3750X IOS

I'm upgrading a stacked 3750X - one and 3750X-24TS and the other a 3750X-48TS. I have downloaded the IOS files that correspond which each switch from the software download page (15.0.(2)SE7). The question I have is this: Are the two files exactly the same? They are the same size, but...
I don't have room to install both as separate, but won't have to worry about that if the files are the same for a 24TS as it is for a 48TS.

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Although Cisco's IOS image page lists all known models, often they all run the same physical image.
Besides being the same file size, are the files also named alike? Have you run a file comparison utility against them?

Similar Messages

3750X iOS license required for routed ports

Hi all,
I've been tasked with installing our new Internet router. I have a stand-alone WS-C3750-24P-L with LAN base. I need a routed port to establish connection with our ISP. I've purchased IP Base licensing and applied it, and copied the ipbase iOS to flash, but I get "Error: hardware not supported by firmware. Try loading never software instead." on boot.
Is my process faulty? Am I not understanding the requirements necessary for routed ports? Or do I simply need a newer iOS version? I'm using 122-58.SE1.
Sorry for the basic question, and thanks in advance for any help you can provide.
Len

Are you sure that you loaded the right IOS (hopefully you didn't upgrade your switch with an iOS ... )? In the title you write about an 3750X, but in the text you mention a (to my knowledge non-existent) non-X model. Please show the exact filename that you downloaded and also a "show version".
And the 3750-X with IPBase supports routed ports.
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

3750x IOS Upgrade

Hi
I have just upgraded the license on my 3750x to IP Services. My current IOS is c3750e-ipbasek9-mz.122-55.SE5.bin
Would I have any issues upgrading this to a more recent cisco recommended release such as c3750e-universalk9-mz.150-2.SE7.bin
Any thoughts??
Thanks

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Well, about the most stable release is 55SE9 (I believe it's also recommended by Cisco).
Unless you need 15x features, you might want to only upgrade to it (universal image for IP Services support).

3750X IOS 12.2 and 15.0

Hello is there any documentation or any specific reason to upgrade 3750X switches to the 15.0 code? Are they any specific enhancements that are provided ? Any help or documentation would be greatly appreciated.
Regards
Villa

The key differences are SSH RSA public-key support, Flexible NetFlow support and improved IPv6 support. The best thing to do is go to the Cisco Feature Navigator and compare your current release with the one you're considering. If there are features you need in the newer release, there's your reason.

IOS recommendation for 3750X

Hi,
Currently I have a 3750X IOS version 15.02SE and I have run into a bug which causes the switch to reboot when the CPU utilization goes too high. This was because of logging which I had configured on the access lists.
Pretty soon I will need to upgrade the IOS on this switch to resolve this issue but I am not sure which IOS revision is stable, they all seem to have problems.
Any suggestions?

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
If you don't require 15.x features, 12.2(55)SE7..9 seem pretty stable/solid.

QoS for App-V

Hello,
I'm currently configuring new 3750X switches.
I must implement QoS on the stack. The QoS must be the following:
VOIP Class (50%)
App-V Class (40%)
Movie Class (10%)
How I can do this (in particular for AppV)? I do the following for the moment:
class-map match-any VOIP
match protocol voice
match dscp ef
match protocol sip
match protocol skype
match protocol rtp audio
match protocol rtp video
exit
class-map AppV
exit
class-map Movie
match protocol rtp video
exit
policy-map BandwidthTraffic
class VOIP
priority percent 50
set dscp ef
class AppV
bandwidth remaining percent 40
class Movie
bandwidth remaining percent 10
interface Gig1/0/3
ip nbar protocol-discovery
service-policy input BandwidthTraffic
Anyone can says me if it's correct or not? And why?
Thank you for your help.
Florent

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
It appears you've some router QoS. 3750X QoS is quite different for egress as you're limited to working with four egress queues. I don't recall 3750X supporting NBAR.
Suggest you read the configuration guide's chapter on QoS, for you 3750X IOS version, and then post questions as necessary. (My concern is, 3750X QoS is so different, it wouldn't be helpful to suggest a QoS configuration until you had a basic understanding of the 3750 QoS architecture and features.)

