Cisco Small Business SF200-24 Administration Manual Download Page 282

Page: 282 / 314

Configuring Quality of Service

Managing QoS Statistics

Cisco Small Business 200 1.1 Series Smart Switch Administration Guide

272

Summary of Contents for Small Business SF200-24

Page 1: ...mall Business 200 Series Smart Switch Administration Guide Release 1 1 10 100 Switches SF200 24 SF200 24P SF200 48 SF200 48P Gigabit Switches SG200 18 SG200 26 SG200 26P SG200 50 SG200 50P ADMINISTRATION GUIDE ...

Page 2: ...n Header 7 Management Buttons 9 Chapter 2 Viewing Statistics 12 Viewing Ethernet Interface 12 Viewing Etherlike Statistics 15 Viewing 802 1X EAP Statistics 17 Managing RMON Statistics 18 Viewing RMON Statistics 19 Configuring RMON History 21 Viewing the RMON History Table 23 Defining RMON Events Control 25 Viewing the RMON Events Logs 27 Defining RMON Alarms 28 Chapter 3 Managing System Logs 31 Se...

Page 3: ...em Time 57 Adding an SNTP Server 59 Defining SNTP Authentication 63 Chapter 6 General Administrative Information and Operations 66 System Information 67 Displaying the System Summary 67 Configuring the System Settings 69 Switch Models 70 Rebooting the Switch 71 Monitoring the Fan Status 73 Defining Idle Session Timeout 74 Pinging a Host 75 Chapter 7 Configuring Discovery 77 Configuring Bonjour Dis...

Page 4: ...Dynamic LAG Workflow 112 Defining LAG Management 113 Defining Member Ports in a LAG 114 Configuring LAG Settings 115 Configuring LACP 117 Setting Port LACP Parameter Settings 118 Green Ethernet 120 Setting Global Green Ethernet Properties 121 Setting Green Ethernet Properties for Ports 123 Chapter 9 Managing Device Diagnostics 125 Testing Copper Ports 125 Displaying Optical Module Status 129 Confi...

Page 5: ...ng VLAN Membership 158 Voice VLAN 159 Voice VLAN Options 160 Configuring Voice VLAN Properties 161 Configuring Telephony OUI 163 Chapter 12 Configuring the Spanning Tree Protocol 165 STP Flavors 165 Configuring STP Status and Global Settings 166 Defining Spanning Tree Interface Settings 169 Configuring Rapid Spanning Tree Settings 172 Chapter 13 Managing MAC Address Tables 176 Configuring Static M...

Page 6: ...t GroupsI 202 Defining Multicast Router Ports 203 Defining Forward All Multicast 205 Defining Unregistered Multicast Settings 207 Chapter 15 Configuring IP Information 210 Management and IP Interfaces 210 IP Addressing 212 Defining an IPv4 Interface 213 Defining IPv6 Global Configuration 215 Defining an IPv6 Interface 216 Defining IPv6 Addresses 218 Viewing the IPv6 Default Router List 220 Configu...

Page 7: ...ining Storm Control 259 Configuring Port Security 262 Configuring 802 1X 265 802 1X Parameters Workflow 266 Defining 802 1X Properties 267 Defining 802 1X Port Authentication 268 Defining Host and Session Authentication 271 Viewing Authenticated Hosts 274 Chapter 17 Configuring Quality of Service 275 QoS Features and Components 275 Configuring QoS 277 Displaying QoS Properties 277 Defining QoS Int...

Page 8: ...ctions Browsers have the following restrictions If you are using Internet Explorer 6 you cannot directly use an IPv6 address to access the switch You can however use the DNS Domain Name System server to create a domain name that contains the IPv6 address and then use that domain name in the address bar in place of the IPv6 address In Firefox the automatic pop up on top option is disabled by defaul...

Page 9: ... new password To log in to the device configuration utility STEP 1 Enter the username password The password can contain up to 64 ASCII characters Password complexity rules are described in the Setting Password Complexity Rules section of the Configuring Security chapter STEP 2 If you are not using English select the desired language from the Language drop down menu To add a new language to the swi...

Page 10: ...ace the factory default password When the password expires this page forces you to select a new password Logging Out Logging Out By default the application logs out after ten minutes of inactivity You can change this default value as described in the Defining Idle Session Timeout section in the General Administrative Information and Operations chapter CAUTION Unless the Running Configuration is co...

Page 11: ...lly log out of the system a message is displayed and the Login page opens with a message indicating the logged out state After you log in the application returns to the initial page The initial page displayed depends on the Do not show this page on startup option in the Getting Started page If you did not select this option the initial page is the Getting Started page If you did select this option...

Page 12: ...uct support page and clicking on the Forums link takes you to the Small Business Support Community page View Log RAM Memory page Quick Access Change Device Password User Accounts page Upgrade Device Software Upgrade Backup Firmware Language page Backup Device Configuration Download Backup Configuration Log page Configure QoS QoS Properties page Configure Port Mirroring Port and VLAN Mirroring page...

Page 13: ...lay the Copy Save Configuration page Save the Running Configuration file type by copying it to the Startup Configuration file type on the switch After this save the red X icon and the Save application link are no longer displayed When the switch is rebooted it copies the Startup Configuration file type to the Running Configuration and sets the switch parameters according to the data in the Running...

Page 14: ...lert Status icon is no longer displayed To display the page when there is not an active SYSLOG message follow the Status and Statistics View Log RAM Memory page path Management Buttons Button Name Description The Administrator can use the pull down menu to configure how many entries per page they wish to see at a time Indicates a mandatory field Add Click to display the related Add page and add an...

Page 15: ...ace Clear Logs Clears log files Clear Table Clears table entries Close Returns to main page If there are changes that were not applied to the Running Configuration a message is displayed Copy Settings A table typically contains one or more entries containing configuration settings Instead of modifying each entry individually it is possible to modify one entry and then copy it to multiple entries a...

Page 16: ...ntries for editing The Edit page opens and the entry can be modified 1 Click Apply to save the changes to the Running Configuration 2 Click Close to return to the main page Go Enter the query filtering criteria and click Go The results are displayed on the page Test Click Test to perform the related tests Management Buttons Continued Button Name Description ...

Page 17: ...seful for analyzing the amount of traffic that is both sent and received and its dispersion Unicast Multicast and Broadcast To display Ethernet statistics STEP 1 Click Status and Statistics Interface The Interface page opens STEP 2 Enter the parameters Interface Select the type of interface and specific interface for which Ethernet statistics are to be displayed Refresh Rate Select the time period...

Page 18: ...s transmitted including bad packets and FCS octets but excluding framing bits Unicast Packets Good Unicast packets transmitted Multicast Packets Good Multicast packets transmitted Broadcast Packets Good Broadcast packets transmitted To clear statistics counters Click Clear Interface Counters to clear counters for the interface displayed Click Clear All Interface Counters to clear counters for all ...

Page 19: ...s involved in a single collision but were successfully transmitted Late Collisions Collisions that have been detected after the first 512 bits of data Excessive Collisions Number of transmissions due to excessive collisions Oversize Packets Packets greater than 1518 octets received Internal MAC Receive Errors Frames rejected because of receiver errors Pause Frames Received Received flow control pa...

Page 20: ...Frames Received Valid EAPOL frames received on the port EAPOL Frames Transmitted Valid EAPOL frames transmitted by the port EAPOL Start Frames Received EAPOL Start frames received on the port EAPOL Logoff Frames Received EAPOL Logoff frames received on the port EAP Response ID Frames Received EAP Resp ID frames received on the port EAP Response Frames Received EAP Response frames received by the p...

Page 21: ...since the last time they were cleared Viewing RMON Statistics The Statistics page displays detailed information regarding packet sizes and some information regarding physical layer errors The information shown is according to the RMON standard An oversized packet is defined as an Ethernet frame with the following criteria Packet length is greater than MRU byte size Collision event has not been det...

Page 22: ...ckets Number of oversized packets over 1518 octets received Fragments Number of fragments packets with less than 64 octets excluding framing bits but including FCS octets received Jabbers Total number received packets that were longer than 1632 octets This number excludes frame bits but includes FCS octets that had either a bad FCS Frame Check Sequence with an integral number of octets FCS Error o...

Page 23: ... of frames containing 256 511 bytes that were received Frames of 512 to 1023 Bytes Number of frames containing 512 1023 bytes that were received Frames greater than 1024 Bytes Number of frames containing 1024 1632 bytes and Jumbo Frames that were received STEP 4 Select another interface in the Interface field The RMON statistics are displayed To reset the counters click Clear Interface Counters or...

Page 24: ...across reboots In addition you can send messages to remote SYSLOG servers in the form of SYSLOG messages This section contains the following sections Setting System Log Settings Setting Remote Logging Settings Viewing Memory Logs Setting System Log Settings You can enable or disable logging on the Log Settings page and select whether to aggregate log messages Severity Levels You can select the eve...

Page 25: ... of the higher severity events to be automatically stored in the log Lower severity events are not stored in the log For example if Warning is selected all severity levels that are Warning and higher are stored in the log Emergency Alert Critical Error and Warning No events with severity level below Warning are stored Notice Informational and Debug To set global log parameters STEP 1 Click Adminis...

Page 26: ...page opens This page displays the list of remote log servers STEP 2 Click Add The Add Remote Log Server page opens STEP 3 Enter the parameters Server Definition Select whether to specify the remote log server by IP address or name IP Version Select the supported IP format IPv6 Address Type Select the IPv6 address type if IPv6 is used The options are Link Local The IPv6 address uniquely identifies ...

Page 27: ...rity Select the minimum level of system log messages to be sent to the server STEP 4 Click Apply The Add Remote Log Server page closes the SYSLOG server is added and the Running Configuration file is updated Viewing Memory Logs The switch can write to the following logs Log in RAM cleared during reboot Log in Flash memory cleared only upon user command You can configure the messages that are writt...

Page 28: ...ng the event To clear the log messages click Clear Logs The messages are cleared Flash Memory Flash Memory The Flash Memory page displays the messages that were stored in Flash memory in chronological order The minimum severity for logging is configured in the Log Settings page Flash logs remain when the switch is rebooted You can clear the logs manually To view the Flash logs click Status and Sta...

Page 29: ...le type to another but the names of the file types cannot be changed by the user Other files on the device include firmware boot code and log files and are referred to as operational files The configuration files are text files and can be edited by a user in a text editor such as Notepad after they are copied to an external device such as a PC Files and File Types The following types of configurat...

Page 30: ...t system shutdown or for the maintenance of a specific operating state You can copy the Mirror Configuration Startup Configuration or Running Configuration to a Backup Configuration file The Backup Configuration exists in Flash and is preserved if the device is rebooted Mirror Configuration A copy of the Startup Configuration created by the switch after The switch has been operating continuously f...

Page 31: ...ing Configuration Files section Automatically upload a configuration file from a TFTP server to the switch as described in the Setting DHCP Auto Configuration section CAUTION Unless the Running Configuration is manually copied to the Startup Configuration Backup Configuration or an external file all changes made since the last time the file was saved are lost when the switch is rebooted We recomme...

Page 32: ... following methods for transferring files are supported HTTP that uses the facilities provided by the browser TFTP that requires a TFTP server If a new language file was loaded onto the switch the new language can be selected from the drop down menu It is not necessary to reboot the switch The Upgrade Backup Firmware Language page can also be accessed by selecting Download New Language in the Lang...

Page 33: ...pes are described in the Files and File Types section Note that the boot code can only be upgraded via TFTP b Server Definition Select whether to specify the TFTP server by IP address or domain name c IP Version Select whether an IPv4 or an IPv6 address is used d IPv6 Address Type Select the IPv6 address type if IPv6 is used The options are Link Local The IPv6 address uniquely identifies hosts on ...

