What are the three options available for configuring a CISCO Switch?
The Three Configuration Options
The Catalyst switch uses a CLI, which is more like the router configuration. However, you
can configure the switch with a Web-based method using the Visual Switch Manager
(VSM). To configure the switch through the VSM, you just have to type in the IP address of
the switch at a Web browser. You will learn how to add an IP address to the switch later in
this chapter. The 1900 switches also have the original menu system that allows you to
configure the switch through a series of menu-based options. To configure the switch with
Telnet or VSM, an IP address must be configured on the switch
Give the different STATUS indications for a switch port
The only button on the 1900 switch is the mode button. By pressing
the mode button, you can see three different status lights on the switch:
STAT This light shows the status of the ports. If it is green, this indicates a
device is plugged into the switch. Green is active, and a green blinking light is
activity on the port. If the port is amber, there has been a link fault.
UTL This light indicates the bandwidth of the switch. When you press the
mode button on a 1912 switch, and the LEDs for ports 1 through 4 come on, this
means the bandwidth utilization of the switch is somewhere between 0.1
and1.5Mbps. If lights 5 through 8 come on, this indicates that the utilization is
between 1.5 and 20Mbps, and lights 9 through 12 indicate bandwidth between 20 and
120Mbps.
FDUP This light will show you which ports are configured at full duplex.
When the 1900 switch is first powered on, it runs through a power-on self test (POST). At the
start, all port LEDs are green. These LEDs turn off after the POST completes. If a port is
determined failed by the POST, both the Sys-tem LED and the port LED turn amber. If no
failures occur during the POST, all LEDs blink and turn off.
What is the significance of UTL and FDUP status in CISCO switches?
UTL: This light indicates the bandwidth of the switch. When you press the mode button on a 1912
switch, and the LEDs for ports 1 through 4 come on, this means the bandwidth utilization of the
switch is somewhere between 0.1 and1.5Mbps. If lights 5 through 8 come on, this indicates that the
utilization is between 1.5 and 20Mbps, and lights 9 through 12 indicate bandwidth between 20 and
120Mbps.
FDUP This light will show you which ports are configured at full duplex.
Give the different CLI modes and its significance with CISCO Switches
In Cisco switches, the CLI (Command Line Interface) operates through different modes, each serving
a specific purpose:
1. *User EXEC mode (User Mode):* Identified by the ">" symbol, this mode allows basic monitoring
commands but limits configuration changes. It's the initial mode upon logging in.
2. *Privileged EXEC mode (Privileged Mode):* Identified by the "#" symbol, it grants access to all
commands, including configuration, and allows for more in-depth changes to the system.
3. *Global Configuration mode:* Accessed from Privileged EXEC mode by using the "configure
terminal" command. This mode enables configuration changes for the entire system, including
interfaces, protocols, and other global settings.
4. *Interface Configuration mode:* Entered from Global Configuration mode using the "interface
[interface type and number]" command. This mode permits configuration changes for a specific
interface, like Ethernet or VLAN interfaces.
Understanding and navigating these CLI modes are crucial as they allow users to progressively access
and modify different levels of switch configurations, ensuring proper management and control over
the device.
What are the different levels of passwords & its significances in a CISCO Switches?
In Cisco switches, passwords are used to control access to different privilege levels. There are
primarily two significant password levels:
1. *User EXEC Mode password:* This password restricts access to the User EXEC mode, allowing
users to view but not change the switch's configuration. It provides basic monitoring capabilities.
2. *Privileged EXEC Mode password:* This password restricts access to the Privileged EXEC mode,
which allows for complete control over the switch, including configuration changes.
Having different passwords for these levels helps in enforcing security measures, ensuring that only
authorized individuals can access and modify the switch's configurations. It's a vital aspect of
network security, especially in preventing unauthorized changes that could disrupt network
operations or compromise sensitive information.
