Cisco Catalyst 3550 Series - Acls and Routed Packets

To Next Page

To Previous Page

28-39

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-11194-09

Chapter 28 Configuring Network Security with ACLs

Using VLAN Maps with Router ACLs

ACLs and Routed Packets

Figure 28-8 shows how ACLs are applied on routed packets. For routed packets, the ACLs are applied

in this order:

1. VLAN map for input VLAN

2. Input router ACL

3. Output router ACL

4. VLAN map for output VLAN

Figure 28-8 Applying ACLs on Routed Packets

Frame

Routing function

VLAN 10

Host A

(VLAN 10)

Packet

86308

Catalyst 3550 switch

VLAN 20

Host B

(VLAN 20)

VLAN 10

map

Input

router

ACL

Output

router

ACL

VLAN 20

map

Main Page

Default Chapter36
- Related Publications36
- Obtaining Documentation37
- Ordering Documentation37
- Documentation Feedback38
- Obtaining Technical Assistance38
- Obtaining Additional Publications and Information39
- Features41
Chapter 1 Overview42
- Management Options47
- Advantages of Using CMS and Clustering Switches48
- Network Configuration Examples49
- Small to Medium-Sized Network Using Mixed Switches53
- Large Network Using Only Catalyst 3550 Switches55
- Multidwelling Network Using Catalyst 3550 Switches57
- Long-Distance, High-Bandwidth Transport Configuration59
- Cisco IOS Command Modes61
- C H a P T E R 2 Using the Command-Line Interface62
- Getting Help63
- Specifying Ports in Interface Configuration Mode64
- Understanding CLI Messages65
- Recalling Commands66
- Enabling and Disabling Editing Features67
- Editing Command Lines that Wrap68
- Searching and Filtering Output of Show and more Commands69
- Accessing the CLI from a Browser70
- Understanding CMS71
Chapter 3 Getting Started with CM72
- Online Help74
- Configuration Modes75
- Expert Mode76
- Access to Older Switches in a Cluster77
- Minimum Hardware Configuration78
- Cross-Platform Considerations79
- Configuring an Authentication Method (Nondefault Configuration Only)80
- Front Panel View83
- Topology View84
- CMS Icons85
- Understanding the Boot Process87
- C H a P T E R 4 Assigning the Switch IP Address and Default Gateway88
- Default Switch Information89
- Configuring DHCP-Based Autoconfiguration91
- Configuring the TFTP Server92
- Obtaining Configuration Files93
- Example Configuration94
- Manually Assigning IP Information96
- Modifying the Startup Configuration98
- Specifying the Filename to Read and Write the System Configuration99
- Booting a Specific Software Image100
- Controlling Environment Variables101
- Scheduling a Reload of the Software Image103
- Displaying Scheduled Reload Information104
- Understanding IE2100 Series Configuration Registrar Software105
Chapter 5 Configuring IE2100 CN Agent106
- CNS Event Service107
- Deviceid108
- Understanding CNS Embedded Agents109
- Incremental (Partial) Configuration110
- Enabling the CNS Event Agent112
- Enabling the CNS Configuration Agent113
- Enabling a Partial Configuration116
- Displaying CNS Configuration117
- Clustering Switches119
Chapter 6 Clustering Switche120
- Command Switch Characteristics121
- Candidate Switch and Member Switch Characteristics122
- Planning a Switch Cluster123
- Discovery through CDP Hops124
- Discovery through Different Vlans125
- Discovery through the same Management VLAN126
- Discovery through Different Management Vlans127
- Discovery through Routed Ports128
- Discovery of Newly Installed Switches129
- HSRP and Standby Command Switches130
- Virtual IP Addresses131
- Automatic Recovery of Cluster Configuration133
- IP Addresses134
- SNMP Community Strings135
- LRE Profiles136
- Creating a Switch Cluster137
