Chapter 6

Catalyst Switch
Operations

© 2000, Cisco Systems, Inc. 6-1

 Objectives

Upon completion of this chapter, you will be

able to perform the following tasks:
• Describe Layer 2 switching (bridging) operations
• Describe the Catalyst 1900 switch operations
• Describe the Catalyst 1900 switch default
configuration
• Configure Catalyst 1900 switch
• Use show commands to verify Catalyst 1900
switch configuration and operations

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-2

 Three Switch Functions

• Address learning
• Forward/filter decision
• Loop avoidance
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-3
 How Switches Learn Host
Locations
 Star topology
MAC address table

A B

0260.8c01.1111 0260.8c01.3333
E0 E1

C E2 E3 D

0260.8c01.2222 0260.8c01.4444

• Initial MAC address table is empty

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-4

 How Switches Learn Hosts
Locations
MAC address table
E0: 0260.8c01.1111

A B

0260.8c01.1111 0260.8c01.3333
E0 E1

C D
E2 E3
0260.8c01.2222 0260.8c01.4444

• Station A sends a frame to Station C

• Switch caches station A MAC address to port E0 by learning the source address of data frames
• The frame from station A to station C is flooded out to all ports except port E0 (unknown unicasts are flooded)

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-5

 How Switches Learn Host
Locations
MAC address table
E0: 0260.8c01.1111
E3: 0260.8c01.4444
A B

0260.8c01.1111 0260.8c01.3333
E0 E1

C E2 E3 D

0260.8c01.2222 0260.8c01.4444

• Station D sends a frame to station C

• Switch caches station D MAC address to port E3 by learning the source Address of data frames
• The frame from station D to station C is flooded out to all ports except port E3 (unknown unicasts are flooded)

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-6

 How Switches Filter Frames
MAC address table
E0: 0260.8c01.1111
E2: 0260.8c01.2222
A E1: 0260.8c01.3333 B
E3: 0260.8c01.4444
0260.8c01.1111 0260.8c01.3333
E0 E1
X
C
E2
XE3 D

0260.8c01.2222 0260.8c01.4444

• Station A sends a frame to station C

• Destination is known, frame is not flooded

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-7

 Broadcast and Multicast
Frames
MAC address table
E0: 0260.8c01.1111
A E2: 0260.8c01.2222 B
E1: 0260.8c01.3333
E3: 0260.8c01.4444
0260.8c01.1111 0260.8c01.3333
E0 E1

C E2 E3 D

0260.8c01.2222 0260.8c01.4444

• Station D sends a broadcast or multicast frame

• Broadcast and multicast frames are flooded to all ports other than the
originating port

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-8

 Redundant Topology

Server/host X Router Y

Segment 1

Segment 2

• Redundant topology eliminates single points of failure

• Redundant topology causes broadcast storms, multiple frame copies, and MAC
address table instability problems

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-9

 Broadcast Storms
Server/host X Router Y

Segment 1
Broadcast

Switch A Switch B

Segment 2

Host X sends a Broadcast

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-10

 Broadcast Storms

Server/host X Router Y

Segment 1
Broadcast

Switch A Switch B

Segment 2

Host X sends a Broadcast

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-11

 Broadcast Storms
Server/host X Router Y

Segment 1

Switch A Broadcast Switch B

Segment 2

Switches continue to propagate broadcast traffic over

and over

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-12

 Multiple Frame Copies

Server/host X Unicast Router Y

Segment 1

Switch A Switch B

Segment 2

• Host X sends an unicast frame to router Y

• Router Y MAC address has not been learned by either
switch yet

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-13

 Multiple Frame Copies
Unicast Router Y
Server/host X

Segment 1
Unicast
Unicast

Switch A Switch B

Segment 2

• Host X sends an unicast frame to Router Y

• Router Y MAC Address has not been learned by
either Switch yet
• Router Y will receive two copies of the same frame
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-14
 MAC Database Instability

Server/host X Router Y

Segment 1
Unicast Unicast

Port 0 Port 0
Switch A Switch B
Port 1 Port 1

Segment 2

• Host X sends an unicast frame to Router Y

• Router Y MAC Address has not been learned by either
Switch yet
• Switch A and B learn Host X MAC address on port 0
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-15
 MAC Database Instability

