Cisco Catalyst 4500 Series Instruction Manual

1
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
CONTENTS
Audience 3
Organization 3
Conventions 7
Related Documentation 8
Hardware Documents 8
Software Documentation 8
Cisco IOS Documentation 9
Commands in Task Tables 9
Notices 9
OpenSSL/Open SSL Project 10
License Issues 10
Obtaining Documentation and Submitting a Service Request i-12
Product Overview 1-1
Layer 2 Software Features 1-1
802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling 1-2
Cisco IOS Auto Smartport Macros 1-2
Cisco Discovery Protocol 1-3
Cisco Group Management Protocol (CGMP) server 1-3
EtherChannel Bundles 1-3
Ethernet CFM 1-3
Ethernet OAM Protocol 1-3
Flex Links and MAC Address-Table Move Update 1-4
Flexible NetFlow (Supervisor Engine 7-E and 7L-E only) 1-4
Internet Group Management Protocol (IGMP) Snooping 1-4
IPv6 Multicast BSR and BSR Scoped Zone Support 1-5
IPv6 Multicast Listen Discovery (MLD) and Multicast Listen Discovery Snooping 1-6
Jumbo Frames 1-6
Link Aggregation Control Protocol 1-7
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-7
Link Layer Discovery Protocol 1-7
Link State Tracking 1-8
Location Service 1-8
Multiple Spanning Tree 1-8
Per-VLAN Rapid Spanning Tree 1-8

Contents
2
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Quality of Service 1-9
Cisco Modular QoS Command-Line-Interface 1-9
Two-Rate Three-Color Policing 1-9
Resilient Ethernet Protocol 1-10
SmartPort Macros 1-10
Spanning Tree Protocol 1-10
Stateful Switchover 1-10
SVI Autostate 1-11
Unidirectional Link Detection 1-11
VLANs 1-11
Virtual Switching Systems 1-12
Virtual Switch System Client 1-12
Y.1731 (AIS and RDI) 1-12
Layer 3 Software Features 1-13
Bidirectional Forwarding Detection 1-14
Cisco Express Forwarding 1-14
Device Sensor 1-14
EIGRP Stub Routing 1-14
Enhanced Object Tracking 1-15
GLBP 1-15
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-15
HSRP 1-16
Cisco IOS XE IP Application Services: HSRP Features in Cisco IOS XE 3.1.0SG 1-16
SSO Aware HSRP 1-16
IP Routing Protocols 1-17
BGP 1-17
EIGRP 1-17
IS-IS 1-18
OSPF 1-18
RIP 1-19
In Service Software Upgrade 1-19
IPv6 1-19
Multicast Services 1-19
NSF with SSO 1-20
OSPF for Routed Access 1-21
Policy-Based Routing 1-21
Unicast Reverse Path Forwarding 1-22
Unidirectional Link Routing 1-22
VRF-lite 1-22
Virtual Router Redundancy Protocol 1-22

Contents
3
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Management Features 1-23
Cisco Call Home 1-24
Cisco Energy Wise 1-24
Cisco IOS IP Service Level Agreements 1-24
Cisco Media Services Proxy 1-25
Cisco Medianet AutoQoS 1-25
Cisco Medianet Flow Metadata 1-26
Cisco IOS Mediatrace and Performance Monitor 1-26
Cisco Network Assistant 1-27
Dynamic Host Control Protocol 1-28
Easy Virtual Network 1-28
Embedded CiscoView 1-29
Embedded Event Manager 1-29
Ethernet Management Port 1-29
File System Management on Supervisor Engine 7-E and Supervisor Engine 7L-E 1-29
FAT File Management System on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4948E, and
Catalyst 4900M 1-30
Forced 10/100 Autonegotiation 1-30
Intelligent Power Management 1-30
MAC Address Notification 1-30
MAC Notify MIB 1-30
NetFlow-lite 1-30
Power over Ethernet 1-31
Secure Shell 1-31
Simple Network Management Protocol 1-31
Smart Install 1-31
SPAN and RSPAN 1-32
Universal Power over Ethernet 1-32
Web Content Coordination Protocol 1-32
Wireshark 1-33
XML-PI 1-33
Security Features 1-33
802.1X Identity-Based Network Security 1-34
Cisco TrustSec MACsec Encryption 1-35
Cisco TrustSec Security Architecture 1-36
Cisco TrustSec Security Groups, SGTs and SGACLs 1-36
Dynamic ARP Inspection 1-37
Dynamic Host Configuration Protocol Snooping 1-37
Flood Blocking 1-37
Hardware-Based Control Plane Policing 1-37

