Cisco Catalyst X4232 Quick guide

Corporate Headquarters: Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Copyright 2001. Cisco Systems, Inc. All rights reserved. 78-10164-03
Installation and Configuration Note for the
Catalyst 4000 Layer 3 Services Module
Product Numbers: WS-X4232-L3(=)
This installation and configuration note describes how to install and configure the Catalyst 4000 Layer
3 Services module.
For a complete description of commands to configure Catalyst 4003 and 4006 switches, refer to the
Software Configuration Guide and Command Reference publications for your switch. For complete
switch hardware configuration and maintenance procedures, refer to the Catalyst 4003 and 4006 Switch
Installation Guide. These documents are available on the Documentation CD-ROM, or in print.
Contents
This publication contains these sections:
•Software Requirements, page 2
•Features, page 2
•Configuring IOS Features, page 5
•Functional Description, page 6
•Front Panel Description, page 7
•Specifications, page 9
•Standards Compliance Specifications, page 10
•Gigabit Interface Converters, page 10
•Safety Overview, page 13
•Translated Safety Warnings, page 15
•Removing and Installing a Layer 3 Services Module, page 20
•Accessing the Layer 3 Services Module for the First Time, page 27
•Upgrading Images, page 32
•Overview of the Catalyst 4003 and 4006 Layer 3 Services Module Interfaces, page 33

2
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Software Requirements
•Configuration Options, page 40
•Configuring the Layer 3 Services Module Gigabit Ethernet Interfaces, page 42
•Configuring the Module for InterVLAN Routing, page 44
•Configuring Access Control Lists, page 60
•Configuring Layer 3 QoS, page 67
•Configuring the Switching Database Manager, page 74
•Obtaining Documentation, page 77
•Obtaining Technical Assistance, page 78
Software Requirements
The software requirements for the Catalyst 4000 Layer 3 Services module are as follows:
•The Catalyst 4000 Layer 3 Services module requires Cisco IOS software version 12.0(7)W5(15d)
or later.
•The Catalyst 4000 supervisor engine requires Cisco Catalyst software version 5.5(1) or later. We
recommend that you run software version 6.1(1) or later.
Features
The Catalyst 4000 Layer 3 Services module provides multiprotocol switching and routing for the
Catalyst 4000 family switches.
The 32 10/100 Ethernet interfaces on the module provide full Layer 2 feature support and are
configurable from the Catalyst 4000 family switch supervisor engine. Refer to the Software
Configuration Guide—Catalyst 4000 Family, 2980G, and 2948G Switches, Software Release 6.1 for
information on feature support on the Catalyst 4000 family switches.
For configuration information for the standard IOS features supported on the Catalyst 4000 Layer 3
Services module, see the “Configuring IOS Features” section on page 5.
Table 1 lists the Cisco IOS features available for the Catalyst 4000 Layer 3 Services module.
Table 1 Cisco IOS Features for the Layer 3 Services Module
Layer 2 Bridging Features
Layer 2 transparent bridging
Layer 2 MAC learning, aging, and switching by hardware
Spanning Tree Protocol (IEEE 802.1D) on each bridge group
A maximum of 16 active bridge groups
Up to 4000 MAC addresses
24K CAM1is shared by Layer 2 entries, IP routing, IP multicast routing, and Novell IPX routing
VLAN Features
ISL2-based VLAN trunking on the front panel of Layer 3 Gigabit Ethernet ports only
802.1Q-based VLAN trunking on all Layer 3 Gigabit Ethernet and Layer 2 Fast Ethernet ports

3
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Features
Layer 3 Routing, Switching, and Forwarding Features
IP, IPX, and IP multicast routing and switching between Ethernet ports
CMF3
Load balancing among equal cost paths based on source and destination IP and IPX addresses
Load balancing on a per-destination basis
CEF load balancing on Gigabit Ethernet ports using tunnel or universal load balancing algorithms
24K CAM is shared by Layer 2 entries, IP routing, IP multicast routing, and Novell IPX routing
Up to 18,000 IP routes
Up to 20,000 IP host entries
Up to 20,000 IPX routes
Up to 20,000 IPX host entries
Up to 12,000 IP multicast groups
RADIUS4server support
Supported Routing Protocols
AppleTalk
RIP5and RIP II
IGRP6
EIGRP7
Local Proxy ARP8
BGP9
OSPF10
IPX RIP11 and EIGRP
PIM12—sparse and dense mode
Secondary addressing
Static routes
Gigabit EtherChannel Features
Bundling of up to two Gigabit Ethernet ports
Load sharing for bridge traffic based on MAC address
Load sharing based on source and destination IP and IPX addresses of unicast packets
ISL trunking supported on the external Gigabit EtherChannel
802.1Q trunking supported on the external and internal Gigabit EtherChannel
Two active GEC13 port channels
Additional Protocols and Features
Layer 3 QoS14
IP access lists standard and extended
IPX access lists standard
AppleTalk access lists
Table 1 Cisco IOS Features for the Layer 3 Services Module (continued)