Server/host X Router Y
Segment 1
Unicast Unicast

Port 0 Port 0
Switch A Switch B

Port 1 Port 1

Segment 2
• Host X sends an unicast frame to Router Y
• Router Y MAC Address has not been learned by either Switch yet
• Switch A and B learn Host X MAC address on port 0
• Frame to Router Y is flooded
• Switch A and B incorrectly learn Host X MAC address on port 1
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-16
 Multiple Loop Problems

Server/host
Broadcast
Loop

Loop

Loop

Workstations

• Complex topology can cause multiple loops to occur

• Layer 2 has no mechanism to stop the loop

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-17

 Solution: Spanning-Tree Protocol

x Block

Provides a loop free redundant network topology by

placing certain ports in the blocking state

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-18

 Spanning-Tree Operations

• One root bridge per network

• One root port per nonroot bridge
• One designated port per segment

100baseT

Designated port (F) Root port (F)

Root bridge Nonroot bridge
SW X SW Y
Designated port (F)
x
Nondesignated port (B)

10baseT

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-19

 Spanning-Tree Protocol
Root Bridge Selection

Switch X Switch Y
Default priority 32768 BPDU Default priority 32768
(8000 hex) (8000 hex)
MAC 0c0011111111 MAC 0c0022222222

BPDU = Bridge protocol data unit

(default = sent every 2 seconds)
Root bridge = Bridge with the lowest bridge ID
Bridge ID = Bridge priority + bridge MAC address
In the example, which switch has the lowest bridge ID?

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-20

 Spanning-Tree Protocol
Port States
100baseT

Designated port (F) Root port (F)

Port 0 Port 0
Switch X Switch Y
Default priority 32768 Root bridge Default priority 32768
MAC 0c0011111111 MAC 0c0022222222
Port 1 Port 1
Designated port (F)
x Nondesignated port (B)

10baseT

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-21

 Spanning-Tree Protocol
Path Cost

Link Speed Cost (reratify IEEE spec) Cost (previous IEEE spec)
----------------------------------------------------------------------------------------------------
10 Gbps 2 1
1 Gbps 4 1
100 Mbps 19 10
10 Mbps 100 100

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-22

 Spanning-Tree:
Switch Z
Mac 0c0011110000
Default priority 32768
Port 0

100baseT
Port 0 Port 0
Switch X Switch Y
MAC 0c0011111111 MAC 0c0022222222
Default priority 32768 Default priority 32768
Port 1 Port 1

100baseT
Can you figure out:
• What is the root bridge?
• What are the designated, nondesignated, and root ports?
• Which are the forwarding and blocking ports?
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-23
 Spanning-Tree:
Switch Z
Mac 0c0011110000
Default priority 32768
Port 0
Designated port (F)

100baseT
Port 0 Root port (F) Port 0 Root port (F)
Switch X Switch Y
MAC 0c0011111111 MAC 0c0022222222
Default priority 32768 Default priority 32768
Port 1
Designated port (F) Port 1 Nondesignated port (BLK)
100baseT
Can you figure out:
• What is the root bridge?
• What are the designated, nondesignated, and root parts?
• Which are the forwarding and blocking ports?
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-24
 Spanning-Tree Port States

Spanning-tree transitions each port

through several different state:

Blocking
(20 sec)
Listening
Total after 50 seconds
(15 sec)
Learning
(15 sec)
Forwarding

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-25

 Spanning-Tree Recalculation

100baseT

Designated port Root port (F)

Port 0 Port 0
Switch X Switch Y
MAC 0c0011111111 MAC 0c0022222222
Default priority 32768 Root Bridge Default priority 32768
Port 1 Port 1
Designated port
x Nondesignated port (BLK)

10baseT

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-26

 Spanning-Tree Recalculation

100baseT

Designated port Root port (F)

Port 0 Port 0

x
Switch X MAXAGE

x
Switch Y
MAC 0c0011111111 MAC 0c0022222222
Default priority 32768 Root Bridge Default priority 32768
Port 1 BPDU Port 1
Designated port
x Nondesignated port (BLK)