Contents
4
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
IP Source Guard 1-38
IP Source Guard for Static Hosts 1-38
IPv6 First Hop Security 1-38
Local Authentication, RADIUS, and TACACS+ Authentication 1-40
Network Admission Control 1-40
Network Security with ACLs 1-40
Port Security 1-41
PPPoE Intermediate Agent 1-41
Session Aware Networking 1-41
Storm Control 1-42
uRPF Strict Mode 1-42
Utilities 1-42
Layer 2 Traceroute 1-42
Time Domain Reflectometry 1-43
Debugging Features 1-43
Web-based Authentication 1-43
New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E and Cisco IOS XE 3.5.0E 1-44
Command-Line Interfaces 2-1
Accessing the Switch CLI 2-2
Accessing the CLI Using the EIA/TIA-232 Console Interface 2-2
Accessing the CLI Through Telnet 2-2
Performing Command-Line Processing 2-3
Performing History Substitution 2-4
About Cisco IOS Command Modes 2-4
Getting a List of Commands and Syntax 2-5
Virtual Console for Standby Supervisor Engine 2-6
ROMMON Command-Line Interface 2-7
Archiving Crashfiles Information 2-8
Displaying a Crash Dump for Supervisor Engine 6-E and 6L-E 2-8
Configuring the Switch for the First Time 3-1
Default Switch Configuration 3-1
Configuring DHCP-Based Autoconfiguration 3-2
About DHCP-Based Autoconfiguration 3-2
DHCP Client Request Process 3-3
Configuring the DHCP Server 3-4
Configuring the TFTP Server 3-4
Configuring the DNS Server 3-5

Contents
5
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Configuring the Relay Device 3-5
Obtaining Configuration Files 3-6
Example Configuration 3-7
Configuring the Switch 3-8
Using Configuration Mode to Configure Your Switch 3-9
Verifying the Running Configuration Settings 3-9
Saving the Running Configuration Settings to Your Start-Up File 3-10
Reviewing the Configuration in NVRAM 3-10
Configuring a Default Gateway 3-11
Configuring a Static Route 3-11
Controlling Access to Privileged EXEC Commands 3-13
Setting or Changing a Static enable Password 3-13
Using the enable password and enable secret Commands 3-14
Setting or Changing a Privileged Password 3-14
Controlling Switch Access with TACACS+ 3-15
Understanding TACACS+ 3-15
TACACS+ Operation 3-17
Configuring TACACS+ 3-17
Displaying the TACACS+ Configuration 3-22
Encrypting Passwords 3-22
Configuring Multiple Privilege Levels 3-23
Setting the Privilege Level for a Command 3-23
Changing the Default Privilege Level for Lines 3-23
Logging In to a Privilege Level 3-24
Exiting a Privilege Level 3-24
Displaying the Password, Access Level, and Privilege Level Configuration 3-24
Recovering a Lost Enable Password 3-25
Modifying the Supervisor Engine Startup Configuration 3-25
Understanding the Supervisor Engine Boot Configuration 3-25
Understanding the ROM Monitor 3-26
Configuring the Software Configuration Register 3-26
Modifying the Boot Field and Using the boot Command 3-27
Modifying the Boot Field 3-28
Verifying the Configuration Register Setting 3-29
Specifying the Startup System Image 3-30
Flash Memory Features 3-31
Security Precautions 3-31
Configuring Flash Memory 3-31
Controlling Environment Variables 3-31

Contents
6
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Resetting a Switch to Factory Default Settings 3-32
Administering the Switch 4-1
Managing the System Time and Date 4-1
System Clock 4-2
Understanding Network Time Protocol 4-2
Configuring NTP 4-3
Default NTP Configuration 4-4
Configuring NTP Authentication 4-4
Configuring NTP Associations 4-6
Configuring NTP Broadcast Service 4-7
Configuring NTP Access Restrictions 4-8
Configuring the Source IP Address for NTP Packets 4-10
Displaying the NTP Configuration 4-11
Configuring Time and Date Manually 4-11
Setting the System Clock 4-11
Displaying the Time and Date Configuration 4-12
Configuring the Time Zone 4-12
Configuring Summer Time (Daylight Saving Time) 4-13
Managing Software Licenses Using Permanent Right-To-Use Features 4-14
About a PRTU License 4-15
Benefits of a PRTU License 4-15
Guidelines for the RTU License Model 4-16
Applying a PRTU License 4-16
Activating a PRTU License 4-16
Deactivating a PRTU License 4-17
Displaying Software License Information 4-17
Configuring a System Name and Prompt 4-21
Configuring a System Name 4-22
Understanding DNS 4-22
Default DNS Configuration 4-23
Setting Up DNS 4-23
Displaying the DNS Configuration 4-24
Creating a Banner 4-24
Default Banner Configuration 4-24
Configuring a Message-of-the-Day Login Banner 4-24
Configuring a Login Banner 4-27
Managing the MAC Address Table 4-28
Building the Address Table 4-28
MAC Addresses and VLANs 4-29

