To Next Page

To Previous Page

37-40

Catalyst 3750-X and 3560-X Switch Software Configuration Guide

OL-21521-01

Chapter 37 Configuring Network Security with ACLs

Using VLAN Maps with Router ACLs

Figure 37-7 Applying ACLs on Bridged Packets

ACLs and Routed Packets

Figure 37-8 shows how ACLs are applied on routed packets. The ACLs are applied in this order:

1. VLAN map for input VLAN

2. Input router ACL

3. Output router ACL

4. VLAN map for output VLAN

Figure 37-8 Applying ACLs on Routed Packets

Frame

Fallback bridge

VLAN 10

Host A

(VLAN 10)

Packet

101358

VLAN 20

Host B

(VLAN 20)

VLAN 10

map

VLAN 20

map

Frame

Routing function

VLAN 10

Host A

(VLAN 10)

Packet

101359

VLAN 20

Host B

(VLAN 20)

VLAN 10

map

Input

router

ACL

Output

router

ACL

VLAN 20

map

Default Chapter3
- Table of Contents3
- Related Publications50
- Obtaining Documentation and Submitting a Service Request51
- Features53
Chapter 1 Overview54
- Deployment Features54
- Performance Features56
- Management Options57
- Manageability Features58
- Availability and Redundancy Features60
- VLAN Features61
- Security Features61
- Qos and Cos Features64
- Layer 3 Features66
- Power over Ethernet Features67
- Monitoring Features67
- Default Settings after Initial Switch Configuration68
- Network Configuration Examples71
- Where to Go Next85
CHAPTER 2 Using the Command-Line Interface87
- Understanding Command Modes87
- C H a P T E R 2 Using the Command-Line Interface88
- Understanding the Help System89
- Understanding Abbreviated Commands89
- Understanding no and Default Forms of Commands90
- Understanding CLI Error Messages90
- Using Configuration Logging90
- Using Command History91
- Using Editing Features92
- Searching and Filtering Output of Show and more Commands95
- Accessing the CLI95
  - Accessing the CLI through a Console Connection or through Telnet96
CHAPTER 3 Assigning the Switch IP Address and Default Gateway97
- Understanding the Boot Process97
- C H a P T E R 3 Assigning the Switch IP Address and Default Gateway98
- Assigning Switch Information98
- Checking and Saving the Running Configuration111
  - Modifying the Startup Configuration112
  - Scheduling a Reload of the Software Image118
    - Configuring a Scheduled Reload118
    - Displaying Scheduled Reload Information119
CHAPTER 4 Configuring Cisco IOS Configuration Engine121
- Understanding Cisco Configuration Engine Software121
- Understanding Cisco IOS Agents125
- Configuring Cisco IOS Agents126
- Displaying CNS Configuration134
Managing Switch Stacks135
Chapter 5 Managing Switch Stack136
- Understanding Switch Stacks136
- Stack Member Priority Values142
- Switch Stack Offline Configuration142
- Hardware Compatibility and SDM Mismatch Mode in Switch Stacks144
- Switch Stack Software Compatibility Recommendations145
- Stack Protocol Version Compatibility145
- Major Version Number Incompatibility Among Switches145
- Minor Version Number Incompatibility Among Switches146
  - Understanding Auto-Upgrade and Auto-Advise146
  - Auto-Upgrade and Auto-Advise Example Messages147
- Incompatible Software and Stack Member Image Upgrades149
- Switch Stack Configuration Files149
- Additional Considerations for System-Wide Configuration on Switch Stacks150
- Switch Stack Management Connectivity151
- Switch Stack Configuration Scenarios152
- Configuring the Switch Stack154
- Displaying Switch Stack Information159
- Understanding Switch Clusters170
Chapter 6 Clustering Switche171
- Cluster Command Switch Characteristics171
- Standby Cluster Command Switch Characteristics171
- Candidate Switch and Cluster Member Switch Characteristics172
