Cisco Catalyst 4500 Series Instruction Manual

1
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
CONTENTS
Audience 3
Organization 3
Conventions 7
Related Documentation 8
Hardware Documents 8
Software Documentation 8
Cisco IOS Documentation 9
Commands in Task Tables 9
Notices 9
OpenSSL/Open SSL Project 10
License Issues 10
Obtaining Documentation and Submitting a Service Request i-12
Product Overview 1-1
Layer 2 Software Features 1-1
802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling 1-2
Cisco IOS Auto Smartport Macros 1-2
Cisco Discovery Protocol 1-3
Cisco Group Management Protocol (CGMP) server 1-3
EtherChannel Bundles 1-3
Ethernet CFM 1-3
Ethernet OAM Protocol 1-3
Flex Links and MAC Address-Table Move Update 1-4
Flexible NetFlow (Supervisor Engine 7-E and 7L-E only) 1-4
Internet Group Management Protocol (IGMP) Snooping 1-4
IPv6 Multicast BSR and BSR Scoped Zone Support 1-5
IPv6 Multicast Listen Discovery (MLD) and Multicast Listen Discovery Snooping 1-6
Jumbo Frames 1-6
Link Aggregation Control Protocol 1-7
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-7
Link Layer Discovery Protocol 1-7
Link State Tracking 1-8
Location Service 1-8
Multiple Spanning Tree 1-8
Per-VLAN Rapid Spanning Tree 1-8

Contents
2
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Quality of Service 1-9
Cisco Modular QoS Command-Line-Interface 1-9
Two-Rate Three-Color Policing 1-9
Resilient Ethernet Protocol 1-10
SmartPort Macros 1-10
Spanning Tree Protocol 1-10
Stateful Switchover 1-10
SVI Autostate 1-11
Unidirectional Link Detection 1-11
VLANs 1-11
Virtual Switching Systems 1-12
Virtual Switch System Client 1-12
Y.1731 (AIS and RDI) 1-12
Layer 3 Software Features 1-13
Bidirectional Forwarding Detection 1-14
Cisco Express Forwarding 1-14
Device Sensor 1-14
EIGRP Stub Routing 1-14
Enhanced Object Tracking 1-15
GLBP 1-15
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-15
HSRP 1-16
Cisco IOS XE IP Application Services: HSRP Features in Cisco IOS XE 3.1.0SG 1-16
SSO Aware HSRP 1-16
IP Routing Protocols 1-17
BGP 1-17
EIGRP 1-17
IS-IS 1-18
OSPF 1-18
RIP 1-19
In Service Software Upgrade 1-19
IPv6 1-19
Multicast Services 1-19
NSF with SSO 1-20
OSPF for Routed Access 1-21
Policy-Based Routing 1-21
Unicast Reverse Path Forwarding 1-22
Unidirectional Link Routing 1-22
VRF-lite 1-22
Virtual Router Redundancy Protocol 1-22

Contents
3
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Management Features 1-23
Cisco Call Home 1-24
Cisco Energy Wise 1-24
Cisco IOS IP Service Level Agreements 1-24
Cisco Media Services Proxy 1-25
Cisco Medianet AutoQoS 1-25
Cisco Medianet Flow Metadata 1-26
Cisco IOS Mediatrace and Performance Monitor 1-26
Cisco Network Assistant 1-27
Dynamic Host Control Protocol 1-28
Easy Virtual Network 1-28
Embedded CiscoView 1-29
Embedded Event Manager 1-29
Ethernet Management Port 1-29
File System Management on Supervisor Engine 7-E and Supervisor Engine 7L-E 1-29
FAT File Management System on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4948E, and
Catalyst 4900M 1-30
Forced 10/100 Autonegotiation 1-30
Intelligent Power Management 1-30
MAC Address Notification 1-30
MAC Notify MIB 1-30
NetFlow-lite 1-30
Power over Ethernet 1-31
Secure Shell 1-31
Simple Network Management Protocol 1-31
Smart Install 1-31
SPAN and RSPAN 1-32
Universal Power over Ethernet 1-32
Web Content Coordination Protocol 1-32
Wireshark 1-33
XML-PI 1-33
Security Features 1-33
802.1X Identity-Based Network Security 1-34
Cisco TrustSec MACsec Encryption 1-35
Cisco TrustSec Security Architecture 1-36
Cisco TrustSec Security Groups, SGTs and SGACLs 1-36
Dynamic ARP Inspection 1-37
Dynamic Host Configuration Protocol Snooping 1-37
Flood Blocking 1-37
Hardware-Based Control Plane Policing 1-37

