Index

A

AAA

: configuring 4-89
: managing 4-82

aaa accounting command 4-87

aaa authorization command 4-86

aaa authorization exec tacacs+ local command 4-86

aaa new-model command 4-85, 4-89

accessing

: CMS 2-8
: command modes 2-32
: member switches 5-8, 5-37
: MIB files 2-42
: MIB objects 2-41, 2-42
: MIB variables 2-42

accounting in TACACS+ 4-83

adding

: Ethernet VLAN to database 5-34
: member switches to standby group 3-24
: secure addresses 4-45, 4-47
: static addresses 4-48, 4-50
: switches to cluster 3-12

address

: count, secure 4-53
: resolution 4-40
: security violations 4-52
: see also addresses

addresses

dynamic

: accelerated aging 4-64
: aging time 4-43, 4-44
: default aging 4-64
: described 4-42
: removing 4-45

MAC

: adding secure 4-45
: aging time 4-43
: discovering 4-40, 4-43
: tables, managing 4-42

secure

: adding 4-45, 4-47
: described 4-42, 4-45
: removing 4-48

static

: adding 4-48, 4-50
: configuring (EtherChannel) 4-50
: described 4-42, 4-48
: removing 4-51

Address Management window 4-43

Address Resolution Protocol (ARP)

: see ARP table

address table

aging time, configuring 4-44

dynamic addresses, removing 4-45

MAC 4-42

secure addresses

: adding 4-47
: removing 4-48

static addresses

: adding 4-50
: removing 4-51

administrative information, displaying 3-32

advertisements, VTP 5-14

aggregation

: enterprise workgroup 1-7
: small-to-medium business workgroup 1-9

aging, accelerating 4-64

aging time, changing address 4-43, 4-44

alarms group, in RMON 2-45

allowed-VLAN list 5-43

AppleTalk Remote Access (ARA) 4-86

Apply button 2-12

ARP table

: address resolution 4-40
: illustrated 4-41
: managing 4-40

ATM ports

: duplex and speed 3-40
: trunks and other features 5-39
: VLAN membership 5-4

authentication, enabling NTP 4-29

authentication in TACACS+ 4-83

authorization in TACACS+ 4-83

autonegotiation

: connecting to devices without 3-41
: mismatches 7-1

B

bandwidth, graphing 2-26

BOOTP 4-30

BPDU message interval 4-72

broadcast client mode, configuring 4-29

broadcast messages, configuring for 4-29

broadcast storm control

: disabling 4-21
: enabling 4-18, 4-20

broadcast traffic and private VLAN edge ports 4-81

browsers, configuring

: Internet Explorer 2-4, 2-6
: Netscape Communicator 2-4

buttons, CMS window 2-12

bytes, graphing 6-2

C

C2900/C3500 traps 3-59, 4-38

cabling, redundant 3-17

Cancel button 2-12

candidates

: adding 3-12
: automatically discovering 3-6
: changing management VLAN for 3-36
: displaying all 3-14
: requirements 3-4
: suggested 3-7
: why not added 3-13

Catalyst 3524 PWR XL 4-89

Catalyst 3524-PWR XL 2-26

Caution described xxii

caveats

: password and privilege level 3-11
: software 3-3

CDP

: configuring 4-55, 4-56
: discovering candidates with 3-6

CGMP

: controlling management packets with 4-57
: removing router ports 4-60
: window 4-58
: see also Fast Leave

Cisco 7960 IP Phone

: see IP Phone

Cisco Discovery Protocol

: see CDP

Cisco Group Management Protocol

: see CGMP

Cisco Systems access page 2-9, 3-28

CiscoWorks, as an example of NMS 2-43

Class of Service

: see CoS

CLI

: accessing 1-6
: command modes 2-32
: error messages 2-38
: managing cluster members with 2-36
: using 2-32

client mode, VTP 5-13

Cluster Builder

: changing the polling interval 3-30
: device and link icons 2-14
: illustrated 3-13
: interface 2-13
: label meanings 2-17
: menu options 2-15
: overview 1-5
: pop-up menus 2-18, 2-19
: saving configuration changes 3-32
: starting 2-27
: toolbar icons 2-13
: using 2-16

