 Feedback
|
Table Of Contents
Supported Hardware on Catalyst 4948E, Catalyst 4948E-F,
and Catalyst 4900M Series SwitchesFeatures Not Supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches
New Hardware Features in Release 15.2(1)E
New Software Features in Release 15.2(1)E
New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E
Minimum and Recommended ROMMON Release
Open Caveats in Cisco IOS Release 15.2(1)E1
Resolved Caveats in Cisco IOS Release 15.2(1)E1
Open Caveats in Cisco IOS Release 15.2(1)E
Resolved Caveats in Cisco IOS Release 15.2(1)E
Obtaining Documentation and Submitting a Service Request
Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(1)E
Current release
IOS 15.2(1)E1—November 25, 2013Prior release
IOS 15.2(1)E—August 26, 2013These release notes describe the features, modifications, and caveats for Cisco IOS Release 15.2(1)E on the Catalyst 4900M switch, the Catalyst 4948E Ethernet Switch, and the Catalyst 4948E-F Ethernet Switch.
Cisco IOS Software Release XE 3.5.0E is part of the new software releases on Cisco Catalyst 2960S, 2960C, 3560C, 3750-X, 3560-X, 4500E and 4500-X, 4900M, and 4948E/E-F Series Switches. These releases deliver new software and hardware innovations in campus access and aggregation deployments that span across many technologies, including enhanced support for IPv6, security, high availability, and IP multicast.
Cisco Catalyst 4900M Series is a premium extension to the widely deployed Catalyst 4948 Series top of rack Ethernet switches for data center server racks. Optimized for ultimate deployment flexibility, the Catalyst 4900M Series can be deployed for 10/100/1000 server access with 1:1 uplink to downlink oversubscription, mix of 10/100/1000 and 10 Gigabit Ethernet servers or all 10 Gigabit Ethernet servers in the same rack. The Catalyst 4900M is a 320Gbps, 250Mpps, 2RU fixed configuration switch with
8 fixed wire speed X2 ports on the base unit and 2 optional half card slots for deployment flexibility and investment protection. Low latency, scalable buffer memory and high availability with 1+1 hot swappable AC or DC power supplies and field replaceable fans optimize the Catalyst 4900M for any size of data center.With Cisco IOS Release 12.2(54)XO, Cisco introduced the Catalyst 4948E Ethernet Switch, which is the first Cisco Catalyst E-Series data center switch built from the start to deliver class-leading, full-featured server-access switching. The switch offers forty-eight 10/100/1000-Gbps RJ45 downlink ports and four 1/10 Gigabit Ethernet uplink ports and is designed to simplify data center architecture and operations by offering service provider-grade hardware and software in a one rack unit (1RU) form factor optimized for full-featured top-of-rack (ToR) data center deployments.
The Cisco Catalyst 4948E Ethernet Switch builds on the advanced technology of the Cisco Catalyst 4948 Switches, the most deployed ToR switch in the industry, with more than 10 million ports deployed worldwide. The Cisco Catalyst E-Series doubles the uplink bandwidth and offers true front-to-back airflow with no side or top venting. Stringent airflow management reduces data center operating costs by providing strict hot-aisle and cold-aisle isolation. Exceptional reliability and serviceability are delivered with optional internal AC and DC 1+1 hot-swappable power supplies and a hot-swappable fan tray with redundant fans.
With Cisco IOS Software Release 12.2(54)WO, Cisco extended the widely deployed Cisco Catalyst® 4948E Ethernet Switch to offer back-to-front airflow with the Cisco Catalyst 4948E-F Switch.
For more information on the Catalyst 4900M, Catalyst 4948E and Catalyst4948E-F Ethernet Switches, visit:
http://www.cisco.com/en/US/products/ps9310/index.html.
Note
Although their Release Notes are unique, the platforms Catalyst 4900M/Catalyst 4948E/Catalyst 4948E-F and Catalyst 4500 leverage the same Software Configuration Guide, Command Reference Guide, and System Message Guide.
Contents
This publication consists of these sections:
•
•
Cisco IOS Software Packaging
The Enterprise Services image supports Cisco Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M Ethernet Switch Series software features based on Cisco IOS Software 15.1(2)SG, including enhanced routing. BGP capability is included in the Enterprises Services package.
The IP Base image supports Open Shortest Path First (OSPF) for Routed Access, Enhanced Interior Gateway Routing Protocol (EIGRP) "limited" Stub Routing, Nonstop Forwarding/Stateful Switchover (NSF/SSO), and RIPv1/v2. The IP Base image does not support enhanced routing features such as BGP, Intermediate System-to-Intermediate System (IS-IS), Full OSPF, Full Enhanced Interior Gateway Routing Protocol (EIGRP) & Virtual Routing Forwarding (VRF-lite).
The LAN Base image complements the existing IP Base and Enterprise Services images. It is focused on customer access and Layer 2 requirements and therefore many of the IP Base features are not required. The IP upgrade image is available if at a later date you require some of those features. The Cisco Catalyst 4900M Switch Series only supports the IP Base and Enterprise Services images.
Starting with Cisco IOS Release 15.0(2)SG, on Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F, support for NEAT feature has been extended from IP Base to LAN Base and support for HSRP v2 IPV6 has been extended from Enterprise Services to IP Base.
Starting with Cisco IOS Release 15.2(1)E, support for policy-based routing (PBR) have been extended from Enterprise Services to IP Base, also OSPF Routed Access in IP Base now supports up to 1000 routes.
Note
Cisco IOS Release Strategy
Customers with Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M series switches who need the latest hardware support and software features should migrate to Cisco IOS Release 15.2(1)E.
The Catalyst 4900M Series Switch has three maintenance trains: 12.2(53)SGx, 15.0(2)SGx and 15.1(2)SGx. The Catalyst 4948E/E-F switches have two maintenance trains: 15.0(2)SGx and 15.1(2)SGx.
Cisco IOS Release 15.0(2)SGx is the recommended release for customers who require a release with a maintenance train
Figure 1 displays the three active trains, 12.2(53)SG, 15.0(2)SG and 15.1(2)SG.
Note
Figure 1 Software Release Strategy for the Catalyst 4900M, Catalyst 4948E, Catalyst 4948E-F Series Switches
Support
Support for Cisco IOS Software Release 15.2(1)E follows the standard Cisco Systems® support policy, available at
http://www.cisco.com/en/US/products/products_end-of-life_policy.htmlSystem Requirements
This section describes the system requirements on the Catalyst 4948E, Catalyst 4948E-F, and Catalyst 4900M Series Switches:
•
•
•
Supported Hardware on Catalyst 4948E, Catalyst 4948E-F,
and Catalyst 4900M Series SwitchesThe following table lists the hardware supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches.
For details on transceiver module compatibility, see the URL:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
The following table lists the hardware supported on the Catalyst 4948E Ethernet Switch.
The following table lists the hardware supported on the Catalyst 4948E-F Ethernet Switch.
