 Feedback
|
Table Of Contents
Release Notes for the Catalyst 4900 Series Switch, Cisco IOS Release 15.0(2)SG
Cisco IOS Software Packaging for the
Cisco Catalyst 4900 Series SwitchFeature Support on the LAN Base vs IP Base Images
Cisco IOS Release Strategy for the Catalyst 4900 Series Switch
New Hardware Features in Release 15.0(2)SG1
New Software Features in Release 15.0(2)SG1
New Hardware Features in Release 15.0(2)SG
New Software Features in Release 15.0(2)SG
Upgrading the ROMMON from the Console
Upgrading the ROMMON Remotely Using Telnet
Upgrading the Cisco IOS Software
Open Caveats in Cisco IOS Release 15.0(2)SG8
Resolved Caveats in Cisco IOS Release 15.0(2)SG8
Open Caveats in Cisco IOS Release 15.0(2)SG7
Resolved Caveats in Cisco IOS Release 15.0(2)SG7
Open Caveats in Cisco IOS Release 15.0(2)SG6
Resolved Caveats in Cisco IOS Release 15.0(2)SG6
Open Caveats in Cisco IOS Release 15.0(2)SG5
Resolved Caveats in Cisco IOS Release 15.0(2)SG5
Open Caveats in Cisco IOS Release 15.0(2)SG4
Resolved Caveats in Cisco IOS Release 15.0(2)SG4
Open Caveats in Cisco IOS Release 15.0(2)SG3
Resolved Caveats in Cisco IOS Release 15.0(2)SG3
Open Caveats in Cisco IOS Release 15.0(2)SG2
Resolved Caveats in Cisco IOS Release 15.0(2)SG2
Open Caveats in Cisco IOS Release 15.0(2)SG1
Resolved Caveats in Cisco IOS Release 15.0(2)SG1
Open Caveats in Cisco IOS Release 15.0(2)SG
Resolved Caveats in Cisco IOS Release 15.0(2)SG
Troubleshooting at the System Level
Obtaining Documentation and Submitting a Service Request
Release Notes for the Catalyst 4900 Series Switch, Cisco IOS Release 15.0(2)SG
Current Release
15.0(2)SG8—December 9, 2013Prior Release
15.0(2)SG7, 15.0(2)SG6, 15.0(2)SG5, 15.0(2)SG4, 15.0(2)SG3, 15.0(2)SG2, 15.0(2)SG1, 15.0(2)SGThese release notes describe the features, modifications, and caveats for the Cisco IOS Release 15.0(2)SG on the Catalyst 4900 series switch (WS-C4928-10GE, WS-C4948, and WS-C4948-10GE).
To view the release notes for WS-C4900M, WS-C4948E, and WS-C4948E-F, see the URL:
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/release/note/OL_24730.htmlSupport for Cisco IOS Software Release 15.0(2)SG, the default image, follows the standard Cisco Systems® support policy, available at
http://www.cisco.com/en/US/products/products_end-of-life_policy.html
Note
Although their Release Notes are unique, the 4 platforms (Catalyst 4500, Catalyst 4900,
Catalyst ME 4900, and Catalyst 4900M/4948E) use the same Software Configuration Guide, Command Reference Guide, and System Message Guide.
For more information on the Catalyst 4500 series switches, visit the following URL:
http://www.cisco.com/go/cat4500/docsContents
This publication consists of these sections:
•
•
•
•
Cisco IOS Software Packaging for the
Cisco Catalyst 4900 Series SwitchThe Enterprise Services image supports all Cisco Catalyst 4500 Series software features based on Cisco IOS Software, including enhanced routing.
The IP Base image supports Open Shortest Path First (OSPF) for Routed Access and Enhanced Interior Gateway Routing Protocol (EIGRP) "limited" Stub Routing, and RIPv1/v2. The IP Base image does not support enhanced routing features such as Nonstop Forwarding/Stateful Switchover (NSF/SSO), BGP, Intermediate System-to-Intermediate System (IS-IS), Internetwork Packet Exchange (IPX), AppleTalk, Virtual Routing Forwarding (VRF-lite), GLBP, and policy-based routing (PBR).
Cisco IOS Release 12.2(46)SG1 introduced a new LAN Base software and an IP upgrade image. These complement the existing IP Base and Enterprise Services images. LAN Base image is primarily focused on customer access and Layer 2 requirements and therefore many of the IP Base features are not required. The IP upgrade image is available if at a later date you require some of those features.
Starting with Cisco IOS Release 15.0(2)SG, on the Catalyst 4900 Series Switch, support for Network Edge Access Topology (NEAT) has been extended from IP Base to LAN Base and support for HSRPv2 for IPv6 has been extended from Enterprise Services to IP Base.
For more information about the Cisco Catalyst 4900 series switch, visit
http://www.cisco.com/en/US/products/ps6021/index.htmlTopics include:
•
Feature Support on the LAN Base vs IP Base Images
Table 1 is a detailed list of features supported on Catalyst 4900 Series Switch running Cisco IOS Software Release 15.0(2)SG. For the full list of supported features, check the Feature Navigator application:
http://tools.cisco.com/ITDIT/CFN/
For information on MiBs support, please refer to this URL:
http://ftp.cisco.com/pub/mibs/supportlists/cat4000/cat4000-supportlist.html
Table 1 LAN Base/IP Base Image Support on the Catalyst 4900 Series Switch
2-way Community Private VLANs
No
Yes
Yes
8-Way CEF Load Balancing
No
Yes
Yes
10G Uplink Use
Yes
Yes
Yes
AAA Server Group
Yes
Yes
Yes
ACL Logging
Yes
Yes
Yes
All MIBs
Yes
Yes
Yes
ANCP Client
No
Yes
Yes
AppleTalk 1 and 2
No
No
Yes
Auto SmartPorts
Yes
Yes
Yes
AutoQoS
Yes
Yes
Yes
Auto-MDIX
Yes
Yes
Yes
Auto-Voice VLAN (part of Auto QoS)
No
Yes
Yes
BGP
No
No
Yes
BGP 4
No
No
Yes
BGP 4 Multipath Support
No
No
Yes
BGP 4 Prefix Filter and In-bound Route Maps
No
No
Yes
BGP Conditional Route Injection
No
No
Yes
BGP Link Bandwidth
No
No
Yes
BGP Neighbor Policy
No
No
Yes
BGP Prefix-Based Outbound Route Filtering
No
No
Yes
BGP Route-Map Continue
No
No
Yes
BGP Route-Map Continue Support for Outbound Policy
No
No
Yes
BGP Route-Map Policy List Support
No
No
Yes
BGP Soft Reset
No
No
Yes
Bidirectional PIM (IPv4 only)
No
Yes
Yes
BOOTP
Yes
Yes
Yes
Bootup GOLD
No
Yes
Yes
Broadcast/Multicast Suppression
Yes
Yes
Yes
Call Home
No
Yes
Yes
CDP/CDPv2
Yes
Yes
Yes
CFM
Yes
Yes
Yes
CGMP - Cisco Group Management Protocol
Yes
Yes
Yes
Cisco TrustSec SGT Exchange Protocol (SXP) IPv4
No
Yes
Yes
CiscoView Autonomous Device Manager (ADP)
Yes
Yes
Yes
CNS
Yes
Yes
Yes
Command Scheduler (Kron)
Yes
Yes
Yes
Community PVLAN support
No
Yes
Yes
Config File
Yes
Yes
Yes
Configuration Replace and Configuration Rollback
Yes
Yes
Yes
Configuration Rollback Confirmed Change
No
