|
|

This software configuration information applies to all Catalyst 5000 series switch models.
The procedures in this section assume you have experience with configuring LAN switches using a command-line interface.
For detailed software configuration instructions, refer to the Catalyst 5000 Series Software Configuration Guide and the Catalyst 5000 Series Command Reference.
To configure your Catalyst 5000 series switch, perform the following tasks:
You will need the following information before you configure your Catalyst 5000 series switch:
The following sections outline supervisor engine configuration tasks:
The default Catalyst 5000 series supervisor engine configuration is as follows:
| Feature | Default Setting |
|---|---|
| Administrative connection | Normal mode |
| System Information | No default settings for:
|
|
System prompt | Console> |
| Interface type |
|
|
SLIP for the console port | detach (not active) |
The following sections describe how to perform administrative tasks on the Catalyst 5000 series switches:
To establish a session to the switch via the console port:
| Task | Command |
|---|---|
| Step 1 Attach a terminal to the supervisor console port and power up the switch. | - |
| Step 2 At the Enter Password prompt, press Return. | - |
| Step 3 Enter privileged mode. | enable |
| Step 4 At the Enter Password prompt, press Return. | - |
To view the current configuration file:
| Task | Command |
|---|---|
| Display the configuration file onscreen. | write terminal |
To write the current configuration file to a file on a remote host:
| Task | Command |
|---|---|
| Write the configuration file to a remote host. | write {host file | network} |
To configure the switch using a configuration file on a remote host:
| Task | Command |
|---|---|
| Configure the switch using a configuration file on a remote host. | configure {host file | network} |
To download a software image from a TFTP server:
| Task | Command |
|---|---|
| Step 1 Download a software image from a TFTP server. | download host file |
| Step 2 Reset the switch. | reset |
| Step 3 Verify that the new version of software is installed in Flash. | show flash |
To upload a system image to a TFTP server:
| Task | Command |
|---|---|
| Upload a system image to a TFTP server. | upload host file |
To set the Supervisor Engine III BOOT environment variable:
| Task | Command |
|---|---|
| Step 1 Specify one or more devices and files from which to boot. | set boot system flash device:[filename] [mod] |
| Step 2 Verify the BOOT environment variable setting. | show boot [mod_num] |
To set the default Flash device for the system:
| Task | Command |
|---|---|
| Step 1 Identify the supported Flash devices on the system. | show flash [[m/]device:] |
| Step 2 Set the default Flash device for the system. | cd [[m/]device:] |
| Step 3 Verify the default Flash device for the system. | pwd |
To delete or restore files on a Flash device:
| Task | Command |
|---|---|
|
delete [[m/]device:]filename |
|
undelete index [[m/]device:] |
|
squeeze [m/]device: |
To copy files on a Flash device:
| Task | Command |
|---|---|
|
copy [[m/]device:]filename [tftp | flash | [[m/]device:]filename] |
|
copy tftp [flash | [[m/]device:]filename] |
|
copy flash [tftp | [[m/]device:]filename] |
To display information about the Flash memory and Flash files on the system:
| Task | Command |
|---|---|
|
verify [[m/]device:] filename |
|
dir [[[m/]device:]filename] [all | deleted | long] |
|
show flash [[m/]device:] |
To reset the entire switch:
| Task | Command |
|---|---|
| Reset the Catalyst 5000 series switch. | reset [system] |
To reset an individual module installed in the switch:
| Task | Command |
|---|---|
| Reset an individual module. | reset mod_num |
The following sections show how to customize the supervisor engine configuration:
To configure the system information:
| Task | Command |
|---|---|
| Step 1 Set the system name. | set system name [name_string] |
| Step 2 Set the system time. | set time [day_of_week] [mm/dd/yy] [hh:mm:ss] |
| Step 3 Set the system prompt. | set prompt prompt_string |
| Step 4 Set the console password. | set password |
| Step 5 Set the enable password. | set enablepass |
| Step 6 Set the system contact. | set system contact [contact_string] |
| Step 7 Set the system location. | set system location [location_string] |
| Step 8 Verify the system setup. | show system |