- Adding Member Switches138
- Creating a Cluster Standby Group140
- Verifying a Switch Cluster142
- Using the CLI to Manage Switch Clusters143
- Using SNMP to Manage Switch Clusters144
- Managing the System Time and Date147
Chapter 7 Administering the Switch148
- Configuring NTP149
- Default NTP Configuration150
- Configuring NTP Associations151
- Configuring NTP Broadcast Service152
- Configuring NTP Access Restrictions153
- Configuring the Source IP Address for NTP Packets155
- Displaying the NTP Configuration156
- Setting the System Clock157
- Configuring the Time Zone158
- Configuring Summer Time (Daylight Saving Time)159
- Configuring a System Name and Prompt161
- Configuring a System Prompt162
- Default DNS Configuration163
- Displaying the DNS Configuration164
- Configuring a Message-Of-The-Day Login Banner165
- Configuring a Login Banner166
- Building the Address Table167
- Default MAC Address Table Configuration168
- Removing Dynamic Address Entries169
- Adding and Removing Static Address Entries171
- Configuring Unicast MAC Address Filtering172
- Displaying Address Table Entries173
- Using the Templates175
- Preventing Unauthorized Access to Your Switch177
- C H a P T E R 8 Configuring Switch-Based Authentication178
- Setting or Changing a Static Enable Password179
- Protecting Enable and Enable Secret Passwords with Encryption180
- Disabling Password Recovery181
- Setting a Telnet Password for a Terminal Line182
- Configuring Username and Password Pairs183
- Configuring Multiple Privilege Levels184
- Changing the Default Privilege Level for Lines185
- Logging into and Exiting a Privilege Level186
- TACACS+ Operation188
- Default TACACS+ Configuration189
- Configuring TACACS+ Login Authentication190
- Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services192
- Starting TACACS+ Accounting193
- Controlling Switch Access with RADIUS194
- RADIUS Operation195
- Configuring RADIUS196
- Configuring RADIUS Login Authentication199
- Defining AAA Server Groups201
- Configuring RADIUS Authorization for User Privileged Access and Network Services203
- Starting RADIUS Accounting204
- Configuring Settings for All RADIUS Servers205
- Configuring the Switch for Vendor-Proprietary RADIUS Server Communication207
- Controlling Switch Access with Kerberos208
- Kerberos Operation210
- Authenticating to a Boundary Switch211
- Configuring the Switch for Local Authentication and Authorization212
- Configuring the Switch for Secure Shell213
- Understanding SSH214
- Configuring SSH215
- Configuring the SSH Server216
- Displaying the SSH Configuration and Status217
- Understanding 802.1X Port-Based Authentication219
- C H a P T E R 9 Configuring 802.1X Port-Based Authentication220
- Authentication Initiation and Message Exchange221
- Ports in Authorized and Unauthorized States222
- Using 802.1X with Port Security223
- Using 802.1X with Voice VLAN Ports224
- Using 802.1X with Guest VLAN225
- Using 802.1X with Per-User Acls226
- Configuring 802.1X Authentication227
- X Configuration Guidelines228
- Upgrading from a Previous Software Release229
- Configuring the Switch-To-RADIUS-Server Communication231
- Enabling Periodic Re-Authentication232
- Changing the Quiet Period233
- Setting the Switch-To-Client Frame-Retransmission Number234
- Configuring the Host Mode235
- Resetting the 802.1X Configuration to the Default Values236
- Displaying 802.1X Statistics and Status237
- Understanding Interface Types239
- C H a P T E R 10 Configuring Interface Characteristics240
- Access Ports241
- Tunnel Ports242
- Etherchannel Port Groups243
- Using the Interface Command245
- Configuring a Range of Interfaces246
