vas deme awe fete aye ua, ua, 2905, Oe, Cacao Rade AS aes thats cisco Release Notes for the Catalyst 3750, 3560, 3560-C, 2960, 2960-S, 2960-C, and 2960-Plus Switches, Cisco IOS Release 15.0(2)SE and Later Updated: May 19, 2015 Table of Contents Roloase Notes for the Catalyst 3750, 3560, 3560.C, 2960, 2960. Contents ‘System Requirements Supported Herdvare Device Manager System Requirements aware Requirements Softvare Requirements ‘Custer Compatity (CNA Compattlty Upgrading the Switch Software Finding the Software Version and Feature Set Deciding Whi Files to Use Archiving Software images Upgrading a Swich by Using the Device Manager or Newark Assistant parading a Switch by Using the CL Recovering fom a Software Failure Installation Notes isco 10S Roloase 15.0(2)SE and Later Now Software Features New in Cisco 10S Release 15.0255 New n isco 10S Release 15.0283 New in Ceco 10S Release 15.02/86 New in Cigco 10S Release 15.02)SE. Minimum Cisco 10S Roloase for Major Features. Limitations and Restrictions ‘eco 10S Limitations CCoiiguration Ethemet EtherSwtch Modules Fallosek Bridging SRP 1P Tatephony MAC acressing Management Muticsating Power aos RADIUS Routing ‘Smart itll SPAN and RSPAN Spanning Tree Potoea! ‘Stacking (Catalyst 2750 or Cisco EtherSwich service module switch stack ony) Trunking vLaN Device Manager Lintations Important Notes ‘Swich Stack Notes ‘catalyst 2960-8 Contr Ptane Protection Cisco 108 Notes Device Manager Notes Cisco Bug Search Too! ‘Open Caveats esa combate rallyesachaerehai2 sehenvas deme awe fete aye ua, ua, 2905, Oe, Cacao Rade AS aes Rosolved Caveats ‘Caveats Resolved In Cisco 105 Release 15.0()S8 (Caveats Resolved in Cisco 10S Release 15.0127 aveats Resolved in Cisco 10S Release 15.0128 Caveats Resolved in Cisco 10S Release 15,0(2)SES Caveats Resolved in Cisco 10S Release 15.0(2SE4 Caveats Resolved in Cisco 10S Release 15.0(2SE2 Caveats Retolved in Cisco 1OS Release 15.0%2)92 caveats Resolved in Cisco 10S Release 15.02)SE1 Caveats Resolved in isco 10S Release 15.0;2E Documentation Updates Updates to the Catalyst 3560 and 2060 Software Configuration Guides Information Added to the “Confguing Interface Charactorstics" Chapter Universal Power over themet Surpor Guidelines and Lintations Rolated Documentation Obtaining Documentation and Submitting a Service Request Release Notes for the Catalyst 3750, 3560, 3560-C, 2960, 2960-S, 2960-C, and 2960-Plus Switches, Cisco IOS Release 15.0(2)SE and Later May 20, 2015 Cisco IOS Release 15.0(2)SE and later runs on Catalyst 3750, 2560, 2560-C, 2960, 2960-S, 2960-C, and 2960-Plus switches and on Cisco EtnerSvitch service modules x Note Not al Catalyst 3750 and 3660 switches can run this release. These models are not supported in Cisco 10S Release 12.2(58)SE1 and later: WS-C3860-24TS, WS-C3560-24PS, WS-C3560-48PS, WS-C3660-48TS, {NS-C3750-24PS, WS.C3750-24TS, WS.C3750-48PS, WS. 3750-487, WS-3750G-24T, WS-C3750G-125, WS-C3750G-24TS, WS-C3750G-167D. For ongoing maintenance rebuilds for these ‘madels, use Cisco IOS Release 12.2(55)SE and later (SE?, SE2, and soon). ‘The Catalyst 3750 switches and the Cisco EtherSwitch service modules support stacking through Cisco StackWise technology. The Catalyst 3560 ‘and 2960 switches do not support swiich stacking. Catalyst 2960-S does support stacking. Unies othervese noted, the term switch refers to a standalone switch and toa swich stack The Catalyst 3560-C switch does not suppor the IP services image. ‘These release notes include important information about Cisco OS Release 15.0(2)SE and any limitations, restrictions, and caveats that apply to the releases. Verity thal these release notes are correct for your swith + fyou are instaling @ new switch, see the Cisco 10S release label on the rear panel of your switch. + fyour swich is on, use the shew version privieged EXEC command. See the “Finding the Software Version and Feature Set” section, + Ifyou are upgrading to anew release, see the sofware upgrade filename forthe software version. See the “Decicing Which Files to Use" section You can download the switch software from ths site (egistered Cisco.com users wit a login password): hitp:iteww.csco.comciscolwebidownloadindex him! Contents + System Requirements + Upgrading the Switch Sofware + lnstalation Notes + New Software Features, + Minimum Cisco 10S Release for Major Features + Limitations and Restrictions + Important Notes + Open Caveats + Resolved Caveats + Documentation Updates + Obtaining Documentation and Submiting a Service Request ‘System Requirements + Supported Hardware + Device Manager System Requirements + Custer Compatblty + CNACompaliity ‘Supported Hardware esa combate rallyesachaerehai2 sehenvas deme au te aay ut, ua, 295, Oe, Caco DSR AS aro Table 1 Catalyst 3750 and Cisco EtherSwitch Service Modules Supported sSwiten Description Sorted by Minimum Cisco 10S Catalyst 24 10/100/1000 PoE" ports, 2 SFP* module slots, and an integrated wireless | Cisco 1OS Release 12.2(28)FZ or Cisco 3750G-24WS-_| LAN controller supporting up to 25 access points. 