Step 1 If one has not already been established, establish a console session. For information about establishing a console session, refer to the "Planning for Configuration and Management" section.
Step 5 When you have changed or entered all of the required configuration parameters, save the changes and return to the Cisco Catalyst 3920 Main Menu. Configuration is complete.
Note If the switch is a member of a stack that contains Catalyst 3900s with ATM or ISL modules, you will be able to configure the ports on these modules and obtain statistics about these modules from the Catalyst 3920 console. For information about configuring the ATM or ISL modules of a Catalyst 3900 and the types of statistical information you can obtain, see the Catalyst 3900 documentation.
To select a menu or action item, move the cursor to the item and press Enter.
To make changes to a parameter, move the cursor to the parameter name and press Enter. You will then be prompted to enter the new data or select from a list of valid choices.
To make changes to a list entry, select Change and specify the entry identifier (index number). You will then be prompted to enter the new data or select from a list of valid choices. Some list entries consist of multiple parameters. To retain the current value of any parameter, enter a null value at the prompt.
To return to the main menu without saving your changes, press Ctrl-P. Changes made to the current panel will not be saved.
To return to the previous panel without saving your changes, press the backspace key.
To refresh the console panel at any time, press Ctrl-L.
If the Catalyst 3920 is part of a stack, you will be prompted to select a box (Catalyst 3920) when you access certain configuration panels, such as the Switch/Stack Information panel.
In some cases, more information is available than can be displayed on the panel. To scroll to the next panel of information, select More.
Note If this Catalyst 3920 is part of a stack, updates to the Address Format, System Name, System Location, and System Contact are propagated throughout the stack.
Discovery—The Catalyst 3920 is checking to see if a stack exists and, if so, what the values of the stack parameters are.
Split Stack—A stack has been detected, but the parameters are different than those configured for this Catalyst 3920. To resolve a split stack, you must reset the Catalyst 3920 by pressing the System Request button.
DP Update—Parameters for the stack are being updated.
BI Update—The Catalyst 3920 is sending out information about its configuration.
VLAN BI Update—A port on the Catalyst 3920 has changed TrBRF assignments and the Catalyst 3920 is sending out updated configuration information.
Operational—The stack has been formed successfully.
Not Operational—The stack has not been formed. This may be because there is no stack port installed in the expansion slot or there is no connection between the stack port and any other Catalyst 3920 or Catalyst Matrix.
HW Rev—Hardware revision level of the module. For the stack module, this field displays the hardware revision level of the stack module followed by the revision level of the Proprietary Fat Pipe, which is the interface to the stack module. A stack module Revision B will be displayed as 0.B.
You can use VTP to set up and manage VLANs across an entire administrative domain. When new VLANs are added to a Catalyst switch in an administrative domain, VTP can be used to automatically distribute the information to the trunk ports of all the devices in the administrative domain. This allows VLAN naming consistency and connectivity between all devices in the administrative domain.
An administrative or management domain is a logical grouping of VLANs used by the VLAN Trunking Protocol (VTP) for the purpose of administration and management. VTP parameters are propagated throughout the VLANs within a single management domain. While you can have duplicate VLAN names in a network, each VLAN name within a management domain must be unique. A management domain is not device specific. Different devices may belong to the same management domain if the VLANs defined for the devices belong to the same management domain. Likewise, a device may belong to multiple management domains if the VLANs defined for the device belong to different management domains.
The following options are displayed on this panel:
VTP Administrative Configuration—Select this option to display the current VTP parameters. Refer to the "Viewing VTP Parameters" section for more information.
VTP VLAN Configuration—Select this option to define VLANs. Refer to the "Configuring VLANs" section for more information.
Local VLAN Port Configuration—Select this option to display a list of the VLAN port assignments. Refer to the "Displaying VLAN Port Assignments" section for more information.
Server mode permits configuration changes from the local device. All devices in Server mode must be capable of storing configurations for all the VLANs in the administrative domain. The switch will not allow the user to configure VLANs in excess of 63. If this number is exceeded, the switch will automatically enter Client mode.
Client mode accepts configuration changes only from other devices.
Transparent mode passes along any VTP packets received. Transparent mode also accepts and stores changes to the local VLAN configuration database, but does not propagate the changes to other devices.
Note To enable ring number learning for TrCRFs, the Local Mode must be set to Transparent (which is the default) and the Ring Number on the VTP VLAN Parameter Configuration for the TrCRF must be set to auto (which is the default). If you have set the Local Mode to Client or Server, you cannot set the Ring Number to auto. Also, if you have previously set the Local Mode to Transparent and the Ring Number to auto, you cannot change the Local Mode while ring number learning is in progress.
