Cisco Catalyst 9500 Series User manual

System Management Configuration Guide, Cisco IOS XE Amsterdam
17.2.x (Catalyst 9500 Switches)
First Published: 2020-03-30
Last Modified: 2020-05-08
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (1721R)
©2020 Cisco Systems, Inc. All rights reserved.

CONTENTS
Administering the Device 1
CHAPTER 1
Information About Administering the Device 1
System Time and Date Management 1
System Clock 1
Network Time Protocol 2
NTP Stratum 3
NTP Associations 3
NTP Security 5
NTP Services on a Specific Interface 6
Source IP Address for NTP Packets 6
NTP Implementation 6
System Name and Prompt 7
Stack System Name and Prompt 8
Default System Name and Prompt Configuration 8
DNS 8
Default DNS Settings 8
Login Banners 8
Default Banner Configuration 9
MAC Address Table 9
MAC Address Table Creation 9
MAC Addresses and VLANs 9
MAC Addresses and Device Stacks 9
Default MAC Address Table Settings 10
ARP Table Management 10
How to Administer the Device 10
Configuring the Time and Date Manually 10
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
iii

Setting the System Clock 11
Configuring the Time Zone 11
Configuring Summer Time (Daylight Saving Time) 12
Configuring NTP 14
Default NTP Configuration 14
Configuring NTP Authentication 15
Configuring Poll-Based NTP Associations 16
Configuring Broadcast-Based NTP Associations 18
Configuring NTP Access Restrictions 19
Configuring a System Name 21
Setting Up DNS 22
Configuring a Message-of-the-Day Login Banner 24
Configuring a Login Banner 25
Managing the MAC Address Table 26
Changing the Address Aging Time 26
Configuring MAC Address Change Notification Traps 27
Configuring MAC Address Move Notification Traps 29
Configuring MAC Threshold Notification Traps 31
Disabling MAC Address Learning on VLAN 33
Adding and Removing Static Address Entries 34
Configuring Unicast MAC Address Filtering 36
Monitoring and Maintaining Administration of the Device 36
Configuration Examples for Device Administration 37
Example: Setting the System Clock 37
Examples: Configuring Summer Time 38
Example: Configuring a MOTD Banner 38
Example: Configuring a Login Banner 38
Example: Configuring MAC Address Change Notification Traps 39
Example: Configuring MAC Threshold Notification Traps 39
Example: Adding the Static Address to the MAC Address Table 39
Example: Configuring Unicast MAC Address Filtering 40
Additional References for Device Administration 40
Feature History for Device Administration 40
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
iv
Contents

Boot Integrity Visibility 41
CHAPTER 2
Information About Boot Integrity Visibility 41
Verifying the Software Image and Hardware 41
Verifying Platform Identity and Software Integrity 42
Additional References for Boot Integrity Visibility 45
Feature History for Boot Integrity Visibility 45
Performing Device Setup Configuration 47
CHAPTER 3
Restrictions for Performing Device Setup Configuration 47
Information About Performing Device Setup Configuration 47
Device Boot Process 47
Software Install Overview 48
Software Boot Modes 49
Installing the Software Package 50
Terminating a Software Install 50
Devices Information Assignment 51
Default Switch Information 51
DHCP-Based Autoconfiguration Overview 51
DHCP Client Request Process 52
DHCP-based Autoconfiguration and Image Update 53
Restrictions for DHCP-based Autoconfiguration 53
DHCP Autoconfiguration 53
DHCP Auto-Image Update 54
DHCP Server Configuration Guidelines 54
Purpose of the TFTP Server 55
Purpose of the DNS Server 55
How to Obtain Configuration Files 55
How to Control Environment Variables 56
Common Environment Variables 57
Environment Variables for TFTP 58
Scheduled Reload of the Software Image 59
How to Perform Device Setup Configuration 59
Configuring DHCP Autoconfiguration (Only Configuration File) 59
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
v
Contents

Configuring DHCP Auto-Image Update (Configuration File and Image) 61
Configuring the Client to Download Files from DHCP Server 64
Manually Assigning IP Information to Multiple SVIs 65
Modifying Device Startup Configuration 67
Specifying a Filename to Read and Write a System Configuration 67
Manually Booting the Switch 68
Booting the Device in Installed Mode 69
Booting a Device in Bundle Mode 71
Configuring a Scheduled Software Image Reload 71
Configuration Examples for Device Setup Configuration 73
Examples: Displaying Software Bootup in Install Mode 73
Example: Emergency Installation 76
Example: Managing an Update Package 77
Verifying Software Install 87
Example: Configuring a Device as a DHCP Server 90
Example: Configuring DHCP Auto-Image Update 90
Example: Configuring a Device to Download Configurations from a DHCP Server 91
Example: Scheduling Software Image Reload 91
Additional References For Performing Device Setup 92
Feature History for Performing Device Setup Configuration 92
Configuring Smart Licensing 93
CHAPTER 4
Prerequisites for Configuring Smart Licensing 93
Introduction to Smart Licensing 93
Overview of CSSM 94
Connecting to CSSM 94
Linking Existing Licenses to CSSM 96
Configuring a Connection to CSSM and Setting Up the License Level 96
Setting Up a Connection to CSSM 97
Configuring the Call Home Service for Direct Cloud Access 99
Configuring the Call Home Service for Direct Cloud Access through an HTTPs Proxy Server 101
Configuring the Call Home Service for Cisco Smart Software Manager On-Prem 103
Configuring the License Level 105
Registering a Device on CSSM 107
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
vi
Contents

