Cisco SG200 Series Administration Manual

Cisco SG200 Series Administration Manual

Sg200 series cisco small business 8-port smart switches
Hide thumbs Also See for SG200 Series:
Table of Contents

Advertisement

ADMINISTRATION
GUIDE
Cisco Small Business
SG200 Series 8-port Smart Switches

Advertisement

Table of Contents
loading

Summary of Contents for Cisco SG200 Series

  • Page 1 ADMINISTRATION GUIDE Cisco Small Business SG200 Series 8-port Smart Switches...
  • Page 2: Table Of Contents

    802.1X EAP Statistics IPv6 DHCP Statistics RADIUS Statistics RMON Logs RAM Memory Log Flash Memory Log Chapter 3: Administration Configuring System Settings Management Interface Configuring an IPv4 Management Interface Configuring an IPv6 Management Interface Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 3 DHCP Server Message Details Alternate TFTP Server and File Name Configuration File Download Details Setting DHCP Auto Configuration Firmware Recovery Over HTTP Downloading an Image or Boot Code File From the System Boot Prompt Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 4 Configuring LAGs Configuring LAG Settings Configuring LACP Configuring PoE Configuring PoE Properties Configuring PoE Port Settings Green Ethernet Configuring Green Ethernet Properties Configuring Green Ethernet Port Settings Chapter 5: VLAN Management Creating VLANs Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 5 Configuring a Multicast Forwarding Mode on all VLANs Configuring Multicast Properties on an Individual VLAN Configuring MAC Group Addresses Viewing the MAC Group Address Table Adding a Static MAC Group Address Table Entry Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 6 Configuring an Access Profile and Rules Modifying and Deleting Access Profiles and Rules Authentication Methods Storm Control Port Security Enabling Port Security Viewing and Configuring Secure MAC Addresses 802.1X Defining 802.1X Properties Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 7 Queue Configuration Recommendations Configuring Queues Mapping CoS/802.1p Priorities to Queues Mapping IP Precedence to Queues Mapping DSCP Values to Queues Defining Rate Limit Profiles Applying Rate Limit Profiles to Interfaces Traffic Shaping Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 8: Chapter 1: Getting Started

    IPv6 global address instead of IPv6 link local address to access the switch from your browser. • Screen resolutions at 800x600 or lower in Internet Explorer browsers and Firefox 3.6 are not supported by the web-based switch configuration utility. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 9: Launching The Utility

    Log In page remains displayed on the screen. When logging in by using HTTP or HTML, if you are provided an option to choose NOTE from more than one network port, select the lowest number port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 10: Logging Out

    Downloading and Backing Up the Configuration and Log Files). Save the Running Configuration by copying it to the Startup Configuration file type. After this save, the red X icon and the Save button no longer display. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 11: Quick Start Device Configuration

    RMON Statistics View Log RAM Memory Quick Change Device Password User Accounts Access Upgrade Device Software Upgrade/Backup Firmware/ Language Backup Device Download/Backup Configuration/ Configuration Configure QoS QoS Properties Configure Port Mirroring Port Mirroring Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 12: Window Navigation

    Select a language or load a new language file into the device. If the language required is displayed in the menu, select it. If not, select Download Language. For more information about adding a new language, refer to the Upgrade/Backup Firmware/Language page. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 13: Other Resources

    You can use the following links on the Getting Started page for additional information and assistance with using your switch: • Support—Displays the support web page for Cisco Small Business Managed Switches. • Forums—Displays the web page for the Cisco Small Business Support Community. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 14: Navigation Window

    < to go to the previous page, click > to go to the next page, and click >| to go to the last page. Use the Page <number> of <number> drop-down list to choose a particular page. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 15 Clear Table Click to clear the table entries. Close Click to return to the main page. If there are changes that were not applied to the Running Configuration, a message is displayed. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 16 Click Test to perform related tests. Clear Filter Click Clear Filter to redisplay data on a page with the default criteria. Click Go to filter the data displaying on a page using the selected criteria. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 17 After the sort is applied, an arrow appears in the column heading. You can click this arrow to reverse the sort order. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 18: Chapter 2: Viewing Statistics

    System Description—A description of the system. • System Location—Physical location of the switch. Click Edit to display the System Settings page and enter this value. (The characters ', ", %, and ? are not supported.) Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 19 Firmware MD5 Checksum—MD5 checksum of the active image. • Boot MD5 Checksum—MD5 checksum of the boot code. You can view settings for each switch port. To display the Port Settings page, click the port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 20 This table lists the information for each service that uses TCP or UDP: • Service Name—The commonly–used name of the service, if available, such as HTTP. • Type—The transport protocol used for this service (TCP or UDP). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 21: Configuring System Settings