Note This panel displays all VLANs in the administrative domain regardless of whether they are a VLAN type that is supported by the Catalyst 3920.
Figure 5-7: VTP VLAN Configuration Panel
The following information is displayed on this panel:
Brdg/Rng—Bridge number for TrBRFs or ring number for TrCRFs. The bridge and ring numbers are displayed in hexadecimal.
Ports—For TrCRFs, whether or not ports have been associated.
Local State—Indicates whether a VLAN (TrCRF or TrBRF) is used on the local switch. Possible values are not-local, preferred, and automatic.
Not-local indicates that the VLAN is not designated for use on the local switch.
Preferred indicates that the VLAN is designated for use on the local switch. A preferred VLAN is guaranteed access on the switch. Any TrCRF to which ports on the local switch are assigned is designated as preferred. In addition, you can designate other TrCRFs and TrBRFs as preferred using the Change_Local_State option. Up to 63 TrCRFs and 63 TrBRFs can be designated as preferred.
Automatic indicates that the VLAN can be used on the local switch if access is available. An automatic VLAN is not guaranteed access on the switch. Automatic VLANs are given access as space is available (if less than 63 VLANs have been designated as preferred).
When setting the local state for a VLAN, keep the following in mind:
New TrBRFs are assigned a local state of not-local.
If you add a TrCRF to a TrBRF with a local state of not-local, the TrCRF is assigned a local state of not-local.
If you add a TrCRF to a TrBRF with a local state of preferred, the TrCRF is assigned a local state of automatic.
If you add a TrCRF to the preferred list and the parent TrBRF is not already designated as preferred, the local state of the parent TrBRF will also be changed to preferred.
If you add a TrBRF to the preferred list and its children have a local state of not-local, the local state of the children will be changed to automatic.
You cannot change the state of any TrBRF that contains a TrCRF in the preferred state.
You cannot change the state of any TrCRF to which ports are assigned.
If you remove a TrBRF from the preferred list, the local state will be changed to not-local.
If you remove a TrCRF from the preferred list, the local state will be changed to automatic (if there are less than 63 TrCRFs that have been granted access through the switch) or not-local.
To
Select
Then
View the current configuration of a VLAN, including a list of associated ports for a TrCRF...
Add or remove a TrBRF or TrCRF from the list of preferred VLANS...
Change_Local_State
Specify the VLAN ID and confirm your request to add or remove the VLAN from the preferred list. Then, press any key to refresh the panel.
Delete a VLAN...
Delete
Specify the VLAN ID.
Display a list of VLANs sorted by VLAN ID...
Sort
Select Sort_by_VLAN_ID.
Save your changes...
Return
Note The VLAN with the VLAN name of "default" is an Ethernet VLAN and is the VLAN that will be used to transmit information for Cisco proprietary protocols, such as VTP and CDP.
If you change the state of a TrBRF to Suspended, the state of any associated TrCRFs will also be changed to Suspended.
If you change the state of a TrBRF to Operational, the state of any associated TrCRFs will also be changed to Operational. This will cause all the ports associated with the TrBRF to begin forwarding traffic.
Note If you reduce the MTU for a TrBRF to a value that is less than the MTU currently configured for the individual ports in the TrBRF, the MTU for the ports will automatically be reduced to a value (1500, 4472, 8144, or 17800) that is less than that specified for the TrBRF.
Note If you select View on the VTP VLAN Configuration panel and specify the VLAN ID of a TrCRF, this panel also displays a list of the ports assigned to the specified TrCRF.
Figure 5-9: VLAN Parameter Configuration for TrCRF Panel
The following information is displayed on this panel:
State—Current state of the TrCRF. The possible values for the state of a TrCRF are Operational and Suspended. By default, all VLANs are Operational. You can change the states for TrBRFs and TrCRFs only. Consider the following when changing the state of a TrCRF:
If you change the state of a TrCRF to Suspended or if the state is changed as a result of a change in the state of the parent TrBRF, any traffic (including BPDUs) that is received by ports assigned to the TrCRF will be discarded.
If you change the state of a TrCRF to Operational, the state of the parent TrBRF will automatically be changed to Operational as well. The state of any other TrCRFs associated with the parent TrBRFs will remain unchanged.