Page 34: ...the configuration Global The IPv6 address is a global Unicast IPV6 type that is visible and reachable from other networks e Link Local Interface Select the link local interface if IPv6 is used from the list f TFTP Server IP Address Name Enter the IP address of the TFTP server g Destination File Name Enter the destination file name File names cannot contain slashes or the leading letter of the file...

Page 35: ... types from another device to the switch When restoring a configuration file to the Running Configuration the imported file adds any configuration commands that did not exist in the old file and overrides any parameter values in the existing configuration commands When restoring a configuration file to the Startup Configuration or a backup configuration file the new file replaces the previous file...

Page 36: ...fies hosts on a single network link A link local address has a prefix of FE80 is not routable and can be used for communication only on the local network Only one link local address is supported If a link local address exists on the interface this entry replaces the address in the configuration Global The IPv6 address is a global Unicast IPV6 type that is visible and reachable from other networks ...

Page 37: ...face from the list d TFTP Server IP Address Name Enter the IP address or domain name of the TFTP server e Source File Type Enter the source configuration file type Only valid file types are displayed The file types are described in the Files and File Types section f Destination File Name Enter the destination file name File names cannot contain slashes or the leading letter of the file name should...

Page 38: ...uration and or the Backup Configuration You cannot delete the other configuration file types To view configuration file properties click Administration File Management Configuration Files Properties The Configuration Files Properties page opens This page provides the following fields Configuration File Name Displays the type of file Creation Time Displays the date and time that file was modified T...

Page 39: ...or Backup Configuration From the Startup Configuration to the Backup Configuration From the Backup Configuration to the Startup Configuration From the Mirror Configuration to the Startup Configuration or Backup Configuration To copy one configuration from one file type to another file type STEP 1 Click Administration File Management Copy Save Configuration The Copy Save Configuration page opens ST...

Page 40: ...e DHCP by using the procedure is described in the Management and IP Interfaces section The DHCP Auto Configuration page configures the switch to receive DHCP information pointing to a TFTP server and file for auto configuration purposes or manual configuration of the TFTP server and configuration file in the event that the information is not provided in a DHCP message Note the following limitation...

Page 41: ...er the path and file name of the file to be used when no configuration file name was specified in the DHCP message The window displays the following Last Auto Configuration TFTP Server IP Address Displays the IP address of the TFTP server last used to perform auto configuration Last Auto Configuration File Name Displays the last file name used by the switch in auto configuration The Last Auto Conf...

Page 42: ...are inaccurate Time also reduces confusion in shared file systems as it is important for the modification times to be consistent regardless of the machine on which the files systems reside For these reasons it is important that the time configured on the all devices on the network be accurate NOTE The switch supports Simple Network Time Protocol SNTP and when enabled the switch dynamically synchro...

Page 43: ...he millisecond by using an SNTP server for the clock source NOTE This method is recommended for the sake of accuracy Manual The user can manually set the time From Browser Time can be received from the time of the PC using browser information If this feature is enabled the switch uses the system time from the configuring computer unless the time has been configured on the switch manually by the us...

Page 44: ...r supplying the source parameters fails or dynamic configuration is disabled by the user the manual settings are used Dynamic configuration of the time zone and DST continues after the IP address lease time has expired Manual configuration of the time zone and DST by the user becomes the Operational time zone and DST only if the dynamic configuration is disabled or fails Configuring System Time Us...

Page 45: ...time is used when there is no alternate source of time such as an SNTP server Date Enter the system date Local Time Enter the system time Time Zone Settings The local time is used via DHCP or Time Zone offset Get time zone from DHCP Select to enable dynamic configuration of the time zone and the DST from the DHCP server Whether one or both of these parameters can be configured depends on the infor...

Page 46: ...allows further customization of the start and stop of DST From Date when DST begins each year Day Day of the week on which DST begins every year Week Week within the month from which DST begins every year Month Month of the year in which DST begins every year Time The time at which DST begins every year To Date when DST ends each year For example DST ends locally every fourth Friday in October at ...

Page 47: ...ame time and selects the best source of the parameters according to the closest stratum distance from the reference clock To add an SNTP server STEP 1 Click Administration Time Settings SNTP Settings The SNTP Settings page opens This page displays the following information for each Unicast SNTP server SNTP Server SNTP server IP address Up to eight SNTP servers can be defined The preferred server o...

Page 48: ...stem will only display an SNTP server once a successful broadcast has been received This feature is not functional when the switch is in layer 3 mode STEP 3 Click Add to display the Add SNTP Server page STEP 4 Enter the following parameters Server Definition Select if the SNTP server is going to be identified by its IP address or if you are going to chose a well known SNTP server by name from the ...

Page 49: ...rs with the polling setting enabled and selects a new primary server with the lowest stratum Authentication Select the check box to enable authentication Authentication Key ID If authentication is enabled select the value of the key ID Create the authentication keys using the SNTP Authentication page STEP 5 Click Apply The STNP server is added and you are returned to the main page Defining SNTP Au...

Page 50: ... STEP 4 Click Add The Add SNTP Authentication page opens STEP 5 Enter the following parameters Authentication Key ID Enter the number used to identify this SNTP authentication key internally Authentication Key Enter the key used for authentication up to eight characters The SNTP server must send this key for the switch to synchronize to it Trusted Key Select the check box to allow the switch to re...

Page 51: ...e Switch Monitoring the Fan Status and Temperature Defining Idle Session Timeout Pinging a Host System Information The System Summary page provides a graphic view of the switch and displays switch status hardware information firmware version information general Power over Ethernet PoE status and other items Displaying the System Summary To view system information click Status and Statistics System...

Page 52: ...ime Time that has elapsed since the last reboot Current Time Current system time Base MAC Address Switch MAC address Jumbo Frames Jumbo frame support status This support can be enabled or disabled by using the Port Setting page NOTE Jumbo frames support takes affect only after it is enabled and after the switch is rebooted TCP UDP Services Status HTTP Service Displays whether HTTP is enabled disab...

Page 53: ...umption W Total PoE power delivered to connected PoE devices PoE Power Mode Port Limit or Class Limit Configuring the System Settings To enter system settings STEP 1 Click Administration System Settings The System Settings page opens STEP 2 Modify the system settings System Description Displays a description of the switch System Location Enter the location where the switch is physically located Sy...

Page 54: ... a VLAN aware bridge In Layer 3 mode the switch performs both IPv4 routing and VLAN aware bridging When the switch operates in Layer 3 mode the VLAN Rate Limit and QoS policers are not operational Other QoS Advanced mode features are operational Fast Ethernet 10 100 ports are designated as FE and Gigabit Ethernet ports 10 100 1000 are designated as GE in the table below NOTE Acronyms used for port...

Page 55: ... special purpose combo ports 180W 24 ports FE1 FE12 FE25 FE36 SF200 24 SLM224GT 24 FE ports 2 GE special purpose combo ports SF200 24P SLM224PT 24 FE ports 2 GE special purpose combo ports 100W 12 ports FE1 FE6 FE13 FE18 SF200 48 SLM248GT 48 FE ports 2 GE special purpose combo ports SF200 48P SLM248PT FE1 FE48 GE1 GE4 48 FE ports 2 GE special purpose combo ports 180W 24 ports FE1 FE12 FE25 FE36 Sm...

Page 56: ... Files section To reboot the switch STEP 1 Click Administration Reboot The Reboot page opens STEP 2 Click one of the Reboot buttons to reboot the switch Reboot Reboots the switch Since any unsaved information in the Running Configuration s is discarded when the switch is rebooted you must click Save in the upper right corner of any window to preserve current configuration across the boot process I...

Page 57: ...wing fields Fan Status Fan status OK indicates that the fans are operating normally Temperature The internal temperature of the switch Defining Idle Session Timeout The Idle Session Timeout configures the time interval during which the HTTP session can remain idle before it times out and the user must login again to reestablish the session HTTP Session Timeout HTTPS Session Timeout To set the idle...

Page 58: ...r Global as the type of IPv6 address to enter Link Local The IPv6 address uniquely identifies hosts on a single network link A link local address has a prefix of FE80 is not routable and can be used for communication only on the local network Only one link local address is supported If a link local address exists on the interface this entry replaces the address in the configuration Global The IPv6...

Page 59: ...ries Smart Switch Administration Guide 51 6 STEP 3 Click Activate Ping to ping the host The ping status is displayed and another message is added to the list of messages indicating the result of the ping operation STEP 4 View the results of ping in the Ping Counters and Status section of the page ...

Page 60: ...able or disable the switch services The switch can be discovered by a network management system or other third party applications By default Bonjour is enabled and runs on the Management VLAN The Bonjour console automatically detects the device and displays it Bonjour for a System in Layer 2 Mode Bonjour Discovery can only be enabled globally and not on a per port or per VLAN basis The switch adve...

Page 61: ...ocol are link layer protocols for directly connected LLDP and CDP capable neighbors to advertise themselves and their capabilities to each other By default the switch sends an LLDP CDP advertisement periodically to all its interfaces and terminates and processes incoming LLDP and CDP packets as required by the protocols In LLDP and CDP advertisements are encoded as TLV Type Length Value in the pac...

Page 62: ...VLAN and Auto Voice VLAN sections for details NOTE CDP LLDP does not distinguish if a port is in a LAG If there are multiple ports in a LAG CDP LLDP transmit packets on each port without taking into account the fact that the ports are in a LAG The operation of CDP LLDP is independent of the STP status of an interface If 802 1x port access control is enabled at an interface the switch will transmit...

Page 63: ...anagement in multi vendor environments LLDP standardizes methods for network devices to advertise themselves to other systems and to store discovered information LLDP enables a device to advertise its identification configuration and capabilities to neighboring devices that then store the data in a Management Information Base MIB The network management system models the topology of the network by ...

Page 64: ... Create LLDP MED network policies by using the LLDP MED Network Policy page 4 Associate LLDP MED network policies and the optional LLDP MED TLVs to the desired interfaces by using the LLDP MED Port Settings page 5 If Auto Smartport is to detect the capabilities of LLDP devices enable LLDP in the Smartport Properties page 6 Display overloading information by using the LLDP Overloading page Setting ...

Page 65: ... in seconds that passes between successive LLDP frame transmissions due to changes in the LLDP local systems MIB For a description of LLDP MED refer to the LLDP MED Network Policy section STEP 3 In the Fast Start Repeat Count field enter the number of times LLDP packets are sent when the LLDP MED Fast Start mechanism is initialized This occurs when a new endpoint device links to the switch STEP 4 ...

Page 66: ...st The available TLVs contain the following information Port Description Information about the port including manufacturer product name and hardware software version System Name System s assigned name in alpha numeric format The value equals the sysName object System Description Description of the network entity in alpha numeric format This includes the system s name and versions of the hardware o...

Page 67: ...he dynamic IP addresses If there are no dynamic addresses the software chooses the lowest IP address among the static IP addresses None Do not advertise the management IP address Manual Advertise Select this option and the management IP address to be advertised IP Address If Manual Advertise was selected select the Management IP address from the addresses provided STEP 3 Enter the relevant informa...

Page 68: ...ministrator can manually configure one or more network policies and the interfaces where the policies are to be sent It is the administrator s responsibility to manually create the VLANs and their port memberships according to the network policies and their associated interfaces In addition an administrator can instruct the switch to automatically generate and advertise a network policy for voice ...

Page 69: ...nt by neighbors This informs them how they should mark the application traffic they send to the switch STEP 6 Click Apply The network policy is defined NOTE You must manually configure the interfaces to include the desired manually defined network policies for the outgoing LLDP packets using the LLDP MED Port Settings Configuring LLDP MED Port Settings The LLDP MED Port Settings page enables the s...

