Page 2 - Table of Contents
Table of Contents Cisco Switching Black Book...............................................................................................................................1 Introduction......................................................................................................................
Page 3 - Chapter 2: Basic Switch Configuration; ii
Table of Contents Chapter 2: Basic Switch Configuration The RJ−45−to−AUX Port Console Connector Pinouts...................................................................36 Switch IOSs.......................................................................................................................
Page 4 - Chapter 3: WAN Switching; iii
Table of Contents Chapter 3: WAN Switching BPX 8600 Series Wide−Area Switches..........................................................................................58MGX 8800 Series Wide−Area Edge Switches...............................................................................59 WAN Switch...
Page 5 - Chapter 4: LAN Switch Architectures; iv
Table of Contents Chapter 4: LAN Switch Architectures LCP..................................................................................................................................................75SAGE ASIC.........................................................................................
Page 8 - Chapter 7: IP Multicast; vii
Table of Contents Chapter 7: IP Multicast Time to Live..................................................................................................................................147 Multicast at Layer 2...............................................................................................
Page 9 - viii
Table of Contents Chapter 7: IP Multicast Configuring Packet−Based Suppression..............................................................................................159Disabling Multicast Suppression.................................................................................................
Page 10 - Chapter 9: LightStream Switches; ix
Table of Contents Chapter 9: LightStream Switches Verifying an ATM Interface Connection Status..................................................................................190Viewing the Configured Virtual Connections..................................................................................
Page 11 - Chapter 10: Layer 2 Redundant Links
Table of Contents Chapter 10: Layer 2 Redundant Links Verifying the Port Cost Configuration on Both a Set/Clear Command− and CLI−Based Interface...217Configuring the Port Priority on a Set/Clear Command−Based IOS..................................................217Configuring the Port Priority on a ...
Page 12 - Chapter 11: Multilayer Switching; xi
Table of Contents Chapter 11: Multilayer Switching Assigning a VLAN ID...................................................................................................................236Adding an MLS Interface to a VTP Domain............................................................................
Page 13 - Chapter 12: Hot Standby Routing Protocol; xii
Table of Contents Chapter 12: Hot Standby Routing Protocol Enabling Interface Tracking................................................................................................................252Using the show standby Command........................................................................
Page 14 - Chapter 15: The Standard Edition IOS; xiii
Table of Contents Chapter 15: The Standard Edition IOS [V] Virtual LAN............................................................................................................................293[R] Multicast Registration................................................................................
Page 15 - Chapter 16: Switch Troubleshooting; xiv
Table of Contents Chapter 16: Switch Troubleshooting Using the show log Command on a Set/Clear Command−Based IOS................................................336Configuring SPAN for Port Monitoring on a Set/Clear Command−Based IOS.................................337Configuring SPAN for VLAN Monito...
Page 16 - xv
Table of Contents Appendix E: Switch Features........................................................................................................................359 Access Layer Switches.................................................................................................................
Page 17 - Cisco Switching Black Book; © 2001 The Coriolis Group. All rights reserved.
Cisco Switching Black Book Sean OdomHanson Nottingham © 2001 The Coriolis Group. All rights reserved. This book may not be duplicated in any way without the express written consent of the publisher, except inthe form of brief excerpts or quotations for the purposes of review. The information contain...
Page 19 - Jeff Duntemann VP and Editorial Director; About the Authors
Jeff Duntemann VP and Editorial Director This book is dedicated to all those who endeavor to turn dreams into realities.—Sean Odom To my wife, Sonia, and my daughter, Sabrina.—Hanson Nottingham About the Authors Sean Odom is a CCNP, MCSE, and CNX−Ethernet. He has been in the computer networking fiel...
Page 20 - Introduction; Overview
Introduction Overview For many years I have been a consultant for different companies and have written books on switch and routerconfigurations and troubleshooting. During my years as a consultant I have had to either install, administer, ortroubleshoot switching problems and configurations for swit...
Page 21 - The Black Book Philosophy
Words in brackets that are separated by bars are used when indicating that there are multiple choicesof commands. For example, when configuring VTP you can enable the trunk port to choose onemode: on, off, desirable, or auto mode. This will be shown like this: [on|off|desirable|auto]. • Knowledge of...
Page 22 - Chapter 1: Network Switching Fundamentals; In Depth
Chapter 1: Network Switching Fundamentals In Depth Although writing the first paragraph of a book is probably the least important part, it’s invariably the mostdifficult section to write. To get a good picture of the different parts of networking, readers need to knowwhere networking began and the h...
Page 23 - A Bit of History; Networking Architectures
Port switching—Takes place in the backplane of a shared hub. For instance, ports 1, 2, and 3 could beconnected to backplane 1, whereas ports 4, 5, and 6 could be connected to backplane 2. This methodis typically used to form a collapsed backbone and to provide some improvements in the network. • Cel...
Page 24 - Peer−to−Peer Networking Model
Many different types of physical cable media have been introduced over the years, such as Token Ring, FDDI,and Ethernet. At one time, Token Ring was seen as a technically superior product and a viable alternative toEthernet. Many networks still contain Token Ring, but very few new Token Ring install...
Page 25 - Client/Server Network Model; The Pieces of Technology
Client/Server Network Model Peer−to−peer model networks evolved into the client/server model, in which the server shares applicationsand data storage with the clients in a somewhat more centralized network. This setup includes a little moresecurity, provided by the operating system, and ease of admi...
Page 27 - Six types of hubs are found in the network:; Bridges; Eliminating attenuation by amplifying received data signals
Six types of hubs are found in the network: Active hubs—Act as repeaters and eliminate attenuation by amplifying the signals they replicate to allthe attached ports. • Backbone hubs—Collect other hubs into a single collection point. This type of design is also knownas a multitiered design. In a typi...
Page 30 - Network Design
To improving network performance, switches must address three issues: They must stop unneeded traffic from crossing network segments. • They must allow multiple communication paths between segments. • They cannot introduce performance degradation. • Routers are also used to improve performance. Rout...
Page 31 - designed the most efficient path to the destination.; Collision Domains
designed the most efficient path to the destination. Single points of failure need to be analyzed, as well. As we stated earlier, every large−network user hassuffered through his or her share of network outages and downtime. By analyzing all the possible points offailure, you can implement redundanc...
Page 33 - Unshielded Twisted−Pair Cable
bridged networks. To resolve the issue, your network administrator may even upgrade your PC to a fasterCPU or more RAM. This allows your PC to generate more input/output (I/O), increasing the saturation on thenetwork. In this type of environment, every data packet is sent to every machine, and each ...
Page 35 - Switched Forwarding; Store−and−forward; Store−and−Forward Switching
Switched Forwarding Switches route data based on the destination MAC address contained in the frame’s header. This approachallows switches to replace Layer 2 devices such as hubs and bridges. After a frame is received and the MAC address is read, the switch forwards data based on the switching modet...
Page 36 - Combining Switching Methods; Switched Network Bottlenecks
Combining Switching Methods To resolve the problems associated with the switching methods discussed so far, a new method wasdeveloped. Some switches, such as the Cisco Catalyst 1900, 2820, and 3000 series, begin with eithercut−through or FragmentFree switching. Then, as frames are received and forwa...
Page 37 - Non−Blocking Switch vs. Blocking Switch
Many types of physical media topologies can be applied to this concept. In this demonstration, we will utilizeEthernet 100BaseT. Ethernet 10BaseT and 100BaseT are most commonly found in the networks of today. We’ll make an upgrade to the network and alleviate our bottleneck on the physical link from...
Page 38 - Internal Route Processor vs. External Route Processor; The Rule of the Network Road
We call a switch a blocking switch when the switch bus or components cannot handle the theoreticalmaximum throughput of all the input ports combined. There is a lot of debate over whether every switchshould be designed as a non−blocking switch; but for now this situation is only a dream, considering...
Page 39 - Switched Ethernet Innovations; Full−Duplex Ethernet
Switched Ethernet Innovations Around 1990, many vendors offered popular devices known as intelligent multiport bridges; the first knownusage of the term switch was the Etherswitch, which Kalpana brought to the market in 1990. At the time, thesedevices were used mainly to connect multiple segments—th...
Page 40 - Gigabit Ethernet; Avoiding Fork−Lift Upgrades; The Cisco IOS
backward compatible to most of the equipment in use at the time. Although the standards bodies debated themerits of each of the camps, the marketplace decided for them. Fast Ethernet is the overwhelming winner, somuch so that even HP sells Fast Ethernet on almost all its products. Note In 1995, Cisc...
Page 41 - Subinterfaces
devices run the same IOS. Some use a graphical interface, some use a Set/Clear command−line interface, andsome use a Cisco Command Line Interface (CLI). Cisco has acquired more devices than they have designedand built themselves. Therefore, Cisco has adapted the operating systems designed for each d...
Page 42 - The following commands are available in Privileged EXEC mode:
Router(config)#interface e0/0.? <0−4294967295> Ethernet interface number Router(config)#interface e0/0.1 Router(config−subif)# Let’s take a look at the commands available in the User EXEC mode of a Cisco Catalyst 1912 EN switch: SeansSwitch>? Exec commands: enable Turn on privileged command...
Page 43 - Tip; The Challenges
snmp−server Modify SNMP parameters spantree Spanning tree subsystem spantree−template Set bridge template parameter storm−control Configure broadcast storm control parameters switching−mode Sets the switching mode tacacs−server Modify TACACS query parameters tftp Configure TFTP uplink−fast Enable Up...
Page 45 - Saving Configuration Changes; To make a change to the running configuration file:; Issue the command configure terminal.; Make any necessary changes.
Switch(config−if)#interface e0.1 Switch(config−subif)# Tip You can abbreviate any command as much as you want, as long as it remains unique (no other command exists that matches your abbreviation). For instance, the command interface e0.1 can be abbreviated asint e0.1. To exit to Global Configuratio...
Page 47 - Campus Hierarchical Switching Model; Queuing
For security reasons, you should change the default password and add an enable password on the Crescendoand IOS CLI−based interface switches. In the next stage of the configuration, you should assign an IP address,subnet mask, and default route to the route processor for routing and management purpo...
Page 49 - Core Layer; Remote Network Monitoring
The Distribution layer defines the boundaries for the network and provides packet manipulation of thenetwork traffic. It aids in providing isolation from topology changes such as media translations, definingbroadcast domains, QoS, security, managing the size of the routing table, aggregating network...
Page 50 - Connecting to the Console Port
RMON provides support for the following groups of Token Ring extensions: MAC−Layer Statistics Group—A collection of statistics from the MAC sublayer of the Data Linklayer, kept for each Token Ring interface. This group collects information such as the total number ofMAC layer packets received and th...
Page 51 - Note; Console Cable Pinouts
Figure 2.2: The different types of console ports on the switches.The console port must be accessed through a PC or another device (such as a dumb terminal) to view theinitial configuration. From the console port, you can configure other points of entry—such as the VTY lineports—to allow you to use T...
Page 52 - Console Connectors; The Catalyst 3000 uses a DB−9 connector to access the console port.; The RJ−45−to−AUX Port Console Connector Pinouts
7 7 8 8 Table 2.3: Rollover cable RJ−45−to−RJ−45 pinouts. RJ−45 RJ−45 1 8 2 7 3 6 4 5 5 4 6 3 7 2 8 1 Console Connectors Different console adapters connect different interfaces in order to connect to the console port. The followingare the types of console connectors for each switch: Catalyst 1900, 2...
Page 54 - Switch IOSs; The IOS Configuration Modes
Table 2.8: DB−25−to−DB−9 connector pinouts. DB−25 Signal DB−9 2 TXD 3 3 RXD 2 4 RTS 7 5 CTS 8 6 DSR 6 7 GND 5 8 DCD 1 20 DTR 4 Switch IOSs Three types of Cisco operating systems are in use: Set/Clear command interface—Found on models of the Catalyst 2926, 2926G, 2948G, 2980G, 4000,5000, 5500, 6000, ...
Page 55 - Configuring Passwords; Limiting Telnet Access
Privileged EXEC mode—The Privileged command set includes those commands contained in UserEXEC mode, as well as the configure command, through which you can access the remainingcommand modes. Privileged EXEC mode also includes high−level testing commands, such as debug. • Global Configuration mode—Gl...
Page 56 - Setting the Login Passwords; Creating a Standard Access List; Setting Privilege Levels; To get into the switch, I will now use the following command:; Assigning Allowable Commands
Setting the Login Passwords By default, Cisco switches have no passwords configured when they are shipped. On the Cisco IOS−basedswitches, different priority levels of authority are available for console access. You can define two levels onIOS−based switches: privilege level 1, which is equivalent t...
Page 57 - Configuring the Telnet Time−out Value; Configuring an IP Address and Netmask
The time−out value is now set to five minutes, using seconds. Tip You can use the lock command to lock an unused Telnet session. After you issue the lockcommand, the system will ask you to enter and verify an unlocking password. To configure a Set/Clear command−based switch to five minutes, use the ...
Page 58 - Configuring a Set/Clear−Based CLI Switch; Logging On to a Switch; To begin configuring your switch, do the following:
Configuring Port Speed and Duplex To configure the port speed—whether 10Mbps or 100Mbps—use the following commands: CORIOLIS5500(config) interface fastethernet 2/3 CORIOLIS5500(config−int) speed 100 CORIOLIS5500(config−int) duplex full The auto command can be used when the port on the other side is ...
Page 59 - You are now in Privileged EXEC mode.; Setting the Login and Enable Passwords; Changing the Console Prompt
Console> enable Enter password: Because you have not yet set a Privileged EXEC mode password, pressing Enter will put you intoPrivileged EXEC mode. The console will show the following prompt: 5. Console> (enable) You are now in Privileged EXEC mode. Warning Starting here, all configuration cha...
