SF500-24

Cisco SF500-24 User Manual

548 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Page #477 background image

Loading...

Page #477 background image

Security: Secure Sensitive Data Management

Configuring SSD

459 Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3

23

Table of Contents

Default Chapter2
- Table of Contents2
Chapter 1: Getting Started19
- Starting the Web-Based Configuration Utility19
  - Launching the Configuration Utility20
    - Http/Https21
    - Logging out22
- Quick Start Device Configuration23
- Interface Naming Conventions24
- Differences between Sx500, SG500X and the ESW2-550X Devices24
- Window Navigation26
  - Application Header26
  - Management Buttons28
Chapter 2: Status and Statistics30
- Viewing Ethernet Interfaces30
- Viewing Etherlike Statistics31
- Viewing GVRP Statistics33
- Viewing 802.1X EAP Statistics34
- Viewing TCAM Utilization35
- Managing RMON36
Chapter 3: Administration: System Log46
- Setting System Log Settings46
- Setting Remote Logging Settings48
- Viewing Memory Logs49
  - RAM Memory50
  - Flash Memory50
Chapter 4: Administration: File Management52
- System Files52
- Upgrade/Backup Firmware/Language55
  - Upgrade/Backing Firmware or Language File56
- Active Image59
- Download/Backup Configuration/Log60
  - Configuration File Backwards Compatibility60
  - Downloading or Backing-Up a Configuration or Log File61
- Configuration Files Properties66
- Copy/Save Configuration67
- DHCP Auto Configuration68
Chapter 5: Administration: Stack Management76
- Overview76
- Types of Units in Stack78
  - Backward Compatibility of Number of Units in Stack78
  - Unit Leds79
- Stack Topology80
  - Types of Stack Topology80
  - Topology Discovery80
- Unit ID Assignment81
  - Duplicate Unit Ids81
- Master Selection Process83
- Stack Changes84
  - Connecting a New Unit84
- Unit Failure in Stack86
  - Failure of Master Unit86
    - Master/Backup Switchover87
    - Slave Unit Handling87
  - Reconnecting the Original Master Unit after Failover88
- Software Auto Synchronization in Stack88
- Stack Unit Mode88
- Stack Ports91
- Default Configuration96
- Interactions with Other Features96
- System Modes96
  - System Mode Backwards Compatibility97
  - System Mode and Stack Management97
Chapter 6: Administration: General Information100
- Device Models100
- System Information102
  - Displaying the System Summary102
  - Configuring the System Settings105
- Console Settings (Autobaud Rate Support)106
- Rebooting the Device106
- Routing Resources108
- Monitoring Fan Status111
- Defining Idle Session Timeout113
- Pinging a Host113
- Traceroute115
Chapter 7: Administration: Time Settings118
- System Time Options119
  - Time119
  - Time Zone and Daylight Savings Time (DST)120
- SNTP Modes120
- Configuring System Time121
Chapter 8: Administration: Diagnostics130
- Testing Copper Ports130
- Displaying Optical Module Status132
  - MSA-Compatible Sfps132
- Configuring Port and VLAN Mirroring133
- Viewing CPU Utilization and Secure Core Technology135
Chapter 9: Administration: Discovery138
- Configuring Bonjour Discovery138
  - Bonjour in Layer 2 System Mode138
  - Bonjour in Layer 3 System Mode139
- LLDP and CDP140
- Configuring LLDP141
- Configuring CDP161
Chapter 10: Port Management170
- Configuring Ports170
- Setting Port Configuration171
- Configuring Link Aggregation174
- Configuring Green Ethernet182
Chapter 11: Smartport190
- Overview191
- What Is a Smartport192
- Smartport Types192
  - Special Smartport Types194
- Smartport Macros195
  - Applying a Smartport Type to an Interface196
- Macro Failure and the Reset Operation196
- How the Smartport Feature Works197
- Auto Smartport198
- Error Handling201
- Default Configuration202
- Relationships with Other Features and Backwards Compatibility202
- Common Smartport Tasks202
- Configuring Smartport Using the Web-Based Interface205
- Built-In Smartport Macros210
Chapter 12: Port Management: Poe222
- Poe on the Device222
- Configuring Poe Properties225
- Configuring Poe Settings226
  - Poe Priority Example227
Chapter 13: VLAN Management230
- Vlans230
- Configuring Default VLAN Settings234
- Creating Vlans235
- Configuring VLAN Interface Settings236
- Defining VLAN Membership237
  - Configuring Port to VLAN238
  - Configuring VLAN Membership239
- GVRP Settings241
  - Defining GVRP Settings241
- VLAN Groups242
  - MAC-Based Groups242
    - Assigning MAC-Based VLAN Groups243
    - Mapping VLAN Group to VLAN Per Interface243
  - Protocol-Based Vlans244
    - Protocol-Based Groups244
    - Protocol-Based Groups to VLAN Mapping245
- Voice VLAN246
- Access Port Multicast TV VLAN259
- Customer Port Multicast TV VLAN262