Cluster management described 3-1

Cluster Management Suite

: see CMS

Cluster Manager

: menu options 2-22
: overview 1-5
: pop-up menus 2-24, 2-25
: toolbar icons 2-27
: using 2-21

clusters

: accessing 3-5
: adding switches to 3-12, 3-14
: configuring 3-5, 3-8
: creating 2-16
: creating performance graphs 6-1
: described 3-1, 5-7
: disqualification code 3-13
: Gigabit Ethernet, illustrated 4-66
: host name changes 3-10
: inventory, displaying 3-32
: management tasks 3-27
: management VLAN, changing 3-34
: managing 2-36, 2-44, 3-1
: password changes 3-11
: planning 3-2
: redundancy 3-2, 3-17
: removing switches from 3-12, 3-14
: settings, configuring initial 3-29
: see also candidates, command switch, member switches, standby groups

cluster setup command 3-14

cluster tree 2-26

Cluster View

: device and link icons 2-14
: device menu options 2-20
: displaying 3-13
: interface 2-13
: menu options 2-15
: overview 1-5
: toolbar icons 2-13
: using 2-20

CMS

: accessing 2-8, 3-27
: overview 1-5
: privilege level 2-35
: using 2-8
: windows, using 2-11

colors

: devices in CMS 2-17
: links in CMS 2-17

command-line error messages 2-38

command-line interface

: see CLI

command modes 2-32, 2-33

commands

: ? 2-37
: aaa accounting 4-87
: aaa authorization 4-86
: aaa authorization exec tacacs+ local 4-86
: abbreviating 2-37
: cluster setup 3-14
: copy running-config startup-config 2-41
: default 2-37
: dir flash 2-40
: help 2-37
: list of available 2-34, 2-37
: name 3-21
: no 2-37
: port block 5-40
: preempt 3-21
: rcommand 2-36
: redisplaying 2-37
: redundancy-enable 3-22
: resetting to defaults 2-37
: show cluster candidates 3-14
: show cluster members 2-36, 3-14
: spanning-tree root guard 4-80
: stp-list 4-66
: undoing 2-37

command switch

and management 1-6

and managing with SNMP 2-44

configuration conflicts 7-11

defined 1-3, 3-1

enabling 3-6, 4-11

privilege levels 2-36

recovery

: from failure 3-19, 7-6
: from failure without HSRP 3-19
: from lost member connectivity 7-11

redundant (standby) 3-17

removing from standby group 3-25

replacing

: with another switch 7-9
: with cluster member 7-6

requirements 3-3

standby 3-17, 3-18, 3-20

D

daisy-chain configurations 4-65

database, VTP 5-27, 5-32

date, setting 4-25

daylight saving time 4-26

default configuration

: VLANs 5-29
: VMPS 5-60
: VTP 5-18

defaults, resetting to 2-37

default settings, changing 4-3

deleting VLAN from database 5-36

deployment examples 1-7

destination-based forwarding 4-14

destination-based port groups 4-12, 4-50

device arrangement 3-31

device pop-up menu 2-25

dir flash command 2-40

disabling

: broadcast storm control 4-21
: CGMP Fast Leave 4-59
: network port 4-24
: port security 4-55
: SNMP 4-35
: SNMP agent 3-56
: STP 4-64, 4-65
: Switch Port Analyzer (SPAN) 4-17
: trunking on a port 5-43
: trunk port 5-43
: VTP 5-23
: VTP version 2 5-25

disqualification code 3-13

DNS

: configuring 4-32
: described 4-33
: enabling 4-34

documentation, related xxi

domain name

: described 4-33
: specifying 4-32, 4-34, 5-16

Domain Name System server

: see DNS

domains for VLAN management 5-12

DTP 5-42

duplex

: configuration guidelines 3-40
: configuring 3-37, 3-40, 3-44
: settings, ATM port 3-40

dynamic-access ports

: described 5-4
: limit on number of hosts 5-68
: VLAN membership combinations 5-6

dynamic addresses

: see addresses

Dynamic ISL (DISL) 5-42

dynamic ports

: configuring 5-64

dynamic port VLAN membership

: configuration example 5-69
: configuring 5-64
: example 5-69
: overview 5-56
: reconfirming 5-65, 5-66
: troubleshooting 5-68
: VMPS database configuration file 5-57

