Apuntes Cisco 642-813
Content
MACRO
Step 1 Define the macro name and specify as many lists and ranges of interfaces as needed. The command syntax is open ended but follows the list and range syntax of the interface range commands defined previously: Switch(config)# define interface-range macro-name type module/number [, type module/ number ...] [type module/first-number ± last-number] [...]
Step 2 Invoke the macro called macro-name just as you would with a regular interface, just before entering any interface-configuration commands: Switch(config)# interface range macro macro-name
Example
Switch(config)# define interface-range MyGroup gig 2/1 , gig 2/3 ± 2/5 , gig 3/1 , gig 3/10, gig 3/32 ± 3/48 Switch(config)# interface range macro MyGroup
Switch(config)# [no] errdisable detect cause [all | cause-name] You can repeat this command to enable or disable more than one cause. One of the following causes triggers the errdisable state: all²Detects every possible cause arp-inspection²Detects errors with dynamic ARP inspection bpduguard²Detects when a spanning-tree bridge protocol data unit (BPDU) is received on a port configured for STP portfast channel-misconfig²Detects an error with an EtherChannel bundle dhcp-rate-limit²Detects an error with DHCP snooping dtp-flap²Detects when trunking encapsulation is changing from one type to another gbic-invalid²Detects the presence of an invalid GBIC or SFP module ilpower²Detects an error with offering inline power l2ptguard²Detects an error with Layer 2 Protocol Tunneling link-flap²Detects when the port link state is ³flapping´ between the up and down states loopback²Detects when an interface has been looped back pagp-flap²Detects when an EtherChannel bundle¶s ports no longer have consistent configurations psecure-violation²Detects conditions that trigger port security configured on a port rootguard²Detects when an STP BPDU is received from the root bridge on an unexpected port
Switch Port Configuration 99
security-violation²Detects errors related to port security storm-control²Detects when a storm control threshold has been exceeded on a port udld²Detects when a link is seen to be unidirectional (data passing in only one direction) unicast-flood²Detects conditions that trigger unicast flood blocking on a port vmps²Detects errors when assigning a port to a dynamic VLAN through VLAN membership policy server (VMPS)
Switch(config)# errdisable recovery cause psecurity -violation Switch(config)# errdisable recovery interval 3600
VLAN Trunk Configuration
Use the following commands to create a VLAN trunk link:
Switch(config)# interface type mod/port Switch(config-if)# switchport Switch(config-if)# switchport trunk encapsulation {isl | dot1q | negotiate} Switch(config-if)# switchport trunk native vlan vlan-id Switch(config-if)# switchport trunk allowed vlan { vlan-list | all | {add | except | remove} vlan-list} Switch(config-if)# switchport mode {trunk | dynamic {desirable | auto}}
VTP Advertisements
Summary advertisements VTP domain servers send summary advertisements every 300 seconds and every time a VLAN database change occurs. The summary advertisement lists information about the management domain, including VTP version, domain name, configuration revision number, time stamp, MD5 encryption hash code, and the number of subset advertisements to follow. For VLAN configuration changes, summary advertisements are followed by one or more subset advertisements with more specific VLAN configuration data. Subset advertisements VTP domain servers send subset advertisements after a VLAN configuration change occurs. These advertisements list the specific changes that have been performed, such as creating or deleting a VLAN, suspending or activating a VLAN, changing the name of a VLAN, and changing a VLAN¶s Maximum Transmission Unit (MTU). Subset advertisements can list the following VLAN parameters: status of the VLAN, VLAN type (such as Ethernet or Token Ring), MTU, length of the VLAN name, VLAN number, Security Association Identifier (SAID) value, and VLAN name. VLANs are listed individually in sequential subset advertisements. Advertisement requests from clients A VTP client can request any VLAN information it lacks. For example, a client switch might be reset and have its VLAN database cleared, and its VTP domain membership might be changed, or it might hear a VTP summary advertisement with a higher revision number than it currently has. After a client advertisement request, the VTP domain servers respond with summary and subset advertisements to bring it up-to-date.
Configuring EtherChannel Load Balancing
Switch(config)# port-channel load-balance method
Types of EtherChannel Load-Balancing Methods
show etherchannel port-channel
The Port Aggregation Protocol (PAgP) is a Cisco-proprietary solution, and the Link Aggregation Control Protocol (LACP) is standards based.
Configuring a PAgP EtherChannel
To configure switch ports for PAgP negotiation (the default), use the following commands:
Switch(config)# interface type mod/num Switch(config-if)# channel-protocol pagp Switch(config-if)# channel-group number mode {on | {auto | desirable} [non-silent]}
Switch(config)# port-channel load-balance src-dst-port Switch(config)# interface range gig 3/1 ± 4 Switch(config-if)# channel-protocol pagp Switch(config-if)# channel-group 1 mode desirable non-silent
Configuring a LACP EtherChannel
To configure switch ports for LACP negotiation, use the following commands:
Switch(config)# lacp system-priority priority Switch(config)# interface type mod/num Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group number mode {on | passive | active} Switch(config-if)# lacp port-priority priority
Switch(config)# lacp system-priority 100 Switch(config)# interface range gig 2/1 ± 4 , gig 3/1 ± 4 Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group 1 mode active Switch(config-if)# lacp port-priority 100 Switch(config-if)# exit Switch(config)# interface range gig 2/5 ± 8 , gig 3/5 ± 8 Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group 1 mode active
show etherchannel summary show etherchannel port show etherchannel load-balance
Step 1 Define the macro name and specify as many lists and ranges of interfaces as needed. The command syntax is open ended but follows the list and range syntax of the interface range commands defined previously: Switch(config)# define interface-range macro-name type module/number [, type module/ number ...] [type module/first-number ± last-number] [...]
