Cisco Catalyst 4500 Series User manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 4500 Series Switch Cisco IOS
Software Configuration Guide
Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Customer Order Number: DOC-OL-25340-=1
Customer Order Number: OL-25340-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of
Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo,
Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study,
LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way
to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0711R)
Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide
Copyright © 1999–2012 Cisco Systems, Inc. All rights reserved.

i
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
CONTENTS
Preface liii
Audience liii
Organization liii
Conventions lvii
Related Documentation lviii
Hardware Documents lviii
Software Documentation lviii
Cisco IOS Documentation lix
Commands in Task Tables lix
Notices lix
OpenSSL/Open SSL Project lx
License Issues lx
Obtaining Documentation and Submitting a Service Request i-lxii
CHAPTER 1Product Overview 1-1
Layer 2 Software Features 1-1
802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling 1-2
Cisco IOS Auto Smartport Macros 1-2
Cisco Discovery Protocol 1-3
Cisco Group Management Protocol (CGMP) server 1-3
EtherChannel Bundles 1-3
Ethernet CFM 1-3
Ethernet OAM Protocol 1-3
Flex Links and MAC Address-Table Move Update 1-4
Flexible NetFlow 1-4
Internet Group Management Protocol (IGMP) Snooping 1-4
IPv6 Multicast Listen Discovery (MLD) and Multicast Listen Discovery snooping 1-5
Jumbo Frames 1-5
Link Aggregation Control Protocol 1-5
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-5
Link Layer Discovery Protocol 1-6
Link State Tracking 1-6
Location Service 1-6
Multiple Spanning Tree 1-7

Contents
ii
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG OL-25340-01
Per-VLAN Rapid Spanning Tree 1-7
Quality of Service 1-7
Cisco Modular QoS Command-Line-Interface 1-7
Two-Rate Three-Color Policing 1-8
Resilient Ethernet Protocol 1-8
SmartPort Macros 1-8
Spanning Tree Protocol 1-8
Stateful Switchover 1-9
SVI Autostate 1-9
Unidirectional Link Detection 1-9
VLANs 1-10
Virtual Switch System Client 1-10
Y.1731 (AIS and RDI) 1-10
Layer 3 Software Features 1-11
Bidirectional Forwarding Detection 1-11
Cisco Express Forwarding 1-12
EIGRP Stub Routing 1-12
Enhanced Object Tracking 1-12
GLBP 1-13
Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-13
HSRP 1-13
Cisco IOS XE IP Application Services: HSRP Features in Cisco IOS XE 3.1.0SG 1-13
SSO Aware HSRP 1-14
IP Routing Protocols 1-14
BGP 1-15
EIGRP 1-15
IS-IS 1-16
OSPF 1-16
RIP 1-16
In Service Software Upgrade 1-17
IPv6 1-17
Multicast Services 1-17
NSF with SSO 1-18
OSPF for Routed Access 1-19
Policy-Based Routing 1-19
Unicast Reverse Path Forwarding 1-19
Unidirectional Link Routing 1-19
VRF-lite 1-20
Virtual Router Redundancy Protocol 1-20
Management Features 1-20

Contents
iii
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Cisco Call Home 1-21
Cisco Energy Wise 1-21
Cisco IOS IP Service Level Agreements 1-22
Cisco Media Services Proxy 1-22
Cisco Medianet AutoQoS 1-23
Cisco Medianet Flow Metadata 1-23
Cisco IOS Mediatrace and Performance Monitor 1-24
Cisco Network Assistant 1-25
Dynamic Host Control Protocol 1-25
Easy Virtual Network 1-25
Embedded CiscoView 1-26
Embedded Event Manager 1-26
Ethernet Management Port 1-26
File System Management on Supervisor Engine 7-E and Supervisor Engine 7L-E 1-26
FATFileManagementSystemonSupervisorEngine6-E,SupervisorEngine6L-E,Catalyst4948E,and
Catalyst 4900M 1-27
Forced 10/100 Autonegotiation 1-27
Intelligent Power Management 1-27
MAC Address Notification 1-27
MAC Notify MIB 1-27
NetFlow-lite 1-28
Power over Ethernet 1-28
Secure Shell 1-28
Simple Network Management Protocol 1-28
SPAN and RSPAN 1-29
Universal Power over Ethernet 1-29
Web Content Coordination Protocol 1-29
Wireshark 1-30
XML-PI 1-30
Security Features 1-30
802.1X Identity-Based Network Security 1-31
Cisco TrustSec Security Architecture 1-32
Cisco TrustSec MACsec Encryption 1-33
Dynamic ARP Inspection 1-33
Dynamic Host Configuration Protocol Snooping 1-33
Flood Blocking 1-34
Hardware-Based Control Plane Policing 1-34
IP Source Guard 1-34
IP Source Guard for Static Hosts 1-34
Local Authentication, RADIUS, and TACACS+ Authentication 1-35

