4. Associate LLDP MED network policies to ports by using the LLDP MED Port Settings Page. 5. View LLDP local port status details by using the LLDP Local Information Page. 6. View the LLDP information that was discovered from neighbors, such as local port, system name, time to live, system description, system capabilities by using the LLDP Neighbors Information Page. 7. View LLDP-related statistical information per interface by using the LLDP Statistics Page. 8. Display overloading information by using the LLDP Overloading Page.

Setting LLDP Properties

The LLDP Properties Page enables entering LLDP general parameters. These include enabling/disabling the feature globally and setting timers. To enter LLDP properties:
STEP 1 Click Administration > Discovery - LLDP > Properties. The LLDP Properties
LLDP StatusSelect the LLDP global status on the switch. TLV Advertise IntervalEnter the rate in seconds at which LLDP advertisement updates are sent. Topology Change SNMP Notification IntervalEnter the minimum time interval between SNMP notifications. Hold MultiplierEnter the amount of time that LLDP packets are held before the packets are discarded, measured in multiples of the TLV Advertise Interval. For example, if the TLV Advertise Interval is 30 seconds, and the Hold Multiplier is 4, then the LLDP packets are discarded after 120 seconds. Reinitializing DelayEnter the time interval in seconds that passes between disabling and reinitializing LLDP, following an LLDP enable/disable cycle. Transmit DelayEnter the amount of time in seconds that passes between successive LLDP frame transmissions due to changes in the LLDP local systems MIB.
For a description of LLDP MED, refer to the LLDP MED Protocol section. sent when the LLDP-MED Fast Start mechanism is initialized. This occurs when a new endpoint device links to the switch.
STEP 3 In the Fast Start Repeat Count field, enter the number of times LLDP packets are
STEP 4 Click Apply. The LLDP properties are defined.
Editing LLDP Port Settings
The Port Settings Page enables activating LLDP and SNMP notification per port, and entering the TLVs that are sent in the LLDP PDU. By setting these properties it is possible to provide various types of information to devices that support the LLDP protocol. The LLDP-MED TLVs to be advertised can be selected in the LLDP MED Port Settings Page. To define the LLDP port settings:

Management Address Displays the table of addresses of the local LLDP agent. Other remote managers can use this address to obtain information related to the local device. The address consists of the following elements: Address SubtypeType of management IP address that is listed in the Management Address field, for example, IPv4.
AddressReturned address most appropriate for management use, typically a Layer 3 address. Interface SubtypeNumbering method used for defining the interface number. Interface NumberSpecific interface associated with this management address.
MAC/PHY Details Auto-Negotiation SupportedPort speed auto-negotiation support status. Auto-Negotiation EnabledPort speed auto-negotiation active status. Auto-Negotiation Advertised CapabilitiesPort speed auto-negotiation capabilities, for example, 1000BASE-T half duplex mode, 100BASE-TX full duplex mode. Operational MAU TypeMedium Attachment Unit (MAU) type. The MAU performs physical layer functions, including digital data conversion from the Ethernet interfaces collision detection and bit injection into the network, for example, 100BASE-TX full duplex mode.
802.3 Details 802.3 Maximum Frame SizeThe maximum supported IEEE 802.3 frame size.
802.3 Link Aggregation Aggregation CapabilityIndicates whether the interface can be aggregated. Aggregation StatusIndicates whether the interface is aggregated. Aggregation Port IDAdvertised aggregated interface ID.
MED Details Capabilities SupportedMED capabilities supported on the port. Current CapabilitiesMED capabilities enabled on the port. Device ClassLLDP-MED endpoint device class. The possible device classes are: Endpoint Class 1Indicates a generic endpoint class, offering basic LLDP services.
Endpoint Class 2Indicates a media endpoint class, offering media streaming capabilities, as well as all Class 1 features. Endpoint Class 3Indicates a communications device class, offering all Class 1 and Class 2 features plus location, 911, Layer 2 switch support, and device information management capabilities.
PoE Device TypePort PoE type, for example, powered. PoE Power SourcePort power source. PoE Power PriorityPort power priority. PoE Power ValuePort power value. Hardware RevisionHardware version. Firmware RevisionFirmware version. Software RevisionSoftware version. Serial NumberDevice serial number. Manufacturer NameDevice manufacturer name. Model NameDevice model name. Asset IDAsset ID.

STEP 3 Click Apply. The switch is updated with the STP Global settings.
The STP Interface Settings Page enables you to configure STP on a per-port basis, and to view the information learned by the protocol, such as the designated bridge. The configuration entered on this page is active for all flavors of the STP protocol.
To configure STP on an interface:
STEP 1 Click Spanning Tree > STP Interface Settings. The STP Interface Settings Page

displays.