- Configuring and Using Interface Range Macros248
- Configuring Ethernet Interfaces249
- Default Ethernet Interface Configuration250
- Configuring Interface Speed and Duplex Mode251
- Setting the Interface Speed and Duplex Parameters252
- Configuring IEEE 802.3X Flow Control253
- Adding a Description for an Interface255
- Configuring Layer 3 Interfaces256
- Monitoring and Maintaining the Interfaces257
- Clearing and Resetting Interfaces and Counters259
- Shutting down and Restarting the Interface260
- Understanding Smartport Macros261
- C H a P T E R 11 Configuring Smartport Macros262
- Creating and Applying Smartport Macros263
- Displaying Smartport Macros264
- Understanding Vlans265
Chapter 12 Configuring VLAN266
- VLAN Port Membership Modes267
- Configuring Normal-Range Vlans268
- Token Ring Vlans269
- VLAN Configuration Mode Options270
- Saving VLAN Configuration271
- Creating or Modifying an Ethernet VLAN272
- Deleting a VLAN274
- Assigning Static-Access Ports to a VLAN275
- Configuring Extended-Range Vlans276
- Creating an Extended-Range VLAN277
- Creating an Extended-Range VLAN with an Internal VLAN ID278
- Displaying Vlans279
- Configuring VLAN Trunks280
- Encapsulation Types282
- Default Layer 2 Ethernet Interface VLAN Configuration283
- Configuring a Trunk Port284
- Defining the Allowed Vlans on a Trunk285
- Changing the Pruning-Eligible List286
- Configuring the Native VLAN for Untagged Traffic287
- Load Sharing Using STP Port Priorities288
- Load Sharing Using STP Path Cost289
- Configuring VMPS291
- Dynamic Port VLAN Membership292
- Default VMPS Configuration294
- Configuring the VMPS Client295
- Configuring Dynamic Access Ports on VMPS Clients296
- Changing the Reconfirmation Interval297
- Monitoring the VMPS298
- VMPS Configuration Example299
- Understanding VTP301
Chapter 13 Configuring VTP302
- VTP Modes303
- VTP Version 2304
- Configuring VTP306
- VTP Configuration Options307
- VTP Configuration Guidelines308
- Configuration Requirements309
- Configuring a VTP Client310
- Disabling VTP (VTP Transparent Mode)311
- Enabling VTP Version 2312
- Enabling VTP Pruning313
- Adding a VTP Client Switch to a VTP Domain314
- Monitoring VTP315
- Understanding Voice VLAN317
Chapter 14 Configuring Voice VLAN318
- Voice VLAN Configuration Guidelines319
- Configuring Ports to Carry Voice Traffic in 802.1Q Frames320
- Overriding the Cos Priority of Incoming Data Frames321
- Configuring the IP Phone to Trust the Cos Priority of Incoming Data Frames322
- Understanding 802.1Q Tunneling323
- C H a P T E R 15 Configuring 802.1Q and Layer 2 Protocol Tunneling324
- Configuring 802.1Q Tunneling326
- System MTU327
- Configuring an 802.1Q Tunneling Port328
- Understanding Layer 2 Protocol Tunneling329
- Configuring Layer 2 Protocol Tunneling331
- Default Layer 2 Protocol Tunneling Configuration332
- Configuring Layer 2 Tunneling333
- Configuring Layer 2 Tunneling for Etherchannels335
- Configuring the Customer Switch336
- Monitoring and Maintaining Tunneling Status339
- Understanding Spanning-Tree Features341
Chapter 16 Configuring STP342
- Bridge ID, Switch Priority, and Extended System ID343
- Spanning-Tree Interface States344
- Blocking State345
- Listening State346
- How a Switch or Port Becomes the Root Switch or Root Port347
- Spanning-Tree Address Management348
- Spanning-Tree Modes and Protocols349
- Spanning-Tree Interoperability and Backward Compatibility350
- Configuring Spanning-Tree Features351
- Spanning-Tree Configuration Guidelines352
- Changing the Spanning-Tree Mode353
- Disabling Spanning Tree354
- Configuring a Secondary Root Switch356
- Configuring the Port Priority357
