Cisco Catalyst 4500 Series Administration Manual

Text of Cisco Catalyst 4500 Series User Guide:

• 46-48 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 46 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Authentication Configuring the Switch To configure the switch for per-user ACL and filter-ID ACL: Step 1 Configure the IP device tracking table. Switch(config)# ip device tracking Step 2

• Cisco Catalyst 4500 Series, 4-2 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL-30933-01 Chapter 4 Administering the Switch Managing the System Time and Date • Configuring NTP, page 4-3 • Configuring Time and Date Manually, page 4-11 System Clock The core of the time service is the system clock, which monitors the date and time. This clock starts when the system starts. The system clock can provide time to these services: • User show commands • Logging and debugging messages The system clock keeps track of time internally based on Universal Time Coordinated (UTC), also known as Greenwich Mean Time (GMT). You can configure information about the local time zone and

• Cisco Catalyst 4500 Series, 20-13 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 20 Configuring SmartPort Macros Displaying SmartPort Macros # Hardcode speed and duplex to router switchport mode trunk switchport nonegotiate speed 100 duplex full # Configure qos to trust this interface auto qos voip trust qos trust dscp # Ensure fast access to the network when enabling the interface. # Ensure that switch devices cannot become active on the interface. spanning-tree portfast spanning-tree bpduguard enable Switch# show parser mac

• Cisco Catalyst 4500 Series, 42-94 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 42 Configuring Quality of Service Configuring Auto-QoS on a Standalone Supervisor Engine 6-E/6L-E or Supervisor Engine 7-E/7L-E/8-E It establishes a trusted boundary that recognizes Cisco IP Phones and trusts the Cos setting of the packets from the phone. If a Cisco IP Phone is not detected, the Cos field is ignored and the packets are not classified as voice traffic. Upon detecting a Cisco phone, the ingress packets are marked based on the Cos value in the packets. This marking is used on egress for proper traffic classification and handling. Au

• Cisco Catalyst 4500 Series, 66-47 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL-28731-01 Chapter 66 Configuring Ethernet OAM and CFM Enabling and Configuring Ethernet OAM The switch does not support monitoring egress frames with CRC errors. The ethernet oam link-monitor transmit-crc {threshold {high {high-frames | none} | low {low-frames}} | window milliseconds} command is visible on the switch and you can enter it, but it is not supported. Use the no form of each command to remove the option from the template. Use the no source-template template-name command to remove the source template association. The following example illustrates how to configure an Ethernet OAM template and t

• Cisco Catalyst 4500 Series, 45-13 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 45 Configuring MACsec Encryption Configuring Cisco TrustSec MACsec • These protection levels are supported when you configure SAP pairwise master key (sap pmk): – SAP is not configured—no protection. – sap mode-list gcm-encrypt gmac no-encap—protection desirable but not mandatory. – sap mode-list gcm-encrypt gmac—confidentiality preferred and integrity required. The protection is selected by the supplicant according to supplicant preference. –

• 22-27 Software Configuration Guide—Release IOS XE 3.5.0SG and IOS 15.2(2)SG OL-27597-01 Chapter 22 Configuring STP and MST About MST To form an MST region, bridges can be either of the following: • An MST bridge that is the only member of the MST region. • An MST bridge interconnected by a LAN. A LAN’s designated bridge has the same MST configuration as an MST

• Cisco Catalyst 4500 Series, 42-76 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 42 Configuring Quality of Service Configuring QoS on a Standalone Supervisor Engine 6-E/6L-E or Supervisor Engine 7-E/7L-E/8-E Examples The following examples illustrate how to configure Flow based QoS policy and apply microflow policers on individual flows. Example 1 This example assumes there are multiple users (identified by source IP address) on the subnet 192.168.10.*. The configuration below shows how to confi

• 66-16 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL-28731-01 Chapter 66 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Configuring SNMP Traps To configure traps for Ethernet CFM, perform this task: Use the no form of each command to remove a configuration or to return to the default settings. The following example illustrates how to configur

• Cisco Catalyst 4500 Series, 52-11 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 52 Configuring Dynamic ARP Inspection Configuring Dynamic ARP Inspection Configuring ARP ACLs for Non-DHCP Environments This procedure shows how to configure DAI when Switch B shown in Figure 52-3 does not support DAI or DHCP snooping. If you configure port 1 on Switch A as trusted, a security hole is created because both Switch A and Host 1 could be attacked by either Switch B or Host 2. To prevent this possibility, you must configure

• Cisco Catalyst 4500 Series, 54-19 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 54 Configuring Network Security with ACLs Configuring VLAN Maps In access map configuration mode, you have the option to enter an action (forward [the default] or drop) and enter the match command to specify an IP packet or a non-IP packet and to match the packet against one or more ACLs (standard or extended). If a match clause is not specified, the action is applied to all packets. The match clause can be used to match against multiple ACLs. If a packet matches any of the specified

• 59-24 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 59 Configuring Wireshark Usage Examples for Wireshark 2 1.000000 10.1.1.3 -> 20.1.1.2 UDP Source port: 20001 Destination port: 20002 3 2.000000 10.1.1.4 -> 20.1.1.2 UDP Source port: 20001 Destination port: 20002 4 3.000000 10.1.1.5 -> 20.