10baseT

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-27

 Key Issue: Time to
Convergence

• Convergence occurs when all the switch

and bridge ports have transitioned to
either the forwarding or blocking state

• When network topology changes,

switches and bridges must recompute
the Spanning-Tree Protocol, which
disrupts user traffic

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-28

 Bridging Compared to LAN
Switching

Bridging  Bus topology

Primarily software based

One spanning-tree instance per bridge
Usually up to 16 ports per bridge  Matlab 8
segments ko attach
krna

LAN Switching  Star topology

Primarily hardware based (ASIC)

Many spanning-tree instances per switch
More ports on a switch

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-29

 Transmitting Frames Through a
Switch
Cut-through
• Switch checks destination  Faida : speed fast
address and immediately  Nuqsan : error
wala fraqme aagay
begins forwarding frame bhej diya

Frame

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-30

 Transmitting Frames through a
Switch
Cut-through Store and forward
• Switch checks destination • Complete frame is received and
address and immediately checked before forwarding
begins forwarding frame

Frame Frame
Frame
 Faida : error

Frame
checked (CRC)
 Nuqsan : speed
betahasha slow

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-31

 Point to ponder
Datalink layer pe Transport/IP layer pe

 CRC (cyclic redundancy check)  Checksum

Designed by IEEE  Designed by IETF
Standards : IEEE 802.3 (ethernet)  Standards : RFC
IEEE 802.11 (wireless)
IEEE 802.5 (token ring)

CRC :

Pre assigned number se usko divide krte hain aur remainder send krdete
hain destination pe

FCS :

See register lectures

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-32
 Transmitting Frames through a
Switch
Cut-through Store and forward
• Switch checks destination • Complete frame is received and
address and immediately checked before forwarding
begins forwarding frame

Frame Frame
Frame

Frame
Fragment free
(modified cut-through)—Cat1900 Default
• Switch checks the first 64 bytes then immediately
begins forwarding frame

Frame

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-33

 Duplex Overview

Switch
Half duplex (CSMA/CD)
• Unidirectional data flow
• Higher potential for collison Hub
• Hubs connectivity

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-34

 Duplex Overview

Switch
Half duplex (CSMA/CD)
• Unidirectional data flow
• Higher potential for collison Hub
• Hubs connectivity

Full duplex
• Point-to-point only
• Attached to dedicated switched port
• Requires full-duplex support on both ends
• Collision free
• Collision detect circuit disabled

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-35

 Configuring the Switch

• Catalyst 1900
– Menu driven interface
– Web-based VSM
(Visual Switch Manager)
– IOS CLI
(command-line interface)

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-36

 Catalyst 1900 Default
Configurations

• IP address: 0.0.0.0
• CDP: Enabled
• Switching mode: fragment free
• 100baseT port: Auto-negotiate duplex mode
• 10baseT port: Half duplex
• Spanning Tree: Enabled
• Console password: none

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-37

 Ports on the Catalyst 1900

Cat1912 Cat1924

10baseT ports e0/1 to e0/12 e0/1 to e0/24

AUI port e0/25 e0/25

fa0/26 (port A) fa0/26 (port A)
100baseT uplink ports fa0/27 (port B) fa0/27 (port B)

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-38

 Ports on the Catalyst 1900

wg_sw_d#sh run
wg_sw_d#sh span
 Show spanning tree protocol
Building configuration...
Port Ethernet 0/1 of VLAN1 is Forwarding
Current configuration:
Port path cost 100, Port priority 128
!
Designated root has priority 32768, address 0090.8673.3340
!
Designated bridge has priority 32768, address 0090.8673.3340
interface Ethernet 0/1
Designated port is Ethernet 0/1, path cost 0
!
Timers: message age 20, forward delay 15, hold 1
interface Ethernet 0/2

wg_sw_a#show vlan-membershipNot included

Port VLAN Membership Type Port VLAN Membership Type
------------------------------------------------------------------
1 5 Static 13 1 Static
2 1 Static 14 1 Static
3 1 Static 15 1 Static