Contents
iv
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG OL-25340-01
Network Admission Control 1-35
Network Security with ACLs 1-35
Port Security 1-36
PPPoE Intermediate Agent 1-36
Storm Control 1-36
uRPF Strict Mode 1-37
Utilities 1-37
Layer 2 Traceroute 1-37
Time Domain Reflectometry 1-37
Debugging Features 1-37
Web-based Authentication 1-38
New and Modified Software Features Supported in Cisco IOS 15.1(1)SG and Cisco IOS XE 3.3SG 1-39
CHAPTER 2Command-Line Interfaces 2-1
Accessing the Switch CLI 2-2
Accessing the CLI Using the EIA/TIA-232 Console Interface 2-2
Accessing the CLI Through Telnet 2-2
Performing Command-Line Processing 2-3
Performing History Substitution 2-4
About Cisco IOS Command Modes 2-4
Getting a List of Commands and Syntax 2-5
Virtual Console for Standby Supervisor Engine 2-6
ROMMON Command-Line Interface 2-7
Archiving Crashfiles Information 2-8
Displaying a Crash Dump for Supervisor Engine 6-E and 6L-E 2-8
CHAPTER 3Configuring the Switch for the First Time 3-1
Default Switch Configuration 3-1
Configuring DHCP-Based Autoconfiguration 3-2
About DHCP-Based Autoconfiguration 3-2
DHCP Client Request Process 3-3
Configuring the DHCP Server 3-4
Configuring the TFTP Server 3-4
Configuring the DNS Server 3-5
Configuring the Relay Device 3-5
Obtaining Configuration Files 3-6
Example Configuration 3-7
Configuring the Switch 3-8

Contents
v
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Using Configuration Mode to Configure Your Switch 3-9
Verifying the Running Configuration Settings 3-9
Saving the Running Configuration Settings to Your Start-Up File 3-10
Reviewing the Configuration in NVRAM 3-10
Configuring a Default Gateway 3-11
Configuring a Static Route 3-11
Controlling Access to Privileged EXEC Commands 3-13
Setting or Changing a Static enable Password 3-13
Using the enable password and enable secret Commands 3-14
Setting or Changing a Privileged Password 3-14
Controlling Switch Access with TACACS+ 3-15
Understanding TACACS+ 3-15
TACACS+ Operation 3-17
Configuring TACACS+ 3-17
Displaying the TACACS+ Configuration 3-22
Encrypting Passwords 3-22
Configuring Multiple Privilege Levels 3-23
Setting the Privilege Level for a Command 3-23
Changing the Default Privilege Level for Lines 3-23
Logging In to a Privilege Level 3-24
Exiting a Privilege Level 3-24
Displaying the Password, Access Level, and Privilege Level Configuration 3-24
Recovering a Lost Enable Password 3-25
Modifying the Supervisor Engine Startup Configuration 3-25
Understanding the Supervisor Engine Boot Configuration 3-25
Understanding the ROM Monitor 3-26
Configuring the Software Configuration Register 3-26
Modifying the Boot Field and Using the boot Command 3-27
Modifying the Boot Field 3-28
Verifying the Configuration Register Setting 3-29
Specifying the Startup System Image 3-30
Flash Memory Features 3-31
Security Precautions 3-31
Configuring Flash Memory 3-31
Controlling Environment Variables 3-31
Resetting a Switch to Factory Default Settings 3-32
CHAPTER 4Administering the Switch 4-1
Managing the System Time and Date 4-1

Contents
vi
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG OL-25340-01
System Clock 4-2
Understanding Network Time Protocol 4-2
Configuring NTP 4-3
Default NTP Configuration 4-4
Configuring NTP Authentication 4-4
Configuring NTP Associations 4-6
Configuring NTP Broadcast Service 4-7
Configuring NTP Access Restrictions 4-8
Configuring the Source IP Address for NTP Packets 4-10
Displaying the NTP Configuration 4-11
Configuring Time and Date Manually 4-11
Setting the System Clock 4-11
Displaying the Time and Date Configuration 4-12
Configuring the Time Zone 4-12
Configuring Summer Time (Daylight Saving Time) 4-13
Configuring a System Name and Prompt 4-14
Configuring a System Name 4-15
Understanding DNS 4-15
Default DNS Configuration 4-16
Setting Up DNS 4-16
Displaying the DNS Configuration 4-17
Creating a Banner 4-17
Default Banner Configuration 4-18
Configuring a Message-of-the-Day Login Banner 4-18
Configuring a Login Banner 4-20
Managing the MAC Address Table 4-21
Building the Address Table 4-21
MAC Addresses and VLANs 4-22
Default MAC Address Table Configuration 4-23
Changing the Address Aging Time 4-23
Removing Dynamic Address Entries 4-24
Configuring MAC Change Notification Traps 4-24
Configuring MAC Move Notification Traps 4-26
Configuring MAC Threshold Notification Traps 4-28
Adding and Removing Static Address Entries 4-29
Configuring Unicast MAC Address Filtering 4-30
Disabling MAC Address Learning on a VLAN 4-32
Configuring Disable MAC Address Learning 4-32
Usage Guidelines 4-33