To set the interface type, IP address, and IP routing information on the switch:
| Task | Command |
|---|---|
| Step 1 Set the in-band interface (sc0) to Up. | set interface sc0 up |
| Step 2 Assign an IP address, subnet mask (optional), and broadcast address (optional) to the switch. | set interface sc0 [vlan] ip_address [netmask] [broadcast] |
| Step 3 Assign the switch IP address to a VLAN. | set interface sc0 vlan_num [ip_address] |
| Step 4 Set the SLIP interface (sl0) to Up. | set interface sl0 up |
| Step 5 Assign an SLIP address and destination address to the SLIP interface (sl0). | set interface sl0 slip_address dest_address |
| Step 6 Add a default route to the IP routing table and static routes if your terminal is on a different network from the switch. | set ip route destination gateway [metric] |
| Step 7 Check the interface configuration. | show interface |
| Step 8 Check the route table entries. | show ip route |
| Step 9 Test connectivity to a host system. | ping host |
| Caution When SLIP is enabled on the console port, you cannot access the switch from a terminal connected to the console port. If you are connected via a terminal attached to the console port and you enter the slip attach command, you will lose the console port connection. To restore the connection, use Telnet to access the switch, enter privileged mode, and enter the slip detach command. |
To enable SLIP on the console port:
| Task | Command |
|---|---|
| Step 1 Set the IP address for the SLIP interface. | set interface sl0 slip_address dest_address |
| Step 2 Enable SLIP on the console port. | slip attach |
The following sections outline module configuration tasks:
The following sections describe how to customize the Ethernet and Fast Ethernet module configuration:
The Catalyst 5000 series Ethernet and Fast Ethernet modules have the following default configuration:
| Feature | Default Setting |
|---|---|
| Port enable state | All ports are enabled |
| Port name | None |
| Port priority level | Normal |
| Port duplex setting | Auto (to support autonegotiation of duplex mode) |
| Spanning-Tree Protocol | Enabled for VLAN 1 |
| VLAN | All ports are on VLAN 1 |
| Fast EtherChannel (available only on select modules) | Disabled |
To set the port configuration on Ethernet or Fast Ethernet ports:
| Task | Command |
|---|---|
| Step 1 Set the port name. | set port name mod_num/port_num [name_string] |
| Step 2 Set the port priority level. | set port level mod_num/port_num {normal | high} |
| Step 3 Set the port speed. | set port speed mod_num/port_num {10 | 100 | auto} |
| Step 4 Set the port duplex mode. | set port duplex mod_num/port_num {full | half | auto} |
| Step 5 Enable the port, if necessary. | set port enable mod_num/port_num |
| Step 6 Verify the port configuration. | show port |
To configure spanning tree on an Ethernet or Fast Ethernet module:
| Task | Command |
|---|---|
| Step 1 Enable spanning tree. | set spantree enable [vlan] |
| Step 2 Verify the spanning tree configuration. | show spantree [vlan] [active]
show spantree mod_num/port_num |
| Caution Before enabling Fast EtherChannel, verify that all ports in the channel are enabled, are assigned to the same VLAN, and have the same configuration on both ends of the channel. |
To configure Fast EtherChannel on Fast Ethernet ports:
| Task | Command |
|---|---|
| Step 1 Enable Fast EtherChannel on the desired ports. | set port channel port_list on |
| Step 2 Verify the Fast EtherChannel configuration. | show port channel [mod_num[/port_num]] |
To check connectivity out an Ethernet or Fast Ethernet port:
| Task | Command |
|---|---|
| Ping a host. | ping host |
| If the host is unresponsive, check the IP address of the switch and default IP route, if appropriate. | show interface
show ip route |
The following sections describe how to customize the FDDI/CDDI module configuration:
The Catalyst 5000 series FDDI/CDDI modules have the following default configuration:
| Feature | Default Setting |
|---|---|
| Port enable state | All FDDI and CDDI ports are enabled |
| User-data string (identifies the FDDI/CDDI module) | Catalyst 5000 |
| FDDI timers |
|
|
IPX protocol translation |
|
|
IP fragmentation | Enabled |
| ICMP unreachable messages | Enabled |
| LER settings |
|
To set up the FDDI/CDDI module and ports:
| Task | Command |
|---|---|
|
set port enable mod_num/port_num |