4
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Features
Unsupported Features
The following major features are not supported on the Catalyst 4000 Layer 3 Services module:
•Multilayer Switching (MLS)
•IPX extended access lists
Additional Protocols and Features (continued)
SDM15
BOOTP16
CDP17 support on Ethernet ports
CGMP18 server support
DHCP19 relay
HSRP20
ICMP21
IGMP22
IPX SAP and SAP23 filtering
SNMP24
TACACS+25
1. Contentment addressable memory
2. ISL=Inter-Switch Link
3. CMF=Constrained multicast flooding
4. RADIUS=Remote Authentication Dial-in User Service
5. RIP=Routing Information Protocol
6. IGRP=Interior Gateway Routing Protocol
7. EIGRP=Enhanced Interior Gateway Protocol
8. ARP=Address Resolution Protocol
9. BGP=Border Gateway Protocol
10. OSPF=Open Shortest Path First (Protocol)
11. IPX=Internet Packet Exchange
12. PIM=Protocol Independent Multicast
13. GEC=Gigabit EtherChannel
14. QoS=Quality of Service
15. SDM=Switching Database Manager
16. BOOTP=Bootstrap Protocol
17. CDP=Cisco Discovery Protocol
18. CGMP=Cisco Group Management Protocol
19. DHCP=Dynamic Host Configuration Protocol
20. HSRP=Hot Standby Router Protocol
21. ICMP=Internet Control Message Protocol
22. IGMP=Internet Group Management Protocol
23. SAP=Service Advertising Protocol
24. SNMP=Simple Network Management Protocol
25. TACACS+=Terminal Access Controller Access Control System Plus
Table 1 Cisco IOS Features for the Layer 3 Services Module (continued)

5
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Configuring IOS Features
•Named IPX SAP access lists
•48-bit MAC access lists
•48-bit MAC extended access lists
•Integrated routing and bridging (IRB), and concurrent routing and bridging (CRB)
•ISL trunking on the internal Gigabit Ethernet ports
If a feature does not appear in the list of supported features in this document or in the list of supported
features in the Release Notes for Catalyst 4000 Family Layer 3 Services Module, that feature is not
supported on the Catalyst 4000 Layer 3 Services module.
Caution We do not recommend that you configure unsupported features, even if you can configure
them with the CLI.
Configuring IOS Features
Standard IOS feature configurations and commands are documented in the IOS configuration guides
and command reference publications. Table 2 lists the standard IOS features supported on the Catalyst
4000 Layer 3 Services module. For information on configuring these features, refer to the online IOS
documents listed with each feature.
Table 2 Documentation Sources for Supported IOS Features
Feature Sources URL
HSRP Network Protocols Configuration Guide,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_c/1cprt2/1cip.htm#
xtocid1322018
Using HSRP for Fault-Tolerant IP Routing
(Internetworking Case Studies)
http://www.cisco.com/univercd/cc/td/doc/cisintw
k/ics/cs009.htm
Network Protocols Command Reference,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_r/index.htm
AppleTalk and
AppleTalk access lists
Network Protocols Configuration Guide,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_c/index.htm
Network Protocols Command Reference,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_r/index.htm
Standard IPX
access lists
Network Protocols Configuration Guide,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_c/index.htm
Network Protocols Command Reference,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_r/index.htm
Standard and extended
IP access lists
Network Protocols Configuration Guide,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_c/index.htm
Network Protocols Command Reference,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios121/121cgcr/ip_r/index.htm

