Release Notes for the Industrial Ethernet 4000 Switch, Cisco IOS Release 15.2(2)EA

December 23, 2014

 

Cisco IOS Release 15.2(2)EA runs on all Cisco Industrial Ethernet IE 4000 switches.

Cisco IOS Software Release 15.2(2)EA is part of the new software releases on Cisco IE 4000 Series Switches. This release delivers new software innovations in Industrial deployments that span across many technologies.

These release notes include important information about Cisco IOS Release15.2(2)EA, and any limitations, restrictions, and caveats that apply to it.

You can download the switch software from this site (registered Cisco.com users with a login password):

http://software.cisco.com/download/navigator.html

Contents

System Requirements

Hardware Supported

Switch Models Supported

Model
Description
Software Image

IE-4000-4TC4G-E

4 FE Combo DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-8T4G-E

8 FE Copper DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-8S4G-E

8 FE Fiber DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-4T4P4G-E

4 FE Copper DL ports + 4 FE Copper DL ports with POE, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-16T4G-E

16 FE Copper DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-4S8P4G-E

4 FE Fiber DL ports + 8 FE Copper DL ports with POE, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-8GT4G-E

8 GE Copper DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-8GS4G-E

8 GE Fiber DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-4GC4GP4G-E

4 GE Combo DL ports + 4 GE Copper DL ports with POE, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-16GT4G-E

16 GE Copper DL ports, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-8GT8GP4G-E

8 GE Copper DL ports + 8 GE Copper DL ports with POE, 4 GE combo UL ports, w/FPGA

LAN Base

IE-4000-4GS8GP4G-E

4 GE Fiber DL ports + 8 GE Copper DL ports with POE, 4 GE combo UL ports, w/FPGA

LAN Base

SFP Modules Supported

The SFP modules are switch Ethernet SFP modules that provide connections to other devices. Depending on the switch model, these field-replaceable transceiver modules provide uplink or downlink interfaces. The modules have LC connectors for fiber-optic connections.

You can use any combination of the supported SFP modules.

 

Table 1 SFP Modules

1 Gb SFP (for DL & UL)
Distance
Mode
DOM

GLC-SX-MM/ GLC-SX-MMD

220-550 m

MMF

SFP-GE-S

220-550 m

MMF

X

GLC-SX-MM-RGD

220-550 m

MMF

GLC-LH-SM/ GLC-LH-SMD

550m/10km

MMF/SMF

SFP-GE-L

550m/10km

MMF/SMF

X

GLC-LX-SM-RGD

550m/10km

MMF/SMF

GLC-T

100 m

CAT5

GLC-BX-U

10km

SMF

X

GLC-BX-D

10km

SMF

X

GLC-ZX-SM/ GLC-ZX-SMD

70km

SMF

X

GLC-EX-SMD

40km

SMF

X

SFP-GE-Z

70km

SMF

X

GLC-ZX-SM-RGD

70km

SMF

X

100 Mb SFP (for FE DL)
Distance
Fiber
DOM

GLC-FE-100FX

2km

MMF

GLC-FE-100FX-RGD

2km

MMF

GLC-FE-100LX

10km

SMF

GLC-FE-100LX-RGD

10km

SMF

GLC-FE-100BX-U

10km

SMF

GLC-FE-100BX-D

10km

SMF

GLC-FE-100EX

40km

SMF

GLC-FE-100ZX

80km

SMF

Express Setup Requirements

Hardware

  • 1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor
  • 1 gigabyte (GB) RAM (32-bit) or 2 GB RAM (64-bit)
  • 16 GB available hard disk space (32-bit) or 20 GB (64-bit)

Software

  • PC with Windows 7, or Mac OS 10.6.x
  • Web browser (Internet Explorer 9.0, 10.0, and 11.0; or Firefox minimum version 25, recommended version 32) with JavaScript enabled
  • Straight-through or crossover Category 5 or 6 cable

Express Setup verifies the browser version when starting a session, and it does not require a plug-in.

Upgrading the Switch License

The IE4000 is shipped with a Permanent “lanbase” license. This can be upgraded to an “ipservices” Evaluation or Permanent Right-To-Use (RTU) license using CLI commands.

