- Preface
- Overview
- Using the Command-Line Interface
- Assigning the Switch IP Address and Default Gateway
- Configuring Cisco IOS Configuration Engine
- Configuring MODBUS TCP
- Administering the Switch
- Configuring Switch Alarms
- Configuring Switch-Based Authentication
- Configuring SDM Templates
- Configuring IEEE 802.1x Port-Based Authentication
- Configuring Web-Based Authentication
- Configuring Interfaces
- Configuring Smartports Macros
- Configuring VLANs
- Configuring Private VLANs
- Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling
- Configuring STP
- Configuring MSTP
- Configuring Optional Spanning-Tree Features
- Configuring Resilient Ethernet Protocol
- Configuring Flex Links and the MAC Address-Table Move Update Feature
- Configuring DHCP Features and IP Source Guard
- Configuring Dynamic ARP Inspection
- Configuring LLDP and LLDP-MED
- Configuring IGMP Snooping and MVR
- Configuring Port-Based Traffic Control
- Configuring CDP
- Configuring UDLD
- Configuring SPAN and RSPAN
- Configuring RMON
- Configuring System Message Logging
- Configuring SNMP
- Configuring Embedded Event Manager
- Configuring Network Security with ACLs
- Configuring Control-Plane Security
- Configuring QoS
- Configuring EtherChannels and Link State Tracking
- Configuring IP Unicast Routing
- Configuring IPv6 Unicast Routing
- Configuring IPv6 MLD Snooping
- Configuring IPv6 ACLs
- Configuring HSRP
- Configuring Cisco IOS IP SLAs Operations
- Configuring Enhanced Object Tracking
- Configuring Ethernet OAM, CFM, and E-LMI
- Configuring IP Multicast Routing
- Configuring MSDP
- Troubleshooting
- Configuring Online Diagnostics
- Supported MIBs
- Working with the Cisco IOS File System, Configuration Files, and Software Images
- MODBUS TCP Registers
- Unsupported Commands in Cisco IOS Release 12.2(53)EX
Configuring SDM Templates
This chapter describes how to configure the Switch Database Management (SDM) templates on the Cisco CGS 2520 switch. SDM template configuration is supported only when the switch is running the IP services image.
Note
For complete syntax and usage information for the commands used in this chapter, see the command reference for this release.
Understanding the SDM Templates
If the switch is running the IP services image, you can use SDM templates to optimize system resources in the switch to support specific features, depending on how the switch is used in the network. The SDM templates allocate TCAM resources to support different features. You can use the SDM templates for IP Version 4 (IPv4) and select the default template to balance system resources or select the layer-2 template to support only Layer 2 features in hardware.
Note Switches running the CGS 2520 LAN base image support only the layer-2 template
- Layer-2—The layer-2 template maximizes system resources for Layer 2 functionality and does not support routing. You should use this template when the switch is being used for Layer-2 forwarding. When you select the layer-2 template on a switch running the IP services image, any routing is done through software, which overloads the CPU and severely degrades routing performance.
- Default—The default template gives balance to all functions: Layer 2 and Layer 3 (routing). This template is available only on switches running the IP services image. If you do not use the default template when routing is enabled on the switch, any routing is done through software, which overloads the CPU and severely degrades routing performance.
The dual IPv4 and IPv6 templates also enable a dual stack environment. See the “Dual IPv4 and IPv6 SDM Templates” section.
Table 9-1 shows the approximate number of each resource supported in each of the two IPv4 templates for a switch running the IP services image. The values in the template are based on eight routed interfaces and approximately 1024 VLANs and represent the approximate hardware boundaries set when a template is selected. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance.
|
|
|
|
|---|---|---|
IPv4 policy-based routing ACEs1 |
||
IPv4 or MAC QoS2 ACEs |
||
|
|
Dual IPv4 and IPv6 SDM Templates
You can select SDM templates to support IP Version 6 (IPv6). For more information about IPv6 and how to configure IPv6 routing, see Chapter39, “Configuring IPv6 Unicast Routing” For information about configuring IPv6 ACLs, see Chapter41, “Configuring IPv6 ACLs”
This software release does not support Policy-Based Routing (PBR) when forwarding IPv6 traffic. The software supports IPv4 PBR only when the dual-ipv4-and-ipv6 routing template is configured.