  - Mapping CPE Vlans to Multicast TV Vlans263
  - CPE Port Multicast VLAN Membership264
Chapter 14: Spanning Tree266
- STP Flavors266
- Configuring STP Status and Global Settings267
- Defining Spanning Tree Interface Settings269
- Configuring Rapid Spanning Tree Settings271
- Multiple Spanning Tree274
- Defining MSTP Properties274
- Mapping Vlans to a MSTP Instance275
- Defining MSTP Instance Settings276
- Defining MSTP Interface Settings277
Chapter 15: Managing MAC Address Tables280
- Types of MAC Addresses280
- Configuring Static MAC Addresses281
- Managing Dynamic MAC Addresses282
  - Configuring Dynamic MAC Address Aging Time282
  - Querying Dynamic Addresses282
- Defining Reserved MAC Addresses283
Chapter 16: Multicast284
- Multicast Forwarding284
  - Typical Multicast Setup285
  - Multicast Address Properties287
- Defining Multicast Properties287
- Adding MAC Group Address289
- Adding IP Multicast Group Addresses291
- Configuring IGMP Snooping292
- MLD Snooping295
- Querying IGMP/MLD IP Multicast Group297
- Defining Multicast Router Ports298
- Defining Forward All Multicast299
- Defining Unregistered Multicast Settings300
Chapter 17: IP Configuration302
- Overview302
  - Layer 2 IP Addressing303
  - Layer 3 IP Addressing304
- Ipv4 Management and Interfaces305
- DHCP Server325
- Ipv6 Management and Interfaces333
- Domain Name353
Chapter 18: IP Configuration: Ripv2358
- Overview358
- How RIP Operates on the Device359
- Configuring RIP364
Chapter 19: IP Configuration: Ipv4 VRRP Virtual Routers372
- Overview372
  - Constraints373
  - VRRP Topology373
- Configurable Elements of VRRP376
- Configuring VRRP379
Chapter 20: Security382
- Defining Users383
  - Setting User Accounts383
  - Setting Password Complexity Rules385
- Configuring TACACS386
- Configuring RADIUS391
- Key Management395
  - Creating a Key Chain395
  - Creating a Key Settings396
- Configuring Management Access Authentication398
- Defining Management Access Method399
  - Active Access Profile400
  - Defining Profile Rules402
- SSL Server404
- Configuring TCP/UDP Services407
- Defining Storm Control408
- Configuring Port Security409
- Configuring 802.1X412
- Defining Time Ranges422
- Denial of Service Prevention423
- IP Source Guard432
- Dynamic ARP Inspection436
Chapter 21: Security: SSH Client442
- Secure Copy (SCP) and SSH442
- Protection Methods443
- SSH Server Authentication445
- SSH Client Authentication446
  - Supported Algorithms446
- Before You Begin447
- Common Tasks447
- SSH Client Configuration through the GUI449
Chapter 22: Security: SSH Server452
- Overview452
- Common Tasks453
- SSH Server Configuration Pages454
  - SSH User Authentication454
  - SSH Server Authentication455
Chapter 23: Security: Secure Sensitive Data Management458
- Introduction458
  - SSD Management459
- SSD Rules459
- SSD Properties464
- Configuration Files467
- SSD Management Channels472
- Menu CLI and Password Recovery473
- Configuring SSD473
  - SSD Properties473
  - SSD Rules474
Chapter 24: Access Control478
- Access Control Lists478
- Defining MAC-Based Acls480
  - Adding Rules to a MAC-Based ACL481
- Ipv4-Based Acls483
  - Defining an Ipv4-Based ACL483
  - Adding Rules (Aces) to an Ipv4-Based ACL484
- Ipv6-Based Acls487
  - Adding Rules (Aces) for an Ipv6-Based ACL488
- Defining ACL Binding491
Chapter 25: Quality of Service494
- Qos Features and Components495
  - Qos Modes495
  - Qos Workflow496
- Configuring Qos - General497
- Qos Basic Mode509
- Qos Advanced Mode511
- Managing Qos Statistics522
  - Policer Statistics523
    - Viewing Single Policer Statistics523
    - Viewing Aggregated Policer Statistics524
  - Viewing Queues Statistics524
Chapter 26: SNMP528
- SNMP Versions and Workflow528
- Model Oids531
- SNMP Engine ID532
- Configuring SNMP Views534
- Creating SNMP Groups535
- Managing SNMP Users537
- Defining SNMP Communities539
- Defining Trap Settings541
- Notification Recipients541
  - Defining Snmpv1,2 Notification Recipients542
  - Defining Snmpv3 Notification Recipients543
- SNMP Notification Filters545

Questions and Answers:

Need help?

Do you have a question about the Cisco SF500-24 and is the answer not in the manual?

Cisco SF500-24 Specifications

General

Brand	Cisco
Model	SF500-24
Category	Switch
Language	English

Related product manuals

Cisco SF500-24P

Preview: Cisco SF200-24

Preview: Cisco SF220-24

Preview: Cisco SF250-24

Cisco SF350-24P

Preview: Cisco SF 300-08

Cisco SF 300-08

Preview: Cisco SF300-24P

Cisco SF300-24P

Preview: Cisco SF250-48HP

Cisco SF250-48HP

Cisco SF302-08PP

Cisco SF100D-16P

Cisco SF 302-08MP

Preview: Cisco Catalyst 2960-SF Series

Cisco Catalyst 2960-SF Series