No
Yes
Copy Command
Yes
Yes
Yes
Console Access
Yes
Yes
Yes
Control Plane Policing (CoPP)
Yes
Yes
Yes
CoS to DSCP Map
Yes
Yes
Yes
CPU Optimization for Layer 3 Multicast Control Packets
Yes
Yes
Yes
Crashdump Enhancement1
Yes
Yes
Yes
DAI (Dynamic ARP Inspection)
Yes
Yes
Yes
DBL (Dynamic Buffer Limiting) - Active Queue Management
Yes
Yes
Yes
Debug Commands
Yes
Yes
Yes
Device Management
Yes
Yes
Yes
DHCP - DHCPv6 Relay Agent notification for Prefix Delegation
No
Yes
Yes
DHCP Client
Yes
Yes
Yes
DHCP Server
Yes
Yes
Yes
DHCP Snooping
Yes
Yes
Yes
DHCPv6 Ethernet Remote ID option
Yes
Yes
Yes
Diagnostics Tools
Yes
Yes
Yes
Digital Optical Monitoring (DOM)
Yes
Yes
Yes
Downloading Software
Yes
Yes
Yes
DSCP to CoS Map
Yes
Yes
Yes
DSCP to egress queue mapping
Yes
Yes
Yes
Duplication Location Reporting Issue
No
Yes
Yes
EIGRP
No
No
Yes
EIGRP Stub Routing
No
Yes
Yes
Embedded Event Manager (EEM) 3.2
No
Yes
Yes
Embedded Event Manager and EOT integration
No
Yes
Yes
EnergyWise
Yes
Yes
Yes
EPoE
Yes
Yes
Yes
EtherChannel
Yes
Yes
Yes
Ethernet Operations, Administration, and Maintenance (OAM)
Yes
Yes
Yes
Event Log
Yes
Yes
Yes
Factory Default Settings
Yes
Yes
Yes
FHRP - Enhanced Object Tracking of IP SLAs
No
No
Yes
FHRP - GLBP - IP Redundancy API
No
Yes
Yes
FHRP - HSRP - Hot Standby Router Protocol V2
No
Yes
Yes
FHRP - Object Tracking List
No
Yes
Yes
File Management
Yes
Yes
Yes
Flex Link+(VLAN Load-Balancing)
Yes
Yes
Yes
Gateway Load Balancing Protocol (GLBP)
No
Yes
Yes
HSRP - Hot Standby Router Protocol
No
Yes
Yes
HTTP TA+A54CAC+ Accounting support
No
No
Yes
ID 4.0 Voice Vlan assignment
Yes
Yes
Yes
ID 4.1 Filter ID and per use ACL
Yes
Yes
Yes
IEEE 802.1ab LLDP (Link Layer Discovery Protocol)
Yes
Yes
Yes
IEEE 802.1ab LLDP/LLDP-MED
Yes
Yes
Yes
IEEE 802.1ab LLDP enhancements (PoE+Layer 2 COS)
Yes
No
Yes
IEEE 802.1ag D8.1 standard Compliant CFM, Y.1731 multicast LBM / AIS / RDI / LCK, IP SLA for Ethernet
Yes
Yes
Yes
IEEE 802.1p Support
Yes
Yes
Yes
IEEE 802.1p prioritization
Yes
Yes
Yes
IEEE 802.1p/802.1q
Yes
Yes
Yes
IEEE 802.1Q Tunneling
Yes
Yes
Yes
IEEE 802.1Q VLAN Trunking
Yes
Yes
Yes
IEEE 802.1s - Multiple Spanning Tree (MST) Standard Compliance
Yes
Yes
Yes
IEEE 802.1w Spanning Tree Rapid Reconfiguration
Yes
Yes
Yes
IEEE 802.1x (Auth-Fail VLAN, Accounting)
Yes
Yes
Yes
IEEE 802.1x Critical Authorization for Voice and Data
Yes
Yes
Yes
IEEE 802.1x Flexible Authentication
Yes
Yes
Yes
IEEE 802.1x with Multiple authenticated, multi-host
Yes
Yes
Yes
IEEE 802.1x Open Authentication
Yes
Yes
Yes
IEEE 802.1x User Port Description
Yes
Yes
Yes
IEEE 802.1x VLAN Assignment)
Yes
Yes
Yes
IEEE 802.1x Wake on LAN
Yes
Yes
Yes
IEEE 802.1x Agentless Audit Support
Yes
Yes
Yes
IEEE 802.1x Authenticator
Yes
Yes
Yes
IEEE 802.1x Fallback support
Yes
Yes
Yes
IEEE 802.1x Guest VLAN
Yes
Yes
Yes
IEEE 802.1x MIB Support
Yes
Yes
Yes
IEEE 802.1x Multi-Domain Authentication
Yes
Yes
Yes
IEEE 802.1x Multi-Domain Authentication with Voice VLAN Assignment
Yes
Yes
Yes
IEEE 802.1x Private Guest VLAN
Yes
Yes
Yes
IEEE 802.1x Private VLAN Assignment
Yes
Yes
Yes
IEEE 802.1x RADIUS Accounting
Yes
Yes
Yes
IEEE 802.1x RADIUS-supplied Session Timeout
Yes
Yes
Yes
IEEE 802.1x and MAB with ACL assignment
Yes
Yes
Yes
IEEE 802.3ad Link Aggregation (LACP)
Yes
Yes
Yes
IEEE 802.3ad Link Aggregation (LACP) Port-Channel Standalone Disable
Yes
Yes
Yes
IEEE 802.3ah and CFM Interworking
No
Yes
Yes
IEEE 802.3x Flow Control
Yes
Yes
Yes
IEEE 802.1x Web-Auth
Yes
Yes
Yes
IGMP Filtering
Yes
Yes
Yes
IGMP Querier
Yes
Yes
Yes
IGMP Snooping
Yes
Yes
Yes
IGMP Version 1
Yes
Yes
Yes
IGMP Version 2
Yes
Yes
Yes
IGMP Version 3
Yes
Yes
Yes
Ingress Policing
Yes
Yes
Yes
Interface Access (Telnet, Console/Serial, Web)
Yes
Yes
Yes
IP Enhanced IGRP Route Authentication
No
No
Yes
IP Event Dampening
Yes
Yes
Yes
IP Multicast Load Splitting across Equal-Cost Paths
No
Yes
Yes
IP Named Access Control List
Yes
Yes
Yes
IP over IPv6 Tunnels
Yes
Yes
Yes
IP Routing
Yes
Yes
Yes
IP SLAs DHCP Operation
No
No
Yes
IP SLAs Distribution of Statistics
No
No
Yes
IP SLAs DNS Operation
No
No
Yes
IP SLAs FTP Operation
No
No
Yes
IP SLAs History Statistics
No
No
Yes
IP SLAs HTTP Operation
No
No
Yes
IP SLAs ICMP Echo Operation
No
No
Yes
IP SLAs ICMP Path Echo Operation
No
No
Yes
IP SLAs Multi Operation Scheduler
No
No
Yes
IP SLAs One Way Measurement
No
No
Yes
IP SLAs Path Jitter Operation
No
No
Yes
IP SLAs Random Scheduler
No
No
Yes
IP SLAs Reaction Threshold
No
No
Yes
IP SLAs Responder
No
Yes
Yes
IP SLAs Sub-millisecond Accuracy Improvements
No
No
Yes
IP SLAs Scheduler
No
No
Yes
IP SLAs SNMP Support
No
No
Yes
IP SLAs TCP Connect Operation
No
No
Yes
IP SLAs UDP Based VoIP Operation
No
No
Yes
IP SLAs UDP Echo Operation
No
No
Yes
IP SLAs UDP Jitter Operation
No
No
Yes
IP SLAs VoIP Threshold Traps
No
No
Yes
IP Source Guard v4
Yes
Yes
Yes
IP Unnumbered for VLAN-SVI interfaces
No
Yes
Yes
IPv6 (Internet Protocol Version 6)
Yes
Yes
Yes
IPv6 HSRP
No
Yes
Yes
IPv6 IP SLAs (UDP Jitter, UDP Echo, ICMP Echo, TCP Connect)
No
No
Yes
IPV6 MLD snooping V1 and V2
Yes
Yes
Yes
IPv6 Multicast
No
Yes
Yes
IPv6 Multicast: Bootstrap Router (BSR)
No
No
Yes
IPv6 Multicast: Multicast Listener Discovery (MLD) Protocol, Versions 1 and 2
No
Yes
Yes
IPv6 Multicast: PIM Accept Register
No
Yes
Yes
IPv6 Multicast: PIM Source-Specific Multicast (PIM-SSM)
No
Yes
Yes
IPv6 Multicast: PIM Sparse Mode (PIM-SM)
No
Yes
Yes
IPv6 Multicast: Routable Address Hello Option
No
Yes
Yes
IPv6 Neighbor Discovery
No
Yes
Yes
IPV6 Reformation
NA
Yes
Yes
IPV6 Router Advertisement (RA) Guard
Yes
Yes
Yes
IPv6 Routing - EIGRP Support
No
No
Yes
IPv6 Routing: OSPF for IPv6 (OSPFv3)
No
No
Yes
IPv6 Routing: RIP for IPv6 (RIPng)
No
Yes
Yes
ISIS for IPv4 and IPv6
No
No
Yes
ISL Trunk
Yes
Yes
Yes
ISSU (IOS In-Service Software Upgrade)
No
Yes
Yes
Jumbo Frames
Yes
Yes
Yes
Layer 2 Debug
Yes
Yes
Yes
Layer 2 Protocol Tunneling (L2PT)
No
Yes
Yes
Layer 2 Traceroute
Yes
Yes
Yes
Link State Tracking
Yes
Yes
Yes
Local Web Auth
Yes
Yes
Yes
MAB (MAC Authentication Bypass) for Voice VLAN
Yes
Yes
Yes
MAC Address Filtering
Yes
Yes
Yes