The fact that a VLAN is operational does not mean that you can assign spanning-tree parameters to it. You can assign certain parameters, such as IP and spanning-tree parameters, to only those TrCRFs for which ports have been assigned. And you can assign ports to only those TrCRFs that have been configured for the local switch.
Note To enable ring number learning, the Local Mode (on the VTP Administrative Configuration panel) must be set to Transparent (which is the default) and the ring number must be set to auto (which is the default). If you have set the local mode to Client or Server, you cannot set the ring number to auto. Also, if you have previously set the local mode to Transparent and the ring number to auto, you cannot change the local mode while ring number learning is in progress.
Caution
If the ports of the TrCRF VLAN are connected to a ring that contains only workstations, the port will be unable to learn the ring number. In this case, you must configure the ring number.
Backup CRF—Whether the TrCRF is to be used as a backup TrCRF. Possible values are No and Yes. The default is No. For more information about backup TrCRFs, see the Catalyst 3900 Token Ring Inter-Switch Link Module Configuration Note.
State—Current state of the VLAN. Possible values are Operational and Suspended. VLANs in operational state are functional. VLANs in suspended state do not pass packets.
State—Current state of the VLAN. Possible values are Operational and Suspended. VLANs in operational state are functional. VLANs in suspended state do not pass packets. The default is Operational.
FDDI VLANs
If the VLAN type is FDDI, the following additional information is displayed for FDDI VLANs:
IP Disabled—Domain will not process any IP or Address Resolution Protocol (ARP) frames it receives. It will not respond to SNMP, PING, Telnet, or ARP frames that are received.
BootP When Needed—If the IP address is zero (0.0.0.0), BootP requests will be broadcast by the Catalyst 3920 in an effort to learn its IP address. All other IP functions are disabled until it receives a reply. If a nonzero IP address has been configured (and stored in NVRAM), IP is enabled for the domain and will function immediately.
BootP Always—IP is enabled for the domain, but will not function until a BOOTP reply is received. If a nonzero IP address for the domain is stored in NVRAM, it will be cleared to zero when the Catalyst 3920 is booted.
When you select either of the BootP options for the IP state, the Catalyst 3920 repeats BootP requests at regular intervals, beginning at 1 second intervals and eventually decreasing to 5 minute intervals until it has received a valid response.
The BootP requests will also cease if a valid IP address is configured via the console panels or if the IP state is set to IP Disabled. Once the Catalyst 3920 stops sending BootP requests on a domain, it does not resume sending requests or recognize BootP responses on that domain unless the Catalyst 3920 is reset.
For more information about BootP, refer to the appendix "Understanding BootP".
To
Select
Then
Change the current settings...
The appropriate parameter...
Specify the value.
Verify the network availability of a particular resource...
Note IP addresses are always entered in dotted-decimal notation (a set of 4 decimal numbers from 0 through 255 separated by periods). The default is 0.0.0.0. If the default is used, no SNMP management will be available until the switch learns its address.
To view or change the spanning-tree parameters associated with a VLAN, such as the switch priority and the port path cost, select Spanning Tree on the Configuration Menu and then select the desired TrBRF. The Spanning Tree for TrBRF panel (Figure 5-17) is displayed.
When you configure spanning-tree parameters for a TrBRF, you:
Use the STP Participation field on the Spanning Tree for TrBRF panel to specify whether the TrBRF is to participate in a spanning tree and, if so, which Spanning-Tree Protocol is to be used.
Use the STP Mode field on the Spanning Tree for TrCRF panel to specify the forwarding state of each logical port in the TrBRF. The forwarding state can be forwarding, blocked, or auto. For a mode of auto, the forwarding state is determined by the Spanning-Tree Protocol.
If STP participation is set to no, then all TrCRFs with this TrBRF as a parent will be set to forwarding mode.
If STP participation is set to IEEE or IBM, then the selected protocol will be used to determine the forwarding/blocked mode of the TrCRFs that are configured with an STP mode of auto.
If STP participation is set to base on bridging mode, then the Spanning-Tree Protocol used is based on the bridging mode of the TrCRF. If the bridging mode is SRB, the IBM Spanning-Tree Protocol is used. If the bridging mode is SRT, the IEEE 802.1d Spanning-Tree Protocol is used.
Note You can create your own spanning tree by setting the STP Participation to no and manually controlling the forwarding state of each logical and physical port using the STP Mode fields. However, if you then decide to use one of the standard Spanning-Tree Protocols and change the STP Participation to a value other than no, you must set the STP Mode for each port to auto. The Catalyst 3920 will not automatically change the forwarding mode of related ports when you change the STP Participation from no to one of the Spanning-Tree Protocols.