Installation Notes

You can assign IP information to your switch by using these methods:

Software Features

For more information about the following new features for this release, please see the associated Configuration Guide here: http://www.cisco.com/c/en/us/td/docs/switches/lan/cisco_ie4000/software/release/15_2_2_ea/configuration/guide/scg-ie4000.html

Right-to-Use License

“Right to Use” (RTU) is a trust based licensing scheme designed to make life easier for customers. It is designed to give customers the flexibility to upgrade, downgrade, or move the license for RMA purpose by using simple EXEC CLI commands. As this is a “trust” based scheme, customer can pay for a certain number of licenses in advance, and then activate these flexibly across a full range of switches deployed provided the number of licenses does not exceed that number at any given time.

There are 2 main types of licenses used for the IE4000 - “Evaluation” and “Permanent RTU (PRTU)”. An “Evaluation” license allows the customer to evaluate an image for 60 days at no cost. A “Permanent RTU” license is a paid license with no expiration. A user is prompted to change to a permanent license before the evaluation license expires, with periodic reminders. This license is “in-built” in the image just like the current “Evaluation License” in the CISL model, so customers do not need to connect to Cisco servers to get a license. A PRTU license is not tied to a particular hardware. It can be deactivated from the old/swapped out hardware and activated on the replacement switch using the CLI.

Secure Boot

  • With the Secure Boot mechanism, software must be digitally signed and verified for authenticity and integrity prior to load and execution. This protects customers from running tampered software and safeguards revenue through software counterfeit protection.
  • The switch can be booted only with a timed key using valid IOS image.
  • Every IOS release will have the timing keys embedded inside the IOS image.

Dying Gasp

  • If there is a loss of power to the switch, it sends out “Dying Gasp” messages to the OAM center to notify about the situation.
  • These messages inform the downstream nodes about the loss of the switch, which helps routing recovery.

Smart Install

Smart Install is a plug-and-play configuration and software upgrade feature that provides zero-touch deployment for new switches. You can ship a switch to a location, place it in the network, and power it on with no configuration required on the device. For more information, see Smart Install Configuration Guide here: http://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install.html


Note IE 4000 can be a Smart Installation Director.


Limitations and Restrictions

You should review this section before you begin working with the switch. These are known limitations that will not be fixed, and there is not always a workaround. Some features might not work as documented, and some features could be affected by recent changes to the switch hardware or software.

Cisco IOS Limitations

IP

  • When the rate of received DHCP requests exceeds 2,000 packets per minute for a long time, the response time might be slow when you are using the console.

The workaround is to use rate limiting on DHCP traffic to prevent a denial of service attack from occurring. (CSCeb59166)

RADIUS

  • RADIUS change of authorization (COA) reauthorization is not supported on the critical auth VLAN.

There is no workaround. (CSCta05071)

SPAN and RSPAN

  • When the RSPAN feature is configured on a switch, Cisco Discovery Protocol (CDP) packets received from the RSPAN source ports are tagged with the RSPAN VLAN ID and forwarded to trunk ports carrying the RSPAN VLAN. When this happens a switch that is more than one hop away incorrectly lists the switch that is connected to the RSPAN source port as a CDP neighbor.

This is a hardware limitation. The workaround is to disable CDP on all interfaces carrying the RSPAN VLAN on the device connected to the switch. (CSCeb32326)

  • CDP, VLAN Trunking Protocol (VTP), and Port Aggregation Protocol (PAgP) packets received from a SPAN source are not sent to the destination interfaces of a local SPAN session. The workaround is to use the monitor session session_number destination { interface interface-id encapsulation replicate} global configuration command for local SPAN. (CSCed24036)

Spanning Tree Protocol

  • CSCtl60247

When a switch running Multiple Spanning Tree (MST) is connected to a switch running Rapid Spanning Tree Protocol (RSTP), the MST switch acts as the root bridge and runs per-VLAN spanning tree (PVST) simulation mode on boundary ports connected to the RST switch. If the allowed VLAN on all trunk ports connecting these switches is changed to a VLAN other than VLAN 1 and the root port of the RSTP switch is shut down and then enabled, the boundary ports connected to the root port move immediately to the forward state without going through the PVST+ slow transition.