Contents
7
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Default MAC Address Table Configuration 4-30
Changing the Address Aging Time 4-30
Removing Dynamic Address Entries 4-31
Configuring MAC Change Notification Traps 4-31
Configuring MAC Move Notification Traps 4-33
Configuring MAC Threshold Notification Traps 4-35
Adding and Removing Static Address Entries 4-36
Configuring Unicast MAC Address Filtering 4-37
Disabling MAC Address Learning on a VLAN 4-39
Configuring Disable MAC Address Learning 4-39
Usage Guidelines 4-40
Deployment Scenarios 4-40
Feature Compatibility 4-42
Feature Incompatibility 4-43
Partial Feature Incompatibility 4-43
Displaying Address Table Entries 4-44
Managing the ARP Table 4-44
Configuring Embedded CiscoView Support 4-44
Understanding Embedded CiscoView 4-45
Installing and Configuring Embedded CiscoView 4-45
Displaying Embedded CiscoView Information 4-48
Configuring Virtual Switching Systems 5-1
Understanding Virtual Switching Systems 5-2
VSS Overview 5-2
Key Concepts 5-3
VSS Functionality 5-5
Hardware Requirements 5-9
Understanding VSL Topology 5-11
VSS Redundancy 5-11
Overview 5-12
RPR and SSO Redundancy 5-12
Switch Roles in a VSS 5-12
Failed Switch Recovery 5-13
VSL Failure 5-14
User Actions 5-14
Multichassis EtherChannels 5-14
Overview 5-14
MEC Failure Scenarios 5-15
Packet Handling 5-16

Contents
8
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Traffic on the VSL 5-16
Layer 2 Protocols 5-17
Layer 3 Protocols 5-18
System Monitoring 5-20
Environmental Monitoring 5-20
File System Access 5-20
Diagnostics 5-21
Network Management 5-21
Dual-Active Detection 5-23
Dual-Active Detection Using Enhanced PAgP 5-23
Dual-Active Detection Using Fast-Hello 5-24
Recovery Actions 5-24
Configuring a Recovery IP Address 5-25
VSS Initialization 5-26
Virtual Switch Link Protocol 5-26
SSO Dependencies 5-27
Initialization Procedure 5-27
VSS Configuration Guidelines and Restrictions 5-28
General VSS Restrictions and Guidelines 5-28
Multichassis EtherChannel Restrictions and Guidelines 5-30
Dual-Active Detection Restrictions and Guidelines 5-30
Configuring a VSS 5-30
Converting to a VSS 5-30
Backing Up the Standalone Configuration 5-32
Configuring SSO and NSF 5-32
Assigning Virtual Switch Domain and Switch Numbers 5-32
Configuring VSL Port Channel and Ports 5-33
Converting the Switch to Virtual Switch Mode 5-34
(Optional) Configuring VSS Standby Switch Modules 5-35
Displaying VSS Information 5-36
Converting a VSS to Standalone Switch 5-37
Copying the VSS Configuration to a Backup File 5-38
Converting the VSS Active Switch to Standalone 5-38
Converting the VSS Standby Switch to Standalone 5-38
Configuring VSS Parameters 5-39
Configuring VSL Switch Priority 5-39
Configuring a VSL 5-41
Adding and Deleting a VSL Port After the Bootup 5-41
Displaying VSL Information 5-42
Configuring VSL QoS 5-43