- Planning a Switch Cluster172
- Using the CLI to Manage Switch Clusters184
  - Catalyst 1900 and Catalyst 2820 CLI Considerations185
- Using SNMP to Manage Switch Clusters185
- Managing the System Time and Date187
Chapter 7 Administering the Switch188
- Understanding the System Clock188
- Understanding Network Time Protocol188
- Configuring NTP190
- Configuring Time and Date Manually197
- Configuring a System Name and Prompt200
- Creating a Banner203
- Managing the MAC Address Table205
- Managing the ARP Table217
- Understanding the SDM Templates219
  - Dual Ipv4 and Ipv6 SDM Templates220
Chapter 8 Configuring SDM Template221
- SDM Templates and Switch Stacks221
- Configuring the Switch SDM Template222
- Displaying the SDM Templates224
CHAPTER 9 Configuring Catalyst 3750-X Stackpower227
- Understanding Stackpower227
- Configuring Stack Power232
CHAPTER 10 Configuring Switch-Based Authentication235
- Preventing Unauthorized Access to Your Switch235
- C H a P T E R 10 Configuring Switch-Based Authentication236
- Protecting Access to Privileged EXEC Commands236
- Controlling Switch Access with TACACS+244
- Controlling Switch Access with RADIUS251
- Controlling Switch Access with Kerberos273
- Configuring the Switch for Local Authentication and Authorization277
- Configuring the Switch for Secure Shell278
- Configuring the Switch for Secure Socket Layer HTTP283
- Configuring the Switch for Secure Copy Protocol289
  - Information about Secure Copy290
CHAPTER 11 Configuring IEEE 802.1X Port-Based Authentication291
- Understanding IEEE 802.1X Port-Based Authentication291
  - C H a P T E R 11 Configuring IEEE 802.1X Port-Based Authentication292
  - Device Roles293
  - Authentication Process294
  - Authentication Initiation and Message Exchange296
  - Authentication Manager298
  - Ports in Authorized and Unauthorized States300
  - X Authentication and Switch Stacks301
  - X Host Mode302
  - X Multiple Authentication Mode302
  - MAC Move303
  - X Accounting303
  - X Accounting Attribute-Value Pairs303
  - X Readiness Check304
  - X Authentication with VLAN Assignment305
  - X Authentication with Per-User Acls306
  - Cisco Secure ACS and Attribute-Value Pairs for the Redirect URL307
  - X Authentication with Downloadable Acls and Redirect Urls307
  - Cisco Secure ACS and Attribute-Value Pairs for Downloadable Acls308
  - VLAN ID-Based MAC Authentication308
- X Authentication with Guest VLAN309
- X Authentication with Restricted VLAN310
- X Authentication with Inaccessible Authentication Bypass310
  - Support on Multiple-Authentication Ports311
  - Authentication Results311
  - Feature Interactions311
- X User Distribution312
  - X User Distribution Configuration Guidelines313
- IEEE 802.1X Authentication with Voice VLAN Ports313
- IEEE 802.1X Authentication with Port Security314
- IEEE 802.1X Authentication with Wake-On-LAN314
- IEEE 802.1X Authentication with MAC Authentication Bypass315
- Network Admission Control Layer 2 IEEE 802.1X Validation316
- Flexible Authentication Ordering317
- Open1X Authentication317
- Multidomain Authentication317
- X Supplicant and Authenticator Switches with Network Edge Access Topology (NEAT)319
  - Guidelines319
- Voice Aware 802.1X Security320
- Common Session ID320
- Understanding Media Access Control Security and Macsec Key Agreement321
  - MKA Policies322
  - Virtual Ports322
  - Macsec and Stacking322
  - Macsec, MKA and 802.1X Host Modes323
  - MKA Statistics324
  - Configuring 802.1X Authentication324
- Default 802.1X Authentication Configuration325
- X Authentication Configuration Guidelines326
  - VLAN Assignment, Guest VLAN, Restricted VLAN, and Inaccessible Authentication Bypass327