Contents
vii
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
OL-25340-01
Deployment Scenarios 4-33
Feature Compatibility 4-35
Feature Incompatibility 4-36
Partial Feature Incompatibility 4-36
Displaying Address Table Entries 4-37
Managing the ARP Table 4-37
Configuring Embedded CiscoView Support 4-37
Understanding Embedded CiscoView 4-38
Installing and Configuring Embedded CiscoView 4-38
Displaying Embedded CiscoView Information 4-41
CHAPTER 5Configuring the Cisco IOS In-Service Software Upgrade Process 5-1
Prerequisites to Performing ISSU 5-2
About ISSU 5-3
Stateful Switchover Overview 5-3
NSF Overview 5-5
ISSU Process Overview 5-6
Performing an ISSU Upgrade: 2 Methods 5-11
Changeversion Process 5-12
Changeversion: Quick Option 5-12
Scheduled Changeversion: “in” and “at” Options 5-12
Changeversion Deployment Scenario 5-13
Aborting an In-Progress Changeversion Procedure 5-13
Guidelines for Performing ISSU 5-13
Versioning Capability in Cisco IOS Software to Support ISSU 5-13
Compatibility Matrix 5-14
SNMP Support for ISSU 5-15
Compatibility Verification Using Cisco Feature Navigator 5-15
Performing the ISSU Process 5-15
Verifying the ISSU Software Installation 5-16
Verifying Redundancy Mode Before Beginning the ISSU Process 5-16
Verifying the ISSU State Before Beginning the ISSU Process 5-17
Loading New Cisco IOS Software on the Standby Supervisor Engine 5-18
Switching to the Standby Supervisor Engine 5-21
Stopping the ISSU Rollback Timer (Optional) 5-23
Loading New Cisco IOS Software on the New Standby Supervisor Engine 5-24
Using changeversion to Automate an ISSU Upgrade 5-26
Aborting a Software Upgrade During ISSU 5-31
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 5-32

Contents
viii
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG OL-25340-01
Displaying ISSU Compatibility Matrix Information 5-34
Displaying ISSU Compatibility Matrix Information 5-37
Related Documents 5-39
CHAPTER 6Configuring the Cisco IOS XE In Service Software Upgrade Process 6-1
Related Documents 6-2
Prerequisites to Performing ISSU 6-2
About Performing ISSU 6-3
Stateful Switchover 6-3
NSF 6-5
ISSU Process 6-6
Performing an ISSU Upgrade: 2 Methods 6-11
Changeversion Process 6-12
Changeversion: Quick Option (LV to INIT) 6-12
Scheduled Changeversion: “in” and “at” Options 6-12
Changeversion Deployment Scenario 6-13
Aborting an In-Progress Changeversion Procedure 6-13
Guidelines for Performing ISSU 6-13
Compatibility Matrix 6-13
SNMP Support for ISSU 6-14
Compatibility Verification Using Cisco Feature Navigator 6-14
How to Perform the ISSU Process 6-15
Verifying the ISSU Software Installation 6-15
Verifying Redundancy Mode Before Beginning the ISSU Process 6-16
Verifying the ISSU State Before Beginning the ISSU Process 6-17
Loading New Cisco IOS XE Software on the Standby Supervisor Engine 6-18
Switching to the Standby Supervisor Engine 6-21
Stopping the ISSU Rollback Timer (Optional) 6-23
Loading New Cisco IOS XE Software on the New Standby Supervisor Engine 6-24
Using changeversion to Automate an ISSU Upgrade 6-25
Aborting a Software Upgrade During ISSU 6-31
Configuring the Rollback Timer to Safeguard Against Upgrade Issues 6-32
Displaying ISSU Compatibility Matrix Information 6-34
Cisco High Availability Features in Cisco IOS XE 3.1.0SG 6-35
CHAPTER 7Configuring Interfaces 7-1
About Interface Configuration 7-2
Using the interface Command 7-2
Configuring a Range of Interfaces 7-4