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-39

 Configuring the Switch

• Configuration Modes
Global configuration mode
wg_sw_a# conf term
wg_sw_a(config)#
Interface configuration mode
wg_sw_a(config)# interface e0/1
wg_sw_a(config-if)#

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-40

 Configuring the Switch IP
Address
wg_sw_a(config)#

ip address {ip address} {mask}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-41

 Configuring the Switch IP
Address

wg_sw_a(config)#

ip address {ip address} {mask}

wg_sw_a(config)#ip address 10.5.5.11 255.255.255.0

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-42

 Configuring the Switch Default
Gateway

wg_sw_a(config)#

ip default-gateway {ip address}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-43

 Configuring the Switch Default
Gateway

wg_sw_a(config)#

ip default-gateway {ip address}

wg_sw_a(config)#ip default-gateway 10.5.5.3

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-44

 Showing the Switch IP Address

wg_sw_a#show ip
IP address: 10.5.5.11
Subnet mask: 255.255.255.0
Default gateway: 10.5.5.3
Management VLAN: 1
Domain name:
Name server 1: 0.0.0.0
Name server 2: 0.0.0.0
HTTP server: Enabled
HTTP port: 80
RIP: Enabled
wg_sw_a#
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-45
 Speed and Duplex Options

wg_sw_a(config)#interface e0/1
wg_sw_a(config-if)#

duplex {auto | full | full-flow-control | half}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-46

 Setting Duplex Options

wg_sw_a(config)#interface e0/1
wg_sw_a(config-if)#

duplex {auto | full | full-flow-control | half}

wg_sw_a(config-if)#duplex half

“Half” is the default on the Ethernet ports.

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-47

 Showing Duplex Options
wg _s w_a#s h i nt e r f ac e s

Et he r ne t 0/ 1 i s Enabl e d
Har dwar e i s Bui l t - i n 10Bas e - T
Addr e s s i s 0090. 8673. 3341
MTU 1500 byt e s , BW 10000 Kbi t s
802. 1d STP St at e : For war di ng For war d Tr ans i t i ons : 1
Por t moni t or i ng: Di s abl e d
Unknown uni c as t f l oodi ng: Enabl e d
Unr e gi s t e r e d mul t i c as t f l oodi ng: Enabl e d
De s c r i pt i on:
Dupl e x s e t t i ng: Hal f dupl e x
Bac k pr e s s ur e : Di s abl e d

Re c e i ve St at i s t i c s Tr ans mi t St at i s t i c s
------------------------------------- -------------------------------------
Tot al good f r ame s 44841 Tot al f r ame s 404502
Tot al oc t e t s 4944550 Tot al oc t e t s 29591574
Br oadc as t / mul t i c as t f r ame s 31011 Br oadc as t / mul t i c as t f r ame s 390913
Br oadc as t / mul t i c as t oc t e t s 3865029 Br oadc as t / mul t i c as t oc t e t s 28478154
Good f r ame s f or war de d 44832 De f e r r al s 0
Fr ame s f i l t e r e d 9 Si ngl e c ol l i s i ons 0
Runt f r ame s 0 Mul t i pl e c ol l i s i ons 0
No buf f e r di s c ar ds 0 Exc e s s i ve c ol l i s i ons 0
Que ue f ul l di s c ar ds 0
Er r or s : Er r or s :
FCS e r r or s 0 Lat e c ol l i s i ons 0
Al i gnme nt e r r or s 0 Exc e s s i ve de f e r r al s 0
Gi ant f r ame s 0 Jabbe r e r r or s 0
Addr e s s vi ol at i ons 0 Ot he r t r ans mi t e r r or s 0

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-48

 Duplex Mismatches

• The manually set duplex parameter differs

between connected ports
• The switch port is in autonegotiate and the
attached port is set to full duplex with no
auto-negotiation capability causing the
switch port to be in half-duplex mode

Ye full duplex tha Ye half duplex krdiya

Duplex mismatches
Behter hy auto hi rakhlo
Auto negotiate

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-49

 FCS and Late Collision
Errors
wg _s w_a#s how i nt e r f ac e s

Et he r ne t 0/ 1 i s Enabl e d  FCS (frame check sequence)

