Lab 1 & 2 notes.
I put in about 10 hours of study time today. I came across a few commands I have not seen/used before.
useful commands
do sh inter status | in err
show errdisable recovery
do sho int | in is up, line protocol is up |Internet address is
***
debug sw-vlan vtp events
debug sw-vlan vtp packets
switchcore wirespeed-store = “to reserve bandwidth for buffer storage to accommodate broadcast and multicast storms.”
This example shows how to enable the recovery timer for the BPDU guard
error-disabled cause:
Switch(config)# errdisable recovery cause bpduguard
This example shows how to set the timer to 500 seconds:
Switch(config)# errdisable recovery interval 500
*** The spanning-tree portfast bpdufilter command enables BPDU filtering globally on PortFast ports. BPDU filtering prevents a port from sending or receiving any BPDUs. ( if a port is configured for portfast and it receives a BPDU portfast will be removed.)
You can override the effects of the portfast bpdufilter default command by configuring BPDU filtering at the interface level.
Note Be careful when enabling BPDU filtering. The feature’s functionality is different when you enable it on a per-port basis or globally. When enabled globally, BPDU filtering is applied only on ports that are in an operational PortFast state. Ports send a few BPDUs at linkup before they effectively filter outbound BPDUs. If a BPDU is received on an edge port, it immediately loses its operational PortFast status and BPDU filtering is disabled.
When enabled locally on a port, BPDU filtering prevents the Catalyst 6500 series switch from receiving or sending BPDUs on this port.
Caution Be careful when using this command. Using this command incorrectly can cause bridging loops.
vlan dot1q tag native = To enable dot1q (802.1Q) tagging for all VLANs in a trunk, use the vlan dot1q tag native command in global configuration mode ( send the VLAN ID across trunks)
My first marco, lol.
macro name create
vlan 8
name TAX_DEPT
interface fa0/24
sw acc vlan 8
spann portfast
interface fa0/25
sw acc vlan 8
spann portfast
interface fa0/26
sw acc vlan 8
spann portfast
interface fa0/27
sw acc vlan 8
spann portfast
exit
@
dot1x port-control force-authorized < — needed globally
gotchas:
- when setting up etherchannels shut the interfaces down, config and then enable the interfaces.
- troubleshooting in the lab: do a show run and look for stuff that does not belong there, like VALC’s!
- all vtps passwords are md5
- with some ios’s port-channels must match
- req: every packet that traverses the trunk must have the VLAN ID. solution: vlan dot1q tag native.
- spanning-tree portfast bpdufilter enable (global) if a port is configured for portfast and it receives a BPDU it will lose its portfast status.