10S Release 12.2(35)S= 925 Catalyst 24 10/100/1000 PoE ports, 2 SFP module slots, and an integrated wireless LAN | Cisco IOS Release 12.2(28)FZ or Cisco 3750G-24WS- | controller supporting upto 50 access points 10S Release 12.2(35)SE 50 Catalyst 3750- | 24 1008ASE-FX ports and 2 SEP module sats Cisco 10S Release 12.2(25)SEB 24S Catalyst 24 10/100/1000 PoE ports and 4 SFP module slots Cisco 10S Release 12.2(20)SE3 3750G-24PS Catalyst 24 10/100/1000 Ethernet ports and 4 SEP module slots Cisco 10S Release 12.2(20)SE3 37506-2478. w Catayst 48 10/100/1000 PoE ports and 4 SFP module stots Cisco 10S Release 12.2(20)SE3 3750G-48PS Catalyst 48 10/100/1000 Ethernet ports and 4 SEP module slots Cisco 10S Release 12.2(20)SE3 3750G-487S Catalyst 24 10/100 PoE ports and 2 SFP module slats Cisco 10S Release 12.2(50)SE1 3750V2-24PS Catalyst 24 10/100 ports and 2 SEP module slots Cisco 10S Release 12.2(50)SE1 3750V2-247S Catalyst 48 10/100 PoE ports and 2 SFP module slots Cisco 10S Release 12.2(50)SE1 3750V2-48°S Catalyst 48 10/100 ports and 2 SFP module slots Cisco 10S Release 12.2(50)SE 3750V2-481S Catalyst 24 SFP module slots and 2 SFP module slots Cisco 10S Release 12.2(68)EY 3750V2-24FS NME-18ES-1G" | 16 101100 ports, 1 10/100/1000 Ethernet port, na StackWise connector ports, | Cisco IOS Release 12.2(25)SEC EEE» | single-wide NME-16ES-1G- | 16 10/100 PoE ports, * 10/100/1000 Ethernet port, no StackWise connector | Cisco IOS Release 12.2(25)8Z Pa ports, single-wide NME-X-2328. | 23 10/100 port, 1 10/100/1000 PoE port, no StackiNise connector ports, (isco 10S Release 12.2(25)SEC 104 extended single-wide NMEX-2368. | 23 10/100 PoE ports, * 10/100/1000 PoE port, no StackWise connector ports, | Cisco IOS Release 12.2(25)EZ 1G-P4 ‘extended single-wide NME-X0-24E8. | 24 10/100 PoE ports, 1 SFP module port, 2 StackWise connector ports, (isco 10S Release 12.2(25)EZ 1s-P4 fextended double-wide NME-XD-49ES- | 48 10/100 PoE ports, 2 SFP module ports, ne StackiNse connector ports, Cisco 10S Release 12.2(25)E2 25-6 ‘extended double-wide PoE = Power over Ethemet sia combrateavalyesicherehsi2soehatnsteO250omen rte aay ua, ua, 2905, Oe, Cacao Rate AS Lae 2. SFP © smal form-factor pluggable 9. clo EtnerSwich service module Table 2 Catalyst 3560 Switches Supported sSwiteh Catalyst 3560-8PC Catalyst 35606-24PS Catalyst 35606-247S Catalyst 35506-48PS Catalyst 35606-487S Catalyst 3560-12°C Compact Such Catalyst 3560V2-24PS Catalyst 3580V2-24TS, Catalyst 3500V2-48PS Catalyst 3560V2-481S Catalyst 3560V2-24TS. so Description £8 10100 PoE ports and + dual-purpose port* (one 10/100/1000BASE-T copper port and one SFP module slat) 24 10/100 PoE ports and 4 SFP module slots 24 10/100/1000 Ethernet ports and 4 SFP module slots 48 10/100/1000 PoE ports and 4 SFP module slots 48 10/100/1000 Ethernet ports and 4 SFP module slots 12 Ethemet 10/100 ports with PoE and 1 dual-purpose 10/100/1000 or SFP pli 24 10/100 PoE ports and 2 SFP module slots 24 10/100 ports and 2 SFP module slots 48 10/100 PoE ports and 2 SFP module slots 48 10/100 ports and 2 SFP module slots 24 10/100 ports and 2 SFP module slots Interfaces, an only one pr ofthe pais active Table 3 Catalyst 2960, 2960-S and 2960-Plus Switches Supporto ‘switch Description Catalyst 2960-48 10/100 PoE ports, 2 10/100/1000 ports, and 2 SFP module slots 48PST-S Catalyst 2960-24 10/100 PoE ports and 2 dual-purpose ports 24PO-S (@ 10/100/10008ASE-T copper ports and 2 SFP module slots) Catalyst 2860-24 10/100 ports (8 of which are PoE) and 2 dual-purpose ports LCS (@ 10/100/10008ASE-T copper ports and 2 SFP module slots) Catalyst 2860-8 10/100 ports and 1 dual-purpose port (1 10/100/1000BASE-T copper port andt SFP arcs. ‘module slot) Catalyst 2960-48 10/100 ports and 1 10/100/1000 ports 4sTTS Catalyst 2960-48 10/100 PoE ports, 1 10/100/1000 ports and 2 SFP module slats A8PST. Catalyst 2960-24 10/100 BASE-TX Ethemet ports 24.8 esa combraseavallyesicherhs2 seks Supported by Minimum iaco 108 Releas (isco 10S Release 12.2(36)SE. Cisco 10S Release 12.2(20)SE3 (isco 10S Release 12.2(20)SE3 Cisco 10S Release 12.2(20)SE3 Cisco 10S Release 12.2(20)SE3 (isco 10S Release 12.2(50)SE. isco 10S Release 12.2(60)SE1 Cisco 10S Release 12.2(50)SE1 Cisco 10S Release 12.2(50)SE1 isco 10S Release 12.2(60)SE1 (isco 10S Release 12.2(50)SE1 h uplink ots considered a single interface with dual ont ends (RL-A5 connector ae SFP mode sll) The dual ront ends are not redundant ‘Supported by Minimum Cisco 10S Release, Cisco 108 Release 12.2(60)SE2 Cisco 10S Release 12.2(60)Se2 Cisco 10S Release 12.2(69)8E2 Cisco 10s Release 12.2(48)SE Cisco 10 Release 12.2148) Cisco 108 Re 12.2(48)SE Cisco 10S Release 42 2090FYCatalyst 2960- 2aTC-S Catalyst 2960- 48IC-S Catalyst 2960PD-8TT-L Catalyst 2960- arc Catalyst 29606-8TC-L Catalyst 2960- ALT Catalyst 2960- aBTCL Catalyst 2960- 2aTOL Catalyst 2960- 2APCL Catalyst 2960- ATT Catalyst 2960- 4sTTL Catalyst 29806-24TC Catalyst 29806-48TC Catalyst 29608-48FPO- tC Catalyst .29608-48LPD- u Catalyst 29608-24PD-L Catalyst 29608-487D-L Catalyst 29608-247D-L Catalyst 29608-48FPS. omen fete Cay ut, ua, 2905, Oe, Cacao Rate AS aC 24 10/1008ASE-7 Ethernet ports and 2 duatpurpose ports ((wo 10/100/10008ASE-T copper ports and two SFP module slots) 48 10/1008ASE-T Ethernet ports and 2 dustpurpose ports (two 10/100/1 000BASE-T copper ports and two SFP module sits) £8 10/100 ports and 1 10/100/1000 port that receives power 8 10/100 Ethernet ports and 1 dual-purpose port (one 10/100/10008ASE-T copper port and cone SFP module sot) 7 101100/1000 Ethernet ports and 1 dual-purpose port (one 10/100/10008ASE-T copper port land one SFP module slot) 24 10/100 ports @ of which are PoE, and 2 10/100/1000 ports 48 10/1008ASE-TX Ethemet ports and 2 dual-purpose ports 24 10/1008ASE-TX Ethemet ports and 2 dual-purpose ports 24 10/100 Power over Ethernet (PoE) ports and 2 dual-purpose ports (2 10/100/1000BASE-T copper ports and 2 smal form-factor pluggable [SFP] module slots) 24 10/100BASE-T Ethemet ports and 2 10/100/1000BASE-T Ethernet ports 48 10/100BASE-T Ethernet ports 2 10/100/1000BASE-T Ethernet ports 24 10/100/10008ASE-T Ethernet pots, Including 4 dual-purpose ports (four 10/100/10008ASE-T copper ports and four SFP module slots) 48 10/100/10008ASE-T Ethernet ports, including 4 dual-purpose ports (four 10/100/10008ASE-T copper ports and four SFP module slots) 48 10/10011000 Power ever Ethernet Pls (POE) ports (POE budget of 740 W) and 2 SFP + rmadule sots 48 10/100/1000 PoE ports (PoE