IEEE STP uses Bridge Functional Address—Indicates whether to use the bridge functional address instead of the IEEE Spanning Tree Protocol address when the TrBRF is configured to use the IEEE Spanning Tree Protocol.
Bridge Priority—Priority value for this Catalyst 3920 (0 through 65535). The lower the priority value, the higher the priority. The bridge or switch with the lowest priority value in a spanning tree becomes the root. The default is 32768.
The maximum cannot be more than the lower of 40 or 2 x (Switch Forward Delay - 1).
The range limits that appear when you select this parameter are calculated using the values currently selected for Switch Hello Time and Switch Forward Delay.
When you configure the spanning-tree parameters for a TrCRF, you:
Use the STP Participation field on the Spanning Tree for TrCRF panel to specify whether the TrCRF is to participate in a spanning tree and, if so, which Spanning-Tree Protocol is to be used.
Use the STP Mode field on the Port Spanning Tree Parameters panel to specify the forwarding state of each physical port in the TrCRF. The forwarding state can be forwarding, blocked, or auto. For a mode of auto, the forwarding state is determined by the Spanning-Tree Protocol.
If STP Participation is set to no, then all ports belonging to this TrCRF will be set to forwarding mode.
If STP Participation is set to IEEE or Cisco, then the selected protocol will be used to determine the forwarding/blocking mode of the ports that are configured with an Spanning-Tree Protocol mode of auto.
Note You can create your own spanning tree by setting the STP Participation to no and manually controlling the forwarding state of each logical and physical port using the STP Mode fields. However, if you then decide to use one of the standard Spanning-Tree Protocols and change the STP Participation to a value other than no, you must set the STP Mode for each port to auto. The Catalyst 3920 will not automatically change the forwarding mode of related ports when you change the STP Participation from no to one of the Spanning-Tree Protocols.
The maximum cannot be more than the lower of 40 or 2 x (Switch Forward Delay - 1).
The range limits that appear when you select this parameter are calculated using the values currently selected for Switch Hello Time and Switch Forward Delay.
Enabled—Indicates whether the port is currently enabled. Possible values are Yes (to enable) and No (to disable). The default is Yes. If a port has been disabled by the Catalyst 3920 software, this field displays No (auto-disabled). To manually enable the port, select this field and then select Yes.
Status—Current status of the port. Possible values are Inserted, Not Inserted, Wire Fault, Lobe Test Fail, HDX Frame Error, Heart Beat Fail, FDX New Station, FDX Prot Error, Speed Error, Remove Received.
Cfg Loss Sampling Interval—Sampling period (in minutes) used when measuring the number of configuration losses occurring. Possible values are 1 through 60. The default is 1.
Note If you change any configuration parameters of a connected port, the port will close and reopen and you will lose all address information and statistics for that port.
Each device configured for CDP sends periodic messages to a multicast address. Each device advertises at least one address at which it can receive SNMP messages. The advertisements also contain time-to-live, or holdtime, information, which indicates the length of time a receiving device should hold CDP information before discarding it.
To configure CDP parameters, select CDP Configuration on the Configuration Menu. The CDP Configuration panel (Figure 5-21) is displayed.
An active port monitor allows you to use a customer-supplied trace tool, such as a Network General Sniffer, to monitor only the LLC traffic that is switched by the monitored port. The MAC frames are not monitored.
Note Before you can use a SPAN port to monitor traffic, the SPAN port must be in its own TrCRF and TrBRF. You cannot designate a port as a SPAN port if it is not isolated in it's own TrCRF and TrBRF. See "Configuring VLANs and VTP" for more information about how to define a TrBRF and a TrCRF and how to assign a port to a TrCRF.
The following information is displayed on this panel:
Port Number—Port to which the network analyzer or RMON probe will be attached. Possible values are 0 through 24. You cannot specify a port that is a member of a TokenChannel as a monitoring port. Likewise, you cannot add a port that has been specified as a monitoring port to a TokenChannel.
Port To Monitor—Port that will be monitored. Possible values are 0 through 24.
The following options are displayed on this panel:
TokenChannel Configuration—Select this option to configure a TokenChannel. Refer to the "Configuring TokenChannels" section for more information.
Current TokenChannel Information—Select this option to view the configuration of current TokenChannels. Refer to the "Viewing Current TokenChannel Configuration" section for more information.