Give the procedure to assign passwords to a CISCO Switch
You can set
The user mode passwords (Login pwd)
The privileged mode passwords
used to verify authorization of the switch, including
accessing any line and the console.
used to allow access to the switch so that configuration
can be viewed as well as changed
Passwords cannot be less than four characters or more
than eight.
They are not case sensitive.
>
>enable
#config t
(config)#enable password ?
level Set exec level password
(config)#enable password level ?
<1-15> Level number
(config)#enable password level 1 srinivas
(config)#enable password level 1 srinivas
>
>enable
#config t
(config)#enable password ?
level Set exec level password
(config)#enable password level ?
<1-15> Level number
(config)#enable password level 15 mcasu
config)#
(config)#enable password level 15 mcasu
1 user(s) now active on Management Console.
User Interface Menu
[M] Menus
[K] Command Line
[I] IP Configuration
Enter Selection:K
Enter password:*****
CLI session with the switch is open. To end the CLI
session, enter [Exit].
>enable
Enter password:****
enable secret password is a more secure password and
supersedes the enable password
(config)#enable secret bhatsir
use the command show running-config (show run) to
see the current configuration on the switch
#sh run
Building configuration...
Current configuration:
Enable secret 5$1$FMFQ$wFVYVLYn2aXscfB3J95.w.
enable password level 1 "SRINIVAS"
Enable password level 15 "MCASU”
Give the procedure to assign ip address & default gateway on a CISCO Switch
By default, no IP address or default-gateway information
is set
By typing the command show ip (or sh ip), you can see
the default IP configuration of the switch.
Todd1900EN#sh ip
IP Address: [Link] Subnet Mask: [Link]
Default Gateway: [Link] Management VLAN: 1
Domain name:
Name server 1: [Link]
Name server 2: [Link]
HTTP server : Enabled HTTP port : 80
RIP : Enabled
Todd1900EN(config)#ip address 172
.16
.10
.16
255
.255
.255
Todd1900EN(config)#ip default-gateway [Link]
Todd1900EN#config t
Enter configuration commands, one per line.
End with CNTL/Z
Todd1900EN(config)#ip address [Link]
[Link]
Todd1900EN(config)#ip default-gateway [Link]
Todd1900EN(config)#
Todd1900EN#sh ip
IP Address: [Link] Subnet Mask: [Link]
Default Gateway: [Link] Management VLAN: 1
Domain name:
Name server 1: [Link] Name server 2: [Link]
HTTP server: Enabled HTTP port : 80
RIP: Enabled
Todd1900EN#
Give the procedure to assign hostname & discription for an interface on a CISCO Switch
The hostname on a switch, as well as on a router, is only locally significant. This means that it doesn’t
have any function on the network or name resolution whatsoever. However, it is helpful to set a
hostname on a switch so that you can identify the switch when connecting to it. A good rule of
thumb is to name the switch after the location it is serving. The 1900 switch command to set the
hostname is exactly like any router: you use the hostname command. Remember, it is one word. The
switch out-put below shows the console screen. Press K to go into user mode, enter the password,
use the enable command, and enter the enable secret password. From global configuration mode,
type the command hostname hostname. 1 user(s) now active on Management Console.
>en
Enter password:***
#config t
Enter configuration commands, one per line.
CNTL/Z
(config)#hostname Todd1900EN
Todd1900EN(config)#
You can administratively set a name for each interface on the 1900 switch. Like the
hostname, the descriptions are only locally significant. For the 1900 series switch, use the
description command. You cannot use spaces with the description command, but you
can use underscores if you need to.
Setting Descriptions
To set the descriptions, you need to be in interface configuration mode. From interface
configuration mode, use the description command to describe each interface. You can make
the descriptions more than one word, but you can’t use spaces. You’ll have to use the
underscore as shown below:
Todd1900EN#config t
Enter configuration commands, one per line. End with CNTL/Z
Todd1900EN(config)#int e0/1
Todd1900EN(config-if)#description Finance_VLAN
Todd1900EN(config-if)#int f0/26
Todd1900EN(config-if)#description trunk_to_Building_4
Todd1900EN(config-if)#
What are the different Duplex settings for a switch interface? Explain
Configuring the Port Duplex
The 1900 switch has only 12 or 24 10BaseT ports and comes with one or two FastEthernet
ports. You can only set the duplex on the 1900 switch, as the ports are all fixed speeds.
