Document Outline

• Section I: Getting Started
  • Chapter 1: Introduction
    • Key Features
    • Description of Software Features
    • System Defaults
  • Chapter 2: Initial Configuration
    • Connecting to the Switch
      • Configuration Options
      • Required Connections
      • Remote Connections
    • Basic Configuration
      • Console Connection
      • Setting Passwords
      • Setting an IP Address
        • Manual Configuration
        • Dynamic Configuration
      • Enabling SNMP Management Access
        • Community Strings (for SNMP version 1 and 2c clients)
        • Trap Receivers
        • Configuring Access for SNMP Version 3 Clients
    • Managing System Files
      • Saving Configuration Settings
• Section II: Switch Management
  • Chapter 3: Configuring the Switch
    • Using the Web Interface
    • Navigating the Web Browser Interface
      • Home Page
      • Configuration Options
      • Panel Display
      • Main Menu
  • Chapter 4: Basic System Settings
    • Displaying System Information
    • Displaying Switch Hardware/Software Versions
    • Displaying Bridge Extension Capabilities
    • Configuring Support for Jumbo Frames
    • Renumbering the Stack
    • Resetting the System
  • Chapter 5: Setting an IP Address
    • Setting the Switch’s IP Address (IP Version 4)
      • Manual Configuration
      • Using DHCP/BOOTP
    • Setting the Switch’s IP Address (IP Version 6)
      • Configuring an IPv6 Address
      • Configuring an IPv6 General Network Prefix
      • Configuring the Neighbor Detection Protocol and Static Entries
  • Chapter 6: Managing System Files
    • Managing Firmware
      • Downloading System Software from a Server
    • Saving or Restoring Configuration Settings
      • Downloading Configuration Settings from a Server
  • Chapter 7: Console Port Settings
  • Chapter 8: Telnet Settings
  • Chapter 9: Configuring Event Logging
    • System Log Configuration
    • Remote Log Configuration
    • Displaying Log Messages
    • Sending Simple Mail Transfer Protocol Alerts
  • Chapter 10: Setting the System Clock
    • Configuring SNTP
    • Setting the Time Zone
  • Chapter 11: Simple Network Management Protocol
    • SNMP Overview
    • Enabling the SNMP Agent
    • Setting Community Access Strings
    • Specifying Trap Managers and Trap Types
    • Configuring SNMPv3 Management Access
      • Setting a Local Engine ID
      • Specifying a Remote Engine ID
      • Configuring SNMPv3 Users
      • Configuring Remote SNMPv3 Users
      • Configuring SNMPv3 Groups
      • Setting SNMPv3 Views
  • Chapter 12: User Authentication
    • Configuring User Accounts
    • Configuring Local/Remote Logon Authentication
    • Configuring HTTPS
      • Replacing the Default Secure-site Certificate
    • Configuring the Secure Shell
      • Generating the Host Key Pair
      • Configuring the SSH Server
    • Filtering IP Addresses for Management Access
  • Chapter 13: Configuring Port Security
  • Chapter 14: Configuring 802.1X Port Authentication
    • Displaying 802.1X Global Settings
    • Configuring 802.1X Global Settings
    • Configuring Port Settings for 802.1X
    • Displaying 802.1X Statistics
  • Chapter 15: Access Control Lists
    • Overview
    • Setting an ACL Name and Type
    • Configuring a Standard IPv4 ACL
    • Configuring an Extended IPv4 ACL
    • Configuring a MAC ACL
    • Configuring a Standard IPv6 ACL
    • Configuring an Extended IPv6 ACL
    • Binding a Port to an Access Control List
  • Chapter 16: Port Configuration
    • Displaying Connection Status
    • Configuring Interface Connections
    • Showing Port Statistics
  • Chapter 17: Creating Trunk Groups
    • Statically Configuring a Trunk
    • Setting a Load-Balance Mode for Trunks
    • Enabling LACP on Selected Ports
