Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(2)Ex

Available Languages

Download Options

PDF (807.8 KB)
View with Adobe Reader on a variety of devices

Updated:May 31, 2019

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(2)Ex

Contents

Cisco IOS Software Packaging

Cisco IOS Release Strategy

Support

System Requirements

Supported Hardware on Catalyst 4948E, Catalyst 4948E-F, and Catalyst 4900M Series Switches

Feature Support by Image Type

MIB Support

Features Not Supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches

Orderable Product Numbers

New and Changed Information

New Software Features in Release 15.2(2)E3

New Hardware Features in Release 15.2(2)E

New Software Features in IOS Release 15.2(2)E1

New Software Features in Release 15.2(2)E

New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E

Minimum and Recommended ROMMON Release

Limitations and Restrictions

Caveats

Cisco Bug Search Tool

Open Caveats for Cisco IOS Release 15.2(2)Ex

Resolved Caveats for Cisco IOS Release 15.2(2)E10

Resolved Caveats for Cisco IOS Release 15.2(2)E9

Resolved Caveats for Cisco IOS Release 15.2(2)E8

Resolved Caveats for Cisco IOS Release 15.2(2)E7

Resolved Caveats for Cisco IOS Release 15.2(2)E6

Resolved Caveats for Cisco IOS Release 15.2(2)E5a

Resolved Caveats for Cisco IOS Release 15.2(2)E5

Resolved Caveats for Cisco IOS Release 15.2(2)E4

Resolved Caveats for Cisco IOS Release 15.2(2)E3

Resolved Caveats for Cisco IOS Release 15.2(2)E2

Resolved Caveats for Cisco IOS Release 15.2(2)E1

Resolved Caveats for Cisco IOS Release 15.2(2)E

Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(2)Ex

Current release

IOS XE 3.6.10E—May 31, 2019

Prior releases
IOS 15.2(2)E9—September 12, 2018, IOS 15.2(2)E7—July 10, 2017, IOS 15.2(2)E5a—October 14, 2016, IOS 15.2(2)E5, IOS 15.2(2)E4, IOS 15.2(2)E3, IOS 15.2(2)E2, IOS 15.2(2)E1, IOS 15.2(2)E0—June 27, 2016

These release notes describe the features, modifications, and caveats for Cisco IOS Release 15.2(2)E on the Catalyst 4900M switch, the Catalyst 4948E Ethernet Switch, and the Catalyst 4948E-F Ethernet Switch.

Cisco Catalyst 4900M Series is a premium extension to the widely deployed Catalyst 4948 Series top of rack Ethernet switches for data center server racks. Optimized for ultimate deployment flexibility, the Catalyst 4900M Series can be deployed for 10/100/1000 server access with 1:1 uplink to downlink oversubscription, mix of 10/100/1000 and 10 Gigabit Ethernet servers or all 10 Gigabit Ethernet servers in the same rack. The Catalyst 4900M is a 320Gbps, 250Mpps, 2RU fixed configuration switch with
8 fixed wire speed X2 ports on the base unit and 2 optional half card slots for deployment flexibility and investment protection. Low latency, scalable buffer memory and high availability with 1+1 hot swappable AC or DC power supplies and field replaceable fans optimize the Catalyst 4900M for any size of data center.

With Cisco IOS Release 12.2(54)XO, Cisco introduced the Catalyst 4948E Ethernet Switch, which is the first Cisco Catalyst E-Series data center switch built from the start to deliver class-leading, full-featured server-access switching. The switch offers forty-eight 10/100/1000-Gbps RJ45 downlink ports and four 1/10 Gigabit Ethernet uplink ports and is designed to simplify data center architecture and operations by offering service provider-grade hardware and software in a one rack unit (1RU) form factor optimized for full-featured top-of-rack (ToR) data center deployments.

The Cisco Catalyst 4948E Ethernet Switch builds on the advanced technology of the Cisco Catalyst 4948 Switches, the most deployed ToR switch in the industry, with more than 10 million ports deployed worldwide. The Cisco Catalyst E-Series doubles the uplink bandwidth and offers true front-to-back airflow with no side or top venting. Stringent airflow management reduces data center operating costs by providing strict hot-aisle and cold-aisle isolation. Exceptional reliability and serviceability are delivered with optional internal AC and DC 1+1 hot-swappable power supplies and a hot-swappable fan tray with redundant fans.

With Cisco IOS Software Release 12.2(54)WO, Cisco extended the widely deployed Cisco Catalyst® 4948E Ethernet Switch to offer back-to-front airflow with the Cisco Catalyst 4948E-F Switch.

For more information on the Catalyst 4900M, Catalyst 4948E and Catalyst4948E-F Ethernet Switches, visit:

http://www.cisco.com/en/US/products/ps9310/index.html .

Note Although their Release Notes are unique, the platforms Catalyst 4900M/Catalyst 4948E/Catalyst 4948E-F and Catalyst 4500 leverage the same Software Configuration Guide, Command Reference Guide, and System Message Guide.

This publication consists of these sections:

Cisco IOS Software Packaging

The Enterprise Services image supports Cisco Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M Ethernet Switch Series software features based on Cisco IOS Software 15.1(2)SG, including enhanced routing. BGP capability is included in the Enterprises Services package.

The IP Base image supports Open Shortest Path First (OSPF) for Routed Access, Enhanced Interior Gateway Routing Protocol (EIGRP) "limited" Stub Routing, Nonstop Forwarding/Stateful Switchover (NSF/SSO), and RIPv1/v2. The IP Base image does not support enhanced routing features such as BGP, Intermediate System-to-Intermediate System (IS-IS), Full OSPF, Full Enhanced Interior Gateway Routing Protocol (EIGRP) & Virtual Routing Forwarding (VRF-lite).

The LAN Base image complements the existing IP Base and Enterprise Services images. It is focused on customer access and Layer 2 requirements and therefore many of the IP Base features are not required. The IP upgrade image is available if at a later date you require some of those features. The Cisco Catalyst 4900M Switch Series only supports the IP Base and Enterprise Services images.

Starting with Cisco IOS Release 15.0(2)SG, on Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F, support for NEAT feature has been extended from IP Base to LAN Base and support for HSRP v2 IPV6 has been extended from Enterprise Services to IP Base.

Starting with Cisco IOS Release 15.2(1)E, OSPF Routed Access in IP Base support rose to 1000 routes.

Note The default image for WS-4900M, WS-C4948E, and WS-C4948E-F is IP Base.

Cisco IOS Release Strategy

Customers with Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M series switches who need the latest hardware support and software features should migrate to Cisco IOS Release 15.2(2)E.

The Catalyst 4900M Series Switch has three maintenance trains: 15.0(2)SGx, 15.1(2)SGx, and 15.2(2)E. The Catalyst 4948E/E-F switches have two maintenance trains: 15.0(2)SGx and 15.1(2)SGx.

Figure 1 displays the three active trains, 12.2(53)SG, 15.0(2)SG and 15.1(2)SG.

Note Support for the Catalyst 4900M platform was introduced in Cisco IOS 12.2(40)XO. Support for the Catalyst 4948E platform was introduced in Cisco IOS 12.2(54)XO. Support for the Catalyst 4948E-F platform was introduced in Cisco IOS 12.2(54)SG1.

Figure 1 Software Release Strategy for the Catalyst 4900M, Catalyst 4948E, Catalyst 4948E-F Series Switches

Support

Support for Cisco IOS Software Release 15.2(2)E follows the standard Cisco Systems® support policy, available at

http://www.cisco.com/en/US/products/products_end-of-life_policy.html

System Requirements

This section describes the system requirements on the Catalyst 4948E, Catalyst 4948E-F, and Catalyst 4900M Series Switches:

Supported Hardware on Catalyst 4948E, Catalyst 4948E-F,
and Catalyst 4900M Series Switches

The following table lists the hardware supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches.

For details on transceiver module compatibility, see the URL:

http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html

Table 1 Supported Hardware for Catalyst 4900M Series Switch
Product Number (append with “=” for spares)	Product Description
Product Number (append with “=” for spares)
WS-C4900M	Catalyst 4900M 8-port base system
WS-X4908-10G-RJ45	8-Port Wire-Speed 10 Gigabit Ethernet (RJ-45) Note This linecard is not supported on the Catalyst 4948E Ethernet Switch.
WS-X4920-GB-RJ45 (=)	Catalyst 4900M 20-port 10/100/1000 RJ-45 half card
WS-X4904-10GE (=)	Catalyst 4900M 4 port 10GbE half card with X2 interfaces
WS-X4908-10GE (=)	Catalyst 4900M 8 port 10GbE half card with X2 interfaces
WS-X4908-10G-RJ45	8 port 10 Gigabit linecard with 2 to 1 oversubscription
WS-X4994	Blank PS Cover
WS-X4994=	Blank PS Cover Spare
WS-X4993=	Spare Fan Tray
PWR-C49M-1000AC(=)	Catalyst 4900M AC Power Supply
PWR-C49M-1000AC/2	Catalyst 4900M AC Power Supply Redundant
PWR-C49M-1000DC(=)	Catalyst 4900M DC Power Supply
PWR-C49M-1000DC/2	Catalyst 4900M DC Power Supply Redundant
WS-X4992=	Catalyst 4900M Spare Fan Tray
WS-X4994	Blank PS Cover
WS-X4994=	Blank PS Cover Spare
WS-X4993=	Spare Fan Tray
CVR-X2-SFP=	TwinGig converter module

The following table lists the hardware supported on the Catalyst 4948E Ethernet Switch.

Table 2 Supported Hardware for Catalyst 4948E Ethernet Switch
Product Number (append with “=” for spares)	Product Description
Product Number (append with “=” for spares)
WS-C4948E	48x 10/100/1000(RJ45)+4x 10GbE(SFP+), no p/s
WS-C4948E-S	48x 10/100/1000(RJ45)+4x10GbE(SFP+), IP Base IOS, AC p/s
WS-C4948E-E	48x 10/100/1000(RJ45)+4x10GbE(SFP+), Ent Ser IOS, AC p/s
WS-C4948E-BDL	Green Bundle 10x WS-C4948E
PWR-C49E-300AC-R=	Catalyst 4948E 300WAC power supply (spare)
PWR-C49E-300AC-R/2	Catalyst 4948E 300WAC redundant power supply
PWR-C49-300DC=	Catalyst 4948E 300WDC power supply (spare)
PWR-C49-300DC/2	Catalyst 4948E 300WDC redundant power supply (spare)
WS-X4993-F(=)	Cisco Catalyst 4948E spare fan tray rear exhaust

The following table lists the hardware supported on the Catalyst 4948E-F Ethernet Switch.

Table 3 Supported Hardware for Catalyst 4948E-F Ethernet Switch
Product Number (append with “=” for spares)	Product Description
Product Number (append with “=” for spares)
WS-C4948E-F	48x 10/100/1000(RJ45)+4x 10GbE(SFP+), no p/s
WS-C4948E-F-S	48x 10/100/1000(RJ45)+4x10GbE(SFP+), IP Base IOS, AC p/s
WS-C4948E-F-E	48x 10/100/1000(RJ45)+4x10GbE(SFP+), Ent Ser IOS, AC p/s
WS-C4948E-F- BDL	Green Bundle 10x WS-C4948E
PWR-C49E-300AC-F=	Catalyst 4948E 300WAC power supply (spare)
PWR-C49E-300AC-F/2	Catalyst 4948E 300WAC redundant power supply
WS-X4993-F(=)	Cisco Catalyst 4948E spare fan tray rear exhaust

The following table lists the DOM supported on the Catalyst 4900 Series switches.