A single TokenChannel can consist of a combination of HDX and FDX connections. For example, a TokenChannel consisting of three connections can have one HDX and two FDX connections. However, both ports in each interconnected pair must be either HDX or FDX. In addition, all ports in a single TokenChannel must belong to the same TrCRF on the Catalyst 3920.
You must define the TokenChannels for both connected Catalyst 3920s before physically connecting the linked ports. Therefore, make sure that you have either disabled the ports or disconnected the cables before you configure the TokenChannel. Otherwise, you will create loops.
Note When you physically connect the linked ports, make sure that the ports with the lowest port numbers are connected. For example, if a TokenChannel links ports 3, 6, and 7 of one Catalyst 3920 and ports 2, 4, and 5 of another Catalyst 3920, the ports must be connected to each other in the following manner: port 3 to port 2, port 6 to port 4, and port 7 to port 5.
To
Select
Then
Define a new TokenChannel
Add Entry
Specify the ports that compose the new TokenChannel. The port numbers must be entered from lowest to highest and be separated by spaces. You cannot specify more than 8 ports.
Delete the definition for a TokenChannel
Delete Entry
Specify the identifier of the TokenChannel to be deleted.
Change the definition of a TokenChannel
Change Entry
Specify the identifier of the TokenChannel to be changed and enter the new information. The ports associated with a TokenChannel must be disabled or disconnected before you change the TokenChannel definition.
Delete all TokenChannel definitions
Clear Table
Confirm the deletion of all TokenChannel definitions.
The following options are displayed on this panel:
Configure Filters—Select this option to configure MAC address filters. For more information, refer to the "Filtering Data Based on MAC Address" section.
Configure Port Security Mode—Select this option to block communication at selected ports. For more information, refer to the "Securing Ports" section.
View Port Filters—Select this option to view the currently defined filters. For more information, refer to the "Viewing Filters for a Specific Port" section.
Protocol Filters—Select this option to configure protocol filters. For more information, refer to the "Filtering Data Based on Protocol" section.
Note When configuring MAC address filters for a port, you cannot configure multiple filters that include the same MAC address for a port. For example, you cannot specify the same MAC address in both a block destination address filter and a block source address filter for the same port. Also, you cannot specify the same MAC address in both an allow destination address filter and an allow source address filter for the same port.
Figure 5-27: Configure Filters Panel
The following information is displayed on this panel:
Index—Identifier of the filter.
MAC Address—MAC address contained in packets to be filtered.
Type—Possible types are:
block src—Block any packet with source address.
block dest—Block any packet with destination address.
allow src—Allow any packet with source address.
allow dest—Allow any packet with destination address.
allow lma—Allow any packet with limited multicast address to port(s).
force dest—Force any packet with the designated destination address to port.
You can define up to 250 source or destination MAC addresses to be filtered at the port of entry into the Catalyst 3920. MAC addresses can be unicast, multicast (group), or broadcast. All 250 addresses can be associated with one port or divided among the available ports.
To
Select
Then
Display the complete list of Entry Ports and Exit Ports for a filter
Zoom
Specify the index number.
Add a filter
Add Entry
Specify the filter type, the MAC address, and the ports. The port numbers should be listed from lowest to highest and be separated by spaces. If you do not specify a port number, the filter will be applied to all ports.
Delete a filter
Delete Entry
Specify the index number of the filter to be deleted.
Delete all filters
Clear Table
Confirm the deletion of all filters.
Save your changes
Return
Note If you set up a filter for broadcast packets, hosts on the other side of the Catalyst 3920 will not see the ARP broadcast packets. To prevent this, allow time for the Catalyst 3920 to learn the host addresses before implementing the filter.
Note If you are defining a filter for a TokenChannel, the filter must be defined for all ports in the TokenChannel.
Port Filtering Attributes—Select this option to define the behavior attributes for a protocol filter. For more information, refer to the "Defining Protocol Filter Behavior for a Port" section.
The following options are displayed on this panel:
Port Address Table Aging—Select this option to define the address aging limits for each port address table. For more information, refer to the "Defining Address Aging Limits by Port" section.
Press Enter at the Old Password prompt and specify a new password.
Change the password
Set Password
Specify the current password and the new password.
Delete the password
Delete Password
Specify the current password.
Save your changes
Return
Note If you have forgotten your password, press the System Request button to access the System Request menu, and then select Clear the system password. This will clear only the system password. All other configuration parameters saved in NVRAM will be retained.