- Configuring the Path Cost358
- Configuring the Switch Priority of a VLAN360
- Configuring the Hello Time361
- Configuring the Forwarding-Delay Time for a VLAN362
- Configuring Spanning Tree for Use in a Cascaded Stack363
- Displaying the Spanning-Tree Status364
Chapter 17 Configuring MSTP366
- Operations Within an MST Region367
- Hop Count368
- Boundary Ports369
- Understanding RSTP370
- Rapid Convergence371
- Synchronization of Port Roles372
- Bridge Protocol Data Unit Format and Processing373
- Processing Superior BPDU Information374
- Configuring MSTP Features375
- Default MSTP Configuration376
- Specifying the MST Region Configuration and Enabling MSTP377
- Configuring the Root Switch378
- Configuring a Secondary Root Switch380
- Configuring the Port Priority381
- Configuring the Path Cost382
- Configuring the Switch Priority383
- Configuring the Forwarding-Delay Time384
- Configuring the Maximum-Aging Time385
- Specifying the Link Type to Ensure Rapid Transitions386
- Displaying the MST Configuration and Status387
- Understanding Optional Spanning-Tree Features389
- Understanding Port Fast390
- C H a P T E R 18 Configuring Optional Spanning-Tree Features391
- Understanding Uplinkfast392
- Understanding Cross-Stack Uplinkfast393
- How CSUF Works394
- Events that Cause Fast Convergence395
- Limitations396
- Understanding Backbonefast398
- Understanding Etherchannel Guard400
- Understanding Loop Guard401
- Configuring Optional Spanning-Tree Features402
- Enabling BPDU Guard403
- Enabling BPDU Filtering404
- Enabling Uplinkfast for Use with Redundant Links405
- Enabling Cross-Stack Uplinkfast407
- Enabling Backbonefast408
- Enabling Root Guard409
- Displaying the Spanning-Tree Status410
- Understanding DHCP Features411
Chapter 19 Configuring DHCP Feature412
- Configuring DHCP Features413
- Upgrading from a Previous Software Release414
- Enabling the DHCP Relay Agent and Option 82416
- Configuring the Reforwarding Policy417
- Displaying DHCP Information419
- Displaying the DHCP Snooping Configuration420
- Understanding IGMP Snooping421
Chapter 20 Configuring IGMP Snooping and MVR422
- Joining a Multicast Group423
- Leaving a Multicast Group424
- Immediate-Leave Processing425
- Configuring IGMP Snooping426
- Enabling or Disabling IGMP Snooping427
- Setting the Snooping Method428
- Configuring a Multicast Router Port429
- Enabling IGMP Immediate-Leave Processing430
- Disabling IGMP Report Suppression431
- Configuring the Aging Time432
- Understanding Multicast VLAN Registration433
- Using MVR in a Multicast Television Application434
- Configuring MVR436
- Configuring MVR Global Parameters437
- Configuring MVR Interfaces438
- Displaying MVR Information440
- Configuring IGMP Filtering and Throttling441
- Default IGMP Filtering and Throttling Configuration442
- Applying IGMP Profiles443
- Setting the Maximum Number of IGMP Groups444
- Configuring the IGMP Throttling Action445
- Displaying IGMP Filtering and Throttling Configuration447
- Configuring Storm Control449
- C H a P T E R 21 Configuring Port-Based Traffic Control451
- Disabling Storm Control452
- Configuring Protected Ports453
- Configuring Port Blocking454
- Resuming Normal Forwarding on a Port455
- Configuring Port Security456
- Security Violations457
- Default Port Security Configuration458
- Enabling and Configuring Port Security459
- Enabling and Configuring Port Security Aging462
- Displaying Port-Based Traffic Control Settings464
- Understanding CDP465
- Configuring CDP466
Chapter 22 Configuring CDP467
- Disabling and Enabling CDP on an Interface468
- Monitoring and Maintaining CDP469
- Understanding UDLD471
Chapter 23 Configuring UDLD472
