Cisco ME 3400G-2CS - Ethernet Access Switch Manuals

Manuals and User Guides for Cisco ME 3400G-2CS - Ethernet Access Switch. We have 2 Cisco ME 3400G-2CS - Ethernet Access Switch manuals available for free PDF download: Software Configuration Manual, Product Bulletin

Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual (885 pages)

Ethernet Access Switch

Brand: Cisco | Category: Network Router | Size: 9.82 MB

Table of Contents
4
Related Publications
34
Obtaining Documentation
35
Ordering Documentation
35
Product Documentation DVD
35
Cisco Product Security Overview
36
Documentation Feedback
36
Obtaining Technical Assistance
37
Reporting Security Problems in Cisco Products
37
Definitions of Service Request Severity
38
Submitting a Service Request
38
Obtaining Additional Publications and Information
39
Performance Features
42
Manageability Features
43
Management Options
43
Availability Features
44
Security Features
45
Switch Security
45
Vlan Features
45
Network Security
46
Quality of Service and Class of Service Features
46
Layer 2 Virtual Private Network Services
47
Layer 3 Features
47
Default Settings after Initial Switch Configuration
48
Network Configuration Examples
51
Chapter 2 Using the Command-Line Interface

55
Chapter 3 Assigning the Switch IP Address and Default Gateway

67
Chapter 4 Configuring Cisco IOS CNS Agents

85
Chapter 5 Administering the Switch

99
- Understanding the System Clock
  99
- Understanding Network Time Protocol
  99
- Configuring NTP
  101
  - Default NTP Configuration
    101
- Configuring NTP Authentication
  
  102
- Configuring NTP Associations
  
  103
- Configuring NTP Broadcast Service
  
  104
- Configuring NTP Access Restrictions
  
  105
- Configuring the Source IP Address for NTP Packets
  
  107
  - Configuring Time and Date Manually
    108
    
    Setting the System Clock
    108
    
    Configuring the Time Zone
    109
    
    Displaying the Time and Date Configuration
    109
    
    Configuring Summer Time (Daylight Saving Time)
    110
- Displaying the NTP Configuration
  
  108
  - Configuring a System Name and Prompt
    111
    
    Configuring a System Name
    112
    
    Default System Name and Prompt Configuration
    112
    
    Understanding DNS
    112
    
    Default DNS Configuration
    113
    
    Setting up DNS
    113
Table

113
- Creating a Banner
  114
- Displaying the DNS Configuration
  114
- Managing the MAC Address Table
  116
  - Building the Address Table
    117
  - MAC Addresses and Vlans
    117
- Default MAC Address Table Configuration
  
  118
- Changing the Address Aging Time
  
  118
- Removing Dynamic Address Entries
  
  119
- Configuring MAC Address Notification Traps
  
  119
- Adding and Removing Static Address Entries
  
  121
- Configuring Unicast MAC Address Filtering
  
  122
- Disabling MAC Address Learning on a VLAN
  
  123
- Displaying Address Table Entries
  
  125
  - Managing the ARP Table
    125
Chapter 6 Configuring SDM Templates

126
- Understanding the SDM Templates
  126
- Configuring the Switch SDM Template
  127
  - Default SDM Template
    127
  - SDM Template Configuration Guidelines
    127
  - Setting the SDM Template
    128
- Displaying the SDM Templates
  129
Chapter 7 Configuring Switch-Based Authentication

130
Chapter 8 Configuring IEEE 802.1X Port-Based Authentication

172
- Understanding IEEE 802.1X Port-Based Authentication
  172
  - Device Roles
    173
- Authentication Initiation and Message Exchange
  
  174
- Ports in Authorized and Unauthorized States
  
  175
- IEEE 802.1X Accounting
  
  176
- IEEE 802.1X Accounting Attribute-Value Pairs
  
  176
- IEEE 802.1X Host Mode
  
  177
  - Figure
    178
- Using IEEE 802.1X with Port Security
  
  178
  - Using IEEE 802.1X with VLAN Assignment
    179
  - Configuring IEEE 802.1X Authentication
    180
    