Page 60 - Entering a Contact Name and Location Information; Configuring System and Time Information; To configure a SLIP interface, enter the following:
Entering a Contact Name and Location Information Next, let’s set the contact name for the person or organization that is administering this switch. Use thefollowing commands to set the switch contact and location: CORIOLIS5500(enable) set system contact Joe Snow CORIOLIS5500(enable) set system locat...
Page 61 - Configuring Port Speed and Duplex; auto—Autonegotiates the speed of the traffic on the port
sc0: flags=63<UP,BROADCAST,RUNNING> vlan 1 inet 68.187.127.1 netmask 255.255.255.0 broadcast 68.187.127.1 Console> (enable) Configuring a Default Route and Gateway Data traffic not addressed to the local subnet or VLAN must be sent to a default route or destination. Forredundancy purposes, ...
Page 63 - Configuring a Menu−Driven IOS
Configuring a Menu−Driven IOS The Catalyst 3000 series has a menu−driven switch interface, which allows you to use the arrow keys on yourkeyboard to select the different options used to configure the switch. As with the other two types of interfaces,you need to connect the switch to a dumb terminal ...
Page 64 - Configuring the Console Port; To configure the Console port, do the following:; Configuring Telnet; The number of Telnet sessions allowed simultaneously, from 0 to 5; Configuring the Password
Configuring the Console Port To configure the Console port, do the following: Choose Configuration|Serial Configuration. 1. As shown in Figure 2.5, you can configure four options: the Hardware Flow Control, the SoftwareFlow Control, the Autobaud Upon Break feature, and the Console Baud Rate. Under n...
Page 65 - Configuring SNMP; You have five options at the bottom of the screen:
Figure 2.6: The menu−driven VLAN IP configuration screen. Related solutions: Found on page: Creating a Standard Access List 402 Creating an Extended Access List 403 Enabling Port Security 411 Configuring SNMP You can configure up to 10 community strings on the menu−driven switch IOS by following the...
Page 66 - Configuring ROM; Entering ROM Configuration Mode; device
Configuring ROM ROM monitor is a ROM−based program that can be configured to execute upon the following conditions: Upon boot−up • Upon recycling the switch power • When a fatal exception error occurs • When the switch fails to find a valid system image • If the nonvolatile RAM (NVRAM) configuration...
Page 67 - To configure RMON, use the following steps:; Configuring RMON on a Set/Clear−Based Interface
Configuring SNMP RMON works in conjunction with SNMP and requires a protocol analyzer or probe to use its full features. Touse SNMP−based monitoring, you need to verify that SNMP is running on your IOS−based switch. Verify that SNMP is running, using the following command in User or EXEC mode: show ...
Page 68 - Using Set/Clear Command Set Recall Key Sequences
read−write Administrators read−write−all Root Trap−Rec−Address Trap−Rec−Community ———————————————————————————— ———————————————————— 168.187.127.4 read−write 168.187.127.6 read−write−all Console> (enable) To verify that RMON is running, use the following command in EXEC mode: 3. show rmon Using Se...
Page 71 - WAN Transmission Media
Figure 3.1: A packet’s journey from a host to a WAN device. The WAN transmission is continuous and doesnot have to wait for acknowledgement or permission.Let’s take a look at how this process would work in a T1 line. T1 has 24 slots in each frame; each slot is 8bits, and there is 1 framing bit: 24 s...
Page 73 - Cisco WAN Switches; BPX 8600 series wide−area switches
STS−n is an interleaving of multiple (n) STS−1s. The size of the payload and the overhead are multiplied byn. Figure 3.4 displays an STS diagram. Figure 3.4: The STS−1 framing and STS−n framing. The overhead and payload are proportionate to the nvalue, with the STS−1 frame as the base.You may wonder...
Page 74 - BPX 8600 Series Wide−Area Switches
ATM frame user−network interface (UNI), or System Network Architecture (SNA). The MGX 8240 Private Line Service Gateway is designed to terminate private lease lines (T1, T3, or DS0). Ithas 16 slots with 1 reserved for a redundant control card. It can support up to 1,260 channelized T1s. It isdesigne...
Page 75 - MGX 8800 Series Wide−Area Edge Switches; WAN Switch Hardware Overview
The BPX 8620 is a pure ATM broadband switch. It has a nonblocking 9.6Gbps architecture. The interfacemodules range from T3 to OC−12. Each trunk port can buffer up to 32,000 cells. The OC−12 interfacemodule has two OC−12 ports. The OC−3 interface module has eight OC−3 ports. The BPX is commonly usedi...
Page 76 - Cisco WAN Switch Network Topologies
The system bus backplane contains multiple buses for connecting the modules. It has no active component.Different buses provide power to the modules, transfer of data, timing control, system commands, and otherfunctionality. Cisco WAN Switch Network Topologies We’ve talked about the transmission med...
Page 77 - Network Management; The CLI; You can enter commands on the CLI in three ways:; WAN Manager
nodes in the domain have limited contact with switches outside the domain. You will rarely see this designtoday, because the current switching software no longer supports it. Network Management In managing a wide area network, you have to understand the basic network management technology commonto b...
Page 78 - Accessing and Setting Up IGX and BPX Switches; Adding New Users
the network while highlighting any local problems.Connection Management—Provides a graphic interface to configure WAN switches. It providestemplates to minimize the work in setting up many connections. All interface modules are supported,including VoIP/VoATM setups. • Performance and Accounting Data...
Page 81 - Assigning a Switch Hostname; Use the command cnfname to assign a hostname for the switch:
Accessing the MGX 8850 and 8220 The MGX 8850 has a control port, maintenance port, and LAN port. The control port is an EIA/TIA−232Data Communications Equipment (DCE) interface. To access the control, you must use a terminal or a PCwith a terminal emulation program. The maintenance port is an EIA/TI...
Page 82 - −rs232—Information on the control or maintenance port; Displaying the IP Address
Displaying a Summary of All Modules The command dspcds will display the summary information of all the modules. This is a level 6 command.The card number, card status, card type, switch name, date, time, time zone, and IP address are all displayed.The information is displayed one screen at a time. P...
Page 83 - Configuring the IP Interface; −ip—The IP address; This command has a privilege level of 1.; Displaying the Alarm Level of the Switch
Configuring the IP Interface The command cnfifip is used to set the IP address, netmask, and broadcast address. Each parameter must beentered one at a time. The parameters are as follows: −if—The interface (26 for Ethernet, 28 for SLIP, or 37 for ATM) • −ip—The IP address • −msk—The network mask • −...
Page 84 - BUS
Chapter 4: LAN Switch Architectures In Depth Knowing the internal architectures of networking devices can be a great asset when you’re working withCisco switches. Knowing how the internal components work together, as well as how Application−SpecificIntegrated Circuits (ASICs) and CPUs are used, can ...
Page 85 - Single BUS vs. Crossbar Matrix; which the data exits.; Input Queuing; ASICs; Encoded Address Recognition Logic (EARL) ASIC
Single BUS vs. Crossbar Matrix A single−BUS architecture is pretty simple: One BUS connects all the ports together. This setup creates abandwidth problem called a blocking architecture, or what the networking industry likes to callover−subscription. Over−subscription is characterized as a condition ...
Page 86 - Synergy Advanced Multipurpose Bus Arbiter (SAMBA) ASIC; EARL ASIC; Figure 4.2: EARL ASIC placement on the Crescendo architecture.; SAINT ASIC
Synergy Advanced Multipurpose Bus Arbiter (SAMBA) ASIC • EARL ASIC The Encoded Address Recognition Logic (EARL) ASIC performs functions that are very similar to those ofthe Content Addressable Memory (CAM) table. Switches use this CAM to make filtering and forwardingdecisions. The EARL ASIC connects...
Page 87 - The Crescendo Processors; Line Module Communication Processor (LCP); LCP; Crescendo Logic Units
This ASIC operates in either master or slave mode. In master mode, the ASIC allows ports access to the busbased on a priority level of normal, high, or critical. In slave mode, each port must post a request to eachSAMBA ASIC, negotiate local port decisions, and arbitrate requests with the Supervisor...
Page 88 - other vendor networking products.; CAM
ARB The Arbiter (ARB) is located on each line module. It uses a two−tiered method of arbitration to assignqueuing priorities and control data traffic through the switch. The arbiter controls the traffic coming to andfrom the line modules. In addition, a Central Bus Arbiter located on the Supervisor ...
Page 89 - CEF ASIC; dCEF
through which all switched ports communicate. The AXIS bus is a partially asynchronous time divisionmultiplexed bus used for switching packets between heterogeneous LAN modules. CEF ASIC The Cisco Express Forwarding (CEF) ASIC and Distributed Cisco Express Forwarding (dCEF) ASIC areCisco’s newest AS...
Page 91 - Phoenix ASIC
Figure 4.3: Cisco Express Forwarding ASIC components. Note CEF supports Ethernet, Fiber Distributed Data Interface (FDDI), Point−to−Point Protocol(PPP), High−Level Data Link Control (HDLC), Asynchronous Transfer Mode(ATM)/AAL5snap, ATM/AAL5mux, ATM/AAL5nlpid, and tunnels. Phoenix ASIC The Phoenix AS...
Page 92 - connected to the QMAC ASIC.; QMAC; Bridging Types; Let’s take a look at each bridging type.; Source Route Bridging
connected to the QMAC ASIC. QMAC The QMAC uses four protocol handlers to support four Token Ring physical interfaces directly connected tothe QTP ASIC. Together, these two ASICs provide support for early token release (ETR) and Token RingFull Duplex (FDX) concentrator and adapter modes for dedicated...
Page 94 - Switching Paths; Process Switching
Switching Paths The switch is commonly referred to in marketing terms as a Layer 2 device. If you keep thinking that way,this section will confuse you. By definition, switching paths are logical paths that Layer 3 packets followwhen they are switched through a Layer 3 device such as a router or inte...
Page 95 - Autonomous Switching; controller interface cards.; Silicon Switching; Optimum Switching
Autonomous Switching With autonomous switching, when a packet arrives on an interface, it is forwarded to the interface processor.The interface processor checks the silicon−switching cache; if the destination address is not contained in thatcache, the autonomous cache is checked. The packet is encap...
Page 96 - System Message Logging; Loading an Image on the Supervisor Engine III; To load copies to Flash memory, use the following:
The first packet that’s copied to the NetFlow cache contains all security and routing information. If policynetworking (such as an access list) is applied to an interface, the first packet is matched to the list criteria. Ifthere is a match, the cache is flagged so that any other packets arriving wi...
Page 97 - Booting the Supervisor Engine III from Flash; To boot from a Flash device, use the following command:; Setting the Boot Configuration Register; Here’s an example of using the command:; Configuring Cisco Express Forwarding; Enabling CEF; To enable standard CEF, use the following command:; Disabling CEF; To disable standard CEF, use the following command:
Booting the Supervisor Engine III from Flash To boot from a Flash device, use the following command: boot [device][image name] Note If you do not specify an image file name, the system defaults to the first valid file in the device.Remember that file names are case sensitive. Use the show flash comm...
Page 99 - Disabling Per−Destination Load Sharing
show ip cef Viewing CEF Packet−Dropped Statistics To view the number of packets dropped from each line card, use the following command: show cef drop Viewing Non−CEF Path Packets To view what packets went to a path other than CEF, use the following command: show cef not−cef−switched Disabling Per−De...
Page 100 - Here’s an example of the command’s use:
Enabling Telnet Session Logging on a Set/ClearCommand−Based IOS To enable session logging for a Telnet session, use the following command: set logging session enable Disabling Console Session Logging on a Set/ClearCommand−Based IOS To disable session logging for a console session, use the following ...
Page 101 - Clearing the Server Logging Table
You can use the logging timestamps in your system logging to help you keep track of when events happen. Toenable the logging time stamp, use the following command in Privileged mode: Catalyst5000> (enable) set logging timestamp enable System logging messages timestamp will be enabled. Catalyst500...
Page 103 - To display the last five messages in the buffer, use this code:
do not specify the number of messages, the default is to display the last 20 messages in the buffer (−20). To display the first five messages in the buffer, use the following code: Catalyst5000> (enable) show logging buffer 5 2000 Aug 21 09:41:12 %SYS−5−MOD_OK:Module 1 is online 2000 Aug 21 09:41...
Page 104 - Chapter 5: Virtual Local Area Networks
Chapter 5: Virtual Local Area Networks In Depth Faced with the problems of a slow network, many network administrators make expensive mistakes. Severaltimes, I have come across companies that have a fiber link to every desktop. In fact, an architectural firm Iconsulted for comes to mind. The company...
Page 107 - Switched Internetwork Security
processing). Broadcasts are used in each and every networking protocol. How often they occur depends upon the protocol,the applications running on the network, and how these network services are used. To avoid the older, chatty protocols, older applications have been rewritten to reduce their bandwi...
Page 108 - Scaling with VLANs; VLAN boundaries; VLAN Boundaries
This setup allows for a more secure network. In addition, network administrators now have more control overeach port as well as the ability to deny the user based on the Layer 2 or Layer 3 address the user is using toaccess the port. Users no longer have the ability to just plug their workstation in...
Page 110 - VLAN Trunking; without the use of a router or internal route processor.; Trunk Types
Cisco also recommends a one−to−one ratio between VLANs and subnets. This means that you mustunderstand how users are broken up by subnets. If you have 1,000 users in a building and 100 users are ineach subnet, then you should have 10 VLANs. VLAN Trunking There are two types of VLAN links: a trunk li...
Page 111 - Cisco Standards
IEEE 802.10 • IEEE 802.1Q • Inter−Switch Link (ISL) • LAN Emulation (LANE) • IEEE 802.10 The IEEE 802.10 standard is used to send VLAN information over a Fiber Distributed Data Interface (FDDI)physical link. In this situation, ISL is disabled and IEEE 802.10 is used to forward the VLAN frames. TheCl...