6
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Functional Description
Note The default TCAM size allocated for access lists by the Switching Database Manager is
1024. If your access list configurations exceed this default size, you can reconfigure the
TCAM allocation. See the “Configuring the Switching Database Manager” section on
page 74 for information on allocating TCAM space.
Note Access lists are supported on Gigabit Ethernet interfaces only on the Catalyst 4000 Layer
3 Services module.
Functional Description
The Catalyst 4000 Layer 3 Services module is a 32-port Layer 2 10/100 Ethernet module with a 4-port
Gigabit Ethernet Layer 3 uplink module. The Catalyst 4000 Layer 3 Services module provides
interVLAN routing for the Catalyst 4000 family switch and provides Layer 3 switching between the
Gigabit Ethernet interfaces.
IP RIP, RIP II, OSPF,
EIGRP, IGRP, and BGP
Network Protocols Configuration Guide,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_c/index.htm
Network Protocols Command Reference,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_r/index.htm
IPX RIP and EIGRP Network Protocols Configuration Guide,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_c/index.htm
Network Protocols Command Reference,
Part 2
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np2_r/index.htm
IP multicast, multilayer
switching, and multicast
access lists
Network Protocols Configuration Guide,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_c/index.htm
Network Protocols Command Reference,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_r/index.htm
Booting, system and file
management, and basic
configuration
Configuration Fundamentals
Configuration Guide
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/fun_c/index.htm
Configuration Fundamentals Command
Reference
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/fun_r/index.htm
Local proxy ARP Network Protocols Configuration Guide,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_c/index.htm
Network Protocols Command Reference,
Part 1
http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_r/index.htm
RADIUS server Security Configuration Guide http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/secur_c/scprt2/
index.htm
Security Command Reference http://www.cisco.com/univercd/cc/td/doc/product
/software/ios120/12cgcr/np1_r/index.htm
Table 2 Documentation Sources for Supported IOS Features (continued)
Feature Sources URL

7
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Front Panel Description
The Catalyst 4000 Layer 3 Services module occupies a single slot in the chassis and has two internal
full-duplex Gigabit Ethernet interfaces that connect directly to the Catalyst 4000 family switch
backplane to provide routing capability to all Layer 2 switch ports in the switch. In addition, there are
two external Layer 3 Gigabit Ethernet ports that provide a direct connection to external router or switch
ports.
The 32 10/100 Ethernet interfaces are configured from the Catalyst 4000 switch supervisor engine.
Refer to the software configuration guide for your switch for Layer 2 configuration information. The
two external and two internal Gigabit Ethernet interfaces are configured from the Layer 3 services
module console. To configure the Layer 3 services module for interVLAN routing, you also must
configure the internal Layer 2 Gigabit Ethernet interfaces from the supervisor engine console.
You can group the two internal Gigabit Ethernet interfaces into two trunks or, one Gigabit
EtherChannel, or you can configure them as independent interfaces (links). If trunked or channeled, the
internal Gigabit Ethernet channel supports trunking using the IEEE 802.1Q protocol. You also can
configure each Gigabit Ethernet interface (link) independently as a separate VLAN trunk or nontrunked
routed interface.
Caution ISL is supported on the external Layer 3 Gigabit Ethernet ports only. The internal Layer 3
Gigabit Ethernet ports on the Catalyst 4000 Layer 3 Services module do not support ISL.
Do not configure ISL on the internal Layer 3 ports.
Note The native VLAN can forward tagged and untagged traffic in microcode. This means that
Layer 2 and Layer 3 IP, IPX, and multicast traffic is forwarded in microcode.The native
VLAN continues to be used for routing protocol traffic and for ARP, ping, CDP, and
session-related packets, which are handled by the CPU.
Note The default native VLAN is VLAN 1. You must configure the native VLAN on the
Catalyst 4000 Layer 3 Services module and the Catalyst 4000 supervisor engine to match
in order to handle CPU-related traffic.
Front Panel Description
Figure 1 shows the front panel of the Layer 3 services module. The features of the front panel are
described in more detail in the following sections.
Figure 1 Front Panel of the Layer 3 Services Module
42584
19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
33
19
20
34
STATUS
CONSOLE
10/100/1000
L3 ROUTINGMODULE
G1 G2
345678910 11 12 13 14 15 16 17 18
17
3
4
18
UPLINK
LINK
10/100-MGT