STEP 2 Select an interface and click Edit. The Edit Interface Settings Page displays. STEP 3 Enter the parameters
InterfaceSelect the port number or LAG on which Spanning Tree is configured. STPEnables or disables STP on the port. Edge PortEnables or disables Fast Link on the port. If Fast Link mode is enabled for a port, the port state is automatically placed in the Forwarding state when the port link is up. Fast Link optimizes the STP protocol convergence. The options are: EnableEnables Fast Link immediately. AutoEnables Fast Link a few seconds after the interface becomes active. This allows STP to resolve loops before enabling Fast Link. DisableDisables Fast Link.
Path CostSet the port contribution to the root path cost or use the default cost generated by the system. PrioritySet the priority value of the port. The priority value influences the port choice when a bridge has two ports connected in a loop. The priority is a value from 0 to 240, set in increments of 16. Port StateDisplays the current STP state of a port. DisabledSTP is currently disabled on the port. The port forwards traffic while learning MAC addresses. BlockingThe port is currently blocked, and cannot forward traffic (with the exception of BPDU data) or learn MAC addresses. ListeningThe port is in Listening mode. The port cannot forward traffic, and cannot learn MAC addresses. LearningThe port is in Learning mode. The port cannot forward traffic, but it can learn new MAC addresses. ForwardingThe port is in Forwarding mode. The port can forward traffic and learn new MAC addresses.
Configuring Rapid Spanning Tree Settings
Port RoleDisplays the behavior of the port. Designated Bridge IDDisplays the bridge priority and the MAC address of the designated bridge. Designated Port IDDisplays the priority and interface of the selected port. Designated CostDisplays the cost of the port participating in the STP topology. Ports with a lower cost are less likely to be blocked if STP detects loops. Forward TransitionsDisplays the number of times the port has changed from the Blocking state to Forwarding state. SpeedDisplays the speed of the port. LAGDisplays the LAG to which the port belongs. If a port is a member of a LAG, the LAG settings override the port settings.

Global Settings Page displays. Enable MSTP.
STEP 2 Click Spanning Tree > MSTP Properties. The MSTP Properties Page displays.
Mapping VLANs to a MST Instance
Region NameDefine an MSTP region name. RevisionDefine an unsigned 16-bit number that identifies the revision of the current MST configuration. The field range is from 0 to 65535. Max HopsSet the total number of hops that occur in a specific region before the BPDU is discarded. Once the BPDU is discarded, the port information is aged out. The field range is from 1 to 40. IST MasterDisplays the regions master.
STEP 4 Click Apply. The MSTP properties are defined, and the switch is updated.
The VLAN to MST Instance Page enables you to map each VLAN to a Multiple Spanning Tree Instance (MSTI). For devices to be in the same region, they must have the same mapping of VLANs to MSTIs.
NOTE The same MSTI can be mapped with more than one VLAN, but each VLAN can only
have one MST Instance attached to it. Configuration on this page (and all of the MSTP pages) applies if the system STP mode is MSTP. Up to seven MST instances can be defined on Cisco Small Business 300 Series switches. For those VLANs that are not explicitly mapped to one of the MST instances, the switch automatically maps them to the CIST (Core and Internal Spanning Tree) instance. The CIST instance is MST instance 0. To map VLANs to MST Instances:
STEP 1 Click Spanning Tree > VLAN to MST Instance. The VLAN to MST Instance Page
displays. The VLAN to MST Instance page contains the following fields: MST Instance IDAll MST instances are displayed. VLANsAll VLANs belonging to the MST instance are displayed.
Defining MST Instance Settings
STEP 2 To add a VLAN to an MST instance, select the MST instance, and click Edit. The
Edit MST Instance to VLAN Page displays.
MST Instance IDSelect the MST instance. VLANsDefine the VLANs being mapped to this MST instance. ActionDefine whether to Add (map) or Remove the VLAN to/from the MST instance.
STEP 4 Click Apply. The MSTP VLAN mappings are defined, and the switch is updated.
The MST Instance Settings Page enables you to configure and view parameters per MST instance. This is the per-instance equivalent to the Configuring STP Status and Global Settings. To enter MST instance settings:
STEP 1 Click Spanning Tree > MST Instance Settings. The MST Instance Settings Page

Instance IDSelect an MST instance to be displayed and defined. Included VLANsDisplays the VLANs mapped to the selected instance. The default mapping is that all VLANs are mapped to the common and internal spanning tree (CIST) instance (instance 0). Bridge PrioritySet the priority of this bridge for the selected MST instance. Designated Root Bridge IDDisplays the priority and MAC address of the Root Bridge for the MST instance. Root PortDisplays the root port of the selected instance. Root Path CostDisplays the root path cost of the selected instance.
Defining MSTP Interface Settings
Bridge IDDisplays the bridge priority and the MAC address of this switch for the selected instance. Remaining HopsDisplays the number of hops remaining to the next destination.
STEP 3 Click Apply. The MST Instance configuration is defined, and the switch is updated.
The MSTP Interface Settings Page enables you to configure the port MSTP settings for every MST instance, and to view information that has currently been learned by the protocol, such as the designated bridge per MST instance. To configure the ports in an MST instance:
STEP 1 Click Spanning Tree > MSTP Interface Settings. The MSTP Interface Settings

Page displays.

Instance equals ToSelect the MSTP instance to be configured. Interface Type equals toSelect whether to display the list of ports or LAGs.
The MSTP parameters for the interfaces on the instance are displayed.
STEP 3 Select an interface, and click Edit. The Edit Interface Settings Page displays. STEP 4 Enter the parameters.
Instance IDSelect the MST instance to be configured. InterfaceSelect the interface for which the MSTI settings are to be defined. Interface PrioritySet the port priority for the specified interface. and MST instance. Path CostSet the port contribution to the root path cost or use the default value. The root path cost is the cost of the switch to the Root Bridge of the specified MST instance.
Port StateDisplays the MSTP status of the specific port on a specific MST instance. The parameters are defined as: DisabledSTP is currently disabled. BlockingThe port on this instance is currently blocked, and cannot forward traffic (with the exception of BPDU data) or learn MAC addresses. ListeningThe port on this instance is in Listening mode. The port cannot forward traffic, and cannot learn MAC addresses. LearningThe port on this instance is in Learning mode. The port cannot forward traffic, but it can learn new MAC addresses. ForwardingThe port on this instance is in Forwarding mode. The port can forward traffic and learn new MAC addresses.