Page 114 - VTP Versions; Consistency checks; Consistency Checks; VTP Advertisements
VTP Versions VTP comes in two versions: version 1 and version 2. The primary differences between the two version arefew, but they are significant enough to render the two versions incompatible. The two versions will not worktogether in the same network. Version 1 is the default on Cisco Catalyst swi...
Page 115 - Can the VTP Revision Number on a New VTP Server Be a Problem?
the updater’s identity, the updater’s timestamp, and the MD5 digest field.Subset advertisement—Contains very detailed information about the network, including the version,code, sequence number, management domain name, configuration revision number, and VLANinformation fields. • VTP advertisements ca...
Page 116 - VTP Switch Modes; Client mode; Client Mode
Many network administrators make the mistake of using the clear config all command, believing that it willerase the current revision number. Doing so is a bad mistake on the network administrator’s part. Thiscommand doesn’t do what it says it does—it doesn’t really “clear all.” VTP has its own NVRAM...
Page 117 - Methods for VLAN Identification; Warning; InterVLAN Routing
Server Mode Server mode, which is configured by default, allows you to create, modify, and delete VLANs for themanagement domain. Configuration changes are then sent to all other participating members of the VTPdomain. At least one VTP server should exist in the VTP management domain. Two or more sw...
Page 119 - Creating VLANs on a Catalyst 1900EN Series
Figure 5.4: An example of an external router routing interVLAN traffic. Configuring a Static VLAN on a Catalyst 5000 Series Switch The Cisco Catalyst 2900G series, 5000 family, and 6000 family of switches use the Cisco Set/Clear−basedCLI. It is important to understand the difference between the Cata...
Page 120 - in VLAN 1 until the port is assigned to another VLAN.; Assigning a Static VLAN to an Interface on a 1900EN Series
User Interface Menu [M] Menus [K] Command Line [I] IP Configuration Enter Selection: K Once a CLI session on the switch is open, you must create a VLAN number and name. The command used todo this is as follows: vlan [vlan#] name [vlan name] command To use this command, you must be in Global Configur...
Page 121 - Viewing the VLAN Configuration on a 1900 Series; The results are shown here:; Viewing an Individual VLAN Configuration on a 1900 Series
Viewing the VLAN Configuration on a 1900 Series Now that we have created the VLANs we want, we can use the show vlan command to see the configuredVLANs. Notice that all unconfigured ports on the switch are in VLAN 1. The command is used from thePrivileged mode prompt, as follows: 1912#show vlan The ...
Page 124 - To remove VLAN 2 from a trunked port use the following command:; Verifying a Trunk Link Configuration on a 5000 Series; The following shows the results:; Verifying a Trunk Link Configuration on a 1900EN Series; First, look at the syntaxes available for the show trunk command:; Configuring the VTP Version on a Catalyst 5000 Switch
To remove VLAN 2 from a trunked port use the following command: 1912(config−if)#no trunk−vlan 2 1912(config−if)# Note No command is available to clear more then one VLAN at a time on the 1900. Verifying a Trunk Link Configuration on a 5000 Series To verify your trunk ports on a Catalyst 5000 series,...
Page 125 - Configuring a VTP Domain on a Catalyst 1900 Switch; To configure the switch as a VTP client use the following command:; Configuring a Catalyst 1900 Switch for Transparent Mode
5000> (enable) set vtp v2 enable This command will enable the version 2 function in the entire management domain. All devices in the management domain should be version2−capable before enabling. Do you want to continue (y/n) [n]? y VTP domain modified 5000> (enable) Configuring a VTP Domain on...
Page 126 - Configuring VTP Pruning on a Catalyst 1900 Switch; To configure the switch for VTP pruning, use the following command:; Configuring VTP on a Set/Clear CLI Switch; Here is an example of setting the domain to “Coriolis” on the 1912EN:
Configuring VTP Pruning on a Catalyst 1900 Switch To configure the switch for VTP pruning, use the following command: 1912(config)# vtp pruning Configuring VTP on a Set/Clear CLI Switch Before you can configure a router or internal route processor for interVLAN routing, you must enable VTP,assign a ...
Page 127 - Verifying the VTP Configuration on a Set/Clear CLI; Displaying VTP Statistics
1900EN(config)#vtp domain Coriolis 1900EN(config)# To set a VTP domain password on a 1900EN to “pass1” use the following command: 1900EN(config)# vtp password pass1 1900EN(config)# Verifying the VTP Configuration on a Set/Clear CLI To verify the VTP domain information, use the command show vtp domai...
Page 129 - Assign an IP address and subnet mask to the subinterface:; Configuring IPX InterVLAN Routing on an External Router
Specify an IP routing protocol such as Open Shortest Path First (OSPF), Routing InformationProtocol (RIP), Internet Gateway Routing Protocol (IGRP), or Enhanced IGRP (EIGRP) and identifythe network: Cisco7505(config)#router rip Cisco7505(config−router)#network 192.1.0.0 2. Create a subinterface on a...
Page 131 - Cisco Express Forwarding ASIC
The FIB maintains a copy of the forwarding information contained in the IP routing table based on thenext−hop address. The routing table is updated if routing or topology changes are detected in the network.Those changes are then forwarded to the FIB, and the next−hop information is recomputed based...
Page 132 - Multimodule vs. Fixed Configuration Switches; Now, let’s look at the features of the internal route processors.; Available Route Processors
proprietary protocol transfers the FIB information to a NetFlow Feature Card (NFFC or NFFC II) on a CiscoCatalyst 5000 series, or to another forwarding board or module on the higher−speed Cisco distributedswitches. There is little difference between using an external router and an internal route pro...
Page 133 - NetFlow Feature Card and NetFlow Feature Card II
segments, networks, or the Internet. A few types of route processors are available for Catalyst switches. Theyinclude: NetFlow Feature Card and NetFlow Feature Card II • Route Switch Module • Route Switch Feature Card • Multilayer Switch Module • NetFlow Feature Card and NetFlow Feature Card II The ...
Page 134 - Other group; Route Switch Module; AppleTalk
NFFC also provides protocol filtering to allow segmentation by VLANs. It can provide per−port filtering ofdata in four different groups: Internet Protocol (IP) • Internetwork Packet Exchange (IPX) • AppleTalk, DECnet, and Banyan Vines • Other group • Tip By default, the IP group is on, but it can be...
Page 136 - Routing Protocol Assignment; Enhanced Interior Gateway Routing Protocol (EIGRP); Supervisor Engine Modules; Supervisor Engines I and II
EIGRP checks its topology table for a suitable new route to the destination. If a route exists in thetable, EIGRP updates the routing table with the new route and purges the old route from the table.Unlike other routing protocols, EIGRP saves WAN−link bandwidth by sending routing updates onlywhen ro...
Page 137 - Supervisor Engine III
Figure 6.1: The Catalyst Supervisor Engine I and II. Media Access Control Addressing and VLANs—Support for 16,000 active MAC addresses for up to1,024 VLANs allocated dynamically between active ports. • Management—Support for Simple Network Management Protocol (SNMP) for statisticalmanagement. The SE...
Page 138 - Using the Supervisor Engine; Etherport Modules
Figure 6.3: The Catalyst Supervisor Engine III G. Gigabit Interface Converter (GBIC) for use with multimode fiber (MMF) or single−mode fiber (SMF)interfaces using SC connectors • An MCF5102 processor • Using the Supervisor Engine If you installed the Supervisor Engine from another switch, it probabl...
Page 139 - Port Security; You cannot configure port security on a trunk port.; Manually Configured MAC Addresses; Allows the best use of Fast EtherChannel for load distribution; Determining the Slot Number in Which a Module Resides; Enter the show module command to determine what cards are present:
The auto syntax allows the port to autonegotiate the port speed. On an Ethernet or Fast Ethernet interface, usethe command set port duplex mod_num/port_num {full|half|auto} to set the port duplex mode. Again, the auto syntax can be used to allow the port to autonegotiate the duplexmode. Port Securit...
Page 140 - Accessing the Internal Route Processor from the Switch; The prompt will look like this if it is the initial configuration:; Configuring a Hostname on the RSM; To configure the hostname on an RSM, follow these steps:
—— —————————————————————————————————————— ——— ——— ———— 1 00−40−0b−80−54−00 to 00−40−0b−80−57−fi 2.0 3.1.2 4.3(la) 2 00−40−0b−03−5d−58 to 00−40−0b−03−5d−6f 3.1 4.3(l) 4.3(la) 3 00−43−0d−91−45−66 to 00−43−0d−91−dc−67 5.0 20.14 11.3(6)WAA4(9) Mod Sub−Type Sub−Model Sub−Serial Sub−Hw ——— ———————— ——————...
Page 141 - Enter Global Configuration mode with the following commands:; Setting the Port Speed and Port Name on an Ethernet Interface; Here is an example of setting the port speed and port name:
Router> Enter Global Configuration mode with the following commands: Router> enable Router# configure terminal Warning When you make changes in this mode, they must be saved to NVRAM. Otherwise, the next time you recycle the switch, the changes will be lost. The command to save changes is copy...
Page 142 - Assign a VLAN to an IP address:
———— ——————————— ———————— ———— ————— —————— ————— —————— 2/3 FileServer1 connect 1 normal a−half a−100 10/100BaseTX Configuring a Default Gateway on a Catalyst 5000 Before IP management from another subnet or network can take place through Telnet, the sending devicemust know the routers that are con...
Page 143 - Note The commands for configuring the RSM, RSFC, and MSM are the same.; Viewing the RSM’s Running Configuration; Configuring InterVLAN Routing on an RSM; Start a session on the RSM for module 5:
Note The commands for configuring the RSM, RSFC, and MSM are the same. Viewing the RSM’s Running Configuration To view the RSM’s running configuration, use the show running−config command as shown here: Coriolis5000RSM# show running−config Building configuration… Current configuration: ! version 11....
Page 144 - Configuring IPX InterVLAN Routing on the RSM
RSM1>enable RSM1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. RSM1(config)#interface vlan 2 RSM1(config−if)# %LINEPROTO−5−UPDOWN: Line protocol on Interface Vlan2, changed state to down Assign IP addresses to the VLAN interfaces: 3. RSM1(config−if)#ip address 17...
Page 146 - Configuring Filtering on an Ethernet Interface; To configure protocol filtering for IP only, follow these steps:; Configuring Port Security on an Ethernet Module; Add MAC addresses to the list of secure addresses:
1 00−60−15−be−55−80 2/1 Total Matching CAM Entries Displayed = 7 Configuring Filtering on an Ethernet Interface To configure protocol filtering for IP only, follow these steps: To configure protocol filtering on the Ethernet, Fast Ethernet, or Gigabit Ethernet ports, you must firstenable protocol fi...
Page 147 - Clearing MAC Addresses; Configuring the Catalyst 5000 Supervisor Engine Module; Configure the hostname:
Port Single−Col Multi−Coll Late−Coll Excess−Col Carri−Sen Runts Giants ———— —————————— —————————— ————————— —————————— ———————— ——————— —————— 2/3 0 0 0 0 0 0 0 Last−Time−Cleared ————————————— Fri Nov 24 2000, 21:53:38 Clearing MAC Addresses The clear port security command is used to clear the MAC a...
Page 149 - Changing the Management VLAN on a Supervisor Engine; Viewing the Supervisor Engine Configuration
Several other commands can be used to configure the Supervisor Engine. The following list shows some ofthem: set boot config−register ignore−config enable—Sets the switch to ignore the contents of theconfiguration on NVRAM at startup • set boot config−register 0xvalue [module number]—Sets the config...
Page 150 - Configuring the Cisco 2621 External Router for ISL Trunking
Fw : 4.3(1) Sw : 5.5(2) DRAM FLASH NVRAM Module Total Used Free Total Used Free Total Used Free —————— ————— ———— ————— —————— ————— ————— ————— ———— ———— 1 32640K 20331K 12309K 8192K 5548K 2644K 512K 185K 327K Uptime is 2 days, 19 hours, 3 minutes Catalyst5000> (enable) You can also use the show...
Page 151 - Configuring Redundancy Using HSRP
Configuring Redundancy Using HSRP To configure HSRP on router interfaces, perform the following steps: Enter Interface Configuration mode and identify a standby group and an IP address: standby [group−number] ip [ip−address] 1. Identify the priority for the HSRP interface. The interface with the hig...
Page 153 - IP traffic can travel the network in one of three ways:
Chapter 7: IP Multicast In Depth Over time, our use of computers has moved from the local desktop to the local network. Most of this networktraffic consists of using local network sources, such as printing and file transfers. As our personal computersbecome more powerful, the applications that we us...
Page 154 - Broadcast; Figure 7.1 illustrates broadcast traffic in the network.; Unicast; Figure 7.2 illustrates unicast traffic flow.
Unicast • Multicast • Broadcast In its simplest form, broadcast traffic consists of packets that reach every point of the network. In a typicalnetwork, broadcasts are stopped at the router. You can set the router to forward broadcasts, but doing so is notvery efficient—it creates a lot of traffic on...
Page 155 - Multicast; Figure 7.3 illustrates multicast traffic flow.; Want to Join the Military?
Figure 7.2: Unicast traffic flow. Multicast Multicast is a combination of broadcast and unicast. It sends one copy of the packet to many hosts thatrequested it, thereby using less bandwidth. It also saves bandwidth by not sending the packet to the portion ofthe network whose hosts didn’t request the...
Page 156 - IP Multicasting Addresses; The Multicast IP Structure; Figure 7.4 shows the MAC address and IP address mapping.
each other and with the server by multicast. When an individual driving a tank or a fighter enters a gridsquare, it joins the multicast group to receive that square’s simulation traffic. As the individual moves fromsquare to square, the individual’s multicast group membership changes. IP multicastin...
Page 157 - Special Multicast Addresses; Table 7.1: Partial list of non−routed local multicast addresses.