  - MAC Authentication Bypass328
  - Maximum Number of Allowed Devices Per Port328
- Configuring 802.1X Readiness Check328
- Configuring Voice Aware 802.1X Security329
  - Configuring 802.1X Violation Modes331
  - Configuring 802.1X Authentication331
  - Configuring the Switch-To-RADIUS-Server Communication333
  - Configuring the Host Mode334
  - Configuring Periodic Re-Authentication335
  - Manually Re-Authenticating a Client Connected to a Port336
  - Changing the Quiet Period337
  - Changing the Switch-To-Client Retransmission Time337
  - Setting the Switch-To-Client Frame-Retransmission Number338
  - Setting the Re-Authentication Number339
  - Enabling MAC Move339
  - Configuring 802.1X Accounting340
  - Configuring a Guest VLAN341
  - Configuring a Restricted VLAN342
  - Configuring the Inaccessible Authentication Bypass Feature343
  - Configuring 802.1X Authentication with Wol346
  - Configuring MAC Authentication Bypass346
  - Configuring 802.1X User Distribution347
  - Configuring NAC Layer 2 IEEE 802.1X Validation348
  - Configuring an Authenticator and a Supplicant Switch with NEAT349
    - Configuring 802.1X Authentication with Downloadable Acls and Redirect Urls351
    - Configuring Downloadable Acls351
    - Configuring NEAT with ASP351
    - Configuring a Downloadable Policy352
  - Configuring VLAN ID-Based MAC Authentication353
  - Configuring Flexible Authentication Ordering354
  - Configuring Open1X354
  - Configuring a Web Authentication Local Banner355
  - Disabling 802.1X Authentication on the Port356
  - Resetting the 802.1X Authentication Configuration to the Default Values356
  - Configuring MKA and Macsec357
    - Configuring an MKA Policy357
    - Configuring Macsec on an Interface357
- Displaying 802.1X Statistics and Status359
CHAPTER 12 Configuring Web-Based Authentication361
- Understanding Web-Based Authentication361
- Configuring Web-Based Authentication369
- Displaying Web-Based Authentication Status377
CHAPTER 13 Configuring Interface Characteristics379
- Interface Types379
- Using the Switch USB Ports391
  - USB Mini-Type B Console Port391
- Using Interface Configuration Mode395
- Using the Ethernet Management Port400
- Configuring Ethernet Interfaces404
- Configuring Layer 3 Interfaces415
  - Configuring SVI Autostate Exclude417
- Configuring the System MTU417
- Configuring the Cisco RPS 2300 in a Mixed Stack420
- Configuring the Power Supplies422
  - Monitoring and Maintaining the Interfaces423
  - Understanding Auto Smartports and Static Smartports Macros427
    - Auto Smartports and Cisco Medianet428
    - C H a P T E R 14 Configuring Auto Smartports Macros428
CHAPTER 14 Configuring Auto Smartports429
- Default Auto Smartports Configuration429
- Auto Smartports Configuration Guidelines430
- Enabling Auto Smartports431
- Configuring Auto Smartports Default Parameter Values432
- Configuring Auto Smartports MAC-Address Groups433
- Configuring Auto Smartports Macro Persistent434
- Configuring Auto Smartports Built-In Macro Options435
- Creating User-Defined Event Triggers437
- Configuring Auto Smartports User-Defined Macros441
- Configuring Static Smartports Macros443
- Displaying Auto Smartports and Static Smartports Macros446
- Understanding Vlans447
Chapter 15 Configuring VLAN448
- Supported Vlans448
- VLAN Port Membership Modes449
- Configuring Normal-Range Vlans450
- Token Ring Vlans451
- Normal-Range VLAN Configuration Guidelines451
- Saving VLAN Configuration452
- Configuring Normal-Range Vlans452
- Configuring Extended-Range Vlans456
- Displaying Vlans460
- Configuring VLAN Trunks460
- Configuring VMPS471
- Understanding VTP479
