Cisco Sx350 Instruction Manual

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG
Series Managed Switches, Firmware Release 2.2.5.x
ADMINISTRATION
GUIDE

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 1
Contents
Chapter 1: Getting Started 10
Starting the Web-based Configuration Utility 10
Out-Of-Band Port 13
USB Port 15
Basic or Advanced Display Mode 16
Quick Start Device Configuration 17
Interface Naming Conventions 18
Window Navigation 19
Search Facility 22
Chapter 2: Dashboard 23
Grid Management 23
System Health 24
Resource Utilization 25
Identification 26
Port Utilization 27
PoE Utilization 27
Latest Logs 28
Suspended Interfaces 28
Stack Topology 29
Traffic Errors 30
Chapter 3: Configuration Wizards 31
Getting Started Wizard 31
VLAN Configuration Wizard 33
ACL Wizard 34
Chapter 4: Status and Statistics 37
System Summary 38
CPU Utilization 40

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 2
Contents
Interface 40
Etherlike 42
Port Utilization 43
GVRP 43
802.1X EAP 44
ACL 45
TCAM Utilization 46
Health and Power 48
Switched Port Analyzer (SPAN and RSPAN) 54
Diagnostics 57
RMON 61
sFlow 69
View Logs 72
Chapter 5: Administration 74
Device Models 74
System Settings 77
Console Settings (Autobaud Rate Support) 77
User Accounts 78
Idle Session Timeout 79
System Log 80
Reboot 84
Routing Resources 85
Ping 89
Traceroute 91
Chapter 6: Administration: File Management 92
System Files 92
Firmware Operations 94
File Operations 98

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 3
Contents
File Directory 105
DHCP Auto Configuration/Image Update 106
Chapter 7: Administration: Stack Management 116
Overview 116
Types of Units in Stack 117
Stack Topology 118
Unit ID Assignment 119
Master Selection Process 120
Stack Changes 120
Unit Failure in Stack 121
Stack Ports 123
Software Auto Synchronization in Stack 126
Stack Management 130
Chapter 8: Administration: Time Settings 132
System Time Configuration 133
SNTP Modes 134
System Time 135
SNTP Unicast 137
SNTP Multicast/Anycast 139
SNTP Authentication 140
Time Range 141
Recurring Time Range 143
Chapter 9: Administration: Discovery 144
Bonjour 144
LLDP and CDP 145
Discover - LLDP 147
Discovery - CDP 167

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 4
Contents
Chapter 10: Port Management 178
Workflow 178
Port Settings 179
Error Recovery Settings 183
Loopback Detection Settings 184
Link Aggregation 186
UDLD 193
PoE 201
Green Ethernet 212
Chapter 11: Smartport 219
Overview 219
How the Smartport Feature Works 224
Auto Smartport 225
Error Handling 228
Default Configuration 228
Relationships with Other Features 229
Common Smartport Tasks 229
Configuring Smartport Using The Web-based Interface 231
Built-in Smartport Macros 236
Chapter 12: VLAN Management 247
Overview 247
Regular VLANs 254
Private VLAN Settings 262
GVRP Settings 262
VLAN Groups 263
Voice VLAN 269
Access Port Multicast TV VLAN 282
Customer Port Multicast TV VLAN 285

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 5
Contents
Chapter 13: Spanning Tree 289
STP Flavors 289
STP Status and Global Settings 290
STP Interface Settings 292
RSTP Interface Settings 295
Multiple Spanning Tree Overview 297
MSTP Properties 297
VLANs to a MSTP Instance 298
MSTP Instance Settings 299
MSTP Interface Settings 300
Chapter 14: Managing MAC Address Tables 303
Static Addresses 304
Dynamic Addresses 305
Reserved MAC Addresses 306
Chapter 15: Multicast 308
Multicast Forwarding Overview 308
Properties 314
MAC Group Address 315
IP Multicast Group Address 316
IPv4 Multicast Configuration 318
IPv6 Multicast Configuration 324
IGMP/MLD Snooping IP Multicast Group 330
Multicast Router Port 331
Forward All 331
Unregistered Multicast 332
Chapter 16: IP Configuration 334
Overview 334

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 6
Contents
IPv4 Management and Interfaces 337
IPv6 Management and Interfaces 364
Policy-Based Routing 388
Domain Name System 391
Chapter 17: IP Configuration: RIPv2 396
Overview 396
How Rip Operates on the Device 397
Configuring RIP 400
Access Lists 405
Chapter 18: IP Configuration: VRRP 408
Overview 408
VRRP Topology 409
Configurable Elements of VRRP 410
Configuring VRRP 413
Chapter 19: IP Configuration: SLA 417
Overview 417
Using SLA 419
Chapter 20: Security 424
Configuring TACACS+ 425
RADIUS 429
Password Strength 440
Key Management 442
Management Access Method 445
Management Access Authentication 450
SSL Server 451
TCP/UDP Services 454

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 7
Contents
Storm Control 455
Port Security 458
IP Source Guard 460
ARP Inspection 464
Denial of Service Prevention 469
Chapter 21: Security: 802.1X Authentication 480
Overview 480
Properties 493
Port Authentication 495
Host and Session Authentication 498
Authenticated Hosts 499
Locked Clients 499
Web Authentication Customization 500
Chapter 22: Security: Secure Sensitive Data Management 504
Introduction 504
SSD Management 505
SSD Rules 505
SSD Properties 510
Configuration Files 513
SSD Management Channels 517
Menu CLI and Password Recovery 518
Configuring SSD 518
Chapter 23: Security: SSH Server 522
Overview 522
Common Tasks 523
SSH User Authentication 524
SSH Server Authentication 525

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 8
Contents
Chapter 24: Security: SSH Client 527
Overview 527
SSH User Authentication 533
SSH Server Authentication 534
Change User Password on the SSH Server 536
Chapter 25: Security: IPv6 First Hop Security 537
IPv6 First Hop Security Overview 537
Router Advertisement Guard 540
Neighbor Discovery Inspection 541
DHCPv6 Guard 541
Neighbor Binding Integrity 542
IPv6 Source Guard 544
Attack Protection 545
Policies, Global Parameters and System Defaults 547
Common Tasks 549
Default Settings and Configuration 551
Configuring IPv6 First Hop Security through Web GUI 552
Chapter 26: Access Control 571
Overview 571
MAC-Based ACLs Creation 575
IPv4-based ACL Creation 577
IPv6-Based ACL Creation 582
ACL Binding 585
Chapter 27: Quality of Service 588
QoS Features and Components 589
General 591
QoS Basic Mode 603

Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 9
Contents
QoS Advanced Mode 605
QoS Statistics 618
Chapter 28: SNMP 622
Overview 622
Engine ID 627
Views 629
Groups 630
Users 631
Communities 633
Trap Settings 635
Notification Recipients 636
Notification Filter 640
Chapter 29: Smart Network Application (SNA) 642
SNA Sessions 643
SNA Graphics 644
Top Right-Hand Menu 646
Topology View 647
Right-Hand Information Panel 654
Operations 667
Overlays 672
Tags 676
Search 680
Notifications 682
Device Authorization Control (DAC) 685
DAC Workflow 685
Services 693
Saving SNA Settings 709
Technical Details 710