Page 70: ...this port System Log Notification Select whether the log notification is sent on a per port basis when an end station that supports MED has been discovered Available Optional TLVs Select the TLVs that can be published by the switch by moving them to the Selected Optional TLVs list Available Network Policies Select the LLDP MED policies that will be published by LLDP by moving them to the Selected ...

Page 71: ... to see the details of the LLDP and LLDP MED TLVs received from the neighbor LLDP Port Status Global Information LLDP Port Status Global Information Chassis ID Subtype Type of chassis ID for example MAC address Chassis ID Identifier of chassis Where the chassis ID subtype is a MAC address the MAC address of the switch is displayed System Name Name of switch System Description Description of the sw...

Page 72: ...Switch Administration Guide 64 7 Local PoE Local PoE information advertised Remote PoE PoE information advertised by the neighbor of neighbors Number of neighbors discovered Neighbor Capability of 1st Device Displays the primary functions of the neighbor for example Bridge or Router ...

Page 73: ...For example the MAC address Chassis ID Identifier of chassis Where the chassis ID subtype is a MAC address the MAC address of the switch is displayed System Name Name of switch System Description Description of the switch in alpha numeric format Supported System Capabilities Primary functions of the device such as Bridge WLAN AP or Router Enabled System Capabilities Primary enabled function s of t...

Page 74: ...ata conversion from the Ethernet interfaces collision detection and bit injection into the network for example 100BASE TX full duplex mode 802 3 Details 802 3 Maximum Frame Size The maximum supported IEEE 802 3 frame size 802 3 Link Aggregation Aggregation Capability Indicates whether the interface can be aggregated Aggregation Status Indicates whether the interface is aggregated Aggregation Port ...

Page 75: ...ass offering media streaming capabilities as well as all Class 1 features Endpoint Class 3 Indicates a communications device class offering all Class 1 and Class 2 features plus location 911 Layer 2 switch support and device information management capabilities PoE Device Type Port PoE type for example powered PoE Power Source Port power source PoE Power Priority Port power priority PoE Power Value...

Page 76: ... policy DSCP Displaying LLDP Neighbors Information The LLDP Neighbors Information page displays information that was received from neighboring devices After timeout based on the value received from the neighbor Time To Live TLV during which no LLDP PDU was received from a neighbor the information is deleted To view the LLDP neighbors information STEP 1 Click Administration Discovery LLDP Neighbors...

Page 77: ...Information about the port including manufacturer product name and hardware software version System Name Name of system that is published System Description Description of the network entity in alpha numeric format This includes the system name and versions of the hardware operating system and networking software supported by the device The value equals the sysDescr object Supported System Capabil...

Page 78: ...full duplex mode 802 3 Power via MDI MDI Power Support Port Class Advertised power support port class PSE MDI Power Support Indicates if MDI power is supported on the port PSE MDI Power State Indicates if MDI power is enabled on the port PSE Power Pair Control Ability Indicates if power pair control is supported on the port PSE Power Pair Power pair control type supported on the port PSE Power Cla...

Page 79: ...LDP MED endpoint device class The possible device classes are Endpoint Class 1 Indicates a generic endpoint class offering basic LLDP services Endpoint Class 2 Indicates a media endpoint class offering media streaming capabilities as well as all Class 1 features Endpoint Class 3 Indicates a communications device class offering all Class 1 and Class 2 features plus location 911 Layer 2 switch suppo...

Page 80: ...ion Enter the following data structures in hexadecimal as described in section 10 2 4 of the ANSI TIA 1057 standard Civic Civic or street address Coordinates Location map coordinates latitude longitude and altitude ECS ELIN Device s Emergency Call Service ECS Emergency Location Identification Number ELIN Unknown Unknown location information Network Policies Application Type Network policy applicat...

Page 81: ...carded Errors Total number of received frames with errors Rx TLVs Discarded Total number of received TLVs that were discarded Unrecognized Total number of received TLVs that were unrecognized Neighbor s Information Deletion Count Number of neighbor ageouts on the interface STEP 2 Click Refresh to view the latest statistics LLDP Overloading LLDP adds information as LLDP and LLDP MED TLVs into the L...

Page 82: ... a port select it and click Details The LLDP Overloading Details opens This page displays the following information for each TLV sent on the port LLDP Mandatory TLVs Size Bytes Total mandatory TLV byte size Status If the mandatory TLV group is being transmitted or if the TLV group was overloaded LLDP MED Capabilities Size Bytes Total LLDP MED capabilities packets byte size Status If the LLDP MED c...

Page 83: ... LLDP MED 802 3 TLVs packets were sent or if they were overloaded LLDP Optional TLVs Size Bytes Total LLDP MED optional TLVs packets byte size Status If the LLDP MED optional TLVs packets were sent or if they were overloaded LLDP MED Inventory Size Bytes Total LLDP MED inventory TLVs packets byte size Status If the LLDP MED inventory packets were sent or if they were overloaded Total Bytes Total n...

Page 84: ...CDP is a Cisco proprietary protocol CDP Configuration Workflow The followings is sample workflow in configuring CDP on the switch You can also find additional CDP configuration guidelines in the LLDP CDP section Enter the CDP global parameters using the CDP Properties page Configure CDP per interface using the Interface Setting page If Auto Smartport is to detect the capabilities of CDP devices en...

Page 85: ...nd the invalid error counter is incremented CDP Version Select the version of CDP to use CDP Hold Time Amount of time that CDP packets are held before the packets are discarded measured in multiples of the TLV Advertise Interval For example if the TLV Advertise Interval is 30 seconds and the Hold Multiplier is 4 then the LLDP packets are discarded after 120 seconds The following options are possib...

Page 86: ...formation in the incoming frame does not match what the local device is advertising STEP 3 Click Apply The LLDP properties are defined Editing CDP Interface Settings Use the Interface Settings page to activate LLDP and remote log server notification per port and to select the TLVs included in LLDP PDUs By setting these properties it is possible to select the types of information to be provided to ...

Page 87: ...s are operational when the switch has been set up to send traps to the management station Syslog Voice VLAN Mismatch Select to enable the option of sending a SYSLOG message when a voice VLAN mismatch is detected This means that the voice VLAN information in the incoming frame does not match what the local device is advertising Syslog Native VLAN Mismatch Select to enable the option of sending a SY...

Page 88: ...LV Port ID Identifier of port advertised in the port TLV Capabilities Capabilities advertised in the port TLV Version Information about the software release on which the device is running Platform Identifier of platform advertised in the platform TLV Native VLAN The native VLAN identifier advertised in the native VLAN TLV Duplex Whether port is half or full duplex advertised in the full half duple...

Page 89: ...field which is different from the last received set or when the first value is received The interface transitions to Down Available Power Amount of power consumed by port Management Power Level Displays the supplier s request to the powered device for its Power Consumption TLV The device always displays No Preference in this field Displaying CDP Neighbors Information The CDP Neighbors Information ...

Page 90: ...of CDP Time to Live Time interval in seconds after which the information for this neighbor is deleted Capabilities Primary functions of the device The capabilities are indicated by two octets Bits 0 through 7 indicate Other Repeater Bridge WLAN AP Router Telephone DOCSIS cable device and station respectively Bits 8 through 15 are reserved Platform Identifier of the neighbor s platform Neighbor Int...

Page 91: ...P Statistics The CDP Statistics page opens STEP 2 Enter the parameter Refresh Rate Select the time period that passes before the CDP Statistics page is refreshed The Attribute Counter block displays the counters for various types of packets per interface Version 1 Number of CDP version 1 packets received transmitted Version 2 Number of CDP version 2 packets received transmitted Total Total number ...

Page 92: ...ocol and configure the potential member ports to the desired LAGs by using the LAG Management page By default all LAGs are empty 3 Configure the Ethernet parameters such as speed and auto negotiation for the LAGs by using the LAG Settings page 4 Configure the LACP parameters for the ports that are members or candidates of a dynamic LAG by using the LACP page 5 Configure Green Ethernet and 802 3 En...

Page 93: ...ake effect only after the Running Configuration is explicitly saved to the Startup Configuration File using the Copy Save Configuration page and the switch is rebooted STEP 4 To update the port settings select the desired port and click Edit The Edit Port Setting page opens STEP 5 Modify the following parameters Interface Select the port number Port Description Enter the port user defined name or ...

Page 94: ...ds You can designate Administrative Speed only when port auto negotiation is disabled NOTE To change the status of a Giga port from 10 Half 100 Half to 1000 Full change the duplex mode to Full and then change the Administrative Port speed to 1000 Operational Port Speed Displays the current port speed that is the result of negotiation Administrative Duplex Mode Select the port duplex mode This fiel...

Page 95: ...t from sending packets by jamming the signal Flow Control Enable or disable 802 3x Flow Control or enable the auto negotiation of Flow Control on the port only when in Full Duplex mode MDI MDIX the Media Dependent Interface MDI Media Dependent Interface with Crossover MDIX status on the port The options are MDIX Select to swap the port s transmit and receives pairs MDI Select to connect this switc...

Page 96: ...bers After a LAG is manually created the LACP option cannot be added or removed until the LAG is edited and a member is removed which can be added prior applying then the LACP button will become available for editing Dynamic A LAG is dynamic if LACP is enabled on it The group of ports assigned to dynamic LAG are candidate ports LACP determines which candidate ports are active member ports The non ...

Page 97: ... All ports in a LAG must be of the same media type To add a port to the LAG it cannot belong to any VLAN except the default VLAN Ports in a LAG must not be assigned to another LAG No more than eight ports are assigned to a static LAG and no more than 16 ports can be candidates for a dynamic LAG All the ports in a LAG must have auto negotiation disabled although the LAG can have auto negotiation en...

Page 98: ...AG Management page 2 Configure various aspects of the LAG such as speed and flow control by using the LAG Settings page 3 Set the LACP priority and timeout of the ports in the LAG by using the LACP page Defining LAG Management The LAG Management page displays the global and per LAG settings The page also enables you to configure the global setting and to select and edit the desired LAG on the Edit...

Page 99: ...gned and 16 ports can be assigned to a dynamic LAG STEP 3 Click Apply The LAG membership is defined and the Running Configuration file is updated Configuring LAG Settings The LAG Settings page displays a table of current settings for all LAGs You can configure the settings of selected LAGs and reactivate suspended LAGs by launching the Edit LAG Settings page To configure the LAG settings or reacti...

Page 100: ... be advertised by the LAG The options are Max Capability All LAG speeds and both duplex modes are available 10 Full The LAG advertises a 10 Mbps speed and the mode is full duplex 100 Full The LAG advertises a 100 Mbps speed and the mode is full duplex 1000 Full The LAG advertises a 1000 Mbps speed and the mode is full duplex Operational Advertisement Displays the Administrative Advertisement statu...

Page 101: ...ies are the same the local and remote MAC addresses are compared The priority of the device with the lowest MAC address controls candidate port selection to the LAG A dynamic LAG can have up to 16 Ethernet ports of the same type Up to eight ports can be active and up to eight ports can be in standby mode When there are more than eight ports in the dynamic LAG the switch on the controlling end of t...

Page 102: ...ts ports as active from the dynamic LAG that has the highest priority NOTE The LACP setting is irrelevant on ports that are not members of a dynamic LAG To define the LACP settings STEP 1 Click Port Management Link Aggregation LACP The LACP page opens STEP 2 Select a port and click Edit The Edit LACP page opens STEP 3 Enter the values for the following fields Port Select the port number to which t...

Page 103: ...the port Up Recovery from this mode to full operational mode is fast transparent and no frames are lost This mode is supported on both GE and FE ports Short Reach Mode This feature provides for power savings on a short length of cable After cable length is analyzed the power usage is adjusted for various cable lengths If the cable is shorter than 50 meters the switch uses less power to send frames...