Har dwar e i s Bui l t - i n 10Bas e - T
Addr e s s i s 0090. 8673. 3341
MTU 1500 byt e s , BW 10000 Kbi t s
802. 1d STP St at e : For war di ng For war d Tr ans i t i ons : 1
Por t moni t or i ng: Di s abl e d
Unknown uni c as t f l oodi ng: Enabl e d
Unr e gi s t e r e d mul t i c as t f l oodi ng: Enabl e d
De s c r i pt i on:
Dupl e x s e t t i ng: Hal f dupl e x
Bac k pr e s s ur e : Di s abl e d

Re c e i ve St at i s t i c s Tr ans mi t St at i s t i c s
------------------------------------- -------------------------------------
Tot al good f r ame s 44841 Tot al f r ame s 404502
Tot al oc t e t s 4944550 Tot al oc t e t s 29591574
Br oadc as t / mul t i c as t f r ame s 31011 Br oadc as t / mul t i c as t f r ame s 390913
Br oadc as t / mul t i c as t oc t e t s 3865029 Br oadc as t / mul t i c as t oc t e t s 28478154
Good f r ame s f or war de d 44832 De f e r r al s 0
Fr ame s f i l t e r e d 9 Si ngl e c ol l i s i ons 0
Runt f r ame s 0 Mul t i pl e c ol l i s i ons 0
No buf f e r di s c ar ds 0 Exc e s s i ve c ol l i s i ons 0
Que ue f ul l di s c ar ds 0
Er r or s : Er r or s :
FCS e r r or s 0 Lat e c ol l i s i ons 0
Al i gnme nt e r r or s 0 Exc e s s i ve de f e r r al s 0
Gi ant f r ame s 0 Jabbe r e r r or s 0
Addr e s s vi ol at i ons 0 Ot he r t r ans mi t e r r or s 0

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-50

 Managing Mac Address Table

wg_sw_a#show mac-address-table

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-51

 Managing Mac Address Table

wg_sw_a#show mac-address-table

wg_sw_a#sh mac-address-table
Number of permanent addresses : 0
Number of restricted static addresses : 0
Number of dynamic addresses : 6

Address Dest Interface Type Source Interface List

-------------------------------------------------------------------------------------------------
00E0.1E5D.AE2F Ethernet 0/2 Dynamic All
00D0.588F.B604 FastEthernet 0/26 Dynamic All
00E0.1E5D.AE2B FastEthernet 0/26 Dynamic All
0090.273B.87A4 FastEthernet 0/26 Dynamic All
00D0.588F.B600 FastEthernet 0/26 Dynamic All
00D0.5892.38C4 FastEthernet 0/27 Dynamic All

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-52

 Setting Permanent MAC Address
wg_sw_a(config)#
mac-address-table permanent {mac-address type module/port}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-53

 Setting Permanent MAC Address
wg_sw_a(config)#
mac-address-table permanent {mac-address type module/port}

wg_sw_a(config)#mac-address-table permanent 2222.2222.2222 ethernet 0/3

Is ethernet 0/3 k sath ab sirf aur sirf yei MAC(2222.2222.2222) kaam karega

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-54

 Setting Permanent MAC Address
wg_sw_a(config)#
mac-address-table permanent {mac-address type module/port}

wg_sw_a(config)#mac-address-table permanent 2222.2222.2222 ethernet 0/3

wg_sw_a#sh mac-address-table
Number of permanent addresses : 1
Number of restricted static addresses : 0
Number of dynamic addresses : 4

Address Dest Interface Type Source Interface List

--------------------------------------------------------------------------------------------------------------
00E0.1E5D.AE2F Ethernet 0/2 Dynamic All
2222.2222.2222 Ethernet 0/3 Permanent All Per data sabse
00D0.588F.B604 FastEthernet 0/26 Dynamic All receive kr raha hy
00E0.1E5D.AE2B FastEthernet 0/26 Dynamic All
00D0.5892.38C4 FastEthernet 0/27 Dynamic All

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-55

 Setting Restricted Static MAC
Address
wg_sw_a(config)#
mac-address-table restricted static {mac-address type module/port src-if-list}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-56

