Download Print this page
Cisco Catalyst 2940 Series Supplementary Manual
Cisco Catalyst 2940 Series Supplementary Manual

Cisco Catalyst 2940 Series Supplementary Manual

Smartports macros
Hide thumbs Also See for Catalyst 2940 Series:

Advertisement

Cisco Catalyst 2940 Series Switches
Smartports Macros
March 8, 2004
Session Number
Presentation_ID
© 2003 Cisco Systems, Inc. All rights reserved.
1

Advertisement

loading

Summary of Contents for Cisco Catalyst 2940 Series

  • Page 1 Cisco Catalyst 2940 Series Switches Smartports Macros March 8, 2004 Session Number Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved.
  • Page 2 ! Enable aggressive mode UDLD on all fiber uplinks udld aggressive ! Enable Rapid PVST+ and Loopguard spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree extend system-id Presentation_ID 2 2 2 © 2003 Cisco Systems, Inc. All rights reserved.
  • Page 3 Enable 802.1w per VLAN Spanning Tree Allows quicker convergence times • spanning-tree loopguard default Helps prevent errant spanning tree loops • spanning-tree extend system-id Allows for VLAN IDs greater than 1024 Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. 3 3 3...
  • Page 4 ! Configure port as an edge network port spanning-tree portfast spanning-tree bpduguard enable ! Remark all inbound data packets with COS=0 mls qos cos override Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. 4 4 4...
  • Page 5 If port security is turned on, the default number of allowed MAC addresses is 1. For an IP phone, we need 3 – one for the workstation, one for the phone on the voice VLAN and one for the phone on the native VLAN for Cisco® Discovery Protocol.
  • Page 6 – without waiting for spanning tree (~3 sec) • spanning-tree bpduguard enable Disable the port if a switch or bridge is attached to this port. Inhibits errant network topologies and rogue switches. Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. 6 6 6...
  • Page 7 3 switchport port-security violation restrict switchport port-security aging time 2 switchport port-security aging type inactivity ! Enable qos to extend trust to attached Cisco phone mls qos trust device cisco-phone ! Configure port as an edge network port spanning-tree portfast...
  • Page 8 ! Configure qos to trust this interface mls qos trust cos ! 802.1w defines the link as pt-pt for rapid convergence spanning-tree link-type point-to-point Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. #commented out to show capability 8 8 8...
  • Page 9: Switchport Nonegotiate

    ISL on many switches. When the trunk is up and configured for 802.1q, the “switchport nonegotiate” can safely be entered • switchport trunk allowed VLAN This provides absolute control over which VLANs this switch will accept. Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. [data,voice,native] 9 9 9...
  • Page 10 Connected Uplink Switch for Cisco Switch Macro interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport trunk native vlan switchport mode trunk mls qos trust cos auto qos voip trust macro description cisco-switch spanning-tree link-type point-to-point Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved.
  • Page 11 ! Ensure fast access to the network when enabling the interface. ! Ensure that switch devices cannot become active on the interface. spanning-tree portfast spanning-tree bpduguard enable Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. #commented out to show capability...
  • Page 12 5 class CALL-CONTROL set cos 3 class MISSION-CRITICAL set cos 2 class MEDIA set cos 1 Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. interface FastEthernet0/1 no ip address no ip proxy-arp load-interval 30 full-duplex interface FastEthernet0/1.110 description Voice-VLAN encapsulation dot1Q ip address 10.6.9.129 255.255.255.192...
  • Page 13 Cisco Catalyst 2940 Series Global Macro Caveats • Example of global macro application Switch(config-if-range)# macro global apply cisco-global • vtp domain [smartports] There is a user interface to configure this. This is applied by using the ‘macro global apply cisco-global [smartports] <domain>...
  • Page 14 FastEthernet0/1 macro description cisco-desktop | cisco-desktop | cisco-phone • The command “switchport port-security maximum 1” listed in the cisco-desktop macro will NOT show up in the running config, and is a default condition. • VLAN’s should be pre-defined before any templates are applied because some templates will create VLAN’s, some will not.
  • Page 15 Cisco Catalyst 2940 Series Desktop with IP Phone Macro Application Caveats • Example of cisco-phone macro application: Switch(config)#interface range f0/1 - 48 Switch(config-if-range)#macro apply cisco-phone $AVID 2 $VVID 3 • The same warnings from IOS that were displayed for the desktop macro are not standard across all platforms.
  • Page 16 There is a plan for the commands shown on this slide to be incorporated in mid-2004. • VLANs should be predefined before any templates are applied because some templates will create VLANs, some will not. Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. VRANGE – This command is currently commented in the code but...
  • Page 17 There is a plan for the commands shown on this slide to be incorporated in mid-2004. • VLANs should be predefined before any templates are applied because some templates will create VLANs, some will not. Presentation_ID © 2003 Cisco Systems, Inc. All rights reserved. VRANGE – This command is currently commented in the code but...
  • Page 18 Presentation_ID Presentation_ID © 2003, Cisco Systems, Inc. All rights reserved. © 2003 Cisco Systems, Inc. All rights reserved.