Document Outline

• Chapter 1 Introduction
  • Key Features
  • Description of Software Features
  • System Defaults
• Chapter 2 Initial Configuration
  • Connecting to the Switch
    • Configuration Options
    • Required Connections
    • Remote Connections
  • Basic Configuration
    • Console Connection
    • Setting Passwords
    • Setting an IP Address
      • Manual Configuration
      • Dynamic Configuration
    • Enabling SNMP Management Access
      • Community Strings (for SNMP version 1 and 2c clients)
      • Trap Receivers
      • Configuring Access for SNMP Version 3 Clients
    • Saving Configuration Settings
  • Managing System Files
• Chapter 3 Configuring the Switch
  • Using the Web Interface
  • Navigating the Web Browser Interface
    • Home Page
    • Configuration Options
  • Panel Display
  • Main Menu
  • Basic Configuration
    • Displaying System Information
    • Displaying Switch Hardware/Software Versions
    • Displaying Bridge Extension Capabilities
    • Setting the Switch’s IP Address
      • Manual Configuration
      • Using DHCP/BOOTP
    • Enabling Jumbo Frames
    • Managing Firmware
      • Downloading System Software from a Server
    • Saving or Restoring Configuration Settings
      • Downloading Configuration Settings from a Server
    • Console Port Settings
    • Telnet Settings
    • Configuring Event Logging
      • Displaying Log Messages
      • System Log Configuration
      • Remote Log Configuration
      • Simple Mail Transfer Protocol
    • Resetting the System
    • Setting the System Clock
      • Configuring SNTP
      • Setting the Time Zone
  • Simple Network Management Protocol
    • Enabling the SNMP Agent
    • Setting Community Access Strings
    • Specifying Trap Managers and Trap Types
    • Configuring SNMPv3 Management Access
      • Setting the Local Engine ID
      • Specifying a Remote Engine ID
      • Configuring SNMPv3 Users
      • Configuring Remote SNMPv3 Users
      • Configuring SNMPv3 Groups
      • Setting SNMPv3 Views
  • User Authentication
    • Configuring User Accounts
    • Configuring Local/Remote Logon Authentication
    • Configuring HTTPS
      • Replacing the Default Secure-site Certificate
    • Configuring the Secure Shell
      • Configuring the SSH settings
      • Generating the Host Key Pair
      • Generating the User Public Key Pair
    • Configuring Port Security
    • Configuring 802.1X Port Authentication
      • Displaying 802.1X Global Settings
      • Configuring 802.1X Global Settings
      • Configuring Port Settings for 802.1X
      • Displaying 802.1X Statistics
  • Access Control Lists
    • Configuring Access Control Lists
      • Setting the ACL Name and Type
      • Configuring a Standard IP ACL
      • Configuring an Extended IP ACL
      • Configuring a MAC ACL
    • Binding a Port to an Access Control List
  • Filtering Management Access
  • Port Configuration
    • Displaying Connection Status
    • Configuring Interface Connections
    • Creating Trunk Groups
      • Statically Configuring a Trunk
      • Enabling LACP on Selected Ports
      • Configuring LACP Parameters
      • Displaying LACP Port Counters
      • Displaying LACP Settings and Status for the Local Side
      • Displaying LACP Settings and Status for the Remote Side
    • Setting Broadcast Storm Thresholds
    • Configuring Port Mirroring
    • Configuring Rate Limits
      • Rate Limit Configuration
    • Showing Port Statistics
  • Address Table Settings
    • Setting Static Addresses
    • Displaying the Address Table
    • Changing the Aging Time
  • Spanning Tree Algorithm Configuration
    • Displaying Global Settings
    • Configuring Global Settings
    • Displaying Interface Settings
    • Configuring Interface Settings
  • VLAN Configuration
    • Overview
      • Assigning Ports to VLANs
      • Forwarding Tagged/Untagged Frames
    • Displaying Basic VLAN Information
    • Displaying Current VLANs
    • Creating VLANs
    • Adding Static Members to VLANs (VLAN Index)
    • Adding Static Members to VLANs (Port Index)
    • Configuring VLAN Behavior for Interfaces
    • Configuring Private VLANs
      • Displaying Current Private VLANs
      • Configuring Private VLANs
      • Associating VLANs
      • Displaying Private VLAN Interface Information
      • Configuring Private VLAN Interfaces
    • Configuring Protocol VLANs
      • Configuring Protocol VLAN Basic Settings
      • Configuring Protocol VLAN System
  • Class of Service Configuration
    • Setting the Default Priority for Interfaces
    • Mapping CoS Values to Egress Queues
    • Enabling CoS
    • Selecting the Queue Mode
    • Setting the Service Weight for Traffic Classes
    • Mapping Layer 3/4 Priorities to CoS Values
    • Selecting IP DSCP Priority
    • Mapping DSCP Priority
  • Quality of Service
    • Configuring Quality of Service Parameters
    • Configuring a Class Map
    • Creating QoS Policies
    • Attaching a Policy Map to Ingress Queues
  • Multicast Filtering
    • Layer 2 IGMP (Snooping and Query)