MAC Based Access List
Yes
Yes
Yes
Management IPV6 port
Yes
Yes
Yes
Multicast BGP (MBGP)
No
No
Yes
Multicast Routing Monitor (MRM)
No
No
Yes
Multicast Source Discovery Protocol (MSDP)
Yes
Yes
Yes
Multi-authentication and VLAN Assignment
Yes
Yes
Yes
Multi-VRF Support (VRF lite)
No
No
Yes
NAC - L2 IEEE 802.1x
Yes
Yes
Yes
NAC - L2 IP
Yes
Yes
Yes
NEAT Enhancement: Re-Enabling BPDU Guard Based on User Configuration
Yes
Yes
Yes
Network Edge Access Topology (NEAT)
Yes
Yes
Yes
Network Time Protocol (NTP)
Yes
Yes
Yes
Network Time Protocol (NTP) master
Yes
Yes
Yes
No. of QoS Filters
No. of Security ACE
Yes (4K entries)
Yes
Yes
No. of VLAN Support
2048
4096
Yes
NSF - BGP
No
No
Yes
NSF - EIGRP
No
No
Yes
NSF - OSPF v2
No
No
Yes
NSF/SSO (Nonstop Forwarding with Stateful Switchover)
No
No
Yes
On Demand Routing (ODR)
No
No
Yes
OSPF
No
Yes2
Yes
OSPF Flooding Reduction
No
Yes2
Yes
OSPF for Routed Access
No
Yes
Yes
OSPF Incremental Shortest Path First (i-SPF) Support
No
Yes2
Yes
OSPF Link State Database Overload Protection
No
Yes2
Yes
OSPF Not-So-Stubby Areas (NSSA)
No
Yes2
Yes
OSPF Packet Pacing
No
Yes2
Yes
OSPF Shortest Paths First Throttling
No
Yes2
Yes
OSPF Stub Router Advertisement
No
Yes2
Yes
OSPF Support for Fast Hellos
No
Yes2
Yes
OSPF Support for Link State Advertisement (LSA) Throttling
No
Yes2
Yes
OSPF Support for Multi-VRF on CE Routers
No
Yes2
Yes
OSPF Update Packet-Pacing Configurable Timers
No
Yes2
Yes
Out-of-band Management Port
Yes
Yes
Yes
PAgP
Yes
Yes
Yes
Passwords
Password clear protectionYes
Yes
Yes
Per-User ACL Support for 802.1X/MAB/Webauth users
Yes
Yes
Yes
PIM Sparse Mode Version4
No
No
Yes
PIM Version 1
No
Yes
Yes
PM Version 2
No
Yes
Yes
PoE (up to 15.4W only)
Yes
Yes
Yes
PoE+ Ready
Yes
Yes
Yes
Policy-Based Routing (PBR)
No
No
Yes
Port Access Control List (PACL)
Yes
Yes
Yes
Port Monitoring (interface Stats)
Yes
Yes
Yes
Port Security
Yes
Yes; only 1024 MACs
Yes
Post Status
Yes
Yes
Yes
Pragmatic General Multicast (PGM)
Yes
Yes
Yes
Private VLANs
Yes
Yes
Yes
Propagation of Location Info over CDP
Yes
Yes
Yes
PVLAN over EtherChannel
Yes
Yes
Yes
PVST+ (Per Vlan Spanning Tree Plus)
Yes
Yes
Yes
Q-in-Q
No
Yes
Yes
RACL (DSCP based)
Yes
Yes
Yes
RADIUS/TACACS+ (AAA)
Yes
Yes
Yes
RADIUS Attribute 44 (Accounting Session ID) in Access Requests
Yes
Yes
Yes
Rapid-Per-VLAN-Spanning Tree (Rapid-PVST)
Yes
Yes
Yes
Remote SPAN (RSPAN)
Yes
Yes
Yes
REP (Resilient Ethernet Protocol)
Yes
Yes
Yes
REP No Edge Neighbour Enhancement
Yes
Yes
Yes
RIP
No
Yes
Yes
RMON
Yes
Yes
Yes
Role-Based Access Control CLI commands (RBAC)
Yes
Yes
Yes
RPR
Yes
Yes
Yes
RPVST+
Yes
Yes
Yes
RSPAN
Yes
Yes
Yes
Secure Copy (SCP)
Yes
Yes
Yes
Secure Shell SSH Version 1, 2 Server Support
Yes
Yes
Yes
Secure Shell SSH Version 1, 2 Client Support
Yes
Yes
Yes
Service Advertisement Framework (SAF)
No
No
Yes
SmartPorts (Role based MACRO)
Yes
Yes
Yes
SNMP (Simple Network Management Protocol)
Yes
Yes
Yes
SNMPv3 (SNMP Version 3)
Yes
Yes
Yes
Source Port Filtering (Private VLAN)
Yes
Yes
Yes
Source Specific Multicast (SSM)
No
Yes
Yes
Source Specific Multicast (SSM) - IGMPv3,IGMP v3lite, and URD
Yes
Yes
Yes
Source Specific Multicast (SSM) Mapping
Yes
Yes
Yes
SPAN (# of sessions) - Port Mirroring
Yes (2 sessions)
Yes (8 bidirectional sessions)
Yes
SSHv2/Secure Copy, FTP, SSL, Syslog, Sys Information
Yes
Yes
Yes
SSO (Stateful SwitchOver)
No
Yes
Yes
Static Routing (IPv4/IPv6)
Yes
Yes
Yes
Storm Control - Per-Port Multicast Suppressio
Yes
Yes
Yes
Stub IP Multicast Routing
No
Yes
Yes
SVI (Switch Virtual Interface) Autostate Exclude
Yes
Yes
Yes
TACACS+
Yes
Yes
Yes
Time-Based Access Lists
Yes
Yes
Yes
Time Domain Reflectometry (TDR)
No
Yes
Yes
Time Protocols (SNTP, TimeP)
Yes
Yes
Yes
Traffic Mirroring (SPAN)
Yes
Yes
Yes
Trusted Boundary (LLDP & CDP Based)
Yes
Yes
Yes
Unicast Reverse Path Forwarding (uRPF)
Yes
Yes
Yes
UniDirectional Link Detection (UDLD)
Yes
Yes
Yes
Virtual Router Redundancy Protocol (VRRP)
No
Yes
Yes
VLAN Access Control List (VACL)
Yes
Yes
Yes
VLAN Mapping (VLAN Translation)
Yes
Yes
Yes
Voice VLAN
Yes
Yes
Yes
VTP (Virtual Trunking Protocol) Version 2
Yes
Yes
Yes
VTP version 3
Yes
Yes
Yes
WCCP Redirection on Inbound Interfaces
No
Yes
Yes
WCCP Version 2
No
Yes
Yes
XML-PI
Yes
Yes
Yes
1 Supported only on Catalyst 4900M.
2 IP Base supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 200 dynamically learned routes.
Note
Unsupported Features
These features are not supported in Cisco IOS Release 15.0(2)SG for the 4900 series switches:
•
–
–
–
–
•
•
–
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Orderable Product Numbers
•
•
•
•
•
•
Cisco IOS Release Strategy for the Catalyst 4900 Series Switch
Customers with Catalyst 4900 series switches who need the latest hardware support and software features should migrate to Cisco IOS Release 15.0(2)SG. Cisco IOS Release 15.0(2)SG is the latest maintenance train base.
Cisco IOS Release 12.2(53)SG4 is the recommended release for customers who require a release with a maintenance train. The Cisco IOS Release 12.2(53)SG train includes support for OSPF for routed Access.
Cisco IOS Software Migration
Figure 1 displays the two active trains.
Figure 1 Software Release Strategy for the Catalyst 4900 Series Switch
Support
Support for Cisco IOS Software Release 15.0(2)SG follows the standard Cisco Systems® support policy, available at
http://www.cisco.com/en/US/products/products_end-of-life_policy.htmlSystem Requirements
This section describes the system requirements:
Supported Hardware
This section describes the hardware supported on the Catalyst 4900 series switch.
For Catalyst 4900 series switch transceiver module compatibility information, see the url:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
Table 2 briefly describes the Catalyst 4900 series switch product set.
New and Changed Information
These sections describe the new and changed information for the Catalyst 4900 series switch running Cisco IOS software:
•
•
•
•
New Hardware Features in Release 15.0(2)SG1
Release 15.0(2)SG1 provides no new hardware on the Catalyst 4900 series switch.
