Cisco Catalyst 9500

To Next Page

To Previous Page

System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)

270

BIOS Protection

Feature History for BIOS Protection

Main Page

Table of Contents4
Topic17
Topic18
Setting the System Clock27
Configuring the Time Zone27
Configuring Summer Time (Daylight Saving Time)28
Configuring NTP30
Default NTP Configuration30
Configuring NTP Authentication31
Configuring Poll-Based NTP Associations32
Configuring Broadcast-Based NTP Associations34
Configuring NTP Access Restrictions35
Configuring a System Name37
Setting up DNS38
Configuring a Message-Of-The-Day Login Banner40
Configuring a Login Banner41
Managing the MAC Address Table42
Changing the Address Aging Time42
Configuring MAC Address Change Notification Traps43
Configuring MAC Address Move Notification Traps45
Configuring MAC Threshold Notification Traps47
Disabling MAC Address Learning on VLAN49
Adding and Removing Static Address Entries50
Configuring Unicast MAC Address Filtering52
Monitoring and Maintaining Administration of the Device52
Configuration Examples for Device Administration53
Example: Setting the System Clock53
Examples: Configuring Summer Time54
Example: Configuring a MOTD Banner54
Example: Configuring a Login Banner54
Example: Configuring MAC Address Change Notification Traps55
Example: Configuring MAC Threshold Notification Traps55
Example: Adding the Static Address to the MAC Address Table55
Example: Configuring Unicast MAC Address Filtering56
Additional References for Device Administration56
Feature History for Device Administration56
Boot Integrity Visibility57
Information about Boot Integrity Visibility57
Verifying the Software Image and Hardware57
Verifying Platform Identity and Software Integrity58
Additional References for Boot Integrity Visibility61
Feature History for Boot Integrity Visibility61
Performing Device Setup Configuration63
Restrictions for Performing Device Setup Configuration63
Information about Performing Device Setup Configuration63
Device Boot Process63
Software Install Overview64
Software Boot Modes65
Installing the Software Package66
Terminating a Software Install66
Devices Information Assignment67
Default Switch Information67
DHCP-Based Autoconfiguration Overview67
DHCP Client Request Process68
DHCP-Based Autoconfiguration and Image Update69
Restrictions for DHCP-Based Autoconfiguration69
DHCP Autoconfiguration69
DHCP Auto-Image Update70
DHCP Server Configuration Guidelines70
Purpose of the TFTP Server71
Purpose of the DNS Server71
How to Obtain Configuration Files71
How to Control Environment Variables72
Common Environment Variables73
Environment Variables for TFTP74
Scheduled Reload of the Software Image75
How to Perform Device Setup Configuration75
Configuring DHCP Autoconfiguration (Only Configuration File)75
Configuring DHCP Auto-Image Update (Configuration File and Image)77
Configuring the Client to Download Files from DHCP Server80
Manually Assigning IP Information to Multiple Svis81
Modifying Device Startup Configuration83
Specifying a Filename to Read and Write a System Configuration83
Manually Booting the Switch84
Booting the Device in Installed Mode85
Booting a Device in Bundle Mode87
Configuring a Scheduled Software Image Reload87
Configuration Examples for Device Setup Configuration89
Examples: Displaying Software Bootup in Install Mode89
Example: Emergency Installation92
Example: Managing an Update Package93
Verifying Software Install103
Example: Configuring a Device as a DHCP Server106
Example: Configuring DHCP Auto-Image Update106
Example: Configuring a Device to Download Configurations from a DHCP Server107
Example: Scheduling Software Image Reload107
Additional References for Performing Device Setup108
Feature History for Performing Device Setup Configuration108
Configuring Smart Licensing109
Prerequisites for Configuring Smart Licensing109
Introduction to Smart Licensing109
Overview of CSSM110
Connecting to CSSM110
Linking Existing Licenses to CSSM112
Configuring a Connection to CSSM and Setting up the License Level112
Setting up a Connection to CSSM113
Configuring the Call Home Service for Direct Cloud Access115