Contents
9
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Configuring the Router MAC Address 5-44
Configuring Multichassis EtherChannels 5-45
Configuring Dual-Active Detection 5-49
Configuring Enhanced PAgP Dual-Active Detection 5-49
Configuring Fast-Hello Dual-Active Detection 5-50
Displaying Dual-Active Detection 5-51
In-Service Software Upgrade (ISSU) on a VSS 5-53
VSS ISSU Concept 5-53
Traffic and Network Protocol Disruption During ISSU in a VSS 5-55
Related Documents 5-55
Prerequisites to Performing ISSU 5-55
About Performing ISSU 5-56
Performing an ISSU Upgrade: Two Methods 5-56
Guidelines for Performing ISSU 5-59
Compatibility Matrix 5-59
Compatibility Verification Using Cisco Feature Navigator 5-60
How to Perform the ISSU Process 5-61
Verifying the ISSU Software Installation 5-61
Verifying Redundancy Mode Before Beginning the ISSU Process 5-62
Verifying the ISSU State Before Beginning the ISSU Process 5-63
ISSU using the Four-command Sequence: Step 1 (loadversion) 5-65
ISSU using the Four-command Sequence: Step 2 (runversion) 5-66
ISSU using the Four Command Sequence: Step 3 (acceptversion) 5-68
ISSU using the Four Command Sequence: Step 4 (commitversion) 5-69
Using changeversion to Automate an ISSU Upgrade 5-70
Aborting a Software Upgrade During ISSU 5-76
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 5-77
The ISSU Compatibility Matrix 5-79
License Upgrade on a VSS 5-81
Configuring the Cisco IOS In-Service Software Upgrade Process 6-1
Prerequisites to Performing ISSU 6-2
About ISSU 6-3
Stateful Switchover Overview 6-3
NSF Overview 6-5
ISSU Process Overview 6-6
Performing an ISSU Upgrade: 2 Methods 6-11
Changeversion Process 6-12
Changeversion: Quick Option 6-12
Scheduled Changeversion: “in” and “at” Options 6-12

Contents
10
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Changeversion Deployment Scenario 6-13
Aborting an In-Progress Changeversion Procedure 6-13
Guidelines for Performing ISSU 6-13
Versioning Capability in Cisco IOS Software to Support ISSU 6-13
Compatibility Matrix 6-14
SNMP Support for ISSU 6-15
Compatibility Verification Using Cisco Feature Navigator 6-15
Performing the ISSU Process 6-15
Upgrading ISSU to Cisco IOS XE 3.4.0SG/15.1(2)SG from a Prior Release 6-16
Downgrading ISSU from Cisco IOS XE 3.4.0SG/15.1(2)SG to a Prior Release 6-17
Verifying the ISSU Software Installation 6-18
Verifying Redundancy Mode Before Beginning the ISSU Process 6-19
Verifying the ISSU State Before Beginning the ISSU Process 6-20
Loading New Cisco IOS Software on the Standby Supervisor Engine 6-21
Switching to the Standby Supervisor Engine 6-24
Stopping the ISSU Rollback Timer (Optional) 6-26
Loading New Cisco IOS Software on the New Standby Supervisor Engine 6-27
Using changeversion to Automate an ISSU Upgrade 6-29
Aborting a Software Upgrade During ISSU 6-34
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 6-35
Displaying ISSU Compatibility Matrix Information 6-36
Displaying ISSU Compatibility Matrix Information 6-40
Related Documents 6-42
Configuring the Cisco IOS XE In Service Software Upgrade Process 7-1
Related Documents 7-2
Prerequisites to Performing ISSU 7-2
About Performing ISSU 7-3
Stateful Switchover 7-3
NSF 7-5
ISSU Process 7-6
Performing an ISSU Upgrade: 2 Methods 7-11
Changeversion Process 7-12
Changeversion: Quick Option (LV to INIT) 7-12
Scheduled Changeversion: “in” and “at” Options 7-12
Changeversion Deployment Scenario 7-13
Aborting an In-Progress Changeversion Procedure 7-13
Guidelines for Performing ISSU 7-13
Compatibility Matrix 7-13
SNMP Support for ISSU 7-14