Contents
4
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
IP Source Guard 1-38
IP Source Guard for Static Hosts 1-38
IPv6 First Hop Security 1-38
Local Authentication, RADIUS, and TACACS+ Authentication 1-40
Network Admission Control 1-40
Network Security with ACLs 1-40
Port Security 1-41
PPPoE Intermediate Agent 1-41
Session Aware Networking 1-41
Storm Control 1-42
uRPF Strict Mode 1-42
Utilities 1-42
Layer 2 Traceroute 1-42
Time Domain Reflectometry 1-43
Debugging Features 1-43
Web-based Authentication 1-43
New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E and Cisco IOS XE 3.5.0E 1-44
Command-Line Interfaces 2-1
Accessing the Switch CLI 2-2
Accessing the CLI Using the EIA/TIA-232 Console Interface 2-2
Accessing the CLI Through Telnet 2-2
Performing Command-Line Processing 2-3
Performing History Substitution 2-4
About Cisco IOS Command Modes 2-4
Getting a List of Commands and Syntax 2-5
Virtual Console for Standby Supervisor Engine 2-6
ROMMON Command-Line Interface 2-7
Archiving Crashfiles Information 2-8
Displaying a Crash Dump for Supervisor Engine 6-E and 6L-E 2-8
Configuring the Switch for the First Time 3-1
Default Switch Configuration 3-1
Configuring DHCP-Based Autoconfiguration 3-2
About DHCP-Based Autoconfiguration 3-2
DHCP Client Request Process 3-3
Configuring the DHCP Server 3-4
Configuring the TFTP Server 3-4
Configuring the DNS Server 3-5

Contents
5
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Configuring the Relay Device 3-5
Obtaining Configuration Files 3-6
Example Configuration 3-7
Configuring the Switch 3-8
Using Configuration Mode to Configure Your Switch 3-9
Verifying the Running Configuration Settings 3-9
Saving the Running Configuration Settings to Your Start-Up File 3-10
Reviewing the Configuration in NVRAM 3-10
Configuring a Default Gateway 3-11
Configuring a Static Route 3-11
Controlling Access to Privileged EXEC Commands 3-13
Setting or Changing a Static enable Password 3-13
Using the enable password and enable secret Commands 3-14
Setting or Changing a Privileged Password 3-14
Controlling Switch Access with TACACS+ 3-15
Understanding TACACS+ 3-15
TACACS+ Operation 3-17
Configuring TACACS+ 3-17
Displaying the TACACS+ Configuration 3-22
Encrypting Passwords 3-22
Configuring Multiple Privilege Levels 3-23
Setting the Privilege Level for a Command 3-23
Changing the Default Privilege Level for Lines 3-23
Logging In to a Privilege Level 3-24
Exiting a Privilege Level 3-24
Displaying the Password, Access Level, and Privilege Level Configuration 3-24
Recovering a Lost Enable Password 3-25
Modifying the Supervisor Engine Startup Configuration 3-25
Understanding the Supervisor Engine Boot Configuration 3-25
Understanding the ROM Monitor 3-26
Configuring the Software Configuration Register 3-26
Modifying the Boot Field and Using the boot Command 3-27
Modifying the Boot Field 3-28
Verifying the Configuration Register Setting 3-29
Specifying the Startup System Image 3-30
Flash Memory Features 3-31
Security Precautions 3-31
Configuring Flash Memory 3-31
Controlling Environment Variables 3-31