budget of 370 W) and 2 SFP+ module slots 24 10/100/1000 PoE ports (PoE budget of 370 W) and 2 SFP+ module slots 48 10/100/1000 ports and 2 SFP+ module slots 24 10/100/1000 ports and 2 SFP+ module slots 448 10/100/1000 PoE ports (PoE budget of 740 W) and 4 SFP module slots sia csmirasavalyesicherehai2 seks Cisco 10S Release 12.2007) Cisco 10S Release 122007) Cisco 10S Release 12.2(44)SE Cisco 10s Release 12.2(35)S Cisco 108 Release 12.2(35)Se Cisco 10S Release 12.2(44)SE Cisco 10S Release 12.225)FX Cisco 10S Release 12.2(25)FX Cisco 10S Release 12.2144) Cisco 10S Release 12.2025)FX Cisco 10s Release 12.2(25)FX Cisco 108 Release 12.2025)FX Cisco 108 Release 12.2025)SEE Cisco 10S Release 12.2(63)S61 Cisco 10S Release 12.2(63)S61 Cisco 10S Release 12.2(53)SE1 Cisco 10 Release 12.2(53)SE1 Cisco 108 Release 12.2(53)SE1 Cisco 108 Release 12.2(53)SE1‘i Catalyst 29608-481PS- u Catalyst 29605-24PS- Catalyst 29608-487S- Catalyst 29805-2475-L Catalyst 29605- FaarPs-L! Catalyst 29608- FaBLPS.! Catalyst 29608-F48TS: us Catalyst 29608-F24PS. us Catalyst 29608-F24TS. ut Catalyst 29608-F48TS. s Catalyst 29608-F24TS: s Catalyst 2960- Plus 24PC-S. Catalyst 2960- Plus 24LC-S Catalyst 2960- Plus 48°ST-S Catalyst 2960- Plus 487C-L Catalyst 2960- Plus 267C-5 Catalyst 2960- Plus 4870-5, omen fete aye ua, ua, 2905, 2, Oe, Cacao Rate AS aro 448 10/100/1000 PoE ports (PoE budget of 370 W) and 4 SFP module slots 24 10/100/1000 PoE ports (POE budget of 370 W) and 4 SFP module sits 48 10/100/1000 ports and 4 SFP module slots 24 10/100/1000 ports and 4 SFP module slots 48 10/100 PoE ports (PoE budget of 740 W) and 4 SFP module stots 48 10/100 PoE ports (PoE budget af 370 W) and 4 SFP module stots 48 10/100 ports and 4 SFP module slots 24 10/100 PoE ports (PoE budget of 370 W) and 2 SFP module stots 24 10/100 ports and 2 SFP module slots 48 10/100 ports and 2 SFP module slots 24 10/100 ports and 2 SFP module slots 24 10/1008ASE-TX PoE ports and 2 dual-purpose ports 24 10/100BASE-TX ports (8 of which are PoE) and 2 dual-purpose ports 448 10/1008 SE-TX PoE ports. 2 10/100/1000 ports, and 2 SFP module slots 48 10/1008ASE-TX Ethemet ports and 2 dual-purpose ports 24 0/100BASE-TX Ethernet parts and 2 dual-purpose ports (no RPS port) 48 10/1008ASE-TX Ethernet ports and 2 dual-purpose ports (no RPS port) esi combate ralyesicherehsi2 seks Cisco 10s Release 12.2(53)SE1 Cisco 10 Release 12.2(53)361 Cisco 10 Release 12.2(83)SE1 Cisco 108 Release 12.2(69)S61 Cisco 108 Release 18.0(2)SE Cisco 10S Release 15.0@)5E Cisco 10S Release 15.0@2)SE Cisco 108 Release 15.0(2)SE Cisco 10S Release 18.02) Cisco 10S Release 16.0(2)SE Cisco 10S Release 15.02)SE Cisco 10S Release 16.0;)SE5 Cisco 10S Release 18.0@)SE5 Cisco 10S Release 15.02)SE5 Cisco 108 Release 15.0(2)SE5 Cisco 108 Release 18.0(2)SE5 Cisco 108 Re 16.0;2)SE5nas omen fete aye ua, ua, 2905, 2, Oe, Cacao Rate AS aro Catalyst 2960-24 10/1008ASE-TX PoE ports and 2 dual-purpose ports Cisco 108 Release Plus 24PC-L 16.0(2)SE5 Calalyst 2960-24 TO/T00BASE-TX Ethemet ports and 2 dual-purpose ports Cisco 108 Release Plus 267C-L 18.0(2)SE5 Catalyst 2960-48 10/1008ASE-TX PoE ports, 2 10/100/1000BASE-T copper parts, and 2 SFP module slots Cisco OS Release Plus 48PST-L 16.0;2)SE5 Catalyst 2960-24 10/100BASE-TX ports (8 of which are PoE) and 2 dual-purpose ports Cisco 10S Release Plus 26L-L 18.0@2)SE5 ® Support Cisco FloxStack technology. © SFP+ = 10 Gigabit bor uplink. Table 4 Othor Supported Hardware switch | Description Cisco CGS | Cisco 2520 Connected Grid Switch (CGS 2520) is a rugged switch designed for he harsh, rugged 2520 Switen | environments often found in the energy and utlty induses, hntp.thaw.cisco.comfen/USipartneriproducts/ps10978iproducls_instalation_and_confguraton_quides_st.html SFP 10008ASE-CWDM” ,-LX, &X,-T, 2X modules (catayst 3750 and 53560) | Suppor for eight adltional DWOM SFP optical moduies. For a complete list of supported SFPs and part rhumbers, see the data sheet htip:shuw.csco,comlen/USiprodicollateralswitches!ps5718ipsS02S/praduct_data_sheet0900aecd80371991,Mt oo SFP *O008ASE-BX, -CWOM, -LXILH, -8K.-2X modules (Catayst | 100BASE-BX, FX, -LX 2960) For a complete list of supported SFPs and part numbers, see the compatibilty information for SFP modules: ipunww.clsco.comlen/USipartneriproductsimw/medulesips64SSiproducts_device_support_tables_lsthiml XENPAK | XENPAK-10-GB-ER, XENPAK-10-GB-LR, and XENPAK-10-GB-SR modules? Redundant | Cisco RPS 875 Redundant Power System power ystems | 80 RPS 300 Redundant Power System (supported only on the Catalyst 2960 switch) Cisco Redundant Power System 2300 esa csmbrateavalyesacharehsit,2 seks ‘Supported 5 1 Minimum Cisco 10S Release Cisco los Release 12.2153) Cisco 10s Release 12.2(18)8E Cisco 10s Release 12.2@20)SE Cisco los Release 12.2@5)FX Cisco 10S Release 12.2(18)SE Supported onal software releases Supported onal software releases isco Ios Release 12.2(35)8E and laternas omen fete Care ua, ua, 2905, 0, Oe, Caco Rae AS aCe 7. CWOM = coarse wavelength-svislon multiplexer AME « mitimode ber 8 XENPAK modules are only supprted on the Catalyst 3750G-18TD swatches. Device Manager System Requirements + Hardware Requirements + Software Requirements, Hardware Requirements Table § Minimum Hardware Requirements. ProcessorSpecd DRAM Number of Colors Resolution Font Size 293Miz minimum" 512 MB" 256 4024x758 | Small ©. We recommend 1 GHz ". We recommend 1 GB DRAM, Software Requirements + Windows 2000, XP, Vista, and Windows Server 2003, + Internet Explorer 6.0, 7.0, Firefox 1.5, 2.0 or ater with JavaScript enabled ‘The device manager vers the browser version when starting a session and does not require a plug-in. Cluster Compatibility You cannot create and manage switch clusters through the device manager. To create