Page 104: ...efault Configuration Interactions Between Features 802 3az EEE Configuration Workflow 802 3az EEE Overview 802 3az EEE is designed to save power when there is no traffic on the link In Green Ethernet power is reduced when the port is down With 802 3az EEE power is reduced when the port is up but there is no traffic on it 802 3az EEE is only supported on devices with GE ports When using 802 3az EEE...

Page 105: ...nt process both link partners to exchange their 802 3az EEE capabilities Auto Negotiation functions automatically without user interaction when it is enabled on the device NOTE If Auto Negotiation is not enabled on a port the EEE is disabled The only exception is if the link speed is 1GB then EEE will still e enabled even though Auto Negotiation is disabled Link Level Discovery for 802 3az EEE In ...

Page 106: ...o Negotiation field to ensure that it is Enabled STEP 2 Ensure that 803 2 Energy Efficient Ethernet EEE is globally enabled in the Port Management Green Ethernet Properties page it is enabled by default This page also displays how much energy has been saved STEP 3 Ensure that 802 3az EEE is enabled on a port by opening the Green Ethernet Port Settings page a Select a port open the Edit Port Settin...

Page 107: ... NOTE Disabling or enabling Energy Detect Mode temporarily disconnects the network connections Short Reach Globally enable or disable Short Reach mode if there are GE ports on the switch If this mode is changed a message is displayed The field still shows on switches that do not have GE ports but is invalid 802 3 Energy Efficient Ethernet EEE Globally enable or disable EEE mode only available if t...

Page 108: ...EP 1 Click Port Management Green Ethernet Port Settings The Port Settings page opens The Port Settings page displays the following Port The port number Energy Detect State of the port regarding Energy Detect mode Administrative Displays whether Energy Detect mode was enabled Operational Displays whether Energy Detect mode is currently operating Reason If Energy Detect mode is not operational displ...

Page 109: ...he Short Reach Energy Detect and EEE settings for each port however they are not enabled on any port unless they are also enabled globally by using the Properties page To enable Short Reach and EEE globally see the Setting Global Green Ethernet Properties section STEP 2 Select a Port and click Edit The Edit Port Setting page opens STEP 3 Select to enable or disable Energy Detect mode on the port S...

Page 110: ...the Reset Operation Auto Smartport Default Configuration Relationships with Other Features and Backwards Compatibility Common Smartport Tasks Web GUI Built in Smartport Macros Overview The Smartport feature provides a convenient way to save and share common configurations By applying the same Smartport macro to multiple interfaces the interfaces share a common set of configurations A Smartport mac...

Page 111: ...ents and features are described in the following sections Smartport Smartport types and Smartport macros described in this section Voice VLAN and Smartport described in the Voice VLAN section LLDP CDP for Smartport described in the Configuring LLDP and Configuring CDP sections respectively Additionally typical work flows are described in the Common Smartport Tasks section What is a Smartport A Sma...

Page 112: ...r called the anti macro serves to undo all configuration performed by the macro when that interface happens to become a different Smartport type A Smartport macro can be applied by its Smartport type statically from the GUI and dynamically by Auto Smartport Auto Smartport derives the Smartport types of the attached devices based on CDP capabilities LLDP system capabilities and or LLDP MED capabili...

Page 113: ...xist to signify the state of the interface regarding smartport The following are special Smartport types Default An interface that does not yet have a Smartport type assigned to it has the Default Smartport status Server No No Host Yes No IP camera No No IP phone Yes Yes IP phone desktop Yes Yes Switch Yes Yes Router Yes No Wireless Access Point Yes Yes Table1 Smartport Type Supported by Auto Smar...

Page 114: ...s the Smartport status See the workflow area in Common Smartport Tasks section for troubleshooting tips NOTE Throughout this section the term aged out is used to describe the LLDP and CDP messages via their TTL If Auto Smartport is enabled and persistent status is disabled and no more CDP or LLDP messages are received on the interface before both TTLs of the most recent CDP and LLDP packets decrea...

Page 115: ...rt types and the Smartport macros to the interfaces after reboot as follows If the Startup Configuration File does not specify a Smartport type for an interface its Smartport type is set to Default If the Startup Configuration File specifies a static Smartport type the Smartport type of the interface is set to this static type If the Startup Configuration File specifies a Smartport type that was d...

Page 116: ...he macro Because support is provided for Smartport types which correspond to devices which do not allow themselves to be discovered via CDP and or LLDP these Smartport types must be statically assigned to the desired interfaces This can be done by navigating to the Smartport Interface Settings page selecting the radio button of the desired interface and clicking edit Then select the Smartport type...

Page 117: ... that is appropriate for all of the devices is applied to the interface if possible If a device is aged out no longer receiving advertisements from other devices the interface configuration is changed according to its Persistent Status If the Persistent Status is enabled the interface configuration is retained If not the Smartport Type reverts to Default Enabling Auto Smartport Enabling Auto Smart...

Page 118: ...ace where the IP phone attaches Unless Persistent Auto SmartPort is enabled on an interface the SmartPort type and resulting configuration applied by Auto SmartPort will be removed if the attaching device s ages out links down reboots or conflicting capabilities are received Aging out times are determined by the absence of CDP and or LLDP advertisements from the device for a specified time period ...

Page 119: ...rt Type Capability Name LLDP Bit Smartport Type Other 1 Ignore Repeater IETF RFC 2108 2 Ignore MAC Bridge IEEE Std 802 1D 3 Switch WLAN Access Point IEEE Std 802 11 MIB 4 Wireless Access Point Router IETF RFC 1812 5 Router Telephone IETF RFC 4293 6 ip_phone DOCSIS cable device IETF RFC 4639 and IETF RFC 4546 7 Ignore Station Only IETF RFC 4293 8 Host C VLAN Component of a VLAN Bridge IEEE Std 802 ...

Page 120: ...ed For more information about LLDP CDP refer to the Configuring LLDP and Configuring CDP sections respectively Persistent Auto Smartport Interface If the Persistent Status of an interface is enabled its Smartport type and the configuration that is already applied dynamically by Auto Smartport will remain on the interface even after the attaching device ages out the interface goes down and the swit...

Page 121: ...op Switch and Wireless Access Point See the Voice VLAN section for a description of the voice factory defaults Relationships with Other Features and Backwards Compatibility Auto Smartport is enabled by default and may be disabled Telephony OUI cannot function concurrently with Auto Smartport and Auto Voice VLAN Auto Smarport must be disabled before enabling Telephony OUI A switch can be upgraded t...

Page 122: ...TEP 3 Select which type of devices will be detected in the Auto Smartport Device Detection field STEP 4 Click Apply STEP 5 To enable the Auto Smartport feature on one or more interfaces open the Smartport Interface Settings page STEP 6 Select the interface and click Edit STEP 7 Select Auto Smartport in the Smartport Application field STEP 8 Check or uncheck Persistent Status if desired STEP 9 Clic...

Page 123: ... will be used when Auto Smartport applies the selected Smartport type if applicable to an interface 5 In the Edit page modify the fields 6 Click Apply to rerun the macro if the parameters were changed or Restore Defaults to restore default parameter values to built in macros if required Workflow4 To rerun a Smartport macro after it has failed perform the following steps STEP 1 In the Interface Set...

Page 124: ...t Properties Smartport Type Settings and Interface Settings pages For Voice VLAN configuration see the Voice VLAN section For LLDP CDP configuration see the Configuring LLDP and Configuring CDP sections respectively Properties To configure the Smartport feature globally STEP 1 Click Smartport Properties The Properties Page opens STEP 2 Enter the parameters Administrative Auto Smartport Select to g...

Page 125: ... the switch Smartport Type Settings Use the Smartport Type Settings page to edit the Smartport Type settings and view the Macro Source By default each Smartport type is associated with a pair of built in Smartport macros See the Smartport Types page for further information on macro versus anti macro Built in or user defined macros can have parameters The built in macros have up to three parameters...

Page 126: ...o Smartport will not apply the changes to interfaces that were statically assigned a Smartport type NOTE There is no method to validate macro parameters because they do not have a type association Therefore any entry is valid at this point However invalid parameter values may cause errors to occur when the Smartport type is assigned to an interface applying the associated macro Interface Settings ...

Page 127: ...faces All Switches Routers and Wireless Access Points All Switches All Routers All Wireless Access Points If desired you can reapply the associated Smartport to all the interfaces that are already assigned with Smartport type switch router or wireless Access Points This step reapplies the macro to all interfaces which have been assigned to the selection in the area at the top of the page called Re...

Page 128: ...iguration performed by the macro that failed This clean up must be done manually To assign a Smartport type to an interface or activate Auto Smartport on the interface STEP 1 Select an interface and click Edit The Edit Interface Settings page opens STEP 2 Click Reset to reset the interface of an unknown type before applying Auto Smartport or the desired Smartport type to the interface See the note...

Page 129: ... If an interface is in Unknown status as a result of an unsuccessful macro application set it to Default and reapply the last macro that was run on it STEP 4 Click Apply to update the changes and assign the Smartport type to the interface Built in Smartport Macros The following describes the pair of built in macros for each Smartport type For each Smartport type there is a macro to configure the i...

Page 130: ...on native_vlan The untag VLAN which will be configured on the port max_hosts The maximum number of allowed devices on the port Default Values are native_vlan Default VLAN max_hosts 10 the port type cannot be detected automatically the default mode is trunk smartport switchport trunk native vlan native_vlan port security max max_hosts port security mode max addresses port security discard trap 60 s...

Page 131: ...cro description No Desktop no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no port security no port security mode no port security max no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spanning tree portfast auto ...

Page 132: ...N which will be configured on the port Default Values are native_vlan Default VLAN the port type cannot be detected automatically switchport mode access switchport access vlan native_vlan single host port security max 1 port security mode max addresses port security discard trap 60 smartport storm control broadcast level 10 smartport storm control include multicast smartport storm control broadcas...

Page 133: ...ide 125 9 no_printer no_printer macro description No printer no switchport access vlan no switchport mode no port security no port security mode no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spanning tree portfast auto ...

Page 134: ...hich will be configured on the port Default Values are native_vlan Default VLAN the port type cannot be detected automatically switchport mode access switchport access vlan native_vlan single host port security max 1 port security mode max addresses port security discard trap 60 smartport storm control broadcast level 10 smartport storm control include multicast smartport storm control broadcast e...

Page 135: ... Guide 127 9 no_guest no_guest macro description No guest no switchport access vlan no switchport mode no port security no port security mode no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spanning tree portfast auto ...

Page 136: ...igured on the port max_hosts The maximum number of allowed devices on the port Default Values are native_vlan Default VLAN max_hosts 10 the port type cannot be detected automatically the default mode is trunk smartport switchport trunk native vlan native_vlan port security max max_hosts port security mode max addresses port security discard trap 60 smartport storm control broadcast level 10 smartp...

Page 137: ...no_server no_server macro description No server no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no port security no port security mode no port security max no smartport storm control broadcast enable no smartport storm control broadcast level spanning tree portfast auto ...

Page 138: ...osts The maximum number of allowed devices on the port Default Values are native_vlan Default VLAN max_hosts 10 the port type cannot be detected automatically the default mode is trunk smartport switchport trunk native vlan native_vlan port security max max_hosts port security mode max addresses port security discard trap 60 smartport storm control broadcast level 10 smartport storm control includ...

Page 139: ...o description No host no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no port security no port security mode no port security max no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spanning tree portfast auto ...

Page 140: ... native_vlan The untag VLAN which will be configured on the port Default Values are native_vlan Default VLAN switchport mode access switchport access vlan native_vlan single host port security max 1 port security mode max addresses port security discard trap 60 smartport storm control broadcast level 10 smartport storm control include multicast smartport storm control broadcast enable spanning tre...

