Cisco C2960XSTACK - Manual

Preface This preface contains the following topics: • Document Conventions, page ix • Related Documentation, page xi • Obtaining Documentation and Submitting a Service Request, page xi Document Conventions This document uses the following conventions: Description Convention Both the ^ symbol and Ctr...

Related Documentation Before installing or upgrading the switch, refer to the switch release notes. Note • Catalyst 2960-X Switch documentation, located at: http://www.cisco.com/go/cat2960x_docs • Cisco SFP and SFP+ modules documentation, including compatibility matrixes, located at: http://www.cisc...

C H A P T E R 1 Using the Command-Line Interface This chapter contains the following topics: • Information About Using the Command-Line Interface, page 1 • How to Use the CLI to Configure Features, page 5 Information About Using the Command-Line Interface This section describes the Cisco IOS command...

Table 1: Command Mode Summary About This Mode Exit Method Prompt Access Method Mode Use this mode to • Changeterminalsettings. • Perform basictests. • Displaysysteminformation. Enter logout or quit . Switch> Begin a sessionusing Telnet, SSH,or console. User EXEC Use this mode toverify commandstha...

About This Mode Exit Method Prompt Access Method Mode Line configuration Use this mode toconfigureparameters for theterminal line. To exit to globalconfiguration mode,enter exit . To return toprivileged EXECmode, press Ctrl-Z or enter end . Switch(config-line)# While in globalconfiguration mode,spec...

Purpose Command or Action Lists all commands available for a particular commandmode. ? Example: Switch> ? Step 4 Lists the associated keywords for a command. command ? Example: Switch> show ? Step 5 Lists the associated arguments for a keyword. command keyword ? Example: Switch(config)# cdp ho...

Table 2: Common CLI Error Messages How to Get Help Meaning Error Message Reenter the command followed bya question mark (?) with a spacebetween the command and thequestion mark. The possible keywords that you canenter with the command appear. You did not enter enoughcharacters for your switch toreco...

Changing the Command History Buffer Size By default, the switch records ten command lines in its history buffer. You can alter this number for a currentterminal session or for all sessions on a particular line. This procedure is optional. SUMMARY STEPS 1. terminal history [ size number-of-lines ] DE...

Purpose Command or Action Lists the last several commands that you just entered in privileged EXEC mode.The number of commands that appear is controlled by the setting of the terminal show history Example: Switch# show history Step 3 history global configuration command and the history line configur...

Purpose Command or Action Disables the enhanced editing mode for the current terminal sessionin the privileged EXEC mode. terminal no editing Example: Switch# terminal no editing Step 2 Editing Commands through Keystrokes The keystrokes help you to edit the command lines. These keystrokes are option...

Deletes from the cursor to the end of the word. Esc D Capitalizes at the cursor. Esc C Changes the word at the cursor to lowercase. Esc L Capitalizes letters from the cursor to the end of theword. Esc U Designates a particular keystroke as an executablecommand, perhaps as a shortcut. Ctrl-V or Esc Q...

DETAILED STEPS Purpose Command or Action Displays the global configuration command entry that extends beyondone line. access-list Example: Switch(config)# access-list 101 permit tcp Step 1 When the cursor first reaches the end of the line, the line is shifted tenspaces to the left and redisplayed. T...

Purpose Command or Action Expressions are case sensitive. For example, if you enter | exclude output , the lines that contain output are not displayed, but the lines that contain output appear. Example: Switch# show interfaces | include protocol Vlan1 is up, line protocol is upVlan10 is up, line pro...

C H A P T E R 2 Configuring Cisco IOS Configuration Engine This chapter describes how to configure the Cisco IOS Configuration Engine. • Finding Feature Information, page 13 • Prerequisites for Configuring the Configuration Engine, page 13 • Restrictions for Configuring the Configuration Engine, pag...

Related Topics Cisco Networking Services IDs and Device Hostnames, on page 16 DeviceID, on page 17 Restrictions for Configuring the Configuration Engine • Within the scope of a single instance of the configuration server, no two configured switches can sharethe same value for ConfigID. • Within the ...