and manage switch clusters, use the commandt-ne interface (CLD or the Network Assistant application. \When creating a switch cluster or adding a switch fo a cluster, folow these guidelines: + When you create a switch cluster, we recommend configuring the highest-end switch in your cluster as the command switch + Ifyou are managing the cluster through Network Assistant, the switch with the latest software should be the command swith, + The standby command swiich must be the same type as tne command switch, For example, ifthe command switch is @ Catalyst 3750 switch, all slandby command svitenes must be Catalyst 3750 switches, For additonal information about clustering, see Getting Started with Cisco Network Assistant and Release Notes for Cisco Network Assistant (nat lorderable but available on Cisco.com), the sofware configuration gude, the command reference, and the Cisco FtherSwitch service module feature guide. CNA Compatibility Cisco 10S 12.2(60)SE and ater is only compatible wth Cisco Network Assistant (CNA) 6.0 and later. You can dowload Cisco Network Assistant from this URL: hilp:waww.csco.com/pegi-binftablebuld plNetworkAssistant For more information about Cisco Network Assstan, see the Release Notes for Cisco Network Assistant on Cisco.com. Upgrading the Switch Software Finding the Software Version and Feature Set + Deciding Which Files to Use Archiving Software Images + Upgrading a Switch by Using the Device Manager or Network Assistant Upgrading a Switch by Using the CLI + Recovering from a Software Failure Finding the Software Version and Feature Set ‘The Cisco IOS image is sored as a bin fl in @ directory that is named withthe Cisco 10S release. A subdirectory contains the fles needed for web ‘management. The image is stored on the system board flash device (fash). ‘You can use the show version privileged EXEC command to see the sofware version that is running on your switch. The second Ine of the Aisplay shows the version, x esa combate rallyesachaerehai2 sehenvas ome fe aye ua, ua, 2905, 0, Oe, Cacao Rate AS aro Note For Catalyst 3750 and 3580 switches and the Cisco FtherSvatch service modules, although the show version output always shows the software Image running onthe switch, the model name shown atthe end ofthis display isthe factory configuration (IP base image of IP services image) and does not change if you upgrade the software image, ‘You can also use the die flesystem : privleged EXEC command to see the drectory names of other software images that you might have stored in flash memory Deciding Which Files to Use ‘The upgrade procedures in these release notes describe how to perform the upgrade by using a combined tar fle, This fle contains the Cisco !OS Image fle and the fles needed forthe embedded device manager. You must use the combined tar fle to upgrade the switch through the device ‘manager. To upgrade the switch through the commanet-ine interface (CL), use the tar fle and the archive download-sw privleged EXEC commans. Table 6 Cisco 10S Software Image Files Filename Description £3750.ipbaseks- Catalyst 3750 IP base eryplographic Image and device manager fles. This mage has the Kerberos, SSH"? , Layer tar.150-2.SE tar 2+, and basic Layer 3 routing features. This image also runs on the Cisco EtherSwich service modules. c3750.\pservicesk9- _Calalyel 3760 IP services cryptographic Image and device manager fles. This image has the Kerberos, SSH, tar. 150-2.SE tar Layer 2+, and full Layer 3 features. This image also runs an the Cisco EtherSwitch service modules, case0-ipbaseks- Catalyst 3560 IP base eryplographic image and device manager fles. This mage has the Kerberas, SSH, and tr-150-2.SE tar Layer 2+, and basic Layer 3 routing features. c2560-ipservicesk®- Catalyst 3560 IP services cryptographic image and device manager fles. This image has the Kerberos, SSH, tar.150-2.SE tar Layer 2+, and full Layer 3 features. ca5600405ex- Catalyst 3560- image with all supported universal image features and Web-based device manager, does not universakenpe ‘support MACSee encryption. tar.150-2.SE tar e38600405ex- Catayst 3560-¢ Image wth al supported univereal mage features and Web-based device manager. universakt-tar 150: 2SE.ar £3560¢405- Catalyst 3560 image with all supported universal mage features and Web-based device manager, does not universakonpe support MACEee encryption tr-150-2.5E tar ea8600405- Catalyst 3560-¢ image with al supported universal mage features and Web-based device manager. universaks-tar. 150 2SEar c2960anbasek8-_Calalst 2960 cryptographic image file and device manager files, This image has the Kerberos and SSH features. ta. 150-2.SE tar €2960-taniteko Catalyst 2960 LAN Lite cryptographic image fle and device manager fles, tar. 150-2.SE tar c2960s-universak®- LAN Base and LAN Lite explo image with device manager tr-150-2.SE tar e2960c405ex- Catalyst 2960-¢ image with al supported universal mage features and Web-based device manager. universaks-tar. 150 2SEtar 29600405- Catalyst 2960-C image wit al supported universal image features and Web-based device manager. universakt-tar. 160: 2SE.ar ©2960smlanbasek9- Calais! 