Table 4 DOM Support on the Catalyst 4900 Series Switch applies to these module
Transceiver Module
CWDM- SFP-xx
DWDM-GBIC-xx
DWDM-SFP
DWDM-X2-xx
GLC-BX-D
GLC-BX-U
GLC-EX-SMD
SFP-10G-SR
SFP-10G-LR
SFP-10G-LRM
SFP-10G-ER
SFP-10G-ZR

Feature Support by Image Type

Note The default image for the Catalyst 4900M Series Switch is Cisco IOS Release 12.2(53)SG4. The default image for the Catalyst 4948E Ethernet Switch and the Catalyst 4948E-F Ethernet Switch is 12.2(54)SG1.

Table 5 lists the Cisco IOS software features for the Catalyst 4948E, Catalyst 4948E-F and Catalyst 4900M series switches. For the full list of supported features, check the Feature Navigator application:

http://tools.cisco.com/ITDIT/CFN/

Table 5 LAN Base, IP Base, and Enterprise Services Image Support on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Switches (The Cisco Catalyst 4900M Switch Series does not support the LAN Base license)
Feature	LAN Base	IP Base	Enterprise Services
2-way Community Private VLANs	No	Yes	Yes
8-Way CEF Load Balancing	No	Yes	Yes
10G Uplink Use	Yes	Yes	Yes
AAA Server Group	Yes	Yes	Yes
ACL Logging	Yes	Yes	Yes
ANCP Client	No	Yes	Yes
ANSI TIA-1057 LLDP - MED Location Extension	Yes	Yes	Yes
ANSI TIA-1057 LLDP - MED Support	Yes	Yes	Yes
AppleTalk 1 and 2 (not supported on Sup 6-E and 6L-E)	No	No	Yes
Auto Configuration	Yes	Yes	Yes
Auto SmartPorts	Yes	Yes	Yes
AutoQoS	Yes	Yes	Yes
Auto-MDIX	Yes	Yes	Yes
Auto-Voice VLAN (part of Auto QoS)	No	Yes	Yes
Bidirectional Forwarding Detection (BFD) Hardware Offload Support	No	Yes	Yes
BFD - EIGRP Support	No	Yes	Yes
BFD - Static Route Support over IPv4	No	Yes	Yes
BFD IPv6 Encapsulation Support	No	Yes	Yes
BGP Support for BFD	No	No	Yes
BGP	No	No	Yes
BGP 4	No	No	Yes
BGP 4 4Byte ASN (CnH)	No	No	Yes
BGP 4 Multipath Support	No	No	Yes
BGP 4 Prefix Filter and In-bound Route Maps	No	No	Yes
BGP Conditional Route Injection	No	No	Yes
BGP Link Bandwidth	No	No	Yes
BGP Neighbor Policy	No	No	Yes
BGP Prefix-Based Outbound Route Filtering	No	No	Yes
BGP Route-Map Continue	No	No	Yes
BGP Route-Map Continue Support for Outbound Policy	No	No	Yes
BGP Route-Map Policy List Support	No	No	Yes
BGP Soft Reset	No	No	Yes
BGP Wildcard	No	No	Yes
Bidirectional PIM (IPv4 only)	No	Yes	Yes
BOOTP	Yes	Yes	Yes
Bootup GOLD	No	Yes	Yes
Broadcast/Multicast Suppression	Yes	Yes	Yes
Call Home	No	Yes	Yes
CDP/CDPv2	Yes	Yes	Yes
CDP Bypass	Yes	Yes	Yes
CFM	Yes	Yes	Yes
CGMP - Cisco Group Management Protocol	Yes	Yes	Yes
Cisco IOS Scripting w/Tcl	Yes	Yes	Yes
CiscoView Autonomous Device Manager (ADP)	Yes	Yes	Yes
CNS	Yes	Yes	Yes
Command Scheduler (Kron)	Yes	Yes	Yes
Community PVLAN support	No	Yes	Yes
Config File	Yes	Yes	Yes
Configuration Replace and Configuration Rollback	Yes	Yes	Yes
Configuration Rollback Confirmed Change	Yes	Yes	Yes
Copy Command	Yes	Yes	Yes
Console Access	Yes	Yes	Yes
Control Plane Policing (CoPP)	Yes	Yes	Yes
CoS to DSCP Map	Yes	Yes	Yes
CPU Optimization for Layer 3 Multicast Control Packets	Yes	Yes	Yes
Crashdump Enhancement¹	Yes	Yes	Yes
DAI (Dynamic ARP Inspection)	Yes	Yes	Yes
DBL (Dynamic Buffer Limiting) - Active Queue Management	Yes	Yes	Yes
Debug Commands	Yes	Yes	Yes
Device Management	Yes	Yes	Yes
DHCPv6 Relay Agent notification for Prefix Delegation	No	Yes	Yes
DHCP Client	Yes	Yes	Yes
DHCP Gleaning	No	Yes	Yes
DHCP Server	Yes	Yes	Yes
DHCP Snooping	Yes	Yes	Yes
DHCPv6 Ethernet Remote ID option	No	Yes	Yes
Diagnostics Tools	Yes	Yes	Yes
Digital Optical Monitoring (DOM)	Yes	Yes	Yes
DSCP to CoS Map	Yes	Yes	Yes
DSCP to egress queue mapping	Yes	Yes	Yes
DSCP/CoS via LLDP	Yes	Yes	Yes
Duplication Location Reporting Issue	No	Yes	Yes
Easy Virtual Network (EVN)	No	No	Yes
EIGRP	No	No	Yes
EIGRP Service Advertisement Framework	Yes	Yes	Yes
EIGRP Stub Routing	No	Yes	Yes
Embedded Event Manager (EEM) 3.2	No	Yes	Yes
Embedded Event Manager and EOT integration	No	Yes	Yes
Energywise Agentless SNMP support	Yes	Yes	Yes
Energywise Wake-On-Lan Support	Yes	Yes	Yes
EPoE	Yes	Yes	Yes
EtherChannel	Yes	Yes	Yes
Ethernet Management Port (Fa1 interface)²	Yes	Yes	Yes
Ethernet Operations, Administration, and Maintenance (OAM)	Yes	Yes	Yes
Event Log	Yes	Yes	Yes
FHRP - Enhanced Object Tracking of IP SLAs	Yes	Yes	Yes
FHRP - GLBP - IP Redundancy API	No	Yes	Yes
FHRP - HSRP - Hot Standby Router Protocol V2	No	Yes	Yes
FHRP - Object Tracking List	No	Yes	Yes
FIPS 140-2/3 Level 2 Certification	Yes	Yes	Yes
File Management	Yes	Yes	Yes
Flex Links+ (VLAN Load balancing)	Yes	Yes	Yes
Gateway Load Balancing Protocol (GLBP)	No	Yes	Yes
GOLD Online Diagnostics	Yes	Yes	Yes
HSRP - Hot Standby Router Protocol	No	Yes	Yes
HSRPv2 for IPv6 Global Address Support	No	Yes	Yes
HTTP TACAC+ Accounting support	Yes	Yes	Yes
Identity 4.1 ACL Policy Enhancements	Yes	Yes	Yes
Identity 4.2: MAB with Configurable User Name/Password	Yes	Yes	Yes
Identity 4.1 Network Edge Access Topology	Yes	Yes	Yes
ID 4.0 Voice VLAN assignment	Yes	Yes	Yes
ID 4.1 Filter ID and per use ACL	Yes	Yes	Yes
IEEE 802.1ab LLDP (Link Layer Discovery Protocol)	Yes	Yes	Yes
IEEE 802.1ab LLDP/LLDP-MED	Yes	Yes	Yes
IEEE 802.1ab LLDP enhancements (Layer 2 COS)	Yes	Yes	Yes
IEEE 802.1ag D8.1 standard Compliant CFM, Y.1731 multicast LBM / AIS / RDI / LCK, IP SLA for Ethernet	Yes	Yes	Yes
IEEE 802.1p Support	Yes	Yes	Yes
IEEE 802.1p Prioritization	Yes	Yes	Yes
IEEE 802.1p/802.1q	Yes	Yes	Yes
IEEE 802.1Q Tunneling	Yes	Yes	Yes
IEEE 802.1Q VLAN Trunking	Yes	Yes	Yes
IEEE 802.1s Multiple Spanning Tree (MST) Standard Compliance	Yes	Yes	Yes
IEEE 802.1w Spanning Tree Rapid Reconfiguration	Yes	Yes	Yes
IEEE 802.1x (Auth-Fail VLAN, Accounting)	Yes	Yes	Yes
IEEE 802.1x Critical Authorization for Voice and Data	Yes	Yes	Yes
IEEE 802.1x Flexible Authentication	Yes	Yes	Yes
IEEE 802.1x with Multiple authenticated, multi-host	Yes	Yes	Yes
IEEE 802.1x Open Authentication	Yes	Yes	Yes
IEEE 802.1x with User Distribution	Yes	Yes	Yes
IEEE 802.1x User Port Description	Yes	Yes	Yes
IEEE 802.1x VLAN Assignment)	Yes	Yes	Yes
IEEE 802.1x VLAN User Group Distribution	Yes	Yes	Yes
IEEE 802.1x Wake on LAN	Yes	Yes	Yes
IEEE 802.1x Agentless Audit Support	Yes	Yes	Yes
IEEE 802.1x Authenticator	Yes	Yes	Yes
IEEE 802.1x Fallback support	Yes	Yes	Yes
IEEE 802.1x Guest VLAN	Yes	Yes	Yes
IEEE 802.1x MIB Support	Yes	Yes	Yes
IEEE 802.1x Multi-Domain Auth with Voice VLAN Assignment	Yes	Yes	Yes
IEEE 802.1x Multi-Domain Authentication	Yes	Yes	Yes
IEEE 802.1x Private Guest VLAN	Yes	Yes	Yes
IEEE 802.1x Private VLAN Assignment	Yes	Yes	Yes
IEEE 802.1x RADIUS Accounting	Yes	Yes	Yes
IEEE 802.1x Radius-Supplied Session Timeout	Yes	Yes	Yes
IEEE 802.1x and MAB with ACL assignment	Yes	Yes	Yes
IEEE 802.3ad Link Aggregation (LACP)	Yes	Yes	Yes
IEEE 802.3ad Link Aggregation (LACP) Port-Channel Standalone Disable	Yes	Yes	Yes
IEEE 802.3ah and CFM Interworking	No	Yes	Yes
IEEE 802.3x Flow Control	Yes	Yes	Yes
IEEE 802.1x Web-Auth	Yes	Yes	Yes
IGMP Filtering	Yes	Yes	Yes
IGMP Querier	Yes	Yes	Yes
IGMP Snooping	Yes	Yes	Yes
IGMP Version 1	Yes	Yes	Yes
IGMP Version 2	Yes	Yes	Yes
IGMP Version 3	Yes	Yes	Yes
IGMPv3 Host Stack	Yes	Yes	Yes
Ingress Policing	Yes	Yes	Yes
Interface Access (Telnet, Console/Serial, Web)	Yes	Yes	Yes
Interface Templates	Yes	Yes	Yes
IOS Based Device Profiling	No	Yes	Yes
IP Enhanced IGRP Route Authentication	No	No	Yes
IP Event Dampening	Yes	Yes	Yes
IP Multicast Load Splitting across Equal-Cost Paths	No	Yes	Yes
IP Named Access Control List	Yes	Yes	Yes
IPv6 Tunnels (in software)	Yes	Yes	Yes
IP Routing	Yes	Yes	Yes
IP SLAs DHCP Operation	No	Yes	Yes
IP SLAs Distribution of Statistics	No	Yes	Yes
IP SLAs DNS Operation	No	Yes	Yes
IP SLAs FTP Operation	No	Yes	Yes
IP SLAs History Statistics	No	Yes	Yes
IP SLAs HTTP Operation	No	Yes	Yes
IP SLAs ICMP Echo Operation	No	Yes	Yes
IP SLAs ICMP Path Echo Operation	No	Yes	Yes
IP SLAs Multi Operation Scheduler	No	Yes	Yes
IP SLAs One Way Measurement	No	Yes	Yes
IP SLAs Path Jitter Operation	No	Yes	Yes
IP SLAs Random Scheduler	No	Yes	Yes
IP SLAs Reaction Threshold	No	Yes	Yes
IP SLAs Responder	Yes	Yes	Yes
IP SLAs Scheduler	No	Yes	Yes
IP SLAs SNMP Support	No	Yes	Yes
IP SLAs Sub-millisecond Accuracy Improvements	No	Yes	Yes
IP SLAs TCP Connect Operation	No	Yes	Yes
IP SLAs UDP Based VoIP Operation	No	Yes	Yes
IP SLAs UDP Echo Operation	No	Yes	Yes
IP SLAs UDP Jitter Operation	No	Yes	Yes
IP SLAs Video Operations	No	Yes	Yes
IP SLAs VoIP Threshold Traps	No	Yes	Yes
IP Unnumbered for VLAN-SVI interfaces	No	Yes	Yes
IPsecv3/IKEv2 (for management traffic only)	Yes	Yes	Yes