    MAC address. For example, a switch with a MAC address of 010203040506 has the default hostname switch040506. Click Apply. Your changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 22: Interface Statistics

    To clear statistics counters: Click Clear Interface Counters to reset all counters to 0 for the selected interface. Click Clear All Interface Counters to reset all counters to 0 for all interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 23: Etherlike Statistics

    To clear statistics counters: Click Clear Interface Counters to reset all counters to 0 for the selected interface. Click Clear All Interface Counters to reset all counters to 0 for all interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 24: 802.1X Eap Statistics

    To clear statistics counters: Click Clear Interface Counters to reset all counters to 0 for the selected interface. Click Clear All Interface Counters to reset all counters to 0 for all interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 25: Ipv6 Dhcp Statistics

    DHCPv6 Request Packets Transmitted • DHCPv6 Renew Packets Transmitted • DHCPv6 Rebind Packets Transmitted • DHCPv6 Release Packets Transmitted • Total DHCPv6 Packets Transmitted Click Clear Counters to reset all counters to 0. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 26: Radius Statistics

    Unknown Types—Number of RADIUS packets of unknown type that were received by the switch. • Packets Dropped—Number of RADIUS packets dropped by the switch. Click Clear All Statistics to reset all counters to 0. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 27: Rmon

    • Broadcast Packets Received—Good broadcast packets received on the interface since the switch was last refreshed. This number does not include multicast packets. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 28 Frames of 512 to 1023 Bytes—512-byte to 1023-byte frames received on the interface since the switch was last refreshed. • Frames of 1024 to 1518 Bytes—1024-byte to 1518-byte frames received on the interface since the switch was last refreshed. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 29: Logs

    Severity—The log severity can be one of the following: Emergency (0)—System is unusable. Alert (1)—Action must be taken immediately. Critical (2)—Critical conditions. Error (3)—Error conditions. Warning (4)—Warning conditions. Notice (5)—Normal but significant conditions. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 30: Flash Memory Log

    Default—Entries from the startup and operational logs. • Startup—The first 32 log entries created during system restarts. • Operational—Log entries created during system operation. Select a log version to display. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 31 Click Backup Logs to open the Download/Backup Configuration/Log page, where you can use TFTP or HTTP to back up the log files to a TFTP server or network location. For more information, see Backing Up the Configuration File Logs. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 32: Chapter 3: Administration

    Time Settings • System Logs • File Management • Rebooting the Switch • Pinging Hosts • Configuring Control Packet Forwarding • Diagnostics • Enabling Bonjour • LLDP-MED • Configuring DHCP Client Vendor Options Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 33: Configuring System Settings

    NOTE: You can check the Set Default field to return the hostname to the default. Click Apply. The changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 34: Management Interface

    VLAN. Note that when you change the management VLAN, you must reassign any members of the previous management VLAN to the new VLAN to continue their management access. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 35 Changing the management IP address and IP Address Type terminates the current CAUTION management session. Changing the Management VLAN and its port memberships might disrupt your communication with the switch and thus might terminate the current management session. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 36: Configuring An Ipv6 Management Interface

    The table includes the default IPv6 address. The switch creates this address automatically by inserting standard byte values into its 48-bit MAC address to create a 64-bit IPv6 address in EUI-64 format, as described in RFC 3513. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 37: Ipv6 Default Router Table

    The IPv6 Default Router table lists the default router IP address for each IPv6 management address. A default router address consists of the link-local address of the IPv6 interface on the subnet. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 38: Viewing And Adding Ipv6 Neighbors

    The switch supports up to 16 static IPv6 neighbor entries. To add a static neighbor: Click Add. STEP 1 Enter an IPv6 global address (not including a prefix length). STEP 2 Enter the MAC address of the neighbor. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 39: Managing User Accounts

    STEP 3 and letters a-z (upper or lower) are allowed for user names. Enter a password between 0 and 64 characters (depending upon the Password STEP 4 Strength setting) and confirm the password. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 40: Changing A User Password

    STEP 1 Select the user to configure and click Edit. STEP 2 Enter a password between 0 and 64 characters (depending upon the Password STEP 3 Strength setting) and confirm the password. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 41: Deleting A User

    Deleting a User You can delete all users except the default user, typically the cisco user ID. To delete a user, select the user name in the User Accounts Table and click Delete. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 42: Enabling Management Services

    Idle Time—Time that has elapsed since the last activity from this user. • Session Time—Amount of time that has elapsed since this user logged in. • Session Type—Protocol in use for the management session (HTTP). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 43: Login History

