Cisco IE 4000 User manual

Cisco Systems, Inc. www.cisco.com
Cisco Industrial Ethernet 4000, 4010 and
5000 Switch Software Configuration Guide
All Cisco IOS Releases up to 15.2(5)E and 15.2(4)EC
First Published: September 2016
Last Updated: March 2018

ii
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE
WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE
ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL
RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE INCORPORATED HEREIN BY
THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR
CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California,
Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981,
Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and
phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is
unintentional and coincidental.
All printed copies and duplicate soft copies are considered un-Controlled copies and the original on-line version should be
referred to for latest version.
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at
www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (1721R)
© 2015–2018 Cisco Systems, Inc. All rights reserved.

iii
Cisco Systems, Inc. www.cisco.com
Preface
Audience
This guide is for the networking professional managing your switch. Before using this guide, you should have experience
working with the Cisco IOS software and be familiar with the concepts and terminology of Ethernet and local area
networking.
Purpose
This guide provides the information that you need to configure Cisco IOS software features on your switch.
This guide provides procedures for using the commands that have been created or changed for use with the switch. It
does not provide detailed information about these commands.
For information about the standard Cisco IOS commands, see the Cisco IOS 15.0 documentation set available from the
Cisco.com home page.
This guide does not provide detailed information on the graphical user interfaces (GUIs) for the embedded Device
Manager. However, the concepts in this guide are applicable to the GUI user. For information about Device Manager, see
the switch online help.
For documentation updates, see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
Commands and keywords are in boldface text.
Arguments for which you supply values are in italic.
Square brackets ([ ]) mean optional elements.
Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional element.
Interactive examples use these conventions:
Terminal sessions and system displays are in screen font.
Information you enter is in boldface screen font.
Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and timesavers use these conventions and symbols:

iv
Preface
Related Publications
Note: Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual.
Caution: Means reader be careful. In this situation, you might do something that could result in equipment damage
or loss of data.
Related Publications
These documents provide complete information about the switch series and are available from this Cisco.com site:
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-4000-series-switches/tsd-products-support-ser
ies-home.html
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-4010-series-switches/tsd-products-support-ser
ies-home.html
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-5000-series-switches/tsd-products-support-ser
ies-home.html
Before installing, configuring, or upgrading the switch, see these documents:
For initial configuration information, see the “Configuring the Switch with the CLI-Based Setup Program” appendix
in the hardware installation guide.
For Device Manager requirements, see the “System Requirements” section in the release notes (not orderable but
available on Cisco.com).
For upgrading information, see the “Downloading Software” section in the release notes.
See these documents for other information about the switch:
Release Notes
 Software Configuration Guide
Hardware Installation Guide
 Regulatory Compliance and Safety Information
Device Manager online help (available on the switch)
Compatibility matrix documents are available from this Cisco.com site:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
Obtain Documentation and Submit a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and
gathering additional information, see What’s New in Cisco Product Documentation.
Toreceivenew and revised Ciscotechnical content directly to your desktop, you can subscribeto theWhat’s New in
Cisco Product DocumentationRSS feed. The RSS feeds are a free service.

1
Cisco Systems, Inc. www.cisco.com
Configuration Overview
Feature Availability
Unless otherwise indicated, all features and configurations in this guide are supported beginning with release 15.2(2)EA
for the IE-4000, 15.2(2)EB for the IE-5000 and in release 15.2(4)EC for the IE-4010. Where new features or support for
existing features was added after these releases, detailed release information will be indicated in the Feature History
Table for that feature.
Feature availability varies depending on your license. For more information about licenses and available features, refer to
the datasheet:
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-5000-series-switches/datasheet-listing.html
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-4010-series-switches/datasheet-listing.html
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-4000-series-switches/datasheet-listing.html
Feature Software Licensing
Software Licensing is now simplified with the introduction of right-to-use (RTU) licensing. This allows you to order and
activate a specific license type and level via command line. Uploading an extra license file is no longer necessary.
Note: Upgrading to the IP Services feature set requires the purchase of one of the following licenses (product IDs listed):
The IE-5000 uses "L-IE5000-RTU=" and IE-4000 and IE-4010 use "L-IE4000-RTU=" to upgrade to IP Services.
Right to Use Licenses
The introduction of right-to-use (RTU) licensing allows you to order and activate a specific license type and level via
command line. Uploading an extra license file is no longer necessary.
LanBase images provide basic Layer2 functionality, including:
QOS
Port-Security
1588 PTP
EtherNet/IP
Profinet
IPService: L3 routing features:
RIP
OSPF
ISIS BGP

