cisco:switch:9500:cisco_catalyst_9500_series_manual
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
cisco:switch:9500:cisco_catalyst_9500_series_manual [2025/01/15 12:50] – aperez | cisco:switch:9500:cisco_catalyst_9500_series_manual [2025/04/20 12:43] (current) – [SSH] aperez | ||
---|---|---|---|
Line 7: | Line 7: | ||
---- | ---- | ||
- | Switch#**show interfaces status** | + | |
- | Switch#**show mac address-table** | + | |
+ | Switch#show mac address-table | ||
+ | Switch#show ip igmp snooping | ||
+ | Switch#show lldp | ||
+ | Switch#show lldp neighbors | ||
+ | Switch#show lldp neighbors detail | ||
+ | Switch#show system mtu | ||
+ | Switch#show platform hardware capacity | ||
+ | Switch#show interfaces | include MTU | ||
+ | Switch#show running-config | begin TwentyFiveGigE1/ | ||
+ | |||
+ | ---- | ||
+ | |||
+ | On the **Cisco switch**, you need to edit the interface, then use the command | ||
+ | -**fec off** | ||
+ | |||
+ | On the **Aruba switch**, you need to edit the interface, then use the command | ||
+ | -**error-control none** | ||
---- | ---- | ||
**{{ : | **{{ : | ||
Line 43: | Line 61: | ||
**service password-encryption** | **service password-encryption** | ||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | **Basic cli** | ||
+ | |||
+ | Switch# configure terminal | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config-if)# | ||
+ | Switch(config-if)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch# show ip route | ||
+ | Switch(config)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config-line)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch(config)# | ||
+ | Switch# show running-config | ||
+ | Switch(config)# | ||
+ | Switch(config-if)# | ||
+ | Switch(config-if)# | ||
+ | Switch# | ||
+ | Building configuration... [OK] | ||
+ | Switch# | ||
---- | ---- | ||
Line 60: | Line 120: | ||
ip address 192.168.2.1 255.255.255.0 | ip address 192.168.2.1 255.255.255.0 | ||
no shutdown | no shutdown | ||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | **Enable Multicast Routing** | ||
+ | |||
+ | enable | ||
+ | configure terminal | ||
+ | ip multicast-routing | ||
+ | ip pim sparse-mode | ||
+ | | ||
+ | interface INTERFACE_ID | ||
+ | ip pim sparse-mode | ||
+ | | ||
+ | ip pim rp-address RP_IP_ADDRESS | ||
+ | ip pim send-rp-announce INTERFACE scope TTL | ||
+ | ip pim send-rp-discovery INTERFACE scope TTL | ||
+ | | ||
+ | ip igmp snooping | ||
+ | vlan VLAN_ID | ||
+ | ip igmp snooping | ||
+ | exit | ||
+ | | ||
+ | show ip mroute | ||
+ | show ip pim neighbor | ||
+ | show ip pim rp | ||
+ | show ip igmp groups | ||
+ | | ||
+ | Example Configuration | ||
+ | | ||
+ | Scenario: | ||
+ | Multicast source: 192.168.1.10 | ||
+ | RP: 192.168.1.1 | ||
+ | VLAN 10 and VLAN 20 are participating in multicast. | ||
+ | Configuration: | ||
+ | | ||
+ | ip multicast-routing | ||
+ | ip pim rp-address 192.168.1.1 | ||
+ | | ||
+ | interface Vlan10 | ||
+ | ip address 192.168.1.1 255.255.255.0 | ||
+ | ip pim sparse-mode | ||
+ | | ||
+ | interface Vlan20 | ||
+ | ip address 192.168.2.1 255.255.255.0 | ||
+ | ip pim sparse-mode | ||
+ | |||
+ | **Example** | ||
+ | |||
+ | enable | ||
+ | configure terminal | ||
+ | ip igmp snooping | ||
+ | | ||
+ | vlan 1 | ||
+ | ip igmp snooping | ||
+ | vlan 500 | ||
+ | ip igmp snooping | ||
+ | vlan 501 | ||
+ | ip igmp snooping | ||
+ | vlan 502 | ||
+ | ip igmp snooping | ||
+ | vlan 503 | ||
+ | ip igmp snooping | ||
+ | vlan 504 | ||
+ | ip igmp snooping | ||