Contents
11
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Compatibility Verification Using Cisco Feature Navigator 7-14
How to Perform the ISSU Process 7-15
Upgrading ISSU to Cisco IOS XE 3.4.0SG/15.1(2)SG from a Prior Release 7-15
Downgrading ISSU from Cisco IOS XE 3.4.0SG/15.1(2)SG to a Prior Release 7-17
Verifying the ISSU Software Installation 7-18
Verifying Redundancy Mode Before Beginning the ISSU Process 7-18
Verifying the ISSU State Before Beginning the ISSU Process 7-20
Loading New Cisco IOS XE Software on the Standby Supervisor Engine 7-20
Switching to the Standby Supervisor Engine 7-23
Stopping the ISSU Rollback Timer (Optional) 7-25
Loading New Cisco IOS XE Software on the New Standby Supervisor Engine 7-26
Using changeversion to Automate an ISSU Upgrade 7-28
Aborting a Software Upgrade During ISSU 7-33
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 7-35
Displaying ISSU Compatibility Matrix Information 7-36
Cisco High Availability Features in Cisco IOS XE 3.1.0SG 7-38
Configuring Interfaces 8-1
About Interface Configuration 8-2
Using the interface Command 8-2
Configuring a Range of Interfaces 8-4
Using the Ethernet Management Port 8-6
Understanding the Ethernet Management Port 8-6
Fa1 Interface and mgmtVrf 8-7
SSO Model 8-9
ISSU Model 8-10
Supported Features on the Ethernet Management Port 8-10
Configuring the Ethernet Management Port 8-10
Defining and Using Interface-Range Macros 8-11
Deploying SFP+ in X2 Ports 8-12
Deploying 10-Gigabit Ethernet and Gigabit Ethernet SFP Ports on Supervisor Engine V-10GE 8-12
Deploying 10-Gigabit Ethernet or Gigabit Ethernet Ports 8-13
Port Numbering TwinGig Convertors 8-13
Limitations on Using a TwinGig Convertor 8-14
Selecting X2/TwinGig Convertor Mode 8-14
Invoking Shared-Backplane Uplink Mode on
Supervisor Engine 6-E and Supervisor Engine 6L-E 8-16
Limitation and Restrictions on Supervisor Engine 7-E and Supervisor Engine 7L-E 8-16
Selecting Uplink Mode on a Supervisor Engine 6-E 8-16

Contents
12
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Support for WS-X46490-CSFP-E on a 10-slot Chassis 8-17
Selecting the Uplink Port on a Supervisor Engine 7L-E 8-18
Single Supervisor Mode 8-18
Redundant Supervisor Mode 8-19
Digital Optical Monitoring Transceiver Support 8-19
Configuring Optional Interface Features 8-20
Configuring Ethernet Interface Speed and Duplex Mode 8-20
Speed and Duplex Mode Configuration Guidelines 8-20
Setting the Interface Speed 8-21
Setting the Interface Duplex Mode 8-22
Displaying the Interface Speed and Duplex Mode Configuration 8-22
Adding a Description for an Interface 8-23
Configuring Flow Control 8-23
Configuring Jumbo Frame Support 8-26
Ports and Modules That Support Jumbo Frames 8-26
Jumbo Frame Support 8-26
Configuring MTU Sizes 8-28
Interacting with Baby Giants 8-29
Configuring the Port Debounce Timer 8-29
Configuring Auto-MDIX on a Port 8-30
Displaying the Interface Auto-MDIX Configuration 8-32
Understanding Online Insertion and Removal 8-33
Online Insertion and Removal on a WS-4500X-32 8-33
Shutting down a Module 8-34
Booting a Module After if it has been Stopped 8-34
Common Scenarios 8-35
Monitoring and Maintaining the Interface 8-35
Monitoring Interface and Controller Status 8-36
Clearing and Resetting the Interface 8-36
Shutting Down and Restarting an Interface 8-37
Configuring Interface Link Status and Trunk Status Events 8-37
Configuring Link Status Event Notification for an Interface 8-38
Global Settings 8-38
Configuring a Switch Global Link Status Logging Event 8-38
Examples 8-38
Resetting the Interface to the Default Configuration 8-40
Checking Port Status and Connectivity 9-1
Checking Module Status 9-1

