Before you begin
Create or modify a Switch Template.
About this task
Use this task to create ports in bulk.
Procedure
-
Either under Create Ports in
Bulk, select one or more ports and select or select the plus sign next to Port Type under
Configure Ports
Individually.
-
If this template
applies to a 5570 or 5520 switch, you can define VIM Port Channelization ports,
otherwise, proceed to Step 3.
-
Under Configure Ports in
Bulk,choose Select
VIM.
-
For a 5570 switch,
select VIM-6YE or VIM-2CE.
-
For a 5520 switch,
select VIM-4X, VIM-4XE,
or VIM-4YE.
Note
If different
templates for the same switch SKU are required to be created with
different VIMs, then a classification rule can be created to assign
the same template SKU with different VIM options to different
devices. See
Configure a Classification Rules Network Policy for more information about classification
rules.
-
Select one or more of
these VIM ports and continue to Step 3.
-
Enter a name.
-
Edit the associated description if necessary.
-
Toggle the port On or Off.
-
In the Port Usage Settings section, select one of the
following port types:
- Access Port: Ports connected to individual hosts
such as printers, servers, and end-user computers.
- Phone with a data port: Ports connected to IP
phones, and optionally, to computers cabled to the phones.
- Trunk port: Ports connected to network forwarding
devices, such as switches and APs that support multiple VLANs on trunk
ports.
- Mirror
port: Ports that mirror data from one or more other
ports for diagnostic purposes. Configure one of the following settings
for a new mirror port type:
- Ingress-and-Egress mirror: Route all
traffic.
- Anomaly
mirror: Route all anomalous traffic.
- Egress
mirror: Route outbound traffic only.
- Ingress
mirror: Route inbound traffic only.
- VLAN
mirror: Route traffic from all ports belonging
to that VLAN.
Use the switch-specific CLI commands set to configure the switch.
-
Select Next.
-
Select an existing VLAN or
select the add icon to add a new one.
-
Select Next.
-
For User Authentication:
- User
Authentication: Turn On for
wired devices, such as printers, servers, and end-user computers.
- MAC
Authentication: Turn On for
legacy devices that use MAC addresses as the user name and password to
authenticate clients.
- Authentication Protocol: If you selected
MAC Authentication, choose PAP, CHAP, or MS CHAP
V2 (for users on an Active Directory server) to
determine how the port forwards authentication requests from
users to an external RADIUS or Active Directory server. If you
choose PAP, the port sends an unencrypted password to the RADIUS
server. If you choose CHAP or MS CHAP V2, the port sends the
RADIUS or Active Directory authentication server the result of
an operation it performs on the password, instead of the
password itself. The authentication server performs the same
operation, and then compares the two results to check if they
match.
-
Select Next.
-
Add RADIUS Servers under RADIUS Settings to use this
form of user authentication.
-
For Authentication Method Priority, use the up or down
arrows to determine the authentication method use order.
-
For QoS Settings,
toggle On
to create custom settings.
Select the 802.1p
classification system (marked in the L2 frame header in Ethernet frames) or the
DiffServ codepoint marking system (marked in the L3 packet header) on outgoing
packets from the drop-down list. See
Configure Marker Maps.
-
Select Next.
-
For Transmission Settings, configure the
following:
- Transmission
Type: Select Auto, Half-Duplex, or Full-Duplex. Auto causes the switch to negotiate the
best possible duplex mode possible with the connected device.
Full-Duplex forces the switch to communicate with the connected device
using full-duplex communication. Half-Duplex forces the switch to use
half-duplex communication.
- Transmission Speed: Choose the speed the switch
port uses to communicate with the connected device.
- Debounce Timer: Select the amount of time the
switch does not register another input.
- CDP Receive: Enables the switch to receive and
parse the information within Cisco CDP frames.
- Auto MDIX: Automatically detects the required
cable connection type (straight through or crossover) and configures the
connection appropriately.
- LLDP Transmit: Enables the switch to transmit
LLDPDU frames.
- LLDP Receive: Enables the switch to receive
LLDPDU frames.
-
Select Next.
-
For STP:
- STP Enabled: Toggle ON to
enable STP for the port.
- Edge Port: Connects to a user terminal or server,
instead of other switches or shared network segments. A port configured
as an edge port will not cause a loop upon network topology
changes.
- BPDU Protection: Use the drop-down list to change
BPDU protection to guard or filter status.
- Guard - Controls whether a port explicitly
configured as Edge will disable itself upon reception of a BPDU.
The port will enter the error-disabled state, and will be
removed from the active topology.
- Filter - Controls whether a port explicitly
configured as Edge will transmit and receive BPDUs. You must
select this option for Fabric Engine switches.
- Disabled - Turns off BPDU Protection.
- Priority: When this port is an STP edge port,
select a port priority for STP from the drop-down list.
-
Select Next.
-
For Storm Control:
- Broadcast: Select to include traffic that is forwarded to
all destinations simultaneously.
- Unknown
Unicast: Select to include traffic whose destination
address does not appear in the forwarding database.
- Multicast: Select to include traffic whose
destination is a multicast address.
- TCP-SYN: Select to include TCP-SYN flood
traffic.
- Thersholds: Select Byte
Based or Packet Based.
- Rate Limit Type: Select
KBps (kilobytes per second) or
Percentage if you selected Byte
Based and PPS (packets per
second) if you selected Packet Based.
- Rate Limit Value: Enter when the switch should
discard traffic of the selected types.
-
For MAC Locking, enable the per port type with the
option to specify Maximum First Arrival Limit and specify
the Link Down Action.
By default, Link Down Action it is set to clear first
arrival MAC's, with the option to retain MAC's. We also have the option to take
action when MAC's are aged out.
-
For ELRP, toggle to ON to enable
ELRP per port.
-
For PSE, select an
existing profile or select the plus sign to add a new one.
-
Review all the port settings in
the Summary section and select Save when
complete.