    Default IEEE 802.1X Configuration
    180
Default IEEE 802.1X Configuration

181
- IEEE 802.1X Configuration Guidelines
  
  181
- Configuring IEEE 802.1X Authentication
  
  182
- Configuring the Switch-To-RADIUS-Server Communication
  
  183
- Configuring Periodic Re-Authentication
  
  184
- Manually Re-Authenticating a Client Connected to a Port
  
  185
- Changing the Quiet Period
  
  185
- Changing the Switch-To-Client Retransmission Time
  
  186
- Setting the Switch-To-Client Frame-Retransmission Number
  
  186
- Setting the Re-Authentication Number
  
  187
- Configuring the Host Mode
  
  188
- Resetting the IEEE 802.1X Configuration to the Default Values
  
  188
- Configuring IEEE 802.1X Accounting
  
  189
  - Displaying IEEE 802.1X Statistics and Status
    190
    
    Understanding Interface Types
    192
    
    C H a P T E R 9 Configuring Interface Characteristics
    193
    
    Port-Based Vlans
    193
    
    Switch Ports
    193
    
    Access Ports
    194
    
    UNI and NNI Ports
    194
    
    Routed Ports
    195
    
    Trunk Ports
    195
    
    Tunnel Ports
    195
    
    Switch Virtual Interfaces
    196
    
    Connecting Interfaces
    197
    
    Etherchannel Port Groups
    197
CHAPTER 9 Configuring Interface Characteristics

193
Chapter 10 Configuring Command Macros

216
- Understanding Command Macros
  216
- Configuring Command Macros
  217
  - Default Command Macro Configuration
    217
  - Command Macro Configuration Guidelines
    217
  - Creating Command Macros
    218
  - Applying Command Macros
    219
- Displaying Command Macros
  220
Chapter 11 Configuring Vlans

222
- Understanding Vlans
  222
  - Supported Vlans
    224
  - Normal-Range Vlans
    224
  - Extended-Range Vlans
    225
  - VLAN Port Membership Modes
    225
  - UNI Vlans
    226
- Creating and Modifying Vlans
  227
- Default Ethernet VLAN Configuration
  
  228
- VLAN Configuration Guidelines
  
  229
- Creating or Modifying an Ethernet VLAN
  
  230
- Assigning Static-Access Ports to a VLAN
  
  231
- Creating an Extended-Range VLAN with an Internal VLAN ID
  
  232
- Configuring UNI Vlans
  
  233
Table

235
- Displaying Vlans
  235
- IEEE 802.1Q Configuration Considerations
  236
- Configuring VMPS
  244
  - Understanding VMPS
    244
    
    Dynamic-Access Port VLAN Membership
    245
  - Default VMPS Client Configuration
    245
  - VMPS Configuration Guidelines
    246
  - Configuring the VMPS Client
    246
    
    Entering the IP Address of the VMPS
    246
    
    Configuring Dynamic-Access Ports on VMPS Clients
    247
    
    Reconfirming VLAN Memberships
    247
    
    Changing the Reconfirmation Interval
    248
    
    Changing the Retry Count
    248
  - Monitoring the VMPS
    248
  - Troubleshooting Dynamic-Access Port VLAN Membership
    249
  - VMPS Configuration Example
    249
- Understanding Private Vlans
  252
Chapter 12 Configuring Private VLAN

253
Chapter 13 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling

268
Chapter 14 Configuring STP

287
- STP Overview
  287
- Spanning-Tree Topology and Bpdus
  288
- Bridge ID, Switch Priority, and Extended System ID
  289
- Spanning-Tree Interface States
  289
  - Blocking State
    291
  - Listening State
    291
  - Learning State
    291
  - Forwarding State
    292
  - Disabled State
    292
- How a Switch or Port Becomes the Root Switch or Root Port
  292
- Spanning Tree and Redundant Connectivity
  293
- Spanning-Tree Address Management
  293
- Accelerated Aging to Retain Connectivity
  294
- Spanning-Tree Modes and Protocols
  294
- Supported Spanning-Tree Instances
  295
- Spanning-Tree Interoperability and Backward Compatibility
  295
- STP and IEEE 802.1Q Trunks
  295
- Configuring Spanning-Tree Features
  296
  - Default Spanning-Tree Configuration
    296
  - Spanning-Tree Configuration Guidelines
    297
  - Changing the Spanning-Tree Mode
    298
  - Disabling Spanning Tree
    299
  - Configuring the Root Switch
    299
  - Configuring a Secondary Root Switch
    301
  - Configuring Port Priority
    301
  - Configuring Path Cost
    303
  - Configuring the Switch Priority of a VLAN
    304
  - Configuring Spanning-Tree Timers
    305
    
