Document Outline

• Section I Getting Started
  • Chapter 1 Introduction
    • Key Features
    • Description of Software Features
    • System Defaults
  • Chapter 2 Initial Configuration
    • Connecting to the Switch
      • Configuration Options
      • Required Connections
      • Remote Connections
    • Basic Configuration
      • Console Connection
      • Setting Passwords
      • Setting an IP Address
        • Manual Configuration
        • Dynamic Configuration
      • Enabling SNMP Management Access
        • Community Strings (for SNMP version 1 and 2c clients)
        • Trap Receivers
        • Configuring Access for SNMP Version 3 Clients
    • Managing System Files
      • Saving Configuration Settings
• Section II Switch Management
  • Chapter 3 Configuring the Switch
    • Using the Web Interface
    • Navigating the Web Browser Interface
      • Home Page
      • Configuration Options
      • Panel Display
      • Main Menu
  • Chapter 4 Basic Management Tasks
    • Displaying System Information
    • Configuring the Switch for Normal Operation or Tunneling Mode
    • Configuring the Maximum Frame Size
    • Configuring Support for Jumbo Frames
    • Displaying Switch Hardware/Software Versions
    • Displaying Bridge Extension Capabilities
    • Setting the Switch’s IP Address
      • Manual Configuration
      • Using DHCP/BOOTP
    • Managing Firmware
      • Downloading System Software from a Server
    • Saving or Restoring Configuration Settings
      • Downloading Configuration Settings from a Server
    • Console Port Settings
    • Telnet Settings
    • Configuring Event Logging
      • System Log Configuration
      • Remote Log Configuration
      • Displaying Log Messages
      • Sending Simple Mail Transfer Protocol Alerts
    • Resetting the System
    • Setting the System Clock
      • Configuring SNTP
      • Setting the Time Zone
  • Chapter 5 Simple Network Management Protocol
    • Enabling the SNMP Agent
    • Setting Community Access Strings
    • Specifying Trap Managers and Trap Types
    • Configuring SNMPv3 Management Access
      • Setting a Local Engine ID
      • Specifying a Remote Engine ID
      • Configuring SNMPv3 Users
      • Configuring Remote SNMPv3 Users
      • Configuring SNMPv3 Groups
      • Setting SNMPv3 Views
  • Chapter 6 User Authentication
    • Configuring User Accounts
    • Configuring Local/Remote Logon Authentication
    • Configuring HTTPS
      • Replacing the Default Secure-site Certificate
    • Configuring the Secure Shell
      • Generating the Host Key Pair
      • Configuring the SSH Server
    • Configuring 802.1X Port Authentication
      • Displaying 802.1X Global Settings
      • Configuring 802.1X Global Settings
      • Configuring Port Settings for 802.1X
      • Displaying 802.1X Statistics
    • Filtering IP Addresses for Management Access
  • Chapter 7 Client Security
    • Configuring Port Security
  • Chapter 8 Access Control Lists
    • Configuring Access Control Lists
      • Setting the ACL Name and Type
      • Configuring a Standard ACL
      • Configuring an Extended ACL
      • Configuring a MAC ACL
      • Configuring ACL Masks
        • Specifying the Mask Type
        • Configuring an IP ACL Mask
        • Configuring a MAC ACL Mask
    • Binding a Port to an Access Control List
  • Chapter 9 Port Configuration
    • Displaying Connection Status
    • Configuring Interface Connections
    • Creating Trunk Groups
      • Statically Configuring a Trunk
      • Enabling LACP on Selected Ports
      • Configuring LACP Parameters
      • Displaying LACP Port Counters
      • Displaying LACP Settings and Status for the Local Side
      • Displaying LACP Settings and Status for the Remote Side
    • Setting Broadcast Storm Thresholds
    • Configuring Port Mirroring
    • Configuring Rate Limits
    • Showing Port Statistics
  • Chapter 10 Address Table Settings
    • Setting Static Addresses
    • Displaying the Address Table
    • Changing the Aging Time
  • Chapter 11 Spanning Tree Algorithm
    • Displaying Global Settings
    • Configuring Global Settings
    • Displaying Interface Settings
    • Configuring Interface Settings