MLD Snooping

IGMP Querier VersionSelect the IGMP version used if the switch becomes the elected querier. Select IGMPv3 if there are switches and/or multicast routers in the VLAN that perform source-specific IP multicast forwarding.
To support selective multicast forwarding (IPv6), Bridge Multicast filtering must be enabled, and MLD Snooping must be enabled globally and for each relevant VLAN.
NOTE The switch supports MLD Snooping only on static VLANs. It does not support MLD
Snooping on dynamic VLANs The switch uses this feature to build Multicast membership lists. It uses the lists to forward Multicast packets only to switch ports where there are host nodes that are members of the Multicast groups. The switch does not support MLD Querier. Hosts use the MLD protocol to report their participation in Multicast sessions. The switch supports two versions of MLD snooping: MLDv1 snooping detects MLDv1 control packets, and sets up traffic bridging based on IPv6 destination Multicast addresses. MLDv2 snooping uses MLDv2 control packets to forward traffic based on the source IPv6 address, and the destination IPv6 Multicast address.
The actual MLD version is selected by the Multicast router in the network. In an approach similar to IGMP snooping, MLD frames are snooped as they are forwarded by the switch from stations to an upstream Multicast router and vice versa. This facility enables a switch to conclude the following: On which ports stations interested in joining a specific Multicast group are located On which ports Multicast routers sending Multicast frames are located
This knowledge is used to exclude irrelevant ports (ports on which no stations have registered to receive a specific Multicast group) from the forwarding set of an incoming Multicast frame.
If you enable MLD snooping in addition to the manually-configured Multicast groups, the result is a union of the Multicast groups and port memberships derived from the manual setup and the dynamic discovery by MLD snooping. However, only the static definitions are preserved when the system is rebooted. To enable MLD Snooping:
STEP 1 Click Multicast > MLD Snooping. The MLD Snooping Page opens. STEP 2 Enable or disable MLD Snooping Status. MLD Snooping Status globally enables
the device monitoring network traffic to determine which hosts have requested to receive Multicast traffic. The switch performs MLD Snooping if MLD snooping and Bridge Multicast filtering are both enabled. The MLD Snooping Table block lists the operational MLD snooping information for the VLANs on the switch. For a description of the table columns, see STEP 3.

To configure an IPv6 Tunnel:
STEP 1 In Layer 2 mode, click Administration > Management Interface > IPv6 Tunnel.
In Layer 3 mode, click IP Configuration > Management and IP Interface > IPv6 Tunnel. The IPv6 Tunnel Page opens.
Tunnel NumberDisplays the automatic tunnel router domain number. Tunnel TypeAlways displayed as ISATAP. Source IPv4 AddressDisable the ISATAP tunnel, or enable the ISATAP tunnel over an IPv4 interface. The IPv4 address of the selected IPv4 interface used to form part of the IPv6 address over the ISATAP tunnel interface. The IPv6 address has a 64-bit network prefix of fe80::, with the rest of the 64-bit formed by concatenating 0000:5EFE and the IPv4 address. -
AutoAutomatically selects the lowest IPv4 address from among all of
its configured IPv4 interfaces.
NoneDisable the ISATAP tunnel. ManualManually configure an IPv4 address. The IPv4 address
configured must be one of the IPv4 addresses at the switch IPv4 interfaces.
Tunnel Router's Domain NameA global string that represents a specific automatic tunnel router domain name. The name can either be the default name (ISATAP) or a user defined name. Query IntervalThe number of seconds from 10-3600 between DNS queries (before the IP address of the ISATAP router is known) for this tunnel. The interval can be the default value (10 seconds) or a user defined interval. ISATAP Solicitation IntervalThe number of seconds from 10-3600 between ISATAP router solicitations messages, when there is no active ISATAP router. The interval can be the default value (10 seconds) or a user defined interval.
ISATAP RobustnessUsed to calculate the interval for the DNS or router solicitation queries. The bigger the number, the more frequent the queries. The default value is 3. The range is 1-20.
NOTE The ISATAP tunnel is not operational if the underlying IPv4 interface is

not in operation.

STEP 3 Click Apply. The tunnel is defined, and the switch is updated.
Defining IPv6 Neighbors Information
The IPv6 Neighbors Page enables configuring and viewing the list of IPv6 neighbors on the IPv6 interface. The IPv6 Neighbor table (also known as IPv6 Neighbor Discovery Cache) displays the MAC addresses of the IPv6 neighbors that are in the same IPv6 subnet as the switch. This is used to verify the reachability of this neighbor. This is the IPv6 equivalent of the IPv4 ARP table. When the switch needs to communicate with its neighbors, the switch uses the IPv6 Neighbor Table to determine the MAC addresses based on their the IPv6 addresses. This page displays the neighbors that were automatically detected or manually configured entries. Each entry displays to which interface the neighbor is connected, the neighbors IPv6 and MAC addresses, the entry type (static or dynamic), and the state of the neighbor. To define IPv6 neighbors:

STEP 1 Click Security > Management Access Authentication. The Management Access
Authentication Page displays.
STEP 2 Select an access method from the Application list. STEP 3 Use the arrows to move the authentication method between the Optional Methods
column and the Selected Methods column. The first method selected is the first method that is used.