    Configuring the Hello Time
    305
    
    Configuring the Forwarding-Delay Time for a VLAN
    306
    
    Configuring the Maximum-Aging Time for a VLAN
    306
- Displaying the Spanning-Tree Status
  307
Chapter 15 Configuring MSTP

308
- Understanding MSTP
  309
  - Multiple Spanning-Tree Regions
    309
  - IST, CIST, and CST
    309
    
    Operations between MST Regions
    310
    
    Operations Within an MST Region
    310
  - Hop Count
    311
  - Boundary Ports
    312
  - Interoperability with IEEE 802.1D STP
    312
- Understanding RSTP
  313
  - Port Roles and the Active Topology
    313
  - Rapid Convergence
    314
  - Synchronization of Port Roles
    315
  - Bridge Protocol Data Unit Format and Processing
    316
    
    Processing Inferior BPDU Information
    317
    
    Processing Superior BPDU Information
    317
  - Topology Changes
    317
- Configuring MSTP Features
  318
- Displaying the MST Configuration and Status
  330
CHAPTER 16 Configuring Optional Spanning-Tree Features

332
- Understanding Optional Spanning-Tree Features
  332
Understanding Optional Spanning-Tree Features

333
- Understanding Port Fast
  
  333
- Understanding BPDU Guard
  
  333
- Understanding BPDU Filtering
  
  334
- Understanding Etherchannel Guard
  
  334
- Understanding Root Guard
  
  334
  - Configuring Optional Spanning-Tree Features
    335
    
    Default Optional Spanning-Tree Configuration
    336
    
    Enabling Port Fast
    336
    
    Optional Spanning-Tree Configuration Guidelines
    336
- Understanding Loop Guard
  
  335
- Enabling BPDU Guard
  
  337
- Enabling BPDU Filtering
  
  338
- Enabling Etherchannel Guard
  
  339
- Enabling Root Guard
  
  340
  - Displaying the Spanning-Tree Status
    341
- Enabling Loop Guard
  
  340
Chapter 17 Configuring Flex Links

342
- Understanding Flex Links
  342
- Configuring Flex Links
  343
  - Default Flex Link Configuration
    343
  - Flex Link Configuration Guidelines
    343
  - Configuring Flex Links
    344
- Monitoring Flex Links
  345
CHAPTER 18 Configuring DHCP Features and IP Source Guard

346
- Understanding DHCP Features
  346
  - C H a P T E R 18 Configuring DHCP Features and IP Source Guard
    347
  - DHCP Relay Agent
    347
  - DHCP Server
    347
  - DHCP Snooping
    347
  - Option-82 Data Insertion
    348
  - DHCP Snooping Binding Database
    350
- Configuring DHCP Features
  351
- Displaying DHCP Snooping Information
  358
- Understanding IP Source Guard
  358
  - Source IP Address Filtering
    359
  - Source IP and MAC Address Filtering
    359
- Configuring IP Source Guard
  359
- Displaying IP Source Guard Information
  361
Chapter 19 Configuring Dynamic ARP Inspection

362
Chapter 20 Configuring IGMP Snooping and MVR

379
- IGMP Versions
  379
- Joining a Multicast Group
  380
- Leaving a Multicast Group
  382
- Immediate Leave
  382
- IGMP Configurable-Leave Timer
  382
- IGMP Report Suppression
  383
- Configuring IGMP Snooping
  383
- Displaying IGMP Snooping Information
  392
- Understanding Multicast VLAN Registration
  393
  - Using MVR in a Multicast Television Application
    393
- Configuring MVR
  395
- Configuring IGMP Filtering and Throttling
  399
- Displaying MVR Information
  399
- Displaying IGMP Filtering and Throttling Configuration
  405
CHAPTER 21 Configuring Port-Based Traffic Control