The X bits are not used. The remaining bits 000 1010 0000 1000 0000 0101 give you 0a:08:05. Put that result together with 01:00:5e: and you get 01:00:5e:0a:08:05. Here is another example, using the multicast address 224.127.15.10: 1110 0000 0111 1111 0000 1111 0000 1010 XXXX XXXX X111 1111 0000 1111...
Page 159 - Multicast Forwarding; DVMRP—Distance Vector Multicast Routing Protocol
shortest path tree (SPT) because it uses the shortest path to reach the destination. This design functions verywell in a one−to−many model, but it has drawbacks when used in a many−to−many model. For example, alive concert has only one source, so there will be only one distribution tree in the route...
Page 160 - PIM operates in two modes:
Distance Vector Multicast Routing Protocol DVMRP is based on RIP and is widely used. Just like RIP, it uses a distance vector (hops) and sends outperiodic route updates. It’s different from RIP in that it is classless and has a hop limit of 32 rather than 16.When DVMRP is first implemented on a rout...
Page 161 - not actually implement DVMRP in their networks.; Multicast Open Shortest Path First; Internet Group Management Protocol (IGMP)
receive the multicast traffic sends a PIM join message toward the root node (rendezvous point). Asthis join message travels up the tree, the multicast routers along the way forward the requested trafficback down the tree to the destination. To put it in a simple form, PIM−DM will send the multicast ...
Page 163 - Time to Live; Multicast at Layer 2; IGMP snooping; IGMP Snooping
Time to Live Using the IP time to live (TTL) field is an important IGMP topic. The TTL field is a value in an IP packet thattells a network router whether the packet has been in the network too long and should be discarded. Amulticast datagram with a TTL of 0 is allowed only on the same host. A TTL ...
Page 165 - GARP Multicast Registration Protocol; Configuring IP Multicast Routing; Disabling IP Multicast Routing; Use the following commands to configure each interface:; Disabling PIM on an Interface; Use the following commands to disable PIM on the interface:
GARP Multicast Registration Protocol Generic Attribute Registration Protocol (GARP) Multicast Registration Protocol (GMRP) prevents multicastflooding on the switch. This protocol provides a way for the host to communicate with the switch at the MAClevel. It runs independently of the Layer 3 protocol...
Page 166 - Configuring the Rendezvous Point; Adding a Router to a Multicast Group; Configuring a Router to Be a Static Multicast Group Member; Changing the IGMP Version
Configuring the Rendezvous Point You can configure the rendezvous point (RP) manually or let it be auto−discovered. To configure the RPmanually, you have to configure the routers that have either the sender of the multicast traffic or the receiverof the multicast traffic connected to its segment. Th...
Page 167 - Use the following command to remove a multicast group manually:; Configuring Multicast Router Ports; Displaying Multicast Routers
Changing the IGMP Host−Query Message Interval As mentioned earlier, the router sends IGMP host−query messages to the network to discover which multicastgroup is still active. You can modify the message interval setting to accommodate your network’sbandwidth/utilization (the default is 60 seconds): R...
Page 168 - Removing the Multicast Router; Use the following command to remove the multicast router port:; Configuring IGMP Snooping; Disabling IGMP Snooping; To disable IGMP snooping, use the following command:; Configuring IGMP Fast−Leave Processing; To enable IGMP fast−leave processing, enter the following command:; Disabling IGMP Fast−Leave Processing
———— ———————— 2/14 * 3 3/1 1 Total Number of Entries = 2 ‘*’ − Configured The asterisk between the port and the VLAN number means the multicast router port was manuallyconfigured. Removing the Multicast Router Use the following command to remove the multicast router port: Coriolis> (enable) clear...
Page 170 - To get more detail about the multicast groups, use this command:; Configuring CGMP; Disabling CGMP; To disable CGMP, use the following command:; Enabling CGMP Fast−Leave Processing; To enable CGMP fast−leave processing, enter the following command:; Disabling CGMP Fast−Leave Processing; To display CGMP statistics, use the following command:
Total Number of Entries = 1 To get more detail about the multicast groups, use this command: Coriolis> (enable) show multicast group [vlan] CGMP disable IGMP enable VLAN Dest MAC/Route Des Destination Ports or VCs / [Protocol Type] ———— —————————————————— —————————————————————————————————————————...
Page 171 - Configuring RGMP on the Switch; Disabling RGMP on the Switch; Configuring RGMP on the Router; Disabling RGMP on the Router; To disable RGMP, use the following command:; Displaying RGMP Groups
valid igmp leaves received 0 valid igmp queries received 568 igmp gs queries transmitted 0 igmp leaves transmitted 0 failures to add GDA to EARL 0 topology notifications received 10 number of CGMP packets dropped 2456875 Configuring RGMP on the Switch RGMP is disabled by default. Use the following c...
Page 172 - Displaying RGMP−Capable Router Ports; Displaying RGMP VLAN Statistics; To display RGMP statistics, use the following command:; Configuring GMRP; To enable GMRP globally, use the following command:
To display the total number of RGMP groups, use the following command: Coriolis> (enable) show rgmp group count [vlan] Total Number of Entries = 2 Displaying RGMP−Capable Router Ports To display the ports to which RGMP routers are connected, use the following command: Coriolis> (enable) show m...
Page 174 - Displaying the GMRP Configuration; Let’s look at the commands to change the timer values:; Displaying GMRP Timers; To display the GMRP timers, use the following command:
To configure Fixed mode, use the following command: Coriolis> (enable) set gmrp registration fixed 2/1 GMRP Registration is set fixed on port 2/1. To configure Forbidden mode, use the following command: Coriolis> (enable) set gmrp registration forbidden 2/1 GMRP Registration is set forbidden o...
Page 176 - Chapter 8: WAN Cell Switching; The following Cisco WAN switches support ATM:; ATM Overview; Some of the major benefits of ATM are:
Chapter 8: WAN Cell Switching In Depth WAN switching is defined as the process of forwarding data traffic across a wide area network. WANswitching uses cell relay technology to multiplex all network traffic across WAN trunk links without apredefined timeslot for each type of connection. Cell relay n...
Page 177 - LANE; LANE is discussed in much more detail later in this chapter.
Scalability—ATM is highly flexible, accommodating a wide range of traffic types, traffic rates, andcommunications applications. • An ATM network includes two types of devices: ATM switches and ATM endpoints. One type of ATMinterface, called a user−network interface (UNI), connects an ATM device to a...
Page 179 - Time Division Multiplexing
the result by 2—and thus the data portion of the ATM cell contains 48 bytes. Figure 8.1: The ATM cell.The fixed size of the ATM cells provides some the following benefits: Efficient bandwidth use of the physical medium • Ability of applications to share the network more fairly • Accommodation for bu...
Page 180 - The ATM Cell Header; The ATM Switch and ATM Endpoints
The ATM Cell Header The ATM cells can be found in one of two formats, depending on whether the endpoints are a UNI or an NNIconnection. The two differ in one way: The NNI header does not contain a Generic Flow Control (GFC) field.The NNI header has a Virtual Path Identifier (VPI) that occupies the e...
Page 181 - AAL1—Used to transport timing−dependent traffic such as voice; The Physical Layer
ATM layer is responsible for establishing connections and passing cells through the ATM network. The ATMAdaptation layer translates the different types of network traffic. Four AALs are defined, but only three areactively in use: AAL1—Used to transport timing−dependent traffic such as voice • AAL3/4...
Page 182 - The ATM Adaptation Layer; Specifying ATM Connections
The ATM Adaptation Layer The ATM Adaptation Layer (AAL) provides the translation between the larger service data units of the upperlayers of the OSI Reference Model and ATM cells. It works by receiving packets from the upper−levelprotocols and breaking them into 48−byte segments to be dumped into th...
Page 183 - ATM Addressing
Variable bit rate−real time (VBR−RT)—Typically used for connections that carry VBR traffic inwhich a fixed timing relationship exists between either VBR video or voice compression. • Variable bit rate−non real time (VBR−NRT)—Used to carry VBR traffic in which no timingrelationship exists for data tr...
Page 184 - changing the application itself or Layer 3 drivers.; LANE Components
changing the application itself or Layer 3 drivers. This approach allows backward compatibility with existing LANs, broadcast support, and connectionlessdelivery. LANE has some drawbacks, however: It prevents the use of ATM−specific benefits such as QoS anddoesn’t have the ability to provide flexibl...
Page 186 - LAN Emulation Configuration Server (LECS)
The ultimate goal of the LES is to arrange and control connections with a LEC. This connection is commonlyknown as a control direct ATM virtual channel connection (VCC). After this connection is established, it willhandle address resolution and registration responses. Note The LES establishes commun...
Page 188 - ATM Addresses; Integrated Local Management Interface (ILMI)
The default ELAN name • The LEC address and corresponding LES • The ELAN name and corresponding LES • The ATM address prefix and corresponding LES • The ELAN type and corresponding LES • The ELAN name • The corresponding ATM address of a LANE server • A LANE client MAC address • A client MAC address...
Page 189 - LE Messages
In the ATM LANE communications process, when a client wants to join an ELAN, the client must build atable that links ATM addresses to Ethernet MAC addresses. Let’s take a close look at this process: The LEC first sends a LAN Emulation ARP (LE_ARP) message to the LES that is using apoint−to−point con...
Page 190 - Joining and Registering with the LES; LANE Configuration Guidelines
LE_ARP_REQUEST—Contains the broadcast MAC address 0xFFFFFFFF. This packet is sent on acontrol direct VCC to the LES to query for the ATM address of the BUS. • LE_ARP_RESPONSE—Sent in response to an LE_ARP_REQUEST; it contains the ATM address ofthe BUS. • LE_JOIN_RESPONSE—Contains the LANE client ide...
Page 191 - protocol was anticipated to have a short life span.
Let’s step through the process. Suppose that you were working on an ELAN and you wanted to access a filestored on a server that was located on a physically separate LAN: You send the file request. Your LEC determines if it knows the ATM address of its LES. 1. If your LEC does not know this address, ...
Page 193 - Supervisor Engine’s console port.; Segmentation and Reassembly; Connecting in an ATM Network; Checks the local LECS for a preconfigured address on the local LEC.
Supervisor Engine’s console port. Tip Even though the LANE module is configured through the Supervisor Engine, the Supervisor Engine maintains no configuration information regarding the LANE module. This information is stored on theLANE module itself. Segmentation and Reassembly In a frame−based net...
Page 194 - Monitoring and Maintaining LANE; show lane database—Displays the LECS database; Configuring Virtual Private Tunnels; Accessing the ATM LANE Module; Displaying the Selector Field
After the destination node receives the LE_ARP response from the LES, the destination client responds to thesource with its address information. The source sends a “flush” message to the BUS, which instructs the BUSto stop sending any unsent cells—the source will now establish a direct connection wi...
Page 195 - Configuring the LES/BUS; Verifying the LES/BUS Configuration; Configuring a LEC for an ELAN
LANE Server: 47.00817200000000E04BAAA006.00E04BAAA061.** LANE Bus: 47.00817200000000E04BAAA006.00E04BAAA062.** LANE Config Server: 47.00817200000000E04BAAA006.00E04BAAA063.00 note: ** is the subinterface number byte in hex Note The asterisks in this example indicate that the addresses are in hexadec...
Page 196 - Verifying a LEC Configuration on an ELAN; To verify the previous operation, issue the following command:
ATM(config)#interface atm0.1 Map the LEC bus to the Ethernet ELAN named “default”: ATM(config−subif)#lane client ethernet default 3. Repeat Steps 2 and 3 for each LEC you want to configure on this LANE module. 4. Enter Interface Configuration mode for the ATM0 subinterface 2: ATM(config−subif)#inter...
Page 197 - Configuring the LECS; Enter Global Configuration mode on the LANE module:; Viewing the LANE Database; Enter Interface Configuration mode for ATM0 interface:
Configuring the LECS Prior to configuring the LECS, you will need to go to each LES and get its ATM address. This address can begathered with the following command: ATM#show lane server LE Server ATM0.1 ELAN name: default Admin: up State: operational type: ethernet Max Frame Size: 1516 ATM address:4...
Page 198 - Verifying the LECS Configuration; Verify the proper setup with the following command:
ATM(config−if)#lane config database ELAN2 ATM(config−if)#end Verifying the LECS Configuration Verify the proper setup with the following command: ATM#show lane config LE Config Server ATM0 config table: ELAN2 Admin: up State: operational LECS Mastership State: active master list of global LECS addre...
Page 199 - Interface
Chapter 9: LightStream Switches In Depth The demand for high−speed network communications has skyrocketed in the past 20 to 30 years. In the early1970s, 9.6Kbps was considered a high−speed network. Now that we have entered the next century, networkspeeds have surpassed 1Gbps with the introduction of...
Page 201 - The LightStream 2020 processor card is shown in Figure 9.3.
UBR + MCR A unique Cisco class for best−effort data trafficdelivery with a specified minimum bandwidth. Thisclass is used in a LAN for high−end resourceapplications or in a WAN with an ATM for aguarantee of a certain amount of bandwidth (alsocalled a committed information rate [CIR]). One of the gre...
Page 202 - Neighborhood Discovery Function; Discovering the local network topology; Discovering the Local Network Topology; Virtual Path Connections
Neighborhood Discovery Function The neighborhood discovery function (NDF) can be used to provide a means for locating all the other nodes inthe network and to simplify the network configuration process. This tool helps to eliminate the need tomanually configure some of the attributes of interface mo...
Page 203 - LightStream Troubleshooting Tools; LightStream Boot Process
algorithm to determine the path for any data that arrives and needs to be switched through the network. Therouting algorithm calculates the minimum distance path through the network, verifies the availability ofbandwidth, and then sets up a connection between the two ATM endpoints in the network. Th...
