Manual de instrucciones de Cisco Systems Cisco Sg500-28p EthernetSG50028PK9NA

Resumen del contenido incluido en la página 1

ADMINISTRATION
GUIDE
Cisco 500 Series Stackable Managed Switch
Administration Guide Release 1.3.5

Resumen del contenido incluido en la página 2

Contents Table of Contents Chapter 1: Getting Started 1 Starting the Web-based Configuration Utility 1 Quick Start Device Configuration 5 Interface Naming Conventions 6 Differences Between Sx500, SG500X, ESW2-550X and the SG500XG De- vices 7 Window Navigation 8 Chapter 2: Status and Statistics 12 System Summary 12 Viewing Ethernet Interfaces 13 Viewing Etherlike Statistics 14 Viewing GVRP Statistics 15 Viewing 802.1X EAP Statistics 16 Viewing TCAM Utiliz

Resumen del contenido incluido en la página 3

Contents Upgrade/Backup Firmware/Language 37 Active Image 41 Download/Backup Configuration/Log 42 Configuration Files Properties 48 Copy/Save Configuration 49 Auto Configuration via DHCP 50 Chapter 5: Administration: Stack Management 58 Overview 59 Types of Units in Stack 60 Stack Topology 62 Unit ID Assignment 63 Master Selection Process 65 Stack Changes 66 Unit Failure in Stack 68 Software Auto Synchronization in Stack 70 Stack Unit Mode 70 Stack Ports 74 Default Configuration 80 I

Resumen del contenido incluido en la página 4

Contents Time Settings 112 System Log 112 File Management 113 Rebooting the Device 113 Routing Resources 115 Health 119 Diagnostics 121 Discovery - Bonjour 121 UDLD 121 Discovery - LLDP 121 Discovery - CDP 121 Ping 121 Traceroute 123 Chapter 7: Administration: Time Settings 126 System Time Options 127 SNTP Modes 128 Configuring System Time 129 Chapter 8: Administration: Diagnosti

Resumen del contenido incluido en la página 5

Contents Chapter 10: Administration: Unidirectional Link Detection 183 UDLD Overview 183 UDLD Operation 184 Usage Guidelines 187 Dependencies On Other Features 187 Default Settings and Configuration 188 Before You Start 188 Common UDLD Tasks 188 Configuring UDLD 189 Chapter 11: Port Management 194 Configuring Ports 195 Setting Port Configuration 195 Link Aggregation 200 PoE 208 Configuring Green Ethernet 208 Chapter 12: Smartport 216 Overview 217 What is a Smartport 218 Smartport Typ

Resumen del contenido incluido en la página 6

Contents Built-in Smartport Macros 236 Chapter 13: Port Management: PoE 248 PoE on the Device 248 Configuring PoE Properties 251 Configuring PoE Settings 253 Chapter 14: VLAN Management 256 VLANs 257 Configuring Default VLAN Settings 260 Creating VLANs 261 Configuring VLAN Interface Settings 262 Defining VLAN Membership 264 GVRP Settings 267 VLAN Groups 268 Voice VLAN 272 Access Port Multicast TV VLAN 286 Customer Port Multicast TV VLAN 289 Chapter 15

Resumen del contenido incluido en la página 7

Contents Chapter 16: Managing MAC Address Tables 308 Configuring Static MAC Addresses 309 Managing Dynamic MAC Addresses 310 Defining Reserved MAC Addresses 311 Chapter 17: Multicast 312 Multicast Forwarding 312 Defining Multicast Properties 316 Adding MAC Group Address 317 Adding IP Multicast Group Addresses 319 Configuring IGMP Snooping 321 MLD Snooping 324 Querying IGMP/MLD IP Multicast Group 326 Defining Multicast Router Ports 327 Defining Forward All Multicast 328 Defining Unregistered Mult

Resumen del contenido incluido en la página 8

Contents Overview 416 Configurable Elements of VRRP 420 Configuring VRRP 423 Chapter 21: Security 428 Defining Users 430 Configuring TACACS+ 433 Configuring RADIUS 438 Key Management 442 Management Access Method 445 Management Access Authentication 451 Secure Sensitive Data Management 452 SSL Server 452 SSH Server 454 SSH Client 454 Configuring TCP/UDP Services 455 Defining Storm Control 456 Configuring Port Security 457 802.1X

Resumen del contenido incluido en la página 9

Contents Defining Time Ranges 510 Authentication Method and Port Mode Support 511 Chapter 23: Security: First Hop Security 515 First Hop Security Overview 516 Router Advertisement Guard 520 Neighbor Discovery Inspection 520 DHCPv6 Guard 521 Neighbor Binding Integrity 522 Attack Protection 525 Policies, Global Parameters and System Defaults 527 Common Tasks 528 Default Settings and Configuration 530 Before You Start 530 Configuring First Hop Security through Web GUI 531 Chap