Chapter 16 Configuring VTP480
- The VTP Domain480
- VTP Modes481
- Configuring VTP486
- Monitoring VTP495
- Understanding Voice VLAN497
Chapter 17 Configuring Voice VLAN498
- Cisco IP Phone Voice Traffic498
- Cisco IP Phone Data Traffic498
- Configuring Voice VLAN499
Chapter 18 Configuring Private VLAN506
- IP Addressing Scheme with Private Vlans507
- Private Vlans Across Multiple Switches508
- Private-VLAN Interaction with Other Features508
- Configuring Private Vlans509
- Monitoring Private Vlans518
CHAPTER 19 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling519
- Understanding IEEE 802.1Q Tunneling519
- C H a P T E R 19 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling520
- Configuring IEEE 802.1Q Tunneling522
- Understanding Layer 2 Protocol Tunneling526
- Configuring Layer 2 Protocol Tunneling531
  - Configuring Layer 2 Tunneling for Etherchannels532
    - Configuring the SP Edge Switch532
    - Configuring the Customer Switch534
- Monitoring and Maintaining Tunneling Status536
- Understanding Spanning-Tree Features537
Chapter 20 Configuring STP538
- STP Overview538
- Spanning-Tree Topology and Bpdus539
- Bridge ID, Switch Priority, and Extended System ID540
- Spanning-Tree Interface States541
- How a Switch or Port Becomes the Root Switch or Root Port544
- Spanning Tree and Redundant Connectivity544
- Spanning-Tree Address Management544
- Accelerated Aging to Retain Connectivity545
- Spanning-Tree Modes and Protocols545
- Supported Spanning-Tree Instances546
- Spanning-Tree Interoperability and Backward Compatibility546
- STP and IEEE 802.1Q Trunks546
- VLAN-Bridge Spanning Tree547
- Spanning Tree and Switch Stacks547
- Configuring Spanning-Tree Features548
- Configuring Mstp561
Chapter 21 Configuring MSTP562
- Understanding MSTP562
- Understanding RSTP569
- Configuring MSTP Features574
- Displaying the MST Configuration and Status587
- Understanding Optional Spanning-Tree Features589
CHAPTER 22 Configuring Optional Spanning-Tree Features599
- Default Optional Spanning-Tree Configuration600
- Optional Spanning-Tree Configuration Guidelines600
- Enabling Port Fast600
- Enabling BPDU Guard601
- Enabling BPDU Filtering602
- Enabling Uplinkfast for Use with Redundant Links603
- Enabling Cross-Stack Uplinkfast604
- Enabling Backbonefast604
- Enabling Etherchannel Guard605
- Enabling Root Guard606
- Enabling Loop Guard606
- Displaying the Spanning-Tree Status607
CHAPTER 23 Configuring Flex Links and the MAC Address-Table Move Update Feature609
- Understanding Flex Links and the MAC Address-Table Move Update609
- Configuring Flex Links and MAC Address-Table Move Update615
- Monitoring Flex Links and the MAC Address-Table Move Update622
- Understanding DHCP Features623
CHAPTER 24 Configuring DHCP Features630
- Default DHCP Configuration630
- DHCP Snooping Configuration Guidelines631
- Configuring the DHCP Server632
- DHCP Server and Switch Stacks632
- Configuring the DHCP Relay Agent633
- Specifying the Packet Forwarding Address633
- Enabling DHCP Snooping and Option 82634
- Enabling DHCP Snooping on Private Vlans636
- Enabling the Cisco IOS DHCP Server Database636
- Enabling the DHCP Snooping Binding Database Agent637
- Displaying DHCP Snooping Information638
- Understanding IP Source Guard638
- Configuring IP Source Guard640
- Displaying IP Source Guard Information647
- Understanding DHCP Server Port-Based Address Allocation648
- Configuring DHCP Server Port-Based Address Allocation648
- Displaying DHCP Server Port-Based Address Allocation651
- Understanding Dynamic ARP Inspection653
CHAPTER 25 Configuring Dynamic ARP Inspection657
- Default Dynamic ARP Inspection Configuration657