Configuring the Call Home Service for Direct Cloud Access through an Https Proxy Server117
Configuring the Call Home Service for Cisco Smart Software Manager On-Prem119
Configuring the License Level121
Registering a Device on CSSM123
Generating a New Token from CSSM123
Registering a Device with the New Token125
Verifying the License Status after Registration125
Canceling a Device's Registration in CSSM127
Monitoring Smart Licensing Configuration128
Configuration Examples for Smart Licensing129
Example: Viewing the Call Home Profile129
Example: Viewing the License Information before Registering129
Example: Registering a Device132
Example: Viewing the License Status after Registering132
Additional References135
Feature History for Smart Licensing135
Configuring Application Visibility and Control in a Wired Network137
Information about Application Visibility and Control in a Wired Network137
Supported AVC Class Map and Policy Map Formats138
Restrictions for Wired Application Visibility and Control139
How to Configure Application Visibility and Control140
Configuring Application Visibility and Control in a Wired Network140
Enabling Application Recognition on an Interface141
Creating AVC Qos Policy142
Applying a Qos Policy to the Switch Port144
Configuring Wired AVC Flexible Netflow144
NBAR2 Custom Applications161
NBAR2 Dynamic Hitless Protocol Pack Upgrade164
Monitoring Application Visibility and Control165
Examples: Application Visibility and Control Configuration166
Basic Troubleshooting - Questions and Answers178
Additional References for Application Visibility and Control179
Feature History for Application Visibility and Control in a Wired Network179
Configuring SDM Templates181
Information about SDM Templates181
Customizable SDM Template181
Overview of Customizable SDM Template181
System Resource Allocation for Customizable SDM Template184
Customizable SDM Template and High Availability184
Customizable SDM Template and Stackwise Virtual185
Customizable SDM Template and ISSU185
SDM Templates and Switch Stacks185
How to Configure SDM Templates185
Setting the SDM Template185
Monitoring and Maintaining SDM Templates187
Configuration Examples for SDM Templates187
Examples: Displaying SDM Templates187
Examples: Configuring SDM Templates190
Additional References for SDM Templates190
Feature History for SDM Templates190
Configuring System Message Logs193
Information about Configuring System Message Logs193
System Messsage Logging193
System Log Message Format194
Default System Message Logging Settings195
Syslog Message Limits195
How to Configure System Message Logs196
Setting the Message Display Destination Device196
Synchronizing Log Messages197
Disabling Message Logging199
Enabling and Disabling Time Stamps on Log Messages200
Enabling and Disabling Sequence Numbers in Log Messages200
Defining the Message Severity Level201
Limiting Syslog Messages Sent to the History Table and to SNMP202
Logging Messages to a UNIX Syslog Daemon202
Monitoring and Maintaining System Message Logs204
Monitoring Configuration Archive Logs204
Configuration Examples for System Message Logs204
Example: Switch System Message204
Additional References for System Message Logs204
Feature History for System Message Logs204
Configuring Online Diagnostics207
Information about Configuring Online Diagnostics207
Generic Online Diagnostics (GOLD) Tests208
How to Configure Online Diagnostics215
Starting Online Diagnostic Tests215
Configuring Online Diagnostics216
Scheduling Online Diagnostics216
Configuring Health-Monitoring Diagnostics217
Monitoring and Maintaining Online Diagnostics220
Configuration Examples for Online Diagnostics221
Examples: Start Diagnostic Tests221
Example: Configure a Health-Monitoring Test221
Example: Schedule Diagnostic Test221
Examples: Displaying Online Diagnostics221
Additional References for Online Diagnostics223
Feature Information for Configuring Online Diagnostics223
Managing Configuration Files225
Prerequisites for Managing Configuration Files225
Restrictions for Managing Configuration Files225
Information about Managing Configuration Files225
Types of Configuration Files225