2960-SM LAN Base image with Web-based device manager. sia comin ralyessacherkai2 seksnas deme awe fete aye ua, ua, 2905, Oe, Cacao Rade AS aes tar.150-2.SE tar c2960anbasek- Catalyst 2960-Plus cryptographic image file and device manager files. This image has the Kerberos and SSH tr. 150-2.62 tar teatures. £2960-Laniteko. Catalyst 2960-Plus cryptographic image fle and device manager files. ta. 150-2.62 tar 2 9H = Secure Shel Archiving Software Images Before upgrading your switch software, make sure that you have archived coples af the current Cisco IOS release and the Cisco 10S release to ich you are upgrading. You should Keep these archived images untl you have upgraded all devices inthe network tothe new Cisco 10S image And unt you have veried that the new Ciseo 10S image works properly in your network. Cisco routinely removes old Cisco 10S versions ‘rom Cisco.com. See Product Bulletin 2663 for more information, hitp:teww.csco.comfen/USiprodicolateraliosswrelips8802/ps6959/ps1835) rod_bulletna900a6cs8028110e.him! You can copy the bin software image fle on the flash memary tothe aporopriate TFTP directory on @ host by using the eopy flash: tt EXEC command, x Note Although you can copy any leon the flash memory tothe TFTP server, tis ime consuming to copy all ofthe HTML fles in the tar fle, We recommend that you dowmload the ta fle fram Cisco.com and archive it an an internal ost In your network ‘You can also configure the switch as a TFTP server to copy les from one switch to another wihout using an external TFTP server by using the Uitp-server global configuration command. Fer mace information about the ttp-server command, se the “Basic File Transfer Services Commands” section of the Cisco JOS Configuration Fundamentals Command Reference, Release 122 itp ceo. comlen/USidocssiosundamentalsicommandirferencelet_1.himl Upgrading a Switch by Using the Device Manager or Network Assistant ‘You can upgrade switch software by using the device manager or Network Assistant For detaled instuction, cick Help. x Note When using the device manager to upgrade your switeh, do not use ar close your browser session after the upgrade process begins. Wait Uuntl after the upgrade process completes. Upgrading a Switch by Using the CLI This procedure is for copying the combined tar fle tothe switch. You copy te fle tothe switch ftom a TFTP server and extract the files. You can ‘download an image fle and replace o: keep the current image. To download software follow these steps: ‘Stop 1. Use Table 6 to identity the fle that you want to download, ‘Step 2 Download the sofware image fle Ityou are a registered customer, go to this URL and log in hitp Jw cisco comiciscolvebidownloadindex him! Navigate to Switches > LAN Switches - Access, Navigate to your switch model Click 108 Software, then select the latest 10S release. Dowioad the image you identified in Step 1. A Caution you are upgrading a Catalyst 3750 switch thats running a release earlier than Cisco 1OS Release 12.1(19)EATC, this release includes @ bootloader upgrade. The bootloader can take upto 1 minute to upgrade the frst time that the new software is loaded. Do not power cycle the switch during the bootloader upgrade. ‘Step 3 Copy the image tothe appropriate TFTP cirectory onthe workstation, and make sure that tne TFTP server is properly configured For mace information, see Appendix Bin the software configuration guide for this release, ne comin aldyeDacherae 2 saan sovas omens rte aay ua, ua, 2905, Ct Oe, Cacao Rade AS aes ‘Stop 4 Log into the switch through the console port ora Telnet session, ‘Stop 5 (Optional) Ensure that you have IP connectivity to the TFTP server by entering this privleged EXEC commana: Seiten# ping For more information about assigning an IP address and default gateway to the switch, see the sofware configuration guide fr this release, ‘Step Download the image fle from the TFTP server tothe switch, Ifyou are instaling the same version of sofware thats currenly on the switch, overwrite the curent image by entering this privieged EXEC command: Seitcn# archive dowlosd-aw /overwrite /zelosd tftp? |(// 10° The foverurite option overwries the sofware image in flash memory with the downloaded one. ‘The feload option reloads the system after downloading the image unless the configuration has been changed and not saved. The /allow-feature-upgrade option allows installation of an image with a diferent feature set (for example, upgrade from the IP base image tothe IP services image) For if cation, specity the IP address ofthe TFTP server. For directory | image-name sar, speciy the directory (optional) and the image to download. Directory and image names are case sensitive. This example shows how to dovnload an image ftom a TFTP server at 198.30.20.19 and to overwrite the image on the switch # archive dowload-sw /overwrite tftp://198.30,20,19/03750-ipservices-tar,122-50.SH.tar You can also download the image file from the TFTP server to the switch and keep the current image by replacing the feverwrte option withthe Meave-old-sw option, Recovering from a Software Failure For recovery procedures, see the “Troubleshooting” chapter inthe software configuration guide for this release. Installation Notes Use these methods to assign IP information to your switch + The Express Setup program, as described inthe switch geting started guide + The CLL-based setup program, as described inthe ewitch hardware installation guide. + The DHCP-based autoconfiguration, as described in the switch software configuration guide. + Manually assigning an IP address, as described in the swatch software configuration guide New Software Features. New in Cisco 10S Release 18.0(2)SES + Cisco 10S Release 15.0(2)SES is now available for Catalyst Switch 2860-Plis, New in Cisco 10S Reloase 15.0(2)SE3 + IPV6 Router Advertisement (RA) Guard provides support for allowing the network administrator to block or reject unwanted or rogue RA Guards messages artiving atthe network switch platform. x Note. This feature is available in he LAN Base feature set New in Cisco 10S Reloase 18.0(2)SE1 + Cisco IOS Release 15.0(2)$E1 on the Catalyst 2960-5, 3750, $550, 2960-C405, 2960-C40Sex, $550-C405, 3560-C405ex switches has been ‘submited for certication under FIPS 140-2 and Common Criteria compliance witn the US Government, Secufty Requirements for Network Devices (pp_nd_v.0), version 