New Software Features in Release 15.0(2)SG1
Release 15.0(2)SG1 provides the following new software feature on the Catalyst 4900 series switch:
•
New Hardware Features in Release 15.0(2)SG
Release 15.0(2)SG provides the following hardware on the Catalyst 4900 series switch:
•
New Software Features in Release 15.0(2)SG
Release 15.0(2)SG provides the following new software features on the Catalyst 4900 series switch:
•
•
•
•
For information on the reporting issue, refer to the following URL:
http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_cdp_discover.html
•
•
•
802.1X" chapter)
•
•
For information on configuring CDP Location TLV, refer to the following URL:
http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_cdp_discover.html
•
•
Upgrading the System Software
In most cases, upgrading the switch to a newer release of Cisco IOS software does not require a ROMMON upgrade. However, if you are running an early release of Cisco IOS software and plan to upgrade, the following tables list the recommended ROMMON release.
Caution
The following sections describe how to upgrade your switch software:
•
•
•
Upgrading the ROMMON from the Console
Caution
Note
Follow this procedure to upgrade your supervisor engine ROMMON:
Step 1
Note
Step 2
The cat4500-ios-promupgrade-122_31r_SGA1SGA4 programs are available on Cisco.com at the same location from which you download Catalyst 4500 system images.
Step 3
squeeze bootflash: command to reclaim the space.Step 4
The following example shows how to download the PROM upgrade image cat4500-ios-promupgrade-122_31r_SGA1 from the remote host 172.20.58.78 to bootflash::
Switch# copy tftp: bootflash: Address or name of remote host [172.20.58.78]? Source filename [cat4500-ios-promupgrade-122_31r_SGA1SGA4]? Destination filename [cat4500-ios-promupgrade-122_31r_SGA1SGA4]? Accessing tftp://172.20.58.78/cat4500-ios-promupgrade-122_31r_SGA1SGA4... Loading cat4500-ios-promupgrade-122_31r_SGA1SGA4 from 172.20.58.78 (viaFastEthernet2/1):!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!![OK - 455620 bytes]455620 bytes copied in 2.644 secs (172322 bytes/sec) Switch#Step 5
The following example shows the output after a reset into ROMMON:
Switch# reloadProceed with reload? [confirm]2d11h: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.*********************************************************** ** Welcome to Rom Monitor for WS-C4948-10GE System. ** Copyright (c) 1999-2005 by Cisco Systems, Inc. ** All rights reserved. ** ***********************************************************Rom Monitor Program Version 12.2(25r)EWASupervisor: WS-C4948-10GE Chassis: WS-C4948Hardware Revisions - Board: 8.3 CPLD Gill: 17MAC Address : 00-0b-fc-ff-3b-ffIP Address : 10.5.43.225Netmask : 255.255.255.0Gateway : 10.5.43.1TftpServer : 10.5.5.5***** The system will autoboot in 5 seconds *****Type control-C to prevent autobooting.. .Autoboot cancelled......... please wait!!!Autoboot cancelled......... please wait!!!rommon 1 > [interrupt]Step 6
Caution
The following example shows the output from a successful upgrade, followed by a system reset:
rommon 2 > bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4*********************************************************** ** Rom Monitor Upgrade Utility For WS-C4948-10GE System ** This upgrades flash Rom Monitor image to the latest ** ** Copyright (c) 1997-2005 by Cisco Systems, Inc. ** All rights reserved. ** ***********************************************************Image size = 1024.0 KBytesMaximum allowed size = 1048576 KBytesUpgrading your PROM... DO NOT RESET the systemunless instructed or upgrade of PROM will fail !!!Beginning erase of 0x100000 bytes at offset 0x3e00000... Done!Beginning write of prom (0x100000 bytes at offset 0x3e00000)...This could take as little as 30 seconds or up to 2 minutes.Please DO NOT RESET!Verifying...Success! The prom has been upgraded successfully.System will reset itself and reboot within few seconds....Step 7
Step 8
The following example shows how to delete the cat4500-ios-promupgrade-122_31r_SGA1SGA4 image from bootflash and reclaim unused space:
Switch# delete bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4Switch# squeeze bootflash:All deleted files will be removed, proceed (y/n) [n]? ySqueeze operation may take some time, proceed (y/n) [n]? ySwitch#Step 9
Switch# show versionCisco IOS Software, Catalyst 4900 L3 Switch Software (cat4500-IPBASE-M), Version 12.2(25)EWA, RELEASE SOFTWARE (fc1)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 17-Aug-05 17:09 by alnguyenImage text-base: 0x10000000, data-base: 0x11269914ROM: 12.2(31r)SGA4Pod Revision 0, Force Revision 31, Tie Revision 17Switch uptime is 1 minuteSystem returned to ROM by reloadSystem image file is "bootflash:cat4500-ipbase-mz.122-25.EWA"cisco WS-C4948-10GE (MPC8540) processor (revision 3) with 262144K bytes of memory.Processor board ID 0MPC8540 CPU at 667Mhz, Fixed ModuleLast reset from Reload1 Virtual Ethernet interface48 Gigabit Ethernet interfaces2 Ten Gigabit Ethernet interfaces511K bytes of non-volatile configuration memory.Configuration register is 0x2Switch#The ROMMON has now been upgraded.
See the "Upgrading the Cisco IOS Software" section for instructions on how to upgrade the Cisco IOS software on your switch.
Upgrading the ROMMON Remotely Using Telnet
Caution
Follow this procedure to upgrade your supervisor engine ROMMON to Release 12.2(31r)SGA4. This procedure can be used when console access is not available and when the ROMMON upgrade must be performed remotely.
Note
Step 1
Note
Step 2
The cat4500-ios-promupgrade-122_31r_SGA1SGA4 programs are available on Cisco.com at the same location from which you download Catalyst 4500 system images.
Step 3
squeeze bootflash: command to reclaim the space.Step 4
The following example shows how to download the PROM upgrade image cat4500-ios-promupgrade-122_31r_SGA1SGA4 from the remote host 10.5.5.5 to bootflash:
Switch# copy tftp: bootflash: Address or name of remote host [10.5.5.5]?Source filename [cat4500-ios-promupgrade-122_31r_SGA1SGA4]? /tftpboot/pjose/cat4500-ios-promupgrade-122_31r_SGA1SGA4Destination filename [cat4500-ios-promupgrade-122_31r_SGA1SGA4]?Accessing tftp://10.5.5.5//tftpboot/pjose/cat4500-ios-promupgrade-122_31r_SGA1SGA4...Loading /tftpboot/pjose/cat4500-ios-promupgrade-122_31r_SGA1SGA4 from 10.5.5.5 (via GigabitEthernet1/1): !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!![OK - 1244496 bytes]1244496 bytes copied in 9.484 secs (131221 bytes/sec)Switch#Step 5
Switch# configure terminalSwitch(config)# no boot system flashbootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4Switch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3641 to 1244 bytes [OK]Switch#Use the boot system flash bootflash:file_name command to set the BOOT variable. You will use two BOOT commands: one to upgrade the ROMMON and a second to load the Cisco IOS software image after the ROMMON upgrade is complete. Notice the order of the BOOT variables in the example below. At bootup the first BOOT variable command upgrades the ROMMON. When the upgrade is complete the supervisor engine will autoboot, and the second BOOT variable command will load the Cisco IOS software image specified by the second BOOT command.
Note
In this example, we assume that the console port baud rate is set to 9600 bps and that the config-register is set to 0x0102.Use the config-register command to autoboot using image(s) specified by the BOOT variable. Configure the BOOT variable to upgrade the ROMMON and then autoboot the IOS image after the ROMMON upgrade is complete. In this example, we are upgrading the ROMMON to version 12.2(31r)SGA4EWA. After the ROMMON upgrade is complete, the supervisor engine will boot Cisco IOS software Release 12.2(25)EWA.config-register to 0x0102Switch# configure terminalSwitch(config)# boot system flash bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4Switch(config)# boot system flash bootflash:cat4500-ipbase-mz.122-25.EWASwitch(config)# config-register 0x0102Switch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3641 to 1244 bytes [OK]Switch#Step 6
Switch# show bootvarBOOT variable = bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4,1;bootflash:cat4500-ipbase-mz.122-25.EW ACONFIG_FILE variable does not existBOOTLDR variable does not existConfiguration register is 0x2102Step 7
Caution
The following example shows the console port output from a successful ROMMON upgrade followed by a system reset. Your Telnet session will be disconnected during the ROMMON upgrade, so you will not see this output. This step could take 2-3 minutes to complete. You will need to reconnect your Telnet session after 2-3 minutes when the Cisco IOS software image and the interfaces are loaded.