Feature Support by Image Type
Note
Table 4 lists the Cisco IOS software features for the Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M series switches. For the full list of supported features, check the Feature Navigator application:
http://tools.cisco.com/ITDIT/CFN/
Table 4 LAN Base, IP Base, and Enterprise Services Image Support on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Switches (The Cisco Catalyst 4900M Switch Series does not support the LAN Base license)
2-way Community Private VLANs
No
Yes
Yes
8-Way CEF Load Balancing
No
Yes
Yes
10G Uplink Use
Yes
Yes
Yes
AAA Server Group
Yes
Yes
Yes
ACL Logging
Yes
Yes
Yes
ANCP Client
No
Yes
Yes
ANSI TIA-1057 LLDP - MED Location Extension
Yes
Yes
Yes
ANSI TIA-1057 LLDP - MED Support
Yes
Yes
Yes
AppleTalk 1 and 2 (not supported on Sup 6-E and 6L-E)
No
No
Yes
Auto SmartPorts
Yes
Yes
Yes
AutoQoS
Yes
Yes
Yes
Auto-MDIX
Yes
Yes
Yes
Auto-Voice VLAN (part of Auto QoS)
No
Yes
Yes
Bidirectional Forwarding Detection (BFD) Hardware Offload Support
No
Yes
Yes
BFD - EIGRP Support
No
Yes
Yes
BFD - Static Route Support over IPv4
No
Yes
Yes
BFD IPv6 Encapsulation Support
No
Yes
Yes
BGP Support for BFD
No
No
Yes
BGP
No
No
Yes
BGP 4
No
No
Yes
BGP 4 4Byte ASN (CnH)
No
No
Yes
BGP 4 Multipath Support
No
No
Yes
BGP 4 Prefix Filter and In-bound Route Maps
No
No
Yes
BGP Conditional Route Injection
No
No
Yes
BGP Link Bandwidth
No
No
Yes
BGP Neighbor Policy
No
No
Yes
BGP Prefix-Based Outbound Route Filtering
No
No
Yes
BGP Route-Map Continue
No
No
Yes
BGP Route-Map Continue Support for Outbound Policy
No
No
Yes
BGP Route-Map Policy List Support
No
No
Yes
BGP Soft Reset
No
No
Yes
BGP Wildcard
No
No
Yes
Bidirectional PIM (IPv4 only)
No
Yes
Yes
BOOTP
Yes
Yes
Yes
Bootup GOLD
No
Yes
Yes
Broadcast/Multicast Suppression
Yes
Yes
Yes
Call Home
No
Yes
Yes
CDP/CDPv2
Yes
Yes
Yes
CFM
Yes
Yes
Yes
CGMP - Cisco Group Management Protocol
Yes
Yes
Yes
Cisco IOS Scripting w/Tcl
Yes
Yes
Yes
CiscoView Autonomous Device Manager (ADP)
Yes
Yes
Yes
CNS
Yes
Yes
Yes
Command Scheduler (Kron)
Yes
Yes
Yes
Community PVLAN support
No
Yes
Yes
Config File
Yes
Yes
Yes
Configuration Replace and Configuration Rollback
Yes
Yes
Yes
Configuration Rollback Confirmed Change
Yes
Yes
Yes
Copy Command
Yes
Yes
Yes
Console Access
Yes
Yes
Yes
Control Plane Policing (CoPP)
Yes
Yes
Yes
CoS to DSCP Map
Yes
Yes
Yes
CPU Optimization for Layer 3 Multicast Control Packets
Yes
Yes
Yes
Crashdump Enhancement1
Yes
Yes
Yes
DAI (Dynamic ARP Inspection)
Yes
Yes
Yes
DBL (Dynamic Buffer Limiting) - Active Queue Management
Yes
Yes
Yes
Debug Commands
Yes
Yes
Yes
Device Management
Yes
Yes
Yes
DHCPv6 Relay Agent notification for Prefix Delegation
No
Yes
Yes
DHCP Client
Yes
Yes
Yes
DHCP Server
Yes
Yes
Yes
DHCP Snooping
Yes
Yes
Yes
DHCPv6 Ethernet Remote ID option
No
Yes
Yes
Diagnostics Tools
Yes
Yes
Yes
Digital Optical Monitoring (DOM)
Yes
Yes
Yes
DSCP to CoS Map
Yes
Yes
Yes
DSCP to egress queue mapping
Yes
Yes
Yes
DSCP/CoS via LLDP
Yes
Yes
Yes
Duplication Location Reporting Issue
No
Yes
Yes
Easy Virtual Network (EVN)
No
No
Yes
EIGRP
No
No
Yes
EIGRP Service Advertisement Framework
Yes
Yes
Yes
EIGRP Stub Routing
No
Yes
Yes
Embedded Event Manager (EEM) 3.2
No
Yes
Yes
Embedded Event Manager and EOT integration
No
Yes
Yes
Energywise Agentless SNMP support
Yes
Yes
Yes
Energywise Wake-On-Lan Support
Yes
Yes
Yes
EPoE
Yes
Yes
Yes
EtherChannel
Yes
Yes
Yes
Ethernet Management Port (Fa1 interface)2
Yes
Yes
Yes
Ethernet Operations, Administration, and Maintenance (OAM)
Yes
Yes
Yes
Event Log
Yes
Yes
Yes
FHRP - Enhanced Object Tracking of IP SLAs
Yes
No
Yes
FHRP - GLBP - IP Redundancy API
No
Yes
Yes
FHRP - HSRP - Hot Standby Router Protocol V2
No
Yes
Yes
FHRP - Object Tracking List
No
Yes
Yes
FIPS 140-2/3 Level 2 Certification
Yes
Yes
Yes
File Management
Yes
Yes
Yes
Flex Links+ (VLAN Load balancing)
Yes
Yes
Yes
Gateway Load Balancing Protocol (GLBP)
No
Yes
Yes
GOLD Online Diagnostics
Yes
Yes
Yes
HSRP - Hot Standby Router Protocol
No
Yes
Yes
HSRPv2 for IPv6 Global Address Support
No
Yes
Yes
HTTP TACAC+ Accounting support
Yes
Yes
Yes
Identity 4.1 ACL Policy Enhancements
Yes
Yes
Yes
Identity 4.2: MAB with Configurable User Name/Password
Yes
Yes
Yes
Identity 4.1 Network Edge Access Topology
Yes
Yes
Yes
ID 4.0 Voice VLAN assignment
Yes
Yes
Yes
ID 4.1 Filter ID and per use ACL
Yes
Yes
Yes
IEEE 802.1ab LLDP (Link Layer Discovery Protocol)
Yes
Yes
Yes
IEEE 802.1ab LLDP/LLDP-MED
Yes
Yes
Yes
IEEE 802.1ab LLDP enhancements (Layer 2 COS)
Yes
Yes
Yes
IEEE 802.1ag D8.1 standard Compliant CFM, Y.1731 multicast LBM / AIS / RDI / LCK, IP SLA for Ethernet
Yes
Yes
Yes
IEEE 802.1p Support
Yes
Yes
Yes
IEEE 802.1p Prioritization
Yes
Yes
Yes
IEEE 802.1p/802.1q