    Use the System Time page to set the system time manually or to configure the system to acquire its time settings from an SNTP server. To display this page, click Administration > Time Settings > System Time in the navigation window. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 44 This field is for reference only. Select Daylight Saving to configure Daylight Savings Time (DST) settings, if STEP 5 applicable to your time zone. When selected, configure the following fields: Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 45 Configure the GMT Time Zone Offset by selecting the number of hours and STEP 4 minutes difference between the local time zone and Greenwich Mean Time (GMT), and specify a Time Zone Acronym. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 46: Configuring The Sntp Setting

    Ensure that the Use SNTP Server option is selected on the System Time page and STEP 1 that the Unicast or Broadcast mode is selected as required. On the SNTP Setting page, configure the following: STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 47 Bad Date Encoded—A bad date format was received from server. Version Not Supported—Server does not support the SNTP version configured on the switch. Server Unsynchronized—Switch time is not synchronized with the server. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 48 Authentication Key ID—If authentication is used, select the Authentication Key ID from the list. See Configuring SNTP Authentication for information on configuring authentication keys. • Polling Mode—Select Enable to allow the switch to send requests to this server. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 49 (Broadcast or Unicast). Global Parameters: • SNTP Client Version—The highest SNTP protocol version supported by the switch. • Last Update Time—The time of receipt of the most recent SNTP update. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 50: Configuring Sntp Authentication

    Select Enable to require the switch to authenticate to an SNTP server before STEP 2 synchronizing its time. Click Apply. Your changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 51: System Logs

    See the following topics for more information on the configuration pages available in the Administration > System Log menu: • Configuring Log Settings • Configuring Remote Log Servers Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 52: Configuring Log Settings

    Alert—Action is needed. • Critical—System is in a critical condition. • Error—System is in error condition. • Warning—System warning has occurred. • Notice—System is functioning properly, but a system notice has occurred. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 53: Configuring Remote Log Servers

    Syslog protocol. The default value is the well-known IANA Syslog port number, 514. • Minimum Severity—Only items that meet or exceed this severity level are sent to the remote server. See Configuring Log Settings for a description of the severity levels. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 54: File Management

    Downloading and Backing Up the Configuration and Log Files • Delete Configuration • Copying and Saving Configuration Files • DHCP Auto Configuration • Firmware Recovery Over HTTP • Downloading an Image or Boot Code File From the System Boot Prompt Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 55 Configuration. However, you can copy from the Mirror Configuration to other file types or to another device. • Firmware—The operating system. More commonly referred to as the image. • Boot Code—Controls the basic system startup and launches the firmware image. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 56: Upgrading And Backing Up Firmware And Language Files

    Back up the firmware image to a server. English is always the default language. You can also back up or restore the configuration files. See Downloading and NOTE Backing Up the Configuration and Log Files for more information. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 57 Click Apply to begin the upgrade or backup. A progress bar indicates the status of STEP 3 the file transfer. A typical image transfer might take 5-6 minutes to complete. Reboot the switch to use the new configuration or firmware. STEP 4 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 58: Downloading And Backing Up The Configuration And Log Files

    STEP 1 Log in the navigation window. Select the Transfer Method (HTTP or TFTP). STEP 2 For the Save Action, select Upgrade to download the file that will be specified STEP 3 below. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 59: Backing Up The Configuration File And Logs

    Click Administration > File Management > Download/Backup Configuration/ STEP 1 Log in the navigation window. Select the Transfer Method (HTTP or TFTP). STEP 2 For the Save Action, select Backup. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 60 The switch maintains three versions of each log. The Version 1 log is the current or most recently created log file, the Version 2 log is the next most recent, and the Version 3 log is the oldest. Click Apply. STEP 6 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 61: Delete Configuration

    To copy a file to the Startup or Backup Configuration file: Click Administration > File Management > Copy/Save Configuration in the STEP 1 navigation window. Select the Source File Name: STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 62: Dhcp Auto Configuration

    The Auto Configuration feature depends upon the proper configuration of other NOTE devices in the network, including a DHCP or BOOTP server, a TFTP server, and if necessary, a DNS server. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 63: Overview

    The TFTP server IP address can be deduced from the multiple sources in a DHCP reply. The switch makes its selection based on the following criteria, from the highest priority to the lowest: Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 64: Alternate Tftp Server And File Name