Configuration Mode and Selecting a Configuration Source226
Configuration File Changes Using the CLI226
Location of Configuration Files226
Copy Configuration Files from a Network Server to the Device227
Copying a Configuration File from the Device to a TFTP Server227
Copying a Configuration File from the Device to an RCP Server228
Copying a Configuration File from the Device to an FTP Server229
Copying Files through a VRF230
Copy Configuration Files from a Switch to Another Switch230
Configuration Files Larger than NVRAM231
Configuring the Device to Download Configuration Files231
How to Manage Configuration File Information232
Displaying Configuration File Information232
Modifying the Configuration File233
Copying a Configuration File from the Device to a TFTP Server234
What to Do Next235
Copying a Configuration File from the Device to an RCP Server235
Examples236
What to Do Next237
Copying a Configuration File from the Device to the FTP Server237
Examples238
What to Do Next239
Copying a Configuration File from a TFTP Server to the Device239
What to Do Next240
Copying a Configuration File from the Rcp Server to the Device240
Examples241
What to Do Next241
Copying a Configuration File from an FTP Server to the Device241
Examples242
What to Do Next243
Maintaining Configuration Files Larger than NVRAM243
Compressing the Configuration File243
Storing the Configuration in Flash Memory on Class a Flash File Systems245
Loading the Configuration Commands from the Network246
Copying Configuration Files from Flash Memory to the Startup or Running Configuration247
Copying Configuration Files between Flash Memory File Systems248
Copying a Configuration File from an FTP Server to Flash Memory Devices249
What to Do Next250
Copying a Configuration File from an RCP Server to Flash Memory Devices250
Copying a Configuration File from a TFTP Server to Flash Memory Devices251
Re-Executing the Configuration Commands in the Startup Configuration File252
Clearing the Startup Configuration252
Deleting a Specified Configuration File253
Specifying the CONFIG_FILE Environment Variable on Class a Flash File Systems254
What to Do Next255
Configuring the Device to Download Configuration Files256
Configuring the Device to Download the Network Configuration File256
Configuring the Device to Download the Host Configuration File257
Feature History for Managing Configuration Files259
C H a P T E261
Secure Copy261
Prerequisites for Secure Copy261
Information about Secure Copy261
Secure Copy Performance Improvements262
How to Configure Secure Copy262
Configuring Secure Copy262
Enabling Secure Copy on the SSH Server263
Configuration Examples for Secure Copy265
Example: Secure Copy Configuration Using Local Authentication265
Example: Secure Copy Server-Side Configuration Using Network-Based Authentication265
Additional References for Secure Copy266
Feature Information for Secure Copy266
Configuration Replace and Configuration Rollback269
Prerequisites for Configuration Replace and Configuration Rollback269
Restrictions for Configuration Replace and Configuration Rollback270
Information about Configuration Replace and Configuration Rollback270
Configuration Archive270
Configuration Replace271
Configuration Rollback272
Configuration Rollback Confirmed Change272
Benefits of Configuration Replace and Configuration Rollback272
How to Use Configuration Replace and Configuration Rollback273
Creating a Configuration Archive273
Performing a Configuration Replace or Configuration Rollback Operation274
Monitoring and Troubleshooting the Feature277
Configuration Examples for Configuration Replace and Configuration Rollback279
Creating a Configuration Archive279
Replacing the Current Running Configuration with a Saved Cisco IOS Configuration File279
Reverting to the Startup Configuration File280
Performing a Configuration Replace Operation with the Configure Confirm Command280
Performing a Configuration Rollback Operation280
Additional References for Configuration Replace and Configuration Rollback281
Feature History for Configuration Replace and Configuration Rollback282
C H a P T E283
BIOS Protection283
Introduction to BIOS Protection283
ROMMON Upgrade283
