Académique Documents
Professionnel Documents
Culture Documents
Cisco Switch
Configuration
AppNote
Version 2.0
September 2007
1 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Table of Contents
1.0 REVISION HISTORY......................................................................................................................................3
2 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
3 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
2.1 Purpose
The purpose of this document is to describe the basic setup of a Cisco switch for operation in a
DToIP environment, as well as some optional features that can be used. It is assumed that the
switch is operating as new (out of the box) with no configuration.
2.3 Definitions
OSI Model Open System Interconnection (OSI) reference model was created to help define
how network processes function in general, including the various components of
the network and transmission of the date. Understanding the structure and
purpose of the OSI model is central to understanding how networks operate.
Protocols provide the rules and standards by which data is transmitted over a network
TCP TCP is a connection oriented protocol that provides data reliability between hosts.
UDP UDP is a connectionless protocol in which a one way datagram is sent to the
destination without advance notice to the destination device
MAC Address 48 bit address assigned to the NIC
IP Address 32 bit logical address
Network Address A reserved address assigned to the network itself.
Broadcast Address A reserved address used to broadcasting packets to all of the devices on a
network.
IGMP Snooping IGMP snooping allows a switch to snoop or capture information from IGMP packets being
sent back and forth between hosts and a router. Based on this information, a switch will
add/delete multicast addresses from its address table, thereby enabling/disabling multicast
traffic from flowing to the individual host ports.
IGMP Snooping IGMP snooping querier should be used to support IGMP snooping in a VLAN where PIM
Querier and IGMP are not configured because the multicast traffic does not need to be routed.
In a network with IP multicast routing, the IP multicast router acts as the IGMP querier. If
the IP-multicast traffic in a VLAN needs to be Layer 2 switched only, an IP-multicast router
is not required, but without an IP-multicast router on a VLAN, you must configure another
switch as the IGMP querier so that it can send queries.
When IGMP snooping querier is enabled, the IGMP snooping querier sends out periodic
IGMP queries that trigger IGMP report messages from the switch that wants to receive IP
multicast traffic. IGMP snooping listens to these IGMP reports to establish appropriate
forwarding.
4 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Hook up your Cisco console cable to the “console” port of the Cisco switch and to your RS-
232 port on your computer.
Note: The console port may be located on the front or back of the Cisco switch
depending on the model. Refer to the included documentation for questions
regarding your specific switch model.
Open a HyperTerminal session and use the following settings: 9600-8-1-none. Ensure that
the scroll lock key is not depressed.
Press the “enter” key. The switch should respond with a “Switch>” prompt.
Note: If the switch has been modified the prompt may display a different name (i.e.
Cisco> or something else).
Type “enable” (or “en”) to put the switch into privileged user mode. The switch will respond
by changing the prompt to “Switch#”.
Note: if the switch has been pre-configured then there may be a password required
here. Contact the person responsible for programming the switch for that
information.
You are now ready to start your configuration.
5 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Optional configurations (More on these commands will be addressed later on in this document).
Configuring passwords for the enable and telnet sessions
Configuring an IP address for the switch
Configuring an IP address for a vlan
Routing commands
Recovery from a lost password.
6 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Prior to any VLAN configuration the user should have an agreed upon IP plan based on the network
design.
From the privileged user mode type “vlan database” to put the switch into the VLAN configuration
mode. This mode allows the creation and deletion of VLANS. The switch will respond by changing
the cursor to “Switch# (vlan)”.
Type “vlan 100” (or any # with the exception of #1. this is the default/admin vlan and can not be
recreated or deleted). Repeat this for all vlans you need to create. To delete a vlan type “Switch
(vlan)# no vlan 100.
To apply the changes made at the vlan prompt you must type “apply” before exiting the vlan prompt.
To exit the vlan mode, type “exit”
Some optional commands that can be used when configuring your vlan are adding a description,
adding an IP address, or changing the name of a vlan.
Adding a description is not necessary, but can be helpful for others when doing troubleshooting down
the road.
Optional (adding a description to the vlan, an IP address, and changing the vlan name)
Switch(config-vlan)# description TS1 video vlan
Switch(config-vlan)# name video vlan1 (this changes the vlan name)
Switch(config-vlan)# exit
7 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Switch# conf t
Switch(config)# interface GigabitEthernet 1/0/1
Switch(config-if)# no shut
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 100
Switch(config-if)# spanning-tree portfast
In this example we are setting up gigabit Ethernet ports 1-24 and adding them to vlan 100.
Optional (this will show you the trunking info for this interface. No
that the interface haAsplay the parameters below).