Generating a New Token from CSSM 107
Registering a Device with the New Token 109
Verifying the License Status After Registration 109
Canceling a Device's Registration in CSSM 111
Monitoring Smart Licensing Configuration 112
Configuration Examples for Smart Licensing 113
Example: Viewing the Call Home Profile 113
Example: Viewing the License Information Before Registering 113
Example: Registering a Device 116
Example: Viewing the License Status After Registering 116
Additional References 119
Feature History for Smart Licensing 119
Configuring Application Visibility and Control in a Wired Network 121
CHAPTER 5
Information About Application Visibility and Control in a Wired Network 121
Supported AVC Class Map and Policy Map Formats 122
Restrictions for Wired Application Visibility and Control 123
How to Configure Application Visibility and Control 124
Configuring Application Visibility and Control in a Wired Network 124
Enabling Application Recognition on an interface 125
Creating AVC QoS Policy 126
Applying a QoS Policy to the switch port 128
Configuring Wired AVC Flexible Netflow 128
NBAR2 Custom Applications 145
NBAR2 Dynamic Hitless Protocol Pack Upgrade 148
Monitoring Application Visibility and Control 149
Examples: Application Visibility and Control Configuration 150
Basic Troubleshooting - Questions and Answers 162
Additional References for Application Visibility and Control 163
Feature History for Application Visibility and Control in a Wired Network 163
Configuring SDM Templates 165
CHAPTER 6
Information About SDM Templates 165
Customizable SDM Template 165
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
vii
Contents

Overview of Customizable SDM Template 165
System resource allocation for Customizable SDM Template 168
Customizable SDM Template and High Availability 168
Customizable SDM Template and StackWise Virtual 169
Customizable SDM Template and ISSU 169
SDM Templates and Switch Stacks 169
How to Configure SDM Templates 169
Setting the SDM Template 169
Monitoring and Maintaining SDM Templates 171
Configuration Examples for SDM Templates 171
Examples: Displaying SDM Templates 171
Examples: Configuring SDM Templates 174
Additional References for SDM Templates 174
Feature History for SDM Templates 174
Configuring System Message Logs 177
CHAPTER 7
Information About Configuring System Message Logs 177
System Messsage Logging 177
System Log Message Format 178
Default System Message Logging Settings 179
Syslog Message Limits 179
How to Configure System Message Logs 180
Setting the Message Display Destination Device 180
Synchronizing Log Messages 181
Disabling Message Logging 183
Enabling and Disabling Time Stamps on Log Messages 184
Enabling and Disabling Sequence Numbers in Log Messages 184
Defining the Message Severity Level 185
Limiting Syslog Messages Sent to the History Table and to SNMP 186
Logging Messages to a UNIX Syslog Daemon 186
Monitoring and Maintaining System Message Logs 188
Monitoring Configuration Archive Logs 188
Configuration Examples for System Message Logs 188
Example: Switch System Message 188
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
viii
Contents

Additional References for System Message Logs 188
Feature History for System Message Logs 188
Configuring Online Diagnostics 191
CHAPTER 8
Information About Configuring Online Diagnostics 191
Generic Online Diagnostics (GOLD) Tests 192
How to Configure Online Diagnostics 199
Starting Online Diagnostic Tests 199
Configuring Online Diagnostics 200
Scheduling Online Diagnostics 200
Configuring Health-Monitoring Diagnostics 201
Monitoring and Maintaining Online Diagnostics 204
Configuration Examples for Online Diagnostics 205
Examples: Start Diagnostic Tests 205
Example: Configure a Health-Monitoring Test 205
Example: Schedule Diagnostic Test 205
Examples: Displaying Online Diagnostics 205
Additional References for Online Diagnostics 207
Feature Information for Configuring Online Diagnostics 207
Managing Configuration Files 209
CHAPTER 9
Prerequisites for Managing Configuration Files 209
Restrictions for Managing Configuration Files 209
Information About Managing Configuration Files 209
Types of Configuration Files 209
Configuration Mode and Selecting a Configuration Source 210
Configuration File Changes Using the CLI 210
Location of Configuration Files 210
Copy Configuration Files from a Network Server to the Device 211
Copying a Configuration File from the Device to a TFTP Server 211
Copying a Configuration File from the Device to an RCP Server 212
Copying a Configuration File from the Device to an FTP Server 213
Copying files through a VRF 214
Copy Configuration Files from a Switch to Another Switch 214
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
ix
Contents

Configuration Files Larger than NVRAM 215
Configuring the Device to Download Configuration Files 215
How to Manage Configuration File Information 216
Displaying Configuration File Information 216
Modifying the Configuration File 217
Copying a Configuration File from the Device to a TFTP Server 218
What to Do Next 219
Copying a Configuration File from the Device to an RCP Server 219
Examples 220
What to Do Next 221
Copying a Configuration File from the Device to the FTP Server 221
Examples 222
What to Do Next 223
Copying a Configuration File from a TFTP Server to the Device 223
What to Do Next 224
Copying a Configuration File from the rcp Server to the Device 224
Examples 225
What to Do Next 225
Copying a Configuration File from an FTP Server to the Device 225
Examples 226
What to Do Next 227
Maintaining Configuration Files Larger than NVRAM 227
Compressing the Configuration File 227
Storing the Configuration in Flash Memory on Class A Flash File Systems 229
Loading the Configuration Commands from the Network 230
Copying Configuration Files from Flash Memory to the Startup or Running Configuration 231
Copying Configuration Files Between Flash Memory File Systems 232
Copying a Configuration File from an FTP Server to Flash Memory Devices 233
What to Do Next 234
Copying a Configuration File from an RCP Server to Flash Memory Devices 234
Copying a Configuration File from a TFTP Server to Flash Memory Devices 235
Re-executing the Configuration Commands in the Startup Configuration File 236
Clearing the Startup Configuration 236
Deleting a Specified Configuration File 237
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
x
Contents