2
Configuration Overview
Feature Software Licensing
Policy-based routing
IPV6
Defaults
The default license is a lanbase RTU permanent license.
Configuring RTU Licenses
To configure RTU Licenses, follow these guidelines.
Displaying License Information
To determine which license is running on your device, do the following:
Enter the show version privileged EXEC command. The first line of output indicates the image, such as LANBASE.
Enter the show license privileged EXEC command, to see which is the active image:
Switch# show license
Index 1 Feature: ipservices
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: Non-Counted
Index 2 Feature: lanbase
Period left: Life time
License Type: PermanentRightToUse
License State: Active, In Use
License Priority: High
License Count: Non-Counted
Index 3 Feature: mrp-manager
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: 1/0/0 (Active/In-use/Violation)
Index 4 Feature: mrp-client
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: 1/0/0 (Active/In-use/Violation)
License Count: Non-Counted
ipservices license
To activate a Permanent Right-To-Use ipservices license, use the following command:
IE5000#license right-to-use activate ipservices
PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR USING SUCH
PRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.
Use of this product feature requires an additional license from Cisco, together

3
Configuration Overview
Feature Software Licensing
with an additional payment. You may use this product feature subject to the
Cisco end user license agreement
http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html,
together with any supplements relating to such product feature.
It is your responsibility to make payment to Cisco for your use of the
product feature if not already licensed to do so. Your acceptance
of this agreement for the software features on one product shall be deemed
your acceptance with respect to all such software on all Cisco products you
purchase which includes the same software. (The foregoing notwithstanding, you must
purchase a license for each software feature you use, so that if you enable
a software feature on 1000 devices, you must purchase 1000 licenses for use.)
This license may be transferrable from another Cisco device of the same model
for the same functionality if such license already is owned.
Activation of the software command line interface will be evidence of your acceptance
of this agreement.
ACCEPT? (yes/[no]): yes
Activated Permanent Right-To-Use ipservices license
Next Reboot level is ipservices
IE5000#
Ease-of-Deployment and Ease-of-Use Features
Express Setup for quickly configuring a switch for the first time with basic IP information, contact information, switch
and Telnet passwords, and Simple Network Management Protocol (SNMP) information through a browser-based
program.
User-defined and Cisco-default Smartports macros for creating custom switch configurations for simplified
deployment across the network.
A removable SD flash card that stores the Cisco IOS software image and configuration files for the switch. You can
replace and upgrade the switch without reconfiguring the software features.
An embedded Device Manager GUI for configuring and monitoring a single switch through a web browser. For more
information about Device Manager, see the switch online help.
Performance Features
Autosensing of port speed and autonegotiation of duplex mode on all switch ports for optimizing bandwidth
Automatic medium-dependent interface crossover (auto-MDIX) capability on 10/100 and 10/100/1000 Mb/s
interfaces and on 10/100/1000 BASE-TX SFP module interfaces that enables the interface to automatically detect
the required cable connection type (straight-through or crossover) and to configure the connection appropriately
Support for up to 1546 bytes routed frames, up to 9000 bytes for frames that are bridged in hardware, and up to
2000 bytes for frames that are bridged by software
IEEE 802.3x flow control on all ports (the switch does not send pause frames)
Support for up to 10 EtherChannel groups
Port Aggregation Protocol (PAgP) and Link Aggregation Control Protocol (LACP) for automatic creation of
EtherChannel links
Per-port storm control for preventing broadcast, multicast, and unicast storms
Port blocking on forwarding unknown Layer 2 unknown unicast, multicast, and bridged broadcast traffic