+ | vlan 505 | ||
+ | ip igmp snooping | ||
+ | vlan 506 | ||
+ | ip igmp snooping | ||
+ | vlan 507 | ||
+ | ip igmp snooping | ||
+ | vlan 508 | ||
+ | ip igmp snooping | ||
+ | vlan 509 | ||
+ | ip igmp snooping | ||
+ | vlan 510 | ||
+ | ip igmp snooping | ||
+ | vlan 511 | ||
+ | ip igmp snooping | ||
+ | vlan 512 | ||
+ | ip igmp snooping | ||
+ | vlan 513 | ||
+ | ip igmp snooping | ||
+ | vlan 514 | ||
+ | ip igmp snooping | ||
+ | vlan 515 | ||
+ | ip igmp snooping | ||
+ | vlan 516 | ||
+ | ip igmp snooping | ||
+ | vlan 517 | ||
+ | ip igmp snooping | ||
+ | vlan 518 | ||
+ | ip igmp snooping | ||
+ | vlan 519 | ||
+ | ip igmp snooping | ||
+ | vlan 520 | ||
+ | ip igmp snooping | ||
+ | vlan 521 | ||
+ | ip igmp snooping | ||
+ | vlan 522 | ||
+ | ip igmp snooping | ||
+ | vlan 523 | ||
+ | ip igmp snooping | ||
+ | vlan 524 | ||
+ | ip igmp snooping | ||
+ | vlan 525 | ||
+ | ip igmp snooping | ||
+ | vlan 526 | ||
+ | ip igmp snooping | ||
+ | vlan 527 | ||
+ | ip igmp snooping | ||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | **Enable LLDP Globally** | ||
+ | |||
+ | enable | ||
+ | configure terminal | ||
+ | lldp run | ||
+ | | ||
+ | interface INTERFACE_ID | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | exit | ||
+ | | ||
+ | show lldp | ||
+ | show lldp neighbors | ||
+ | show lldp neighbors detail | ||
+ | | ||
+ | lldp timer 60 | ||
+ | lldp holdtime 180 | ||
+ | | ||
+ | write memory | ||
+ | | ||
+ | **Example** | ||
+ | |||
+ | configure terminal | ||
+ | lldp run | ||
+ | lldp timer 60 | ||
+ | lldp holdtime 180 | ||
+ | | ||
+ | interface GigabitEthernet1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | | ||
+ | interface GigabitEthernet1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | write memory | ||
+ | |||
+ | |||
+ | **Example** | ||
+ | |||
+ | enable | ||
+ | configure terminal | ||
+ | lldp run | ||
+ | | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface TwentyFiveGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface HundredGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface HundredGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface HundredGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | interface HundredGigE1/ | ||
+ | lldp transmit | ||
+ | lldp receive | ||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | **Verify MTU Support** | ||
+ | |||
+ | show system mtu | ||
+ | show platform hardware capacity | ||
+ | | ||
+ | configure terminal | ||
+ | system mtu jumbo 9100 | ||
+ | exit | ||
+ | write memory | ||
+ | reload | ||
+ | | ||
+ | show system mtu | ||
+ | show interfaces | include MTU | ||
+ | | ||
+ | interface INTERFACE_ID | ||
+ | mtu 9100 | ||
+ | exit | ||
+ | |||
+ | **Example** | ||
+ | |||
+ | configure terminal | ||
+ | system mtu jumbo 9100 | ||
+ | system mtu 9100 | ||
+ | interface GigabitEthernet1/ | ||
+ | mtu 9100 | ||
+ | exit | ||
+ | write memory | ||
+ | reload | ||
+ | |||
---- | ---- | ||
Line 139: | Line 474: | ||
! | ! | ||
- | ---- | + | **Port-channel Example 3** |
- | **Basic cli** | + | |
- | + | description Link to Juniper Networks EX2300-24P | |
- | Switch# configure terminal | + | switchport mode trunk |
- | Switch(config)# | + | mtu 9100 |
- | Switch(config)# | + | logging event bundle-status |
- | Switch(config)# | + | |
- | Switch(config)# | + | |
- | Switch(config)# | + | description Link to Juniper Networks EX2300-24P |
- | Switch(config-if)#ip address< | + | switchport mode trunk |
- | | + | mtu 9100 |
- | | + | logging event trunk-status |