In standalone mode, the Cisco Configuration Engine supports an embedded directory service. In this mode,no external directory or other data store is required. In server mode, the Cisco Configuration Engine supportsthe use of a user-defined external directory. Figure 1: Cisco Configuration Engine Arc...

Event Service The Cisco Configuration Engine uses the Event Service for receipt and generation of configuration events.The Event Service consists of an event agent and an event gateway. The event agent is on the switch andfacilitates the communication between the switch and the event gateway on the ...

The ConfigID is fixed at startup time and cannot be changed until the device restarts, even if the switchhostname is reconfigured. DeviceID Each configured switch participating on the event bus has a unique DeviceID, which is analogous to the switchsource address so that the switch can be targeted a...

In server mode, the hostname is not used. In this mode, the unique DeviceID attribute is always used forsending an event on the bus. If this attribute is not set, you cannot update the switch. These and other associated attributes (tag value pairs) are set when you run Setup on the Cisco Configurati...

Incremental (Partial) Configuration After the network is running, new services can be added by using the Cisco IOS CNS agent. Incremental(partial) configurations can be sent to the switch. The actual configuration can be sent as an event payload byway of the event gateway (push operation) or as a si...

Required Configuration Device • A bootstrap configuration file that includes theCNS configuration commands that enable theswitch to communicate with the ConfigurationEngine • The switch configured to use either the switchMAC address or the serial number (instead ofthe default hostname) to generate t...

DETAILED STEPS Purpose Command or Action Enters the global configuration mode. configure terminal Example: Switch# configure terminal Step 1 Enables the event agent, and enters the gateway parameters. cns event { hostname | ip-address } [ port-number ] [ [ keepalive seconds Step 2 • For { hostname |...

Related Topics Event Service, on page 16 Enabling the Cisco IOS CNS Agent Beginning in privileged EXEC mode, follow these steps to enable the Cisco IOS CNS agent on the switch. Before You Begin You must enable the CNS event agent on the switch before you enable this agent. SUMMARY STEPS 1. configure...

Purpose Command or Action Enables the Cisco IOS CNS agent and initiates a partial configurationon the switch. Returns to privileged EXEC mode. end Example: Switch(config)# end Step 4 Start the Cisco IOS CNS agent on the switch. Step 5 What to Do Next You can now use the Cisco Configuration Engine to...

This example shows how to configure an initial configuration on a remote switch when the switch IP addressis known. The Configuration Engine IP address is 172.28.129.22. Switch(config)# cns template connect template-dhcp Switch(config-tmpl-conn)# cli ip address dhcp Switch(config-tmpl-conn)# exit Sw...

DETAILED STEPS Purpose Command or Action Displays whether the CNS event agent is connecting to thegateway, connected, or active, and the gateway used by theevent agent, its IP address and port number. show cns config connections Example: Switch# show cns config connections Step 1 Examine the output ...

Purpose Command or Action Make sure that you have reestablished the connectionbetween the switch and the event connection byexamining the output from show cns event connections . Step 9 Related Topics Enabling the Cisco IOS CNS Agent, on page 22 Hostname and DeviceID, on page 17 Enabling a Partial C...

Purpose Command or Action Returns to privileged EXEC mode. end Example: Switch(config)# end Step 3 What to Do Next To verify information about the configuration agent, use either the show cns config stats or the show cns config outstanding command in privileged EXEC mode. To disable the Cisco IOS ag...

Additional References Related Documents Document Title Related Topic Cisco Configuration Engine Installation and SetupGuide, 1.5 for Linux http://www.cisco.com/en/US/ docs/net_mgmt/configuration_engine/1.5/installation_linux/guide/setup_1.html Configuration Engine Setup MIBs MIBs Link MIB To locate ...

C H A P T E R 3 Configuring the Cisco Discovery Protocol This chapter describes the configuration of the Cisco Discovery Protocol (CDP). • Finding Feature Information, page 33 • Information About CDP, page 33 • How to Configure CDP, page 34 • Monitoring and Maintaining CDP, page 40 • Additional Refe...

CDP runs on all media that support Subnetwork Access Protocol (SNAP). Because CDP runs over the data-linklayer only, two systems that support different network-layer protocols can learn about each other. Each CDP-configured device sends periodic messages to a multicast address, advertising at least ...

