Cisco Catalyst 9400 Series User manual

System Management Configuration Guide, Cisco IOS XE Bengaluru
17.4.x (Catalyst 9400 Switches)
First Published: 2020-11-30
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2020 Cisco Systems, Inc. All rights reserved.

CONTENTS
Administering the Device 1
CHAPTER 1
Information About Administering the Device 1
System Time and Date Management 1
System Clock 1
Network Time Protocol 2
NTP Stratum 3
NTP Associations 3
NTP Security 5
NTP Services on a Specific Interface 6
Source IP Address for NTP Packets 6
NTP Implementation 6
System Name and Prompt 7
Stack System Name and Prompt 8
Default System Name and Prompt Configuration 8
DNS 8
Default DNS Settings 8
Login Banners 8
Default Banner Configuration 9
MAC Address Table 9
MAC Address Table Creation 9
MAC Addresses and VLANs 9
MAC Addresses and Device Stacks 9
Default MAC Address Table Settings 10
ARP Table Management 10
How to Administer the Device 10
Configuring the Time and Date Manually 10
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
iii

Setting the System Clock 10
Configuring the Time Zone 11
Configuring Summer Time (Daylight Saving Time) 12
Configuring NTP 14
Default NTP Configuration 14
Configuring NTP Authentication 14
Configuring Poll-Based NTP Associations 16
Configuring Broadcast-Based NTP Associations 18
Configuring NTP Access Restrictions 19
Configuring a System Name 21
Setting Up DNS 22
Configuring a Message-of-the-Day Login Banner 24
Configuring a Login Banner 25
Managing the MAC Address Table 26
Changing the Address Aging Time 26
Configuring MAC Address Change Notification Traps 27
Configuring MAC Address Move Notification Traps 29
Configuring MAC Threshold Notification Traps 31
Disabling MAC Address Learning on VLAN 33
Adding and Removing Static Address Entries 34
Configuring Unicast MAC Address Filtering 36
Monitoring and Maintaining Administration of the Device 36
Configuration Examples for Device Administration 37
Example: Setting the System Clock 37
Examples: Configuring Summer Time 38
Example: Configuring a MOTD Banner 38
Example: Configuring a Login Banner 38
Example: Configuring MAC Address Change Notification Traps 39
Example: Configuring MAC Threshold Notification Traps 39
Example: Adding the Static Address to the MAC Address Table 39
Example: Configuring Unicast MAC Address Filtering 40
Additional References for Device Administration 40
Feature History for Device Administration 40
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
iv
Contents

Performing Device Setup Configuration 41
CHAPTER 2
Restrictions for Performing Device Setup Configuration 41
Information About Performing Device Setup Configuration 41
Device Boot Process 41
Software Install Overview 42
Software Boot Modes 43
Installing the Software Package 44
Terminating a Software Install 44
Devices Information Assignment 44
Default Switch Information 45
DHCP-Based Autoconfiguration Overview 45
DHCP Client Request Process 46
DHCP-Based Autoconfiguration and Image Update 47
Restrictions for DHCP-Based Autoconfiguration 47
DHCP Autoconfiguration 47
DHCP Auto-Image Update 47
DHCP Server Configuration Guidelines 48
Purpose of the TFTP Server 48
Purpose of the DNS Server 49
How to Obtain Configuration Files 49
How to Control Environment Variables 50
Common Environment Variables 51
Environment Variables for TFTP 52
Scheduled Reload of the Software Image 53
How to Perform Device Setup Configuration 53
Configuring DHCP Autoconfiguration (Only Configuration File) 53
Configuring DHCP Auto-Image Update (Configuration File and Image) 55
Configuring the Client to Download Files from DHCP Server 58
Manually Assigning IP Information to Multiple SVIs 59
Modifying Device Startup Configuration 61
Specifying a Filename to Read and Write a System Configuration 61
Manually Booting the Switch 62
Booting the Device in Installed Mode 63
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
v
Contents

Booting a Device in Bundle Mode 65
Configuring a Scheduled Software Image Reload 66
Configuration Examples for Device Setup Configuration 67
Examples: Displaying Software Bootup in Install Mode 67
Example: Managing an Update Package 70
Verifying Software Install 82
Example: Configuring a Device as a DHCP Server 85
Example: Configuring DHCP Auto-Image Update 86
Example: Configuring a Device to Download Configurations from a DHCP Server 86
Example: Scheduling Software Image Reload 86
Additional References For Performing Device Setup 87
Feature History for Performing Device Setup Configuration 87
Smart Licensing Using Policy 89
CHAPTER 3
Introduction to Smart Licensing Using Policy 89
Information About Smart Licensing Using Policy 90
Overview 90
Architecture 90
Product Instance 90
CSLU 91
CSSM 91
Controller 92
SSM On-Prem 92
Concepts 93
License Enforcement Types 93
License Duration 94
Authorization Code 94
Policy 94
RUM Report and Report Acknowledgement 96
Trust Code 96
Supported Topologies 97
Connected to CSSM Through CSLU 97
Connected Directly to CSSM 98
Connected to CSSM Through a Controller 100
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
vi
Contents