The dual IPv4 and IPv6 templates allow the switch to be used in dual stack environments (supporting both IPv4 and IPv6). Using the dual stack templates results in less TCAM capacity allowed for each resource. Do not use them if you plan to forward only IPv4 traffic.
These SDM templates support IPv4 and IPv6 environments:
- Dual IPv4 and IPv6 default template—supports Layer 2, multicast, routing, QoS, and ACLs for IPv4; and Layer 2, routing, and ACLs for IPv6 on the switch.
- Dual IPv4 and IPv6 routing template—supports Layer 2, multicast, routing (including policy-based routing), QoS, and ACLs for IPv4; and Layer 2, routing, and ACLs for IPv6 on the switch.
- Dual IPv4 and IPv6 VLAN template—supports basic Layer 2, multicast, QoS, and ACLs for IPv4, and basic Layer 2 and ACLs for IPv6 on the switch
This software release does not support IPv6 multicast routing, IPv6 QoS, or IPv6 Multicast Listener Discovery (MLD) snooping.
Note An IPv4 route requires only one TCAM entry. Because of the hardware compression scheme used for IPv6, an IPv6 route can take more than one TCAM entry, reducing the number of entries forwarded in hardware.
Table 9-2 defines the approximate feature resources allocated by each dual template. Template estimations are based on a switch with 8 routed interfaces and approximately 1000 VLANs.
|
|
|
|
|
|---|---|---|---|
IPv6 policy-based routing ACEs3 |
|||
|
|
Configuring the Switch SDM Template
Default SDM Template
The default template for a switch running the IP services image is the default template.
The default (and only) template supported on switches running the CGS 2520 LAN base image is the layer-2 template.
SDM Template Configuration Guidelines
Follow these guidelines when selecting and configuring SDM templates:
- You must reload the switch for the configuration to take effect.
- If you are using the switch for Layer 2 features only, select the layer-2 template.
- Do not use the default template if you do not have routing enabled on your switch. The sdm prefer default global configuration command prevents other features from using the memory allocated to unicast routing in the routing template.
- You should use the default template when you plan to enable routing on the switch. If you do not use the default template when routing is enabled, routing is done through software, which overloads the CPU and severely degrades routing performance.
- If you try to configure IPv6 features without first selecting a dual IPv4 and IPv6 template, a warning message is generated.
- Using the dual-stack templates results in less TCAM capacity allowed for each resource, so do not use if you plan to forward only IPv4 traffic.
Setting the SDM Template
Beginning in privileged EXEC mode, follow these steps to use the SDM template to select a template on a switch running the IP services image:
After the system reboots, you can use the show sdm prefer privileged EXEC command to verify the new template configuration. If you enter the show sdm prefer command before you enter the reload privileged EXEC command, the show sdm prefer command shows the template currently in use and the template that will become active after a reload.
This is an example of an output display when you have changed the template to the layer-2 template and have not reloaded the switch:
To return to the default template, use the no sdm prefer global configuration command.
This example shows how to configure a switch with the layer-2 template.
Displaying the SDM Templates
Use the show sdm prefer privileged EXEC command with no parameters to display the active template. Use the show sdm prefer [ default | dual-ipv4-and-ipv6 { default | routing | vlan } | layer-2 ] privileged EXEC command to display the resource numbers supported by the specified template.
This is an example of output from the show sdm prefer command, displaying the template in use:
This is an example of output from the show sdm prefer layer-2 command:
This is an example of output from the show sdm prefer dual-ipv4-and-ipv6 routing command:
Feedback