Cisco Catalyst 4500 Series Bedienungsanleitung

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Catalyst 4500 Series Switch Cisco IOS

Software Configuration Guide

Cisco IOS XE Release 3.9.xE and Cisco IOS Release 15.2(5)Ex

Last Modified: November 28, 2016

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this

URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply

a partnership relationship between Cisco and any other company. (1110R)

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

CONTENTS

Audience 67

Organization 67

Conventions 71

Related Documentation 72

Notices 74

Obtaining Documentation and Submitting a Service Request i-76

Product Overview 1-1

Layer 2 Software Features 1-1

802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling 1-2

Cisco IOS Auto Smartport Macros 1-2

Cisco Discovery Protocol 1-2

Cisco Group Management Protocol (CGMP) server 1-3

EtherChannel Bundles 1-3

Ethernet CFM 1-3

Ethernet OAM Protocol 1-3

Flex Links and MAC Address-Table Move Update 1-3

Flexible NetFlow (Supervisor Engine 7-E, 7L-E, and 8-E only) 1-4

Internet Group Management Protocol (IGMP) Snooping 1-4

IPv6 Multicast BSR and BSR Scoped Zone Support 1-5

IPv6 Multicast Listen Discovery (MLD) and Multicast Listen Discovery Snooping 1-6

Jumbo Frames 1-6

Link Aggregation Control Protocol 1-7

Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-7

Link Layer Discovery Protocol 1-7

Link State Tracking 1-8

Location Service 1-8

Multiple Spanning Tree 1-8

Per-VLAN Rapid Spanning Tree 1-8

Quality of Service 1-9

Cisco Modular QoS Command-Line-Interface 1-9

Two-Rate Three-Color Policing 1-9

Resilient Ethernet Protocol 1-10

SmartPort Macros 1-10

Contents

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

Spanning Tree Protocol 1-10

Stateful Switchover 1-10

SVI Autostate 1-11

Unidirectional Link Detection 1-11

VLANs 1-11

Virtual Switching Systems (Catalyst 4500-X and Supervisor Engine 7-E, 7L-E, and 8-E) 1-12

Virtual Switch System Client 1-12

Y.1731 (AIS and RDI) 1-13

Layer 3 Software Features 1-13

Bidirectional Forwarding Detection 1-14

Cisco Express Forwarding 1-14

Device Sensor 1-14

EIGRP Stub Routing 1-14

Enhanced Object Tracking 1-15

GLBP 1-15

Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-15

HSRP 1-16

Cisco IOS XE IP Application Services: HSRP Features in Cisco IOS XE 3.1.0SG 1-16

SSO Aware HSRP 1-17

NHRP 1-17

IP Routing Protocols 1-17

BGP 1-17

EIGRP 1-18

IS-IS 1-18

OSPF 1-19

RIP 1-19

In Service Software Upgrade 1-19

IPv6 1-20

Multicast Services 1-20

NSF with SSO 1-21

OSPF for Routed Access 1-21

Policy-Based Routing 1-22

Unicast Reverse Path Forwarding 1-22

Unidirectional Link Routing 1-22

VRF-lite 1-23

Virtual Router Redundancy Protocol 1-23

Management Features 1-23

Cisco Call Home 1-24

Cisco Energy Wise 1-24

Cisco IOS IP Service Level Agreements 1-25

Contents

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

Cisco Media Services Proxy 1-25

Cisco Medianet AutoQoS 1-26

Cisco Medianet Flow Metadata 1-26

Cisco IOS Mediatrace and Performance Monitor 1-27

Cisco Network Assistant 1-28

Dynamic Host Control Protocol 1-28

Easy Virtual Network 1-28

Embedded CiscoView 1-29

Embedded Event Manager 1-29

Ethernet Management Port 1-29

File System Management (Supervisor Engine 7-E, 7L-E, and 8-E) 1-29

FAT File Management System on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4948E,