4
Configuration Overview
Feature Software Licensing
CiscoGroupManagementProtocol(CGMP)serversupportandInternetGroupManagementProtocol(IGMP)snoopingfor
IGMP Versions 1, 2, and 3:
—(For CGMP devices) CGMP for limiting multicast traffic to specified end stations and reducing overall network
traffic
—(For IGMP devices) IGMP snooping for forwarding multimedia and multicast traffic
IGMP report suppression for sending only one IGMP report per multicast router query to the multicast devices
(supported only for IGMPv1 or IGMPv2 queries)
IGMP snooping querier support to configure switch to generate periodic IGMP general query messages
IGMP helper to allow the switch to forward a host request to join a multicast stream to a specific IP destination
address
IGMP filtering for controlling the set of multicast groups to which hosts on a switch port can belong
IGMP throttling for configuring the action when the maximum number of entries is in the IGMP forwarding table
IGMP leave timer for configuring the leave latency for the network
Switch Database Management (SDM) templates for allocating system resources to maximize support for
user-selected features such as lanbase-routing, ipv6 routing.
Cisco IOS IP Service Level Agreements (SLAs), a part of Cisco IOS software that uses active traffic monitoring for
measuring network performance
Configurable small-frame arrival threshold to prevent storm control when small frames (64 bytes or less) arrive on
an interface at a specified rate (the threshold)
FlexLink Multicast Fast Convergence to reduce the multicast traffic convergence time after a FlexLink failure
RADIUS server load balancing to allow access and authentication requests to be distributed evenly across a server
group
Support for QoS marking of CPU-generated traffic and queue CPU-generated traffic on the egress network ports
Management Options
An embedded Device Manager—Device Manager is a GUI application that is integrated in the software image. You
use it to configure and to monitor a single switch. For more information about Device Manager, see the switch online
help.
Network Assistant—Network Assistant is a network management application that can be downloaded from
Cisco.com. You use it to manage a single switch, a cluster of switches, or a community of devices. For more
information about Network Assistant, see Getting Started with Cisco Network Assistant, available at
software.cisco.com/download/.
Prime Infrastructure—Cisco Prime Infrastructure simplifies the management of wireless and wired networks. It offers
Day 0 and 1 provisioning, as well as Day N assurance from the branch to the data center. We call it One Management.
With this single view and point of control, you can reap the benefits of One Management across both network and
compute.
CLI—The Cisco IOS software supports desktop- and multilayer-switching features. You can access the CLI either by
connecting your management station directly to the switch console port or by using Telnet from a remote
management station.
SNMP—SNMP management applications such as CiscoWorks2000 LAN Management Suite (LMS) and HP OpenView.
You can manage from an SNMP-compatible management station that is running platforms such as HP OpenView or
SunNet Manager. The switch supports a comprehensive set of MIB extensions and four remote monitoring (RMON)

5
Configuration Overview
Default Settings After Initial Switch Configuration
groups. For more information about using SNMP, see Configuring SNMP, page 527
Cisco IOS Configuration Engine (previously known as the Cisco IOS CNS agent)—Configuration service automates
the deployment and management of network devices and services. You can automate initial configurations and
configuration updates by generating switch-specific configuration changes, sending them to the switch, executing
the configuration change, and logging the results.
For more information about CNS, see Configuring Cisco IOS Configuration Engine, page 79
Industrial Application
CIP—Common Industrial Protocol (CIP) is a peer-to-peer application protocol that provides application level
connections between the switch and industrial devices such as I/O controllers, sensors, relays, and so forth.You can
manage the switch using RSlogix/RSlinx then monitor the CIP functionality via IOS command lines or Web based
Device Manager.
Profinet Version 2—Support for PROFINET IO, a modular communication framework for distributed automation
applications. The embedded Profinet GSD file allows user to bring up Cisco IE switch using Siemens STEP7 or TIA
Portal software then monitor the functionality via command line or Web based Device Manger.
Default Settings After Initial Switch Configuration
The switch is designed for plug-and-play operation, requiring only that you assign basic IP information to the switch and
connect it to the other devices in your network. If you have specific network needs, you can change the interface-specific
and system-wide settings.
Note: For information about assigning an IP address by using the CLI-based setup program, see the hardware installation
guide.
If you do not configure the switch at all, the switch operates with these default settings:
Note: For more information about the following default settings, see the corresponding sections of this guide.
Default switch IP address, subnet mask, and default gateway is 0.0.0.0.
Default domain name is not configured.
DHCP client is enabled, the DHCP server is enabled, and the DHCP relay agent is enabled.
Switch cluster is disabled.
No passwords are defined.
System name and prompt is Switch.
NTP is enabled.
DNS is enabled.
TACACS+ is disabled.
RADIUS is disabled.
The standard HTTP server and Secure Socket Layer (SSL) HTTPS server are both enabled.
IEEE 802.1x is disabled.
Port parameters

6
Configuration Overview
Default Settings After Initial Switch Configuration
—Interface speed and duplex mode is autonegotiate.
—Auto-MDIX is enabled.
—Flow control is off.
VLANs
—Default VLAN is VLAN 1.
—VLAN trunking setting is dynamic auto (DTP).
—Trunk encapsulation is negotiate.
—VTP mode is server.
—VTP version is Version 1.
—Voice VLAN is disabled.
STP, PVST+ is enabled on VLAN 1.
MSTP is disabled.
Optional spanning-tree features are disabled.
FlexLinks are not configured.
DHCP snooping is disabled.
IP source guard is disabled.
DHCP server port-based address allocation is disabled.
Dynamic ARP inspection is disabled on all VLANs.
IGMP snooping is enabled. No IGMP filters are applied.
IGMP throttling setting is deny.
The IGMP snooping querier feature is disabled.
MVR is disabled.
Port-based traffic
—Broadcast, multicast, and unicast storm control is disabled.
—No protected ports are defined.
—Unicast and multicast traffic flooding is not blocked.
—No secure ports are configured.
CDP is enabled.
UDLD is disabled.
LLDP is disabled.
SPAN and RSPAN are disabled.
RMON is disabled.