Step 2 Invoke the macro called macro-name just as you would with a regular interface, just before entering any interface-configuration commands: Switch(config)# interface range macro macro-name
Example
Switch(config)# define interface-range MyGroup gig 2/1 , gig 2/3 ± 2/5 , gig 3/1 , gig 3/10, gig 3/32 ± 3/48 Switch(config)# interface range macro MyGroup
Switch(config)# [no] errdisable detect cause [all | cause-name] You can repeat this command to enable or disable more than one cause. One of the following causes triggers the errdisable state: all²Detects every possible cause arp-inspection²Detects errors with dynamic ARP inspection bpduguard²Detects when a spanning-tree bridge protocol data unit (BPDU) is received on a port configured for STP portfast channel-misconfig²Detects an error with an EtherChannel bundle dhcp-rate-limit²Detects an error with DHCP snooping dtp-flap²Detects when trunking encapsulation is changing from one type to another gbic-invalid²Detects the presence of an invalid GBIC or SFP module ilpower²Detects an error with offering inline power l2ptguard²Detects an error with Layer 2 Protocol Tunneling link-flap²Detects when the port link state is ³flapping´ between the up and down states loopback²Detects when an interface has been looped back pagp-flap²Detects when an EtherChannel bundle¶s ports no longer have consistent configurations psecure-violation²Detects conditions that trigger port security configured on a port rootguard²Detects when an STP BPDU is received from the root bridge on an unexpected port
Switch Port Configuration 99
security-violation²Detects errors related to port security storm-control²Detects when a storm control threshold has been exceeded on a port udld²Detects when a link is seen to be unidirectional (data passing in only one direction) unicast-flood²Detects conditions that trigger unicast flood blocking on a port vmps²Detects errors when assigning a port to a dynamic VLAN through VLAN membership policy server (VMPS)
Switch(config)# errdisable recovery cause psecurity -violation Switch(config)# errdisable recovery interval 3600
VLAN Trunk Configuration
Use the following commands to create a VLAN trunk link:
Switch(config)# interface type mod/port Switch(config-if)# switchport Switch(config-if)# switchport trunk encapsulation {isl | dot1q | negotiate} Switch(config-if)# switchport trunk native vlan vlan-id Switch(config-if)# switchport trunk allowed vlan { vlan-list | all | {add | except | remove} vlan-list} Switch(config-if)# switchport mode {trunk | dynamic {desirable | auto}}
VTP Advertisements
Summary advertisements VTP domain servers send summary advertisements every 300 seconds and every time a VLAN database change occurs. The summary advertisement lists information about the management domain, including VTP version, domain name, configuration revision number, time stamp, MD5 encryption hash code, and the number of subset advertisements to follow. For VLAN configuration changes, summary advertisements are followed by one or more subset advertisements with more specific VLAN configuration data. Subset advertisements VTP domain servers send subset advertisements after a VLAN configuration change occurs. These advertisements list the specific changes that have been performed, such as creating or deleting a VLAN, suspending or activating a VLAN, changing the name of a VLAN, and changing a VLAN¶s Maximum Transmission Unit (MTU). Subset advertisements can list the following VLAN parameters: status of the VLAN, VLAN type (such as Ethernet or Token Ring), MTU, length of the VLAN name, VLAN number, Security Association Identifier (SAID) value, and VLAN name. VLANs are listed individually in sequential subset advertisements. Advertisement requests from clients A VTP client can request any VLAN information it lacks. For example, a client switch might be reset and have its VLAN database cleared, and its VTP domain membership might be changed, or it might hear a VTP summary advertisement with a higher revision number than it currently has. After a client advertisement request, the VTP domain servers respond with summary and subset advertisements to bring it up-to-date.
Configuring EtherChannel Load Balancing
Switch(config)# port-channel load-balance method
Types of EtherChannel Load-Balancing Methods
show etherchannel port-channel
The Port Aggregation Protocol (PAgP) is a Cisco-proprietary solution, and the Link Aggregation Control Protocol (LACP) is standards based.
Configuring a PAgP EtherChannel
To configure switch ports for PAgP negotiation (the default), use the following commands:
Switch(config)# interface type mod/num Switch(config-if)# channel-protocol pagp Switch(config-if)# channel-group number mode {on | {auto | desirable} [non-silent]}
Switch(config)# port-channel load-balance src-dst-port Switch(config)# interface range gig 3/1 ± 4 Switch(config-if)# channel-protocol pagp Switch(config-if)# channel-group 1 mode desirable non-silent
Configuring a LACP EtherChannel
To configure switch ports for LACP negotiation, use the following commands:
Switch(config)# lacp system-priority priority Switch(config)# interface type mod/num Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group number mode {on | passive | active} Switch(config-if)# lacp port-priority priority
Switch(config)# lacp system-priority 100 Switch(config)# interface range gig 2/1 ± 4 , gig 3/1 ± 4 Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group 1 mode active Switch(config-if)# lacp port-priority 100 Switch(config-if)# exit Switch(config)# interface range gig 2/5 ± 8 , gig 3/5 ± 8 Switch(config-if)# channel-protocol lacp Switch(config-if)# channel-group 1 mode active
show etherchannel summary show etherchannel port show etherchannel load-balance