Dynamic Trunk Protocol (DTP) 5-42

dynamic VLAN membership 5-60

E

egress port scheduling 5-48

eligible switches 3-20

enable password

: see passwords

enable secret password

: see passwords

enabling

: broadcast storm control 4-18, 4-20
: CGMP Fast Leave 4-59
: command switch 3-6, 4-11
: DNS 4-34
: Fast Leave 4-58
: HSRP 3-22
: network port 4-23, 4-24
: NTP authentication 4-29
: Port Fast 4-76, 4-78
: port security 4-51, 4-54
: SNMP 4-35
: SNMP agent 3-56
: STP Port Fast 4-76, 4-78
: Switch Port Analyzer (SPAN) 4-15, 4-17
: traps 3-59
: UplinkFast 4-68
: VTP pruning 5-26
: VTP version 2 5-23

encapsulation 5-47

enterprise workgroup aggregation 1-7

error messages 2-38

errors, graphing 6-2

EtherChannel port groups

: configuring static address for 4-50
: creating 4-12, 4-15

Ethernet VLAN

: adding to database 5-34
: defaults and ranges 5-29
: modifying 5-35

events group, in RMON 2-45

examples

: conventions for xxi
: deployment 1-7

extended discovery 4-56

F

fan fault indication 2-26

Fast EtherChannel port groups, creating 4-12

Fast Ethernet trunks 5-38

Fast Leave

: defined 4-57
: disabling 4-59
: enabling 4-58, 4-59

FDDI-Net VLAN defaults and ranges 5-30

FDDI VLAN defaults and ranges 5-29

features

: configuration conflicts between 2-32
: conflicting port 4-2
: default settings 4-3
: incompatible 4-2
: IOS 1-2

Flash memory, files in 2-40, 2-41

flooded traffic, reducing 4-21

flooding controls

: configuring 4-18
: illustrated 4-19

flow control, configuring 3-38, 3-45

forwarding

: controlling (SNMP) 2-44
: delay 4-70, 4-74
: port groups 4-12
: restrictions 4-14
: resuming 4-23
: source-based, illustrated 4-13
: see also broadcast storm control

forwarding window, static address 4-48

FTP, accessing MIB files with 2-42

G

get-next-request operation 2-43

get-request operation 2-43

get-response operation 2-43

Gigabit Ethernet

: clusters, illustrated 4-66
: ports, configuring flow control on 3-45
: port settings 3-40
: settings 3-40, 3-41
: trunks 5-38

global configuration mode 2-33

graphing bytes 6-2

graphs

: bandwidth 2-26
: link utilization 6-1
: percent utilization 6-2
: poll result 2-43

H

hardware

: PC requirements 2-2
: supported switches 1-3

hello BPDU interval 4-73

hello time

: changing 4-73
: defined 4-70

help, getting 2-27, 2-37

Help button 2-12

history group, in RMON 2-45

hold-time, modifying 4-60

home page, VSM 4-10

hops, configuring 4-57

host names

: abbreviations appended to 3-21
: changes to 3-10
: changing 3-31
: to address mappings 4-32

hosts, limit on dynamic ports 5-68

Hot Standby Router Protocol

: see HSRP

HSRP 3-17, 3-22

: see also standby group

HTTP 2-2

I

icons

: Cluster Builder 2-14
: Cluster Manager toolbar 2-27
: Cluster View 2-14

: see Internet Explorer

IEEE 802.1p 4-89

IEEE 802.1Q

: configuration considerations 5-39
: interaction with other features 5-39
: native VLAN for untagged traffic 5-46
: overview 5-38

IEEE 802.1Q trunks 5-39

ingress port scheduling 5-47

inline power, configuring 4-92

inline power LED 3-38

interface configuration mode 2-34

interfaces

: Cluster Builder 2-13
: Cluster View 2-13
: IOS supported 1-5

Internet Explorer 2-4, 2-6

Inter-Switch Link

: see ISL

inventory, displaying 3-32

IOS

: see software and upgrading 3-2

IP addresses

: and admittance to standby groups 3-20
: candidate 3-4
: discovering 4-40
: management VLAN 3-4
: point of access 3-1
: in redundant clusters 3-18
: removing 4-32
: see also IP information