Yes
Yes
Yes
IEEE 802.1Q Tunneling
Yes
Yes
Yes
IEEE 802.1Q VLAN Trunking
Yes
Yes
Yes
IEEE 802.1s Multiple Spanning Tree (MST) Standard Compliance
Yes
Yes
Yes
IEEE 802.1w Spanning Tree Rapid Reconfiguration
Yes
Yes
Yes
IEEE 802.1x (Auth-Fail VLAN, Accounting)
Yes
Yes
Yes
IEEE 802.1x Critical Authorization for Voice and Data
Yes
Yes
Yes
IEEE 802.1x Flexible Authentication
Yes
Yes
Yes
IEEE 802.1x with Multiple authenticated, multi-host
Yes
Yes
Yes
IEEE 802.1x Open Authentication
Yes
Yes
Yes
IEEE 802.1x with User Distribution
Yes
Yes
Yes
IEEE 802.1x User Port Description
Yes
Yes
Yes
IEEE 802.1x VLAN Assignment)
Yes
Yes
Yes
IEEE 802.1x VLAN User Group Distribution
Yes
Yes
Yes
IEEE 802.1x Wake on LAN
Yes
Yes
Yes
IEEE 802.1x Agentless Audit Support
Yes
Yes
Yes
IEEE 802.1x Authenticator
Yes
Yes
Yes
IEEE 802.1x Fallback support
Yes
Yes
Yes
IEEE 802.1x Guest VLAN
Yes
Yes
Yes
IEEE 802.1x MIB Support
Yes
Yes
Yes
IEEE 802.1x Multi-Domain Auth with Voice VLAN Assignment
Yes
Yes
Yes
IEEE 802.1x Multi-Domain Authentication
Yes
Yes
Yes
IEEE 802.1x Private Guest VLAN
Yes
Yes
Yes
IEEE 802.1x Private VLAN Assignment
Yes
Yes
Yes
IEEE 802.1x RADIUS Accounting
Yes
Yes
Yes
IEEE 802.1x Radius-Supplied Session Timeout
Yes
Yes
Yes
IEEE 802.1x and MAB with ACL assignment
Yes
Yes
Yes
IEEE 802.3ad Link Aggregation (LACP)
Yes
Yes
Yes
IEEE 802.3ad Link Aggregation (LACP) Port-Channel Standalone Disable
Yes
Yes
Yes
IEEE 802.3ah and CFM Interworking
No
Yes
Yes
IEEE 802.3x Flow Control
Yes
Yes
Yes
IEEE 802.1x Web-Auth
Yes
Yes
Yes
IGMP Filtering
Yes
Yes
Yes
IGMP Querier
Yes
Yes
Yes
IGMP Snooping
Yes
Yes
Yes
IGMP Version 1
Yes
Yes
Yes
IGMP Version 2
Yes
Yes
Yes
IGMP Version 3
Yes
Yes
Yes
IGMPv3 Host Stack
Yes
Yes
Yes
Ingress Policing
Yes
Yes
Yes
Interface Access (Telnet, Console/Serial, Web)
Yes
Yes
Yes
IOS Based Device Profiling
No
Yes
Yes
IP Enhanced IGRP Route Authentication
No
No
Yes
IP Event Dampening
Yes
Yes
Yes
IP Multicast Load Splitting across Equal-Cost Paths
No
Yes
Yes
IP Named Access Control List
Yes
Yes
Yes
IPv6 Tunnels (in software)
Yes
Yes
Yes
IP Routing
Yes
Yes
Yes
IP SLAs DHCP Operation
No
Yes
Yes
IP SLAs Distribution of Statistics
No
Yes
Yes
IP SLAs DNS Operation
No
Yes
Yes
IP SLAs FTP Operation
No
Yes
Yes
IP SLAs History Statistics
No
Yes
Yes
IP SLAs HTTP Operation
No
Yes
Yes
IP SLAs ICMP Echo Operation
No
Yes
Yes
IP SLAs ICMP Path Echo Operation
No
Yes
Yes
IP SLAs Multi Operation Scheduler
No
Yes
Yes
IP SLAs One Way Measurement
No
Yes
Yes
IP SLAs Path Jitter Operation
No
Yes
Yes
IP SLAs Random Scheduler
No
Yes
Yes
IP SLAs Reaction Threshold
No
Yes
Yes
IP SLAs Responder
Yes
Yes
Yes
IP SLAs Scheduler
No
Yes
Yes
IP SLAs SNMP Support
No
Yes
Yes
IP SLAs Sub-millisecond Accuracy Improvements
No
Yes
Yes
IP SLAs TCP Connect Operation
No
Yes
Yes
IP SLAs UDP Based VoIP Operation
No
Yes
Yes
IP SLAs UDP Echo Operation
No
Yes
Yes
IP SLAs UDP Jitter Operation
No
Yes
Yes
IP SLAs Video Operations
No
No
Yes
IP SLAs VoIP Threshold Traps
No
Yes
Yes
IP Unnumbered for VLAN-SVI interfaces
No
Yes
Yes
IPsecv3/IKEv2
Yes
Yes
Yes
IPSG (IP Source Guard) v4
Yes
Yes
Yes
IPSG (IP Source Guard) v4 for Static Hosts
Yes
Yes
Yes
IPv6 / v4 BFD with OSPF/ BGP/ EIGRP and Static
No
Yes
Yes
IPv6 Bootstrap Router (BSR) Scoped Zone Support
No
No
Yes
IPv6 First Hop Security (FHS):
DHCPv6 Guard
Lightweight DHCPv6 Relay Agent
IPv6 Destination Guard
IPv6 Snooping
IPv6 Neighbor Discovery Multicast Suppression
IPv6 Router Advertisement (RA) Guard
Yes
Yes
Yes
IPv6 First Hop Security (FHS) Phase 2:
Binding table recovery
Bulk Lease Query support from Lightweight DHCPv6 Relay Agent (LDRA)
Neighbor Discovery (ND) Multicast Suppress
Source and Prefix Guard3
Yes
Yes
Yes
IPv6 HSRP
No
Yes
Yes
IPv6 Interface Statistics
Yes
Yes
Yes
IPv6 IP SLAs (UDP Jitter, UDP Echo, ICMP Echo, TCP Connect)
No
Yes
Yes
IPv6 (Internet Protocol Version 6)
Yes
Yes
Yes
IPV6 MLD snooping V1 and V2
Yes
Yes
Yes
IPv6 Multicast
No
Yes
Yes
IPv6 Multicast: Bootstrap Router (BSR)
No
Yes
Yes
IPv6 Multicast: Multicast Listener Discovery (MLD) Protocol, Versions 1 and 2
No
Yes
Yes
IPv6 Multicast: PIM Accept Register
No
Yes
Yes
IPv6 Multicast: PIM Source-Specific Multicast (PIM-SSM)
No
Yes
Yes
IPv6 Multicast: PIM Sparse Mode (PIM-SM)
No
Yes
Yes
IPv6 Multicast: Routable Address Hello Option
No
Yes
Yes
IPv6 Neighbor Discovery
No
Yes
Yes
IPv6 OSPFv3 Fast Convergence
No
Yes4
Yes
IPv6 OSPFv3 NSF/SSO
No
Yes4
Yes
Identity 4.1 Network Edge Access Topology
Yes
Yes
Yes
IPv6 RA Guard (Host Mode)
Yes
Yes
Yes
IPv6 Reformation
NA
Yes
Yes
IPv6 Routing - EIGRP Support
No
No
Yes
IPv6 Routing: OSPF for IPv6 (OSPFv3)
No
Yes4
Yes
IPv6 Routing: RIP for IPv6 (RIPng)
No
Yes
Yes