Resumen del contenido incluido en la página 10

Contents Chapter 26: Security: Secure Sensitive Data Management 562 Introduction 562 SSD Rules 563 SSD Properties 569 Configuration Files 571 SSD Management Channels 576 Menu CLI and Password Recovery 577 Configuring SSD 577 Chapter 27: Access Control 582 Access Control Lists 582 Defining MAC-based ACLs 585 IPv4-based ACLs 587 IPv6-Based ACLs 591 Defining ACL Binding 595 Chapter 28: Quality of Service 598 QoS Features and Components 599 Configuring QoS - General 602 QoS Basic Mode 615 QoS Advanc

Resumen del contenido incluido en la página 11

Contents Defining SNMP Communities 647 Defining Trap Settings 649 Notification Recipients 650 SNMP Notification Filters 654 Cisco 500 Series Stackable Managed Switch Administration Guide 10

Resumen del contenido incluido en la página 12

1 Getting Started This section provides an introduction to the web-based configuration utility, and covers the following topics: • Starting the Web-based Configuration Utility • Quick Start Device Configuration • Interface Naming Conventions • Differences Between 500 Devices<500> • Window Navigation Starting the Web-based Configuration Utility This section describes how to navigate the web-based switch configuration utility. If you are using a pop-up blocker, make sure it is disabled. Browse

Resumen del contenido incluido en la página 13

Getting Started Starting the Web-based Configuration Utility 1 NOTE When the device is using the factory default IP address of 192.168.1.254, its power LED flashes continuously. When the device is using a DHCP assigned IP address or an administrator-configured static IP address, the power LED is on solid. Logging In The default username is cisco and the default password is cisco. The first time that you log in with the default username and password, you are required to enter a new password.

Resumen del contenido incluido en la página 14

Getting Started Starting the Web-based Configuration Utility 1 When the login attempt is successful, the Getting Started page appears. If you entered an incorrect username or password, an error message appears and the Login page remains displayed on the window. If you are having problems logging in, please see the Launching the Configuration Utility section in the Administration Guide for additional information. Select Don't show this page on startup to prevent the Getting Started page from

Resumen del contenido incluido en la página 15

Getting Started Starting the Web-based Configuration Utility 1 Configuration changes have not yet been saved to the Startup Configuration file. The flashing can be disabled by clicking on the Disable Save Icon Blinking button on the Copy/Save Configuration page When the device auto-discovers a device, such as an IP phone (see What is a Smartport), and it configures the port appropriately for the device. These configuration commands are written to the Running Configuration file. This causes

Resumen del contenido incluido en la página 16

Getting Started Quick Start Device Configuration 1 Quick Start Device Configuration To simplify device configuration through quick navigation, the Getting Started page provides links to the most commonly used pages. Category Link Name (on the Page) Linked Page Initial Setup Change System Mode and System Mode and Stack Stack Management Management page Change Management TCP/UDP Services page Applications and Services Change Device IP Address IPv4 Interface page Create VLAN Create VLAN page Con

Resumen del contenido incluido en la página 17

Getting Started Interface Naming Conventions 1 Interface Naming Conventions Within the GUI, interfaces are denoted by concatenating the following elements: • Type of interface: The following types of interfaces are found on the various types of devices: - Fast Ethernet (10/100 bits)—These are displayed as FE. - Gigabit Ethernet ports (10/100/1000 bits)—These are displayed as GE. - Ten Gigabit Ethernet ports (10000 bits)—These are displayed as XG. - LAG (Port Channel)—These are displayed as L

Resumen del contenido incluido en la página 18

Getting Started Differences Between 500 Devices 1 • Enabling IPv4 routing is done differently in the devices, as follows: - SG500XSG500XG/ESW2-550X—IPv4 routing must be enabled in the IPv4 Interface page. - Sx500—When the device is switched from Layer 2 to Layer 3 system mode, IPv4 routing is automatically enabled. Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 7

Resumen del contenido incluido en la página 19

Getting Started Window Navigation 1 Window Navigation This section describes the features of the web-based switch configuration utility. Application Header The Application Header appears on every page. It provides the following application links: Application Link Description Name A flashing red X icon displayed to the left of the Save application link indicates that Running Configuration changes have been made that have not yet been saved to the Startup Configuration file. The flashing of t

Resumen del contenido incluido en la página 20

Getting Started Window Navigation 1 Application Link Description Name Language Menu This menu provides the following options: • Select a language: Select one of the languages that appear in the menu. This language will be the web- based configuration utility language. • Download Language: Add a new language to the device. • Delete Language: Deletes the second language on the device. The first language (English) cannot be deleted. • Debug: Used for translation purposes. If you select thi