      • Configuring IGMP Snooping and Query Parameters
      • Enabling IGMP Filter Status
      • Enabling IGMP Immediate Leave
      • Displaying Interfaces Attached to a Multicast Router
      • Specifying Static Interfaces for a Multicast Router
      • Displaying Port Members of Multicast Services
      • Assigning Ports to Multicast Services
    • IGMP Filtering and Throttling
      • Configuring IGMP Profile Group
      • Configuring IGMP Filter and Throttling
  • Multicast VLAN Registration
    • Configuring Global MVR Settings
    • Displaying MVR Interface Status
    • Displaying Port Members of Multicast Groups
    • Configuring MVR Interface Status
    • Assigning Static Multicast Groups to Interfaces
  • DHCP Snooping
    • DHCP Snooping Configuration
    • DHCP Snooping VLAN Configuration
    • DHCP Snooping Information Option Configuration
    • DHCP Snooping Port Configuration
    • DHCP Snooping Binding Information
  • IP Source Guard
    • IP Source Guard Port Configuration
    • Static IP Source Guard Binding Configuration
    • Dynamic IP Source Guard Binding Information
  • Switch Clustering
    • Cluster Configuration
    • Cluster Member Configuration
    • Cluster Member Information
    • Cluster Candidate Information
• Chapter 4 Command Line Interface
  • Using the Command Line Interface
    • Accessing the CLI
    • Console Connection
    • Telnet Connection
  • Entering Commands
    • Keywords and Arguments
    • Minimum Abbreviation
    • Command Completion
    • Getting Help on Commands
      • Showing Commands
    • Partial Keyword Lookup
    • Negating the Effect of Commands
    • Using Command History
    • Understanding Command Modes
    • Exec Commands
    • Configuration Commands
    • Command Line Processing
  • Command Groups
  • Line Commands
    • line
    • login
    • password
    • timeout login response
    • exec-timeout
    • password-thresh
    • silent-time
    • databits
    • parity
    • speed
    • stopbits
    • disconnect
    • show line
  • General Commands
    • enable
    • disable
    • configure
    • show history
    • reload
    • end
    • exit
    • quit
  • System Management Commands
    • Device Designation Commands
      • prompt
      • hostname
    • User Access Commands
      • username
      • enable password
    • IP Filter Commands
      • management
      • show management
    • Web Server Commands
      • ip http port
      • ip http server
      • ip http secure-server
      • ip http secure-port
    • Telnet Server Commands
      • ip telnet server
      • ip telnet server port
    • Secure Shell Commands
      • ip ssh server
      • ip ssh timeout
      • ip ssh authentication-retries
      • ip ssh server-key size
      • delete public-key
      • ip ssh crypto host-key generate
      • ip ssh crypto zeroize
      • ip ssh save host-key
      • show ip ssh
      • show ssh
      • show public-key
    • Event Logging Commands
      • logging on
      • logging history
      • logging host
      • logging facility
      • logging trap
      • clear logging
      • show logging
      • show log
    • SMTP Alert Commands
      • logging sendmail host
      • logging sendmail level
      • logging sendmail source-email
      • logging sendmail destination-email
      • logging sendmail
      • show logging sendmail
    • Time Commands
      • sntp client
      • sntp server
      • sntp poll
      • show sntp
      • clock timezone
      • calendar set
      • show calendar
    • System Status Commands
      • show startup-config
      • show running-config
      • show system
      • show users
      • show version
    • Frame Size Commands
      • jumbo frame
  • Flash/File Commands
    • copy
    • delete
    • dir
    • whichboot
    • boot system
  • Authentication Commands
    • Authentication Sequence
      • authentication login
      • authentication enable
    • RADIUS Client
      • radius-server host
      • radius-server port
      • radius-server key
      • radius-server retransmit
      • radius-server timeout
      • show radius-server
    • TACACS+ Client
      • tacacs-server host
      • tacacs-server port
      • tacacs-server key
      • show tacacs-server
    • Port Security Commands
      • port security
    • 802.1X Port Authentication
      • dot1x system-auth-control
      • dot1x default
      • dot1x max-req
      • dot1x port-control
      • dot1x operation-mode
      • dot1x re-authenticate
      • dot1x re-authentication
      • dot1x timeout quiet-period
      • dot1x timeout re-authperiod
      • dot1x timeout tx-period
      • show dot1x
  • Access Control List Commands
    • IP ACLs
      • access-list ip
      • permit, deny (Standard ACL)
      • permit, deny (Extended ACL)
      • show ip access-list
      • ip access-group
      • show ip access-group
      • map access-list ip
      • show map access-list ip
    • ACL Information
      • show access-list
      • show access-group
  • SNMP Commands
    • snmp-server
    • show snmp
    • snmp-server community