Cisco Prime Infra 2.1 fails to import an image from file

We have a standard Cisco Prime Infrastructure 2.1 install. The software repository has been built up by importing the IOS images from the discovered network devices. To implement netflow capabilities on some 3750X switches we need to upgrade the IOS on the chassis and the NM card C3KX-SM10G. I was able to download from Cisco Support the 3750X IOS .tar file and import it from my machines local file system. However, the modules tar file c3kx-sm10g-tar.150-2.SE6.tar fails on the upload from my local file system. When I look at the import rob results they are as follows:
Image collection from source SUCCESS
Copying Image to Staging Location SUCCESS
Copying Image to Repository FAILURE
I've tried to import just the .bin file but this also fails at the same stage as above.
I've also tried to scp the file directly into the backend file structure with no success into the folder /opt/CSCOlumos/conf/ifm/swim/jobs with the other images (oddly noticed the above .tar file for the 3750X isn't listed with the other .bin files - although is available through the webGUI).
I need to distribute the NM .tar file across multiple switches and I'd prefer to use Cisco Prime for the job. Any help would be gratefully received.
Thanks.

I had (still have?) the same problem with it not copying the image over. I put in a ticket and they told me to upgrade to Prime Infrastructure 2.1-Device Pack 4 pi_2.1device_packs_4-40.ubf which helped but it still fails sometimes.
I had read a post from another thread about going through software image management to distribute and that seems to work a little better, but still fails sometimes.
So I think that there are still quite a few issues in Prime that need worked out.
We have over many switches that need software upgrades and I was hoping to do it quickly through Prime but I don't want to send out more then one image at a time to switch because I don't want it to fail. So it's a drawback right now, just doing one at a time to make sure it takes.

NCS Prime 2.1 LAN switch addition

Hello,
Im exploring adding the wired side of the network into prime(2.1). I have added the range of switches and IOS below. Only some appear to be returning client IP addressing.
Is the IOS im using out of date? Or NCS issue?
thanks
S
Cisco 3750 Stackable Switches 15.2(1)E1
Cisco Catalyst 2960-24TT Switch 12.2(58)SE2
Cisco 3750 Stackable Switches 12.2(55)SE7
Cisco 3750 Stackable Switches 12.2(55)SE6
Cisco Catalyst 3560X-24T-L,S Switch 12.2(55)SE1

Hi Marvin,
I thought that but I've had mixed results. The 3750x(IOS 15) is L2 and can see the client IP addresses. The other 3750 (IOS12.2) is L3 cannot get Any client data
I have now added the 6509 core, running 12.2(33)SXJ3 and its finding only 4 clients. Im now back to thinking, IOS 15 is required for full client visibility.
S

Upgrading 3750X Stack IOS (suggestions)

I'm reading all sorts of problematic issues with upgrading the 3750X stack IOS on the internet. I have never performed this before and would like anyone'e suggestion on how I should do this and what I should be looking for. I will be upgrading from 12.2(53r)SE2 to 12.2.(55)SE8.

Let's say you have three 3750X in a stack. OK?
So before you even begin to push the IOS to your switch, you need to download the correct IOS for each member of your stack. Make sure each member of your switch is found in the Supported Hardware list.
Download the "universal" TAR file. Next, once you've downloaded the IOS, make sure you verify the MD5 hash value against the value found in the Cisco website. The MD5 hash value must match.
Make sure that all members of your switch stack have the same licenses and feature set.
Ok, now you've got the preparatory set, you do the actual command to push the IOS into your stack. The command is very simple. Remember, I presume that you have three switches in a stack.
The command is: archive download-sw /destination 1 /destination 2 /destination 3 tftp:///filename.tar
Using the simplified command above, this will instruct the switch to download the IOS from your TFTP server into the switch stack master's memory. The "/destination X" means it will be pushed out to each member one-at-a-time. The boot statement will also be changed so the stack will know what IOS to use.
Hope this helps.