Use the duplex command in interface configuration.
In the switch output below, notice the options available on the Fast-Ethernet ports.
Todd1900EN(config)#int f0/26
Todd1900EN(config-if)#duplex ?
Auto Enable auto duplex configuration
Full Force full duplex operation
full-flow-control Force full duplex with flow control
Half Force half duplex operation
Explain the procedure to configure the duplex value for different possible values in Switch.
The 1900 switch has only 12 or 24 10BaseT ports and comes with one or two FastEthernet
ports. You can only set the duplex on the 1900 switch, as the ports are all fixed speeds.
Use the duplex command in interface configuration.
In the switch output below, notice the options available on the Fast-Ethernet ports.
Todd1900EN(config)#int f0/26
Todd1900EN(config-if)#duplex ?
Auto Enable auto duplex configuration
Full Force full duplex operation
full-flow-control Force full duplex with flow control
Half Force half duplex operation
Todd1900EN(config-if)#duplex full
shows the different duplex options available on the 1900 switches. The 1900
FastEthernet ports default to auto duplex, which means they will try to auto detect the
duplex the other end is running. This may or may not work. It is a good rule of thumb to set
the duplex to half on a Fast-Ethernet port. Once you have the duplex set, you can use the show
interface command to view the duplex configuration.
Todd1900EN(config-if)#duplex full
Todd1900EN#sh int f0/26
What is the significance of Permanent mac address in mac address table? How to set this add?
Administrators can specifically assign permanent addresses to a switch port. These addresses are
never aged out. You can do this to provide security to a port, which means that unless you
specifically configure a hardware address to a switch port, it won’t work. Administrators can also
create static entries in the switch; these entries actually create a path for a source hardware address.
This can be really restrictive, and you need to be careful when set-ting static entries because you can
basically shut your switch down if you do not plan the configuration carefully.
You can configure a permanent MAC address to a switch
port by using command
mac-address-table permanent [mac-address]
[interface].
After you choose the mac-address-table permanent
command, add the hardware address and the interface it is
associated with.
Todd1900EN(config)#mac-address-table permanent ?
48 bit hardware address
Todd1900EN(config)#mac-address-table permanent 00A0.2448.60A5 e0/4
This will restrict the interface e0/4 to only accept frames
from 00A0.2448.60A5 source hardware address.
Todd1900EN#sh mac-address-table
Number of permanent addresses : 1
Number of restricted static addresses : 0
Number of dynamic addresses : 3
Address Dest Int Type Source Int
00A0.2448.60A5 Ethernet 0/4 Permanent All
0000.8147.4E11 Ethernet 0/5 Dynamic All
0000.8610.C16F Ethernet 0/1 Dynamic All
00A0.246E.0FA8 Ethernet 0/2 Dynamic All
What is the significance of Static mac address in mac address table? How to set this add?
You can take this security thing one step further. You can now tell a source interface that it is only
allowed to send frames out of a defined interface. You do this with the restricted static command.
Seems that it could cause some real havoc at work; you may only want to use this command on your
friends if it is a slow day at work. That’ll liven things up a bit. The command mac-address-table
restricted static is looking for two options: The first one is the hardware address of the destination
inter-face. The second option will be the source interface that is allowed to communicate with this
destination interface. After entering the command mac-address-table restricted static from global
configuration mode, enter the hardware address of the destination device:
Use the command
mac-address-table restricted static
This command requires three parameters
The first one is the hardware address of the destination inter-face.
Second is the interface not associated with this hardware address
Third option will be the source interface that is allowed to communicate with this destination
interface.