    • Configuring LACP Parameters
    • Displaying LACP Port Counters
    • Displaying LACP Settings and Status for the Local Side
    • Displaying LACP Settings and Status for the Remote Side
  • Chapter 18: Broadcast Storm Control
    • Setting Broadcast Storm Thresholds
  • Chapter 19: Configuring Port Mirroring
  • Chapter 20: Configuring Rate Limits
  • Chapter 21: Address Table Settings
    • Setting Static Addresses
    • Displaying the Address Table
    • Changing the Aging Time
  • Chapter 22: Spanning Tree Algorithm Configuration
    • Overview
    • Displaying Global Settings
    • Configuring Global Settings
    • Displaying Interface Settings
    • Configuring Interface Settings
    • Configuring Multiple Spanning Trees
    • Displaying Interface Settings for MSTP
    • Configuring Interface Settings for MSTP
  • Chapter 23: VLAN Configuration
    • Assigning Ports to VLANs
    • Enabling or Disabling GVRP (Global Setting)
    • Displaying Basic VLAN Information
    • Displaying Current VLANs
    • Creating VLANs
    • Adding Static Members to VLANs (VLAN Index)
    • Adding Static Members to VLANs (Port Index)
    • Configuring VLAN Behavior for Interfaces
    • Configuring IEEE 802.1Q Tunneling
      • Enabling QinQ Tunneling on the Switch
      • Adding an Interface to a QinQ Tunnel
  • Chapter 24: Configuring Private VLANs
    • Enabling Private VLANs
    • Configuring Uplink and Downlink Ports
  • Chapter 25: Configuring Protocol-Based VLANs
    • Configuring Protocol Groups
    • Mapping Protocols to VLANs
  • Chapter 26: Class of Service Configuration
    • Layer 2 Queue Settings
      • Setting the Default Priority for Interfaces
      • Mapping CoS Values to Egress Queues
      • Selecting the Queue Mode
      • Setting the Service Weight for Traffic Classes
    • Layer 3/4 Priority Settings
      • Mapping Layer 3/4 Priorities to CoS Values
      • Selecting IP Precedence/DSCP Priority
      • Mapping IP Precedence
      • Mapping DSCP Priority
      • Mapping IP Port Priority
  • Chapter 27: Quality of Service
    • Configuring Quality of Service Parameters
    • Configuring a Class Map
    • Creating QoS Policies
    • Attaching a Policy Map to Ingress Queues
  • Chapter 28: Multicast Filtering
    • Layer 2 IGMP (Snooping and Query)
      • Configuring IGMP Snooping and Query Parameters
      • Displaying Interfaces Attached to a Multicast Router
      • Specifying Static Interfaces for a Multicast Router
      • Displaying Port Members of Multicast Services
      • Assigning Ports to Multicast Services
  • Chapter 29: Configuring Domain Name Service
    • Configuring General DNS Service Parameters
    • Configuring Static DNS Host to Address Entries
    • Displaying the DNS Cache
  • Chapter 30: Switch Clustering
    • Cluster Configuration
    • Cluster Member Configuration
    • Cluster Member Information
    • Cluster Candidate Information
• Section III: Command Line Interface
  • Chapter 31: Using the Command Line Interface
    • Accessing the CLI
      • Console Connection
      • Telnet Connection
    • Entering Commands
      • Keywords and Arguments
      • Minimum Abbreviation
      • Command Completion
      • Getting Help on Commands
        • Showing Commands
      • Partial Keyword Lookup
      • Negating the Effect of Commands
      • Using Command History
      • Understanding Command Modes
      • Exec Commands
      • Configuration Commands
      • Command Line Processing
  • Chapter 32: CLI Command Groups
  • Chapter 33: General Commands
    • enable
    • disable
    • configure
    • show history
    • prompt
    • end
    • exit
    • quit
  • Chapter 34: System Management Commands
    • hostname
    • reload
    • switch renumber
    • jumbo frame
    • show startup-config
    • show running-config
    • show system
    • show users