    • snmp-server contact
    • snmp-server location
    • snmp-server host
    • snmp-server enable traps
    • snmp-server engine-id
    • show snmp engine-id
    • snmp-server view
    • show snmp view
    • snmp-server group
    • show snmp group
    • snmp-server user
    • show snmp user
  • Interface Commands
    • interface
    • description
    • speed-duplex
    • negotiation
    • capabilities
    • flowcontrol
    • shutdown
    • clear counters
    • show interfaces status
    • show interfaces counters
    • show interfaces switchport
  • Broadcast Commands
    • broadcast packet-rate
    • switchport broadcast
  • Mirror Port Commands
    • port monitor
    • show port monitor
  • Rate Limit Commands
    • rate-limit
  • Link Aggregation Commands
    • channel-group
    • lacp
    • lacp system-priority
    • lacp admin-key (Ethernet Interface)
    • lacp admin-key (Port Channel)
    • lacp port-priority
    • show lacp
  • Address Table Commands
    • mac-address-table static
    • clear mac-address-table dynamic
    • show mac-address-table
    • mac-address-table aging-time
    • show mac-address-table aging-time
  • Spanning Tree Commands
    • spanning-tree
    • spanning-tree mode
    • spanning-tree forward-time
    • spanning-tree hello-time
    • spanning-tree max-age
    • spanning-tree priority
    • spanning-tree pathcost method
    • spanning-tree transmission-limit
    • spanning-tree spanning-disabled
    • spanning-tree cost
    • spanning-tree port-priority
    • spanning-tree edge-port
    • spanning-tree portfast
    • spanning-tree link-type
    • spanning-tree protocol-migration
    • show spanning-tree
  • VLAN Commands
    • Editing VLAN Groups
      • vlan database
      • vlan
    • Configuring VLAN Interfaces
      • interface vlan
      • switchport mode
      • switchport acceptable-frame-types
      • switchport ingress-filtering
      • switchport native vlan
      • switchport allowed vlan
      • switchport forbidden vlan
    • Displaying VLAN Information
      • show vlan
    • Configuring Private VLANs
      • private-vlan
      • private vlan association
      • switchport mode private-vlan
      • switchport private-vlan host-association
      • switchport private-vlan mapping
      • show vlan private-vlan
  • GVRP and Bridge Extension Commands
    • bridge-ext gvrp
    • show bridge-ext
    • switchport gvrp
    • show gvrp configuration
    • garp timer
    • show garp timer
  • Priority Commands
    • Priority Commands (Layer 2)
      • queue mode
      • switchport priority default
      • queue bandwidth
      • queue cos-map
      • show queue mode
      • show queue bandwidth
      • show queue cos-map
    • Priority Commands (Layer 3 and 4)
      • map ip dscp (Global Configuration)
      • map ip dscp (Interface Configuration)
      • show map ip dscp
  • Multicast Filtering Commands
    • IGMP Snooping Commands
      • ip igmp snooping
      • ip igmp snooping vlan static
      • ip igmp snooping version
      • ip igmp snooping immediate-leave
      • show ip igmp snooping
      • show mac-address-table multicast
    • IGMP Query Commands (Layer 2)
      • ip igmp snooping querier
      • ip igmp snooping query-count
      • ip igmp snooping query-interval
      • ip igmp snooping query-max-response-time
      • ip igmp snooping router-port-expire-time
    • Static Multicast Routing Commands
      • ip igmp snooping vlan mrouter
      • show ip igmp snooping mrouter
  • IGMP Filtering and Throttling Commands
    • ip igmp filter (Global Configuration)
    • ip igmp profile
    • permit, deny
    • range
    • ip igmp filter (Interface Configuration)
    • ip igmp max-groups
    • ip igmp max-groups action
    • show ip igmp filter
    • show ip igmp profile
    • show ip igmp throttle interface
  • Multicast VLAN Registration Commands
    • mvr (Global Configuration)
    • mvr (Interface Configuration)
    • show mvr
  • IP Interface Commands
    • Basic IP Configuration
      • ip address
      • ip dhcp restart
      • ip default-gateway
      • show ip interface
      • show ip redirects
      • ping
  • IP Source Guard Commands
    • ip source-guard
    • ip source-guard binding
    • show ip source-guard
    • show ip source-guard binding
  • DHCP Snooping Commands
    • ip dhcp snooping
    • ip dhcp snooping vlan
    • ip dhcp snooping trust
    • ip dhcp snooping verify mac-address
    • ip dhcp snooping information option
    • ip dhcp snooping information policy
    • ip dhcp snooping database flash
    • show ip dhcp snooping
    • show ip dhcp snooping binding
  • Switch Cluster Commands
    • cluster
    • cluster commander
    • cluster ip-pool
    • cluster member
    • rcommand
    • show cluster
    • show cluster members
    • show cluster candidates
• Appendix A Software Specifications
  • Software Features
  • Management Features
  • Standards
  • Management Information Bases
• Appendix B Troubleshooting
  • Problems Accessing the Management Interface
  • Using System Logs
• Glossary
• Index