Page 204 - Supported Troubleshooting Protocols; Snooping Mechanisms; Two components will be discussed here:; The MPS
Default settings are in square brackets ’[]’ Would you like to enter the initial configuration dialog? [yes] From this prompt, you can enter the initial configuration dialog or decline and manually enter theconfiguration. This choice allows an administrator to use the Command Line Interface (CLI) on...
Page 205 - The MPC; Configuring the Hostname; Configuring an Enable Password; Configuring the Processor Card Ethernet Interface
The MPC Configuring an MPC on a router provides router−initiated and router−terminated shortcuts for non−NBMAnetworks. The MPC functionality involves the following: Data−plane and control−plane VCC management • Ingress/egress cache management • MPOA frame processing • MPOA protocol and flow detectio...
Page 206 - Enter Interface Configuration mode for the Ethernet interface:; Use the enable command to enter Privileged EXEC mode:; Enter the interface on the module:; Verifying an ATM Interface Connection Status
CoriolisLS1010> enable Use the config terminal command to enter Global Configuration mode: CoriolisLS1010# config terminal 2. You must identify the route for traffic to take to the internal network (referred to as a static route)using the ip route command, as shown here: CoriolisLS1010(config)# i...
Page 207 - Viewing the Configured Virtual Connections; Use the enable command to enter Privileged EXEC mode.; Configuring the Advertised LECS Address; Viewing the LANE Configuration
IF−Side: Network IF−type: NNI Uni−type: not applicable Uni−version: not applicable CoriolisLS1010# Viewing the Configured Virtual Connections To view the configured virtual connections, use the show atm vp command as shown here: CoriolisLS1010# show atm vp Interface VPI Type X−Interface X−VPI Status...
Page 208 - Viewing the Installed Modules
control distribute: vcd 1452, 3 members, 196 packets proxy/ (ST: Init, Conn, Waiting, Adding, Joined, Operational, Reject, Term) lecid ST vcd pkts Hardware Addr ATM Address 1 O 1451 6 0060.705a.8f02 47.0091810000000060707B8A01.0060705A8B12.01 2 O 1455 10 00e0.d7b1.ba12 47.0091810000000060707B8A01.11...
Page 209 - Changing the MPS Variables
——— ———————— ————————— —————————— —————— 2 EARL 1+ WS−F5511 0002278010 1.0 Mod SMT User−Data T−Notify CF−St ECM−St Bypass ——— ——————————————————— ———————— —————— ——————— —————— 5 WorkGroup Stack 30 isolated in absent CoriolisLS1010> Configuring the MPC This example configures the MPC and binds an...
Page 210 - Monitoring the MPS; Enabling ILMI Autoconfiguration
To identify an MPS with a specific name, use the following command: mpoa server config name mps−name 1. The ATM address that specifies the control ATM can be optionally identified using this command: atm−address atm−address 2. To specify the network ID, use the following command: network−id id 3. To...
Page 212 - Recovering a Lost Password
Recovering a Lost Password To recover a password, such as that used for the root account, look at the following example (the output isquite long, so unnecessary information has been omitted): Type ‘. to get a Test and Control System (TCS) hub prompt. user name:’. TCS HUB<> At the TCS hub promp...
Page 216 - Layer 2 Network Loops
Broadcast frames • Multicast frames • Unknown unicasts • Broadcast and Multicast Frames Broadcast and multicast frames are unique in that neither has a specified destination hardware address. Thesource address is also the hardware address of the device that sent the frame. In the case of broadcasts,...
Page 217 - Edsger Dijkstra’s Graph Theory
and Electronics Engineers (IEEE) a protocol similar to STP to become a networking standard. However, afterthe IEEE 802 committee revised it into what is now known as the IEEE 802.1D standard (Spanning TreeProtocol), the protocol differed just enough from DEC’s version that they were incompatible. Da...
Page 218 - STP Root Bridges
Figure 10.2: An example of a directed graph.STA assigns each switch in the network a unique identifier. This identifier is one of the switch’s MACaddresses, as well as an assigned priority (explained in more detail later in this chapter in “The SelectionProcess”). After STA assigns each switch this ...
Page 219 - Bridge Protocol Data Units; Let’s take a look at the fields of a BPDU, as shown in Figure 10.4:
Figure 10.3: The root bridge calculating the path cost to switch D.The lowest calculated path is not always the most ideal path. For example, if multiple high−speed links to adestination exist, the links may total more than the cost of a very slow link, such as a modem. Even though thestraight path ...
Page 220 - BPDU Timers
Version—Contains 1 byte and the value of zero. • Message Type—Contains 1 byte and the value of zero. • Flag—Contains 1 byte; only the first 2 bits are used. The topology change (TC) bit signals that therehas been a topology change. The topology change acknowledgment (TCA) bit is then set toacknowled...
Page 221 - Parent and Child Switches; Root Bridge Selection; The Selection Process; Priority Assignment
Parent and Child Switches A switch’s diameter is a unit of measurement between the root switch and child switches. The root bridgecounts as the first switch. Each subsequent child switch out from the root bridge is counted to yield thediameter number. A parent switch brings you one switch closer to ...
Page 222 - Port Costs, Path Costs, and Port Priorities
Secondary root bridge priority 16,384 Root bridge priority 8,192 The switches participating in STP (other than the root bridge) must form an association with the root bridgeshortly after the root bridge has been elected. Each switch examines each BPDU as it arrives on each port.When a switch receive...
Page 223 - Equal Cost Paths; Note The path cost can never be lower than one.; Spanning Tree Convergence Time
Equal Cost Paths If two or more links have the same root path cost, such as two identical links running between two switches,STA has a problem choosing the designated port or a root path through the network using the lowest pathcost. The bridge ID is used to determine the root bridge in the network ...
Page 224 - STP Port States
For example, the downtime caused by using the defaults would be the following: 2 * 15 + 20 = 50 seconds Now that you have learned about the timers and how BPDUs operate in the network, let’s take a closer look athow ports transition through different states before forwarding data. STP Port States Ea...
Page 225 - Per−VLAN Spanning Tree; EtherChannel
Per−VLAN Spanning Tree You can have many instances of STP running in your network. By running a different instance of STP on aper−VLAN basis, you can run some VLANs on ports that are blocked by another instance of STP running onanother VLAN. In this way, you can set the priority of each port on a pe...
Page 226 - Link Failure; EtherChannel Administrative Groups; Port Aggregation Protocol
the network. Thus, eight wires can be used to simulate one link able to handle up to 800Mbps and loadbalance data across those links, as shown in Figure 10.7. Figure 10.7: Eight equal−cost links between two switches, creating a bundle of eight channels acting as asingle link.Let’s take a look at wha...
Page 227 - Fast Convergence Components of STP; PortFast; UplinkFast must be enabled on the switch.
capability. The channel is then added to the spanning tree as a bridge port. Warning Dynamic VLAN ports can force a VLAN change; as a result, PAgP cannot be used to form a bundle on ports that are configured for dynamic VLANs. The VLANs must be static VLANs, meaning thatthe port on the switch must b...
Page 228 - BackboneFast; Tip BackboneFast cannot be used in a Token Ring network.; Enabling STP on a Set/Clear Command−Based Switch
The switch must have at least one blocked port. • The failure must be on the root port. • If a link fault occurs on the primary root link, UplinkFast transitions the blocked port to a forwarding state.UplinkFast changes the port so that it bypasses the listening and learning phases. This change occu...
Page 229 - In the following example, the VLAN number is 5:
Enabling STP on a Set/Clear Command−Based Switch for AllVLANs To enable STP on all VLANs, use the following command in Privileged mode: set spantree enable all Related solutions: Found on page: Configuring a Static VLAN on a Catalyst 5000 SeriesSwitch 154 Configuring Multiple VLANs on a Catalyst 500...
Page 230 - Configuring STP on an IOS Command−Based Switch; Disabling STP on an IOS Command−Based Switch
Bridge Max Age 20 Sec Hello Time 2 sec Forward Delay 15 sec Port vlan Port−State Cost Priority Fast−start Group−Method ———— ———— —————————— ———— ———————— —————————— ———————————— 5/1 2 forwarding 19 32 disabled 5/2 2 forwarding 19 32 disabled 5/3 2 blocking 19 32 disabled 5/4 2 blocking 19 32 disable...
Page 231 - Viewing the STP Configuration on a Command Line Switch; The output should look similar to this on your console:; Configuring the STP Root Switch; Command Parameter; root
Viewing the STP Configuration on a Command Line Switch To view the configuration, you use the same command you use for the Set/Clear command−based switches.However, you will receive much different output. Use this command: show spantree The output should look similar to this on your console: VLAN1 i...
Page 232 - Assigning a Port Cost to a Port Using a CLI−Based Switch
secondary (optional) Used to designate the switch as a secondary root switch if the root bridgefails. The default priority of the secondary bridge is 16,384. n (optional) Specifies the VLAN. If you do not specify the VLAN, VLAN 1 is used.The valid value range is 1 through 1,005. dia n (optional) Spe...
Page 233 - Configuring the Port Priority on a CLI−Based IOS; In this example, 100 is the priority value:
This example uses 100 as the port cost: spantree cost 100 Verifying the Port Cost Configuration on Both a Set/ClearCommand− and CLI−Based Interface To verify the port cost on the port configured previously, use the following Privileged mode command: show spantree <module/port> The following co...
Page 234 - The following command provides output on module 2, port 3:; Verifying the VLAN Priority Settings; The following command provides output on module 3, port 5:; Adjusting the Hello Timer on a Set/Clear Command−Based IOS; Use 4 to indicate a four−second interval:
Verifying the STP Port Priority on a Set/Clear Command−BasedSwitch To verify the proper port priority setting, use this command (only the module and port numbers are required): show spantree <module/port> The following command provides output on module 2, port 3: show spantree 2/3 Port Vlan Po...
Page 235 - Preparing to Enable EtherChannel
Adjusting the MaxAge Timer on a Set/Clear Command−BasedIOS To change the default MaxAge timer for a particular VLAN, use this Privileged mode command : spantree maxage <time value> <VLAN> In the following example, 5 refers to the MaxAge time and 1 refers to the VLAN: spantree maxage 5 1 ...
Page 236 - on; Enables the port to channel or bundle without any negotiation.; off; Disables the port from channeling or creating a bundle.; auto
Channel 2/1−2,2/1−4 Broadcast suppression percentage(0−100) Flow control receive−(off,on),send−(off,on) Security yes Membership static,dynamic Fast start yes QOS scheduling rx−(none),tx−(none) CoS rewrite yes ToS rewrite IP−Precedence Rewrite yes UDLD yes AuxiliaryVlan 1..1000,untagged,dot1p,none SP...
Page 237 - another port that is in the desirable or auto mode.; Verifying the EtherChannel Configuration
another port that is in the desirable or auto mode. Verifying the EtherChannel Configuration To verify the EtherChannel configuration on a Set/Clear command−based switch, use this command: catalyst5000> (enable) show port channel ? info Show port channel information statistics Show port channel s...
Page 239 - Enabling PortFast on a Set/Clear Command−Based Switch; In this example, 2 is the module number and 1 is the port number:; Disabling PortFast on a Set/Clear Command−Based Switch; In this example, 3 is the module number and 8 is the port number:; Enabling PortFast on a CLI−Based IOS Switch
catalyst5000> (enable) show interface sl0: flags=51<UP,POINTOPOINT,RUNNING> slip 0.0.0.0 dest 0.0.0.0 sc0: flags=63<UP,BROADCAST,RUNNING> vlan 1 inet 208.44.88.4 netmask 255.255.255.192 broadcast 208.44.88.63 catalyst5000> (enable) Enabling PortFast on a Set/Clear Command−Based Swi...
Page 240 - To verify module 3 and port 8, do the following:; Enabling UplinkFast on a Set/Clear Command−Based Switch; Disabling UplinkFast on a Set/Clear Command−Based Switch
Disabling PortFast on a CLI−Based IOS Switch To disable PortFast on a Cisco IOS command−based switch, use this Interface Configuration mode command: no spantree start−forwarding Verifying the PortFast Configuration To verify the PortFast configuration on a Set/Clear command−based switch, enter the f...
Page 242 - To view UplinkFast statistics, use this Privileged mode command:; Enabling BackboneFast on a Set/Clear Command−Based Switch; The output for this command is fairly simple:
Viewing the UplinkFast Configuration on an IOS−Based Switch To view the UplinkFast configuration on an IOS command−based switch, enter the following Privileged modecommand: show uplink−fast Viewing UplinkFast Statistics on an IOS−Based Switch To view UplinkFast statistics, use this Privileged mode c...
Page 243 - Why Not Call Them Routers?; Let’s examine how MLS works and the components used in MLS.; How MLS Works; Distance Vector Multicast Routing Protocol (DVMRP)
Chapter 11: Multilayer Switching In Depth Earlier in this book, I told you that switches were Layer 2 devices and routers were Layer 3 devices, which fitnicely into those well−known seven layers. You know the seven—the Open System Interconnection (OSI)Reference Model layers. Oh, did I forget to ment...
Page 244 - Prioritizing Traffic Flows; MLS Components; MLS Switching Engine (MLS−SE)—The switch supporting MLS
manner. This method is similar to sending a piece of mail: You put it in the mailbox, but you have noguarantee that it will arrive—just the likelihood it will reach its destination. Using other protocols, including those at Layer 2 and Layer 4, the network traffic is made up of a series ofend−to−end...
Page 245 - Cisco 8500 Gigabit Switch Router series
Figure 11.1 shows the three MLS components contained in a single switch chassis, such as that of a CiscoCatalyst 5000 or 6000 family switch. Figure 11.1: The MLS components using an internal route processor in an MLS switch.The Cisco 5000 and 6000 families of switches can use multiple internal route...
Page 246 - MLS Flows; The router’s known virtual LAN (VLAN) information
MLS Flows When a flow process begins, the MLS−RP starts sending out multicast hello messages every 15 seconds to allswitches in the network that accept MLS−RP messages. These messages inform each switch that theMLS−RP (router or internal route processor) is available to provide routing information t...