    • Configuring Multiple Spanning Trees
    • Displaying Interface Settings for MSTP
    • Configuring Interface Settings for MSTP
  • Chapter 12 VLAN Configuration
    • IEEE 802.1Q VLANs
      • Enabling or Disabling GVRP (Global Setting)
      • Displaying Basic VLAN Information
      • Displaying Current VLANs
      • Creating VLANs
      • Adding Static Members to VLANs (VLAN Index)
      • Adding Static Members to VLANs (Port Index)
      • Configuring VLAN Behavior for Interfaces
    • Configuring IEEE 802.1Q Tunneling
      • Adding an Interface to a QinQ Tunnel
    • Configuring Private VLANs
      • Enabling Private VLANs
      • Configuring Uplink and Downlink Ports
    • Configuring Protocol-Based VLANs
      • Configuring Protocol Groups
      • Mapping Protocols to VLANs
  • Chapter 13 Class of Service
    • Layer 2 Queue Settings
      • Setting the Default Priority for Interfaces
      • Mapping CoS Values to Egress Queues
      • Selecting the Queue Mode
      • Setting the Service Weight for Traffic Classes
    • Layer 3/4 Priority Settings
      • Mapping Layer 3/4 Priorities to CoS Values
      • Selecting IP Precedence/DSCP Priority
      • Mapping IP Precedence
      • Mapping DSCP Priority
      • Mapping IP Port Priority
  • Chapter 14 Quality of Service
    • Configuring Quality of Service Parameters
      • Configuring a Class Map
      • Creating QoS Policies
      • Attaching a Policy Map to Ingress Queues
  • Chapter 15 Multicast Filtering
    • Layer 2 IGMP (Snooping and Query)
      • Configuring IGMP Snooping and Query Parameters
      • Displaying Interfaces Attached to a Multicast Router
      • Specifying Static Interfaces for a Multicast Router
      • Displaying Port Members of Multicast Services
      • Assigning Ports to Multicast Services
    • Multicast VLAN Registration
      • Configuring Global MVR Settings
      • Displaying MVR Interface Status
      • Configuring MVR Interface Status
      • Displaying Port Members of Multicast Groups
      • Assigning Static Multicast Groups to Interfaces
  • Chapter 16 Domain Name Service
    • Configuring General DNS Service Parameters
    • Configuring Static DNS Host to Address Entries
    • Displaying the DNS Cache
• Section III Command Line Interface
  • Chapter 17 Overview of Command Line Interface
    • Using the Command Line Interface
      • Accessing the CLI
      • Console Connection
      • Telnet Connection
    • Entering Commands
      • Keywords and Arguments
      • Minimum Abbreviation
      • Command Completion
      • Getting Help on Commands
        • Showing Commands
      • Partial Keyword Lookup
      • Negating the Effect of Commands
      • Using Command History
      • Understanding Command Modes
      • Exec Commands
      • Configuration Commands
      • Command Line Processing
    • Command Groups
  • Chapter 18 General Commands
    • enable
    • disable
    • configure
    • show history
    • reload
    • prompt
    • end
    • exit
    • quit
  • Chapter 19 System Management Commands
    • Device Designation Commands
      • hostname
    • System Status Commands
      • show startup-config
      • show running-config
      • show system
      • show users
      • show version
    • System Mode Commands
      • system mode
      • show system mode
    • System MTU Commands
      • jumbo frame
      • system mtu
      • show system mtu
    • File Management Commands
      • copy
      • delete
      • dir
      • whichboot
      • boot system
    • Line Commands
      • line
      • login
      • password
      • timeout login response
      • exec-timeout
      • password-thresh
      • silent-time
      • databits
      • parity
      • speed
      • stopbits
      • disconnect
      • show line
    • Event Logging Commands
      • logging on
      • logging history
      • logging host
      • logging facility
      • logging trap
      • clear log
      • show logging
      • show log
    • SMTP Alert Commands
      • logging sendmail host
      • logging sendmail level
      • logging sendmail source-email
      • logging sendmail destination-email
      • logging sendmail
      • show logging sendmail
    • Time Commands