IPSG (IP Source Guard) v4	Yes	Yes	Yes
IPSG (IP Source Guard) v4 for Static Hosts	Yes	Yes	Yes
IPv4 Policy-Based Routing	No	No	Yes
IPv4 Policy-Based Routing with recursive next hop	No	No	Yes
IPv6 / v4 BFD with OSPF/ BGP/ EIGRP and Static	No	Yes	Yes
IPv6 Bootstrap Router (BSR) Scoped Zone Support	No	No	Yes
IPv6 First Hop Security (FHS): DHCPv6 Guard Lightweight DHCPv6 Relay Agent IPv6 Destination Guard IPv6 Snooping IPv6 Neighbor Discovery Multicast Suppression IPv6 Router Advertisement (RA) Guard	Yes	Yes	Yes
IPv6 First Hop Security (FHS) Phase 2: Binding table recovery Bulk Lease Query support from Lightweight DHCPv6 Relay Agent (LDRA) Neighbor Discovery (ND) Multicast Suppress Source and Prefix Guard³	Yes	Yes	Yes
IPv6 HSRP	No	Yes	Yes
IPv6 Interface Statistics	Yes	Yes	Yes
IPv6 IP SLAs (UDP Jitter, UDP Echo, ICMP Echo, TCP Connect)	No	Yes	Yes
IPv6 (Internet Protocol Version 6)	Yes	Yes	Yes
IPV6 MLD snooping V1 and V2	Yes	Yes	Yes
IPv6 Multicast	No	Yes	Yes
IPv6 Multicast: Bootstrap Router (BSR)	No	Yes	Yes
IPv6 Multicast: Multicast Listener Discovery (MLD) Protocol, Versions 1 and 2	No	Yes	Yes
IPv6 Multicast: PIM Accept Register	No	Yes	Yes
IPv6 Multicast: PIM Source-Specific Multicast (PIM-SSM)	No	Yes	Yes
IPv6 Multicast: PIM Sparse Mode (PIM-SM)	No	Yes	Yes
IPv6 Multicast: Routable Address Hello Option	No	Yes	Yes
IPv6 Neighbor Discovery	No	Yes	Yes
IPv6 OSPFv3 Fast Convergence	No	Yes⁴	Yes
IPv6 OSPFv3 NSF/SSO	No	Yes⁴	Yes
IPv6 Policy-Based Routing	No	No	Yes
Identity 4.1 Network Edge Access Topology	Yes	Yes	Yes
IPv6 RA Guard (Host Mode)	Yes	Yes	Yes
IPv6 Reformation	NA	Yes	Yes
IPv6 Routing - EIGRP Support	No	No	Yes
IPv6 Routing: OSPF for IPv6 (OSPFv3)	No	Yes⁴	Yes
IPv6 Routing: RIP for IPv6 (RIPng)	No	Yes	Yes
IPv6 Switching: CEFv6 Switched Automatic IPv4-compatible Tunnels (in software)	No	Yes	Yes
IPv6 Switching: CEFv6 Switched Configured IPv6 over IPv4 Tunnels (in software)	No	Yes	Yes
IPv6 Switching: CEFv6 Switched ISATAP Tunnels (in software)	No	Yes	Yes
IPv6 Tunneling: Automatic 6to4 Tunnels (in software)	No	Yes	Yes
IPv6 Tunneling: Automatic IPv4-compatible Tunnels (in software)	No	Yes	Yes
IPv6 Tunneling: IPv6 over IPv4 GRE Tunnels (in software)	No	Yes	Yes
IPv6 Tunneling: ISATAP Tunnel Support (in software)	No	Yes	Yes
IPv6 Tunneling: Manually Configured IPv6 over IPv4 Tunnels (in software)	No	Yes	Yes
IPv6 Virtual LAN Access Control List	Yes	Yes	Yes
ISIS for IPv4 and IPv6	No	No	Yes
ISL Trunk	Yes	Yes	Yes
Jumbo Frames	Yes	Yes	Yes
Layer 2 Control Packet	Yes	Yes	Yes
Layer 2 Protocol Tunneling (L2PT)	No	Yes	Yes
Layer 2 Traceroute	Yes	Yes	Yes
Layer 3 Multicast Routing (PIM SM, SSM, Bidir)	No	Yes	Yes
Link State Tracking	Yes	Yes	Yes
Local Web Auth	Yes	Yes	Yes
MAB (MAC Authentication Bypass) for Voice VLAN	Yes	Yes	Yes
MAC Address Filtering	Yes	Yes	Yes
MAC Based Access List	Yes	Yes	Yes
MAC Move and Replace	Yes	Yes	Yes
Medianet 2.0: AutoQoS SRND4 Macro	No	Yes	Yes
Medianet 2.0: Integrated Video Traffic Simulator (hardware-assisted IP SLA); IPSLA responder only	No	Yes	Yes
Medianet 2.0: Flow Metadata	No	Yes	Yes
Medianet 2.0: Media Service Proxy	No	Yes	Yes
Medianet 2.0: Media Monitoring (Performance Monitoring and Mediatrace)	No	Yes	Yes
Medianet: MSP and Metadata	No	No	Yes
Multicast BGP (MBGP)	No	No	Yes
Multicast HA (NSF/SSO) for IPv4&IPv6	No	Yes	Yes
Multicast Routing Monitor (MRM)	No	Yes	Yes
Multicast Source Discovery Protocol (MSDP)	Yes	Yes	Yes
Multicast VLAN Registration (MVR)	Yes	Yes	Yes
Multi-authentication and VLAN Assignment	Yes	Yes	Yes
Multi-VRF Support (VRF lite)	No	No	Yes
NAC - L2 IEEE 802.1x	Yes	Yes	Yes
NAC - L2 IP	Yes	Yes	Yes
ND Cache Limit/Interface	No	Yes	Yes
NEAT Enhancement: Re-Enabling BPDU Guard Based on User Configuration	Yes	Yes	Yes
Network Edge Access Topology (NEAT)	Yes	Yes	Yes
Network Time Protocol (NTP)	Yes	Yes	Yes
NMSP Enhancements GPS support for location Location at switch level Local timezone change Name value pair Priority settings for MIBs	No	Yes	Yes
Time Protocols (SNTP, TimeP) master	Yes	Yes	Yes
No. of QoS Filters No. of Security ACE	Yes (4K entries)	Yes	Yes
No Service Password Recovery	Yes	Yes	Yes
No. of VLAN Support	2048	4096	4096
NSF - BGP	No	No	Yes
NSF - EIGRP	No	Yes	Yes
NSF - OSPF (version 2 only)	No	Yes	Yes
NTP for IPv6	Yes	Yes	Yes
NTP for VRF aware	No	No	Yes
On Demand Routing (ODR)	No	No	Yes
OSPF	No	Yes⁴	Yes
OSPF v3 Authentication	No	Yes⁴	Yes
OSPF Flooding Reduction	No	Yes⁴	Yes
OSPF for Routed Access⁵	No	Yes	Yes
OSPF Incremental Shortest Path First (i-SPF) Support	No	Yes⁴	Yes
OSPF Link State Database Overload Protection	No	Yes⁴	Yes
OSPF Not-So-Stubby Areas (NSSA)	No	Yes⁴	Yes
OSPF Packet Pacing	No	Yes⁴	Yes
OSPF Shortest Paths First Throttling	No	Yes⁴	Yes
OSPF Stub Router Advertisement	No	Yes⁴	Yes
OSPF Support for BFD over IPv4	No	Yes⁴	Yes
OSPF Support for Fast Hellos	No	Yes⁴	Yes
OSPF Support for Link State Advertisement (LSA) Throttling	No	Yes⁴	Yes
OSPF Support for Multi-VRF on CE Routers	No	Yes⁴	Yes
OSPF Update Packet-Pacing Configurable Timers	No	Yes⁴	Yes
OSPFv3 BFD	No	Yes⁴	Yes
Out-of-band Management Port	Yes	Yes	Yes
Out-of-band Management Port - IPv6	Yes	Yes	Yes
PAgP	Yes	Yes	Yes
Passwords Password clear protection	Yes	Yes	Yes
PBR IPv6	Yes	Yes	No
Per Intf IGMP State Limit	Yes	Yes	Yes
Per Intf MrouteState Limit	Yes	Yes	Yes
Per-User ACL Support for 802.1X/MAB/Webauth users	Yes	Yes	Yes
Per-VLAN Learning	Yes	Yes	Yes
PIM Sparse Mode Version4	No	No	Yes
PIM Version 1	No	Yes	Yes
PM Version 2	No	Yes	Yes
PnP Agent	Yes	Yes	Yes
PnP Smart Install Proxy	Yes	Yes	Yes
Port Access Control List (PACL)	Yes	Yes	Yes
Port Monitoring (interface Stats)	Yes	Yes	Yes
Port Security	Yes (supports 1024 MACs)	Yes (supports 3072 MACs)	Yes (supports 3072 MACs)s
Post Status	Yes	Yes	Yes
Pragmatic General Multicast (PGM)	Yes	Yes	Yes
Private VLANs	Yes	Yes	Yes
Propagation of Location Info over CDP	Yes	Yes	Yes
PVLAN over EtherChannel	Yes	Yes	Yes
PVST+ (Per VLAN Spanning Tree Plus)	Yes	Yes	Yes
Q-in-Q	Yes	Yes	Yes
RACL	Yes	Yes	Yes
RADIUS/TACACS+ (AAA)	Yes	Yes	Yes
RADIUS Attribute 44 (Accounting Session ID) in Access Requests	Yes	Yes	Yes
RADIUS Change of Authorization	Yes	Yes	Yes
Rapid-Per-VLAN-Spanning Tree (Rapid-PVST)	Yes	Yes	Yes
Remote SPAN (RSPAN)	Yes	Yes	Yes
REP (Resilient Ethernet Protocol)	Yes	Yes	Yes
REP - No Edge Neighbor Enhancement	Yes	Yes	Yes
RIP v1	No	Yes	Yes
RMON	Yes	Yes	Yes
Role-Based Access Control CLI commands (RBAC)	Yes	Yes	Yes
RPVST+	Yes	Yes	Yes
RSPAN	Yes	Yes	Yes
Secure Copy (SCP)	Yes	Yes	Yes
Secure Shell SSH Version 1, 2 Server Support	Yes	Yes	Yes
Secure Shell SSH Version 1, 2 Client Support	Yes	Yes	Yes
Service Advertisement Framework (SAF)	No	No	Yes
Smart Install Director—Configuration-only Deployment and Smooth Upgrade	Yes	Yes	Yes
SmartPorts (Role based MACRO)	Yes	Yes	Yes
SMI Catalyst 4K Client	Yes	Yes	Yes
SNMP (Simple Network Management Protocol)	Yes	Yes	Yes
SNMPv3 (SNMP Version 3)	Yes	Yes	Yes
Source Port Filtering (Private VLAN)	Yes	Yes	Yes
Source Specific Multicast (SSM)	No	Yes	Yes
Source Specific Multicast (SSM) - IGMPv3,IGMP v3lite, and URD	Yes	Yes	Yes
Source Specific Multicast (SSM) Mapping	Yes	Yes	Yes
SPAN (# of sessions) – Port Mirroring	Yes (4 sessions)	Yes (16 bidirectional sessions)	Yes (16 bidirectional sessions)
SPAN ACL Filtering for IPv6	Yes	Yes	Yes
SSHv2/Secure Copy, FTP, SSL, Syslog, Sys Information	Yes	Yes	Yes
Static Route Support for BFD over IPv6	No	No	Yes
Static Routing (IPv4/IPv6)	Yes	Yes	Yes
Storm Control - Per-Port Multicast Suppression	Yes	Yes	Yes
Stub IP Multicast Routing	No	Yes	Yes
Sub-second UDLD	Yes	Yes	Yes
SVI (Switch Virtual Interface) Autostate Exclude	Yes	Yes	Yes
TACACS+	Yes	Yes	Yes
TACACS+ and Radius for IPv6-	Yes	Yes	Yes
Time-Based Access Lists	Yes	Yes	Yes
Time Domain Reflectometry (TDR)⁶	No	Yes	Yes
Time Protocols (SNTP, TimeP)	Yes	Yes	Yes
Traffic Mirroring (SPAN)	Yes	Yes	Yes
Trusted Boundary (LLDP & CDP Based)	Yes	Yes	Yes
TrustSec SGT/ SGA	No	Yes	Yes
Unicast Reverse Path Forwarding (uRPF)	Yes	Yes	Yes
UniDirectional Link Detection (UDLD)	Yes	Yes	Yes
Virtual Router Redundancy Protocol (VRRP) for IPv4	No	Yes	Yes
VLAN Access Control List (VACL)	Yes	Yes	Yes
VLAN Mapping (VLAN Translation)⁷	No	Yes	Yes
Voice VLAN	Yes	Yes	Yes
VRF-aware TACACS+	No	No	Yes
VRF-lite for IPv6 on OSPF/ BGP/ EIGRP	No	No	Yes
VTP (Virtual Trunking Protocol) Version 2	Yes	Yes	Yes
VTP version 3	Yes	Yes	Yes
WCCP Redirection on Inbound Interfaces	No	Yes	Yes
WCCP Version 2	No	Yes	Yes
XML-PI	Yes	Yes	Yes