- | | + | logging event bundle-status |
- | | + | udld port aggressive |
- | | + | channel-protocol lacp |
- | | + | channel-group 1 mode active |
- | | + | |
- | | + | |
- | | + | description Link to Juniper Networks EX2300-24P |
- | | + | switchport mode trunk |
- | | + | mtu 9100 |
- | | + | logging event trunk-status |
- | | + | logging event bundle-status |
- | Switch(config-line)# password p@$$w0^d | + | udld port aggressive |
- | | + | channel-protocol lacp |
- | | + | channel-group 1 mode active |
- | | + | |
- | | + | |
- | | + | |
- | | + | |
- | | + | |
- | | + | |
- | Switch# show running-config | + | |
- | | + | |
- | | + | |
- | | + | |
- | Switch# | + | |
- | Building configuration... [OK] | + | |
- | | + | |
---- | ---- | ||
Line 261: | Line 584: | ||
no spanning-tree vlan 527 | no spanning-tree vlan 527 | ||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | |||
+ | **FEC** on an SFP port refers to **Forward Error Correction (FEC)**, which is a technique used in fiber optic and Ethernet networks to enhance data transmission reliability by detecting and correcting errors without the need for retransmission. | ||
+ | |||
+ | **FEC (Forward Error Correction)**: | ||
+ | FEC is a mechanism that adds redundant information to the transmitted data. This redundancy allows the receiving end to detect and correct errors caused by signal degradation or noise during transmission. | ||
+ | |||
+ | Purpose: FEC is essential for high-speed data links (e.g., 10G, 25G, 40G, 100G Ethernet) to improve link quality and performance. | ||
+ | |||
+ | Types: Different FEC modes can be used depending on the standard and speed of the connection (e.g., Reed-Solomon FEC). | ||
+ | |||
+ | |||
+ | * | ||
+ | * | ||
+ | * | ||
+ | * | ||
+ | |||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | |||
+ | **Benefits of FEC on SFP Ports**: | ||
+ | |||
+ | * Error Correction: FEC can correct errors due to signal attenuation or interference. | ||
+ | * Better Link Performance: | ||
+ | * No Retransmissions: | ||
+ | |||
+ | ---- | ||
+ | |||
+ | |||
+ | **C9500 Cisco Catalyst** | ||
+ | |||
+ | C9500-N# | ||
+ | Cisco IOS XE Software, **Version 17.12.03** | ||
+ | Cisco IOS Software [Dublin], Catalyst L3 Switch Software (CAT9K_IOSXE), | ||
+ | |||
+ | interface TwentyFiveGigE1/ | ||
+ | | ||
+ | | ||
+ | | ||
+ | mtu 9100 | ||
+ | | ||
+ | | ||
+ | udld port aggressive | ||
+ | fec cl74 | ||
+ | |||
+ | C9500-N(config-if)# | ||
+ | | ||
+ | C9500-N(config-if)# | ||
+ | auto | ||
+ | cl108 Enable clause108 with 25G | ||
+ | cl74 | ||
+ | off Turn FEC off, FEC is mandatory for speeds 50G or higher | ||
+ | |||
+ | ---- | ||
+ | ---- | ||
+ | |||
+ | ====== SSH ====== | ||
+ | |||
+ | **SSH Configuration on Cisco IOS XE 17.12.03** | ||
+ | |||
+ | configure terminal | ||
+ | hostname MyRouter | ||
+ | ip domain-name mynetwork.local | ||
+ | crypto key generate rsa modulus 2048 | ||
+ | username admin privilege 15 secret MyStrongPassword | ||
+ | ip ssh version 2 | ||
+ | line vty 0 4 | ||
+ | transport input ssh | ||
+ | exec-timeout 10 0 ! 10 minutes, 0 seconds | ||
+ | login local | ||
+ | exit | ||
+ | |||
+ | configure terminal | ||
+ | ip ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr | ||
+ | end | ||
+ | |||
+ | write memory | ||
+ | |||
+ | show ip ssh | ||
+ | show run | include ssh | ||
+ | |||
+ | ---- | ||
---- | ---- | ||
cisco/switch/9500/cisco_catalyst_9500_series_manual.1736963449.txt.gz · Last modified: 2025/01/15 12:50 by aperez