Guest

Cisco Catalyst 6500 Series Switches

Release Notes for Cisco IOS Release 15.1SY

  • Viewing Options

  • PDF (3.0 MB)
  • Feedback

Table of Contents

Release Notes for Cisco IOS Release 15.1SY

Contents

Chronological List of Releases

Hierarchical List of Releases

FPD-Image Dependant Modules

Supported Hardware

Supervisor Engines, PFCs, DFCs, and CFC

Supervisor Engine 2T-10GE

Policy Feature Cards Supported with Supervisor Engine 2T

Distributed Forwarding Cards Supported with Supervisor Engine 2T

Supervisor Engine 720-10GE (CAT6000-VS-S720-10G/MSFC3)

Supervisor Engine 720 (CAT6000-SUP720/MSFC3)

Policy Feature Cards Supported with Supervisor Engine 720

Distributed Forwarding Cards Supported with Supervisor Engine 720

Centralized Forwarding Card (WS-F6700-CFC)

40-Gigabit Ethernet Switching Modules

WS-X6904-40G-2T 4-Port 40-Gigabit Ethernet Switching Module

10-Gigabit Ethernet Switching Modules

WS-X6908-10GE 8-Port 10-Gigabit Ethernet X2 Switching Module

WS-X6816-10T-2T, WS-X6716-10T 16-Port 10-Gigabit Ethernet Copper Switching Module

WS-X6816-10G-2T, WS-X6716-10G 16-Port 10-Gigabit Ethernet X2 Switching Module

WS-X6708-10GE 8-port 10-Gigabit Ethernet X2 Switching Module

WS-X6704-10GE 4-Port 10-Gigabit Ethernet XENPAK Switching Module

WS-X6502-10GE 1-port 10-Gigabit Ethernet Switching Module

Cisco Catalyst 6880-X Series Extensible Fixed Aggregation Switches

Cisco Catalyst 6807-XL Modular Switch

Instant Access Catalyst 6800ia Series Switches

Gigabit Ethernet Switching Modules

WS-X6848-SFP-2T, WS-X6748-SFP 48-Port Gigabit Ethernet SFP Switching Module

WS-X6824-SFP-2T, WS-X6724-SFP 24-Port Gigabit Ethernet SFP Switching Module

WS-X6816-GBIC 16-port Gigabit Ethernet GBIC Switching Module

WS-X6516A-GBIC 16-Port Gigabit Ethernet GBIC Switching Module

WS-X6516-GBIC 16-Port Gigabit Ethernet GBIC Switching Module

WS-X6416-GBIC 16-port Gigabit Ethernet GBIC Switching Module

WS-X6408A-GBIC 8-port Gigabit Ethernet GBIC Switching Module

WS-X6408-GBIC 8-port Gigabit Ethernet GBIC Switching Module

10/100/1000 Ethernet Switching Modules

WS-X6848-TX-2T, WS-X6748-GE-TX

WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6548-GE-45AF

WS-X6148E-GE-45AT

WS-X6148A-GE-TX, WS-X6148A-GE-45AF

WS-X6148-GE-TX, WS-X6148V-GE-TX, WS-X6148-GE-45AF

WS-X6516-GE-TX

100MB Ethernet Switching Modules

WS-X6148-FE-SFP

WS-X6524-100FX-MM

WS-X6324-100FX-MM

10/100MB Ethernet Switching Modules

WS-X6548-RJ-45

WS-X6548-RJ-21

WS-X6148X2-RJ-45, WS-X6148X2-45AF

WS-X6196-RJ-21, WS-X6196-21AF

WS-X6348-RJ-45, WS-X6348-RJ-45V

WS-X6348-RJ-21V

WS-X6148A-RJ-45, WS-X6148A-45AF

WS-X6148-RJ-45, WS-X6148-RJ45V, WS-X6148-45AF

WS-X6148-RJ-21, WS-X6148-RJ21V, WS-X6148-21AF

Power over Ethernet Daughtercards

WS-F6K-GE48-AF, WS-F6K-48-AF

WS-F6K-FE48X2-AF

WS-F6K-VPWR-GE

WS-F6K-VPWR

Transceivers

CFP Modules

X2 Modules

10 GE SFP+ Modules

XENPAKs

Small Form-Factor Pluggable (SFP) Modules

Gigabit Interface Converters (GBICs)

Service Modules

Application Control Engine (ACE) Module

ASA Services Module

Firewall Services Module (FWSM)

Intrusion Detection System Modules (IDSMs)

Network Analysis Modules (NAMs)

Wireless Services Modules (WiSMs)

Power Supplies

WS-C6503-E Power Supplies

WS-C6504-E Power Supplies

All Other Power Supplies

Chassis

13-Slot Chassis

9-Slot Chassis

6-Slot Chassis

4-Slot Chassis

3-Slot Chassis

Unsupported Hardware

Images and Feature Sets

Universal Boot Loader Image

EFSU Compatibility

Cisco IOS Behavior Changes

Release 15.1(1)SY2

New Features in Release15.1(2)SY4

New Hardware Features in Release15.1(2)SY4

New Software Features in Release15.1(2)SY4

New Features in Release15.1(1)SY4

New Hardware Features in Release15.1(1)SY4

New Software Features in Release15.1(1)SY4

New Features in Release15.1(2)SY3

New Hardware Features in Release 15.1(2)SY3

New Software Features in Release 15.1(2)SY3

New Features in Release15.1(2)SY2

New Hardware Features in Release15.1(2)SY2

New Software Features in Release15.1(2)SY2

New Features in Release15.1(2)SY1

New Hardware Features in Release15.1(2)SY1

New Software Features in Release15.1(2)SY1

New Features in Release15.1(2)SY

New Hardware Features in Release15.1(2)SY

New Software Features in Release15.1(2)SY

New Features in Release15.1(1)SY3

New Hardware Features in Release15.1(1)SY3

New Software Features in Release15.1(1)SY3

New Features in Release15.1(1)SY2

New Hardware Features in Release15.1(1)SY2

New Software Features in Release15.1(1)SY2

New Features in Release15.1(1)SY1

New Hardware Features in Release15.1(1)SY1

New Software Features in Release15.1(1)SY1

New Features in Release15.1(1)SY

New Hardware Features in Release15.1(1)SY

New Software Features in Release15.1(1)SY

Software Features from Earlier Releases

Unsupported Commands

Unsupported Features

Restrictions

Caveats in Release 15.1SY

Open Caveats in Release 15.1SY

Caveats Resolved in Release 15.1(2)SY4

Caveats Resolved in Release 15.1(1)SY4

Caveats Resolved in Release 15.1(2)SY3

Caveats Resolved in Release 15.1(2)SY2

Caveats Resolved in Release 15.1(2)SY1

Caveats Resolved in Release 15.1(2)SY

Caveats Resolved in Release 15.1(1)SY3

Caveats Resolved in Release 15.1(1)SY2

Caveats Resolved in Release 15.1(1)SY1

Caveats Resolved in Release 15.1(1)SY

Troubleshooting

System Troubleshooting

Module Troubleshooting

VLAN Troubleshooting

Spanning Tree Troubleshooting

Additional Troubleshooting Information

System Software Upgrade Instructions

Notices

OpenSSL/Open SSL Project

License Issues

Obtaining Documentation and Submitting a Service Request

Release Notes for Cisco IOS Release 15.1SY

November 08, 2014


Note • See this product bulletin for information about the standard maintenance and extended maintenance 15.1SY releases:

http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-15-0sy/product_bulletin_c25-687567.html

  • For general product information about the Catalyst 6500 series switches, refer to these product bulletins:

http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/literature.html


 

The most current version of this document is available on Cisco.com at this URL:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/release_notes.html


Caution Cisco IOS supports redundant configurations with identical supervisor engines. If they are not identical, one supervisor engine will boot first and become active and hold the other in a reset condition.

Chronological List of Releases


Note • See the “Images and Feature Sets” section for information about which releases are deferred.


 

This is a chronological list of the 15.1SY releases:

  • Release 15.1(2)SY4—08 Nov 2014
  • Release 15.1(1)SY4—10 Oct 2014
  • Release 15.1(2)SY3—23 Jun 2014
  • Release 15.1(1)SY3—22 Mar 2014
  • Release 15.1(2)SY2—03 Mar 2014
  • Release 15.1(2)SY1—09 Dec 2013
  • Release 15.1(1)SY2—04 Oct 2013
  • Release 15.1(2)SY—07 Sep 2013
  • Release 15.1(1)SY1—03 May 2013
  • Release 15.1(1)SY—15 Oct 2012

Hierarchical List of Releases

These releases support the hardware listed in the “Supported Hardware” section:

  • Release 15.1(2)SY4:

Date of release: 08 Nov 2014

Based on Release 15.1(2)SY3

  • Release 15.1(1)SY4:

Date of release: 10 Oct 2014

Based on Release 15.1(1)SY3

  • Release 15.1(2)SY3:

Date of release: 23 Jun 2014

Based on Release 15.1(2)SY2

  • Release 15.1(2)SY2:

Date of release: 03 Mar 2014

Based on Release 15.1(2)SY1

  • Release 15.1(2)SY1:

Date of release: 09 Dec 2013

Based on Release 15.1(2)SY

  • Release 15.1(1)SY3:

Date of release: 22 Mar 2014

Based on Release 15.1(1)SY2

  • Release 15.1(1)SY2:

Date of release: 04 Oct 2013

Based on Release 15.1(1)SY1

  • Release 15.1(2)SY:

Date of release: 07 Sep 2013

Based on Release 15.1(1)SY1

  • Release 15.1(1)SY1:

Date of release: 03 May 2013

Based on Release 15.1(1)SY

  • Release 15.1(1)SY:

Date of release: 15 Oct 2012

Based on Release 15.0(1)SY2 and Release 12.2(33)SXJ3


Note Release 15.1SY supports only Ethernet ports. Release 15.1SY does not support any WAN features or commands.


FPD-Image Dependant Modules

FPD image packages update FPD images. If a discrepancy exists between an FPD image and the Cisco IOS image, the module that has the FPD discrepancy is deactivated until the discrepancy is resolved. These modules use FPD images:

  • ASA services module (WS-SVC-ASA-SM1-K9)—See this publication:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/release/notes/asarn85.html

  • Network Analysis Module 3 (WS-SVC-NAM3-6G-K9)—See these publications:

http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-network-analysis-module-software/products-release-notes-list.html

Supported Hardware

These sections describe the hardware supported in Release 15.1(2)SY1 and later releases:


Note Enter the show power command to display current system power usage.


Supervisor Engine 2T-10GE


Note For information about DRAM requirements on all supervisor engines, see this publication:

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/qa_c67_457347.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
VS-S2T-10G-XL

Supervisor Engine 2T-10GE with PFC4XL

15.0(1)SY

VS-S2T-10G

Supervisor Engine 2T-10GE with PFC4

Features

  • One of these policy feature cards:

Policy Feature Card 4XL (PFC4XL)

Policy Feature Card 4 (PFC4)

See the “Policy Feature Cards Supported with Supervisor Engine 2T” section.

  • Supports 2-Tbps switch fabric connectivity.
  • 2-GB DRAM .
  • Internal 1-GB bootflash ( bootdisk: ).
  • One external slot:

disk0:

For CompactFlash Type II flash PC cards sold by Cisco Systems, Inc., for use in Supervisor Engine 2T-10GE.

  • Console ports:

EIA/TIA-232 (RS-232) port

USB port

  • Ports 1, 2, and 3:

QoS architecture: 2q4t / 1p3q4t

Ports 1, 2, and 3: Gigabit Ethernet SFP (fiber SFP or 1000 Mbps RJ-45 SFP)

  • Ports 4 and 5:

Support for 10-Gigabit Ethernet tranceivers tranceivers

QoS architecture:

• With ports 1, 2, and 3 enabled: 2q4t / 1p3q4t

• With ports 1, 2, and 3 disabled: 8q4t / 1p7q4t

  • One port group: ports 1 through 5

Note See the Supervisor Engine 2T-10GE Connectivity Management Processor Configuration Guide for information about the 10/100/1000 Mbps RJ-45 port.


  • Connectivity Management Processor (CMP)—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/cmp_configuration/guide/sup2T_10GEcmp.html

Supervisor Engine 2T-10GE Restrictions

  • The 1-Gigabit Ethernet ports and the 10-Gigabit Ethernet ports have the same QoS port architecture ( 2q4t / 1p3q4t ) unless you disable the 1-Gigabit Ethernet ports with the platform qos 10g-only global configuration command. With the 1-Gigabit Ethernet ports disabled, the QoS port architecture of the 10-Gigabit Ethernet ports is 8q4t / 1p7q4t .
  • In RPR redundancy mode, the ports on a Supervisor Engine 2T-10GE in standby mode are disabled.

Policy Feature Card 4 Guidelines and Restrictions

  • The PFC4 supports a theoretical maximum of 131,072 (128K) MAC addresses with 118,000 (115.2K) MAC addresses as the recommended maximum.
  • The PFC4 partitions the hardware FIB table to route IPv4 unicast, IPv4 multicast, MPLS, and IPv6 unicast and multicast traffic in hardware. Traffic for routes that do not have entries in the hardware FIB table are processed by the route processor in software.

The defaults for XL mode are:

IPv4 unicast and MPLS: 512,000 routes

IPv4 multicast and IPv6 unicast and multicast: 256,000 routes

The defaults for Non-XL mode are:

IPv4 unicast and MPLS: 192,000 routes

IPv4 multicast and IPv6 unicast and multicast: 32,000 routes


Note The size of the global internet routing table plus any local routes might exceed the non-XL mode default partition sizes.


These are the theoretical maximum numbers of routes for the supported protocols (the maximums are not supported simultaneously):

: :

• IPv4 and MPLS: Up to 1,007,000 routes

• IPv4 multicast and IPv6 unicast and multicast: Up to 503,000 routes

: :

• IPv4 and MPLS: Up to 239,000 routes

• IPv4 multicast and IPv6 unicast and multicast: Up to 119,000 routes

Enter the platform cef maximum-routes command to repartition the hardware FIB table. IPv4 unicast and MPLS require one hardware FIB table entry per route. IPv4 multicast and IPv6 unicast and multicast require two hardware FIB table entries per route. Changing the partition for one protocol makes corresponding changes in the partitions of the other protocols. You must enter the reload command to put configuration changes made with the platform cef maximum-routes command into effect.


Note With a non-XL-mode system, if your requirements cannot be met by repartitioning the hardware FIB table, upgrade components as necessary to operate in XL mode.


  • You cannot use one type of PFC on one supervisor engine and a different type on the other supervisor engine for redundancy. You must use identical policy feature cards for redundancy.
  • PFC4—These restrictions apply to a configuration with a PFC4 and these DFCs:

PFC4 and DFC4—No restrictions (PFC4 mode).

PFC4 and DFC4XL—The PFC4 restricts DFC4XL functionality: the DFC4XL functions as a DFC4 (PFC4 mode).

  • PFC4XL—These restrictions apply to a configuration with a PFC4XL and these DFCs:

PFC4XL and DFC4—PFC4XL functionality is restricted by the DFC4: after a reload with a DFC4-equipped module installed, the PFC4XL functions as a PFC4 (PFC4 mode).

PFC4XL and DFC4XL—No restrictions (PFC4XL mode).

  • Switching modules that you install after bootup that are equipped with a DFC that imposes a more restricted PFC mode than the current PFC mode remain powered down.
  • You must reboot to use a switching module equipped with a DFC that imposes a more restricted PFC mode than the current PFC mode.
  • Enter the show platform hardware pfc mode command to display the PFC mode.

Policy Feature Card 4XL

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
VS-F6K-PFC4XL

Policy Feature Card 4XL (PFC4XL)

Note Use VS-F6K-PFC4XL= to upgrade to a PFC4XL.

With Supervisor Engine 2T-10GE

15.0(1)SY

Policy Feature Card 4

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
VS-F6K-PFC4

Policy Feature Card 4 (PFC4)

With Supervisor Engine 2T-10GE

15.0(1)SY

Distributed Forwarding Cards Supported with Supervisor Engine 2T


Note • See the “Policy Feature Cards Supported with Supervisor Engine 2T” section for Policy Feature Cards (PFC) and Distributed Forwarding Card (DFC) restrictions.

  • The DFC4 uses memory that is installed on the switching module.
  • For more information about the DFCs, see these documents:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/OL_24918.html

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-6500-series-supervisor-engine-2t/data_sheet_c78-648214.html


 

Distributed Forwarding Card 4XL

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-F6K-DFC4-EXL
WS-F6K-DFC4-AXL

Distributed Forwarding Card 4XL (DFC4XL)

With Supervisor Engine 2T-10GE

15.0(1)SY

Distributed Forwarding Card 4

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-F6K-DFC4-E
WS-F6K-DFC4-A

Distributed Forwarding Card 4 (DFC4)

With Supervisor Engine 2T-10GE

15.0(1)SY

Supervisor Engine 720-10GE Common Features

  • Switch processor (SP):

Internal 1-GB CompactFlash card ( sup-bootdisk: ).

1-GB . .

  • Route processor (RP):

Internal 64-MB bootflash.

1-GB . .

  • One of these:

Policy Feature Card 3CXL (PFC3CXL).

Policy Feature Card 3C (PFC3C).

See the “Policy Feature Cards Supported with Supervisor Engine 2T” section.

  • Integrated 720-Gbps Switch Fabric.
  • One external slot:

disk0:

For CompactFlash Type II flash PC cards sold by Cisco Systems, Inc., for use in Supervisor Engine 720-10GE.

  • Console port—EIA/TIA-232 (RS-232) port.
  • Ports 1 and 2:

QoS architecture: 2q4t / 1p3q4t

Gigabit Ethernet SFPs Support for

  • Port 3:

10/100/1000 Mbps RJ-45

QoS architecture: 2q4t / 1p3q4t

  • Ports 4 and 5:

Support for 10-Gigabit Ethernet tranceivers tranceivers

QoS architecture: 2q4t / 1p3q4t or 8q4t / 1p7q4t


Note The 1-Gigabit Ethernet ports and the 10-Gigabit Ethernet ports have the same QoS port architecture (2q4t/1p3q4t) unless you disable the 1-Gigabit Ethernet ports with the mls qos 10g-only global configuration command, which is required to configure DSCP-based queueing. With the 1-Gigabit Ethernet ports disabled, the QoS port architecture of the 10-Gigabit Ethernet ports is 8q4t/1p7q4t.


  • One port group: ports 1 through 5.
  • Two Universal Serial Bus (USB) 2.0 ports (not currently enabled)

Supervisor Engine 720-10GE with PFC3C and PFC3CXL

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
VS-S720-10G-3CXL

Supervisor Engine 720-10GE with PFC3CXL

15.1(1)SY

VS-S720-10G-3C

Supervisor Engine 720-10GE with PFC3C

15.1(1)SY

Supervisor Engine 720-10GE Restrictions

  • In RPR redundancy mode, the ports on a Supervisor Engine 720-10GE in standby mode are disabled.
  • There are no memory-only upgrade options for the Supervisor Engine 720-10GE.

Supervisor Engine 720 Common Features

  • Integrated 720-Gbps Switch Fabric
  • Internal 64-MB bootflash device ( sup-bootflash: ) or CompactFlash card ( sup-bootdisk: ), 512 MB or larger .

As an upgrade, WS-CF-UPG=

See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_17277.html

  • Two external slots (disk0: and disk1:) for CompactFlash Type II flash PC cards sold by Cisco Systems, Inc., for use in Supervisor Engine 720.

Note Some Supervisor Engine 720 Release 12.2SX images are larger than the bootflash device and must be stored on a CompactFlash card (sup-bootdisk: or disk0: or disk1:).


  • Two Ethernet uplink ports:

512-KB packet buffer per port

Port 1—Gigabit Interface Converter (GBIC)

Port 2—Configurable as either:

Gigabit Interface Converter (GBIC)

10/100/1000 Mbps RJ-45

  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Port grouping:

Number of ports: 2

Number of port groups: 1

Port ranges per port group: 1–2

Supervisor Engine 720 with PFC3BXL


Note If you install WS-SUP720-3BXL=, upgrade the memory on any DFC3-equipped switching modules. See this document for DFC3 memory upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12409.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-SUP720-3BXL

Supervisor Engine 720 with PFC3BXL:

  • Switch processor (SP):

Internal 64-MB bootflash device ( sup-bootflash: )
or
internal CompactFlash card (sup-bootdisk:)

1-GB or larger

  • Route processor (RP):

1-GB or larger

64-MB bootflash

15.1(1)SY

Supervisor Engine 720 with PFC3B


Note • See this document for DFC3 memory upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12409.html

  • Use WS-F6K-PFC3BXL= to upgrade a WS-SUP720-3B with a PFC3BXL. WS-F6K-PFC3BXL= includes 1 GB memory upgrades for the Supervisor Engine 720 and the MSFC3.

If you install WS-F6K-PFC3BXL=, upgrade the memory on any DFC3-equipped switching modules.

See this publication for more information about WS-F6K-PFC3BXL=:


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-SUP720-3B

Supervisor Engine 720 with PFC3B:

  • Switch processor (SP):

Internal 64-MB bootflash device ( sup-bootflash: )
or
internal CompactFlash card (sup-bootdisk:)

512-MB or larger

  • Route processor (RP):

64-MB bootflash

512-MB or larger

15.1(1)SY

Policy Feature Card 3 Guidelines and Restrictions

  • The PFC3C supports a theoretical maximum of 96 K MAC addresses (64 K MAC addresses recommended maximum).
  • The PFC3B and PFC3BXL support a theoretical maximum of 64 K MAC addresses (32 K MAC addresses recommended maximum).
  • The PFC3 partitions the hardware FIB table to route IPv4 unicast, IPv4 multicast, MPLS, and IPv6 unicast and multicast traffic in hardware. Traffic for routes that do not have entries in the hardware FIB table are processed by the route processor in software.

The defaults for XL mode are:

IPv4 unicast and MPLS—512,000 routes

IPv4 multicast and IPv6 unicast and multicast—256,000 routes

The defaults for non-XL mode are:

IPv4 unicast and MPLS—192,000 routes

IPv4 multicast and IPv6 unicast and multicast—32,000 routes


Note The size of the global internet routing table plus any local routes might exceed the non-XL mode default partition sizes.


These are the theoretical maximum numbers of routes for the supported protocols (the maximums are not supported simultaneously):

XL mode:

• IPv4 and MPLS—Up to 1,007,000 routes

• IPv4 multicast and IPv6 unicast and multicast—Up to 503,000 routes

Non-XL mode:

• IPv4 and MPLS—Up to 239,000 routes

• IPv4 multicast and IPv6 unicast and multicast—Up to 119,000 routes

Enter the mls cef maximum-routes command to repartition the hardware FIB table. IPv4 unicast and MPLS require one hardware FIB table entry per route. IPv4 multicast and IPv6 unicast and multicast require two hardware FIB table entries per route. Changing the partition for one protocol makes corresponding changes in the partitions of the other protocols. You must enter the reload command to put configuration changes made with the mls cef maximum-routes command into effect.


Note With a non-XL-mode system, if your requirements cannot be met by repartitioning the hardware FIB table, upgrade components as necessary to operate in XL mode.


  • You cannot use one type of PFC3 on one supervisor engine and a different type on the other supervisor engine for redundancy. You must use identical policy feature cards for redundancy.
  • PFC3B—These restrictions apply to a configuration with a PFC3B and these DFCs:

PFC3B and DFC3B—No restrictions (PFC3B mode; does not support virtual switch mode).

PFC3B and DFC3BXL—The PFC3B restricts DFC3BXL functionality: after a reload with a DFC3BXL-equipped module installed, the DFC3BXL functions as a DFC3B (PFC3B mode; does not support virtual switch mode).

PFC3B and DFC3C—The PFC3B restricts DFC3C functionality: the DFC3C functions as a DFC3B (PFC3B mode; does not support virtual switch mode).

PFC3B and DFC3CXL—The PFC3B restricts DFC3CXL functionality: the DFC3CXL functions as a DFC3B (PFC3B mode; does not support virtual switch mode).

  • PFC3BXL—These restrictions apply to a configuration with a PFC3BXL and these DFCs:

PFC3BXL and DFC3B—PFC3BXL functionality is restricted by the DFC3B: after a reload with a DFC3B-equipped module installed, the PFC3BXL functions as a PFC3B (PFC3B mode; does not support virtual switch mode).

PFC3BXL and DFC3BXL—No restrictions (PFC3BXL mode; does not support virtual switch mode).

PFC3BXL and DFC3C—Each restricts the functionality of the other: the PFC3BXL functions as a PFC3B and the DFC3C functions as a DFC3B (PFC3B mode; does not support virtual switch mode).

PFC3BXL and DFC3CXL—The PFC3BXL restricts DFC3CXL functionality: the DFC3CXL functions as a DFC3BXL (PFC3BXL mode; does not support virtual switch mode).

  • PFC3C—These restrictions apply to a configuration with a PFC3C and these DFCs:

PFC3C and DFC3B—PFC3C functionality is restricted by the DFC3B: after a reload with a DFC3B-equipped module installed, the PFC3C functions as a PFC3B (PFC3B mode; does not support virtual switch mode).

PFC3C and DFC3BXL—PFC3C functionality is restricted by the DFC3BXL: after a reload with a DFC3BXL-equipped module installed, the PFC3C functions as a PFC3BXL (PFC3BXL mode; does not support virtual switch mode).

PFC3C and DFC3C—No restrictions (PFC3C mode).

PFC3C and DFC3CXL—The PFC3C restricts DFC3CXL functionality: the DFC3CXL functions as a DFC3C (PFC3C mode).

  • PFC3CXL—These restrictions apply to a configuration with a PFC3CXL and these DFCs:

PFC3CXL and DFC3B—PFC3CXL functionality is restricted by the DFC3B: after a reload with a DFC3B-equipped module installed, the PFC3CXL functions as a PFC3B (PFC3B mode; does not support virtual switch mode).

PFC3CXL and DFC3BXL—PFC3CXL functionality is restricted by the DFC3BXL: after a reload with a DFC3BXL-equipped module installed, the PFC3CXL functions as a PFC3BXL (PFC3BXL mode; does not support virtual switch mode).

PFC3CXL and DFC3C—PFC3CXL functionality is restricted by the DFC3C: after a reload with a DFC3C-equipped module installed, the PFC3CXL functions as a PFC3C (PFC3C mode).

PFC3CXL and DFC3CXL—No restrictions (PFC3CXL mode).

  • Switching modules that you install after bootup that are equipped with a DFC that imposes a more restricted PFC mode than the current PFC mode remain powered down.
  • You must reboot to use a switching module equipped with a DFC that imposes a more restricted PFC mode than the current PFC mode.
  • Enter the show platform hardware pfc mode command to display the PFC mode.

Policy Feature Card 3CXL


Note Use VS-F6K-PFC3CXL= to upgrade a VS-S720-10G-3C with a PFC3CXL. See this publication for more information:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_16220.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
VS-F6K-PFC3CXL

Policy Feature Card 3CXL (PFC3CXL)

Supported only with Supervisor Engine 720-10GE

15.1(1)SY

Policy Feature Card 3C

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
VS-F6K-PFC3C
ME-C6524-PFC3C

Policy Feature Card 3C (PFC3C)

Supported only with Supervisor Engine 720-10GE

15.1(1)SY

Policy Feature Card 3BXL


Note Use WS-F6K-PFC3BXL= to upgrade a WS-SUP720 or WS-SUP720-3B with a PFC3BXL. WS-F6K-PFC3BXL= includes 1 GB memory upgrades for the Supervisor Engine 720 and the MSFC3. See this publication for more information:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_16220.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-PFC3BXL

Policy Feature Card 3BXL (PFC3BXL)

Supported only with Supervisor Engine 720

15.1(1)SY

Policy Feature Card 3B


Note Use WS-F6K-PFC3B= to upgrade a WS-SUP720 with a PFC3B. See this publication for more information:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_16220.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-PFC3B

Policy Feature Card 3B (PFC3B)

With Supervisor Engine 720

15.1(1)SY

Distributed Forwarding Cards Supported with Supervisor Engine 720


Note See the “Policy Feature Cards Supported with Supervisor Engine 2T” section for Policy Feature Cards (PFC) and Distributed Forwarding Card (DFC) restrictions.


Distributed Forwarding Card 3CXL


Note • WS-F6700-DFC3CXL uses memory that is installed on the switching module.

  • See this publication for information about WS-F6700-DFC3CXL upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_15893.html

  • Requires switching module ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6143.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-F6700-DFC3CXL

Distributed Forwarding Card 3CXL (DFC3CXL) for use on CEF720 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Distributed Forwarding Card 3C


Note • WS-F6700-DFC3C uses memory that is installed on the switching module.

  • See this publication for information about WS-F6700-DFC3C upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_15893.html

  • Requires switching module ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6143.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-F6700-DFC3C

Distributed Forwarding Card 3C (DFC3C) for use on CEF720 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Distributed Forwarding Card 3BXL

WS-F6700-DFC3BXL


Note • Not supported in virtual switch mode.

  • WS-F6700-DFC3BXL uses memory that is installed on the switching module.
  • See this publication for information about WS-F6700-DFC3BXL upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_15893.html

  • Requires switching module ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6143.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6700-DFC3BXL

Distributed Forwarding Card 3BXL (DFC3BXL) for use on CEF720 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-F6K-DFC3BXL


Note • Not supported in virtual switch mode.

  • See this publication for information about WS-F6K-DFC3BXL memory upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12409.html

  • Supervisor Engine 720 supports a WS-F6K-DFC3BXL on these WS-X6516-GBIC switching module hardware revisions:

Lower than 5.0

5.5 and higher

  • Requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

  • Supervisor Engine 720 does not support a DFC3 on WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4. With a Supervisor Engine 720 and with a DFC3 installed, WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4 do not power up.
  • With a Supervisor Engine 720 but without a DFC3, WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4 operate in bus mode.
  • See external field notice 24494 for more information about Supervisor Engine 720 and a DFC3 on WS-X6516-GBIC switching modules:

http://www.cisco.com/c/en/us/support/docs/field-notices/200/fn24494.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-DFC3BXL

Distributed Forwarding Card 3BXL (DFC3BXL) for use on dCEF256 and CEF256 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Distributed Forwarding Card 3B

WS-F6700-DFC3B


Note • Not supported in virtual switch mode.

  • WS-F6700-DFC3B uses memory that is installed on the switching module.
  • See this publication for information about WS-F6700-DFC3B upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_15893.html

  • Requires switching module ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6143.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6700-DFC3B

Distributed Forwarding Card 3B (DFC3B) for use on CEF720 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-F6K-DFC3B


Note • Not supported in virtual switch mode.

  • See this publication for information about WS-F6K-DFC3B memory upgrades:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12409.html

  • Requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

  • Supervisor Engine 720 supports a WS-F6K-DFC3B on these WS-X6516-GBIC switching module hardware revisions:

Lower than 5.0

5.5 and higher

  • Supervisor Engine 720 does not support a DFC3 on WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4. With a Supervisor Engine 720 and with a DFC3 installed, WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4 do not power up.
  • With a Supervisor Engine 720 but without a DFC3, WS-X6516-GBIC switching module hardware revisions 5.0 through 5.4 operate in bus mode.
  • See external field notice 24494 for more information about Supervisor Engine 720 and a DFC3 on WS-X6516-GBIC switching modules:

http://www.cisco.com/c/en/us/support/docs/field-notices/200/fn24494.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-DFC3B

Distributed Forwarding Card 3B (DFC3B) for use on dCEF256 and CEF256 modules

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Centralized Forwarding Card (WS-F6700-CFC)

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-F6700-CFC

Centralized Forwarding Card (CFC) for use on CEF720 modules

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

40-Gigabit Ethernet Switching Modules

WS-X6904-40G-2T 4-Port 40-Gigabit Ethernet Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6904-40G-2TXL
(Has WS-F6K-DFC4-EXL )
WS-X6904-40G-2T
(Has WS-F6K-DFC4-E )

4-port 40-Gigabit Ethernet module

With Supervisor Engine 2T-10GE

15.0(1)SY1

  • WS-X6904-40G-2T and WS-X6904-40G-2TXL are the orderable product IDs.
  • The front panel is labeled WS-X6904-40G.
  • Cisco IOS software commands display WS-X6904-40G with either WS-F6K-DFC4-E or WS-F6K-DFC4-EXL .
  • Has hardware abstraction layer (HAL) support.
  • QoS port architecture (Rx/Tx): 1p7q4t or 2p6q4t/1p7q4t or 2p6q4t
  • Dual switch-fabric connections:

Fabric Channel #1: Ports 1 and 2 or 5 through 12

Fabric Channel #2: Ports 3 and 4 or 13 through 20

  • Number of ports: 4 or 16
    Number of port groups: 2
    Port per port group:
    –Ports 1 and 2 or 5 through 12
    –Ports 3 and 4 or 13 through 20
  • dCEF2T.
  • In a 3-slot chassis, supported only with WS-C6503-E hardware revision 1.3 or higher.
  • Upgrade to Release15.0(1)SY1 or later before installing WS-X6904-40G (see the “EFSU Compatibility” section).
  • Each bay can support a CFP transceiver (supports one 40 Gigabit Ethernet port) or a FourX adapter (supports four 10 Gigabit Ethernet SFP+ transceivers).
  • WS-X6904-40G supported modes (default mode is oversubscribed):

40 Gigabit Ethernet oversubscribed mode:
—Four 40 Gigabit Ethernet ports
—Ports 1 through 4

10 Gigabit Ethernet oversubscribed mode:
—Sixteen 10 Gigabit Ethernet ports
—Ports 5 through 20

Mixed 10/40 Gigabit Ethernet oversubscribed mode:

—Left bays:

–Either two 40 Gigabit Ethernet ports (1 and 2)

–Or eight 10 Gigabit Ethernet ports (5 through 12)

—Right bays:

–Either two 40 Gigabit Ethernet ports (3 and 4)

–Or eight 10 Gigabit Ethernet ports (13 through 20)

Performance mode:

—Configurable per module or per bay:

no hw-module slot slot_number oversubscription [port-group port_group_number]

—Supported in the top left bay and top right bay.

—Any of these combinations:

–40 Gigabit Ethernet port 1 (top left bay) and port 3 (top right bay)

–10 Gigabit Ethernet ports 5 through 9 (top left bay) and ports 13 through 16 (top right bay)

–Top left bay: 40 Gigabit Ethernet port 1 or 10 Gigabit Ethernet ports 5 through 9
Top right bay: 40 Gigabit Ethernet port 3 or 10 Gigabit Ethernet ports 13 through 16

40 Gigabit Ethernet performance mode, 10 Gigabit Ethernet oversubscribed mode:

—Either of these combinations:

–Top left bay: 40 Gigabit Ethernet port 1
Right bays: eight 10 Gigabit Ethernet ports (13 through 20)

–Left bays: eight 10 Gigabit Ethernet ports (5 through 13)
Top right bay: 40 Gigabit Ethernet port 3

40 Gigabit Ethernet oversubscribed mode, 10 Gigabit Ethernet performance mode:

—Either of these combinations:

–Top left bay: four 10 Gigabit Ethernet ports (5 through 9)
Right bays: two 40 Gigabit Ethernet ports (3 and 4)

–Left bays: two 40 Gigabit Ethernet ports (1 and 2)
Top right bay: four 10 Gigabit Ethernet ports (13 through 16)

  • For more information about WS-X6904-40G, see these publications:

40 Gigabit Ethernet on Cisco Catalyst 6500 Series Switches: How It Works

40 Gigabit Ethernet Interface Module for Cisco Catalyst 6500 Series Switches Data Sheet

WS-X6908-10GE 8-Port 10-Gigabit Ethernet X2 Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6908-10G-XL
(Has WS-F6K-DFC4-EXL )
WS-X6908-10G
(Has WS-F6K-DFC4-E )

8-port 10-Gigabit Ethernet X2 module

With Supervisor Engine 2T-10GE

15.0(1)SY

  • Not supported with Supervisor Engine 720 or Supervisor Engine 720-10GE.
  • WS-X6908-10G and WS-X6908-10G-XL are the orderable product IDs.
  • The front panel is labeled WS-X6908-10GE.
  • Cisco IOS software commands display WS-X6908-10GE with either WS-F6K-DFC4-E or WS-F6K-DFC4-EXL .
  • dCEF2T
  • QoS port architecture (Rx/Tx): 8q4t/1p7q4t
  • Dual switch-fabric connections
    Fabric Channel #1: Ports 2, 3, 6, 8
    Fabric Channel #2: Ports 1, 4, 5, 7
  • Number of ports: 8
    Number of port groups: 8
    Port ranges per port group: 1 port in each group
  • In a 3-slot chassis, supported only with WS-C6503-E hardware revision 1.3 or higher.

WS-X6816-10T-2T, WS-X6716-10T 16-Port 10-Gigabit Ethernet Copper Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6816-10T-2TXL
(Has WS-F6K-DFC4-EXL )
WS-X6716-10T-3CXL
(Must be upgraded with WS-F6K-DFC4-EXL= )
WS-X6816-10T-2T
(Has WS-F6K-DFC4-E )
WS-X6716-10T-3C
(Must be upgraded with WS-F6K-DFC4-E= )

16-port 10-Gigabit Ethernet copper (RJ-45) module

With Supervisor Engine 2T-10GE

15.0(1)SY

WS-X6716-10T-3CXL
(WS-X6716-10T with
WS-F6700-DFC3CXL )
WS-X6716-10T-3C
(WS-X6716-10T with
WS-F6700-DFC3C )

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • The orderable product IDs are:

WS-X6816-10T-2TXL

WS-X6816-10T-2T

WS-X6716-10T-3CXL

WS-X6716-10T-3C

  • The front panel is labeled WS-X6716-10T.
  • Cisco IOS software commands display WS-X6716-10T with any DFC.
  • dCEF720
  • QoS port architecture (Rx/Tx):

: 1p7q2t/1p7q4t

Performance mode: 8q4t/1p7q4t

  • Dual switch-fabric connections
    Fabric Channel #1: ports 1–8
    Fabric Channel #2: ports 9–16
  • Number of ports: 16
    Number of port groups: 4
    Port ranges per port group: 1–4, 5–8, 9–12, 13–16
  • When not configured in oversubscription mode, supported in virtual switch links.
  • To configure port oversubscription, use the hw-module slot command.

WS-X6816-10G-2T, WS-X6716-10G 16-Port 10-Gigabit Ethernet X2 Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6816-10G-2TXL
(Has WS-F6K-DFC4-EXL )
WS-X6716-10G-3CXL
(Must be upgraded with
WS-F6K-DFC4-EXL= )
WS-X6816-10G-2T
(Has WS-F6K-DFC4-E )
WS-X6716-10G-3C
(Must be upgraded with
WS-F6K-DFC4-E= )

16-port 10-Gigabit Ethernet X2 module

With Supervisor Engine 2T-10GE

15.0(1)SY

WS-X6716-10G-3CXL
(WS-X6716-10G with
WS-F6700-DFC3CXL )
WS-X6716-10G-3C
(WS-X6716-10G with
WS-F6700-DFC3C )

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • The orderable product IDs are:

WS-X6816-10G-2TXL

WS-X6816-10G-2T

WS-X6716-10G-3CXL

WS-X6716-10G-3C

  • The front panel is labeled WS-X6716-10GE.
  • Cisco IOS software commands display WS-X6716-10GE with any DFC.
  • dCEF720
  • QoS port architecture (Rx/Tx):

: 1p7q2t/1p7q4t

Performance mode: 8q4t/1p7q4t

  • Dual switch-fabric connections
    Fabric Channel #1: ports 1–8
    Fabric Channel #2: ports 9–16
  • Number of ports: 16
    Number of port groups: 4
    Port ranges per port group: 1–4, 5–8, 9–12, 13–16
  • When not configured in oversubscription mode, supported in virtual switch links.
  • To configure port oversubscription, use the hw-module slot command.
  • With Supervisor Engine 720-10GE or Supervisor Engine 720 in a 13-slot chassis , supported only in slots 9 through 13 and does not power up in other slots.

WS-X6708-10GE 8-port 10-Gigabit Ethernet X2 Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6708-10G-3C
(WS-X6708-10GE with
WS-F6700-DFC3C )
WS-X6708-10G-3CXL
(WS-X6708-10GE with
WS-F6700-DFC3CXL )

8-port 10-Gigabit Ethernet X2 module

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • WS-X6708-10G-3C and WS-X6708-10G-3CXL are the orderable product IDs.
  • The front panel is labeled WS-X6708-10GE.
  • Cisco IOS software commands display WS-X6708-10GE with either WS-F6700-DFC3C or WS-F6700-DFC3CXL.
  • dCEF720
  • Supports egress multicast replication
  • QoS port architecture (Rx/Tx):

: 1p7q2t/1p7q4t

Performance mode: 8q4t/1p7q4t

Both modes support DSCP-based queueing

  • Dual switch-fabric connections
    Fabric Channel #1: Ports 2, 3, 6, 8
    Fabric Channel #2: Ports 1, 4, 5, 7
  • Number of ports: 8
    Number of port groups: 8
    Port ranges per port group: 1 port in each group
  • To configure WS-X6708-10GE port oversubscription, use the hw-module oversubscription command.
  • WS-X6708-10GE ports do not support VACL capture. ( CSCsb59015 )
  • In a 13-slot chassis , supported only in slots 9 through 13 and does not power up in other slots.

WS-X6704-10GE 4-Port 10-Gigabit Ethernet XENPAK Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6704-10G

4-port 10-Gigabit Ethernet XENPAK

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • WS-X6704-10GE requires one of the following:

With Supervisor Engine 2T-10GE:

WS-F6K-DFC4-AXL

WS-F6K-DFC4-A

With Supervisor Engine 720 or Supervisor Engine 720-10GE:

WS-F6700-DFC3CXL

WS-F6700-DFC3C

WS-F6700-DFC3BXL (not supported in virtual switch mode)

WS-F6700-DFC3B (not supported in virtual switch mode)

With any supervisor engine,

  • dCEF720 with a DFC or CEF720 with a WS-F6700-CFC .
  • Requires 512-MB DRAM with a WS-F6700-CFC ( CSCtk82279 ). See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12409.html

  • QoS port architecture (Rx/Tx): 8q8t/1p7q8t
  • Dual switch-fabric connections:
    Fabric Channel #1: Ports 3 and 4
    Fabric Channel #2: Ports 1 and 2
  • Number of ports: 4
    Number of port groups: 4
    Port ranges per port group: 1 port in each group
  • WS-X6704-10G is the orderable product ID.
  • The front panel is labeled WS-X6704-10GE.
  • Cisco IOS software commands display WS-X6704-10GE with any DFC.
  • On WS-X6704-10GE ports, STP BPDUs are not exempt from Traffic Storm Control multicast suppression. Do not configure multicast suppression on STP-protected WS-X6704-10GE ports that interconnect network devices. ( CSCsg86315 )
  • With Supervisor Engine 720-10GE or Supervisor Engine 720 in a 13-slot chassis , supported only in slots 9 through 13 and does not power up in other slots.

WS-X6502-10GE 1-port 10-Gigabit Ethernet Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6502-10GE

1-port 10-Gigabit Ethernet

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Optical Interface Module (OIM) for WS-X6502-10GE
WS-G6488

10GBASE-LR serial 1310 nm long-reach OIM

WS-G6483

10GBASE-ER serial 1550 nm extended-reach OIM

  • Not supported in virtual switch mode.
  • dCEF256 with a DFC
  • QoS port architecture (Rx/Tx): 1p1q8t/1p2q1t
  • Number of ports: 1
    Number of port groups: 1
    Port ranges per port group: 1 port in 1 group
  • Use with a DFC requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

Cisco Catalyst 6880-X Series Extensible Fixed Aggregation Switches

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
C6880-X-LE

16 10-Gigabit (SFP+)/1-Gigabit ports (SFP), four port card slots, two power supply slots. It supports standard FIB/ACL/NetFlow tables.

15.1(2)SY1

C6880-X

16 10-Gigabit (SFP+)/1-Gigabit ports (SFP), four port card slots, two power supply slots. It supports large FIB/ACL/NetFlow tables.

C6880-X-LE-16P10G

Multi rate port card with standard tables. This module has 16 10-Gigabit or 1-Gigabit module slots which support 1-Gigabit SFPs or 10-Gigabit SFP+ modules.

15.1(2)SY2

C6880-X-16P10G

Multi rate port card with XL tables. This module has 16 10-Gigabit or 1-Gigabit module slots which support 1-Gigabit SFPs or 10-Gigabit SFP+s modules.

Note See these publications for more information:

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6880-x-switch/data_sheet_c78-728228.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6880-x-switch/white_paper_c11-728540.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6880-x-switch/white_paper_c11-728541.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T.html

Cisco Catalyst 6807-XL Modular Switch

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
C6807-XL

7-slot modular chassis.

The switch supports redundant power supply modules (AC-input), redundant supervisor engines, fan-tray, power supply convertor modules, clock modules, and voltage termination enhanced (VTT-E) modules

15.1(2)SY3

Note See these publications for more information:

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6807-xl-switch/data_sheet_c78-728229.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6807-xl-switch/white_paper_c11-728264.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T.html

Instant Access Catalyst 6800ia Series Switches

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
Catalyst C6800IA-48FPDR

48-port 10/100/1000 RJ-45 PoE-capable Ethernet
(24 ports up to 30W, 48 ports up to 15.4W, 740W total; dual power supplies)

Note

  • ISSU upgrade or downgrade is not supported with C6800IA-48FPDR.
  • C6800IA-48FPDR does not support SNMP traps.

With Supervisor Engine 2T-10GE

15.1(2)SY3

Catalyst C6800IA-48FPD

48-port 10/100/1000 RJ-45 PoE-capable Ethernet
(24 ports up to 30W, 48 ports up to 15.4W, 740W total)

Catalyst C6800IA-48TD

48-port 10/100/1000 RJ-45 Ethernet

With Supervisor Engine 2T-10GE

15.1(2)SY

Note See these publications for more information:

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800ia-switch/data_sheet_c78-728230.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800ia-switch/white_paper_c11-728265.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6800ia/hardware/installation/guide/b_c6800ia_hig.html

WS-X6848-SFP-2T, WS-X6748-SFP 48-Port Gigabit Ethernet SFP Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6848-SFP-2TXL
(has WS-F6K-DFC4-AXL )
WS-X6848-SFP-2T
(has WS-F6K-DFC4-A )
WS-X6748-SFP
(with WS-F6700-CFC , or upgraded with WS-F6K-DFC4-AXL or WS-F6K-DFC4-A )

48-port Gigabit Ethernet SFP

With Supervisor Engine 2T-10GE

15.0(1)SY

WS-X6748-SFP
(with WS-F6700-DFC3CXL , WS-F6700-DFC3C ,
WS-F6700-DFC3BXL (not supported in virtual switch mode)
WS-F6700-DFC3B (not supported in virtual switch mode)
or
WS-F6700-CFC )

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF720 with a DFC or CEF720 with a WS-F6700-CFC .
  • QoS architecture: 2q8t/1p3q8t
  • Dual switch-fabric connections
    Fabric Channel #1: Ports 2, 4, 6, 8, 10, 12,
    14, 16, 18, 20, 22, 24, 26, 28, 30, 32, 34,
    36, 38, 40, 42, 44, 46, 48
    Fabric Channel #2: Ports 1, 3, 5, 7, 9, 11,
    13, 15, 17, 19, 21, 23, 25, 27, 29, 31, 33,
    35, 37, 39, 41, 43, 45, 47
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group:
    1, 3, 5, 7, 9, 11, 13, 15, 17, 19, 21, 23
    2, 4, 6, 8, 10, 12, 14, 16, 18, 20, 22, 24
    25, 27, 29, 31, 33, 35, 37, 39, 41, 43, 45, 47
    26, 28, 30, 32, 34, 36, 38, 40, 42, 44, 46, 48
  • On WS-X6848-SFP-2T and WS-X6748-SFP ports, STP BPDUs are not exempt from Traffic Storm Control multicast suppression. Do not configure multicast suppression on STP-protected WS-X6848-SFP-2T or WS-X6748-SFP ports that interconnect network devices.
  • With Supervisor Engine 720-10GE or Supervisor Engine 720 in a 13-slot chassis , supported only in slots 9 through 13 and does not power up in other slots.

WS-X6824-SFP-2T, WS-X6724-SFP 24-Port Gigabit Ethernet SFP Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6824-SFP-2TXL
(Has WS-F6K-DFC4-AXL )
WS-X6824-SFP-2T
(Has WS-F6K-DFC4-A )
WS-X6724-SFP
(with WS-F6700-CFC , or upgraded with WS-F6K-DFC4-AXL or WS-F6K-DFC4-A )

24-port Gigabit Mbps Ethernet SFP

With Supervisor Engine 2T-10GE

15.0(1)SY

WS-X6724-SFP
(with WS-F6700-DFC3CXL , WS-F6700-DFC3C ,
WS-F6700-DFC3BXL (not supported in virtual switch mode)
WS-F6700-DFC3B (not supported in virtual switch mode)
or
WS-F6700-CFC )

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF720 with a DFC or CEF720 with a WS-F6700-CFC .
  • QoS architecture: 2q8t/1p3q8t
  • Number of ports: 24
    Number of port groups: 2
    Port ranges per port group: 1–12, 13–24
  • On WS-X6824-SFP-2T and WS-X6724-SFP ports, STP BPDUs are not exempt from Traffic Storm Control multicast suppression. Do not configure multicast suppression on STP-protected WS-X6824-SFP-2T or WS-X6724-SFP ports that interconnect network devices.

WS-X6816-GBIC 16-port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6816-GBIC

16-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256
  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Dual switch-fabric connections
    Fabric Channel #1: Ports 1–8
    Fabric Channel #2: Ports 9–16
  • Number of ports: 16
    Number of port groups: 2
    Port ranges per port group: 1–8, 9–16
  • WS-X6816-GBIC requires one of these:

  • Requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

  • In a 13-slot chassis , supported only in slots 9 through 13 and does not power up in other slots.

WS-X6516A-GBIC 16-Port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6516A-GBIC

16-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC
  • CEF256
  • Supports egress multicast replication
  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Number of ports: 16
    Number of port groups: 2
    Port ranges per port group: 1–8, 9–16
  • Requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

WS-X6516-GBIC 16-Port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6516-GBIC

16-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC
  • CEF256
  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Number of ports: 16
    Number of port groups: 2
    Port ranges per port group: 1–8, 9–16
  • Requires DFC ROMMON version 12.2(18r)S1 or later. To display the switching module ROMMON version, enter the remote command module module_slot_number show version | include ROM command. To upgrade the switching module ROMMON, see this document:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/rommon/OL_6010.html

  • Supervisor Engine 720 supports a DFC3 on these WS-X6516-GBIC hardware revisions:

Lower than 5.0

5.5 and higher

  • Supervisor Engine 720 does not support a DFC3 on WS-X6516-GBIC hardware revisions 5.0 through 5.4. With a Supervisor Engine 720 and with a DFC3 installed, WS-X6516-GBIC hardware revisions 5.0 through 5.4 do not power up.
  • With a Supervisor Engine 720 but without a DFC3, WS-X6516-GBIC hardware revisions 5.0 through 5.4 operate in bus mode.
  • See external field notice 24494 for more information:

http://www.cisco.com/c/en/us/support/docs/field-notices/200/fn24494.html

WS-X6416-GBIC 16-port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6416-GBIC

16-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Number of ports: 16
    Number of port groups: 2
    Port ranges per port group: 1–8, 9–16

WS-X6408A-GBIC 8-port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6408A-GBIC

8-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Number of ports: 8
    Number of port groups: 1
    Port ranges per port group: 1–8

WS-X6408-GBIC 8-port Gigabit Ethernet GBIC Switching Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6408-GBIC

8-port Gigabit Ethernet GBIC

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • Number of ports: 8
    Number of port groups: 1
    Port ranges per port group: 1–8

WS-X6848-TX-2T, WS-X6748-GE-TX

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6848-TX-2TXL
(has WS-F6K-DFC4-AXL )
WS-X6848-TX-2T
(has WS-F6K-DFC4-A )
WS-X6748-GE-TX

48-port 10/100/1000 RJ-45

With Supervisor Engine 2T-10GE

15.0(1)SY

WS-X6748-GE-TX

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF720 with a DFC or CEF720 with a WS-F6700-CFC .
  • WS-X6704-10GE requires one of the following:

With Supervisor Engine 2T-10GE:

WS-F6K-DFC4-AXL

WS-F6K-DFC4-A

With Supervisor Engine 720 or Supervisor Engine 720-10GE:

WS-F6700-DFC3CXL

WS-F6700-DFC3C

WS-F6700-DFC3BXL (not supported in virtual switch mode)

WS-F6700-DFC3B (not supported in virtual switch mode)

With any supervisor engine,

  • QoS architecture: 2q8t/1p3q8t
  • Dual switch-fabric connections
    Fabric Channel #1: Ports 25–48
    Fabric Channel #2: Ports 1–24
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group: 1–12, 13–24, 25–36, 37–48
  • On WS-X6848-TX-2T and WS-X6748-GE-TX ports, STP BPDUs are not exempt from Traffic Storm Control multicast suppression. Do not configure multicast suppression on STP-protected WS-X6848-TX-2T or WS-X6748-GE-TX ports that interconnect network devices.
  • With Supervisor Engine 720-10GE or Supervisor Engine 720 in a 13-slot chassis , WS-X6748-GE-TX is supported only in slots 9 through 13 and does not power up in other slots.

WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6548-GE-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6548-GE-TX
WS-X6548V-GE-TX
WS-X6548-GE-45AF

48-port 10/100/1000 Mbps

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Supports more than 1 Gbps of traffic per EtherChannel on the WS-X6548-GE-TX (and voice-power daughtercard equipped) switching modules.
  • WS-X6548-GE-TX (and voice-power daughtercard equipped) switching modules do not support these features:

Jumbo frames

802.1Q tunneling

Traffic storm control

  • RJ-45
  • CEF256
  • WS-X6548-GE-TX supports:

  • WS-X6548V-GE-TX has WS-F6K-VPWR-GE
  • WS-X6548-GE-45AF has WS-F6K-GE48-AF or WS-F6K-48-AF
  • With WS-F6K-GE48-AF , supports up to 45 ports of ePoE (16.8W).
  • QoS port architecture (Rx/Tx): 1q2t/1p2q2t
  • Number of ports: 48
    Number of port groups: 2
    Port ranges per port group: 1–24, 25–48
  • The aggregate bandwidth of each set of 8 ports (1–8, 9–16, 17–24, 25–32, 33–40, and 41–48) is 1 Gbps.

WS-X6148E-GE-45AT

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6148E-GE-45AT

48-port 10/100/1000 Mbps

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 2T-10GE in VSS mode

15.1(1)SY

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • RJ-45
  • WS-X6148E-GE-45AT supports up to 45 ports of ePoE (16.8W).
  • QoS port architecture (Rx/Tx): 1q2t/1p3q8t
  • Number of ports: 48
    Number of port groups: 6
    Port ranges per port group: 1–8, 9–16, 17–24, 25–32, 33–40, 41–48
  • The aggregate bandwidth of each set of 8 ports (1–8, 9–16, 17–24, 25–32, 33–40, and 41–48) is 1 Gbps.
  • WS-X6148E-GE-45AT does not support traffic storm control

WS-X6148A-GE-TX, WS-X6148A-GE-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6148A-GE-TX
WS-X6148A-GE-45AF

48-port 10/100/1000 Mbps

With Supervisor Engine 2T-10GE (not supported in VSS mode)

15.0(1)SY

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • RJ-45
  • WS-X6148A-GE-TX supports WS-F6K-GE48-AF or WS-F6K-48-AF
  • WS-X6148A-GE-45AF has WS-F6K-GE48-AF or WS-F6K-48-AF
  • With WS-F6K-GE48-AF , supports up to 45 ports of ePoE (16.8W).
  • QoS port architecture (Rx/Tx): 1q2t/1p3q8t
  • Number of ports: 48
    Number of port groups: 6
    Port ranges per port group: 1–8, 9–16, 17–24, 25–32, 33–40, 41–48
  • The aggregate bandwidth of each port group is 1 Gbps.
  • Does not support traffic storm control.

WS-X6148-GE-TX, WS-X6148V-GE-TX, WS-X6148-GE-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6148-GE-TX
WS-X6148V-GE-TX
WS-X6148-GE-45AF

48-port 10/100/1000 Mbps

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • RJ-45
  • WS-X6148-GE-TX supports:

  • WS-X6148V-GE-TX has WS-F6K-VPWR-GE
  • WS-X6148-GE-45AF has WS-F6K-GE48-AF or WS-F6K-48-AF
  • With WS-F6K-GE48-AF , supports up to 45 ports of ePoE (16.8W).
  • QoS port architecture (Rx/Tx): 1q2t/1p2q2t
  • Number of ports: 48
    Number of port groups: 2
    Port ranges per port group: 1–24, 25–48
  • The aggregate bandwidth of each port group is 1 Gbps.
  • WS-X6148-GE-TX, WS-X6148V-GE-TX, and WS-X6148-GE-45AF do not support these features:

More than 1 Gbps of traffic per EtherChannel

Jumbo frames

802.1Q tunneling

Traffic storm control

WS-X6516-GE-TX

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6516-GE-TX

16-port 10/100/1000BASE-T

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC
  • CEF256
  • QoS port architecture (Rx/Tx): 1p1q4t / 1p2q2t
  • Number of ports: 16
    Number of port groups: 2
    Port ranges per port group: 1–8, 9–16

100MB Ethernet Switching Modules

WS-X6148-FE-SFP

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6148-FE-SFP

48-port 100BASE-FX

With Supervisor Engine 2T-10GE (not supported in VSS mode)

15.0(1)SY

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Requires Fast Ethernet SFPs
  • QoS port architecture (Rx/Tx): 1p1q4t/1p3q8t
  • Number of ports: 48
    Number of port groups: 3
    Port ranges per port group: 1–16, 17–32, and 33–48
  • Does not support traffic storm control.

WS-X6524-100FX-MM

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6524-100FX-MM

24-port 100FX Ethernet multimode

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC
  • CEF256
  • QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t
  • Number of ports: 24
    Number of port groups: 1
    Port ranges per port group: 1–24

WS-X6324-100FX-MM

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6324-100FX-MM

24-port 100FX Ethernet

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Single mode and multimode MT-RJ
  • 128-KB per-port packet buffers
  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • Number of ports: 24
    Number of port groups: 2
    Port ranges per port group: 1–12, 13–24

WS-X6548-RJ-45

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6548-RJ-45

48-port 10/100TX RJ-45

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC or CEF256
  • QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t
  • Number of ports: 48
    Number of port groups: 1
    Port ranges per port group: 1–48

WS-X6548-RJ-21

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6548-RJ-21

48-port 10/100TX RJ-21

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • dCEF256 with a DFC or CEF256
  • QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t
  • Number of ports: 48
    Number of port groups: 1
    Port ranges per port group: 1–48

WS-X6148X2-RJ-45, WS-X6148X2-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6148X2-RJ-45
WS-X6148X2-45AF

96-port 10/100TX RJ-45

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-X6196-RJ-21, WS-X6196-21AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6196-RJ-21
WS-X6196-21AF

96-port 10/100TX RJ-21

With Supervisor Engine 2T-10GE (not supported in VSS mode)

15.0(1)SY1

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Upgrade to Release15.0(1)SY1 or later before installing WS-X6196-21AF (see the “EFSU Compatibility” section).
  • QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t
  • WS-X6196-RJ-21 supports WS-F6K-FE48X2-AF
  • WS-X6196-21AF has WS-F6K-FE48X2-AF

WS-X6348-RJ-45, WS-X6348-RJ-45V

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6348-RJ-45
WS-X6348-RJ-45V

48-port 10/100TX RJ-45

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Not supported in VSS mode.
  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • WS-X6348-RJ-45 supports WS-F6K-VPWR
  • WS-X6348-RJ-45V has WS-F6K-VPWR
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group: 1–12, 13–24, 25–36, 37–48

WS-X6348-RJ-21V

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6348-RJ-21V

48-port 10/100TX RJ-21

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Not supported in VSS mode.
  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • Has WS-F6K-VPWR
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group: 1–12, 13–24, 25–36, 37–48

WS-X6148A-RJ-45, WS-X6148A-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-X6148A-RJ-45
WS-X6148A-45AF

48-port 10/100TX RJ-45

With Supervisor Engine 2T-10GE (not supported in VSS mode)

15.0(1)SY

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1p1q4t/1p3q8t
  • WS-X6148A-RJ-45 supports WS-F6K-GE48-AF or WS-F6K-48-AF
  • WS-X6148A-45AF has WS-F6K-GE48-AF or WS-F6K-48-AF
  • Number of ports: 48
    Number of port groups: 6
    Port ranges per port group: 1–8, 9–16, 17–24, 25–32, 33–40, 41–48

WS-X6148-RJ-45, WS-X6148-RJ45V, WS-X6148-45AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6148-RJ-45
WS-X6148-RJ45V
WS-X6148-45AF

48-port 10/100TX RJ-45

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • WS-X6148-RJ-45 supports WS-F6K-VPWR
  • WS-X6148-RJ-45V has WS-F6K-VPWR
  • WS-X6148-45AF has WS-F6K-48-AF
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group: 1–12, 13–24, 25–36, 37–48

WS-X6148-RJ-21, WS-X6148-RJ21V, WS-X6148-21AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-X6148-RJ-21
WS-X6148-RJ21V
WS-X6148-21AF

48-port 10/100TX RJ-21

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • QoS port architecture (Rx/Tx): 1q4t / 2q2t
  • WS-X6148-RJ-21 supports WS-F6K-VPWR
  • WS-X6148-RJ-21V has WS-F6K-VPWR
  • WS-X6148-21AF has WS-F6K-48-AF
  • Number of ports: 48
    Number of port groups: 4
    Port ranges per port group: 1–12, 13–24, 25–36, 37–48

WS-F6K-GE48-AF, WS-F6K-48-AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-GE48-AF
WS-F6K-48-AF

IEEE 802.3af PoE daughtercard for:

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • WS-F6K-GE48-AF and WS-F6K-48-AF are not FRUs for these switching modules:

(replace with WS-X6148-45AF-UG=). or (replace with WS-X6148-45AF-UG=). (replace with WS-X6148-45AF-UG=).

(replace with WS-X6148-21AF-UG=). or (replace with WS-X6148-21AF-UG=). (replace with WS-X6148-21AF-UG=).

  • With WS-X6548-GE-TX, WS-X6148-GE-TX, and WS-X6148A-GE-TX, supports up to 45 ports of ePoE (16.8W).

WS-F6K-FE48X2-AF

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-FE48X2-AF

IEEE 802.3af PoE daughtercard for WS-X6148X2-RJ-45 and WS-X6196-RJ-21

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-F6K-VPWR-GE

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-VPWR-GE

Prestandard PoE daughtercard for WS-X6548-GE-TX and WS-X6148-GE-TX

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-F6K-VPWR

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-F6K-VPWR

Prestandard PoE daughtercard for:

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

CFP Modules

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
CFP-40G-LR4

40GBASE-LR4

15.0(1)SY1

CFP-40G-SR4

40GBASE-SR4

15.0(1)SY1

CVR-CFP-4SFP10G

FourX coverter to convert each 40GE port into 4 10GE SFP+ ports

15.0(1)SY1

X2 Modules


NoteWS-X6716-10G and WS-X6708-10GE do not support X2 modules that are labeled with a number that ends with -01. (This restriction does not apply to X2-10GB-LRM.)

  • All X2 modules shipped since WS-X6716-10G became available provide EMI compliance with WS-X6816-10G and WS-X6716-10G.
  • Some X2 modules shipped before WS-X6716-10G became available might not provide EMI compliance with WS-X6816-10G and WS-X6716-10G. See the information listed for each type of X2 module in the following table.
  • For information about X2 modules, see the Cisco 10GBASE X2 Modules data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/10-gigabit-modules/product_data_sheet0900aecd801f92aa.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
CVR-X2-SFP10G

10G X2 to SFP+ Converter

15.0(1)SY

DWDM-X2-60.61=

10GBASE-DWDM 1560.61 nm X2 (100-GHz ITU grid)

ITU 21

15.0(1)SY

DWDM-X2-59.79=

10GBASE-DWDM 1559.79 nm X2 (100-GHz ITU grid)

ITU 22

15.0(1)SY

DWDM-X2-58.98=

10GBASE-DWDM 1558.98 nm X2 (100-GHz ITU grid)

ITU 23

15.0(1)SY

DWDM-X2-58.17=

10GBASE-DWDM 1558.17 nm X2 (100-GHz ITU grid)

ITU 24

15.0(1)SY

DWDM-X2-56.55=

10GBASE-DWDM 1556.55 nm X2 (100-GHz ITU grid)

ITU 26

15.0(1)SY

DWDM-X2-55.75=

10GBASE-DWDM 1555.75 nm X2 (100-GHz ITU grid)

ITU 27

15.0(1)SY

DWDM-X2-54.94=

10GBASE-DWDM 1554.94 nm X2 (100-GHz ITU grid)

ITU 28

15.0(1)SY

DWDM-X2-54.13=

10GBASE-DWDM 1554.13 nm X2 (100-GHz ITU grid)

ITU 29

15.0(1)SY

DWDM-X2-52.52=

10GBASE-DWDM 1552.52 nm X2 (100-GHz ITU grid)

ITU 31

15.0(1)SY

DWDM-X2-51.72=

10GBASE-DWDM 1551.72 nm X2 (100-GHz ITU grid)

ITU 32

15.0(1)SY

DWDM-X2-50.92=

10GBASE-DWDM 1550.92 nm X2 (100-GHz ITU grid)

ITU 33

15.0(1)SY

DWDM-X2-50.12=

10GBASE-DWDM 1550.12 nm X2 (100-GHz ITU grid)

ITU 34

15.0(1)SY

DWDM-X2-48.51=

10GBASE-DWDM 1548.51 nm X2 (100-GHz ITU grid)

ITU 36

15.0(1)SY

DWDM-X2-47.72=

10GBASE-DWDM 1547.72 nm X2 (100-GHz ITU grid)

ITU 37

15.0(1)SY

DWDM-X2-46.92=

10GBASE-DWDM 1546.92 nm X2 (100-GHz ITU grid)

ITU 38

15.0(1)SY

DWDM-X2-46.12=

10GBASE-DWDM 1546.12 nm X2 (100-GHz ITU grid)

ITU 39

15.0(1)SY

DWDM-X2-44.53=

10GBASE-DWDM 1544.53 nm X2 (100-GHz ITU grid)

ITU 41

15.0(1)SY

DWDM-X2-43.73=

10GBASE-DWDM 1543.73 nm X2 (100-GHz ITU grid)

ITU 42

15.0(1)SY

DWDM-X2-42.94=

10GBASE-DWDM 1542.94 nm X2 (100-GHz ITU grid)

ITU 43

15.0(1)SY

DWDM-X2-42.14=

10GBASE-DWDM 1542.14 nm X2 (100-GHz ITU grid)

ITU 44

15.0(1)SY

DWDM-X2-40.56=

10GBASE-DWDM 1540.56 nm X2 (100-GHz ITU grid)

ITU 46

15.0(1)SY

DWDM-X2-39.77=

10GBASE-DWDM 1539.77 nm X2 (100-GHz ITU grid)

ITU 47

15.0(1)SY

DWDM-X2-38.98=

10GBASE-DWDM 1538.98 nm X2 (100-GHz ITU grid)

ITU 48

15.0(1)SY

DWDM-X2-38.19=

10GBASE-DWDM 1538.19 nm X2 (100-GHz ITU grid)

ITU 49

15.0(1)SY

DWDM-X2-36.61=

10GBASE-DWDM 1536.61 nm X2 (100-GHz ITU grid)

ITU 51

15.0(1)SY

DWDM-X2-35.82=

10GBASE-DWDM 1535.82 nm X2 (100-GHz ITU grid)

ITU 52

15.0(1)SY

DWDM-X2-35.04=

10GBASE-DWDM 1535.04 nm X2 (100-GHz ITU grid)

ITU 53

15.0(1)SY

DWDM-X2-34.25=

10GBASE-DWDM 1534.25 nm X2 (100-GHz ITU grid)

ITU 54

15.0(1)SY

DWDM-X2-32.68=

10GBASE-DWDM 1532.68 nm X2 (100-GHz ITU grid)

ITU 56

15.0(1)SY

DWDM-X2-31.90=

10GBASE-DWDM 1531.90 nm X2 (100-GHz ITU grid)

ITU 57

15.0(1)SY

DWDM-X2-31.12=

10GBASE-DWDM 1531.12 nm X2 (100-GHz ITU grid)

ITU 58

15.0(1)SY

DWDM-X2-30.33=

10GBASE-DWDM 1530.33 nm X2 (100-GHz ITU grid)

ITU 59

15.0(1)SY

X2-10GB-T

10GBASE-T X2 Module for CAT6A/CAT7 copper cable

15.1(1)SY

X2-10GB-ZR

10GBASE-ZR X2 Module for SMF

15.0(1)SY

X2-10GB-CX4

10GBASE for CX4 (copper) cable

15.0(1)SY

X2-10GB-ER

10GBASE-ER Serial 1550-nm extended-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

Note X2-10GB-ER modules labeled with a number that ends with -02 do not provide EMI compliance with WS-X6716-10G.

15.0(1)SY

X2-10GB-LR

10GBASE-LR Serial 1310-nm long-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

Note X2-10GB-LR modules labeled with a number that ends with -02 or -03 do not provide EMI compliance with WS-X6716-10G.

15.0(1)SY

X2-10GB-LRM

10GBASE-LRM for FDDI-grade multimode fiber (MMF)

Note Not supported by the show idprom command. (CSCsj35671)

15.0(1)SY

X2-10GB-LX4

10GBASE-LX4 Serial 1310-nm multimode (MMF)

Note

  • See field notice 62840 for information about unsupported 10GBASE-LX4 modules:

http://www.cisco.com/c/en/us/support/docs/field-notices/misc/FN62840.html

15.0(1)SY

X2-10GB-SR

10GBASE-SR Serial 850-nm short-reach multimode (MMF)

15.0(1)SY

10 GE SFP+ Modules

 

Product ID

(append “” for spares)

Product Description
Minimum
Software
Version
SFP-10G-ZR

10GBASE-ZR SFP+ for 1550 nm SMF

15.1(2)SY3

DWDM-SFP10G-61.41

10GBASE-DWDM 1561.41 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-60.61

10GBASE-DWDM 1560.61 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-59.79

10GBASE-DWDM 1559.79 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-58.98

10GBASE-DWDM 1558.98 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-58.17

10GBASE-DWDM 1558.17 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-57.36

10GBASE-DWDM 1557.36 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-56.55

10GBASE-DWDM 1556.55 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-55.75

10GBASE-DWDM 1555.75 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-54.94

10GBASE-DWDM 1554.94 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-54.13

10GBASE-DWDM 1554.13 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-53.33

10GBASE-DWDM 1553.33 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-52.52

10GBASE-DWDM 1552.52 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-51.72

10GBASE-DWDM 1551.72 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-50.92

10GBASE-DWDM 1550.92 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-50.12

10GBASE-DWDM 1550.12 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-49.32

10GBASE-DWDM 1549.32 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-48.51

10GBASE-DWDM 1548.51 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-47.72

10GBASE-DWDM 1547.72 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-46.92

10GBASE-DWDM 1546.92 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-46.12

10GBASE-DWDM 1546.12 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-45.32

10GBASE-DWDM 1545.32 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-44.53

10GBASE-DWDM 1544.53 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-43.73

10GBASE-DWDM 1543.73 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-42.94

10GBASE-DWDM 1542.94 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-42.14

10GBASE-DWDM 1542.14 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-41.35

10GBASE-DWDM 1541.35 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-40.56

10GBASE-DWDM 1540.56 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-39.77

10GBASE-DWDM 1539.77 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-38.98

10GBASE-DWDM 1538.98 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-38.19

10GBASE-DWDM 1538.19 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-37.40

10GBASE-DWDM 1537.40 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-36.61

10GBASE-DWDM 1536.61 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-35.82

10GBASE-DWDM 1535.82 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-35.04

10GBASE-DWDM 1535.04 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-34.25

10GBASE-DWDM 1534.25 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-33.47

10GBASE-DWDM 1533.47 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-32.68

10GBASE-DWDM 1532.68 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-31.90

10GBASE-DWDM 1531.90 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-31.12

10GBASE-DWDM 1531.12 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

DWDM-SFP10G-30.33

10GBASE-DWDM 1530.33 nm SFP+ (100-GHz ITU grid)

15.1(2)SY

SFP-10G-LR

10GBASE-LR for 1310 nm SMF

15.0(1)SY1

SFP-10G-ER

10GBASE-ER for 1550 nm SMF

15.0(1)SY1

SFP-10G-LRM

10GBASE-LRM 1310 nm MMF and SMF

15.0(1)SY

SFP-10G-SR

10GBASE-SR 850 nm MMF

15.0(1)SY

SFP-H10GB-CU1M

1m Twinax cable, passive, 30AWG cable assembly

15.0(1)SY

SFP-H10GB-CU3M

3m Twinax cable, passive, 30AWG cable assembly

15.0(1)SY

SFP-H10GB-CU5M

5m Twinax cable, passive, 24AWG cable assembly

15.0(1)SY

XENPAKs


Note • For information about DWDM XENPAKs, see the Cisco 10GBase DWDM XENPAK Modules data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/dwdm-transceiver-modules/product_data_sheet0900aecd801f9333.html

  • For information about other XENPAKs, see the Cisco 10GBASE XENPAK Modules data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-6500-series-supervisor-engine-720/product_data_sheet09186a008007cd00.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
XENPAK-10GB-LRM

10GBASE-LRM XENPAK Module for MMF

Note Not supported by the show idprom command. (CSCsl21260)

15.0(1)SY

DWDM-XENPAK

10GBASE dense wavelength-division multiplexing (DWDM) 100-GHz ITU grid

15.0(1)SY

WDM-XENPAK-REC

10GBASE receive-only wavelength division multiplexing (WDM)

15.0(1)SY

XENPAK-10GB-CX4

10GBASE for CX4 (copper) cable; uses Infiniband connectors

15.0(1)SY

XENPAK-10GB-ER

10GBASE-ER Serial 1550-nm extended-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

Note XENPAK-10GB-ER units with Part No. 800-24557-01 are not supported, as described in this external field notice (CSCee47030):

http://www.cisco.com/c/en/us/support/docs/field-notices/200/fn29736.html

15.0(1)SY

XENPAK-10GB-ER+

10GBASE-ER Serial 1550-nm extended-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

15.0(1)SY

XENPAK-10GB-LR

10GBASE-LR Serial 1310-nm long-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

15.0(1)SY

XENPAK-10GB-LR+

10GBASE-LR Serial 1310-nm long-reach, single-mode fiber (SMF), dispersion-shifted fiber (DSF)

15.0(1)SY

XENPAK-10GB-LW

10GBASE-LW XENPAK Module with WAN PHY for SMF

Note XENPAK-10GB-LW operates at an interface speed compatible with SONET/SDH OC-192/STM-64. XENPAK-10GB-LW links might go up and down if the data rate exceeds 9Gbs. (CSCsi58211)

15.0(1)SY

XENPAK-10GB-LX4

10GBASE-LX4 Serial 1310-nm multimode (MMF)

15.0(1)SY

XENPAK-10GB-SR

10GBASE-SR Serial 850-nm short-reach multimode (MMF)

15.0(1)SY

XENPAK-10GB-ZR

10GBASE for any SMF type

15.0(1)SY

Small Form-Factor Pluggable (SFP) Modules

Gigabit Ethernet SFPs


Note • For information about coarse wavelength-division multiplexing (CWDM) SFPs, see the Cisco CWDM GBIC and SFP Solutions data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/cwdm-transceiver-modules/product_data_sheet09186a00801a557c.html

  • For information about DWDM SFPs, see the Cisco CWDM GBIC and SFP Solutions data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/dwdm-transceiver-modules/product_data_sheet0900aecd80582763.html

  • See the “Unsupported Hardware” section for information about unsupported DWDM-SFPs.
  • For information about other SFPs, see the Cisco SFP Optics For Gigabit Ethernet Applications data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/gigabit-ethernet-gbic-sfp-modules/product_data_sheet0900aecd8033f885.html


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
GLC-BX-D

1000BASE-BX10 SFP module for single-strand SMF, 1490-nm TX/1310-nm RX wavelength

15.0(1)SY

GLC-BX-U

1000BASE-BX10 SFP module for single-strand SMF, 1310-nm TX/1490-nm RX wavelength

15.0(1)SY

GLC-LH-SMD
GLC-LH-SM

1000BASE-LX/LH SFP

Note Supported with WS-X6904-40G-2T in Release 15.1(1)SY1 and later releases.

15.0(1)SY

GLC-SX-MMD
GLC-SX-MM

1000BASE-SX SFP

Note Supported with WS-X6904-40G-2T in Release 15.1(1)SY1 and later releases.

15.0(1)SY

GLC-T

1000BASE-T 10/100/1000 SFP module

Note

  • Supported only at 1000 Mbps.
  • Supported with WS-X6904-40G-2T in Release 15.1(1)SY1 and later releases.

15.0(1)SY

GLC-ZX-SM

1000BASE-ZX SFP module

15.0(1)SY

CWDM-SFP-1470

CWDM 1470-nm (Gray) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1490

CWDM 1490-nm (Violet) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1510

CWDM 1510-nm (Blue) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1530

CWDM 1530-nm (Green) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1550

CWDM 1550-nm (Yellow) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1570

CWDM 1570-nm (Orange) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1590

CWDM 1590-nm (Red) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

CWDM-SFP-1610

CWDM 1610-nm (Brown) Gigabit Ethernet, 1 and 2 Gb Fibre Channel SFP module

15.0(1)SY

DWDM-SFP-5817

1000BASE-DWDM 1558.17 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5252

1000BASE-DWDM 1552.52 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5172

1000BASE-DWDM 1551.72 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5012

1000BASE-DWDM 1550.12 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4692

1000BASE-DWDM 1546.92 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4373

1000BASE-DWDM 1543.73 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4214

1000BASE-DWDM 1542.14 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3977

1000BASE-DWDM 1539.77 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3898

1000BASE-DWDM 1538.98 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3582

1000BASE-DWDM 1535.82 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3504

1000BASE-DWDM 1535.04 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-6061

1000BASE-DWDM 1560.61 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5979

1000BASE-DWDM 1559.79 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5898

1000BASE-DWDM 1558.98 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5655

1000BASE-DWDM 1556.55 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5575

1000BASE-DWDM 1555.75 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5494

1000BASE-DWDM 1554.94 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5413

1000BASE-DWDM 1554.13 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-5092

1000BASE-DWDM 1550.92 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4851

1000BASE-DWDM 1548.51 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4772

1000BASE-DWDM 1547.72 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4612

1000BASE-DWDM 1546.12 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4453

1000BASE-DWDM 1544.53 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4294

1000BASE-DWDM 1542.94 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-4056

1000BASE-DWDM 1540.56 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3819

1000BASE-DWDM 1538.19 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3661

1000BASE-DWDM 1536.61 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3425

1000BASE-DWDM 1534.25 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3268

1000BASE-DWDM 1532.68 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3190

1000BASE-DWDM 1531.90 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3112

1000BASE-DWDM 1531.12 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

DWDM-SFP-3033

1000BASE-DWDM 1530.33 nm SFP (100-GHz ITU grid) SFP module

15.0(1)SY

Fast Ethernet SFPs


Note • The CAT6000-VS-S720-10G/MSFC3 and WS-X6148-FE-SFP supports Fast Ethernet SFPs.

  • For information about Fast Ethernet SFPs, see the Cisco 100BASE-X SFP For Fast Ethernet SFP Ports data sheet:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/fast-ethernet-sfp-modules/product_data_sheet0900aecd801f931c.html

  • GLC-GE-100FX Fast Ethernet SFPs are not supported.


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
GLC-FE-100BX-U

100BASE-BX10-U SFP

15.0(1)SY

GLC-FE-100BX-D

100BASE-BX10-D SFP

GLC-FE-100EX

100BASEEX SFP

GLC-FE-100ZX

100BASEZX SFP

GLC-FE-100FX

100BASEFX SFP

GLC-FE-100LX

100BASELX SFP

Gigabit Interface Converters (GBICs)


Note The support listed in this section applies to all modules that use GBICs.


 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WDM-GBIC-REC

Receive-only wavelength division multiplexing (WDM) GBIC

15.0(1)SY

DWDM-GBIC

Dense wavelength division multiplexing (DWDM) GBIC

15.0(1)SY

CWDM-GBIC-1470

Cisco 1000BASE-CWDM GBIC, 1470 nm (Gray)

15.0(1)SY

CWDM-GBIC-1490

Cisco 1000BASE-CWDM GBIC, 1490 nm (Violet)

15.0(1)SY

CWDM-GBIC-1510

Cisco 1000BASE-CWDM GBIC, 1510 nm (Blue)

15.0(1)SY

CWDM-GBIC-1530

Cisco 1000BASE-CWDM GBIC, 1530 nm (Green)

15.0(1)SY

CWDM-GBIC-1550

Cisco 1000BASE-CWDM GBIC, 1550 nm (Yellow)

15.0(1)SY

CWDM-GBIC-1570

Cisco 1000BASE-CWDM GBIC, 1570 nm (Orange)

15.0(1)SY

CWDM-GBIC-1590

Cisco 1000BASE-CWDM GBIC, 1590 nm (Red)

15.0(1)SY

CWDM-GBIC-1610

Cisco 1000BASE-CWDM GBIC, 1610 nm (Brown)

15.0(1)SY

WS-G5483

1000BASET GBIC

15.0(1)SY

WS-G5484

Short wavelength, 1000BASE-SX

15.0(1)SY

WS-G5486

Long wavelength/long haul, 1000BASE-LX/LH

15.0(1)SY

WS-G5487

Extended distance, 1000BASE-ZX

15.0(1)SY

Service Modules


Note • For service modules that run their own software, see the service module software release notes for information about the minimum required service module software version.

  • With SPAN configured to include a port-channel interface to support a service module, be aware of CSCth03423 and CSCsx46323 .
  • EtherChannel configuration can impact some service modules. In particular, distributed EtherChannels (DECs) can interfere with service module traffic. See this field notice for more information:

http://www.cisco.com/c/en/us/support/docs/field-notices/610/fn61935.html


 

Application Control Engine (ACE) Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
ACE30-MOD-K9

Application Control Engine (ACE) module

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • ACE modules run their own software—See these publications:

http://www.cisco.com/c/en/us/support/interfaces-modules/ace-application-control-engine-module/tsd-products-support-model-home.html

See the ACE module software release notes for information about the minimum required service module software version.

ASA Services Module

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-SVC-ASA-SM1-K7

ASA Services Module

With Supervisor Engine 2T-10GE

15.1(1)SY3

With Supervisor Engine 720-10GE

With Supervisor Engine 720

WS-SVC-ASA-SM1-K9

ASA Services Module

With Supervisor Engine 2T-10GE

15.0(1)SY1

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Upgrade to the minimum software version or later before installing an ASA services module (see the “EFSU Compatibility” section).
  • ASA modules run their own software—See these publications:

http://www.cisco.com/c/en/us/support/interfaces-modules/catalyst-6500-series-7600-series-asa-services-module/tsd-products-support-model-home.html

See the module software release notes for information about the minimum required service module software version.

Firewall Services Module (FWSM)

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-SVC-FWM-1-K9

Firewall Services Module

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • With Firewall Services Module Software Release 2.3(1) and later releases, WS-SVC-FWM-1-K9 maintains state when an NSF with SSO redundancy mode switchover occurs.
  • WS-SVC-FWM-1-K9 runs its own software—See these publications:

http://www.cisco.com/c/en/us/support/interfaces-modules/catalyst-6500-series-firewall-services-module/tsd-products-support-model-home.html

See the WS-SVC-FWM-1-K9 software release notes for information about the minimum required WS-SVC-FWM-1-K9 software version.

Intrusion Detection System Modules (IDSMs)

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-SVC-IDSM2-K9

Intrusion Detection System Module 2; CEF256

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE (not supported in VSS mode)

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • The IDSM runs its own software—See these publications:

http://www.cisco.com/c/en/us/support/interfaces-modules/catalyst-6500-series-intrusion-detection-system-idsm-2-services-module/tsd-products-support-model-home.html

See the IDSM software release notes for information about the minimum required IDSM software version.

Network Analysis Modules (NAMs)

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-SVC-NAM3-6G-K9
WS-SVC-NAM-2
WS-SVC-NAM-1

Network Analysis Module 3
Network Analysis Module 2
Network Analysis Module 1

With Supervisor Engine 2T-10GE

15.0(1)SY1

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

  • Upgrade to Release 15.0(1)SY1 or later before installing WS-SVC-NAM3-6G-K9 (see the “EFSU Compatibility” section).
  • NAM modules run their own software—See these publications for more information:

See the software release notes for information about the minimum required NAM software version.

Wireless Services Modules (WiSMs)

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Versions
WS-SVC-WISM2-1-K9
WS-SVC-WISM2-3-K9
WS-SVC-WISM2-5-K9

Wireless Services Module 2 (WiSM2)

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-SVC-WISM-1-K9

Wireless Services Module (WiSM)

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Wireless services modules run their own software—See these publications:

http://www.cisco.com/c/en/us/support/interfaces-modules/services-modules/products-release-notes-list.html

See the wireless services modules software release notes for information about the minimum required wireless services module software version.

WS-C6503-E Power Supplies

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
PWR-1400-AC

1,400 W AC power supply

15.0(1)SY

PWR-950-AC

950 W AC power supply

15.0(1)SY

PWR-950-DC

950 W DC power supply

15.0(1)SY

WS-C6504-E Power Supplies

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
PWR-2700-AC/4

2700 W AC power supply

15.0(1)SY

PWR-2700-DC/4

2700 W DC power supply

15.0(1)SY

All Other Power Supplies


Note The power supplies in this section are not supported in these chassis:

  • Catalyst 6503-E
  • Catalyst 6504-E


 

 

Product ID

(append “=” for spares)

Product Description
Minimum
Software
Version
WS-CAC-8700W-E

8,700 W AC power supply

15.0(1)SY

Note

  • WS-CAC-8700W-E supports a remote power cycling feature.
  • See this publication for more information:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/hardware/Chassis_Installation/Cat6500/6500_ins.html

PWR-6000-DC

6,000 W DC power supply

15.0(1)SY

WS-CAC-6000W

6,000 W AC power supply

PWR-4000-DC

4,000 W DC power supply

WS-CAC-4000W

4,000 W AC power supply

+WS-CAC-3000W

3,000 W AC power supply

WS-CAC-3000W

3,000 W AC power supply

WS-CAC-2500W

2,500 W AC power supply

WS-CDC-2500W

2,500 W DC power supply

Chassis


Note Chassis with 64 MAC addresses automatically enable the Extended System ID feature, which is enabled with the spanning-tree extend system-id command. You cannot disable the extended-system ID in chassis that support 64 MAC addresses. The Extended System ID feature might already be enabled in your network, because it is required to support both extended-range VLANs and any chassis with 64 MAC addresses. Enabling the extended system ID feature for the first time updates the bridge IDs of all active STP instances, which might change the spanning tree topology.


13-Slot Chassis


Note With Supervisor Engine 2T-10GE, the slot reserved for a redundant supervisor engine can be populated with one of these modules:

  • WS-X6148E-GE-45AT
  • WS-X6148A-GE-TX, WS-X6148A-GE-45AF
  • WS-X6148-FE-SFP
  • WS-X6148A-RJ-45, WS-X6148A-45AF
  • WS-X6196-RJ-21, WS-X6196-21AF


 

 

Product ID

(append “=” for spare)

Product Description
Minimum
Software
Version
WS-C6513-E
  • 13 slots
  • Slot 7 and slot 8 are reserved for supervisor engines
  • 64 chassis MAC addresses

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

CISCO7613-S
  • 13 slots
  • Slot 7 and slot 8 are reserved for supervisor engines
  • 64 chassis MAC addresses

With Supervisor Engine 2T-10GE

15.1(1)SY

WS-C6513

Catalyst 6513 chassis:

  • 13 slots
  • 64 chassis MAC addresses
  • Use with Supervisor Engine 720-10GE or Supervisor Engine 720 requires WS-C6K-13SLT-FAN2
  • These modules are supported only in slots 9 through 13 and do not power up in other slots:

WS-X6700 series switching modules except WS-X6724-SFP

WS-X6816-GBIC switching modules

WS-SVC-WISM-1-K9

Note Not supported with Supervisor Engine 2T.

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

9-Slot Chassis

 

Product ID

(append “=” for spare)

Product Description
Minimum
Software
Version
WS-C6509-V-E
  • 9 vertical slots
  • 64 chassis MAC addresses
  • Required power supply:

2,500 W DC or higher

3,000 W AC or higher

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

WS-C6509-E
  • 9 horizontal slots
  • Chassis MAC addresses:

Before April 2009—1024 chassis MAC addresses

Starting in April 2009—64 chassis MAC addresses

Note Chassis with 64 MAC addresses automatically enable the Extended System ID feature, which is enabled with the spanning-tree extend system-id command. You cannot disable the extended-system ID in chassis that support 64 MAC addresses. The Extended System ID feature might already be enabled in your network, because it is required to support both extended-range VLANs and any chassis with 64 MAC addresses. Enabling the extended system ID feature for the first time updates the bridge IDs of all active STP instances, which might change the spanning tree topology.

  • Requires 2,500 W or higher power supply

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

CISCO7609-S
  • 9 vertical slots
  • 64 chassis MAC addresses
  • Required power supply:

2,500 W DC or higher

3,000 W AC or higher

With Supervisor Engine 2T-10GE

15.0(1)SY1

6-Slot Chassis

 

Product ID

(append “=” for spare)

Product Description
Minimum
Software
Version
WS-C6506-E
  • 6 slots
  • Chassis MAC addresses:

Before April 2009—1024 chassis MAC addresses

Starting in April 2009—64 chassis MAC addresses

Note Chassis with 64 MAC addresses automatically enable the Extended System ID feature, which is enabled with the spanning-tree extend system-id command. You cannot disable the extended-system ID in chassis that support 64 MAC addresses. The Extended System ID feature might already be enabled in your network, because it is required to support both extended-range VLANs and any chassis with 64 MAC addresses. Enabling the extended system ID feature for the first time updates the bridge IDs of all active STP instances, which might change the spanning tree topology.

  • Requires 2,500 W or higher power supply

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

CISCO7606-S
  • 6 slots
  • 64 chassis MAC addresses

With Supervisor Engine 2T-10GE

15.1(1)SY1

4-Slot Chassis

 

Product ID

(append “=” for spare)

Product Description
Minimum
Software
Version
WS-C6504-E
  • 4 slots
  • 64 chassis MAC addresses

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

CISCO7604
  • 4 slots
  • 64 chassis MAC addresses

With Supervisor Engine 2T-10GE

15.1(1)SY

3-Slot Chassis

 

Product ID

(append “=” for spare)

Product Description
Minimum
Software
Version
WS-C6503-E

With Supervisor Engine 2T-10GE

15.0(1)SY

With Supervisor Engine 720-10GE

15.1(1)SY

With Supervisor Engine 720

15.1(1)SY

Unsupported Hardware

Release 15.1SY supports only the hardware listed in the “Supported Hardware” section. Unsupported modules remain powered down if detected and do not affect system behavior.

Release 12.2SX supported these modules, which are not supported in Release 15.1SY:

  • Supervisor Engine 32 (CAT6000-SUP32/MSFC2A)
  • ME 6500 Series Ethernet Switches (ME6524)
  • Policy Feature Card 3A and Distributed Forwarding Card 3A
  • 76-ES+XT-4TG3CXL, 76-ES+XT-4TG3C
  • 76-ES+XT-2TG3CXL, 76-ES+XT-2TG3C
  • 7600-ES+4TG3CXL, 7600-ES+4TG3C
  • 7600-ES+2TG3CXL, 7600-ES+2TG3C
  • Shared Port Adapter (SPA) Interface Processors (SIPs) and Shared Port Adapters (SPAs)
  • Services SPA Carrier (SSC) and Services SPAs
  • Enhanced FlexWAN Module
  • Anomaly Guard Module(AGM)
  • Traffic Anomaly Detector Module (ADM)
  • Communication Media Module (CMM)
  • Content Switching Module (CSM)
  • Content Switching Module with SSL (CSM-S)
  • Secure Sockets Layer (SSL) Services Module

Images and Feature Sets

Use Cisco Feature Navigator to display information about the images and feature sets in Release 15.1SY.

The releases includes strong encryption images. Strong encryption images are subject to U.S. and local country export, import, and use laws. The country and class of end users eligible to receive and use Cisco encryption solutions are limited. See this publication for more information:

http://www.cisco.com/web/about/doing_business/legal/global_export_trade/general_export/contract_compliance.html

Universal Boot Loader Image

The Universal Boot Loader (UBL) image is a minimal network-aware image that can download and install a Cisco IOS image from a running active supervisor engine in the same chassis. When newly installed as a standby supervisor engine in a redundant configuration, a supervisor engine running the UBL image automatically attempts to copy the image of the running active supervisor engine in the same chassis.

EFSU Compatibility

SX SY EFSU Compatibility Matrix

Cisco IOS Behavior Changes

Behavior changes describe the minor modifications that are sometimes introduced in a software release. When behavior changes are introduced, existing documentation is updated.

Release 15.1(1)SY2

  • New radius-server commands

Old behavior: The RADIUS server does not have Point-to-Point Tunneling Protocol (PPTP) tunnel-specific information because the tunnel-client endpoint and tunnel-server endpoint attributes are missing in the access-request packets sent to the RADIUS server.

New behavior: The following commands are introduced to identify the hostname or address of the network access server (NAS) at the initiator and server end of the Point-to-Point Tunneling Protocol (PPTP) tunnel by sending the Tunnel-Client-Endpoint attribute and the Tunnel-Server-Endpoint attribute in access-request packets to the RADIUS server.

radius-server attribute 66 include-in-access-req

radius-server attribute 67 include-in-access-req

Additional Information:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-r1.html

New Features in Release 15.1(2)SY4

These sections describe the new features in Release 15.1(2)SY4, 08 Nov 2014:

New Hardware Features in Release 15.1(2)SY4

None.

New Software Features in Release 15.1(2)SY4

None.

New Features in Release 15.1(1)SY4

These sections describe the new features in Release 15.1(1)SY4, 10 Oct 2014:

New Hardware Features in Release 15.1(1)SY4

None.

New Software Features in Release 15.1(1)SY4

None.

 

New Features in Release 15.1(2)SY3

These sections describe the new features in Release 15.1(2)SY3, 23 Jun 2014:

New Hardware Features in Release 15.1(2)SY3

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/transceiver-modules/data_sheet_c78-455693.html

New Software Features in Release 15.1(2)SY3

None.

New Features in Release 15.1(2)SY2

These sections describe the new features in Release 15.1(2)SY, 03 Mar 2014:

New Hardware Features in Release 15.1(2)SY2

New Software Features in Release 15.1(2)SY2

  • Instant Access on Cisco Catalyst 6880-X switch—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.html

  • VSS Quad-Sup SSO (VS4O)—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup2T/virtual_switching_systems.html#VSS_Quad-Sup_SSO_(VS4O)

  • Etherchannel on IA clients.
  • Instant Access on VSS Quad-Sup.

New Features in Release 15.1(2)SY1

These sections describe the new features in Release 15.1(2)SY1, 09 Dec 2013:

New Software Features in Release 15.1(2)SY1

None.

New Features in Release 15.1(2)SY

These sections describe the new features in Release 15.1(2)SY, 07 Sep 2013:

New Software Features in Release 15.1(2)SY

  • BGP Support for IP Prefix Export from a VRF Table into the Global Table—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-mt/irg-15-mt-book/irg-prefix-export.html

  • EIGRP IPv6 Graceful Restart (GR)—The EIGRP IPv6 Graceful Restart (GR) feature is enabled by default in EIGRP IPv6 configurations. GR is a way to rebuild forwarding information in routing protocols and resets router’s control plane without impacting (global) routing.
  • Granular enablement of CTS SGACL at interface level—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/cts_sgacl_int.html

  • Instant Access—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.html

  • IPv6 Multicast VRF Lite—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_basic_ipv6.html

  • ISIS Features in IP services—The IP services image supports ISIS features.
  • ISIS MTR for multicast address family only—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mtr/configuration/15-sy/mtr-15-sy-book/isis-mtr-multicast-address-family.html

  • ISSU support for FEX—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/instant_access.html

  • Medianet Metadata—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mdata/configuration/15-sy/mdata-15sy-book/metadata-framework.html

  • MediaTrace 1.0—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/media_monitoring/configuration/guide/15_1m_and_t/mm_15_1m_and_t/mm_mediatrace.html

  • MoFRR—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_serv/configuration/15-sy/imc-serv-15-sy-book/Multicast_only_Fast_Re-Route.html

  • MVPNv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/mvpn.html

  • OSPF Support for Multi-VRF on CE Routers—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-sup-vrf.html

  • OSPFv3 MIB—See this publication:

http://www.cisco.com/c/en/us/td/docs/wireless/asr_901/mib/reference/asr_mib.html

  • OSPFv3 NSR—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-ospfv3-nsr.html

  • Performance Monitor (Phase 1)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/media_monitoring/configuration/15-sy/mm-15-sy-book/mm-pasv-mon.html

  • Service Discovery Gateway—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dns/configuration/15-sy/dns-15-sy-book/dns-15-sy-book_chapter_0100.html

New Features in Release 15.1(1)SY3

These sections describe the new features in Release 15.1(1)SY3, 21 Mar 2014:

New Hardware Features in Release 15.1(1)SY3

None.

New Software Features in Release 15.1(1)SY3

None.

New Features in Release 15.1(1)SY2

These sections describe the new features in Release 15.1(1)SY2, 04 Oct 2013:

New Hardware Features in Release 15.1(1)SY2

None.

New Software Features in Release 15.1(1)SY2

None.

New Features in Release 15.1(1)SY1

These sections describe the new features in Release 15.1(1)SY1, 03 May 2013:

New Hardware Features in Release 15.1(1)SY1

  • WS-X6904-40G-2T switching module support for:

1G SFP 1G SFP

1G SFP 1G SFP

1G SFP 1G SFP

  • Supervisor Engine 2T support with the 7606-S chassis

New Software Features in Release 15.1(1)SY1

  • DHCPv6 - Relay chaining for Prefix Delegation—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/ip6-dhcp-rel-agent.html

  • Egress Microflow Destination-Only Policing—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/qos_class_mark_police.html

  • Global QoS Policy—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/denial_of_service.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/denial_of_service.html

  • HSRP aware PIM—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_hsrp_aware.html

  • Interfaces MIB: SNMP context based access—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/15-sy/snmp-15-sy-book/nm-snmp-vpn-context.html

  • LISP Locator/ID Separation Protocol—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/15-sy/irl-15-sy-book.html

  • LISP Virtualization—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/15-sy/irl-15-sy-book.html

  • Medianet 2.2 features in Cat6500 Ipbase images—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/media_monitoring/configuration/15-sy/mm-15-sy-book.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/media_monitoring/configuration/15-sy/mm-15-sy-book/mm-mediatrace.html

  • MPLS TE - Bundled Interface Support (EtherChannel and MLP)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_path_setup/configuration/15-sy/mp-te-path-setup-15-sy-book/mp-te-path-setup-15-sy-book_chapter_01100.html

  • Multicast Feature Reformation Packaging Changes—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/release_notes.html#New_Software_Features_in_Release_15.1(1)SY1

  • SGT Name export in NetFlow—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/appc_cat6k.html

  • TrustSec Diagnostic Tool Kits - Packet Trace—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/command_sum.html

  • TrustSec SGA Conditional Debugging Capabilities—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/15-sy/iap-15-sy-book.html

  • TrustSec SGA SYSLOG Messages—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/15_0sy/system/messages/15sysmg.html

  • VPLS PIM and IGMP Snooping (LAN Interfaces)—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/vpls.html

  • VSS Quad-Sup SSO (VS4O)—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup2T/virtual_switching_systems.html#VSS_Quad-Sup_SSO_(VS4O)

  • VSS Quad-Sup Uplink Forwarding with HA domains—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/virtual_switching_systems.html

  • WCCPv2 - IPv6 Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/15-sy/iap-15-sy-book/iap-wccp.html

New Features in Release 15.1(1)SY

These sections describe the new features in Release 15.1(1)SY, 15 Oct 2012:

New Hardware Features in Release 15.1(1)SY

  • 7604S chassis support with the Supervisor Engine 2T—See this publication:

 

  • 7613-S chassis support with the Supervisor Engine 2T—See this publication:

 

  • SFP+ LRM transceiver support—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/release_notes.html#10_GE_SFP+_Modules

  • X2-10GB-T transceiver support—See this publication:

 

  • With Supervisor Engine 2T, VSS mode support for the WS-X6148E-GE-45AT module.

New Software Features in Release 15.1(1)SY

  • AAA-Domain Stripping at server group level—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-domain-stripping.html

  • Add support for the 61XX linecards in the 6513-E standby sup’s slot with sup2T—See this publication:

 

  • Auto Interleaved Port priority for LACP—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/etherchannel.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/etherchannel.html

  • BFD - Static Route Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/irb-bi-fwd-det.html

  • BFD - VRF Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/irb-bi-fwd-det.html

  • BFD IPv6 Encaps Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/ip6-route-bfd-encaps.html

  • BFD Support for IP Tunnel (GRE, with IP address)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/irb-bi-fwd-det.html

  • BFD Support over port channel—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/irb-bi-fwd-det.html

  • BGP - Remove/Replace Private AS Filter—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-remove-as.html

  • BGP Event Based VPN Import—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-event-vpn-import.html

  • BGP Neighbor Policy—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-neighbor-policy.html

  • BGP Per Neighbor SOO Configuration—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-neighbor-soo.html

  • BGP PIC Edge for IP/MPLS—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-bgp-mp-pic.html

  • BGP RT changes without PE-CE neighbor impact—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/iproute_bgp/configuration/guide/12_2sr/irg_12_2sr_book/irg_event_vpn_import.html

  • BGP: RT Constrained Route Distribution—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-rt-filter.html

  • BGPConsistency Checker—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/irg-consistency-check.html

  • Callhome V2 enhancements—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/callhome.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/callhome.html

  • Capabilities Manager—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/saf/configuration/15-sy/saf-15-sy-book/saf-capman.html

  • RADIUS Change of Authorization (CoA)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-rad-coa.html

http://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_0s/sec_securing_user_services_15_0S_book/sec_cfg_authentifcn.html

  • Cisco Express Forwarding - SNMP CEF-MIB Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipswitch_cef/configuration/15-sy/isw-cef-15-sy-book/isw-cef-snmp-mib.html

http://www.cisco.com/c/en/us/td/docs/ios/ipswitch/configuration/guide/12_4/isw_12_4_book/cef_snmp_mib.html

  • Cisco IOS Shell—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/Convert/IOS_Shell/nm_ios_shell.html

  • Cisco TrustSec L3 Identity Port Mapping—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/sec-cts-id-port-map.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ident-conn_config.html

 

  • Cisco TrustSec NDAC, Network Device Admission Control—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/sec-cts-ndac.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ident-conn_config.html

  • Cisco TrustSec Subnet to SGT Mapping—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/cts-subnet-sgt-map.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ident-conn_config.html

  • CISCO-IP-URPF-MIB Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/sec_data_plane/configuration/guide/convert/sec_data_urpf_15_1_book/sec_urpf_mib.html

  • Client Information Signalling Protocol (CISP)—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/dot1x_port_based_authentication.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/dot1x_port_based_authentication.html

  • Configurable System Controller Reset Threshold—With a redundant supervisor engine, if a TM_DATA_PARITY_ERROR, TM_LINK_ERR_INBAND, or TM_NPP_PARITY_ERROR error occurs, the affected supervisor engine reloads.

Without a redundant supervisor engine, if a TM_DATA_PARITY_ERROR, TM_LINK_ERR_INBAND, or TM_NPP_PARITY_ERROR error occurs, one of the following happens:

If the system controller reset threshold has not been reached, reset the system controller ASIC.

If the system controller reset threshold has been reached, reload the supervisor engine.

The default system controller reset threshold value is 1, configurable with the platform system-controller reset-threshold threshold_value command. The value range is 1 through 100.

TM_DATA_PARITY_ERROR, TM_LINK_ERR_INBAND, and TM_NPP_PARITY_ERROR errors cause system messages.

Before the threshold is reached, the errors cause the following system messages:

%SYSTEM_CONTROLLER-<>-THRESHOLD
%SYSTEM_CONTROLLER-<>-ERROR
%SYSTEM_CONTROLLER-<>-MISTRAL_RESET

After the threshold is reached, the errors cause the following system messages:

%SYSTEM_CONTROLLER-<>-ERROR
%SYSTEM_CONTROLLER-<>-FATAL

  • Configuring ITU-T Y.1731 Fault Management Functions—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/15-sy/ce-15-sy-book/ce-cfm-ieee-y1731.html

  • Console disconnect—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/commands/additional_commands/cmds1.html


Note This feature is enabled by default.


  • CoPP Microflow policing—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/control_plane_policing_copp.html

  • Copy based sampling—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_basic/configuration/15-sy/mp-basic-15-sy-book/mp-ip-aware-mpls-netflow.html

  • Custom Location Type—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book/ce-e1.html

  • DHCP - Server Port Based Address Allocation—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/dhcp-prt-bsd-aa.html

  • DHCP Relay Server Id Override and Link Selection Option 82 Suboptions—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/dhcp-relay-svr-option-82.html

  • Diagnostic Signatures—See this publication:

 

 

  • EIGRP IPv6 VRF-Lite—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/iproute_eigrp/configuration/guide/12_2sr/ire_12_2sr_book/ire_cfg_eigrp.html

  • EIGRP MIB—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/iproute_eigrp/configuration/guide/12_2sr/ire_12_2sr_book/ire_mib.html

  • EIGRP Wide Metrics—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-sy/ire-15-sy-book/ire-wid-met.html

  • EIGRP/SAF HMAC-SHA-256 Authentication—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-sy/ire-15-sy-book/ire-sha-256.html

  • Embedded Event Manager (EEM) 3.1—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/12_2sx/nm_12_2sx_book/nm_eem_overview.html

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/12_2sx/nm_12_2sx_book/nm_eem_policy_cli.html

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/12_2sx/nm_12_2sx_book/nm_eem_policy_tcl.html

  • Embedded Event Manager (EEM) 3.2—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/configuration/guide/nm_eem_3-2.html

  • Embedded Event Manager (EEM) 4.0—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/configuration/15-mt/eem-15-mt-book/eem-overview.html

  • Enabling OSPFv2 on an Interface Using the ip ospf area Command—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book.html

  • EnergyWise 2.5—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/energywise/phase2_5/ios/configuration/guide/2_5ewise.html

  • EnergyWise Pre Phase 2.5—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/energywise/phase2/ios/release/notes/OL19810.html

  • EVN EIGRP—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/evn/configuration/15-sy/evn-15-sy-book/evn-confg.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/evn/configuration/15-sy/evn-15-sy-book/evn-overview.html

  • EVN OSPF—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/evn/configuration/15-sy/evn-15-sy-book/evn-confg.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/evn/configuration/15-sy/evn-15-sy-book/evn-overview.html

  • EVN Route Replication—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/evn/configuration/15-sy/evn-15-sy-book/evn-shared-svcs.html

  • Flex Links Interface Preemption—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/flexlinks.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/flexlinks.html

  • Flexible Netflow - IPv6 bridged flows—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-sy/fnf-15-sy-book/cfg-ipv6-brg.html

  • FTP IPv6 Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_nman/configuration/15-sy/ip6n-15-sy-book/ip6-tftp-supp.html

  • Geo Location Type support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book/ce-e1.html

  • HA support for mLDP—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_lsm/configuration/15-sy/imc-lsm-15-sy-book/imc_ha_mldp.html

  • Hierarchical shaping and two priority queues on WS-X6904-40G-2T—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/qos_policy_based_queueing.html

  • IEEE 802.1x - RADIUS Change of Authorization (CoA)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/sec_user_services/configuration/guide/15_0s/sec_securing_user_services_15_0S_book/sec_cfg_authentifcn.html

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a3.html

  • IGMPv3 Host Stack—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_igmp/configuration/15-sy/imc-igmp-15-sy-book/imc_igmpv3_hoststack.html

  • IP Aware MPLS Netflow—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_basic/configuration/15-sy/mp-basic-15-sy-book/mp-ip-aware-mpls-netflow.html

  • IP Multicast Load Splitting - Equal Cost Multipath (ECMP) using S, G and Next-hop—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_optim/configuration/15-sy/imc-optim-15-sy-book/imc_load_splt_ecmp.html

  • IP SLAs - LSP Health Monitor with LSP Discovery—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-sy/sla-15-sy-book/sla_lsp_mon_autodisc.html

  • IP SLAs VRF Aware 2.0—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-sy/sla-15-sy-book/sla_tcp_conn.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-sy/sla-15-sy-book/sla_ftp.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-sy/sla-15-sy-book/sla_dns.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-sy/sla-15-sy-book/sla_http.html

  • IP Tunnel - SSO—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/interface/configuration/15-sy/ir-15-sy-book/ir-impl-tun.html

  • IP-RIP Delay Start—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_rip/command/irr-cr-book/irr-cr-rip.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_rip/configuration/15-sy/bsm-15-sy-book/irr-cfg-info-prot.html

  • IPv6 - Config Logger—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_nman/configuration/15-sy/ip6n-15-sy-book/ip6-emb-mgmt.html

  • IPv6 - HTTP(S)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_nman/configuration/15-sy/ip6n-15-sy-book/ip6-emb-mgmt.html

  • IPv6 - Per Interface Neighbor Discovery Cache Limit—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_basic/configuration/15-sy/ip6b-15-sy-book/ip6-nd-cache.html

  • IPv6 - TCL—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_nman/configuration/15-sy/ip6n-15-sy-book/ip6-emb-mgmt.html

  • IPv6 ACL Extensions for Hop by Hop Filtering—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/15-sy/sec-data-acl-15-sy-book/ip6-sec-acl-ext.html

  • IPv6 BSR - Configure RP mapping—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_basic_ipv6.html

  • IPv6 Device Tracking—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6-dev-track.html

  • IPv6 Neigbor Discovery Non-Stop Forwarding (NSF)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_basic/configuration/15-sy/ip6b-15-sy-book/ip6-neighb-disc.html

  • IPv6 Neighbor Discovery Inspection—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6-nd-inspect.html

  • IPv6 Policy-Based Routing—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_pi/configuration/15-sy/iri-15-sy-book/ip6-pbr.html

  • IPv6 Router Advertisement (RA) Guard—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6f-15-sy-book/ip6-ra-guard.html

  • IPv6 Routing: OSPF for IPv6 (OSPFv3) Authentication Support with IPsec—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-auth-ipsec.html

  • IPv6 Support for IPSec and IKEv2—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/15-sy/sec-sec-for-vpns-w-ipsec-15-sy-book/sec-cfg-vpn-ipsec.html

  • IPV6 VACL (Vlan Access Control List)—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup2T/vlan_acls.html#IPV6_VACL_(Vlan_Access_Control_List)

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup720/vlan_acls.html#IPV6_VACL_(Vlan_Access_Control_List)

  • IPv6: NSF & Graceful Restart for MP-BGP IPv6 Address Family—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/15-sy/irg-15-sy-book/ip6-mbgp-nsf-gr-rest.html

  • IS-IS - MPLS LDP Synchronization—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/15-sy/mp-ldp-15-sy-book/mp-ldp-igp-synch.html

  • ISIS BFD TLV—The IS-IS Bidirectional Forwarding Detection (BFD) Tag Length Value (TLV) feature provides a faster method to detect a loss of an IS-IS adjacency. Before, when an IS-IS adjacency reached the UP state (and therefore could be used for forwarding), a BFD session needed to be established with that neighbor. Now, a BFD session is maintained as long as the hello holddown timer for the neighbor does not expire, which is new for BFD TLV. The BFD session is only deleted if the neighbor hello times out. If BFD signals to IS-IS that a session has gone DOWN, the adjacency associated with that session will transition to DOWN state. Once the BFD session goes back UP, the adjacency state can transition back to an UP state.

For a given IS-IS topology, IS-IS determines if BFD is usable for a given neighbor on that topology. BFD is not usable when BFD is enabled on both sides and the BFD session is down. When there are multiple BFD sessions enabled for different address families, such as IPv4 and IPv6, if BFD is not usable for any address family, then BFD is consider not usable for the entire adjacency on that topology. For example, if both IPv4 and IPv6 BFD are enabled for single topology, if either the IPv4 BFD session is down or IPv6 BFD session is down, the neighbor state will be set to DOWN state. If BFD is not enabled for a given address family, then BFD is considered usable for that address family.

For single topology mode, the neighbor state is down when either the IPv4 or IPv6 BFD session is not BFD usable, that is, if BFD is enabled on both sides and the BFD session is DOWN. If BFD is not enabled on either side, BFD will be set to TRUE. For multi-topology mode, IS-IS adjacency will be in UP state as long as any topology is UP . However, the neighbor for the topology where BFD is consider not usable is considered down for that specific topology. For example, if both IPv4 and IPv6 BFD are enabled, and the IPv4 session is DOWN and IPv6 session is UP, then the IS-IS adjacency is still UP. In this case, the IPv4 neighbor is considered DOWN and ipv6 neighbor is considered UP.

  • ISIS client for BFD c-bit support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/xe-3s/irb-xe-3s-book/irb-bfd-isis-cbit.html

  • ISIS IPv6 client for BFD—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/ip6-bfd-isis-client.html

  • ISIS MTR for multicast address familly only—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mtr/configuration/15-sy/mtr-15-sy-book/isis-mtr-multicast-address-family.html

  • IS-IS Support for an IS-IS Instance per VRF for IP—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/configuration/15-sy/irs-15-sy-book/irs-instance-vrf.html

  • ISSU - IPv6 Multicast—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_resil/configuration/15-sy/imc-resil-15-sy-book/imc_high_availability.html

  • ISSU - MPLS VPN 6VPE & 6PE ISSU support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ha/configuration/15-sy/mp-ha-15-sy-book/mp-6vpe-6pe-issu-sso.html

  • L2VPN Advanced VPLS (A-VPLS)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/15-sy/mp-l2-vpns-15-sy-book/mp-l2vpn-adv-vpls.html

  • LACP 1:1 hotstandby dampening—See this publication:

 

 

  • Linecards not supported in 15.1(1)SY—See this publication:

 

  • LLDP Inline Power Negotiation for PoE+—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/power_over_ethernet.html+

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/power_over_ethernet.html+

  • LLDP IPv6 address support—See this publication:

 

  • LLDP IPv6 address support—The release support IPv6 Link Layer Discovery Protocol (LLDP) and LLDP Media Endpoint Discovery (MED) addresses.
  • Mac Move and Replace—See this publication:

 

 

  • Manually configured IPv6 in IPv4 with IPSec—The Manually Configured IPv6 in IPv4 with IPsec feature complies with U.S. Government IPv6 (USGv6) guidelines by supporting the following IPsec features:

IPv6 Support for IPsec and IKEv2. For more information about this feature, see the “Configuring Internet Key Exchange Version 2 (IKEv2) and FlexVPN Site-to-Site” module and the “Configuring Security for VPNs with IPsec” module at the following links:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-sy/sec-flex-vpn-15-sy-book/sec-cfg-ikev2-flex.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/15-sy/sec-sec-for-vpns-w-ipsec-15-sy-book/sec-cfg-vpn-ipsec.html

OSPF for IPv6 (OSPFv3) Authentication Support with IPsec. For more information about this feature, see the “IPv6 Routing: OSPF for IPv6 Authentication Support with IPsec” module at the following link:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-auth-ipsec.html

. .

  • Medianet Metadata—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mdata/configuration/15-sy/mdata-15sy-book/metadata-framework.html

  • MLD Group Limits—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_lsm/configuration/15-sy/imc-lsm-15-sy-book/ip6-mcast-mld-limits.html

  • mLDP Filtering—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_lsm/configuration/15-sy/imc-lsm-15-sy-book/imc_mldp_filter.html

  • MLDP-Based MVPN—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_lsm/configuration/15-sy/imc-lsm-15-sy-book/imc_mldp-based_mvpn.html

  • MPLS LDP - IGP Synchronization—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/15-sy/mp-ldp-15-sy-book/mp-ldp-igp-synch.html

  • MPLS over GRE—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/15-sy/mp-l2-vpns-15-sy-book/vpls-o-gre.html

  • MPLS Pseudowire Status Signaling—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/15-sy/mp-l2-vpns-15-sy-book/mp-pw-status.html

  • MPLS TE - BFD-triggered Fast Reroute (FRR)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_path_protect/configuration/15-sy/mp-te-path-protect-15-sy-book/mp-te-bfd-frr.html

  • MPLS Traffic Engineering (TE) - Path Protection—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_path_protect/configuration/15-sy/mp-te-path-protect-15-sy-book/mp-te-path-prot.html

  • MTR Support for Multicast—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_mtr.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mtr/configuration/15-sy/mtr-15-sy-book/isis-mtr-multicast-address-family.html

  • Multi-auth Vlan Assignment—See this publication:

 

 

  • Multicast Expansion Table Enhancement for VPLS—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/commands/additional_commands.html

  • Multicast Service Reflection—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_serv/configuration/15-sy/imc-serv-15-sy-book/imc_service_reflect.html

  • MVPN - Data MDT Enhancements—Multicast distribution tree (MDT) groups were selected at random when the traffic passed the threshold and there was a limit of 255 MDTs before they were reused. The MVPN - Data MDT Enhancements feature provides the ability to deterministically map the groups from inside the VPN routing and forwarding (S,G) entry to particular data MDT groups, through an access control list (ACL).

The user can now map a set of VPN routing and forwarding (S,G) to a data MDT group in one of the following ways:

1:1 mapping (1 permit in ACL)

Many to 1 mapping (many permits in ACL)

Many to many mapping (multiple permits in ACL and a nonzero mask data MDT)

Because the total number of configurable data MDTs is 1024, the user can use this maximum number of mappings in any of the described combinations.

  • NAT - VRF Aware NAT—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/15-sy/nat-15-sy-book/iadnat-mpls-vpn.html

  • NEAT (Network Edge Authentication Topology)—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/dot1x_port_based_authentication.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/dot1x_port_based_authentication.html

  • Netflow Data Export to a collector in a VRF—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios/netflow/command/reference/nf_book/nf_01.html

  • Netflow(TNF) Export L2 mac and port information for IPv4—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/netflow.html

  • NHRP Reformation move to IP Services—The Next Hop Resolution Protocol (NHRP) is supported in the IP Services image.
  • No Service Password-Recovery 15.1SY—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/15-sy/sec-usr-cfg-15-sy-book/sec-no-svc-pw-recvry.html

  • NSF/SSO - IPv6 Multicast—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_resil/configuration/15-sy/imc-resil-15-sy-book/imc_high_availability.html

  • NTPv4 MIB—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-sy/bsm-15-sy-book/bsm-ntpv4-mib.html

  • NTPv4 Orphan Mode support, Range for trusted key configuration—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-sy/bsm-15-sy-book/bsm-time-calendar-set.html

  • NTPv4 with support for IPv4 and IPv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-sy/bsm-15-sy-book/ip6-ntpv4.html

  • OSPF - Non-Stop Routing—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-nsr-ospf.html

  • OSPF for Routed Access—The OSPF for Routed Access feature allows users to extend layer 3 routing capabilities to the access or Wiring Closet. OSPF for Routed Access supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 200 dynamically learned routes permitted.

With the typical hub and spoke topology in a campus environment, the Wiring Closets (spokes) are connected to the distribution switch (Hub) forwarding all non-local traffic to the distribution layer. There is no requirement to hold a complete routing table at the Wireless Closet switches. In best practices designs, the distribution switch sends a default route to the Wiring Closet switch for reaching inter- area and external routes (OSPF Stub area configuration). The OSPF for Routed Access feature supporst this type of topology.

The IP base image supports OSPF for Routed Access. The Enterprise services image continues to be required if multiple OSPFv2 and OSPFv3 instances with no route restrictions are required. Additionally, Enterprise Services is required to enable the VRF-lite feature.

  • OSPF Graceful Shutdown—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-ttl.html

  • OSPF support for NSSA RFC 3101—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book.html

  • OSPF TTL Security Check—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-ttl.html

  • OSPFv3 Address Families—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-add-fam.html

  • OSPFv3 BFD—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/ip6-route-bfd-ospfv3.html

  • OSPFv3 Fast Convergence - LSA and SPF throttling—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-fastcon.html

  • OSPFv3 Graceful Restart—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-gr-rest.html

  • OSPFv3 IPSec ESP Encryption and Authentication—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/ip6-route-ospfv3-esp.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book.html

  • OSPFv3 VRF-Lite/PE-CE—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/command/iro-cr-book.html

  • Parser concurrency and locking Improvements—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/config-mgmt/configuration/15-sy/config-mgmt-15-sy-book/cm-parse-improve.html

  • Password strength and management for Common Criteria—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-aaa-comm-criteria-pwd.html

  • Per Port Location Configuration—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/15-sy/ce-15-sy-book/ce-per-port-loc-config.html

  • PIM MIB Extension for IP Multicast—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_monitor_maint.html

  • PIMv6: Anycast RP solution—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/15-sy/imc-pim-15-sy-book/imc_basic_ipv6.html

  • PoE Plus (PoE+, PoEP) support—See this publication:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup2T/power_over_ethernet.html#PoE_Plus_(PoE+,_PoEP)_support

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/15.1SY/config_guide/sup720/power_over_ethernet.html#PoE_Plus_(PoE+,_PoEP)_support

  • POE/POEP support on Sup2T in VSS mode—See this publication:

 

  • Port Security on Etherchannel Trunk Port—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/port_security.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/port_security.html

  • Product Security Baseline: Password encryption and complexity restrictions—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/15-sy/sec-usr-cfg-15-sy-book/sec-cfg-sec-4cli.html

  • Radius over IPv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/ip6-aaa-support.html

  • Radius Per-VRF Server Group—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-per-vrf-aaa.html

  • Radius Statistics VIA SNMP—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_rad/configuration/15-sy/sec-usr-rad-15-sy-book/sec-cfg-radius.html

  • RSVP Support for Ingress Call Admission Control—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_rsvp/configuration/15-sy/qos-rsvp-15-sy-book/config-rsvp.html

  • SAF Dynamic Neighbors—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/saf/configuration/15-sy/saf-15-sy-book/saf-dyn-neigh.html

  • Show Command Section Filter—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/command/Cisco_IOS_Configuration_Fundamentals_Command_Reference.html

  • Smart Install—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install.html

  • SSH Re-Key Support for Server—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-sy/sec-usr-ssh-15-sy-book/sec-usr-ssh-sec-shell.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-i3.html

  • SSHv2 Enhancements—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-sy/sec-usr-ssh-15-sy-book/sec-secure-shell-v2.html

  • SSHv2 Enhancements for RSA Keys—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-sy/sec-usr-ssh-15-sy-book/sec-secure-shell-v2.html

  • SSO - MPLS VPN 6VPE & 6PE SSO support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ha/configuration/15-sy/mp-ha-15-sy-book/mp-6vpe-6pe-issu-sso.html

  • Static Route Support for BFD over IPv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bfd/configuration/15-sy/irb-15-sy-book/ip6-bfd-static.html

  • Storm Control action -- Port disable—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup2T/15_1_sy_swcg_2T/traffic_storm_control.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-1SY/config_guide/sup720/15_1_sy_swcg_720/traffic_storm_control.html

  • Switch location configuration—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book.html

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/command/ce-cr-book/ce-e1.html

  • Tacacs over IPv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/ip6-tacacs.html

  • TFTP IPv6 support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_nman/configuration/15-sy/ip6n-15-sy-book/ip6-tftp-supp.html

  • TrustSec Identity Port Mapping—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/sec-cts-id-port-map.html

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

 

  • TrustSec Security Group Name Download—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cts/configuration/15-sy/sec-cts-15-sy-book/sec-cts-sg-download.html

  • TrustSec SGA Environment-Data Change of Authority—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

  • TrustSec SGA SGACL Policy Change of Authority—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

  • TrustSec SGT Caching—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

  • TrustSec SGT RBACL Monitor Mode (Dryrun)—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

  • TrustSec SxP Loop Detection—See this publication:

http://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html

  • TTL Security Support for OSPF on IPv6—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-sy/iro-15-sy-book/iro-ttl-sec-ospfv3.html

  • VPLS Autodiscovery, BGP-based—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/15-sy/mp-l2-vpns-15-sy-book/vpls-auto-bgp.html

  • VPLS over GRE and MPLS over GRE—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/15-sy/mp-l2-vpns-15-sy-book/vpls-o-gre.html

  • VRF aware NTP—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-sy/bsm-15-sy-book/bsm-time-calendar-set.html

  • VRF aware source interface for syslog transactions—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/configuration/15-sy/esm-15-sy-book/esm-vrf.html

http://www.cisco.com/c/en/us/td/docs/ios/ipv6/command/reference/ipv6_book/ipv6_09.html

http://www.cisco.com/c/en/us/td/docs/ios/netmgmt/command/reference/nm_book/nm_09.html

  • VRF support for TFTP server, TFTP Client, and FTP client—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/command/Cisco_IOS_Configuration_Fundamentals_Command_Reference.html

  • VRF-aware ARP debug—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_arp/configuration/15-sy/arp-15-sy-book/arp-vrfaware-arp.html

  • VRRPv3 Protocol Support—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp_fhrp/configuration/15-sy/fhp-15-sy-book/fhrp-vrrpv3.html

  • WCCP - Configurable Router ID—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/15-sy/iap-15-sy-book/iap-wccp-cfg-rtr-id.html

  • WCCP: Fast Timers—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/15-sy/iap-15-sy-book/iap-wccp-ftimers.html

  • Web Services Management Agent (WSMA)—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wsma/configuration/15-sy/wsma-15-sy-book/wsma.html

  • Web Services Management Agent with TLS—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wsma/configuration/15-sy/wsma-15-sy-book/wsma-tls.html

  • WSMA and XMLPI enhancement—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wsma/configuration/15-sy/wsma-15-sy-book/wsma.html

  • XML-PI—See this publication:

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/xmlpi/configuration/15-sy/xml-pi-15-sy-book/xml-pi.html

Software Features from Earlier Releases

Use Cisco Feature Navigator to display supported features that were introduced in earlier releases.

Unsupported Commands

Cisco IOS images for the Supervisor Engine 2T do not support mls commands or mls as a keyword. See this document for a list of some of the mls commands that have been replaced:

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/replacement_commands.html


Note Some of the replacement commands support different keyword and parameter values than those supported by the Release 12.2SX commands.


Cisco IOS images for the Supervisor Engine 2T do not support these commands:

  • ip multicast helper-map
  • ip pim accept-register route-map

Unsupported Features


Note The IPsec Network Security feature (configured with the crypto ipsec command) is supported in software only for administrative connections to Catalyst 6500 series switches.


These features are not supported in Release 15.1SY:

  • WAN features
  • Performance Routing (PfR)
  • OER Border Router Only Functionality
  • Flexible NetFlow on Supervisor Engine 720-10GE and Supervisor Engine 720
  • IOS Server Load Balancing (SLB)

Note Release 15.1SY supports server load balancing (SLB) as implemented on the Application Control Engine (ACE) module (ACE30-MOD-K9).


  • AppleTalk
  • Cisco Group Management Protocol (CGMP)
  • Distance Vector Multicast Routing Protocol (DVMRP)
  • Dynamic creation of L2 entries for Multicast source-only traffic
  • IDS Copy

Note Release 15.1SY supports the SPAN and VACL redirect features, which have equivalent functionality.


  • Inter-Switch Link (ISL) trunking

Note Release 15.1SY supports IEEE 802.1Q trunking.


  • NAC - L2 IP NAC LAN Port IP
  • These Novell NetWare protocols:

Internetwork Packet Exchange (IPX)

NetWare Link-Services Protocol (NLSP)

Service Advertising Protocol (SAP)

IPX Access Control List Violation Logging

IPX Access List Plain English Filters

IPX Control Protocol

IPX Encapsulation for 802.10 VLAN

IPX Multilayer Switching (IPX MLS)

IPX Named Access Lists

IPX SAP-after-RIP

  • Network Based Application Recognition (NBAR)
  • Per-VLAN Spanning Tree (PVST) mode ( spanning-tree mode pvst global configuration mode command)

Note Release 15.1SY supports these spanning tree protocols:
—Rapid Spanning Tree Protocol (RSTP):
spanning-tree mode rapid-pvst global configuration mode command
Enabled by default
—Multiple Spanning Tree Protocol (MSTP):
spanning-tree mode mst global configuration mode command
Can be enabled


  • Router-Port Group Management Protocol (RGMP)
  • Stub IP Multicast Routing
  • TCP Intercept

Note Release 15.1SY supports the Firewall Services Module (WS-SVC-FWM-1-K9).


  • Integrated routing and bridging (IRB)
  • Concurrent routing and bridging (CRB)
  • Remote source-route bridging (RSRB)
  • AppleTalk
  • Distance Vector Multicast Routing Protocol (DVMRP)

Restrictions

 

Identifier
Component
Description

CSCue03536

accsw-fex

6800IA Host port takes 1 minute to go down after "shut" w/ 255 vlans

CSCue69088

accsw-fex

6800IA Image downloaded twice when IA controller pushes image.

CSCue63014

accsw-fex

OBFL info for 6800IA stack modules does not show on 6800IA stack master

CSCtx50938

cat6000-acl

c2ma2: FHS: Ra guard features not working without creating the SVI.

CSCtr15373

cat6000-acl

Standby crashes when copy config from tftp to running-config

CSCts70036

cat6000-acl

With mld snooping,no egress traff seen on v6 vacl vlan after reload/sso.

CSCub95435

cat6000-env

Sup2T can't deliver 100% throughput on certain 67xx/68xx line cards

CSCum92372

cat6000-env

6880-X : during ISSU from 15.1(2)SY2 to 15.1(2)SY1, Standby gets stuck

CSCsh58964

cat6000-fabric

BFD node down is detected by OIR

CSCud98528

cat6000-fabric

CFEX: sh inventory does not show vid, transceiver info on controller

CSCum45172

cat6000-filesys

6880-X : Unable to generate core dump file

CSCuj04111

cat6000-firmware

6880-X Switch: multicast pkts upto 64 byte dropped in certain conditions

CSCtx83397

cat6000-l2

changing switchport mode doesn't reflect in the STP instances

CSCub86977

cat6000-l2-infra

c4hd1: Config sync seen with +encapsulation dot1Q 100

CSCta83272

cat6000-l2-mcast

IGMP snooping not supported over VPLS ckt.

CSCth16692

cat6000-l2-mcast

IGMPSN report suppression failed to redir MIXED mode same group joins

CSCta03980

cat6000-l2-mcast

PIMSN:No multicast data flood with IGMPSN disable & PIMSN enabled

CSCsv98626

cat6000-l2-mcast

Ear8 MVR interaction with IGMP snooping: when IGMPSN is disabled

CSCua92717

cat6000-l2-mcast

sh ip igmp snooping subscriber-rate not working in SUP 720 mtrose images

CSCub68144

cat6000-l2-mcast

MCVPLS: Traffic drop seen when 2 PEs sent IGMPv2 join for the same group

CSCto92033

cat6000-l2-mcast

Multicast data frames blackholed if RTR-GRD is ON and Snooping is OFF

CSCtl86457

cat6000-l2-mcast

RL for IP Multicast Control frames doesn't work properly

CSCty00850

cat6000-l2-mcast

Root sends GQ instead global leave due to L2 MLD querier flaps

CSCub68068

cat6000-l2-mcast

Wrong Pseudo Port added as mrtr port after IGMPv2 Leave sent

CSCtd18777

cat6000-mcast

NAT config punt Multicast frames to Process Switching

CSCtg58715

cat6000-mcast

"show mac addr static vlan" CLI does not display mcast entries

CSCtf59230

cat6000-mcast

Earl8 performance impact on Bidir-PIM routing cases

CSCtg91060

cat6000-mcast

IPV6 PING not working on SVI when MLD Snooping is turned ON

CSCug86353

cat6000-mcast

Counter not upd for h/w switched pkts in show ip pim interface count

CSCti43981

cat6000-mcast

HW BiDir mroutes not restored after temporarily losing the RP path

CSCto75104

cat6000-mcast

Mcast Traffic blkholing upon VSS DA when all VSL links are on DFC

CSCuh77881

cat6000-mcast

MET is not programmed for few LSM groups with P2MP with ttl-RL config

CSCti97217

cat6000-mcast

Traffic forwarding to incorrect fabric channel after PO shu/no shut

CSCue59513

cat6000-mcast

VS4O: After SSO Traffic flood to uninterested receivers in vlan ~30 sec

CSCtr05033

cat6000-mpls

Caveats for MPLS VPN over mGRE

CSCue20501

cat6000-mpls

Tagged packets are dropped by FEX Node in Port mode EoMPLS

CSCud83572

cat6000-netflow

FEX: fex-node-id's and layer2 fields can not export together

CSCtq43621

cat6000-rommon

fc2 image:Verification FAILED err seen on bootup whn cs_fips disable_dev

CSCua37884

cat6000-routing

MA2: IPV6 BFD sessions keep flapping periodically when interval < 200ms

CSCtz90055

cat6000-routing

MA2:No recirc in case of BGP PIC on MPLS TE causing traffic drop

CSCuc85040

cat6000-routing

Equal cost paths not programmed in hardware for 6800-IA clients

CSCtz90758

cat6000-routing

MA2 : CEF glean rate-limiter not working for IPv6

CSCtj16159

cat6000-svc

standby reboots twice and comes up in rpr due to config sync fail

CSCui44669

cat6000-vntag

MK1:FEX:Traffic loss upon Estelle Reset (loss while come up)

CSCtw91029

cts

clear cts role-based counters does not give expected results

CSCui49308

fex-infra

IP fragmentation/MTU issues on FEX host Port

CSCub99424

ip-tunnels

TB seen @ xdr_mcast_receive_process on sso

CSCty37278

ip-tunnels

Tunnel forwarding down if no global IP address configured.

CSCtz90970

ip-tunnels

A loop in the OCE chain has been detected when IPinIP tunnel goes down

CSCth50799

pim

Multicast traffic slow convergence with 20k-30k mroute entries

Caveats in Release 15.1SY

Open Caveats in Release 15.1SY

 

Identifier
Component
Description

CSCuf00778

accsw-fex

"show tech-support fex <fex-id>" doesn't contain crashinfo

CSCui73300

accsw-fex

License errors while reloaded FEX master/member comes up.

CSCul81049

accsw-fex

Mismatched version within the stack doesn't trigger FEX auto upgrade

CSCun28083

accsw-qos

Priority Queue not working as expected on 6800 IA ports

CSCue27826

c6k-l3-lisp

LISP: set dscp tunnel with LISP not marking outer hdr for IPv6 traffic

CSCug08012

cat6000-acl

LISP: Encap traffic drops if we unconfigure "ipv4 etr"

CSCui01730

cat6000-acl

Traceback @fm_ifdefault_resp_callback upon reload

CSCue72286

cat6000-diag

MA2b:Diagnostic handler is not found for DFC card after switchover

CSCum15759

cat6000-env

C6880-X-LE :: incorrect buffer allocation in performance mode

CSCun06843

cat6000-env

6807: After SSO, power mode changes from Combined to Redundancy

CSCuh92395

cat6000-env

CFex FAN entries are lost in ENTITY-MIB after SSO

CSCuh95111

cat6000-env

Incorrect media type displayed for SFP-10G-LRM on controller.

CSCul69259

cat6000-env

ISSU VS Power Client errors seen while ISSU from 15.1(2)SY to 15.1(2)SY1

CSCui50773

cat6000-fabric

speed & product id blank in "sh inter trans fex-fab" o/p for SFP-10-LRM

CSCuj53393

cat6000-filesys

Trifecta: Trifecta LC hangs during bootup at rommon.

CSCui60473

cat6000-firmware

"show inventory raw" shows junk values for PID and VID for 1Gig SFP's

CSCul38135

cat6000-firmware

6880-X Switch: ZR optics module assert TX_FAULT

CSCuh57728

cat6000-ha

Bootvar retains "version1" image after successful issu upgradation

CSCui79597

cat6000-hw-fwding

Lif entry is not getting updated on minitrunk port

CSCtr29528

cat6000-hw-fwding

NO_ROUTE RL fails due to OAL

CSCuj57692

cat6000-ipc

In scale setup, on SSO 6800 IA client may reload sometimes

CSCue10124

cat6000-l2-infra

"%QM-SW1-4-SET_MODE: Hardware mode programming failed" @default FEX port

CSCuf24777

cat6000-l2-mcast

MCVPLS: PIMSN (*,g) mroutes not removed after stops joins and source

CSCuf83644

cat6000-lisp

LISP: Traffic drop on ITR encap when destined to PETR

CSCud42723

cat6000-lisp

LISP:Adj is pointing to recirc instead of LISP0 for IPv6 VRF traffic

CSCud26697

cat6000-ltl

%BIT-SW1-4-OUTOFRANGE: error on 11/17 build

CSCud45116

cat6000-mcast

MCVPLS: Traffic drop seen at other Rx when one of the Rx sends leave

CSCum75647

cat6000-mcast

Mcast traffic/ system stability issues in quad-sup w/ 6800IA scale setup

CSCtj90838

cat6000-medianet

packet counters in "show policy-map type perf int" not working on Cat6k

CSCuj51621

cat6000-medianet

Egress traffic drop on L3 Port-channel after 2nd switchover

CSCuj48465

cat6000-medianet

cat6k sup720: perf-mon flows dropped after 2 SSO sessions

CSCul21478

cat6000-netflow

CPU hog at CTS_CORE during env data refresh with >16k SGNames

CSCug79705

cat6000-netflow

Unexpected reload if 6800IA host ports w/ dual flow monitors defaulted

CSCug28878

cat6000-qos

c4mk1: Traceback@vs_get_pslot_switch_id

CSCue34550

cat6000-qos

Even with L4OP Range in ACL definition Global Policy-Map gets enabled.

CSCuj96208

cat6000-routing

Crash seen @cfib_backfit_path when peer box is reloaded

CSCue65316

cat6000-routing

MA2b:MPLS recirc goes missing for newly added NHRP node in L2oGRE

CSCtx93042

cat6000-svc

MA1B:ASA-SM/ACE/FWSM VLANs not getting removed on VSS setup from SUP

CSCua96981

cat6000-svc

Some module may reset after SSO in a heavy loaded chassis

CSCty14223

cat6000-svc

Trifecta project name seen in show module output of NAM3

CSCul58236

cat6000-vntag

Traffic drop in FEX during ISSU b/w run and commit version

CSCuh68974

cat6k-vs-infra

entPhysicalVendorType returns nullOID for FEX chassis.

CSCui77236

cat6k-vs-infra

FEX Ports does not come up after SSO if standby port delay is configured

CSCul74084

cat6k-vs-infra

ISSU: Failure to get switch_id & phy_fidx- after Fex RV from MK1 to fc4

CSCug23479

cat6k-vs-infra

Switch PMK configured on slot 6 sup not synced to sup on slot 5

CSCuf86511

cat6k-vs-infra

System does not boot if all 4k vlans are present in startup config.

CSCtx28226

cat6k-vs-infra

"redundancy reload peer" leads to dual-active with mcast traffic

CSCts59702

cts

CTS dot1x link not up between CTS capable and CTS aware cards in E8

CSCul52636

cts

RBM registration with XDR IPv6 subtree is missing

CSCuj42862

ifs

6880-X Switch: Error in writing crashinfo "open failed (-1): I/O Error"

CSCuj99670

ip

Crash on unconfigure of Egress and Ingress interfaces with scale traffic

CSCtn53347

ip-tunnels

Issue with tunnel path_mtu_discovery after sso switchover

CSCue53147

ipmulticast

C4 Quadsup Traffic drops seen twice~2 sec after 130 seconds of sso

CSCtz48366

ipsec-core

Standby config is getting marked dirty during boot due to ctid/crypto

CSCtl50549

itasca-sup

CNMA1: ACE RHI Routes are withdrawn after doing an SSO

CSCub89797

mpls-mfi

Standby Router reloads due to Config Sync: Line-by-Line sync failure

CSCtz12715

nat

TB while deleting Static nat entry which has interface as global address

CSCuj66318

ntp

ntp allows query with access-group configured

CSCul56726

snmp

6504 VSS Upgrade 15.1(1(SY) to 15.1(2)SY breaks SNMP

CSCts16791

vrfinfra

cnma1b: vnet cli present when vnetcore to switchport and then to routed

CSCty37233

vrfinfra

VNET:stby crash @swidb_if_index_assign after swover with vrf vnet subif

CSCtz41529

xdr

Line card may soft-reset sometimes on SSO

Caveats Resolved in Release 15.1(2)SY4

Identifier
Component
Description

CSCup99867

cat6000-env

6880 VSL link Timeout

CSCun17857

cat6000-l2-infra

Standby switch joins VSS in RPR mode after switchover

CSCun11109

cat6000-mpls

Xconnect MTU configuration is not available on C6880 or SUP2T platforms

CSCuo36172

cat6000-sw-fwding

Extra padding added for Sup2T and PVST BPDUs

CSCuj32321

flexible_netflow

Standby reload due to parse error

CSCum28609

ip

SUP2T failed to send broadcast ping packet

CSCuh49066

parser

Standby crashes due to LBL sync on "parser view li-view"

Caveats Resolved in Release 15.1(1)SY4

Identifier
Component
Description

CSCuj11720

bgp

PE does next-hop-self while sending eBGP route to iBGP vrf-lite CE

CSCuh43027

bgp

BGP route does not disappear from the RIB

CSCue68714

bgp

OVLD: BFD BGP Client Incompatibility between IOS t-train and IOSXE

CSCun68006

cat6000-ipc

15.1(1)SY1 : Quad-SUP VSS(Sup2T) : Crash During Switchover

CSCui27401

cat6000-qos

cat6000-qos Traceback and crash after linecard failure

CSCuj31321

cat6000-qos

Sup2T: Notification timer expired for RF Client: Cat6k QoS Manager

CSCuh70828

cat6000-snmp

SNMP okButDiagFailed Traps received when module status is 'ok'

CSCuj96561

cat6000-svc

wism redundancy-vlan and wism service-vlan must reject vlans in trunk

CSCua73834

pki

Incorrect rollover cert issued to clients enrolling to IOS CA via IOS RA

CSCui37358

pki

PKI: peer cert validated with different trustpoint than passed by IKE

CSCul08799

sisf

IPDT: nmsp prevents converting the port from access to trunk

CSCty92208

wccp

Ingress wccp + cts sgacl monitor + reboot results in CPU exception

Caveats Resolved in Release 15.1(2)SY3

Resolved ipv6 Caveats

Symptom: A vulnerability in the implementation of the IP version 6 (IPv6) protocol stack in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause I/O memory depletion on an affected device that has IPv6 enabled. The vulnerability is triggered when an affected device processes a malformed IPv6 packet.

Cisco has released free software updates that address this vulnerability. There are no workarounds to mitigate this vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ipv6

Note: The March 26, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. All advisories address vulnerabilities in Cisco IOS Software. Each Cisco IOS Software Security Advisory lists the Cisco IOS Software releases that correct the vulnerability or vulnerabilities detailed in the advisory as well as the Cisco IOS Software releases that correct all Cisco IOS Software vulnerabilities in the March 2014 bundled publication.

Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication at the following link:

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar14.html

Conditions: See published Cisco Security Advisory

Workaround: See published Cisco Security Advisory

Further Problem Description: PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 7.8/6.4:

https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C CVE ID CVE-2014-2113 has been assigned to document this issue.

Additional information on Cisco’s security vulnerability policy can be found at the following URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

Other Resolved Caveats in Release 15.1(2)SY3

 

Identifier
Component
Description

CSCuc32663

aaa

IOS should not send passwords and sensitive information to ACS logs

CSCud55435

aaa

Optimization of Access-Request (Radius) path

CSCue43907

aaa

ip radius source-interface not PRC compliant

CSCtz07902

bfd

Standby RP repeated crash pointing to ipv6_bfd

CSCuc60868

bgp

Router Crash on uncfg & reconfig of VPLS BGP Signaling - Script Run

CSCuj11720

bgp

PE does next-hop-self while sending eBGP route to iBGP vrf-lite CE

CSCul96778

bgp

Router crash at bgp_topo_valid_tid

CSCum14830

bgp

IPv6/After route leak from vrf to global using BGP, next hop shows null0

CSCum58261

bgp

BGP additional paths disable config per neighbor not saved in NVgen

CSCum85041

bgp

BGP Aggregate route with IPv6 VRF does not remove

CSCum98099

bgp

BGP IPv4 MDT routes are lost after reload

CSCun11782

bgp

RTfilter prefixes sent with next-hop of default static route in GRT

CSCun39038

bgp

Selective route download for ipv6 blocking all routes post reload

CSCuo02832

bgp

ASR 1001 SNMP BGP peer polling, malformed IP information

CSCug11351

c7600-system

ISIS Flap on RSP Switchover

CSCum02094

call-home

call-home would crash sending a DS message if the DS didn't contain SR

CSCun51501

cat6000-acl

Crash on active supervisor when standby is reloading

CSCuo45250

cat6000-acl

Quad SUP2T VSS: Standby supervisors appear to have memory leak

CSCug29433

cat6000-diag

6k Enh: Add "reset count" config knob for GOLD to power-down LC

CSCuo24560

cat6000-diag

I/O memory leak with active SUP due to issues with standby SUP

CSCum39766

cat6000-diag

Estelle: Add support for SFP-10G-ZR from IOS side

CSCul69259

cat6000-env

ISSU VS Power Client errors seen while ISSU from 15.1(2)SY to 15.1(2)SY1

CSCum60489

cat6000-env

System LED shows amber when power supplies are restored on sup2t VSS

CSCum82569

cat6000-env

t1mk1c: PIM neighbor with query interval 500ms flaps every 1hour

CSCun06843

cat6000-env

6807: After SSO, power mode changes from Combined to Redundancy

CSCun72660

cat6000-env

Standalone to VSS quad sup2t from mk1c to mk2 image estelle goes down

CSCuo42865

cat6000-env

Implementing ICC msg for CLI sh power fex id status ps/fan for KF

CSCuo45815

cat6000-env

Implementing console disable/enable option for fex through Socket

CSCuo99860

cat6000-env

Backout MALFRA upgrade from CSCuo53369

CSCuo53369

cat6000-env

FPGA changes required for Gigatron/G1 ASIC due to CSCun78994

CSCuj48794

cat6000-firmware

Sup2T may give false EARL temp readings

CSCul18679

cat6000-firmware

ASASM may reload on removing Active Sup

CSCun65772

cat6000-firmware

Cat6500 VSS crash due to watchdog timeout, process = slcp process

CSCuo52995

cat6000-firmware

Enable packet padding on Gigatron/G1 for 1G

CSCuh57728

cat6000-ha

Bootvar retains "version1" image after successful issu upgradation

CSCuo25812

cat6000-hw-fwding

Adjacency not updated when cause for recirculation is removed

CSCun62742

cat6000-l2-ec

Changing the FEX Host PO load balance method doesn't reflect on IA

CSCup03967

cat6000-l2-ec

RSL Member stuck in 'w' state after few interface flaps

CSCtq27155

cat6000-l2-mcast

'clear ip igmp snooping statistics' does not clear stats on standby sup

CSCuo84886

cat6000-ltl

Backout the changes CSCul88077

CSCug79705

cat6000-netflow

Unexpected reload if 6800IA host ports w/ dual flow monitors defaulted

CSCun30574

cat6000-qos

Wrong display order of Queue for FEX Host Ports

CSCun58476

cat6000-routing

cat6k:mls cef adjacency programmed with non-existent vlan

CSCuo51010

cat6000-snmp

Cisco C6880-X is returning incorrect OID for the MIB sysObjectId

CSCum43584

cat6000-span

6500 Ingress VLAN SPAN stops working

CSCuo85141

cat6000-svc

Backing out changes of CSCun26135

CSCun20430

cat6000-sw-fwding

ospfv3 control packets entered incorrect queue

CSCun33658

cat6k-vs-infra

Cetus:remove est LC card,perform reload-MCL error msg and stdby is reset

CSCun78131

cat6k-vs-infra

FEX Module provisioning entry isn't removed completely upon unconfig

CSCun13688

clns

Device crash after "sh clns route" issued

CSCug86067

config-sync

Macros lost when ISSU from IOS XE 3.3.x to 3.4.0

CSCuh85819

config-sync

partial config lost on 2nd switchover on SUP7-E

CSCui03965

config-sync

ISSU XE392->XE310 Config-sync@commands configure include interface

CSCuh05259

config-versioning

file prompt quiet cli dont work with config replace cli

CSCun78994

connor-hw

Packets seen as runts on the neighbor when decapsulating dot1q/mpls

CSCuh37526

crypto-engine

Pseudo-random number was generated twice in succession

CSCuj99926

fib

SNAP Encapsulation not working with CEF enabled.

CSCum85813

ip

Floating static not installed on ASR901

CSCts34688

ip-acl

Switch crashed due to memory fragmentation "HACL Acl Manager"

CSCue68124

ip-pbr

PBR not work with null0 default route

CSCum95311

ip-pbr

ip next-hop recursive not forwarding traffic

CSCug47367

ip-tunnels

3900e crashes on bootup /w CDP on tunnel or traceback for non E platform

CSCuh72000

ip-tunnels

PI doesn't copy TOS from mpls header to IP/GRE header

CSCuj87667

ip-tunnels

The copy from MPLS exp bits to IP tos is done without the left shift

CSCum52676

ip-tunnels

Local packet marking is NOT copied on the Tunnel with qos pre-classify

CSCum92989

ip-tunnels

Traffic black-holed V6 tunnel encap packet over but payload less 1280

CSCul22535

ipc

VSS Quad Sup2T IPC failure causes a reload

CSCuj59816

ipmulticast

Auto-RP messages are dropped in a certain scenario

CSCui90139

ipsec-core

ASR1K : Crypto Route not getting deleted on Responder

CSCuh21969

mcast-vpn

MVPN Extranet Join(S,G) not triggered for Sparse-mode

CSCun86871

nat

Switch crashes due to nat processing Real Audio Traffic

CSCuo04983

netflow-switch

ip ingress added to interface config when ip flow ingress configured

CSCuh71381

ntp

PKI does not set renew timer upon a router reload

CSCui59004

ntp

iosd crash while configuring no ntp server

CSCuj66318

ntp

ntp allows query with access-group configured

CSCto43433

os

Router crashes while printing into tty

CSCto60263

os

PfR - ASR crashed at _be_validate_memory

CSCul54254

ospf

OSPFv3 may not flush some apparently self-originated LSAs

CSCul75876

ospf

RSP2:OSPF process - router crash on default interface

CSCul96608

ospf

%OSPF-SW2_STBY-4-CHKPT_MSG_SEQ printed on console

CSCum67697

ospf

OSPFv3 summary route via Null0 isn't installed after best route deleted

CSCun26962

ospf

Adding secondary IP address doesn't trigger OSPF update

CSCun48344

ospf

SSTE: Amur: config-sync failure on address-family ipv6 unicast vrf

CSCun77010

ospf

Router crashed on executing "show ipv6 ospf rib".

CSCua73834

pki

Incorrect rollover cert issued to clients enrolling to IOS CA via IOS RA

CSCue32707

pki

PKCS12 "crypto pki export" may crash router

CSCuf93460

pki

PKI counters go into negative numbers

CSCug72874

pki

GM registers multiple times when cert is revoked due to wrong err fr PKI

CSCui07002

pki

PKI chain-validation seg fault process Crypto PKI-CRL if CRL is expired

CSCui39989

pki

PKI must handle intermediate issuer certs consistently

CSCui54042

pki

"no crypto pki certificate pool" command crashes router

CSCuj74574

pki

Router fails to delete expired ID and CA certificates after rollover

CSCuj88820

pki

Router gets into continuous cert renewal loop even after CA cert expires

CSCul40500

pki

PKCS10 in SCEP enrolment signed with MD5 not configured hash alg

CSCum12911

pki

IOS PKI auto-enrolment fails with enrollment-profile

CSCum94408

pki

IOS PKI Public Key caching fails during IKE MM6 Signature verification

CSCum96156

pki

IOS PKI fails to match certificate map if provisoned with config merge

CSCun20719

pki

IOS PKI renew timer does not start with enrollment profile

CSCui64807

ribinfra

Active RP crashes due to mem corruption after changing to Simplex mode

CSCun45471

ribinfra

RIP/OSPF config rollback fails with passive-interface default enabled

CSCtr91402

service-routing

Crash in __be_sr_api_vrf_af_deleted when removing vrf definition

CSCty21638

service-routing

Enabling SAF reloads the box setting null Q structure

CSCtd45679

sla

Removing ip sla probe (configured by SNMP) in CLI reloads Standby Sup

CSCud95329

sla

Wrong IP SLA schedule after reboot

CSCtz66347

ssh

Executing show tech over SSH session with rekey crashes the router

CSCui83823

ssh

SSHV2 session closes prematurely via telnet and putty

CSCum68602

vrfinfra

MPLS VRF MIBs are not cleaning up interface list iterators

CSCty92208

wccp

Ingress wccp + cts sgacl monitor + reboot results in CPU exception

Caveats Resolved in Release 15.1(2)SY2

Resolved tcp Caveats

Symptom: A vulnerability in TCP stack of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an ACK storm.

The vulnerability is due to improper closing of the established TCP connection. An attacker could exploit this vulnerability by sending a crafted sequence of TCP ACK and FIN packets to an affected device. An exploit could allow the attacker to cause an ACK storm resulting in excessive network utilization and high CPU.

Conditions: Multiple FIN/ACK packets are received.

Workaround: Do clear' tcp tcb 0x......' where the hex value is the address of the TCB stuck in LASTACK state in ’show tcp brief.'

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 4.3/3.6: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:M/Au:N/C:N/I:N/A:P/E:F/RL:OF/RC:C CVE ID CVE-2013-5469 has been assigned to document this issue.

Additional details about the vulnerability described here can be found at: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Other Resolved Caveats in Release 15.1(2)SY2

 

Identifier
Component
Description

CSCtq36545

aaa

2960 %AAA-3-INVALIDPARM: invalid parameter was used when accessing AAA f

CSCuj65057

aaa

ip vrf forwarding is deleted after reloading stack master

CSCuh04989

aaa

Not Update Src IP address of Radius Packets

CSCug31122

aaa

Workaround fix for VTY hung issues

CSCul18227

bgp

ASR1K RR resets the PSMI tunnel attribute

CSCue68714

bgp

OVLD: BFD BGP Client Incompatibility between IOS t-train and IOSXE

CSCuj99819

bgp

LSM and MVPN traffic dropping after clear BGP * with TE Tunnel

CSCtw84414

c7600-l2

standby reset due to config sync "monitor session 4 source remote vlan"

CSCuh91225

call-home

Router crashes @ pki_import_trustpool_bundle while test call-home v2

CSCul29932

cat6000-acl

15.1(1)SY1

CSCul07195

cat6000-diag

active ICA will reload when HM LtlFpoeMemoryConsistency fail on standby

CSCum00653

cat6000-env

6500 - SNMP - CiscoEnvmonFanState incorrect - 15.1

CSCum76224

cat6000-env

6880x Crash due to "show plat hard capa"

CSCul39734

cat6000-env

Cat6k VSS incorrect ceDisplayState & ceDisplayColor for PS "FAN OK"

CSCuj13346

cat6000-env

VSS ciscoEnvMonRedundantSupplyNotification not sent from active chassis

CSCul21009

cat6000-env

MK1.C: Cetus: Change power redundancy model to N+1 for all combo of PSU

CSCul47658

cat6000-env

G1 image bundling with IOS image (for CSCul27866)

CSCuj28345

cat6000-env

QuadsupC2MK1b: Device crashed on reload with switching mode dcef

CSCui50773

cat6000-fabric

speed & product id blank in "sh inter trans fex-fab" o/p for SFP-10-LRM

CSCuj53393

cat6000-filesys

Trifecta: Trifecta LC hangs during bootup at rommon.

CSCuj78044

cat6000-firmware

6716-10G (Hw ver 2.0) may report inlet temperature higher than outlet

CSCui65654

cat6000-firmware

Packets are looped within chassis when WS-X6904-40G is used

CSCuj32632

cat6000-firmware

sup2t:traffic not received from 6848-SFP ports due to rx datapath stuck

CSCul77666

cat6000-firmware

Undersized frames sent with CTS static SGT

CSCui60473

cat6000-firmware

"show inventory raw" shows junk values for PID and VID for 1Gig SFP's

CSCum02024

cat6000-firmware

6880-X Switch: ZR optics assert TX_FAULT

CSCun01599

cat6000-ha

MK1.C:[CAT6K NTI ERR]:NTI trace dumped for s2t54 while ISSU-up/downgrade

CSCul07387

cat6000-ha

VSS domain id change doesnt get updated on standby

CSCuh57728

cat6000-ha

Bootvar retains "version1" image after successful issu upgradation

CSCul19363

cat6000-hw-fwding

"platform sub-inter maximum-vlan enable,subinter stop forwarding traffic

CSCuj83351

cat6000-hw-fwding

Router mac not programmed in L2 table, learned as dynamic

CSCuj13109

cat6000-l2-ec

Sup2T MEC members go suspend when trunking native and trunk allowed same

CSCul64956

cat6000-l2

PVLAN association >255 char lost after reload

CSCuj30680

cat6000-l2

Continuous tracebacks @ udld_send_update upon disabling fast-udld

CSCul32006

cat6000-l2-infra

Some inconsistencies seen with mgmt port LED status

CSCum11422

cat6000-l2-mcast

Microsoft NLB disable snooping CLI needs to permit only applicable MACs

CSCul76822

cat6000-l2-mcast

Mem leak @ L2MM_PD Process seen during ISSU upgrade from mk1.0 to mk1.b

CSCul12004

cat6000-ltl

VSL included in L3 vlan flood index when both MEC legs are up

CSCui72220

cat6000-ltl

FEX Host PO ping fails on FEX reload, ARP not resolved

CSCul35053

cat6000-mcast

Crash of active supervisor during ISSU (commit) with multicast enabled

CSCul17734

cat6000-mcast

FE TCAM gets disabled which affects PIM packets

CSCul15855

cat6000-medianet

cat6k sup720- perf-mon with class-map match any affecting eigrp & ospf

CSCuj51621

cat6000-medianet

Egress traffic drop on L3 Port-channel after 2nd switchover

CSCuj48465

cat6000-medianet

cat6k sup720: perf-mon flows dropped after 2 SSO sessions

CSCug21068

cat6000-mpls

Internal vlan for egress feature assigned with IPv6 link local address

CSCui57810

cat6000-mpls

With mpls recir-agg in config New 6VPE disposition broken until reload

CSCug86296

cat6000-netflow

Sup2T: EARL8 Netflow ECC enhancement

CSCui17732

cat6000-netflow

Sup2T: show tech-support hangs VTY session on Netflow TCAM interrupt

CSCul21478

cat6000-netflow

CPU hog at CTS_CORE during env data refresh with >16k SGNames

CSCui37408

cat6000-netflow

HW inconsistency seen when ingress/egress FNF applied, removed on tunnel

CSCtg67789

cat6000-portsecur

Stdby reloads 'switchport port-security mac-address sticky <> vlan voice

CSCuj04075

cat6000-qos

Show platform Datapath on Connor shows incorrect vlaues

CSCuj96208

cat6000-routing

Crash seen @cfib_backfit_path when peer box is reloaded

CSCte53717

cat6000-svc

Need to change default SCP keepalive timeout on IOS to ACE module

CSCul14564

cat6000-svc

Supervisor Crash: due to "CAT6000_SVC_APP_HW-LC1-2-APP_..." message

CSCuj96561

cat6000-svc

wism redundancy-vlan and wism service-vlan must reject vlans in trunk

CSCul58236

cat6000-vntag

Traffic drop in FEX during ISSU b/w run and commit version

CSCul65499

cat6k-vs-infra

Sort the output of "show fex system platform usage" command

CSCuj48183

cat6k-vs-infra

Gov-Connor link shows notconnect as diag fail after switchover

CSCul22006

cts

cts environment-data SGT list become corrupted after refresh w/ 30+ SGTs

CSCul52636

cts

RBM registration with XDR IPv6 subtree is missing

CSCsv79584

dhcp

DHCP relay continuesly creates dangling 0/32 leases

CSCuj72631

dns

Crash on configuring mdns

CSCuj58950

dns

mDNS traffic causes I/O memory leak

CSCui63462

dns

Bonjour/mDNS causes high CPU in unscaled setup

CSCua63182

eigrp

EIGRP min BW is calculated incorrectly for ngbrs of varying versions

CSCui23218

ethernet-lldp

NewtonCR IOS image fails UNH Test IEEE 33.1.2

CSCui98700

glbp

GLBP ip with same IPV6 link-local not allowed gives error

CSCul83053

hsrp

Unknown cHsrpStateChange trap detected when IPv6 HSRP state changed

CSCuj42862

ifs

6880-X Switch: Error in writing crashinfo "open failed (-1): I/O Error"

CSCug34404

ipsec-core

XE38 : RP_Crash seen @ __be_interface_action_remove_old_sadb

CSCug63839

ipsec-isakmp

Memory leak seen in CryptoIKMP process(crypto_ikmp_config_send_ack_addr)

CSCug38641

ipsec-switching

cTCP IPSec data packets are process switched on EzVPN server

CSCtx38121

ipv6

QoS ACL not working with IPv6 traffic on RLS12 image

CSCtw63654

ipv6

XDR-3-CLIENTISSU_PUSHFAIL: Attempting to push send XDR message (ipv6 acc

CSCuh69292

ldap

LDAP gets in stuck state even if PKI provides finite timeout

CSCuh41290

ldap

PKI with LDAP gets in stuck state due to infinite LDAP timer

CSCuh67605

nat

INVMEMINT errors related to NAT max-entries with vrf

CSCuj34455

nat

NAT Process Switches all TCP port 139 Traffic

CSCul38287

nat

NAT VRF to global not creating translations with single ip add. in pool

CSCuk59859

nat

ip_nat_anywhere miscalculated and features not removed

CSCul51526

netflow-switch

s2t crash due subinterface creation

CSCuj40804

nmsp

Fex doesn't come up after reload with "nmsp" protocol

CSCui60499

ntp

High CPU from Process NTP with "access-group serve" Configured

CSCul52741

os

C4MK1B QUADSUP:Infra ISSU Client error during LV from MK1B FC2 to MK1C

CSCul40073

ospf

OSPF interface Loopback goes DOWN after switchover on 3750 Stack

CSCtu02015

ospf

OSPF: Wrong metric in asbr-summary LSA

CSCul54254

ospf

OSPFv3 may not flush some apparently self-originated LSAs

CSCul14571

ospf

OSPFv3 NSR: crash when interface removed during delayed ack

CSCui13614

parser

Config of the interface disappears.

CSCul56726

snmp

6504 VSS Upgrade 15.1(1(SY) to 15.1(2)SY breaks SNMP

CSCuc39329

snmp

SNMP Engine Memory leak- while doing ccCopyEntry set operation

Caveats Resolved in Release 15.1(2)SY1

 

Identifier
Component
Description

CSCuf41477

aaa

TACACS line authorization failed when AV service=shell sent by Tacacs

CSCuj99819

bgp

LSM and MVPN traffic dropping after clear BGP * with TE Tunnel

CSCsq75780

c3pl

Traceback %ALIGN-3-SPURIOUS: Spurious memory access sip-400 LC

CSCuh05334

cat6000-acl

CPU went high and standby crashed while pushing ACLs - SUP 2T

CSCuf02993

cat6000-acl

SUP2T active box crashes when reloading the standby because of FM

CSCug04222

cat6000-acl

SUP2T not forwarding unicast DHCP ACK when acting as relay agent

CSCui63768

cat6000-acl

terminator: missing sub_c6k_li subsys comapred to sup2t

CSCui70455

cat6000-acl

CSCug23641 changes for Earl8 releases (15.1(1)SY (MA2) onwards)

CSCui26454

cat6000-cm

c4mk1: Line card is getting reset while large acl is applied.

CSCue91936

cat6000-cm

FPOE not programmed properly after 3rd SSO with vacl redirect

CSCui44248

cat6000-diag

%CONST_DIAG-SW1-3-BOOTUP_TEST_FAIL: Switch 1 Mod4:TestIngressSpan failed

CSCui48359

cat6000-diag

Diag msg:GOLD EEM TCL policy TestFabricCh0Health/TestMacNotifcation fail

CSCud48400

cat6000-dot1x

External loop seen on switchport configured for dot1x/mab

CSCui96441

cat6000-dot1x

IP source guard not updating PACL entry when new DHCP client connected.

CSCtq71235

cat6000-env

"4294967295 Ethernet interfaces" in "show version" command output on c6k

CSCui25588

cat6000-env

No power enable on empty slot will not keep a new linecard powered off

CSCui68336

cat6000-env

Revisit CSCug29473

CSCuh75585

cat6000-env

system power total restricted to 2268w with 2700 PS in 7606-S chassis

CSCud57919

cat6000-env

40G SR4 Transceiver not recongnized under certain condition

CSCuh92395

cat6000-env

CFex FAN entries are lost in ENTITY-MIB after SSO

CSCul47658

cat6000-env

G1 image bundling with IOS image (for CSCul27866)

CSCuh95111

cat6000-env

Incorrect media type displayed for SFP-10G-LRM on controller.

CSCui19403

cat6000-env

%RPC-SW2-4-CORE_SAT_RPC_FAIL on raise/clear FEX env temp alarm after SSO

CSCug61422

cat6000-env

Old active & old active ICS reset after SSO

CSCui50213

cat6000-hw-fwding

LTL index mapping for NLB multicast MAC is delayed upon reload

CSCui79597

cat6000-hw-fwding

Lif entry is not getting updated on minitrunk port

CSCuj65447

cat6000-l2-ec

sup2t: crash on cat6k seen if L2 loops exists in network

CSCuh30542

cat6000-l2-infra

Traffic is blackholed when port-channel member flaps

CSCuh66052

cat6000-l2-infra

MTU of RSL links show 1500 inspite of constant value 9216

CSCue10124

cat6000-l2-infra

"%QM-SW1-4-SET_MODE: Hardware mode programming failed" @default FEX port

CSCui04115

cat6000-l2-infra

fex host ports are suspended with port in half-duplex for LACP error

CSCui27472

cat6000-l2-mcast

IGMPv3 leave reports with "Change_to_include" and "sources 0" flooded

CSCuf24777

cat6000-l2-mcast

MCVPLS: PIMSN (*,g) mroutes not removed after stops joins and source

CSCui86318

cat6000-ltl

unicast flooding because mac address not learnt correctly across DFCs

CSCuh80379

cat6000-ltl

"Total unicast VIFs used" displays wrong value after SSO.

CSCuh05923

cat6000-ltl

FEX : mem leak @ vntag_mgr_handle_ucast_add_req

CSCud45116

cat6000-mcast

MCVPLS: Traffic drop seen at other Rx when one of the Rx sends leave

CSCue52201

cat6000-mcast

Output of "show mls ip multicast met detail" display incorrect OIF,MET

CSCug26395

cat6000-netflow

c4mk1: FM consistency checker found in FNF

CSCug73871

cat6000-netflow

FNF: Multicast First and last packet time stamps are incorrect

CSCuh78078

cat6000-netflow

C4QUDsup:After 2nd SSO, Reverse traffic is not flowing with ReflexiveAcl

CSCui41308

cat6000-oir

QuadSup:OIR changes for ISSU abort verion

CSCui48063

cat6000-oir

FEX continuously reloads in some conditions

CSCug63410

cat6000-portsecur

Sup2T - Inband input packet drops on IBC

CSCuh94242

cat6000-qos

Agg. policer with 'platform qos police distributed' drops all traffic

CSCui27401

cat6000-qos

cat6000-qos Traceback and crash after linecard failure

CSCui08992

cat6000-qos

Child lan-queuing policy shouldn't accept 8 classes for 1p7q8t

CSCui72775

cat6000-qos

sup2T - 'auto' CLI not listed upon a ?

CSCuj31321

cat6000-qos

Sup2T: Notification timer expired for RF Client: Cat6k QoS Manager

CSCue34550

cat6000-qos

Even with L4OP Range in ACL definition Global Policy-Map gets enabled.

CSCui08914

cat6000-qos

L2-Miss match is getting accepted on Ingress Routed-Interface also

CSCui73345

cat6000-qos

Two priority queues doesn't work when shape is configured

CSCui25364

cat6000-qos

Bulk sync failure causes continuos standby reload with cos-mutation

CSCuj17251

cat6000-qos

Port level shaper doesn't work when shape is not configured on queue

CSCuh98603

cat6000-routing

sup2t :: uRPF dropping packets

CSCui87669

cat6000-snmp

ciscoEnvMonTemperature is not always sent out after module insert

CSCui82742

cat6000-svc

c4mk1: NAM-3 on Standby fails to recover after ISSU load version

CSCuj08631

cat6000-svc

NAM:Accessing span sessions not available through GUI after SSO

CSCui19374

cat6000-sw-fwding

Sup2t forwards traffic sourced at IP 0.0.0.0 when dst MAC is broadcast

CSCui35002

cat6000-vntag

L2/L3 traffic doesn't resume after Controller SSO followed by FEX reload

CSCui75787

cat6000-wccp

Redirect ACL do not work when WCCP client asked for multiple ports

CSCuj85177

cat6k-vs-infra

catalyst 6500 VSS switch does not come up in SSO after upgrade

CSCui83552

cat6k-vs-infra

ROIR removal of fex does not always reload the fex

CSCuh68974

cat6k-vs-infra

entPhysicalVendorType returns nullOID for FEX chassis.

CSCue95010

cat6k-vs-infra

FEX : mem leak @ fexmgr_sdp_srp_pkt_handler after bootup

CSCui77236

cat6k-vs-infra

FEX Ports does not come up after SSO if standby port delay is configured

CSCuf86511

cat6k-vs-infra

System does not boot if all 4k vlans are present in startup config.

CSCse52239

clns

c2600xm with ctunnel and no destiination nsap upon reload router crashes

CSCuj29428

crypto-engine

%SYS-SW1-2-INTSCHED: 'sleep for' at level 2 -Process= "Init"

CSCug71572

dhcp

DHCPv6 relay not working over LISP

CSCuc99750

eigrp

EIGRP routes which are not FS making it to the routing table

CSCud02045

ethernet-cfm

RP crashes after applying cfm mip config to interface

CSCsy87125

ethernet-oam

EOAM:RFI DG msgs are continuosly sent to peer on redundancy RPR-->SSO

CSCuj64806

fhrp

VRRPv2 priority goes wrong with tracking tunnel

CSCuh40275

fib

MCP: SNMP Engine process occupy more than 97% CPU utilization

CSCui45414

flexible-netflow

SUP2T crash due to memory corruption with alloc PC related to FNF

CSCui95880

hsrp

HSRP for IPv6 flaps when there is a loop in the network.

CSCui47386

hsrp

HSRP MIB should send traps for all groups

CSCtk00976

ifs

File descriptor leak and not getting release - readh FD limit

CSCuj08831

ipc

Crash @ ipc_compare_seats part 2

CSCui83592

ipc

Line card WS-X6816-10GE crashed in IPC code

CSCui46951

ip

"%Bad mask x.x.x.x for address x.x.x.x" output with ip account-list

CSCuk62206

ip

static arp change not notified to CEF/ADJ

CSCui94718

ip

Watchdog in IP Connected Route Background

CSCua44483

ipmulticast

ME3600X suddely stops sending multicast for all groups 151-2.EY

CSCuj27671

ip-tunnels

QUAD SUP2T VSS Failover fails with tunnel path-mtu-discovery config

CSCuc38611

ip-tunnels

TTL of inner header is decremented twice

CSCtl51688

nat

NAT Error registering with Transport Port Manager - Standby Reload

CSCui94118

nat

static NAT vrf removed upon removal of "vrf definition <vrf_name>"

CSCui52587

ntp

ntp broadcast config of the last vlan was removed after delete a SVI

CSCui23670

remote-tty

Even if show sup-bootdisk is executed, nothing is displayed.

CSCui72518

rsvp

IOS RSVP authentication problem during TE FRR

CSCuj23802

tcp

SUP2T crash after unplug/plug 4 sfp from the WS-X6724-SFP

CSCsw29816

vpdn

L2TPv2 - Enabling ip pmtu on the LAC may blackhole large packets

CSCtj44098

vpdn

SSM CM: SSM switch id 0 [0x0] allocated issue

CSCtb34814

x25

Crash after %DATACORRUPTION-1-DATAINCONSISTENCY

CSCuj65989

xdr

Active sup in crash due to process "xdr_mcast_set_max_seq_for_transmit"

Caveats Resolved in Release 15.1(2)SY

Resolved gsr-boot Caveats

Symptom: If a linecard is reset (either due to an error or a command such as hw-module slot reload) at the precise time an SNMP query is trying to communicate with that linecard, the RP could reset due to a CPU vector 400 error.

Conditions: This symptom occurs when the linecard is reset (either due to error or a command such as hw-module slot reload) at the precise time an SNMP query is received.

Workaround: There is no workaround.

Resolved ios-authproxy Caveats

Symptom: Local webauth and HTTP services stop responding on the switch.

Conditions: A show processes | inc HTTP Proxy lists many instances of the “HTTP Proxy” service, and these do not disappear.

Workaround: The HTTP Proxy service may experience delay due to an incorrectly terminated HTTP or TCP session. In some cases, increasing the value of ip admission max-login-attempts works around this issue. In others, the stuck “HTTP Proxy” service will again become available after a TCP timeout.

Some browsers and background processes using HTTP transport can create incorrectly terminated HTTP/TCP sessions. If webauth clients are under control, changing web browsers or eliminating background processes that use HTTP transport may eliminate triggers for this issue.

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5/4.1: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:N/I:N/A:P/E:F/RL:OF/RC:C

CVE ID CVE-2012-4658 has been assigned to document this issue.

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Resolved ios-firewall Caveats

Symptoms: Cisco router hangs until a manual power cycle is done. If the scheduler isr-watchdog command is configured, the device will crash and recover instead of hanging until a power cycle is done.

Conditions: This is seen with websense URL filtering enabled and with zone based firewalls.

Workaround: Disable URL-based filtering.

Resolved ntp Caveats

Symptoms: Packets sent by the Cisco IOS NTP server will have the IP identification field set to zero, behavior which may be flagged as a vulnerability by some security scanners.

Conditions: NTP server configured on Cisco IOS

Workaround: There is no workaround

Further Problem Description: Other UDP-based services on IOS (SNMP and DHCP as two examples) set the IP ID field to a nonzero value. As CVE-2002-0510 was originally reported as a way to identify a device as running a Linux 2.4-based kernel, the actual value of using this as a method to identify the underlying OS is very low.

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5/4.8:

https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:P/I:N/A:N/E:F/RL:U/RC:C

CVE ID CVE-2002-0510 has been assigned to document this issue.

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Resolved ssh Caveats

Symptoms: In certain conditions, IOS device can crash, with the following error message printed on the console:
“%SYS-2-WATCHDOG: Process aborted on watchdog timeout, process = SSH Proc”

Conditions: In certain conditions, if an SSH connection to the IOS device is slow or idle, it may cause a box to crash with the error message printed on the console.

Workaround: None

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 6.3/5.5: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:M/Au:S/C:N/I:N/A:C/E:H/RL:OF/RC:C CVE ID CVE-2012-5014 has been assigned to document this issue. Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Other Resolved Caveats in Release 15.1(2)SY

 

Identifier
Component
Description

CSCub04965

aaa

TCP Session hung causing Packet loss

CSCuc50697

aaa

Exec Authorization fail of session-timeout is greater than 2147483 image

CSCuc59858

aaa

Dynamic-Author should consider src port when detecting retransmissions

CSCue03316

aaa

EoGRE: SSS Manager Segmentation fault/RP reloaded during scale test.

CSCue13913

aaa

Incorrect password used by RADIUS automated-tester after config save

CSCue18133

aaa

[7600] Router crash at show_li_users

CSCue87815

aaa

The secret password in "setup" not saved

CSCuf17296

aaa

ASR1k ISG: Missing Class Attribute in Accounting-Request

CSCug24114

aaa

CTS env download failed on non seed device after reboot

CSCug62154

aaa

Mk1: High CPU 100% due to TPLUS with tacacs config

CSCuh43252

aaa

unable to login and high cpu when authenticating with TACACS

CSCua76157

bgp

BGP routes getting advertised even after removing send-lable from the PE

CSCuc22651

bgp

XE 38: BGP RR SIT: Doing shut on interface, crashes BGP

CSCuc60297

bgp

redistribute VRF route into BGP with global NH does not work

CSCud55286

bgp

On SSO IIF int goes Null & traffic drop,mpvn: 60-90 sec traffic drop

CSCud55354

bgp

BGP_MIB: Incorrect InetAddressType being returned

CSCud79067

bgp

CISCO-BGP-MIB output presented in non-ascending order

CSCue28908

bgp

Router may crash with "show ip bgp vpnv4 vrf < >" command

CSCue65006

bgp

MPLS-VPN traffic fails in pure BGP NSR environment

CSCue72839

bgp

BGP link-bw doesn't program traffic share cnt in RT/CEF if soft-in+r_map

CSCue76102

bgp

XE39:IBGP ipv6_redistributed routes not learned in neighbour router

CSCuf09006

bgp

clear ip bgp * soft out or graceful shut on PE purges all routes on RR

CSCuf09198

bgp

vrf lock is not free up after no vrf definition vpn under AD and Croute

CSCuf82179

bgp

BGP routes not cleared from multicast RIB when address-family removed

CSCug09958

bgp

Default ipv6 routes '::/0' turn to ::/16

CSCug82964

bgp

BGP NSF forwarding state not preserved during SSO

CSCuh07657

bgp

VRF Aggregate label not re-originated

CSCuh24040

bgp

BGP routes not marked Stale nor removed when peer down w/ BFD signaling

CSCuh43027

bgp

BGP route does not disappear from the RIB

CSCuh43255

bgp

ASR route server crashes due to BGP task

CSCue27826

c6k-l3-lisp

LISP: set dscp tunnel with LISP not marking outer hdr for IPv6 traffic

CSCuf83644

c6k-l3-lisp

LISP: Traffic drop on ITR encap when destined to PETR

CSCug14851

call-home

s72033:Tracebacks seen while doing ISSU from ma2.0 to ma2.b.

CSCue61593

cat6000-acl

show acl doesn't display Ethertype configured.

CSCue65728

cat6000-acl

SUP-2T--VRF NAT stops working after 24-48hrs into operation

CSCue89061

cat6000-acl

6k crashes while applying a non-existing Mac ACL on the port

CSCue93721

cat6000-acl

PPTP call not getting conn. when extendable keyword used with static nat

CSCug08012

cat6000-acl

LISP: Encap traffic drops if we unconfigure "ipv4 etr"

CSCug14796

cat6000-acl

FM INCONSISTENCY CHECk on 6500 VSS switch due to FMCC issue

CSCug27047

cat6000-acl

Config Sync: Bulk-sync failure due to PRC mismatch in ACL

CSCug34187

cat6000-acl

CSCug23641 changes for 15.1(1)SY (MA2) release onwards

CSCug56779

cat6000-acl

c4mk2:Active sup crashes @ ipnat_l3_fixup

CSCug65925

cat6000-acl

CPU hog messages after making changes to ACL

CSCug69230

cat6000-acl

HSRP Packets dropped, on applying inbound ACL with LOG statement / Sup2T

CSCuh57776

cat6000-acl

DHCP binding entry expire

CSCui44825

cat6000-acl

LIF expansion not working on voice vlan Fex host ports after reload

CSCuf81446

cat6000-cm

SUP2T reset w/ Failed TestL3TcamMonitoring w/ high adjacency utilization

CSCuh07066

cat6000-cm

Sup2T - ACL Tcam count - Malfunction - Adds additional ACL's - TCAM Leak

CSCuh60848

cat6000-cm

crash@cm_rbacl_replace_req_hdlr while enabling the enforcement

CSCug54436

cat6000-cts

After first SSO traffic drop seen on cts link with cts egress reflector

CSCue72286

cat6000-diag

MA2b:Diagnostic handler is not found for DFC card after switchover

CSCuf85528

cat6000-diag

Multiple GOLD tests disable autoboot when HW isn't at fault post failure

CSCug78833

cat6000-diag

Quadsup:online-diag take wrong action on standby-ICA when ICS SUP fail

CSCuh17586

cat6000-diag

Crash after CF/disk failure due to read/write operations involving SEA

CSCtj15915

cat6000-dot1x

Static MAC entry not removed with MAB and dot1x multi-host

CSCue31621

cat6000-dot1x

MAB fails after 6500 reload when port configured for critical voice vlan

CSCuh03710

cat6000-dot1x

cat6000 dot1x in MDA - IP phone losing connectivity after few minutes

CSCue59987

cat6000-energywise

Input queue size becomes negative with energywise enabled.

CSCug69969

cat6000-energywise

Memory leak of 76 bytes in powernet pd process after OIR of a card

CSCud75039

cat6000-env

6500 with 12.2(33)SXI7 doesn't send traps on 10G low optical power alarm

CSCue93101

cat6000-env

Cat6k: "exception memory minimum ... reboot" does not work on SP

CSCuh43325

cat6000-env

Sup 720 switchover causes incorrect show power output

CSCue02511

cat6000-fabric

VSS FPOE incorrect on standby

CSCue58955

cat6000-filesys

sup2t: LC file systems are not destroyed in Active upon reset

CSCue99098

cat6000-filesys

When Dom0 mode is RPR, standby ICS RFS not created.

CSCug29473

cat6000-filesys

Crash on Sup2T when copy initated through scp/tftp

CSCue11384

cat6000-firmware

c4ma2: Estell fabric OR mask programming is not proper

CSCug28934

cat6000-firmware

Incorrect COS Map and Negative Min Threshold in hardware for WS-X6548-GE

CSCud15048

cat6000-ha

Add mini trunk support to LIF manager

CSCug21530

cat6000-ha

Active ICS fails to reload from rommon

CSCuh45404

cat6000-ha

C4 4sup: optimize time to notify VSL on switchover

CSCtt42531

cat6000-hw-fwding

Fib Exception only on multiple WS-X6908-10G of Sup2T system

CSCue49346

cat6000-hw-fwding

C6K/Sup2T: LDB Mgr should not preallocate 4K LIF for L3 Subinterfaces

CSCue58387

cat6000-hw-fwding

TCAM Exception State Should Capture Prefix Distribution

CSCue79979

cat6000-hw-fwding

MCVPLS: LIF entry on DFC is not synced.

CSCuf46062

cat6000-hw-fwding

Sup2T: MAC Address is not synced properly across DFCs

CSCug44811

cat6000-hw-fwding

SUP2T:Sub-interface does not stay down when LIF entries are exausted

CSCug94630

cat6000-hw-fwding

l3 svi ip address is not reachable with service-policy on mini-trunk

CSCug94822

cat6000-hw-fwding

Host looses entry in IPDT after some time or some time post SSO

CSCuh24511

cat6000-hw-fwding

Static Mac entries create Config sync issue in VSS on reload of standdy

CSCuh43287

cat6000-hw-fwding

Cat6K: Mac entries learned on a trunk are flushed after removing vlans

CSCui65190

cat6000-hw-fwding

Incorrect policing behaviour with same policer on multiple interfaces

CSCug75365

cat6000-ipc

Crash in icc multicast code on sup720 from cmfi_process_feature_msgs_int

CSCuh45350

cat6000-ipc

C4 4sup: IPC reinit for LCs in remote chassis take over 2.5 seconds

CSCdy62921

cat6000-l2

Software forced crash when adding bridge-group to ATM subinterface

CSCug37230

cat6000-l2

System Crashes at VLAN Manager due to VTP packets looping

CSCug90305

cat6000-l2

Power deny of 6148-ge-tx-AF/AT interface with 2602 factory reset

CSCuh33725

cat6000-l2

VSS may switchover when configuring vlans

CSCui55665

cat6000-l2

STP BA can cause RSL to be stuck in BLK and Impacts FEX Image download

CSCud58772

cat6000-l2-infra

IDB gets messed up with creation/deletion of Port-channel

CSCuf36123

cat6000-l2-infra

VSS Standby crash after renaming vlan

CSCud72421

cat6000-l2-mcast

C4MA2B:VPLSoverGRE-IGMP Snping Querier pkts not send to CEs for sub-inte

CSCug75502

cat6000-l2-mcast

UDP packet to FF02::1 not flooded to the Vlan

CSCud26697

cat6000-ltl

%BIT-SW1-4-OUTOFRANGE: error on 11/17 build

CSCue84185

cat6000-ltl

C4 Quad: Distributed policing fails on switchover and reload peer

CSCuh98106

cat6000-ltl

Unable to ping the directly connected neighbour after ISSU in Qsup

CSCui35333

cat6000-ltl

LTL alloctn failre for L2 mcast bcoz LTL calbak not received + LTL shrng

CSCui64318

cat6000-ltl

LTL missing for fex host ports on double sso and fex remove/add

CSCue81201

cat6000-mcast

"ip multicast boundary <ACL> in" is blocking outbound multicast

CSCtj90838

cat6000-medianet

packet counters in "show policy-map type perf int" not working on Cat6k

CSCue77698

cat6000-medianet

MT monitoring stops when last ingress VM policy in the system is removed

CSCud99759

cat6000-mpls

VPLS over GRE Scheme 2 is not working as expected on DFC /Standby Sup

CSCuf21968

cat6000-mpls

6500: SXJ5 no 802.1Q VLAN TAG in vc type 4

CSCug39407

cat6000-netflow

Middle buffer leak when netflow with cdp enabled on tunnel interface

CSCuh51188

cat6000-netflow

Big buffer leak when netflow with lldp enabled on tunnel interface

CSCue91216

cat6000-oir

VSS config causing OIR PROCESS HOGGING CPU CREATED THE CRASH

CSCug61801

cat6000-oir

Remove a LC in Quad-Sup and then a SSO could result in VSS freeze

CSCue45522

cat6000-qos

Device crashes when modifying lan-queuing policy

CSCuf20455

cat6000-qos

Table-map with mapping value greater than 63 can be created and applied.

CSCuf56153

cat6000-qos

Updation of DSCP mutation map does not take effect.

CSCug28878

cat6000-qos

c4mk1: Traceback@vs_get_pslot_switch_id

CSCug29131

cat6000-qos

Distributed Policing is not disabled on conf replace

CSCug32878

cat6000-qos

C4Quad: Cos-mutation fails on uplink after SSO or reload.

CSCug42413

cat6000-qos

Attaching lan-queueing pol on a tunnel intf results in ServPol cmd crash

CSCue02387

cat6000-routing

removing VRF causes global default route to fail

CSCug26327

cat6000-routing

sup2t : urpf incorrectly drops traffic after vrf is configured

CSCud18108

cat6000-snmp

CAT6500 SNMP timeouts polling dot1dTpFdbTable

CSCsh37045

cat6000-svc

confusing log message - SVCLC-5-FWTRUNK:

CSCuf03709

cat6000-sw-fwding

SUP2T: MPLS EXP not copied to outer dot1q CoS for locally-generated BGP

CSCuf60783

cat6000-sw-fwding

Crash seen in adj_switch_handle_fragmentation on changing the MTU size

CSCug42222

cat6000-sw-fwding

VSS VPLS: Core Switch is not forwarding DHCP request received via VPLS.

CSCuf85182

cat6000-wccp

Sup2T after removing WCCP FEATURE_TUN_x interfaces are not removed

CSCug24158

cat6000-wccp

Disable LLDP on WCCP tunnel interfaces

CSCue97597

cat6k-vs-infra

c4ma2b: Switch goes to recovery mode while VSS-->SA conversion after SSO

CSCuf86245

cat6k-vs-infra

Standby does not get to RPR mode with image version mismatch

CSCug23479

cat6k-vs-infra

Switch PMK configured on slot 6 sup not synced to sup on slot 5

CSCug28704

cat6k-vs-infra

"wrr-queue" appears under fast-hello port after some config and reload

CSCug47997

cat6k-vs-infra

C4 ISSU FC3 renamed: After CV, whole quad-sup setup reloads

CSCty06243

checkpoint

After reload, 1st time none of scale IP ISG sessions syncing to stby

CSCug00938

cmts-platform-infr

CST: Single step ISSU failed at runversion

CSCud99034

crypto-ace

ISM-VPN crypto engine encaps fails in 15.3(1.11)T

CSCud54133

crypto-engine

FIPS certification : need continuous random number generator test

CSCue42714

cts

Manual cts link not coming UP after switchover

CSCue92705

device-sensor

Address memory leaks in device-sensor for cache delete case.

CSCtg57657

dhcp

Router crash at dhcp function

CSCue40955

dot1x-ios

802.1x Re-authentication timer is not cleared after CoA

CSCud95127

eap2

CAT6K crashes when cts change-password procedure is interrupted

CSCub20803

eigrp

EIGRP Wide-Metric: Unknown Delay is added for static routes

CSCud41058

eigrp

ASR / 152-4.S1 / EIGRP does not read route tags

CSCue78192

eigrp

EIGRP not withdrawing routes as a result of specific update/ack sequence

CSCug17808

eigrp

EIGRP not advertisinsg redistributed routes from BGP

CSCug72891

eigrp

EIGRP successor loop results in SIA

CSCug79541

eigrp

extended communities are lost after increasing delay metric in EIGRP

CSCud96882

ethernet-lldp

Buffer leak seen in I/O with lldp_send_update

CSCtw68089

eventmgr

Routing ED is missing

CSCty55449

eventmgr

Device crashes when EEM trigger is misconfigured

CSCub40161

eventmgr

Issuance of an EEM command hogs the console

CSCud31581

eventmgr

EEM script crashes router due to memory corruption

CSCua55797

glbp

privilege exec level 0 show glbp brief command causes a MALLOCFAIL

CSCuf89251

gold

FEX: 4sup ISSU the new standby crashes due to CHUNKBADFREEMAGIC

CSCub98384

hsrp

standby ASR can not ping HSRP IP

CSCue61883

ifs

In terminator partitioning the usbflash is not working.

CSCtq84313

infra-xoslib

CPUHOG due to IP SLA followed by watchdog crash on replacing config

CSCuf56303

install

ISSU abort version should show in the status

CSCue18443

ip

Subnet mask not sent in authorization request

CSCub75883

ip-acl

Access-line numbers are NOT persistant after reload

CSCui97182

ipc

6500 RPC packet leak leading to crash

CSCud50768

ipmulticast

BSR: Incorrect timer reset for BSR during switchover

CSCud90983

ipmulticast

OTV Multihome setup: Multicast stop working when shut/no shut join int

CSCue68761

ipmulticast

Buffer leak @ ip_mforward in 15.1(4)M3

CSCue75986

ipmulticast

XE39: IOSd crash @ mvpn_pim_send_join_periodic

CSCtz87485

ipsec-core

MALLOC at interrupt level only when a crypto map configured on a GigE

CSCub05907

ipsec-core

RRI isnt propagated after failure of a link, when spoke has dual ISP

CSCub26395

ipsec-core

IOS - New VPN dynamic maps not working

CSCuc36469

ipsec-core

CSR-Crash @__be_crypto_lookup_short_handle during ezvpn tunnel bring up

CSCuc93739

ipsec-core

EzVPN client with split network does not come UP when IPSEC SA is down

CSCud42938

ipsec-core

Ident remains at DMAP side even when there are no ipsec sas

CSCud59176

ipsec-core

Backout CSCub95141 in XE37

CSCud69442

ipsec-core

crypto map fails after interface flap or ip address change

CSCuc08061

ipsec-dmvpn

DMVPN spoke's crypto session was gone after removing, adding tunnel back

CSCud68178

ipsec-dmvpn

XE39: DMVPN Hub crashed after physical and tunnel interface flapping

CSCuc98855

ipsec-ezvpn

When server sends Savepwd off, client fails to establish EZVPN session.

CSCtu54300

ipsec-getvpn

fn_VRFAwareGM: KS crashed while running getvpn unconfig script

CSCtz78943

ipsec-ha

Crash after configuring a crypto map on a HSRP enabled interface 2

CSCud06887

ipsec-ha

IPSec Stateful Failover - SPIs not replicated after first switch

CSCtu02543

ipsec-isakmp

EZVPN client address leak due to peer overlap (NAT)

CSCua31157

ipsec-isakmp

One way IPsec traffic after initial isakmp contact deletes budding SA

CSCub67774

ipsec-isakmp

IKE: MM6 not re-sent if MM5 retransmitted

CSCuc31761

ipsec-isakmp

XE3.9 - KS crashes when removing GDOI groups

CSCue44587

ipsec-routing

ASR Missing RRI routes is with active SAs

CSCub83722

ipsec-switching

Tunnel interface output rate does not increment in a MPLS network

CSCuc94687

ipsec-switching

SHA256 HW crypto support on 890 Platform is missing

CSCue45934

ipsec-switching

Return traffic is not coming back in ipv4 session on c6k wit ikev2 MA2re

CSCub74272

ipsec-vti

Crypto Socket goes to closed state causing SA flaps every phase 2 rekey

CSCub89144

ipsec-vti

VTI interface is always in up/up state on HSRP standby

CSCtt96462

ip-tunnels

Packets dropped when CEF enabled under Tunnel interface

CSCua16562

ipv6

OSPFv3 External routes cannot be redistributed into BGP by route-map

CSCua21049

ipv6

ipv6 route 11::1/128 16::1 multicast fails to insert into murib

CSCuc73473

ipv6

IPv6 default route is not redistributed in BGP

CSCuc58603

isis

ciiISAdjIPAddrType reported as version 4 instead of version 6

CSCuf03079

isis

UEA:IOSd crash is seen during reopt with r-lfa in the RING

CSCug91111

isis

IS-IS flaps routes when advertisement moves to a new LSP

CSCue28318

ldap

Router crashes while executing test aaa command with wrong LDAP config.

CSCug52119

lisp

LISP: existing map-cache entry, BGP route introduced, cef keeps lisp enc

CSCta48521

loadbal

%DATACORRUPTION-1-DATAINCONSISTENCY: copy error

CSCuc51879

mcast-infra

Traffic loss on ASR1K in event of RP SSO switchover

CSCue61691

mcast-vpn

Mroute shows data mdt switchover but MRIB still shows up the default MDT

CSCue69214

medianet-metadata

Memory leak @__be_fmd_get_if_fn_buffer on removing MLPPP

CSCuf20537

mpls-te

C4: New Active Sup crashes on second SSO @rrr_autoroute_add_tunnel

CSCeb77918

nat

HSRP/NAT:Continuous ARP storm after failover of active router

CSCua46304

nhrp

Seg fault at __be_nhrp_group_tunnel_qos_apply on flapping tunnel

CSCuc45115

nhrp

Crash seen at nhrp_add_static_map

CSCua14640

ntp

Change in order of configuration statement after router reload

CSCua58386

ntp

NTP MIB for Dispersion Values incorrect

CSCua80643

ntp

892J NTP Source address doesn't change after routing path change

CSCuc44629

ntp

NTP crash during bootup

CSCuc90999

ntp

CISCO1921 snmp cntpSysPeer does not reset after removing ntp server

CSCud72473

ntp

NTP: Frequency Errors and Clock Loses Sync with 2 servers

CSCug85720

nvram

SupT2 crashes with seg fault after 'copy ftp: startup-config'

CSCug33116

os-logging

SUP2T in VSS crashes after reload if "logging origin-id ip" configured

CSCue36197

ospf

7600 Router Crashes When Exiting OSPF Helper Mode (RFC 3623)

CSCuf61469

ospf

route tag disappears by summary-address in NSSA after route flapping

CSCug23453

ospf

OSPF: route not redistributed due to DBEXIST error message

CSCug85947

ospf

MK1: Post SSO, routes go missing from LSDB and RIB

CSCuh18132

ospf

OSPFv2 NSR: reboot command does not reboot the router

CSCuh32177

ospf

OSPFv3 no passive-int <if-name> incorrectly added for ipv6 int

CSCuh40329

ospf

OSPFV3 shamlink locks up GRE tunnel

CSCub17971

pas-ipsec

GETVPN Adv: No re-registration after switching from hw to sw crypto eng

CSCud66669

pas-ipsec

VSA: GRE with TP - Packet is not decrypted into the correct ivrf

CSCug78098

pim

SUP crash in pimv2_show_rp_hash

CSCty94210

pki

ENH FlexVPN: CERTREQ improvements in IKEv2 exchange

CSCub98357

pki

OCSP validation with disable nonce is causing crashes.

CSCue44706

qos

cbQosQueueingCfgBandwidth - CISCO-CLASS-BASED-QOS-MIB - Incorrect Value

CSCuf14343

redundancy-rf

MPLS-TP traffic restore in about 10 seconds after RP switchover

CSCud80688

rmon

rmon alarm configuration is lost during upgrading from SXF to SXJ,SXI

CSCue40304

rsvp

could not find some sender in cli o/p of show ip rsvp sender vrf ivrf1

CSCuc82551

sla

Segmentation fault(11), Process = SNMP ENGINE on ASR1001

CSCug97383

sla

Switch crashes with EOAM and IP SLA configurations

CSCee55603

snmp

SNMP ACL does not work for VRF interfaces

CSCts75438

snmp

multicast hardware forwarding doesn't work after commit of CSCtn50281

CSCue80816

snmp

Crash while routine config push through SNMP

CSCuf43525

snmp

Dom1 SNMP RF client times out when Dom0 mode is RPR

CSCue37342

spa-eth-ge-5

"no snmp trap link-status" command is removed after reboot

CSCug34877

ssh

crash during ssh connections establishment / resume

CSCub36403

tftp

VSS peer reloads for Line-by-Line sync verifying failure

CSCue74612

tftp

Fts Client fails to perform ftp transfer

CSCsl19590

usb-flash-filesys

Crash at usbflash_open set_device_type

CSCug89598

vtp

"no vtp" interface configuration leads to unexpected pruning

Caveats Resolved in Release 15.1(1)SY3

Resolved aaa Caveats

Symptom: This is the Cisco response to research performed by Mr. Philipp Schmidt and Mr. Jens Steube from the Hashcat Project on the weakness of Type 4 passwords on Cisco IOS and Cisco IOS XE devices. Mr. Schmidt and Mr. Steube reported this issue to the Cisco PSIRT on March 12, 2013.

Cisco would like to thank Mr. Schmidt and Mr. Steube for sharing their research with Cisco and working toward a coordinated disclosure of this issue.

A limited number of Cisco IOS and Cisco IOS XE releases based on the Cisco IOS 15 code base include support for a new algorithm to hash user-provided plaintext passwords. This algorithm is called Type 4, and a password hashed using this algorithm is referred to as a Type 4 password. The Type 4 algorithm was designed to be a stronger alternative to the existing Type 5 and Type 7 algorithms to increase the resiliency of passwords used for the enable secret password and username username secret password commands against brute-force attacks.

This Cisco Security Response is available at http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20130318-type4

Conditions: See published Cisco Security Response

Workaround: See published Cisco Security Response

Further Problem Description: PSIRT Evaluation: The Cisco PSIRT has evaluated this issue and a Cisco Security Response is available at http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20130318-type4

If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation.

Additional information on Cisco’s security vulnerability policy can be found at the following URL:

http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Resolved ios-authproxy Caveats

Symptom: Local webauth and HTTP services stop responding on the switch.

Conditions: A show processes | inc HTTP Proxy lists many instances of the “HTTP Proxy” service, and these do not disappear.

Workaround: The HTTP Proxy service may experience delay due to an incorrectly terminated HTTP or TCP session. In some cases, increasing the value of ip admission max-login-attempts works around this issue. In others, the stuck “HTTP Proxy” service will again become available after a TCP timeout.

Some browsers and background processes using HTTP transport can create incorrectly terminated HTTP/TCP sessions. If webauth clients are under control, changing web browsers or eliminating background processes that use HTTP transport may eliminate triggers for this issue.

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5/4.1: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:L/Au:N/C:N/I:N/A:P/E:F/RL:OF/RC:C

CVE ID CVE-2012-4658 has been assigned to document this issue.

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Resolved ipsec-ikev2 Caveats

Symptom:

The load balancing feature of the flex-vpn solution of Cisco IOS does not provide authentication facilities to avoid non authorized member to join the load balancing cluster. Thus, an attacker may impact the integrity of the flex-vpn system by inserting a rogue cluster member and having the load balance master to forward VPN session to it. A number of secondary effect, including black-holing of some of the VPN traffic may be triggered by this issue.

Conditions:

Flex-VPN with Load Balancing feature active

Workaround: Using CoPP and interface access-list may be used to allow only trusted router to join the load balancer cluster

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 4.3/3.9: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:M/Au:N/C:N/I:P/A:N/E:F/RL:W/RC:C CVE ID CVE-2012-5032 has been assigned to document this issue. Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Resolved tcp Caveats

Symptom: A vulnerability in TCP stack of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an ACK storm.

The vulnerability is due to improper closing of the established TCP connection. An attacker could exploit this vulnerability by sending a crafted sequence of TCP ACK and FIN packets to an affected device. An exploit could allow the attacker to cause an ACK storm resulting in excessive network utilization and high CPU.

Conditions: Multiple FIN/ACK packets are received.

Workaround: Do clear' tcp tcb 0x......' where the hex value is the address of the TCB stuck in LASTACK state in ’show tcp brief.'

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 4.3/3.6: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:M/Au:N/C:N/I:N/A:P/E:F/RL:OF/RC:C CVE ID CVE-2013-5469 has been assigned to document this issue.

Additional details about the vulnerability described here can be found at: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5469

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Further Problem Description:

Resolved udp Caveats

Symptom: UDP based entries are not deleted from the flowmgr table resulting in crash, or poor system response, with CPU hog messages being shown.

Conditions: Affected Platforms - images ct5760-ipservicesk9.bin cat3k_caa-universalk9.bin cat4500e-universalk9.bin

Device is configured with UDP services that originate from the device. This includes but not limited to the following features: * TFTP * Energy Wise * DNS * Cisco TrustSec

Workaround: If you suspect that you are affected by this bug, please do the following, for confirmation: Router#config terminal service internal end Router#show flowmgr

The output of this command will show many lines entries holding with the same port numbers. Disabling the feature that is being held in the flows until an upgrade can be performed, is a workaround.

A reload is required to clear the held flows.

Further Problem Description: PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the time of evaluation are 5.4/4.5: https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:H/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C

CVE ID CVE-2013-6704 has been assigned to document this issue.

Additional details about the vulnerability described here can be found at: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6704

Additional information on Cisco’s security vulnerability policy can be found at the following URL: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Other Resolved Caveats in Release 15.1(1)SY3

 

Identifier
Component
Description

CSCsh43036

aaa

ip radius source-int gets NVGEN'ed as ip radius source-int vrf default

CSCug31122

aaa

Workaround fix for VTY hung issues

CSCtw84414

c7600-l2

standby reset due to config sync "monitor session 4 source remote vlan"

CSCul29932

cat6000-acl

15.1(1)SY1

CSCug69230

cat6000-acl

HSRP Packets dropped, on applying inbound ACL with LOG statement / Sup2T

CSCuf02993

cat6000-acl

SUP2T active box crashes when reloading the standby because of FM

CSCug04222

cat6000-acl

SUP2T not forwarding unicast DHCP ACK when acting as relay agent

CSCui70455

cat6000-acl

CSCug23641 changes for Earl8 releases (15.1(1)SY (MA2) onwards)

CSCui26454

cat6000-cm

c4mk1: Line card is getting reset while large acl is applied.

CSCuh17586

cat6000-diag

Crash after CF/disk failure due to read/write operations involving SEA

CSCui34949

cat6000-diag

Crash at quad/VS system boot-up if sub card diag monitor config exists

CSCui96441

cat6000-dot1x

IP source guard not updating PACL entry when new DHCP client connected.

CSCue59987

cat6000-energywise

Input queue size becomes negative with energywise enabled.

CSCui68336

cat6000-env

Revisit CSCug29473

CSCuj78044

cat6000-firmware

6716-10G (Hw ver 2.0) may report inlet temperature higher than outlet

CSCui90022

cat6000-firmware

High CPU seen when ingress pkts w/ dMAC of 0000.0000.0000 on 6904 LC

CSCug28934

cat6000-firmware

Incorrect COS Map and Negative Min Threshold in hardware for WS-X6548-GE

CSCui65654

cat6000-firmware

Packets are looped within chassis when WS-X6904-40G is used

CSCul77666

cat6000-firmware

Undersized frames sent with CTS static SGT

CSCui17608

cat6000-firmware

VACL unable to capture the routed traffic on 6500 coming from FWSM

CSCuj83351

cat6000-hw-fwding

Router mac not programmed in L2 table, learned as dynamic

CSCuh24511

cat6000-hw-fwding

Static Mac entries create Config sync issue in VSS on reload of standdy

CSCug75365

cat6000-ipc

Crash in icc multicast code on sup720 from cmfi_process_feature_msgs_int

CSCdy62921

cat6000-l2

Crash after BDPU is mishandled at the interrupt level

CSCuj65447

cat6000-l2-ec

sup2t: crash on cat6k seen if L2 loops exists in network

CSCuh30542

cat6000-l2-infra

Traffic is blackholed when port-channel member flaps

CSCui27472

cat6000-l2-mcast

IGMPv3 leave reports with "Change_to_include" and "sources 0" flooded

CSCul12004

cat6000-ltl

VSL included in L3 vlan flood index when both MEC legs are up

CSCul35053

cat6000-mcast

Crash of active supervisor during ISSU (commit) with multicast enabled

CSCul17734

cat6000-mcast

FE TCAM gets disabled which affects PIM packets

CSCuf21968

cat6000-mpls

6500: SXJ5 no 802.1Q VLAN TAG in vc type 4

CSCug73871

cat6000-netflow

FNF: Multicast First and last packet time stamps are incorrect

CSCug86296

cat6000-netflow

Sup2T: EARL8 Netflow ECC enhancement

CSCui17732

cat6000-netflow

Sup2T: show tech-support hangs VTY session on Netflow TCAM interrupt

CSCui37408

cat6000-netflow

HW inconsistency seen when ingress/egress FNF applied, removed on tunnel

CSCuh78078

cat6000-netflow

C4QUDsup:After 2nd SSO, Reverse traffic is not flowing with ReflexiveAcl

CSCtg67789

cat6000-portsecur

Stdby reloads 'switchport port-security mac-address sticky <> vlan voice

CSCuj83551

cat6000-qos

C2: IPv6 bridge rate limiter support, new feature

CSCuh94242

cat6000-qos

Agg. policer with 'platform qos police distributed' drops all traffic

CSCug26327

cat6000-routing

sup2t : urpf incorrectly drops traffic after vrf is configured

CSCug47095

cat6000-snmp

vlanTrunkPortDynamicStatus is wrong for members of PO

CSCte53717

cat6000-svc

Need to change default SCP keepalive timeout on IOS to ACE module

CSCui82742

cat6000-svc

c4mk1: NAM-3 on Standby fails to recover after ISSU load version

CSCuj08631

cat6000-svc

NAM:Accessing span sessions not available through GUI after SSO

CSCug47997

cat6k-vs-infra

C4 ISSU FC3 renamed: After CV, whole quad-sup setup reloads

CSCuj85177

cat6k-vs-infra

catalyst 6500 VSS switch does not come up in SSO after upgrade

CSCun13688

clns

Device crash after "sh clns route" issued

CSCud99034

crypto-ace

ISM-VPN crypto engine encaps fails in 15.3(1.11)T

CSCub56842

crypto-engine

"show cry eli' active IPSec counters keep increasing lead to VPN failure

CSCud87915

crypto-engine

ZBF with IP CEF drops EzVPN traffic to the client when client behind PAT

CSCuf61640

crypto-engine

%SYS-2-INTSCHED seen when calling random_fill()

CSCuj29428

crypto-engine

%SYS-SW1-2-INTSCHED: 'sleep for' at level 2 -Process= "Init"

CSCud54133

crypto-engine

FIPS certification : need continuous random number generator test

CSCua63182

eigrp

EIGRP min BW is calculated incorrectly for ngbrs of varying versions

CSCuc99750

eigrp

EIGRP routes which are not FS making it to the routing table

CSCuh94035

eigrp

Watchdog crash while EIGRP updates Topology Table

CSCud02045

ethernet-cfm

RP crashes after applying cfm mip config to interface

CSCuh40275

fib

Very High SNMP Engine utilisation when polling cefFESelectionTable

CSCui95880

hsrp

HSRP for IPv6 flaps when there is a loop in the network.

CSCtk00976

ifs

File descriptor leak and not getting release - readh FD limit

CSCts34688

ip-acl

Switch crashed due to memory fragmentation "HACL Acl Manager"

CSCue68124

ip-pbr

PBR not work with null0 default route

CSCum95311

ip-pbr

ip next-hop recursive not forwarding traffic

CSCuj27671

ip-tunnels

QUAD SUP2T VSS Failover fails with tunnel path-mtu-discovery config

CSCuc38611

ip-tunnels

TTL of inner header is decremented twice

CSCuj08831

ipc

Crash @ ipc_compare_seats part 2

CSCul22535

ipc

VSS Quad Sup2T IPC failure causes a reload

CSCuj59816

ipmulticast

Auto-RP messages are dropped in a certain scenario

CSCue68761

ipmulticast

Buffer leak @ ip_mforward in 15.1(4)M3

CSCui46593

ipmulticast

CPU hog crash due to Mwheel Process

CSCue93229

ipmulticast

crash when polling ipMRouteEntry during "clear ip mroute"

CSCua44483

ipmulticast

ME3600X suddely stops sending multicast for all groups 151-2.EY

CSCud90983

ipmulticast

OTV Multihome setup: Multicast stop working when shut/no shut join int

CSCud50768

ipmulticast

BSR: Incorrect timer reset for BSR during switchover

CSCuc38120

ipmulticast

OTV: Multicast traffic dropped after shut/noshut of Join Interface

CSCue75986

ipmulticast

XE39: IOSd crash @ mvpn_pim_send_join_periodic

CSCui90139

ipsec-core

ASR1K : Crypto Route not getting deleted on Responder

CSCuc25995

ipsec-core

Crash with %ALIGN-1-FATAL in IPsec

CSCud69442

ipsec-core

crypto map fails after interface flap or ip address change

CSCud83835

ipsec-core

crypto map on VT with negotiated ip address fails to initiate VPN tunnel

CSCuc93739

ipsec-core

EzVPN client with split network does not come UP when IPSEC SA is down

CSCud88483

ipsec-core

GETVPN with IPSEC redundancy: Registration failure on standby GM

CSCug28904

ipsec-core

IKEv2 CRYPTO-4-RECVD_PKT_MAC_ERR with peer nonce length 256 Bytes

CSCub26395

ipsec-core

IOS - New VPN dynamic maps not working

CSCue47940

ipsec-core

IPsec MTU has been changed automatically after rebooted

CSCue14418

ipsec-core

L2TP IPSEC NAT DEMUX Functionality is broke

CSCub46423

ipsec-core

L2TP/IPSec: Can not connect to HSRP Virtial IP

CSCtz87485

ipsec-core

MALLOC at interrupt level only when a crypto map configured on a GigE

CSCua35161

ipsec-core

removing tunnel protection doesn't clear up crypto-map on dmvpn HUB

CSCub05907

ipsec-core

RRI isnt propagated after failure of a link, when spoke has dual ISP

CSCuc47356

ipsec-core

RRI route is leaked when unconfiguring the RRI Static

CSCug83538

ipsec-core

RRI Route leaked when map is applied on multiple interfaces

CSCub28997

ipsec-core

segmentation fault @ __be_wavl_do_walk_threaded with IKEv2

CSCud59176

ipsec-core

Backout CSCub95141 in XE37

CSCud42938

ipsec-core

Ident remains at DMAP side even when there are no ipsec sas

CSCue65405

ipsec-core

SAs NOT all active after clear crypto gdoi

CSCug34404

ipsec-core

XE38 : RP_Crash seen @ __be_interface_action_remove_old_sadb

CSCuc36469

ipsec-core

CSR-Crash @__be_crypto_lookup_short_handle during ezvpn tunnel bring up

CSCue77265

ipsec-core

XE39: memory leak in aux_msg_acl_destroy_yourself *

CSCud02391

ipsec-dmvpn

EIGRP routes are not coming up after removing tunnel interface

CSCuc08061

ipsec-dmvpn

DMVPN spoke's crypto session was gone after removing, adding tunnel back

CSCud68178

ipsec-dmvpn

XE39: DMVPN Hub crashed after physical and tunnel interface flapping

CSCue45952

ipsec-ezvpn

"retransmitting phase 2 QM_IDLE" is sent after Phase2 setup

CSCuf51539

ipsec-ezvpn

EzVPN Server- improved resiliance for IKEv1 SA lifetime config to client

CSCuc98855

ipsec-ezvpn

When server sends Savepwd off, client fails to establish EZVPN session.

CSCtu54300

ipsec-getvpn

fn_VRFAwareGM: KS crashed while running getvpn unconfig script

CSCtz78943

ipsec-ha

Crash after configuring a crypto map on a HSRP enabled interface 2

CSCud06887

ipsec-ha

IPSec Stateful Failover - SPIs not replicated after first switch

CSCty26035

ipsec-ha

Multiple issues, while testing ipsec_ha spt, for ha_test_rekey subtest

CSCud69110

ipsec-ikev2

IKEv2:Support IKE_CP_ATTR_SPLIT_EXCLUDE attribute for anyconnect client

CSCue59967

ipsec-ikev2

VPN LED is not on in ISR when IKEv2 tunnel is up

CSCub93442

ipsec-ikev2

FlexVPN Tunnel not coming up when using "ipsec:addrv6 " radius attribute

CSCtu02543

ipsec-isakmp

EZVPN client address leak due to peer overlap (NAT)

CSCud85342

ipsec-isakmp

IKE responder fails to accept RSA-SIG auth if no trustpoints configured

CSCub67774

ipsec-isakmp

IKE: MM6 not re-sent if MM5 retransmitted

CSCue37523

ipsec-isakmp

IOS IPSEC negotiation fails with missing ID pyld in QM1 message (racoon)

CSCug63839

ipsec-isakmp

Memory leak seen in CryptoIKMP process(crypto_ikmp_config_send_ack_addr)

CSCua31157

ipsec-isakmp

One way IPsec traffic after initial isakmp contact deletes budding SA

CSCuc31761

ipsec-isakmp

XE3.9 - KS crashes when removing GDOI groups

CSCue44587

ipsec-routing

ASR Missing RRI routes is with active SAs

CSCub94825

ipsec-routing

RRI does not happen in a VRF aware IPSec with stateless HA scenario

CSCub18622

ipsec-switching

Auth proxy on 15.x IOS does not apply DACL on tunnel interface

CSCug38641

ipsec-switching

cTCP IPSec data packets are process switched on EzVPN server

CSCug34507

ipsec-switching

Decrypted traffic is process-switched when tunnel is NAT-T udp-encap

CSCue36387

ipsec-switching

Interface Counters do not increment with IPSEC IPv6

CSCuc94687

ipsec-switching

SHA256 HW crypto support on 890 Platform is missing

CSCub83722

ipsec-switching

Tunnel interface output rate does not increment in a MPLS network

CSCub56064

ipsec-switching

Ping failed after clearing the crypto isakmp and sa with EZVPN client

CSCue45934

ipsec-switching

Return traffic is not coming back in ipv4 session on c6k wit ikev2 MA2re

CSCub74272

ipsec-vti

Crypto Socket goes to closed state causing SA flaps every phase 2 rekey

CSCub89144

ipsec-vti

VTI interface is always in up/up state on HSRP standby

CSCuc51879

mcast-infra

Traffic loss on ASR1K in event of RP SSO switchover

CSCue61691

mcast-vpn

Mroute shows data mdt switchover but MRIB still shows up the default MDT

CSCuh67605

nat

INVMEMINT errors related to NAT max-entries with vrf

CSCuj34455

nat

NAT Process Switches all TCP port 139 Traffic

CSCui94118

nat

static NAT vrf removed upon removal of "vrf definition <vrf_name>"

CSCug18685

nhrp

NHRP resolution request does not follow routed path

CSCud67105

nhrp

VA's are not getting deleted in FlexVPN after clearing cache entries

CSCuc45115

nhrp

Crash seen at nhrp_add_static_map

CSCua46304

nhrp

Seg fault at __be_nhrp_group_tunnel_qos_apply on flapping tunnel

CSCua14640

ntp

Change in order of configuration statement after router reload

CSCuc90999

ntp

CISCO1921 snmp cntpSysPeer does not reset after removing ntp server

CSCui60499

ntp

High CPU from Process NTP with "access-group serve" Configured

CSCuc44629

ntp

NTP crash during bootup

CSCud72473

ntp

NTP: Frequency Errors and Clock Loses Sync with 2 servers

CSCug38011

ntp

router crash after configuring NTP peer

CSCul71047

os

RF Client Cat6k Platform First Client(1319) notification timeout

CSCug33116

os-logging

SUP2T in VSS crashes after reload if "logging origin-id ip" configured

CSCud63381

pas-ipsec

7200: On demand DPDs don't work intermittently causing VPN FO to fail

CSCue39518

pas-ipsec

C7200 : VSA : Encryption Failure with IPSec SSO

CSCud66669

pas-ipsec

VSA: GRE with TP - Packet is not decrypted into the correct ivrf

CSCub17971

pas-ipsec

GETVPN