Cisco Catalyst 4500 Series Instruction Manual

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

CONTENTS

Audience 3

Organization 3

Conventions 7

Related Documentation 8

Hardware Documents 8

Software Documentation 8

Cisco IOS Documentation 9

Commands in Task Tables 9

Notices 9

OpenSSL/Open SSL Project 10

License Issues 10

Obtaining Documentation and Submitting a Service Request i-12

Product Overview 1-1

Layer 2 Software Features 1-1

802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling 1-2

Cisco IOS Auto Smartport Macros 1-2

Cisco Discovery Protocol 1-3

Cisco Group Management Protocol (CGMP) server 1-3

EtherChannel Bundles 1-3

Ethernet CFM 1-3

Ethernet OAM Protocol 1-3

Flex Links and MAC Address-Table Move Update 1-4

Flexible NetFlow (Supervisor Engine 7-E and 7L-E only) 1-4

Internet Group Management Protocol (IGMP) Snooping 1-4

IPv6 Multicast BSR and BSR Scoped Zone Support 1-5

IPv6 Multicast Listen Discovery (MLD) and Multicast Listen Discovery Snooping 1-6

Jumbo Frames 1-6

Link Aggregation Control Protocol 1-7

Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-7

Link Layer Discovery Protocol 1-7

Link State Tracking 1-8

Location Service 1-8

Multiple Spanning Tree 1-8

Per-VLAN Rapid Spanning Tree 1-8

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Quality of Service 1-9

Cisco Modular QoS Command-Line-Interface 1-9

Two-Rate Three-Color Policing 1-9

Resilient Ethernet Protocol 1-10

SmartPort Macros 1-10

Spanning Tree Protocol 1-10

Stateful Switchover 1-10

SVI Autostate 1-11

Unidirectional Link Detection 1-11

VLANs 1-11

Virtual Switching Systems 1-12

Virtual Switch System Client 1-12

Y.1731 (AIS and RDI) 1-12

Layer 3 Software Features 1-13

Bidirectional Forwarding Detection 1-14

Cisco Express Forwarding 1-14

Device Sensor 1-14

EIGRP Stub Routing 1-14

Enhanced Object Tracking 1-15

GLBP 1-15

Cisco IOS XE IP Application Services Features in Cisco IOS XE 3.1.0SG 1-15

HSRP 1-16

Cisco IOS XE IP Application Services: HSRP Features in Cisco IOS XE 3.1.0SG 1-16

SSO Aware HSRP 1-16

IP Routing Protocols 1-17

BGP 1-17

EIGRP 1-17

IS-IS 1-18

OSPF 1-18

RIP 1-19

In Service Software Upgrade 1-19

IPv6 1-19

Multicast Services 1-19

NSF with SSO 1-20

OSPF for Routed Access 1-21

Policy-Based Routing 1-21

Unicast Reverse Path Forwarding 1-22

Unidirectional Link Routing 1-22

VRF-lite 1-22

Virtual Router Redundancy Protocol 1-22

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Management Features 1-23

Cisco Call Home 1-24

Cisco Energy Wise 1-24

Cisco IOS IP Service Level Agreements 1-24

Cisco Media Services Proxy 1-25

Cisco Medianet AutoQoS 1-25

Cisco Medianet Flow Metadata 1-26

Cisco IOS Mediatrace and Performance Monitor 1-26

Cisco Network Assistant 1-27

Dynamic Host Control Protocol 1-28

Easy Virtual Network 1-28

Embedded CiscoView 1-29

Embedded Event Manager 1-29

Ethernet Management Port 1-29

File System Management on Supervisor Engine 7-E and Supervisor Engine 7L-E 1-29

FAT File Management System on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4948E, and

Catalyst 4900M 1-30

Forced 10/100 Autonegotiation 1-30

Intelligent Power Management 1-30

MAC Address Notification 1-30

MAC Notify MIB 1-30

NetFlow-lite 1-30

Power over Ethernet 1-31

Secure Shell 1-31

Simple Network Management Protocol 1-31

Smart Install 1-31

SPAN and RSPAN 1-32

Universal Power over Ethernet 1-32

Web Content Coordination Protocol 1-32

Wireshark 1-33

XML-PI 1-33

Security Features 1-33

802.1X Identity-Based Network Security 1-34

Cisco TrustSec MACsec Encryption 1-35

Cisco TrustSec Security Architecture 1-36

Cisco TrustSec Security Groups, SGTs and SGACLs 1-36

Dynamic ARP Inspection 1-37

Dynamic Host Configuration Protocol Snooping 1-37

Flood Blocking 1-37

Hardware-Based Control Plane Policing 1-37

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

IP Source Guard 1-38

IP Source Guard for Static Hosts 1-38

IPv6 First Hop Security 1-38

Local Authentication, RADIUS, and TACACS+ Authentication 1-40

Network Admission Control 1-40

Network Security with ACLs 1-40

Port Security 1-41

PPPoE Intermediate Agent 1-41

Session Aware Networking 1-41

Storm Control 1-42

uRPF Strict Mode 1-42

Utilities 1-42

Layer 2 Traceroute 1-42

Time Domain Reflectometry 1-43

Debugging Features 1-43

Web-based Authentication 1-43

New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E and Cisco IOS XE 3.5.0E 1-44