 Setting Restricted Static MAC
Address
wg_sw_a(config)#
mac-address-table restricted static {mac-address type module/port src-if-list}

wg_sw_a(config)#mac-address-table restricted static 1111.1111.1111 e0/4 e0/1

 e0/4 sirf e0/1 se data receive karegi aur kisi se nae karegi

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-57

 Setting Restricted Static MAC
Address
wg_sw_a(config)#
mac-address-table restricted static {mac-address type module/port src-if-list}

wg_sw_a(config)#mac-address-table restricted static 1111.1111.1111 e0/4 e0/1

wg_sw_a#sh mac-address-table
Number of permanent addresses : 1
Number of restricted static addresses : 1
Number of dynamic addresses : 4

Address Dest Interface Type Source Interface List

-----------------------------------------------------------------------------------------------
1111.1111.1111 Ethernet 0/4 Static Et0/1
00E0.1E5D.AE2F Ethernet 0/2 Dynamic All
2222.2222.2222 Ethernet 0/3 Permanent All
00D0.588F.B604 FastEthernet 0/26 Dynamic All
00E0.1E5D.AE2B FastEthernet 0/26 Dynamic All
00D0.5892.38C4 FastEthernet 0/27 Dynamic All
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-58
 Configuring Port Security

wg_sw_a(config-if)#

port secure [max-mac-count count]

• Configures an interface to be a secured port
• Define a maximum number of mac addresses allowed in the
address table for this port
• Count can be from 1 to 132
• Default is 132

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-59

 Configuring Port Security

wg_sw_a(config-if)#

port secure [max-mac-count count]

• Configures an interface to be a secured port
• Define a maximum number of mac addresses allowed in the
address table for this port
• Count can be from 1 to 132
• Default is 132
wg_sw_a(config)#interface e0/4
wg_sw_a(config-if)#port secure
wg_sw_a(config-if)#port secure max-mac-count 1
Ethernet port(e0/4) k sath 1 hi mac
address save kare multiple na kare

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-60

 Configuring Port Security
wg_sw_a#show mac-address-table security
wg_sw_a#show mac-address-table security
Action upon address violation : Suspend

Interface Addressing Security Address Table Size

------------------------------------------------------------------------------------
Ethernet 0/1 Disabled N/A
Ethernet 0/2 Disabled N/A
Ethernet 0/3 Disabled N/A
Ethernet 0/4 Enabled 1 Ethernet port(e0/4) k sath 1 hi mac
Ethernet 0/5 Disabled N/A address save kare multiple na kare
Ethernet 0/6 Disabled N/A
Ethernet 0/7 Disabled N/A
Ethernet 0/8 Disabled N/A
Ethernet 0/9 Disabled N/A
Ethernet 0/10 Disabled N/A
Ethernet 0/11 Disabled N/A
Ethernet 0/12 Disabled N/A

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-61

 Configuring Port Security
wg_sw_a#show mac-address-table security
wg_sw_a#show mac-address-table security
Action upon address violation : Suspend

Interface Addressing Security Address Table Size

------------------------------------------------------------------------------------
Ethernet 0/1 Disabled N/A
Ethernet 0/2 Disabled N/A
Ethernet 0/3 Disabled N/A
Ethernet 0/4 Enabled 1
Ethernet 0/5 Disabled N/A
Ethernet 0/6 Disabled N/A
Ethernet 0/7 Disabled N/A
Ethernet 0/8 Disabled N/A
Ethernet 0/9 Disabled N/A
Ethernet 0/10 Disabled N/A
Ethernet 0/11 Disabled N/A
Ethernet 0/12 Disabled N/A