    When the switch gets the configuration file, the configuration is validated for errors. If the validation is successful, the switch copies the configuration to the Startup Configuration file type, stores the configuration file name in non-volatile memory, and reboots the unit. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 65 IP address 192.168.1.10. If the switch is unable to map its IP address to a hostname, Auto Configuration sends TFTP requests for the default configuration file host.cfg. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 66 TFTP servers. When a configuration file is successfully downloaded and saved to the Startup Configuration file type, the switch logs a message with severity level Alert prior to rebooting. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 67: Setting Dhcp Auto Configuration

    AutoInstall process terminated:Startup config is created • manually. • AutoInstall process is terminated :Boot file matched with the last downloaded file. • AutoInstall process is terminated:Failed to resolve the boot file name. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 68 DHCP, the file download process will begin. • Current Status—The status of the Auto Configuration process. Possible values are AutoInstall Complete or In Progress. Click Apply. Your changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 69: Firmware Recovery Over Http

    192. 1 68. 1 . 1 . Open a web browser and enter the IP address of the switch in the address bar STEP 3 (192. 1 68. 1 .254). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 70 If the transfer is aborted because the network is unreachable, the session times out after 45 seconds. After the session times out, you can begin the recovery process again. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 71: Downloading An Image Or Boot Code File From The System Boot Prompt

    STEP 2 Power up the switch. STEP 3 Stop the firmware load by pressing and holding <Ctrl> + C as the switch boots up. STEP 4 The boot-level command prompt displays: CFE> Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 72: Downloading An Image Or Boot Code File Using Xmodem

    To download a software image or boot code file using XMODEM at the boot prompt: Using a terminal emulation program, open a serial connection between the switch STEP 1 and the management system connected to the switch console port. Power up the switch. STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 73 You can verify the boot code or image version by viewing the System Summary page in the web-based switch configuration utility. Or, from the command line interface, you can enter the show sysinfo command. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 74: Rebooting The Switch

    You can use this feature to check whether the switch can communicate with a particular network host. To ping a network host: Click Administration > Ping in the navigation window. STEP 1 Select IPv4 or IPv6 as the Address Type. STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 75: Configuring Control Packet Forwarding

    Protocol (EAP) packets are encapsulated over a LAN. Dot1X provides a way to authenticate users and allow or deny them access to services made available by switch ports. See 802. 1 X for information on configuring the Dot1X feature on the switch. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 76: Diagnostics

    CPU utilization data. See the following topics for more information on the configuration pages available in the Administration > Diagnostics menu: • Testing Copper Ports • Configuring Port and VLAN Mirroring • CPU/Memory Utilization Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 77: Testing Copper Ports

    If the port has an active link while a cable test is run, the link might go down for the duration of the test. It might take several seconds to run the test. When complete, a window appears with the test results. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 78: Configuring Port Mirroring

    To set up port mirroring, you first assign source interfaces to a session. Then, you define a destination interface and enable the session. A session is operationally active only when the source and destination interfaces are configured and the administrative mode is enabled. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 79 Click Apply and then click Close. The probe session begins. STEP 9 To end a probe session, select the session in the Port Mirroring Session Table and NOTE click Edit. Clear the Admin Mode checkbox, click Apply, and then click Close. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 80: Cpu/Memory Utilization

    Bonjour is enabled by default and runs on the management VLAN. Bonjour Discovery can only be enabled globally, not on a per-port or per- VLAN basis. The switch advertises the following service types: Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 81: Lldp-Med

    (NMS) such as SNMP. This framework is extensible and allows advanced utilization in areas such as VoIP networks. LLDPDUs only communicate information; they do not automatically configure the NOTE switch. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 82: Configuring Global Lldp-Med Properties

    Civic Address—Switch location is identified using a geographic description of the location, such as city, street name, and building name. ELIN—Switch location is identified using the Emergency Location Identification Number (ELIN) of the switch. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 83: Configuring Lldp-Med On A Port

    Specify the following for the selected port: STEP 3 • LLDP-MED Status—Select to enable LLDP-MED operation on the port. • Configuration Notification—Select to enable the switch to send notifications when there are topology changes on the network. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 84 VLAN Management > Voice and Media > Media VLAN in the navigation window.) This page enables you to assign LLDP-MED applications to VLANs and configure priority settings for associated traffic. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 85: Lldp-Med Port Status Details

    Chassis ID Subtype—The type of hardware address. • System Description—A preconfigured system description. • System Name—The user-configured hostname (see the System Settings page). • Management Address SubType—The protocol version for the management IP address. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 86 • Street—Street where the building is located, if the civic location information type is used. • Building—Building in which the switch is located, if the civic location information type is used. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 87: Lldp-Med Neighbor Information