406
Chapter 22 Configuring CDP

424
- Understanding CDP
  424
- Configuring CDP
  425
- Monitoring and Maintaining CDP
  428
Chapter 23 Configuring UDLD

430
- Understanding UDLD
  430
  - Modes of Operation
    430
  - Methods to Detect Unidirectional Links
    431
- Configuring UDLD
  433
  - Default UDLD Configuration
    433
  - Configuration Guidelines
    433
  - Enabling UDLD Globally
    434
  - Enabling UDLD on an Interface
    434
  - Resetting an Interface Disabled by UDLD
    435
- Displaying UDLD Status
  435
Chapter 24 Configuring SPAN and RSPAN

436
- Understanding SPAN and RSPAN
  436
  - Local SPAN
    437
  - Remote SPAN
    437
  - SPAN and RSPAN Concepts and Terminology
    438
    
    SPAN Sessions
    438
    
    Monitored Traffic
    439
    
    Source Ports
    440
    
    Source Vlans
    441
    
    VLAN Filtering
    441
    
    Destination Port
    442
    
    Rspan Vlan
    443
  - SPAN and RSPAN Interaction with Other Features
    443
- Configuring SPAN and RSPAN
  444
- Displaying SPAN and RSPAN Status
  457
Chapter 25 Configuring RMON

458
- Understanding RMON
  458
- Configuring RMON
  459
- Displaying RMON Status
  463
Chapter 26 Configuring System Message Logging

464
Chapter 27 Configuring SNMP

477
- SNMP Versions
  477
- SNMP Manager Functions
  478
- SNMP Agent Functions
  479
- SNMP Community Strings
  479
- Using SNMP to Access MIB Variables
  479
- SNMP Notifications
  480
- SNMP Ifindex MIB Object Values
  480
- Configuring SNMP
  480
Configuring SNMP

481
- Default SNMP Configuration
  481
- SNMP Configuration Guidelines
  481
- Disabling the SNMP Agent
  482
- Configuring Community Strings
  483
- Configuring SNMP Groups and Users
  484
- Configuring SNMP Notifications
  486
- Setting the Agent Contact and Location Information
  489
- Limiting TFTP Servers Used through SNMP
  490
- SNMP Examples
  490
- Displaying SNMP Status
  491
Chapter 28 Configuring Network Security with Acls

492
- Understanding Acls
  492
  - Supported Acls
    493
    
    Port Acls
    494
    
    Router Acls
    495
    
    VLAN Maps
    496
  - Handling Fragmented and Unfragmented Traffic
    496
- Configuring Ipv4 Acls
  497
  - Creating Standard and Extended Ipv4 Acls
    498
    
    ACL Logging
    499
    
    Ipv4 Access List Numbers
    499
    
    Creating a Numbered Standard ACL
    500
    
    Creating a Numbered Extended ACL
    501
    
    Creating Named Standard and Extended Acls
    505
    
    Resequencing Aces in an ACL
    505
    
    Using Time Ranges with Acls
    507
    
    Including Comments in Acls
    509
  - Applying an Ipv4 ACL to a Terminal Line
    509
- Applying an Ipv4 ACL to an Interface
  510
- Hardware and Software Treatment of IP Acls
  512
- Ipv4 ACL Configuration Examples
  512
  - Numbered Acls
    514
  - Extended Acls
    514
  - Named Acls
    514
  - Time Range Applied to an IP ACL
    515
  - Commented IP ACL Entries
    515
  - ACL Logging
    516
- Creating Named MAC Extended Acls
  517
  - Applying a MAC ACL to a Layer 2 Interface
    519
- Configuring VLAN Maps
  520
  - VLAN Map Configuration Guidelines
    521
  - Creating a VLAN Map
    522
    
    Examples of Acls and VLAN Maps
    522
  - Applying a VLAN Map to a VLAN
    524
  - Using VLAN Maps in Your Network
    525
    