      • sntp client
      • sntp server
      • sntp poll
      • show sntp
      • clock timezone
      • calendar set
      • show calendar
  • Chapter 20 SNMP Commands
    • snmp-server
    • show snmp
    • snmp-server community
    • snmp-server contact
    • snmp-server location
    • snmp-server host
    • snmp-server enable traps
    • snmp-server engine-id
    • show snmp engine-id
    • snmp-server view
    • show snmp view
    • snmp-server group
    • show snmp group
    • snmp-server user
    • show snmp user
  • Chapter 21 User Authentication Commands
    • User Account Commands
      • username
      • enable password
    • Authentication Sequence
      • authentication login
      • authentication enable
    • RADIUS Client
      • radius-server host
      • radius-server port
      • radius-server key
      • radius-server retransmit
      • radius-server timeout
      • show radius-server
    • TACACS+ Client
      • tacacs-server host
      • tacacs-server port
      • tacacs-server key
      • show tacacs-server
    • Web Server Commands
      • ip http port
      • ip http server
      • ip http secure-server
      • ip http secure-port
    • Telnet Server Commands
      • ip telnet server
    • Secure Shell Commands
      • ip ssh server
      • ip ssh timeout
      • ip ssh authentication-retries
      • ip ssh server-key size
      • delete public-key
      • ip ssh crypto host-key generate
      • ip ssh crypto zeroize
      • ip ssh save host-key
      • show ip ssh
      • show ssh
      • show public-key
    • 802.1X Port Authentication
      • dot1x system-auth-control
      • dot1x default
      • dot1x max-req
      • dot1x port-control
      • dot1x operation-mode
      • dot1x re-authenticate
      • dot1x re-authentication
      • dot1x timeout quiet-period
      • dot1x timeout re-authperiod
      • dot1x timeout tx-period
      • show dot1x
    • Management IP Filter Commands
      • management
      • show management
  • Chapter 22 Client Security Commands
    • Port Security Commands
      • port security
    • IP Source Guard Commands
      • ip source-guard
      • ip source-guard binding
      • show ip source-guard
      • show ip source-guard binding
    • DHCP Snooping Commands
      • ip dhcp snooping
      • ip dhcp snooping vlan
      • ip dhcp snooping binding
      • ip dhcp snooping verify mac-address
      • ip dhcp snooping database flash
      • ip dhcp snooping trust
      • show ip dhcp snooping
      • show ip dhcp snooping binding
  • Chapter 23 Access Control List Commands
    • IP ACLs
      • access-list ip
      • permit, deny (Standard ACL)
      • permit, deny (Extended ACL)
      • show ip access-list
      • access-list ip mask-precedence
      • mask (IP ACL)
      • show access-list ip mask-precedence
      • ip access-group
      • show ip access-group
    • MAC ACLs
      • access-list mac
      • permit, deny (MAC ACL)
      • show mac access-list
      • access-list mac mask-precedence
      • mask (MAC ACL)
      • show access-list mac mask-precedence
      • mac access-group
      • show mac access-group
    • ACL Information
      • show access-list
      • show access-group
  • Chapter 24 Interface Commands
    • interface
    • description
    • speed-duplex
    • negotiation
    • capabilities
    • flowcontrol
    • media-type
    • shutdown
    • switchport packet-rate
    • switchport block
    • clear counters
    • show interfaces status
    • show interfaces counters
    • show interfaces switchport
  • Chapter 25 Link Aggregation Commands
    • channel-group
    • lacp
    • lacp system-priority
    • lacp admin-key (Ethernet Interface)
    • lacp admin-key (Port Channel)
    • lacp port-priority
    • show lacp
  • Chapter 26 Mirror Port Commands
    • port monitor
    • show port monitor
  • Chapter 27 Rate Limit Commands
    • rate-limit
    • rate-limit cos
    • show rate-limit cos
  • Chapter 28 Address Table Commands
    • mac-address-table static
    • clear mac-address-table dynamic
    • show mac-address-table
    • mac-address-table aging-time
    • show mac-address-table aging-time
  • Chapter 29 Spanning Tree Commands
    • spanning-tree