8
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Front Panel Description
LEDs
Table 3 describes the LEDs on the Catalyst 4000 Layer 3 Services module.
Connectors
Table 4 lists the front panel connectors on the Catalyst 4000 Layer 3 Services module.
Table 3 LEDs on the Catalyst 4003 and 4006 Layer 3 Services Module
LED State Description
STATUS
(module)
This LED displays the results of a series of self-tests
and diagnostic tests performed by the switch.
Green All the tests pass.
Red A test other than an individual port test failed.
Orange System boot, self-test diagnostics running, or the
module is disabled.
LINK This LED displays the 10/100 management port status.
Green A signal is detected.
Off No signal is detected.
Port Number
G1 and G21
1. Each port has an LED labeled with the port number associated with it. This is the link LED that indicates port
status
These LEDs display individual Gigabit Ethernet port
status.
Green A 1000-mbs link is detected.
Off No signal is detected.
Port Number
3–341
These LEDs display individual 10/100 Ethernet port
status.
Green A 100-mbs link is detected.
Orange A 10-mbs link is detected.
Off No signal is detected.
Table 4 Front Panel Connectors on the Catalyst 4003 and 4006 Layer 3 Services Module
Port Connector
Console RJ-45
10/100MGT RJ-45
10/100BASE-TX RJ-45
1000BASE-X SC

9
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Specifications
Specifications
Table 5 lists the specifications for the Catalyst 4000 Layer 3 Services module.
Table 5 Catalyst 4003 and 4006 Layer 3 Services Module Specifications
Specification Description
Dimensions (H x W x D) 1.18 x 15.51 x 16.34 in. (30 x 394 x 415 mm)
Weight Minimum: 3 lb. (1.36 kg)
Maximum: 5 lb. (2.27 kg)
Environmental
conditions:
Operating
temperature
32 to 104°F (0 to 40°C)
Nonoperating
temperature
–40 to 167°F (–40 to 75°C)
Humidity 10 to 90%, noncondensing
Maximum
station-to-station cabling
distance:
10BASE-T Ethernet,
Categories 3–5 UTP1
and 100-ohm FTP2
1. UTP = unshielded twisted-pair
2. FTP = foil twisted-pair
328 ft. (100 m), half or full duplex
Console: Categories
3–5 UTP and
100-ohm FTP
328 ft. (100 m)
10/100BASE-TX
Ethernet: Category 5
UTP and 100-ohm
FTP
328 ft. (100 m), half or full duplex
1000BASE-X See Table 7
Frame processing Transparent bridging (IEEE 802.1d)
Network management Cisco Discovery Protocol, Ethernet MIB (RFC 1398), Interface Table
(RFC 1573), Bridge MIB (RFC 1493), Ethernet Repeater MIB
(RFC 1516), RMON MIB (RFC 1757), Cisco Workgroup MIB, and Cisco
VLAN Trunking Protocol

10
Installation and Configuration Note for the Catalyst 4000 Layer 3 Services Module
78-10164-03
Standards Compliance Specifications
Standards Compliance Specifications
When properly installed in the chassis, the Catalyst 4000 Layer 3 Services module complies with the
standards listed in Table 6.
Gigabit Interface Converters
A gigabit interface converter (GBIC), shown in Figure 2, is a hot-swappable I/O (transceiver) device
that plugs into the module’s Gigabit Ethernet port, linking the port with the fiber-optic network. The
following GBIC types are supported:
•1000BASE-SX (WS-G5484)
•1000BASE-LX/LH (WS-G5486)
•1000BASE-ZX (WS-G5487)
Figure 2 Gigabit Interface Converter
Table 6 Standards Compliance
Specification Description
Compliance: CE Marking
Safety UL11950, CSA2-C22.2 No. 950, EN360950, IEC4950, TS5001, AS/NZS63260
1. UL = Underwriters Laboratories
2. CSA = Canadian Standards Association
3. EN = Europäische Norm
4. IEC = International Electrotechnical Commission
5. TS = Technical Standard
6. AS/NZS = Australian/New Zealand Standard
EMI7
7. EMI = electromagnetic interference
CFR 47, Part 15, class A (FCC),8ICES 003 class A, 9EN55022, class A with
UTP,10 EN55022, class B with FTP,11 CISPR 22, class A with UTP, CISPR 22,
class B with FTP, AS/NZ 3548, class A with UTP, AS/NZ 3548, class B with FTP,
VCCI, class A with UTP,12 VCCI, class B with FTP, EN55024, CE marking.
8. FCC = U.S. Federal Communications Commission
9. ICES = Interference-Causing Equipment Standard
10. UTP = unshielded twisted-pair
11. FTP = foil twisted-pair
12. VCCI = Voluntary Control Council for Information Technology Equipment
11825
Receiver Transmitter