Todd1900EN(config)#mac-address-table restricted static ?
48 bit hardware address
Todd1900EN(config)#mac-address-table restricted static 00A0.246E.0FA8 ?
Ethernet IEEE 802.3
Fast EthernetFast Ethernet IEEE 802.3
Once you add the hardware address of the destination
device, add the interface address this destination
hardware address is associated with.
Todd1900EN(config)#mac-address-table restricted static ?
48 bit hardware address
Todd1900EN(config)#mac-address-table restricted static 00A0.246E.0FA8 ?
Ethernet IEEE 802.3
Fast EthernetFast Ethernet IEEE 802.3
Todd1900EN(config)#mac-address-table restricted static 00A0.246E.0FA8 e0/2 ?
Ethernet IEEE 802.3
Fast Ethernet Fast Ethernet IEEE 802.3
Now that you have entered the destination information,
enter the source interface that is allowed to communicate with the destination address.
Todd1900EN(config)#mac-address-table restricted static 00A0.246E.0FA8 e0/2 e0/5
Sh mac
Address Dest Int Type Source Int
00A0.2448.60A5 Ethernet 0/4 Permanent All
00A0.246E.0FA8 Ethernet 0/2 Static e0/5
0000.8610.C16F Ethernet 0/1 Dynamic All
0000.8147.4E11 Ethernet 0/5 Dynamic All
This command has restricted interface 0/5 to only send frames to interface 0/2 using the destination
hardware address 00A0.246E.0FA8.
What is the significance of port secure command? Explain
Port security is a way of stopping users from plugging a hub into their jack in their office or
cubicle and adding a bunch of hosts without your knowl-edge. By default, 132 hardware
addresses can be allowed on a single switch interface. To change this, use the interface
command port secure [Link] following switch output shows the command
port secure max-mac-count being set on interface 0/2 to allow only one entry.
Todd1900EN#config t
Enter configuration commands, one per line.
End with CNTL/Z
Todd1900EN(config)#int e0/2
Todd1900EN(config-if)#port secure ?
max-mac-count Maximum number of addresses allowed on the port
<cr>
Todd1900EN(config-if)#port secure max-mac-count ?
<1-132> Maximum mac address count for this secure port
Todd1900EN(config-if)#port secure max-mac-count 1
The secured port or ports you create can use either static or sticky-learned hardware
addresses. If the hardware addresses on a secured port are not stat-ically assigned, the port
sticky-learns the source address of incoming frames and automatically assigns them as
permanent addresses. Sticky-learns is a term Cisco uses for a port dynamically finding a
source hardware address and creating a permanent entry in the MAC filter table.
Give the procedure to create 4 vlans and assign port membership to each on a Switch
You can configure each port to be in a VLAN by using the vlan-membership command. You
can only configure VLANs one port at a time. There is no command to assign more than one
port to a VLAN at a time with the 1900 switch.
Remember that you can configure either static memberships or dynamic memberships on a
port. This book and the CCNA exam objectives only cover the static VLAN memberships.
In the following example, I configure interface 2 to VLAN 2, interface 4 to VLAN 3, and
interface 5 to VLAN 4.
1900EN#config t
Enter configuration commands, one per line.
End with CNTL/Z
1900EN(config)#int e0/2
1900EN(config-if)#vlan-membership ?
1900EN(configif)#vlan-membership static ?
<1-1005> ISL VLAN index
1900EN(config-if)#vlan-membership static 2
1900EN(config-if)#exit
1900EN(config)#int e0/4
1900EN (config-if)#vlan-membership static 3
1900EN(config-if)#exit
1900EN(config) #int e0/5
1900EN(config-if)#vlan-membership static 4
1900EN(config-if)#exit
1900EN(config)#exit
Now, type show vlan again to see the ports assigned to each VLAN.
