Users Guide

VLANs 853
console(config)#cos-queue strict 2
8 Configure an ACL to rate-limit the voice traffic in case of DoS attacks and
apply the ACL on the phone-connected interfaces. The administrator
should consider whether to apply this configuration on all perimeter ports.
console(config)#mac access-list extended dot1p-5-limit
console(config-mac-access-list)#1000 permit any any cos 5
console(config-mac-access-list)#rate-limit 1024 128
console(config-mac-access-list)#1010 permit any any
console(config-mac-access-list)#exit
console(config)#interface Gi2/0/11
console(config-if-Gi2/0/11)#mac access-group dot1p-5-limit in
1
console(config-if-Gi2/0/11)#exit
Non-MLAG aware device-2 (Partner-2)
1 Configure partner-2 with the following configuration. This configuration is
highly similar to the partner 1 configuration.
console#config
console(config)#interface Gi1/0/21
console(config-if-Gi2/0/21)#channel-group 4 mode active
console(config-if-Gi2/0/21)#no keepalive
console(config-if-Gi2/0/21)#exit
console(config)#interface Gi1/0/23
console(config-if-Gi1/0/23)#channel-group 4 mode active
console(config-if-Gi1/0/23)#no keepalive
console(config-if-Gi1/0/23)#exit
console(config)#interface port-channel 4
console(config-if-Po4)#switchport mode trunk
console(config-if-Po4)#exit
2 Disable loop protect on all the interfaces (optional).
console(config)#interface range gigabitethernet all
console(config-if)#no keepalive
console(config-if)#exit
3 Configure spanning-tree mode as RPVST.
console(config)#spanning-tree mode rapid-pvst
4 Create VLAN 2 for voice traffic. All switches must be configured
identically for the Voice VLAN.