Switch# reloadProceed with reload? [confirm]00:00:36: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command*********************************************************** ** Welcome to Rom Monitor for WS-C4948-10GE System. ** Copyright (c) 1999-2005 by Cisco Systems, Inc. ** All rights reserved. ** ***********************************************************Rom Monitor Program Version 12.2(25r)EWASupervisor: WS-C4948-10GE Chassis: WS-C4948Hardware Revisions - Board: 8.0 CPLD : 17 FPGA : 0MAC Address : 00-0b-fc-ff-3b-ffIP Address : 10.5.43.225Netmask : 255.255.255.0Gateway : 10.5.43.1TftpServer : 10.5.5.5***** The system will autoboot in 5 seconds *****Type control-C to prevent autobooting.. . . . .******** The system will autoboot now ********config-register = 0x102Autobooting using BOOT variable specified file.....Current BOOT file is --- bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4*********************************************************** ** Rom Monitor Upgrade Utility For WS-C4948-10GE System ** This upgrades flash Rom Monitor image to the latest ** ** Copyright (c) 1997-2005 by Cisco Systems, Inc. ** All rights reserved. ** ***********************************************************Image size = 1024.0 KBytesMaximum allowed size = 1048576 KBytesUpgrading your PROM... DO NOT RESET the systemunless instructed or upgrade of PROM will fail !!!Beginning erase of 0x100000 bytes at offset 0x3e00000... Done!Beginning write of prom (0x100000 bytes at offset 0x3e00000)...This could take as little as 30 seconds or up to 2 minutes.Please DO NOT RESET!Verifying...Success! The prom has been upgraded successfully.System will reset itself and reboot within few seconds....****(output truncated). . . . .******** The system will autoboot now ********config-register = 0x102Autobooting using BOOT variable specified file.....Current BOOT file is --- bootflash:cat4500-ipbase-mz.122-25.EWARommon reg: 0x00004180###########(output truncated)Exiting to ios...Rommon reg: 0x00000180###############################Restricted Rights LegendUse, duplication, or disclosure by the Government issubject to restrictions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52.227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252.227-7013.cisco Systems, Inc.170 West Tasman DriveSan Jose, California 95134-1706Cisco IOS Software, Catalyst 4900 L3 Switch Software (cat4500-IPBASE-M), Version 12.2(25)EWA, RELEASE SOFTWARE (fc1)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 17-Aug-05 17:09 by alnguyenImage text-base: 0x10000000, data-base: 0x11269914cisco WS-C4948-10GE (MPC8540) processor (revision 3) with 262144K bytes of memory.Processor board ID 0MPC8540 CPU at 667Mhz, Fixed ModuleLast reset from Reload1 Virtual Ethernet interface48 Gigabit Ethernet interfaces2 Ten Gigabit Ethernet interfaces511K bytes of non-volatile configuration memory.Uncompressed configuration from 1171 bytes to 2726 bytesPress RETURN to get started!Switch> enableSwitch#Step 8
Switch# configure terminalSwitch(config)# no boot system flash bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4Switch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3641 to 1244 bytes [OK]Switch#Step 9
Switch# show versionCisco IOS Software, Catalyst 4900 L3 Switch Software (cat4500-IPBASE-M), Version 12.2(25)EWA, RELEASE SOFTWARE (fc1)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 17-Aug-05 17:09 by alnguyenImage text-base: 0x10000000, data-base: 0x11269914ROM: 12.2(31r)SGA4Pod Revision 0, Force Revision 31, Tie Revision 17Switch uptime is 0 minutesSystem returned to ROM by reloadSystem image file is "bootflash:cat4500-ipbase-mz.122-25.EWA"cisco WS-C4948-10GE (MPC8540) processor (revision 3) with 262144K bytes of memory.Processor board ID 0MPC8540 CPU at 667Mhz, Fixed ModuleLast reset from Reload1 Virtual Ethernet interface48 Gigabit Ethernet interfaces2 Ten Gigabit Ethernet interfaces511K bytes of non-volatile configuration memory.Configuration register is 0x102Switch#Step 10
The following example shows how to delete the cat4500-ios-promupgrade-122_31r_SGA1SGA4 image from bootflash and reclaim unused space:
Switch# delete bootflash:cat4500-ios-promupgrade-122_31r_SGA1SGA4Switch# squeeze bootflash:All deleted files will be removed, proceed (y/n) [n]? ySqueeze operation may take some time, proceed (y/n) [n]? ySwitch#Step 11
Switch# show bootvarBOOT variable = bootflash:cat4500-ipbase-mz.122-25.EWA,12;CONFIG_FILE variable does not existBOOTLDR variable does not existConfiguration register is 0x2102Switch#The ROMMON has now been upgraded.
See the "Upgrading the Cisco IOS Software" section for instructions on how to upgrade the Cisco IOS software on your switch.
Upgrading the Cisco IOS Software
Caution
Before you proceed, observe the following rules for hostname:
•
Uppercase and lowercase characters look the same to many internet software applications. It may seem appropriate to capitalize a name the same way you might do in English, but conventions dictate that computer names appear all lowercase. For more information, refer to RFC 1178, Choosing a Name for Your Computer.
•
•
•
•
To upgrade the Cisco IOS software on your Catalyst 4900 series switch, use this procedure:
Step 1
Step 2
Step 3
The following example shows how to download the Cisco IOS software image cat4500-ipbase-mz.122-25.EWA from the remote host 172.20.58.78 to bootflash:
Switch# copy tftp: bootflash:Address or name of remote host [172.20.58.78]?Source filename [cat4500-ipbase-mz.122_25.EWA]?Destination filename [cat4500-ipbase-mz.122-25.EWA]?Accessing tftp://172.20.58.78/cat4500-ipbase-mz.122-25.EWA...Loading cat4500-ipbase-mz.122-25.EWA from 172.20.58.78 (viaFastEthernet2/1):!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!|!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!![OK - 6923388/13846528 bytes]6923388 bytes copied in 72.200 secs (96158 bytes/sec)Switch#Step 4
The following example shows how to clear the BOOT variable:
Switch# configure terminalSwitch(config)# no boot system flash bootflash:cat4500-ipbase-mz.122_25.EWASwitch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3641 to 1244 bytes [OK]Switch#Step 5
The following example shows how to add the cat4500-ipbase-mz.122-25.EWA image to the BOOT variable:
Switch# configure terminalSwitch(config)# boot system flash bootflash:cat4500-ipbase-mz.122_25.EWASwitch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3641 to 1244 bytes [OK]Switch#Step 6
The following example show how to set the second least significant bit in the configuration register:
Switch# configure terminalSwitch(config)# config-register 0x2102Switch(config)# exitSwitch# writeBuilding configuration...Compressed configuration from 3723 to 1312 bytes [OK]Switch#Step 7
Caution
The following example shows the output from a successful upgrade followed by a system reset:
Switch# reloadSystem configuration has been modified. Save? [yes/no]: yesBuilding configuration...Compressed configuration from 2668 bytes to 1127 bytes[OK]Proceed with reload? [confirm]00:02:11: %SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.*********************************************************** ** Welcome to Rom Monitor for WS-C4948-10GE System. ** Copyright (c) 1999-2005 by Cisco Systems, Inc. ** All rights reserved. ** ***********************************************************Rom Monitor Program Version 12.2(25r)EWASupervisor: WS-C4948-10GE Chassis: WS-C4948Hardware Revisions - Board: 8.3 CPLD Gill: 17MAC Address : 00-0b-fc-ff-3b-ffIP Address : 10.5.43.225Netmask : 255.255.255.0Gateway : 10.5.43.1TftpServer : 10.5.5.5***** The system will autoboot in 5 seconds *****Type control-C to prevent autobooting.. . . . .******** The system will autoboot now ********config-register = 0x2102Autobooting using BOOT variable specified file.....Current BOOT file is --- bootflash:cat4500-ipbase-mz.122-25.EWARommon reg: 0x00004180###########k2diags version 5.0.1_eprod: WS-C4948-10GE part: 0 serial: 0Power-on-self-test for Module 1: WS-C4948-10GEPort/Test Status: (. = Pass, F = Fail, U = Untested)Cpu Subsystem Tests ...seeprom: . temperature_sensor: .Port Traffic: L2 Serdes Loopback ...0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: .12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: .24: . 25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: .36: . 37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: .62: . 63: .Port Traffic: L2 Asic Loopback ...0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: .12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: .24: . 25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: .36: . 37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: .62: . 63: .Port Traffic: L3 Asic Loopback ...0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: .12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: .24: . 25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: .36: . 37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: .62: . 63: .Switch Subsystem Memory ...1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: .13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: . 24: .25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: . 36: .37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: . 48: .49: . 50: . 51: .Front Panel Ports ...1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: .13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: . 21: . 22: . 23: . 24: .25: . 26: . 27: . 28: . 29: . 30: . 31: . 32: . 33: . 34: . 35: . 36: .37: . 38: . 39: . 40: . 41: . 42: . 43: . 44: . 45: . 46: . 47: . 48: .Module 1 PassedExiting to ios...Rommon reg: 0x00000180###############################Restricted Rights LegendUse, duplication, or disclosure by the Government issubject to restrictions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52.227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252.227-7013.cisco Systems, Inc.170 West Tasman DriveSan Jose, California 95134-1706Cisco IOS Software, Catalyst 4900 L3 Switch Software (cat4500-IPBASE-M), Version12.2(25)EWA, RELEASE SOFTWARE (fc1)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 17-Aug-05 17:09 by alnguyenImage text-base: 0x10000000, data-base: 0x11269914# # ## ##### # # # # # ##### # # # # # ## # # ## # # ## # # # # # # # # # # # # ## ## # ###### ##### # # # # # # # # ##### ## # # # # # ## # # ## # ## # # # # # # # # # # ####The following environment variable(s) are set. Setting theseenvironment variables may cause the system to behave unpredictably."DontShipAllowChassisSimulation""gdbEnable"Use 'clear platform environment variable unsupported' to clear these variables.cisco WS-C4948-10GE (MPC8540) processor (revision 3) with 262144K bytes of memory.Processor board ID 0MPC8540 CPU at 667Mhz, Fixed ModuleLast reset from Reload1 Virtual Ethernet interface48 Gigabit Ethernet interfaces2 Ten Gigabit Ethernet interfaces511K bytes of non-volatile configuration memory.Uncompressed configuration from 1127 bytes to 2668 bytesPress RETURN to get started!00:00:06: %C4K_IOSMODPORTMAN-4-POWERSUPPLYBAD: Power supply 2 has failed or beenturned off00:00:06: %C4K_IOSMODPORTMAN-4-POWERSUPPLYFANBAD: Fan of power supply 2 has failed00:00:15: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan00:00:15: %C4K_IOSMODPORTMAN-6-MODULEONLINE: Module 1 (WS-C4948-10GE S/N: 0 Hw:0.3) is online00:00:16: %SYS-5-CONFIG_I: Configured from memory by console00:00:16: %SYS-5-RESTART: System restarted --Cisco IOS Software, Catalyst 4900 L3 Switch Software (cat4500-IPBASE-M), Version12.2(25)EWA, RELEASE SOFTWARE (fc1)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 17-Aug-05 17:09 by alnguyenSwitch>Switch#Step 8
Limitations and Restrictions
These sections list the limitations and restrictions for the current release of Cisco IOS software on the Catalyst 4900 series switch.
