Document Outline

• Chapter 1 Introduction
  • Key Features
  • Description of Software Features
  • System Defaults
• Chapter 2 Initial Configuration
  • Connecting to the Switch
    • Configuration Options
    • Required Connections
    • Remote Connections
  • Stack Operations
    • Selecting the Stack Master
    • Recovering from Stack Failure or Topology Change
      • Resilient IP Interface for Management Access
  • Basic Configuration
    • Console Connection
    • Setting Passwords
    • Setting an IP Address
      • Manual Configuration
      • Dynamic Configuration
    • Enabling SNMP Management Access
      • Community Strings
      • Trap Receivers
    • Saving Configuration Settings
  • Managing System Files
• Chapter 3 Configuring the Switch
  • Using the Web Interface
  • Navigating the Web Browser Interface
    • Home Page
    • Configuration Options
    • Panel Display
  • Main Menu
  • Basic Configuration
    • Displaying System Information
    • Displaying Switch Hardware/Software Versions
    • Displaying Bridge Extension Capabilities
    • Setting the Switch’s IP Address
      • Manual Configuration
      • Using DHCP/BOOTP
    • Managing Firmware
      • Downloading System Software from a Server
    • Saving or Restoring Configuration Settings
      • Downloading Configuration Settings from a Server
    • Console Port Settings
    • Telnet Settings
    • Configuring Event Logging
      • System Log Configuration
      • Remote Log Configuration
      • Displaying Log Messages
      • Sending Simple Mail Transfer Protocol Alerts
    • Resetting the System
    • Setting the System Clock
      • Configuring SNTP
      • Setting the Time Zone
  • Simple Network Management Protocol
    • Setting Community Access Strings
    • Specifying Trap Managers and Trap Types
  • User Authentication
    • Configuring User Accounts
    • Configuring Local/Remote Logon Authentication
    • Configuring HTTPS
      • Replacing the Default Secure-site Certificate
    • Configuring the Secure Shell
      • Generating the Host Key Pair
      • Configuring the SSH Server
    • Configuring Port Security
    • Configuring 802.1X Port Authentication
      • Displaying 802.1X Global Settings
      • Configuring 802.1X Global Settings
      • Configuring Port Settings for 802.1X
      • Displaying 802.1X Statistics
    • Filtering Addresses for ManagementAccess
  • Access Control Lists
    • Configuring Access Control Lists
      • Setting the ACL Name and Type
      • Configuring a Standard IP ACL
      • Configuring an Extended IP ACL
      • Configuring a MAC ACL
    • Binding a Port to an Access Control List
  • Port Configuration
    • Displaying Connection Status
    • Configuring Interface Connections
    • Creating Trunk Groups
      • Statically Configuring a Trunk
      • Enabling LACP on Selected Ports
      • Configuring LACP Parameters
      • Displaying LACP Port Counters
      • Displaying LACP Settings and Status for the Local Side
      • Displaying LACP Settings and Status for the Remote Side
    • Setting Broadcast Storm Thresholds
    • Configuring Port Mirroring
    • Configuring Rate Limits
      • Rate Limit Granularity
      • Rate Limit Configuration
    • Showing Port Statistics
  • Address Table Settings
    • Setting Static Addresses
    • Displaying the Address Table
    • Changing the Aging Time
  • Spanning Tree Algorithm Configuration
    • Displaying Global Settings
    • Configuring Global Settings
    • Displaying Interface Settings
    • Configuring Interface Settings
  • VLAN Configuration
    • IEEE 802.1Q VLANs
      • Enabling or Disabling GVRP (Global Setting)
      • Displaying Basic VLAN Information
      • Displaying Current VLANs
      • Creating VLANs
      • Adding Static Members to VLANs (VLAN Index)
      • Adding Static Members to VLANs (Port Index)
      • Configuring VLAN Behavior for Interfaces
    • Private VLANs
      • Displaying Current Private VLANs
      • Configuring Private VLANs
      • Associating VLANs
      • Displaying Private VLAN Interface Information
      • Configuring Private VLAN Interfaces
  • Class of Service Configuration
    • Layer 2 Queue Settings
      • Setting the Default Priority for Interfaces
      • Mapping CoS Values to Egress Queues