IPv6 Switching: CEFv6 Switched Automatic IPv4-compatible Tunnels (in software)
No
Yes
Yes
IPv6 Switching: CEFv6 Switched Configured IPv6 over IPv4 Tunnels (in software)
No
Yes
Yes
IPv6 Switching: CEFv6 Switched ISATAP Tunnels (in software)
No
Yes
Yes
IPv6 Tunneling: Automatic 6to4 Tunnels (in software)
No
Yes
Yes
IPv6 Tunneling: Automatic IPv4-compatible Tunnels (in software)
No
Yes
Yes
IPv6 Tunneling: IPv6 over IPv4 GRE Tunnels (in software)
No
Yes
Yes
IPv6 Tunneling: ISATAP Tunnel Support (in software)
No
Yes
Yes
IPv6 Tunneling: Manually Configured IPv6 over IPv4 Tunnels (in software)
No
Yes
Yes
IPv6 Virtual LAN Access Control List
Yes
Yes
Yes
ISIS for IPv4 and IPv6
No
No
Yes
ISL Trunk
Yes
Yes
Yes
Jumbo Frames
Yes
Yes
Yes
Layer 2 Control Packet
Yes
Yes
Yes
Layer 2 Protocol Tunneling (L2PT)
No
Yes
Yes
Layer 2 Traceroute
Yes
Yes
Yes
Layer 3 Multicast Routing (PIM SM, SSM, Bidir)
No
Yes
Yes
Link State Tracking
Yes
Yes
Yes
Local Web Auth
Yes
Yes
Yes
MAB (MAC Authentication Bypass) for Voice VLAN
Yes
Yes
Yes
MAC Address Filtering
Yes
Yes
Yes
MAC Based Access List
Yes
Yes
Yes
MAC Move and Replace
Yes
Yes
Yes
Medianet 2.0: AutoQoS SRND4 Macro
No
Yes
Yes
Medianet 2.0: Integrated Video Traffic Simulator (hardware-assisted IP SLA); IPSLA responder only
No
Yes
Yes
Medianet 2.0: Flow Metadata
No
Yes
Yes
Medianet 2.0: Media Service Proxy
No
Yes
Yes
Medianet 2.0: Media Monitoring (Performance Monitoring and Mediatrace)
No
Yes
Yes
Medianet: MSP and Metadata
No
No
Yes
Multicast BGP (MBGP)
No
No
Yes
Multicast HA (NSF/SSO) for IPv4&IPv6
No
Yes
Yes
Multicast Routing Monitor (MRM)
No
Yes
Yes
Multicast Source Discovery Protocol (MSDP)
Yes
Yes
Yes
Multicast VLAN Registration (MVR)
Yes
Yes
Yes
Multi-authentication and VLAN Assignment
Yes
Yes
Yes
Multi-VRF Support (VRF lite)
No
No
Yes
NAC - L2 IEEE 802.1x
Yes
Yes
Yes
NAC - L2 IP
Yes
Yes
Yes
ND Cache Limit/Interface
No
Yes
Yes
NEAT Enhancement: Re-Enabling BPDU Guard Based on User Configuration
Yes
Yes
Yes
Network Edge Access Topology (NEAT)
Yes
Yes
Yes
Network Time Protocol (NTP)
Yes
Yes
Yes
NMSP Enhancements
•
•
•
•
•
No
Yes
Yes
Time Protocols (SNTP, TimeP) master
Yes
Yes
Yes
No. of QoS Filters
No. of Security ACE
Yes (4K entries)
Yes
Yes
No Service Password Recovery
Yes
Yes
Yes
No. of VLAN Support
2048
4096
4096
NSF - BGP
No
No
Yes
NSF - EIGRP
No
Yes
Yes
NSF - OSPF (version 2 only)
No
Yes
Yes
NTP for IPv6
Yes
Yes
Yes
NTP for VRF aware
No
No
Yes
On Demand Routing (ODR)
No
No
Yes
OSPF
No
Yes4
Yes
OSPF v3 Authentication
No
Yes4
Yes
OSPF Flooding Reduction
No
Yes4
Yes
OSPF for Routed Access5
No
Yes
Yes
OSPF Incremental Shortest Path First (i-SPF) Support
No
Yes4
Yes
OSPF Link State Database Overload Protection
No
Yes4
Yes
OSPF Not-So-Stubby Areas (NSSA)
No
Yes4
Yes
OSPF Packet Pacing
No
Yes4
Yes
OSPF Shortest Paths First Throttling
No
Yes4
Yes
OSPF Stub Router Advertisement
No
Yes4
Yes
OSPF Support for BFD over IPv4
No
Yes4
Yes
OSPF Support for Fast Hellos
No
Yes4
Yes
OSPF Support for Link State Advertisement (LSA) Throttling
No
Yes4
Yes
OSPF Support for Multi-VRF on CE Routers
No
Yes4
Yes
OSPF Update Packet-Pacing Configurable Timers
No
Yes4
Yes
OSPFv3 BFD
No
Yes4
Yes
Out-of-band Management Port
Yes
Yes
Yes
Out-of-band Management Port - IPv6
Yes
Yes
Yes
PAgP
Yes
Yes
Yes
Passwords
Password clear protectionYes
Yes
Yes
Per Intf IGMP State Limit
Yes
Yes
Yes
Per Intf MrouteState Limit
Yes
Yes
Yes
Per-User ACL Support for 802.1X/MAB/Webauth users
Yes
Yes
Yes
Per-VLAN Learning
Yes
Yes
Yes
PIM Sparse Mode Version4
No
No
Yes
PIM Version 1
No
Yes
Yes
PM Version 2
No
Yes
Yes
Policy-Based Routing (PBR)
No
Yes
Yes
Policy-Based Routing (PBR) Recursive Next Hop
No
Yes
Yes
Port Access Control List (PACL)
Yes
Yes
Yes
Port Monitoring (interface Stats)
Yes
Yes
Yes
Port Security
Yes (supports 1024 MACs)
Yes (supports 3072 MACs)
Yes (supports 3072 MACs)s
Post Status
Yes
Yes
Yes
Pragmatic General Multicast (PGM)
Yes
Yes
Yes
Private VLANs
Yes
Yes
Yes
Propagation of Location Info over CDP
Yes
Yes
Yes
PVLAN over EtherChannel
Yes
Yes
Yes
PVST+ (Per VLAN Spanning Tree Plus)
Yes
Yes
Yes
Q-in-Q
Yes
Yes
Yes
RACL
Yes
Yes
Yes
RADIUS/TACACS+ (AAA)
Yes
Yes
Yes
RADIUS Attribute 44 (Accounting Session ID) in Access Requests
Yes
Yes
Yes
RADIUS Change of Authorization
Yes
Yes
Yes
Rapid-Per-VLAN-Spanning Tree (Rapid-PVST)
Yes
Yes
Yes
Remote SPAN (RSPAN)
Yes
Yes
Yes
REP (Resilient Ethernet Protocol)
Yes
Yes
Yes
REP - No Edge Neighbor Enhancement
Yes
Yes
Yes
RIP v1
No
Yes
Yes
RMON
Yes
Yes
Yes
Role-Based Access Control CLI commands (RBAC)
Yes
Yes
Yes
RPVST+
Yes
Yes
Yes
RSPAN
Yes
Yes
Yes
Secure Copy (SCP)
Yes
Yes
Yes
Secure Shell SSH Version 1, 2 Server Support
Yes
Yes
Yes
Secure Shell SSH Version 1, 2 Client Support
Yes