IP information

: assigned by BOOTP 4-30
: assigning 4-31
: configuring 4-29
: displaying 3-32
: removing 4-32

IP management packets, controlling 4-57

IP Management window 4-30

IP Phone

: configuring 4-90, 4-91
: enterprise workgroup aggregation 1-7
: sound quality 4-89

IP setup program 7-7, 7-10

IP telephone calls 4-89

IPX server time-out, and Port Fast 4-76

ISL

: interaction with other features 5-39
: overview 5-38

L

LEDs, monitoring 3-38, 3-40

line configuration mode 2-34

LINE PWR mode LED 3-38

link

: graph, illustrated 6-3
: utilization graphs 6-1

link icons, Cluster Builder and Cluster View 2-14

link information, displaying 3-33

load sharing

: STP, described 5-49
: using STP path cost 5-53
: using STP port priorities 5-50

location of displayed switches 3-31

location of switches, displaying 3-32

M

MAC addresses

: adding secure 4-45
: aging time 4-43
: discovering 4-40, 4-43

MAC address tables, managing 4-42

management interface features 2-1

management options 1-5

management VLAN

: changes, understanding 3-4
: changing 3-5, 3-33
: configuring 3-36
: described 5-7
: IP address 3-4

Management VLAN window 3-35

map

: see also network map

membership mode, VLAN port 5-4

member switches

accessing 5-8, 5-37

adding

: with Cluster Builder 3-12
: from the command line 3-14
: to standby group 3-24

assigning host names to 3-10

defined 1-3

displaying inventory of 3-32

managing 2-36

order 3-31

passwords, inherited 3-11

recovering from lost connectivity 7-11

removing

: from standby group 3-25

upgrading 3-53, 3-54

N

name command 3-21

NAT 3-9

native VLANs 5-46

NCPs 4-86

Netscape Communicator 2-4

Network Address Translation

: see NAT

Network Control Protocols (NCPs) 4-86

Network Management System (NMS) 2-42

network map

: creating 3-29
: saving 3-29

network ports

: disabling 4-24
: enabling 4-23, 4-24
: and trunks 5-39

Network Time Protocol. See NTP

NMS 2-42

no commands, using 2-37

Note described xxii

NTP

: authentication, enabling 4-29
: broadcast-client mode 4-29
: client 4-28
: configuring 4-27
: described 4-27
: illustrated 4-28

O

: OK button 2-12
: online help, displaying 2-12
: operating systems, supported 2-2
: order, switch 3-31
: overheating indication, switch 2-26

P

packets 4-22

: controlling management (CGMP) 4-57
: graphing 6-2
: See also traffic

parallel links 5-49

passwords

: candidate switch 3-7
: changing 4-11
: community strings 4-35
: member switch, inherited 3-11
: recovery of 3-19, 7-3
: setting 2-34
: TACACS+ server 4-83
: VTP domain 5-17

path cost 4-77, 4-78, 5-53

PC hardware requirements 2-2

plug-in, installing 2-2

polling interval 3-30

poll results, graphing 2-43

pop-up menus

: Cluster Builder candidate 2-18
: Cluster Builder link 2-19
: Cluster Builder member 2-19
: Cluster Manager device 2-25
: Cluster Manager port 2-24

port block command 4-82, 5-40

port-connection information, displaying 3-33

Port Fast

: configuring 3-37
: enabling 4-76, 4-78
: STP parameter 5-59

port groups

: and trunks 5-40
: configuring 3-37
: configuring static addresses (EtherChannel) 4-50
: creating EtherChannel 4-12, 4-15
: destination-based 4-12, 4-50
: forwarding 4-12
: restrictions on forwarding 4-14
: source-based 4-12, 4-50
: see also ports

port membership modes, VLAN 5-3

port-monitoring conflicts with trunks 5-39

port pop-up menu 2-24

ports

ATM

: duplex and speed 3-40
: trunks and other features 5-39
: VLAN membership 5-4

configuration guidelines 3-40

configuring

: through Cluster Manager 3-37, 3-41
: multiple mixed 3-42
: with port pop-up menu 2-24
: private VLAN edge 4-81
: trunk 5-40
: voice 4-89
: through VSM 2-29

