Cisco WS-C2955T-12 Quick start guide

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2900 Series XL and
Catalyst 3500 Series XL
Software Configuration Guide
Cisco IOS Releases
12.0(5)WC4 and 12.0(5)WC5
May 2002
Customer Order Number: DOC-786511=
Text Part Number: 78-6511-08

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS”WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCIP, the Cisco Powered Network mark, the Cisco Systems Verified logo, Cisco Unity, Follow Me Browsing, FormShare, Internet Quotient, iQ Breakthrough, iQ Expertise,
iQ FastTrack, the iQ Logo, iQ Net Readiness Scorecard, Networking Academy, ScriptShare, SMARTnet, TransPath, and Voice LAN are trademarks of Cisco Systems, Inc.;
Changing the Way We Work, Live, Play, and Learn, Discover All That’s Possible, The Fastest Way to Increase Your Internet Quotient, and iQuick Study are service marks
of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco
IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch,
Fast Step, GigaStack, IOS, IP/TV, LightStream, MGX, MICA, the Networkers logo, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar,
SlideCast, StrataView Plus, Stratm, SwitchProbe, TeleRouter, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other
countries.
All other trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0203R)
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
Copyright © 1998-2002, Cisco Systems, Inc.
All rights reserved.

iii
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
78-6511-08
CONTENTS
Preface xv
Audience xv
Purpose xv
Organization xvi
Conventions xvii
Related Publications xviii
Obtaining Documentation xix
World Wide Web xix
Documentation CD-ROM xix
Ordering Documentation xix
Documentation Feedback xix
Obtaining Technical Assistance xx
Cisco.com xx
Technical Assistance Center xx
Cisco TAC Web Site xxi
Cisco TAC Escalation Center xxi
CHAPTER 1Overview 1-1
Features 1-1
ManagementOptions 1-6
ManagementInterface Options 1-6
Advantages of Using CMS and Clustering Switches 1-7
Network Configuration Examples 1-8
Design Concepts for Using the Switch 1-8
Small to Medium-Sized Network Configuration 1-11
Collapsed Backbone and Switch Cluster Configuration 1-13
Large Campus Configuration 1-15
Hotel Network Configuration 1-17
Multidwelling Configuration 1-19
Long-Distance, High-Bandwidth Transport Configuration 1-21
Where to Go To Next 1-21

Contents
iv
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08
CHAPTER 2Getting Started with CMS 2-1
Features 2-2
Front Panel View 2-4
Cluster Tree 2-5
Front-PanelImages 2-6
Redundant Power System LED 2-7
Port Modes and LEDs 2-8
VLAN Membership Modes 2-12
Topology View 2-13
Topology Icons 2-15
Device and Link Labels 2-16
Colors in the Topology View 2-17
Topology Display Options 2-17
Menus and Toolbar 2-18
Menu Bar 2-18
Toolbar 2-23
Front Panel View Popup Menus 2-24
Device Popup Menu 2-24
Port Popup Menu 2-24
Topology View Popup Menus 2-25
Link Popup Menu 2-25
Device Popup Menus 2-26
Interaction Modes 2-28
Guide Mode 2-28
Expert Mode 2-28
Wizards 2-28
ToolTips 2-29
Online Help 2-29
CMS Window Components 2-30
Host Name List 2-30
Tabs, Lists, and Tables 2-31
Icons Used in Windows 2-31
Buttons 2-31
Accessing CMS 2-32
Access Modes in CMS 2-33

Contents
v
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
78-6511-08
Verifying Your Changes 2-34
Change Notification 2-34
Error Checking 2-34
Saving Your Changes 2-34
UsingDifferent Versions of CMS 2-35
Where to Go Next 2-35
CHAPTER 3Getting Started with the CLI 3-1
Command Usage Basics 3-2
Accessing Command Modes 3-2
Specifying Ports in Interface Configuration Mode 3-4
Abbreviating Commands 3-4
Using the No and Default Forms of Commands 3-5
Redisplaying a Command 3-5
Getting Help 3-5
Command-Line Error Messages 3-6
Accessing the CLI 3-7
Accessing the CLI from a Browser 3-7
Saving Configuration Changes 3-8
Where to Go Next 3-8
CHAPTER 4General Switch Administration 4-1
Initial Switch Configuration 4-2
Switch Software Releases 4-2
Console Port Access 4-3
HTTP Access to CMS 4-3
Telnet Access to the CLI 4-4
SNMP Network Management Platforms 4-5
Using FTP to Access the MIB Files 4-5
Using SNMP to Access MIB Variables 4-6
Default Settings 4-7
CHAPTER 5Clustering Switches 5-1
Understanding Switch Clusters 5-2
Command Switch Characteristics 5-3
Standby Command Switch Characteristics 5-3
Candidate Switch and Member Switch Characteristics 5-4