Yes
Yes
Service Advertisement Framework (SAF)
No
No
Yes
Smart Install Director—Configuration-only Deployment and Smooth Upgrade
Yes
Yes
Yes
SmartPorts (Role based MACRO)
Yes
Yes
Yes
SNMP (Simple Network Management Protocol)
Yes
Yes
Yes
SNMPv3 (SNMP Version 3)
Yes
Yes
Yes
Source Port Filtering (Private VLAN)
Yes
Yes
Yes
Source Specific Multicast (SSM)
No
Yes
Yes
Source Specific Multicast (SSM) - IGMPv3,IGMP v3lite, and URD
Yes
Yes
Yes
Source Specific Multicast (SSM) Mapping
Yes
Yes
Yes
SPAN (# of sessions) - Port Mirroring
Yes (4 sessions)
Yes (16 bidirectional sessions)
Yes (16 bidirectional sessions)
SPAN ACL Filtering for IPv6
Yes
Yes
Yes
SSHv2/Secure Copy, FTP, SSL, Syslog, Sys Information
Yes
Yes
Yes
Static Route Support for BFD over IPv6
No
No
Yes
Static Routing (IPv4/IPv6)
Yes
Yes
Yes
Storm Control - Per-Port Multicast Suppression
Yes
Yes
Yes
Stub IP Multicast Routing
No
Yes
No
Sub-second UDLD
Yes
Yes
Yes
SVI (Switch Virtual Interface) Autostate Exclude
Yes
Yes
Yes
TACACS+
Yes
Yes
Yes
TACACS+ and Radius for IPv6-
Yes
Yes
Yes
Time-Based Access Lists
Yes
Yes
Yes
Time Domain Reflectometry (TDR)6
No
Yes
Yes
Time Protocols (SNTP, TimeP)
Yes
Yes
Yes
Traffic Mirroring (SPAN)
Yes
Yes
Yes
Trusted Boundary (LLDP & CDP Based)
Yes
Yes
Yes
TrustSec SGT/ SGA
No
Yes
Yes
Unicast Reverse Path Forwarding (uRPF)
Yes
Yes
Yes
UniDirectional Link Detection (UDLD)
Yes
Yes
Yes
Virtual Router Redundancy Protocol (VRRP) for IPv4
No
Yes
Yes
VLAN Access Control List (VACL)
Yes
Yes
Yes
VLAN Mapping (VLAN Translation)7
No
Yes
Yes
Voice VLAN
Yes
Yes
Yes
VRF-aware TACACS+
No
No
Yes
VRF-lite for IPv6 on OSPF/ BGP/ EIGRP
No
No
Yes
VTP (Virtual Trunking Protocol) Version 2
Yes
Yes
Yes
VTP version 3
Yes
Yes
Yes
WCCP Redirection on Inbound Interfaces
No
Yes
Yes
WCCP Version 2
No
Yes
Yes
XML-PI
Yes
Yes
Yes
1 Supported only on Supervisor Engine 6-E and Supervisor Engine 6L-E
2 Starting with Cisco IOS Release 12.2(46)SG
3 When either Source or Prefix Guard for IPv6 is enabled, ICMPv6 packets are unrestricted on all Catalyst 4500 series switch platforms running IOS Cisco Release 15.2(1)E. All other traffic types are restricted.
4 IP Base supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 200 dynamically learned routes.
5 OSPF for Routed Access supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 1000 dynamically learned routes.
6 TDR is supported on 4948E(F) and WS-X4908-10GB-R.
7 WS-C4948E-10GE does not support VLAN mapping.
MIB Support
For information on MIB support, please refer to this URL:
ftp://ftp.cisco.com/pub/mibs/supportlists/cat4000/cat4000-supportlist.html
Features Not Supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches
•
–
–
–
–
•
•
•
•
•
•
•
•
•
•
–
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Orderable Product Numbers
New and Changed Information
These sections describe the new and changed information for the Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches running Cisco IOS software:
•
•
New Hardware Features in Release 15.2(1)E
SFP+DWDM
New Software Features in Release 15.2(1)E
4 byte BGP ASN numbers
BFD v4 and v6
•
•
•
•
•
•
BGP
•
•
•
•
•
Binding Table Recovery Mechanism
Configurable TCP Keep Alive Timer
DCM 2.0
DHCP Glean
DHCPv6 Relay Chaining and Route Insertion
Disable IPX in EIGRP
DNS IPv6 Transport for DNS
EIGRP add-path
EIGRP New Release Enablement
•
•
•
EIGRP Wide Metrics (Existing)
Energywise Agentless SNMP support
Energywise Wake-On-Lan Support
Enhancement to create global IPv6 entries for unsolicited NA
Encrypt "PMK" password inside the switch (show commands etc.).
Generate SNMP trap when EIGRP neighbor down
Hop by Hop EH ACL Throttling
HSRP aware PIM
IPv6 Compliance Features (JITC, USGv6)
•
•
•
IPv6 First Hop Security Phase II
•
•
•
•
•
Note
Ipv6 nd cache expire
IPv6 Neighbor Discovery Multicast Suppress
IPv6 support for TFTP
Manually Configured Tunnel over IPv4
MIB for DiffServ
Multicast VLAN Registration (MVR)
Manually Configured Tunnel over IPv4
mDNS Bonjour Support
MIB Gaps
•
•
Need option to configure exponential backoff for NS timer used in NUD
Netconf XML PI show output
New AutoQoS Show Commands
OSPF feature enablement
•
•
•
•
•
•
•
•
•
OSPFv3 Area Filter/DC Ignore
OSPFv3 MIB, OSPF MIB
OSPFv3 Prefix Suppression
Performance Monitor Synchronization
Route Tag Enhancements
Script based zero touch provisioning
Smart Install Configuration-Only Deployment
SMI Image only upgrade
Smart Install Upgrade Fallback
VRF-aware OSPFv3,EIGRPv6, and BGPv6
•
•
•
VRF aware SSH
VRF aware TACACS+
VRF aware DNS Support
New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E
The following new and modified software features are supported in Cisco IOS Release 15.2(1)E.