Beginning in privileged EXEC mode, follow these steps to configure these characteristics. SUMMARY STEPS 1. configure terminal 2. cdp timer seconds 3. cdp holdtime seconds 4. cdp advertise-v2 5. end DETAILED STEPS Purpose Command or Action Enters the global configuration mode. configure terminal Exam...

Switch(config)# cdp advertise-v2 Switch(config)# end What to Do Next Use the no form of the CDP commands to return to the default settings. Related Topics Monitoring and Maintaining CDP, on page 40 Disabling CDP CDP is enabled by default. Switch clusters and other Cisco devices (such as Cisco IP Pho...

What to Do Next You must reenable CDP to use it. Related Topics Enabling CDP, on page 37 Enabling CDP CDP is enabled by default. Switch clusters and other Cisco devices (such as Cisco IP Phones) regularly exchange CDP messages.Disabling CDP can interrupt cluster discovery and device connectivity. No...

Example The following example shows how to enable CDP if it has been disabled: Switch# configure terminal Switch(config)# cdp run Switch(config)# end What to Do Next Use the show run all command to show that CDP has been enabled. If you enter only show run , the enabling of CDP may not be displayed....

Purpose Command or Action Disables CDP on the interface specified in Step 2. no cdp enable Example: Switch(config-if)# no cdp enable Step 3 Returns to privileged EXEC mode. end Example: Switch(config-if)# end Step 4 Related Topics Enabling CDP on an Interface, on page 39 Enabling CDP on an Interface...

Purpose Command or Action Specifies the interface on which you are enabling CDP,and enters interface configuration mode. interface interface-id Example: Switch(config)# interface gigabitethernet1/0/1 Step 2 Enables CDP on a disabled interface. cdp enable Example: Switch(config-if)# cdp enable Step 3...

Technical Assistance Link Description http://www.cisco.com/support The Cisco Support website provides extensive onlineresources, including documentation and tools fortroubleshooting and resolving technical issues withCisco products and technologies. To receive security and technical information abou...

C H A P T E R 4 Configuring Simple Network ManagementProtocol This chapter describes the Simple Network Management Protocol (SNMP) configuration. • Finding Feature Information, page 43 • Prerequisites for SNMP, page 43 • Restrictions for SNMP, page 46 • Information About SNMP, page 46 • How to Confi...

• SNMPv2C replaces the Party-based Administrative and Security Framework of SNMPv2Classic withthe community-string-based Administrative Framework of SNMPv2C while retaining the bulk retrievaland improved error handling of SNMPv2Classic. It has these features: ◦ SNMPv2 — Version 2 of the Simple Netwo...

Restrictions for SNMP Version Restrictions • SNMPv1 does not support informs. Information About SNMP SNMP Overview SNMP is an application-layer protocol that provides a message format for communication between managersand agents. The SNMP system consists of an SNMP manager, an SNMP agent, and a mana...

Description Operation Stores a value in a specific variable. set-request An unsolicited message sent by an SNMP agent to an SNMP manager when some eventhas occurred. trap 2 With this operation, an SNMP manager does not need to know the exact variable name. A sequential search is performed to find th...

internetworking problems, increase network performance, verify the configuration of devices, monitor trafficloads, and more. As shown in the figure, the SNMP agent gathers data from the MIB. The agent can send traps, or notificationof certain events, to the SNMP manager, which receives and processes...

Table 9: ifIndex Values ifIndex Range Interface Type 1 – 4999 SVI 4 5001 – 5048 EtherChannel 5078 – 5142 Tunnel 10000 – 14500 Physical (such as Gigabit Ethernet or SFP 5 -module interfaces) based on type and port numbers 14501 Null 24567+ Loopback and Tunnel 4 SVI = switch virtual interface5 SFP = s...

• To configure a remote user, specify the IP address or port number for the remote SNMP agent of thedevice where the user resides. • Before you configure remote users for a particular agent, configure the SNMP engine ID, using the snmp-server engineID global configuration command with the remote opt...