    • DSCP—DSCP value for the network policy. • Unknown—Neither the 802. 1 p value nor the DSCP value is configured for this Network Policy. • Tagged—network policy is defined for tagged VLANs. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 88 PoE Power Value—Power in watts requested by the device. • PoE Power Source—Indicates how the powered device receives power: Primary—A power supply is connected directly to the device. Backup—The device receives power from a PoE power sourcing equipment. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 89: Configuring Dhcp Client Vendor Options

    Select Enable for the Vendor Option. STEP 2 Enter a value in the Vendor Option String text box. STEP 3 Click Apply. Your changes are saved to the Running Configuration. STEP 4 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 90: Chapter 4: Port Management

    Administrative Port Speed and Duplex Mode fields are not editable. • Administrative Port Speed—If Auto Negotiation is disabled, select whether the port is capable of 10 Mbit/s or 100 Mbit/s operation. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 91 MTU—Specify the maximum transmission unit size in bytes. The default MTU is 1518 and the range is between 1518 and bytes. Click Apply and then click Close. Your changes are saved to the Running STEP 4 Configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 92: Link Aggregation

    Four dynamic LAGs are preconfigured by default named ch1 through ch4. They have no port members and are disabled. You can add or remove ports to or from a LAG without disrupting traffic on the LAG. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 93: Configuring Lag Settings

    Specify the following for the selected LAG: STEP 3 • Administrative Status—Select Up or Down to administratively enable or disable the LAG. When a LAG is disabled, its member ports operate as standalone physical ports. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 94: Configuring Lacp

    LACP Mode—The administrative status of LACP mode (Enabled or Disabled) The table displays the following information for the port when the port is the Actor (local) port: • System Priority—A nonconfigurable system priority assigned to the switch. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 95 Partner Timeout—Information from the partner is no longer valid after the timeout period elapses. Short—Short LACP timeout is 3 times the short periodic timer to transmit LACP packets. The default Short LACP timeout is 3 seconds. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 96: Configuring Poe

    Set the following parameters: STEP 2 • Power Trap Threshold—Specify a percentage of total available system power. When the requested power on PoE ports exceeds the threshold, a trap is generated to the log. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 97 Threshold Power—The cutoff power value above which no additional PDs are powered. This threshold is calculated based on the Power Trap Threshold setting. • Allocated Power—The total power in watts that the switch is actually providing to PoE ports. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 98: Configuring Poe Port Settings

    Note: If the selected Power Limit Type is LLDP-MED, then the priority setting from the remote device is not honored; instead the switch uses the Power Priority Level setting configured for the port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 99 Denied Counter—Number of times the powered device was denied power. • Absent Counter—Number of times the power supply was stopped to the powered device because the powered device was no longer detected. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 100: Green Ethernet

    You can override the global settings by configuring these features on individual NOTE ports (see Configuring Green Ethernet Port Settings); however, changes you subsequently make to the global settings override any custom port configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 101: Configuring Green Ethernet Port Settings

    The following reasons might display when the Energy Detect operational status is Disabled. Fiber—The administrative status might be active but the port is functioning in fiber mode. (Green Ethernet functionality applies only to copper ports.) Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 102 Select the port to configure and click Edit. STEP 2 Select Energy Detect to administratively enable Energy Detect on the port. STEP 3 Click Apply to save any changes to the Running Configuration. STEP 4 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 103: Chapter 5: Vlan Management

    Port VLAN ID (PVID). The switch is pre-configured with VLAN ID 1 as the Default VLAN. All ports are members of this VLAN, and use its VLAN ID (1) as their PVID. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 104: Creating Vlans

    To display this page click VLAN Management > Interface Settings in the navigation window. The Interface Setting Table shows the VLAN configuration for each port. To display the VLAN configuration on link aggregation groups, select LAG from the Interface Type list. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 105 VLAN ID. • Access VLAN—(Access ports only) An access port can be a member of only one VLAN, the Access VLAN. The port VLAN ID is set to the Access VLAN ID. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 106: Changing The Interface Vlan Mode

    Changing from Access Port to Trunk Port The VLAN configuration remains unchanged. The Access port VLAN becomes the native VLAN for the Trunk port. The port must follow the restrictions for Trunk ports. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 107 When a VLAN is deleted, the following actions occur: • If the deleted VLAN was a Trunk port’s native VLAN, the trunk port’s native VLAN and PVID are changed to the default VLAN. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 108: Configuring Vlan Membership

    VLAN. • If the switch receives a tagged frame from a VLAN, the switch will forward the frame as is to egress ports that are configured as tagged members of the VLAN. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 109: Configuring Port To Vlan