      • Selecting the Queue Mode
      • Setting the Service Weight for Traffic Classes
    • Layer 3/4 Priority Settings
      • Mapping Layer 3/4 Priorities to CoS Values
      • Selecting IP Precedence/DSCP Priority
      • Mapping IP Precedence
      • Mapping DSCP Priority
      • Mapping IP Port Priority
      • Mapping CoS Values to ACLs
  • Multicast Filtering
    • Layer 2 IGMP (Snooping and Query)
      • Configuring IGMP Snooping and Query Parameters
      • Displaying Interfaces Attached to a Multicast Router
      • Specifying Static Interfaces for a Multicast Router
      • Displaying Port Members of Multicast Services
      • Assigning Ports to Multicast Services
• Chapter 4 Command Line Interface
  • Using the Command Line Interface
    • Accessing the CLI
    • Console Connection
    • Telnet Connection
  • Entering Commands
    • Keywords and Arguments
    • Minimum Abbreviation
    • Command Completion
    • Getting Help on Commands
    • Showing Commands
    • Partial Keyword Lookup
    • Negating the Effect of Commands
    • Using Command History
    • Understanding Command Modes
    • Exec Commands
    • Configuration Commands
    • Command Line Processing
  • Command Groups
  • Line Commands
    • line
    • login
    • password
    • timeout login response
    • exec-timeout
    • password-thresh
    • silent-time
    • databits
    • parity
    • speed
    • stopbits
    • disconnect
    • show line
  • General Commands
    • enable
    • disable
    • configure
    • show history
    • reload
    • end
    • exit
    • quit
  • System Management Commands
    • Device Designation Commands
      • prompt
      • hostname
    • User Access Commands
      • username
      • enable password
    • IP Filter Commands
      • management
      • show management
    • Web Server Commands
      • ip http port
      • ip http server
      • ip http secure-server
      • ip http secure-port
    • Telnet Server Commands
      • ip telnet port
      • ip telnet server
    • Secure Shell Commands
      • ip ssh server
      • ip ssh timeout
      • ip ssh authentication-retries
      • ip ssh server-key size
      • delete public-key
      • ip ssh crypto host-key generate
      • ip ssh crypto zeroize
      • ip ssh save host-key
      • show ip ssh
      • show ssh
      • show public-key
    • Event Logging Commands
      • logging on
      • logging history
      • logging host
      • logging facility
      • logging trap
      • clear logging
      • show logging
      • show log
    • SMTP Alert Commands
      • logging sendmail host
      • logging sendmail level
      • logging sendmail source-email
      • logging sendmail destination-email
      • logging sendmail
      • show logging sendmail
    • Time Commands
      • sntp client
      • sntp server
      • sntp poll
      • show sntp
      • clock timezone
      • calendar set
      • show calendar
    • System Status Commands
      • light unit
      • show startup-config
      • show running-config
      • show system
      • show users
      • show version
    • Frame Size Commands
      • jumbo frame
  • Flash/File Commands
    • copy
    • delete
    • dir
    • whichboot
    • boot system
  • Authentication Commands
    • Authentication Sequence
      • authentication login
      • authentication enable
    • RADIUS Client
      • radius-server host
      • radius-server port
      • radius-server key
      • radius-server retransmit
      • radius-server timeout
      • show radius-server
    • TACACS+ Client
      • tacacs-server host
      • tacacs-server port
      • tacacs-server key
      • show tacacs-server
    • Port Security Commands
      • port security
    • 802.1X Port Authentication
      • dot1x system-auth-control
      • dot1x default
      • dot1x max-req
      • dot1x port-control
      • dot1x operation-mode
      • dot1x re-authenticate
      • dot1x re-authentication
      • dot1x timeout quiet-period
      • dot1x timeout re-authperiod
      • dot1x timeout tx-period
      • show dot1x
  • Access Control List Commands
    • IP ACLs
      • access-list ip
      • permit, deny (Standard ACL)
      • permit, deny (Extended ACL)
      • show ip access-list
      • ip access-group
      • show ip access-group
