- Preface
- Using the Command-Line Interface
-
- IP Multicast Routing Technology Overview
- Configuring IGMP
- Configuring IGMP Proxy
- Constraining IP Multicast in Switched Ethernet
- Configuring PIM
- Configuring PIM MIB Extension for IP Multicast
- Configuring MSDP
- Configuring Wireless Multicast
- Configuring SSM
- Configuring Basic IP Multicast Routing
- Configuring Multicast Routing over GRE Tunnel
- Configuring the Service Discovery Gateway
- IP Multicast Optimization: Optimizing PIM Sparse Mode in a Large IP Multicast Deployment
- IP Multicast Optimization: Multicast Subsecond Convergence
- IP Multicast Optimization: IP Multicast Load Splitting across Equal-Cost Paths
- IP Multicast Optimization: SSM Channel Based Filtering for Multicast
- IP Multicast Optimization: PIM Dense Mode State Refresh
- IP Multicast Optimization: IGMP State Limit
-
- Configuring the Device for Access Point Discovery
- Configuring Data Encryption
- Configuring Retransmission Interval and Retry Count
- Configuring Adaptive Wireless Intrusion Prevention System
- Configuring Authentication for Access Points
- Converting Autonomous Access Points to Lightweight Mode
- Using Cisco Workgroup Bridges
- Configuring Probe Request Forwarding
- Optimizing RFID Tracking
- Configuring Country Codes
- Configuring Link Latency
- Configuring Power over Ethernet
-
- Preventing Unauthorized Access
- Controlling Switch Access with Passwords and Privilege Levels
- Configuring TACACS+
- MACsec Encryption
- Configuring RADIUS
- Configuring Kerberos
- Configuring Local Authentication and Authorization
- Configuring Secure Shell (SSH)
- X.509v3 Certificates for SSH Authentication
- Configuring Secure Socket Layer HTTP
- Configuring IPv4 ACLs
- Configuring IPv6 ACLs
- Configuring DHCP
- Configuring IP Source Guard
- Configuring Dynamic ARP Inspection
- Configuring IEEE 802.1x Port-Based Authentication
- Configuring Web-Based Authentication
- Configuring Port-Based Traffic Control
- Configuring IPv6 First Hop Security
- Configuring Cisco TrustSec
- Configuring Control Plane Policing
- Configuring Wireless Guest Access
- Managing Rogue Devices
- Classifying Rogue Access Points
- Configuring wIPS
- Configuring Intrusion Detection System
-
- Administering the Switch
- Boot Integrity Visibility
- Performing Device Setup Configuration
- Configuring Autonomic Networking
- Configuring Right-To-Use Licenses
- Configuring Administrator Usernames and Passwords
- Configuring 802.11 parameters and Band Selection
- Configuring Aggressive Load Balancing
- Configuring Client Roaming
- Configuring Application Visibility and Control
- Configuring Application Visibility and Control
- Configuring Location Settings
- Configuring Voice and Video Parameters
- Configuring RFID Tag Tracking
- Configuring Location Settings
- Cisco Hyperlocation
- Monitoring Flow Control
- Configuring SDM Templates
- Configuring System Message Logs
- Configuring Online Diagnostics
- Managing Configuration Files
- Configuration Replace and Configuration Rollback
- Working with the Flash File System
- Upgrading the Switch Software
- Conditional Debug and Radioactive Tracing
- Troubleshooting the Software Configuration
- Index
Configuring SDM Templates
- Finding Feature Information
- Information About Configuring SDM Templates
- How to Configure SDM Templates
- Monitoring and Maintaining SDM Templates
- Configuration Examples for SDM Templates
- Additional References for SDM Templates
- Feature History and Information for Configuring SDM Templates
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Information About Configuring SDM Templates
SDM Templates
You can use SDM templates to configure system resources to optimize support for specific features, depending on how your device is used in the network. You can select a template to provide maximum system usage for some functions.
-
Advanced—The advanced template is available on all supported images for this release. It maximizes system resources for features like netflow, multicast groups, security ACEs, QoS ACEs, and so on.
-
VLAN—The VLAN template is available only on the LAN Base license. The VLAN template disables routing and supports the maximum number of unicast MAC addresses. It would typically be selected for a Layer 2 device.
After you change the template and the system reboots, you can use the show sdm prefer privileged EXEC command to verify the new template configuration. If you enter the show sdm prefer command before you enter the reload privileged EXEC command, the show sdm prefer command shows the template currently in use and the template that will become active after a reload.