New Features:
eEdge integration with MACSEC
http://www.cisco.com/en/US/docs/ios-xml/ios/san/configuration/15-e/san-macsec.html
DHCP Gleaning
http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-e/dhcp-gleaning.html
http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/xe-3e/dhcp-xe-3e-book.html
Service Discovery Gateway
http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dns/configuration/15-e/dns-15-e-book.html
802.1X support for trunk ports
Enhancements/Respins:
Commented IP Access List Entries
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-comm-ipacl.html
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-comm-ipacl.html
IPv6 ACL Extensions for Hop by Hop Filtering
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/ip6-acl-ext-hbh.html
ACL Sequence Numbering
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-seq-num.html
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-seq-num.html
ACL Support for Filtering IP Options
ACL - TCP Flags Filtering
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-create-filter-tcp.html
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-create-filter-tcp.html
ACL - Named ACL Support for Noncontiguous Ports on an Access Control Entry
IP Access List Entry Sequence Numbering
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-seq-num.html
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-seq-num.html
IOS ACL Support for filtering IP Options
ACL syslog Correlation
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-syslog.html
IP Named Access Control List
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-named.html
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-named.html
IPv6 PACL support
http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/ip6-pacl-supp.html
Cisco Data Collection Manager
http://www.cisco.com/en/US/docs/ios-xml/ios/bsdcm/configuration/15-e/bsdcm-15-e-book.html
SNMPv3 Community MIB Support
http://www.cisco.com/en/US/docs/ios-xml/ios/snmp/configuration/15-e/snmp-15-e-book.html
http://www.cisco.com/en/US/docs/ios-xml/ios/snmp/configuration/xe-3e/snmp-xe-3e-book.html
NETCONF XML PI
http://www.cisco.com/en/US/docs/ios-xml/ios/cns/configuration/15-e/cns-15-e-book.html
IPv6 PIM Passive
http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_pim/configuration/15-e/ip6-mcast-pim-pass.html
HSRP aware PIM
http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_pim/configuration/15-e/imc_hsrp_aware.html
OSPFv3 ABR Type 3 LSA Filtering
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-abr-type-3.html
Graceful Shutdown Support for OSPFv3
OSPF Support for BFD over IPv4
BFD - VRF Support
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-vrf-supp.html
BFD - Static Route Support
Static Route Support for BFD over IPv6
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/ip6-bfd-static.html
BFD - EIGRP Support
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-bfd-eigrp-supp.html
OSPFv3 BFD
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/ip6-route-bfd-ospfv3.html
TACACS+ Per VRF
SSHv2 Enhancements
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_ssh/configuration/15-e/sec-secure-shell-v2.html
Client Information Signalling Protocol (CISP)
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-e/sec-ieee-neat.html
OSPFv3 MIB
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-mib.html
OSPF Non-stop Routing
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-nsr-ospf.html
OSPFv3 Max-Metric Router-Lsa
OSPFv3 VRF-Lite/PE-CE
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-vrf-lite-pe-ce.html
VRRPv3 Protocol Support
IPv6 Source/Prefix Guard
IPv6 Router Advertisement Throttler
IPv6 Neighbor Discovery Multicast Suppress
http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ip6-nd-mcast-supp.html
IPv6 Destination Guard
http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ipv6-dest-guard.html
DHCPv6 Relay - Lightweight DHCPv6 Relay Agent
http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-e/dhcp-ldra.html
DNS - VRF aware DNS
DHCPv6 - Relay chaining for Prefix Delegation
OSPFv3 Retransmission Limits
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/command/ospf-i1.html
OSPFv3 RFC 3101 Support
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-nssa-cfg.html
OSPF support for NSSA RFC 3101
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv2-nssa-cfg.html
TFTP IPv6 support
http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_nman/configuration/15-e/ip6-tftp-supp.html
Capabilities Manager
http://www.cisco.com/en/US/docs/ios-xml/ios/saf/configuration/15-e/saf-capman.html
Extensible Messaging Client Protocol (XMCP) 2.0
http://www.cisco.com/en/US/docs/ios-xml/ios/saf/configuration/15-e/saf-xmcp.html
Minimum and Recommended ROMMON Release
Table 6 lists the minimum and recommended ROMMON releases for the Catalyst 4900M Series Switch, Catalyst 4948E Ethernet Switch, and Catalyst 4948E-F Ethernet Switch.
Note
For details on Upgrading your ROMMON, refer to the ROMMON Release Notes for WS-X45-SUP6-E, WS-X45-SUP6-LE, WS-C4900M, WS-C4948E, and WS-C4948E-F.
Limitations and Restrictions
Following limitations and restrictions apply to the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches:
•
•
•
•
•
•
•
Workaround: Display the configuration with the show standby command, then remove the CLI. Here is sample output of the show standby GigabitEthernet1/1 command:
switch(config)# interface g1/1switch(config)# no standby 0 name (0 is hsrp group number)•
Use the standby delay reload option if the router is rebooting after reloading the image.
•
•
•
–
–
For the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches, the rename command has been added for bootflash and slot0. For all other supervisor engines, the rename command is supported for nvram devices only.
–
–
–
–
–
–
•
•
•
•
•
•
00:02:57: %RADIUS-4-RADIUS_DEAD: RADIUS server 172.20.246.206:1645,1646 is not responding.If this message appears, check that there is network connectivity between the switch and the ACS. You should also check that the switch has been properly configured as an AAA client on the ACS.
•
–
–
–
–
•
% Hardware MTU table exhaustedIn such a scenario, the ipv6 MTU value programmed in hardware will be different from the ipv6 interface MTU value. This will happen if there is no room in the hw MTU table to store additional values.
You must free up some space in the table by unconfiguring some unused MTU values and subsequently disable/re-enable ipv6 on the interface or reapply the MTU configuration.
•
Switch(config-if)# no ip verify sourceSwitch(config-if)# no ip device tracking max"To enable IPSG with Static Hosts on a port, issue the following commands:
Switch(config)# ip device tracking ****enable IP device tracking globallySwitch(config)# ip device tracking max <n> ***set an IP device tracking maximum on intSwitch(config-if)# ip verify source tracking [port-security] ****activate IPSG on port
Caution
Note
•
•
•
•
•
•
•
•
–
–
–
–
–
–
–
•
The outputs of certain commands, such as show ip route and show access-lists, contain non-deterministic text. While the output is easily understood, the output text does not contain strings that are consistently output. A general purpose specification file entry is unable to parse all possible output.
Workaround (1):
While a general purpose specification file entry may not be possible, a specification file entry might be created that returns the desired text by searching for text that is guaranteed to be in the output. If a string is guaranteed to be in the output, it can be used for parsing.