Page 141: ... 133 9 no_ip_camera no_ip_camera macro description No ip_camera no switchport access vlan no switchport mode no port security no port security mode no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spanning tree portfast auto ...

Page 142: ...ce VLAN ID max_hosts The maximum number of allowed devices on the port Default Values are native_vlan Default VLAN voice_vlan 1 max_hosts 10 the default mode is trunk smartport switchport trunk allowed vlan add voice_vlan smartport switchport trunk native vlan native_vlan port security max max_hosts port security mode max addresses port security discard trap 60 smartport storm control broadcast le...

Page 143: ...lan The voice VLAN ID Default Values are voice_vlan 1 smartport switchport trunk allowed vlan remove voice_vlan no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no port security no port security mode no port security max no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include multicast spa...

Page 144: ...vlan The voice VLAN ID max_hosts The maximum number of allowed devices on the port Default Values are native_vlan Default VLAN voice_vlan 1 max_hosts 10 the default mode is trunk smartport switchport trunk allowed vlan add voice_vlan smartport switchport trunk native vlan native_vlan port security max max_hosts port security mode max addresses port security discard trap 60 smartport storm control ...

Page 145: ...tion voice_vlan The voice VLAN ID Default Values are voice_vlan 1 smartport switchport trunk allowed vlan remove voice_vlan no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no port security no port security mode no port security max no smartport storm control broadcast enable no smartport storm control broadcast level no smartport storm control include m...

Page 146: ...ords native_vlan voice_vlan macro key description native_vlan The untag VLAN which will be configured on the port voice_vlan The voice VLAN ID Default Values are native_vlan Default VLAN voice_vlan 1 the default mode is trunk smartport switchport trunk allowed vlan add all smartport switchport trunk native vlan native_vlan spanning tree link type point to point ...

Page 147: ... Switch Administration Guide 139 9 no_switch no_switch macro description No switch macro keywords voice_vlan macro key description voice_vlan The voice VLAN ID no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no spanning tree link type ...

Page 148: ...ription native_vlan The untag VLAN which will be configured on the port voice_vlan The voice VLAN ID Default Values are native_vlan Default VLAN voice_vlan 1 the default mode is trunk smartport switchport trunk allowed vlan add all smartport switchport trunk native vlan native_vlan smartport storm control broadcast level 10 smartport storm control broadcast enable spanning tree link type point to ...

Page 149: ...r no_router macro description No router macro keywords voice_vlan macro key description voice_vlan The voice VLAN ID no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no smartport storm control broadcast enable no smartport storm control broadcast level no spanning tree link type ...

Page 150: ...ative_vlan voice_vlan macro key description native_vlan The untag VLAN which will be configured on the port voice_vlan The voice VLAN ID Default Values are native_vlan Default VLAN voice_vlan 1 the default mode is trunk smartport switchport trunk allowed vlan add all smartport switchport trunk native vlan native_vlan spanning tree link type point to point ...

Page 151: ... Smart Switch Administration Guide 143 9 no_ap no_ap macro description No ap macro keywords voice_vlan macro key description voice_vlan The voice VLAN ID no smartport switchport trunk native vlan smartport switchport trunk allowed vlan remove all no spanning tree link type ...

Page 152: ...ted cable tests performed on copper cables by the Virtual Cable Tester VCT VCT performs two types of tests Time Domain Reflectometry TDR technology tests the quality and characteristics of a copper cable attached to a port Cables of up to 140 meters long can be tested These results are displayed in the Test Results block of the Copper Test page DSP based tests are performed on active GE links to m...

Page 153: ... device are disrupted To test copper cables attached to ports STEP 1 Click Administration Diagnostics Copper Test The Copper Test page opens STEP 2 Select the port on which to run the test STEP 3 Click Copper Test STEP 4 When the message is displayed click OK to confirm that the link can go down or Cancel to abort the test The following fields are displayed in the Test Results block Last Update Ti...

Page 154: ...med when the port speed is 10Mbit Sec Displaying Optical Module Status The Optical Module Status page displays the operating conditions reported by the SFP Small Form factor Pluggable transceiver Some information might not be available for SFPs that do not support the digital diagnostic monitoring standard SFF 8472 MSA compatible SFPs MSA compatible SFPs The following FE SFP 100Mbps transceivers a...

Page 155: ...FP is operating Voltage SFP s operating voltage Current SFP s current consumption Output Power Transmitted optical power Input Power Received optical power Transmitter Fault Remote SFP reports signal loss Values are True False and No Signal N S Loss of Signal Local SFP reports signal loss Values are True and False Data Ready SFP is operational Values are True and False Configuring Port and VLAN Mi...

Page 156: ...AN Mirroring The Port and VLAN Mirroring page opens This page displays the following fields Destination Port Port to which traffic is to be copied the analyzer port Source Interface Interface port or VLAN from which traffic is sent to the analyzer port Type Type of monitoring incoming to the port outgoing from the port or both Status Displays one of the following values Active Both source and dest...

Page 157: ...chnology This section describes the Secure Core Technology SCT and how to view CPU usage The switch handles the following types of traffic in addition to end user traffic Management traffic Protocol traffic Snooping traffic Excessive traffic burdens the CPU and might prevent normal switch operation The switch uses the Secure Core Technology SCT feature to ensure that the switch will receive and pr...

Page 158: ...ld displays the rate of input frames to the CPU per second STEP 3 Select CPU Utilization to enable viewing CPU resource utilization information The window displays a graph of the CPU utilization The Y axis is percentage of usage and the X axis is the sample number STEP 4 Select the Refresh Rate time period in seconds that passes before the statistics are refreshed A new sample is created for each ...

Page 159: ...iority and Class PoE on the Switch A PoE switch is PSE Power Sourcing Equipment that delivers electrical power to connected PD Powered Devices over existing copper cables without interfering with the network traffic updating the physical network or modifying the network infrastructure PoE Features PoE Features PoE provides the following features Eliminates the need to run 110 220 V AC power to all...

Page 160: ...ment PSE and the Powered Device PD commences after the Detection stage During negotiation the PD specifies its class which is the amount of maximum power that the PD consumes Power Consumption After the classification stage completes the PSE provides power to the PD If the PD supports PoE but without classification it is assumed to be class 0 the maximum If a PD tries to consume more power than pe...

Page 161: ... consume too much and at what percent of the maximum power this trap is generated The PoE specific hardware automatically detects the PD class and its power limit according to the class of the device connected to each specific port Class Limit mode If at any time during the connectivity an attached PD requires more power from the switch than the configured allocation allows no matter if the switch...

Page 162: ...ptions Port Limit The maximum power limit per each port is configured by the user Class Limit The maximum power limit per port is determined by the class of the device which results from the Classification stage Traps Enable or disable a SYSLOG trap Power Trap Threshold Enter the usage threshold that is a percentage of the power limit An alarm is initiated if the power exceeds this value The follo...

Page 163: ...PoE Properties page When the power consumed on the port exceeds the class limit the port power is turned off In some cases the switch does not have enough power to supply all ports with their allowed power at once To resolve this problem assign both limits and priorities to the ports For example 15 4W is allowed on all 48 ports but only 24 ports can be supplied at one time due to power limits In t...

Page 164: ...is field is displayed only if the Power Mode set in the PoE Properties page is Class Limit The class determines the power level Power Consumption Displays the amount of power in milliwatts assigned to the powered device connected to the selected interface Overload Counter Displays the total number of power overload occurrences Short Counter Displays the total number of power shortage occurrences D...

Page 165: ...ices Configuring the PoE Power Priority and Class Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 157 11 STEP 4 Click Apply The PoE settings for the port are defined and the Running Configuration file is updated ...

Page 166: ... which they are connected VLAN Description Each VLAN is configured with a unique VID VLAN ID with a value from 1 to 4094 A port on a device in a bridged network is a member of a VLAN if it can send data to and receive data from the VLAN A port is an untagged member of a VLAN if all packets destined for that port into the VLAN have no VLAN tag A port is a tagged member of a VLAN if all packets dest...

Page 167: ...t if Ingress Filtering is enabled and the ingress port is not a member of the VLAN to which the packet belongs A frame is regarded as priority tagged only if the VID in its VLAN tag is 0 Frames belonging to a VLAN remain within the VLAN This is achieved by sending or forwarding a frame only to egress ports that are members of the target VLAN An egress port may be a tagged or untagged member of a V...

Page 168: ... a provider bridge network where the bridging is based on the S tag VID S VID only The S Tag is preserved while traffic is forwarded through the network service provider s infrastructure and is later removed by an egress device An additional benefit of QinQ is that there is no need to configure customers edge devices QinQ is enabled in the VLAN Management Interface Settings page VLAN Configuration...

Page 169: ...ny special role such as unauthenticated VLAN or Voice VLAN If a port is no longer a member of any VLAN the switch automatically configures the port as an untagged member of the default VLAN A port is no longer a member of a VLAN if the VLAN is deleted or the port is removed from the VLAN When the VID of the default VLAN is changed the switch performs the following on all the ports in the VLAN afte...

Page 170: ...ght corner of the window and save the Running Configuration to the Startup Configuration The Default VLAN ID After Reset becomes the Current Default VLAN ID after you reboot the switch Creating VLANs You can create a VLAN but this has no effect until the VLAN is attached to at least one port either manually or dynamically Ports must always belong to one or more VLANs The Cisco Sx200 Series switch ...

Page 171: ...ingle VLAN or a range of VLANs STEP 3 To create a single VLAN select the VLAN radio button enter the VLAN ID VID and optionally the VLAN Name To create a range of VLANs select the Range radio button and specify the range of VLANs to be created by entering the Starting VID and Ending VID inclusive When using the Range function the maximum number of VLANs you can create at one time is 100 STEP 4 Cli...

Page 172: ...eir own VLAN arrangements PVID across the provider network The switch will be in Q in Q mode when it has one or more customer ports See QinQ Administrative PVID Enter the Port VLAN ID PVID of the VLAN to which incoming untagged and priority tagged frames are classified The possible values are 1 to 4094 Frame Type Select the type of frame that the interface can receive Frames that are not of the co...

Page 173: ...AN aware devices should be to the same VLAN In other words the PVID on the ports between the two devices must be the same if the ports are to send and receive untagged packets to and from the VLAN Otherwise traffic might leak from one VLAN to another VLAN tagged frames can pass through VLAN aware or VLAN unaware network interconnection devices If a destination end node is VLAN unaware but is to re...

Page 174: ...agged The interface is a tagged member of the VLAN Untagged The interface is an untagged member of the VLAN Frames of the VLAN are sent untagged to the interface VLAN PVID Select to set the PVID of the interface to the VID of the VLAN PVID is a per port setting STEP 4 Click Apply The interfaces are assigned to the VLAN and written to the Running Configuration file You can continue to display and o...

Page 175: ...he Join VLAN button The Join VLAN To Port page opens STEP 4 Enter the values for the following fields Interface Select a Port or LAG Mode Displays the port VLAN mode that was selected in the Interface Settings page Select VLAN To associate a port with a VLAN s move the VLAN ID s from the left list to the right list by using the arrow buttons The default VLAN might appear in the right list if it is...

Page 176: ...ace is in access mode or trunk mode the switch automatically makes the interface an untagged member of the VLAN If the interface is in general mode you must manually configure VLAN membership STEP 5 Click Apply The settings are modified and written to the Running Configuration file STEP 6 To see the administrative and operational VLANs on an interface click Details ...

Page 177: ...opriate configurations UC3xx UC5xx hosted All Cisco phones and VoIP endpoints support this deployment model For this model the UC3xx UC5xx Cisco phones and VoIP endpoints reside in the same voice VLAN The voice VLAN of UC3xx UC5xx defaults to VLAN 100 Third party IP PBX hosted Cisco SBTG CP 79xx SPA5xx phones and SPA8800 endpoints support this deployment model In this model the VLAN used by the ph...