Upgrading a cisco 3750x stack IOS

Hi all
can anyone tell me the quickest and easiest way to upgrade the IOS in my stack on 4 3750x switches
cheers
Carl

Hi Carl,
1. Copy the TAR IOS to your TFTP server.
2. Make sure you have access to the TFTP server (from the switch).
NOTE: There are two methods of doing this. One is via Ethernet and the other is via USB. I'll discuss USB later.
3. Jump into your stack and run this command: archive download-sw /destination 1 /dest 2 /dest 3 /dest 4 tftp:///IOS_filename.tar
If you have a USB stick:
1. Format the USB stick with FAT16;
2. Copy the IOS into the stick;
3. Insert to the Master of the 3750X USB port;
4. Command: archive download-sw /destination 1 /dest 2 /dest 3 /dest 4 usbflash0://IOS_filename.tar

3750X-48P-S IOS Version

Is it advisable to update to the 15.2.1E1 IOS for these devices or should I stay on 12.2(58)SE2 and 12.2(55)SE3 IOS? I know 15.0.2 had issues. Also, I have two 3750E-48TD switches that are on IOS 15.0(1)SE or SE2. Should I go ahead an update them?

Hi,
That will really depend on what are looking for, the 15.x version has been reportedly to have some memory issues however that depends on how you have you device is set up and how much features you have on it. It will be a good idea if you have a Cisco support contract to get in touch with your Cisco Systems engineer who can make the proper recommendation on whether or not an upgrade to the 15 version is required. Below is a link for the release notes of the 15 version where you can check open caveats and the ones that are already fixed.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-2_1_e/release/notes/OL29707.html
Hope this helps.

ISE CWA with COA not work on 3750X.