Page 247 - Access List Flow Masks; The three types of access list flow masks are as follows:; Destination−IP Flow Mask
go through the router. The MLS−SE rewrites the packets to look as if they had been forwarded by a router. Note The MLS cache size can grow to a maximum of 128K. When the cache on the MLS−SE grows larger than 32K, it is likely that flows in the network will not be switched by the MLS−SE and forwarded...
Page 248 - MLS Troubleshooting Notes
Figure 11.5: An MLS switch and two MLS routers. IP Access Lists and MLS Interaction When any interface has an inbound access list applied, the interface where the access list is applied cannot beused for MLS. However, you can apply an output access list on an interface, and it will not affect MLS. W...
Page 249 - ip security—Disables MLS on the interface it is applied to; Committed access rate (CAR)—CAR will disable MLS on the interface.; Configuring MLS; MLS cache
You may become confused when trying to troubleshoot MLS because the commands you need to watch outfor are not directly related to MLS. Remember this basic rule: Any command that involves the routerexamining each packet to perform an action will disable MLS on an interface. Let’s take a look at some ...
Page 250 - MLS Cache
VTP domains • Management interfaces • Tip On the Catalyst 2926G−L3, 4908G−L3, or 2948G−L3 switch, at least one MLS−RP must be configured. Multiple MLS−RPs can be configured in a single line; up to 16 MLS−RPs can participate in MLS. MLS Cache The MLS cache is used to maintain the flow information for...
Page 251 - MLS Cache Fast Aging Time; VLAN ID; Configuring an External MLS Route Processor; Configuring the MLS−RP for MLS involves the following tasks:
MLS Cache Fast Aging Time The processing of the MLS cache entries can cause performance problems on your switch. To keep thissituation under control, it’s good practice to monitor the IP cache and make sure it remains well under themaximum size of 128K. Doing so will prevent cache entries from being...
Page 253 - Enabling MLS on an Individual Interface; Configuring the MLS Switch Engine; Re−enabling MLS on a Catalyst 6000
Router(config) interface fastethernet 1/1 To assign a VTP domain of coriolis to the interface, use the following command: 2. Router(config) mls rp vtp−domain coriolis Warning This step must be performed prior to using any of the other MLS interface commands on the MLS interface. If this command is n...
Page 255 - An example of using the mls aging long command is as follows:; An example is as follows:
Configuring Long Aging on the Catalyst 6000 To configure the long aging time on the Catalyst 6000, use the following command: mls aging long <seconds> An example of using the mls aging long command is as follows: mls aging long 64 Disabling Long Aging on the Catalyst 6000 To disable the long a...
Page 256 - Monitoring and Viewing the MLS Configuration; Viewing the MLS Aging Configuration on a Catalyst 6000
Monitoring and Viewing the MLS Configuration Commands on each MLS−SE and MLS−RP to monitor and view the configurations of each device aredifferent. Let’s take a look at the following commands: Viewing the MLS aging configuration on a Catalyst 6000 • Displaying the IP MLS configuration • Viewing MLS−...
Page 257 - Displaying MLS VTP Domain Information; Viewing the MLS VLAN Interface Information
MLS−RP IP MLS−RP ID Xtag MLS−RP MAC−Vlans —————————— ———————————— ———— —————————————————————— 38.187.128.254 0000808dca20 2 00−00−80−08−dc−ca 1−20 Displaying MLS VTP Domain Information To display the MLS VTP domain information, enter the following command: MLS−RP# show mls rp vtp−domain coriolis vla...
Page 259 - destination address outside the local segment are sent.
Chapter 12: Hot Standby Routing Protocol In Depth Dynamic environments are constantly growing. I happen to work in one and I see the demand for 99.99percent reliability increasing every day. However, even in a worldwide Enterprise network, high availabilitysolutions are not prepared for various netw...
Page 260 - This delay creates a very high convergence period.; ICMP Router Discovery Protocol
The next sections look at some ways that administrators and engineers have devised to overcome problemsrelated to assigning default gateways, along with the benefits and difficulties in using each technique. Routing Information Protocol Once solution designed to inject Layer 3 routing redundancy all...
Page 261 - The Solution; Topology
The Solution HSRP is a Cisco proprietary protocol developed for redundancy. It defines a group of routers working as onevirtual router. It enables host interfaces to continue communicating outside the local segment even if a hostinterface’s default route fails or the link is down. Basically, HSRP is...
Page 263 - HSRP Message Format; The fields contained in an HSRP message are:; The HSRP States
Each standby group contains an IP address and a well−known MAC address assigned to the group. The IPaddress for the standby group is within the range of IP addresses belonging to the subnet or VLAN to whichthe route processor is providing services. The IP address cannot be assigned to any other devi...
Page 264 - HSRP Configuration; Disabling ICMP Redirects; HSRP Interface Tracking
to the route processor.Learn state—The route processor transitions to this state and remains in this state until it receives ahello message from the current active router. The hello message allows the route processor to learnthe virtual IP address of the current virtual router. • Listen state—In thi...
Page 265 - Opening a Session on an Internal Route Processor; Entering Configuration Mode on an RSM
standby group. If a route processor fails, it automatically decrements its priority on that interface and stops transmitting hellomessages out the interface. The standby route processor assumes the active router role when no hellomessages are detected for the specified holdtime period. Opening a Ses...
Page 266 - Setting the HSRP Hello and Hold Timers
Assigning an HSRP Interface Priority You should increase the priority of the interface in the HSRP group that you would like to be active bydefault. Always remember that the interface with the highest priority becomes the active route processor forthe HSRP group. To specify the priority for the HSRP...
Page 267 - Removing the HSRP Hello and Hold Timers; Configuring a Clear−Text Password for HSRP Authentication; Configuring Two RSFC Interfaces as One HSRP Group; Here’s what happened:
Removing the HSRP Hello and Hold Timers To remove the manual timer settings and return the settings to the default values for HSRP group 3, use thefollowing command: no standby 3 timers Configuring a Clear−Text Password for HSRP Authentication You can specify a clear−text password for the HSRP authe...
Page 269 - Using the debug Command; have a big impact on the internal route processor’s performance.
Tip To get a brief output of all the configured interfaces, you can use the show standby briefcommand. Using the debug Command By enabling the debug command, it will list the changes in real−time for the HSRP group you specified. Thisincludes the sending and receiving packets through the HSRP. To en...
Page 270 - Chapter 13: Policy Networking
Chapter 13: Policy Networking In Depth Behind all switching implementations and configurations lies an area that, if left unattended, can render youand your network defenseless: access security policies. In this chapter, we will discuss the need for andcreation of access security policies; we will a...
Page 271 - Access lists
Figure 13.1: A short list of various switches overlapping into different areas of the policy layers. Core Layer Policies By implementing security policies at the Core layer, also known as the backbone, you increase the elapsedamount of time between when a device requests access to a network and when...
Page 272 - Managing Hypertext Transfer Protocol (HTTP) access; Access Lists
Managing Hypertext Transfer Protocol (HTTP) access • Access Lists An access list is a list of conditions that control access to the switch, router, or route processor. IP, AppleTalk,and Internetwork Packet Exchange (IPX) access lists are like gatekeepers that control access from or todifferent segme...
Page 275 - Let’s take a look at the any parameter:; Now, let’s examine how well−known TCP ports can work:; To remove a remark, use a command like the following:; Applying Access Lists
operator—This syntax element compares source or destination ports. Possible syntaxes include lt(less than), gt (greater than), eq (equal), neq (not equal), and range (inclusive range). • log—This syntax enables logging of information about packets that match access list entries. • Warning The log co...
Page 276 - Applying Access Lists to Route Filtering
access−class—Applies the access list to an interface for security purposes. This command identifiesusers of specified VTY lines. By default, five VTY lines come in to your Cisco InternetworkOperating System (IOS) or router. Because you do not know which one you will be using when youTelnet into your...
Page 277 - Security at the Access Layer
Next, you must specify a routing protocol: in this case, Enhanced Interior Gateway Routing Protocol(EIGRP). To do so, use the following command: router eigrp 2 The last step is to apply the configured access list. Use the distribute−list command to interface g0/0 to filteroutbound traffic from netwo...
Page 278 - Configuring Banner Messages; Physical Device Security; You should know a few things before trying to apply port security:
Privilege level 0 is a special level that allows the user to use a more specific defined set of commands. As anexample, you could allow a certain user to use only the show arp command. This command is useful when athird party is using a sniffer on your network and needs to match a MAC address to an ...
Page 279 - Static MAC Assignment vs. Dynamic MAC Assignment; VLAN Management; Here is the command used when creating an IP standard access list:
After you enable port security on any switch port, any static or dynamic CAM entries associated withthe port are cleared, and any currently configured permanent CAM entries are treated as secure MACaddresses. • Not all Cisco switches support port security. Check Cisco Connection Online (CCO) athttp:...
Page 280 - Creating an Extended Access List
HSNRSM(config)# access−list 100 deny tcp any any eq 20 HSNRSM(config)# access−list 100 deny tcp any any eq 21 Because the access list has an implied “deny all” at the end, you need to apply a rule that any othertraffic can pass through. The ip indicates that all IP protocols are being identified: 3....
Page 282 - Applying Access Lists Using access−class
CoriolisRSM1(config)#access−list 199 permit ip any ? A.B.C.D Destination address any Any destination host host A single destination host Just as in Step 7, we need to identify the destination addresses to permit: 8. CoriolisRSM1(config)#access−list 199 permit ip any any CoriolisRSM1(config)# You’re ...
Page 283 - Configuring a Telnet Session Time−Out Value; We just set the timeout value to five minutes and zero seconds.; Implementing Privilege Levels on a 1900EN
Configuring a Telnet Session Time−Out Value To lower the chances for vulnerability when an administrator walks away from a logged−in Telnet session,you can configure and apply a time−out condition to unused VTY sessions. Here’s how: HSNRSM (config)# line vty 0 4 HSNRSM (config−line)# exec−timeout 5 ...
Page 284 - Enabling HTTP Access
To configure the time−out value to five minutes on the console port of an IOS−based route processor orrouter, use the following command: HSNRSM (config)# line console 0 HSNRSM (config−line)# exec−timeout 5 To configure the time−out value to five minutes on the VTY port of an IOS−based route processo...
Page 285 - aaa; To apply the authentication type, use the following command:; Enabling Port Security; The output should look similar to this:
Syntax Description aaa Allows authentication, authorization, and accounting (AAA) to be used forauthentication enable Allows the enable password method; the default method of HTTP server userauthentication local Allows the local user database on the Cisco router, route processor, or accessserver to ...
Page 286 - Displaying the MAC Address Table
———— —————————— —————————— —————————— —————————— ———————— 3/3 0 0 0 0 0 Port Single−Col Multi−Coll Late−Coll Excess−Col Carri−Sen Runts Giants ———— —————————— —————————— ———————— —————————— ———————— ———— —————— 3/3 0 0 0 0 0 0 0 Last−Time−Cleared —————————————————————————— Fri Dec 22 2000, 19:53:38 ...
Page 287 - of addresses allowed on the interface to the default value of 132.
Dynamic Addresses Count: 5 Secure Addresses (User−defined) Count: 0 Static Addresses (User−defined) Count: 0 System Self Addresses Count: 12 Total MAC addresses: 8 Non−static Address Table: Destination Address Address Type VLAN Destination Port ————————— —————— —— —————————— 00−15−20−5c−80−a1 Dynami...
Page 288 - Chapter 14: Web Management; Enterprise Edition Upgrade Kit—WS−C19/28EEUG; CVSM Client Requirements; Windows−based system—Pentium 166MHz, 64MB RAM, small fonts
Chapter 14: Web Management In Depth Imagine having to manage all the com closets throughout your enterprise without the use of a remotemanagement tool. It’s a scary thought. What if you were in San Francisco and you needed to reconfigure aswitch in Atlanta? Yes, Telnet would work, but Cisco also has...
Page 289 - CVSM Access Levels; CVSM Default Home Page; enabled and that your browser fully supports the use of frames.
IE is not supported on Solaris, and Netscape 4.6 is not supported at all. However, you can try to access theswitch through your browser to determine whether your browser version is supported. If your browser is notsupported, the switch will display an error message, and the session will not complete...
Page 290 - and want to retype an entry, click on Cancel to undo your first entry.; The Switch Image; Solid green—The switch is operating as designed.
and want to retype an entry, click on Cancel to undo your first entry. Note Again, keep in mind that if you are using IE5, you must use the Refresh button in your browser after each configuration change to see the updates. Otherwise, you risk making a mistake down the line. The CVSM default home pag...
Page 292 - Connecting to the Web Management Console
New setting ===> 1024 We have now changed the HTTP port to 1024. You should use a numbering scheme that yourdepartment or organization believes to be the best. • Related solutions: Found on page: Configuring an IP Address and Netmask 57 Configuring Network Settings on the 1900 and 2820Series 456 ...
Page 297 - Configuring the Switch Port Analyzer
Figure 14.10: On this page you can control and manage broadcast storms and overall IP configuration of theswitch. CGMP—The CGMP Management page. By default, CGMP is enabled. This page allows you toconfigure the use of CGMP to dynamically discover end−user stations participating in multicastapplicati...
Page 298 - Enabling SNMP Contact
Click on the ports you want to monitor in the Ports Not Monitored window. Click on the Add buttonto move them to the Ports Monitored Window. 2. Select the port you wish to monitor from by choosing from the pull−down menu next to SelectMonitoring Port. This port will usually be one of the trunk ports...
Page 299 - Main Menu Choices
Chapter 15: The Standard Edition IOS In Depth The Cisco 1900 and 2820 switches come with two unique IOSs: Standard Edition and Enterprise Edition. TheStandard Edition is a character−based IOS, and the Enterprise Edition is similar to the IOS on higher−endrouters. The Cisco 3000 series is the only se...