Access Profiles

RADIUSUser is authenticated on a RADIUS server. You must have configured one or more RADIUS servers. TACACS+User authenticated on the TACACS+ server. You must have configured one or more TACACS+ servers. NoneUser is allowed to access the switch without authentication. LocalUsername and password is checked against the data stored on the local switch. These username and password pairs are defined in the User Accounts Page.
NOTE The Local or None authentication method must always be
selected last. All authentication methods selected after Local or None are ignored.
STEP 4 Click Apply. The selected authentication methods are associated with the access

method.

Management Access Authentication configures the authentication methods to be used to authenticate and authorize users from different management access methods. Management Access Profiles limit management access from specific interfaces and/or sources. Only users who pass both the active access profile and management access authentication are given management access to the switch. Access Profile Rules, Filters, and Elements Access profiles consist of rules for allowing access to the switch. Each access profile can consist of one or more rules. The rules are executed in order of their priority within the access profile (top to bottom). Rules are composed of filters that include the following elements: Access MethodsMethods for accessing and managing the switch: Telnet Secure Telnet (SSH) Hypertext Transfer Protocol (HTTP)
Secure HTTP (HTTPS) Simple Network Management Protocol (SNMP) All of the above
ActionPermit or deny access to an interface or source address. InterfaceWhich ports, LAGs, or VLANs are permitted to access or denied access to the web-based switch configuration utility. Source IP AddressIP addresses or subnets. Access to management methods might differ among user groups. For example, one user group might be able to access the switch module only by using an HTTPS session, while another user group might be able to access the switch module by using both HTTPS and Telnet sessions.

STEP 2 Select the Filter field, and an access profile. Click Go.
The selected access profile is displayed in the Profile Rule Table.
STEP 3 Click Add to add a rule to it. The Add Profile Rule Page displays. STEP 4 Enter the parameters.
Access Profile NameSelect an access profile. Rule PriorityEnter the rule priority. When the packet is matched to a rule, user groups are either granted or denied access to the switch. The rule priority is essential to matching packets to rules, as packets are matched on a first-fit basis. Management MethodSelect the management method for which the rule is defined. The options are: AllAssigns all management methods to the rule. TelnetUsers requesting access to the switch who meet the Telnet access profile criteria are permitted or denied access. Secure Telnet (SSH)Users requesting access to the switch who meet the Telnet access profile criteria, are permitted or denied access.
HTTPAssigns HTTP access to the rule. Users requesting access to the switch who meet the HTTP access profile criteria, are permitted or denied. Secure HTTP (HTTPS)Users requesting access to the switch who meet the HTTPS access profile criteria, are permitted or denied. SNMPUsers requesting access to the switch who meet the SNMP access profile criteria are permitted or denied.
ActionSelect Permit to permit the users that attempt to access the switch by using the configured access method from the interface and IP source defined in this rule. Or select Deny to deny access. Applies to InterfaceSelect the interface attached to the rule. The options are: AllApplies to all ports, VLANs, and LAGs. User DefinedApplies only to the port, VLAN, or LAG selected.
IP VersionSelect the supported IP version of the source address: IPv6 or IPv4. IP AddressEnter the source IP address. MaskSelect the format for the subnet mask for the source IP address, and enter a value in one of the field: Network MaskSelect the subnet to which the source IP address belongs and enter the subnet mask in dotted decimal format. Prefix LengthSelect the Prefix Length and enter the number of bits that comprise the source IP address prefix.

The 802.1x is an IEEE standard for port based network access control. The 802.1x framework enables a device (the supplicant) to request port access from a remote device (authenticator) to which it is connected. Only when the supplicant requesting port access is authenticated and authorized is the supplicant permitted to send data to the port. Otherwise, the authenticator discards the supplicant data unless the data is sent to a Guest VLAN and/or non-authenticated VLANs. Authentication of the supplicant is performed by an external RADIUS server through the authenticator. The authenticator monitors the result of the authentication. In the 802.1x standard, a device can be a supplicant and an authenticator at a port simultaneously, requesting port access and granting port access. However, this device is only the authenticator, and does not take on the role of a supplicant. The following varieties of 802.1X exist: Single session 802.1X: A1Single-session/single host. In this mode, the switch, as an authenticator supports one 802.1x session and grants permission to use the port to the authorized supplicant at a port. All the access by the other devices received from the same port are denied until the authorized supplicant is no longer using the port or the access is to the unauthenticated VLAN or guest VLAN. Single session/multiple hostsThis follows the 802.1x standard. In this mode, the switch as an authenticator allows any device to use a port as long as it has been granted permission to a supplicant at the port.
Multi-Session 802.1XEvery device (supplicant) connecting to a port must be authenticated and authorized by the switch (authenticator) separately in a different 802.1x session. This is the only mode that supports Dynamic VLAN Assignment (DVA).
Dynamic VLAN Assignment (DVA) Dynamic VLAN Assignment (DVA) is also referred as RADIUS VLAN Assignment in this guide. When a port is in Multiple Session mode and is DVA-enabled, the switch automatically adds the port as an untagged member of the VLAN that is assigned by the RADIUS server during the authentication process. The switch classifies untagged packets to the assigned VLAN if the packets are originated from the devices or ports that are authenticated and authorized.
For a device to be authenticated and authorized at a port with DVA enabled: The RADIUS server must authenticate the device and dynamically assign a VLAN to the device. The assigned VLAN must not be the default VLAN and must have been created at the switch. The switch must not be configured to use both a DVA and a MAC-based VLAN group together. A RADIUS server must support DVA with RADIUS attributes tunnel-type (64) = VLAN (13), tunnel-media-type (65) = 802 (6), and tunnel-privategroup-id = a VLAN ID.