1.0, ated 10 December 2010. a Note. The images forthe Cisco 1OS Release 15.0(2)SE1 on the Catalyst 2960.S, 9750, 3560, 2960-0408, 2960.C40Sex, 3560.C405, 3560- C405ex switches are FIPS certified. For information about using FIPS certs images, sce the “Boot Loader Upgrade and Image Verification for the FIPS Mode of Operation” section inthe “Assigning the Swit IP Address and Default Gateway” chapter ofthe software configuration guide. FIPS 140-2 a cxyptographic-focused certification, required by many government and enterprise customers, which ensures the compliance of the encryption and decryption operations performed by the switch tothe approved FIPS cryplographic strengths and management methods for safeguarding these operations. For more information, see ~The securiy policy document at: htp:esre nist. govlgroups/STM/emupldocuments!140-1/1401val201 .him#1657 ne comirattenelealdyebachenae 2 seeds tusvas omen te aye ua, ua, 2905, OC, Oe, Cacao Rate AS Lar = The instalation notes at tpn. cise. comlen/USiproduets/ps10745/prod_instalaion_guides_let. ht Common Criteria isan international standard (ISOVIEC +5408) for computer securty certification. This standard isa set of requirements, tests, and evaluation methods that ensures that the Target of Evaluation complies with a specific Protection Profle or custom Securly Target. For more information, see the securty target document at hitp Jw ap-coevs.orglsUvid 0488 + Suppor for Restient Ethernet Protocol (REP). REP is a Cisco proprietary protocol that provides an alternative to Spanning Tree Protacal (STP) te control network loops, handle Ink falures, and improve convergence time in ring topologies. See the Configuring Resilient Ethernet Protocol ‘chapter Inthe sofware configuration gude on eisco.com, (Catalyst 3560-CG and 3560-CPO switches) New in Cisco 10S Release 18.0(2)SE + Supports the Universal Power over Ethernet (UPoE) feature. Sources up to 60 W of power (2X 30) over both signal and spare pals ofthe RU 45 Ethernet cable based on IEEESO2 3at standards. Aulomalicaly detects UPoE-complant power devices and negotiates power up to 60 W by using Layer 2 power negotiation protocols, such as COP or LLDP.It also supplies 60 W power on ports without COPILLDP negotiations (for doves that do nat support the requited UPoE TLV). (Catalyst 2960-C and 3560-C ewltches) For more information on UPE, see Chapter 15, "Configuring Interface Characteristis" section “Univeral Power over Ethernet” on page 15- 13 of the software configuration guide on Cisco.com ‘Support for IOS IPV6 Host mode, which is compliant with the v6 Ready Logo Phase-2 Core Protocols test suite. (LAN Lite image for Catalyst £2960, 2960-C and 2960-S switches; IP Base image for Catalyst 3750, 3750¥2, 3560, 3500v2 and 3650-C switches) ‘Option to configure a default class on Catalyst 2960-S svitches by using the class class-default poicy-map configuration command. For more information, see the Configuring QoS chapter ofthe software configuration guide on Cisco.com. (Catalyst 2960-S switches) ‘Support for OSPF fast convergence. The OSPFv3 ink-state advertisements (LSA) and shortest path fst (SPF) thratting feature provides a ‘dynamic method to siow down tnk-state advertisement updates in OSPFVS during times of network intabity. This feature also allows faster LOSPFv2 convergence by providing LSA rae imiting in miliseconds. For more information, see the Configuring IPv6 Unicast Routing chapter of the software configuration guide on Cisco.com. (Catalyst 3750 and Catalyst 3860 switches) ‘Change in the CLI option relating o OSPFV2 LSA rate iting. The all Keyword is now removed from the timers hratle Isa global configuration ‘command. (Catalyst 3560-C, 3560v2, and 3750 v2 switches) + Support for OSPFVG authentication vith IPsec, You can now use the IPsec secure socket API to authenlicale OSPF for IP¥6 (OSPFVa) packets to ensure that the packets are not altered and resent tothe switch, For mare information, see the Configuring IPv6 Unicast Routing chapter of the software configuration guide on Cisco.com. (Calalysl 3560, 3580-C, 3660V2, 3750, and 3750V2 swatcnes) ‘Support for frst hop security (FHS) in IPvS, We support the following functions: [Pv snooping, IPv6 FHS binding, neighbor ciscavery protocol (NOP) address gleaning, IPv8 data address gleaning, IPvS dynamic hast configuration protocol (DHCP) address gleaning,IPV6 device tracking, neighbor dscovery (ND) Inspection, Py port-based access lst, IPvS DHCP guard, IPv8 router advertsement (RA) guard, IPV6 source guard For more information, see the Configuring IPv6 Host Functions chapter ofthe software confguration guide on Cisco.com. (Catalyst 2960-C, 2960-8 and 2560-C switches) + Suppor for specifying the VLAN to be used for Smart Install Management, The vstackstartup-vian command has been added. For more information, see the command reference on Cisco.com, + Suppor fr configurable MAG authentication bypass (MAB). You can configure how MAB authentication is performed for client MAG address that deviate trom the expected standard format or where the RADIUS configuration requires thatthe user name and password to difer. For more information, see the Configuring IEEE 802.1x Port-Based Authentication chapter in the sofware configuration guide on Cisco.com. + Suppor for negotiaing universal PoE (UPOE). For more information, see Updates tothe Catalyst 3560 and 2960 Software Configuration (Guides. (Catalyst 2960-C and 3560-C switches) + Support for Media Access Control Security (MACSec). The switch supports 802.1AE encryption with MACsec Key Agreement (MKA) on downlink ‘and uplink ports fr encryption between the switch and host devices. For more information, see the Comviguring MACsec Encryption chapter in te software