- Dynamic ARP Inspection Configuration Guidelines658
- Configuring Dynamic ARP Inspection in DHCP Environments659
- Configuring ARP Acls for Non-DHCP Environments660
- Limiting the Rate of Incoming ARP Packets662
- Performing Validation Checks664
- Configuring the Log Buffer665
- Displaying Dynamic ARP Inspection Information666
Chapter 26 Configuring IGMP Snooping and MVR670
- Understanding IGMP Snooping670
- IGMP Versions671
- Joining a Multicast Group671
- Leaving a Multicast Group672
- IGMP Configurable-Leave Timer673
- IGMP Report Suppression673
- Immediate Leave673
- IGMP Snooping and Switch Stacks674
Configuring IGMP Snooping674
- Default IGMP Snooping Configuration674
- Enabling or Disabling IGMP Snooping675
- Setting the Snooping Method675
- Configuring a Multicast Router Port676
- Configuring a Host Statically to Join a Group677
- Enabling IGMP Immediate Leave678
- Configuring the IGMP Leave Timer678
- Configuring TCN-Related Commands679
- Displaying IGMP Snooping Information683
- Understanding Multicast VLAN Registration684
  - Using MVR in a Multicast Television Application685
- Configuring MVR687
- Displaying MVR Information690
- Configuring IGMP Filtering and Throttling691
- Displaying IGMP Filtering and Throttling Configuration696
- Understanding MLD Snooping697
Chapter 27 Configuring Ipv6 MLD Snooping698
- MLD Messages699
- MLD Queries699
- Multicast Client Aging Robustness699
- Multicast Router Discovery700
- MLD Reports700
- MLD Done Messages and Immediate-Leave700
- Topology Change Notification Processing701
- MLD Snooping in Switch Stacks701
Configuring Ipv6 MLD Snooping701
- Default MLD Snooping Configuration702
- MLD Snooping Configuration Guidelines702
- Enabling or Disabling MLD Snooping703
- Configuring a Static Multicast Group704
- Configuring a Multicast Router Port704
- Enabling MLD Immediate Leave705
- Configuring MLD Snooping Queries706
- Disabling MLD Listener Message Suppression707
- Displaying MLD Snooping Information708
CHAPTER 28 Configuring Port-Based Traffic Control709
- Configuring Storm Control709
- Configuring Protected Ports714
- Configuring Port Blocking715
  - Default Port Blocking Configuration716
  - Blocking Flooded Traffic on an Interface716
- Configuring Port Security716
- Displaying Port-Based Traffic Control Settings727
- Understanding CDP729
  - CDP and Switch Stacks730
- Configuring CDP730
  - Default CDP Configuration730
  - Configuring the CDP Characteristics730
Chapter 29 Configuring CDP731
- Disabling and Enabling CDP731
- Disabling and Enabling CDP on an Interface732
- Monitoring and Maintaining CDP733
- C H a P T E R 30 Configuring LLDP, LLDP-MED, and Wired Location Service736
- Understanding LLDP, LLDP-MED, and Wired Location Service736
CHAPTER 30 Configuring LLDP, LLDP-MED, and Wired Location Service740
- Configuring Location Tlv and Wired Location Service743
- Monitoring and Maintaining LLDP, LLDP-MED, and Wired Location Service746
- Understanding UDLD747
  - Modes of Operation747
Chapter 31 Configuring UDLD748
- Methods to Detect Unidirectional Links748
- Configuration Guidelines750
Configuring UDLD750
- Default UDLD Configuration750
- Enabling UDLD Globally751
- Enabling UDLD on an Interface752
- Resetting an Interface Disabled by UDLD752
- Displaying UDLD Status753
- Understanding SPAN and RSPAN755
Chapter 32 Configuring SPAN and RSPAN756
- Local SPAN756
- Remote SPAN757
- SPAN and RSPAN Concepts and Terminology758
- Understanding Flow-Based SPAN765
- Configuring SPAN and RSPAN766
- Configuring FSPAN and FRSPAN778
- Displaying SPAN, RSPAN. FSPAN, and FRSPAN Status782
- Understanding RMON783
Chapter 33 Configuring RMON784
- Default RMON Configuration785