    • show version
  • Chapter 35: File Management Commands
    • copy
    • delete
    • dir
    • whichboot
    • boot system
  • Chapter 36: Line Commands
    • line
    • login
    • password
    • timeout login response
    • exec-timeout
    • password-thresh
    • silent-time
    • databits
    • parity
    • speed
    • stopbits
    • disconnect
    • show line
  • Chapter 37: Event Logging Commands
    • logging on
    • logging history
    • logging host
    • logging facility
    • logging trap
    • clear log
    • show logging
    • show log
  • Chapter 38: SMTP Alert Commands
    • logging sendmail host
    • logging sendmail level
    • logging sendmail source-email
    • logging sendmail destination-email
    • logging sendmail
    • show logging sendmail
  • Chapter 39: Time Commands
    • sntp client
    • sntp server
    • sntp poll
    • show sntp
    • clock timezone
    • calendar set
    • show calendar
  • Chapter 40: SNMP Commands
    • snmp-server
    • show snmp
    • snmp-server community
    • snmp-server contact
    • snmp-server location
    • snmp-server host
    • snmp-server enable traps
    • snmp-server engine-id
    • show snmp engine-id
    • snmp-server view
    • show snmp view
    • snmp-server group
    • show snmp group
    • snmp-server user
    • show snmp user
  • Chapter 41: User Authentication Commands
    • User Account Commands
      • username
      • enable password
    • Authentication Sequence
      • authentication login
      • authentication enable
    • RADIUS Client
      • radius-server host
      • radius-server port
      • radius-server key
      • radius-server retransmit
      • radius-server timeout
      • show radius-server
    • TACACS+ Client
      • tacacs-server host
      • tacacs-server port
      • tacacs-server key
      • show tacacs-server
    • Web Server Commands
      • ip http port
      • ip http server
      • ip http secure-server
      • ip http secure-port
    • Telnet Server Commands
      • ip telnet server
    • Secure Shell Commands
      • ip ssh server
      • ip ssh timeout
      • ip ssh authentication-retries
      • ip ssh server-key size
      • delete public-key
      • ip ssh crypto host-key generate
      • ip ssh crypto zeroize
      • ip ssh save host-key
      • show ip ssh
      • show ssh
      • show public-key
    • IP Filter Commands
      • management
      • show management
  • Chapter 42: Port Security Commands
    • port security
  • Chapter 43: 802.1X Port Authentication
    • dot1x system-auth-control
    • dot1x default
    • dot1x max-req
    • dot1x port-control
    • dot1x operation-mode
    • dot1x re-authenticate
    • dot1x re-authentication
    • dot1x timeout quiet-period
    • dot1x timeout re-authperiod
    • dot1x timeout tx-period
    • show dot1x
  • Chapter 44: Access Control List Commands
    • IPv4 ACLs
      • access-list ip
      • permit, deny (Standard IPv4 ACL)
      • permit, deny (Extended IPv4 ACL)
      • show ip access-list
      • ip access-group
      • show ip access-group
    • IPv6 ACLs
      • access-list ipv6
      • permit, deny (Standard IPv6 ACL)
      • permit, deny (Extended IPv6 ACL)
      • show ipv6 access-list
      • ipv6 access-group
      • show ipv6 access-group
    • MAC ACLs
      • access-list mac
      • permit, deny (MAC ACL)
      • show mac access-list
      • mac access-group
      • show mac access-group
    • ACL Information
      • show access-list
      • show access-group
  • Chapter 45: Interface Commands
    • interface
    • description
    • speed-duplex
    • negotiation
    • capabilities
    • flowcontrol
    • media-type
    • shutdown
    • clear counters
    • show interfaces status
    • show interfaces counters
    • show interfaces switchport
  • Chapter 46: Link Aggregation Commands