|
set port disable mod_num/port_num |
|
set fddi userdata mod_num userdata_string |
| |
|
set port level mod_num/port_num {normal | high} |
|
show module mod_num show port mod_num/port_num show port status mod_num |
To set up a native VLAN on a FDDI port:
| Task | Command |
| Step 1 Assign a VLAN for native traffic on an FDDI port. | set vlan vlan_num mod/ports |
| Step 2 Verify the VLAN configuration. | show vlan [vlan_num] |
To set up an FDDI 802.10 configuration on the FDDI module:
| Task | Command |
| Step 1 Provide a VLAN number and activate a VLAN in the management domain. | set vlan vlan_num |
| Step 2 Create a VLAN with the type FDDI. | set vlan vlan_num type fddi |
| Step 3 Map the Ethernet VLAN translation to an FDDI VLAN. | set vlan ether_vlan_num translation fddi_vlan_num OR set vlan fddi_vlan_num translation ether_vlan_num |
| Step 4 Turn the trunking on for the FDDI port. | set trunk mod_num/port_num on |
| Step 5 Verify the VLAN configuration. | show vlan [vlan_num] |
To set the FDDI/CDDI timer values:
| Task | Command |
|---|---|
| |
|
set fddi tnotify mod_num time |
|
set fddi treq mod_num time |
|
show fddi [mod_num] |
To set the FDDI LER settings:
| Task | Command |
|---|---|
|
set fddi alarm mod_num/port_num value |
|
set fddi cutoff mod_num/port_num value |
|
show fddi [mod_num] |
To set the FDDI SNAP to Ethernet translation:
To set the FDDI 802.2 to Ethernet translation:
| Task | Command |
| Step 1 Configure the appropriate protocol translation. | set bridge ipx 8022toether {8023 | SNAP | EII | 8023RAW} |
| Step 2 Verify that the correct protocol translation was configured. | show bridge |
To set the FDDI 802.3 raw to FDDI protocol:
| Task | Command |
| Step 1 Configure the appropriate protocol translation. | set bridge ipx 8023rawtofddi {8022 | SNAP | FDDIRAW} |
| Step 2 Verify that the correct translation protocol was configured. | show bridge |
To configure IP fragmentation on the FDDI module:
| Task | Command |
|
set ip fragmentation enable |
|
set ip fragmentation disable |
|
show ip route |
To configure ICMP unreachable messages on the FDDI module:
| Task | Command |
|---|---|
| |
| |
|
show ip route |
To check connectivity out a FDDI/CDDI module port:
| Task | Command |
| Step 1 Send an echo request from the Catalyst 5000 series switch to the host. | ping host |
| Step 2 If the host is unresponsive, check the configuration for the IP address of the Catalyst 5000 series switch and default IP route, if appropriate. | show interface
show ip route |
The following sections describe how to configure the ATM modules:
The Catalyst 5000 series ATM modules have the following default configuration:
| Feature | Default Setting |
|---|---|
| PVCs | ILMI and signaling PVCs are set up |
| LANE | LANE is not configured |
| Configuration in NVRAM | NVRAM contains no configuration information |
The ATM PVC traffic-shaping software has the following default configuration:
| Feature | Default Setting |
|---|---|
| Clock internal | Transmit clock is generated internally |
| ATM framing | C-bit with ATM direct mapping (ADM) |
| Line buildout | Short |
| DS3-scramble | Disabled |
The following sections describe how to perform administrative tasks on the Catalyst 5000 series ATM modules:
To configure the ATM module from the terminal:
| Task | Command |
|---|---|
| Step 1 Open a session with the ATM module. | session mod_num |
| Step 2 Enter privileged mode. | enable |
| Step 3 Enter global configuration mode. | configure terminal |
| Step 4 Enter the necessary configuration commands. | - |
| Step 5 Quit configuration mode. | Ctrl-Z |
| Step 6 Save the configuration file modifications to NVRAM. | write memory |
To configure the ATM module from NVRAM:
| Task | Command |
|---|---|
| Configure the ATM module from NVRAM. | configure memory |
The following sections describe how to configure LANE on the ATM modules:
To display dual PHYs connected to the same switch:
| Task | Command |
| Display dual PHYs connected to the same switch. | show lane default-atm-addresses |
To display dual PHYs connected to different switches:
| Task | Command |
|---|---|
| Step 1 Change the preferred PHY to the one not currently in use. | atm preferred phy {A | B} |
| Step 2 Display the default ATM addresses. | show lane default-atm-addresses |
| Step 3 Determine the active PHY. | show interface |
To configure the LECS ATM address on a LightStream 1010 ATM switch:
| Task | Command |
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Enter the address of the LECS. | atm lecs-address atm-address |
| Step 3 Verify the address entered. | show atm ilmi-configuration |
To set up the LES/BUS for an ELAN:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Specify the subinterface for the first ELAN. | interface atm0.subinterface_num |
| Step 3 Enable the LES/BUS on the ELAN. | lane server-bus ethernet elan_name |
| Step 4 Repeat Steps 2 and 3 for all other ELANs on this module. | - |
| Step 5 Verify the LES configuration. | show lane server |
| Step 6 Verify the BUS configuration. | show lane bus |
To set up the LECS database for the default ELAN:
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Create a named database for the LECS. | lane database database-name |
| Step 3 In the configuration database, bind the ELAN to the ATM address of the LES. | name elan_name server-atm-address atm-address |
| Step 4 In the configuration database, provide a default name for the ELAN. | default-name elan_name |
| Step 5 Exit from database configuration mode and return to global configuration mode. | Ctrl-Z |
| Step 6 Verify the LECS database configuration. | show lane database database_name |
To set up the LECS database for unrestricted-membership ELANs:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Create a named database for the LECS. | lane database database_name |
| Step 3 In the configuration database, bind the name of the first ELAN to the ATM address of the LES for that ELAN. | name elan_name_1 server-atm-address atm_address |
| Step 4 In the configuration database, bind the name of the second ELAN to the ATM address of the LES. | name elan_name_2 server-atm-address atm_address |
| Step 5 Repeat Steps 3 and 4, providing a different ELAN name and ATM address for each additional ELAN in this switch cloud. | - |
| Step 6 (Optional) Specify a default ELAN for LECs not explicitly bound to an ELAN. | default-name elan_name |
| Step 7 Exit from database configuration mode and return to global configuration mode. | Ctrl-Z |
| Step 8 Verify the LECS database configuration. | show lane database |
To set up the LECS database for restricted-membership ELANs:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Create a named database for the LECS. | lane database database_name |
| Step 3 In the configuration database, bind the name of the first ELAN to the ATM address of the LES for that ELAN. | name elan_name_1 server-atm-address atm_address restricted |
| Step 4 Repeat Steps 3 and 4, providing a different name and a different ATM address for each additional ELAN. | - |
| Step 5 (Optional) Specify a default ELAN for LECs not explicitly bound to an ELAN. | default-name elan_name |
| Step 6 Add a database entry associating a specific LEC ATM address with a specific restricted-membership ELAN. | client-atm-address atm-address-template name elan-name |
| Step 7 Repeat Step 6 for every LEC in each restricted-membership ELAN on this switch cloud, in each case specifying the ATM address of the LEC and the name of the ELAN with which it is linked. | - |
| Step 8 Exit from database configuration mode and return to global configuration mode. | Ctrl-Z |
| Step 9 Verify the LECS database configuration. | show lane database |
To start and bind the LECS database:
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Select the ATM interface. | interface atm0 |
| Step 3 Bind the LECS database to the interface. | lane config database |
| Step 4 Specify the address of the LECS. | lane config-atm-address atm-address-template |
| Step 5 Exit the configuration mode. | Ctrl-Z |
| Step 6 Verify the LECS database configuration. | show lane database |
To set up an ELAN (LANE client):
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Specify the subinterface for a VLAN on this switch. | interface atm0.subinterface_num |
| Step 3 Enable a LANE client for the first ELAN. | lane client ethernet vlan_num elan-name |
| Step 4 Exit configuration mode. | Ctrl-Z |
| Step 5 Verify the LANE client configuration. | show lane client |
To verify the LANE configuration:
| Task | Command |
|---|---|
| Verify the LANE configuration. | show lane |
To monitor and maintain LANE components:
| Task | Command |
|---|---|
|
show lane [interface atm0[.subinterface] | name elan-name] [brief] |
|