Hello.
I use ISE version 1.2.0.899 this patch number 4. I configure Central Web Auth for wired client. In first time client open web brouser, and ISE redirect him to guest portal. User input correct credentionals, and after that switch ignor CoA packet. In ISE logs "5417 Dynamic Authorization failed". If I use domain computer, authentification succecful whis use dot1x. All on Port g1/0/1. I use 3750X this version IOS 15.0(2)SE2, 15.0(2)SE4, 15.0(2)SE5, 15.2(1). On all of this version ios I have this mistake.
Config:
3750X-ISE# sh running-configBuilding configuration...Current configuration : 9575 bytes!! No configuration change since last restart! NVRAM config last updated at 01:29:01 GMT Wed Mar 30 2011!version 15.0no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname 3750X-ISE!boot-start-markerboot-end-marker!!!username admin privilege 15 secret 5 ----username radius-test secret 5 -----aaa new-model!!aaa group server radius end!aaa group server radius ise server name ise3 server name ise4!aaa authentication login default localaaa authentication login CON noneaaa authentication enable default noneaaa authentication dot1x default group radiusaaa authorization network default group radiusaaa authorization network ise group radiusaaa accounting dot1x default start-stop group radius!!!!!aaa server radius dynamic-author client 192.168.102.53 server-key P@ssw0rd client 192.168.102.54 server-key P@ssw0rd client 192.168.102.51 server-key P@ssw0rd client 192.168.102.52 server-key P@ssw0rd server-key P@ssw0rd!aaa session-id commonclock timezone GMT 0 0switch 1 provision ws-c3750x-24psystem mtu routing 1500ip routing!!ip dhcp snooping vlan 701-710ip dhcp snoopingip domain-name com.ruip device trackingvtp mode transparent!!device-sensor filter-list dhcp list DHCP-LIST option name host-name option name default-tcp-ttl option name requested-address option name parameter-request-list option name class-identifier option name client-identifier option name client-fqdn!device-sensor filter-list cdp list CDP-LIST tlv name device-name tlv name address-type tlv name version-type tlv name platform-type tlv name power-type tlv name external-port-id-typedevice-sensor filter-spec dhcp include list DHCP-LISTdevice-sensor filter-spec cdp include list CDP-LISTdevice-sensor accountingdevice-sensor notify all-changes!license boot level ipservices!!!dot1x system-auth-control!spanning-tree mode rapid-pvstspanning-tree extend system-id!!!!!!!!!vlan internal allocation policy ascending!!vlan 102!vlan 701 name ISE-network1!!lldp run!!!!!!!!!!no macro auto monitor!interface FastEthernet0 no ip address no ip route-cache shutdown!interface GigabitEthernet1/0/1 switchport access vlan 701 switchport mode access switchport nonegotiate authentication event fail action next-method authentication open authentication order dot1x mab authentication priority dot1x mab authentication port-control auto mab snmp trap mac-notification change added snmp trap mac-notification change removed dot1x pae authenticator spanning-tree portfast!interface Vlan102 ip address 192.168.102.60 255.255.255.0!interface Vlan701 ip address 192.168.107.1 255.255.255.240 ip helper-address 192.168.102.50 ip helper-address 192.168.102.53!ip http serverip http secure-server!ip route 0.0.0.0 0.0.0.0 192.168.102.1!ip access-list extended ACL-WEBAUTH-REDIRECT deny udp any any eq domain deny tcp any host 192.168.102.51 deny tcp any host 192.168.102.52 deny tcp any host 192.168.102.53 deny tcp any host 192.168.102.54 permit tcp any any eq www permit tcp any any eq 443!!!snmp-server community test ROsnmp-server community test2 RWsnmp-server trap-source Vlan102snmp-server source-interface informs Vlan102snmp-server enable traps snmp linkdown linkupsnmp-server enable traps mac-notification change movesnmp-server host 192.168.102.53 version 2c test2!radius-server attribute 6 on-for-login-authradius-server attribute 8 include-in-access-reqradius-server attribute 25 access-request includeradius-server dead-criteria time 5 tries 3radius-server host 192.168.102.53 auth-port 1812 acct-port 1813radius-server host 192.168.102.54 auth-port 1812 acct-port 1813radius-server host 192.168.102.54 key P@ssw0rdradius-server host 192.168.102.53 pac key P@ssw0rdradius-server key P@ssw0rd!!!line con 0 login authentication CONline vty 0 4 exec-timeout 60 0line vty 5 15 exec-timeout 60 0!ntp master 5ntp server 198.123.30.132 prefermac address-table notification changemac address-table notification mac-moveend
Please, help me.

Use these Cisco IOS commands to monitor and troubleshoot CoA functionality on the switch:
•debug radius
•debug aaa coa
•debug aaa pod
•debug aaa subsys
•debug cmdhd [detail | error | events]
•show aaa attributes protocol radius

SNMP Traps from catalyst 3750x

I use SNMPc from Castrlerock. When my Catalyst 3750x sends a trap they display as below. I've included the imports, I've checked the imports imports etc. I'm by no means and SNMP expert and obviously missing something. I've also check the Cisco SNMP Navigator and using the correct MIB files for my IOS version. If someone could point my in the right direction as to what I'm missing would be greatly appreciated. I don't have this problem with other vendors MIB's so I'm hoping it's some dependent MIB that's I'm overlooking.
I can provide a list of the loaded MIB's if that would help.
Thanks.
Robert
Trap Message in SNMPc
clogMessageGenerated [1] clogHistFacility.109985 (DisplayString): LINK [2] clogHistSeverity.109985 (Integer): error [3] clogHistMsgName.109985 (DisplayString): UPDOWN [4] clogHistMsgText.109985 (DisplayString): Interface GigabitEthernet4/0/26, changed state to up [5] clogHistTimestamp.109985 (TimeTicks): 147 days 18:07:13 [6] snmpTrapEnterprise.0 (ObjectID): ciscoSyslogMIBNotificationPrefix
Trap Message on Syslog server
2015-01-22 18:01:48 Local7.Notice gallium 72937: 072933: Jan 22 23:01:48.128: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/20, changed state to up