^1.Supported only on Supervisor Engine 6-E and Supervisor Engine 6L-E

^2.Starting with Cisco IOS Release 12.2(46)SG

^3.When either Source or Prefix Guard for IPv6 is enabled, ICMPv6 packets are unrestricted on all Catalyst 4500 series switch platforms running IOS Cisco Release 15.2(1)E. All other traffic types are restricted.

^4.IP Base supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 200 dynamically learned routes.

^5.OSPF for Routed Access supports only one OSPFv2 and one OSPFv3 instance with a maximum number of 1000 dynamically learned routes.

^6.TDR is supported on 4948E(F) and WS-X4908-10GB-R.

^7.WS-C4948E-10GE does not support VLAN mapping.

MIB Support

For information on MIB support, please refer to this URL:

ftp://ftp.cisco.com/pub/mibs/supportlists/cat4000/cat4000-supportlist.html

Features Not Supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches

The following ACL types:

– Standard Xerox Network System (XNS) access list

– Extended XNS access list

– DECnet access list

– Protocol type-code access list

ADSL and Dial access for IPv6
AppleTalk EIGRP
Auto RP
AutoQoS - VoIP
Bridge groups
CEF Accounting
CER for E-911 Support
CFM CoS
Cisco-Port-QoS-MIB
Cisco IOS software IPX ACLs:

– <1200-1299> IPX summary address access list

Cisco IOS software-based transparent bridging (also called “fallback bridging”)
Connectionless (CLNS) routing; including IS-IS routing for CLNS. IS-IS is supported for IP routing only.
DLSw (data-link switching)
Global QoS (enable QoS)
HTTP Software Upgrade
IGRP (use EIGRP instead)
isis network point-to-point command
ISSU
Kerberos support for access control
LLDP HA
Lock and key
NAC L2 IP - Inaccessible authentication bypass
NAT-PT for IPv6
NSF with SSO
Packet Based Storm Control
Reflexive ACLs
MPLS and routing IP over an MPLS network
RPR
SMI Proxy
UniDirectional Link Routing (UDLR)

Orderable Product Numbers

Table 6 Orderable Product Numbers for the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Switches
Product Number	Description	Image
S49MES-15202E	Cisco Catalyst 4900 IOS ENTERPRISE SERVICES W/O CRYPTO	cat4500e-entservices-mz
S49EES-15202E	Cisco Catalyst 4900 IOS ENTERPRISE SERVICES W/O CRYPTO	cat4500e-entservices-mz
S49MESK9-15202E	Cisco CAT4900M IOS ENTERPRISE SERVICES SSH	cat4500e-entservicesk9-mz
S49EESK9-15202E	Cisco CAT4900 IOS ENTERPRISE SERVICES SSH	cat4500e-entservicesk9-mz
S49MIPB-15202E	Cisco CAT4900M IOS IP BASE W/O CRYPTO	cat4500e-ipbase-mz
S49EIPB-15202E	Cisco CAT4900 IOS IP BASE W/O CRYPTO	cat4500e-ipbase-mz
S49MIPBK9-15202E	Cisco CAT4900M IOS IP BASE SSH	cat4500e-ipbasek9-mz
S49EIPBK9-15202E	Cisco CAT4900 IOS IP BASE SSH	cat4500e-ipbasek9-mz
S49ELB-15202E	Cisco CAT4900 IOS LAN BASE W/O CRYPTO	cat4500e-lanbase-mz
S45ELBK9-15202E	Cisco CAT4900 IOS LAN BASE SSH	cat4500e-lanbasek9-mz

New and Changed Information

These sections describe the new and changed information for the Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches running Cisco IOS software:

New Software Features in Release 15.2(2)E3

The following table list the new features for Release IOS 15.2(2)E3:

Feature Name	Description
CDP Bypass	Authentication sessions are established in single and multi-host modes for IP Phones. However, if voice VLAN and 802.1x on an interface port is enabled, then CDP Bypass is enabled when the host mode is set to single or multi-host mode. Note By default the host mode is set to single mode in legacy mode and multi-authentication in the eedge mode. Use the following commands to configure CDP bypass: Switch> enable Switch# configure terminal Switch(config)# interface < interface-id > Switch(config-if)# switchport mode access Switch(config-if)# switchport voice vlan < vlan-id > Switch(config-if)# authentication port-control auto Switch(config-if)# authentication host-mode {single \| multi-host} Switch(config-if)# dot1x pae authenticator (LAN Base, IP Base, and Enterprise Services)

Feature Name

Description

CDP Bypass

Authentication sessions are established in single and multi-host modes for IP Phones. However, if voice VLAN and 802.1x on an interface port is enabled, then CDP Bypass is enabled when the host mode is set to single or multi-host mode.

Note By default the host mode is set to single mode in legacy mode and multi-authentication in the eedge mode.

Use the following commands to configure CDP bypass:

Switch> enable

Switch# configure terminal

Switch(config)# interface < interface-id >

Switch(config-if)# switchport mode access

Switch(config-if)# switchport voice vlan < vlan-id >

Switch(config-if)# authentication port-control auto

Switch(config-if)# authentication host-mode {single | multi-host}

Switch(config-if)# dot1x pae authenticator

(LAN Base, IP Base, and Enterprise Services)

New Hardware Features in Release 15.2(2)E

New passive CX1 assemblies: SFP-H10GB-CU1-5M, SFP-H10GB-CU2M, SFP-H10GB-CU2-5M
Support for SFP-H10GB-ACU7M, SFP-H10GB-ACU10M (active CX1 cable assemblies)
Support of breakout cable on the 10 GbE end for: QSFP-4SFP10G-CU1M, QSFP-4SFP10G-CU3M, QSFP-4SFP10G-CU5M
Support for Cisco SFP+ Active Optical Cables - Cisco SFP-10G-AOC1M Cisco SFP-10G-AOC2M Cisco SFP-10G-AOC3M, Cisco SFP-10G-AOC5M, Cisco SFP-10G-AOC7M, Cisco SFP-10G-AOC10M

New Software Features in IOS Release 15.2(2)E1

The following table list the new features for Release IOS 15.2(2)E1.

Feature Name	Description
Device Sensor	(LAN Base)
Policy Based Routing (PBR)	(IP Base)

New Software Features in Release 15.2(2)E

The following table list the new features for Release IOS XE 3.6.0E.

Feature Name	Description
Use this URL for the Cisco IOS XE Release 3E Documentation Roadmap Use this URL for the Cisco IOS Release 15E Documentation Roadmap	Provides quick and easy access to all relevant documentation for specific platforms. Look for Quick Links to Platform Documentation on the respective platform documentation pages. http://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-xe-3e/tsd-products-support-series-home.html : http://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-15-2e/tsd-products-support-series-home.html
Auto Security	Provides a single line CLI, to enable base line security features (Port Security, DHCP snooping, DAI).
DHCP Gleaning	Allows components to register and glean DHCP packets.This is a read--only DHCP functionality.
Embedded Event Manager (EEM) 4.0	Provides unique customization capabilities and event driven automation within Cisco products.
HSRP: Global IPv6 Address	Allows users to configure multiple non-link local addresses as virtual addresses. The Hot Standby Router Protocol (HSRP) ensures host-to-router resilience and failover, in case the path between a host and the first-hop router fails, or the first-hop router itself fails.
IPv6 Static Route support for Object Tracking	Allows an IPv6 Static Route to be associated with a tracked-object.
IPv6 PBR	Allows you to manually configure how the received packets should be routed. PBR allows you to identify packets by using several attributes and to specify the next hop or the output interface to which the packet should be sent. Note With IOS XE Release 3.6.0E and IOS 15.2(2)E, IPv6 PBR is not supported on Supervisor Engine 8-E.
MediaTrace 1.0	Provides the capability to diagnose Media Stream on top of various instrumentations in Cisco routers/switches and endpoints. Also addresses the MediaNet Video monitoring requirement to discover the signaling path and provides end-to-end diagnostics along the media stream routes
OSPFv3 Authentication Trailer	Provides a mechanism to authenticate Open Shortest Path First version 3 (OSPFv3) protocol packets as an alternative to existing OSPFv3 IPsec authentication.
PBR Support for Multiple Tracking Options	Extends the capabilities of object tracking using Cisco Discovery Protocol (CDP) to allow the policy-based routing (PBR) process to verify object availability by using additional methods.
Role-Based CLI Inclusive Views	Enables a standard CLI view including all commands by default.
Policy Based Routing: Recursive Next Hop	Enhances route maps to enable configuration of a recursive next-hop IP address that is used by policy-based routing (PBR).
Secure CDP	Allows you to select the type, length, value (TLV) fields that are sent on a particular interface to filter information sent through Cisco Discovery Protocol packets.
SMI Catalyst 4K Client	Enables a Catalyst 4k standalone switch acting as Smart Install Client. Note SMI Proxy is not supported.
WSMA Enhancements for wireless management	Allows you to reduce the reconnecting rates in an outage when device connections to the management server on wireless networks are disconnected unexpectedly.