- Configuring RMON Alarms and Events785
- Collecting Group History Statistics on an Interface787
- Collecting Group Ethernet Statistics on an Interface787
- Displaying RMON Status788
- Understanding System Message Logging789
CHAPTER 34 Configuring System Message Logging790
- System Log Message Format790
- C H a P T E R 34 Configuring System Message Logging791
- Default System Message Logging Configuration792
- Disabling Message Logging792
- Setting the Message Display Destination Device793
- Synchronizing Log Messages794
- Enabling and Disabling Time Stamps on Log Messages796
- Enabling and Disabling Sequence Numbers in Log Messages796
- Defining the Message Severity Level797
- Limiting Syslog Messages Sent to the History Table and to SNMP798
- Enabling the Configuration-Change Logger799
- Configuring UNIX Syslog Servers800
  - Logging Messages to a UNIX Syslog Daemon800
  - Configuring the UNIX System Logging Facility801
- Displaying the Logging Configuration802
- Understanding SNMP803
Chapter 35 Configuring SNMP804
- SNMP Versions804
- SNMP Manager Functions805
- SNMP Agent Functions806
- SNMP Community Strings806
- Using SNMP to Access MIB Variables806
- SNMP Notifications807
- SNMP Ifindex MIB Object Values807
Configuring SNMP808
- Default SNMP Configuration808
- SNMP Configuration Guidelines809
- Disabling the SNMP Agent809
- Configuring Community Strings810
- Configuring SNMP Groups and Users811
- Configuring SNMP Notifications814
- Setting the CPU Threshold Notification Types and Values818
- Setting the Agent Contact and Location Information818
- Limiting TFTP Servers Used through SNMP819
- SNMP Examples820
- Displaying SNMP Status821
CHAPTER 36 Configuring Embedded Event Manager823
- Understanding Embedded Event Manager823
- Embedded Event Manager Environment Variables827
- Configuring Embedded Event Manager828
  - Registering and Defining an Embedded Event Manager Applet828
  - Registering and Defining an Embedded Event Manager TCL Script829
- Displaying Embedded Event Manager Information830
- C H a P T E R 37 Configuring Network Security with Acls832
CHAPTER 37 Configuring Network Security with Acls832
- Understanding Acls832
- Configuring Ipv4 Acls837
- Creating Named MAC Extended Acls858
Configuring Ipv6 Acls873
Chapter 38 Configuring Ipv6 ACL874
- Understanding Ipv6 Acls874
- Configuring Ipv6 Acls876
- Displaying Ipv6 Acls880
Configuring Qos881
- Understanding Qos882
Chapter 39 Configuring Qo883
- Basic Qos Model884
- Classification885
- Queueing and Scheduling Overview894
- Packet Modification902
- Configuring Auto-Qos903
- Displaying Auto-Qos Information913
- Configuring Standard Qos913
CHAPTER 40 Configuring Etherchannels979
- Default Etherchannel Configuration979
- Etherchannel Configuration Guidelines980
- Configuring Layer 2 Etherchannels981
- Configuring Layer 3 Etherchannels983
- Displaying Etherchannel, Pagp, and LACP Status990
- Understanding Link-State Tracking991
- Configuring Link-State Tracking993
CHAPTER 41 Configuring Telepresence E911 IP Phone Support997
- Understanding Telepresence E911 IP Phone Support997
Configuring Ip Unicast Routing1001
- Understanding IP Routing1002
Chapter 42 Configuring IP Unicast Routing1003
- Types of Routing1003
- IP Routing and Switch Stacks1003
- Steps for Configuring Routing1005
- Configuring IP Addressing1006
- Routing Assistance When IP Routing Is Disabled1012
  - Default Gateway1012
  - ICMP Router Discovery Protocol (IRDP)1013
- Configuring Broadcast Packet Handling1014
- Monitoring and Maintaining IP Addressing1018
- Enabling IP Unicast Routing1019
- Configuring ISO CLNS Routing1064
  - Configuring IS-IS Dynamic Routing1065
