Cisco 2960 X Owners Manual
Here you can view all the pages of manual Cisco 2960 X Owners Manual. The Cisco manuals for Switch are available online for free. You can easily download all the documents as PDF.
Page 71
DETAILED STEPS PurposeCommand or Action Enterstheglobalconfigurationmode.configureterminal Example: Switch#configureterminal Step 1 Setsthesystemcontactstring.snmp-servercontacttext Example:Switch(config)#snmp-servercontactDialSystemOperatoratbeeper21555 Step 2 Setsthesystemlocationstring.snmp-serverlocationtext Example:Switch(config)#snmp-serverlocationBuilding3/Room222 Step 3 ReturnstoprivilegedEXECmode.end Example: Switch(config)#end Step 4 Limiting TFTP Servers Used Through SNMP...
Page 72
DETAILED STEPS PurposeCommand or Action Enterstheglobalconfigurationmode.configureterminal Example: Switch#configureterminal Step 1 LimitstheTFTPserversusedforconfigurationfilecopiesthroughSNMP totheserversintheaccesslist. snmp-servertftp-server-list access-list-number Step 2 Example:Switch(config)#snmp-servertftp-server-list44 Foraccess-list-number,enteranIPstandardaccesslistnumberedfrom1 to99and1300to1999. Createsastandardaccesslist,repeatingthecommandasmanytimesas necessary....
Page 73
Table 11: Commands for Displaying SNMP Information Default SettingFeature DisplaysSNMPstatistics.showsnmp DisplaysinformationonthelocalSNMPengineandallremote enginesthathavebeenconfiguredonthedevice. showsnmpengineID DisplaysinformationoneachSNMPgrouponthenetwork.showsnmpgroup DisplaysinformationonpendingSNMPrequests.showsnmppending DisplaysinformationonthecurrentSNMPsessions.showsnmpsessions DisplaysinformationoneachSNMPusernameintheSNMP userstable. YoumustusethiscommandtodisplaySNMPv3...
Page 74
secondlinespecifiesthedestinationofthesetrapsandoverwritesanyprevioussnmp-serverhostcommands forthehostcisco.com. Switch(config)#snmp-serverenabletrapsentitySwitch(config)#snmp-serverhostcisco.comrestrictedentity Thisexampleshowshowtoenabletheswitchtosendalltrapstothehostmyhost.cisco.comusingthecommunity stringpublic: Switch(config)#snmp-serverenabletrapsSwitch(config)#snmp-serverhostmyhost.cisco.compublic Thisexampleshowshowtoassociateauserwitharemotehostandtosendauth(authNoPriv)...
Page 75
CHAPTER 5 Configuring SPAN and RSPAN ThischapterdescribeshowtoconfigureSwitchedPortAnalyzer(SPAN)andRemoteSPAN(RSPAN). Unlessotherwisenoted,thetermswitchreferstoastandaloneswitchoraswitchstack. •FindingFeatureInformation,page65 •PrerequisitesforSPANandRSPAN,page65 •RestrictionsforSPANandRSPAN,page66 •InformationAboutSPANandRSPAN,page67 •HowtoConfigureSPANandRSPAN,page78 •MonitoringSPANandRSPANOperations,page92 •SPANandRSPANConfigurationExamples,page93 •AdditionalReferences,page95...
Page 76
RSPAN •WerecommendthatyouconfigureanRSPANVLANbeforeyouconfigureanRSPANsourceora destinationsession. Restrictions for SPAN and RSPAN SPAN TherestrictionsforSPANareasfollows: •Oneachswitch,youcanconfigureamaximumof4(2ifswitchisstackedwithCatalyst2960-Sswitches) sourcesessionsand64RSPANdestinationsessions.AsourcesessioniseitheralocalSPANsessionor anRSPANsourcesession. •ForSPANsources,youcanmonitortrafficforasingleportorVLANoraseriesorrangeofportsor...
Page 77
•SPANsessionsdonotinterferewiththenormaloperationoftheswitch.However,anoversubscribed SPANdestination,forexample,a10-Mb/sportmonitoringa100-Mb/sport,canresultindroppedor lostpackets. •WhenSPANorRSPANisenabled,eachpacketbeingmonitoredissenttwice,onceasnormaltraffic andonceasamonitoredpacket.MonitoringalargenumberofportsorVLANscouldpotentiallygenerate largeamountsofnetworktraffic. •YoucanconfigureSPANsessionsondisabledports;however,aSPANsessiondoesnotbecomeactive...
Page 78
beingmonitored,trafficthatgetsroutedfromanotherVLANtothesourceVLANcannotbemonitored; however,trafficthatisreceivedonthesourceVLANandroutedtoanotherVLANcanbemonitored. YoucanusetheSPANorRSPANdestinationporttoinjecttrafficfromanetworksecuritydevice.Forexample, ifyouconnectaCiscoIntrusionDetectionSystem(IDS)sensorappliancetoadestinationport,theIDSdevice cansendTCPresetpacketstoclosedowntheTCPsessionofasuspectedattacker. Local SPAN...
Page 79
Figure 5: Example of Local SPAN Configuration on a Device Stack Related Topics CreatingaLocalSPANSession,onpage78 CreatingaLocalSPANSessionandConfiguringIncomingTraffic,onpage80 Example:ConfiguringLocalSPAN,onpage93 Remote SPAN RSPANsupportssourceports,sourceVLANs,anddestinationportsondifferentswitches(ordifferentswitch stacks),enablingremotemonitoringofmultipleswitchesacrossyournetwork. ThefigurebelowshowssourceportsonSwitchAandSwitchB.ThetrafficforeachRSPANsessioniscarried...
Page 80
sourceswitchmusthaveeitherportsorVLANsasRSPANsources.Thedestinationisalwaysaphysicalport, asshownonSwitchCinthefigure. Figure 6: Example of RSPAN Configuration Related Topics CreatinganRSPANSourceSession,onpage85 CreatinganRSPANDestinationSession,onpage88 CreatinganRSPANDestinationSessionandConfiguringIncomingTraffic,onpage90 Examples:CreatinganRSPANVLAN,onpage94 SPAN and RSPAN Concepts and Terminology •SPANSessions •MonitoredTraffic •SourcePorts •SourceVLANs •VLANFiltering •DestinationPort •RSPANVLAN...