Contents
vi
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08
Planning a Switch Cluster 5-5
Automatic Discovery of Cluster Candidates and Members 5-5
Discovery through CDP Hops 5-6
Discovery through Non-CDP-Capable and Noncluster-Capable Devices 5-7
Discovery through the Same Management VLAN 5-8
Discovery through Different Management VLANs 5-9
Discovery of Newly Installed Switches 5-11
HSRP and Standby Command Switches 5-12
Virtual IP Addresses 5-13
Other Considerations for Cluster Standby Groups 5-13
Automatic Recovery of Cluster Configuration 5-15
IP Addresses 5-15
Host Names 5-16
Passwords 5-16
SNMP Community Strings 5-16
TACACS+ and RADIUS 5-17
Access Modes in CMS 5-17
ManagementVLAN 5-18
Network Port 5-19
NAT Commands 5-19
LRE Profiles 5-19
Availability of Switch-Specific Features in Switch Clusters 5-19
Creating a Switch Cluster 5-19
Enabling a Command Switch 5-20
Adding Member Switches 5-21
Creating a Cluster Standby Group 5-23
Verifying a Switch Cluster 5-25
Using the CLI to Manage Switch Clusters 5-26
Catalyst 1900 and Catalyst 2820 CLI Considerations 5-26
Using SNMP to Manage Switch Clusters 5-27
CHAPTER 6Configuring the System 6-1
Changing IP Information 6-2
Manually Assigning and Removing Switch IP Information 6-2
Using DHCP-Based Autoconfiguration 6-3
Understanding DHCP-Based Autoconfiguration 6-3
DHCP Client Request Process 6-4
Configuring the DHCP Server 6-5
Configuring the TFTP Server 6-5

Contents
vii
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
78-6511-08
Configuring the Domain Name and the DNS 6-6
Configuring the Relay Device 6-7
Obtaining Configuration Files 6-8
Example Configuration 6-9
Assigning Passwords and Privilege Levels 6-11
Setting the System Date and Time 6-12
Configuring DaylightSaving Time 6-12
Configuring the Network Time Protocol 6-13
Configuring the Switch as an NTP Client 6-13
Enabling NTP Authentication 6-13
Configuring the Switch for NTP Broadcast-Client Mode 6-13
Configuring CDP 6-13
Configuring CDP for Extended Discovery 6-14
Managing the MAC Address Tables 6-15
MAC Addresses and VLANs 6-15
Changing the Address Aging Time 6-16
Removing Dynamic Address Entries 6-16
MAC Address Notification 6-17
Adding Secure Addresses 6-18
Removing Secure Addresses 6-18
Adding Static Addresses 6-19
Removing Static Addresses 6-19
Configuring Static Addresses for EtherChannel Port Groups 6-20
Configuring CGMP 6-20
Enabling the Fast Leave Feature 6-21
Disabling the CGMP Fast Leave Feature 6-21
Changing the CGMP Router Hold-Time 6-22
Removing Multicast Groups 6-22
Configuring IGMP Filtering 6-23
Configuring IGMP Profiles 6-23
Applying IGMP Filters 6-25
Setting the Maximum Number of IGMP Groups 6-26
Configuring MVR 6-27
Using MVR in a Multicast Television Application 6-27
ConfigurationGuidelines and Limitations 6-29
Setting MVR Parameters 6-30
Configuring MVR 6-31
Managing the ARP Table 6-32