New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E

The following new and modified software features are supported in Cisco IOS Release 15.2(1)E.

New Features:

eEdge integration with MACSEC

http://www.cisco.com/en/US/docs/ios-xml/ios/san/configuration/15-e/san-macsec.html

DHCP Gleaning

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-e/dhcp-gleaning.html

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/xe-3e/dhcp-xe-3e-book.html

Service Discovery Gateway

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dns/configuration/15-e/dns-15-e-book.html

802.1X support for trunk ports

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-e/config-ieee-802x-pba.html

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3e/sec-usr-8021x-xe-3e-book.html

Enhancements/Respins:

Commented IP Access List Entries

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-comm-ipacl.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-comm-ipacl.html

IPv6 ACL Extensions for Hop by Hop Filtering

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/ip6-acl-ext-hbh.html

ACL Sequence Numbering

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-seq-num.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-seq-num.html

ACL Support for Filtering IP Options

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-support-filter-ip-option.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-support-filter-ip-option.html

ACL - TCP Flags Filtering

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-create-filter-tcp.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-create-filter-tcp.html

ACL - Named ACL Support for Noncontiguous Ports on an Access Control Entry

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-named-acl-support-for-noncontiguous-ports.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-named-acl-support-for-noncontiguous-ports.html

IP Access List Entry Sequence Numbering

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-seq-num.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-seq-num.html

IOS ACL Support for filtering IP Options

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-support-filter-ip-option.html

ACL syslog Correlation

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-syslog.html

IP Named Access Control List

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/sec-acl-named.html

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/xe-3e/sec-acl-named.html

IPv6 PACL support

http://cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-e/ip6-pacl-supp.html

Cisco Data Collection Manager

http://www.cisco.com/en/US/docs/ios-xml/ios/bsdcm/configuration/15-e/bsdcm-15-e-book.html

SNMPv3 Community MIB Support

http://www.cisco.com/en/US/docs/ios-xml/ios/snmp/configuration/15-e/snmp-15-e-book.html

http://www.cisco.com/en/US/docs/ios-xml/ios/snmp/configuration/xe-3e/snmp-xe-3e-book.html

NETCONF XML PI

http://www.cisco.com/en/US/docs/ios-xml/ios/cns/configuration/15-e/cns-15-e-book.html

IPv6 PIM Passive

http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_pim/configuration/15-e/ip6-mcast-pim-pass.html

HSRP aware PIM

http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_pim/configuration/15-e/imc_hsrp_aware.html

OSPFv3 ABR Type 3 LSA Filtering

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-abr-type-3.html

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-dc-ignore.html

Graceful Shutdown Support for OSPFv3

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-gshutdown.html

OSPF Support for BFD over IPv4

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-bfd-ospf-ipv4-supp.html

BFD - VRF Support

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-vrf-supp.html

BFD - Static Route Support

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-bfd-static-route-supp.html

Static Route Support for BFD over IPv6

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/ip6-bfd-static.html

BFD - EIGRP Support

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/irbfd-bfd-eigrp-supp.html

OSPFv3 BFD

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bfd/configuration/15-e/ip6-route-bfd-ospfv3.html

TACACS+ Per VRF

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_tacacs/configuration/15-e/sec-usr-tacacs-15-e-book.html

SSHv2 Enhancements

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_ssh/configuration/15-e/sec-secure-shell-v2.html

Client Information Signalling Protocol (CISP)

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-e/sec-ieee-neat.html

OSPFv3 MIB

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-mib.html

OSPF Non-stop Routing

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-nsr-ospf.html

OSPFv3 Max-Metric Router-Lsa

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/ip6-route-ospfv3-max-lsa.html

OSPFv3 VRF-Lite/PE-CE

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-vrf-lite-pe-ce.html

VRRPv3 Protocol Support

http://www.cisco.com/en/US/docs/ios-xml/ios/ipapp_fhrp/configuration/15-e/fhp-15-e-book_chapter_0100.html

IPv6 Source/Prefix Guard

http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ip6f-15-e-book_chapter_0110.html

IPv6 Router Advertisement Throttler

http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ip6f-15-e-book_chapter_0111.html

IPv6 Neighbor Discovery Multicast Suppress

http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ip6-nd-mcast-supp.html

IPv6 Destination Guard

http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_fhsec/configuration/15-e/ipv6-dest-guard.html

DHCPv6 Relay - Lightweight DHCPv6 Relay Agent

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-e/dhcp-ldra.html

DNS - VRF aware DNS

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dns/configuration/15-e/dns-15-e-book_chapter_01.html

DHCPv6 - Relay chaining for Prefix Delegation

http://www.cisco.com/en/US/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-e/dhcp-15e-book_chapter_010.html

OSPFv3 Retransmission Limits

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/command/ospf-i1.html

OSPFv3 RFC 3101 Support

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv3-nssa-cfg.html

OSPF support for NSSA RFC 3101

http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-ospfv2-nssa-cfg.html

TFTP IPv6 support

http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6_nman/configuration/15-e/ip6-tftp-supp.html

Capabilities Manager

http://www.cisco.com/en/US/docs/ios-xml/ios/saf/configuration/15-e/saf-capman.html

Extensible Messaging Client Protocol (XMCP) 2.0

http://www.cisco.com/en/US/docs/ios-xml/ios/saf/configuration/15-e/saf-xmcp.html

Minimum and Recommended ROMMON Release

Table 7 lists the minimum and recommended ROMMON releases for the Catalyst 4900M Series Switch, Catalyst 4948E Ethernet Switch, and Catalyst 4948E-F Ethernet Switch.

Table 7 Minimum and Recommended ROMMON Release for Catalyst 4900M,
Catalyst 4948E, and Catalyst 4948E-F
	Minimum ROMMON Release	Recommended ROMMON Release
Catalyst 4900M Switch	12.2(40r)XO	12.2(44r)SG5
Catalyst 4948E Ethernet Switch	12.2(44r)SG8	12.2(44r)SG8
Catalyst 4948E-F Ethernet Switch	12.2(44r)SG9	12.2(44r)SG9

Note ROMMON Release 12.2(44r)SG5 is the minimum required to run Cisco IOS Release 15.0(2)SG and is recommended for other releases.

Limitations and Restrictions

Following limitations and restrictions apply to the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches:

We recommend that you configure the access-session interface-template sticky timer timer-value command at the global or interface configuration mode, and not within the template.
Starting with Release IOS 15.1(1)SG, the seven RP restriction was removed
The WS-X4920-GB-RJ45 card performs at wire speed until it operates at 99.6% utilization. Beyond this rate, the card will lose some packets.
Compact Flash is not supported on a Cisco Catalyst 4900M switch running Cisco IOS Release 12.2(40)XO. Attempting to use Compact Flash may corrupt your data.
IP classful routing is not supported; do not use the no ip classless command; it will have no effect, as only classless routing is supported. The command ip classless is not supported as classless routing is enabled by default.
A Layer 2 LACP channel cannot be configured with the spanning tree PortFast feature.
Netbooting using a boot loader image is not supported. See the “Related Documentation” section for details on alternatives.
An unsupported default CLI for mobile IP is displayed in the HSRP configuration. Although this CLI will not harm your system, you might want to remove it to avoid confusion.

Workaround: Display the configuration with the show standby command, then remove the CLI. Here is sample output of the show standby GigabitEthernet1/1 command:

switch(config)# interface g1/1

switch(config)# no standby 0 name (0 is hsrp group number)

For HSRP “preempt delay” to function consistently, you must use the standby delay minimum command. Be sure to set the delay to more than 1 hello interval, thereby ensuring that a hello is received before HSRP leaves the initiate state.

Use the standby delay reload option if the router is rebooting after reloading the image.

You can run only.1q-in-.1q packet pass-through with the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches.
For PVST, on the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches VLANs, Cisco IOS Release 12.2(54)SG supports a maximum of 3000 spanning tree port instances. If you want to use more than this number of instances, you should use MST rather than PVST.
Because the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches support the FAT file system, the following restrictions apply:

– The verify and squeeze commands are not supported.

– The rename command is supported in FAT file system.

For the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches, the rename command has been added for bootflash and slot0. For all other supervisor engines, the rename command is supported for nvram devices only.

– the fsck command is supported for slot0 device. It is not supported in the file systems on supervisor engines other than 6-E.

– In the FAT file system, the IOS format bootflash: command erases user files only. It does not erase system configuration.

– The FAT file system supports a maximum of 63 characters for file/directory name. The maximum for path length is 127 characters.

– The FAT file system does not support the following characters in file/directory names:{}#%^ and space characters.

– The FAT file system honors the Microsoft Windows file attribute of "read-only" and "read-write", but it does not support the Windows file "hidden" attribute.

– Supervisor Engine 6-E uses the FAT file system for compact flash (slot0). If a compact flash is not formatted in FAT file system (such as compact flash on a supervisor engine other than 6-E), the switch does not recognize it.

If an original packet is dropped due to transmit queue shaping and/or sharing configurations, a SPAN packet copy can still be transmitted on the SPAN port.
All software releases support a maximum of 32,768 IGMP snooping group entries.
Use the no ip unreachables command on all interfaces with ACLs configured for performance reasons.
The threshold for the Dynamic Arp Inspection err-disable function is set to 15 ARP packets per second per interface. You should adjust this threshold depending on the network configuration. The CPU should not receive DHCP packets at a sustained rate greater than 1000 pps.
If you first configure an IP address or IPv6 address on a Layer 3 port, then change the Layer 3 port to a Layer 2 port with the switchport command, and finally change it back to a Layer 3 port, the original IP/IPv6 address will be lost.
If the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches request information from the Cisco Secure Access Control Server (ACS) and the message exchange times out because the server does not respond, a message similar to this appears:

00:02:57: %RADIUS-4-RADIUS_DEAD: RADIUS server 172.20.246.206:1645,1646 is not responding.

If this message appears, check that there is network connectivity between the switch and the ACS. You should also check that the switch has been properly configured as an AAA client on the ACS.

For IP Port Security (IPSG) for static hosts, the following apply:

– As IPSG learns the static hosts on each interface, the switch CPU may hit 100 per cent if there are a large number of hosts to learn. The CPU usage will drop once the hosts are learned.

– IPSG violations for static hosts are printed as they occur. If multiple violations occur simultaneously on different interfaces, the CLI displays the last violation. For example, if IPSG is configured for 10 ports and violations exist on ports 3,6 and 9, the violation messages are printed only for port 9.

– Inactive host bindings will appear in the device tracking table when either a VLAN is associated with another port or a port is removed from a VLAN. So, as hosts are moved across subnets, the hosts are displayed in the device tracking table as INACTIVE.

