart Switch Administration Guide 10
1
Launching the Configuration Utility
To open the user interface:
STEP 1 Open a Web browser.
STEP 2 Enter the IP address of the switch you are configuring in the address bar on the
browser, and then press Enter. The Login Page opens.
NOTE When the switch is using the factory default IP address of 192.168.1.254, its power
LED flashes continuously. When the switch is using a DHCP-assigned IP address or
an administrator-configured static IP address, the power LED is on solid.
Logging In
Logging In
The default username is cisco and the default password is cisco. The first time
that you log in with the default username and password, you are required to enter
a new password.
To log in to the device configuration utility:
STEP 1 Enter the username/password. The password can contain up to 64 ASCII
characters. Password-complexity rules are described in the Setting Password
Complexity Rules section of the Configuring Security chapter.
STEP 2 If you are not using English, select the desired language from the Language drop-
down menu. To add a new language to the switch or update a current one, refer to
the Upgrade/Backup Firmware/Language section.
STEP 3 If this is the first time that you logged on with the default user ID (cisco), and the
default password (cisco) or your password has expired, the Change Password
Page opens. See Password Expiration for additional information.
STEP 4 Choose whether to select Disable Password Complexity Enforcement or not.
For more information on password complexity, see the Setting Password
Complexity Rules section.
STEP 5 Enter the new username/password and click Apply.
When the login attempt is successful, the Getting Started page opens.

Getting Started
Starting the Web-based Switch Configuration Utility
Cisco Small Business 200 Series Smart Switch Administration Guide 11
1
If you entered an incorrect username or password, an error message is displayed,
and the Login Page remains displayed. If you are having problems logging in,
please see the Launching the Configuration Utility section in the Cisco Small
Business 200 Series Smart Switch Administration Guide for additional information.
Select Don’t show this page on startup to prevent the Getting Started page from
being displayed each time that you log on to the system. If you select this option,
the System Summary page is opened instead of the Getting Started page.
Password Expiration
Password Expiration
The New Password Page is displayed:
•The first time you access the switch with the default username cisco and
password cisco. This page forces you to replace the factory default
password.
•When the password expires, this page forces you to select a new
password.
Logging Out
Logging Out
By default, the application logs out after ten minutes of inactivity. You can change
this default value as described in the Defining Idle Session Timeout section in the
General Administrative Information and Operations chapter.
!
CAUTION Unless the Running Configuration is copied to the Startup Configuration, all
changes made since the last time the file was saved are lost if the switch is
rebooted. Save the Running Configuration to the Startup Configuration before
logging off to preserve any changes you made during this session.
A red X icon displayed to the left of the Save application link indicates that Running
Configuration changes have been made that have not yet been saved to the Startup
Configuration file.

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 12
1
When you click Save, the Copy/Save Configuration Page is displayed. Save the
Running Configuration file by copying it to the Startup Configuration file. After this
save, the red X icon and the Save application link are no longer displayed.
To logout, click Logout in the top right corner of any page. The system logs out of
the switch.
When a timeout occurs or you intentionally log out of the system, a message is
displayed and the
Login Page opens, with a message indicating the logged-out
state. After you log in, the application returns to the initial page.
The initial page displayed depends on the “Do not show this page on startup”
option in the Getting Started Page. If you did not select this option, the initial page
is the Getting Started Page. If you did select this option, the initial page is the
System Summary Page.
Quick Start Switch Configuration
To simplify switch configuration through quick navigation, the Getting Started
Page provides links to the most commonly used pages.
Links on the Getting Started Page
Category Link Name (on the Page) Linked Page
Initial Setup Change Device IP Address IPv4 Interface Page
Create VLAN Create VLAN Page
Configure Port Settings Port Setting Page
Switch
Status
System Summary System Summary Page
Port Statistics Interface Page
RMON Statistics Statistics Page
View Log RAM Memory Page
Quick
Access
Change Device Password User Accounts Page