show lane bus [interface atm0[.subinterface] | name elan-name] [brief] |
|
show lane client [interface atm0[.subinterface] | name elan-name] [brief] |
|
show lane config [interface atm0] [brief] |
|
show lane database [database_name] [brief] |
|
show lane le-arp [interface atm0[.subinterface] | name elan-name] |
|
show lane server [interface atm0[.subinterface] | name elan-name] [brief] |
The following sections describe how to configure advanced LANE features on the Catalyst 5000 series ATM modules:
To configure LES/BUS/LECS redundancy:
| Task | Command |
|---|---|
| Step 1 On the ATM switch, enter all the multiple LECS addresses. | set configserver index_address_mask (for the LightStream 1010)
atm lecs-address address (for the LightStream 1010) |
| Step 2 On the ATM module, specify redundant LES/BUSs. Enter the command for each LES address on the ELAN. | name elan_name server-atm-address atm-address |
To set up a LEC using VTP:
| Task | Command |
|---|---|
| Step 1 Enable VTP. | vtp enable |
| Step 2 From the supervisor module, create a LEC on each ATM module of all Catalyst 5000 series switches on a specified VTP domain. | set vlan vlan_num default |
To set up VTP:
| Task | Command |
|---|---|
| Step 1 Enable VTP. | vtp enable |
| Step 2 Exit the configuration mode. | Ctrl-Z |
| Step 3 Write the current configuration to NVRAM. | write memory |
| Step 4 Return to the supervisor console. | exit |
To set up a VLAN over a PVC:
| Task | Command |
|---|---|
| Step 1 Assign an Ethernet port to the specified VLAN. | set vlan vlan_num |
| Step 2 Session to the ATM module. | session mod_num |
| Step 3 Activate the privileged mode on the ATM module. | enable |
| Step 4 Enter the configuration mode. | configure terminal |
| Step 5 Select the ATM interface. | interface atm0 |
| Step 6 Set up the PVCs. | atm pvc vcd vpi vci aal5snap |
| Step 7 Bind the PVCs to the VLAN. | atm bind pvc vlan vcd vlan_num |
| Step 8 Set up other PVCs for the same VLAN if needed by repeating Steps 6 and 7. | - |
| Step 9 Exit configuration mode. | Ctrl-Z |
| Step 10 Verify the setup. | show atm vlan show atm vc |
| Step 11 Write the configuration to NVRAM. | write memory |
To remove a PVC from a VLAN:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Select the ATM interface. | interface atm0 |
| Step 3 Remove the PVC from the VLAN. | no atm pvc vcd |
| Step 4 End the session. | Ctrl-Z |
To unbind a previously assigned PVC from a VLAN without removing the PVC itself:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Select the ATM interface. | interface atm0 |
| Step 3 Unbind the PVC from the VLAN. | no atm bind pvc vlan vcd vlan_num |
| Step 4 End the session. | Ctrl-Z |
To throttle the output of the entire interface:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Select the ATM interface. | interface atm0 |
| Step 3 Apply output throttling. | atm traffic-shape rate rate |
| Step 4 End the session. | Ctrl-Z |
To return the output-rate to the default of 155 Mbps:
| Task | Command |
|---|---|
| Step 1 Enter the configuration mode. | configure terminal |
| Step 2 Select the ATM interface. | interface atm0 |
| Step 3 Disable output throttling. | no atm traffic-shape rate |
| Step 4 End the session. | Ctrl-Z |
To specify UNI 3.1 signalling support:
| Task | Command |
|---|---|
| Specify the UNI Version | atm uni-version version_number |
| Caution The ATM PVC traffic-shaping software image does not support LANE in conjunction with traffic shaping and supports PVCs only (RFC 1483). |
To configure ATM PVC traffic-shaping on an ATM module:
| Task | Command |
|---|---|
| Step 1 Assign an Ethernet port to the desired VLAN. | set vlan vlan_num mod_num/port_num |
| Step 2 Establish a connection to the ATM module. | session mod_num |
| Step 3 Enter privileged mode on the ATM module. | enable |
| Step 4 Enter configuration mode. | configure terminal |
| Step 5 (Optional) Set the module to generate the transmit clock internally. | atm clock internal |
| Step 6 (Optional) Set the DS3 line framing (DS3 interfaces only). | atm framing [m23adm | cbitplcp | m23plcp] |
| Step 7 (Optional) Specify the line buildout distance (DS3 interfaces only). | atm lbo {short | long} |
| Step 8 (Optional) Enable scrambling on the port (DS3 interfaces only). | atm ds3-scramble |
| Step 9 Set up the desired PVCs. | atm pvc vcd vpi vci [aal-encap] aal5snap1 peak2 [oam seconds] |