•
–
–
–
–
•
–
–
–
–
•
–
–
–
•
–
–
–
–
•
–
–
–
•
•
•
•
•
•
Workaround: Display the configuration with the show standby command, then remove the CLI. Here is sample output of the show standby GigabitEthernet1/1 command:
switch(config)# interface g1/1switch(config)# no standby 0 name (0 is hsrp group number)•
Use the standby delay reload option if the router is rebooting after reloading the image.
•
Workaround: Since the problem is caused by mismatched MTUs, the solution is to change the MTU on either router to match the neighbor's MTU.
•
•
•
•
•
Workaround: Verify whether or not the Neighbor discovery cache has an entry, separate from regular troubleshooting areas of IPv6 address configurations and other configurations.
•
•
•
•
•
•
•
•
switchport private-vlan mapping trunk command above is 1000. For example, one thousand secondary VLANs could map to one primary VLAN, or one thousand secondary VLANs could map one to one to one thousand primary VLANs.•
•
•
•
00:02:57: %RADIUS-4-RADIUS_DEAD: RADIUS server 172.20.246.206:1645,1646 is not responding.If this message appears, check that there is network connectivity between the switch and the ACS. You should also check that the switch has been properly configured as an AAA client on the ACS.
•
•
Workaround: Disable idle timeouts. (CSCec30214)
•
–
–
•
•
•
•
•
–
–
•
–
–
–
–
•
•
% Hardware MTU table exhaustedIn such a scenario, the ipv6 MTU value programmed in hardware will be different from the ipv6 interface MTU value. This will happen if there is no room in the hw MTU table to store additional values.
You must free up some space in the table by unconfiguring some unused MTU values and subsequently disable/re-enable ipv6 on the interface or reapply the MTU configuration.
•
Switch(config-if)# no ip verify sourceSwitch(config-if)# no ip device tracking max"To enable IPSG with Static Hosts on a port, issue the following commands:
Switch(config)# ip device tracking ****enable IP device tracking globallySwitch(config)# ip device tracking max <n> ***set an IP device tracking maximum on intSwitch(config-if)# ip verify source tracking [port-security] ****activate IPSG on port
Caution
Note
•
•
CSCsy31324
•
•
•
•
–
–
–
–
–
–
•
The outputs of certain commands, such as show ip route and show access-lists, contain non-deterministic text. While the output is easily understood, the output text does not contain strings that are consistently output. A general purpose specification file entry is unable to parse all possible output.
Workaround (1):
While a general purpose specification file entry may not be possible, a specification file entry might be created that returns the desired text by searching for text that is guaranteed to be in the output. If a string is guaranteed to be in the output, it can be used for parsing.
For example, the output of the show ip access-lists SecWiz_Gi3_17_out_ip command is this:
Extended IP access list SecWiz_Gi3_17_out_ip10 deny ip 76.0.0.0 0.255.255.255 host 65.65.66.6720 deny ip 76.0.0.0 0.255.255.255 host 44.45.46.4730 permit ip 76.0.0.0 0.255.255.255 host 55.56.57.57The first line is easily parsed because access list is guaranteed to be in the output:
<Property name="access list" alias="Name" distance="1.0" length="-1" type="String" />The remaining lines all contain the term host. As a result, the specification file may report the desired values by specifying that string. For example, this line
<Property name="host" alias="rule" distance="s.1" length="1" type="String" />will produce the following for the first and second rules
<rule>deny</rule>and the following for the third statement
<rule>permit<rule>Workaround (2):
Request the output of the show running-config command using NETCONF and parse that output for the desired strings. This is useful when the desired lines contain nothing in common. For example, the rules in this access list do not contain a common string and the order (three permits, then a deny, then another permit), prevent the spec file entry from using permit as a search string, as in the following example:
Extended MAC access list MACCOYpermit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalkpermit any host 65de.edfe.fefe xns-idppermit any any protocol-family rarp-non-ipv4deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanningpermit any anyThe XML output of show running-config command includes the following, which can then be parsed programmatically, as desired:
<mac><access-list><extended><ACLName>MACCOY</ACLName></extended></access-list></mac><X-Interface> permit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalk</X-Interface><X-Interface> permit any host 65de.edfe.fefe xns-idp</X-Interface><X-Interface> permit any any protocol-family rarp-non-ipv4</X-Interface><X-Interface> deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanning</X-Interface><X-Interface> permit any any</X-Interface>•
•
•
This only impacts a switch that has any of the following queues are configured as SPAN source in releases prior to 12.2(31)SG and saved to startup-config. The SPAN destination would not get the same traffic after upgrading to 12.2(31)SG and later releases.
Workaround: After upgrading to 12.2(31)SG and later releases, remove the old SPAN source configuration and reconfigure with the new queue names/IDs. For example:
Switch(config)# no monitor session n source cpu queue all rxSwitch(config)# monitor session n source cpu queue <new_Queue_Name>(CSCsc94802)
•
•
Workarounds:
–
–
CSCtq33048
•
Switch(config)# memory ?chunk chunk related configurationfree free memory low water markrecord configure memory event/traceback recording optionsreserve reserve memorysanity Enable memory sanityThis configuration had been removed erroneously in a prior release.
•
Caveats
Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or resolved.
Note
http://tools.cisco.com/security/center/publicationListing
Open Caveats in Cisco IOS Release 15.0(2)SG8
This section lists the open caveats in Cisco IOS Release 15.0(2)SG8:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtx95359
Resolved Caveats in Cisco IOS Release 15.0(2)SG8
This section lists the resolved caveats in Release 15.0(2)SG8:
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Open Caveats in Cisco IOS Release 15.0(2)SG7
This section lists the open caveats in Cisco IOS Release 15.0(2)SG7:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtx95359
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG7
This section lists the resolved caveats in Release 15.0(2)SG7:
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
Open Caveats in Cisco IOS Release 15.0(2)SG6
This section lists the open caveats in Cisco IOS Release 15.0(2)SG6:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtx95359
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG6
This section lists the resolved caveats in Release 15.0(2)SG6:
•
Workaround: None. CSCtk52874
•
Workaround: Reduce MAC aging time or modify Layer 2 topology so that the root is within the square. CSCtx86107
•
%AUTHMGR-7-RESULT: Authentication result 'success' from 'dot1x' for client (Unknown MAC) on Interface Gi5/39 AuditSessionID AC156241000000670001BC9provided the following conditions apply:
–
authentication event server dead action authorize
authenticaton event server alive action reinitalize
–
The RADIUS server becomes available again, and the IAB-authorized port transitions to another state.