  - Monitoring and Maintaining ISO IGRP and IS-IS1073
- Configuring Multi-VRF CE1074
- Configuring Unicast Reverse Path Forwarding1089
- Configuring Protocol-Independent Features1089
- Monitoring and Maintaining the IP Network1104
CHAPTER 43 Configuring Ipv6 Unicast Routing1105
- Understanding Ipv61105
- Configuring Ipv61114
- Displaying Ipv61131
- Understanding HSRP1133
Chapter 44 Configuring HSRP1134
- HSRP Versions1135
- Multiple HSRP1136
- Configuring HSRP1137
- Default HSRP Configuration1137
- HSRP and Switch Stacks1137
- Enabling HSRP1138
- HSRP Configuration Guidelines1138
- Configuring HSRP Priority1140
- Configuring HSRP Authentication and Timers1142
- Configuring MHSRP1142
- Configuring HSRP Groups and Clustering1144
- Enabling HSRP Support for ICMP Redirect Messages1144
- Displaying HSRP Configurations1145
- Troubleshooting HSRP for Mixed Stacks of Catalyst 3750-X, 3750-E and 3750 Switches1145
CHAPTER 45 Configuring Cisco IOS IP Slas Operations1147
- Understanding Cisco IOS IP Slas1147
- Configuring IP Slas Operations1152
- Monitoring IP Slas Operations1159
CHAPTER 46 Configuring Enhanced Object Tracking1161
- Understanding Enhanced Object Tracking1161
- C H a P T E R 46 Configuring Enhanced Object Tracking1162
- Configuring Enhanced Object Tracking Features1162
- Monitoring Enhanced Object Tracking1172
CHAPTER 47 Configuring Web Cache Services by Using WCCP1176
- Understanding WCCP1176
CHAPTER 48 Configuring Ip Multicast Routing1185
- C H a P T E R 48 Configuring IP Multicast Routing1186
- Understanding Cisco's Implementation of IP Multicast Routing1186
- Configuring IP Multicast Routing1194
- Multicast Routing and Switch Stacks1194
- Configuring Source Specific Multicast Mapping1201
  - SSM Mapping Configuration Guidelines and Restrictions1201
  - SSM Mapping Overview1202
    - Configuring SSM Mapping1204
    - Monitoring SSM Mapping1206
- Configuring PIM Stub Routing1206
  - PIM Stub Routing Configuration Guidelines1206
  - Enabling PIM Stub Routing1207
- Configuring a Rendezvous Point1208
- Using Auto-RP and a BSR1218
- Configuring Advanced PIM Features1219
- Monitoring the RP Mapping Information1219
- Troubleshooting Pimv1 and Pimv2 Interoperability Problems1219
- Configuring Optional IGMP Features1222
- Configuring Optional Multicast Routing Features1228
- Configuring Basic DVMRP Interoperability Features1233
Chapter 49 Configuring MSDP1250
- MSDP Operation1250
- MSDP Benefits1251
- Configuring MSDP1251
CHAPTER 50 Configuring Fallback Bridging1269
- Understanding Fallback Bridging1269
- Monitoring and Maintaining Fallback Bridging1278
- Troubleshooting1279
Chapter 51 Troubleshooting1280
- Recovering from a Software Failure1280
- Recovering from a Lost or Forgotten Password1281
  - Procedure with Password Recovery Enabled1282
  - Procedure with Password Recovery Disabled1284
- Preventing Switch Stack Problems1286
- Recovering from a Command Switch Failure1287
  - Replacing a Failed Command Switch with a Cluster Member1287
  - Replacing a Failed Command Switch with Another Switch1289
- Recovering from Lost Cluster Member Connectivity1290
- Preventing Autonegotiation Mismatches1291
- Troubleshooting Power over Ethernet Switch Ports1291
  - Disabled Port Caused by Power Loss1291
  - Disabled Port Caused by False Link up1292
- SFP Module Security and Identification1292
- Monitoring SFP Module Status1292
- Monitoring Temperature1293
- Using Ping1293
  - Understanding Ping1293
  - Executing Ping1293
- Using Layer 2 Traceroute1294
- Using IP Traceroute1296
  - Understanding IP Traceroute1296
  - Executing IP Traceroute1296
- Using TDR1297
  - Understanding TDR1297