dynamic

: configuring 5-64
: see also dynamic port VLAN membership

dynamic access

: hosts on 5-68
: mode 5-4
: and VLAN combinations 5-6

dynamic VLAN membership

: reconfirming 5-65

features, conflicting 4-2

flooded traffic 4-22

forwarding, resuming 4-23

Gigabit Ethernet

: configuring flow control on 3-45
: settings 3-40

monitoring 3-37, 5-39

multi-VLAN 5-4, 5-9, 5-11

network 5-39

priority 4-79, 5-47, 5-50

private VLAN edge 4-81

secure 4-53, 5-39

security

: described 4-51
: disabling 4-55
: enabling 4-54

speed, setting and checking 3-37, 3-40

static-access 5-4, 5-5, 5-7, 5-37

STP parameters, changing 4-74

trunk

: configuring 5-40
: disabling 5-43

trunks 5-4, 5-38

VLAN, displaying 3-45

VLAN assignments 5-7, 5-37

Q

QoS

: egress port scheduling 5-48
: ingress port scheduling 5-47, 5-49

R

rcommand 2-36

reconfirmation interval, changing 5-66

recovery procedures 7-2

redundancy

cluster 3-2, 3-17

STP 4-63

: path cost 5-53
: port priority 5-50
: UplinkFast 4-67

redundancy-enable command 3-22

remote devices without autonegotiation, connecting to 3-41

remove vlan-list parameter 5-43

removing

: dynamic address entries 4-45
: IP information 4-32
: multicast groups 4-60, 4-61
: secure addresses 4-48
: standby group from network 3-26
: static addresses 4-48, 4-51
: switches from a standby group 3-25

Requested and Actual settings 3-40

retry count, changing 5-67

RMON, supported groups 2-45

root guard 4-79, 4-80

router hold-time, modifying 4-60

S

saving

: cluster configuration 3-32
: network map 3-29

secure address count 4-53

secure addresses

: adding 4-45, 4-47
: described 4-45
: removing 4-48

secure ports

: address-security violations 4-52
: disabling 4-55
: enabling 4-51, 4-54
: maximum secure address count 4-53
: and trunks 5-39

security

: port 4-51
: TACACS+ 4-83
: violations, address 4-52

Serial Line Internet Protocol (SLIP) 4-86

serial numbers, displaying 3-32

server, domain name 4-34

server mode, VTP 5-13

servers, BOOTP 4-30

server time-out, and Port Fast 4-76

set-request operation 2-43

setting

: see configuring

settings

: cluster, initial 3-29
: default, changing 4-3
: duplex 3-37, 3-40, 3-44
: Gigabit Ethernet port 3-40
: multiple mixed port 3-42
: port, monitoring 3-38
: Requested and Actual 3-40
: speed 3-44
: STP 4-65
: STP default 4-65
: user, changing 3-30

setup program 7-7, 7-10

show cluster candidates command 3-14

show cluster members command 2-36, 3-14

SLIP 4-86

small-to-medium business workgroup aggregation 1-9

SNMP 3-55

accessing MIB variables with 2-42

agent 3-56

community strings

: changes to 3-10
: configuring 3-56, 4-35

configuring for

: cluster members 3-55
: single switches 4-34

disabling 3-56

enabling 3-56

enabling and disabling 4-35

management, using 2-41

managing clusters with 2-44

network management platforms 1-6

RMON groups 2-45

trap managers, configuring 3-59, 4-37

trap types 3-59, 3-60, 4-38

SNMP Configuration window, displaying 2-27

SNMP Manager, illustrated 3-57, 3-58

software

recovery procedures 7-2

reloading 3-55

required 1-4

requirements for

: changing management VLAN 3-35
: joining standby groups 3-20

to support clustering 3-2

upgrading switch 3-46, 5-17

version numbers, displaying 3-32

versions available 3-2

T

TACACS+

: AAA accounting commands 4-87
: AAA authorization commands 4-86
: configuring 4-82
: initializing 4-85
: server, creating 4-83

