Catalyst 4500-X Fixed 10 GE Aggregation Switch

Recommendations

Info

Use SysLog messages to verify IPv6 FHS RA Violations on a switch. RA Guard If the client port is configured as host and receives any RA message the switch logs the messages as below *Mar 1 00:23:37.449: %SISF-4-PAK_DROP: Message dropped A=FE80::F2F7:55FF:FEBF:F144 G=- V=22 I=Gi1/34 P=NDP::RA Reason=Message unauthorized on port *Mar 1 00:24:03.197: %SISF-4-PAK_DROP: Message dropped A=FE80::F2F7:55FF:FEBF:F144 G=- V=22 I=Gi1/34 P=NDP::RA Reason=Message unauthorized on port The port remains in forwarding state as violating packets are dropped DHCPv6 Guard Switch# debug ipv6 snooping dhcp-guard *Mar 1 01:18:29.212: SISF[DHG]: Gi1/25 vlan 22 DHCP Guard setting sec level to GUARD *Mar 1 01:18:29.212: SISF[DHG]: Gi1/25 vlan 22 DHCP Server message for role dhcp client – Deny The port remains in forwarding state as violating packets are dropped © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 152
FEATURE Catalyst 4500E (Sup 7E/ 7L-E) Catalyst 4500E (Sup 6E/ 6L-E) Catalyst 4500-X 4900M, 4948E, and 4948E-F RA Guard ✔ ✔ ✔ ✔ DHCPv6 Guard ✔ ✔ ✔ ✔ DAD Proxy ✔ ✔ ✔ ✔ IPv6 Snooping Destination Guard ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ DHCPv6 LDRA ✔ ✔ ✔ ✔ All specs subject to change without notice © 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 153
Page 1 and 2:
Under NDA Updated on January 2, 201
Page 3 and 4:
INNOVATION Virtual Switching System
Page 5 and 6:
• Cisco Catalyst 4500-X Switches
Page 7 and 8:
Page 9 and 10:
Warning: Removing a module incorrec
Page 11 and 12:
System Feature C3750X-24S Superviso
Page 13 and 14:
Qos and ACLS Feature C3750X-24S Sup
Page 15 and 16:
Page 17 and 18:
IOS XE Application Hosting Example
Page 19 and 20:
IP Base Enterprise Services • Aut
Page 21 and 22:
8 x 10G 8 x 10G 8 x 10G 8 x 10G Pac
Page 23 and 24:
F R O N T STP Lookup Input Classifi
Page 25 and 26:
Increased Operational Efficiency No
Page 27 and 28:
• Redundant design with sub-optim
Page 29 and 30:
• Multiple parallel Layer 2 netwo
Page 31 and 32:
Standalone VSS (Physical view) VSS
Page 33 and 34:
- VSS is supported beginning in IOS
Page 35 and 36:
Supervisor 47xx Linecards 46xx Line
Page 37 and 38:
Features Standalone VSS VLAN Manage
Page 39 and 40:
Catalyst 4500E VSS 1 Mix Fiber/PoE
Page 41 and 42:
Catalyst 4500E VSS Beyond 384 Ports
Page 43 and 44:
Switch virtual domain # Switch 1 Sw
Page 45 and 46:
Si Si Switch 1 Switch 2 Si VSL (con
Page 47 and 48:
Si Si 4500VSS#show switch virtual E
Page 49 and 50:
• Build port channels on the edge
Page 51 and 52:
! 4500 VSS interface Port-channel13
Page 53 and 54:
© 2011 Cisco and/or its affiliates
Page 55 and 56:
• The 4-command syntax is as foll
Page 57 and 58:
Run these commands before, during a
Page 59 and 60:
PAGP The VSL is configured as a Por
Page 61 and 62:
PAGP 1. IF Standby loses contact wi
Page 63 and 64:
These uplinks can be used as VSL or
Page 65 and 66:
Page 67 and 68:
• Use-Case: Any SSO/NSF capable
Page 69 and 70:
Active Sup Active & Standby MFIB is
Page 71 and 72:
Page 73 and 74:
Unprecedented Application Visibilit
Page 75 and 76:
REFERENCE Interface IPv4 IPv6 Trans
Page 77 and 78:
Page 79 and 80:
REFERENCE Example: Switch#event man
Page 81 and 82:
Page 83 and 84:
• IOS XE on 4500-X can host third
Page 85 and 86:
• Display packets in brief mode S
Page 87 and 88:
Page 89 and 90:
Data Center 1 WAN Internet Red VRF
Page 91 and 92:
Today: VRF-Lite • A hop-by-hop vi
Page 93 and 94:
OSPF Example router ospf 1 network
Page 95 and 96:
VRF-Lite Subinterface Config interf
Page 97 and 98:
Campus Core g1/0 vrf definition red
Page 99 and 100: vrf definition red vnet tag 101 vrf
Page 101 and 102: Before: Sharing services in existin
Page 103 and 104: • Displays VRF configuration info
Page 105 and 106: • VRF-aware services have the fol
Page 107 and 108: Business Meetings and Ad Hoc Commun
Page 109 and 110: An end-to-end IP architecture that
Page 111 and 112: • Cisco Catalyst 4500-X Switches
Page 115 and 116: • Metrics can be tested against t
Page 117 and 118: • Variety of network centric metr
Page 119 and 120: • Can apply directly on interface
Page 123 and 124: • Requestor - origin of request V
Page 125 and 126: Feature Poll Session Command Mode E
Page 129 and 130: • Convenient for pre-deployment a
Page 131 and 132: Cisco TelePresence overview and ses
Page 135 and 136: PAIN POINTS • Many different devi
Page 137 and 138: Example of Inside Attacks exploitin
Page 139 and 140: Prevent Rogue Router Advertisements
Page 141 and 142: Host A First Hop Switch Router B Si
Page 143 and 144: See RFC 6104 for details Wireless t
Page 145 and 146: Host A First Hop Switch DHCP Server
Page 147 and 148: Creates and maintains a v6 binding
Page 149: • One command to do them all! Hos
Page 153 and 154: Zero-touch Deployment and Maintenan
Page 155 and 156: New Client Install Example, Directo
Page 157 and 158: Smart Install Clients Catalyst 3K 3
Page 159 and 160: Segment Smart Install Functions •
Page 161 and 162: Client Behavior before 15.0(2)SE: C
Page 163 and 164: • Configuration command to enable
Page 165 and 166: SMI client: behavior changes on upl
Page 167 and 168: Workaround without CDP signalled st
Page 169 and 170: Software Release Roadmap © 2011 20
Page 171 and 172: TEXEL (Cat 4500E, 4500-X and 4900M,
Page 173: Thank you.
show all

Catalyst 4500-X Fixed 10 GE Aggregation Switch

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?