For example, the output of the show ip access-lists SecWiz_Gi3_17_out_ip command is this:
Extended IP access list SecWiz_Gi3_17_out_ip10 deny ip 76.0.0.0 0.255.255.255 host 65.65.66.6720 deny ip 76.0.0.0 0.255.255.255 host 44.45.46.4730 permit ip 76.0.0.0 0.255.255.255 host 55.56.57.57The first line is easily parsed because access list is guaranteed to be in the output:
<Property name="access list" alias="Name" distance="1.0" length="-1" type="String" />The remaining lines all contain the term host. As a result, the specification file may report the desired values by specifying that string. For example, this line
<Property name="host" alias="rule" distance="s.1" length="1" type="String" />will produce the following for the first and second rules
<rule>deny</rule>and the following for the third statement
<rule>permit<rule>Workaround (2):
Request the output of the show running-config command using NETCONF and parse that output for the desired strings. This is useful when the desired lines contain nothing in common. For example, the rules in this access list do not contain a common string and the order (three permits, then a deny, then another permit), prevent the spec file entry from using permit as a search string, as in the following example:
Extended MAC access list MACCOYpermit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalkpermit any host 65de.edfe.fefe xns-idppermit any any protocol-family rarp-non-ipv4deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanningpermit any anyThe XML output of show running-config command includes the following, which can then be parsed programmatically, as desired:
<mac><access-list><extended><ACLName>MACCOY</ACLName></extended></access-list></mac><X-Interface> permit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalk</X-Interface><X-Interface> permit any host 65de.edfe.fefe xns-idp</X-Interface><X-Interface> permit any any protocol-family rarp-non-ipv4</X-Interface><X-Interface> deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanning</X-Interface><X-Interface> permit any any</X-Interface>•
•
•
•
•
Workaround: Use the show version command. CSCtr30294
•
Workaround: Select an alternate destination or source port. CSCty05405
•
Workaround: None. CSCty79236
•
Workaround: If you plan to change a class-map action, such as exceed-action, you meed to remove the class-map with the no class c1 command under policy-map submode. Then, apply the new class-map with the updated changes. CSCsk70826)
•
Workaround: None. However, if you enter the show policy-map name, the unconditional marking actions are displayed. CSCsi94144
•
Workarounds: Do one of the following:
–
–
–
CSCsq63051
•
%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SGWorkaround: None. CSCsw14005
•
If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine's MAC address table, causing possible connectivity interruption on the host.
Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661
•
To observe this issue, the following CLIs are configured with window size as the period for monitoring the errors and a low threshold equal to the number of CRC errored seconds seen/expected.
ethernet oam link-monitor frame-seconds windowethernet oam link-monitor frame-seconds threshold lowWorkaround: Configure a lower value of low threshold such that the frame errors are seen divided into the expected number of frame errored seconds. CSCsy37181
•
Workaround: None. CSCte51948
•
–
–
–
Note
Workarounds:
–
–
errdisable recovery interval value (between 30 and 86400 sec).–
CSCtc99007
•
Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677
•
Similarly, the show epm sessions command always displays the authentication method as DOT1X.
Workaround: To view the authentication method used for a client, enter the
show authentication sessions command. CSCsx42157•
Workaround: None. CSCso93282
•
Workaround: Configure both dead-criteria and deadtime.
radius-server dead-criteriaradius-server deadtimeCSCtl06706
•
Workaround: Reduce the number of VLAN mappings. CSCtn56208
•
Workaround: Unconfigure and reconfigure the service group. CSCtn88087
•
This issue only impacts Catalyst 4948E and Catalyst 4948E-F Ethernet Switches.
Workaround: None. CSCtk97612
•
Workaround: Enable a Layer 3 interface in the running config. CSCsc88636.
•
'Failed to configure service policy on register tunnel' and 'STANDBY:Failed to configure service policy on register tunnel'.Workaround: None. The ip pim register-rate-limit command does not function. CSCub32679
•
Workaround: Turn off ICMP redirect through the ip redirect command. CSCua71929
•
You will not experience this behavior with IPv4 access lists.
Workaround: During IPv6 access-list configuration, configure at least one IPv6 ACE before the "hardware statistics" statement. CSCuc53234
•
Workaround: Apply FHS policies on a non EtherChannel port rather than a VLAN. CSCua53148
•
Workaround: None. CSCuc77376
•
Caveats
Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or resolved.
For the latest information on PSIRTS, refer to the Security Advisories on CCO at the following URL:
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a315.shtmlOpen Caveats in Cisco IOS Release 15.2(1)E1
•
Workaround: Enter the show policy-map interface command. CSCsi71036
•
Workarounds: Disable IGMP snooping on all the relevant VLANs before disabling it globally.
•
Workaround: None. CSCsq99468
•
IFM CC Status as Inactive. Then, you allocate the VLAN, the CC-status remains Inactive.You only see this symptom if you did not allocate a VLAN before you configure the IFM, then at a later time allocate the same VLAN.
Workaround: Unconfigure, then reconfigure the IFM on the port.
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
Cisco IOS Release 12.2(53)SG1 and later or 12.2(50)SG6 and later, Layer 2 multicast is not blocked.Prior to Cisco IOS Release 12.2(53)SG1, 12.2(50)SG6, the switchport block multicast command would block IP Multicast, Layer 2 multicast, and broadcast traffic (CSCta61825).
Workaround: None. CSCtb30327
•
Dec 1 18:44:59.926: %C4K_COMMONHWACLMAN-4-HWPROGSUCCESS: Input Security: pacl - now fully loaded in hardware *Dec 1 18:44:59.926: %C4K_COMMONHWACLMAN-4-ALLACLINHW: All configured ACLs now fully loaded in hardware - hardware switching / QoS restored.This issue does not impact functionality.
Workaround: None.
You must wait for the ACLs to be programmed before performing other TCAM related changes. CSCtd57063
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Shutdown the CE-facing interface. Once all the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Configure ip multicast-routing globally and establish ip pim sparse-dense-mode on the CE-facing interface. CSCtl97692
•
A Cisco IOS AAA client uses the PAC secret to compute the authenticator; Cisco Secure ACS 5.2 uses the shared secret. This behavior causes a mismatch that results in a rejection of the accounting message, and the client marks the server as unresponsive.
•
Mediatrace cannot find the correct inbound interface and applies the dynamic policy on a different interface from the one used for media flow.
Workaround: None. CSCts20229
•
Workaround: None. CSCtx95359
•
Workaround: Do not specify a "bfd" suffix with the snmp-server host x.x.x.x configuration command. CSCtx51561
•
Workaround: Disable IGMP snooping. CSCuc65538
•
Workaround: None. CSCub44553
•
Workaround: None. CSCua89658
•
Workaround: Disable CDP on interfaces that may flap frequently. CSCub85948
•
Workaround: Set the BFD timer and multiplier as 100 * 5. CSCuh35017
•
Workaround: None. CSCuh19345
•
Workaround: Reset the term length to 0 on the vty session. CSCuf08112
•
Workaround: Wait two min before removing the proxy. CSCug69823
•
Workaround: None CSCug79180
Resolved Caveats in Cisco IOS Release 15.2(1)E1
•
Workaround: None.
CSCts80209
•
An attacker can exploit this vulnerability by sending a special combination of crafted packets.