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 13
1
This section describes the features of the web-based switch configuration utility.
Application Header
The Application Header is displayed on every page. It provides the following
application links:
Upgrade Device Software Upgrade/Backup Firmware/
Language
Backup Device
Configuration
Download/Backup
Configuration/Log Page
Configure QoS QoS Properties Page
Configure Port Mirroring Port and VLAN Mirroring Page
Application Links
Application Link
Name
Description
A red X icon displayed to the left of the Save application
link indicates that Running Configuration changes have
been made that have not yet been saved to the Startup
Configuration file.
Click Save to display the Copy/Save Configuration Page.
Save the Running Configuration file type by copying it to
the Startup Configuration file type on the switch. After this
save, the red X icon and the Save application link are no
longer displayed. When the switch is rebooted, it copies
the Startup Configuration file type to the Running
Configuration, and sets the switch parameters according
to the data in the Running Configuration.
Username Displays the name of the user logged on to the switch. The
default username is cisco. (The default password is cisco.)
Logout Click to logout of the web-based switch configuration
utility.
Links on the Getting Started Page
Category Link Name (on the Page) Linked Page

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 14
1
About Click to display the switch name and switch version
number.
Help Click to display the online help.
Language Menu Select a language or load a new language file into the
switch. If the language required is displayed in the menu,
select it. If it is not displayed, select Download Language.
For more information about adding a new language, refer
to the Upgrade/Backup Firmware/Language.
The SYSLOG Alert Status icon is displayed when a
SYSLOG message, above the critical severity level, is
logged. Click the icon to open the RAM Memory Page.
After you access this page, the SYSLOG Alert Status icon
is no longer displayed. To display the page when there is
not an active SYSLOG message, follow the Status and
Statistics > View Log > RAM Memory Page path.
Application Links (Continued)
Application Link
Name
Description

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 15
1
Management Buttons
The following table describes the commonly-used buttons that appear on various
pages in the system.
Management Buttons
Button Name Description
Navigate the table by using the right and left arrow icons
when there are more than 50 entries in a table.
Indicates a mandatory field.
Add Click to display the related Add page and add an entry to a
table. Enter the information and click Apply to save it to the
Running Configuration. Click Close to return to the main
page. Click Save to display the Copy/Save Configuration
Page and save the Running Configuration to the Startup
Configuration file type on the switch.
Apply Click to apply changes to the Running Configuration on the
switch. If the switch is rebooted, the Running Configuration
is lost, unless it is saved to the Startup Configuration file
type or another file type. Click Save to display the Copy/
Save Configuration Page and save the Running
Configuration to the Startup Configuration file type on the
switch.
Cancel Click to reset changes made on the page.
Clear All
Interfaces
Counters
Click to clear the statistic counters for all interfaces.
Clear Interface
Counters
Click to clear the statistic counters for the selected
interface.
Clear Logs Clears log files.
Clear Table Clears table entries.
Close Returns to main page. If there are changes that were not
applied to the Running Configuration, a message is
displayed.

Getting Started
Quick Start Switch Configuration
Cisco Small Business 200 Series Smart Switch Administration Guide 16
1
Copy Settings A table typically contains one or more entries containing
configuration settings. Instead of modifying each entry
individually, it is possible to modify one entry and then
copy it to multiple entries, as described below:
1. Select the entr y to be copied. Click Copy Settings to
display the popup.
2. Enter the destination entry numbers in the to field.
3. Click Apply to save the changes and click Close to
return to the main page.
Delete Select the entry in the table to be deleted and click Delete
to remove entries from a table. The entry is deleted.
Details Click to display the details associated with the entry
selected on the main page.
Edit Select the entry and click Edit to open the entries for
editing. The Edit page opens, and the entry can be
modified.
1. Click Apply to save the changes to the Running
Configuration.
2. Click Close to return to the main page.
Go Enter the query filtering criteria and click Go. The results
are displayed on the page.
Test Click Test to perform the related tests.
Management Buttons (Continued)
Button Name Description

2
Cisco Small Business 200 Series Smart Switch Administration Guide 17
Viewing Statistics
This chapter describes how to view switch statistics.
It contains the following sections:
•Viewing Ethernet Interface
•Viewing Etherlike Statistics
•Viewing 802.1X EAP Statistics
•Managing RMON Statistics
Viewing Ethernet Interface
The Interface Page displays traffic statistics per port. The refresh rate of the
information can be selected.
This page is useful for analyzing the amount of traffic that is both sent and
received and its dispersion (Unicast, Multicast, and Broadcast).
To display Ethernet statistics:
STEP 1 Click Status and Statistics > Interface. The Interface Page opens.
STEP 2 Enter the parameters.
•Interface—Select the type of interface and specific interface for which
Ethernet statistics are to be displayed.
•Refresh Rate—Select the time period that passes before the interface
Ethernet statistics are refreshed. The available options are:
-No Refresh—Statistics are not refreshed.
-15 Sec—Statistics are refreshed every 15 seconds.
-30 Sec—Statistics are refreshed every 30 seconds.