    Wiring Closet Configuration
    525
    
    Denying Access to a Server on Another VLAN
    526
- Using VLAN Maps with Router Acls
  527
  - VLAN Maps and Router ACL Configuration Guidelines
    527
  - Examples of Router Acls and VLAN Maps Applied to Vlans
    528
    
    Acls and Switched Packets
    528
    
    Acls and Routed Packets
    529
    
    Acls and Multicast Packets
    530
- Displaying Ipv4 ACL Configuration
  530
Chapter 29 Configuring Control-Plane Security

532
Chapter 30 Configuring Qos

538
- Understanding Qos
  538
  - Modular Qos CLI
    540
  - Input and Output Policies
    541
    
    Input Policy Maps
    541
    
    Output Policy Maps
    542
  - Classification
    542
    
    Class Maps
    543
    
    Classification Based on Layer 2 Cos
    544
    
    The Match Command
    544
    
    Classification Based on IP DSCP
    545
    
    Classification Based on IP Precedence
    545
    
    Classification Comparisons
    546
    
    Classification Based on Qos Acls
    547
    
    Classification Based on Qos Groups
    547
  - Table Maps
    548
- Policing
  
  549
  - Individual Policing
    550
  - Aggregate Policing
    551
  - Unconditional Priority Policing
    552
- Marking
  
  553
Chapter 31 Configuring Etherchannels

602
- Understanding Etherchannels
  602
  - Etherchannel Overview
    603
  - Port-Channel Interfaces
    604
  - Port Aggregation Protocol
    605
    
    Pagp Interaction with Other Features
    606
    
    Pagp Modes
    606
  - Link Aggregation Control Protocol
    607
    
    LACP Interaction with Other Features
    607
    
    LACP Modes
    607
  - Etherchannel on Mode
    608
  - Load Balancing and Forwarding Methods
    608
- Configuring Etherchannels
  610
- Displaying Etherchannel, Pagp, and LACP Status
  622
Chapter 32 Configuring IP Unicast Routing

624
- Understanding IP Routing
  625
  - Types of Routing
    625
- Steps for Configuring Routing
  626
- Configuring IP Addressing
  627
  - Default Addressing Configuration
    627
  - Assigning IP Addresses to Network Interfaces
    628
    
    Classless Routing
    629
    
    Use of Subnet Zero
    629
  - Configuring Address Resolution Methods
    630
    
    Define a Static ARP Cache
    631
    
    Set ARP Encapsulation
    632
    
    Enable Proxy ARP
    633
  - Routing Assistance When IP Routing Is Disabled
    633
    
    Proxy ARP
    633
    
    Default Gateway
    634
    
    ICMP Router Discovery Protocol (IRDP)
    634
  - Configuring Broadcast Packet Handling
    635
    
    Enabling Directed Broadcast-To-Physical Broadcast Translation
    636
    
    Forwarding UDP Broadcast Packets and Protocols
    637
    
    Establishing an IP Broadcast Address
    638
    
    Flooding IP Broadcasts
    638
  - Monitoring and Maintaining IP Addressing
    640
- Enabling Ipv4 Unicast Routing
  640
- Configuring RIP
  641
- Configuring OSPF
  646
  - Default OSPF Configuration
    647
  - Configuring Basic OSPF Parameters
    649
  - Configuring OSPF Interfaces
    649
  - Configuring OSPF Area Parameters
    650
  - Configuring Other OSPF Parameters
    652
  - Changing LSA Group Pacing
    653
  - Configuring a Loopback Interface
    654
  - Monitoring OSPF
    654
- Configuring EIGRP
  655
- Configuring BGP
  661
- Configuring Multi-VRF CE
  682
  - Understanding Multi-VRF CE
    682
  - Default Multi-VRF CE Configuration
    684
  - Multi-VRF CE Configuration Guidelines
    684
  - Configuring Vrfs
    685
  - Configuring a VPN Routing Session
    686
  - Configuring BGP PE to CE Routing Sessions
    687
  - Multi-VRF CE Configuration Example
    687
  - Displaying Multi-VRF CE Status
    691
- Configuring Protocol-Independent Features
  692
- Monitoring and Maintaining the IP Network
  706
Chapter 33 Configuring HSRP