Workaround: None. CSCtx61557
Open Caveats in Cisco IOS Release 15.0(2)SG5
This section lists the open caveats in Cisco IOS Release 15.0(2)SG5:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtx95359
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG5
This section lists the resolved caveats in Release 15.0(2)SG5:
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
Open Caveats in Cisco IOS Release 15.0(2)SG4
This section lists the open caveats in Cisco IOS Release 15.0(2)SG4:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtx95359
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG4
This section lists the resolved caveats in Release 15.0(2)SG4:
•
Workaround: Do not use the broadcast keyword in the aaa accounting configuration. CSCts56125
•
SYS-2-MALLOCFAIL messages, and - on redundant systems - begins logging EM-4-SENDFAILED messages,The occurs under the following conditions:
–
–
–
–
–
Workarounds:
–
–
•
Workaround: None. CSCtx25697
•
Workaround: None. CSCtj48387
Open Caveats in Cisco IOS Release 15.0(2)SG3
This section lists the open caveats in Cisco IOS Release 15.0(2)SG3:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: Do not use the broadcast keyword in the aaa accounting configuration. CSCts56125
•
SYS-2-MALLOCFAIL messages, and - on redundant systems - begins logging EM-4-SENDFAILED messages,The occurs under the following conditions:
–
–
–
–
–
Workarounds:
–
–
•
Workaround: None. CSCtx25697
•
Workaround: None. CSCtj48387
•
Workaround: None. CSCtx95359
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG3
These are the new resolved caveats in Cisco IOS Release 15.0(2)SG3 for Catalyst 4900 Series Switch:
•
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available. This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp
Note
Individual publication links are in ''Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication'' at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar12.htmlCSCtr28857
•
Products that are not running Cisco IOS Software are not vulnerable.
Cisco has released free software updates that address these vulnerabilities.
The HTTP server may be disabled as a workaround for the vulnerability described in this advisory.
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai
CSCtr91106
Open Caveats in Cisco IOS Release 15.0(2)SG2
This section lists the open caveats in Cisco IOS Release 15.0(2)SG2:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. (CSCsr00333)
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the show authentication sessions command. CSCsx42157
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: Do not use the broadcast keyword in the aaa accounting configuration. CSCts56125
•
SYS-2-MALLOCFAIL messages, and - on redundant systems - begins logging EM-4-SENDFAILED messages,The occurs under the following conditions:
–
–
–
–
–
Workarounds:
–
–
•
Workaround: None. CSCtx25697
•
Workaround: None. CSCtj48387
•
Workaround: None. CSCtx95359
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG2
This section lists the resolved caveats in Release 15.0(2)SG2:
•
The primary flex link interface comes up correctly.
Workaround: Configure static MAC address for the MAC address that must be learned dynamically on the backup flex link interface. CSCtr40070
•
Workaround: None. CSCtr52740
•
Workaround: None. CSCto72927
•
Workaround:
1. Delete, then add the affected VLAN with no vlan vlan_ID, then lan vlan_ID.
2. Flap the impacted port-channel with shutdown then no shutdown. CSCtr17251
•
Workarounds:
–
–
•
Last reload status: 00000C00 020D0000Workaround: Attach the console to collect additional crash data. CSCtu05426
•
Workaround: Re-enter the rep preempt segment command. CSCtr89862
•
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available. This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp
Note
Individual publication links are in ''Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication'' at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar12.htmlCSCtr28857
•
Products that are not running Cisco IOS Software are not vulnerable.
Cisco has released free software updates that address these vulnerabilities.
The HTTP server may be disabled as a workaround for the vulnerability described in this advisory.
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai
CSCtr91106
Open Caveats in Cisco IOS Release 15.0(2)SG1
This section lists the open caveats in Cisco IOS Release 15.0(2)SG1:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. (CSCse34693).
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. CSCsr00333
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the
show authentication sessions command. CSCsx42157•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
The primary flex link interface comes up correctly.
Workaround: Configure static MAC address for the MAC address that must be learned dynamically on the backup flex link interface. (CSCtr40070)
•
Workaround: None. (CSCtr52740)
•
Workaround: None. CSCto72927
•
Workaround:
1. Delete, then add the affected VLAN with no vlan vlan_ID, then lan vlan_ID.
2. Flap the impacted port-channel with shutdown then no shutdown. CSCtr17251
•
Workarounds:
–
–
•
Last reload status: 00000C00 020D0000Workaround: Attach the console to collect additional crash data. CSCtu05426
•
Workaround: Re-enter the rep preempt segment command. CSCtr89862
•
Workaround: Do not use the broadcast keyword in the aaa accounting configuration. CSCts56125
•
SYS-2-MALLOCFAIL messages, and - on redundant systems - begins logging EM-4-SENDFAILED messages,The occurs under the following conditions:
–
–
–
–
–
Workarounds:
–
–
•
Workaround: None. CSCtx25697
•
Workaround: None. CSCtj48387
•
Workaround: None. CSCtx95359
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG1
This section lists the resolved caveats in Release 15.0(2)SG1:
•
Workaround: None. CSCsy72343
•
Workaround: Configure an ACL on the port. CSCte18760
•
Workaround: Configure a port ACL on the interface. CSCtl89389
•
Workaround: Do not configure open directive on the switch. CSCto48824
•
Workaround: Disable gratuitous ARP on the Windows device. CSCtn27420
•
sh run | b ipv6 access-listipv6 access-list ipv6aclpermit icmp any FF01::/16permit icmp any FF02::/16sequence 40 permit icmp any FE80::/10sequence 40 (appears in front of entry)In this output, sequence 40 is the unexpected command that appears in front of the entry.
Workaround: Delete the access list and reconfigure all entries, rather than deleting or reconfiguring the access list. CSCtn83348
•
Workaround: Enter the interface range command to configure all member ports to use a new port channel that is created automatically. CSCtn52362
•
Workaround: Enter shut, and then no shut on the member port. CSCtn52404
•
Workaround: None. Use a different IGMP group address. CSCtq15982
•
Command rejected: Bad VLAN list - character #"X" (EOL) delimits a VLAN number ("Y") end of range not larger than the start of range ("Z").Workaround: None CSCtr49819
•
Workaround: Remove the logging filter. CSCto76709
•
Workaround: None CSCto34321
•
Workaround: Cut and paste the configuration. Then apply rapidly to PVLAN isolated trunk port. CSCtq04058
•
Workaround: None. CSCtn77500
•
Workaround: None. CSCtg60011
•
Workaround: None. CSCtn63638
•
Workaround: None. CSCto79232
•
Workaround: Modify filter ID or fallback ACLs only when they are not in use. CSCto79274
Open Caveats in Cisco IOS Release 15.0(2)SG
This section lists the open caveats in Cisco IOS Release 15.0(2)SG:
•
–
–
On a switch that support redundancy, the generation of the self-signed certificate is performed independently on the active and the standby supervisor engines. So, the certificates differ. After switchover, the HTTP client that holds the old certificate can not connect to the HTTPS server.
Workaround: Re-connect. CSCsb11964
•
qos account layer2 encapsulation.Workaround: None. CSCsg58526
•
This does not impact performance.
Workaround: Issue the no shutdown command. CSCsg27395
•
Workaround: Remove the transceiver from the new port and place it in the old port. Once the SFP is recognized in the old port, remove it slowly and insert it in the new port. CSCse34693
•
Workaround: None. CSCso93282
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%PM-4-PORT_INCONSISTENT: STANDBY:Port is inconsistent:Workaround: When the port channel starts to flap, enter shut and no shut on the port channel. After the first switchover and after deleting the portchannel, create a new channel. CSCsr00333
•
Mar 6 03:28:29.140 EST: %COMMON_FIB-3-FIBHWIDBINCONS: An internalsoftware error occurred. Null0 linked to wrong hwidb Null0Workaround: None. CSCso68331
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
Workaround: None. CSCsy72343
•
show policy-map interface command are wrong.Workaround: None.
The queue transmit counters as well as the policing statistics (if any) are correct. CSCsz20149
•
This only happens when the switch is running network mobility service protocol (nmsp). It does not happen if the phone is CDP enabled.
Workaround: Use VLAN ID or name to differentiate the IP phone and the PC sitting behind the phone on the WCS. Specifically, the IP phone is detected on the voice VLAN, and the displayed information of serial number, model number, and software version is correct. However, a PC sitting behind the phone is detected on a data VLAN, and the displayed device information is wrong and should be ignored. CSCsz34522
•
|auto qos voice trust command auto generates qos trust cos configuration, in addition to other parameters. However, when the port is converted from Layer 2 to Layer 3 with the no switchport command, the qos trust dscp command should be generated.Workaround: When interface mode is changed from Layer2 to Layer3, manually change interface trust state by enter the cos trust dscp command. CSCta16492
•
Workaround: None.