| Step 10 Bind the PVCs to the VLAN. | atm bind pvc vlan vcd vlan_num |
| Step 11 Exit configuration mode. | Ctrl-Z |
| Step 12 Write the configuration to NVRAM. | write memory |
| Step 13 Verify the ATM VLAN configuration. | show atm vlan |
| Step 14 Verify the ATM PVC configuration. | show atm vc |
The following sections describe how to configure the Catalyst 5000 series Route Switch Module (RSM):
The following sections describe how to perform administrative tasks on the Catalyst 5000 series RSM:
To configure the RSM from the terminal:
| Task | Command |
|---|---|
| Step 1 Enter terminal configuration mode. | configure terminal |
| Step 2 Enter configuration commands. | - |
| Step 3 Exit configuration mode. | Ctrl-Z |
| Step 4 Save the configuration to the startup configuration (default is NVRAM). | copy running-config startup-config |
To configure the RSM from memory (by default, from NVRAM):
| Task | Command |
|---|---|
| Configure the RSM to execute the configuration in memory. | configure memory |
To configure the RSM from the network using TFTP or rcp:
| Task | Command |
|---|---|
| Step 1 Specify the network configuration mode (TFTP or rcp). | copy tftp running-config
OR copy rcp running-config |
| Step 2 Follow the prompts to specify the configuration file type, the network host, and the configuration file to use. | - |
To set the default Flash device for the RSM:
| Task | Command |
|---|---|
| Step 1 Set the default Flash device for the system. | cd [bootflash: | slot0: | slot1:] |
| Step 2 Verify the default Flash device for the system. | pwd |
To delete or restore files on a Flash device:
| Task | Command |
|---|---|
|
delete [device:]filename |
|
squeeze device: |
To copy files on a Flash device:
| Task | Command |
|---|---|
|
copy device:filename {tftp | flash | device:filename} |
|
copy tftp:filename [bootflash: | slot0: | slot1:] |
|
copy flash {tftp | device:filename} |
To display information about the Flash memory and Flash files on the RSM:
| Task | Command |
|---|---|
| Display a list of files on a Flash device. | dir [bootflash: | slot0: | slot1:] |
The following sections describe how to customize the configuration on the Catalyst 5000 series RSM:
To configure IP routing on the RSM:
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Enter interface configuration mode for the desired VLAN. | interface vlan vlan_num |
| Step 3 Assign an IP address to the VLAN. | ip address ip_address subnet_mask |
| Step 4 Enable IP routing for the VLAN. (Enabling IP routing returns you to global configuration mode.) | ip routing |
| Step 5 Customize the IP configuration for your network environment and verify the configuration. | Refer to the Cisco IOS Network Protocols Configuration Guide, Part 1 for complete information on IP configuration and verification. |
To configure IPX routing on the RSM:
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Enable IPX routing on the RSM. | ipx routing |
| Step 3 Enter interface configuration mode for the desired VLAN. | interface vlan vlan_num |
| Step 4 Assign a network number to the VLAN. | ipx network [network | unnumbered] encapsulation encapsulation-type |
| Step 5 Customize the IPX configuration for your network environment and verify the configuration. | Refer to the Cisco IOS Network Protocols Configuration Guide, Part 2 for complete information on IPX configuration and verification. |
To configure AppleTalk routing on the RSM:
| Task | Command |
|---|---|
| Step 1 Enter configuration mode. | configure terminal |
| Step 2 Enable AppleTalk routing. | appletalk routing |
| Step 3 Enter interface configuration mode for the desired VLAN. | interface vlan vlan_num |
| Step 4 Assign an AppleTalk address to the VLAN. | appletalk address network.node |
| Step 5 Assign a zone name to a VLAN. | appletalk zone zone-name |
| Step 6 Customize the AppleTalk configuration for your network environment and verify the configuration. | Refer to the Cisco IOS Network Protocols Configuration Guide, Part 2 for complete information on AppleTalk configuration and verification. |
Due to the complexity of the LightStream 1010 ATM Switch Processor (ASP) configuration, configuration procedures are not provided here. Refer to the LightStream 1010 ATM Switch Software Configuration Guide and the LightStream 1010 ATM Switch Command Reference for complete information on configuring the LightStream 1010 ASP.