Page 178: ...o Smartports enabled Dynamic Voice VLAN Modes The switch supports two dynamic voice VLAN modes They are Telephony OUI Organization Unique Identifier mode and Auto Voice VLAN mode The two modes affect how voice VLAN and or voice VLAN port memberships are configured The two modes are mutually exclusive to each other Telephony OUI In Telephony OUI mode the voice VLAN must be a manually configured VLA...

Page 179: ...one endpoint may obtain the voice VLAN in the boot file it downloads from a TFTP server A DHCP server may specify the boot file and the TFTP server when it assigns an IP address to the phone A phone endpoint may obtain the voice VLAN information from CDP and LLDP MED advertisements it receives from their neighbor voice systems and switches The switch expects the attaching voice devices to send voi...

Page 180: ...VLAN out of the box It also applies to unconfigured switches that have been upgraded to the firmware version that supports Auto Voice VLAN NOTE The defaults and the voice VLAN triggers are designed to have no affect on any installations without a voice VLAN and on switches that have already been configured You may manually disable and enable Auto Voice VLAN and or Auto Smartport to fit your deploy...

Page 181: ...ates it and replaces all the port memberships of the existing voice VLAN to the new voice VLAN This may interrupt or terminate existing voice sessions which is expected when network topology is altered NOTE If the switch is in Layer 2 mode it can synchronize with only VSDP capable switches in the same management VLAN If the switch is in layer 3 mode it can synchronize with VSDP capable switches th...

Page 182: ...2 1p value found in the voice stream For Telephony OUI voice streams the user can override the quality of service and optionally remark the 802 1p of the voice streams by specifying the desired CoS 802 1p values and using the remarking option under Telephony OUI Voice VLAN Constraints The following constraints exist Only one Voice VLAN is supported A VLAN that is defined as a Voice VLAN cannot be ...

Page 183: ...e VLAN to Enable Auto Voice VLAN STEP 4 Select the Auto Voice VLAN Activation method NOTE If the device is currently in Telephony OUI mode you must disable it before you can configure Auto Voice Vlan STEP 5 Click Apply STEP 6 Configure Smartports as described in the Common Smartport Tasks section STEP 7 Configure LLDP CDP as described in the Configuring LLDP and Configuring CDP sections respective...

Page 184: ...nagement Voice VLAN Properties The Properties page opens The voice VLAN settings configured on the switch are displayed in the Voice VLAN Settings Administrative Status block The voice VLAN settings that are actually being applied to the voice VLAN deployment are displayed in the Voice VLAN Settings Operational Status block STEP 2 Enter values for the following fields Voice VLAN ID Enter the VLAN ...

Page 185: ...oice VLAN Trigger Auto Voice VLAN on the switch is activated and put into operation only if the switch detects a device advertising the voice VLAN NOTE Manually re configuring the voice VLAN ID CoS 802 1p and or DSCP from their default values will result in a static voice VLAN which has higher priority than auto voice VLAN that was learned from external sources STEP 3 Click Apply The VLAN properti...

Page 186: ...that discovers or is configured with the voice VLAN from which the voice VLAN is learned Switch MAC Address Base MAC address of the switch If the device s Switch MAC address is the Root Switch MAC Address the device is the Auto Voice VLAN root device Voice VLAN ID Change Time Last time that voice VLAN was updated STEP 2 Click Restart Auto Voice VLAN to reset the voice VLAN to the default voice VLA...

Page 187: ...UI page to configure Telephony OUI QoS properties In addition the Auto Membership Aging time can be configured If the specified time period passes with no telephony activity the port is removed from the Voice VLAN Use the Telephony OUI page to view existing OUIs and add new OUIs To configure Telephony OUI and or add a new Voice VLAN OUI STEP 1 Click VLAN Management Voice VLAN Telephony OUI The Tel...

Page 188: ...ollowing fields Telephony OUI Enter a new OUI Description Enter an OUI name STEP 6 Click Apply The OUI is added to the Telephony OUI Table Adding Interfaces to Voice VLAN on Basis of OUIs The QoS attributes can be assigned per port to the voice packets in one of the following modes All Quality of Service QoS values configured to the Voice VLAN are applied to all of the incoming frames that are rec...

Page 189: ...e VLAN click Edit The Edit Interface Settings page opens STEP 3 Enter the values for the following fields Interface Select an interface Telephony OUI VLAN Membership If enabled the interface is a candidate port of the telephony OUI based voice VLAN When packets that match one of the configured telephony OUI are received the port is added to the voice VLAN Voice VLAN QoS Mode Select one of the foll...

Page 190: ...uring STP Status and Global Settings Defining Spanning Tree Interface Settings Configuring Rapid Spanning Tree Settings STP Flavors Loops occur when alternate routes exist between hosts Loops in an extended network can cause Layer 2 switches to forward traffic indefinitely resulting in increased traffic and reduced network efficiency STP provides a tree topology for any arrangement of Layer 2 swit...

Page 191: ...erface Settings page and RSTP Interface Settings page to configure ports with these modes respectively To set STP status and global settings STEP 1 Click Spanning Tree STP Status and Global Settings The STP Status and Global Settings page displays STEP 2 Enter the parameters Global Settings Spanning Tree State Enable or disable STP on the switch STP Operation Mode Select an STP mode BPDU Handling ...

Page 192: ...eiving a configuration message before attempting to redefine its own configuration Forward Delay Set the interval in seconds that a bridge remains in a learning state before forwarding packets For more information refer to Defining Spanning Tree Interface Settings Designated Root Bridge ID The bridge priority concatenated with the MAC address of the switch Root Bridge ID The Root Bridge priority c...

Page 193: ...LAG on which Spanning Tree is configured STP Enables or disables STP on the port Edge Port Enables or disables Fast Link on the port If Fast Link mode is enabled for a port the port state is automatically placed in the Forwarding state when the port link is up Fast Link optimizes the STP protocol convergence The options are Enable Enables Fast Link immediately Auto Enables Fast Link a few seconds ...

Page 194: ...g mode The port cannot forward traffic and cannot learn MAC addresses Learning The port is in Learning mode The port cannot forward traffic but it can learn new MAC addresses Forwarding The port is in Forwarding mode The port can forward traffic and learn new MAC addresses Designated Bridge ID Displays the bridge priority and the MAC address of the designated bridge Designated Port ID Displays the...

Page 195: ...ol Migration to run a Protocol Migration test This discovers whether the link partner using STP still exists and if so whether it has migrated to RSTP If it still exists as an STP link the device continues to communicate with it by using STP Otherwise if it has been migrated to RSTP the device communicates with it using RSTP STEP 5 Select an interface and click Edit The Edit Rapid Spanning Tree pa...

Page 196: ...cted to a shared segment Disabled The port is not participating in Spanning Tree Mode Displays the current Spanning Tree mode Classic STP or RSTP Fast Link Operational Status Displays whether the Fast Link Edge Port is enabled disabled or automatic for the interface The values are Enabled Fast Link is enabled Disabled Fast Link is disabled Auto Fast Link mode is enabled a few seconds after the int...

Page 197: ...Configuring the Spanning Tree Protocol Configuring Rapid Spanning Tree Settings Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 189 13 MSTP Workflow ...

Page 198: ...nd the frame is marked for egress on a specific port based on the search of the tables Frames addressed to a destination MAC address that is not found in the tables are flooded to all the ports on the relevant VLAN These frames are called Unknown Unicast Frames The switch supports a maximum of 8 000 static and dynamic MAC addresses This section contains information for defining both static and dyn...

Page 199: ...aged out of the table Delete on timeout The MAC address is deleted when aging occurs Secure The MAC address is secure when the interface is in classic locked mode STEP 4 Click Apply A new entry is made in the table Dynamic MAC Addresses The Dynamic Address Table contains the MAC addresses acquired by monitoring the source addresses of traffic entering the switch When the destination address for in...

Page 200: ...namic Addresses To view all dynamic addresses or a subset STEP 1 Click MAC Address Tables Dynamic Addresses The Dynamic Addresses page opens STEP 2 In the Filter block enter the following query criteria VLAN ID Enter the VLAN ID for which the table is queried MAC Address Enter the MAC address for which the table is queried Interface Select the interface for which the table is queried The query can...

Page 201: ...Managing MAC Address Tables Dynamic MAC Addresses Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 193 14 Click Clear Table to delete all of the dynamic MAC addresses ...

Page 202: ...ticast Router Ports Defining Forward All Multicast Defining Unregistered Multicast Settings Multicast Forwarding Multicast forwarding enables one to many information dissemination Multicast applications are useful for dissemination of information to multiple clients where clients do not require reception of the entire content A typical application is a cable TV like service where clients can join ...

Page 203: ... snooping and a Multicast client that wants to receive a Multicast stream In this setup the router sends IGMP queries periodically NOTE MLD for IPv6 is derived from the IGMP v2 for IPv4 Even though the description in this section is mostly for IGMP it also describes coverage of MLD where implied These queries reach the switch which in turn floods the queries to the VLAN and also learns the port wh...

Page 204: ... Group Address G of the Multicast packet One of these options can be configured per VLAN The system maintains lists of Multicast groups for each VLAN and this manages the Multicast information that each port should receive The Multicast groups and their receiving ports can be configured statically or learned dynamically using IGMP or Multicast Listener Discovery MLD protocols snooping Multicast Re...

Page 205: ...es Each IPv4 Multicast address is in the address range 224 0 0 0 to 239 255 255 255 The IPv6 Multicast address is FF00 8 To map an IP Multicast group address to an Layer 2 Multicast address For IPv4 this is mapped by taking the 23 low order bits from the IPv4 address and adding them to the 01 00 5e prefix By standard the upper nine bits of the IP address are ignored and any IP addresses that only ...

Page 206: ...ata and G is the IPv4 or IPv6 group address If a Multicast client can receive Multicast traffic from any source of a specific Multicast group this is written as G The following are ways of forwarding Multicast frames MAC Group Address Based on the destination MAC address in the Ethernet frame NOTE As mentioned before one or more IP Multicast group addresses can be mapped to a MAC group address For...

Page 207: ...ch supports forwarding incoming Multicast traffic based on the Multicast group information This information is derived from the IGMP MLD packets received or as the result of manual configuration and it is stored in the Multicast Forwarding Database MFDB When a frame is received from a VLAN that is configured to forward Multicast streams based on MAC group addresses and its destination address is a...

Page 208: ... this page and in the IP Multicast Group Address page are displayed For those created in the IP Multicast Group Address page the IP addresses are converted to MAC addresses STEP 4 Click Add to add a static MAC Group Address The Add MAC Group Address page opens STEP 5 Enter the parameters VLAN ID Defines the VLAN ID of the new Multicast group MAC Group Address Defines the MAC address of the new Mul...

Page 209: ...cannot be deleted in this page even if they are selected Adding IP Multicast Group Addresses The IP Multicast Group Address page is similar to the MAC Group Address page except that Multicast groups are identified by IP addresses The IP Multicast Group Address page enables querying and adding IP Multicast groups To define and view IP Multicast groups STEP 1 Click Multicast IP Multicast Group Addre...

Page 210: ...rce Specific Indicates that the entry contains a specific source and adds the address in the IP Source Address field If not the entry is added as a G entry an IP group address from any IP source IP Source Address Defines the source address to be included STEP 6 Click Apply The IP Multicast group is added and the device is updated STEP 7 To configure and display the registration of an IP group addr...

Page 211: ...switch forwards Multicast frames to ports that have registered Multicast clients NOTE The switch supports IGMP Snooping only on static VLANs It does not support IGMP Snooping on dynamic VLANs When IGMP Snooping is enabled globally or on a VLAN all IGMP packets are forwarded to the CPU The CPU analyzes the incoming packets and determines the following Which ports are asking to join which Multicast ...