Despite the different default value, you can configure any value in the time range. CSCte51948
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the
show authentication sessions command. CSCsx42157•
Workaround: Configure an ACL on the port. CSCte18760
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Configure a port ACL on the interface. CSCtl89389
•
Workaround: Enter shut, and then no shut on the ports. CSCtn88228
•
Workaround: Disable gratuitous ARP on the Windows device. CSCtn27420
•
sh run | b ipv6 access-listipv6 access-list ipv6aclpermit icmp any FF01::/16permit icmp any FF02::/16sequence 40 permit icmp any FE80::/10sequence 40 (appears in front of entry)In this output, sequence 40 is the unexpected command that appears in front of the entry.
Workaround: Delete the access list and reconfigure all entries, rather than deleting or reconfiguring the access list. CSCtn83348
•
Workaround: After the switch reloads, enter shut, and then no shut on the port channel interface.
CSCto27085
•
Workaround: Do not configure open directive on the switch.
CSCto48824
•
Workaround: Shut down the CE-facing interface. After all of the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Enter the interface range command to configure all member ports to use a new port channel that is created automatically. CSCtn52362
•
Workaround: Enter shut, and then no shut on the member port. CSCtn52404
•
Workaround: Enable a Layer 3 interface in the running configuration. CSCsc88636.
•
Workaround: None. CSCto59368
•
Workaround: None. CSCtn63638
•
Workaround: None. CSCto79232
•
Workaround: Modify filter ID or fallback ACLs only when they are not in use. CSCto79274
•
The primary flex link interface comes up correctly.
Workaround: Configure static MAC address for the MAC address that must be learned dynamically on the backup flex link interface. CSCtr40070
•
Workaround: None. CSCto72927
•
Workaround:
1. Delete, then add the affected VLAN with no vlan vlan_ID, then lan vlan_ID.
2. Flap the impacted port-channel with shutdown then no shutdown. CSCtr17251
•
Workaround: None. CSCtr52740
•
Workarounds:
–
–
•
Last reload status: 00000C00 020D0000Workaround: Attach the console to collect additional crash data. CSCtu05426
•
Workaround: Re-enter the rep preempt segment command. CSCtr89862
•
Workaround: Do not use the broadcast keyword in the aaa accounting configuration. CSCts56125
•
SYS-2-MALLOCFAIL messages, and - on redundant systems - begins logging EM-4-SENDFAILED messages,The occurs under the following conditions:
–
–
–
–
–
Workarounds:
–
–
•
Workaround: None. CSCtx25697
•
Workaround: None. CSCtj48387
•
Workaround: None. CSCtx95359
•
Workaround: Unconfigure the following from the switch: aaa accounting send stop-record authentication failure. CSCtj69212
•
Workaround: Retain the default setting (VLAN 1) for the native VLAN on trunks ports. CSCud05521
•
Workaround: Enter shut, and then no shut on the port to synchronize the STP state. CSCtf52437
•
Workaround: Retain the trunk native V LAN as 1. CSCud05521
•
Workaround: Shorten the dACL name. CSCug78653
•
Workaround: Return a dACL in the authorization profile with successful guest authentication.
CSCue62019
•
–
–
If memory leak occurs repeatedly, IPDT and other control packet processing ultimately ceases.
Workaround: If this behavior completely fills the CPU buffer, the switch must be reloaded. However, the frequency of encountering a stuck queue can be reduced to nearly zero by modifying the URL redirect ACL to permit only 80/443 traffic. CSCug56646
•
Workaround: Configure RADIUS test and dead criteria.
Example:
radius-server dead-criteria time 10 tries 2radius-server host <ip> test username test key <key>radius-server deadtime 10CSCtn92693
•
Workaround: Reconfigure ACLs on all affected interfaces or reload the switch.
CSCuf93866
Resolved Caveats in Cisco IOS Release 15.0(2)SG
This section lists the resolved caveats in Release 15.0(2)SG:
•
Workaround: Reconfigure VLAN load balancing with a different configuration, by performing the following task:
a.
b.
c.
d.
•
Workaround: When a log message appears indicating that the SFP+ has been removed, do one of the following:
–
–
–
•
Workaround: Enter shut, and then no shut on the SVI. CSCtg72559
•
Workaround: None. CSCtj56811
•
Workaround: Disable the ip cef accounting non-recursive command. (CSCtn68186)
•
Workaround: Enter shut, and then no shut on the alternate port. CSCtn26322
•
Workaround: None. CSCtn61307
•
Workaround: None. CSCtl89361
•
Workarounds:
–
–
•
Workaround: Enter shut, and then no shut on the alternate interface. CSCtn03533
•
Workaround: None. CSCtk30811
•
Workaround: None. CSCtj90471
•
Workaround: Use the default native VLAN (VLAN of 1) for the trunks. CSCtn29321
Troubleshooting
These sections provide troubleshooting guidelines for the Catalyst 4900 family running IOS supervisor engines:
•
Netbooting from the ROMMON
Netbooting using a boot loader image is not supported. Instead, use one of the following options to boot an image:
1.
rommon 1> boot slot0:<bootable_image>2.
The ROMMON TFTP boot is very similar to the BOOTLDR TFTP boot, except that:
–
–
To boot from ROMMON, perform the following tasks while in ROMMON mode:
a.
b.
c.
For example, to set the supervisor engine Ethernet port with an IP address 172.16.1.5 and IP mask 255.255.255.0, enter the following command:
rommon 2> set interface fa1 172.16.1.5 255.255.255.0d.
e.
f.
For example, to boot the image name cat4500-is-mz located on the TFTP server 172.16.1.8, enter the following command:
rommon 3> boot tftp://172.16.1.8/tftpboot/cat4500-is-mzTroubleshooting at the System Level
This section contains troubleshooting guidelines for system-level problems:
•
•
Troubleshooting Modules
This section contains troubleshooting guidelines for the Catalyst 4900 series switch:
•
Troubleshooting MIBs
For general information on MIBs, RMON groups, and traps, refer to the Cisco public MIB directory (http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml). For information on the specific MIBs supported by the Catalyst 4900 series switches, refer to the Catalyst 4000 MIB Support List located at ftp://ftp.cisco.com/pub/mibs/supportlists/cat4000/cat4000-supportlist.html.
Related Documentation
Although their Release Notes are unique, the 4 platforms (Catalyst 4500, Catalyst 4900, Catalyst ME 4900, and Catalyst 4900M) use the same Software Configuration Guide, Command Reference Guide, and System Message Guide. Refer to the following home pages for additional information:
•
http://www.cisco.com/go/cat4500/docs
•
http://www.cisco.com/go/cat4900/docs
•
http://www.cisco.com/en/US/products/ps7009/tsd_products_support_series_home.html
Hardware Documents
Installation guides and notes including specifications and relevant safety information are available at the following URLs:
•
•
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_installation_guides_list.html
•
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_installation_guides_list.html
•
http://www.cisco.com/en/US/products/ps6021/prod_installation_guides_list.html
•
http://www.cisco.com/en/US/products/ps7009/prod_installation_guides_list.html
Software Documentation
Software release notes, configuration guides, command references, and system message guides are available at the following URLs:
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_release_notes_list.html
•
http://www.cisco.com/en/US/products/ps6021/prod_release_notes_list.html
•
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/release/note/OL_11511.html
Software documents for the Catalyst 4500 Classic, Catalyst 4500 E-Series, Catalyst 4900, and
Cisco ME 4900 Series Ethernet Switches are available at the following URLs:•
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_command_reference_list.html
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/products_system_message_guides_list.html
Cisco IOS Documentation
Platform-independent Cisco IOS documentation may also apply to the Catalyst 4500 and 4900 switches. These documents are available at the following URLs:
•
http://www.cisco.com/en/US/products/ps6350/products_installation_and_configuration_guides_list.html
•
http://www.cisco.com/en/US/products/ps6350/prod_command_reference_list.html
You can also use the Command Lookup Tool at:
http://tools.cisco.com/Support/CLILookup/cltSearchAction.do
•
http://www.cisco.com/en/US/products/ps6350/products_system_message_guides_list.html
You can also use the Error Message Decoder tool at:
http://www.cisco.com/pcgi-bin/Support/Errordecoder/index.cgi
•
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
Notices
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html.
Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R)
Release Notes for the Catalyst 4900 Series Switch, Cisco IOS Release 15.0(2)SG
Copyright © 1999-2012, Cisco Systems, Inc. All rights reserved.