DETAILED STEPS Purpose Command or Action Enters the global configuration mode. configure terminal Example: Switch# configure terminal Step 1 Disables the SNMP agent operation. no snmp-server Example: Switch(config)# no snmp-server Step 2 Returns to privileged EXEC mode. end Example: Switch(config)# ...

This example shows how to assign the comaccess string to SNMP, to allow read-only access, and to specifythat IP access list 4 can use the community string to gain access to the switch SNMP agent: Switch(config)# snmp-server community comaccess ro 4 What to Do Next To disable access for an SNMP commu...

Purpose Command or Action Example: Switch(config)# snmp-server user Pat public v2c Enter the SNMP version number ( v1 , v2c , or v3 ). If you enter v3 , you have these additional options: • encrypted specifies that the password appears in encrypted format. This keyword is available only when the v3 ...

Purpose Command or Action (Optional) Define how often to resend trap messages. The range is 1to 1000; the default is 30 seconds. snmp-server trap-timeout seconds Example: Switch(config)# snmp-server trap-timeout 60 Step 9 Returns to privileged EXEC mode. end Example: Switch(config)# end Step 10 What...

DETAILED STEPS Purpose Command or Action Enters the global configuration mode. configure terminal Example: Switch# configure terminal Step 1 Sets the system contact string. snmp-server contact text Example: Switch(config)# snmp-server contact Dial System Operator at beeper 21555 Step 2 Sets the syst...

DETAILED STEPS Purpose Command or Action Enters the global configuration mode. configure terminal Example: Switch# configure terminal Step 1 Limits the TFTP servers used for configuration file copies through SNMPto the servers in the access list. snmp-server tftp-server-listaccess-list-number Step 2...

Table 11: Commands for Displaying SNMP Information Default Setting Feature Displays SNMP statistics. show snmp Displays information on the local SNMP engine and all remoteengines that have been configured on the device. show snmp engineID Displays information on each SNMP group on the network. show ...

second line specifies the destination of these traps and overwrites any previous snmp-server host commands for the host cisco.com . Switch(config)# snmp-server enable traps entity Switch(config)# snmp-server host cisco.com restricted entity This example shows how to enable the switch to send all tra...

C H A P T E R 5 Configuring SPAN and RSPAN This chapter describes how to configure Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN).Unless otherwise noted, the term switch refers to a standalone switch or a switch stack. • Finding Feature Information, page 65 • Prerequisites for SPAN and RSPAN,...

RSPAN • We recommend that you configure an RSPAN VLAN before you configure an RSPAN source or adestination session. Restrictions for SPAN and RSPAN SPAN The restrictions for SPAN are as follows: • On each switch, you can configure a maximum of 4 (2 if switch is stacked with Catalyst 2960-S switches)...

name } Both the filter vlan and filter ip access-group commands cannot be configured at the same time. Configuring one results in rejection of the other. Note • EtherChannels are not supported in an FSPAN session. • FSPAN ACLs with TCP flags or the log keyword are not supported. • If you configure a...

All traffic on port 5 (the source port) is mirrored to port 10 (the destination port). A network analyzer on port10 receives all network traffic from port 5 without being physically attached to port 5. Figure 4: Example of Local SPAN Configuration on a Single Device This is an example of a local SPA...

The figure below shows source ports on Switch A and Switch B. The traffic for each RSPAN session is carriedover a user-specified RSPAN VLAN that is dedicated for that RSPAN session in all participating switches.The RSPAN traffic from the source ports or VLANs is copied into the RSPAN VLAN and forwar...

• Both — In a SPAN session, you can also monitor a port or VLAN for both received and sent packets. This is the default. The default configuration for local SPAN session ports is to send all packets untagged. SPAN also does notnormally monitor bridge protocol data unit (BPDU) packets and Layer 2 pro...

configuration. If a configuration change is made to the port while it is acting as a SPAN destination port,the change does not take effect until the SPAN destination configuration had been removed. When QoS is configured on the SPAN destination port, QoS takes effect immediately. Note • If the port ...