wg_sw_a(config)#address-violation {suspend | disable | ignore}

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-62

 Show Version

wg_s w_a#s how ve r s i on

Ci s c o Cat al ys t 1900/ 2820 Ent e r pr i s e Edi t i on Sof t wa r e

Ve r s i on V8. 01. 01
Copyr i ght ( c ) Ci s c o Sys t e ms , I nc . 1993- 1 998
ROM: Sys t e m Boot s t r ap, Ve r s i on 3. 03
wg_s w_d upt i me i s 8day( s ) 17hour ( s ) 53mi nut e ( s ) 25 s e c ond( s )
c i s c o Cat al ys t 1900 ( 486s xl ) pr oc e s s or wi t h 2048K/ 10 24K byt e s of me mor y
Har dwar e boar d r e vi s i on i s 1
Upgr ade St at us : No upgr ade c ur r e nt l y i n pr ogr e s s .
Conf i g Fi l e St at us : Fi l e wgs wd. c f g downl oade d f r om 10 . 1. 1. 1
27 Fi xe d Et he r ne t / I EEE 802. 3 i nt e r f ac e ( s )
Bas e Et he r ne t Addr e s s : 00- 90- 86- 73- 33- 40
wg_s w_a#

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-63

 Managing Configuration File
To send the configuration to a TFTP server:
wg_sw_a#
copy nvram tftp://host/dst_file

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-64

 Managing Configuration File
To send the configuration to a TFTP server:
wg_sw_a#
copy nvram tftp://host/dst_file
To download the configuration from a TFTP server:

wg_sw_a#
copy tftp://host/src_file nvram

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-65

 Managing Configuration File
To send the configuration to a TFTP server:
wg_sw_a#
copy nvram tftp://host/dst_file
To download the configuration from a TFTP server:

wg_sw_a#
copy tftp://host/src_file nvram

wg_sw_a#copy nvram tftp://10.1.1.1/wgswd.cfg

Configuration upload is successfully completed

wg_sw_a#copy tftp://10.1.1.1/wgswd.cfg nvram

TFTP successfully downloaded configuration file

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-66

 Clear NVRAM

wg_sw_d#delete nvram  Kabhi b ye cmd nae deni

• Resets the system configuration to factory defaults.

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-67

 Visual Objective

pod sw ro’s e0 wg_pc_a

A 10.1.1.10 10.1.1.11
B 10.1.1.20 10.1.1.21 fa0/26 e0/1
C 10.1.1.30 10.1.1.31 (port A) e0/2 e0
D 10.1.1.40 10.1.1.41 wg_sw_a wg_ro_a
E 10.1.1.50 10.1.1.51 10.1.1.10 10.1.1.11
F 10.1.1.60 10.1.1.61 wg_pc_l
G 10.1.1.70 10.1.1.71
H 10.1.1.80 10.1.1.81
fa0/26
I 10.1.1.90 10.1.1.91 (port A)
e0/1
e0/2 e0
J 10.1.1.100 10.1.1.101
K 10.1.1.110 10.1.1.111 wg_sw_l wg_ro_l
L 10.1.1.120 10.1.1.121 10.1.1.120 10.1.1.121
...
fa0/1 fa0/12

fa0/24

core_ server
(tftp server) core_sw_a
10.1.1.1 10.1.1.2
© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-68
 Summary

After completing this chapter, you should be

able to perform the following tasks:
• Describe Layer 2 switching (bridging) operations
• Describe the Catalyst 1900 switch operations
• Describe the Catalyst 1900 switch’s default configuration
• Configure Catalyst 1900 switch
• Use show commands to verify Catalyst 1900 switch
configuration and operations

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-69

 Review Questions

1. What function does

 loop free Spanning-Tree
redundant topology Protocol
provide?
2. What are the different spanning-tree
 blocked, listening, port states?
learning, forwarding

3. Describe the difference between full-duplex and

half-duplex operations. What is the default
duplex setting on the Catalyst 1900 10Mbps port
and 100Mbps port?
4. What is the default switching
half duplex  full duplex mode on the

Catalyst 1900?
 fragment free mode

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-70

 Review Questions

5. What is the Catalyst 1900 CLI command to assign

an IP address to the switch? Why does a Layer 2
switch requirean IP address?
TCP/IP network pe kam nahi kr rae is liye require hota

6. Which type of MAC address does not age,

permanent or dynamic?  permanent

7. What is the Catalyst 1900 CLI command to display

the contents of the MAC address table?
 shoe mac address ki cmd hogi
 Aur hogi b privelege mode me

© 2000, Cisco Systems, Inc. www.cisco.com ICND v1.0a—6-71