Contents
6
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Resetting a Switch to Factory Default Settings 3-32
Administering the Switch 4-1
Managing the System Time and Date 4-1
System Clock 4-2
Understanding Network Time Protocol 4-2
Configuring NTP 4-3
Default NTP Configuration 4-4
Configuring NTP Authentication 4-4
Configuring NTP Associations 4-6
Configuring NTP Broadcast Service 4-7
Configuring NTP Access Restrictions 4-8
Configuring the Source IP Address for NTP Packets 4-10
Displaying the NTP Configuration 4-11
Configuring Time and Date Manually 4-11
Setting the System Clock 4-11
Displaying the Time and Date Configuration 4-12
Configuring the Time Zone 4-12
Configuring Summer Time (Daylight Saving Time) 4-13
Managing Software Licenses Using Permanent Right-To-Use Features 4-14
About a PRTU License 4-15
Benefits of a PRTU License 4-15
Guidelines for the RTU License Model 4-16
Applying a PRTU License 4-16
Activating a PRTU License 4-16
Deactivating a PRTU License 4-17
Displaying Software License Information 4-17
Configuring a System Name and Prompt 4-21
Configuring a System Name 4-22
Understanding DNS 4-22
Default DNS Configuration 4-23
Setting Up DNS 4-23
Displaying the DNS Configuration 4-24
Creating a Banner 4-24
Default Banner Configuration 4-24
Configuring a Message-of-the-Day Login Banner 4-24
Configuring a Login Banner 4-27
Managing the MAC Address Table 4-28
Building the Address Table 4-28
MAC Addresses and VLANs 4-29

Contents
7
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Default MAC Address Table Configuration 4-30
Changing the Address Aging Time 4-30
Removing Dynamic Address Entries 4-31
Configuring MAC Change Notification Traps 4-31
Configuring MAC Move Notification Traps 4-33
Configuring MAC Threshold Notification Traps 4-35
Adding and Removing Static Address Entries 4-36
Configuring Unicast MAC Address Filtering 4-37
Disabling MAC Address Learning on a VLAN 4-39
Configuring Disable MAC Address Learning 4-39
Usage Guidelines 4-40
Deployment Scenarios 4-40
Feature Compatibility 4-42
Feature Incompatibility 4-43
Partial Feature Incompatibility 4-43
Displaying Address Table Entries 4-44
Managing the ARP Table 4-44
Configuring Embedded CiscoView Support 4-44
Understanding Embedded CiscoView 4-45
Installing and Configuring Embedded CiscoView 4-45
Displaying Embedded CiscoView Information 4-48
Configuring Virtual Switching Systems 5-1
Understanding Virtual Switching Systems 5-2
VSS Overview 5-2
Key Concepts 5-3
VSS Functionality 5-5
Hardware Requirements 5-9
Understanding VSL Topology 5-11
VSS Redundancy 5-11
Overview 5-12
RPR and SSO Redundancy 5-12
Switch Roles in a VSS 5-12
Failed Switch Recovery 5-13
VSL Failure 5-14
User Actions 5-14
Multichassis EtherChannels 5-14
Overview 5-14
MEC Failure Scenarios 5-15
Packet Handling 5-16

Contents
8
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Traffic on the VSL 5-16
Layer 2 Protocols 5-17
Layer 3 Protocols 5-18
System Monitoring 5-20
Environmental Monitoring 5-20
File System Access 5-20
Diagnostics 5-21
Network Management 5-21
Dual-Active Detection 5-23
Dual-Active Detection Using Enhanced PAgP 5-23
Dual-Active Detection Using Fast-Hello 5-24
Recovery Actions 5-24
Configuring a Recovery IP Address 5-25
VSS Initialization 5-26
Virtual Switch Link Protocol 5-26
SSO Dependencies 5-27
Initialization Procedure 5-27
VSS Configuration Guidelines and Restrictions 5-28
General VSS Restrictions and Guidelines 5-28
Multichassis EtherChannel Restrictions and Guidelines 5-30
Dual-Active Detection Restrictions and Guidelines 5-30
Configuring a VSS 5-30
Converting to a VSS 5-30
Backing Up the Standalone Configuration 5-32
Configuring SSO and NSF 5-32
Assigning Virtual Switch Domain and Switch Numbers 5-32
Configuring VSL Port Channel and Ports 5-33
Converting the Switch to Virtual Switch Mode 5-34
(Optional) Configuring VSS Standby Switch Modules 5-35
Displaying VSS Information 5-36
Converting a VSS to Standalone Switch 5-37
Copying the VSS Configuration to a Backup File 5-38
Converting the VSS Active Switch to Standalone 5-38
Converting the VSS Standby Switch to Standalone 5-38
Configuring VSS Parameters 5-39
Configuring VSL Switch Priority 5-39
Configuring a VSL 5-41
Adding and Deleting a VSL Port After the Bootup 5-41
Displaying VSL Information 5-42
Configuring VSL QoS 5-43