configuration guide. (Catalyst 3860-0) ‘Support for IKEv2 and IPSecv3 protocols. (IP Base image for Catalyst 3750, 3750v2, 3560, 3560v2 switches) + Suppor for Port ACLs on the Layer 2 interface ofa switch (LAN Base image for Catalyst 2960-C and 2960-S switches; IP Base image for Catalyst 3560-C switch) + Support for Router ACLs on switch virtual interfaces (SVIs). The SVIs may be Layer 3 interfaces to VLANs, physical Layer 3 interfaces, or Layer ‘3 EtherChannel interfaces. (LAN Base image for Calalyst 2960-C and 2960-5 switches; IP Base Image for Catalyst 3550-C swatch) ‘Support for configuring static IPv8 route inthe routing table so that packet data can be sent to networks that are not arecty connected to the router. (LAN Base image for Catalyst 2960, 2960-C and 2960-8 switches) ‘Support for Cisco TrustSec SXP version 2, syslog messages, and SNMP supports now extended tothe LAN Base license, (IP Base image for Catalyst 3860-C switch) ‘Support for port security on Etherchannels. For more information, see the Configuring Port-Based Traffic Control chapter in the software ‘configuration guide ‘Suppor for IP Source Guard on Etherchannels. For more information, see the Configuring DHCP and IP Source Guard chapter inthe software ‘configuration guide + Suppor for Precision Time Protocol (PTP) and Temperature and Volage Monitoring on the Cisco CGS 2520 Switch Minimum Cisco 10S Release for Major Features Table 7 Ist the minimum software release required to support the mar features of the Catalyst 3750, 3560, 2960-5, and 2960 switches and the Cisco EtherSwatch eervice modules Table 7 Catalyst 3750, 3560, 3560-C, 2960, 2960-S and 2960-C Switches and Cisco EtherSwitch Service Module Features and the Minimum Cisco 10S Rolease Required Fe ture 10s | Catalyst Switch Release Required | Support esi disconnected 2 soba 8nae deme ue te Cay ut, ua, 2908, 2, Oe, Cacao Rate AS aro Cisco TrustSee SXP version 2, syslog messages, and SNMP support Creal voice VLAN NEAT enhancement to control access tothe supplicant port Cisco TrustSec SXP version 2, syslog messages, and SNMP support ‘Auto Smartparts improved device cassifeation Device Sensor Buln Tratfc Simulator using Cisco 10S IP SLAS video operations Cisco Meclatrace support Cisco performance monitor EnergyWise Phase 2.5 Smart logging Protocol storm protection VACL Logging ‘Smart install 3.0 ‘Auto Smartparts enhancements to enable auto-QoS on a digital media player. Memory consistency check routines CallHome support NTP version 4 DHCPvS buk-lease query and DHCF¥6 relay source configuration IETF made for OSPFv2 and OSPF¥S (IP services image) RADIUS, TACACS®, and SSH/SCP over IPv6 VRRP for Pv IETF IP-MIB and IP-FORWARD-MIB(RFC4282 and RFC4293) updates ‘Auto-QoS enhancements epi ta coniratsaeswioevaldye ictal? seksi 15.0(2)S6 15.0(1'8E 16.0(9'8E 16.0(1)8E 15.0(1'8E 16.0(9'8E 12.2158) 12.2188) 12.2(88)821 12.2188) 12.2188) 12.2(58)851 12.2188): 12.2(58)S 12.2(58)851 12.2(58)s 12.2188) 12.2188): 12.2(88)821 12.2188)S5 12.2188) 12.2185) 3750, 3560, 2960 3750, 3560, 2960 2980-8, 2960-8, 3780 and 3560 3750, 3560, 2960 3750, 3560 3760, 3560 3760, 3560 3750, 3560 2750, 3580, 2960 3750, 3560, 3750, 3560, 2960 3750, 3560, 3760, 3660, 2960 3750, 9560, 2960 2960- 3760, 3660, 2960 3760, 3560, 2960 3760, 3560 3760, 3560 3750, 3560, 2960 3780, 3560 3750, 3560, 2960 2960-5, 2960-8, 2o80-s, 2060-8, 2060-8, 2060-8, 2060-8, 2060-8, 2980-8, 3750, 3560,2975, 2960, 2960-5vas omen te Caayru u, u,n 2905, C, Oe,CacoOSRalme AS aaeCaeo ‘Smart instal enhancements and new features Port ACL improvements CDP and LLOP location enhancements Muti- authentication vith VLAN assignment Cisco TrustSec Memary-consistency check routines Static routing support on SVs MAC replace to end a session when a host disconnects from a port, DHCP snooping and Option 82 and LLPD-MEt in LAN Ite image ‘Smart nstall1o allow a single point of management (director) in a network. Support for IP source guard on static hos. ‘AutoSmartPort enhancements (macro persistency, LLOP-based triggers, MAC address and OUI-based triggers, remote macros). RADIUS Change of Authorization (CoA), 802.1x User Distribution for deployments with multiple VLAN. Critcal VLAN with mutple-host authentication, Customizable web authentication enhancement to alow the eration of user-defined pages. Network Edge Access Topology (NEAT) to change the port host mode. VLAN: based MAC authentication. MAC move to allow hosts to move across ports on the same switch, SDES and AES wth SNMP Hostname support inthe option 12 fleld of DHCPOISCOVER packets. esa combrasesavalyesacherhsi2soehatnst250 12.2(85)8= 12.2(85)S= 12.2(55)S= 12.2185) 12.2(55)S= 12.2155) 12.2(85)S= 12.2(85)8E 12.2152) 12.2(62)8= 12.2(62)8= 12.2(82)8= 12.2(82)8= 12.2182)8= 12.2(82)8= 12.2(52)8= 12.2182) 12.2182) 12.2182) 12.2(82)8= 2980, 2960-5 3760, 3560,2076, 2980, 2960-5, 3750, 3560,2976, 2980, 2960-5. 3750, 3560,2975, 2960, 2960-5 3750, 3560,2875, 2980, 2960-8 3750 and 3560 £3750, 3560, 2975, 2960 2975, 2960, ana 2960-S 3750, 3560,2875, 2960, 2960-8 2960 and 2960-8 3750, 3560,2975, 2960 2750, 3560,2875, 2960 3750, 3560,2975, 2960 3750, 3560,2075, 22960 3750, 3560,2076, 2960 3750, 3560,2075, 2960 3760, 3560,2976, 2960 3750, 3560,2975, 2960 3750, 3560,2875, 2960 3750, 3560,2975, 2960 3750, 3560,2075, 2960 370, 35602076, 2960nas demeanor ut, ua, 2905, 0 Oe, Cacao Rate AS aro DHOP Snooping enhancement for the circuit sub-option Increased support for LLPD-MED LLPD-MED MB and the C1SCO-ADMISSION-POLICY-MIB, 1Pv6 QoS trust capabilly. Cisco Medianet to enable inteligent services in the network infastructure for video applications, EEM 3.2 event detectors for Neighbor Discovery dently, and MAC-Address-Table, Cisco Energylse Phase 2 to manage EnergyMise-enabled Cisco devices