    VLAN. Untagged packets received from the port will be assigned to the corresponding VLAN. Click Apply. Your changes are saved to the Running Configuration. STEP 4 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 110: Configuring Port Vlan Membership

    Untagged option must be selected for the interface. If the interface VLAN mode is Trunk, the interface can be specified as an Untagged member of one VLAN and can be specified as a Tagged member of other VLANs. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 111: Setting The Default Vlan

    VLAN is updated to the new default VLAN provided there is at least one member port. If DHCP is enabled, the switch attempts to renew the switch IP address through DHCP. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 112: Voice And Media

    These topics for more information on the configuration pages available in VLAN Management > Voice and Media: • Displaying and Adding Telephony OUI • Configuring OUI Based Voice and Media • Configuring SIP/H323 Based Voice and Media Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 113: Displaying And Adding Telephony Oui

    Specify the VLAN for OUI-based VoIP packets. Although you can assign a VLAN ID that has not yet been created on the switch, you must subsequently create the VLAN for the feature to be operational (see Creating VLANs). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 114: Configuring Sip/H323 Based Voice And Media

    VoIP traffic by its protocol, such as the Session Initiation Protocol (SIP) and H.323. The traffic is automatically assigned the highest priority available on the system. To configure SIP/H323 based Voice and Media: Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 115: Media Vlan

    Each Media VLAN is associated with the following parameters • A VLAN with optional VLAN tagging • An IEEE 802. 1 p priority value • A DSCP value Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 116 From the Application list, select the media traffic type to configure: STEP 4 • Voice • Voice Signaling • Guest Voice • Guest Voice Signaling • Softphone Voice • Video Conferencing • Streaming Video • Video Signaling Click Edit. STEP 5 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 117: Auto Voip Sessions

    Network Policy to display the LLDP-MED Port Settings page. See LLDP-MED more information. Auto VoIP Sessions The Auto VoIP Sessions page displays information about the source, destination, and protocol for each Voice over IP session. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 118: Chapter 6: Spanning Tree

    The port that connects a bridge to the lowest-cost path is called the bridge’s root port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 119: Configuring Stp Status And Global Settings

    Specify the following global settings: STEP 1 • Spanning Tree State—Select to enable STP operation on the switch. You must also enable STP operation on individual ports (see Configuring STP Interface Settings). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 120 The maximum hop count is set to 20 and is not configurable. • Hold Time—The minimum time period, in seconds, that elapses between the transmission of Configuration BPDUs through a bridge port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 121: Configuring Stp Interface Settings

    The list ports/LAGs might span more than one page. Use the Page list to display the next set of entries. Select the port or LAG to configure and click Edit. STEP 2 Enter the parameters: STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 122 The port is configured as an Edge Port and is therefore automatically in the forwarding state. The port is configured as an Auto Edge port and, because it has not received BDPUs, has transitioned to forwarding state. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 123: Rstp Interface Settings

    Spanning Tree > RSTP Interface Settings in the navigation window. A rapid spanning tree topology is formed automatically when RSTP is selected as the spanning tree mode. Use the STP Status & Global Settings page to enable RSTP mode. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 124 You can select a port and click Activate Protocol Migration to have the switch send RSTP BPDUs to the port. This can be used to test whether all legacy bridges on the LAN have been removed. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 125 Spanning Tree RSTP Interface Settings MSTP Instance Settings MSTP Interface Settings Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 126 Spanning Tree RSTP Interface Settings Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 127: Chapter 7: Mac Address Tables

    STEP 3 • VLAN ID—Select the VLAN in which the device with the static MAC address resides. • Interface—Specify the port/LAG in which the device with the static MAC addresses can be reached. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 128 Security). Click Apply and then click Close. Your changes are saved to the Running STEP 4 Configuration. To delete a static MAC address, select it in the table and click Delete. NOTE Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 129: Configuring The Aging Time For Dynamic Addresses

    VLAN ID filter to display table entries for a particular VLAN. Use the MAC Address filter to display entries for a particular MAC address. Use the Interface filter to display entries for a particular port or LAG. Click Clear Filter to display all of the entries. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 130 Interface—The port on which the MAC address was dynamically learned. Frames specifying this MAC address and VLAN as the destination are forwarded out to this port. Click Clear Table to clear all dynamic MAC address entries from the table. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 131: Chapter 8: Multicast

    VLAN or discarded, depending on the switch configuration. If a match is found, the packet is forwarded only to the ports that are members of that multicast group. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 132: Multicast Properties

    VLAN. The responsibility for accepting or dropping the packets belongs to the hosts. If a multicast packet is received and there are ports registered to receive it, the packet is sent only to the registered ports. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 133: Configuring Multicast Properties On An Individual Vlan