– Autostate SVI does not work on EtherChannel.

When ipv6 is enabled on an interface via any CLI, it is possible to see the following message:

% Hardware MTU table exhausted

In such a scenario, the ipv6 MTU value programmed in hardware will be different from the ipv6 interface MTU value. This will happen if there is no room in the hw MTU table to store additional values.

You must free up some space in the table by unconfiguring some unused MTU values and subsequently disable/re-enable ipv6 on the interface or reapply the MTU configuration.

To stop IPSG with Static Hosts on an interface, use the following commands in interface configuration submode:

Switch(config-if)# no ip verify source

Switch(config-if)# no ip device tracking max"

To enable IPSG with Static Hosts on a port, issue the following commands:

Switch(config)# ip device tracking ****enable IP device tracking globally

Switch(config)# ip device tracking max <n> ***set an IP device tracking maximum on int

Switch(config-if)# ip verify source tracking [port-security] ****activate IPSG on port

Caution

If you only configure the ip verify source tracking [port-security] interface configuration command on a port without enabling IP device tracking globally or setting an IP device tracking maximum on that interface, IPSG with Static Hosts will reject all the IP traffic from that interface.

Note The issue above also applies to IPSG with Static Hosts on a PVLAN Host port.

Class-map match statements using match ip prec | dscp match only IPv4 packets whereas matches performed with match prec | dscp match both IPv4 and IPv6 packets.
IPv6 QoS hardware switching is disabled if the policy-map contains IPv6 ACL and match cos in the same class-map with the ipv6 access-list has any mask range between /81 and /127. It results in forwarding packets to software which efficiently disable the QoS.
Management port does not support non-VRF aware features.
A Span destination of fa1 is not supported.
The "keepalive" CLI is not supported in interface mode on the switch, although it will appear in the running configuration. This behavior has no impact on functionality.
TDR is only supported on interfaces Gi1/1 through Gi1/48, at 1000BaseT under open or shorted cable conditions. TDR length resolution is +/- 10 m. If the cable is less than 10 m or if the cable is properly terminated, the TDR result displays "0" m. If the interface speed is not 1000BaseT, an "unsupported" result status displays. TDR results will be unreliable for cables extended with the use of jack panels or patch panels.
Upstream ports on the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches support flow control auto negotiation in 1G mode only, and flow control is forced in 10G mode. If the interface is configured to auto-negotiate the flow control, and the interface is operating in 10G mode, the system forces flow control to ON and does not auto-negotiate.
The following guidelines apply to Fast UDLD:

– Fast UDLD is disabled by default.

– Configure fast UDLD only on point-to-point links between network devices that support fast UDLD.

– You can configure fast UDLD in either normal or aggressive mode.

– Do not enter the link debounce command on fast UDLD ports.

– Configure fast UDLD on at least two links between each connected network device. This reduces the likelihood of fast UDLD incorrectly error disabling a link due to false positives.

– Fast UDLD does not report a unidirectional link if the same error occurs simultaneously on more than one link to the same neighbor device.

– The Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches support fast UDLD on a maximum of 32 ports.

A XML-PI specification file entry does not return the desired CLI output.

The outputs of certain commands, such as show ip route and show access-lists, contain non-deterministic text. While the output is easily understood, the output text does not contain strings that are consistently output. A general purpose specification file entry is unable to parse all possible output.

Workaround (1):

While a general purpose specification file entry may not be possible, a specification file entry might be created that returns the desired text by searching for text that is guaranteed to be in the output. If a string is guaranteed to be in the output, it can be used for parsing.

For example, the output of the show ip access-lists SecWiz_Gi3_17_out_ip command is this:

Extended IP access list SecWiz_Gi3_17_out_ip

10 deny ip 76.0.0.0 0.255.255.255 host 65.65.66.67

20 deny ip 76.0.0.0 0.255.255.255 host 44.45.46.47

30 permit ip 76.0.0.0 0.255.255.255 host 55.56.57.57

The first line is easily parsed because access list is guaranteed to be in the output:

The remaining lines all contain the term host. As a result, the specification file may report the desired values by specifying that string. For example, this line

will produce the following for the first and second rules

<rule>

deny

</rule>

and the following for the third statement

<rule>

permit

<rule>

Workaround (2):

Request the output of the show running-config command using NETCONF and parse that output for the desired strings. This is useful when the desired lines contain nothing in common. For example, the rules in this access list do not contain a common string and the order (three permits, then a deny, then another permit), prevent the spec file entry from using permit as a search string, as in the following example:

Extended MAC access list MACCOY

permit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalk

permit any host 65de.edfe.fefe xns-idp

permit any any protocol-family rarp-non-ipv4

deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanning

permit any any

The XML output of show running-config command includes the following, which can then be parsed programmatically, as desired:

<mac><access-list><extended><ACLName>MACCOY</ACLName></extended></access-list></mac>

<X-Interface> permit 0000.0000.ffef ffff.ffff.0000 0000.00af.bcef ffff.ff00.0000 appletalk</X-Interface>

<X-Interface> permit any host 65de.edfe.fefe xns-idp</X-Interface>

<X-Interface> permit any any protocol-family rarp-non-ipv4</X-Interface>

<X-Interface> deny host 005e.1e5d.9f7d host 3399.e3e1.ff2c dec-spanning</X-Interface>

<X-Interface> permit any any</X-Interface>

Although the Catalyst 4900M series switch still supports legacy 802.1X commands used in Cisco IOS Release 12.2(46)SG and earlier releases (that is, they are accepted on the CLI), they do not display in the CLI help menu.
Current IOS software cannot support filenames exceeding 64 characters.
Although you can configure subsecond PIM query intervals on Catalyst 4500 platforms, such an action represents a compromise between convergence (reaction time) and a number of other factors (number of mroutes, base line of CPU utilization, CPU speed, processing overhead per 1 m-route, etc.). You must account for those factors when configuring subsecond PIM timers. We recommend that you set the PIM query interval to a minimum of 2 seconds. By adjusting the available parameters, you can achieve flawless operation; that is, a top number of multicast routes per given convergence time on a specific setup.
With Cisco IOS Release 12.2(53)SG3 (and 12.2(54)SG), we changed the default behavior such that your single supervisor, RPR, or fixed configuration switch does not reload automatically. To configure automatic reload, you must enter the diagnostic fpga soft-error recover aggressive command. (CSCth16953)
The ROMMON version number column in the output of show module command is truncated.

Workaround: Use the show version command. CSCtr30294

IP SLA session creation fails randomly for various 4-tuples.

Workaround: Select an alternate destination or source port. CSCty05405

The system cannot scale to greater than 512 SIP flows with MSP and metadata enabled.

Workaround: None. CSCty79236

If a class-map is configured with exceed-action drop, re-configuring the same class-map with exceed-action transmit causes class-map configurations to conflict for the same class-map.

Workaround: If you plan to change a class-map action, such as exceed-action, you meed to remove the class-map with the no class c1 command under policy-map submode. Then, apply the new class-map with the updated changes. CSCsk70826)

When you enter the show policy-map vlan vlan command, unconditional marking actions that are configured on the VLAN are not shown.

Workaround: None. However, if you enter the show policy-map name, the unconditional marking actions are displayed. CSCsi94144

An IP unnumbered configuration is lost after a reload.

Workarounds: Do one of the following:

– After a reload, copy the startup-config to the running-config.

– Use a loopback interface as the target of the ip unnumbered command

– Change the CLI configuration such that during bootup, the router port is created first.

CSCsq63051

After posture validation succeeds, the following benign traceback messages may appear after you unconfigure the global RADIUS and IP device tracking commands:

%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.101 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8

%SM-4-BADEVENT: Event 'eouAAAAuthor' is invalid for the current state 'eou_abort': eou_auth 4.1.0.102 Traceback= 101D9A88 10B76BB0 10B76FE0 10B7A114 10B7A340 1066A678 106617F8

This applies to classic or E-series Catalyst 4500 supervisor engines running
Cisco IOS Release 12.2(50)SG

Workaround: None. CSCsw14005

On the Cisco Catalyst 4948E, Catalyst 4948E-F and the Catalyst 4900M series switches, the host's MAC address is not synchronized to the standby supervisor engine after you unconfigure 802.1X on the port and reconnect the host to a IP phone (with CDP port status TLV support) that is connected to the switch.

If the switch were to run a supervisor switchover while in this state, the host's MAC address would not be present in the new active supervisor engine’s MAC address table, causing possible connectivity interruption on the host.

Workaround: Enter the shutdown command, followed by the no shutdown command on the interface. This triggers relearning and synchronizing of the host's MAC to the standby supervisor engine. CSCsw91661

When multiple streams of CRC errors are encountered on a WS-C4900M configured with OAM Configuration of monitoring the errored frame seconds, OAM does not always report the value of errored frame seconds correctly.

To observe this issue, the following CLIs are configured with window size as the period for monitoring the errors and a low threshold equal to the number of CRC errored seconds seen/expected.

ethernet oam link-monitor frame-seconds window

ethernet oam link-monitor frame-seconds threshold low

Workaround: Configure a lower value of low threshold such that the frame errors are seen divided into the expected number of frame errored seconds. CSCsy37181

If time is not specified in the link debounce command, the default value depends on the supervisor engine. The default is 10 mS for the Catalyst 4948E, Catalyst 4948E-F, Catalyst 4900M, Supervisor Engine 6-E, and Supervisor Engine 6L-E. The default is 100 mS for all other supervisor engines.

Workaround: None. CSCte51948

Fast UDLD in aggressive mode may incorrectly errdisable a link in the following scenarios:

– Fast UDLD peer switch performs SSO.

– Fast UDLD peer switch is reloaded.

– One or more interfaces on a fast UDLD peer switch are shut down (or the port mode changes from switchport to routed, and vice versa).

Note To reduce the likelihood of this event, connect at least two physical interfaces between fast UDLD peer switches. You must configure the interfaces with the same neighbor fast hello interval.

Workarounds:

– Reset the error disabled links with the udld reset command.

– Configure error disable recovery with the commands errdisable recovery cause udld and
errdisable recovery interval value (between 30 and 86400 sec).

– Manually clear errdisable on the local interface with a shutdown then a no shutdown.

CSCtc99007

On a peer interface on a switch, if errdisabled mode flap detection is set to a very small number (such as 2 flaps in 10 sec), a 10GE link flap may cause the peer interface to enter the errdisabled state.

Workarounds: The Cisco switch default link-flap detection value is 5 flaps in 10 seconds. Use the default value or larger numbers. CSCtg07677

When you have enabled EPM logging and the client is authenticated via MAB or Webauth, the value of AUTHTYPE is DOT1X in EPM syslog messages irrespective of the authentication method.

Similarly, the show epm sessions command always displays the authentication method as DOT1X.

Workaround: To view the authentication method used for a client, enter the
show authentication sessions command. CSCsx42157

With CFM enabled globally as well as on an ingress interface, CFM packets received on the interface are not policed with hardware control plane policing.

Workaround: None. CSCso93282

When either the RADIUS-server test feature is enabled or RADIUS-server dead-criteria is configured, and either RADIUS-server deadtime is set to 0 or not configured, the RADIUS-server status is not properly relayed to AAA.

Workaround: Configure both dead-criteria and deadtime.

radius-server dead-criteria

radius-server deadtime

CSCtl06706

If a large number of VLAN mappings are configured, a member port might fail to join a port channel and no warning is issued.