  - Running TDR and Displaying the Results1298
- Using Debug Commands1298
- Using the Show Platform Forward Command1300
- Using the Crashinfo Files1302
  - Basic Crashinfo Files1303
  - Extended Crashinfo Files1303
- Using On-Board Failure Logging1303
- Troubleshooting Tables1305
CHAPTER 52 Configuring Online Diagnostics1313
- C H a P T E R 52 Configuring Online Diagnostics1314
- Configuring Health-Monitoring Diagnostics1314
- Scheduling Online Diagnostics1314
- Running Online Diagnostic Tests1316
  - Starting Online Diagnostic Tests1317
  - Displaying Online Diagnostic Tests and Test Results1317
Supported Mibs1319
- Mib List1319
Appendix A Supported MIB1320
- MIB List1320
- Using FTP to Access the MIB Files1322
APPENDIX B Working with the Cisco IOS File System, Configuration Files, and Software Images1323
- Working with the Flash File System1323
- Working with Configuration Files1331
- Working with Software Images1347
APPENDIX C Unsupported Commands in Cisco IOS Release 12.2(53)SE21363
- Understanding Online Diagnostics1313
- Access Control Lists1363
  - Unsupported Global Configuration Commands1363
  - Unsupported Route-Map Configuration Commands1364
- Unsupported Privileged EXEC Commands1363
- Archive Commands1364
- ARP Commands1364
- Boot Loader Commands1364
  - Unsupported Global Configuration Commands1364
  - Unsupported Interface Configuration Commands1364
  - Unsupported Privileged EXEC Commands1364
  - Unsupported User EXEC Commands1364
- Debug Commands1365
  - Unsupported Privileged EXEC Commands1365
- Embedded Event Manager1365
  - Unsupported Global Configuration Commands1365
  - Unsupported Commands in Applet Configuration Mode1365
  - Unsupported Commands in Event Trigger Configuration Mode1366
- Fallback Bridging1366
  - Unsupported Privileged EXEC Commands1366
  - Unsupported Global Configuration Commands1366
  - Unsupported Interface Configuration Commands1367
- Hsrp1367
  - Unsupported Global Configuration Commands1367
- IGMP Snooping Commands1368
  - Unsupported Interface Configuration Commands1368
  - Unsupported Global Configuration Commands1368
- Interface Commands1368
  - Unsupported Privileged EXEC Commands1368
- IP Multicast Routing1369
  - Unsupported Privileged EXEC Commands1369
  - Unsupported Global Configuration Commands1369
  - Unsupported Interface Configuration Commands1369
- IP Unicast Routing1370
  - Unsupported Privileged EXEC or User EXEC Commands1370
  - Unsupported Global Configuration Commands1370
  - Unsupported BGP Router Configuration Commands1371
  - Unsupported Interface Configuration Commands1371
  - Unsupported VPN Configuration Commands1371
  - Unsupported Route Map Commands1371
- MAC Address Commands1372
  - Unsupported Privileged EXEC Commands1372
  - Unsupported Global Configuration Commands1372
- Miscellaneous1373
- Msdp1373
  - Unsupported Global Configuration Commands1373
  - Unsupported Privileged EXEC Commands1373
  - Unsupported User EXEC Commands1373
- Netflow Commands1374
  - Radius1374
  - Unsupported Global Configuration Commands1374
  - Unsupported Interface Configuration Commands1374
  - Unsupported Policy-Map Configuration Command1374
  - Unsupported Privileged EXEC Commands1374
- Snmp1375
  - Unsupported Global Configuration Commands1375
- Spanning Tree1375
  - Unsupported Interface Configuration Command1375
- Vlan1375
  - Unsupported User EXEC Commands1375
  - Unsupported Privileged EXEC Command1376

Cisco Catalyst 3750-X User Manual

Table of Contents

Other manuals for Cisco Catalyst 3750-X

Questions and Answers:

Cisco Catalyst 3750-X Specifications

Related product manuals

Brand	Cisco
Model	Catalyst 3750-X
Category	Switch
Language	English