    • channel-group
    • port channel load-balance
    • lacp
    • lacp system-priority
    • lacp admin-key (Ethernet Interface)
    • lacp admin-key (Port Channel)
    • lacp port-priority
    • show lacp
    • show port-channel load-balance
  • Chapter 47: Broadcast Storm Control Commands
    • switchport broadcast packet-rate
  • Chapter 48: Mirror Port Commands
    • port monitor
    • show port monitor
  • Chapter 49: Rate Limit Commands
    • rate-limit
  • Chapter 50: Address Table Commands
    • mac-address-table static
    • clear mac-address-table dynamic
    • show mac-address-table
    • mac-address-table aging-time
    • show mac-address-table aging-time
  • Chapter 51: Spanning Tree Commands
    • spanning-tree
    • spanning-tree mode
    • spanning-tree forward-time
    • spanning-tree hello-time
    • spanning-tree max-age
    • spanning-tree priority
    • spanning-tree pathcost method
    • spanning-tree transmission-limit
    • spanning-tree mst-configuration
    • mst vlan
    • mst priority
    • name
    • revision
    • max-hops
    • spanning-tree spanning-disabled
    • spanning-tree cost
    • spanning-tree port-priority
    • spanning-tree edge-port
    • spanning-tree portfast
    • spanning-tree link-type
    • spanning-tree mst cost
    • spanning-tree mst port-priority
    • spanning-tree protocol-migration
    • show spanning-tree
    • show spanning-tree mst configuration
  • Chapter 52: VLAN Commands
    • GVRP and Bridge Extension Commands
      • bridge-ext gvrp
      • show bridge-ext
      • switchport gvrp
      • show gvrp configuration
      • garp timer
      • show garp timer
    • Editing VLAN Groups
      • vlan database
      • vlan
    • Configuring VLAN Interfaces
      • interface vlan
      • switchport mode
      • switchport acceptable-frame-types
      • switchport ingress-filtering
      • switchport native vlan
      • switchport allowed vlan
      • switchport forbidden vlan
    • Configuring IEEE 802.1Q Tunneling
      • dot1q-tunnel system-tunnel-control
      • switchport dot1q-tunnel mode
      • switchport dot1q-tunnel tpid
      • show dot1q-tunnel
    • Displaying VLAN Information
      • show vlan
  • Chapter 53: Private VLAN Commands
    • pvlan
    • show pvlan
  • Chapter 54: Protocol-based VLAN Commands
    • protocol-vlan protocol-group (Configuring Groups)
    • protocol-vlan protocol-group (Configuring Interfaces)
    • show protocol-vlan protocol-group
    • show interfaces protocol-vlan protocol-group
  • Chapter 55: Class of Service Commands
    • Priority Commands (Layer 2)
      • queue mode
      • switchport priority default
      • queue bandwidth
      • queue cos-map
      • show queue mode
      • show queue bandwidth
      • show queue cos-map
    • Priority Commands (Layer 3 and 4)
      • map ip port (Global Configuration)
      • map ip port (Interface Configuration)
      • map ip precedence (Global Configuration)
      • map ip precedence (Interface Configuration)
      • map ip dscp (Global Configuration)
      • map ip dscp (Interface Configuration)
      • show map ip port
      • show map ip precedence
      • show map ip dscp
  • Chapter 56: Quality of Service Commands
    • class-map
    • match
    • policy-map
    • class
    • set
    • police
    • service-policy
    • show class-map
    • show policy-map
    • show policy-map interface
  • Chapter 57: Multicast Filtering Commands
    • IGMP Snooping Commands
      • ip igmp snooping
      • ip igmp snooping vlan static
      • ip igmp snooping version
      • show ip igmp snooping
      • show mac-address-table multicast
    • IGMP Query Commands
      • ip igmp snooping querier
      • ip igmp snooping query-count
      • ip igmp snooping query-interval
      • ip igmp snooping query-max