Page 301 - [X] Exit to Main Menu—This option returns you to the Main Menu.
The password is case−insensitive and can contain any character with a legal keyboard representation.[E] Modify secret password—The Management Console secret password can help preventunauthorized access. This password is stored in encrypted form and thus provides enhanced security.When specifying a s...
Page 302 - Let’s look at each option from this menu in more detail.
[R] Reset system—This option recycles the power on the switch. • [F] Reset to factory defaults—This option clears all configuration settings back to the factorydefaults. • Warning If you apply the [F] option, all manual configuration settings will be lost. [B] Broadcast storm control—This option lau...
Page 303 - [X] Exit to previous menu—Exits back to the Network Management menu.; The options available from this menu are as follows:
[V] Management VLAN—Allows you to set the VLAN in which you will configure your switch.Cisco recommends that you choose a VLAN other than 1 because all ports are in VLAN1 by default.On the Standard Edition of the IOS software, the available VLANs are 1 through 4. The EnterpriseEdition has 64 availab...
Page 304 - SNMP Default Trap Messages
SNMP Default Trap Messages By default, the Cisco Catalyst 1900 and Catalyst 2820 series switches send certain trap messages. Trapmessages are sent by default in response to the following events: Port security violations • Power recycling (powering on and off) • Logon authentication failures • STP po...
Page 305 - [X] Exit to previous menu—Returns you to the Network Management menu.
Enter Selection: The following list shows the commands from the CDP Configuration/Status menu: [H] Hold Time (secs)—Indicates how long a CDP multicast will remain in the CDP table. The validentries are from 5 to 255 seconds, and the default is 180 seconds. • [T] Transmission Interval (secs)—Defines ...
Page 306 - Port Statuses; Enabled—The port is available to send and receive data frames.
Syntax Port A1 Port 25 B1 Port 26 AUI The AUI port 1 through 24 An individual port on the switch The Port Configuration menu is as follows: Catalyst 2820 − Port 24 Configuration ————————————————————Settings———————————————— [D] Description/name of port Port To Hanson’s PC [S] Status of port Suspended...
Page 309 - [V] View port statistics—Displays individual port statistics.
[C] Configure port—Provides a shortcut to the Port Configuration menu. • [V] View port statistics—Displays individual port statistics. • [N] Next port—Forwards to the next configurable port. • [G] Goto port—Configures any identified port. • [P] Previous port—Configures the previous configurable port...
Page 310 - [X] Exit to Main Menu—Displays the management console Main Menu.
Catalyst 2820 − Virtual LAN Configuration VLAN Name Member Ports ——−− ———————————— ———————————— 1 VLAN 1 1−24, AUI, A, B ——————————————Action————————————— [C] Configure VLAN [X] Exit to Main Menu Enter Selection: This menu only gives two options. You can choose C to enter another menu that lets you ...
Page 314 - Configuring Network Settings on the 1900 and 2820 Series; To configure a 1900 or 2820 series switch, follow these steps:
Receive Forward Transmit —————————————————————————————— 1 : 0 0 0 2 : 0 0 0 3 : 9352 9352 90514 4 : 0 0 0 5 : 0 0 0 6 : 3678 3677 81423 7 : 0 0 0 8 : 0 0 0 9 : 0 0 0 10 : 0 0 0 11 : 0 0 0 12 : 0 0 0 AUI: 0 0 82461 A : 0 0 0 B : 0 0 0 Select [R] Reset all statistics, or [X] Exit to previous menu: [B]...
Page 315 - Configuring Broadcast Storm Control on Switch Ports
The following list describes the three menu options: [M] Menus—Displays the switch’s Main Menu. ♦ [I] IP Address—Available at log−on if the switch does not have a password configured. ♦ [P] Console Password—Allows you to enter an unencrypted privileged−level password tothe switch management interfac...
Page 316 - Configuring SNMP on the 1900 Series
[X] Exit to previous menu Enter Selection: This menu allows you to control the propagation of broadcasts to each port. The following list gives a briefdescription of each setting: [A] Action upon exceeding broadcast threshold—Indicates what action will be taken in the event thatthe broadcast number ...
Page 319 - Configuring Port Monitoring on the Standard Edition IOS
We now want to bind the IP address of our SNMP management station to the trap community string.To do this, enter the new community string, and select [1]. Then select [A] to enter the IP address.The following will appear on your screen: Enter Trap Manager community string (32 characters max): Curren...
Page 320 - Configuring VLANs on the Standard Edition IOS; Select option [V] to open the Virtual LAN Configuration menu:
——————————— Actions ——————————————————————————————————— [A] Add ports to capture list [D] Delete ports from capture list [X] Exit to Main Menu Enter Selection: A This command adds ports to the capture list. Actual monitoring takes place only if all of the following information has been properly conf...
Page 321 - Now you need to enter a trunk port. We will be configuring port A:
[P] VTP Statistics [X] Exit to Main Menu Select [V], and accept the default setting of Server. Because the change we want to make is to add aserver, we will take the defaults: VTP mode may be set to [C]lient, [S]erver or [T]ransparent: Current setting ===> Server New setting ===> Server 2. Sel...
Page 323 - Configuring Spanning Tree Protocol; Select the VLAN you want to enable STP on. Notice we selected VLAN 2:
Assigning a Static VLAN to an Interface on a 1900ENSeries 156 Configuring Spanning Tree Protocol To configure Spanning Tree Protocol, start from the Main Menu and do the following: Select option [N], Network Management. 1. From the Network Management menu, select option [B]: Catalyst 1900 − Network ...
Page 324 - Notice here we selected the management VLAN, VLAN 1.
This command disables the Spanning Tree Protocol for a list of VLANs. You may disable the Spanning Tree Protocol for a list of VLAN numbers. VLAN numbers range from 1 to 1005. VLAN numbers should be separated by commas or spaces. A VLAN number range may also be specified. Example: 1, 2, 10−20 Enter ...
Page 325 - No Power; Check the physical cable for breaks or an unsecure connection.; POST
Chapter 16: Switch Troubleshooting In Depth Switch troubleshooting includes both hardware and software. The switch hardware can be anything from aSupervisor Engine to a module, card, chassis, or even a power supply. The software can be the individualmodule software or the IOS. In this chapter, we wi...
Page 326 - Indicator Lights
Port Number LED Test 1 Ports (loopback) 2 Ethernet address PROM 3 CAM (MAC address) table 4 RS−232 console port 5 Realtime clock 6 CAM memory (SRAM) 7 Timer interrupt 8 Port control status 9 Flag memory (DRAM) 10 Buffer memory (DRAM) 11 Forwarding engine memory (SRAM) 12 Forwarding engine CPU 16/26 ...
Page 327 - Switch Cabling; Switched Port Analyzers
The active LED indicates the following: Orange—The Supervisor Engine is in standby. • Green—The Supervisor Engine is operating correctly. • Other LEDs are on the individual line modules, as shown in Figure 16.2. These LEDs indicate the status ofeach module. A green link light indicates a good establ...
Page 328 - Switch Troubleshooting Tools; CiscoWorks for Switched Internetworks
This problem is addressed by Cisco with the use of Switched Port Analyzer (SPAN). SPAN allows the switchto copy all the packets that are sent to nodes connected to the switch ports and direct them to another port. Inessence, the designated switch port becomes a mirror of the monitored port or ports....
Page 329 - IOS Software Troubleshooting Commands
Figure 16.3: A screen capture from CiscoView. User Tracking—Used in the creation and management of dynamic VLANs. Cisco switches permitVLAN assignments based on dynamic VLAN assignments. This means the Media Access Control(MAC) address is used to assign the port to a specific VLAN. User Tracking def...
Page 332 - Viewing the Set/Clear IOS Configuration
show system Using the show system command, you can obtain a component status summary regarding the switchcomponents. This information includes the system status, current traffic percentage, peak percentage, status ofthe fans, power supplies, and modem; uptime, and system identification configuration...
Page 336 - Viewing the CLI−Based IOS Configuration
set port membership 2/1−24 static set cdp enable 2/1−24 set cdp interval 2/1−24 60 set spantree portfast 2/1−24 disable set spantree portcost 2/11 10 set spantree portcost 2/12 10 set spantree portcost 2/17 10 set spantree portcost 2/18 10 set spantree portcost 2/19 100 set spantree portcost 2/21 10...
Page 337 - Viewing the IOS Version Information on a CLI−Based IOS
1912EN# Viewing the Software Version on a Set/Clear Command−BasedIOS Module To view the software version of a module on a Set/Clear command−based IOS, use the show versioncommand. This command will not work on internal route processor modules, however. Let’s look at thecommand and an example of its ...
Page 338 - Note There is no comparable command on the 1900EN series switches.
epld 3.1 30 72920 06/14/99 19:33:06 lcp atm 3.1 12−15 23747 06/14/99 11:16:06 lcp tr 3.1 12−15 28737 06/14/99 11:17:19 lcp c5ip 3.1 12−15 23723 06/14/99 11:26:40 lcp 64k 3.1 12−15 57100 06/14/99 11:28:15 atm/fddi 3.1 12−15 24502 06/14/99 11:47:07 lcp 360 3.1(212) 12−15 120648 06/14/99 01:32:33 mcp 3...
Page 341 - Viewing the VLAN Configuration on a CLI−Based IOS
Protocols Configured: Address: Received: Transmitted: IP 68.127.187.10 95563219847 81294682 Virtual LAN ID: 2 (Inter Switch Link Encapsulation) vLAN Trunk Interface: FastEthernet1/0.2 Protocols Configured: Address: Received: Transmitted: IP 68.127.186.1 855147 854281 Catalyst5002> Viewing the VLA...
Page 342 - Viewing the Spanning Tree Configuration on a CLI−Based IOS
Catalyst5002> (enable) show spantree VLAN 1 Spanning tree enabled Spanning tree type ieee Designated Root 00−00−80−0c−a1−b3 Designated Root Priority 32768 Designated Root Cost 0 Designated Root Port 1/0 Root Max Age 20 sec Hello Time 2 sec Forward Delay 15 sec Bridge ID MAC ADDR 00−00−80−0c−a1−b3...
Page 344 - Viewing the CAM (MAC Address) Table on a CLI−Based IOS
Port path cost 100, Port priority 128 Designated root has priority 32768, address 0000.0C00.4BD0 Designated bridge has priority 32768, address 0030.8054.6C00 Designated port is Ethernet 0/12, path cost 100 Timers: message age 20, forward delay 15, hold 1 Port Ethernet 0/25 of VLAN1 is Forwarding Por...
Page 345 - Viewing the CDP Neighbors on a CLI−Based IOS
1912EN#show mac Number of permanent addresses : 5 Number of restricted static addresses : 0 Number of dynamic addresses : 1 Address Dest Interface Type Source Interface List ———————————————————————————————————————————————————————————————— 0030.194C.80A6 Ethernet 0/1 Permanent All 0000.0C00.4BD0 Ethe...
Page 346 - Viewing Individual Port CAM Tables on a CLI−Based IOS; Viewing Port Statistics on a Set/Clear IOS
1912EN#show cdp neighbors Capability Codes: R − Router, T − Trans Bridge, B − Source Route Bridge S − Switch, P − Repeater, H − Host, I − IGMP DeviceID IP Addr Local Port Capability Platform Remote Port 1005 68.127.187.254 Et0/1 R cisco 1000 Ethernet0 1912EN# Viewing Individual Port CAM Tables on a ...
Page 348 - Viewing Port Statistics on a CLI−Based IOS; Here is the output using the exception syntax:
Last−Time−Cleared —————————————————————————— Sat Sep 23 2000, 11:29:11 Viewing Port Statistics on a CLI−Based IOS To view the port statistics on a CLI−based IOS, use the show usage command. Let’s take a look at thecommand, the options available, and an example of its output: 1912EN#show usage ? exce...
Page 349 - Using the show port Command on a CLI−Based IOS
Using the Port Configuration on a Set/Clear Command−BasedIOS The show port command can be used on a Set/Clear command−based IOS switch to view the portconfiguration. Let’s take a look at the command, its optional syntaxes, and an example of its output: show port [module/port] show port [module] Cata...
Page 350 - Using the show vlan Command on a CLI−Based IOS
Ethernet 0/9, Ethernet 0/10, Ethernet 0/11, Ethernet 0/12 Ethernet 0/25, FastEthernet 0/26, FastEthernet 0/27 1912EN#show port monitor Port monitoring state: Enabled Monitor port: None Ports being monitored: Ethernet 0/1 1912EN#show port system Switching mode: FragmentFree Use of store and forward f...
Page 351 - Using the show interface Command on a CLI−Based IOS
1 default Enabled 5−12, AUI, A, B 2 Engineering Enabled 1−2 3 Admins Enabled 3−4 1002 fddi−default Suspended 1003 token−ring−defau Suspended 1004 fddinet−default Suspended 1005 trnet−default Suspended ———————————————————————————————————— VLAN Type SAID MTU Parent RingNo BridgeNo Stp Trans1 Trans2 ——...
Page 353 - Note RX stands for Receive, TX stands for Transmit.; Attach a terminal or PC to the console port.
sp+B0: 10001030 10001030 10000BD0 10000AD0 sp+C0: 10000B28 10001030 10001030 10001030 sp+D0: 10001030 10001030 10001030 10001030 sp+E0: 10001030 10001030 10001030 10001030 sp+F0: 10001030 10001030 10001030 493798E4 D0: 00000000, D1: 00000004, D2: 00000030, D3: 00005C05 D4: 11000000, D5: 11000000, D6...
Page 354 - Proceed through the following options:
Press and hold down the Mode button, as shown in Figure 16.5, while cycling the power on theswitch. Figure 16.5: The Mode button on a 1900 Series switch. 2. Proceed through the following options: 3. ——————————————————————————————————————————————————— Cisco Systems Diagnostic Console Copyright(c) Cis...