- Configuring UDLD474
- Enabling UDLD Globally475
- Resetting an Interface Shut down by UDLD476
- Displaying UDLD Status477
- Understanding SPAN and RSPAN479
Chapter 24 Configuring SPAN and RSPAN480
- SPAN and RSPAN Concepts and Terminology481
- Source Port482
- Destination Port483
- VLAN-Based SPAN484
- SPAN and RSPAN Interaction with Other Features485
- SPAN and RSPAN Session Limits486
- SPAN Configuration Guidelines487
- Creating a SPAN Session and Specifying Ports to Monitor488
- Creating a SPAN Session and Enabling Ingress Traffic489
- Removing Ports from a SPAN Session491
- Specifying Vlans to Monitor492
- Specifying Vlans to Filter493
- Configuring RSPAN494
- Creating an RSPAN Session495
- Creating an RSPAN Destination Session496
- Creating an RSPAN Destination Session and Enabling Ingress Traffic497
- Removing Ports from an RSPAN Session498
- Specifying Vlans to Monitor499
- Specifying Vlans to Filter500
- Displaying SPAN and RSPAN Status501
- Understanding RMON503
Chapter 25 Configuring RMON504
- Default RMON Configuration505
- Configuring RMON Collection on an Interface507
- Displaying RMON Status508
- Understanding System Message Logging509
- Configuring System Message Logging510
- C H a P T E R 26 Configuring System Message Logging511
- Disabling and Enabling Message Logging512
- Synchronizing Log Messages514
- Enabling and Disabling Timestamps on Log Messages515
- Enabling and Disabling Sequence Numbers in Log Messages516
- Limiting Syslog Messages Sent to the History Table and to SNMP518
- Logging Messages to a UNIX Syslog Daemon519
- Displaying the Logging Configuration520
- Understanding SNMP521
Chapter 27 Configuring SNMP522
- SNMP Manager Functions523
- SNMP Agent Functions524
- SNMP Notifications525
- Default SNMP Configuration526
- Disabling the SNMP Agent527
- Configuring SNMP Groups and Users529
- Configuring SNMP Notifications531
- Configuring SNMP Trap Notification Priority534
- Setting the Agent Contact and Location Information535
- SNMP Examples536
- Displaying SNMP Status537
- Understanding Acls539
- C H a P T E R 28 Configuring Network Security with Acls540
- Router Acls541
- Port Acls542
- Handling Fragmented and Unfragmented Traffic543
- Configuring IP Acls544
- Unsupported Features545
- Creating Standard and Extended IP Acls546
- Creating a Numbered Standard ACL547
- Creating a Numbered Extended ACL549
- Creating Named Standard and Extended IP Acls553
- Using Time Ranges with Acls555
- Including Comments in Acls557
- IP ACL Configuration Examples559
- Numbered Acls561
- Time Range Applied to an IP ACL562
- ACL Logging563
- Configuring Named MAC Extended Acls564
- Applying a MAC ACL to a Layer 2 Interface566
- Configuring VLAN Maps567
- VLAN Map Configuration Guidelines568
- Examples of Acls and VLAN Maps569
- Applying a VLAN Map to a VLAN571
- Denying Access to a Server on Another VLAN573
- Using VLAN Maps with Router Acls574
- Examples of Router Acls and VLAN Maps Applied to Vlans575
- Acls and Bridged Packets576
- Acls and Routed Packets577
- Acls and Multicast Packets578
- Displaying ACL Information579
- Displaying ACL Resource Usage and Configuration Problems581
- Configuration Conflicts582
- ACL Configuration Fitting in Hardware583
- TCAM Usage585
- Configuring Qos587
Chapter 29 Configuring Qo588
- Basic Qos Model590
- Classification591
- Classification Based on Qos Acls593
- Policing and Marking594
- Mapping Tables596
- Queueing and Scheduling597
- Queueing and Scheduling on 10/100 Ethernet Ports601
- Packet Modification603
- Generated Auto-Qos Configuration604
- Effects of Auto-Qos on the Configuration606
- Enabling Auto-Qos for Voip607