The default is the advanced template.
|
Resource |
Advanced |
VLAN |
|---|---|---|
|
Number of VLANs |
4094 |
4094 |
|
Unicast MAC addresses |
32 K |
32 K |
|
Overflow unicast MAC addresses |
512 |
512 |
|
IGMP groups and multicast routes |
4 K |
4 K |
|
Overflow IGMP groups and multicast routes |
512 |
512 |
|
32 K |
32 K |
|
|
8 K |
8 K |
|
|
Policy-based routing ACEs |
1024 |
0 |
|
QoS classification ACEs |
3 K |
3 K |
|
Security ACEs |
3 K |
3 K |
|
Netflow ACEs |
1024 |
1024 |
|
Input Microflow policer ACEs: |
256 K |
0 |
|
Output Microflow policer ACEs: |
256 K |
0 |
|
FSPAN ACEs |
256 |
256 |
|
Control Plane Entries: |
512 |
512 |
|
Input Netflow flows: |
8 K |
8 K |
|
Output Netflow flows: |
16 K |
16 K |
![]() Note | When the switch is used as a Wireless Mobility Agent, the only template allowed is the advanced template. |
![]() Note | SDM templates do not create VLANs. You must create the VLANs before adding commands to the SDM templates. |
The tables represent approximate hardware boundaries set when a template is selected. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance.
SDM Templates and Switch Stacks
In a switch stack, all stack members must use the same SDM template that is stored on the active switch. When a new switch is added to a stack, the SDM configuration that is stored on the active switch overrides the template configured on an individual switch.
You can use the show switch privileged EXEC command to see if any stack members are in SDM mismatch mode.
How to Configure SDM Templates
Configuring SDM Templates
Configuring the Switch SDM Template
Setting the SDM Template
Follow these steps to use the SDM template to maximize feature usage:
DETAILED STEPS
Monitoring and Maintaining SDM Templates
| Command | Purpose |
|---|---|
|
show sdm prefer |
Displays the SDM template in use. |
|
reload |
Reloads the switch to activate the newly configured SDM template. |
|
no sdm prefer |
Sets the default SDM template. |
![]() Note | The SDM templates contain only those commands that are defined as part of the templates. If a template enables another related command that is not defined in the template, then this other command will be visible when the show running config command is entered. For example, if the SDM template enables the switchport voice vlan command, then the spanning-tree portfast edge command may also be enabled (although it is not defined on the SDM template). If the SDM template is removed, then other such related commands are also removed and have to be reconfigured explicitly. |
Configuration Examples for SDM Templates
Examples: Configuring SDM Templates
This example shows how to configure the VLAN template:
Device(config)# sdm prefer vlan Device(config)# exit Device# reload Proceed with reload? [confirm]
Examples: Displaying SDM Templates
This is an example output showing the advanced template information:
Device# show sdm prefer
Showing SDM Template Info
This is the Advanced template.
Number of VLANs: 4094
Unicast MAC addresses: 32768
Overflow Unicast MAC addresses: 512
IGMP and Multicast groups: 8192
Overflow IGMP and Multicast groups: 512
Directly connected routes: 32768
Indirect routes: 8192
Security Access Control Entries: 3072
QoS Access Control Entries: 2816
Policy Based Routing ACEs: 1024
Netflow ACEs: 1024
Input Microflow policer ACEs: 256
Output Microflow policer ACEs: 256
Flow SPAN ACEs: 256
Tunnels: 256
Control Plane Entries: 512
Input Netflow flows: 8192
Output Netflow flows: 16384
These numbers are typical for L2 and IPv4 features.
Some features such as IPv6, use up double the entry size;
so only half as many entries can be created.
This is an example output showing the VLAN template information:
Device# show sdm prefer vlan Showing SDM Template Info This is the VLAN template for a typical Layer 2 network. Number of VLANs: 4094 Unicast MAC addresses: 32768 Overflow Unicast MAC addresses: 512 IGMP and Multicast groups: 8192 Overflow IGMP and Multicast groups: 512 Directly connected routes: 32768 Indirect routes: 8192 Security Access Control Entries: 3072 QoS Access Control Entries: 3072 Policy Based Routing ACEs: 0 Netflow ACEs: 1024 Input Microflow policer ACEs: 0 Output Microflow policer ACEs: 0 Flow SPAN ACEs: 256 Tunnels: 0 Control Plane Entries: 512 Input Netflow flows: 16384 Output Netflow flows: 8192 These numbers are typical for L2 and IPv4 features. Some features such as IPv6, use up double the entry size; so only half as many entries can be created. Device#
Additional References for SDM Templates
Related Documents
| Related Topic | Document Title |
|---|---|
| SDM command reference | System Management Command Reference (Catalyst 3850 Switches) |
| VLAN configuration guide | VLAN Configuration Guide (Catalyst 3850 Switches) |
Standards and RFCs
| Standard/RFC | Title |
|---|---|
| None | — |
MIBs
| MIB | MIBs Link |
|---|---|
| All supported MIBs for this release. |
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: |
Technical Assistance
| Description | Link |
|---|---|
|
The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. |
Feature History and Information for Configuring SDM Templates
Release |
Modification |
|---|---|
Cisco IOS XE 3.2SE |
This feature was introduced. |

Feedback