8 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
9 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
10 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
1. To enable IGMP snooping globally, put the switch into global configuration mode.
11 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Switch# conf t
Switch(config)# ip igmp snooping
2. To disable global IGMP snooping, again at the global configuration prompt, type:“
Switch# conf t
Switch(config)# no ip igmp snooping
3. To enable the IGMP snooping on a vlan, at the global configuration prompt, type:
Switch# conf t
Switch(config)# ip igmp snooping vlan 100
4. If a query device is required and your switch is a Layer 3 switch, you can invoke the query device
on one vlan, as it requires the vlan to have an ip address. If you intend to use the BNG as a
query device, you can skip this step, but you must enable the query function in the BNG. Refer
to the BNG and NMx documentation for more information.
To enable the query device, from the interface configuration prompt, type the following:
Switch# conf t
Switch(config)# interface FastEthernet 0/1
Switch(config-if)# ip address 192.168.10.10 255.255.255.0
Switch(config-if)# ip igmp snooping querier
Switch(config-if)# exit
Switch(config)#
Note: Depending on the version of your IOS you may need to run the following in order for
the switch querier to work properly
Switch(config)# ip routing
Switch(config)# ip multicast-routing distributed
Switch(config)# ip pim sparse
Or
Switch(config-if)# ip pim sparse-dense
5. To disable the snooping querier, from the interface configuration prompt, type:
12 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Cisco Catalyst express 500 has been used more and more often for management switches. Here are
the basic configuration steps as well as important highlights.
5. When a switch port LED blinks green, connect your PC to that port.
The LAN adapter of this PC must be configured to get the IP address via DHCP. The LEDs on
the PC and the switchport blink green while the switch configures the connection (this takes
around one minute).
6. Open a web browser. Complete these steps if the browser does not pull up the GUI
automatically:
a. Issue the ipconfig command in order to view the dynamic address allocation.The switch
configures its management address as the Default Gateway for the LAN adapter card of
the PC.
7. Enter the Network Settings and Optional Settings (if required). Click Submit in order to save
changes and finish the basic configuration.
13 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
8. Enter the configured User Name and Password in order to continue the configuration of the
switch.
a. Click Yes and Submit in order to accept the predefined port roles. The Smartports
window appears. Here you can change the predefined roles or apply new port roles.
11. Close the web browser and reconfigure the LAN adapter with an IP address within the same
subnet of the new management address of the switch.
12. When the switch comes up, open a web browser and go to
http://<CE500_Management_IP_Address> . For example, http://172.16.100.100.
Note: Once the initial configuration is complete, the switch can be managed through any
switchport that is configured for the same VLAN as that of the management IP address
1. Set the NMX ports to "server" type while you set other encoder/PS1K/Haloswitch/SL10..., to
"desktop" or "other" type when you use smartports configuration. This is critical. Even though
Cisco's documents/website say the "standard server" type is the same as "desktop" type, they
are not. You will have bootp, and tftp problems if you set NMX to "desktop" type. As CE500
doesn't CLI interface, chances are that this is a Cisco spoofing prevention machanism. It will
prevent a "desktop" port to behave as a bootp, tftp, dns, or other critical servers for spoofing
purpose.
14 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
2. It’s recommanded that you do not change specific port settings after you enable a Smartports
role on a port. Any port setting changes can alter the effectiveness of the Smartports role.
3. Do not apply the Desktop role to ports that are connected to switches, routers, or APs.
4. The Smartport role Switch automatically enables 802.1Q trunking on the port. If a remote switch
does not support 802.1Q trunking or the trunking is manually turned off, the spanning tree state
of the port on the remote switch goes to blocking for type inconsistency. If the remote switch is
the root bridge, the switch port does not go to blocking mode. In this case, the switch port trunk
status is ON at both ends of the switches, but there is not any communication between the
switches through these ports. There are no diagnostic messages displayed on the Catalyst
Express 500 device.
5. You normally wouldn't need to do any configuration if you have less than 24 devices to control
but you will have to if you have more than 24 because you need more than 2 switches, and you
need to trunk them together. When you have only two switches, you better to use the two
Gigiports on both switches to form a Etherchannel to provide trunking redundancy/load balancing.
If you have more than 2, let's say you have 4. You better put the NMX on one switch(let's say the
first one), truck the other three(#2 to #3, #3 to #4), and then create an Etherchannel with two
ports on the NMX switch, one port on #2, and one port on #4), and so on so forth...
6. Be careful about VLAN and ip address changes on the GUI to avoid starting it over again, which
requires you to disconnect everything on the switch first, and it's painful. This can happen when
you create a new VLAN and move all the ports from default VLAN 1 to your new VLAN. Leave
one port unchanged in this case, and then use this port to change the VLAN ip address, and
then you can use another port to access the VLAN again.
Cisco Catalyst 3750 Series supports StackWise technology that are used to create a unified, logical
switching architecture through the linkage of multiple, fixed configuration switches. Stacking offers
many benefits such as much higher bandwidth between the swiches(32GB bi-direction), easy to
configure and manage the switches as they are logically one unit, etc. And yet stacking still offers the
switch redundancy. In Harmonic IP headend setup, stacking should be preferable to trunking when
connecting two or more Catalyst 3750 switches together for encoder and prostream port redundancy
setup whenever possible. The main limitation is probably the distance. The longest stacking cable is
3 meter long, and the stable cables in the boxes are only 20 inches long.