Command-Line Interfaces 2-1

Accessing the Switch CLI 2-2

Accessing the CLI Using the EIA/TIA-232 Console Interface 2-2

Accessing the CLI Through Telnet 2-2

Performing Command-Line Processing 2-3

Performing History Substitution 2-4

About Cisco IOS Command Modes 2-4

Getting a List of Commands and Syntax 2-5

Virtual Console for Standby Supervisor Engine 2-6

ROMMON Command-Line Interface 2-7

Archiving Crashfiles Information 2-8

Displaying a Crash Dump for Supervisor Engine 6-E and 6L-E 2-8

Configuring the Switch for the First Time 3-1

Default Switch Configuration 3-1

Configuring DHCP-Based Autoconfiguration 3-2

About DHCP-Based Autoconfiguration 3-2

DHCP Client Request Process 3-3

Configuring the DHCP Server 3-4

Configuring the TFTP Server 3-4

Configuring the DNS Server 3-5

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Configuring the Relay Device 3-5

Obtaining Configuration Files 3-6

Example Configuration 3-7

Configuring the Switch 3-8

Using Configuration Mode to Configure Your Switch 3-9

Verifying the Running Configuration Settings 3-9

Saving the Running Configuration Settings to Your Start-Up File 3-10

Reviewing the Configuration in NVRAM 3-10

Configuring a Default Gateway 3-11

Configuring a Static Route 3-11

Controlling Access to Privileged EXEC Commands 3-13

Setting or Changing a Static enable Password 3-13

Using the enable password and enable secret Commands 3-14

Setting or Changing a Privileged Password 3-14

Controlling Switch Access with TACACS+ 3-15

Understanding TACACS+ 3-15

TACACS+ Operation 3-17

Configuring TACACS+ 3-17

Displaying the TACACS+ Configuration 3-22

Encrypting Passwords 3-22

Configuring Multiple Privilege Levels 3-23

Setting the Privilege Level for a Command 3-23

Changing the Default Privilege Level for Lines 3-23

Logging In to a Privilege Level 3-24

Exiting a Privilege Level 3-24

Displaying the Password, Access Level, and Privilege Level Configuration 3-24

Recovering a Lost Enable Password 3-25

Modifying the Supervisor Engine Startup Configuration 3-25

Understanding the Supervisor Engine Boot Configuration 3-25

Understanding the ROM Monitor 3-26

Configuring the Software Configuration Register 3-26

Modifying the Boot Field and Using the boot Command 3-27

Modifying the Boot Field 3-28

Verifying the Configuration Register Setting 3-29

Specifying the Startup System Image 3-30

Flash Memory Features 3-31

Security Precautions 3-31

Configuring Flash Memory 3-31

Controlling Environment Variables 3-31

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Resetting a Switch to Factory Default Settings 3-32

Administering the Switch 4-1

Managing the System Time and Date 4-1

System Clock 4-2

Understanding Network Time Protocol 4-2

Configuring NTP 4-3

Default NTP Configuration 4-4

Configuring NTP Authentication 4-4

Configuring NTP Associations 4-6

Configuring NTP Broadcast Service 4-7

Configuring NTP Access Restrictions 4-8

Configuring the Source IP Address for NTP Packets 4-10

Displaying the NTP Configuration 4-11

Configuring Time and Date Manually 4-11

Setting the System Clock 4-11

Displaying the Time and Date Configuration 4-12

Configuring the Time Zone 4-12

Configuring Summer Time (Daylight Saving Time) 4-13

Managing Software Licenses Using Permanent Right-To-Use Features 4-14

About a PRTU License 4-15

Benefits of a PRTU License 4-15

Guidelines for the RTU License Model 4-16

Applying a PRTU License 4-16

Activating a PRTU License 4-16

Deactivating a PRTU License 4-17

Displaying Software License Information 4-17

Configuring a System Name and Prompt 4-21

Configuring a System Name 4-22

Understanding DNS 4-22

Default DNS Configuration 4-23

Setting Up DNS 4-23

Displaying the DNS Configuration 4-24

Creating a Banner 4-24

Default Banner Configuration 4-24

Configuring a Message-of-the-Day Login Banner 4-24

Configuring a Login Banner 4-27

Managing the MAC Address Table 4-28

Building the Address Table 4-28

MAC Addresses and VLANs 4-29

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Default MAC Address Table Configuration 4-30