Viewing Statistics
Viewing Etherlike Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 18
2
-60 Sec—Statistics are refreshed every 60 seconds.
The Receive Statistics area displays information about incoming packets.
•Tota l By tes (O ctets)—Octets received, including bad packets and FCS
octets, but excluding framing bits.
•Unicast Packets—Good Unicast packets received.
•Multicast Packets—Good Multicast packets received.
•Broadcast Packets—Good Broadcast packets received.
•Packets with Errors—Packets with errors received.
The Transmit Statistics area displays information about outgoing packets.
•Tota l By tes (O ctets)—Octets transmitted, including bad packets and FCS
octets, but excluding framing bits.
•Unicast Packets—Good Unicast packets transmitted.
•Multicast Packets—Good Multicast packets transmitted.
•Broadcast Packets—Good Broadcast packets transmitted.
To clear statistics counters:
•Click Clear Interface Counters to clear counters for the interface displayed.
•Click Clear All Interface Counters to clear counters for all interfaces.
Viewing Etherlike Statistics
The Etherlike Page displays statistics per port according to the Etherlike MIB
standard definition. The refresh rate of the information can be selected. This page
provides more detailed information regarding errors in the physical layer (Layer 1),
which might disrupt traffic.
To view Etherlike Statistics:
STEP 1 Click Status and Statistics > Etherlike. The Etherlike Page opens.
STEP 2 Enter the parameters.

Viewing Statistics
Viewing Etherlike Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 19
2
•Interface—Select the type of interface and specific interface for which
Ethernet statistics are to be displayed.
•Refresh Rate—Select the amount of time that passes before the Etherlike
statistics are refreshed.
The fields are displayed for the selected interface.
•Frame Check Sequence (FCS) Errors—Received frames that failed the
CRC (cyclic redundancy checks).
•Single Collision Frames—The number of frames involved in a single
collision, but were successfully transmitted.
•Late Collisions—Collisions that have been detected after the first 512 bits
of data.
•Excessive Collisions—Number of transmissions due to excessive collisions.
•Oversize Packets—Packets greater than 1518 octets received.
•Internal MAC Receive Errors—Frames rejected because of receiver errors.
•Received Pause Frames—Received flow control pause frames.
•Transmitted Pause Frames—Flow control pause frames transmitted from
the selected interface.
To clear statistics counters:
•Click Clear Interface Counters to clear the selected interface’s Etherlike
statistics counters.
•Click Clear All Interface Counters to clear the Etherlike statistics counters
of all interfaces.

Viewing Statistics
Viewing 802.1X EAP Statistics
Cisco Small Business 200 Series Smart Switch Administration Guide 20
2
Viewing 802.1X EAP Statistics
The 802.1x EAP Page displays detailed information regarding the EAP (Extensible
Authentication Protocol) frames that were sent or received. To configure the
802.1X feature, see the 802.1X Properties Page.
To v i e w t h e E A P S t a t i s t i c s :
STEP 1 Click Status and Statistics > 802.1X EAP. The 802.1x EAP Page opens.
STEP 2 Select the Port that is polled for statistics.
STEP 3 Select the time period (Refresh Rate) that passes before the EAP statistics are
refreshed.
The values are displayed for the selected interface.
•EAPOL Frames Received—Valid EAPOL frames received on the port.
•EAPOL Frames Transmitted—Valid EAPOL frames transmitted by the port.
•EAPOL Start Frames Received—EAPOL Start frames received on the port.
•EAPOL Logoff Frames Received—EAPOL Logoff frames received on the
port.
•EAP Response/ID Frames Received—EAP Resp/ID frames received on the
port.
•EAP Response Frames Received—EAP Response frames received by the
port (other than Resp/ID frames).
•EAP Request/ID Frames Transmitted—EAP Req/ID frames transmitted by
the port.
•EAP Request Frames Transmitted—EAP Request frames transmitted by
the port.
•Invalid EAPOL Frames Received—Unrecognized EAPOL frames received
on this port.
•EAP Length Error Frames Received—EAPOL frames with an invalid Packet
Body Length received on this port.
•Last EAPOL Frame Version—Protocol version number attached to the most
recently received EAPOL frame.