Catalyst 4948E-F, and Catalyst 4900M 1-30

Forced 10/100 Autonegotiation 1-30

Intelligent Power Management 1-30

MAC Address Notification 1-30

MAC Notify MIB 1-30

NetFlow-lite 1-31

Power over Ethernet 1-31

Secure Shell 1-31

Simple Network Management Protocol 1-31

Smart Install 1-32

SPAN and RSPAN 1-32

Universal Power over Ethernet 1-32

Web Content Coordination Protocol 1-32

Wireshark 1-33

XML-PI 1-33

Security Features 1-33

802.1X Identity-Based Network Security 1-34

Cisco TrustSec MACsec Encryption 1-36

Cisco TrustSec Security Architecture 1-36

Cisco TrustSec Security Groups, SGTs and SGACLs 1-36

Dynamic ARP Inspection 1-37

Dynamic Host Configuration Protocol Snooping 1-37

Flood Blocking 1-37

Hardware-Based Control Plane Policing 1-37

IP Source Guard 1-38

IP Source Guard for Static Hosts 1-38

IPv6 First Hop Security 1-38

IPsec VPN 1-40

Contents

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

Local Authentication, RADIUS, and TACACS+ Authentication 1-40

Network Admission Control 1-40

Network Security with ACLs 1-41

Port Security 1-41

PPPoE Intermediate Agent 1-41

Session Aware Networking 1-42

Storm Control 1-42

uRPF Strict Mode 1-42

Utilities 1-43

Layer 2 Traceroute 1-43

Time Domain Reflectometry 1-43

Debugging Features 1-43

Web-based Authentication 1-43

1-44

Command-Line Interfaces 2-1

Accessing the Switch CLI 2-2

Accessing the CLI Using the EIA/TIA-232 Console Interface 2-2

Accessing the CLI Through Telnet 2-2

Performing Command-Line Processing 2-3

Performing History Substitution 2-4

About Cisco IOS Command Modes 2-4

Getting a List of Commands and Syntax 2-5

Virtual Console for Standby Supervisor Engine 2-6

ROMMON Command-Line Interface 2-7

Archiving Crashfiles Information 2-8

Displaying a Crash Dump for Supervisor Engine 6-E and 6L-E 2-8

Configuring the Switch for the First Time 3-1

Default Switch Configuration 3-1

Configuring DHCP-Based Autoconfiguration 3-2

About DHCP-Based Autoconfiguration 3-2

DHCP Client Request Process 3-3

Troubleshooting Tips 3-3

Configuring the DHCP Server 3-4

Configuring the TFTP Server 3-4

Configuring the DNS Server 3-5

Configuring the Relay Device 3-5

Obtaining Configuration Files 3-6

Contents

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

Example Configuration 3-7

Configuring the Switch 3-8

Using Configuration Mode to Configure Your Switch 3-9

Verifying the Running Configuration Settings 3-9

Saving the Running Configuration Settings to Your Start-Up File 3-10

Reviewing the Configuration in NVRAM 3-10

Configuring a Default Gateway 3-11

Configuring a Static Route 3-11

Controlling Access to Privileged EXEC Commands 3-13

Setting or Changing a Static enable Password 3-13

Using the enable password and enable secret Commands 3-14

Setting or Changing a Privileged Password 3-14

Controlling Switch Access with TACACS+ 3-15

Understanding TACACS+ 3-15

TACACS+ Operation 3-17

Configuring TACACS+ 3-17

Displaying the TACACS+ Configuration 3-22

Encrypting Passwords 3-22

Configuring Multiple Privilege Levels 3-23

Setting the Privilege Level for a Command 3-23

Changing the Default Privilege Level for Lines 3-23

Logging In to a Privilege Level 3-24

Exiting a Privilege Level 3-24

Displaying the Password, Access Level, and Privilege Level Configuration 3-24

Recovering a Lost Enable Password 3-25

Modifying the Supervisor Engine Startup Configuration 3-25

Understanding the Supervisor Engine Boot Configuration 3-25

Understanding the ROM Monitor 3-26

Configuring the Software Configuration Register 3-26

Modifying the Boot Field and Using the boot Command 3-28

Modifying the Boot Field 3-29

Modifying the Configuration Register Value for Wireless Mode 3-29

Verifying the Configuration Register Setting 3-30

Specifying the Startup System Image 3-31

Flash Memory Features 3-31

Security Precautions 3-32