tacacs-server host command 4-83, 4-84

tacacs-server retransmit command 4-84, 4-89

tacacs-server timeout command 4-84

Telnet, starting from browser 2-40

TFTP server, upgrading multiple switches with 3-47

time

: daylight saving 4-26
: setting 4-25

time zones 4-25

TLV 5-15

Token Ring VLANs

: overview 5-28
: TrBRF 5-15, 5-30
: TrCRF 5-15, 5-31

toolbar icons

: Cluster Builder 2-13
: Cluster Manager 2-27
: Cluster View 2-13

topology 3-30

: see also network map

traffic

: blocking flooded 4-21, 4-22
: forwarding, and private VLAN edge ports 4-81
: monitoring 4-15
: reducing flooded 4-18, 4-23

transmit queue 5-48

transparent mode, VTP 5-13, 5-23

trap managers

: adding 4-37, 4-40
: configuring 3-59, 4-37
: supported 3-59

traps 2-43, 3-59, 4-38

TrBRF VLAN defaults and ranges 5-30

TrCRF VLAN defaults and ranges 5-31

troubleshooting

: IOS 7-1
: with CiscoWorks2000 2-43

trunk ports

: configuring 5-40
: disabling 5-43

trunks

allowed-VLAN list 5-43

ATM 5-39

blocking unknown packets on 5-40

configuration conflicts 5-39

configuring 5-42

disabling 5-43

Gigabit Ethernet 5-38

IEEE 802.1Q 5-38, 5-39

interacting with other features 5-39

ISL 5-38

load sharing using

: STP path costs 5-53
: STP port priorities 5-50

native VLAN for untagged traffic 5-46

overview 5-38

parallel 5-53

pruning-eligible list 5-45

VLAN, overview 5-38

VLAN membership combinations 5-6

TTY traps 3-59, 4-38

U

UDLD 4-81

unicast and multicast packets, unknown

: see flooding controls

unicast traffic, and private VLAN edge ports 4-81

UniDirectional Link Detection

: see UDLD

UNIX workstation requirements 2-2

Unrecognized Type-Length-Value (TLV) support 5-15

upgrading

1900 and 2820 member switches 3-54

2900 and 3500 member switches 3-53

conflicts while 3-51

multiple switches with TFTP 3-47

software

: and VTP 5-17
: with CLI 3-51
: with VSM 3-55

standalone switches 3-51

switch software 3-46

UplinkFast

: configuring in daisy chain 4-65
: enabling 4-68
: redundant links 4-67

URL, for required browser plug-in 2-4

user EXEC mode 2-33

user settings 3-30

User Settings window, displaying 2-27

utilization graphs 6-1

V

version-dependent transparent mode 5-15

virtual IP address

: HSRP 3-18
: standby group member 3-21
: see also IP addresses

VLAN

: port membership modes 5-3
: trunks, overview 5-38

VLAN database mode 2-33

VLAN ID, discovering 4-40, 4-43

VLAN Management Policy Server

: see VMPS

VLAN membership

: ATM port 5-4
: combinations 5-5
: confirming 5-65
: described 5-7
: displaying 3-45
: modes 5-4
: port group parameters 4-13
: traps 3-59, 4-38
: see also dynamic ports VLAN membership
: see also dynamic VLAN membership

VLAN Membership window 2-27

VLAN Query Protocol (VQP) 5-55

VLANs

802.1Q considerations 5-39

adding to database 5-34

aging dynamic addresses 4-64

allowed on trunk 5-43

changing 5-35

configuration guidelines 5-28

configuring 5-1, 5-7, 5-32

default configuration 5-29

deleting from database 5-36

described 5-1

displaying 3-46

illustrated 5-2

ISL 5-38

MAC addresses 4-43

modifying 5-35

multi-VLAN ports 5-9, 5-11

native, configuring 5-46

number supported 5-3

overlapping 5-9

static-access ports 5-7, 5-35, 5-37

STP parameters, changing 4-69

supported 5-3

Token Ring 5-28

trunking 5-3

trunks configured with other features 5-39

: see also trunks

VTP database and 5-27

VTP modes 5-13

W

: web-based management, using 2-2

X

: Xmodem protocol 7-2

Table of Contents

Index