STEP 5 Click Apply. The Add MAC Based ACE is defined, and the switch is updated.
IPv4-based ACLs are used to check IPv4 packets, while other types of frames, such as ARPs, are not checked.
The following fields can be matched: IP protocol (by name for well-known protocols, or directly by value) Source/destination ports for TCP/UDP traffic Flag values for TCP frames ICMP and IGMP type and code Source/destination IP addresses (including wildcards) DSCP/IP-precedence value
NOTE ACLs are also used as the building elements of flow definitions for per-flow QoS
handling (see QoS Advanced Mode). The IPv4 Based ACL Page enables adding ACLs to the system. The rules are defined in the IPv4 Based ACE Page. IPv6 ACLs are defined in the IPv6 Based ACL Page.
Defining an IPv4-based ACL
To define an IPv4-based ACL:
STEP 1 Click Access Control > IPv4 Based ACL. The IPv4 Based ACL Page opens.
This page displays all currently defined IPv4-based ACLs.
STEP 2 Click Add. The Add IPv4 Based ACL Page opens. STEP 3 Enter the name of the new ACL in the ACL Name field. The names are
STEP 4 Click Apply. The IPv4-based ACL is defined, and the switch is updated.
Adding Rules (ACEs) to an IPv4-Based ACL
To add rules (ACEs) to an IPv4-based ACL:
STEP 1 Click Access Control > IPv4 Based ACE. The IPv4 Based ACE Page opens. STEP 2 Select an ACL, and click Go. All currently-defined IP ACEs for the selected ACL are

displayed.

ACL NameDisplays the name of the ACL. PriorityEnter the priority. ACEs with higher priority are processed first. ActionSelect the action assigned to the packet matching the ACE. The options are as follows: PermitForward packets that meet the ACE criteria. DenyDrop packets that meet the ACE criteria. ShutdownDrop packet that meets the ACE criteria and disable the port to which the packet was addressed. Ports are reactivated from the Port Management page.
STEP 3 Click Add. The Add IPv4 Based ACE Page opens. STEP 4 Enter the parameters.
ProtocolSelect to create an ACE based on a specific protocol or protocol ID. Select Any (IPv4) to accept all IP protocols. Otherwise select one of the following protocols from the drop-down list: ICMPInternet Control Message Protocol IGMPInternet Group Management Protocol IP in IPIP in IP encapsulation TCPTransmission Control Protocol EGPExterior Gateway Protocol IGPInterior Gateway Protocol UDPUser Datagram Protocol HMPHost Mapping Protocol RDPReliable Datagram Protocol. IDPRInter-Domain Policy Routing Protocol IPV6IPv6 over IPv4 tunneling IPV6:ROUTMatches packets belonging to the IPv6 over IPv4 route through a gateway IPV6:FRAGMatches packets belonging to the IPv6 over IPv4 Fragment Header
IDRPInter-Domain Routing Protocol RSVPReSerVation Protocol AHAuthentication Header IPV6:ICMPInternet Control Message Protocol EIGRPEnhanced Interior Gateway Routing Protocol OSPFOpen Shortest Path First IPIPIP in IP PIMProtocol Independent Multicast L2TPLayer 2 Tunneling Protocol ISISIGP-specific protocol

To establish a connection to the console interface by using a terminal emulation application (Microsoft HyperTerminal in Windows XP is used here as an example), configure the application as follows:
STEP 1 In the PC desktop, click the Start button. STEP 2 Select Programs > Accessories > Communications > HyperTerminal. The
HyperTerminal - Connection Description window displays.
STEP 3 Enter a name for this connection, and optionally select an icon for the application
shortcut that is created.
STEP 4 Click OK. The Connect To window displays. STEP 5 If you connected to the switch with serial cable, select the COM port that links your
PC to the switch from the Connect drop-down list. Otherwise, select TCP/IP.
STEP 6 Continue to the Communicating by Using a Serial Cable Connection section
or the Communicating By Using a TCP/IP Connection section.
Communicating by Using a Serial Cable Connection
In this procedure, Com 1 is used for the example. The parameter on your system might be different. To display the console menu:
STEP 1 Configure the COM1 Properties > Port Settings with the following connection
parameters: Rate in bits per second = 115,200 Data bits = 8 Parity = None Stop bits = 1 Flow control = None
STEP 2 Click OK. The HyperTerminal window displays. STEP 3 In the HyperTerminal window, press Enter once or twice until the login menu
displays. Press Ctrl-R to refresh the Menu CLI Login or to jump to the Menu CLI Login from any other window.
STEP 4 Enter cisco (default) as the User Name. STEP 5 Enter the password cisco (default). STEP 6 Press Enter. NOTE If this is the first time you have logged in, or the switch has been reset to factory
defaults, you are asked to change your password. (See the Username & Password Settings section to create and save a new password.)
STEP 7 Select Execute or press Enter. The Switch Main Menu displays. STEP 8 Continue to the Console Interface Main Menu section.
Communicating By Using a TCP/IP Connection
It is assumed that in the terminal emulation application, you have selected TCP/IP.
NOTE Telnet must be enabled on the switch.
To display the console menu:
STEP 1 Enter the IP address of the switch in the Host Address field. STEP 2 Click OK. The terminal emulation displays. STEP 3 Press Enter once or twice until the login menu displays. Press Ctrl-R to refresh the
Menu CLI Login or to jump to the Menu CLI Login from any other window.
STEP 4 Select Edit to allow modification of the parameters. STEP 5 Enter cisco (default) as the User Name. STEP 6 Enter the password cisco (default). STEP 7 Press Enter. NOTE If this is the first time you have logged in or the switch has been reset to factory