Workaround: None
PSIRT Evaluation:
The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5.4/4.2:
http://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:H/Au:N/C:N/I:N/A:C/E:POC/RL:OF/RC:C
CVE ID CVE-2013-1100 has been assigned to document this issue.
Additional details about the vulnerability described here can be found at:
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1100Additional information on Cisco's security vulnerability policy can be found at the following URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.htmlCSCuc53853
•
Workaround: Do not enable device-sensor accounting.
The user accounting message will not carry the device-sensor attributes to the ISE.
CSCuj56845
•
Workaround: Remove the remark statement from the DACL. CSCuj35704
Open Caveats in Cisco IOS Release 15.2(1)E
•
Workaround: Enter the show policy-map interface command. CSCsi71036
•
Workarounds: Disable IGMP snooping on all the relevant VLANs before disabling it globally.
•
Workaround: None. CSCsq99468
•
IFM CC Status as Inactive. Then, you allocate the VLAN, the CC-status remains Inactive.You only see this symptom if you did not allocate a VLAN before you configure the IFM, then at a later time allocate the same VLAN.
Workaround: Unconfigure, then reconfigure the IFM on the port.
•
Workaround: For VTP database propagation, configure ISL/dot1q trunk port. CSCsu43445
•
Cisco IOS Release 12.2(53)SG1 and later or 12.2(50)SG6 and later, Layer 2 multicast is not blocked.Prior to Cisco IOS Release 12.2(53)SG1, 12.2(50)SG6, the switchport block multicast command would block IP Multicast, Layer 2 multicast, and broadcast traffic (CSCta61825).
Workaround: None. CSCtb30327
•
Dec 1 18:44:59.926: %C4K_COMMONHWACLMAN-4-HWPROGSUCCESS: Input Security: pacl - now fully loaded in hardware *Dec 1 18:44:59.926: %C4K_COMMONHWACLMAN-4-ALLACLINHW: All configured ACLs now fully loaded in hardware - hardware switching / QoS restored.This issue does not impact functionality.
Workaround: None.
You must wait for the ACLs to be programmed before performing other TCAM related changes. CSCtd57063
•
–
–
Workaround: Configure the ASW or any other switch upstream as the root-bridge for all the VLANs. CSCtg71030
•
Workaround: Shutdown the CE-facing interface. Once all the mask-value entries point to the target CE, unshut the CE-facing interface. CSCtl09941
•
Workaround: Configure ip multicast-routing globally and establish ip pim sparse-dense-mode on the CE-facing interface. CSCtl97692
•
A Cisco IOS AAA client uses the PAC secret to compute the authenticator; Cisco Secure ACS 5.2 uses the shared secret. This behavior causes a mismatch that results in a rejection of the accounting message, and the client marks the server as unresponsive.
•
Mediatrace cannot find the correct inbound interface and applies the dynamic policy on a different interface from the one used for media flow.
Workaround: None. CSCts20229
•
Workaround: None. CSCtx95359
•
Workaround: Do not specify a "bfd" suffix with the snmp-server host x.x.x.x configuration command. CSCtx51561
•
Workaround: Disable IGMP snooping. CSCuc65538
•
Workaround: None. CSCub44553
•
Workaround: None. CSCua89658
•
Workaround: Disable CDP on interfaces that may flap frequently. CSCub85948
•
Workaround: Set the BFD timer and multiplier as 100 * 5. CSCuh35017
•
Workaround: None. CSCuh19345
•
Workaround: Reset the term length to 0 on the vty session. CSCuf08112
•
Workaround: Wait two min before removing the proxy. CSCug69823
•
Workaround: None CSCug79180
Resolved Caveats in Cisco IOS Release 15.2(1)E
•
Workaround: Remove these operators from any dynamic ACLs. CSCts05302
•
Workaround: Enter shut and no shut on the port. CSCts29515
•
Workarounds:
–
–
–
CSCub01543
•
Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available.
This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130327-nat
Note: The March 27, 2013, Cisco IOS Software Security Advisory bundled publication includes seven Cisco Security Advisories. All advisories address vulnerabilities in Cisco IOS Software. Each Cisco IOS Software Security Advisory lists the Cisco IOS Software releases that correct the vulnerability or vulnerabilities detailed in the advisory as well as the Cisco IOS Software releases that correct all Cisco IOS Software vulnerabilities in the March 2013 bundled publication.
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar13.html
CSCtg47129
Related Documentation
Although their Release Notes are unique, the 4 platforms (Catalyst 4500, Catalyst 4900, Catalyst ME 4900, and Catalyst 4900M) use the same Software Configuration Guide, Command Reference Guide, and System Message Guide. Refer to the following home pages for additional information:
•
http://www.cisco.com//en/US/products/ps6021/index.html
Hardware Documents
Installation guides and notes including specifications and relevant safety information are available at the following URLs:
•
•
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/hardware/configuration/notes/OL_25315.html
•
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_installation_guides_list.html
•
http://www.cisco.com/en/US/products/ps6021/prod_installation_guides_list.html
Software Documentation
Software release notes, configuration guides, command references, and system message guides are available at the following URLs:
•
http://www.cisco.com/en/US/products/ps6021/prod_release_notes_list.html
Software documents for the Catalyst 4500 Classic, Catalyst 4500 E-Series, Catalyst 4900 Series, and Catalyst 4500-X Series switches are available at the following URLs:
•
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/prod_command_reference_list.html
•
http://www.cisco.com/en/US/products/hw/switches/ps4324/products_system_message_guides_list.html
Cisco IOS Documentation
Platform- independent Cisco IOS documentation may also apply to the Catalyst 4500 and 4900 switches. These documents are available at the following URLs:
•
http://www.cisco.com/en/US/products/ps6350/products_installation_and_configuration_guides_list.html
•
http://www.cisco.com/en/US/products/ps6350/prod_command_reference_list.html
You can also use the Command Lookup Tool at:
http://tools.cisco.com/Support/CLILookup/cltSearchAction.do
•
http://www.cisco.com/en/US/products/ps6350/products_system_message_guides_list.html
You can also use the Error Message Decoder tool at:
http://www.cisco.com/pcgi-bin/Support/Errordecoder/index.cgi
Notices
The following notices pertain to this software license.
OpenSSL/Open SSL Project
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
This product includes software written by Tim Hudson (tjh@cryptsoft.com).
License Issues
The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.
OpenSSL License:
Copyright © 1998-2007 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
4.
5.
6.
"This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)".
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS"' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright © 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.
This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).
The implementation was written so as to conform with Netscapes SSL.
This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).
Copyright remains Eric Young's, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1.
2.
3.
"This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)".
The word `cryptographic' can be left out if the routines from the library being used are not cryptography-related.
4.
THIS SOFTWARE IS PROVIDED BY ERIC YOUNG "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html.
Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R)
Release Notes for the Catalyst 4900M and Catalyst 4948E Series Switch, Cisco IOS Release 15.2(1)Ex
Copyright © 2008-2012, Cisco Systems, Inc. All rights reserved.