1900EN#sh vlan
VLAN Name Status Ports
--------------------------------------
1 Default Enabled 1, 3, 6-12, AUI, A, B
2 Sales Enabled 2
3 marketing Enabled 4
dynamic Set VLAN membership type as Dynamic
Static Set VLAN membership type as Static
4 Mis Enabled 5
1002 fddi-default Suspended
1003
token-ringdefau Suspended
1004 fddinet-default Suspended
1005 trnet-default Suspended
--------------------------------------
[ouput cut]
You could also just type show vlan # to gather information about only one VLAN at a
time.
1900EN#sh vlan 2
VLAN Name Status Ports
---------------------------------
2 sales Enabled 2
---------------------------------
VLAN Type SAID MTU Parent RingNo BridgeNo Stp
Trans1 Trans2
----------------------------------------------------------------
2 Ethernet 100002 1500 0 1 1 Unkn 0 0
1900EN#
Another command you can use to see the ports assigned to a VLAN is show vlanmembership. Notice
that this command shows each port on the switch, which VLAN the
port is a member of, and the membership type (static or dynamic).
1900A#sh vlan- membership Port VLAN Membership
1 1 Static
2 2 Static
3 1 Static
4 4 Static
5 5 Static
6 1 Static
7 1 Static
8 1 Static
9 1 Static
10 1 Static
11 1 Static
12 1 Static
AUI 1 Static
A 1 Static
B 1 Static
Demonstrate an ISL routing on a single router interface to implement inter VLAN routing
To support ISL routing on one FastEthernet interface, the router’s interface is divided into
logical interfaces, one for each VLAN. These are called sub-interfaces. Since we have four
VLANs, we need four subinterfaces. Each one of the VLANs is a separate subnet, so here is
the addressing I want to use:
Each of the hosts in their VLAN must use the same subnet addressing. To configure the
router-on-a-stick for inter-VLAN routing, you need to complete three steps:
Enable ISL trunking on the switch port the router connects to
Enable ISL encapsulation on the router’s sub interface.
Assign an IP address to the sub interface and other logically addressing if
applicable (IPX, for example).
To create a sub interface from global configuration mode, choose the Fast Ethernet
interface, a period, and then a number. You will now be in the (config-subif) prompt for
the interface. To configure ISL routing on a sub interface, use the encapsulation isl [vlannumber]
command. You can then assign an IP address, IPX address, AppleTalk address,
etc., to the sub interface. This is a unique subnet and all the hosts on that VLAN should be
in that same subnet. It is not required but is highly recommended. Here is how to
configure the 2621 router to support ISL routing with our four VLANs. First, I’ll
configure a sub interface with the same number as the VLAN I want to route. This is
locally significant only, which means it doesn’t matter at all what the sub interface
numbers are on the network. Notice that you need to set the encapsulation next, or you
will receive an error when trying to set the sub interface’s IP address. VLAN 1 is in the
[Link] network. I need to assign a sub interface a valid host address from within that
subnet.
2621#config t
2621(config) int f0/0.1
2621(config-subif)# encapsulation isl 1
2621(config-subif)# ip address [Link] [Link]
2621(config-subif)# int f0/0.2
2621(config-subif)# encapsulation isl 2
VLAN 1 default [Link]/24
VLAN 2 sales [Link]/24
VLAN 3 marketing [Link]/24
VLAN 4 mis [Link]/24
2621(config-subif)# ip address [Link] [Link]
2621(config-subif)# int f0/0.3
2621(config-subif)# encapsulation isl 3
2621(config-subif)# ip address [Link] [Link]
2621(config-subif)# int f0/0.4
2621(config-subif)# encapsulation isl 4
2621(config-subif)# ip address [Link] [Link]
2621(config-subif)#exit
2621(config)#int f0/0
2621(config-if) no shutdown
After setting the encapsulation and IP address for VLAN 1, I did the same configurations for
VLANs 2, 3, and 4. Notice, however, that each sub interface is in a separate subnet.