SSL Certificate Generation
Path: Switch Main Menu > System Configuration Menu > Security Settings Use Certificate Generation to create a device-generated SSL certificate. Public Key LengthSpecifies the SSL RSA key length. (Range: 5122048) Organization NameSpecifies the organization name. (164 characters) Locality or City NameSpecifies the location or city name. (164 characters) State or Province NameSpecifies the state or province name. (164 characters) Country NameSpecifies the country name. (use 2 character code) Validity TermSpecifies number of days certification is valid. (Range: 30 3650)

Show Certificate

Path: Switch Main Menu > System Configuration Menu > Security Settings Use Show Certificate to view the internal SSL certificate.
Disable Active Management Access Profile
Path: Switch Main Menu > System Configuration Menu > Security Settings Use this option to disable management access profiles. If you choose this option, you are prompted for confirmation. Type Y to confirm.
Path: Switch Main Menu > System Configuration Menu Use the VLAN Management menu to set the default VLAN. Changes to the default VLAN take effect only after you reboot the switch.
Cisco Small Business 300 Series Managed Switch Administration Guide 304
Select Default VLAN Setup to display the Default VLAN Setup.

IP Configuration

Path: Switch Main Menu > System Configuration Menu > IP Configuration Use the IP Configuration menu to configure the following options: IPv4 Address Configuration IPv6 Address Configuration HTTP Configuration HTTPS Configuration Network Configuration IPv4 Default Route (Layer 3 devices only)
IPv4 Address Configuration
Path: Switch Main Menu > System Configuration Menu > IP Configuration Use the IPv4 Address Configuration Menu to configure the switch IPv4 address.

IPv4 Address Settings

Path: Switch Main Menu > System Configuration Menu > IP Configuration Use IP Address - Add/IP Address Settings to add or change the switch IPv4 address. IPv4 AddressEnter the IPv4 address that you want to assign to the switch if the switch is disabled as a DHCP client. Verify that the IP address does not conflict with another device on the network. Subnet MaskEnter the subnet mask that you want to assign to the switch. Default GatewayEnter the default gateway address for the switch (IPv4 Address Settings). Management VLANEnter the management VLAN ID (IPv4 Address Settings). DHCP ClientUse the Spacebar to enable or disable the DHCP client.
Interface TypeSelect the interface type, LAG, VLAN, or GE (IPv4 Address Add). Interface NumberEnter the interface number (IPv4 Address Add).

IPv4 Address Table

Path: Switch Main Menu > System Configuration Menu > IP Configuration The IP Address Table displays the IPv4 addresses in Layer 3. Delete/KeepUse the SPACE bar to toggle between Delete and Keep. When the action is executed, this entry is acted upon based on your selection.

Quick Start Guide

Cisco Small Business

300 Series Managed Switches

Welcome

Thank you for choosing the Cisco 300 Series Managed Switch, a Cisco Small Business network communications device. This device is designed to be operational right out of the box as a standard bridge. In the default configuration, it will forward packets between connecting devices after power up. Package Contents Cisco SF 300-08, SF 302-08, SF 302-08MP, SF 302-08P, SG 300-10, SG 300-10MP, SG 300-10P, SG 300-20, SF 300-24, SF 300-24P, SG 300-28, SG 300-28P, SF 300-48, SF 300-48P, or SG 300-52 Managed Switch Rackmount Kit Wall Mount Kit Power Cord (power adapter included with 8-port devices) This Quick Start Guide Product CD Serial Cable Rubber Feet This guide will familiarize you with the layout of the managed switch and describe how to deploy the device in your network. For additional information, see www.cisco.com/smb.
Mounting the Cisco Switch
There are three ways to physically install the switch: Set the switch on a flat surface. Mount the switch on a wall (8-port devices only). Mount the switch in a standard rack (1 rack unit high). Do not deploy the device in a location where any of the following conditions exist: High Ambient TemperatureThe ambient temperature must not exceed 104 degrees Fahrenheit (40 degrees Centigrade). Reduced Air FlowBoth side panels must be unobstructed to prevent overheating.

Series Managed Switches

Mechanical OverloadingThe device should be level, stable, and secure to prevent it from sliding or shifting out of position. Circuit OverloadingAdding the device to the power outlet must not overload that circuit.

Rack-Mount Placement

To rack-mount the switch in any standard rack, attach the rackmount brackets to the sides of the switch with the supplied hardware and secure the brackets tightly. For stability, load the rack from the bottom to the top, with the heaviest devices on the bottom. A top-heavy rack is likely to be unstable and may tip over.

CAUTION

Wall Mounting
Only the 8-port models of the switch can be wall-mounted.
NOTE The switch should be mounted so that the ports face up or down. Do not mount the switch with the ports to the side.
There is a wall-mount kit packed with your switch. The dimensions for the mount kit are as follows:

196243

mm/0.4 in
2 22.2 mm/0.9 in 3 6.8 mm/0.3 in

4 17.6 mm/0.7 in

Mount the managed switch to the wall by drilling two pilot holes 3.7 inches (95 mm) apart, attaching the provided anchors and screws to the wall, then sliding the switch into position on the screws. The switch should have a minimum of 5 inches (130 mm) of clearance on all sides.
WARNING Insecure mounting may damage the device or cause injury.
Cisco is not responsible for damages incurred by insecure wallmounting.
Connecting Network Devices
To connect the managed switch to the network:
STEP 1 Connect the Ethernet cable to the Ethernet port of a computer,
printer, network storage, or other network device.
STEP 2 Connect the other end of the network Ethernet cable to one of the
numbered managed switch Ethernet ports. The LED of the port lights if the device connected is active. Refer to Features of the Cisco Small Business Managed Switch, page 9 for details about the different ports and LEDs on each switch.
STEP 3 Repeat Step 1 and Step 2 for each device you want to connect to

the managed switch.