Contents
13
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Checking Interfaces Status 9-2
Displaying MAC Addresses 9-3
Checking Cable Status Using Time Domain Reflectometer 9-3
Overview 9-3
Running the TDR Test 9-4
TDR Guidelines 9-5
Using Telnet 9-5
Changing the Logout Timer 9-6
Monitoring User Sessions 9-6
Using Ping 9-7
Understanding How Ping Works 9-7
Running Ping 9-8
Using IP Traceroute 9-8
Understanding How IP Traceroute Works 9-8
Running IP Traceroute 9-9
Using Layer 2 Traceroute 9-9
Layer 2 Traceroute Usage Guidelines 9-10
Running Layer 2 Traceroute 9-11
Configuring ICMP 9-12
Enabling ICMP Protocol Unreachable Messages 9-12
Enabling ICMP Redirect Messages 9-12
Enabling ICMP Mask Reply Messages 9-13
Configuring Supervisor Engine Redundancy Using RPR and SSO on Supervisor Engine 6-E and
Supervisor Engine 6L-E 10-1
About Supervisor Engine Redundancy 10-2
Overview 10-2
RPR Operation 10-2
SSO Operation 10-3
About Supervisor Engine Redundancy Synchronization 10-4
RPR Supervisor Engine Configuration Synchronization 10-5
SSO Supervisor Engine Configuration Synchronization 10-5
Supervisor Engine Redundancy Guidelines and Restrictions 10-5
Configuring Supervisor Engine Redundancy 10-7
Configuring Redundancy 10-8
Virtual Console for Standby Supervisor Engine 10-10
Synchronizing the Supervisor Engine Configurations 10-11
Performing a Manual Switchover 10-12
Performing a Software Upgrade 10-13

Contents
14
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Manipulating Bootflash on the Redundant Supervisor Engine 10-14
Configuring Supervisor Engine Redundancy Using RPR and SSO on Supervisor Engine 7-E and
Supervisor Engine 7L-E 11-1
About Supervisor Engine Redundancy 11-2
Overview 11-2
RPR Operation 11-3
SSO Operation 11-3
About Supervisor Engine Redundancy Synchronization 11-5
RPR Supervisor Engine Configuration Synchronization 11-5
SSO Supervisor Engine Configuration Synchronization 11-5
Supervisor Engine Redundancy Guidelines and Restrictions 11-5
Configuring Supervisor Engine Redundancy 11-7
Configuring Redundancy 11-7
Virtual Console for Standby Supervisor Engine 11-9
Synchronizing the Supervisor Engine Configurations 11-10
Performing a Manual Switchover 11-12
Performing a Software Upgrade 11-12
Manipulating Bootflash on the Standby Supervisor Engine 11-14
Configuring Cisco NSF with SSO Supervisor Engine Redundancy 12-1
About NSF with SSO Supervisor Engine Redundancy 12-1
About Cisco IOS NSF-Aware and NSF-Capable Support 12-2
NSF with SSO Supervisor Engine Redundancy Overview 12-3
SSO Operation 12-4
NSF Operation 12-4
Cisco Express Forwarding 12-5
Routing Protocols 12-5
BGP Operation 12-5
OSPF Operation 12-6
IS-IS Operation 12-7
EIGRP Operation 12-8
NSF Guidelines and Restrictions 12-9
Configuring NSF with SSO Supervisor Engine Redundancy 12-9
Configuring SSO 12-10
Configuring CEF NSF 12-10
Verifying CEF NSF 12-11
Configuring BGP NSF 12-11
Verifying BGP NSF 12-11
Configuring OSPF NSF 12-12

Contents
15
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Verifying OSPF NSF 12-13
Configuring IS-IS NSF 12-13
Verifying IS-IS NSF 12-14
Configuring EIGRP NSF 12-16
Verifying EIGRP NSF 12-16
Cisco High Availability Features in Cisco IOS XE 3.1.0SG 12-17
Environmental Monitoring and Power Management 13-1
About Environmental Monitoring 13-1
Using CLI Commands to Monitor your Environment 13-2
Displaying Environment Conditions 13-2
Displaying On Board Failure Logging (OBFL) information for 9000W AC 13-4
Emergency Actions 13-5
System Alarms 13-6
Power Management 13-7
Power Management for the Catalyst 4500 Series Switches 13-7
Supported Power Supplies 13-8
Power Management Modes for the Catalyst 4500 Switch 13-9
Selecting a Power Management Mode 13-10
Power Management Limitations in Catalyst 4500 Series Switches 13-10
Available Power for Catalyst 4500 Series Switches Power Supplies 13-14
Special Considerations for the 4200 W AC and 6000 W AC Power Supplies 13-15
Combined Mode Power Resiliency 13-19
Special Considerations for the 1400 W DC Power Supply 13-21
Special Considerations for the 1400 W DC SP Triple Input Power Supply 13-22
Powering Down a Module 13-22
Power Management for the Catalyst 4948 Switches 13-23
Power Management Modes for the Catalyst 4948 Switch 13-23
IEEE 802.3az Energy Efficient Ethernet 13-23
Determining EEE Capability 13-24
Enabling EEE 13-24
Determining EEE Status 13-24
Configuring Power over Ethernet 14-1
About Power over Ethernet 14-1
Hardware Requirements 14-2
Power Management Modes 14-2
Intelligent Power Management 14-4
Configuring Power Consumption for Powered Devices on an Interface 14-5
Displaying the Operational Status for an Interface 14-6