The diagram below for the cable connections to stack 4 Catalyst 3750 switches together.
15 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
After you use stacking cables to connect multiple Catalyst 3750 switches, those switches are logically
one switch. So, you only need to connect the console cable to the master swtich and do all the VLan
and interface configurations at once unlike trunking where you need to configure each switch
individually. There are a set of rules for electing master switch and you can refer to Cisco website for
those rules. But in Harmonic IP Headend application, normally all the redundant switches are about
the same with the same model, same software version, etc. so the master switch would the one that
has longest running time. In another word, the one you turn on power the first will be the master
switch.
CAB-STACK-50CM : 50 cm(1’6”) long. This is the default that comes with the switch.
CAB-STACK-1M: 1 m(3.28’) long
CAB-STACK-3M: 3 m(9.84’) long
Switch> en
16 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Switch# conf t
Switch(config)# interface vlan1
Switch(config-if)# ip address 192.168.10.100 255.255.255.0
Switch(config-if)# exit
Switch(config)#
Switch> en
Switch# conf t
Switch(config)# ip default-gateway 10.10.5.254
Switch(config)# exit
Switch#
Switch> en
Switch# conf t
Switch(config)# enable secret harmonic
Switch(config)# exit
Switch#
Switch#
Switch# conf t
Switch(config)# line vty 0 4
Switch(config-line)# password harmonic
Switch(config-line)# exit
17 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Switch(config)# exit
Switch#
Switch# wr
18 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
1. Attach a terminal or PC with terminal emulation (for example, Hyper Terminal) to the console port
of the switch.
o Data bits: 8
o Parity: None
o Stop bits: 1
Note: For additional information on cabling and connecting a terminal to the console port, refer to
Connecting a Terminal to the Console Port on Catalyst Switches or see section 2.4 of this
document.
3. Hold down the mode button located on the left side of the front panel, while reconnecting the
power cable to the switch.
For 2900/3500XL and 3550 series switches: Release the mode button after the LED above
Port 1x goes out.
Catalyst 3524XL
19 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
For 2940 and 2950 series switches: Release the mode button after the STAT LED goes out.
Catalyst 2950-24
For 2955 series switches only: The Catalyst 2955 series switches do not use an external mode
button for password recovery. Instead the switch boot loader uses the break-key detection to
stop the automatic boot sequence for the password recovery purposes. The break sequence is
determined by the terminal application and operating system used. Hyperterm running on
Windows 2000 uses Ctrl + Break. On a workstation running UNIX, Ctrl-C is the break key. For
more information, refer to Standard Break Key Sequence Combinations During Password
Recovery.
The example below uses Hyperterm to break into switch: mode on a 2955.
C2955 Boot Loader (C2955-HBOOT-M) Version 12.1(0.0.514), CISCO
DEVELOPMENT TEST
VERSION
Compiled Fri 13-Dec-02 17:38 by madison
WS-C2955T-12 starting...
Base ethernet MAC Address: 00:0b:be:b6:ee:00
Xmodem file system is available.
Initializing Flash...
20 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
flash_init
load_helper
bootswitch:
4. Issue the flash_init command.
switch: flash_init
Initializing Flash...
flashfs[0]: 143 files, 4 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 3612672
flashfs[0]: Bytes used: 2729472
flashfs[0]: Bytes available: 883200
flashfs[0]: flashfs fsck took 86 seconds
....done Initializing Flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
switch:
21 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
22 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
Switch>
Switch#
12. Copy the configuration file into memory .
Switch# copy flash:config.text system:running-config
Destination filename [running-config]?
23 September 2007
CSD Systems Engineering
Cisco Switch Configuration AppNote
14. Write the running configuration to the configuration file with the write memory command.
Switch# write memory
Building configuration...
[OK]
Switch#
If you're experiencing connectivity problems in a VLAN environment, you should perform the
following troubleshooting steps:
1) Do you have a physical and data link layer connection? Check the status of the interface with the
show interfaces command. Use CDP to check connectivity. Check the duplexing of the
connection (auto negotiation is a common problem with the negotiation of the duplexing mode).
Switch# show interface Gigi 1/0/2
Switch# show cdp neighbors
Switch# show cdp neighbors details
2) Is your router and switch configuration correct? Verify that you've configured your routing protocol
and your router's interface. If you're trunking between the router and the switch, verify this
configuration.
3) Have you set up your VLAN configuration correctly? Check to make sure that the appropriate
interfaces are associated with the correct VLANs.
1) Verify that the speed and duplexing configuration on both sides are correct and that you're using
the correct cable type (crossover versus straight).
2) Make sure that the trunking type (ISL or 802.1Q) is the same on both sides and that the DTP
modes are acceptable to forming a trunk.
3) For 802.1Q trunks, check that the native VLAN is the same on both sides.
24 September 2007