Demonstrate backing up and restoring the Switch Configuration files with example
You can upgrade or restore the IOS on Cisco switches
The command to upgrade or restore
copy t[Link] opcode
copy t[Link] opcode
copy tftp tells the switch to copy an IOS from a TFTP host.
//tftp_host_address is the address of the TFTP host
IOS_filename is the IOS file stored in your TFTP default directory
opcode is the command that tells the router to download the file to flash memory
1900B#copy t[Link] opcode
TFTP operation succeeded
1900B#
The configuration file for a Cisco switch is just called nvram.
The command to copy the file to a TFTP host is
copy nvram t[Link]
1900B#copy nvram t[Link]
Configuration upload is successfully completed
You can restore a configuration back to a switch from a
TFTP host by using the following command:
copy t[Link] nvram
You need to know the filename as well as the IP address of the TFTP host
1900B#copy t[Link] nvram
TFTP successfully downloaded configuration file
1900B#delete nvram
This command resets the switch with factory defaults.
All system parameters will revert to their default factory settings
What is CDP? Illustrate how to configure CDP on the CISCO Switches.
CDP works with all Cisco devices, including the Catalyst 1900 switch. The output on the
1900 switch looks like this:
switch#sh cdp
Global CDP information: CDP version: 2
Sending CDP packets every 60 seconds
sending a hold time value of 180 seconds
Notice that both the router and the switch have a CDP timer of 60 seconds and a hold time of 180
seconds. This means that CDP information received from neighbour routers will be kept for 180
seconds. If the router or switch does not hear from the neighbour again before the hold time expires,
the information will be discarded. You can change the timers on both devices with the cdp timer and
cdp hold time commands from global configuration mode:
switch#config t
Enter configuration commands, one per line.
End with CNTL/Z switch(config)#cdp ?
advertise-v2 CDP sends version-2 advertisements
Hold time Specify the hold time (in sec) to be sent in packets
Timer Specify the rate at which CDP packets are sent (in sec)
At this point, you can change the timer and hold time on the 1900 switch, as follows:
switch(config)#cdp timer 90
switch(config)#cdp hold time 240
Demonstrate how do you upgrade the Switch IOS with proper steps.
You can upgrade or restore the IOS on Cisco Catalyst 1900 switches, although there is no
command to back up the IOS image from the Catalyst 1900 switch to a TFTP host.
The command to upgrade or restore the IOS to a 1900 switch is
copy t[Link] opcode
where:
copy tftp tells the switch to copy an IOS from a TFTP host.
//tftp_host_address is the address of the TFTP host.
IOS_filename is the IOS file stored in your TFTP default directory (for example,
cat1900EN_9_00.bin is my enterprise edition).
opcode is the command that tells the router to download the file to flash memory.
Here is an example of the command being used:
1900B#copy t[Link] opcode
TFTP operation succeeded
1900B
10 marks
What is ISL Routing? What is its advantage? Demonstrate an ISL routing on a switched network
having 4 vlans defined
In networking, ISL (Inter-Switch Link) routing is a protocol used to facilitate communication between
switches in a switched network, primarily in the context of Cisco switches. It's a protocol used for
VLAN (Virtual Local Area Network) tagging and allows for the transportation of multiple VLAN traffic
between switches.
Advantages of ISL routing include:
1. *VLAN Tagging:* ISL allows the tagging of VLAN information within Ethernet frames, enabling the
transmission of traffic from multiple VLANs across a single link between switches.
2. *Interoperability:* ISL was widely used in Cisco environments and supported by older Cisco
switches, facilitating communication and VLAN configuration across these devices.
However, it's important to note that ISL has largely been replaced by the IEEE 802.1Q standard,
which is an open standard for VLAN tagging and is more widely supported.
To support ISL routing on one FastEthernet interface, the
router’s interface is divided into logical interfaces (subinterfaces), one for each VLAN.
ConfiguringISL Routing Rout
Since we have four VLANs, we need four subinterfaces.