Contents
viii
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08
Configuring STP 6-33
Supported STP Instances 6-33
Using STP to Support Redundant Connectivity 6-34
Disabling STP 6-34
Accelerating Aging to Retain Connectivity 6-34
Configuring STP and UplinkFast ina Cascaded Cluster 6-35
Configuring RedundantLinks By Using STP UplinkFast 6-36
Enabling STP UplinkFast 6-37
Configuring Cross-Stack UplinkFast 6-37
How CSUF Works 6-37
Events that Cause Fast Convergence 6-39
Limitations 6-39
Connecting the Stack Ports 6-40
Configuring Cross-Stack UplinkFast 6-41
Changing the STP Parameters for a VLAN 6-42
Changing the STP Implementation 6-42
Changing the Switch Priority 6-42
Changing the BPDU Message Interval 6-43
Changing the Hello BPDU Interval 6-43
Changing the Forwarding Delay Time 6-43
STP Port States 6-44
Enabling the Port Fast Feature 6-44
Changing the Path Cost 6-45
Changing the Port Priority 6-45
Configuring STP Root Guard 6-46
Configuring BPDU Guard 6-47
Configuring SNMP 6-48
Disabling and Enabling SNMP 6-48
Entering Community Strings 6-49
Adding Trap Managers 6-49
Configuring TACACS+ 6-51
Configuring the TACACS+ Server Host 6-51
Configuring Login Authentication 6-52
Specifying TACACS+ Authorization for EXEC Access and Network Services 6-53
Starting TACACS+ Accounting 6-54
Configuring a Switch forLocal AAA 6-54
Controlling Switch Access with RADIUS 6-55
Understanding RADIUS 6-55
RADIUS Operation 6-56

Contents
ix
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
78-6511-08
Configuring RADIUS 6-57
Default RADIUS Configuration 6-57
Identifying the RADIUS Server Host 6-58
Configuring RADIUS Login Authentication 6-60
Defining AAA Server Groups 6-62
Configuring RADIUS Authorization for User Privileged Access and Network Services 6-64
Starting RADIUS Accounting 6-65
Configuring Settings for All RADIUS Servers 6-65
Configuring the Switch to Use Vendor-Specific RADIUS Attributes 6-66
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 6-67
Displaying the RADIUS Configuration 6-68
Configuring the Switch for Local Authentication and Authorization 6-69
CHAPTER 7Configuring the Switch Ports 7-1
Changing the Port Speed and Duplex Mode 7-2
Connecting to Devices That Do Not Autonegotiate 7-2
Half Duplex with Back Pressure 7-2
Full Duplex with Flow Control 7-2
Setting Speed and Duplex Parameters 7-3
Configuring Flow Control on Gigabit Ethernet Ports 7-3
Configuring Flooding Controls 7-4
Enabling Storm Control 7-4
Disabling Storm Control 7-5
Blocking Flooded Traffic on a Port 7-5
Resuming Normal Forwarding on a Port 7-5
Enabling a Network Port 7-6
Disabling a Network Port 7-6
Configuring UniDirectional Link Detection 7-7
Creating EtherChannelPort Groups 7-7
Understanding EtherChannel Port Grouping 7-8
Port Group Restrictions on Static-Address Forwarding 7-8
Creating EtherChannelPort Groups 7-9
Configuring Protected Ports 7-9
Enabling Port Security 7-10
Defining the Maximum Secure Address Count 7-10
Enabling Port Security 7-10
Disabling Port Security 7-11
Configuring Port Security Aging 7-11

Contents
x
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08
Configuring SPAN 7-12
Enabling SPAN 7-12
Disabling SPAN 7-12
Configuring Voice Ports 7-13
Preparing a Port for a Cisco IP Phone Connection 7-13
Configuring a Port to Connect to aCisco IP Phone 7-14
Overriding the CoS Priority of Incoming Frames 7-14
Configuring Voice Ports to Carry Voice and Data Traffic on Different VLANs 7-15
Configuring Inline Power on the Catalyst 3524-PWR Ports 7-15
Configuring the LRE Ports 7-16
LRE Links and LRE Profiles 7-16
Types of LRE Profiles 7-17
Environmental Considerations for LRE Links 7-18
Considerations for Using LRE Profiles 7-19
CPE Ethernet Links 7-21
Considerations for Connected Cisco 575 LRE CPEs 7-21
Considerations for Connected Cisco 585 LRE CPEs 7-22
Assigning a Public Profile to AllLRE Ports 7-22
Assigning a Private Profile to an LRE Port 7-23
CHAPTER 8Configuring VLANs 8-1
Overview 8-2
ManagementVLANs 8-3
Changing the Management VLAN fora New Switch 8-4
Changing the Management VLAN Through a Telnet Connection 8-4
Assigning VLAN Port Membership Modes 8-5
VLAN Membership Combinations 8-6
Assigning Static-Access Ports to a VLAN 8-7
Overlapping VLANs and Multi-VLAN Ports 8-7
Using VTP 8-9
The VTP Domain 8-9
VTP Modes and Mode Transitions 8-10
VTP Advertisements 8-11
VTP Version 2 8-11
VTP Pruning 8-12
VTP Configuration Guidelines 8-13
Domain Names 8-13
VTP Version Numbers 8-13
Passwords 8-14