      • map access-list ip
      • show map access-list ip
    • MAC ACLs
      • access-list mac
      • permit, deny (MAC ACL)
      • show mac access-list
      • mac access-group
      • show mac access-group
      • map access-list mac
      • show map access-list mac
    • ACL Information
      • show access-list
      • show access-group
  • SNMP Commands
    • snmp-server community
    • snmp-server contact
    • snmp-server location
    • snmp-server host
    • snmp-server enable traps
    • show snmp
  • Interface Commands
    • interface
    • description
    • speed-duplex
    • negotiation
    • capabilities
    • flowcontrol
    • shutdown
    • switchport broadcast packet-rate
    • clear counters
    • show interfaces status
    • show interfaces counters
    • show interfaces switchport
  • Mirror Port Commands
    • port monitor
    • show port monitor
  • Rate Limit Commands
    • rate-limit
    • rate-limit granularity
    • show rate-limit
  • Link Aggregation Commands
    • channel-group
    • lacp
    • lacp system-priority
    • lacp admin-key (Ethernet Interface)
    • lacp admin-key (Port Channel)
    • lacp port-priority
    • show lacp
  • Address Table Commands
    • mac-address-table static
    • clear mac-address-table dynamic
    • show mac-address-table
    • mac-address-table aging-time
    • show mac-address-table aging-time
  • Spanning Tree Commands
    • spanning-tree
    • spanning-tree mode
    • spanning-tree forward-time
    • spanning-tree hello-time
    • spanning-tree max-age
    • spanning-tree priority
    • spanning-tree pathcost method
    • spanning-tree transmission-limit
    • spanning-tree cost
    • spanning-tree port-priority
    • spanning-tree edge-port
    • spanning-tree portfast
    • spanning-tree link-type
    • spanning-tree protocol-migration
    • show spanning-tree
  • VLAN Commands
    • Editing VLAN Groups
      • vlan database
      • vlan
    • Configuring VLAN Interfaces
      • interface vlan
      • switchport mode
      • switchport acceptable-frame-types
      • switchport ingress-filtering
      • switchport native vlan
      • switchport allowed vlan
      • switchport forbidden vlan
    • Displaying VLAN Information
      • show vlan
    • Configuring Private VLANs
      • private-vlan
      • private vlan association
      • switchport mode private-vlan
      • switchport private-vlan host-association
      • switchport private-vlan mapping
      • show vlan private-vlan
  • GVRP and Bridge Extension Commands
    • bridge-ext gvrp
    • show bridge-ext
    • switchport gvrp
    • show gvrp configuration
    • garp timer
    • show garp timer
  • Priority Commands
    • Priority Commands (Layer 2)
      • queue mode
      • switchport priority default
      • queue bandwidth
      • queue cos-map
      • show queue mode
      • show queue bandwidth
      • show queue cos-map
    • Priority Commands (Layer 3 and 4)
      • map ip port (Global Configuration)
      • map ip port (Interface Configuration)
      • map ip precedence (Global Configuration)
      • map ip precedence (Interface Configuration)
      • map ip dscp (Global Configuration)
      • map ip dscp (Interface Configuration)
      • show map ip port
      • show map ip precedence
      • show map ip dscp
  • Multicast Filtering Commands
    • IGMP Snooping Commands
      • ip igmp snooping
      • ip igmp snooping vlan static
      • ip igmp snooping version
      • show ip igmp snooping
      • show mac-address-table multicast
    • IGMP Query Commands (Layer 2)
      • ip igmp snooping querier
      • ip igmp snooping query-count
      • ip igmp snooping query-interval
      • ip igmp snooping query-max-response-time
      • ip igmp snooping router-port-expire-time
    • Static Multicast Routing Commands
      • ip igmp snooping vlan mrouter
      • show ip igmp snooping mrouter
  • IP Interface Commands
    • ip address
    • ip dhcp restart
    • ip default-gateway
    • show ip interface
    • show ip redirects
    • ping
• Appendix A Software Specifications
  • Software Features
  • Management Features
  • Standards
  • Management Information Bases
• Appendix B Troubleshooting
  • Problems Accessing the Management Interface
  • Using System Logs
• Glossary
• Index