Each one of the VLANs is a separate subnet
Following subnet we will use for each vlan
VLAN 1 default [Link]/24
VLAN 2 sales [Link]/24
VLAN 3 marketing [Link]/24
VLAN 4 mis [Link]/24
Each of the hosts in their VLAN must use the same
subnet addressing
To configure the router-on-a-stick for inter-VLAN
routing, you need to complete three steps
1)Enable ISL trunking on the switch port the router
connects to
1) Enable ISL encapsulation on the router’s sub
interface.
1) Assign an IP address to the sub interface
Createing a sub-interface
2621#config t
2621(config) int f0/0.1
2621(config-subif)#
To configure ISL routing on a sub interface, use the
command encapsulation isl [vlan-number]
2621(config-subif)# encapsulation isl 1
Assign an IP address to the sub interface.
2621(config-subif)# ip address [Link]
[Link]
FOR VLAN 1
2621#config t
2621(config) int f0/0.1
2621(config-subif)# encapsulation isl 1
2621(config-subif)# ip address [Link]
[Link]
FOR VLAN 2
2621#config t
2621(config) int f0/0.2
2621(config-subif)# encapsulation isl 2
2621(config-subif)# ip address [Link]
[Link]
FOR VLAN 3
2621#config t
2621(config) int f0/0.3
2621(config-subif)# encapsulation isl 3
2621(config-subif)# ip address [Link]
[Link]
FOR VLAN 4
2621#config t
2621(config) int f0/0.4
2621(config-subif)# encapsulation isl 4
2621(config-subif)# ip address [Link]
[Link]
2621(config)#int f0/0
2621(config-if) no shutdown
Notice, however, that each sub interface is in a separate
subnet
Remember, ISL is an older protocol and might not be supported in newer Cisco switches or software
versions. The more commonly used and widely supported protocol for VLAN tagging is IEEE 802.1Q.
Always refer to the specific switch documentation or Cisco's official resources for accurate
commands and configurations as per your switch model and software version.
What is MAC address table? What are the different types of entries in this table? Give its significance
The switches create a MAC table that includes dynamic, permanent, and static addresses.
This filter table is created by hosts sending a frame and by the switch learning the source
MAC address and from which segment and port it was received.
The switch keeps adding new MAC addresses that are sent on the net-work into the MAC
filter table. As hosts are added or removed, the switch dynamically updates the MAC filter
table. If a device is removed, or if it is not connected to the switch for a period of time, the
switch will age out the entry.
You can see the switch’s filter table by using the command show mac-address-table. The
following output shows the information received when using the show mac-address-table
command.
Todd1900EN#sh mac-address-table
Number of permanent addresses : 0
Number of restricted static addresses : 0
Number of dynamic addresses : 4
Address Dest Interface Type Source
Interface List
00A0.246E.0FA8 Ethernet 0/2 Dynamic All
0000.8147.4E11 Ethernet 0/5 Dynamic All
0000.8610.C16F Ethernet 0/1 Dynamic All
00A0.2448.60A5 Ethernet 0/4 Dynamic All
The addresses in the table above are from the four hosts connected to my 1900 switch. They
are all dynamic entries, which means the switch looked at the source address of a frame as
it entered the switch interface, and it placed that address in the filter table. Notice that I
have hosts in interfaces 1, 2, 4, and 5.
The Catalyst 1900 switch can store up to 1024 MAC addresses in the fil-ter table. If the
MAC filter table gets full, the switch will flood all new addresses until one of the existing
entries gets aged out.
You can also clear the MAC filter table by using the clear mac-address-table
command. You can clear dynamic, permanent, and restricted static [Link]
switch output below shows the different options available when using the clear macaddress-table
command.
#clear mac-address-table ?
dynamic Clear 802.1d dynamic address
permanent Clear 802.1d permanent addresses
restricted Clear 802.1d restricted static address
Give the different methods of security implementation on Switched Networks
Not found answer