• Cisco Catalyst 4500 Series, Contents 50 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL-30933-01 Onboard Failure Logging (OBFL) 60-1 Prerequisites for OBFL 60-1 Restrictions for OBFL 60-2 Information About OBFL 60-2 Overview of OBFL 60-2 Information about Data Collected by OBFL 60-2 OBFL Data Overview 60-2 Temperature 60-3 Operational Uptime 60-4 Interrupts 60-6 Message Logging 60-7 Default Settings for OBFL 60-8 Enabling OBFL 60-8 Configuration Examples for OBFL 60-9 Enabling OBFL Message Logging: Example 60-9 OBFL Message

• Cisco Catalyst 4500 Series, 7-27 Software Configuration Guide—Release IOS XE 3.6.0SG and IOS 15.2(2)SG OL-30933-01 Chapter 7 Configuring the Cisco IOS XE In Service Software Upgrade Process How to Perform the ISSU Process This example displays the Timer before you stop it. In the following example, the “Automatic Rollback Time” information indicates the amount of time remaining before an automatic rollback will occur. Switch> enable Switch# show issu rollback-timer Rollback Process State = 00:31:09 remaining Configured Rollback Time = 00:45:00 Swi

• Cisco Catalyst 4500 Series, 28-6 Software Configuration Guide—elease IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 28 Configuring IPv6 Multicast Listener Discovery Snooping Configuring IPv6 MLD Snooping MLD Snooping Configuration Guidelines When configuring MLD snooping, consider these guidelines: • You can configure MLD snooping characteristics at any time, but you must globally enable MLD snooping by using the ipv6 mld snooping global configuration command for the configuration to take effect. • MLD snooping and IGMP snooping act

• Cisco Catalyst 4500 Series, 12-10 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 12 Configuring Cisco NSF with SSO Supervisor Engine Redundancy Configuring NSF with SSO Supervisor Engine Redundancy • Verifying BGP NSF, page 12-12 • Configuring OSPF NSF, page 12-13 • Verifying OSPF NSF, page 12-13 • Configuring IS-IS NSF, page 12-14 • Verifying IS-IS NSF, page 12-15 • Configuring EIGRP NSF, page 12-16 • Verifying EIGRP NSF, page 12-16 Configuring SSO You must configure SSO in order to use NSF with any supported prot

• Cisco Catalyst 4500 Series, 28-3 Software Configuration Guide—elease IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 28 Configuring IPv6 Multicast Listener Discovery Snooping About MLD Snooping MLD Queries The switch sends out MLD queries, constructs an IPv6 multicast address database, and generates MLD group-specific and MLD group-and-source-specific queries in response to MLD Done messages. The switch also supports report suppression, report proxying, Immediate-Leave functionality, and static IPv6 multicast MAC-add

• Cisco Catalyst 4500 Series, 46-69 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 46 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Authentication Note Unidirectional controlled port only works when Spanning Tree PortFast is enabled on the port. Unidirectional controlled port and Spanning Tree PortFast should be configured on a switch port that connects to a host. If two such ports are connected together with an Ethernet cable, high CPU utilization may result because host learning will be flapping between the tw

• Cisco Catalyst 4500 Series, 40-10 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 40 Configuring Policy-Based Routing Policy-Based Routing Configuration Tasks Note The recursive option is supported for IPv4, but not for IPv6. An interface can have either an ipv4 route map or and ipv6 route map. An interface can be bound to only one route map. Use the set commands with each other. These commands are evaluated in the order shown in Step 3 in the previous task table. A usable next hop implies an interface.