- Displaying Auto-Qos Information608
- Auto-Qos Configuration Example609
- Configuring Standard Qos611
- Standard Qos Configuration Guidelines612
- Enabling Qos Globally614
- Configuring Classification by Using Port Trust States615
- Configuring the Cos Value for an Interface617
- Configuring a Trusted Boundary to Ensure Port Security618
- Enabling Pass-Through Mode619
- Configuring the DSCP Trust State on a Port Bordering Another Qos Domain620
- Configuring a Qos Policy621
- Classifying Traffic by Using Acls622
- Classifying Traffic on a Physical-Port Basis by Using Class Maps625
- Classifying Traffic on a Per-Port Per-VLAN Basis by Using Class Maps627
- Classifying, Policing, and Marking Traffic by Using Policy Maps629
- Classifying, Policing, and Marking Traffic by Using Aggregate Policers635
- Configuring DSCP Maps637
- Configuring the Cos-To-DSCP Map638
- Configuring the Policed-DSCP Map639
- Configuring the DSCP-To-Cos Map640
- Configuring the DSCP-To-DSCP-Mutation Map641
- Configuring Egress Queues on Gigabit-Capable Ethernet Ports643
- Configuring the Egress Queue Size Ratios644
- Configuring Tail-Drop Threshold Percentages645
- Configuring WRED Drop Thresholds Percentages647
- Configuring the Egress Expedite Queue648
- Allocating Bandwidth Among Egress Queues649
- Configuring Egress Queues on 10/100 Ethernet Ports650
- Configuring the Minimum-Reserve Levels651
- Configuring the Egress Expedite Queue652
- Allocating Bandwidth Among Egress Queues653
- Displaying Standard Qos Information655
- Qos Configuration for the Existing Wiring Closet656
- Qos Configuration for the Intelligent Wiring Closet657
- Qos Configuration for the Distribution Layer658
- Understanding Etherchannels661
- C H a P T E R 30 Configuring Etherchannels662
- Understanding the Port Aggregation Protocol and Link Aggregation Protocol663
- Pagp and LACP Modes664
- Physical Learners and Aggregate-Port Learners665
- Pagp and LACP Interaction with Other Features666
- Configuring Etherchannels667
- Default Etherchannel Configuration668
- Configuring Layer 2 Etherchannels669
- Configuring Layer 3 Etherchannels671
- Configuring the Physical Interfaces672
- Configuring Etherchannel Load Balancing674
- Configuring the Pagp Learn Method and Priority675
- Configuring the LACP Port Priority676
- Configuring the LACP System Priority677
- Displaying Etherchannel, Pagp, and LACP Status678
- Configuring Ip Unicast Routing679
- Understanding IP Routing680
Chapter 31 Configuring IP Unicast Routing681
- Configuring IP Addressing on Layer 3 Interfaces682
- Assigning IP Addresses to Network Interfaces683
- Use of Subnet Zero684
- Classless Routing685
- Configuring Address Resolution Methods686
- Define a Static ARP Cache687
- Set ARP Encapsulation688
- Routing Assistance When IP Routing Is Disabled689
- ICMP Router Discovery Protocol (IRDP)690
- Configuring Broadcast Packet Handling691
- Forwarding UDP Broadcast Packets and Protocols692
- Establishing an IP Broadcast Address693
- Flooding IP Broadcasts694
- Monitoring and Maintaining IP Addressing695
- Enabling IP Unicast Routing696
- Configuring RIP697
- Configuring Basic RIP Parameters698
- Configuring RIP Authentication700
- Configuring IGRP702
- Default IGRP Configuration703
- Configuring Basic IGRP Parameters704
- Configuring Split Horizon706
- Configuring OSPF707
- Default OSPF Configuration708
- Configuring Basic OSPF Parameters709
- Configuring OSPF Interfaces710
- Configuring OSPF Area Parameters711
- Configuring Other OSPF Parameters712
- Changing LSA Group Pacing714
- Monitoring OSPF715
- Configuring EIGRP716
- Default EIGRP Configuration717
- Configuring Basic EIGRP Parameters718