There is no workaround.

VLAN

  • If the number of VLANs times the number of trunk ports exceeds the recommended limit of 13,000, the switch can fail.

The workaround is to reduce the number of VLANs or trunks. (CSCeb31087)

  • When line rate traffic is passing through a dynamic port, and you enter the switchport access vlan dynamic interface configuration command for a range of ports, the VLANs might not be assigned correctly. One or more VLANs with a null ID appears in the MAC address table instead.

The workaround is to enter the switchport access vlan dynamic interface configuration command separately on each port. (CSCsi26392)

  • When many VLANs are configured on the switch, high CPU utilization occurs when many links are flapping at the same time.

The workaround is to remove unnecessary VLANs to reduce CPU utilization when many links are flapping. (CSCtl04815)

Important Notes

Express Setup Notes

  • This browser setting is recommended for speeding up the time required to display Express Setup from Microsoft Internet Explorer:

1. Choose Tools > Internet Options .

2. Click Settings in the Temporary Internet files area.

3. From the Settings window, choose Automatically .

4. Click OK .

5. Click OK to exit the Internet Options window.

  • The HTTP server interface must be enabled to display Express Setup. By default, the HTTP server is enabled on the switch. Use the show running-config privileged EXEC command to see if the HTTP server is enabled or disabled.

Beginning in privileged EXEC mode, follow these steps to configure the HTTP server interface:

 

Command
Purpose

Step 1

configure terminal

Enters global configuration mode.

Step 2

ip http authentication {aaa | enable | local}

Configures the HTTP server interface for the type of authentication that you want to use.

  • aaa —Enables the authentication, authorization, and accounting feature. You must enter the aaa new-model interface configuration command for the aaa keyword to appear.
  • enable —Enables the password, which is the default method of HTTP server user authentication.
  • local —Specifies the local user database, as defined on the Cisco router or access server.

Step 3

end

Returns to privileged EXEC mode.

Step 4

show running-config

Verifies your entries.

  • Express Setup uses the HTTP protocol (the default is port 80) and the default method of authentication (the enable password) to communicate with the switch through any of its Ethernet ports and to allow switch management from a standard web browser.

If you change the HTTP port, you must include the new port number when you enter the IP address in the browser Location or Address field (for example, http://10.1.126.45:184 where 184 is the new HTTP port number). Write down the port number through which you are connected. Use care when changing the switch IP information.

If you are not using the default method of authentication (the enable password), you need to configure the HTTP server interface with the method of authentication used on the switch.

Beginning in privileged EXEC mode, follow these steps to configure the HTTP server interface:

 

Command
Purpose

Step 1

configure terminal

Enters global configuration mode.

Step 2

ip http authentication {enable | local | tacacs}

Configures the HTTP server interface for the type of authentication that you want to use.

  • enable —Enables the password, which is the default method of HTTP server user authentication.
  • local —Specifies the local user database, as defined on the Cisco router or access server.
  • tacacs —Specifies the TACACS server.

Step 3

end

Returns to privileged EXEC mode.

Step 4

show running-config

Verifies your entries.


Note If the Express Setup failed in the Web Browser, use the reset button to reset the switch to factor default


Caveats

The following sections provide information about caveats. You can click the issue number to view more information in the Cisco Bug Search tool (login required):

Open Caveats

.

Issue
Description

CSCur35236

RJ45 Link comes up on combo port with different Media Type on both sides

CSCuq21005

Spamming updates can cause inline-editing to become unresponsive

CSCuq83627

prp: Need syslog to display either LAN_A or LAN_B down

CSCuo68997

mini-USB drive not compatible to Window7 affect to IE users

CSCuo83410

Unqualified Weighted Tail Drop does not work correctly

Documentation Updates

Related Documentation

Installation, Configuration, Maintenance, and Operation Guides

http://www.cisco.com/en/US/products/ps11245/tsd_products_support_series_home.html

Online Help (available on the switch)

SFP Information

MIBs

Obtaining Documentation, Obtaining Support, and Security Guidelines

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation , which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.