NOTE Cisco strongly recommends using Cat5 or better cable for Gigabit connectivity. When you connect your network devices, do not exceed the maximum cabling distance of 100 meters (328 feet). It can take up to one minute for attached devices or the LAN to be operational after it is connected. This is normal behavior.

Power over Ethernet (PoE) Considerations
If your switch is one of the PoE models, consider the following: As a PSE (Power Sourcing Equipment) device, the switch can deliver a maximum of 15.4 Watts per PoE port to a PD (Powered Device).
Configuring the Cisco Small Business Managed Switch
Before You Begin Verify that a computer with Microsoft Internet Explorer (version 6 and higher) or Firefox (version 2.0 or higher) is available. The switch can be accessed and managed by two different methods; over your IP network using the web-based interface, or by the menu CLI through the console port. Using the console port requires advanced user skills. The switch works with Cisco Small Business network tools and services including the Cisco FindIT Network Discovery Utility that enables you to automatically discovers all supported Cisco Small Business devices in the same local network segment as your PC. You can get a snapshot view of each device or launch the product configuration utility to view and configure the settings. For more information, see www.cisco.com/go/findit.
Accessing and Managing Your Switch Using the WebBased Interface
In order to access the switch with a web-based interface, you will need to know the IP address the switch is using. The default configuration of the switch is to use its factory default IP address of 192.168.1.254 until it has obtained an IP address from a DHCP server. When the switch is using the factory default IP address, its power LED flashes continuously. When the switch is using a DHCP assigned IP address or an administrator configured static IP address, the power LED is on solid.
NOTE If the managed switch IP address is changed, either by a DHCP server or manually, your access to the managed switch will be lost and you must enter the new IP address to use the web-based interface.
Use the Web-Based Interface To configure the managed switch:
STEP 1 Power on the computer and the switch. STEP 2 Connect the computer to the switch. You can connect to the same
IP subnet as the switch by connecting them directly with an Ethernet cable, or by connecting to the same LAN where the switch is located through other switches. You can also connect your computer to the switch from another IP subnet through one or more IP routers.

300 Series Managed Switches 5
STEP 3 Set up the IP configuration on your computer.
If the switch is using the default static IP address of 192.168.1.254, you must chose an IP address in the range of 192.168.1.1-192.168.1.253 that is not already in use.
b. If the IP addresses will be assigned by DHCP, make sure your DHCP server is running and can be reached from the switch and the computer. You may need to disconnect and reconnect the devices for them to discover their new IP addresses from the DHCP server.
NOTE Details on how to change the IP address on your computer depend upon the type of architecture and operating system you are using. Use your computers local Help and Support functionality and search for IP Addressing. STEP 4 Open a Web browser window. If you are prompted to install an
Active-X plug-in when connecting to the device, follow the prompts to accept the plug-in.
STEP 5 Enter the switch IP address in the address bar and press Enter. For
example, http://192.168.1.254. The Managed Switch Login Page displays.
STEP 6 Enter the default login information:
Username is cisco Default password is cisco (passwords are case sensitive)
STEP 7 If this is the first time that you have logged on with the default
username and password, the Change Password Page opens. Enter a new administrator password and then click Apply. Make sure that any configuration changes made are saved before exiting from the web-based interface by clicking on the Save icon. Exiting before you save your configuration will result in all changes being lost.
The Getting Started window displays. You are now ready to configure the switch. Refer to the Cisco Small Business Managed Switch Administration Guide for further information.
Use the console port To configure the managed switch:
STEP 1 Connect a computer to the switch console port using the provided

console port cable.

STEP 2 Start a console port utility such as HyperTerminal on the computer. STEP 3 Configure the utility with the following parameters:
115200 bits per second 8 data bits no parity 1 stop bit no flow control
STEP 4 Enter a user name and password. User names and passwords are
both case sensitive and alpha-numeric. The default username is cisco, and the default password is cisco.

STEP 5 If this is the first time that you have logged on with the default
username and password, the Change User Password Page opens. Select Edit, enter a new administrator password and then select Execute. Make sure that any configuration changes made are saved before exiting.
You are now ready to configure the switch. Refer to the Cisco Small Business Managed Switch Administration Guide for further information. Next Steps If you are not using DHCP on your network, set the connection type on the managed switch to Static and change the static IP address and subnet mask to match your network topology. Save your settings Return your computer to its original settings
These tasks can be accomplished by using the procedures in the Cisco Small Business Managed Switch Administration Guide.
Troubleshoot Your Connection
If you cannot access your switch from the web-based interface, the switch may not be reachable from your computer. You can test network connections by using ping on a computer running Windows:
STEP 1 Open a command window by using Start > Run and enter cmd. STEP 2 At the Command window prompt enter ping and the managed
switch IP address. For example ping 192.168.1.254 (the default static IP address of the managed switch). If you can reach the switch, you should get a reply similar to the following: Pinging 192.168.1.254 with 32 bytes of data: Reply from 192.168.1.254: bytes=32 time<1ms TTL=128 If you cannot reach the switch, you should get a reply similar to the following: Pinging 192.168.1.254 with 32 bytes of data: Request timed out. Possible Causes and Resolutions No Power: Power up the switch and your computer if they are turned off. Bad Ethernet connection: Check the LEDs for proper indications. Check the connectors of the Ethernet cable to ensure they are firmly plugged into the switch and your computer. Bad Console port connection: Check the console cable connectors to make sure they are firmly plugged into the switch and your computer. Make sure the console port utility is configured with the correct parameters. Wrong IP address: Make sure you are using the correct IP address of the switch. You can determine the status of where you received the current IP address of the switch from the system LED. You can determine the current IP address of the switch from the menu CLI through the console port interface, or from your network administrator. Make sure that no other device is using the same IP address as the switch.
No IP route: If the switch and your computer are in different IP subnets, you need one or more routers to route the packets between the two subnets. Unusually long access time: Due to the standard spanning tree loop detection logic, adding new connections may take 30 to 60 seconds for the affected interfaces and/or LAN to become operational.