Workaround: Reduce the number of VLAN mappings. CSCtn56208

If an interface whose IP address is being used as the Router ID is deleted or shuts down and you configure a service group with a multicast group-address, packet redirection to CE stops and packets are forwarded directly to the destination.

Workaround: Unconfigure and reconfigure the service group. CSCtn88087

When a sampling monitor is configured on a routed port or on a VLAN (an SVI with just one port as a member) and bidir multicast is enabled, a packet sample may be exported even though the original multicast packet was not forwarded by the switch.

This issue only impacts Catalyst 4948E and Catalyst 4948E-F Ethernet Switches.

Workaround: None. CSCtk97612

Global WCCP service configuration fails to enable (WCCP global config is accepted but nvgen fails) on a newly deployed switch if the switch is not enabled for SVI or a Layer 3 interface.

Workaround: Enable a Layer 3 interface in the running config. CSCsc88636.

When you enter the ip pim register-rate-limit command, the following error message displays:

'Failed to configure service policy on register tunnel' and 'STANDBY:Failed to configure service policy on register tunnel'.

Workaround: None. The ip pim register-rate-limit command does not function. CSCub32679

For packets with the same ingress and egress Layer 3 interface, ingress QoS marking policy does not work.

Workaround: Turn off ICMP redirect through the ip redirect command. CSCua71929

While configuring an IPv6 access-list, if you specify hardware statistics as the first statement in v6 access-list mode (i.e. before issuing any other v6 ACE statement), it will not take effect. Similarly, your hardware statistics configuration will be missing from the output of the show running command.

You will not experience this behavior with IPv4 access lists.

Workaround: During IPv6 access-list configuration, configure at least one IPv6 ACE before the "hardware statistics" statement. CSCuc53234

When an IPv6 FHS policy is applied on a VLAN and an EtherChannel port is part of that VLAN, packets received by EtherChannel (from neighbors) are not bridged across the local switch.

Workaround: Apply FHS policies on a non EtherChannel port rather than a VLAN. CSCua53148

Memory allocation failures can occur if more than 16K IPv6 multicast snooping entries are present.

Workaround: None. CSCuc77376

For any configuration where the source-interface keyword is used, if you provide an SVI that is associated with a secondary private VLAN, configuration involving the secondary VLAN may be lost when the switch is reloaded. In such scenarios, always use the primary private VLAN.
When a logging discriminator is configured and applied to a device, memory leak is seen under heavy syslog or debug output. The rate of the leak is dependent on the quantity of logs produced. In extreme cases, the device may crash. As a workaround, disable the logging discriminator on the device (CSCur45606, CSCur28336).

Caveats

Caveats describe unexpected behavior in Cisco IOS releases. Caveats listed as open in a prior release are carried forward to the next release as either open or resolved.

For the latest information on PSIRTS, refer to the Security Advisories on CCO at the following URL:

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a315.shtml

Cisco Bug Search Tool

The Bug Search Tool (BST), which is the online successor to Bug Toolkit, is designed to improve the effectiveness in network risk management and device troubleshooting. The BST allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data such as bug details, product, and version. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.

To view the details of a caveat listed in this document:

1. Access the BST (use your Cisco user ID and password) at https://tools.cisco.com/bugsearch/.

2. Enter the bug ID in the Search For: field.

Open Caveats for Cisco IOS Release 15.2(2)Ex

Bug ID	Headline
CSCvk16783	Standby Supervisor is continuously crashing after upgrading to throttle build.

Resolved Caveats for Cisco IOS Release 15.2(2)E10

Bug ID	Headline
CSCvn72973	Device is getting crashed on the "cts role-based enforcement"
CSCvo09436	Active supervisor crashing while DFE training on Standby SUP
CSCvp19855	Crash when removing police action from policy-map

Resolved Caveats for Cisco IOS Release 15.2(2)E9


Bug ID	Headline
CSCvb59372	Double-free of VTY context causes a software-forced crash.
CSCvd78456	Span config lost after reboot when using interface ranges.
CSCvd96099	DOT1X %DATACORRUPTION-1-DATAINCONSISTENCY: copy error session_mgr.
CSCve58352	Crash at the Ethernet Bridge Management Port.
CSCvg74926	Sending invalid LACP mac-ID, generates MULTIPLE_NEIGHBORS upstream.
CSCvg79459	Automate-tester does not send probes when the server is dead.
CSCvh04891	VSS Switch crash at boot time when CR (i.e. ' r') character is present in the startup-configuration.
CSCvh79168	Crash on numPolicersPerBank with Invalid policerBaseIndex.
CSCvh89534	DACL applied to the incorrect interface.
CSCvh95816	crash due to access list changes.
CSCvi06070	OSPF and BGP keeps flapping ever few seconds when BFD is enabled.
CSCvj25236	IPDT flapping after upgrade.
CSCvj29126	RADIUS client on network fails to solicit PAC key from CTS even though the device has a valid PAC.

Resolved Caveats for Cisco IOS Release 15.2(2)E8

Bug ID	Headline
CSCuw48618	NOVA: Switch crash in FFM with abort called from fib_entry_create_fed_version.
CSCuz11275	4500 Switch Crash after Enabling Performance Monitoring.
CSCva24325	NSF/SSO feature not honouring TCP MSS.
CSCve37498	Switch sends duplicate accounting message, that causing ISE to generate Misconfigured NAS Alarms.
CSCve54486	Crash when attempting to assign nonexistent/shutdown VLAN to 802.1x port.
CSCve80873	Service Policy disappears from 10G interface when neighbor port flaps, from 03.06.05.E & onwards.
CSCvf02423	C4500 - 03.06.06.E / 15.2(2)E6 - High CPU due to KxAclPathMan reprogr, KxAclPathMan update.
CSCvf61452	Spanning moves native vlan to inconnsistence state.
CSCvf76512	option 82 circuit-id-tag restricted by 6 bytes.
CSCvf83057	Interface flaps once after the port change status from admin down to up.
CSCvf96579	2960:AAARadius authentication fails with "switchport voice vlan dot1p" command.
CSCvg70852	Unknown MAC addresses appear on port when trying to authenticate using dot1x.

Resolved Caveats for Cisco IOS Release 15.2(2)E7

Bug ID	Headline
CSCty18171	SNMP poll of CISCO-PROCESS-MIB may cause high CPU and SNMP poll timeout.
CSCuu34535	Standby reloads on removing flow monitor.
CSCuv22571	Memory corruption crash in slaJitterPacketBuild.
CSCuv51581	SUP8-E / SUP7E crash on OIR.
CSCuw15256	IOS PKI: Certificate validation fails after reload.
CSCuy04823	%SYS-2-NOBLOCK Cat4k Mgmt HiPri and RkiosL2MatMan_clearDynamicEntries.
CSCuz89309	WS-X4648-RJ45V+E interface becomes unusable after INLINEPOWEROVERDRAWN.
CSCvd01598	Tacacs+ Timeout Retransmission is done 3 times prior marking server down.
CSCvd05307	Repeated spurious VFE TQ dhmParErr interrupt fill syslog and can cause reload.
CSCvd35291	Removal of "access-session template monitor" creates Drop MAC entries in CAM table.
CSCvd40845	Port based DHCP address allocation not working on C4000 switch.
CSCvd41611	4948E bfd status keep up even directly connected port is down.
CSCve04704	Session blocked in Pending Deletion state due to SM Accounting Feature.

Resolved Caveats for Cisco IOS Release 15.2(2)E6

No caveats were resolved in this release.

Resolved Caveats for Cisco IOS Release 15.2(2)E5a

Bug ID	Headline
CSCvb19326	NTP leap second addition is not working during leap second event
CSCuv87976	CLI Knob for handling leap second add/delete ignore/ handle
CSCvb29204	BenignCertain on IOS and IOS-XE

Resolved Caveats for Cisco IOS Release 15.2(2)E5

Identifier	Description
CSCut93424	CAT4500 - Flexible Netflow start/end time inaccuracy
CSCuy23874	4500: Auto-negotiation issue: port going to 100Mbps instead of 1Gbps
CSCuy52010	7940G phones learn mac in data vlan when EEE is disabled
CSCuy01942	wBulk dACL causes intermittent MAB Authentication with 4506 SUP_6
CSCuy19990	IOS 15.2 802.1x critical vlan feature - reinitialize is not working
CSCuw09327	Crash while config ACL- invalid mem access K5CpuEventCodeInputAclCopy
CSCuz02962	Increasing acl-ack-contexts for auth sessions causing memory exhaustion

Resolved Caveats for Cisco IOS Release 15.2(2)E4

Bug ID	Headline
CSCuv39850	Switch crashes @auth_mgr_show_method_status_list
CSCuv87875	Crash seen@Galios_newIosHeapMemoryRef on assigning DACL on reauth
CSCuw58095	AMUR MR3: SUP8E crash at dot1x_switch_handle_vlan_removal
CSCut57300	With sec ip in SVI, routed packet is not flooded back on incoming port
CSCut71405	IGMP packet not matched by ingress QoS policy if IGMP Snooping enabled
CSCuu85298	FIB/LFIB inconcistency after BGP flap
CSCuv07111	IOS and IOS-XE devices changing the next-hop on BGP route with own IP
CSCuu21448	ISIS Metric with Multiple instances using ciiCircLevelMetric OID
CSCuv15032	OBFL hasn't become enabled even "hw-module module 1 logging onboard"
CSCuu42267	vstack status shows duplicate entries for a single PID
CSCuv23475	CPUHOG and crash on "no network 0.0.0.0" with vnet configuration on intf
CSCuu68776	Multicast boundary filter-autorp broken / WS-C4500X / 15.2(1)E 15.2(3)E1
CSCuv00910	bgp afi1/safi1 and afi1/saf4 only peers in the same update-group
CSCuv16769	ISIS: Old path not deleted in Global RIB when new path is filtered out
CSCuv19773	"nmsp attach suppress" not being added into run-config on WS-C3850-24P
CSCuv31135	Disable connected-check in one side only makes route as unreachable
CSCuv32845	no message display even unable to allocate memory for vlan mapping
CSCuv46710	Segmentation Fault in Auth Manager
CSCuv50834	High CPU due to hung NMSP Session
CSCuw21115	4500/WS-X4724-SFP-E port flaps when GLC-GE-100FX is inserted
CSCuw34196	Ipv6 PBR not working on Cisco4948E
CSCuw36865	L2 switched traffic matched by L3 SVI VACL in the output direction
CSCuw39020	access-session vlan-assignment ignore-errors breaks dynamic vlan assign
CSCuv76906	"bfd" disappears after issuing "snmp-server host x.x.x.x ABC bfd"
CSCuw09006	Voice Vlan bocked with NEAT Configuration
CSCuw48407	47xx line card failing complete diagnostics after temp sensor failure
CSCuw73525	3650 DHCPv6 Guard does not block rogue DHCP server to provide IPv6 addr
CSCtz92812	"ip vrf Liin-vrf" in running-config on a VSS system
CSCub56668	Handle C4K_HWFLOWMAN-3-NFEINTERRUPTSTATUS: module: fi InterruptStatus:
CSCuj81067	memory leak in crypto_create_pkcs7_msg
CSCum41167	Importing multipath routes changes next-hop to 0.0.0.0 and traffic fails
CSCuw06202	Vstack Download-Config causes 4500 to become unresponsive
CSCuq36627	WAAS Express:Failed to create SSL session. (no available resources)
CSCuo93205	Enable SSL Server Identity Check during SSL handshake
CSCur28336	Memory leak and possible crash when using a logging discriminator
CSCtg15739	Failed sessions are not removed in multi-auth mode
CSCur45606	logging discriminator doesn't work
CSCtb44674	High CPU due to SA-MISS event caused by own mac address packets received
CSCuq46932	Crash on dhcpd_find_binding_by_hw
CSCuu77313	4948 - rxSymbolErrors and rxSequenceErrors incrementing
CSCuv19258	DACL may not work under IBNS 2.0
CSCuv47729	Packet gets flooded back to the ingress port, when a MEC port is down
CSCuv50669	Port-security blocks X/Y/38 port due to incorrect MAC address
CSCuw52729	Enabling auto qos causes "line vty 0 4" length set to 0
CSCux18867	4500 3.6.0 False port-security alarms on standby supervisor
CSCux38988	redundancy config-sync failures mcl define interface range adds fifth,