Changing the Address Aging Time 4-30

Removing Dynamic Address Entries 4-31

Configuring MAC Change Notification Traps 4-31

Configuring MAC Move Notification Traps 4-33

Configuring MAC Threshold Notification Traps 4-35

Adding and Removing Static Address Entries 4-36

Configuring Unicast MAC Address Filtering 4-37

Disabling MAC Address Learning on a VLAN 4-39

Configuring Disable MAC Address Learning 4-39

Usage Guidelines 4-40

Deployment Scenarios 4-40

Feature Compatibility 4-42

Feature Incompatibility 4-43

Partial Feature Incompatibility 4-43

Displaying Address Table Entries 4-44

Managing the ARP Table 4-44

Configuring Embedded CiscoView Support 4-44

Understanding Embedded CiscoView 4-45

Installing and Configuring Embedded CiscoView 4-45

Displaying Embedded CiscoView Information 4-48

Configuring Virtual Switching Systems 5-1

Understanding Virtual Switching Systems 5-2

VSS Overview 5-2

Key Concepts 5-3

VSS Functionality 5-5

Hardware Requirements 5-9

Understanding VSL Topology 5-11

VSS Redundancy 5-11

Overview 5-12

RPR and SSO Redundancy 5-12

Switch Roles in a VSS 5-12

Failed Switch Recovery 5-13

VSL Failure 5-14

User Actions 5-14

Multichassis EtherChannels 5-14

Overview 5-14

MEC Failure Scenarios 5-15

Packet Handling 5-16

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Traffic on the VSL 5-16

Layer 2 Protocols 5-17

Layer 3 Protocols 5-18

System Monitoring 5-20

Environmental Monitoring 5-20

File System Access 5-20

Diagnostics 5-21

Network Management 5-21

Dual-Active Detection 5-23

Dual-Active Detection Using Enhanced PAgP 5-23

Dual-Active Detection Using Fast-Hello 5-24

Recovery Actions 5-24

Configuring a Recovery IP Address 5-25

VSS Initialization 5-26

Virtual Switch Link Protocol 5-26

SSO Dependencies 5-27

Initialization Procedure 5-27

VSS Configuration Guidelines and Restrictions 5-28

General VSS Restrictions and Guidelines 5-28

Multichassis EtherChannel Restrictions and Guidelines 5-30

Dual-Active Detection Restrictions and Guidelines 5-30

Configuring a VSS 5-30

Converting to a VSS 5-30

Backing Up the Standalone Configuration 5-32

Configuring SSO and NSF 5-32

Assigning Virtual Switch Domain and Switch Numbers 5-32

Configuring VSL Port Channel and Ports 5-33

Converting the Switch to Virtual Switch Mode 5-34

(Optional) Configuring VSS Standby Switch Modules 5-35

Displaying VSS Information 5-36

Converting a VSS to Standalone Switch 5-37

Copying the VSS Configuration to a Backup File 5-38

Converting the VSS Active Switch to Standalone 5-38

Converting the VSS Standby Switch to Standalone 5-38

Configuring VSS Parameters 5-39

Configuring VSL Switch Priority 5-39

Configuring a VSL 5-41

Adding and Deleting a VSL Port After the Bootup 5-41

Displaying VSL Information 5-42

Configuring VSL QoS 5-43

Contents

Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E

OL-30933-01

Configuring the Router MAC Address 5-44

Configuring Multichassis EtherChannels 5-45

Configuring Dual-Active Detection 5-49

Configuring Enhanced PAgP Dual-Active Detection 5-49

Configuring Fast-Hello Dual-Active Detection 5-50

Displaying Dual-Active Detection 5-51

In-Service Software Upgrade (ISSU) on a VSS 5-53

VSS ISSU Concept 5-53

Traffic and Network Protocol Disruption During ISSU in a VSS 5-55

Popular Switch manuals by other brands

URC

URC Total Control MFS-8 installation manual

Azbil

Azbil HPQ-D11 user manual

Sony

Sony DFS-900M operating instructions

SICK

SICK i17S operating instructions

F&F

F&F SZR-277 quick start guide

Shure

Shure UAMS/BK user guide

Dräger

Dräger X-zone Switch Off Instructions for use

Asco

Asco Joucomatic 349 Series manual

BT Mini Hub user guide

D-Link

D-Link DES-1226G manual

Johnson Controls

Johnson Controls FS80-C installation instructions

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Configuration guide

MicroNet

MicroNet SP1200A user manual

Ruijie

Ruijie RG-PF2920 Series Hardware installation and reference guide

Altinex

Altinex DA1914SX user guide

MiLAN

MiLAN MIL-SM2401M user guide

RJM

RJM MASTERMIND PBC/6X user manual

Atlas

Atlas MMK-KVM8 owner's manual