Page 355 - Follow these steps to start debugging on the switch:
[C] Continue with standard system start up [U] Upgrade operation firmware (XMODEM) [S] System debug interface Enter Selection: Use the [U] Upgrade Operation Firmware (XMODEM) option to upgrade the firmware (you must beusing X−Modem compatible software on the network node attached to the switch): Ent...
Page 357 - Appendix A: Study Resources; Glossary; Books
Appendix A: Study Resources Glossary Books McDysan, David E. and Darren L. Spohn, ATM Theory and Application, McGraw−Hill: New York, 1998.ISBN: 0−07045−346−2. This book is a great resource on Asynchronous Transfer Mode (ATM) and LANEmulation (LANE). Odom, Sean and Douglas Hammond, CCNP Switching Exa...
Page 358 - Online Resources
Online Resources Multiple documents are available on the Web, but the best place for information is the Cisco Web site. Ciscois one of the best companies at providing documentation on its products. You can find the Cisco Web site athttp://www.cisco.com/. Asynchronous Transfer Mode ATM fundamentals i...
Page 359 - Standards Organizations
Quality of Service Quality of ServiceOverview—www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/qos_c/qcdintro.htm • Configuring Quality of Service on a Cisco Catalyst6000—www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_5_4/config/qos.htm • Configuring IOS Quality of Service o...
Page 360 - Cisco Job Search Sites
Internet Engineering Task Force (IETF)—This organization is responsible for the TCP/IP, SimpleNetwork Management Protocol (SNMP), and Internet standards. A lot of its work relates to upgradingand enlarging the TCP/IP protocol suite and networks utilizing that protocol. The IETF Web site canbe found ...
Page 361 - Appendix B: Basic IOS CLI−to−Set/Clear Commands; Description
Appendix B: Basic IOS CLI−to−Set/Clear Commands Overview Many features are supported by the Set/Clear−based switches, which include the Catalyst 5000 and 6000families of switches. Most basic commands on a Command Line Interface (CLI)−based IOS can be mapped tocommands that provide similar functional...
Page 363 - Appendix C: The Cisco Consultant
Appendix C: The Cisco Consultant Overview On the side, I run a small consulting company. When I tell people that I am a Cisco consultant, they usuallyreply, “Oh”; or, they ask how well Cisco’s stock is currently doing. Consulting means that you work from oneproject to another on a freelance basis. U...
Page 364 - Come Off As an Expert; Designing a Solution
Make sure you are on time for your first appointment with the customer. Turn off your cellular phone (letvoice mail be useful for once) and put your pager on vibrate. You want to project to the customer that he orshe is the most important person in the world at that moment. No one wants to buy somet...
Page 366 - Failing to be there when promised or rushing through the job; Failing to Be There When Promised, or Rushing through the Job
Contracting When you first go into business as a consultant, you should have a contract that is created by an attorney andauthorized by your insurance carrier. Once you have the contract in a word−processing document form thatoutlines your liabilities and those of the customer, you can modify the co...
Page 367 - would only be there a week or so.; Failing to Manage Your Time
would only be there a week or so. The first day the contractor showed up, we gave him the initial payment for his work. He did a great day ofwork, removing the old flooring, vents, cabinets, toilet, and other fixtures. He said he would be back the nextday to work some more—but the next day came and ...
Page 368 - Failing to Take Responsibility; Conclusion
Failing to Take Responsibility If you realize that you failed to contract an item, you should absorb the cost if it is small. No one feels morenickeled and dimed than a person who has hired a consultant, when the consultant says he forgot to add acable and will be charging another $10 five times. Yo...
Page 369 - Required Equipment
Appendix D: Cisco 1912EN and Catalyst 5000Configuration Practice Lab Today Joe Snow, our imaginary consultant, has received a Catalyst 1912EN switch, a Catalyst 5000 with aSupervisor Engine III, and a 24−port 10/100 Ethernet module. Joe has taken both the switches out of the box and has assembled al...
Page 370 - Two Ethernet crossover cables to run between devices.; Lab Objectives; During this lab, you will complete the following tasks:
Mod MAC−Address(es) Hw Fw Sw —— ————————————————————————————————————— ———— ——————— —————————————————— 1 00−50−bd−a0−b0−00 to 00−50−bd−a0−b3−ff 2.0 3.1.2 5.5(2) 2 00−50−0f−b7−ff−50 to 00−50−0f−b7−ff−67 3.1 4.3(1) 5.5(2) Mod Sub−Type Sub−Model Sub−Serial Sub−Hw —— ———————— ————————— —————————— —————— ...
Page 371 - Possible Solution; The 1912 Basic Configuration; To configure the Cisco Catalyst 1912EN, follow these steps:
Figure D.1: The sample configuration. Possible Solution More than one solution exists to any problem; however, here is the suggested solution to configuring theCisco Catalyst 1912EN, the Cisco Catalyst 5000, and the Cisco 2620 trunked interface. The 1912 Basic Configuration To configure the Cisco Ca...
Page 373 - The Catalyst 5000 Basic Configuration
1912EN(config)#vtp domain Coriolis 1912EN(config)#vtp domain server 1912EN(config)# exit Note The configuration on the 1912EN is saved automatically, so you do not need to save the configuration. The Catalyst 5000 Basic Configuration To configure the Cisco Catalyst 5000 10/100 Ethernet module and Su...
Page 374 - Configuring the Cisco 2621 Interface for ISL Trunking; To configure the Cisco 2621 interface, follow these steps:
Port(s) 2/24 trunk mode set to on. Port(s) 2/24 trunk type set to isl. 2000 Oct 19 12:32:46 %DTP−5−TRUNKPORTON:Port 2/24 Enable this switch to be a VTP client for the Coriolis VTP domain. By doing this step you willpropagate VLAN information to and from the 1912EN switch: Catalyst5000> (enable) s...
Page 375 - Appendix E: Switch Features; Access Layer Switches
Appendix E: Switch Features This appendix is dedicated to helping you determine which switch needs to be placed in your network. If thewrong switch is placed in each point in your network the load can cause severe problems, includingbottlenecks or load failures. We will break down the switches into ...
Page 378 - Cisco Catalyst 3500 Series XL
Expansion slots 0 0 2 0 Enterprise Edition Yes Yes Yes Yes Standard Edition No No No No Backplane 1.2Gbps 1.2Gbps 1.2Gbps 24Gbps Flash 4MB 8MB 12MB 0 RAM 20MB 32MB 64MB NA Modularity No No Yes NA Forwarding rate 1 million pps 1 million pps 1 million pps 18 million pps Max VLANs 1,024 1,024 1,024 N/A...
Page 380 - Key Features and Benefits; Distribution Layer Switches
Key Features and Benefits The Catalyst 3900 has the following features: Twenty shielded Token Ring ports for 150−ohm shielded twisted pair (STP) or 100−ohm unshieldedtwisted pair (UTP) connectivity • FlexSlot accommodating two expansion modules or one double−wide module for future expansion • Nine−p...
Page 381 - Key Features
Catalyst 4000 series • Catalyst 5000 series • Catalyst 6000 series • Cisco Catalyst 4000 Series The Catalyst 4000 series provides very fast and intelligent Layer 2 switching services using a 24Gbpsswitching fabric. It is used in Ethernet networks utilizing 10−, 100−, and 100Mbps switching. Let’s tak...
Page 383 - Core Layer/WAN Switches
switching in distribution and server−aggregation environments. The Catalyst 6000 family complements theCatalyst 5000 series and 8500 series switches. The Catalyst 6000 family is capable of scaling bandwidth from T1 to OC−192 in the WAN/MAN, and fromEthernet to 10 Gigabit Ethernet in the LAN. The Cat...
Page 385 - Low−Delay, Code−Excited Linear Prediction (LD−CELP) at 16Kbps
Low−Delay, Code−Excited Linear Prediction (LD−CELP) at 16Kbps • Conjugate−Structured, Algebraic Code−Excited Linear Prediction (CS−ACELP) at 8Kbps • The IGX voice interfaces also support the VAD silence suppression technique, which sends cells on the trunkonly when there is something to send. With m...
Page 386 - BPX 8680 Universal Service Node
Table E.12: The key features of the Cisco Catalyst 8510 and 8540. Feature 8510 8540 Modular slots 5 13 Forwarding rate 6 million pps 24 million pps Backplane 10Gbps 40Gbps BPX 8600 Series The BPX 8600 series provides a scalable set of solutions delivering ATM, Frame Relay, SNA, voice, andcircuit emu...
Page 388 - 2000 Series Gigabit Switch Routers
The MGX 8800 RPM also supports MPLS. It can act as a label edge router or label switch router. It alsosupports MPLS−VPNs via mulitprotocol BGP extentions, VPN route−target extended BGP communityattributes, MPLS forwarding across backbone, and multiple routing/forwarding instances on the provider edg...
Page 390 - then forwards the frame out all the ports.
then forwards the frame out all the ports. American National Standards Institute (ANSI) The organization that publishes standards for communications, programming languages, andnetworking. ANDing The process of comparing the bits of an IP address with the bits in a subnet mask to determine how apacke...
Page 393 - A node that requests a service from another node on a network.
support CDP. Cisco Express Forwarding (CEF) Used in the CEF ASIC (CEFA) and Distributed Cisco Express Forwarding (dCEF) ASIC, Cisco’snewest ASICs. These ASICs, which are used in Cisco’s high−end devices, are the most functional andefficient ASICs in the Cisco product line. They use a CEF search engi...
Page 396 - E−F; A group that specifies electrical transmission standards.
dumb terminal An end−user station that can access another computer or switch but cannot provide any processing atthe local level. Dynamic Host Configuration Protocol (DHCP) A protocol that provides an IP address to requesting nodes on the network. Dynamic ISL A protocol that performs trunking negoti...
Page 397 - IEEE 802.3 specification for data transfers of up to 100Mbps.
A connection used on the Catalyst 5000 family of switches. It allows as many as seven Ethernet linksto be bundled and load−balanced frame by frame to provide up to 800Mbps of bandwidth. It canutilize half−duplex or full−duplex links. Fast Ethernet IEEE 802.3 specification for data transfers of up to...
Page 398 - A backup method in which every file on the hard drive is copied.; G−I; One billion bits or one thousand megabits.
A Data Link layer switching protocol used across multiple virtual circuits of a common carrier, givingthe end user the appearance of a dedicated line. frame tagging A VLAN implementation method used to add VLAN information to data frames. As a frame entersthe switch, it is tagged with VLAN informati...
Page 400 - A hub that contains some management or monitoring capability.
Standard for inserting a frame tag VLAN identifier in the frame header. As a frame enters theswitching fabric, it is tagged with additional information regarding the VLAN properties. The tagremains in the frame as it is forwarded between switches and is removed prior to exiting the accesslink to the...
Page 401 - The unique address used to identify a node in the network.; K−L
internetwork A group of networks that are connected by routers or other connectivity devices so that the networksfunction as one network. Internetwork Operating System (IOS) Cisco’s proprietary operating system, used in its routers and switches. Internetwork Packet Exchange (IPX) The Network−layer p...
Page 402 - A device used for loopback testing.; M−N
A broadcast on the local network, looking for the IP address of the destination host. local service Service where the device supplying the service resides on the same subnet as the device requesting theservice. Local Target Logic (LTL) A feature of some line modules that assists the EARL in making f...
Page 404 - O−P; The current analog public telephone system. Also known as the PSTN.
A protocol that allows all network equipment to synchronize the date and time on the private orinternetwork environment. network−to−network interface (NNI) An interface that provides connectivity between two ATM switches. non−blocking A condition in which the fabric contains more bandwidth than the ...
Page 405 - is the common modem connection used for Internet dial−up.
is the common modem connection used for Internet dial−up. Point−To−Point Tunneling Protocol (PPTP) A protocol that encapsulates private network data in IP packets. These packets are transmitted oversynchronous and asynchronous circuits to hide the underlying routing and switching infrastructure ofth...
Page 406 - Q−R
customers, which remains analog. Q−R Quality of Service (QoS) A guarantee of a particular level of service for a connection. QoS uses queuing and other methods toguarantee that bandwidth is available for a certain protocol, application, or address. QoS is importantfor implementing applications such ...
Page 407 - The dialog that exists between two computers.
Route Switch Module (RSM) Cisco’s first multiprotocol multilayer switch module, which utilizes the full support of the Cisco IOSfor performing Layer 3 routing from a slot internally on a Layer 2 switch. This module provides forinterVLAN connectivity. Routing Information Field (RIF) A field on Source...
Page 408 - A FDDI device that has only a single connection to a single DAC.
the same community. Simple Network Management Protocol (SNMP) trap An SNMP protocol utility that sends out an alarm in an identified community notifying members ofthe community that some network activity differs from the established threshold, as defined by theadministrator. Simple Server Redundancy...
Page 409 - See Transmission Control Protocol/Internet Protocol.
A 12−digit number that is used to uniquely identify each device on an IPX network. storage area network A subnetwork of storage devices, usually found on high−speed networks and shared by all servers onthe network. store−and−forward A fast packet−switching method that produces a higher latency than ...
Page 410 - A type of cable that uses multiple twisted pairs of copper wire.
An organization that develops standards with the EIA (Electronics Industries Association) fortelecommunications technologies. Telnet Standard terminal−emulation protocol in the TCP/IP protocol stack. It is used to perform terminalemulation over TCP/IP via remote terminal connections, enabling users ...
Page 411 - U−X; unicast
U−X unicast A frame in which the destination MAC address specifies the single destination computer. Unicast canbe summarized as direct network traffic between two individual nodes. unshielded twisted−pair (UTP) A type of cable that uses multiple twisted pairs of copper wire in a casing that does not...