Resolved Caveats for Cisco IOS Release 15.2(2)E3

Bug ID	Headline
CSCut27272	CPUHOG and crash due to Auth Manager process
CSCur59242	Crash due to tplus_client_stop_timer
CSCus13924	Device crashes while configuring 'Identity' commands
CSCus79132	Dot1x authentication legacy behaviour broken
CSCuu92251	Removing auth mgr configs stops MAC learning on port (no MACs on MATM)
CSCut13064	BPDU filter does not work on output port when STP is disabled
CSCuq54573	Service Policy disappears from Running Configuration of the interface
CSCuq31722	The show platform software flood profile command caused SUP8 to crash
CSCur41104	Vlan-Mapping is broken for vlan-1 when the switch is reloaded
CSCut05808	UDP(1975) causes Error msg %IPC-2-INVALIDZONE
CSCum56902	Device crashes when classes removed from a policy-map
CSCus23125	MAC not learnt after removal of auth config
CSCuu50392	Auth Manager memory leak with ISE authentication
CSCut10251	Some commands are not in running-config after AUTOINSTALL finishes
CSCus47009	Switch does not increment the "Received on untrusted ports" DHCP counter
CSCuv06451	IOSd crash in eap_auth_terminal_state calling free_internal
CSCut11679	FFM memory leak is observed when WCCP flaps
CSCut20271	C3560X responds to ARP request from management port
CSCut79680	ip default-gateway is not seen in running-config after AUTOINSTALL
CSCut13753	ACLs not syncing to the member switches on stack reload or member reload
CSCup81878	Line by Line Sync fails while deleting dynamic NTP peer
CSCul73513	Server-client clock not in sync after leap configuration
CSCur58372	"snmp-server enable traps syslog" shows in "show run all" output after removal
CSCut87425	CPU hog in "EEM TCL Proc" after TCL script termination with long runtime
CSCuu48400	HW CoPP counters are not incrementing.
CSCuu22144	Vlan1 IP apply method inconsistencies across Static / DHCP / TFTP
CSCuu90639	IP address is missing by end of Autoinstall
CSCus13476	CSR handled only one MACSec interface's authentication
CSCup66629	Traceback @psecure_platform_delete_all_addrs on executing neg events
CSCus32213	CTS manual link does not come up
CSCum65703	Inconsistency on config "privilege" commands as seen in running-config
CSCui35423	DHCP bindings are not happening at first try
CSCum17258	EPM_SESS_ERR: Error in activating feature (EPM ACL PLUG-IN)
CSCun14713	Create new accounting session whenever the principal identity changes
CSCur09175	IPDT is turned on automatically even when dot1x configs are disabled
CSCus09761	IOS-Phone not placed in critical voice VLAN when AAA server is unreached
CSCuu82134	IBC:VSS-Predator: Active Predator went SMI upgrade but not standby
CSCuu97116	Acct messages should include Class attribute from authentication

Resolved Caveats for Cisco IOS Release 15.2(2)E2

Bug ID	Headline
CSCus75890	Switch does not resync to NTP server after clock set command or reload
CSCur48634	HA fails due to bulk synch failure with encrypted password
CSCus57511	Switch detects high temp, and SNMP trap causes shutdown
CSCug90126	Switch returns incorrect ciscoEnvMonSupplyState SNMP values for 6000/4200 W PSUU.
CSCul29298	Delayed detection of LinkDown message on peer interfaces
CSCuq80812	Incomplete ARP reply received on an active Flex Link port
CSCsv36934	BRIDGE-MIB query does not return information for inactive ports
CSCui99162	When IP device tracking is enabled, ARP probe response floods the VLAN
CSCtf75400	Wrong output for show platform software etherchannel port-channel n map
CSCup24975	Outage due to inconsistent software and hardware RX MTU threshold
CSCur58074	Some SFPs are not recognized when inserted into random ports on a switch
CSCuq04533	Cost for secondary VLANs is lost after each reload
CSCur21848	WCCP stops redirecting traffic when eighth port added to service group
CSCur84243	WS-X4640-CSFP-E ports (Tx) are disabled on start-up

Resolved Caveats for Cisco IOS Release 15.2(2)E1

Bug ID	Headline
CSCuc03836	Switch reports SYS-2-MALLOCFAIL error for a very large amount of memory
CSCum47115	EtherType 888e unicast can not pass 2960 with new releases
CSCum54321	(4900M, 4948-E) 4500E crashfile not saved
CSCum80951	TCAM is not sharing when same policy is applied to multiple interfaces
CSCun80959	Desg port on the RootBridge experienced block forward for 30 sec
CSCuo51767	REP preemption is not triggered with link state change
CSCuo80260	Call-home message fails; returns "Unknown" serial number
CSCuo89407	Problem with adding new ports to a channel group.
CSCup48832	Identical IPv6 DHCP remote ID for L2 ports running source-guard/snooping
CSCup96299	IPv6 Multicast RIB entry refer to wrong distance
CSCuq02796	4500X VSS failure after adding members to port-channel
CSCuq03562	PBR: Not working in XE 3.5.0E under IPBASE license
CSCuq10827	C3560X cHsrpGrpStandbyState is incorrect
CSCuq32728	3.6.0 - IP phones reboots continuously
CSCuq39071	Mcast packet loss when other receiver leaves group in IGMPv3
CSCuq44784	Mingla2: Storm-control on EC suspended post reload
CSCur00722	Hard Reset of the Active Sup cause switch to power cycle

Resolved Caveats for Cisco IOS Release 15.2(2)E

Bug ID	Headline
CSCta61825	Blocking of unknown multicast flooding breaks ARP resolution
CSCua89658	ctrlplane policing is not working when MLD snooping is enabled
CSCub44553	CPU spike seen while sending the multicast traffic to 10k Groups.
CSCub85948	Memory leak caused by CDP, LLDP or DHCP traffic
CSCuc65538	mcast dest mac incorrect on egress for packets ingressing a GR
CSCuf08112	Cat4k Active Sup crash with multi telnet session cli show power module

Notices

The following notices pertain to this software license.

OpenSSL/Open SSL Project

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit ( http://www.openssl.org/).

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).

This product includes software written by Tim Hudson (tjh@cryptsoft.com).

License Issues

The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact openssl-core@openssl.org.

OpenSSL License:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgment: “This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit ( http://www.openssl.org/)”.

4. The names “OpenSSL Toolkit” and “OpenSSL Project” must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact openssl-core@openssl.org.

5. Products derived from this software may not be called “OpenSSL” nor may “OpenSSL” appear in their names without prior written permission of the OpenSSL Project.

6. Redistributions of any form whatsoever must retain the following acknowledgment:

“This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit ( http://www.openssl.org/)”.

THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT “AS IS”' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).

Original SSLeay License:

This package is an SSL implementation written by Eric Young (eay@cryptsoft.com).

The implementation was written so as to conform with Netscapes SSL.

This library is free for commercial and non-commercial use as long as the following conditions are adhered to. The following conditions apply to all code found in this distribution, be it the RC4, RSA, lhash, DES, etc., code; not just the SSL code. The SSL documentation included with this distribution is covered by the same copyright terms except that the holder is Tim Hudson (tjh@cryptsoft.com).

Copyright remains Eric Young’s, and as such any Copyright notices in the code are not to be removed. If this package is used in a product, Eric Young should be given attribution as the author of the parts of the library used. This can be in the form of a textual message at program startup or in documentation (online or textual) provided with the package.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgement:

“This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)”.

The word ‘cryptographic’ can be left out if the routines from the library being used are not cryptography-related.

4. If you include any Windows specific code (or a derivative thereof) from the apps directory (application code) you must include an acknowledgement: “This product includes software written by Tim Hudson (tjh@cryptsoft.com)”.

THIS SOFTWARE IS PROVIDED BY ERIC YOUNG “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

The license and distribution terms for any publicly available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution license [including the GNU Public License].

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.

This document is to be used in conjunction with the documents listed in the “Related Documentation” section.

CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R)

Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(2)Ex

Available Languages

Download Options

Bias-Free Language

Table of Contents

Release Notes for Catalyst 4900M, Catalyst 4948E and Catalyst 4948E-F Series Switches, Cisco IOS Release 15.2(2)Ex

Contents

Cisco IOS Software Packaging

Cisco IOS Release Strategy

Support

System Requirements

Supported Hardware on Catalyst 4948E, Catalyst 4948E-F, and Catalyst 4900M Series Switches

Feature Support by Image Type

MIB Support

Features Not Supported on the Catalyst 4900M, Catalyst 4948E, and Catalyst 4948E-F Series Switches

Orderable Product Numbers

New and Changed Information

New Software Features in Release 15.2(2)E3

New Hardware Features in Release 15.2(2)E

New Software Features in IOS Release 15.2(2)E1

New Software Features in Release 15.2(2)E

New and Modified IOS Software Features Supported in Cisco IOS 15.2(1)E

Minimum and Recommended ROMMON Release

Limitations and Restrictions

Caveats

Cisco Bug Search Tool

Open Caveats for Cisco IOS Release 15.2(2)Ex

Resolved Caveats for Cisco IOS Release 15.2(2)E10

Resolved Caveats for Cisco IOS Release 15.2(2)E9

Resolved Caveats for Cisco IOS Release 15.2(2)E8

Resolved Caveats for Cisco IOS Release 15.2(2)E7

Resolved Caveats for Cisco IOS Release 15.2(2)E6

Resolved Caveats for Cisco IOS Release 15.2(2)E5a

Resolved Caveats for Cisco IOS Release 15.2(2)E5

Resolved Caveats for Cisco IOS Release 15.2(2)E4

Resolved Caveats for Cisco IOS Release 15.2(2)E3

Resolved Caveats for Cisco IOS Release 15.2(2)E2

Resolved Caveats for Cisco IOS Release 15.2(2)E1

Resolved Caveats for Cisco IOS Release 15.2(2)E

Related Documentation

Hardware Documents

Software Documentation

Cisco IOS Documentation

Notices

OpenSSL/Open SSL Project

License Issues

Obtaining Documentation and Submitting a Service Request

This document is to be used in conjunction with the documents listed in the “Related Documentation” section.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0711R)

Release Notes for the Catalyst 4900M and Catalyst 4948E Series Switch, Cisco IOS Release 15.2(1)ExCopyright © 2018, Cisco Systems, Inc. All rights reserved.

Was this Document Helpful?

Contact Cisco

This Document Applies to These Products

Supported Hardware on Catalyst 4948E, Catalyst 4948E-F,
and Catalyst 4900M Series Switches

Release Notes for the Catalyst 4900M and Catalyst 4948E Series Switch, Cisco IOS Release 15.2(1)Ex
Copyright © 2018, Cisco Systems, Inc. All rights reserved.