Contents
16
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Displaying all PoE Detection and Removal Events 14-7
Displaying the PoE Consumed by a Module 14-8
PoE Policing and Monitoring 14-12
PoE Policing Modes 14-12
Configuring Power Policing on an Interface 14-13
Displaying Power Policing on an Interface 14-14
Configuring Errdisable Recovery 14-14
Enhanced Power PoE Support on the E-Series Chassis 14-15
Configuring Universal PoE 14-16
Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant 15-1
About Network Assistant 15-2
Community Overview 15-2
Clustering Overview 15-2
Network Assistant-Related Parameters and Their Defaults 15-3
Network Assistant CLI Commands 15-3
Configuring Your Switch for Network Assistant 15-4
(Minimum) Required Configuration 15-4
(Additional) Configuration Required to Use Community 15-5
(Additional) Configuration Required to Use Clustering 15-5
Managing a Network Using Community 15-6
Candidate and Member Requirements 15-7
Automatic Discovery of Candidates and Members 15-7
Community Names 15-8
Hostnames 15-8
Passwords 15-8
Communication Protocols 15-8
Access Modes in Network Assistant 15-9
Community Information 15-9
Adding Devices 15-9
Converting a Cluster into a Community 15-10
Managing a Network Using Cluster 15-11
Understanding Switch Clusters 15-11
Cluster Command Switch Requirements 15-11
Network Assistant and VTY 15-12
Candidate Switch and Cluster Member Switch Requirements 15-12
Using the CLI to Manage Switch Clusters 15-13
Configuring Network Assistant in Community or Cluster Mode 15-13
Configuring Network Assistant on a Networked Switch in Community Mode 15-13

Contents
17
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Configuring Network Assistant in a Networked Switch in Cluster Mode 15-17
Configuring VLANs, VTP, and VMPS 16-1
VLANs 16-1
About VLANs 16-1
VLAN Configuration Guidelines and Restrictions 16-3
VLAN Ranges 16-3
Configurable Normal-Range VLAN Parameters 16-4
VLAN Default Configuration 16-4
Configuring VLANs 16-5
Configuring VLANs in Global Configuration Mode 16-6
Assigning a Layer 2 LAN Interface to a VLAN 16-7
VLAN Trunking Protocol 16-7
About VTP 16-8
Understanding the VTP Domain 16-8
Understanding VTP Modes 16-9
Understanding VTP Advertisements 16-9
Understanding VTP Versions 16-9
Understanding VTP Pruning 16-11
VTP Configuration Guidelines and Restrictions 16-12
VTP Default Configuration 16-13
Configuring VTP 16-14
Configuring VTP Global Parameters 16-14
Configuring the VTP Mode 16-16
Starting a Takeover 16-19
Displaying VTP Statistics 16-19
Displaying VTP Devices in a Domain 16-20
VLAN Membership Policy Server 16-20
About VMPS 16-20
Understanding the VMPS Server 16-21
Security Modes for VMPS Server 16-21
Fallback VLAN 16-22
Illegal VMPS Client Requests 16-23
Overview of VMPS Clients 16-23
Understanding Dynamic VLAN Membership 16-23
Default VMPS Client Configuration 16-24
Configuring a Switch as a VMPS Client 16-24
Administering and Monitoring the VMPS 16-27
Troubleshooting Dynamic Port VLAN Membership 16-28
Dynamic Port VLAN Membership Configuration Example 16-29