Configuring Flash Memory 3-32

Controlling Environment Variables 3-32

Replacing and Rolling-Back Configuration 3-33

Contents

Software Configuration Guide—Release IOS XE 3.9.xE and IOS 15.2(5)Ex

Resetting a Switch to Factory Default Settings 3-34

Administering the Switch 4-1

Managing the System Time and Date 4-1

System Clock 4-2

Understanding Network Time Protocol 4-2

Configuring NTP 4-3

Default NTP Configuration 4-4

Configuring NTP Authentication 4-4

Configuring NTP Associations 4-6

Configuring NTP Broadcast Service 4-7

Configuring NTP Access Restrictions 4-8

Configuring the Source IP Address for NTP Packets 4-10

Displaying the NTP Configuration 4-11

Configuring Time and Date Manually 4-11

Setting the System Clock 4-11

Displaying the Time and Date Configuration 4-12

Configuring the Time Zone 4-12

Configuring Summer Time (Daylight Saving Time) 4-13

Managing Software Licenses Using Permanent Right-To-Use Features 4-14

About a PRTU License 4-15

Benefits of a PRTU License 4-15

Guidelines for the RTU License Model 4-16

Applying a PRTU License 4-16

Activating a PRTU License 4-16

Deactivating a PRTU License 4-17

Displaying Software License Information 4-17

Configuring a System Name and Prompt 4-21

Configuring a System Name 4-22

Understanding DNS 4-22

Default DNS Configuration 4-23

Setting Up DNS 4-23

Displaying the DNS Configuration 4-24

Creating a Banner 4-24

Default Banner Configuration 4-24

Configuring a Message-of-the-Day Login Banner 4-24

Configuring a Login Banner 4-27

Managing the MAC Address Table 4-28

Building the Address Table 4-28

MAC Addresses and VLANs 4-29

Andere Handbücher für Catalyst 4500 Series

Inhaltsverzeichnis

Andere Cisco Schalten Handbücher

Cisco

Cisco Catalyst 2960 Series Betriebsanleitung

Cisco

Cisco VCO/4K Bedienungsanleitung

Cisco

Cisco SG200 Series Bedienungsanleitung

Cisco

Cisco SGE2000 - Cisco - Gigabit Switch Bedienungsanleitung

Cisco

Cisco 2900 - Catalyst Expansion Module Bedienungsanleitung

Cisco

Cisco Catalyst 9500 Series Handbuch

Cisco

Cisco Nexus 9504 Handbuch

Cisco

Cisco Nexus 7000 Series Leitfaden

Cisco

Cisco 6503 - Catalyst Firewall Security Sys Bedienungsanleitung

Cisco

Cisco MGX 8220 Bedienerhandbuch

Cisco

Cisco WS-C4003 - Catalyst 4000 Chassis Switch Bedienungsanleitung

Cisco

Cisco SG 102-24 Bedienungsanleitung

Cisco

Cisco Nexus 9236C Handbuch

Cisco

Cisco Catalyst 2960-SF Series Bedienungsanleitung

Cisco

Cisco MDS 9120 - Fabric Switch Bedienungsanleitung

Cisco

Cisco SG 300-20 Bedienungsanleitung

Cisco

Cisco Nexus 9396PX Handbuch

Cisco

Cisco 3750G-12S - Catalyst Switch - Stackable Handbuch

Cisco

Cisco IE 2000 Anleitung zur Verwendung

Cisco

Cisco SF-300-24P - Bedienungsanleitung

Cisco

Cisco AJ732A - MDS 9134 Fabric Switch Bedienungsanleitung

Cisco

Cisco SG 300-10 Bedienungsanleitung

Cisco

Cisco Nexus 7000 Series Bedienungsanleitung

Cisco

Cisco MS220-24/48 Series Bedienungsanleitung

Beliebte Schalten Handbücher anderer Marken

URC

URC Total Control MFS-8 Bedienungsanleitung

Azbil

Azbil HPQ-D11 Bedienungsanleitung

Sony

Sony DFS-900M Bedienungsanleitung

SICK

SICK i17S Bedienungsanleitung

F&F

F&F SZR-277 Bedienungsanleitung

Shure

Shure UAMS/BK Bedienungsanleitung

Dräger

Dräger X-zone Switch Off Bedienungsanleitung

Asco

Asco Joucomatic 349 Series Bedienungsanleitung

BT Mini Hub Bedienungsanleitung

D-Link

D-Link DES-1226G Bedienungsanleitung

Johnson Controls

Johnson Controls FS80-C Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Bedienungsanleitung

MicroNet

MicroNet SP1200A Bedienungsanleitung

Ruijie

Ruijie RG-PF2920 Series Installations- und Betriebsanleitung

Altinex

Altinex DA1914SX Bedienungsanleitung

MiLAN

MiLAN MIL-SM2401M Bedienungsanleitung

RJM

RJM MASTERMIND PBC/6X Bedienungsanleitung

Atlas

Atlas MMK-KVM8 Bedienungsanleitung