Contents
9
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Configuring the Router MAC Address 5-44
Configuring Multichassis EtherChannels 5-45
Configuring Dual-Active Detection 5-49
Configuring Enhanced PAgP Dual-Active Detection 5-49
Configuring Fast-Hello Dual-Active Detection 5-50
Displaying Dual-Active Detection 5-51
In-Service Software Upgrade (ISSU) on a VSS 5-53
VSS ISSU Concept 5-53
Traffic and Network Protocol Disruption During ISSU in a VSS 5-55
Related Documents 5-55
Prerequisites to Performing ISSU 5-55
About Performing ISSU 5-56
Performing an ISSU Upgrade: Two Methods 5-56
Guidelines for Performing ISSU 5-59
Compatibility Matrix 5-59
Compatibility Verification Using Cisco Feature Navigator 5-60
How to Perform the ISSU Process 5-61
Verifying the ISSU Software Installation 5-61
Verifying Redundancy Mode Before Beginning the ISSU Process 5-62
Verifying the ISSU State Before Beginning the ISSU Process 5-63
ISSU using the Four-command Sequence: Step 1 (loadversion) 5-65
ISSU using the Four-command Sequence: Step 2 (runversion) 5-66
ISSU using the Four Command Sequence: Step 3 (acceptversion) 5-68
ISSU using the Four Command Sequence: Step 4 (commitversion) 5-69
Using changeversion to Automate an ISSU Upgrade 5-70
Aborting a Software Upgrade During ISSU 5-76
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 5-77
The ISSU Compatibility Matrix 5-79
License Upgrade on a VSS 5-81
Configuring the Cisco IOS In-Service Software Upgrade Process 6-1
Prerequisites to Performing ISSU 6-2
About ISSU 6-3
Stateful Switchover Overview 6-3
NSF Overview 6-5
ISSU Process Overview 6-6
Performing an ISSU Upgrade: 2 Methods 6-11
Changeversion Process 6-12
Changeversion: Quick Option 6-12
Scheduled Changeversion: “in” and “at” Options 6-12

Contents
10
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Changeversion Deployment Scenario 6-13
Aborting an In-Progress Changeversion Procedure 6-13
Guidelines for Performing ISSU 6-13
Versioning Capability in Cisco IOS Software to Support ISSU 6-13
Compatibility Matrix 6-14
SNMP Support for ISSU 6-15
Compatibility Verification Using Cisco Feature Navigator 6-15
Performing the ISSU Process 6-15
Upgrading ISSU to Cisco IOS XE 3.4.0SG/15.1(2)SG from a Prior Release 6-16
Downgrading ISSU from Cisco IOS XE 3.4.0SG/15.1(2)SG to a Prior Release 6-17
Verifying the ISSU Software Installation 6-18
Verifying Redundancy Mode Before Beginning the ISSU Process 6-19
Verifying the ISSU State Before Beginning the ISSU Process 6-20
Loading New Cisco IOS Software on the Standby Supervisor Engine 6-21
Switching to the Standby Supervisor Engine 6-24
Stopping the ISSU Rollback Timer (Optional) 6-26
Loading New Cisco IOS Software on the New Standby Supervisor Engine 6-27
Using changeversion to Automate an ISSU Upgrade 6-29
Aborting a Software Upgrade During ISSU 6-34
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 6-35
Displaying ISSU Compatibility Matrix Information 6-36
Displaying ISSU Compatibility Matrix Information 6-40
Related Documents 6-42
Configuring the Cisco IOS XE In Service Software Upgrade Process 7-1
Related Documents 7-2
Prerequisites to Performing ISSU 7-2
About Performing ISSU 7-3
Stateful Switchover 7-3
NSF 7-5
ISSU Process 7-6
Performing an ISSU Upgrade: 2 Methods 7-11
Changeversion Process 7-12
Changeversion: Quick Option (LV to INIT) 7-12
Scheduled Changeversion: “in” and “at” Options 7-12
Changeversion Deployment Scenario 7-13
Aborting an In-Progress Changeversion Procedure 7-13
Guidelines for Performing ISSU 7-13
Compatibility Matrix 7-13
SNMP Support for ISSU 7-14