    A dynamic entry is aged out if no packets are received for the MAC group address for a configurable time (see the IGMP Snooping page to configure the IGMP Group Membership interval). Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 134: Viewing The Mac Group Address Table

    MAC Group Address—Enter the address in the selected format. For an IPv4 address, the least significant 23 bits are mapped to an Ethernet MAC address. Click Apply and then click Close. The entry appears in the MAC Group Address STEP 3 Table. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 135: Configuring Mac Address Group Port Membership

    MAC address. • MAC Group Address equals to—Select the group MAC address that is compared to an incoming packet destination MAC address. Select the Filter. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 136: Configuring Igmp Snooping

    VLAN, IGMP snooping is performed on all interfaces that are members of that VLAN. Although IGMP is based on IP multicast addresses, the switch performs the actual multicast forwarding based on the equivalent MAC addresses. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 137 0 to 3600 seconds. Click Apply and then click Close. Your changes are saved to the Running STEP 6 Configuration. The new VLAN entry appears in the IGMP Snooping Table. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 138: Configuring Mld Snooping

    STEP 1 The MLD Snooping Table lists each VLAN on which this feature is enabled. Select Enable for the MLD Snooping Status. STEP 2 Click Add in the MLD Snooping Table. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 139 STEP 6 The new VLAN entry appears in the MLD Snooping Table. Ensure that an MLD Mrouter interface has been configured for this VLAN. See STEP 7 Configuring MLD Multicast Router Interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 140: Configuring Igmp Multicast Router Interfaces

    Available list. Click Apply and then click Close. STEP 5 In the IGMP Mrouter Table, the interface displays Enable in the Mode column and lists the selected VLANs. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 141: Configuring Mld Multicast Router Interfaces

    Available list. Click Apply and then click Close. STEP 5 In the MLD Mrouter Table, the interface displays Enable in the Mode column and lists the included VLANs. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 142: Chapter 9: Ip Configuration

    RADIUS, syslog, Auto Configuration, and TFTP. The switch can be configured with DNS servers that resolve hostnames to IP addresses. The switch can also be configured with static host-name-to-IP-address mappings that bypass the DNS server. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 143: Configuring Dns Servers

    The range is 0–100 and the default value is 2 times. • Domain timeout—Specify the time in seconds that the switch waits for a response to a DNS query. The range is 0–3600 seconds and the default is 3 seconds. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 144: Adding Dns Servers

    STEP 2 Enter a hostname from 1–255 alphanumeric characters. The hostname must begin STEP 3 with a letter. Enter an IPv4 or IPv6 address to be associated with the hostname. STEP 4 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 145: Viewing And Deleting Dynamic Dns Entries

    DNS address might have more than one hostname alias associated with it. To delete a dynamic entry, select it and click Delete. To delete all dynamic entries from the table, click Delete All Dynamic Entries. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 146: Chapter 10: Security

    IEEE 802. 1 X (dot1X) port access control (see Management Access Profile Rules and 802.1X). You can use the RADIUS page to configure global RADIUS settings and add RADIUS servers. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 147: Configuring Global Radius Settings

    All management users are created with read-write permissions. Ensure that all CAUTION RADIUS server users you configure have the same privilege levels; otherwise they are not granted access to the switch. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 148 Message Authenticator attribute is present in the packet, it is verified by the server. If verification fails, the server drops the request packet. Click Apply and then click Close. Your changes are saved to the Running STEP 3 Configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 149: Password Strength

    The four possible character classes are: uppercase letters, lowercase letters, numbers, and special characters available on a standard keyboard. Click Apply and then click Close. Your changes are saved to the Running STEP 3 Configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 150: Management Access Profile Rules

    Source IP 10. 1 0. 1 0. 1 0 with priority 2 to Deny, then access is permitted to this IP address when the profile is active, and the second rule is ignored. The range is 1 to 16, with 1 having the highest priority. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 151 The new rule appears in the Profile Rule Table. You can select the rule and click Edit to modify it or click Delete to remove it from the access profile. User cisco will not be denied management access. NOTE Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 152: Modifying And Deleting Access Profiles And Rules

    Click Apply, and then click Close. STEP 3 To enable an access profile (after completing all changes): Select the profile in the Access Profile Table and click Edit. STEP 1 Check the Enable box. STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 153: Authentication Methods

    None or the Local option. Click Apply. Your changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 154: Storm Control