Capsule Upgrade284
Feature History for BIOS Protection285
C H a P T E287
Software Maintenance Upgrade287
Restrictions for Software Maintenance Upgrade287
Information about Software Maintenance Upgrade287
SMU Overview287
SMU Workflow288
SMU Package288
SMU Reload288
How to Manage Software Maintenance Updates288
Installing an SMU Package288
Managing an SMU Package289
Configuration Examples for Software Maintenance Upgrade290
Example: Managing an SMU290
Additional References for Software Maintenance Upgrade295
Feature History for Software Maintenance Upgrade295
C H a P T E297
Working with the Flash File System297
Information about the Flash File System297
Displaying Available File Systems297
Setting the Default File System299
Displaying Information about Files on a File System299
Changing Directories and Displaying the Working Directory301
Creating Directories301
Removing Directories302
Copying Files302
Deleting Files303
Creating, Displaying and Extracting Files303
Additional References for Flash File System305
Feature History for Flash File System305
C H a P T E307
Performing Factory Reset307
Prerequisites for Performing a Factory Reset307
Restrictions for Performing a Factory Reset307
Information about Performing a Factory Reset307
How to Perform a Factory Reset308
Configuration Example for Performing a Factory Reset310
Additional References for Factory Reset313
Feature History for Performing a Factory Reset313
C H a P T E315
Configuring Secure Storage315
Information about Secure Storage315
Enabling Secure Storage315
Disabling Secure Storage316
Verifying the Status of Encryption316
Feature Information for Secure Storage317
C H a P T E319
Conditional Debug and Radioactive Tracing319
Introduction to Conditional Debugging319
Introduction to Radioactive Tracing320
How to Configure Conditional Debug and Radioactive Tracing320
Conditional Debugging and Radioactive Tracing320
Location of Tracefiles320
Configuring Conditional Debugging321
Radioactive Tracing for L2 Multicast322
Recommended Workflow for Trace Files323
Copying Tracefiles off the Box323
Monitoring Conditional Debugging324
Configuration Examples for Conditional Debugging324
Additional References for Conditional Debugging and Radioactive Tracing325
Feature History for Conditional Debugging and Radioactive Tracing325
C H a P T E327
Consent Token327
Restrictions for Consent Token327
Information about Consent Token327
Consent Token Authorization Process for System Shell Access328
Feature History for Consent Token329
C H a P T E331
Troubleshooting the Software Configuration331
Information about Troubleshooting the Software Configuration331
Software Failure on a Switch331
Lost or Forgotten Password on a Device331
Ping332
Layer 2 Traceroute332
Layer 2 Traceroute Guidelines332
IP Traceroute333
Debug Commands334
System Report334
Onboard Failure Logging on the Switch336
Fan Failures337
Possible Symptoms of High CPU Utilization337
How to Troubleshoot the Software Configuration338
Recovering from a Software Failure338
Recovering from a Lost or Forgotten Password342
Procedure with Password Recovery Enabled343
Procedure with Password Recovery Disabled345
Preventing Switch Stack Problems346
Preventing Autonegotiation Mismatches347
Troubleshooting SFP Module Security and Identification348
Executing Ping348
Monitoring Temperature348
Monitoring the Physical Path349
Executing IP Traceroute349
Redirecting Debug and Error Message Output349
Using the Show Platform Forward Command350
Using the Show Debug Command350
Configuring OBFL350
Verifying Troubleshooting of the Software Configuration351
Displaying OBFL Information351
Example: Verifying the Problem and Cause for High CPU Utilization353
Scenarios for Troubleshooting the Software Configuration355
Scenarios to Troubleshoot Power over Ethernet (Poe)355
Configuration Examples for Troubleshooting Software357
Example: Pinging an IP Host357
Example: Performing a Traceroute to an IP Host358
Additional References for Troubleshooting Software Configuration359
Feature History for Troubleshooting Software Configuration359

Table of Contents

Other manuals for Cisco Catalyst 9500

Related product manuals