Features of the Cisco Small Business Managed Switch
This section describes the exterior of the managed switches including ports, LEDs, and connections.

Front Panel Ports

The ports and LEDs are located on the front panel of the switch.
RJ-45 Ethernet PortsUse these ports to connect network devices, such as computers, printers, and access points, to the switch. MiniGBIC (if present)The miniGBIC (gigabit interface converter) ports are connection points for miniGBIC modules, so the managed switch can uplink to other switches by using optical fiber. MiniGBIC ports are compatible with Cisco miniGBIC modules MGBSX1, MGBLH1, MGBLX1, MGBBX1, MFELX1, MFEFX1, and MFEBX1, as well as other brands of miniGBIC modules. MiniGBIC interface is a combination port, shared with one other RJ-45 interface. When the MiniGBIC is active, the adjacent RJ-45 port is disabled. The LEDs of the corresponding RJ-45 port light to respond to the miniGBIC interface traffic.

Front Panel LEDs

System LED(Green) Lights steady when the switch is powered on, and flashes when booting, performing self tests, and acquiring an IP address. If the LED flashes Amber, the switch has detected a hardware failure. LINK/ACT LED(Green) Located on the left of the port. Lights steady when a link between the corresponding port and another device is detected. Flashes when the port is passing traffic.
NOTE The System and LINK/ACT LEDs are on each model of the switch. The following LEDs are only present on switch models that have those capabilities:
PoE (if present)(Amber) Located on the right of the port. Lights steady to indicate that power is being supplied to a device attached to the corresponding port. 100M LED (if present)(Green) Located on the right of the port. Lights steady when another device is connected to the port, is powered on, and a 100 Mbps link is established between the devices. When the LED is off, the connection speed is under 100 Mbps or nothing is cabled to the port. Gigabit LED (if present)(Green) Located on the right of the port. Lights steady when another device is connected to the port, is powered on, and a 1000 Mbps link is established between the devices. When the LED is off, the connection speed is under 1000 Mbps or nothing is cabled to the port. MiniGBIC (if present)(Green) Located on the right of the port. Lights steady when a connection is made through the shared RJ-45 port. Flashes when the port is passing traffic.
Additional Front Panel Features
The switch also has a reset button.
The switch can be reset by inserting a pin or paper clip into the reset opening. See Returning the Device to the Factory Default Settings for details.

Back Panel

The power port and console port are located on the back panel of the managed switch.

PowerThe Power port is where you will connect the switch to power. ConsoleThe Console port is where you can connect a serial cable to a computers serial port for configuration using a terminal emulation program.
Returning the Device to the Factory Default Settings
To use the Reset button to reboot or reset the managed switch, do the following: To reboot the managed switch, press the Reset button for less than 10 seconds. To restore the managed switch configuration to the factory default settings: 1. Disconnect the managed switch from the network or disable all DHCP servers on your network. 2. With the power on, press-and-hold the Reset button for more than 10 seconds.

Support

Where to Go From Here
Cisco Small Business Support Community Cisco Small Business Support and Resources Phone Support Contacts
https://supportforums.cisco.com/community/ netpro/small-business http://www.cisco.com/cisco/web/solutions/ small_business/ small_business_support_and_resources.html http://www.cisco.com/en/US/support/ tsd_cisco_ small_business_support_center_contacts.html http://www.cisco.com/cisco/software/ navigator.html?a=a&i=rpm Select a link to download firmware for Cisco Small Business Products.
Cisco Small Business Firmware Downloads
Product Documentation Cisco Small Business Managed Switches 300 Series Managed Switches Quick Start Guide 300 Series Managed Switches Administration Guide Regulatory, Compliance, and Safety Information Warranty Information Cisco Small Business Cisco Partner Central for Small Business (Partner Login Required) Cisco Small Business Home http://www.cisco.com/web/partners/sell/smb http://www.cisco.com/go/ smallbizmanagedswitches http://www.cisco.com/en/US/docs/switches/ lan/csbms/sf30x_sg30x/quick_start/7819252-01.pdf http://www.cisco.com/en/US/docs/switches/ lan/csbms/sf30x_sg30x/ administration_guide/78-19308-01.pdf http://www.cisco.com/en/US/docs/switches/ lan/csb_switching_general/rcsi/ RCSI_Class_A_Switches.pdf http://www.cisco.com/go/warranty

http://www.cisco.com/smb

Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA www.cisco.com Small Business Support US: 1-866-606-1866 (Toll Free, 24/7) Small Business Support, Global: www.cisco.com/go/sbsc
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/ trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R) 2010 Cisco Systems, Inc. All rights reserved. 78-19252-01