    (0–100 percent). If the Rate Threshold Type is pps, enter a packet per second rate (0–14880000). Ports that operate at 10 Mbps, 100 Mbps, or 1000 Mbps have a maximum throughput of 14880, pps 148800 pps, or 1488000 pps correspondingly. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 155: Port Security

    On the Port Security page, select Enable for the global Admin Mode and click STEP 1 Apply. Select the port or LAG to configure and click Edit. STEP 2 Configure the following settings: STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 156 Action of Violation field is set to Discard with Trap. • Convert dynamic addresses to static—Select Enable to convert all dynamic secure MAC addresses to static secure MAC addresses. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 157: Viewing And Configuring Secure Mac Addresses

    The 802. 1 x protocol defines three types of entities: • Supplicant: An entity that requests access to a port at the remote end of the link. The supplicant provides credentials to the network that another node Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 158: Defining 802.1X Properties

    Select Enable for the Port Based Authentication State to allow 802. 1 X port-based STEP 2 authentication globally on the switch. Select an authentication method from the Authentication Method list: STEP 3 • None—No authentication method is used. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 159: Modifying Port Pae Capabilities

    To modify the role of a port as an authenticator or supplicant: Click Security > 802.1X > Port PAE Capabilities in the navigation window. STEP 1 Select the port to configure and click Edit. STEP 2 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 160: Configuring Port Authentication

    Administrative Port Control—Select the port authorization mode. The possible values are: Force Unauthorized—Select this option to always deny port access by supplicants attaching to the port. If selected, the port control status becomes Unauthorized. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 161 The range is 1–65535 seconds. • Server Timeout—The amount of time that lapses before the switch resends a request to the authentication server. The range is 1–65535 seconds and the default is 30 seconds. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 162: Configuring Supplicant Port Authentication

    Force Authorized—The port is placed into an authorized state without requiring authentication with the authentication server. The interface sends and receives normal traffic without client port-based authentication. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 163: Displaying Authenticated Hosts

    RADIUS—Authentication requests are passed to a RADIUS server that replies with RADIUS Access-Accept or Access-Reject frames. If the switch cannot reach the server, the request is denied. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 164: Chapter 11: Quality Of Service

    In networks where QoS operation is enabled, all elements of the network must be QoS-capable. The presence of one or more nodes that are not QoS-capable creates a deficiency in the network path and the performance of the entire packet flow is compromised. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 165: Qos Properties

    802. 1 p priority (0). • trust dot1p—The port uses the 802. 1 p priority value in VLAN-tagged Ethernet frames. For untagged frames, the default priority is assigned. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 166: Defining Queues

    The weight is expressed as a percentage of the total bandwidth for each port. A combination of strict queue and WRR queues can be configured at a port. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 167: Queue Configuration Recommendations

    The queue with the highest priority traffic has access to the egress port until all such traffic is forwarded. Strict priority mode provides low-latency service to higher priority classes of traffic. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 168: Mapping Cos/802.1P Priorities To Queues

    Queue 1 has the lowest priority, and queue 4 has the highest priority. Click Apply. Your changes are saved to the Running Configuration. STEP 4 To apply these mappings to all other interfaces on the switch, click Copy Settings STEP 5 to All Interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 169 Quality of Service Mapping CoS/802. 1 p Priorities to Queues If you click Restore Defaults, the following mappings are applied to the selected NOTE interface. 802.1p Priority Output Queue Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 170: Mapping Ip Precedence To Queues

    4 has the highest priority. Click Apply. Your changes are saved to the Running Configuration. STEP 4 To apply these mappings to all other interfaces on the switch, click Copy Settings to All Interfaces. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 171: Mapping Dscp Values To Queues

    For each Ingress DSCP value, select a queue from the Output Queue list. Queue1 STEP 2 has the lowest priority, and queue 4 has the highest priority. Click Apply. Your changes are saved to the Running Configuration. STEP 3 Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 172: Defining Rate Limit Profiles

    Profile ID—Specify any number from 1 to 64 to identify the profile. • CIR—Specify the committed information rate, which is the rate at which data is transmitted. The rate is averaged over a minimum time increment. The range is 64-1048576 Kbps. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 173: Applying Rate Limit Profiles To Interfaces

    Available list. All profiles appear in the Selected list. Click Apply and then click Close. Your changes are saved to the Running STEP 5 Configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 174: Traffic Shaping

    Repeat the previous step as needed to assign bandwidth utilization to other ports STEP 5 and LAGs. When you are finished, click Close. Your changes are saved to the Running STEP 6 Configuration. Cisco Small Business SG200 Series 8-port Smart Switch...
  • Page 175 Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company.

This manual is also suitable for:

Sg 200-08p

Table of Contents