Page 212: ...us Enable or disable the monitoring of network traffic for the selected VLAN Operational IGMP Snooping Status Displays the current status of the IGMP Snooping for the selected VLAN MRouter Ports Auto Learn Enable or disable auto learning of the ports to which the Mrouter is connected Query Robustness Enter the Robustness Variable value to be used if this switch is the elected querier Operational Q...

Page 213: ... IGMP Group Leave message is received on that port STEP 5 Click Apply The Running Configuration file is updated MLD Snooping When IGMP MLD snooping is enabled in a switch on a VLAN it analyzes the IGMP MLD packets it receives from the VLAN connected to the switch and from the Multicast routers in the network When a switch learns that a host is using IGMP MLD messages to register to receive a Multi...

Page 214: ...ion Multicast addresses MLDv2 snooping uses MLDv2 control packets to forward traffic based on the source IPv6 address and the destination IPv6 Multicast address The actual MLD version is selected by the Multicast router in the network In an approach similar to IGMP snooping MLD frames are snooped as they are forwarded by the switch from stations to an upstream Multicast router and vice versa This ...

Page 215: ...oping and Bridge Multicast filtering are both enabled Operational MLD Snooping Status Displays the current status of MLD Snooping for the selected VLAN MRouter Ports Auto Learn Enable or disable Auto Learn for the Multicast router Query Robustness Enter the Robustness Variable value to be used if the switch cannot read this value from messages sent by the elected querier Operational Query Robustne...

Page 216: ...h port STEP 5 Click Apply The Running Configuration file is updated Querying IGMP MLD IP Multicast Group The IGMP MLD IP Multicast Group page displays the IPv4 and IPv6 group address learned from IGMP MLD messages There might be a difference between information on this page and for example information displayed in the MAC Group Address page Assuming that the system is in MAC based groups and a por...

Page 217: ...up address Defining Multicast Router Ports A Multicast router Mrouter port is a port that connects to a Multicast router The switch includes the Multicast router port s when it forwards the Multicast streams and IGMP MLD registration messages This is required so that the Multicast routers can in turn forward the Multicast streams and propagate the registration messages to other subnets To statical...

Page 218: ...uter port STEP 5 Click Apply to update the switch Defining Forward All Multicast The Forward All page enables and displays the configuration of the ports and or LAGs that are to receive Multicast streams from a specific VLAN This feature requires that Bridge Multicast filtering in the Properties page be enabled If it is disabled then all Multicast traffic is flooded to ports in the switch You can ...

Page 219: ...lly configured Multicast groups that were either dynamically learned or statically configured are considered registered The switch forwards Multicast frames from a registered Multicast group only to ports that are registered to that Multicast group The Unregistered Multicast page enables handling Multicast frames that belong to groups that are not known to the switch unregistered Multicast groups ...

Page 220: ... Multicast Displays the forwarding status of the selected interface The possible values are Forwarding Enables forwarding of unregistered Multicast frames to the selected interface Filtering Enables filtering rejecting of unregistered Multicast frames to the selected interface STEP 3 Click Apply The settings are saved and the Running Configuration file is updated ...

Page 221: ...e Layer 3 capabilities Layer 2 IP Addressing Layer 2 IP Addressing The switch has a single IP address in the management VLAN This IP address and the default gateway can be configured manually or by DHCP The static IP address and default gateway are configured on the IPv4 Interface page The switch uses the default gateway if configured to communicate with devices that are not in the same IP subnet ...

Page 222: ...n be configured with a static or dynamic IP address The IP subnets to which these IP addresses belong are known as directly connected attached IP subnets The IP address assignment rules for the switch are as follows Unless the switch is configured with a static IP address it issues DHCP queries until a response is received from a DHCP server If the IP address on the switch is changed the switch is...

Page 223: ... telnet or the Web GUI VLAN1 is the default Management VLAN IP Address Type Select one of the following options Dynamic Discover the IP address using DHCP from the management VLAN Static Manually define a static IP address If a static IP address is used configure the following fields IP Address Enter the IP address and configure one of the following fields Mask Select and enter the IP address mask...

Page 224: ...otocol version 6 IPv6 is a network layer protocol for packet switched internetworks IPv6 was designed to replace IPv4 the predominantly deployed Internet protocol IPv6 introduces greater flexibility in assigning IP addresses because the address size increases from 32 bit to 128 bit addresses IPv6 addresses are written as eight groups of four hexadecimal digits for example FE80 0000 0000 0000 0000 ...

Page 225: ... per interval STEP 3 Click Apply The IPv6 global parameters are defined and the Running Configuration file is updated Defining an IPv6 Interface The IPv6 Interfaces page displays the switch s IPv6 interface parameters and enables configuring this interface An IPv6 interface can be configured on a port a LAG VLAN or ISATAP tunnel interface The switch supports one IPv6 interface as an IPv6 end devic...

Page 226: ...orts IPv6 stateless address auto configuration of site local and global IP address from the IPv6 router advertisement received on the interface The switch does not support stateful address auto configuration Send ICMPv6 Messages Enable generating unreachable destination messages STEP 5 Click Apply to enable IPv6 processing on the selected interface Regular IPv6 interfaces have the following addres...

Page 227: ... IPV6 type that is visible and reachable from other networks IPv6 Address The switch supports one IPv6 interface In addition to the default link local and Multicast addresses the device also automatically adds global addresses to the interface based on the router advertisements it receives The device supports a maximum of 128 addresses at the interface Each address must be a valid IPv6 address tha...

Page 228: ...e removed An alert message is displayed after an attempt is made to insert more than a single user defined address An alert message is displayed when attempting to insert a non link local type address meaning fe80 To define a default router STEP 1 Click Administration Management Interface Layer 2 IPv6 Default Router List The IPv6 Default Router List page opens This page displays the following fiel...

Page 229: ... the Running Configuration file is updated Configuring IPv6 Tunnels The ISATAP Intra Site Automatic Tunnel Addressing Protocol enables encapsulating IPv6 packets within IPv4 packets for transmission over IPv4 networks To configure a tunnel do the following Manually enable and configure an ISATAP tunnel Manually define an IPv6 interface for the ISATAP tunnel After these actions the switch automatic...

Page 230: ... None Disable the ISATAP tunnel Manual Manually configure an IPv4 address The IPv4 address configured must be one of the IPv4 addresses at the switch IPv4 interfaces Tunnel Router s Domain Name A global string that represents a specific automatic tunnel router domain name The name can either be the default name ISATAP or a user defined name Query Interval The number of seconds from 10 3600 between...

Page 231: ...plays the neighbors that were automatically detected or manually configured entries Each entry displays to which interface the neighbor is connected the neighbor s IPv6 and MAC addresses the entry type static or dynamic and the state of the neighbor To define IPv6 neighbors STEP 1 Click Administration Management Interface Layer 2 IPv6 Neighbors The IPv6 Neighbors page opens STEP 2 Select a Clear T...

Page 232: ... The neighboring IPv6 interface to be added IPv6 Address Enter the IPv6 network address assigned to the interface The address must be a valid IPv6 address MAC Address Enter the MAC address mapped to the specified IPv6 address STEP 5 Click Apply The Running Configuration file is updated STEP 6 To change the type of an IP address from Dynamic to Static use the Edit IPv6 Neighbors page Viewing IPv6 R...

Page 233: ... forwarded Typically this is the address of a neighboring router This must be a link local address Metric Value used for comparing this route to other routes with the same destination in the IPv6 router table All default routes have the same value Life Time Time period during which the packet can be sent and resent before being deleted Route Type How the destination is attached and the method used...

Page 234: ...t The switch creates dynamic addresses from the ARP packets it receives Dynamic addresses age out after a configured time NOTE The IP MAC address mapping information in the ARP Table is used by the switch to forward traffic originated by the switch To define the ARP tables STEP 1 Click IP Configuration ARP Layer 2 The ARP Table page opens STEP 2 Enter the parameters ARP Entry Age Out Enter the num...

Page 235: ...Click Add The Add ARP Entry page opens STEP 5 Enter the parameters IP Version The IP address format supported by the host Only IPv4 is supported Interface IPv4 interface on the switch There is only one directly connected IP subnet which is always in the management VLAN All the static and dynamic addresses in the ARP Table reside in the management VLAN IP Address Enter the IP address of the local d...

Page 236: ...ons DHCP The default domain name is dynamically assigned by the DHCP server Static The default domain name is user defined N A No default domain name DNS Server Table DNS Server The IP addresses of the DNS servers Up to eight DNS servers can be defined Server State The active DNS server There can be only one active server Each static server has a priority a lower value means a higher priority When...

Page 237: ...gh VLAN2 or ISATAP DNS Server IP Address Enter the DNS server IP address Set DNS Server Active Select to activate the new DNS server STEP 6 Click Apply The DNS server is added and the Running Configuration file is updated Mapping DNS Hosts The switch saves frequently queried domain names acquired from the DNS servers in a local DNS cache The cache can hold up to 64 static entries 64 dynamic entrie...

Page 238: ... is not routable and can be used for communication only on the local network Only one link local address is supported If a link local address exists on the interface this entry replaces the address in the configuration Global The IPv6 address is a global Unicast IPV6 type that is visible and reachable from other networks Link Local Interface If the IPv6 address type is Link Local select whether it...

Page 239: ... administer the switch is described in the following sections Setting Password Complexity Rules Configuring RADIUS Parameters Configuring Management Access Authentication Defining Access Profiles Configuring TCP UDP Services Protection from attacks directed at the switch CPU is described in the following sections Configuring TCP UDP Services Defining Storm Control Access control of end users to th...

Page 240: ...omplex enough Password Complexity Settings are enabled in the Password Strength page you will be prompted to create another password Setting User Accounts Setting User Accounts The User Accounts page enables entering additional users that are permitted to access to the switch read only or read write or changing the passwords of existing users NOTE It is not permitted to delete all users If all use...

Page 241: ...y hazards Therefore password complexity requirements are enforced by default and may be configured as necessary Password complexity requirements are configured on the Password Strength page reached through the Security drop down menu Additionally password aging time may be configured on this page To define password complexity rules STEP 1 Click Security Password Strength The Password Strength page...

Page 242: ...anging the case of the characters STEP 4 If the Password Complexity Settings are enabled the following parameters may be configured Minimal Password Length Enter the minimal number of characters required for passwords NOTE A zero length password no password is allowed and can still have password aging assigned to it Minimal Number of Character Classes Enter the number of character classes which mu...

Page 243: ...se fields IP Version Displays the supported IP version IPv6 and or IPv4 subnet Retries Enter the number of transmitted requests that are sent to the RADIUS server before a failure is considered to have occurred Timeout for Reply Enter the number of seconds that the switch waits for an answer from the RADIUS server before retrying the query or switching to the next server Dead Time Enter the number...

Page 244: ... authenticating and encrypting communication between the switch and the RADIUS server This key must match the key configured on the RADIUS server If this field is left blank the switch attempts to authenticate to the RADIUS server by using the default Key String Timeout for Reply Enter the number of seconds the switch waits for an answer from the RADIUS server before retrying the query or switchin...

Page 245: ...ied in priority order and do not reply the user is authenticated locally If an authentication method fails or the user has insufficient privilege level the user is denied access to the switch In other words if authentication fails at an authentication method the switch stops it does not continue and does not attempt to use the next authentication method To define authentication methods for an acce...

Page 246: ...thods are given management access to the switch There can only be a single access profile active on the switch at one time Access profiles consist of one or more rules The rules are executed in order of their priority within the access profile top to bottom Rules are composed of filters that include the following elements Access Methods Methods for accessing and managing the switch Hypertext Trans...