• STP can run on RSPAN VLAN trunks but not on SPAN destination ports. • An RSPAN VLAN cannot be a private-VLAN primary or secondary VLAN. For VLANs 1 to 1005 that are visible to VLAN Trunking Protocol (VTP), the VLAN ID and its associatedRSPAN characteristic are propagated by VTP. If you assign an R...

• A private-VLAN port cannot be a SPAN destination port. • A secure port cannot be a SPAN destination port. For SPAN sessions, do not enable port security on ports with monitored egress when ingress forwardingis enabled on the destination port. For RSPAN source sessions, do not enable port security ...

added to the hardware memory on the switch. A system message notifies you of this action, which is calledreloading. The IPv4, IPv6 and MAC FSPAN ACLs can be unloaded or reloaded independently. If a VLAN-based FSPAN session configured on a stack cannot fit in the hardware memory on one or moreswitche...

RSPAN Configuration Guidelines • All the SPAN configuration guidelines apply to RSPAN. • As RSPAN VLANs have special properties, you should reserve a few VLANs across your network foruse as RSPAN VLANs; do not assign access ports to these VLANs. • You can apply an output ACL to RSPAN traffic to sele...

Purpose Command or Action • For session_number , specify the session number entered in step 3. Example: Switch(config)# monitor session 1 • For interface-id , specify the destination port. The destination interface must be a physical port; it cannot be an EtherChannel, and it cannot be a VLAN. desti...

Purpose Command or Action • untagged vlan vlan-id or vlan vlan-id — Accept incoming packets with untagged encapsulation type with the specified VLAN as the defaultVLAN. Returns to privileged EXEC mode. end Example: Switch(config)# end Step 5 Specifying VLANs to Filter Beginning in privileged EXEC mo...

Purpose Command or Action Specifies the characteristics of the source port (monitored port) and SPANsession. monitor session session_number sourceinterface interface-id Step 3 Example: Switch(config)# monitor session 2 • For session_number , the range is 1 to 66. • For interface-id , specify the sou...

To remove a source port or VLAN from the SPAN session, use the no monitor session session_number source { interface interface-id | vlan vlan-id } global configuration command. To remove the RSPAN VLAN from the session, use the no monitor session session_number destination remote vlan vlan-id . Creat...

Creating an RSPAN Destination Session You configure an RSPAN destination session on a different switch or switch stack; that is, not the switch orswitch stack on which the source session was configured. Beginning in privileged EXEC mode, follow these steps to define the RSPAN VLAN on that switch, to...

Purpose Command or Action • (Optional) [ , | - ] Specifies a series or range of interfaces. Enter a space before and after the comma; enter a space before and after the hyphen. • Enter ingress with additional keywords to enable forwarding of incoming traffic on the destination port and to specify th...

Purpose Command or Action ◦ (Optional) encapsulation replicate specifies that the destination interface replicates the source interface encapsulation method. If notselected, the default is to send packets in native form (untagged). For local SPAN, you must use the same session number for the sourcea...

Purpose Command or Action Example: Switch(config)# monitor session 2 destination remote vlan 5 • For vlan-id , specify the destination RSPAN VLAN to monitor. Enters the VLAN configuration mode. For vlan-id , specify the source RSPAN VLAN to monitor. vlan vlan-id Example: Switch(config)# vlan 10 Step...

SPAN and RSPAN Configuration Examples Example: Configuring Local SPAN This example shows how to set up SPAN session 1 for monitoring source port traffic to a destination port.First, any existing SPAN configuration for session 1 is deleted, and then bidirectional traffic is mirrored fromsource Gigabi...

Switch(config)# monitor session 2 destination interface gigabitethernet1/0/1 Switch(config)# end Examples: Creating an RSPAN VLAN This example shows how to create the RSPAN VLAN 901: Switch(config)# vlan 901 Switch(config-vlan)# remote span Switch(config-vlan)# end This example shows how to remove a...

I N D E X C Cisco Discovery Protocol (CDP) 33 Cisco Networking Services 16 CNS 16 Configuration Engine 14 restrictions 14 D default configuration 77 RSPAN 77 SPAN 77 defined 16, 33 Event Service 16 NameSpace Mapper 16 device stack 34 E Event Service 16 I Inter-Switch Link 66 See ISL 66 Intrusion Det...