    • spanning-tree mode
    • spanning-tree forward-time
    • spanning-tree hello-time
    • spanning-tree max-age
    • spanning-tree priority
    • spanning-tree pathcost method
    • spanning-tree transmission-limit
    • spanning-tree mst-configuration
    • mst vlan
    • mst priority
    • name
    • revision
    • max-hops
    • spanning-tree spanning-disabled
    • spanning-tree cost
    • spanning-tree port-priority
    • spanning-tree edge-port
    • spanning-tree portfast
    • spanning-tree link-type
    • spanning-tree mst cost
    • spanning-tree mst port-priority
    • spanning-tree protocol-migration
    • show spanning-tree
    • show spanning-tree mst configuration
  • Chapter 30 VLAN Commands
    • GVRP and Bridge Extension Commands
      • bridge-ext gvrp
      • show bridge-ext
      • switchport gvrp
      • show gvrp configuration
      • garp timer
      • show garp timer
    • Editing VLAN Groups
      • vlan database
      • vlan
    • Configuring VLAN Interfaces
      • interface vlan
      • switchport mode
      • switchport acceptable-frame-types
      • switchport ingress-filtering
      • switchport native vlan
      • switchport allowed vlan
      • switchport forbidden vlan
    • Displaying VLAN Information
      • show vlan
    • Configuring Private VLANs
      • pvlan
      • show pvlan
    • Configuring Protocol-based VLANs
      • protocol-vlan protocol-group (Configuring Groups)
      • protocol-vlan protocol-group (Configuring Interfaces)
      • show protocol-vlan protocol-group
      • show interfaces protocol-vlan protocol-group
    • Configuring IEEE 802.1Q Tunneling
      • switchport mode dot1q-tunnel
      • show dot1q-tunnel
      • switchport dot1q-ethertype
  • Chapter 31 Class of Service Commands
    • Priority Commands (Layer 2)
      • queue mode
      • show queue mode
      • switchport priority default
      • queue bandwidth
      • queue cos-map
      • show queue bandwidth
      • show queue cos-map
      • vlan priority
      • show vlan based priority
    • Priority Commands (Layer 3 and 4)
      • map ip port (Global Configuration)
      • map ip port (Interface Configuration)
      • map ip precedence (Global Configuration)
      • map ip precedence (Interface Configuration)
      • map ip dscp (Global Configuration)
      • map ip dscp (Interface Configuration)
      • show map ip port
      • show map ip precedence
      • show map ip dscp
  • Chapter 32 Quality of Service Commands
    • class-map
    • match
    • policy-map
    • class
    • set
    • police
    • service-policy
    • show class-map
    • show policy-map
    • show policy-map interface
  • Chapter 33 Multicast Filtering Commands
    • IGMP Snooping Commands
      • ip igmp snooping
      • ip igmp snooping vlan static
      • ip igmp snooping version
      • ip igmp snooping leave-proxy
      • ip igmp snooping immediate-leave
      • show ip igmp snooping
      • show mac-address-table multicast
    • IGMP Query Commands
      • ip igmp snooping querier
      • ip igmp snooping query-count
      • ip igmp snooping query-interval
      • ip igmp snooping query-max-response-time
      • ip igmp snooping router-port-expire-time
    • Static Multicast Routing Commands
      • ip igmp snooping vlan mrouter
      • show ip igmp snooping mrouter
    • Multicast VLAN Registration Commands
      • mvr (Global Configuration)
      • mvr (Interface Configuration)
      • show mvr
  • Chapter 34 Domain Name Service Commands
    • ip host
    • clear host
    • ip domain-name
    • ip domain-list
    • ip name-server
    • ip domain-lookup
    • show hosts
    • show dns
    • show dns cache
    • clear dns cache
  • Chapter 35 IP Interface Commands
    • Basic IP Configuration
      • ip address
      • ip default-gateway
      • ip dhcp restart
      • show ip interface
      • show ip redirects
      • show arp
      • ping
• Section IV Appendices
  • Appendix A Software Specifications
    • Software Features
    • Management Features
    • Standards
    • Management Information Bases
  • Appendix B Troubleshooting
    • Problems Accessing the Management Interface
    • Using System Logs
  • Glossary
  • Index