CSLU Disconnected from CSSM 101
No Connectivity to CSSM and No CSLU 102
Supported Products 103
Interactions with Other Features 104
High Availability 104
Upgrades 105
Downgrades 107
How to Configure Smart Licensing Using Policy: Workflows by Topology 110
Workflow for Topology: Connected to CSSM Through CSLU 110
Workflow for Topology: Connected Directly to CSSM 112
Workflow for Topology: Connected to CSSM Through a Controller 113
Workflow for Topology: CSLU Disconnected from CSSM 114
Workflow for Topology: No Connectivity to CSSM and No CSLU 117
Migrating to Smart Licensing Using Policy 118
Example: Smart Licensing to Smart Licensing Using Policy 118
Example: RTU Licensing to Smart Licensing Using Policy 124
Example: SLR to Smart Licensing Using Policy 128
Example: Evaluation or Expired to Smart Licensing Using Policy 135
Task Library for Smart Licensing Using Policy 138
Logging into Cisco (CSLU Interface) 138
Configuring a Smart Account and a Virtual Account (CSLU Interface) 138
Adding a Product-Initiated Product Instance in CSLU (CSLU Interface) 139
Ensuring Network Reachability for Product Instance-Initiated Communication 139
Adding a CSLU-Initiated Product Instance in CSLU (CSLU Interface) 141
Collecting Usage Reports: CSLU Initiated 141
Download All For Cisco (CSLU Interface) 142
Upload From Cisco (CSLU Interface) 143
Ensuring Network Reachability for CSLU-Initiated Communication 143
Setting Up a Connection to CSSM 147
Configuring Smart Transport Through an HTTPs Proxy 149
Configuring the Call Home Service for Direct Cloud Access 150
Configuring the Call Home Service for Direct Cloud Access through an HTTPs Proxy Server 153
Removing and Returning an Authorization Code 154
Removing the Product Instance from CSSM 156
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
vii
Contents

Generating a New Token for a Trust Code from CSSM 157
Installing a Trust Code 158
Downloading a Policy File from CSSM 159
Uploading Usage Data to CSSM and Downloading an ACK 159
Installing a File on the Product Instance 160
Setting the Transport Type, URL, and Reporting Interval 161
Configuring a License 163
Sample Resource Utilization Measurement Report 166
Troubleshooting Smart Licensing Using Policy 166
System Message Overview 166
System Messages 168
Additional References for Smart Licensing Using Policy 175
Feature History for Smart Licensing Using Policy 175
Configuring Application Visibility and Control in a Wired Network 177
CHAPTER 4
Information About Application Visibility and Control in a Wired Network 177
Supported AVC Class Map and Policy Map Formats 177
Restrictions for Wired Application Visibility and Control 179
How to Configure Application Visibility and Control 181
Configuring Application Visibility and Control in a Wired Network 181
Enabling Application Recognition on an interface 181
Creating AVC QoS Policy 182
Applying a QoS Policy to the switch port 184
Configuring Wired AVC Flexible Netflow 185
NBAR2 Custom Applications 201
NBAR2 Dynamic Hitless Protocol Pack Upgrade 204
Monitoring Application Visibility and Control 206
Examples: Application Visibility and Control Configuration 206
Basic Troubleshooting - Questions and Answers 218
Additional References for Application Visibility and Control 219
Feature History for Application Visibility and Control in a Wired Network 219
Environmental Monitoring and Power Management 221
CHAPTER 5
About Environmental Monitoring 221
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
viii
Contents

Using CLI Commands to Monitor your Environment 221
Displaying Environment Conditions 222
Displaying On Board Failure Logging (OBFL) information 223
Emergency Actions 224
System Alarms 225
Disabling Thermal Shutdown 226
Power Management 227
Power Supply Modes 227
Operating States 228
show power detail 229
Power Management Considerations 231
Selecting a Power Supply Mode 232
Configuring the Redundant Mode 233
Configuring the Combined Mode 234
Power Budgeting for Supervisor Modules 235
Configuring the Power Budget Mode for a Single Supervisor 236
Moving from a Single to a Dual Supervisor Setup 236
Enabling Auto Line Card Shutdown 237
Powering Down a Line Card 239
Configuration Examples for Power Supply Modes and Operating States 240
Example: Combined Mode and State (AC- and DC-Input) 240
Example: Combined Mode and State (DC-Input Only) 241
Example: n+1 Redundant Mode (Power Supply Modules of the Same Capacity but Different Types
+ Normal Protected State 242
Example: n+1 Redundant Mode (Power Supply Modules of the Same Capacity and Type + Normal
Protected State 244
Example: n+n Redundant Mode (Power Supply Modules of the Same Capacity + Full Protected
State) 245
Example: n+n Redundant Mode (Power Supply Modules of Different Capacities + Normal Protected
State) 246
Feature History for Environmental Monitoring and Power Management 248
Configuring SDM Templates 249
CHAPTER 6
Information About SDM Templates 249
SDM Templates and Switch Stacks 251
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
ix
Contents

How to Configure SDM Templates 251
Setting the SDM Template 251
Monitoring and Maintaining SDM Templates 252
Configuration Examples for SDM Templates 253
Examples: Displaying SDM Templates 253
Examples: Configuring SDM Templates 257
Additional References for SDM Templates 257
Feature History for SDM Templates 257
Configuring System Message Logs 259
CHAPTER 7
Information About Configuring System Message Logs 259
System Messsage Logging 259
System Log Message Format 260
Default System Message Logging Settings 260
Syslog Message Limits 261
How to Configure System Message Logs 261
Setting the Message Display Destination Device 261
Synchronizing Log Messages 263
Disabling Message Logging 264
Enabling and Disabling Time Stamps on Log Messages 265
Enabling and Disabling Sequence Numbers in Log Messages 266
Defining the Message Severity Level 266
Limiting Syslog Messages Sent to the History Table and to SNMP 267
Logging Messages to a UNIX Syslog Daemon 268
Monitoring and Maintaining System Message Logs 269
Monitoring Configuration Archive Logs 269
Configuration Examples for System Message Logs 269
Example: Stacking System Message 269
Example: Switch System Message 270
Additional References for System Message Logs 270
Feature History for System Message Logs 270
Configuring Online Diagnostics 271
CHAPTER 8
Information About Configuring Online Diagnostics 271
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
x
Contents