• Cisco Catalyst 4500 Series, 46-9 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 46 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Figure 46-5 Multidomain Authentication Mode Example Figure 46-5 shows a typical MDA application with a single host behind an IP phone connected to the 802.1X-enabled port. Because the client is not directly connected to the switch, the switch cannot detect a loss of port link if the client is disconnected. To prevent another device from usi

• Cisco Catalyst 4500 Series, 51-2 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 51 Configuring Control Plane Policing and Layer 2 Control Packet QoS Configuring Control Plane Policing Configuring Control Plane Policing This section includes these topics: • About Control Plane Policing, page 51-2 • General Guidelines for Control Plane Policing, page 51-3 • Default Configuration, page 51-4 • Configuring CoPP for Control Plane Traffic, page 51-4 • Configuring CoPP for Data Plane and Management Plane Traf

• Cisco Catalyst 4500 Series, 12-2 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 12 Configuring Cisco NSF with SSO Supervisor Engine Redundancy About NSF with SSO Supervisor Engine Redundancy • Routing Protocols, page 12-5 • NSF Guidelines and Restrictions, page 12-9 About Cisco IOS NSF-Aware and NSF-Capable Support Cisco IOS Nonstop Forwarding (NSF) has two primary components: • NSF-awareness—If neighboring router devices detect that an NSF router can still forward packets when a supervisor engine switchover happens, this capability is referred to as NSF-awareness.

• 6-11 Software Configuration Guide—Release IOS XE 3.6.0SG and IOS 15.2(2)SG OL-30933-01 Chapter 6 Configuring the Cisco IOS In-Service Software Upgrade Process About ISSU Figure 6-8 Steps During the ISSU Process Performing an ISSU Upgrade: 2 Methods There are two ways to perform an ISSU upgrade: manually, with four commands; or automatically, with one command. The nor

• Cisco Catalyst 4500 Series, 14-15 Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E OL_28731-01 Chapter 14 Configuring Power over Ethernet Enhanced Power PoE Support on the E-Series Chassis The errdisable autorecovery mechanism allows you to configure a timer for errdisable recovery so that when an interface enters errdisable state (after the timer expires), the interface returns from the errdisable state. errdisable detection By default, errdisable detection for inline-power is enabled, as the following example illustrates: Switch# show errdisable detect ErrDisable Reason Detection Mode ----------------- --------- ---- inline-power Enabled port Note I

More Instructions:

	Cisco Catalyst 4500 Series Installation note 14-02-2024 8	DOWNLOAD
	Cisco Catalyst 4500 Series Installation manual 05-06-2023 194	DOWNLOAD
	Cisco Catalyst 4500 Series Operation & user’s manual 09-03-2023 82	DOWNLOAD
	Cisco Catalyst 4500 Series Software configuration manual 03-07-2023 2086	DOWNLOAD

Related Products and Documents (Switch):

Comparable Devices:

Similar Resources:

• H3C H3C S7500E Series (1565 pages) H3C S7500E Series Ethernet SwitchesCommand ManualHangzhou H3C Technologies Co., Ltd. http://www.h3c.com Manual Version: 20071025-C-1.01 Product Version: Release 6000 …

• SMC Networks IS1000 Series (15 pages) Switch CharacteristicsMax. contact capacityVoltageMax. operating currentImpact resistanceSpecificationsModelIS1000-01Air/Inert gas1.0 MPa0.7 MPa0.1 to 0.4 MPa0.08 MPa or less±0.05 MPa±0.05 MPa1aGrommet, Lead wire length 0.5 m (Standard)Air–5 to 60°C (No freezing)R 1/874 g01N01Port sizeLead wire length 3 mRegulating pressure range0.1 to 0.6 MPaLead wire …

• TP-Link TL-SG105 (2 pages) © 2017 TP-Link 7106507666 REV3.0.15/8-Port Gigabit Desktop SwitchNote: For simplicity, we will take TL-SG108 for example throughout this Guide.On: Power onO: Power oLED ExplanationPowerLink/Act1000M (Green) On: Connected to a 1000Mbps deviceFlashing: Transmitting/receiving data10M/100M (Yellow)On: Connected to a 10/100Mbps deviceFlashing: Tran …

• FEDERAL PACIFIC AUTO-JET AJS (4 pages) 1075 Old Airport Road • Bristol, VA 24201 Phone (276) 669-4084 • FAX (276) 645-8206 • www.federalpacic.com • ISO9001:2015SECTION IB-3A-310AINSPECTION & MAINTENANCE RECOMMENDATIONSJUNE 2021PAGE 1TYPE AJS — AUTO-JET® SWITCHES15kV • 25kV • 38kVINSPECTION & MAINTENANCE RECOMMENDATIONSThe procedures required for operation of the Federa …

• Dell PowerConnect W-AP105 (2 pages) The multifunction Dell™ PowerConnect™ W-AP105 is an aordable indoor, dual-radio 802.11n access point (AP) designed for high-density deployments in oces, hospitals, schools and retail stores. The compact, high-speed W-AP105 delivers wire-like performance at data rates up to 300 Mbps per radio. The W-AP Access Points and W-Series Controllers compleme …

• Telebyte 458-LM-A1-30-TR114 (11 pages) Model 458-LM-A1-30-TR114 Local Loop Simulator for TR-114 Including Bridged Tap Rev A Date of Publication: 03/05/2019 “Results You Can Count On” …

Comments, Questions and Opinions: