Guest

Cisco Catalyst 6000 Series Switches

Release Notes for Catalyst 6500 Series Software Release 7.x

Table Of Contents

Release Notes for Catalyst 6500 Series Software Release 7.x

Contents

Release 7.x DRAM Memory Requirements

Boot ROM (ROMMON) Requirements

Upgrading the Boot ROM

Flash PC Card Support

Redundant Supervisor Engine Configurations

Product and Software Version Matrix

Unsupported Hardware

Orderable Software Images

Software Image Version Compatibility

Catalyst 6500 Series Features

Features for Supervisor Engine Software Release 7.6

Software Release 7.6 Hardware Features

Software Release 7.6 Software Features

Features for Supervisor Engine Software Release 7.5

Software Release 7.5 Hardware Features

Software Release 7.5 Software Features

Features for Supervisor Engine Software Release 7.4

Software Release 7.4 Hardware Features

Software Release 7.4 Software Features

Features for Supervisor Engine Software Release 7.3

Software Release 7.3 Hardware Features

Software Release 7.3 Software Features

Features for Supervisor Engine Software Release 7.2

Software Release 7.2 Hardware Features

Software Release 7.2 Software Features

Features for Supervisor Engine Software Release 7.1

Software Release 7.1 Hardware Features

Software Release 7.1 Software Features

Features for Supervisor Engine Software Release 6.3

Software Release 6.3 Hardware Features

Software Release 6.3 Software Features

Features for Supervisor Engine Software Release 6.2

Software Release 6.2 Hardware Features

Software Release 6.2 Software Features

Features for Supervisor Engine Software Release 6.1

Software Release 6.1 Hardware Features

Software Release 6.1 Software Features

Features for Supervisor Engine Software Releases 5.1 Through 5.5

Usage Guidelines and Restrictions

System and Supervisor Engine

Modules and Switch Ports

EtherChannel

Quality of Service

Automatic Quality of Service with Cisco IP Phones

Multicast

Spanning Tree

Access Control

High Availability

Multilayer Switching

MIBs

VLANs, VTP, and VLAN Trunks

Authentication, Authorization, and Accounting

SPAN and RSPAN

TDR

Auto-MDI/MDIX

Binary and Text File Configuration Modes

Binary Configuration Mode

Text File Configuration Mode

CiscoView

Open and Resolved Caveats in Software Release 7.6(24)

Open Caveats in Software Release 7.6(24)

Resolved Caveats in Software Release 7.6(24)

Open and Resolved Caveats in Software Release 7.6(23)

Open Caveats in Software Release 7.6(23)

Resolved Caveats in Software Release 7.6(23)

Open and Resolved Caveats in Software Release 7.6(22)

Open Caveats in Software Release 7.6(22)

Resolved Caveats in Software Release 7.6(22)

Open and Resolved Caveats in Software Release 7.6(21)

Open Caveats in Software Release 7.6(21)

Resolved Caveats in Software Release 7.6(21)

Open and Resolved Caveats in Software Release 7.6(20)

Open Caveats in Software Release 7.6(20)

Resolved Caveats in Software Release 7.6(20)

Open and Resolved Caveats in Software Release 7.6(19)

Open Caveats in Software Release 7.6(19)

Resolved Caveats in Software Release 7.6(19)

Open and Resolved Caveats in Software Release 7.6(18)

Open Caveats in Software Release 7.6(18)

Resolved Caveats in Software Release 7.6(18)

Open and Resolved Caveats in Software Release 7.6(17)

Open Caveats in Software Release 7.6(17)

Resolved Caveats in Software Release 7.6(17)

Open and Resolved Caveats in Software Release 7.6(16)

Open Caveats in Software Release 7.6(16)

Resolved Caveats in Software Release 7.6(16)

Open and Resolved Caveats in Software Release 7.6(15)

Open Caveats in Software Release 7.6(15)

Resolved Caveats in Software Release 7.6(15)

Open and Resolved Caveats in Software Release 7.6(14)

Open Caveats in Software Release 7.6(14)

Resolved Caveats in Software Release 7.6(14)

Open and Resolved Caveats in Software Release 7.6(13)

Open Caveats in Software Release 7.6(13)

Resolved Caveats in Software Release 7.6(13)

Open and Resolved Caveats in Software Release 7.6(12)

Open Caveats in Software Release 7.6(12)

Resolved Caveats in Software Release 7.6(12)

Open and Resolved Caveats in Software Release 7.6(11)

Open Caveats in Software Release 7.6(11)

Resolved Caveats in Software Release 7.6(11)

Open and Resolved Caveats in Software Release 7.6(10)

Open Caveats in Software Release 7.6(10)

Resolved Caveats in Software Release 7.6(10)

Open and Resolved Caveats in Software Release 7.6(9)

Open Caveats in Software Release 7.6(9)

Resolved Caveats in Software Release 7.6(9)

Open and Resolved Caveats in Software Release 7.6(8)

Open Caveats in Software Release 7.6(8)

Resolved Caveats in Software Release 7.6(8)

Open and Resolved Caveats in Software Release 7.6(7)

Open Caveats in Software Release 7.6(7)

Resolved Caveats in Software Release 7.6(7)

Open and Resolved Caveats in Software Release 7.6(6)

Open Caveats in Software Release 7.6(6)

Resolved Caveats in Software Release 7.6(6)

Open and Resolved Caveats in Software Release 7.6(5)

Open Caveats in Software Release 7.6(5)

Resolved Caveats in Software Release 7.6(5)

Open and Resolved Caveats in Software Release 7.6(4)

Open Caveats in Software Release 7.6(4)

Resolved Caveats in Software Release 7.6(4)

Open and Resolved Caveats in Software Release 7.6(3a)

Open Caveats in Software Release 7.6(3a)

Resolved Caveats in Software Release 7.6(3a)

Open and Resolved Caveats in Software Release 7.6(3)

Open Caveats in Software Release 7.6(3)

Resolved Caveats in Software Release 7.6(3)

Open and Resolved Caveats in Software Release 7.6(2a)

Open Caveats in Software Release 7.6(2a)

Resolved Caveats in Software Release 7.6(2a)

Open and Resolved Caveats in Software Release 7.6(2)

Open Caveats in Software Release 7.6(2)

Resolved Caveats in Software Release 7.6(2)

Open and Resolved Caveats in Software Release 7.6(1)

Open Caveats in Software Release 7.6(1)

Resolved Caveats in Software Release 7.6(1)

Open and Resolved Caveats in Software Release 7.5(1)

Open Caveats in Software Release 7.5(1)

Resolved Caveats in Software Release 7.5(1)

Open and Resolved Caveats in Software Release 7.4(3)

Open Caveats in Software Release 7.4(3)

Resolved Caveats in Software Release 7.4(3)

Open and Resolved Caveats in Software Release 7.4(2)

Open Caveats in Software Release 7.4(2)

Resolved Caveats in Software Release 7.4(2)

Open and Resolved Caveats in Software Release 7.3(2)

Open Caveats in Software Release 7.3(2)

Resolved Caveats in Software Release 7.3(2)

Open and Resolved Caveats in Software Release 7.3(1)

Open Caveats in Software Release 7.3(1)

Resolved Caveats in Software Release 7.3(1)

Open and Resolved Caveats in Software Release 7.2(2)

Open Caveats in Software Release 7.2(2)

Resolved Caveats in Software Release 7.2(2)

Open and Resolved Caveats in Software Release 7.1(2)

Open Caveats in Software Release 7.1(2)

Resolved Caveats in Software Release 7.1(2)

Open and Resolved Caveats in Software Release 7.1(1a)

Open Caveats in Software Release 7.1(1a)

Resolved Caveats in Software Release 7.1(1a)

Open and Resolved Caveats in Software Release 7.1(1)

Open Caveats in Software Release 7.1(1)

Resolved Caveats in Software Release 7.1(1)

Catalyst Software Image Upgrade Procedure

Troubleshooting

System Troubleshooting

Module Troubleshooting

VLAN Troubleshooting

STP Troubleshooting

Related Documentation

Notices

OpenSSL/Open SSL Project

License Issues

Obtaining Documentation

Cisco.com

Product Documentation DVD

Ordering Documentation

Documentation Feedback

Cisco Product Security Overview

Reporting Security Problems in Cisco Products

Product Alerts and Field Notices

Obtaining Technical Assistance

Cisco Support Website

Submitting a Service Request

Definitions of Service Request Severity

Obtaining Additional Publications and Information


Release Notes for Catalyst 6500 Series Software Release 7.x


Revised: April 02, 2008, OL-1982-29

Current Release
7.6(24)—February 26, 2008
Previous Releases: 7.6(23), 7.6(22), 7.6(21),7.6(20), 7.6(19), 7.6(18), 7.6(17), 7.6(16), 7.6(15), 7.6(14), 7.6(13), 7.6(12)-GD release, 7.6(11), 7.6(10), 7.6(9), 7.6(8), 7.6(7), 7.6(6), 7.6(5), 7.6(4)-Supervisor Engine 2 images deferred, 7.6(3a)-Supervisor Engine 2 images deferred, 7.6(3)-Supervisor Engine 2 images deferred, 7.6(2a)-Supervisor Engine 2 images deferred, 7.6(2)-Supervisor Engine 2 images deferred, 7.6(1)-Supervisor Engine 2 images deferred, 7.5(1), 7.4(3), 7.4(2), 7.3(2), 7.3(1), 7.2(2), 7.1(2), 7.1(1a), 7.1(1)


Caution The Supervisor Engines 1 and 1A are not supported in Catalyst software release 7.6(18) and above. For more information, refer to Product Bulletin No. 2595 at this URL:
http://www.cisco.com/en/US/products/hw/switches/ps708/prod_eol_notice0900aecd8017a5d1.html


Note For information on the latest caveats and updates for the Cisco 7600 series router, refer to the Cisco IOS Release 12.1(7a)E1 or later MSFC release notes at
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/index.htm



Note Release notes for prior Catalyst 6500 series software releases were accurate at the time of release. However, for information on the latest caveats and updates to previously released Catalyst 6500 series software releases, refer to the release notes for the latest maintenance release in your software release train. You can access all Catalyst 6500 series release notes at the World Wide Web locations listed in the "Obtaining Documentation" section.


Contents

This document consists of these sections:

Release 7.x DRAM Memory Requirements

Boot ROM (ROMMON) Requirements

Upgrading the Boot ROM

Flash PC Card Support

Redundant Supervisor Engine Configurations

Product and Software Version Matrix

Unsupported Hardware

Orderable Software Images

Software Image Version Compatibility

Catalyst 6500 Series Features

Usage Guidelines and Restrictions

Open and Resolved Caveats in Software Release 7.6(24)

Open and Resolved Caveats in Software Release 7.6(23)

Open and Resolved Caveats in Software Release 7.6(22)

Open and Resolved Caveats in Software Release 7.6(21)

Open and Resolved Caveats in Software Release 7.6(20)

Open and Resolved Caveats in Software Release 7.6(19)

Open and Resolved Caveats in Software Release 7.6(18)

Open and Resolved Caveats in Software Release 7.6(17)

Open and Resolved Caveats in Software Release 7.6(16)

Open and Resolved Caveats in Software Release 7.6(15)

Open and Resolved Caveats in Software Release 7.6(14)

Open and Resolved Caveats in Software Release 7.6(13)

Open and Resolved Caveats in Software Release 7.6(12)

Open and Resolved Caveats in Software Release 7.6(11)

Open and Resolved Caveats in Software Release 7.6(10)

Open and Resolved Caveats in Software Release 7.6(9)

Open and Resolved Caveats in Software Release 7.6(8)

Open and Resolved Caveats in Software Release 7.6(7)

Open and Resolved Caveats in Software Release 7.6(6)

Open and Resolved Caveats in Software Release 7.6(5)

Open and Resolved Caveats in Software Release 7.6(4)

Open and Resolved Caveats in Software Release 7.6(3a)

Open and Resolved Caveats in Software Release 7.6(3)

Open and Resolved Caveats in Software Release 7.6(2a)

Open and Resolved Caveats in Software Release 7.6(2)

Open and Resolved Caveats in Software Release 7.6(1)

Open and Resolved Caveats in Software Release 7.5(1)

Open and Resolved Caveats in Software Release 7.4(3)

Open and Resolved Caveats in Software Release 7.4(2)

Open and Resolved Caveats in Software Release 7.3(2)

Open and Resolved Caveats in Software Release 7.3(1)

Open and Resolved Caveats in Software Release 7.2(2)

Open and Resolved Caveats in Software Release 7.1(2)

Open and Resolved Caveats in Software Release 7.1(1a)

Open and Resolved Caveats in Software Release 7.1(1)

Catalyst Software Image Upgrade Procedure

Troubleshooting

Related Documentation

Obtaining Documentation

Release 7.x DRAM Memory Requirements

Supervisor Engine 2: The Catalyst 6500 series Supervisor Engine 2 ships with 128-MB DRAM, which fully supports software release 7.x.

Supervisor Engine 1: Early versions of the Catalyst 6500 series Supervisor Engine 1 shipped with 64-MB DRAM (currently, new Supervisor Engine 1 modules ship with 128-MB DRAM). Depending on the software release you are running, be aware of these DRAM memory requirements:

With software releases 7.5(1) and later, 64-MB DRAM may not provide adequate free memory for all configurations. With large, existing configurations using many features, or when enabling new features available in release 7.5 and later, 64-MB DRAM may not be enough. We recommend upgrading to 128-MB DRAM to ensure adequate free memory is available to the system at all times.

Software release 7.6(4) and later 7.6(x) releases are too large to fit in the 64-MB DRAM that originally shipped on some Supervisor Engine 1 modules. You must upgrade to 128-MB DRAM.

Supervisor Engine 1 upgrade options: With the exception of WS-X6K-SUP1A-MSFC, all other Supervisor Engine 1 modules can upgrade to 128-MB DRAM using the MEM-S1-128MB= upgrade kit. For detailed information on the MEM-S1-128MB= upgrade, refer to the Catalyst 6500 Series Switch Supervisor Engine 1A DRAM Upgrade Installation Note at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/cfgnotes/78_14357.htm

To upgrade to 128-MB DRAM on the WS-X6K-SUP1A-MSFC, use the MEM-S1-128MB-UPG= upgrade kit which also includes an MSFC2 upgrade.


Caution The 7.1(1) and 7.1(2) CiscoView + SSH images may fail to boot on Supervisor Engine 1 systems with 64-MB DRAM. This problem applies to all models of Supervisor Engine 1 (WS-X6K-SUP1-2GE, WS-X6K-SUP1A-2GE, WS-X6K-SUP1A-PFC, WS-X6K-SUP1A-MSFC, WS-X6K-S1A-MSFC2). Due to this problem, the cat6000-supcvk9.7-1-1.bin and cat6000-supcvk9.7-1-2.bin CCO images have been deferred. As an alternative, the cat6000-supcvk8.7-1-1.bin or the cat6000-supcvk8.7-1-2.bin images may be used if SSH support is not required. If both CiscoView and SSH support is required, the 6.3(x) supcvk9 images or the 7.2(x) and later supcvk9 images should be used. This issue is documented in open caveat CSCdw70549.

Boot ROM (ROMMON) Requirements

For Supervisor Engine 1, the minimum boot ROM (ROMMON) required for software release 5.4(1) and later 5.x(x) releases is 5.2(1). The minimum boot ROM required for software releases 6.x(x) and 7.x(x) is 5.2(1). The default (shipping) image for software releases 6.x(x) and 7.x(x) is 5.3(1).

For Supervisor Engine 2, the minimum boot ROM required for software releases 6.2(2) and later is 6.1(3).


Note The supervisor engine boot ROM versions must be identical in redundant systems.


Upgrading the Boot ROM

Follow these guidelines to upgrade the boot ROM (ROMMON) on Supervisor Engine 1 or 1A:


Note For Supervisor Engine 2 with boot ROM version 6.1(3) or later, the boot ROM software image can be upgraded through a software download from Cisco.com. Refer to the boot ROM software upgrade procedure at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/78_13488.htm


For supervisor engines with an MSFC, due to the location of the boot ROM, upgrading the boot ROM could damage your supervisor engine. This hardware configuration is not field upgradable.

For supervisor engines with an MSFC2 or no PFC, the boot ROM upgrade can be done in the field.

The boot ROM upgrade kit part number is WS-X6K-BOOT=


Note The boot ROM upgrade kit is not orderable. If an upgrade is needed, contact the Technical Assistance Center (TAC) to verify your hardware configuration and arrange for delivery of the upgrade kit.


For boot ROM installation information, refer to the Catalyst 6500 Series Switch Supervisor Engine NMP Boot ROM Upgrade Installation Note at this URL:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/cfgnotes/78_10142.htm

Flash PC Card Support

The following Flash PC cards are supported on Catalyst 6500 series switches:

MEM-C6K-FLC16M(=)

MEM-C6K-FLC24M(=)

MEM-C6K-FLC64M(=)

MEM-C6K-ATA-1-64M(=)

Prior to software release 7.5(1), Supervisor Engine 1 and Supervisor Engine 2 supported the following Flash PC cards:

16-MB Flash PC card (MEM-C6K-FLC16M=). The device name is slot0:.

24-MB Flash PC card (MEM-C6K-FLC24M=). The device name is slot0:.

With software releases 7.5(1) and later, additional Flash PC card support was added as follows:

64-MB ATA Flash PC card (MEM-C6K-ATA-1-64M=)—Only supported on Supervisor Engine 2. The device name is disk0: and the card requires ROMMON version 7.1(1) or later releases.

64-MB linear Flash PC card (MEM-C6K-FLC64M=)—Only supported on Supervisor Engine 1. The device name is slot0: and the card requires ROMMON software release 5.3(1) or later releases.


Note The MEM-C6K-ATA-1-64M(=) and MEM-C6K-FLC64M= Flash PC cards are not formatted. Although the cards appear to be formatted when first installed, you must format the cards to prevent possible data corruption.



Note The 16-MB MEM-C6K-FLC16M(=) and 24-MB MEM-C6K-FLC24M(=) linear Flash PC cards are not formatted. Supervisor Engine 1 and Supervisor Engine 2 do not support the same Flash PC card format. To use a Flash PC card with Supervisor Engine 2, you must format the card with Supervisor Engine 2. To use a Flash PC card with Supervisor Engine 1, you must format the card with Supervisor Engine 1.



Note For Supervisor Engine 1, software release 7.6(1) or later CV images need a 24-MB or 64-MB linear Flash PC card.

With the 24-MB linear Flash PC card with a Supervisor Engine 1/MSFC or a Supervisor Engine 1/MSFC2 with a 16-MB MSFC2 bootflash, you need to put the Catalyst image on the 24-MB linear Flash PC card, the IOS bootloader on the MSFC bootflash, and the Cisco IOS image on the 16-MB supervisor engine bootflash.

With the 64-MB linear Flash PC card with a Supervisor Engine 1/MSFC or a Supervisor Engine 1/MSFC2 with a 16-MB MSFC2 bootflash, you can put the Catalyst image and the MSFC/MSFC2 Cisco IOS image on the 64-MB linear Flash PC card, and the Cisco IOS bootloader on the MSFC bootflash.

With the 24-MB or 64-MB linear Flash PC card on a Supervisor Engine 1/MSFC2 with 32-MB MSFC2 bootflash, the MSFC2 bootloader and Cisco IOS image can be put on the MSFC2 bootflash, and the Catalyst image can be put on the 24-MB or 64-MB linear Flash PC cards.


Redundant Supervisor Engine Configurations

In systems with redundant supervisor engines, both supervisor engines must be identical and have the same daughter card configurations. For example, your switch can have the following configurations:

Slot 1—Supervisor Engine 2, PFC2, MSFC2
Slot 2—Supervisor Engine 2, PFC2, MSFC2

Slot 1—Supervisor Engine 2, PFC2
Slot 2—Supervisor Engine 2, PFC2

Slot 1—Supervisor Engine 1, PFC, MSFC2
Slot 2—Supervisor Engine 1, PFC, MSFC2

Slot 1—Supervisor Engine 1, PFC, MSFC1
Slot 2—Supervisor Engine 1, PFC, MSFC1

Slot 1—Supervisor Engine 1, PFC
Slot 2—Supervisor Engine 1, PFC

Slot 1—Supervisor Engine 1
Slot 2—Supervisor Engine 1

These configuration requirements apply to all Catalyst 6500 series switches. We do not support configurations that are not identical.

Product and Software Version Matrix

Table 1 lists the minimum supervisor engine version and the current recommended supervisor engine software version for Catalyst 6500 series modules and chassis.


Note For information about AC power requirements and heat dissipation, refer to Chapter 2, "Preparing for Installation," of the Catalyst 6500 Series Switch Installation Guide:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/6000hw/index.htm

For information about power management and determining system power requirements, refer to the "Power Management" section in Chapter 20, "Administering the Switch," of the Catalyst 6500 Series Switch Software Configuration Guide:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_7_1/index.htm



Note There might be additional minimum software version requirements for intelligent modules (those that run an additional, separate software image). Refer to the software release notes for the module type for more information.


Table 1 Minimum and Recommended Supervisor Engine Software Versions 

Product Number
append with
"=" for spares
Product Description
Minimum Supervisor Engine
Software Version
Recommended
Supervisor Engine
Software Version
Supervisor Engine 2

WS-X6K-S2U-MSFC2

Supervisor Engine 2, dual 1000BASE-X GBIC uplinks, fabric-enabled, CEF, PFC2, and MSFC2
256 MB on supervisor engine, 256 MB on MSFC2
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

6.1(1d)

6.4(21)

WS-X6K-S2-MSFC2

Supervisor Engine 2, dual 1000BASE-X GBIC uplinks, fabric-enabled, CEF, PFC2, and MSFC2
128 MB on supervisor engine, 128 MB on MSFC2
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

6.1(1d)

6.4(21)

WS-X6K-S2-PFC2

Supervisor Engine 2, dual 1000BASE-X GBIC uplinks, fabric-enabled, and PFC2
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

6.1(1d)

6.4(21)

Supervisor Engine 11 , 2

WS-X6K-S1A-MSFC2

Supervisor Engine 1A, dual 1000BASE-X GBIC uplinks, PFC, and MSFC2
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.4(3)

6.4(21)

WS-X6K-SUP1A-MSFC

Supervisor Engine 1A, dual 1000BASE-X GBIC uplinks, PFC, and MSFC
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.3(1a)CSX

6.4(21)

WS-X6K-SUP1A-PFC

Supervisor Engine 1A, dual 1000BASE-X GBIC uplinks, and PFC
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.3(1a)CSX

6.4(21)

WS-X6K-SUP1A-2GE

Supervisor Engine 1A, dual 1000BASE-X GBIC uplinks
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.3(1a)CSX

6.4(21)

WS-X6K-SUP1-2GE

Supervisor Engine 1, dual 1000BASE-X GBIC uplinks
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.1(1)CSX

6.4(21)

Switch Fabric Modules

WS-C6500-SFM

Switch Fabric Module to support fabric-enabled modules

6.1(1d)

6.4(21)

WS-X6500-SFM2

Switch Fabric Module version 2

6.2(2)

6.4(21)

10-Gigabit Ethernet Switching Modules

WS-X6501-10GEX4

1-port 10GBASE-EX4 Metro 10-Gigabit Ethernet, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q8t/1p2q1t

7.1(1)

7.6(9)

WS-X6502-10GE

1-port 10GBASE-E Serial 10-Gigabit Ethernet, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q8t/1p2q1t

Note: The WS-X6502-10GE module does not support ISL encapsulation.

7.1(1)

7.6(9)

WS-G6483

10GBASE-ER Serial 1550-nm extended-reach Optical Interface Module (OIM)

7.2(2)

7.6(9)

WS-G6488

10GBASE-LR Serial 1310-nm long-haul OIM

7.1(1)

7.6(9)

Gigabit Ethernet Switching Modules

WS-X6148-GE-TX
WS-X6148V-GE-TX

48-port 10/100/1000BASE-TX switching module (WS-X6148V-GE-TX provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q2t/1p2q2t

7.6(1)

7.6(9)

WS-X6548-GE-TX
WS-X6548V-GE-TX

48-port 10/100/1000BASE-TX switching module, fabric-enabled (WS-X6548V-GE-TX provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q2t/1p2q2t

7.6(1)

7.6(9)

WS-X6148-GE-TX
WS-X6148V-GE-TX

48-port 10/100/1000BASE-TX switching module (WS-X6148V-GE-TX provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q2t/1p2q2t

7.6(1)

7.6(9)

WS-X6548-GE-TX
WS-X6548V-GE-TX

48-port 10/100/1000BASE-TX switching module, fabric-enabled (WS-X6548V-GE-TX provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q2t/1p2q2t

7.6(1)

7.6(9)

WS-X6516A-GBIC

16-port Gigabit Ethernet GBIC switching module, fabric-enabled, 1-MB per-port packet buffers
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

7.5(1)

7.6(9)

WS-X6516-GBIC

16-port Gigabit Ethernet GBIC switching module, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

6.1(1d)

6.4(11)

WS-X6516-GE-TX

16-port 10/100/1000BASE-T Ethernet Module,
fabric-enabled
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

6.2(2)

6.4(11)

Gigabit Ethernet Switching Modules

WS-X6416-GBIC

16-port Gigabit Ethernet GBIC switching module
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.4(2)

6.4(11)

WS-X6416-GE-MT

16-port Gigabit Ethernet MT-RJ
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.3(5a)CSX

6.4(11)

WS-X6316-GE-TX

16-port 1000BASE-TX RJ-45 Gigabit Ethernet
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.4(2)

6.4(11)

WS-X6408A-GBIC

8-port Gigabit Ethernet GBIC
QoS port architecture (Rx/Tx): 1p1q4t/1p2q2t

5.3(1a)CSX

6.4(11)

WS-X6408-GBIC

8-port Gigabit Ethernet GBIC
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.1(1)CSX

6.4(11)

Fast Ethernet Switching Modules

WS-X6524-100FX-MM

24-port 100FX Ethernet multimode, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t

7.1(1)

7.6(9)

WS-X6324-100FX-SM
WS-X6324-100FX-MM

24-port 100FX single mode or multimode MT-RJ with 128K per-port packet buffers
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.4(2)

6.4(11)

WS-X6224-100FX-MT

24-port 100FX Multimode MT-RJ
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.1(1)CSX

6.4(11)

Ethernet/Fast Ethernet (10/100) Switching Modules

WS-X6548-RJ-21

48-port 10/100BASE-TX RJ-21, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t

6.2(2)

6.4(11)

WS-X6548-RJ-45

48-port 10/100BASE-TX RJ-45, fabric-enabled
QoS port architecture (Rx/Tx): 1p1q0t/1p3q1t

6.2(2)

6.4(11)

WS-X6348-RJ21V

48-port 10/100BASE-TX RJ-21 with 128K per-port packet buffers (WS-X6348-RJ21V provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q4t/2q2t

6.2(2)

6.4(11)

WS-X6348-RJ-45 WS-X6348-RJ-45V

48-port 10/100BASE-TX RJ-45 with 128K per-port packet buffers (WS-X6348-RJ-45 accepts a field-upgradable voice daughter card to provide inline power to IP telephones. Already installed on WS-X6348-RJ-45V)
QoS port architecture (Rx/Tx): 1q4t/2q2t

Without
WS-F6K-VPWR:
5.4(2)

With
WS-F6K-VPWR:
5.5(1)

Without
WS-F6K-VPWR:
6.4(11)

With
WS-F6K-VPWR:
6.4(11)

WS-X6148-RJ-45
WS-X6148-RJ-45V

48-port 10/100BASE-TX RJ-45 with 128K per-port packet buffers (WS-X6148-RJ-45V provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q4t/2q2t

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

Ethernet/Fast Ethernet (10/100) Switching Modules

WS-X6148-RJ21
WS-X6148-RJ21V

48-port 10/100BASE-TX RJ-21 with 128K per-port packet buffers (WS-X6148-RJ21V provides inline power to IP telephones)
QoS port architecture (Rx/Tx): 1q4t/2q2t

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

WS-F6K-VPWR

Inline-power field-upgrade module for the 48-port 10/100BASE-TX RJ-45 and RJ-21 modules

5.5(1)

6.4(11)

WS-X6248-RJ-45

48-port 10/100BASE-TX RJ-45
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.1(1)CSX

6.4(11)

WS-X6248A-TEL

48-port 10/100BASE-TX RJ-21 with 128K per-port packet buffers
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.3(2)CSX

6.4(11)

WS-X6248-TEL

48-port 10/100BASE-TX RJ-21
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.2(1)CSX

6.4(11)

Ethernet Switching Modules

WS-X6024-10FL-MT

24-port 10BASE-FL MT-RJ
QoS port architecture (Rx/Tx): 1q4t/2q2t

5.3(3)CSX

6.4(11)

Power Over Ethernet Daughter Cards

WS-F6K-FE48X2-AF

IEEE 802.3af PoE daughter card for:

 
 

WS-X6148X2-45AF

8.2(1)

8.3(3)

WS-X6196-21AF

8.4(1)

8.4(1)

WS-F6K-GE48-AF

IEEE 802.3af PoE daughter card for:

 
 

WS-X6148A-GE-45AF

8.4(1)

8.4(1)

WS-X6148V-GE-TX

7.6(1)

7.6(9)

WS-X6148-GE-45AF

8.2(1)

8.3(3)

WS-X6548V-GE-TX

7.6(1)

7.6(9)

WS-X6548-GE-45AF

8.2(1)

8.3(3)

WS-F6K-FE48-AF

IEEE 802.3af PoE daughter card for:

 
 

WS-X6148A-45AF

8.4(1)

8.4(1)

WS-X6148-RJ-45V

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

WS-X6148-RJ21V

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

WS-F6K-VPWR-GE

IEEE 802.3af PoE daughter card for:

 
 

WS-X6548V-GE-TX

7.6(1)

7.6(9)

WS-X6148V-GE-TX

7.6(1)

7.6(9)

WS-F6K-VPWR

IEEE 802.3af PoE daughter card for:

 
 

WS-X6348-RJ-45V

5.5(1)

6.4(11)

WS-X6348-RJ21V

6.2(2)

6.4(11)

WS-X6148-RJ-45V

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

WS-X6148-RJ21V

For software releases 6.x: 6.4(1)

For software releases 7.x: 7.2(2)

For software releases 6.x: 6.4(11)

For software releases 7.x: 7.6(9)

Voice Modules

WS-SVC-CMM

Communication Media Module

7.6(12)

8.3(3)

WS-SVC-CMM-6E

16-port E1 interface port adapter

7.6(12)

8.3(3)

WS-SVC-CMM-6T1

6-port T1 interface port adapter

7.6(12)

8.3(3)

WS-SVC-CMM-24FXS

24-port FXS interface port adapter

7.6(12)

8.3(3)

WS-SVC-CMM-ACT

Ad-hoc conferencing and transcoding port adapter

7.6(12)

8.3(3)

WS-X6624-FXS

24-port FXS analog interface module

5.5(1)

6.4(11)

WS-X6608-T1
WS-X6608-E1

8-port T1/E1 PSTN interface modules

5.5(1)

6.4(11)

FlexWan Module3

WS-X6182-2PA

FlexWAN Module

5.4(2)

6.4(11)

Intrusion Detection System Module (IDSM)4

WS-X6381-IDS

Intrusion Detection System Module

6.1(1d)

6.4(11)

WS-SVC-IDSM2-BUN-K9

Intrusion Detection System Module 2

7.5(1)

7.6(9)

Network Analysis Module (NAM)5 , 6

WS-X6380-NAM

Network Analysis Module, 256-MB RAM

5.5(1)

6.4(11)

WS-SVC-NAM-1

Network Analysis Module, 512-MB RAM, fabric-enabled

7.3(1)

7.6(9)

WS-SVC-NAM-2

Network Analysis Module, 1-GB RAM, fabric enabled, accelerator daughter card

7.3(1)

7.6(9)

Firewall Services Module7

WS-SVC-FWM-1-K9

Firewall Services Module

7.5(1)

7.6(9)

SSL Services Module8

WS-SVC-SSL-1

SSL Services Module

7.5(1)

7.6(9)

Content Switching Module (CSM)9

WS-X6066-SLB-APC

Content Switching Module

7.5(1)

7.6(9)

Content Services Gateway (CSG)10

WS-SVC-CSG-1

Content Services Gateway

7.6(1)

7.6(9)

ATM11

WS-X6101-OC12-SMF

Single-port single-mode OC-12 ATM

5.3(2)CSX

6.4(11)

WS-X6101-OC12-MMF

Single-port multimode OC-12 ATM

5.3(2)CSX

6.4(11)

Multilayer Switch Module (MSM)12

WS-X6302-MSM

Multilayer Switch Module

5.2(1)CSX

6.4(11)

Optical Services Modules (OSMs)13 , 14
4-port Gigabit Ethernet WAN

OSM-4GE-WAN-GBIC

4-port Gigabit Ethernet Optical Services Module

6.1(2)

6.4(11)

OC-12 Packet over SONET15

OSM-2OC12-POS-MM

2-port OC-12c/STM-4c POS Optical Services Module, MM, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-2OC12-POS-SI

2-port OC-12c/STM-4c POS Optical Services Module, SM-IR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-2OC12-POS-SL

2-port OC-12c/STM-4c POS Optical Services Module, SM-LR16 , with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-4OC12-POS-MM

4-port OC-12c/STM-4c POS Optical Services Module, MM, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OC-12 Packet over SONET15

OSM-4OC12-POS-SI

4-port OC-12c/STM-4c POS Optical Services Module, SM-IR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-4OC12-POS-SL

4-port OC-12c/STM-4c POS Optical Services Module, SM-LR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OC-3 Packet over SONET14

OSM-4OC3-POS-SI

4-port OC-3c/STM-1c POS Optical Services Module, SM-IR, with 4 Gigabit Ethernet ports

7.1(1)

7.6(9)

OSM-8OC3-POS-MM

8-port OC-3c/STM-1c POS Optical Services Module, MM, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-8OC3-POS-SI

8-port OC-3c/STM-1c POS Optical Services Module, SM-IR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-8OC3-POS-SL

8-port OC-3c/STM-1c POS Optical Services Module, SM-LR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-16OC3-POS-MM

16-port OC-3c/STM-1c POS Optical Services Module, MM, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-16OC3-POS-SI

16-port OC-3c/STM-1c POS Optical Services Module, SM-IR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OSM-16OC3-POS-SL

16-port OC-3c/STM-1c POS Optical Services Module, SM-LR, with 4 Gigabit Ethernet ports

6.1(2)

6.4(11)

OC-48 Packet over SONET14

OSM-1OC48-POS-SS

1-port OC-48c/STM-16c POS Optical Services
Module, SM-SR, with 4 Gigabit Ethernet ports

6.1(3)

6.4(11)

OSM-1OC48-POS-SI

1-port OC-48c/STM-16c POS Optical Services
Module, SM-IR, with 4 Gigabit Ethernet ports

6.1(3)

6.4(11)

OSM-1OC48-POS-SL

1-port OC-48c/STM-16c POS Optical Services
Module, SM-LR, with 4 Gigabit Ethernet ports

6.1(3)

6.4(11)

Power Supplies

WS-CAC-1000W

1000W AC power supply

5.1(1)CSX

6.4(11)

WS-CAC-1300W

1300W AC power supply

5.1(1)CSX

6.4(11)

WS-CDC-1300W

1300W DC power supply

5.1(1)CSX

6.4(11)

WS-CAC-2500W

2500W AC power supply

5.4(2)

6.4(11)

WS-CDC-2500W

2500W DC power supply

5.4(2)

6.4(11)

WS-CAC-3000W

3000W AC power supply

7.5(1)

7.6(9)

WS-CAC-4000W

4000W AC power supply

6.1(3)

6.4(11)

PWR-4000-DC17

4000W DC power supply

6.1(3)

8.3(3)

PWR-950-AC18

950W AC power supply

7.5(1)

7.6(9)

PWR-950-DC18

950W DC power supply

7.5(1)

7.6(9)

PWR-1900-AC/619

1900W AC power supply

7.2(2)

7.6(9)

PWR-1900-DC18

1900W DC power supply

7.2(2)

7.6(9)

Modular Chassis

WS-C6513

Catalyst 6513 chassis:

13 slots

64 chassis MAC addresses

Supported only with Supervisor Engine 2

6.2(2)

6.4(11)

WS-C6509

Catalyst 6509 chassis:

9 slots

1024 chassis MAC addresses

5.1(1)CSX

6.4(11)

WS-C6509-NEB

Catalyst 6509-NEB chassis:

9 vertical slots

1024 chassis MAC addresses

5.4(2)

6.4(11)

WS-C650320

Catalyst 6503 chassis:

3 slots

64 chassis MAC addresses

Does not support SFM

7.4(2)

7.6(9)

WS-C6009

Catalyst 6009 chassis:

9 slots

1024 chassis MAC addresses

5.1(1)CSX

6.4(11)

WS-C6506

Catalyst 6506 chassis:

6 slots

1024 chassis MAC addresses

5.2(1)CSX

6.4(11)

WS-C6006

Catalyst 6006 chassis:

6 slots

1024 chassis MAC addresses

5.2(1)CSX

6.4(11)

OSR-7609-AC, -DC

Cisco 7609 router chassis:

9 vertical slots

1024 chassis MAC addresses

Supported only with Supervisor Engine 2

6.1(1b)

6.4(11)

CISCO7603

Cisco 7603 router chassis:

3 slots

64 chassis MAC addresses

Does not support SFM

7.1(1)

7.6(9)

CISCO7606

Cisco 7606 router chassis:

6 slots

64 chassis MAC addresses

Supported only with Supervisor Engine 2

7.2(2)

7.6(9)

CISCO7613

Cisco 7613 router chassis:

13 slots

64 chassis MAC addresses

Supported only with Supervisor Engine 2

7.6(1)

7.6(9)

1 Not supported in the WS-C6513 chassis.

2 Not supported in software release 7.6(18). For more information, refer to Product Bulletin No. 2595 at this URL:
http://www.cisco.com/en/US/products/hw/switches/ps708/prod_eol_notice0900aecd8017a5d1.html

3 Refer to the Catalyst 6500 Series Switch FlexWAN Module Installation and Configuration Note.

4 Refer to the Catalyst 6500 Series Switch Intrusion Detection System Module Installation and Configuration Note.

5 Refer to the Network Analysis Module Installation and Configuration Note.

6 The Network Analysis Module (NAM) application image 1.1(1a) and NAM maintenance image 1.1(1a)m are not supported with supervisor engine software releases 6.3(2) and later. For supervisor engine software releases 6.3(2) and later, use the 1.2 NAM image.

7 Refer to the Catalyst 6500 Series Switch and 7600 Series Firewall Services Module Installation and Configuration Note.

8 Refer to the Catalyst 6500 Series Switch SSL Services Module Installation and Configuration Note.

9 Refer to the Cisco Content Switching Module Installation and Configuration Guide.

10 Refer to the Cisco Content Services Gateway Installation and Configuration Guide.

11 Refer to the ATM Configuration Guide and Command Reference.

12 Refer to the Multilayer Switch Module Release Notes.

13 Refer to the Optical Services Module Installation and Configuration Note.

14 Channelized OSMs are not supported on Catalyst 6500 series switches; they are supported only on the Cisco 7600 series router platform.

15 Also has four Layer 2 Gigabit Ethernet ports.

16 Single-mode, long reach.

17 The full 4000W is only available with software release 8.1(1) and later releases. With software release 6.1(3) and later 6.x and 7.x releases, the maximum wattage is 2506.56W.

18 Supported only on the WS-C6503 and CISCO7603 chassis.

19 Supported only on the CISCO7606 chassis.

20 The CiscoView 7.4(2) image for the Catalyst 6500 series switch does not support the WS-C6503 chassis. Support for this chassis will be included in the next CiscoView release.


Unsupported Hardware

The Distributed Forwarding Card (WS-F6K-DFC) and 16-port Gigabit Ethernet switching module (WS-X6816-GBIC) are not supported in systems running Catalyst software on the supervisor engine and Cisco IOS software only on the MSFC. These items are supported on systems running Cisco IOS Release 12.1(8a)E or later on both the Supervisor Engine 2 and the MSFC2.

Orderable Software Images

Table 2 lists the software versions and applicable ordering information for the Catalyst 6500 series supervisor engine software.


Caution Always back up the switch configuration file before upgrading or downgrading the switch software to avoid losing all or part of the configuration stored in nonvolatile RAM (NVRAM). When downgrading switch software, you will lose your configuration. Use the write network command or the copy config tftp command to back up your configuration to a Trivial File Transfer Protocol (TFTP) server. Use the copy config flash command to back up the configuration to a Flash device.


Note CiscoView images are available approximately 2 weeks after the Flash images are released.



Note Due to the size of the CiscoView 7.5(1) and later images (Supervisor Engine 1: cat6000-supcvk8 and cat6000-supcvk9, Supervisor Engine 2: cat6000-sup2cvk8.7-5-1.bin, cat6000-sup2cvk9.7-5-1.bin), the supervisor engine bootflash must be larger than 16 MB. If your supervisor engine bootflash is not larger than 16 MB, use the optional 24-MB linear Flash PC card for Supervisor Engine 1 and Supervisor Engine 2 (MEM-C6K-FLC24M=) or use the optional 64-MB ATA Flash PC card for Supervisor Engine 2 (MEM-C6K-ATA-1-64M=). Additionally, for Supervisor Engine 1, you may use the 64-MB linear Flash PC card (MEM-C6K-FLC64M[=]).



Note The CiscoView 7.4(2) image for the Catalyst 6500 series switch contains the latest 7.4(2) supervisor engine software with bug fixes incorporated. The CiscoView application software found in the bundled CiscoView image supports all of the hardware feature introduced in software release 7.4(2). (There were no new software features introduced in software release 7.4[2].)



Note The CiscoView 7.3(1) image for the Catalyst 6500 series switch contains the latest 7.3(1) supervisor engine software with bug fixes incorporated. In addition, the CiscoView application software found in the bundled CiscoView image supports all of the hardware and software features introduced in software releases 7.2(2) and 7.3(1).



Note The CiscoView 7.2(2) image for the Catalyst 6500 series switch contains the latest 7.2(2) supervisor engine software with bug fixes incorporated. In addition, the CiscoView application software found in the bundled CiscoView image supports all of the hardware and software features introduced in software release 7.1(1). Note that the hardware and software features introduced in software release 7.2(2) are not supported by the bundled CiscoView image. However, they will be supported when a later version of the CiscoView application is released.



Note The CiscoView 7.1(2) image for the Catalyst 6500 series switch contains the latest 7.1(2) supervisor engine software with bug fixes incorporated. In addition, the CiscoView application software found in the bundled CiscoView image supports hardware features introduced in software release 7.1(1). Note that the software features introduced in software release 7.1(1) are not supported by the bundled CiscoView image. However, they will be supported when a later version of the CiscoView application is released.



Note The 7.1(1) and 7.1(1a) CiscoView images for the Catalyst 6500 series switch contain the latest 7.1(1) supervisor engine software with bug fixes but the CiscoView application software in the bundled CV image is the current 6.3(3) CiscoView version. Note that the new hardware and software features introduced in software release 7.1(1) will not be supported by the bundled CiscoView application until a new version of the CiscoView application becomes available at a later date.



Note The 7.1(1) and 7.1(2) CiscoView + SSH images have been deferred. For details, refer to the 7.1(1) or 7.1(2) open caveats section, caveat CSCdw70549.


Table 2 Orderable Software Images 

Software Version
Filename
Orderable Product Number1
Supervisor Engine 2

7.6(24) Flash image

cat6000-sup2k8.7-6-24.bin

SC6K-SUP2K8-7.6

7.6(24) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-24.bin

SC6K-SUP2CVK8-7.6

7.6(24) Flash image (Secure Shell)

cat6000-sup2k9.7-6-24.bin

SC6K-SUP2K9-7.6

7.6(24) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-24.bin

SC6K-SUP2CVK9-7.6

7.6(23) Flash image

cat6000-sup2k8.7-6-23.bin

SC6K-SUP2K8-7.6

7.6(23) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-23.bin

SC6K-SUP2CVK8-7.6

7.6(23) Flash image (Secure Shell)

cat6000-sup2k9.7-6-23.bin

SC6K-SUP2K9-7.6

7.6(23) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-23.bin

SC6K-SUP2CVK9-7.6

7.6(22) Flash image

cat6000-sup2k8.7-6-22.bin

SC6K-SUP2K8-7.6

7.6(22) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-22.bin

SC6K-SUP2CVK8-7.6

7.6(22) Flash image (Secure Shell)

cat6000-sup2k9.7-6-22.bin

SC6K-SUP2K9-7.6

7.6(22) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-22.bin

SC6K-SUP2CVK9-7.6

7.6(21) Flash image

cat6000-sup2k8.7-6-21.bin

SC6K-SUP2K8-7.6

7.6(21) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-21.bin

SC6K-SUP2CVK8-7.6

7.6(21) Flash image (Secure Shell)

cat6000-sup2k9.7-6-21.bin

SC6K-SUP2K9-7.6

7.6(21) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-21.bin

SC6K-SUP2CVK9-7.6

7.6(20) Flash image

cat6000-sup2k8.7-6-20.bin

SC6K-SUP2K8-7.6

7.6(20) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-20.bin

SC6K-SUP2CVK8-7.6

7.6(20) Flash image (Secure Shell)

cat6000-sup2k9.7-6-20.bin

SC6K-SUP2K9-7.6

7.6(20) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-20.bin

SC6K-SUP2CVK9-7.6

7.6(19) Flash image

cat6000-sup2k8.7-6-19.bin

SC6K-SUP2K8-7.6

7.6(19) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-19.bin

SC6K-SUP2CVK8-7.6

7.6(19) Flash image (Secure Shell)

cat6000-sup2k9.7-6-19.bin

SC6K-SUP2K9-7.6

7.6(19) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-19.bin

SC6K-SUP2CVK9-7.6

7.6(18) Flash image

cat6000-sup2k8.7-6-18.bin

SC6K-SUP2K8-7.6

7.6(18) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-18.bin

SC6K-SUP2CVK8-7.6

7.6(18) Flash image (Secure Shell)

cat6000-sup2k9.7-6-18.bin

SC6K-SUP2K9-7.6

7.6(18) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-18.bin

SC6K-SUP2CVK9-7.6

7.6(17) Flash image

cat6000-sup2k8.7-6-17.bin

SC6K-SUP2K8-7.6

7.6(17) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-17.bin

SC6K-SUP2CVK8-7.6

7.6(17) Flash image (Secure Shell)

cat6000-sup2k9.7-6-17.bin

SC6K-SUP2K9-7.6

7.6(17) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-17.bin

SC6K-SUP2CVK9-7.6

7.6(16) Flash image

cat6000-sup2k8.7-6-16.bin

SC6K-SUP2K8-7.6

7.6(16) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-16.bin

SC6K-SUP2CVK8-7.6

7.6(16) Flash image (Secure Shell)

cat6000-sup2k9.7-6-16.bin

SC6K-SUP2K9-7.6

7.6(16) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-16.bin

SC6K-SUP2CVK9-7.6

7.6(15) Flash image

cat6000-sup2k8.7-6-15.bin

SC6K-SUP2K8-7.6

7.6(15) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-15.bin

SC6K-SUP2CVK8-7.6

7.6(15) Flash image (Secure Shell)

cat6000-sup2k9.7-6-15.bin

SC6K-SUP2K9-7.6

7.6(15) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-15.bin

SC6K-SUP2CVK9-7.6

7.6(14) Flash image

cat6000-sup2k8.7-6-14.bin

SC6K-SUP2K8-7.6

7.6(14) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-14.bin

SC6K-SUP2CVK8-7.6

7.6(14) Flash image (Secure Shell)

cat6000-sup2k9.7-6-14.bin

SC6K-SUP2K9-7.6

7.6(14) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-14.bin

SC6K-SUP2CVK9-7.6

7.6(13) Flash image

cat6000-sup2k8.7-6-13.bin

SC6K-SUP2K8-7.6

7.6(13) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-13.bin

SC6K-SUP2CVK8-7.6

7.6(13) Flash image (Secure Shell)

cat6000-sup2k9.7-6-13.bin

SC6K-SUP2K9-7.6

7.6(13) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-13.bin

SC6K-SUP2CVK9-7.6

7.6(12) Flash image

cat6000-sup2k8.7-6-12.bin

SC6K-SUP2K8-7.6

7.6(12) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-12.bin

SC6K-SUP2CVK8-7.6

7.6(12) Flash image (Secure Shell)

cat6000-sup2k9.7-6-12.bin

SC6K-SUP2K9-7.6

7.6(12) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-12.bin

SC6K-SUP2CVK9-7.6

7.6(11) Flash image

cat6000-sup2k8.7-6-11.bin

SC6K-SUP2K8-7.6

7.6(11) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-11.bin

SC6K-SUP2CVK8-7.6

7.6(11) Flash image (Secure Shell)

cat6000-sup2k9.7-6-11.bin

SC6K-SUP2K9-7.6

7.6(11) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-11.bin

SC6K-SUP2CVK9-7.6

7.6(10) Flash image

cat6000-sup2k8.7-6-10.bin

SC6K-SUP2K8-7.6

7.6(10) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-10.bin

SC6K-SUP2CVK8-7.6

7.6(10) Flash image (Secure Shell)

cat6000-sup2k9.7-6-10.bin

SC6K-SUP2K9-7.6

7.6(10) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-10.bin

SC6K-SUP2CVK9-7.6

7.6(9) Flash image

cat6000-sup2k8.7-6-9.bin

SC6K-SUP2K8-7.6

7.6(9) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-9.bin

SC6K-SUP2CVK8-7.6

7.6(9) Flash image (Secure Shell)

cat6000-sup2k9.7-6-9.bin

SC6K-SUP2K9-7.6

7.6(9) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-9.bin

SC6K-SUP2CVK9-7.6

7.6(8) Flash image

cat6000-sup2k8.7-6-8.bin

SC6K-SUP2K8-7.6

7.6(8) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-8.bin

SC6K-SUP2CVK8-7.6

7.6(8) Flash image (Secure Shell)

cat6000-sup2k9.7-6-8.bin

SC6K-SUP2K9-7.6

7.6(8) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-8.bin

SC6K-SUP2CVK9-7.6

7.6(7) Flash image

cat6000-sup2k8.7-6-7.bin

SC6K-SUP2K8-7.6

7.6(7) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-7.bin

SC6K-SUP2CVK8-7.6

7.6(7) Flash image (Secure Shell)

cat6000-sup2k9.7-6-7.bin

SC6K-SUP2K9-7.6

7.6(7) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-7.bin

SC6K-SUP2CVK9-7.6

7.6(6) Flash image

cat6000-sup2k8.7-6-6.bin

SC6K-SUP2K8-7.6

7.6(6) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-6.bin

SC6K-SUP2CVK8-7.6

7.6(6) Flash image (Secure Shell)

cat6000-sup2k9.7-6-6.bin

SC6K-SUP2K9-7.6

7.6(6) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-6.bin

SC6K-SUP2CVK9-7.6

7.6(5) Flash image

cat6000-sup2k8.7-6-5.bin

SC6K-SUP2K8-7.6

7.6(5) Flash image (CiscoView)

cat6000-sup2cvk8.7-6-5.bin

SC6K-SUP2CVK8-7.6

7.6(5) Flash image (Secure Shell)

cat6000-sup2k9.7-6-5.bin

SC6K-SUP2K9-7.6

7.6(5) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-6-5.bin

SC6K-SUP2CVK9-7.6

7.5(1) Flash image

cat6000-sup2k8.7-5-1.bin

SC6K-SUP2K8-7.5.1

7.5(1) Flash image (CiscoView)

cat6000-sup2cvk8.7-5-1.bin

SC6K-SUP2CVK8-7.5.1

7.5(1) Flash image (Secure Shell)

cat6000-sup2k9.7-5-1.bin

SC6K-SUP2K9-7.5.1

7.5(1) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-5-1.bin

SC6K-SUP2CVK9-7.5.1

7.4(3) Flash image

cat6000-sup2k8.7-4-3.bin

SC6K-SUP2K8-7.4.3

7.4(3) Flash image (CiscoView)

cat6000-sup2cvk8.7-4-3.bin

SC6K-SUP2CVK8-7.4.3

7.4(3) Flash image (Secure Shell)

cat6000-sup2k9.7-4-3.bin

SC6K-SUP2K9-7.4.3

7.4(3) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-4-3.bin

SC6K-SUP2CVK9-7.4.3

7.4(2) Flash image

cat6000-sup2k8.7-4-2.bin

SC6K-SUP2K8-7.4.2

7.4(2) Flash image (CiscoView)

cat6000-sup2cvk8.7-4-2.bin

SC6K-SUP2CVK8-7.4.2

7.4(2) Flash image (Secure Shell)

cat6000-sup2k9.7-4-2.bin

SC6K-SUP2K9-7.4.2

7.4(2) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-4-2.bin

SC6K-SUP2CVK9-7.4.2

7.3(2) Flash image

cat6000-sup2k8.7-3-2.bin

SC6K-SUP2K8-7.3.2

7.3(2) Flash image (CiscoView)

cat6000-sup2cvk8.7-3-2.bin

SC6K-SUP2CVK8-7.3.2

7.3(2) Flash image (Secure Shell)

cat6000-sup2k9.7-3-2.bin

SC6K-SUP2K9-7.3.2

7.3(2) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-3-2.bin

SC6K-SUP2CVK9-7.3.2

7.3(1) Flash image

cat6000-sup2k8.7-3-1.bin

SC6K-SUP2K8-7.3.1

7.3(1) Flash image (CiscoView)

cat6000-sup2cvk8.7-3-1.bin

SC6K-SUP2CVK8-7.3.1

7.3(1) Flash image (Secure Shell)

cat6000-sup2k9.7-3-1.bin

SC6K-SUP2K9-7.3.1

7.3(1) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-3-1.bin

SC6K-SUP2CVK9-7.3.1

7.2(2) Flash image

cat6000-sup2k8.7-2-2.bin

SC6K-SUP2K8-7.2.2

7.2(2) Flash image (CiscoView)

cat6000-sup2cvk8.7-2-2.bin

SC6K-SUP2CVK8-7.2.2

7.2(2) Flash image (Secure Shell)

cat6000-sup2k9.7-2-2.bin

SC6K-SUP2K9-7.2.2

7.2(2) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-2-2.bin

SC6K-SUP2CVK9-7.2.2

7.1(2) Flash image

cat6000-sup2k8.7-1-2.bin

SC6K-SUP2K8-7.1.2

7.1(2) Flash image (CiscoView)

cat6000-sup2cvk8.7-1-2.bin

SC6K-SUP2CVK8-7.1.2

7.1(2) Flash image (Secure Shell)

cat6000-sup2k9.7-1-2.bin

SC6K-SUP2K9-7.1.2

7.1(2) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-1-2.bin

SC6K-SUP2CVK9-7.1.2

7.1(1a) Flash image

cat6000-sup2k8.7-1-1a.bin

SC6K-SUP2K8-7.1.1a

7.1(1a) Flash image (CiscoView)

cat6000-sup2cvk8.7-1-1a.bin

SC6K-SUP2CVK8-7.1.1a

7.1(1a) Flash image (Secure Shell)

cat6000-sup2k9.7-1-1a.bin

SC6K-SUP2K9-7.1.1a

7.1(1a) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-1-1a.bin

SC6K-SUP2CVK9-7.1.1a

7.1(1) Flash image

cat6000-sup2k8.7-1-1.bin

SC6K-SUP2K8-7.1.1

7.1(1) Flash image (CiscoView)

cat6000-sup2cvk8.7-1-1.bin

SC6K-SUP2CVK8-7.1.1

7.1(1) Flash image (Secure Shell)

cat6000-sup2k9.7-1-1.bin

SC6K-SUP2K9-7.1.1

7.1(1) Flash image (Secure Shell and CiscoView)

cat6000-sup2cvk9.7-1-1.bin

SC6K-SUP2CVK9-7.1.1

Supervisor Engine 1

7.6(17) Flash image

cat6000-supk8.7-6-17.bin

SC6K-SUPK8-7.6

7.6(17) Flash image (CiscoView)

cat6000-supcvk8.7-6-17.bin

SC6K-SUPCVK8-7.6

7.6(17) Flash image (Secure Shell)

cat6000-supk9.7-6-17.bin

SC6K-SUPK9-7.6

7.6(17) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-17.bin

SC6K-SUPCVK9-7.6

7.6(16) Flash image

cat6000-supk8.7-6-16.bin

SC6K-SUPK8-7.6

7.6(16) Flash image (CiscoView)

cat6000-supcvk8.7-6-16.bin

SC6K-SUPCVK8-7.6

7.6(16) Flash image (Secure Shell)

cat6000-supk9.7-6-16.bin

SC6K-SUPK9-7.6

7.6(16) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-16.bin

SC6K-SUPCVK9-7.6

7.6(15) Flash image

cat6000-supk8.7-6-15.bin

SC6K-SUPK8-7.6

7.6(15) Flash image (CiscoView)

cat6000-supcvk8.7-6-15.bin

SC6K-SUPCVK8-7.6

7.6(15) Flash image (Secure Shell)

cat6000-supk9.7-6-15.bin

SC6K-SUPK9-7.6

7.6(15) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-15.bin

SC6K-SUPCVK9-7.6

7.6(14) Flash image

cat6000-supk8.7-6-14.bin

SC6K-SUPK8-7.6

7.6(14) Flash image (CiscoView)

cat6000-supcvk8.7-6-14.bin

SC6K-SUPCVK8-7.6

7.6(14) Flash image (Secure Shell)

cat6000-supk9.7-6-14.bin

SC6K-SUPK9-7.6

7.6(14) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-14.bin

SC6K-SUPCVK9-7.6

7.6(13) Flash image

cat6000-supk8.7-6-13.bin

SC6K-SUPK8-7.6

7.6(13) Flash image (CiscoView)

cat6000-supcvk8.7-6-13.bin

SC6K-SUPCVK8-7.6

7.6(13) Flash image (Secure Shell)

cat6000-supk9.7-6-13.bin

SC6K-SUPK9-7.6

7.6(13) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-13.bin

SC6K-SUPCVK9-7.6

7.6(12) Flash image

cat6000-supk8.7-6-12.bin

SC6K-SUPK8-7.6

7.6(12) Flash image (CiscoView)

cat6000-supcvk8.7-6-12.bin

SC6K-SUPCVK8-7.6

7.6(12) Flash image (Secure Shell)

cat6000-supk9.7-6-12.bin

SC6K-SUPK9-7.6

7.6(12) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-12.bin

SC6K-SUPCVK9-7.6

7.6(11) Flash image

cat6000-supk8.7-6-11.bin

SC6K-SUPK8-7.6

7.6(11) Flash image (CiscoView)

cat6000-supcvk8.7-6-11.bin

SC6K-SUPCVK8-7.6

7.6(11) Flash image (Secure Shell)

cat6000-supk9.7-6-11.bin

SC6K-SUPK9-7.6

7.6(11) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-11.bin

SC6K-SUPCVK9-7.6

7.6(10) Flash image

cat6000-supk8.7-6-10.bin

SC6K-SUPK8-7.6

7.6(10) Flash image (CiscoView)

cat6000-supcvk8.7-6-10.bin

SC6K-SUPCVK8-7.6

7.6(10) Flash image (Secure Shell)

cat6000-supk9.7-6-10.bin

SC6K-SUPK9-7.6

7.6(10) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-10.bin

SC6K-SUPCVK9-7.6

7.6(9) Flash image

cat6000-supk8.7-6-9.bin

SC6K-SUPK8-7.6

7.6(9) Flash image (CiscoView)

cat6000-supcvk8.7-6-9.bin

SC6K-SUPCVK8-7.6

7.6(9) Flash image (Secure Shell)

cat6000-supk9.7-6-9.bin

SC6K-SUPK9-7.6

7.6(9) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-9.bin

SC6K-SUPCVK9-7.6

7.6(8) Flash image

cat6000-supk8.7-6-8.bin

SC6K-SUPK8-7.6

7.6(8) Flash image (CiscoView)

cat6000-supcvk8.7-6-8.bin

SC6K-SUPCVK8-7.6

7.6(8) Flash image (Secure Shell)

cat6000-supk9.7-6-8.bin

SC6K-SUPK9-7.6

7.6(8) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-8.bin

SC6K-SUPCVK9-7.6

7.6(7) Flash image

cat6000-supk8.7-6-7.bin

SC6K-SUPK8-7.6

7.6(7) Flash image (CiscoView)

cat6000-supcvk8.7-6-7.bin

SC6K-SUPCVK8-7.6

7.6(7) Flash image (Secure Shell)

cat6000-supk9.7-6-7.bin

SC6K-SUPK9-7.6

7.6(7) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-7.bin

SC6K-SUPCVK9-7.6

7.6(6) Flash image

cat6000-supk8.7-6-6.bin

SC6K-SUPK8-7.6

7.6(6) Flash image (CiscoView)

cat6000-supcvk8.7-6-6.bin

SC6K-SUPCVK8-7.6

7.6(6) Flash image (Secure Shell)

cat6000-supk9.7-6-6.bin

SC6K-SUPK9-7.6

7.6(6) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-6.bin

SC6K-SUPCVK9-7.6

7.6(5) Flash image

cat6000-supk8.7-6-5.bin

SC6K-SUPK8-7.6

7.6(5) Flash image (CiscoView)

cat6000-supcvk8.7-6-5.bin

SC6K-SUPCVK8-7.6

7.6(5) Flash image (Secure Shell)

cat6000-supk9.7-6-5.bin

SC6K-SUPK9-7.6

7.6(5) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-5.bin

SC6K-SUPCVK9-7.6

7.6(4) Flash image

cat6000-supk8.7-6-4.bin

SC6K-SUPK8-7.6

7.6(4) Flash image (CiscoView)

cat6000-supcvk8.7-6-4.bin

SC6K-SUPCVK8-7.6

7.6(4) Flash image (Secure Shell)

cat6000-supk9.7-6-4.bin

SC6K-SUPK9-7.6

7.6(4) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-4.bin

SC6K-SUPCVK9-7.6

7.6(3a) Flash image

cat6000-supk8.7-6-3a.bin

SC6K-SUPK8-7.6

7.6(3a) Flash image (CiscoView)

cat6000-supcvk8.7-6-3a.bin

SC6K-SUPCVK8-7.6

7.6(3a) Flash image (Secure Shell)

cat6000-supk9.7-6-3a.bin

SC6K-SUPK9-7.6

7.6(3a) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-3a.bin

SC6K-SUPCVK9-7.6

7.6(3) Flash image

cat6000-supk8.7-6-3.bin

SC6K-SUPK8-7.6

7.6(3) Flash image (CiscoView)

cat6000-supcvk8.7-6-3.bin

SC6K-SUPCVK8-7.6

7.6(3) Flash image (Secure Shell)

cat6000-supk9.7-6-3.bin

SC6K-SUPK9-7.6

7.6(3) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-3.bin

SC6K-SUPCVK9-7.6

7.6(2a) Flash image

cat6000-supk8.7-6-2a.bin

SC6K-SUPK8-7.6.2a

7.6(2a) Flash image (Secure Shell)

cat6000-supk9.7-6-2a.bin

SC6K-SUPK9-7.6.2a

7.6(2) Flash image

cat6000-supk8.7-6-2.bin

SC6K-SUPK8-7.6.2

7.6(2) Flash image (CiscoView)

cat6000-supcvk8.7-6-2.bin

SC6K-SUPCVK8-7.6.2

7.6(2) Flash image (Secure Shell)

cat6000-supk9.7-6-2.bin

SC6K-SUPK9-7.6.2

7.6(2) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-2.bin

SC6K-SUPCVK9-7.6.2

7.6(1) Flash image

cat6000-supk8.7-6-1.bin

SC6K-SUPK8-7.6.1

7.6(1) Flash image (CiscoView)

cat6000-supcvk8.7-6-1.bin

SC6K-SUPCVK8-7.6.1

7.6(1) Flash image (Secure Shell)

cat6000-supk9.7-6-1.bin

SC6K-SUPK9-7.6.1

7.6(1) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-6-1.bin

SC6K-SUPCVK9-7.6.1

7.5(1) Flash image

cat6000-supk8.7-5-1.bin

SC6K-SUPK8-7.5.1

7.5(1) Flash image (CiscoView)

cat6000-supcvk8.7-5-1.bin

SC6K-SUPCVK8-7.5.1

7.5(1) Flash image (Secure Shell)

cat6000-supk9.7-5-1.bin

SC6K-SUPK9-7.5.1

7.5(1) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-5-1.bin

SC6K-SUPCVK9-7.5.1

7.4(3) Flash image

cat6000-supk8.7-4-3.bin

SC6K-SUPK8-7.4.3

7.4(3) Flash image (CiscoView)

cat6000-supcvk8.7-4-3.bin

SC6K-SUPCVK8-7.4.3

7.4(3) Flash image (Secure Shell)

cat6000-supk9.7-4-3.bin

SC6K-SUPK9-7.4.3

7.4(3) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-4-3.bin

SC6K-SUPCVK9-7.4.3

7.4(2) Flash image

cat6000-supk8.7-4-2.bin

SC6K-SUPK8-7.4.2

7.4(2) Flash image (CiscoView)

cat6000-supcvk8.7-4-2.bin

SC6K-SUPCVK8-7.4.2

7.4(2) Flash image (Secure Shell)

cat6000-supk9.7-4-2.bin

SC6K-SUPK9-7.4.2

7.4(2) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-4-2.bin

SC6K-SUPCVK9-7.4.2

7.3(2) Flash image

cat6000-supk8.7-3-2.bin

SC6K-SUPK8-7.3.2

7.3(2) Flash image (CiscoView)

cat6000-supcvk8.7-3-2.bin

SC6K-SUPCVK8-7.3.2

7.3(2) Flash image (Secure Shell)

cat6000-supk9.7-3-2.bin

SC6K-SUPK9-7.3.2

7.3(2) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-3-2.bin

SC6K-SUPCVK9-7.3.2

7.3(1) Flash image

cat6000-supk8.7-3-1.bin

SC6K-SUPK8-7.3.1

7.3(1) Flash image (CiscoView)

cat6000-supcvk8.7-3-1.bin

SC6K-SUPCVK8-7.3.1

7.3(1) Flash image (Secure Shell)

cat6000-supk9.7-3-1.bin

SC6K-SUPK9-7.3.1

7.3(1) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-3-1.bin

SC6K-SUPCVK9-7.3.1

7.2(2) Flash image

cat6000-supk8.7-2-2.bin

SC6K-SUPK8-7.2.2

7.2(2) Flash image (CiscoView)

cat6000-supcvk8.7-2-2.bin

SC6K-SUPCVK8-7.2.2

7.2(2) Flash image (Secure Shell)

cat6000-supk9.7-2-2.bin

SC6K-SUPK9-7.2.2

7.2(2) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-2-2.bin

SC6K-SUPCVK9-7.2.2

7.1(2) Flash image

cat6000-supk8.7-1-2.bin

SC6K-SUPK8-7.1.2

7.1(2) Flash image (CiscoView)

cat6000-supcvk8.7-1-2.bin

SC6K-SUPCVK8-7.1.2

7.1(2) Flash image (Secure Shell)

cat6000-supk9.7-1-2.bin

SC6K-SUPK9-7.1.2

7.1(2) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-1-2.bin

SC6K-SUPCVK9-7.1.2

7.1(1a) Flash image

cat6000-supk8.7-1-1a.bin

SC6K-SUPK8-7.1.1a

7.1(1a) Flash image (CiscoView)

cat6000-supcvk8.7-1-1a.bin

SC6K-SUPCVK8-7.1.1a

7.1(1a) Flash image (Secure Shell)

cat6000-supk9.7-1-1a.bin

SC6K-SUPK9-7.1.1a

7.1(1) Flash image

cat6000-supk8.7-1-1.bin

SC6K-SUPK8-7.1.1

7.1(1) Flash image (CiscoView)

cat6000-supcvk8.7-1-1.bin

SC6K-SUPCVK8-7.1.1

7.1(1) Flash image (Secure Shell)

cat6000-supk9.7-1-1.bin

SC6K-SUPK9-7.1.1

7.1(1) Flash image (Secure Shell and CiscoView)

cat6000-supcvk9.7-1-1.bin

SC6K-SUPCVK9-7.1.1

1 Installed on system; append with "=" for spare on floppy media.


Software Image Version Compatibility

With high-availability versioning enabled, you can have two different but compatible images on the active and standby supervisor engines. The active supervisor engine exchanges image version information with the standby supervisor engine and determines whether the images are compatible for enabling high availability. If the active and standby supervisor engines are not running compatible image versions, you cannot enable high availability.

Image versioning is supported in supervisor engine software releases 5.4(1) and later. With versioning enabled, high availability is fully supported with the active and standby supervisor engines running different images as long as the images are compatible. The only fully compatible images are as follows:

Supervisor Engine 1

5.5(3) and 5.5(4)

6.1(3) and 6.1(4)

6.2(2) and 6.2(3)

6.3(2) and 6.3(3)

6.3(4) and 6.3(5)

6.3(6) and 6.3(7)

Supervisor Engine 2

6.1(3) and 6.1(4)

6.2(2) and 6.2(3)

6.3(2) and 6.3(3)

Images that are compatible with all modules except Gigabit Ethernet switching modules are as follows:

Supervisor Engine 1

5.4(3) and 5.4(4)

5.5(3) and 5.5(5)

5.5(4) and 5.5(5)

Images that are compatible with Gigabit Ethernet switching modules but not compatible with 10/100BASE-T modules are as follows:

Supervisor Engine 1

5.5(6a) and 5.5(7)

Images that are compatible with all modules except the SFM/SFM2 and fabric-enabled modules are as follows:

Supervisor Engine 2

6.3(4) and 6.3(5)

6.3(6) and 6.3(7)


Note Attempting to run incompatible image versions could result in configuration loss.


Catalyst 6500 Series Features


Note For complete hardware requirements for the software features listed, see the Catalyst 6500 Series Software Configuration Guides.


These sections describe the Catalyst 6500 series features:

Features for Supervisor Engine Software Release 7.6

Features for Supervisor Engine Software Release 7.5

Features for Supervisor Engine Software Release 7.4

Features for Supervisor Engine Software Release 7.3

Features for Supervisor Engine Software Release 7.2

Features for Supervisor Engine Software Release 7.1

Features for Supervisor Engine Software Release 6.3

Features for Supervisor Engine Software Release 6.2

Features for Supervisor Engine Software Release 6.1

Features for Supervisor Engine Software Releases 5.1 Through 5.5

Features for Supervisor Engine Software Release 7.6

These sections describe the features in software release 7.6, 17 April 2003:

Software Release 7.6 Hardware Features

Software Release 7.6 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.6 Hardware Features

Software release 7.6 provides initial support for these modules and chassis:

Content Services Gateway (WS-SVC-CSG-1)

The Content Services Gateway (CSG) provides the capability to examine the mobile wireless and wireline IP datastream beyond the IP and TCP/UDP headers to enable billing that is based on the content being provided to the end user.

48-port 10/100/1000BASE-TX switching module (WS-X6148-GE-TX) (WS-X6148V-GE-TX provides inline power to IP telephones)

48-port 10/100/1000BASE-TX switching module, fabric enabled (WS-X6548-GE-TX) (WS-X6548V-GE-TX provides inline power to IP telephones)

The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules do not support the following:

More than 1 Gbps of traffic per EtherChannel (see the "EtherChannel" section for details)

ISL trunking

VLAN translation

Jumbo frames

802.1Q tunneling

Traffic storm control

In software release 7.6(x) and earlier releases: ingress SPAN sources when the switch is operating in truncated and compact modes (also applies to the WS-X6516A-GBIC module)

Cisco 7613 router (CISCO7613)

Software Release 7.6 Software Features

Software release 7.6 provides support for these software features:

In software release 7.6(8) and later releases, improved supervisor engine failover rates with high availability enabled are as follows: In flow through, truncated, and compact modes, the Supervisor Engine 1 and Supervisor Engine 2 failover time is less than 500 ms.

Layer 2 protocol tunneling on trunk ports—Allows third-party vendor's equipment to interoperate with the Catalyst 6500 series switch in service-provider networks. Layer 2 protocol tunneling makes control protocol PDUs such as STP, CDP, and VTP, transparent to the service provider cloud when passing traffic through trunk ports. In earlier releases, Layer 2 protocol tunneling was available on access ports only.

802.1X with DHCP enhancements—802.1X authentication support for Dynamic Host Configuration Protocol (DHCP) allows network administrators to secure IP addresses, given to end users for accounting purposes and to grant services, based on Layer 3 criteria.

TDR—You can check the status of copper cables using the time domain reflectometer (TDR) feature on the 48-port 10/100/1000BASE-T modules (WS-X6148-GE-TX and WS-X6548-GE-TX).

PRBS test—Cable diagnostics allow you to activate the Pseudorandom Binary Sequence (PRBS) test on 10-Gigabit Ethernet links.


Note The PRBS test is currently available only on the 1-port 10GBASE-E serial 10-Gigabit Ethernet module (WS-X6502-10GE).


Support for multiple SVIs (secure VLAN interfaces) on the Firewall Services Module (WS-SVC-FWM-1-K9).

syslog dump—If the system fails, a file containing the system messages in the syslog buffer (as displayed when entering the show logging buffer command) is produced.

Auto-save feature for text configuration mode—Allows you to automatically save the text configuration in NVRAM.

Supports the following enhanced MIBs:

CISCO-CATOS-ACL-QOS-MIB

CISCO-ENVMON-MIB

CISCO-IP-IF-MIB

CISCO-PAE-MIB

Features for Supervisor Engine Software Release 7.5

These sections describe the features in software release 7.5, 27 December 2002:

Software Release 7.5 Hardware Features

Software Release 7.5 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.5 Hardware Features

Software release 7.5 provides initial support for these modules and chassis:

Firewall Services Module (WS-SVC-FWM-1-K9)

Connections between the inside, outside, and DMZ networks are controlled by the Firewall Services Module through the firewall using a network-modeled protection scheme that is based upon a configuration and security policy. By implementing a security policy, you can ensure that all traffic from the protected networks only passes through the firewall to the unprotected network. You also can control who accesses the networks and with which services. Features on the module allow you to control how your security policy is used.

SSL Services Module (WS-SVC-SSL-1)

The SSL Services Module is a Layer 4-through-Layer 7 service module. The module terminates secure sockets layer (SSL) transactions and accelerates the encryption and decryption of data used in SSL sessions.

The module operates either in a standalone configuration or with the Content Switching Module (CSM). In a standalone configuration, secure traffic is directed to the module using policy-based routing (PBR). When used with the CSM, only encrypted client traffic is forwarded to the module, while clear text traffic is forwarded to the real servers.

Content Switching Module (WS-X6066-SLB-APC)

The CSM provides high-performance server load balancing (SLB) among groups of servers, firewalls, caches, VPN termination devices, and other network devices, based on Layer 3 as well as Layer 4 through Layer 7 packet information. Server farms are groups of load-balanced devices.

Intrusion Detection System Module 2 (WS-SVC-IDSM2-BUN-K9)

The IDSM2 is an integrated services module that detects unauthorized activity traversing the network by analyzing traffic in real-time, helping enable you to quickly respond to security breaches.

16-port Gigabit Ethernet GBIC switching module (WS-X6516A-GBIC)

Fabric-enabled with 1-MB per-port packet buffers.

Software Release 7.5 Software Features

Software release 7.5 provides support for these software features:

IEEE 802.1X enhancements

802.1X with port security

802.1X authentication is compatible with the port security feature. If you enable port security for only one MAC address on a specific port, only that MAC address will authenticate through a RADIUS server. Users connected through all other MAC addresses are denied access. If you enable port security for multiple MAC addresses, each address needs to authenticate through the 802.1X RADIUS server.

802.1X with a guest VLAN

The guest VLAN feature allows non-802.1X capable hosts to be able to access networks that use 802.1X authentication.

802.1X with an auxiliary VLAN

You can enable 802.1X on a Multiple VLAN Access Port (MVAP), and you can enable an auxiliary VLAN ID on an 802.1X port.

Automatic QoS

Automatic QoS consists of a macro that simplifies QoS configuration on the Catalyst 6500 series switches. The automatic QoS macro covers all the QoS configuration tasks that are required for implementing the recommended Architecture for Voice, Video, and Integrated Data (AVVID) settings for a voice port.

Automatic voice configuration

Automatic voice configuration consists of two macros that simplify voice configuration on the Catalyst 6500 series switches. The automatic voice configuration macros cover all the voice configuration tasks that are required for implementing the recommended AVVID settings for a voice port.

High availability enhancements

High availability for 802.1X

High availability for port security

The switch synchronizes runtime 802.1X and port security information between the active and standby supervisor engines.

ARP inspection

The ARP inspection feature allows you to configure a set of order-dependent rules within the security ACL (VACL) framework to prevent ARP table attacks.

Configuring 802.1Q tagging on a per-port basis

The dot1q-all-tagged feature command prior to software release 7.5(1) was a global command. It configured a switch to forward all frames from 802.1Q trunks with 802.1Q tagging, including traffic in the native VLAN (default VLAN), and admit only 802.1Q tagged frames on 802.1Q trunks, dropping any untagged traffic, including untagged traffic in the native VLAN.

In software releases 7.5(1) and later, the dot1q-all-tagged feature can be enabled or disabled on a per-port basis.

IGMP version 3 snooping

IGMP version 3 snooping uses source-based filtering and is the industry-designated standard protocol for hosts to signal channel subscriptions in Source Specific Multicast (SSM). Source-based filtering enables hosts and routers to specify which source addresses should be allowed or blocked for a specific multicast group.


Note IGMP version 3 snooping requires the Supervisor Engine 2 and Multicast Multilayer Switching (MMLS) must be disabled on the MSFC2.


Local user authentication

Local user authentication uses local user accounts and passwords that you create to validate the login attempts of local users rather than requiring a network authentication protocol such as RADIUS or TACACS+.

Network-Based Application Recognition (NBAR)

NBAR is a classification engine that recognizes a wide variety of applications, including web-based and other difficult-to-classify protocols that utilize dynamic TCP/UDP port assignments. When an application is recognized and classified by NBAR, a network can invoke services for that specific application. NBAR ensures that network bandwidth is used efficiently by classifying packets and then applying QoS to the classified traffic.

For NBAR configuration information, refer to this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/dtnbarad.htm#

New MAC address trap

This feature enables background polling of the hardware CAM table so that the software can recognize when new MAC addresses are learned by the switch and generate an SNMP trap. To prevent overloading the network with traps, multiple addresses that are learned during one polling interval generate only one trap (see the set cam notification command description in the Catalyst 6500 Series Switch Command Reference publication).

CAM usage monitoring

This feature allows you to enable notification when a MAC address change occurs to the CAM table, enable notification when the CAM table utilization exceeds a predefined threshold, and also allows you to set the time between notifications (see the set cam notification command description in the Catalyst 6500 Series Switch Command Reference publication).

Policy-based forwarding (PBF) enhancements

The enhancements added to the PBF feature simplify the process of setting and committing the security ACLs and adjacency information.

Per-port unicast flood blocking

You can enable unicast flood blocking on any Ethernet port on a per-port basis. Unicast flood blocking provides you the option to drop unicast flood packets on an Ethernet port that has only one host connected to the port. All Ethernet ports on a switch are configured to allow unicast flooding; unicast flood blocking allows you to drop the unicast flood packets before they reach the port.

Rapid PVST+

Rapid PVST+ is the same as PVST+, although rapid PVST+ utilizes a rapid STP that is based on IEEE 802.1w instead of 802.1D. Rapid PVST+ uses the same configuration as PVST+ and you only need minimal extra configuration.

Rate limiting for Cisco IOS ACL logging

The rate-limiting feature for Cisco IOS ACL logging limits the number of packets that are sent to the MSFC CPU for bridged ACEs. An ACE is bridged when the result for the Cisco IOS ACL is a deny or permit with the log option specified. The bridge action can result in Cisco IOS ACL logging overloading the MSFC CPU. When you configure rate limiting for Cisco IOS ACL logging, the bridged ACEs are redirected to the MSFC with rate limiting.

EPLD image upgrades

Automatic Supervisor Engine 2 EPLD image upgrade—The supervisor engine EPLD upgrade is performed automatically when the switch is reset or power cycled.

Nonsupervisor engine module EPLD image upgrade—You can upgrade the nonsupervisor engine module EPLD image by using the download command with the epld keyword. You can upgrade the EPLD image on one or all modules.

RADIUS enhancement

The framed-ip-address is now sent in the RADIUS authentication access-request packet.

NVRAM monitoring

The NVRAM monitoring feature is a background process that allows the system to recover when data in NVRAM is corrupted.

Increased QOS ACL limit

You can configure the maximum number of QoS ACLs that the hardware supports. The new limit allows 512 IP QoS ACLs, 512 IPX QoS ACLs, and 512 MAC QoS ACLs on up to 512 different interfaces. Previous to this software release, only 512 QoS ACLs in combination (IP, IPX, and MAC) were supported on 512 different interfaces.

NetFlow version 5 support

Additional Flash PC card support

Prior to software release 7.5(1), Supervisor Engine 1 and Supervisor Engine 2 supported the following Flash PC cards:

16-MB Flash PC card (device name is slot0:)

24-MB Flash PC card (device name is slot0:)

With software releases 7.5(1) and later, additional Flash PC card support is added as follows:

64-MB ATA Flash PC card—Only supported on Supervisor Engine 2. The device name is disk0: and the card requires ROMMON version 7.1(1) or later releases.

64-MB linear Flash PC card—Only supported on Supervisor Engine 1. The device name is slot0: and the card requires ROMMON software release 5.3(1) or later releases.

Recognizes 512 MB-DRAM

On switches with Catalyst software installed on the Supervisor Engine 2 and Cisco IOS software installed on the MSFC2, the supervisor engine will accept 512-MB DRAM, but works only up to 256 MB. This situation allows you to upgrade your DRAM to 512 MB in the event you change your operating system to Cisco IOS software on both the Supervisor Engine 2 and the MSFC2. In software releases prior to release 7.5(1), with 512-MB DRAM installed on a Supervisor Engine 2 running Catalyst software on the supervisor engine and Cisco IOS software on the MSFC, boot messages and the show version command only showed 256 MB. This problem is resolved in software release 7.5(1). (CSCdw84513)

In-band sc1 management interface support

A configurable inband sc1 IP management interface is added. If you configure two inband interfaces, sc0 and sc1, the switch is directly accessible from two different VLANs at the same time.

SNMP support for the sc1 interface

SNMP broadcast suppression enhancement

SNMPv1 and SNMPv2c enhancements

Setting the multiple SNMP community strings

Clearing the SNMP community strings

Specifying the access numbers for hosts

Clearing the IP addresses that are associated with the access numbers

Specifying, displaying, and clearing an interface alias

Supports the following new and enhanced MIBs:

RFC 2665 EtherLike-MIB enhancement

RFC 2863 IF-MIB enhancement

RFC 2737 ENTIT-MIB enhancement

CISCO-SWITCH-ENGINE-MIB

CISCO-SWITCH-ENGINE-MIB enhancement

CISCO-SWITCH-ENGINE-MIB enhancement 2

CISCO-CATOS-ACL-QOS-MIB enhancement

CISCO-FLASH-MIB enhancement

CISCO-IGMP-SNOOPING-MIB

CISCO-L2-TUNNEL-CONFIG-MIB

CISCO-PAE-MIB enhancement

CISCO-STP-EXTENSION-MIB enhancement

CISCO-VLAN-MEMBERSHIP-MIB enhancement

CISCO-VTP-MIB enhancement

Features for Supervisor Engine Software Release 7.4

These sections describe the features in software release 7.4, 27 September 2002:

Software Release 7.4 Hardware Features

Software Release 7.4 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.4 Hardware Features

Software release 7.4 provides initial support for these modules and chassis:

WS-C6503 chassis (3 slots)


Note The WS-C6503 chassis has 64 MAC addresses. The MAC address reduction feature is enabled by default on this chassis.


Software Release 7.4 Software Features

Software release 7.4 does not provide any new software features.

Features for Supervisor Engine Software Release 7.3

These sections describe the features in software release 7.3:

Software Release 7.3 Hardware Features

Software Release 7.3 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.3 Hardware Features

Software release 7.3 provides initial support for these modules and chassis:

Network Analysis Module, 512-MB RAM, fabric enabled (WS-SVC-NAM-1)

Network Analysis Module, 1-GB RAM, fabric enabled, accelerator daughter card (WS-SVC-NAM-2)

Software Release 7.3 Software Features

Software release 7.3 does not provide any new software features. Software release 7.3 does provide the following software enhancement:

You can now display or suppress the "Cisco Systems Console" Telnet login banner using the set banner telnet {enable | disable} command.

The show cdp neighbors command now displays IP phone capabilities.

LACP behavior for half-duplex links has changed, and LACP ports are no longer suspended if they become half duplex. Instead of suspending a port, LACP PDU transmission (if any) is suppressed. If the port is part of a channel, the port is detached from the channel but still functions as a nonchannel port.

You can now increase the port debounce timer value in increments of 100 up to 5000 milliseconds using the set port debounce mod num/port num time command.

Features for Supervisor Engine Software Release 7.2

These sections describe the features in software release 7.2:

Software Release 7.2 Hardware Features

Software Release 7.2 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.2 Hardware Features

Software release 7.2 provides initial support for these modules and chassis:

48-port 10/100BASE-TX RJ-45 with 128K per-port packet buffers (WS-X6148-RJ-45V provides inline power to IP telephones)

48-port 10/100BASE-TX RJ-21 with 128K per-port packet buffers (WS-X6148-RJ21V provides inline power to IP telephones)

1000BASE-TX (copper) GBIC (WS-G5483)

Coarse Wave Division Multiplexer (CWDM) GBICs

CWDM-GBIC-1470(=)

CWDM-GBIC-1490(=)

CWDM-GBIC-1510(=)

CWDM-GBIC-1530(=)

CWDM-GBIC-1550(=)

CWDM-GBIC-1570(=)

CWDM-GBIC-1590(=)

CWDM-GBIC-1610(=)

Cisco 7606 router (6 slots)


Note The Cisco 7606 chassis has 64 MAC addresses. The MAC address reduction feature is enabled by default on this chassis.


Software Release 7.2 Software Features

Software release 7.2 provides support for these software features:

Authentication login lockout enhancement

You can set the authentication login lockout (delay) time to a maximum of 43200 seconds (in previous releases, the maximum was 600 seconds).

Bridged NetFlow statistics

You can set bridged flow statistics reporting per VLAN. Bridged flows are exported through NetFlow Data Export (NDE) when you enable bridged flow statistics.

Broadcast suppression enhancement

When broadcast, multicast, or unicast suppression occurs, you can configure ports to either drop packets or go into the errdisable state.

QoS burst size/rate limit enhancement

Provides more flexibility for traffic flows and their rate limits.

Errdisable reactivation per port

Before supervisor engine software release 7.2(2), if a port went into errdisable state, it was reenabled automatically after a selected time interval. With software releases 7.2(2) and later, the timeout enhancement allows you to manually prevent a port from being enabled by setting the errdisable timeout for that port to disabled.

Trusted boundary (extended trust for CDP devices)

You can use this feature to prevent security problems if users disconnect their PCs from networked Cisco IP Phones and plug them directly into the switch port to take advantage of the QoS trust-cos switch port settings.

MLS IP-directed broadcasts

Before supervisor engine software release 7.2(2), IP-directed broadcast traffic was handled by enabling IP directed broadcasts using the ip directed-broadcast command on the MSFC which handled the traffic at the process level causing high CPU utilization.

With software releases 7.2(2) and later, you can configure the MSFC2 to handle the IP-directed broadcasts in hardware using the PFC2. This example shows how to enable IP-directed broadcasts:

Router(config-if)# mls ip directed-broadcast ?
exclude-router  exclude router from recipient list for directed broadcast
include-router  include router in recipient list for directed broadcast

The exclude-router option forwards the IP-directed broadcast packet in hardware to all hosts in the VLAN except the router.

The include-router option forwards the IP-directed broadcast packet in hardware to all hosts in the VLAN including the router. With this option, the router does not forward the IP-directed broadcast packet again.


Note Cisco IOS Release 12.1(11b)E is required on the MSFC2.


Jumbo frame support on the sc0 interface

Jumbo frames are passed through the sc0 interface as a nonconfigurable default; no CLI configuration is necessary.

Layer 2 protocol tunneling

Layer 2 protocol tunneling allows protocol data units (PDUs) (CDP, STP, and VTP) to be tunneled through a network.

Policy-Based Routing (PBR) default next-hop route

Before supervisor engine software release 7.2(2), when using the set ip default next-hop ipaddr MSFC2 command (as part of the route-map for PBR), the router packets getting forwarded were software switched by the MSFC2. With supervisor engine software releases 7.2(2) and later, packets that need to be forwarded as a result of the set ip default next-hop ipaddr command, are hardware switched by the PFC2.


Note Cisco IOS Release 12.1(11b)E is required on the MSFC2.


VLAN assignment with 802.1X

Before supervisor engine software release 7.2(2), once the 802.1X client was authenticated, it joined an NVRAM-configured VLAN. With software releases 7.2(2) and later, after authentication, an 802.1X client can receive its VLAN assignment from the RADIUS server.

The SNMP community string is synchronized to the Network Analysis Module (NAM)

The SNMP community string for the NAM is synchronized between the supervisor engine and the NAM allowing greater integration of network management functions.

Supports the following new and enhanced MIBs:

CISCO-AAA-CLIENT-MIB enhancement—authentication lockout

CISCO-CATOS-ACL-QOS-MIB enhancement—burst size/rate limit

CISCO-CDP-MIB enhancement—extended trust

CISCO-ENVMON-MIB enhancement with temperature monitoring

CISCO-L2-TUNNEL-CONFIG-MIB

CISCO-PAGP-MIB enhancement

CISCO-PROCESS-MIB enhancement

CISCO-STACK-MIB enhancement—broadcast suppression enhancement

CISCO-STACK-MIB enhancement—errdisable reactivation per port

CISCO-STP-EXTENSIONS-MIB enhancement—BPDU filter/guard per port

CISCO-SWITCH-ENGINE-MIB enhancement—unicast total flows

Features for Supervisor Engine Software Release 7.1

These sections describe the features in software release 7.1:

Software Release 7.1 Hardware Features

Software Release 7.1 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 7.1 Hardware Features

Software release 7.1 provides initial support for these modules and chassis:

24-port 100FX Ethernet multimode fabric-enabled module (WS-X6524-100FX-MM)

1-port 10GBASE-EX4 Metro 10-Gigabit Ethernet fabric-enabled module (WS-X6501-10GEX4)

1-port 10GBASE-E Serial 10-Gigabit Ethernet, fabric-enabled module (WS-X6502-10GE)

Optical Interface Module (OIM) (WS-G6488)

Cisco 7603 chassis (3 slots)


Note The Cisco 7603 chassis does not support the SFM.



Note The Cisco 7603 chassis has 64 MAC addresses. The MAC address reduction feature is enabled by default on this chassis.


Software Release 7.1 Software Features

Software release 7.1 provides support for these software features:

IEEE 802.1s—Multiple Spanning Tree (MST) over VLAN trunks

The MST feature is an IEEE standard. 802.1s for MST is an amendment to 802.1Q. MST extends the 802.1w Rapid Spanning Tree (RST) algorithm to multiple spanning trees. This extension provides rapid convergence and load balancing in a VLAN environment. The MST protocol is currently in development and the MST feature for this release is based on a draft version of the IEEE standard. The protocol as implemented in this release is backward compatible with 802.1D STP, 802.1w (the Rapid Spanning Tree Protocol [RSTP]), and the Cisco PVST+ architecture.

IEEE 802.1w—Rapid reconfiguration of spanning tree

Provides rapid reconvergence of the spanning tree after the failure of any link in a bridged environment.

IEEE 802.3ad—Link Aggregation Control Protocol (LACP)

Allows Cisco switches to manage Ethernet channeling with devices that conform to the 802.3ad (LACP) specification. Prior to software release 7.1(1), Port Aggregation Control Protocol (PAgP) was available. PAgP is a Cisco-proprietary protocol that can be run only on Cisco switches and those switches released by licensed vendors.

Improved ACL merging algorithm

Significantly reduces the number of ACEs after a merge. In addition, with the new algorithm, you can do the following:

You do not need to limit the number of actions when configuring an ACL.

The resultant ACEs are order dependent; with the old algorithm, the resultant ACEs were order independent.

Per-port BPDU filtering enhancement

Allows you to avoid transmitting BPDUs on a PortFast-enabled port connected to an end system. This feature is on a per-switch basis; after BPDU filtering is enabled, it applies to all PortFast-enabled ports. The PortFast BPDU filter allows access ports to move directly to the forwarding state as soon as end hosts are connected.

IGMP snooping querier

Enables IGMP snooping within a VLAN where Protocol Independent Multicast (PIM) and IGMP are not configured because the multicast traffic does not need to be routed.

Option for no VTP support

In the VTP off mode, switches behave the same as in VTP transparent mode with the exception that VTP advertisements are not forwarded.

PortFast support for trunks

Allows PortFast to be configured for trunk and channel ports. On linkup, the port immediately transitions into spanning tree forwarding mode, bypassing the listening and learning states, and bypassing the DTP, PAgP, and IEEE 802.3ad protocols. This feature would normally be used for direct connections to routers or servers and is not intended for connection to other switches because spanning tree loops could occur.

Show port MAC address

Displays individual port MAC addresses when you enter the mac-address keyword to the show port command. Before this feature, the only way you could find the port's MAC address was to enter the show module command to display the module's MAC address range and then calculate each port's MAC address.

Port security timer enhancement

Increases the valid range of the "Port Security Age Time" and "Shutdown Timeout" to 1 through 1440 minutes (previously, the range was 10 through 1440 minutes).

System warnings on port counters

Allows you to monitor and troubleshoot the Catalyst 6500 series switches by polling selected error counters on all ports and logging the system error messages.

Improved single router mode (SRM) redundancy support for multicast traffic

Provides improved convergence times and less disruption of multicast traffic during MSFC2 switchovers when you enable SRM redundancy. The MSFC2 is protected from being overloaded with multicast traffic during the switchover. The switch caches flows from the MSFC2 that went down and uses the cached flows to forward traffic until the newly activated MSFC2 learns the routes. Only a few flows at a time are provided to the MSFC2 to prevent it from being overwhelmed.


Note Improved SRM support for multicast traffic is supported on Supervisor Engine 1 with PFC and MSFC2 and Supervisor Engine 2 with PFC2 and MSFC2. It is not supported on Supervisor Engine 1 with MSFC.



Note In software releases prior to release 7.1(1), when using Supervisor Engine 1 with the MSFC or MSFC2 for SRM redundancy, be aware that failover to the second MSFC is not stateful for multicast MLS. When the primary MSFC fails, all multicast MLS entries are removed and are then recreated and reinstalled in the hardware by the newly active MSFC.



Note SRM support for the MSFC2 was introduced in Cisco IOS Release 12.1(8a)E2.


IGMP snooping with private VLANs

Provides support for IGMP snooping with private VLANs.

Multicast support for private VLANs

Provides support for Layer 2 and Layer 3 hardware switching for multicast traffic in private VLANs when you use a Supervisor Engine 2 only (PFC2/MSFC2). Layer 2 isolation for hosts is provided from traffic sourced by other receivers (hosts) in the same private VLAN, only if the private VLAN is an isolated private VLAN. For community private VLANs, there is no isolation for hosts from traffic sourced within the same community private VLAN. For community private VLANs, Layer 2 isolation for hosts is provided from traffic sourced by other hosts in a different private VLAN.


Note Multicast support for private VLANs requires Cisco IOS Release 12.1(11b)E or later on the MSFC2.


Supports the following new and enhanced MIBs:

cseL3Vlan MIB

CISCO-CATOS-ACL-QOS-MIB enhancement

CISCO-ENTITY-FRU-CONTROL-MIB enhancement

CISCO-ENVMON-MIB

CISCO-LAG-MIB

CISCO-MEMORY-POOL-MIB enhancement

CISCO-PAE-MIB

CISCO-STP-EXTENSIONS-MIB

CISCO-SWITCH-ENGINE-MIB enhancement

IEEE8021-PAE-MIB

IEEE8023-LAG-MIB

SMON-MIB VLAN Statistics support

Features for Supervisor Engine Software Release 6.3

These sections describe the features in software release 6.3:

Software Release 6.3 Hardware Features

Software Release 6.3 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 6.3 Hardware Features

There is no new hardware being introduced in software release 6.3.


Note Software releases 6.1(1) and later do not support the same Flash PC card format as earlier software releases. To use a Flash PC card with software releases 6.1(1) and later, format the card with software releases 6.1(1) and later.


Software Release 6.3 Software Features

Software release 6.3 provides support for these software features:

Single router mode (SRM) redundancy

SRM redundancy is an alternative to having both MSFC2s in a chassis active at the same time.

Note that SRM redundancy requires Cisco IOS Release 12.1(8a)E2, and SRM redundancy configuration information will be available when Release 12.1(8a)E2 is posted to Cisco.com. At that time, refer to the "Configuring Redundancy" chapter of the online version of the Catalyst 6500 Series Switch Software Configuration Guide, Release 6.3, for detailed configuration procedures.

Private VLANs on the sc0 interface

The sc0 management interface can be assigned to a private VLAN.

EtherChannel enhancements

An EtherChannel is preserved even if it contains only one port. In software releases prior to 6.3(1), if you had a 2-port channel and one link was removed, the remaining link was removed and added back to spanning tree. This situation caused a loss of connection on the channel until the link was forwarding again.

Text file configuration mode

When you use text file configuration mode, the system stores its configuration as a text file in nonvolatile storage, either in NVRAM or Flash memory. This text file consists of commands entered by you to configure various features.

Support for NetFlow version 8

CDPv2 enhancements

Addition of TLVs such as sysName, sysObjectID, management address, and physical location.

Support of a new device ID format called the mac-address format in addition to the "old-style" format (as in the device hardware serial number).

Display changes corresponding to some parameters such as device ID for the show cdp command.

Ability to increase QoS ACLs

The maximum number of QoS ACLs that can be stored in NVRAM has been increased from 250 to 500. The maximum number of security ACLs (VACLs) remains the same at 250.

Ethernet link debounce timer feature

The debounce time is the time a module's firmware waits before notifying the supervisor engine of a link change at the physical layer when a link goes down. If the link is up and then goes down and remains down for a time interval longer than the debounce time, then the supervisor engine is notified. As soon as the link is up again, the timer is reset. If the link is down and then goes up, the supervisor engine is notified immediately. The debounce timer value is hard-coded in the supervisor engine depending upon the type of module being used. The link debounce feature can be enabled on a per-port basis on Ethernet modules.

Display SNMPv3 counters using the CLI

Use the CLI to display SNMPv3 counters for various MIBs.

Autostate enhancements

A VLAN interface will not transition to the up state until at least one port in the VLAN is forwarding traffic.

SNMPv3 enhancements

The SNMPv3 implementation in software releases prior to 6.3(1) supported RFC 2271 through
RFC 2275. RFC 2271 through RFC 2275 were replaced with RFC 2571 through RFC 2576. The SNMPv3 enhancement in 6.3(1) implements RFC 2571 through RFC 2576.

Supports the following MIBs:

CISCO-AAA-CLIENT-MIB

CISCO-CATOS-ACL-QOS-MIB

CISCO-CAT6K-CROSSBAR-MIB

CISCO-STP-EXTENSION-MIB

CISCO-SWITCH-ENGINE-MIB

CISCO-SYSTEM-MIB enhancement

Features for Supervisor Engine Software Release 6.2

These sections describe the features in software release 6.2:

Software Release 6.2 Hardware Features

Software Release 6.2 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 6.2 Hardware Features

Software release 6.2 provides initial support for these modules:

WS-C6513—Catalyst 13-slot chassis


Note The WS-C6513 chassis is supported with Supervisor Engine 2 only.



Note The WS-C6513 chassis has 64 MAC addresses. The MAC address reduction feature is enabled by default on this chassis.


WS-X6500-SFM2—Switch Fabric Module version 2

WS-X6516-GE-TX—16-port 10/100/1000BASE-TX fabric-enabled Ethernet module

WS-X6548-RJ-45—48-port 10/100BASE-TX fabric-enabled Ethernet module

WS-X6548-RJ-21—48-port 10/100BASE-TX fabric-enabled Ethernet module

WS-X6348-RJ21V—48-port 10/100BASE-TX Ethernet module with inline power


Note Software releases 6.1(1) and later do not support the same Flash PC card format as earlier software releases. To use a Flash PC card with software releases 6.1(1) and later, format the card with software releases 6.1(1) and later.


Software Release 6.2 Software Features

Software release 6.2 provides support for these software features:

QoS minimum threshold for WRED

Allows you to configure the minimum threshold for WRED.

QoS queuing for port type 1p1q0t/1p3q1t

Allows queuing on ports that support 1p1q0t/1p3q1t

Non-RPF MFD (Multicast Fast Drop)

Non-RPF multicast fast drop (MFD) rate limits packets that fail the RPF check (non-RPF packets) and drops the majority of the non-RPF packets in hardware.

Multicast suppression for Gigabit Ethernet modules

Suppresses multicast traffic on Gigabit Ethernet ports to prevent the ports from being disrupted by a broadcast storm.

QoS data export

The QoS statistics data export feature generates per-port and per-aggregate policer utilization information and forwards this information in UDP packets to traffic monitoring, planning, or accounting applications.

VACL logging of access denied

Allows you to configure a log option on any VACL, so that packets or flows that are access denied by the VACL will be redirected to supervisor engine CPU to generate a report.

Bidirectional VACLs for private VLANs

Lets you create a policy that denies access in or out of a network.

Per-port utilization of QoS statistics

Provides the input and output packet rate and input and output byte rate on a per-port basis.

TCAM test on bootup

The system performs a TCAM test during bootup.

Dynamic VLAN support with auxiliary VLANs.

Prior to software release 6.2(2), dynamic ports could only belong to one VLAN. You could not enable the dynamic port VLAN feature on ports that carried a native VLAN and an auxiliary VLAN. With software releases 6.2(2) and later, the dynamic ports can belong to two VLANs. The switch port configured for connecting an IP phone can have separate VLANs configured for carrying the following traffic:

Voice traffic to and from the IP phone (auxiliary VLAN)

Data traffic to and from the PC connected to the switch through the access port of the IP phone (native VLAN)

BPDU packet filtering

BPDU packet filtering turns off BPDU transmission on PortFast-enabled ports and nontrunking ports.

IEEE 802.1X

IEEE 802.1X is a client-server-based access control and authentication protocol that restricts unauthorized devices from connecting to a LAN through publicly accessible ports.

BPDU skew detection

BPDU skew detection allows you to troubleshoot slow network convergence caused by skewing.

Loop guard

The loop guard feature checks that a root port or an alternate root port is receiving BPDUs. If a port is not receiving BPDUs, the loop guard feature puts the port into an inconsistent state, isolating the failure and letting spanning tree converge to a stable topology until the port starts receiving BPDUs again.

Local command accounting

Local command accounting records the last 100 commands that the user entered into the system.

MSFC Autostate Disable

Allows you to disable Autostate. Autostate shuts down (or brings up) Layer 3 interfaces/subinterfaces on the MSFC and the Multilayer Switch Module (MSM) when the port configuration changes occur on the switch.

Redundancy enhancement

Enhanced redundancy provides more efficient system fault detection and recovery mechanisms.

Core dump for debugging

A core dump produces a comprehensive report of images when your system fails due to a software error. The core image is produced in Cisco core file format and is stored in the file system. By examining the core dump file, TAC can analyze the error condition of a terminated process.

Supports the following MIBs:

HC-RMON MIB enhancement

Cisco STP-EXTENSIONS-MIB enhancements

Cisco PRIVATE-VLAN-MIB

Cisco ACL-QoS-MIB

Cisco QoS-Policy-MIB

Features for Supervisor Engine Software Release 6.1

These sections describe the features in software release 6.1:

Software Release 6.1 Hardware Features

Software Release 6.1 Software Features


Note Maximum switching performance is achieved when all switch components are fabric enabled. The presence of nonfabric-enabled switching modules might impact overall switching performance.


Software Release 6.1 Hardware Features

Software release 6.1(2) provides initial support for these modules:

2- and 4-port OC-12 POS Optical Services Modules

8- and 16- port OC-3 POS Optical Services Modules

Software release 6.1 provides initial support for these modules:

Supervisor Engine 2—Policy Feature Card 2 (PFC2; shipped only on Supervisor Engine 2)
WS-X6K-S2-MSFC2 or WS-X6K-S2-PFC2
dual 1000BASE-X GBIC uplinks, fabric-enabled, Cisco Express Forwarding (CEF), enhanced QoS features, PFC2, and MSFC2

The Cisco IOS Unicast RPF feature is supported in hardware on the PFC2. For ACL-based RPF checks, traffic that matches the RPF ACL is forwarded to the MSFC2.

Supervisor Engine 2 and PFC2 do not support ASLB.

Switch Fabric Module
WS-C6500-SFM
Supports fabric-enabled modules.


Note The WS-C6500-SFM is not supported in the WS-C6513 chassis.


Fabric-enabled 16-port Gigabit Ethernet GBIC switching module
WS-X6516-GBIC

Intrusion Detection System Module
WS-X6381-IDS


Note Software releases 6.1(1) and later do not support the same Flash PC card format as earlier software releases. To use a Flash PC card with software releases 6.1(1) and later, format the card with software releases 6.1(1) and later.


Software Release 6.1 Software Features

Software release 6.1 provides support for these software features:

CEF for PFC2—Supervisor Engine 2 and PFC2 provide IP and IPX unicast and IP multicast Layer 3 switching with Cisco Express Forwarding implemented on the PFC2.

Jumbo frame feature enhancement—You can configure the jumbo frame feature on any Ethernet port and on EtherChannels and trunk ports.


Note With Cisco IOS Release 12.1(2)E or later, you can configure support for jumbo frames on MSFC2 VLAN interfaces.


EtherChannel enhancements with PFC2—On a Supervisor Engine 2 with PFC2, you can configure the EtherChannel feature to distribute IP traffic based on Layer 4 port numbers in addition to Layer 3 addresses. With both Supervisor Engine 1 and 2, you can enter the show channel traffic command to display EtherChannel traffic.

Globally disable EtherChannel—Enter the set port channel all mode off command to disable all EtherChannels on the switch.

Globally disable trunking—Enter the set trunk all off command to disable all trunks on the switch.

VMPS server—The Catalyst 6500 series switch can function as a VMPS server.

4096 VLANs—Catalyst 6500 series switches support 4096 VLANs in accordance with the IEEE 802.1Q standard.

Reduced MAC address usage—The MAC address reduction feature is used to enable extended-range VLAN identification. When MAC address reduction is enabled, it disables the pool of MAC addresses used for the VLAN spanning tree, leaving a single MAC address that identifies the switch.


Note The MAC address reduction feature is enabled by default on Cisco switches that have 64 MAC addresses (Cisco 7606, CISCO7603, WS-C6503, and WS-C6513).


Multi-Instance Spanning Tree Protocol (MISTP)—MISTP allows you to group multiple VLANs under a single instance of spanning tree. MISTP combines the Layer 2 load-balancing benefits of PVST+ with the lower CPU load of IEEE 802.1Q.

Spanning Tree Protocol root guard—The root guard feature forces a port to become a designated port so that no switch on the other end of the link can become a root switch.

IEEE 802.1Q tunneling—802.1Q tunneling allows multiple VLANs in other VTP domains to be carried by a single VLAN on the Catalyst 6500 series switch without losing their unique VLAN IDs.

Enhanced ACL configuration with private VLANs—ACLs can be applied as follows:

VACLs can be mapped to secondary VLANs or primary VLANs.

Cisco IOS ACLs that are mapped to a primary VLAN will get mapped to the associated secondary VLANs.

Cisco IOS ACLs cannot be mapped to secondary VLANs.

Dynamic ACEs cannot be mapped to a private VLAN.

QoS ACLs can be mapped to secondary VLANs or primary VLANs.

Secure Shell (SSH) encryption—The SSH feature provides security for Telnet sessions to the switch. SSH encryption supports 3DES encryption and can be used in conjunction with RADIUS and TACACS+ authentication (requires a "k9" image).

MAC address filtering—You can filter traffic based on a host's MAC address so that packets that are tagged with that specific source MAC address are discarded. When you specify a MAC address filter, incoming traffic from that host MAC address will be dropped and packets addressed to that host will not be forwarded.

Ability to limit console and Telnet login attempts—You can specify how many console and Telnet login attempts to allow and the duration of the lockout after the switch has denied a login attempt.

Cisco IOS-like ping—The -s argument in the Cisco IOS-like ping command allows you to configure the number of packets to ping, the packet size, and the wait time before timing out a response. The wait time can be set as low as 0, which would produce a continuous ping.

Layer 2 Traceroute—The Layer 2 Traceroute utility allows you to identify the physical path that a packet takes when going from a source to a destination. The Layer 2 Traceroute utility determines the path by looking at the forwarding engine tables of the switches in the path.

write tech-support command—The write tech-support command allows you to generate a report with status information about your switch. You can upload this report to a TFTP server and send it to Cisco TAC.

Search on More prompt—At the More prompt during a show command, enter a slash character ("/") followed by a text string to search for text.

Clearing counters on a per-port basis—The clear counters command clears MAC and port counters.

Enhanced support for scripting—The switch assumes a positive ("yes") answer to all the confirmation prompts when configured from a configuration file.

System warnings and error counters—Selected debug port counters are polled at a fixed interval, and warnings are generated when the count differs from the previous poll.

SNMP group access context—When defining the access rights of an SNMP group, you can specify a context string and the way to match the context string.

Features for Supervisor Engine Software Releases 5.1 Through 5.5

For a complete list of hardware and software features for software releases 5.1 through 5.5, refer to the Release Notes for Catalyst 6500 Series Switch Software Release 6.x at
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/78_11235.htm

Usage Guidelines and Restrictions

These sections provide usage guidelines and restrictions for the Catalyst 6500 series switches:

System and Supervisor Engine

Modules and Switch Ports

EtherChannel

Quality of Service

Automatic Quality of Service with Cisco IP Phones

Multicast

Spanning Tree

Access Control

High Availability

Multilayer Switching

MIBs

VLANs, VTP, and VLAN Trunks

Authentication, Authorization, and Accounting

SPAN and RSPAN

TDR

Auto-MDI/MDIX

Binary and Text File Configuration Modes

CiscoView

System and Supervisor Engine

This section contains usage guidelines, restrictions, and troubleshooting information that apply to the supervisor engine and to the switch at the system level:

When the switch reaches the end of the summertime interval, the switch comes out of summertime only after a few seconds (0-25) after the summertime ends. You see this problem only when NTP is not configured on the switch.

Workaround: Enter any command on the switch after reaching the end of summertime to come of out of summertime immediately. (CSCsh77991)

Moving a Supervisor Engine 2 and an MSFC2 between a Catalyst 6509 switch and a Catalyst 6503 switch may corrupt the MSFC2 NVRAM.

Workaround: Save the configuration to Flash memory, and restore the configuration after the move. (CSCdy83320)

The WS-C6K-9SLOT-FAN2 fan tray is supported in all chassis (except for the 3-slot chassis) and all software releases. The minimum power supply requirement is 2500W. It is important that you determine the power requirements for your hardware configuration to ensure that your switch has adequate power for all modules. To determine power requirements, refer to the CCO power calculator at this URL: http://www.cisco.com/go/powercalculator.

The set option command set was inadvertently removed from software releases 7.6(7) and 8.3(1). The set option command set will be available again in software releases 7.6(8) and 8.3(3).

The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules do not support the following:

More than 1 Gbps of traffic per EtherChannel

ISL trunking

VLAN translation

Jumbo frames

802.1Q tunneling

Traffic storm control

In software release 7.6(x) and earlier releases: ingress SPAN sources when the switch is operating in truncated and compact modes (also applies to the WS-X6516A-GBIC module)

MAC addresses—Theoretical and recommended limits for PFC/PFC2: 128K theoretical maximum, 32K recommended.

A Supervisor Engine 2 might show 100 percent traffic utilization in the show system and show traffic command displays. This problem is a cosmetic issue. To correct the problem, you need to reprogram the Supervisor Engine 2 EPLD. To reprogram the EPLD, download the epld-sup2-trafficmeter-swupdate.hZ image and follow the instructions documented in the README.epld_update file. (CSCdx54751)

The standby use-bia option should not be used in an HSRP configuration. MLS entries are not created when you use the standby use-bia option. When you configure the standby use-bia option, if an HSRP active interface goes up and down, there will be no router CAM address for the standby VLAN interface. Without the router CAM entry, no shortcuts are created. This problem is independent of any MSFC Cisco IOS release. (CSCdz17169)

When upgrading an image (image synchronization) from the active supervisor engine to the standby supervisor engine, the standby supervisor engine and possibly other modules might report "Minor hardware problem in Module X" to the console display.

Workaround: Either reset the individual modules reporting this error, or reset the switch. (CSCdv51172)

When the diagnostic mode is set to complete (set test diaglevel complete command), the system might display "local bus stall error" messages when modules come online. The messages are erroneous and can be ignored. This problem does not occur when the system is configured to run minimal (default) diagnostics. (CSCdw09555)

ATA Flash PC cards are not supported with supervisor engine software releases 7.1(x). If the supervisor engine fails to read/write to the Flash PC card, make sure you are not using an ATA Flash PC card. ATA Flash PC cards are supported only on switches running Cisco IOS Release 12.1(8a)EX on both the supervisor engine and the MSFC.

In a redundant supervisor engine configuration, both supervisor engines must be running the same boot ROM version. For information on upgrading the boot ROM version, refer to the Catalyst 6500 Series Switch Supervisor Engine 2 Boot ROM and Bootflash Device Upgrade Installation Note at

/en/US/docs/switches/lan/catalyst6500/hardware/Config_Notes/78_12667.html#xtocid41960

For Supervisor Engine 1, the minimum boot ROM required for software release 5.4(1) and later releases is 5.3(1). For Supervisor Engine 2, the minimum boot ROM required for software
release 6.2(2) and later releases is 6.1(3).

IPX Layer-3 switched traffic with a SAP encapsulation type (Novell Ethernet 802.2) to non-SAP encapsulation type (Novell Ethertype's: Ethernet 802.3, Ethernet II, and Ethernet SNAP) and vice versa, follows the software forwarding path (via MSFC/MSFC2) on the PFC and PFC2 forwarding engines. This might cause high CPU utilization on the MSFC/MSFC2.

Workaround: Avoid SAP to non-SAP and vice versa encapsulation changes when doing IPX Layer 3 switching.

When a Supervisor Engine 2 is running in truncated mode with QoS enabled and policers configured, the traffic subject to policing that is received on a fabric-enabled switching module destined to a non-fabric-enabled switching module is overpoliced. The traffic is policed to half the value configured in the policer. (CSCds02280)

If you perform a manual switchover or reset a switch while high-availability events are waiting in the queue of the standby supervisor engine, when the events will be completely processed is not known, and all configurations might not synchronize to the standby supervisor engine properly. (High-availability events are the result of changing the configuration through the CLI.) We suggest that after changing the configuration, you allow additional time before resetting the switch to allow the supervisor engine to process all synchronized events. (CSCdp59261)

With a PFC2, traffic that matches an egress reflexive ACL is handled by the MSFC2 as a partially switched flow. (CSCds09775)

Changing the console port baud rate from 19,200 to 38,400 incorrectly sets the console port to 9600 baud. After a reset, the console port baud rate is 38,400. Changing the rate to 38,400 from any other setting works correctly. (CSCdk86876)

In extremely rare conditions, if you enter the show module command, the status of the MSFC on the standby supervisor engine might be displayed as other. This has no impact on MSFC behavior and you should ignore this display. (CSCdp87997)

With PFC or PFC2 and a standard network topology as shown below where you have multicast senders in the core and multicast receivers on the access layer:

   

Layer 3 distribution No. 1

   
 

/

 

\

 

Layer 2 access

     

Core

 

\

 

/

 
   

Layer 3 distribution No. 2

   

If both distribution switches have two supervisor engines and MSFCs and are configured to provide multicast functionality for the same access VLANs, then you will see high CPU utilization on the non-DR routers due to non-RPF traffic. (CSCdr74908)

If you configure aging for UDP, it could slow down the removal of TCP entries belonging to a terminated connection. You might see entries no longer used in the NetFlow table being aged with the regular aging time of all the NetFlow entries instead of the very fast LDA aging.

Workaround: Enable the fast UDP aging only when it is really needed (for example, when load balancing UDP). (CSCdp79475)

In a system with a Supervisor Engine 2 and WS-X6101 (ATM LANE) modules, ACLs that you configured from the CLI or COPS on the ATM LANE module ingress ports do not work. (CSCds09425)

With Supervisor Engine 1 and PFC, online diagnostic failures are experienced on modules during bootup, online insertion, or module reset if you reconfigure the QoS default-action MAC ACL to include an aggregate policer with an action of drop. The system default does not include an aggregate policer in the default-action MAC ACL. The likelihood of the diagnostics failures increases as the amount of traffic being policed (dropped) by that aggregate policer increases. As the rate value specified in the policer decreases, the amount of traffic matching all ACLs specifying that aggregate policer increases. (CSCdp15471)


Note For switches with Supervisor Engine 2 and PFC2, CSCdp15471 is resolved in software release 6.1(1a).


In a 13-slot chassis with redundant Supervisor Engine 2s, if the diagnostic mode is set to bypass, the bringup time of the system may be longer.

Workaround: Set the diagnostic mode to minimal or complete. (CSCdw09563)

In a 13-slot chassis with a large number of installed modules (especially 48-port 10/100 modules), there might not be enough NVRAM to save the configuration. In this event, use the text file configuration mode.

Modules and Switch Ports

This section contains usage guidelines, restrictions, and troubleshooting information that apply to modules and switch ports:

It is possible to power down a Switch Fabric Module from the CLI before it comes online but we do not support this action. Powering down a Switch Fabric Module while it is coming online can cause conflicting switching mode change operations to occur simultaneously which can result in delays in restoring the data path and unpredictable switch behavior. This Switch Fabric Module behavior is not going to be addressed by any hardware or software modifications. Rather, we are advising you to wait to power down a Switch Fabric Module until it comes online.

On a port that has port security enabled, a nonzero age time, a manually configured MAC address, and dynamically learned MAC addresses, when the age time expires, you will lose all the MAC addresses that you manually configured. (CSCdy30515)

The broadcast suppression counter undercounts packets that have a size evenly divisible by 16:

A 64-byte packet should be counted as 4 but is counted as 3

65- to 79-byte packets are correctly counted as 4

An 80-byte packet should be counted as 5 but is counted as 4

81- to 95-byte packets are correctly counted as 5

A 96-byte packet should be counted as 6 but is counted as 5

(CSCdr56784)

If a link partner has auto-mdix enabled, this will interfere with the TDR cable diagnostics test and the test results will be misleading. Auto-mdix should only be enabled on one end of the link. (CSCea73643)

The 8-port T1 PSTN interface module (WS-X6608-T1) voice ports will not retain their configuration across switch reboots if the switch is in text config mode.

Workaround: Manually configure the T1 voice module after each switch reset. This problem only applies if the switch is in text config mode. (CSCdv04864)

When the WS-X6548-RJ-45 is operating at 10Mb mode, pre-1994 NICs on ports 7, 15, 23, 31 and 39 may have connectivity problems. If these ports are having connectivity problems, enable auto-polarity detection in the NIC driver (where this is available) or use any of the other module ports. For additional information, refer to CSCdx15951.

With a Switch Fabric Module installed and the switch in flow-through mode, resetting a fabric-enabled module during periods of high traffic might cause other modules to reset. This situation can cause temporary traffic loss until the reset module comes back online. This problem is only seen when the diagnostics are set to minimal or complete (set test diaglevel command).

Workaround: Power cycle the module (set module power up/down mod_num). (CSCdw04861)

When you connect a Cisco IP Phone 7960 to a port on the 10/100 Ethernet switching module that supplies inline power, the phone might lose power after switching from wall power back to inline power. The link remains up but the phone is down. This problem only occurs at 10 Mbps.

Workaround: Disconnect and then reconnect the cable between the switch port and the phone. (CSCdr37056)

A module might fail to come online after a software upgrade.

Workaround: Reset the module to bring it online. (CSCdu77125)

When a module is reset due to a firmware download, the module may take 30 to 50 seconds (depending on the type of module) to come online and another 2 to 30 seconds (depending upon whether PortFast is configured or not) for spanning tree related events.

Later model 10/100/1000 switching module ports (such as WS-X6148-GE-TX, WS-X6548-GE-TX, and WS-X6516-GE-TX) that are set to half-duplex may count runts along with collisions. This is a hardware issue and is not related to any software versions. (CSCec79736)

The Distributed Forwarding Card (WS-F6K-DFC) and 16-port Gigabit Ethernet switching module (WS-X6816-GBIC) are not supported in systems running Catalyst software on the supervisor engine and Cisco IOS software only on the MSFC. These items are supported on systems running
Cisco IOS Release 12.1(8a)E or later on both the Supervisor Engine 2 and the MSFC2. For more information, refer to the Release Notes for 12.1(8a)E on Cisco.com:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/12_1e/ol_2310.htm

You cannot reset individual ports on WS-X6608-T1 or -E1 modules. To reset a port, reset the module. (CSCds19417)

When you hot insert a module into a Catalyst 6000 or 6500 series chassis, be sure to use the ejector levers on the front of the module to seat the backplane pins properly. Inserting a module without using the ejector levers might cause the supervisor engine to display incorrect messages about the module.

If you see minor hardware failures or sync errors on bootup, reconfirm that the supervisor engine and all the switching modules are fully seated, the ejector levers are fully depressed, and the thumbscrews are fully tightened.

There is a cabling issue with the 48-port 10/100BASE-TX switching module (WS-X6248-TEL). The WS-X6248-TEL module RJ-21 connectors do not support Category 3 RJ-21 telco connectors and cabling. Using Category 3 connectors and cabling causes carrier sense errors. The connectors are keyed for Category 5 telco connectors and cables. You must use Category 5 RJ-21 telco connectors and cables.

24-port 100FX switching modules (WS-X6224-100FX-MT) with a hardware version of 1.1 or lower only support IEEE 802.1Q VLAN trunking; they do not support ISL trunking. Do not configure ISL trunks on 24-port 100FX switching modules (WS-X6224-100FX-MT) with a hardware version of 1.1 or lower. The restriction against ISL VLAN trunking is the only known problem with hardware version 1.1 or lower of these modules. If you do not require ISL VLAN trunking, these modules are fully functional. The ISL VLAN trunking problem has been corrected in hardware version 1.2 or later of these modules. If you wish to return a WS-X6224-100FX-MT module with a hardware version of 1.1 or lower, contact Cisco Systems.

You can identify WS-X6224-100FX-MT hardware versions using one of the following two methods:

Command-line interface (CLI) method—Use the show version command to identify the hardware version of the WS-X6224-100FX-MT module as follows:

Console> show version
< ... output truncated ... >
Mod Port Model               Serial #    Versions
--- ---- ------------------- ----------- --------------------------------------
< ... output truncated ... >
5   24   WS-X6224-100FX-MT   SAD02470006 Hw : 1.1
< ... output truncated ... >
Console>

The example shows a WS-X6224-100FX-MT module with a hardware version of 1.1; this version does not support ISL VLAN trunking.

Physical inspection method—Look for the part number that is printed on a label on the outer edge of the component side of the module. Versions 73-3245-04 or lower do not support ISL trunking.

When multiple instances are configured over a LANE trunk and when the root for one of the instances is moved, the other instances stop receiving BPDUs. The fix for this problem will be available in a Cisco IOS Release for the ATM LANE module later than Release 12.1(2)E1. (CSCdr88794)

The show module command might show different versions for different modules in the chassis when upgraded with versioning enabled. (CSCdr55665)

The following debounce timer command options have been added to increase the jitter tolerance on 10/100 UTP ports to make them interoperable with out-of-spec NICs:
set option debounce enable—Sets debounce to 3.1 seconds on 10/100 cards.
set option debounce disable—Sets debounce to 300 ms. The default is 300 ms debounce.
(CSCdp56343)

If a 16-port Gigabit Ethernet fabric-enabled GBIC switching module (WS-X6516-GBIC) is fully populated with 1000BASE-TX (copper) GBICs, it might be difficult to access the insertion/removal bracket on the module.

Workaround: Remove at least two of the 1000BASE-TX GBICs before removing the module. (CSCdw25775)

If a 16-port Gigabit Ethernet fabric-enabled GBIC switching module (WS-X6516-GBIC) is fully populated with 1000BASE-TX (copper) GBICs, it might be difficult to remove the module in the slot above the WS-X6516-GBIC module.

Workaround: Remove at least two of the 1000BASE-TX GBICs before removing the module above the WS-X6516-GBIC module. (CSCdx19538)

EtherChannel

This section contains usage guidelines, restrictions, and troubleshooting information that apply to EtherChannel:

When you enable UplinkFast, the EtherChannel port path cost (set with the set channel cost command) for a 4-port 10/100 EtherChannel is less than the port path cost of a parallel Gigabit Ethernet link. This situation causes the slower 4-port EtherChannel to forward and the Gigabit Ethernet link to block. (CSCds22895)

The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules have a limitation with EtherChannel. EtherChannel is supported on these modules for all configurations (10, 100, and 1000 Mbps speeds) but be aware of the following cases of oversubscription when you are configuring these modules:


Note With software release 8.2(1), due to firmware enhancements, the following oversubscription problems are no longer an issue with the WS-X6548-GE-TX and WS-X6548V-GE-TX modules.


On these modules there is a single 1-Gigabit Ethernet uplink from the port ASIC that supports eight ports. For EtherChannel, the data from all links in a bundle goes to the port ASIC, even though the data is destined for another link. This data consumes bandwidth in the 1-Gigabit Ethernet link. For these modules, the sum total of all data on an EtherChannel cannot exceed 1 Gigabit.

You could also run into the oversubscription problem if you have four WS-X6148-GE-TX or WS-X6148V-GE-TX modules running at 100 Mbps with 48 EtherChannels, and each channel having 4 ports (1 port per module).

If you use the Switch Fabric Module with the WS-X6548-GE-TX or WS-X6548V-GE-TX modules, that configuration would avoid the oversubscription problem. The Switch Fabric Module interface filters and distributes the packets to the correct module per the EtherChannel bundle hash. However, you must have one port per module in the bundle. Once you have more than one port of a WS-X6548-GE-TX or WS-X6548V-GE-TX module in an EtherChannel bundle it will start oversubscribing.


Note Using channeling for Layer 1 redundancy is a valid configuration option with these modules.


Catalyst switches running supervisor engine software releases 6.2(x) and later cannot form a channel with HP-server NICs. TLV checking, which was added for PAgP packets in software release 6.2(1), uncovered a problem with HP-UX systems where the packet length was set incorrectly. HP has an updated driver available that can solve the problem; contact HP Technical Support for details. (CSCdu84575)

Quality of Service

This section contains usage guidelines, restrictions, and troubleshooting information that apply to QoS:

The ToS byte remains unchanged in bridged multicast packets when you enable Multicast Multilayer Switching (MMLS). The system does not support multiple, different rewrites for a single packet. A Layer 3 rewrite is generated for multicast; there is no rewrite for the Layer 2 forwarding.

For example, you have a multicast source in VLAN 13, a receiver in the same VLAN, and a QoS IP ACL configured and mapped to the source's ingress port that matches the traffic flow and specifies DSCP 31. When you disable the MMLS feature, the IP packets captured on the receiver's port contain a ToS byte of x7C (the expected result). When you enable the MMLS feature and establish a Layer 3 flow, the captured packet's ToS byte is unchanged from the value sent by the source. A ToS rewrite occurs on the replicated packets in the outgoing VLANs (other than VLAN 13). No ToS rewrite occurs for the packets that are bridged in the same incoming VLAN. (CSCdm72364)

The rate and burst parameters for microflow/aggregate policing are specified in terms of kbps (kilobits per second) and Kb (kilobits). However, the following should be noted:

Rate specification—1 kbps is equivalent to 1000 bits per second (as opposed to 1024 bits per second)

Burst specification—1 Kb is equivalent to 1024 bits

Running two or more QoS commands from different Telnet or SSH sessions could cause the switch to hang or reset. We recommend that you do not execute two or more QOS commands simultaneously from different Telnet, SSH, or Console sessions. (CSCdy74994)

The set port qos mod/port {port-based | vlan-based} command configures all ports on switching modules with 1p1q0t/1p3q1t QoS port architecture.

Microflow policing does not support policing of identical flows arriving on different interfaces simultaneously. Attempts to do so lead to incorrectly policed flows. (CSCdt72147)

If there is an error in installing any COPS policy, a successful commit is sent to the PDP even if the policy was not correctly installed. In such situations, any modifications to the port's role combination does not install the correct policy on the port and might result in a switch reset. (CSCdp66572)

If you create a security ACL with the redirect option and then replace the module that has the redirect port with another kind of module, the security ACL does not have the redirect port list anymore.

Workaround: Manually modify the security ACL with the new redirect port information. (CSCdp74757)

If you download a COPS ACL containing a policer to the switch and the switch cannot support the exact rate/burst supplied by the policer, no message informs you that the rate/burst was rounded off to the nearest value that the hardware could support. (CSCdr28715)

Catalyst 6500 series switches do not support nonzero WRED minimum values. If a COPS QPM server sends down a COPS policy with a nonzero WRED minimum value, no error report is returned to the COPS server. As a result, there is no indication to the user that the WRED minimum specified in the COPS policy was not used. (CSCdr28819)

COPS and RSVP are not supported in software release 6.2(2).

On a Catalyst 6500 series switch, when the switch QoS policy source is COPS, no COPS roles are defined for a port, and the port policy source is COPS, the values that you set for the QoS configuration (such as queue mappings and sizes) are inappropriate. For example, all CoS values get mapped to the strict-priority queue on a 1p2q2t or 1p1q4t port type. This situation can lead to bandwidth starvation for other ports in the switch, especially, if these ports with a strict-priority queue are generating high rates of traffic.

Workaround: Either configure a COPS role on all ports in the switch or configure all ports without a COPS role to use local policy. (CSCdp44965)

If a large number of QoS ACLs are defined on the system during switch bootup, some packets might get switched before the QoS ACLs are installed in hardware. This scenario would result in some packets getting an incorrect ToS or no policing applied. After the QoS ACLs are installed in hardware, the correct ToS and policers are applied. It is considered inappropriate to block traffic from flowing until all the QoS policy is installed. (CSCdp68608)

After setting the QoS policy source to local, you might need to wait approximately 20 seconds before the QoS policy source can be set back to COPS. (CSCdp34367)

The COPS policy fails to install on ports with a large number of QoS policers.

Workaround: Unmap the local ACLs before installing the COPS policy. (CSCdp63138)

Use the QoS strict-priority queues for your highest-priority traffic only. The strict-priority queues are designed to accommodate only a limited volume of traffic. If you overload the strict-priority queues, the supervisor engine cannot service the standard queues. (CSCdm90683)

With QoS disabled, an EtherChannel can contain ports with both strict-priority queues and ports without strict-priority queues. With QoS enabled, an EtherChannel cannot contain both port types. If you enable QoS, ports drop out of any EtherChannels that contain both port types.

When COPS is the QoS policy source, TFTP traffic and switching might be affected if a COPS policer is configured with a rate or burst value that the Catalyst 6500 series switch cannot support. (CSCds16976)

Except for ports that support 1p1q0t/1p3q1t, the set port qos trust command and the trust-ipprec and trust-dscp port keywords are not supported on 10-, 10/100-, and 100-Mbps ports. Instead, configure ACLs with the trust-cos, trust-dscp, and trust-ipprec ACE keywords. Note that the trust-cos port keyword can be used on 10-, 10/100-, and 100-Mbps ports to enable receive-queue drop thresholds.

To avoid the case where all traffic is out of profile, the burst size specified in a QoS policing rule must be at least as large as the maximum packet size permissible in the traffic to which the rule is applied.

With heavy COPS protocol traffic between either the COPS-DS client or the COPS-RSVP client and the PDP, it is possible for a connection keep-alive timeout event to occur and for the COPS connection manager to miss a Client Close from the PDP. When this happens, the switch might have an exception later. (CSCdp64213)

Automatic Quality of Service with Cisco IP Phones

This section contains usage guidelines, restrictions, and troubleshooting information that apply to configuring automatic QoS with Cisco IP Phones:

Cisco IP Phone 79xx phone marking—The Cisco IP Phone 79xx does not mark its protocol packets such as DHCP, TFTP, and DNS packets with nonzero DSCP values. This causes the IP phone to see DHCP, DNS, and/or TFTP timeouts when an uplink port on a switch is oversubscribed. This results in the IP phone taking a long time to register with the Cisco CallManager or the IP phone might not register at all. Additionally, phone directories, IP phone services, call logs, ring tones, and so on become unavailable or do not work correctly for the IP phone user.

Workaround: Use custom QoS ACLs instead of automatic QoS on the switch. For this problem, caveat CSCdy62735 has been logged against the Cisco IP phone.

Cisco CallManager is not marking protocol packets—This Cisco CallManager issue is similar to the above issue (CSCdy62735). If uplink ports are oversubscribed, TFTP packets from the Cisco CallManager are dropped by the switch.

Workaround: Use custom QoS ACLs instead of automatic QoS on the switch.

Cisco SoftPhone does not tag any voice signaling packets—With this problem, voice signaling packets from Cisco SoftPhones get dropped and Cisco Soft Phones fail to connect to the Cisco CallManager and the user cannot make or receive calls if the switch uplink ports are oversubscribed.

Workaround: Use custom QoS ACLs instead of automatic QoS on the switch. For this problem, caveat CSCdy60186 has been logged against Cisco SoftPhone.

Cisco IP Phone 79xx phone reset problem—The Cisco IP Phone 79xx resets when the IP phone's PC port is oversubscribed. This problem is seen in rare circumstances; the IP phone's PC port should not get oversubscribed unless there is a broadcast storm or some other outage in the network. For this problem, caveat CSCdy50584 has been logged against the Cisco IP phone.

CDP issue—CDP protocol packets are not CoS labeled correctly. This problem prevents the switch from properly prioritizing the "hello" packets being sent to and from the IP phone. Under heavy traffic conditions, this results in loosing the IP phone from the CDP perspective. For this problem, caveat CSCdy53339 has been logged against the Catalyst software.

Multicast

This section contains usage guidelines, restrictions, and troubleshooting information that apply to multicast protocols and traffic on the switch:

Support for multicast sources protected by the IDSM-2 module requires using Cisco IOS as the software on the Catalyst 6500 series switch with the SPAN reflector feature (monitor session service module) enabled. Using the Catalyst operating system on the Catalyst 6500 series switch with the IDSM-2 module does not allow multicast switching in hardware for multicast sources protected by the IDSM-2 module.

IGMP version 3 does not support private VLANs. (CSCdx08912)

SPAN, RSPAN, Private VLANs, and RGMP are not supported with IGMP version 3 snooping.

IGMP version 3 reports might flood on VLANs. IGMP version 3 reports should not flood on VLANs. The reports should be sent only to IGMP version 3 router ports and IGMP version 3 hosts. (CSCdx51216)

Caveat CSCdx51216 was opened to address the issue of preventing IGMP version 3 reports from flooding in VLANs. IGMP version 3 reports are supported with both PFC2 and PFC3A and that support is described as follows:

PFC2: IGMP version 3 reports are captured to the supervisor engine and are flooded to the VLAN. This behavior will not be changed because flooding the IGMP version 3 reports does not cause any problems (there is no concept of report suppression with IGMP version 3 snooping).

PFC3A: There is a separate, conditional RAM that only captures the IGMP version 3 reports to the supervisor engine. There is no flooding to VLANs.

An IGMP version 3 client may receive traffic from unwanted sources. This problem might occur when the IGMP version 3 client abruptly stops sending the IGMP version 3 report and starts sending the IGMP version 3 report to receive traffic from sources that it does not want to receive (before it abruptly stops sending the IGMP version 3 report). (CSCdx53609)

A security ACL will not take effect for sources that are present in the INCLUDE list if the IGMP version 3 state is in INCLUDE mode and the multicast source and receiver are in the same VLAN. (CSCdy15849)

The Cisco IOS last-member-query-interval command allows you to increase the time that the router waits for host responses to IGMP GS queries (group-specific queries). The switch implements this interval statically, as defined in RFC 2236 (the default is 1000 ms). If you configure a router that is connected to the switch with a "last-member-query-interval" that is greater than the default interval as defined in RFC 2236, and you enable IGMP snooping on the switch, then hosts connected to the switch might have packets discarded if these hosts are unable to respond to GS queries within the interval implemented on the switch. The supervisor engine software does not modify its behavior based on the last-member-query-interval that is configured on the connected routers. Do not modify the last-member-query-interval on the routers that are connected to the switch if IGMP snooping is enabled.

Workaround: Disable IGMP snooping on the switch. (CSCdu72041)

Ports may be added to a source list even though a port does not want traffic from that source when the IGMP version 3 mode changes from INCLUDE to EXCLUDE. (CSCdy25856)

The show multicast v3-group command may not show any port in the exclude port list for a maximum of 60 seconds when the IGMP version 3 state changes from INCLUDE to EXCLUDE. (CSCdy25809)

A new command, set igmp ratelimit [disable | enable], has been added to the 6.x, 7.x, and 8.x software releases starting with the following releases:

6.4(7)

7.6(5)

8.2(1)

IGMP rate limiting is disabled by default. In the 6.4(x) software release, rate-limit counters are supported only in text configuration mode. The set igmp ratelimit [disable | enable] command is supported in both text and binary configuration modes in all software release trains.

If IGMP rate limiting and multicast are enabled, multicast router ports might age out sporadically because the rate of the multicast control packets (such as PimV2-hellos or IGMP-General Queries) exceed the IGMP rate-limit watermarks that were configured. The default values for these watermarks is 100.

Workaround: The workaround (documented in CSCea44331) is to increase the PimV2-hellos rate limit; we recommend that you set the value to 3000 using the set igmp ratelimit pimv2 3000 command. You can also increase the IGMP-General Queries rate limit; we recommend that you set the value to 500 using the set igmp ratelimit general-query 500 command.

The maximum number of supported multicast CAM entries is 124. After adding 124 permanent or static multicast CAM entries the switch produces the error "Failed to add CAM entry." After adding 124 static or permanent CAM entries, all attempts to add more static or permanent multicast entries fail. This is true for the same port/same VLAN, different port/same VLAN, and different port/different VLAN.

A Catalyst 6500 series switch running IGMP snooping may intermittently stop adding multicast router ports because it is receiving too many PIMv2 Hello packets.

Workaround: Increase the rate limit value using the set igmp ratelimit pimv2 command. (CSCea44331)

If you install an MSFC2 and the VLAN interface that is defined on the MSFC2 is in shutdown mode, bridged IP multicast traffic will not be policed. (CSCdu12731)

The only ports that send out the GMRP LeaveAll messages are the ports that have previously received GMRP joins.

With software releases 7.1(1) and later, the maximum number of Layer 2 multicast entries is 15488.

If RGMP-enabled routers connected to an RGMP-enabled Catalyst 6500 series switch join many groups, the switch might run out of memory. Ensure that the total number of entries displayed by the show rgmp group count command is fewer than 800. The actual maximum number of entries will vary depending on the features enabled on the Catalyst 6500 series switch and the amount of memory installed.

When a multicast goes to both bridged and routed addresses, the multicast packets going to the routed addresses are Layer 3 switched, and the multicast matches an ACL so that QoS rewrites the ToS byte in the multicast packet. QoS does not rewrite the ToS byte for the multicast packets that are bridged.

We recommend that you do not use more than 1500 multicast groups with GMRP. This restriction does not apply to IGMP.

In extremely rare conditions, multicast traffic might be blocked due to a mismatch between hardware and software entries. (CSCdp81324)

Be aware of the following multicast traffic caveats specific to Supervisor Engine 2 (these caveats apply to all software releases supporting Supervisor Engine 2):

If an outgoing IOS ACL is configured on an interface, Supervisor Engine 2 based systems will match/apply the IOS ACL in software. This results in all outgoing multicast flows for that interface being handled in software (based upon specific deny/permit all statements). MMLS is effectively disabled for the interface. Be aware that handling outgoing IOS ACLs in software increases CPU utilization.

Outgoing VACLs are not applied to multicast traffic with Supervisor Engine 2.

Spanning Tree

This section contains usage guidelines, restrictions, and troubleshooting information that apply to Spanning Tree:

MST problemPowering down the Switch Fabric Module usually takes between 3 and 5 seconds. During this time, traffic and protocol packets are disrupted. The MST root port does not receive BPDUs during this period and the re-root mechanism is called (the re-root mechanism causes the root port to go to the blocking state). As soon as the MST port starts receiving BPDUs, the topology reconverges. (CSCdv86120)

If the forward delay, max age, and hello time Spanning Tree Protocol (STP) parameters are reduced in value, ensure that the number of instances of STP are also reduced proportionally to avoid STP loops in the network.

Occasionally (less than once in every 100 attempts), the console process might lock when an STP mode changes from PVST+ to MISTP.

Workaround: Reset the switch. (CSCds20952)

If you have a Catalyst switch in your network with MAC address reduction enabled, you should also enable MAC address reduction on all other Layer-2 connected switches to avoid undesirable root election and spanning tree topology issues.

When MAC address reduction is enabled, the root bridge priority becomes a multiple of 4096 plus the VLAN ID. With MAC address reduction enabled, a switch bridge ID (used by the spanning-tree algorithm to determine the identity of the root bridge, the lowest being preferred) can only be specified as a multiple of 4096. Only the following values are possible: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440.

Therefore, if another bridge in the same spanning-tree domain does not run the MAC address reduction feature, it could claim and win root bridge ownership because of the finer granularity in the selection of its bridge ID.


Note The MAC address reduction feature is enabled by default on Cisco switches that have 64 MAC addresses (Cisco 7606, CISCO7603, WS-C6503, and WS-C6513).


Access Control

This section contains usage guidelines, restrictions, and troubleshooting information that apply to security:

Note that the VACLs access-control all traffic passing through a VLAN. This includes broadcast traffic and packets going to and from the router. Therefore, you must use care when defining a VACL.

For example, to allow traffic from a local IPX client (daf11511) to a remote server (daf00402), the following VACL is configured (remote server is learned through a routing protocol):

set security acl ipx jg_ipx_permit
 ---------------------------------------------------
 1. permit any DAF00402 DAF11511 
 2. permit any DAF11511 DAF00402 
 3. permit any DAF01023 DAF01023 
 4. permit any DAF11511 0 
 5. permit any 0 0 
 6. permit any DAF11511 DAF11511 

The VACL description is as follows:

1, 2. Allow IPX between client and server.

3. The router needs to see the RIP/SAP packets.

4. If packets are dropped during a connection, the client tries to find another route to the server by sending out RIP requests to IPX network 0.ffff.ffff.ffff. Not doing this results in a lost connection after packet drop.

5. Upon startup, a client sends its first packets to 0.ffff.ffff.ffff and uses 0.ffff.ffff.ffff as its one IPX address.

6. When a server connection socket is timed out, the client reconnects by sending a request to its local network to find its server.

As the example shows, just 1 and 2 is not enough; you also have to define 3 through 6 to achieve the goal. (CSCdm55828)

Make sure that the redirect port defined in a VACL is on the same VLAN as the "incoming" VLAN for the packet that is to be redirected. Otherwise, the redirected packet will be dropped.

For example, a redirect VACL is defined on VLAN 5 and the redirect destination port is also on VLAN 5. If an MLS entry is destined to VLAN 5, packets that are coming from VLAN 2 hit this MLS entry and also hit the VACL redirect ACE (both VLAN 2 and VLAN 5 ACLs will be checked) and are redirected in the incoming VLAN, VLAN 2. The redirect destination port will drop them on VLAN 5 rather than on VLAN 2.

In a Catalyst 6500 series switch with two Supervisor Engine 2s, if you have more than 300 QoS ACLs and each QoS ACL is mapped to a different VLAN, the active supervisor engine might reset after clearing all the QoS ACLs and then committing the change. (CSCdu85021)

High Availability

This section contains usage guidelines, restrictions, and troubleshooting information that apply to high availability:

With high availability enabled, port security is then enabled on a port using the violation restrict mode. On repeatedly clearing the secured addresses under continuous traffic, the secured port on the standby supervisor engine might shut down. (CSCin25168)

In software release 7.6(8) and later releases, improved supervisor engine failover rates with high availability enabled are as follows: In flow through, truncated, and compact modes, the Supervisor Engine 1 and Supervisor Engine 2 failover time is less than 500 ms.

After a high-availability switchover, MSFC2 LTLs are not set when the standby router becomes the designated router. (CSCdy83322)

MSFC configuration synchronization is only supported for IP and IPX configurations. Before enabling synchronization, you must ensure that both MSFCs have identical configurations for all protocols. If you are using AppleTalk, DECnet, VINES, or any other routing, you must manually ensure that identical configurations are on both MSFCs for all protocols.

Redundant supervisor engines must be of the same type with the same model feature card. Note that WS-X6K-SUP1-2GE and WS-X6K-SUP1A-2GE (both without PFCs) are compatible for redundancy. For supervisor engines with PFCs, the PFCs must be identical for redundancy (two PFCs or two PFC2s).

High availability does not support use of the Reset button. Pressing the Reset button to initiate a switchover results in a high-availability switchover failure.

Workaround: Make the active supervisor engine the standby supervisor engine first, and then remove it from the chassis. (CSCdp76806)

NVRAM synchronization and high-availability synchronization does not work between supervisor engine software release 6.3(1) and any later version. (CSCdv43206)

Multilayer Switching

This section contains usage guidelines, restrictions, and troubleshooting information that apply to MLS:

If you have routed flows with MLS disabled (no shortcuts created), candidate entries age out rapidly to ensure that the forwarding table is used as much as possible by shortcut flows. A side effect of this rapid aging of candidate entries is that the microflow policer does not work accurately because its policing history is lost when the entries age out. When the same flow creates a new entry, it gets the entire traffic contract again even if it had exceeded the contract before the entry aged out. (CSCdp59086)

Layer 3 switching on the Catalyst 6500 series switches does not support full or destination-source flows for IPX traffic. With Supervisor Engine 1 and PFC, when the MLS flow mask is destination-source or full-flow, the show mls entry ipx destination command that should select a specific destination displays all IPX Layer 3 entries rather than just those for a specific destination IPX address. (CSCdm46984)

MIBs

This section contains usage guidelines, restrictions, and troubleshooting information that apply to SNMP MIBs, RMON groups, and traps:


Note For information on MIBs, RMON groups, and traps, refer to the Cisco public MIB directory located at this URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml


You cannot use the tftpGrp MIB object to download Catalyst 6000 ATM software. (CSCdp16574)

VLANs, VTP, and VLAN Trunks

This section contains usage guidelines, restrictions, and troubleshooting information that apply to VTP, VLANs, and VLAN trunks:

Use caution when including the sc0 interface in a normal or private VLAN. Under heavy traffic conditions, there is a risk of losing connectivity with the interface. We recommend that you do not configure the sc0 interface in any VLAN with user data. (CSCdv12023)

This problem is related to the following configuration:

The Cat6k-A configuration is as follows:

100Primary VLAN

101Secondary VLAN (isolated/community/two-way community)

102Secondary VLAN (isolated/community/two-way community)

2/1Promiscuous port carrying the mapping from VLAN 101 to VLAN 100 and VLAN 102 to VLAN 100

3/1ATM trunk port carrying VLANs 100, 101, 102, 200, 300

The Cat6k-B configuration is as follows:

100Primary VLAN

101Secondary VLAN (isolated/community/two-way community)

102Secondary VLAN (isolated/community/two-way community)

3/1ATM trunk port carrying VLANs 100, 101, 102

2/1Private port with VLAN 101 to VLAN 100 association

2/2Private port with VLAN 102 to VLAN 100 association

In this configuration, assume that Server 1 is interacting with the router and there is no traffic between Server 2 and the router. If Server 2 suddenly starts interacting with the router, the traffic between Server 1 and the router might stop. This happens when the Cat6k-A 3/1 port is on the WS-X6101-OC12-MMF ATM module.

In summary, do not have a configuration with a promiscuous port on switch A and secondary ports on switch B connected through an ATM trunk on the WS-X6101-OC12-MMF module. (CSCdy03515)

When using a VLAN interface other than the VLAN 1 interface, a VLAN added on a Catalyst 3500XL running 120.5.1-XP does not appear in the Catalyst 6500 series switch database. As soon as management interfaces are put back in VLAN 1, a VLAN configured on the 3500XL is sent properly to the Catalyst 6500 series switch through VTP. Check the status of CSCdr80902 in your Cisco IOS release. (CSCdr66376)

In a redundant configuration, if you modify the VLAN mapping on the active supervisor engine and a high-availability switchover occurs before the VLAN mapping is synchronized between the supervisor engines, you might experience a mapping inconsistency (VLANs claimed by two different instances) if you reenter the mapping command.

Workaround: Recreate a new mapping on a different instance after the switchover. On the newly active supervisor engine, enter the set vlan vlan_num mistp none command and reenter the mapping. (CSCds27902)

Authentication, Authorization, and Accounting

This section contains usage guidelines, restrictions, and troubleshooting information that apply to authentication, authorization, and accounting (AAA):

For login authentication, starting from software releases 5.5(15), 6.3(7), and 7.3(1), if you press the Enter key and then type in your password (<Enter> <password>) the ACS TACACS+ server will treat it as an indication that you are attempting to change your password. This behavior is related to CSCdx08395. Before the CSCdx08395 fix, the user privilege level was hard coded to 15 in the TACACS+ authentication request packet. With the CSCdx08395 fix, the user privilege level is set based on the privilege level that the user is authenticated as. For example, if the user is doing a login authentication, the privilege level would be 1. If the user is doing an enable authentication, the privilege level would be 15.

The Cisco ACS TACACS+ server acts differently for <Enter> <password>. For login authentication, if the user priv-lvl is hard coded to 15, <Enter> <password> is treated as a regular password attempt. If the user priv-lvl is set to 1 (CSCdx08395) during login authentication, then <Enter> <password> is treated as an indication of a changing password. The latter case is a behavior consistent with TACACS+ enable authentication and Cisco IOS software handling of <Enter> <password>. (CSCdy35129)

SPAN and RSPAN

This section contains usage guidelines, restrictions, and troubleshooting information that apply to Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN):

A SPAN session with a 10/100 source port and a Gigabit destination port might result in duplicated packets on the destination port. This problem is seen in all 7.6(x) software releases. (CSCea32926)

RSPAN does not support monitoring of BPDU packets or Layer 2 protocol packets such as CDP, DTP, and VTP.

TDR

This section contains usage guidelines, restrictions, and troubleshooting information that applies to the time domain reflectometer (TDR) feature:

The TDR test can only be run on 16 ports at a time. (CSCea46739)

The TDR test does not provide accurate results if it is run on a link where the remote link partner is configured at 100-Mbps fixed speed (CSCea70930). 10 Mbps, 1000 Mbps, and auto speeds on the remote link partner will not interfere with the TDR test. Also, a 100-Mbps port without a link partner will complete the TDR test successfully.

The WS-X6148 and WS-X6548 GE-TX modules have the following cable restrictions with the TDR test: If a Revision B0 Marvell PHY is used, the maximum cable length that can be detected is 115 meters. If a Revision C0 Marvell PHY is used, the maximum length that can be detected is 168 meters. (CSCea76395)

Auto-MDI/MDIX

With auto-MDI/MDIX you can use either a straight or crossover cable, and the module will automatically detect and adjust for the cable type. Auto-MDI/MDIX works with the speed set to auto/1000 Mbps, but not with the speed set to 10 Mbps or 100 Mbps. This means that the link will come up with either a straight or crossover cable if the speed is set to auto/1000 using the set port speed mod/port auto command or the set port speed mod/port 1000 command. The link comes up even if the speed is autonegotiated at 10 Mbps or 100 Mbps in auto mode. However, if you enter the set port speed mod/port 10 command or the set port speed mod/port 100 command, the link fails to come up if the wrong cable is used.

Auto-MDI/MDIX has always been enabled on the following modules:

WS-X6548-RJ-45, WS-X6548-RJ-21, WS-X6148-GE-TX, WS-X6548-GE-TX

Auto-MDI/MDIX works in 10-, 100-, and 1000-Mbps modes with autonegotiated and fixed speeds.

WS-X6516-GE-TX

Auto-MDI/MDIX works with the speed set to auto/1000 Mbps, but not with the speed set to 10 Mbps or 100 Mbps.

WS-X6316-GE-TX

With software release 8.2(1), auto-MDIX is also enabled on the following modules:

WS-X6748-GE-TX, Supervisor Engine 720 port 2 (RJ-45)

Auto-MDI/MDIX works with the speed set to auto/1000, but not with the speed set to 10 Mbps or 100 Mbps.

WS-X6148X2-RJ-45, WS-X6148X2-45AF

Auto-MDI/MDIX works with the speed set to auto, but not with the speed set to 10 Mbps or 100 Mbps.


Note Auto-MDI/MDIX is not supported on any other 10/100-Mbps Ethernet modules or GBIC, SFP, and XENPAK ports.


Binary and Text File Configuration Modes

The main purpose of storing configuration information in NVRAM blocks is to restore the system configuration when the switch boots up after a reset. The supervisor engine boot process includes reading the NVRAM blocks and using the configuration information in the blocks to configure the system. Before restoring the configuration from an NVRAM block, a new checksum is generated on the data in the block, and the new checksum is compared with the checksum stored in the block itself. If both of the checksums match, the data is determined to be valid and the data in the block is used to restore the configuration. If the checksum matching fails, the NVRAM block is deallocated, and the default configuration is used.

There are two modes for storing the configuration file, binary configuration mode and text file configuration mode. These modes are described in the following sections.

Binary Configuration Mode

In binary configuration mode, the NVRAM configuration model uses binary data structures to save information. The NVRAM is allocated in blocks, and each data structure is stored as an NVRAM block as follows:

A global block is statically allocated for saving global configuration information.

Per-module NVRAM blocks are allocated for each module to store information for every module and port.

Other NVRAM blocks include blocks for SNMP,VTP, SSH, NVRAM logging, and so on.

When you enter a command to configure a feature, the information is stored immediately in one of the NVRAM blocks. Some blocks are allocated at startup, such as the global block, the SNMP block, and the VTP block. Other blocks are allocated as needed. For example, a module block is allocated only when a nondefault setting is configured for the module or configured for a port on the module. Some NVRAM blocks also grow dynamically. The VTP block, by default, allows for 256 VLANs to be configured. If more than 256 VLANs are configured, the VTP block expands to allow 256 additional VLANs. Binary configuration mode provides an easy way to store the configuration immediately without the need for a write memory command to commit the configuration to NVRAM.

Binary storage of data is also space efficient. For example, remembering if a feature is enabled or not requires a single bit of NVRAM.

Text File Configuration Mode

A disadvantage of the binary configuration mode is that although configured features can be stored efficiently, a large amount of NVRAM space can be wasted by features that are not configured by the user. For example, the global block currently requires approximately 150 KB, but users may have configured only a few features. Similarly, a 48-port module consumes approximately 25 KB of NVRAM space (about 0.5 KB per port) even if only a single port on the module has been configured with a nondefault setting.

With software release 6.3(1) and later releases, the text file configuration mode was introduced to support the new 13-slot chassis and all the configurable options on the switch. With text file configuration mode, you can store the configuration as a text file in Flash memory or NVRAM. In text file configuration mode, the binary NVRAM data structures are deleted from NVRAM. The only blocks not deleted from NVRAM are those that contain information not stored in the configuration file. These blocks include the following:

Boot block (B_BOOTAREA)—Must stay in NVRAM. It contains information about the location of configuration blocks (NVRAM or DRAM).

Option block (B_OPTION)—Contains the configuration for hidden commands.

Module logging block (B_MODULELOG)—Contains the NVRAM log traces (NVLOG).

Command logging block (B_CMDLOG)—Contains the command history log.

RSAKEY (B_RSAKEY)—Contains encrypted key information that should not be regenerated every time.

I/F index block (B_MODULEIFINDEX)—Contains SNMP interface index information that is not in the text configuration file.

RMON blocks (B_RMON, B_RMON2, and B_EXTENDEDRMON)—Contains RMON information that is not in the text configuration file.

SNMP block (B_SNMP)—Contains SNMP-related information that is not in the text configuration file. Additionally, fields in this block can be specified as non-volatile by the user through SNMP; those fields must be saved immediately to non-volatile storage.

VTP block—Needs to stay in NVRAM to be compliant with the VTP specification in VTP server mode.

The NVRAM blocks are copied to DRAM before being deleted. Except for some isolated code associated with the copying of the NVRAM blocks into DRAM, this change is transparent to the rest of the software. The data structures are manipulated and accessed as before; the only difference is that they are now stored in the DRAM instead of the NVRAM memory region.

A new B_GENERAL NVRAM block is also created when operating in text configuration mode. This block contains any configuration from a deleted block that must still be saved in NVRAM. For example, there are time zone and encryption-related fields in the global block that must be stored in NVRAM. These fields are moved to the new B_GENERAL block whenever text configuration mode is selected. The B_GENERAL block is deleted when moving back to binary configuration mode.

When operating in text file configuration mode, most user settings are no longer saved immediately to NVRAM. Instead, configuration changes are written to the DRAM only. You must enter the write memory command to store the configuration in non-volatile storage. The non-volatile storage may be either the Flash file system or NVRAM. Because the text file configuration file in most cases requires less space than the binary data structures, NVRAM is an appropriate place for the configuration file. Alternatively, you may specify a file in the Flash file system.


Note When a new VLAN is added (created), the VTP domain information fields (such as VtpDomainName, VtpPassword, VtpMode, VtpInterval, VtpRevisionNo, VtpVlanCount, VtpUdpater, VtpDomainIindex, VtpPruningMode, and VtpV2Enabled) are updated if their values are different from the current values in NVRAM. Out of all of these information fields, the VtpVlanCount field is the only one that is changed when a VLAN is added or deleted. When the VtpVlanCount field is changed, the global block in NVRAM is changed, resulting in the following trap being sent: "Global block changed by Console//." This behavior is documented in caveat CSCea23160.


CiscoView

This section contains usage guidelines, restrictions, and troubleshooting information that apply to CiscoView:

The 7.1(1) and 7.1(2) CiscoView + SSH images may fail to boot on Supervisor Engine 1 systems with 64-MB DRAM. This problem applies to all models of Supervisor Engine 1 (WS-X6K-SUP1-2GE, WS-X6K-SUP1A-2GE, WS-X6K-SUP1A-PFC, WS-X6K-SUP1A-MSFC, WS-X6K-S1A-MSFC2). Due to this problem, the cat6000-supcvk9.7-1-1.bin and cat6000-supcvk9.7-1-2.bin CCO images have been deferred. As an alternative, the cat6000-supcvk8.7-1-1.bin or the cat6000-supcvk8.7-1-2.bin images may be used if SSH support is not required. If both CiscoView and SSH support is required, the 6.3(x) supcvk9 images or the 7.2(x) and later supcvk9 images should be used. This issue is documented in open caveat CSCdw70549.

The supported client platforms, browsers, and Java Plug-in versions supported by CiscoView are as follows:

Client Platform
Web Browser
Java Plug-in

Solaris 2.7/2.8

Netscape Navigator 4.76, 4.77, 4.78, 4.79

Java Plug-in 1.3.0 (JRE 1.3.0)
Java Plug-in 1.3.1 (JRE 1.3.1)

Windows 98
Windows NT 4.0
Windows 2000

Internet Explorer 5.5
Netscape Navigator 4.76, 4.77, 4.78, 4.79

Java Plug-in 1.3.0-C (JRE 1.3.0)
Java Plug-in 1.3.1 (JRE 1.3.1)

HPUX 11.0

Netscape Navigator 4.77, 4.78, 4.79

Java Plug-in 1.2.2 (JRE 1.2.2)
Java Plug-in 1.3.1 (JRE 1.3.1)

AIX 4.3.3

Netscape Navigator 4.77, 4.78, 4.79

Java Plug-in 1.3.0 (JRE 1.3.0)
Java Plug-in 1.3.1 (JRE 1.3.1)



Note The Java Plug-in can be downloaded from http://www.cisco.com/pcgi-bin/tablebuild.pl/cview-plugin



Note Java Plug-in versions 1.3.0_01 and 1.3.0_02 do not work with CiscoView.



Note Java Plug-in versions 1.3.1_01 and later are not supported by CiscoView.


If the CiscoView chassis scrollbar does not appear, resize the browser window. Another workaround is to right-click on the chassis and select "Resize" to decrease the size of the chassis view.

On Windows NT machines with Java Plug-in 1.3.0 installed and Netscape running, the CiscoView chassis scrollbar does not appear, even after resizing it. To correct the problem, upgrade to Java Plug-in 1.3.1. (CSCdw58407)

On Solaris machines with Java Plug-in version 1.3.1 installed, if you are using either Netscape Navigator 4.77, 4.78, or 4.79, you might see a blank screen after launching CiscoView. (CSCdw13384)

To correct the problem, perform these steps:


Step 1 Uninstall the current Java Plug-in from your machine.

Step 2 Download the Java Plug-in from the following location and install it on your machine:

http://www.cisco.com/pcgi-bin/tablebuild.pl/cview-plugin

Step 3 Clear the cache by entering the following CLI command: rm -rf ~/.netscape

Step 4 Enter the following CLI command: export NPX_PLUGIN_PATH = /usr/j2se/jre/plugin/sparc/ns4

Step 5 Launch Netscape Navigator.

Step 6 Select Edit > Preferences, and then click Advanced in the navigation tree.

Step 7 Make sure the Enable Java checkbox is not selected.

Step 8 Specify the IP address of the device you want to access and launch CiscoView. The Java console is displayed, but the chassis view does not appear.

Step 9 Select Edit > Preferences, and then click Advanced in the navigation tree.

Step 10 Select the "Enable Java" checkbox.

Step 11 Specify the IP address of the device you want to access and launch CiscoView. Both the Java console and chassis view should now be displayed.

If you are using Netscape and have installed a Java Plug-in earlier than version 1.3.0, you might get a blank screen when you launch CiscoView. (CSCdw59601)

To correct the problem, download Java Plug-in 1.3.0 or later from the following location: http://www.cisco.com/pcgi-bin/tablebuild.pl/cview-plugin

If your machine is running Windows 2000, Windows NT, or Windows 98 and the chassis view does not appear, you should disable the Java Plug-in's JAR caching feature, as follows:

For Java Plug-in 1.3.1:

1) Select Start > Settings > Control Panel > Java Plug-in 1.3.1.

2) Click the Cache tab.

3) Click Clear JAR Cache.

For Java Plug-in 1.3.0:

1) Select Start > Settings > Control Panel > Java Plug-in.

2) Click the Basic tab.

3) Make sure the "Cache JARs In Memory" checkbox is not selected.

4) Click Apply.

If your machine runs on the HP-UX platform, we recommend that you use the HP release of Netscape. The HP release of Netscape can be downloaded from the following location:
http://www.hp.com/workstations/products/unix/software/netscape/index.html
(CSCdw59617)

CiscoView images take approximately 12 minutes to download from a TFTP server to a Flash PC card. (CSCdr14437)

In the VLAN & Bridge dialog box (Device > Configure > VLAN & Bridge), deleting the primary VLAN after unbinding the secondary VLAN returns an error message.

Workaround: Close and reopen the dialog box and then delete the primary VLAN.

After binding a secondary VLAN to the primary VLAN, delete the primary VLAN and the following error message is displayed: "Set failed due to snmpRspGenErr for vtpVlanEditRowStatus.1.199."

Workaround: Close and then reopen the dialog box. You should now see the correct error message: "The Primary is bounded ..." (CSCdt65530)

The Carrier Alarm LED status on WAN modules is not supported by SNMP. (CSCdw50111)

CWDM GBICs and 1000BASE-TX (copper) GBICs installed in WAN modules display as normal GBIC ports in CiscoView. (CSCdy18652)

If you have configured Internet Explorer to bypass certain addresses in the proxy server (such as the IP address of the switch), the Java applet on the PC will still try to connect to the switch through the proxy server. For security reasons, this may cause the CiscoView GUI to fail if the proxy server cannot talk to the switch directly. (CSCdw48852)

In the EtherChannel dialog box (Port > Configure > EtherChannel), when EtherChannel Operation Mode is changed from "pagpOn" to "off/manual," click Refresh and the PAgP dialog box displays "N/A" for every field. To work around the problem, close and reopen the dialog box. (CSCdw76309)

If you use QoS Device Management to create a policy name and try to delete the policy name, the following incorrect error message appears:

Unable to set row status

(CSCdu11333)

If you use QoS Device Management to add an IP ACL, select the Add/Edit ACE option, select an entry and make some changes, and then either click Cancel or OK. The configuration fails due to misconfigurations when you select OK; the previously entered values will appear as defaults when you attempt to edit your configuration.

Workaround: Overwrite the values in the fields if necessary. (CSCdu05678 and CSCdu15066)

If you use QoS Device Management to add or edit an IP/IPX/MAC ACL, no buttons are available to move ACE entries up and down.

Workaround: Select the entry that needs to be moved and click on Edit and select OK. This entry is then moved to the bottom of the ACE list. (CSCdt64023)

If you use QoS Device Management and select Policy Selection, Add/Edit Policies >Change, and then select a policy and click OK, selecting Cancel when the confirmation window displays will not cancel the operation. The policy is still added to the Policy Selection.

Workaround: Delete the policy selection entry that was added. (CSCdu43690)

The Catalyst 6000 CiscoView (CV) images do not support the Carrier Alarm LED for WAN modules. (CSCdt52011)

There is a problem when you highlight the MultiChannel DS3 Port Adapter in the WS-X6182-PA module, and then select Configure > Interface. The dialog box displays "n/a" or the incorrect values in every field. Also, if you select Monitor > Interface, the charts in the resulting dialog box do not get updated, and an error message is displayed in the status bar. This problem is corrected in MSFC Cisco IOS Releases 12.1(13)E, E1, and E2. (CSCdr39591)

Disabled WAN modules are placed in the power-down state. This problem is resolved in software release 7.2(2). (CSCdw50083)

802.1X Authentication timer fields are available in the port-level PAE dialog box (Port > Config > PAE > Port Authenticator). This problem is resolved in software release 7.3(1). (CSCdw86044)

The Redetect Protocol function in the MST Port Status dialog box (Port > Configure > Spanning Tree > MST Port Status) does not work on voice ports. This problem is resolved in software release 7.3(1). (CSCdx04800)

When a device is set to MST Spanning Tree mode, the "Path Cost" and "Priority" fields in the Bridge Details dialog box (Port > Configure > Bridge > Bridge Details) cannot be set on a channeling port that is using PAGP or LACP. This problem is resolved in software release 7.3(1). (CSCdx23200 and CSCdx23217)

CiscoView device discovery fails when supervisor engine 1 in slot 1 is in ROMMON mode and Supervisor Engine 2 in slot 2 is active. (CSCin43526)

With CiscoView, the Firewall Services Module, Content Services Module, and SSL Services Module features might not work consistently with Windows NT. When you try to launch CiscoView ADP on Windows NT, the progress dialog either runs for a long time and then stops or it might launch suddenly. This problem is occurring only with Windows NT with Internet Explorer and Netscape browsers. There is no problem with Windows 2000 or Solaris platforms.

Workaround: Because the problem is intermittent, the workaround is to close the dialog and try launching the application again. (CSCin41067)

In rare occurrences with CiscoView, when launching the Firewall Services Module, Content Services Module, and SSL Services Module features, the progress dialog might stop. You might see the problem with the following Firewall Services Module, Content Services Module, and SSL Services Module features:

Device->VLAN Flows

Device->Configure->VLAN& Bridge->SVI Configuration

FWM Card->Firewall Service Blade Setup Wizard

FWM Card->Assign VLANs To Firewall Blade

FWM Card->Configure Firewall Interface(s)

FWM Card->Configure Static Route

FWM Card->Configure HTTP Service on Firewall Interface(s)

FWM Card->Configure HTTP Server

CSM Card->CSM Details

SSL Card->SSL Details

You might see the problem with Windows NT, Windows 2000, and Solaris platforms. The problem is not seen with other features.

Workaround: Because the problem is intermittent, the workaround is to close the dialog and try launching the application again. (CSCin42718)

In rare occurrences with CiscoView, you might experience the following two problems:

Problem 1: Clicking the Cancel button causes an exception. Launch any Firewall Services Module, Content Services Module, and SSL Services Module feature dialog such as: "FWM -> Assign Vlans to Firewall blade." The progress bar appears. When you click the Cancel button, the following message displays: "Aborting the operation. Please wait". A window is then displayed with the following message: "Failed to retrieve category: Assign VLANs to Firewall Blade.java.lang.NullPointerException." When you close this window, the main window ("Aborting the operation, please wait") is closed.

Conditions for Problem 1: Clicking the Cancel button causes an exception. Enter the Login Credentials and try to launch the following Firewall Services Module, Content Services Module, and SSL Services Module feature dialogs:

FWM Card->Firewall Service Blade Setup Wizard

FWM Card->Assign VLANs To Firewall Blade

FWM Card->Configure Firewall Interface(s)

FWM Card->Configure Static Route

FWM Card->Configure HTTP Service on Firewall Interface(s)

FWM Card->Configure HTTP Server

CSM Card->CSM Details

After the progress dialog displays, press the Cancel button. This action displays the following message: "Failed to retrieve category: Assign VLANs to Firewall Blade.java.lang.NullPointerException:."

This problem is intermittent and the cancel operation is successful for VLAN flows dialogs.

Workaround: The workaround for problem 1 is to close the exception and try to launch the dialog again.

Problem 2: Close the progress bar by clicking the * button (this action is not applicable to Solaris platforms). Launch any dialog such as "FWSM -> Assign VLAN to blade." The progress bar is displayed. Closing the progress bar by clicking the X button causes a "CiscoView error" to display and the dialog stops.

Conditions for problem 2: Close the progress bar by clicking the * button (this action is not applicable for Solaris platforms). Enter the Login Credentials. Try to launch service module dialogs other than VLAN flows. After the progress dialog displays, press the close (X) button.

Workaround: The workaround for problem 2 is to close the session and try to launch the dialog again. Instead of using the close (X) button, press the Cancel button to close the dialog. (CSCin43633)

With CiscoView, the SVI configuration dialog is still shown under "Device ->Configure->VLAN&Bridge" for the Firewall Services Module, Content Services Module, and SSL Services Module when a Supervisor Engine 1 module is installed. Because these modules require a Supervisor Engine 2, the dialog should not be displayed. (CSCin43687)

Open and Resolved Caveats in Software Release 7.6(24)

These sections describe open and resolved caveats in supervisor engine software release 7.6(24).

Open Caveats in Software Release 7.6(24)

Resolved Caveats in Software Release 7.6(24)

Open Caveats in Software Release 7.6(24)

There are no open caveats in software release 7.6.(24).

Resolved Caveats in Software Release 7.6(24)

When the spanning tree protocol is changed on a root bridge from PVST+ to Rapid-PVST+ and if the loop guard is present on the ports attached to other PVST+ bridges, the VLAN goes into an inconsistent state. You see this symptom when the spanning tree loop guard is present on ports interconnecting PVST+ bridges and subsequently the spanning tree protocol changes to Rapid-PVST+ on the root bridge.

Workaround: Disabling the spanning tree loop guard will prevent the VLAN from going into a loop-inconsistent state. When both bridges' spanning tree protocol are set to Rapid-PVST+, the loop guard can be enabled again.

This problem is resolved in software release 7.6(24). (CSCsl34983)

PAgP or LACP channel is formed even when the QoS configuration differs for the ports included in the channel. This problem occurs on all the Supervisor engines from software release 7.6(12).

Workaround: Configure PAgP and LACP to on mode.

This problem is resolved in software release 7.6(24). (CSCsh33078)

Open and Resolved Caveats in Software Release 7.6(23)

These sections describe open and resolved caveats in supervisor engine software release 7.6(23).

Open Caveats in Software Release 7.6(23)

Resolved Caveats in Software Release 7.6(23)

Open Caveats in Software Release 7.6(23)

There are no open caveats in software release 7.6.(23)

Resolved Caveats in Software Release 7.6(23)

After failing over from active to standby mode in a redundant Supervisor Engine 720-3B system running software release 8.5(8), all modules have incorrect FPOE programmed for management VLAN.

Workaround: Configure FPOE in engineering mode manually and then switchover.

This problem is resolved in software release 7.6(23).(CSCsk34156)

When doing fallback bridging on the MSFC, if you configure set spantree global-default portfast enable and set spantree global-default bpdu-guard enable on the SP, MSFC port 15/1 goes into err-disabled state and cannot be recovered.

Workaround: Disable bpdu-guard and bpdu-filter spanning tree features for MSFC ports.

This problem is resolved in software release 7.6(23).(CSCsk15951)

On switches with a Supervisor Engine 2 and MSFC 2 that run hybrid software (CatOS and MSFC IOS), the supervisor engine may crash. This crash happens because of a Watchdog Timeout on the AclManager, shortly after a large RACL (contains 2,000 or more ACEs) is applied to one of the switch virtual interfaces (SVIs) on the MSFC.

Workaround: None.

This problem is resolved in software release 8.6(1). (CSCse44785)

The Catalyst 6500 series switch generates the newRoot trap even if it never becomes a root bridge

Workaround: Disable the newRoot trap.

This problem is resolved in software release 8.6(3). (CSCsi40326)

Open and Resolved Caveats in Software Release 7.6(22)

These sections describe open and resolved caveats in supervisor engine software release 7.6(21):

Open Caveats in Software Release 7.6(22)

Resolved Caveats in Software Release 7.6(22)

Open Caveats in Software Release 7.6(22)

There are no open caveats in supervisor engine software release 7.6(19).

Resolved Caveats in Software Release 7.6(22)

If daylight saving time is enabled on a switch with active and standby supervisor engines, the time displayed by the standby supervisor engine does not change to one hour earlier when daylight saving time ends. If a switchover occurs, and the standby supervisor engine becomes the new active supervisor engine, the time displayed by the new active supervisor engine also does not change to one hour earlier when daylight saving time ends.

Workaround: None

This problem is resolved in software release 7.6(22). (CSCsi86485)

If daylight saving time is enabled using the set summertime recurring command on a switch with active and standby supervisor engines, and daylight saving time ends after a switchover has occurred, the time displayed by the new active supervisor engine changes to one hour earlier. However, the year value used to calculate the start and end dates for daylight saving time does not increment.

Workaround: None.

This problem is resolved in software release 7.6(22). (CSCsi89867)

You cannot configure primary or secondary multiple PVLANs on the switch console.

This problem is resolved in software release 7.6(22). (CSCsi92247)

When using DTP for trunking when the native VLAN is not VLAN 1 and the ports are in a channel, changing the channel mode from desirable/nonegotiate dot1q to off, then back again, the root bridge periodically fails to send configured BPDUs.

Forwarding loops are introduced across the channel links, and eventually are errdisabled due to channel misconfiguration.

Workaround: Use the native VLAN as 1 or set the trunk mode to on.

This problem is resolved in software release 7.6(22). (CSCsj26890)

Open and Resolved Caveats in Software Release 7.6(21)

These sections describe open and resolved caveats in supervisor engine software release 7.6(21):

Open Caveats in Software Release 7.6(21)

Resolved Caveats in Software Release 7.6(21)

Open Caveats in Software Release 7.6(21)

This section describes open caveats in supervisor engine software release 7.6(21):

If daylight saving time is enabled on a switch with active and standby supervisor engines, the time displayed by the standby supervisor engine does not change to one hour earlier when daylight saving time ends. If a switchover occurs, and the standby supervisor engine becomes the new active supervisor engine, the time displayed by the new active supervisor engine also does not change to one hour earlier when daylight saving time ends.

Workaround: None. (CSCsi86485)

If daylight saving time is enabled using the set summertime recurring command on a switch with active and standby supervisor engines, and daylight saving time ends after a switchover has occurred, the time displayed by the new active supervisor engine changes to one hour earlier. However, the year value used to calculate the start and end dates for daylight saving time does not increment.

Workaround: None. (CSCsi89867)

You cannot configure primary or secondary multiple PVLANs on the switch console.

Workaround: To configure more than one PVLAN, you must configure them one at a time. (CSCsi92247)

Resolved Caveats in Software Release 7.6(21)

This section describes resolved caveats in supervisor engine software release 7.6(21):

When you change the root port of an edge switch with uplinkfast, the channel port cannot send a TCN trap. If you do not use the channel port, the software will send a TCN trap to only one port. The following conditions must be present for this situation to occur:

The STP mode is MISTP

Uplinkfast is used

CatOS 7.1(1) and 7.6(3) or later experiences the same behavior.

Workaround: None.

This problem is resolved in software release 8.6(1). (CSCed52709)

A VLAN value might not be returned for NAM and IDS module ports.

This problem is resolved in software release 7.6(21). (CSCin51922)

The URL-redirect string in a policy is not accepting "?".

Workaround: Set editing disable.

This problem is resolved in software release 7.6(21). (CSCse29446)

The output of the show logging buffer command displays some messages that do not conform to the standard message format. The messages include a date/time stamp at the beginning of the message. This situation prevents some syslog servers from correctly interpreting messages and notifying customers when necessary.

Workaround: None.

This problem is resolved in software release 7.6(21). (CSCsh86516)

When you use the set summertime date command to enable a change to daylight saving time (during the summertime), the switch may reset (or switch over to the standby supervisor engine if one is present) when the end of daylight saving time is reached.

This problem is resolved in software release 7.6(21). (CSCsi00968)

Open and Resolved Caveats in Software Release 7.6(20)

These sections describe open and resolved caveats in supervisor engine software release 7.6(18):

Open Caveats in Software Release 7.6(20)

Resolved Caveats in Software Release 7.6(20)

Open Caveats in Software Release 7.6(20)

There are no open caveats in supervisor engine software release 7.6(20).

Resolved Caveats in Software Release 7.6(20)

This section describes resolved caveats in supervisor engine software release 7.6(20):

The standby Sup2, on a HA enabled system, reboots due to an exception, packet loss would occur for a few seconds.

Workaround: To set diaglebel to bypass mode using command set test diaglevel bypass.

This problem is resolved in software release 7.6(20).(CSCsd89614)

With QoS, you might see policer configuration corruption after filling the aggregate policer table.

This problem is resolved in software release 7.6(20). (CSCec42270)

When enabling both portfast and BPDU-guard on a port on a Catalyst 6000 series switch, the port does not go into errdisable status.

Workaround: Enable BPDU guard on the access port.

This problem is resolved in software release 7.6(20). (CSCsd94558)

On a Catalyst 6000 Multilayer Switch Feature Card (MSFC), the router MAC stays present in the cam table after creation and deletion of a Layer-3 VLAN interface. This can cause connectivity problems when that MAC address needs to be learned elsewhere (for example, on a firewall or content switch module).

Workaround: Reset the switch to clear the MAC address.

This problem is resolved in software release 7.6(20). (CSCei27809)

When loopguard has been enabled, there are some situations in which both sides of a link will stay in a loop-inconsistent state if Rapid-PVST is used and the root bridge gets removed from the network or changes its priority.

Workaround: Disable loopguard on the designated side of the link.

This problem is resolved in software release 7.6(20). (CSCsd61118)

The output of a show vtp domain command will show as a negative value once the configuration revision is higher than 0x7FFFFFFF (2147483647).

Workaround: To clear the parser error, perform one of the following tasks:

1. Change the VTP mode from server mode to transparent mode and then back to server mode.

2. Change the VTP domain name from its current name to a different name and then back to the original name.

3. Reload the switch.

This problem is resolved in software release 7.6(20). (CSCse47765)

On a Catalyst 6000 MSFC, the router MAC address stays present in the CAM table after creation and deletion of a Layer-3 VLAN interface. This can cause connectivity issues when the MAC address needs to be learned elsewhere.

Workaround: Reset the switch to clear the MAC address.

This problem is resolved in software release 7.6(20). (CSCei27809)

The output of a show vtp domain command will be a negative value once the configuration revision is higher than 0x7FFFFFFF (2147483647).

Workaround: Perform one of the following tasks:

Change the VTP mode from server mode to transparent mode and then back to server mode.

Change the VTP domain name from its current name to a different name and then back to the original name.

Reset the switch.

This problem is resolved in software release 7.6(20). (CSCse47765)

When using a WS-X6K-S1A-2GE switching module on CatOS release 7.6.9 or 8.3.1, if you enter a show count supervisor command the cli will display the following error message:

***** Available only on Earl5 supervisors *****.  

Upon entering a clear counter supervisor command, the supervisor engine will then failover if in a redundant configuration or reload.

Workaround: Do not enter the clear count supervisor command on a supervisor engine without a PFC installed.

This problem is resolved in software release 7.6(20). (CSCsg68051)

With QoS, you might see policer configuration corruption after filling the aggregate policer table.

This problem is resolved in software release 7.6(20). (CSCec42270)

When loopguard has been enabled, there are some situations in which both sides of a link will stay in loop-inconsistent state if rapid PVST is used and the root bridge gets removed from the network or changes its priority.

Workaround: Disable loopguard on the designated side of the link.

This problem is resolved in software release 7.6(20). (CSCsd61118)

When enabling both portfast and bpdu-guard on a port on a Catalyst 6000 series switch, the port does not go into errdisable status.

Workaround: Enable BPDU guard on the access port.

This problem is resolved in software release 7.6(20). (CSCsd94558)

On switches with a Supervisor Engine 2 and MSFC 2 that are running hybrid software (CatOS and MSFC IOS), the supervisor engine might crash due to a Watchdog Timeout on the AclManager shortly after a large RACL (contain 2,000 or more ACEs) is applied to one of the switch virtual interfaces (SVIs) on the MSFC.

Workaround: None.

This problem is resolved in software release 7.6(20). (CSCse44785)

The output of a show vtp domain command will be displayed as a negative value once the configuration revision is higher than 0x7FFFFFFF (2147483647).

Workaround: To clear the parser error, perform one of the following tasks:

Change the VTP mode from server mode to transparent mode and then back to server mode.

Change the VTP domain name from its current name to a different name and then back to the original name.

Reload the switch.

This problem is resolved in software release 7.6(20). (CSCse47765)

The syslog may send out multiple duplicate traps for the traps which have already been sent out.

This problem is resolved in software release 7.6(20). (CSCsg80406)

Starting in calendar year 2007, daylight savings summertime rules may cause CatOS to generate timestamps (such as in syslog messages) that are off by one hour.

Workaround: Use the set summertime command to manually configure the start date and end date for daylight savings time. Enter the following commands:

Console> (enable) set summertime enable PDT
Summertime is enabled and set to 'PDT'
  Start : Sun Mar 11 2007, 02:00:00
  End   : Sun Nov 4 2007, 02:00:00
  Offset: 60 minutes
  Recurring: yes, starting at 02:00am of second Sunday of March and ending on 0.
Console> (enable) set summertime recurring second Sunday March 02:00 first Sunday 
November 02:00 60
Summertime is enabled and set to 'PDT'
  Start : Sun Mar 11 2007, 02:00:00
  End   : Sun Nov 4 2007, 02:00:00
  Offset: 60 minutes
  Recurring: yes, starting at 02:00am of second Sunday of March and ending on 0.
Console> (enable)

Note This example specifies the United States Pacific time zone.


This workaround will not work if the time in the configuration is modified to a date before November 6, 2006. The limitation is not present while upgrading.

This problem is resolved in software release 7.6(20). (CSCse79110)

You can disable the summertime setting by using the set summertime disable command when you are actually in summertime. This command will cause the clock to be set back to offset time. You can define the offset by using the set summertime recurring command or the offset will be set to a default of 60 minutes. (CSCsh11577)

This problem is resolved in software release 7.6(20). (CSCse79110)

Open and Resolved Caveats in Software Release 7.6(19)

These sections describe open and resolved caveats in supervisor engine software release 7.6(18):

Open Caveats in Software Release 7.6(19)

Resolved Caveats in Software Release 7.6(19)

Open Caveats in Software Release 7.6(19)

There are no open caveats in supervisor engine software release 7.6(19).

Resolved Caveats in Software Release 7.6(19)

This section describes resolved caveats in supervisor engine software release 7.6(19):

A Catalyst 6509 containing a WS-X6524-100FX-MM module may experience an issue where the module interfaces are receiving traffic but the number of transmitted frames does not increase.

Workaround: Reset the module to correct this issue. (CSCse81638)

A Catalyst 6500 series switch running Catalyst operating system release 7.6(14) or later may unexpectedly reload due to a TLB exception.

Workaround: None. (CSCsb91548)

When you initiate and abort a format of a flash card on any standby supervisor engine, and then attempt to view a directory listing, the standby supervisor engine's file system locks, the disk becomes inaccessible, and you see a "Try again later" message as shown in the example below:

Console> (enable) dir 1/disk0: 
File system in use (2). Try again later.

Workaround: Reset the supervisor.

This problem is resolved in software release 6.4(22). (CSCse35781)

Open and Resolved Caveats in Software Release 7.6(18)

These sections describe open and resolved caveats in supervisor engine software release 7.6(18):

Open Caveats in Software Release 7.6(18)

Resolved Caveats in Software Release 7.6(18)

Open Caveats in Software Release 7.6(18)

This section describes open caveats in supervisor engine software release 7.6(18):

With 802.1X authentication, if a high-availability switchover occurs during an authentication after the switchover completes, single authentication and port security are in the authenticated state, but the port might not get added to spanning tree. If this situation occurs, then the port would not receive Color Blocking Logic (CBLs) or Local Targeting Logic (LTLs). The show port security command shows that the port MAC address is secured but no MAC address is in the CAM table. (CSCin20244)

Resolved Caveats in Software Release 7.6(18)

This section describes resolved caveats in supervisor engine software release 7.6(18):

With PAgP mode set to "on," you might not be able to map a QoS ACL to a channel port when the port's status is "not connected." An example of the problem is as follows:

Console> (enable) set qos acl map test-qos 3/9 
Transient error. Port state in transition. Please retry command. Failed to map ACL
test-qos to port 3/9. 
Console> (enable) 

Workaround: Use one of the following workarounds:

Map the QoS ACL to the port before configuring the channel.

Change the PAgP mode to either auto or desirable.

Map the QoS ACL only to ports with a status of "connected."

This problem is resolved in software release 7.6(18). (CSCdz89506)

In rare circumstances, you might see the following behavior with the WS-X6324-100FX modules:

Port counters indicate packets received and transmitted.

No CDP neighbors are seen on the switch on ports of the affected module.

No MAC addresses are learned on ports of the affected module.

All incoming (receive) traffic on all ports is lost.

Transmit traffic is working.

Workaround: Reset the affected module. This problem is resolved in software release 7.6(18). (CSCeg60285)

On a Supervisor Engine 2/MSFC2 with PFC hardware version 2.0, you might see high CPU utilization after committing a large VACL that results in spanning tree recalculations. This problem is not seen with PFC hardware version 1.0 or 1.3. This problem is resolved in software release 7.6(18). (CSCeh37782)

The supervisor engine might reset when you specify a large number of ports using the set port auxiliaryvlan command. This problem is resolved in software release 7.6(18). (CSCsd30799)

The MIB object vlanTrunkPortTable displays the wrong values for channel trunk interfaces in the vlanTrunkPortTable. This problem is resolved in software release 7.6(18). (CSCsd63741)

On a switch with high availability enabled and Rapid PVST+, the switch might display a root bridge ID of 0/00-00-00-00-00-00 after a supervisor engine switchover.

Workaround 1: Run PVST+ instead of Rapid PVST+.

Workaround 2: Disable high availability using the set system highavailability disable command. This problem is resolved in software release 7.6(18). (CSCsd69668)

The supervisor engine might fail over with the following error message:

Last Exception occurred on [date] ...
Software version = 6.4(18)
Error Msg:
PID = 35 cdpdtimer
EPC: 806F1670

The supervisor engine appears to be operating normally when this problem occurs. This problem is resolved in software release 7.6(18). (CSCsd35254)

If you have mapped a large amount of QoS ACLs in the system (for example, 500 ACLs mapped to 500 different VLANs), processing commands such as write mem, show running-config, show startup-config, write terminal, write net, might take up to 20 minutes to complete. This problem affects all releases of the Catalyst operating system. This problem is resolved in software release 7.6(18). (CSCdw40857)

Open and Resolved Caveats in Software Release 7.6(17)

These sections describe open and resolved caveats in supervisor engine software release 7.6(17):

Open Caveats in Software Release 7.6(17)

Resolved Caveats in Software Release 7.6(17)

Open Caveats in Software Release 7.6(17)

This section describes open caveats in supervisor engine software release 7.6(17):

With 802.1X authentication, if a high-availability switchover occurs during an authentication after the switchover completes, single authentication and port security are in the authenticated state, but the port might not get added to spanning tree. If this situation occurs, then the port would not receive Color Blocking Logic (CBLs) or Local Targeting Logic (LTLs). The show port security command shows that the port MAC address is secured but no MAC address is in the CAM table. (CSCin20244)

Resolved Caveats in Software Release 7.6(17)

This section describes resolved caveats in supervisor engine software release 7.6(17):

Disabling one port in an EtherChannel removes the entire channel from STP. This problem occurs with MISTP and MST modes only; there is no problem with PVST+ and Rapid PVST+ modes. This problem is found in software releases 7.6(12) and later releases.

Workaround: When one of the ports in the channel goes down, disable and enable all the ports in the channel. This problem is resolved in software release 7.6(17). (CSCsc34494)

After a high-availability switchover, you might experience a MISTP reconvergence on the newly active supervisor engine and the following message may display:

2005 Sep 09 16:00:49 JST +09:00 %SPANTREE-2-SWOVER_TOOLONG: switchover took too much 
time. All STP ports restarted. 

This problem is resolved in software release 7.6(17). (CSCej37841)

The show trunk command displays regular VLANs although allowed VLANs were defined. This problem is resolved in software release 7.6(17). (CSCsc30173)

After doing a supervisor engine switchover, the default IP route is not cleared. This problem is seen under the following conditions:

1) On the active (slot 1) supervisor engine, configure two default routes.

2) On the active (slot 1) supervisor engine, enter the switch supervisor command.

3) On the newly active (slot 2) supervisor engine, enter the clear config all command.

4) On the active (slot 2) supervisor engine, add a route to an external network to ping the network.

4) On the active (slot 2) supervisor engine, enter the switch supervisor command.

5) On the newly active (slot 1) supervisor engine, the default IP route is still there.

Workaround: Manually clear the default IP route on the slot 1 supervisor engine. This problem is resolved in software release 7.6(17). (CSCei04333)

A switch running MST with high availability enabled might have stalled root information and mistakenly reuse the root information.

Workaround: Disable high availability. This problem is resolved in software release 7.6(17). (CSCsc37456)

You might experience a TLB (Load/Fetch) exception during booting when the Layer 3 cache is disabled and the diagnostic level is set to complete.

Workaround: Enable the Layer 3 cache or set the diagnostic level to minimal or bypass instead of complete. This problem is resolved in software release 7.6(17). (CSCsc91179)

The switch might fail to forward multicast traffic. This problem is resolved in software release 7.6(17). (CSCsc75774)

The supervisor engine might crash after accepting numerous SSH login attempts. This problem is resolved in software release 7.6(17). (CSCsc01175)

Adding a VLAN to the FWSM may cause inconsistencies in allowed and trunked VLANs. After the FWSM is reset, ports in the FWSM PortChannel might errdisable due to a channel misconfiguration. When this problem occurs, the following is displayed:

%DTP-5-TRUNKPORTON:Port 4/1 has become dot1q trunk %SYS-3-MOD_PORTINTFINSYNC:Port 
Interface in sync for Module 4 %ETHC-5-PORTTOSTP:Port 4/1 joined bridge port 4/1-6 
%DTP-5-TRUNKPORTON:Port 4/2 has become dot1q trunk %DTP-5-TRUNKPORTON:Port 4/3 has 
become dot1q trunk %DTP-5-TRUNKPORTON:Port 4/4 has become dot1q trunk 
%DTP-5-TRUNKPORTON:Port 4/5 has become dot1q trunk %ETHC-3-ONMODEFAIL:Port 4/5 
errdisabled, ON mode attributes mismatch %DTP-5-TRUNKPORTON:Port 4/6 has become dot1q 
trunk %ETHC-3-ONMODEFAIL:Port 4/6 errdisabled, ON mode attributes mismatch 
%ETHC-5-PORTTOSTP:Port 4/2 joined bridge port 4/1-6 %ETHC-5-PORTTOSTP:Port 4/3 joined 
bridge port 4/1-6 %ETHC-5-PORTTOSTP:Port 4/4 joined bridge port 4/1-6 
%DTP-5-NONTRUNKPORTON:Port 4/5 has become non-trunk %DTP-5-NONTRUNKPORTON:Port 4/6 has 
become non-trunk 

Workaround: Manually add/delete the VLANs to the individual ports. This problem is resolved in software release 7.6(17). (CSCsd15946)

After a switchover in a redundant system, a syslog message configured to be sent as a trap may not be sent as a trap. This problem is resolved in software release 7.6(17). (CSCsd23319)

Open and Resolved Caveats in Software Release 7.6(16)

These sections describe open and resolved caveats in supervisor engine software release 7.6(16):

Open Caveats in Software Release 7.6(16)

Resolved Caveats in Software Release 7.6(16)

Open Caveats in Software Release 7.6(16)

This section describes open caveats in supervisor engine software release 7.6(16):

Disabling one port in an EtherChannel removes the entire channel from STP. This problems occurs with MISTP and MST modes only; there is no problem with PVST+ and Rapid PVST+ modes. This problem is found in software releases 7.6(12) and later releases.

Workaround: When one of the ports in the channel goes down, disable and enable all the ports in the channel. (CSCsc34494)

With 802.1X authentication, if a high-availability switchover occurs during an authentication after the switchover completes, single authentication and port security are in the authenticated state, but the port might not get added to spanning tree. If this situation occurs, then the port would not receive Color Blocking Logic (CBLs) or Local Targeting Logic (LTLs). The show port security command shows that the port MAC address is secured but no MAC address is in the CAM table. (CSCin20244)

Resolved Caveats in Software Release 7.6(16)

This section describes resolved caveats in supervisor engine software release 7.6(16):

With redundant supervisor engines/MSFCs, MSFCs configured in DRM with both MSFCs using an administered MAC address on the VLAN interface, and MSFCs configured with HSRP and OSPF, there is no problem as long as both supervisor engines remain in the same chassis. If you remove the standby supervisor engine and install it in another chassis with a link between the two switches, you lose unicast communication between the MSFCs, as evidenced by the following problems:

Cannot ping between the physical IP addresses

OSPF does not come up

Problems with HSRP

When you enter the show cam system command on the initial chassis, you can see that the MAC address configured on the removed MSFC still points to port 16/1. As soon as the administered MAC address is removed from the VLAN interfaces on the removed MSFC, communication returns. This problem is resolved in software release 7.6(16). (CSCed20984)

Not all MST topology change events (TCs) are counted in the show spantree mod/port mst instance command output. The TCs are needed to determine the source and track the count of topology changes to troubleshoot excessive flooding. This problem is resolved in software release 7.6(16). (CSCsb11469)

After entering the set ip unreachable disable command, "destination unreachable" replies continue to be output from the switch. This problem is resolved in software release 7.6(16). (CSCsb56969)

In Rapid PVST+ mode, BPDUs might be sent with an incorrect age (1/256 of a second, instead of 1 second). This problem is resolved in software release 7.6(16). (CSCsc77642)

Open and Resolved Caveats in Software Release 7.6(15)

These sections describe open and resolved caveats in supervisor engine software release 7.6(15):

Open Caveats in Software Release 7.6(15)

Resolved Caveats in Software Release 7.6(15)

Open Caveats in Software Release 7.6(15)

This section describes open caveats in supervisor engine software release 7.6(15):

With 802.1X authentication, if a high-availability switchover occurs during an authentication after the switchover completes, single authentication and port security are in the authenticated state, but the port might not get added to spanning tree. If this situation occurs, then the port would not receive Color Blocking Logic (CBLs) or Local Targeting Logic (LTLs). The show port security command shows that the port MAC address is secured but no MAC address is in the CAM table. (CSCin20244)