- Configuring EIGRP Interfaces719
- Configuring EIGRP Route Authentication720
- Monitoring and Maintaining EIGRP721
- Configuring BGP722
- Default BGP Configuration724
- Enabling BGP Routing726
- Managing Routing Policy Changes728
- Configuring BGP Decision Attributes729
- Configuring BGP Filtering with Route Maps731
- Configuring BGP Filtering by Neighbor732
- Configuring Prefix Lists for BGP Filtering733
- Configuring BGP Community Filtering734
- Configuring BGP Neighbors and Peer Groups736
- Configuring Aggregate Addresses738
- Configuring BGP Route Reflectors739
- Configuring Route Dampening740
- Monitoring and Maintaining BGP741
- Configuring Multi-VRF CE743
- Default Multi-VRF CE Configuration745
- Multi-VRF CE Configuration Guidelines746
- Configuring Vrfs747
- Configuring a VPN Routing Session748
- Multi-VRF CE Configuration Example749
- Displaying Multi-VRF CE Status753
- Configuring the Number of Equal-Cost Routing Paths754
- Configuring Static Unicast Routes755
- Specifying Default Routes and Networks756
- Using Route Maps to Redistribute Routing Information757
- Configuring Policy-Based Routing760
- PBR Configuration Guidelines761
- Enabling PBR762
- Filtering Routing Information763
- Controlling Advertising and Processing in Routing Updates764
- Filtering Sources of Routing Information765
- Managing Authentication Keys766
- Monitoring and Maintaining the IP Network767
- Understanding HSRP769
Chapter 32 Configuring HSRP770
- Configuring HSRP772
- Enabling HSRP773
- Configuring HSRP Group Attributes774
- Configuring HSRP Authentication and Timers777
- Configuring HSRP Groups and Clustering778
- Displaying HSRP Configurations779
- C H a P T E R 33 Configuring Web Cache Services by Using WCCP782
- WCCP Message Exchange783
- MD5 Security784
- Configuring WCCP785
- Enabling the Web Cache Service, Setting the Password, and Redirecting Traffic Received from a Client786
- Monitoring and Maintaining WCCP789
- Configuring Ip Multicast Routing791
- C H a P T E R 34 Configuring IP Multicast Routing792
- Understanding IGMP793
- IGMP Version 2794
- Understanding PIM795
- Auto-RP798
- Multicast Forwarding and Reverse Path Check799
- Neighbor Discovery800
- Understanding DVMRP801
- Joining a Group with CGMP802
- Leaving a Group with CGMP803
- Multicast Routing Configuration Guidelines804
- Auto-RP and BSR Configuration Guidelines805
- Configuring a Rendezvous Point807
- Configuring Auto-RP808
- Configuring Pimv2 BSR812
- Using Auto-RP and a BSR817
- Troubleshooting Pimv1 and Pimv2 Interoperability Problems818
- Delaying the Use of PIM Shortest-Path Tree819
- Modifying the PIM Router-Query Message Interval820
- Configuring Optional IGMP Features821
- Changing the IGMP Version822
- Changing the Maximum Query Response Time for Igmpv2823
- Configuring the Multilayer Switch as a Member of a Group824
- Controlling Access to IP Multicast Groups825
- Modifying the IGMP Host-Query Message Interval826
- Configuring Optional Multicast Routing Features827
- Enabling CGMP Server Support828
- Configuring Sdr Listener Support829
- Configuring the TTL Threshold830
- Configuring an IP Multicast Boundary832
- Configuring Basic DVMRP Interoperability Features833
- Configuring DVMRP Interoperability834
- Configuring a DVMRP Tunnel836
- Advertising Network 0.0.0.0 to DVMRP Neighbors838
- Responding to Mrinfo Requests839
- Configuring Advanced DVMRP Interoperability Features840
- Rejecting a DVMRP Nonpruning Neighbor841
- Controlling Route Exchanges843
- Changing the DVMRP Route Threshold844
- Disabling DVMRP Autosummarization846
- Monitoring and Maintaining IP Multicast Routing847
- Clearing Caches, Tables, and Databases848