Page 247: ... the active access profile select a profile from the Active Access Profile drop down menu and click Apply This makes the chosen profile the active access profile NOTE Some 200 Series switches only support web access The profile you define may be customized according to a set of settings provided in Access Profile entry but ultimately will only provide web access console or any other methods SSH Te...

Page 248: ...rface attached to the rule The options are All Applies to all ports VLANs and LAGs User Defined Applies to selected interface Interface Enter the interface number if User Defined was selected Applies to Source IP Address Select the type of source IP address to which the access profile applies The Source IP Address field is valid for a subnetwork Select one of the following values All Applies to al...

Page 249: ... example you can limit access to the switch from all IP addresses except IP addresses that are allocated to the IT management center In this way the switch can still be managed and has gained another layer of security To add profile rules to an access profile STEP 1 Click Security Mgmt Access Method Profile Rules The Profiles Rules page displays STEP 2 Select the Filter field and an access profile...

Page 250: ...ed Applies only to the port VLAN or LAG selected Interface Enter the interface number Applies to Source IP Address Select the type of source IP address to which the access profile applies The Source IP Address field is valid for a subnetwork Select one of the following values All Applies to all types of IP addresses User Defined Applies to only those types of IP addresses defined in the fields IP ...

Page 251: ...vice Indicates whether the HTTP service is enabled or disabled HTTPS Service Indicates whether the HTTPS service is enabled or disabled The TCP Service Table displays the following fields for each service Service Name Access method through which the switch is offering the TCP service Type IP protocol the service uses Local IP Address Local IP address through which the switch is offering the servic...

Page 252: ...orm Storm protection enables you to limit the number of frames entering the switch and to define the types of frames that are counted towards this limit When a threshold is entered in the system the port discards traffic after that threshold is reached The port remains blocked until the traffic rate drops below this threshold It then resumes normal forwarding To define Storm Control STEP 1 Click S...

Page 253: ...ck Apply Storm control is modified and the Running Configuration file is updated Configuring Port Security Network security can be increased by limiting access on a port to users with specific MAC addresses The MAC addresses can be either dynamically learned or statically configured Port security monitors received and learned packets Access to locked ports is limited to users with specific MAC add...

Page 254: ... related traps not generated through SNMP NOTE If you want to use 802 1X on a port it must be in multiple host or multi session mode Port security on a port cannot be set if the port is in single mode see the 802 1x Host and Session Authentication page To configure port security STEP 1 Click Security Port Security The Port Security page displays STEP 2 Select an interface to be modified and click ...

Page 255: ...ithout learning the MAC address Shutdown Discards packets from any unlearned source and shuts down the port The port remains shut down until reactivated or until the switch is rebooted Trap Select to enable traps when a packet is received on a locked port This is relevant for lock violations For Classic Lock this is any new address received For Limited Dynamic Lock this is any new address that exc...

Page 256: ... single host In this mode the switch as an authenticator supports a single 802 1x session and grants permission to use the port to the authorized supplicant All access by other devices received from the same port are denied until the authorized supplicant is no longer using the port or the access is to the unauthenticated VLAN Single session multiple hosts This follows the 802 1x standard In this ...

Page 257: ...obally enable 802 1X and define how ports will be authenticated For 802 1X to function it must be activated both globally and individually on each port To define port based authentication STEP 1 Click Security 802 1X Properties The 802 1X Properties page displays STEP 2 Enter the parameters Port Based Authentication Enable or disable port based 802 1X authentication Authentication Method Select th...

Page 258: ...s page displays authentication settings for all ports STEP 2 Select a port and click Edit The Edit Port Authentication page displays STEP 3 Enter the parameters Interface Select a port User Name Displays the username of the port Current Port Control Displays the current port authorization state If the state is Authorized the port is either authenticated or the Administrative Port Control is Force ...

Page 259: ...t in Force Unauthorized it is in Auto Mode and the authenticator displays the state of the authentication in progress After the port is authenticated the state is shown as Authenticated Quiet Period Enter the number of seconds that the switch remains in the quiet state following a failed authentication exchange Resending EAP Enter the number of seconds that the switch waits for a response to an Ex...

Page 260: ...d all attached clients are denied access to the network Multiple Sessions Enables the number of specific authorized hosts to access the port Each host is treated as if it were the first and only user and must be authenticated Filtering is based on the source MAC address To define 802 1X advanced settings for ports STEP 1 Click Security 802 1X Host and Session Authentication The Host and Session Au...

Page 261: ...ibed above in Defining Host and Session Authentication NOTE The following fields are only relevant if you select Single in the Host Authentication field Action on a Single Host Violation Select the action to be applied to packets arriving in Single Session Single Host mode from a host whose MAC address is not the supplicant MAC address The options are Discard Discards the packets Forward Forwards ...

Page 262: ...last session was authenticated The options are None No authentication is applied it is automatically authorized RADIUS Supplicant was authenticated by a RADIUS server MAC Address Displays the supplicant MAC address STEP 2 Click Apply The settings are defined and the Running Configuration file is updated Denial of Service Prevention Denial of Service DoS Prevention increases network security by pre...

Page 263: ...al of Service Security Suite Settings page Details button Denial of Service Security Suite Settings NOTE Before activating DoS Prevention you must unbind all Access Control Lists ACLs or advanced QoS policies that are bound to a port ACL and advanced QoS policies are not active when a port has DoS Protection enabled on it To configure DoS Prevention global settings and monitor SCT STEP 1 Click Sec...

Page 264: ... Quality of Service feature is applied throughout the network to ensure that network traffic is prioritized according to required criteria and the desired traffic receives preferential treatment This section contains the following topics QoS Features and Components Configuring QoS General Managing QoS Statistics ...

Page 265: ... as a function of the traffic class to which they belong Other Traffic Class Handling Attribute Applies QoS mechanisms to various classes including bandwidth management QoS Operation When using the QoS feature all traffic of the same class receives the same treatment which consists of a single QoS action of determining the egress queue on the egress port based on the indicated QoS value in the inc...

Page 266: ...put into the egress queues based on the their DSCP TC value STEP 5 Designate an egress queue to each CoS 802 1p priority If the switch is in CoS 802 1 trusted mode all incoming packets will be put into the designated egress queues according to the CoS 802 1p priority in the packets This is done by using the CoS 802 1p to Queue page STEP 6 Enter bandwidth and rate limits in the following pages a Se...

Page 267: ...Defaults to restore the factory CoS default setting for this interface STEP 6 Click DSCP Override Table to enter the DSCP values The DSCP Override Table opens STEP 7 DSCP In displays the DSCP value of the incoming packet that needs to be re marked to an alternative value Select the new DSCP value to override the incoming value Select Restore Defaults to restore the factory DSCP values STEP 8 Click...

Page 268: ... or LAG to display the list of ports or LAGs The list of ports LAGs is displayed QoS State displays whether QoS is enabled on the interface STEP 3 Select an interface and click Edit The Edit QoS Interface Settings opens STEP 4 Select the Port or LAG interface STEP 5 Click to enable or disable QoS State for this interface STEP 6 Click Apply The Running Configuration file is updated Configuring QoS ...

Page 269: ...ir quota has been used up and then another queue is serviced It is also possible to assign some of the lower queues to WRR while keeping some of the higher queues in strict priority In this case traffic for the strict priority queues is always sent before traffic from the WRR queues Only after the strict priority queues have been emptied is traffic from the WRR queues forwarded The relative portio...

Page 270: ... 1p priority assigned to the ingress ports Default Mapping Queues By changing the CoS 802 1p to Queue mapping and the Queue schedule method and bandwidth allocation it is possible to achieve the desired quality of services in a network CoS 802 1p to Queue mapping is applicable only if CoS 802 1p is the trusted mode and the packets belong to flows that are CoS trusted 802 1p Values 0 7 7 being the ...

Page 271: ...iority egress queue and Queue1 is the lowest priority STEP 3 For each 802 1p priority select the Output Queue to which it is mapped STEP 4 Click Apply 801 1p priority values to queues are mapped and the Running Configuration file is updated Mapping DSCP to Queue The DSCP IP Differentiated Services Code Point to Queue page maps DSCP to egress queues The DSCP to Queue Table determines the egress que...

Page 272: ...e ingress rate limit is the number of bits per second that can be received from the ingress interface Excess bandwidth above this limit is discarded The following values are entered for egress shaping Committed Information Rate CIR sets the average maximum amount of data allowed to be sent on the egress interface measured in bits per second Committed Burst Size CBS is the burst of data that is all...

Page 273: ...mit STEP 5 Click Apply The bandwidth settings are modified and the Running Configuration file is updated Configuring Egress Shaping per Queue In addition to limiting transmission rate per port which is done in the Bandwidth page the switch can limit the transmission rate of selected egressing frames on a per queue per port basis Egress rate limiting is performed by shaping the output load The swit...

Page 274: ...ter the maximum rate CIR in Kbits per second Kbps CIR is the average maximum amount of data that can be sent Committed Burst Size CBS Enter the maximum burst size CBS in bytes CBS is the maximum burst of data allowed to be sent even if a burst exceeds CIR STEP 6 Click Apply The bandwidth settings are modified and the Running Configuration file is updated Workflow to Configure Basic QoS Mode Managi...

Page 275: ... statistics are refreshed The available options are No Refresh Statistics are not refreshed 15 Sec Statistics are refreshed every 15 seconds 30 Sec Statistics are refreshed every 30 seconds 60 Sec Statistics are refreshed every 60 seconds Counter Set The options are Set 1 Displays the statistics for Set 1 that contains all interfaces and queues with a high DP Drop Precedence Set 2 Displays the sta...

Page 276: ... contains all interfaces and queues with a low DP Interface Select the ports for which statistics are displayed The options are Port Selects the port on the selected unit number for which statistics are displayed All Ports Specifies that statistics are displayed for all ports Queue Select the queue for which statistics are displayed Drop Precedence Enter drop precedence that indicates the probabil...

Page 277: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 267 18 ...

Page 278: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 268 18 ...

Page 279: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 269 18 ...

Page 280: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 270 18 ...

Page 281: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 271 18 ...

Page 282: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 272 18 ...

Page 283: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 273 18 ...

Page 284: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 274 18 ...

Page 285: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 275 18 ...

Page 286: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 276 18 ...

Page 287: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 277 18 ...

Page 288: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 278 18 ...

Page 289: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 279 18 ...

Page 290: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 280 18 ...

Page 291: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 281 18 ...

Page 292: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 282 18 ...

Page 293: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 283 18 ...

Page 294: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 284 18 ...

Page 295: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 285 18 ...

Page 296: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 286 18 ...

Page 297: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 287 18 ...

Page 298: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 288 18 ...

Page 299: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 289 18 ...

Page 300: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 290 18 ...

Page 301: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 291 18 ...

Page 302: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 292 18 ...

Page 303: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 293 18 ...

Page 304: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 294 18 ...

Page 305: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 295 18 ...

Page 306: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 296 18 ...

Page 307: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 297 18 ...

Page 308: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 298 18 ...

Page 309: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 299 18 ...

Page 310: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 300 18 ...

Page 311: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 301 18 ...

Page 312: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 302 18 ...

Page 313: ...Configuring Quality of Service Managing QoS Statistics Cisco Small Business 200 1 1 Series Smart Switch Administration Guide 303 18 ...

Page 314: ... and or its affiliates in the U S and other countries A listing of Cisco s trademarks can be found at www cisco com go trademarks Third party trademarks mentioned are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company 1005R ...

Search results

Summary of Contents for Small Business SF200-24

Reviews:

Related manuals for Small Business SF200-24

Brands by name

Popular brands

Cisco Small Business SF200-24, Administration Manual

Search results

Summary of Contents for Small Business SF200-24

Reviews:

Related manuals for Small Business SF200-24

Brands by name

Popular brands