The following sections outline software feature configuration tasks:
The following sections describe how to configure administrative features on the Catalyst 5000 series switches:
To configure DNS:
| Task | Command |
|---|---|
| Step 1 Set the address of the DNS server. | set ip dns server ip_addr [primary] |
| Step 2 Set the domain name. | set ip dns domain name |
| Step 3 Enable DNS. | set ip dns enable |
| Step 4 Verify the DNS configuration. | show ip dns [noalias] |
To configure CDP:
| Task | Command |
|---|---|
| Step 1 Enable CDP on the desired ports. | set cdp {enable | disable} {mod_num/port_num | all} |
| Step 2 Set the message interval for CDP. | set cdp interval {mod_num/port_num | all} interval |
| Step 3 Verify the CDP configuration. | show cdp neighbors [mod_num[/port_num]] [detail] show cdp port [mod_num[/port_num]] |
To configure NTP in broadcast client mode:
| Task | Command |
|---|---|
| Step 1 Enable NTP in broadcast client mode. | set ntp broadcastclient enable |
| Step 2 Verify the NTP configuration. | show ntp |
To configure NTP in client mode:
| Task | Command |
| Step 1 Configure the address of the NTP server to be queried. | set ntp server ip_addr |
| Step 2 Enable the NTP broadcast client mode. | set ntp client enable |
| Step 3 (Optional) Set the NTP broadcast packet delay. | set ntp broadcastdelay microseconds |
| Step 4 (Optional) Set the time zone. | set timezone zone hours [minutes] |
| Step 5 Verify the NTP configuration. | show ntp |
To obtain IP address information from a BOOTP server:
| Task | Command |
|---|---|
| Step 1 Ensure that you have a workstation with BOOTP server software installed and set up. | - |
| Step 2 Obtain the MAC address for the switch (the first address in the MAC address range for module 1). | show module |
| Step 3 Add the MAC address of the switch to the BOOTP configuration file (usually /usr/etc/bootptab on a Sun workstation) on the workstation. | - |
To configure the login banner:
| Task | Command |
|---|---|
| Enter the message of the day. | set banner motd c [text] c |
The following sections describe how to configure VLANs on the Catalyst 5000 series switches:
Default VLAN configuration:
| Feature | Default Setting |
|---|---|
| VTP | Disabled (switch is in a no-management domain state) |
| VTP version 2 | Disabled |
| VTP advertisement interval | 5 minutes |
| Domain Name | Not specified |
| VTP mode of operation | Server |
| VTP password | None (management domains are set to nonsecure mode) |
| VLAN SAID value | 100,000 plus the VLAN number: the SAID for VLAN 1 is 100001, for VLAN 2 is 100002, for VLAN 3 is 100003, and so on. |
| VLAN trunking | Auto mode |
| Allowed VLANs | All VLANs are allowed for trunking |
| Native VLAN | VLAN 1 |
| MTU size | 1500 bytes |
To configure a VLAN across a domain:
| Task | Command |
|---|---|
| Step 1 Define the VTP management domain. | set vtp [domain name] [mode {client | server | transparent}] [interval interval] [passwd passwd] [pruning {enable | disable}] |
| Step 2 Verify the VTP management domain configuration. | show vtp domain |
| Step 3 Define the VLAN. | set vlan vlan_num [name name] [type {ethernet | fddi | token_ring | fddi_net | tr_net}] [state {active | suspend}] [said said] [mtu mtu] [ring ring_number] [bridge bridge_number] [stp {ieee | ibm}] [parent vlan_num] [translation vlan_num] |
| Step 4 Verify the VLAN configuration. | show vlan [vlan_num] |
To group switch ports to a VLAN:
| Task | Command |
|---|---|
| Step 1 Specify a VLAN number and specify the ports to include in the VLAN. | set vlan vlan_num mod/ports |
| Step 2 Verify that the ports are grouped to the appropriate VLANs. | show vlan [vlan_num] |
To configure VLAN trunks:
| Task | Command |
|---|---|
| Step 1 Establish trunks on the desired ports. | set trunk mod_num/port_num [on | off | desirable | auto] [vlan_range] |
| Step 2 Verify that the trunk configuration is correct. | show trunk [mod_num[/port_num]] |
To configure VTP:
| Task | Command |
|---|---|
| Step 1 Define a VLAN management domain. | set vtp [domain name] [mode {client | server | transparent}] [passwd passwd] [pruning {enable | disable}] [v2 {enable | disable}] |
| Step 2 Verify the VTP configuration. | show vtp domain |
To configure VTP pruning:
| Task | Command |
|---|---|
| Step 1 Enable the VTP pruning option. | set vtp pruning enable |
| Step 2 Enable VTP pruning eligibility. | set vtp pruneeligible vlan_range |
| Step 3 Verify the VTP pruning configuration. | show vtp domain |
To specify the version of VTP to use in a VTP domain:
| Task | Command |
|---|---|
| Step 1 Enable VTP version 2. | set vtp v2 enable |