- Monitoring IP Multicast Routing849
- Understanding MSDP851
Chapter 35 Configuring MSDP852
- MSDP Benefits853
- Configuring MSDP854
- Caching Source-Active State856
- Requesting Source Information from an MSDP Peer858
- Redistributing Sources859
- Filtering Source-Active Request Messages861
- Controlling Source Information that Your Switch Forwards862
- Using TTL to Limit the Multicast Data Sent in SA Messages864
- Configuring an MSDP Mesh Group866
- Including a Bordering PIM Dense-Mode Region in MSDP867
- Configuring an Originating Address Other than the RP Address868
- Monitoring and Maintaining MSDP869
- Understanding Fallback Bridging871
- C H a P T E R 36 Configuring Fallback Bridging872
- Configuring Fallback Bridging873
- Creating a Bridge Group874
- Preventing the Forwarding of Dynamically Learned Stations875
- Configuring the Bridge Table Aging Time876
- Adjusting Spanning-Tree Parameters877
- Changing the Switch Priority878
- Assigning a Path Cost879
- Adjusting BPDU Intervals880
- Disabling the Spanning Tree on an Interface882
- Using Recovery Procedures883
Chapter 37 Troubleshooting884
- Password Recovery with Password Recovery Enabled885
- Procedure with Password Recovery Disabled887
- Recovering from a Command Switch Failure888
- Replacing a Failed Command Switch with a Cluster Member889
- Replacing a Failed Command Switch with Another Switch890
- Recovering from Lost Member Connectivity892
- Diagnosing Connectivity Problems893
- Using IP Traceroute894
- Understanding IP Traceroute895
- Using Layer 2 Traceroute896
- Usage Guidelines897
- Displaying the Physical Path898
- Enabling All-System Diagnostics899
- Using the Debug Autoqos Command900
- Using the Show Forward Command901
- Using the Crashinfo File902
- Supported Mibs903
- Mib List903
Appendix A Supported MIB904
- Using Ftp to Access the Mib Files905
- Using FTP to Access the MIB Files906
- Working with the Flash File System907
- Displaying Available File Systems908
- A P P E N D I X B Working with the Cisco IOS File System, Configuration Files, and Software Images909
- Creating and Removing Directories910
- Deleting Files911
- Displaying the Contents of a Tar File912
- Extracting a Tar File913
- Working with Configuration Files914
- Configuration File Types and Location915
- Copying Configuration Files by Using TFTP916
- Uploading the Configuration File by Using TFTP917
- Preparing to Download or Upload a Configuration File by Using FTP918
- Downloading a Configuration File by Using FTP919
- Uploading a Configuration File by Using FTP920
- Copying Configuration Files by Using RCP921
- Downloading a Configuration File by Using RCP922
- Uploading a Configuration File by Using RCP923
- Clearing Configuration Information924
- Image Location on the Switch925
- Copying Image Files by Using TFTP926
- Downloading an Image File by Using TFTP927
- Uploading an Image File by Using TFTP929
- Preparing to Download or Upload an Image File by Using FTP930
- Downloading an Image File by Using FTP931
- Uploading an Image File by Using FTP932
- Copying Image Files by Using RCP933
- Preparing to Download or Upload an Image File by Using RCP934
- Downloading an Image File by Using RCP935
- Uploading an Image File by Using RCP937
- Access Control Lists939
- Fallback Bridging940
- Hsrp941
- Interface Configuration Commands942
- Unsupported Interface Configuration Commands943
- Unsupported Global Configuration Commands944
- Unsupported VPN Configuration Commands945
- Unsupported Global Configuration Commands946
- Snmp947

Cisco Catalyst 3550 Series - Acls and Routed Packets

Table of Contents

Related product manuals