Contents
18
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
VMPS Database Configuration File Example 16-32
Configuring IP Unnumbered Interface 17-1
About IP Unnumbered Interface Support 17-1
IP Unnumbered Interface Support with DHCP Server and Relay Agent 17-2
DHCP Option 82 17-2
IP Unnumbered Interface with Connected Host Polling 17-3
IP Unnumbered Configuration Guidelines and Restrictions 17-3
Configuring IP Unnumbered Interface Support with DHCP Server 17-4
Configuring IP Unnumbered Interface Support on LAN and VLAN Interfaces 17-4
Configuring IP Unnumbered Interface Support on a Range of Ethernet VLANs 17-5
Configuring IP Unnumbered Interface Support with Connected Host Polling 17-6
Displaying IP Unnumbered Interface Settings 17-7
Troubleshooting IP Unnumbered Interface 17-8
Related Documents 17-8
Configuring Layer 2 Ethernet Interfaces 18-1
About Layer 2 Ethernet Switching 18-1
Layer 2 Ethernet Switching 18-2
Switching Frames Between Segments 18-2
Building the MAC Address Table 18-2
VLAN Trunks 18-3
Layer 2 Interface Modes 18-3
Default Layer 2 Ethernet Interface Configuration 18-4
Layer 2 Interface Configuration Guidelines and Restrictions 18-4
Configuring Ethernet Interfaces for Layer 2 Switching 18-5
Configuring an Ethernet Interface as a Layer 2 Trunk 18-5
Configuring an Interface as a Layer 2 Access Port 18-7
Clearing Layer 2 Configuration 18-8
Configuring SmartPort Macros 19-1
About SmartPort Macros and Static SmartPort 19-1
Configuring SmartPort Macros 19-2
Passing Parameters Through the Macro 19-3
Macro Parameter Help 19-3
Default SmartPort Macro Configuration 19-4
cisco-global 19-4
cisco-desktop 19-4
cisco-phone 19-5

Contents
19
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
cisco-router 19-5
cisco-switch 19-5
SmartPort Macro Configuration Guidelines 19-6
Creating SmartPort Macros 19-8
Applying SmartPort Macros 19-8
cisco-global 19-10
cisco-desktop 19-10
cisco-phone 19-11
cisco-switch 19-11
cisco-router 19-12
Displaying SmartPort Macros 19-13
Configuring Static SmartPort Macros 19-13
Default Static SmartPort Configuration 19-13
Static SmartPort Configuration Guidelines 19-14
Applying Static SmartPort Macros 19-14
Configuring Cisco IOS Auto Smartport Macros 20-1
About Auto Smartport Macros 20-1
Device Classifier 20-2
Device Visibility Mode 20-3
Configuring Auto Smartport Macros 20-3
Enabling Auto Smartport Macros 20-3
Auto Smartport Default Configuration 20-4
Auto Smartport Configuration Guidelines 20-5
Configuring Auto Smartport Built-in Macro Parameters 20-6
Configuring User-Defined Event Triggers 20-8
802.1X-Based Event Trigger 20-8
MAC Address-Based Event Trigger 20-9
Configuring Mapping Between User-Defined Triggers and Built-in Macros 20-9
Configuring Auto Smartport User-Defined Macros 20-10
Displaying Auto Smartport 20-13
Configuring STP and MST 21-1
About STP 21-1
Understanding the Bridge ID 21-2
Bridge Priority Value 21-2
Extended System ID 21-3
STP MAC Address Allocation 21-3
Bridge Protocol Data Units 21-3
Election of the Root Bridge 21-4

Contents
20
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
STP Timers 21-4
Creating the STP Topology 21-5
STP Port States 21-5
MAC Address Allocation 21-6
STP and IEEE 802.1Q Trunks 21-6
Per-VLAN Rapid Spanning Tree 21-6
Default STP Configuration 21-7
Configuring STP 21-7
Enabling STP 21-8
Enabling the Extended System ID 21-9
Configuring the Root Bridge 21-9
Configuring a Secondary Root Switch 21-12
Configuring STP Port Priority 21-13
Configuring STP Port Cost 21-15
Configuring the Bridge Priority of a VLAN 21-17
Configuring the Hello Time 21-17
Configuring the Maximum Aging Time for a VLAN 21-18
Configuring the Forward-Delay Time for a VLAN 21-19
Disabling Spanning Tree Protocol 21-20
Enabling Per-VLAN Rapid Spanning Tree 21-20
Specifying the Link Type 21-21
Restarting Protocol Migration 21-21
About MST 21-22
IEEE 802.1s MST 21-22
IEEE 802.1w RSTP 21-23
RSTP Port Roles 21-24
RSTP Port States 21-24
MST-to-SST Interoperability 21-24
Common Spanning Tree 21-25
MST Instances 21-26
MST Configuration Parameters 21-26
MST Regions 21-26
MST Region Overview 21-26
Boundary Ports 21-27
IST Master 21-27
Edge Ports 21-27
Link Type 21-28
Message Age and Hop Count 21-28
MST-to-PVST+ Interoperability 21-28