708
- Understanding HSRP
  708
  - Multiple HSRP
    710
- Configuring HSRP
  711
  - Default HSRP Configuration
    711
  - HSRP Configuration Guidelines
    712
  - Enabling HSRP
    712
  - Configuring HSRP Priority
    713
  - Configuring MHSRP
    716
  - Configuring HSRP Authentication and Timers
    716
  - Enabling HSRP Support for ICMP Redirect Messages
    718
- Displaying HSRP Configurations
  718
Chapter 34 Configuring IP Multicast Routing

720

Cisco ME 3400G-2CS - Ethernet Access Switch Product Bulletin (3 pages)

Ethernet Access Switches ME 3400 Series

Brand: Cisco | Category: Switch | Size: 0.15 MB

Cisco Categories

Switch IP Phone

Network Router Wireless Access Point Network Hardware

More Cisco Manuals

Cisco ME 3400G-2CS - Ethernet Access Switch Manuals

Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual (885 pages)

Table of Contents

Chapter 2 Using the Command-Line Interface

Chapter 3 Assigning the Switch IP Address and Default Gateway

Chapter 4 Configuring Cisco IOS CNS Agents

Chapter 5 Administering the Switch

Configuring NTP Authentication

Configuring NTP Associations

Configuring NTP Broadcast Service

Configuring NTP Access Restrictions

Configuring the Source IP Address for NTP Packets

Displaying the NTP Configuration

Table

Default MAC Address Table Configuration

Changing the Address Aging Time

Removing Dynamic Address Entries

Configuring MAC Address Notification Traps

Adding and Removing Static Address Entries

Configuring Unicast MAC Address Filtering

Disabling MAC Address Learning on a VLAN

Displaying Address Table Entries

Chapter 6 Configuring SDM Templates

Chapter 7 Configuring Switch-Based Authentication

Chapter 8 Configuring IEEE 802.1X Port-Based Authentication

Authentication Initiation and Message Exchange

Ports in Authorized and Unauthorized States

IEEE 802.1X Accounting

IEEE 802.1X Accounting Attribute-Value Pairs

IEEE 802.1X Host Mode

Using IEEE 802.1X with Port Security

Default IEEE 802.1X Configuration

IEEE 802.1X Configuration Guidelines

Configuring IEEE 802.1X Authentication

Configuring the Switch-To-RADIUS-Server Communication

Configuring Periodic Re-Authentication

Manually Re-Authenticating a Client Connected to a Port

Changing the Quiet Period

Changing the Switch-To-Client Retransmission Time

Setting the Switch-To-Client Frame-Retransmission Number

Setting the Re-Authentication Number

Configuring the Host Mode

Resetting the IEEE 802.1X Configuration to the Default Values

Configuring IEEE 802.1X Accounting

CHAPTER 9 Configuring Interface Characteristics

Default Ethernet Interface Configuration

Configuring User Network and Network Node Interfaces

Configuring Interface Speed and Duplex Mode

Configuring IEEE 802.3X Flow Control

Configuring Auto-MDIX on an Interface

Adding a Description for an Interface

Chapter 10 Configuring Command Macros

Chapter 11 Configuring Vlans

Default Ethernet VLAN Configuration

VLAN Configuration Guidelines

Creating or Modifying an Ethernet VLAN

Assigning Static-Access Ports to a VLAN

Creating an Extended-Range VLAN with an Internal VLAN ID

Configuring UNI Vlans

Table

Chapter 12 Configuring Private VLAN

Chapter 13 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling

Chapter 14 Configuring STP

Chapter 15 Configuring MSTP

CHAPTER 16 Configuring Optional Spanning-Tree Features

Understanding Optional Spanning-Tree Features

Understanding Port Fast

Understanding BPDU Guard

Understanding BPDU Filtering

Understanding Etherchannel Guard

Understanding Root Guard

Understanding Loop Guard

Enabling BPDU Guard

Enabling BPDU Filtering

Enabling Etherchannel Guard

Enabling Root Guard

Enabling Loop Guard

Chapter 17 Configuring Flex Links

CHAPTER 18 Configuring DHCP Features and IP Source Guard

Chapter 19 Configuring Dynamic ARP Inspection