Wait until after the upgrade process completes. This procedure is for copying the combined tar file to the switch. You copy the file to the switch from a TFTP server and extract the files. You can download an image file and replace or keep the current image.
Step 1 Use Table 4 to identify the file that you want to download. Step 2 Download the software image file:. Navigate to your switch model. Download the image you identified in Step 1. For more information, see Appendix B in the software configuration guide for this release. Step 4 Log into the switch through the console port or a Telnet session. For more information about assigning an IP address and default gateway to the switch, see the software configuration guide for this release.
If you are installing the same version of software that is currently on the switch, overwrite the current image by entering this privileged EXEC command:. Directory and image names are case sensitive. This example shows how to download an image from a TFTP server at Use these methods to assign IP information to your switch:. FIPS is a cryptographic-focused certification, required by many government and enterprise customers, which ensures the compliance of the encryption and decryption operations performed by the switch to the approved FIPS cryptographic strengths and management methods for safeguarding these operations.
For more information, see the following links:. This standard is a set of requirements, tests, and evaluation methods that ensures that the Target of Evaluation complies with a specific Protection Profile or custom Security Target.
Table 5 lists the minimum software release after the first release of required to support the major features on the switches. NEAT enhancement to control access to the supplicant port. Auto Smartports enhancements to enable auto-QoS on a digital media player. Auto-QoS enhancements that add automatic configuration classification of traffic flow from video devices.
AutoSmartports enhancements—support for global macros, last-resort macros, event trigger control, access points, EtherChannels, auto-QoS with Cisco Medianet, and IP phones. VLAN assignment on a port configured for multi-auth mode. EEM 3. Network Edge Access Topology NEAT to change the port host mode and to apply a standard port configuration on the authenticator switch port.
MAC move to allow hosts to move across ports within the same switch without any restrictions to enable mobility. NEAT with Flexible-authentication sequencing to configure the order of authentication methods tried by a port. Multiple-user authentication to allow more than one host to authenticate on an Smart Install to allow a single point of management director in a network.
Cisco Medianet to enable intelligent services in the network infrastructure for a wide variety of video applications. Auto Smartports Cisco-default and user-defined macros. Voice aware Rehosting a software license and using an embedded evaluation software license.
Multicast virtual routing and forwarding VRF Lite. Support for auto-rendezvous point auto-RP for IP multicast. You should review this section before you begin working with the switch. These are known limitations that will not be fixed, and there is not always a workaround. Some features might not work as documented, and some features could be affected by recent changes to the switch hardware or software.
The workaround is to block traffic from the specific MAC address by using the mac address-table static mac-addr vlan vlan-id drop global configuration command. The workaround is to set the burst interval to more than 1 second.
We recommend setting the burst interval to 3 seconds even if you are not experiencing this problem. No workaround is required because the problem corrects itself. The workaround is to use modules with serial numbers that are not in the specified range. The workaround is to configure aggressive UDLD. There is no workaround. CSCec Catalyst X switches.
No workaround is necessary. Under normal conditions, the switch generates this notification when snooping the next ARP packet. The workaround is to not configure VLANs with protected ports as part of a fallback bridge group. You can detect the condition by using the show controller ethernet-controller or the show interfaces privileged EXEC commands. The workaround is to stop the traffic in the direction in which it is not being forwarded, and then restart it after 2 seconds.
You can also use the shutdown interface configuration command followed by the no shutdown command on the interface. The workaround is to enter the switchport access vlan dynamic interface configuration command separately on each port. The workaround is to use the session stack-member-number privileged EXEC command. The workaround is to delete any unnecessary files in flash memory, delete the temporary files created as part of the failed upgrade, and try the MCU upgrade again.
The workaround to verify the cable length is to enter the commands when a Gigabit link is active on the interface or after disconnecting the far end of the cable. The EtherChannel is divided between the two partitioned stacks, each with a stack master. The ports that receive the packets detect the incompatibility and shut down some of the ports.
Use one of these workarounds for ports in this error-disabled state:. After the partitioned stacks merge, ports in the suspended state should automatically recover.
The problem corrects itself after the link-up or link-down event. The workaround is not use the VLAN assignment option. The workaround is to disable the IGMP snooping throttle limit by using the no ip igmp max-groups number interface configuration command and then to reconfigure the same limit again. The workaround is to enable PoE and to configure the switch to recover from the PoE error-disabled state. The workaround is to turn the powered device off and then on again. The workaround is to use a different name for the interface-level policy map.
The buffer space for each queue must be at least 10 percent. CSCsx Catalyst X switches. The workaround is to reduce the number of OSPF neighbors to or less. The workaround is to not send traffic to unknown destinations. The workaround is to use an on-demand upgrade to upgrade switches in a stack by entering the vstack download config and vstack download image commands. You should also configure the tar image name instead of the image-list file name in the stored images.
The workaround is to use the TFTP utility of another server instead of a Windows server or to manually delete the existing backup file before backing up again. The workaround, if you need to configure a switch in a stack with the backup configuration, is to use the vstack download config privileged EXEC command so that the director performs an on-demand upgrade on the client.
This is a hardware limitation. This is a cosmetic issue and the workaround is to use the show platform monitor session privileged EXEC command to display the correct source ports. The Root port gets stuck into BLK state when the secondary root bridge priority is decreased to less than the current root bridge priority under RSTP mode. The workaround it to enter a shutdown and then a no shutdown interface configuration command on the interface.
The workaround is to wait a few seconds and then to reenter the write memory privileged EXEC command. The workaround is to use the logging monitor global configuration command to set the severity level to block the low-level messages on the stack member consoles.
The workaround is to avoid traffic congestion on the stack ring. The workaround is to reboot the new member switch. Use the remote command all show run privileged EXEC command to compare the running configurations of the stack members. The workaround is to delete files in the flash memory to create more free space.
The workaround is to check the flash. If it contains many files, remove the unnecessary ones. Check the lost and found directory in flash and if there are many files, delete them. To check the number of files use the fsck flash: command. You configure a Layer 2 protocol tunnel port on the master switch.
You configure a Layer 2 protocol tunnel port on the member switch. You add the port channel to the Layer 2 protocol tunnel port on the master switch. You add the port channel to the Layer 2 protocol tunnel port on the member switch.
After this sequence of steps, the member port might stay suspended. The workaround is to configure the port on the member switch as a Layer 2 protocol tunnel and at the same time also as a port channel. For example:. The workaround is to enter a shutdown interface configuration command followed by a no shutdown command on the port in the blocked state. The workaround is to reload the switch stack after the VRF configuration is changed.
The workaround when you are forming power stack topologies if the power stack mode is not the default power sharing , you should also configure the power stack mode on the new power stacks by entering the mode redundant power-stack configuration command.
The workaround is to reduce the number of VLANs or trunks. The workaround is to enter the shut and no shut interface configuration commands on the port to reset the authentication status. The workaround is to always enter a non zero value for the timeout value when you enter the boot host retry timeout timeout-value command.
The workaround is to click Yes when you are prompted to accept the certificate. Catalyst X, E, X and E switches internally support up to 16 different control plane queues.
Each queue is dedicated to handling specific protocol packets and is assigned a priority level. For example, STP, routed, and logged packets are sent to three different control plane queues, which are prioritized in corresponding order, with STP having the highest priority. Each queue is allocated a certain amount of processing time based on its priority. The processing-time ratio between low-level functions and high-level functions is allocated as 1-to Therefore, the control plane logic dynamically adjusts the CPU utilization to handle high-level management functions as well as punted traffic up to the maximum CPU processing capacity.
Basic control plane functions, such as the CLI, are not overwhelmed by functions such logging or forwarding of packets. If this message appears, make sure that there is network connectivity between the switch and the ACS. If this happens, enter the no auto qos voip cisco-phone interface command on all interface with this configuration to delete it. Then enter the auto qos voip cisco-phone command on each of these interfaces to reapply the configuration. From the Settings window, choose Automatically.
Click OK to exit the Internet Options window. If you are not using the default method of authentication the enable password , you need to configure the HTTP server interface with the method of authentication used on the switch.
Configure the HTTP server interface for the type of authentication that you want to use. The device manager uses the HTTP protocol the default is port 80 and the default method of authentication the enable password to communicate with the switch through any of its Ethernet ports and to allow switch management from a standard web browser. You should write down the port number through which you are connected.
Use care when changing the switch IP information. The Bug Search Tool BST , which is the online successor to Bug Toolkit, is designed to improve the effectiveness in network risk management and device troubleshooting.
The BST allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data such as bug details, product, and version. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.
To view the details of a caveat listed in this document:. Enter the bug ID in the Search For: field. When Catalyst 3k switch stack is not configured as rep edge and is just part of the ring, it causes convergence of about 4 to 8 seconds for some streams.
In a Smart Install network, when the director is connected between the client and the DHCP server and the server has options configured for image and configuration, then the client does not receive the image and configuration files sent by the DHCP server during an automatic upgrade. Instead the files are overwritten by the director and the client receives the image and configuration that the director sends.
For clients to upgrade using Smart Install, you should configure product-id specific image and configuration files in the director. Mediatrace does not report statistics on the initiator under these conditions:.
The workaround is to ensure that the mediatrace ingress and egress connections are on the stack master or to configure a Catalyst E or X as the stack master and then reload the switch stack. When you enter the copy running-config startup config privileged EXEC command on the switch, the running configuration is not always saved to the startup configuration on the first attempt.
If you wait for a few minutes, the configuration is saved when the switch attempts it again. On a switch stack, when an IP phone connected to a member switch has its MAC address authorized using the critical voice VLAN feature, if a master changeover occurs, the voice traffic is dropped.
This occurs because the switch initially drops the voice traffic before reauthenticating critical voice VLAN traffic. The dropped entries are removed when critical voice VLAN authentication occurs. The dropped entries are removed when the IP phone is reauthenticated.
Cisco TrustSec CTS parameters must be configured on both the seed switch and the non-seed switch trunk interfaces. Although the non-seed switch is authenticated and authorized to connect to the network, supplicant devices connected to the non-seed switch might be unable to connect to the network, under these circumstances:. The workaround is to reduce the reauthentication time on the seed switch, or enter the shutdown interface configuration command, followed by the no shutdown interface configuration command on the seed switch CTS trunk interface.
ASP now uses a device classifier, which determines the type of device that is connected to the switch. As a result, ASP has no control over the protocol type that is used to detect the device. Therefore, the protocol detection controls are deprecated. When you enter the macro auto global control detection command, the protocol does not show up in the running configuration; however, the filter-spec command is shown in the output.
To see the deprecated commands, enter the show running config deprecated global and interface configuration command. The following message may be erroneously displayed during the boot up process. The workaround is to use the power inline consumption command in interface configuration mode. In a switch stack, multicast traffic can be lost for up to 60 seconds when the master switch is reloaded.
Because the platform does not support multicast non-stop-forwarding NSF , the time before traffic reconvergence after a switchover can vary. When the show sdm prefer command is run on the switch, The template displays the number of indirect IPv4 routes as 7. There is a reduction of 0. When sampled NetFlow is configured with the command ip flow monitor fm-3 in , the sampler tables are not exported to the collector.
The workaround is to use the configuration command ip flow monitor fm-3 sampler s-1 in. While configuring VLAN load balancing using Resilient Ethernet Protocol REP on ether channel interface where bundled interfaces are spread across member stack switches, the MAC address flaps when the ether channel state changes from open to alternate. Use the Bug Search Toolkit to view the details of a caveat listed in this section. Switch crashes after getnext on the last cafServerAliveAction index.
When enable ip source guard, a part of the clients cannot communicate. IPv6 neighbor discovery packet processing behavior.
Switch fails while copying a configuration file to running-config using RCP. No warning message when switch configures "ip tcp adjust-mss". Shutdown is displayed with linkup channel member port on show run. Broadcast packet does not send when port channel changes to normal port. Cannot apply REP config under portchannel after initial boot up.
No simulated EAP success message to the client for credential failure. CX responds to ARP request from management port. Members in a cluster unable to save configuration in IOS Switch crashes with multicast routing enabled when TCN timer expires. Cx expires Mroute when forwarding low traffic rate. Port err-disable after link-flap with "speed nonegotiate" option. CX stack packet loss on Channel interface when removed backup int.
Switch is unable to send packets with payload larger than bytes. Switch sent Failure packet after reboot and caused PC to fail authenticate. Inconsistency on config "privilege" commands as seen in running-config. EEM Tcl policies fail due to false out of memory error.
Telnet sessions that are incompletely established may not time out after a period of inactivity, leading to eventual exhaustion of available VTY lines. It needs to be manually cleared via clear tcp only clear line does not work. The workaround is that it needs to be manually cleared via clear tcp tcb 0xXXXX only clear line does not work. The configuration is as show below:. When rsh command constructs are used within Tclscript, Tcl fails to send the router hostname which causes the rsh command constructs to fail authorization to a remote router.
An EEM script that executes on a syslog event causes the Cisco router to fail with the following error message. Exception to IOS Thread:. It seems that the switch has picked up interface Fa1 macaddress as its engineID. Hardware is RP management port, address is The workaround is to manually configure snmp engineID from cli. The Privilege commands are not appearing in the configuration of a Catalyst switch.
When you enter the privilege interface level 3 switchport port-security mac-address sticky command and save the configuration, the command is not visible in neither the startup configuration nor the running configuration.
However, privilege level 3 users can view the command and can use it. If you reload the switch, the command is still is not visible in the configuration and also becomes unavailable to the privilege level 3 users. The workaround is to use the aaa authorization global configuration command to access the commands available for a particular user from the AAA server.
The workaround is to disable https secure communication and use http for HTTP requests. On the Cisco enhanced EtherSwitch service module SM-ESP , running the logging source-interface command, does not set the source interface for syslog messages sent to a syslog server. In a Catalyst X switch stack, the switches experience a slow performance with the following message.
Sometimes the switch stops responding and is not recovered until power cycling. You may also observe the following messages when the problem occurs. Disabling linecard. Expected during linecard OIR. The issue is observed in switches running It also includes The workaround is to configure a longer logging interval. For example,. If the issue persists after setting a longer logging interval, you must power cycle the switch. In a switch stack consisting of Catalyst S switches running This issue is observed when the number of member ports is higher than 4.
The workaround is to configure the missing MAC addresses manually. A change in the behaviour of DHCP client is observed between The output is as shown:.
When trying to remove the macros by running the command " no macro auto global processing ", the CPU comes back to normal but the master switch crashes. The workaround is to reload the stack. The CPU remains low for a while. Removing the macros at this time does not cause the master switch to crash. After system reload, ip ssh source-interface shows in startup-config but disappears from. This is seen in both the scenarios as mentioned below. Save the configuration and reload.
When around Vlans are configured on a switch running IOS The issue is not seen on switches running IOS The workaround is to disable the device sensor as no macro auto monitor. When Mar 10 When running show epm session sum , it shows one session cloned multiple times, for example:. Then the number of cloned sessions increases with the time.
Designated port on the Root Bridge experiences a block forward for 30 seconds. This issue occurs because the message-time the period of time a packet is alive in the network is almost equal to max-age the period of time a packet is allowed to stay in the network.
The CDP neighbor devices are discovered initially on the Gi0 interface of the AP and then after a few seconds, the neighbour devices are discovered on the main interface and the sub-interface Gi0 and Gi0.
The workaround is to disable LLDP on the switch interface. When port-security is configured on all ports and when the end host is moved, the mac address table is out of sync. In response to ccnarc. Leo Laohoo. VIP Community Legend. The latest Read the Release Notes and take a pick. In response to Leo Laohoo. Hi Leo I have checked the Releasenotes but im not able to find device model on the supported hardware list for both versions. Since the device is eosl. Version 15 is available for this switch.
Just verify here. I hope you know the procedure to upgrade. Hi Ravindra When i checked Release notes for this version, the supported hardware list for my switch is not listed. In response to praveenrk Open a case might help you further. Thanks Ravindra. In response to pieterh. Thanks Pieterh.
One more thing to clarify.. To upgrade from 12 to 15 how much time will it take to complete the upgrade process. Around 45 minutes because of the undocumented micro-code upgrade. Each switch. But if the stack needs to do a micro-code upgrade, then the entire stack will take 45 minutes to upgrade the micro-code and IOS. Image for Linux is a reliable and easy to use drive image backup software package. Completely backup, restore, or copy your operating systems, including Windows or Linux.
It is a small image resizer application. Resize Image for Email is a lightweight applicationthat allows you to resize your images and prepare them for email. Changes:1 Cleaned up the Interface slightly2 Added 2 new options for auto Switch MP3 converter for Mac can convert mp3 files from many sources into wav format.
Just add the files you want to convert to the list, select the format you want to use, and then click the convert button. Image for Windows is an affordable and reliable drive image backup and restore software package that is used for backing up all of your hard drive data to other media or external drives such as eSATA, USB or and allows you to easily perform a bare-metal Ir can also convert the uncompatible Cisco's Continuous Data Protection for Files offers three levels of insurance for your data's security.
The first, Continuous Protection, creates a duplicate backup copy every time a file is saved. With Scheduled Protection, files are designated NetSim's Virtual Packet Technology sets it apart because it actually simulates Cisco Express Foundation for Account Managers , also known as exam, is a Cisco certification Pass4sure Practice Exams for Cisco Cisco Specialist are written to the highest standards of technical accuracy, using only certified subject MobileGo for IOS is the best choose.
TunesGo for IOS is the best choose. Acronis True Image for Mac is an advanced, easy-to-use, backup and recovery solution that supports cloud storage and Parallels virtual machines. It protects your files, photos, media library, or your entire system, and keeps your data safe and accessible Switch network settings.
Switch between network configurations network switcher.
0コメント