and non.Cisco ‘end points running EnergyWise agents. Network Edge Access Topology (NEAT) with 802.1X switch supplicant, host authorization with CISP, and auto enablement 802.1 wth open access 802.1x authentication with downloadable ACLs and redirect URLs Flexble-authentication sequencing Muttpte-user authentication Cisco EnergylNise Phase 1 to manage power usage over PoE devices, Wired location service CPU utlization threshold trap Cisco 108 Configuration Engine (previously the Cisco IOS CNS agent) LLDP.MED network policy profile time, length, value (TLV) RADIUS server load balancing ‘Auto Smartpors Cisco-defaul and user-defined macros SSCP attribute support inthe CONFIG_COPY MIB, CISCO-AUTH-FRAMEWORK-MIE, CISCO-MAC-AUTH-BYPASS MIs, LLDP MIB. Intermediate System-to-Intermediate System ([S-18) routing for Connectionless Network Service (CLNS) networks ‘Support for Embedded Event Manager Version 2.4 IPv6 features in the IP services and IP base images: ACLs; DHCPV6 for the DCHP server, cllent, and relay device; EIGRPV6, HSRPV8; OSPF v3, RIP; Satc routes Stack troubleshooting enhancements 1802.1 authentication with restricted VLANS esa combrasesavalyesacherhsi2soehatnst250 12.2182) 12.2182) 12.2182)8E 12.2182) 12.2162)8= 12.2182)8= 12.2(89)861 12.2(60)8= 12.2(60)8= 12.2180) 12.2(50)S= 12.2160) 12.2(60)8= 12.2150) 12.2180) 12.2(60)8= 12.2(59)8= 12.2(60)S= 12.2(60)8= 12.2(50)S= 12.2(80)S= 12.2160) 12.2159) 12.2180) 12.2(80)S= 3750, 3560,2075, 2960 3750, 35602975, 2960 3750, 3560,2075, 2960 3760, 3560 3750, 3560 3750, 3560 3750, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3760, 3560, 2960 3780, 3660, 2960 3750, 3560, 2960 13750, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3760, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3750, 3560, 3750, 3560, 3760, 3560 3750 2960nas omen te Care ut, ua, 2905, Oe, Cacao Rate AS aes IP source guard Dynamic ARP inspection Generic message authentication support with SSH Protocol and compliance with REC 4255 Generic message authentication support Disabling MAC address learning on a VLAN, PPAgP Interaction witn Viral itches and Dual-Active Detection DHCP server port-based address allocation IPV6 default router preference (ORF) Voice aware IEEE 802.1x and mac authentication bypass (MAB) security violation Local web authentication banner ‘Support forthe CISCO-NAC-NAD and CISCO-PAE MIB [Excluding a port in @ VLAN from the SV ne-state calculation OT and IP SLAs EOT static route support ‘Support for HSRP Version 2 (HSRP¥2) HRP for vs (advanced IP services image) DHCP for IPvs relay, client, server address assignment and prefix delegation (advanced IP services image) Embedded event manager (EEM) (IP services image only) Dynamic voice virtual LAN (VLAN) for multidomain authentication (MDA) (LAN base image oniy) Monitoring real-time power consumption on @ per-PoE port basis EEE 002.1% Authentication wth ACLs and the RADIUS Fiter- Attribute IEEE 002.1 readiness check DHCP-based autoconfiguration and image update Configurable smallrame arivalthreshola HTTP and HTTP(s) support over PVE SNMP configuration over IPv6 transport IP stateless autoconfiguration Flex Link Muticast Fast Convergence Digital optical monitoring (00M) esa combrasesavalyesacherhsi2soehatnst250 12.2(60)8= 12.2180) 12.2(48)S= 12.2(48)8= 12.2(48)S= 12.2148)S= 12.2(46)S= 12.2148) 12.2(48)S= 12.2148) 12.2148) 12.2148)8= 12.2168) 12.2148) 12.2148)S= 12.2148) 12.2148) 12.2146)85 12.2148)8= 12.2(48)8= 12.2144) 12.2144) 12.2(44)s 12.2144) 12.2144) 12.2(44)8 12.2144) 12.2(44)8= 2960 2960 13750, 3560, 2960 3750, 3560, 2960 ‘3760, 3560, 2960 3750, 3560, 2960 2750, 3560, 2960 3760, 3660, 2960 3750, 3560, 3750, 3560, 3760, 3560 3780, 3560 3750, 3560, 3760, 9560 3780, 3560, 3750, 3560 3750, 3560, 2960 2960 2960 3750, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3760, 3560, 2960 3750, 3560, 2960 3750, 3560, 2960 3760, 3660, 2960 3750, 3560nas demeanor ut, ua, 2905, 0 Oe, Cacao Rate AS aro Source Specific Multicast (SSM) mapping 131 bit mask support for multicast atic Configuration replacement and rollback Link Layer Discovery Protocol Media Extensions (LLDP-MED) Enhanced Interior Gateway Routing Protocol (EIGRP) [Pv ‘Automatic quality of service (QoS) Voice over IP (VoIP) Dynamic voice virtual LAN (VLAN) for MDA-enabled ports Internet Group Management Protocl (IGMP) helper IP Service Level Agreements (I SLAS) IP SLAs EOT Muticast vitual routing and forwarding (VRF) Ike SSM PIM protocol \VRF-aware support for HSRP, URPF, ARP, SNMP, IP SLA, TFTP, FTP, syslog, traceroute, and ping MLD snooping [Pv host IP phone detection enhancement Link Layer Discovery Protocol (LDP) and LLDP Media Endpolnt Discovery (LLDP-MED) PIM stub routing Port security on a PYLAN host VLAN aware port securiy option ‘Auto rendezvous point (auto-RP) for mulcast VLAN Flex Links load balancing Web Cache Communication Protocol (WCCP) Mutidomain authentication (MDA) Web authentication MAC inactivity aging ‘Support for IPv6 with Express Setup Generic online diagnostics Stack MAC persistent timer and archive download enhancements esa combrasesavalyesacherhsi2soehatnst250 12.2(64)S= 12.2144) 12.2140) 12.2140) 12.2(40)S= 12.2(40)8= 12.2(40)8= 12.2(40)8= 12.2(40)8= 12.2140)8= 12.2(49) 12.2140) 12.2140) 12.2(40)8= 12.2(60)S= 12.2137) 12.297) 12.2087) 12.2(87)8= 12.2187) 12.297) 12.2(37)85 12.2197) 12.2(95)8= 12.2135) 12.2135) 12.2185) 12.2(35)S= 12.2135): 3750, 3560, 3760, 3560 3750, 3560, 2960 3750, 3560, 2960 3750, 9560 3760, 3560, 2960 3750, 3560 3750, 9560 3750, 3560, 3750, 3560, 3760, 3560 3750, 3560 3750, 3560, 2960 2960 13750, 3560, 2960 3760, 3660, 2960 3750, 3560, 3760, 3560 3750, 3560, 2960 3750, 3560, 3750, 3560, 2960 3760, 3560 3750, 3560, 3750, 3560, 2960 3760, 3660, 2960 3750, 3560 3560 3760