Yes, I think the Network Devices need to be discovered first in order to receive traps and generate alerts.
Juke Chou
TechNet Community Support

IOS CWA Redirect - ISE - Safari

I do not believe I can be the only one with this issue, not when I have it at two sites and with the original installs being done by different people.
Is anyone else having issues with Safari properly being redirected to ISE CWA by IOS redirection?
I have this issue on 3750X for wired clients, and on a 3850 NGWC for wireless clients. What makes this unique is that the only thing similar to this deployment is the Macbooks running with Safari.
My troubleshooting seems to point at an issue with Safari not liking the redirect based upon the switch(3850,3750X) certificate. Firefox and Chrome both work without issues on the test Macbooks. I'm unable to find anything in the Bugtoolkit about it.
If using Safari on Cisco switch for CWA is unsupported, please provide a link to Cisco document detailing it.

This issue has been resolved. It turned out that the Macbook was trying to do a crl download to confirm that the certificate was valid. I am pretty sure it was becuase the cheapest GoDaddy certificate was used and the intermediate certificate isn't always found in the default Mac certificate store. Firefox works because they handle CRL checks differently.
I had two different resolutions as I had the problem at two different customers/sites.
First test was allowing access to crl.godaddy.com. After I excluded this IP address from the redirect and permitted it in the dACL - Safari was able to correctly redirect to the CWA portal page.
At another site, due to the centralized management of the Macbooks, we utilized Mac OS X Server to create a profile in Profile Manager that included the GoDaddy Intermediate certificate and pushed that out to all macbooks to resolve the issue.
In addition - and worthy of note. If you are doing posturing and the ISE certificate is not trusted on Apple, the same sort of CRL check will occur and the NAC Agent will never posture the endpoint.
tl;dr - Doublecheck Certificate trust settings on Apple because they are evil.

Monitoring 3750x and 3560x Redundant Power Supply and Fans

I need help for monitoring the redundant power supply of my switches (3750x and 3560x)
I have configured my snmp on my switches and is able to monitor interfaces, temperature and etc.
The problem is when I am monitoring the redundant power supply and fans.
I am using two Cisco C3KX-PWR-350WAC Modular Power Supply per switch.
The OID I use to monitor the PSU are the following:
Power Supply 1
.1.3.6.1.4.1.9.9.13.1.5.1.3 Instance: 1003
Power Supply 2
.1.3.6.1.4.1.9.9.13.1.5.1.3 Instance: 1004
When I do an SNMP walk, the value is showing (1) which means normal.
When I simulate a power outage on power supply 1 or 2 by unplugging the power source, the value doesn't change and is still (1).
Values: normal(1), warning(2), critical(3), shutdown(4), notPresent(5)
As for the Fans:
When I remove the fan module, I am able to get a notification that the fans are down, but when I plug back the fan module it is now using a different instance.
Below is my config for SNMP:
snmp-server community XXXXXXXXXXXXXX RO
snmp-server location XXXXXX
snmp-server contact XXXXXX
snmp-server chassis-id Cisco3560X
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps transceiver all
snmp-server enable traps tty
snmp-server enable traps license
snmp-server enable traps cpu threshold
snmp-server enable traps syslog
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps errdisable
snmp-server enable traps vlan-membership
snmp-server host X.X.X.X version 2c XXXXXXXXXXXXXX
Note: This problem is the same for all of my 3560X switches and 3750X switches. I am not sure if I am monitoring the wrong OID.
Thanks in advance

Hi ,
You are running an old IOS code , definitely you are hitting a BUG .
there is no workaround or I would say unfirtunetely you will not be able to get the correct power supply status via SNMP.
you need to use command line for this.
I mean "show env all "
**** if you want to know the Excat BUG that your code is hitting ,please contact TAC.
Thanks-
Afroz
**Ratings Encourages Contributors ****

3750X IOS

Similar Messages

Maybe you are looking for