| Step 2 Set the other VTP parameters. | set vtp [domain name] [mode {client | server | transparent}] [passwd passwd] [pruning {enable | disable}] [v2 {enable | disable}] |
| Step 3 Verify the VTP version 2 configuration. | show vtp domain |
To configure dynamic port VLAN membership:
| Task | Command |
|---|---|
| Step 1 Configure the IP address of the TFTP server on which the VMPS configuration file resides. | set vmps storage ip_addr [filename] |
| Step 2 Enable VMPS. | set vmps state enable |
| Step 3 Verify the VMPS configuration. | show vmps [noalias] |
To configure dynamic ports on clients:
| Task | Command |
|---|---|
| Step 1 Configure the IP address of the VMPS servers. | set vmps server ip_addr [primary] |
| Step 2 Verify the VMPS configuration. | show vmps server |
| Step 3 Configure the VLAN membership assignment to a port. | set port membership mod_num/port_num {dynamic | static} |
| Step 4 Verify that the ports are assigned VLAN membership dynamically. | show port [mod_num[/port_num]] |
The following sections describe how to configure multicast services on the Catalyst 5000 series switches:
To configure CGMP:
| Task | Command |
|---|---|
| Step 1 Enable CGMP on the switch. | set cgmp enable |
| Step 2 Configure multicast router ports. | set multicast router mod_num/port_num |
| Step 3 Verify the CGMP configuration. | show multicast router
show multicast group show cgmp statistics [vlan_id] |
To configure CGMP leave processing:
| Task | Command |
|---|---|
| Enable CGMP leave processing on a device. | set cgmp leave enable |
To configure broadcast/multicast suppression:
| Task | Command |
|---|---|
| Step 1 Set the broadcast/multicast suppression threshold for one or more ports. | set port broadcast mod_num/port_num threshold[%] |
| Step 2 Verify the broadcast/multicast suppression configuration. | show port broadcast [mod_num/[port_num]] |
The following sections describe how to configure network management features on the Catalyst 5000 series switches:
Default network management configuration:
| Feature | Default Setting |
|---|---|
| SNMP communities and access types |
|
|
SNMP traps | Disabled |
| RMON support | Disabled |
| SPAN | Disabled |
To configure SNMP:
| Task | Command |
|---|---|
| Step 1 Configure the SNMP community strings and access types. | set snmp community {read-only | read-write | read-write-all} [community_string] |
| Step 2 Assign a trap receiver address and community. | set snmp trap rcvr_address rcvr_community |
| Step 3 Enable SNMP traps. | set snmp trap enable [all | module | chassis | bridge | repeater | auth | vtp | ippermit] |
| Step 4 Verify the SNMP configuration. | show snmp |
To configure RMON:
| Task | Command |
|---|---|
| Step 1 Activate RMON support. | set snmp rmon enable |
| Step 2 Verify that RMON is enabled. | show snmp |
To configure SPAN:
| Task | Command |
|---|---|
| Step 1 Specify the SPAN source and destination, and the type of traffic to monitor. | set span {src_mod/src_port | src_vlan} dest_mod/dest_port [rx | tx | both] |
| Step 2 Enable SPAN. | set span enable |
| Step 3 Verify the SPAN configuration. | show span |
The following sections describe how to configure network security features on the Catalyst 5000 series switches:
To configure secure port filtering:
| Task | Command |
|---|---|
| Step 1 Enable port security. | set port security mod_num/port_num enable [mac_addr] |
| Step 2 Verify the secure port filtering configuration. | show port [mod_num/port_num] |
To configure TACACS+:
| Task | Command |
|---|---|
| Step 1 Enable TACACS+ authentication for login. | set authentication login tacacs enable |
| Step 2 Enable TACACS+ authentication for enable. | set authentication enable tacacs enable |
| Step 3 Configure the key used to encrypt packets. | set tacacs key key |
| Step 4 Configure the server on which the TACACS+ server daemon resides. | set tacacs server ip_addr [primary] |
| Step 5 Configure the number of login attempts allowed to the TACACS+ server. | set tacacs attempts count |
| Step 6 Set the timeout interval in which the server daemon must respond. | set tacacs timeout seconds |
| Step 7 Verify the TACACS+ configuration. | show tacacs [noalias] |
To configure IP permit list:
| Task | Command |
|---|---|
| Step 1 Add IP addresses to the IP permit list. | set ip permit ip_address [mask] |
| Step 2 Enable IP permit list. | set ip permit enable |
| Step 3 Enable the IP permit trap to receive traps for unauthorized access. | set snmp trap enable ippermit |
| Step 4 Configure the logging level to see the syslog message for unauthorized access. | set logging level ip 4 default |
| Step 5 Verify the IP permit list configuration. | show ip permit [noalias] |
|
|