Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 2960 Switch

This appendix describes the configuration compatibility issues and the feature behavior differences that you might encounter when you upgrade a Catalyst 2950 switch to a Catalyst 2960 switch.

This appendix consists of these sections:

•Configuration Compatibility Issues

•Feature Behavior Incompatibilities

Configuration Compatibility Issues

The configuration commands between the two switch platforms differ for these reasons:

•The Catalyst 2950 switch runs Cisco IOS 12.1EA software, and the Catalyst 2960 switch runs Cisco IOS 12.2SE software.

•The switch families have different hardware.

If you use a Catalyst 2950 switch command, it might not be supported on the Catalyst 2960 switch. The Catalyst 2960 switch software handles the incompatible commands in these ways:

•They are accepted and translated. A message appears.

•They are rejected. A message appears.

In most cases, configuration files are loaded without rejections. Table C-1 lists the Catalyst 2950 exceptions. The features are listed in alphabetic order, with Catalyst 2950 commands and explanations, and the resulting action on the Catalyst 2960 switch.

Table C-1 Catalyst 2950 and 2960 Switch Configuration Incompatibilities 

Feature
Catalyst 2950 Switch Command and Explanation
Result on the Catalyst 2960 Switch

AAA

These global configuration commands are in Cisco IOS 12.1EA:

aaa preauth

aaa processes 1-64

aaa route download 1-1440

When Cisco IOS 12.2E was restructured, these commands were intentionally removed and are not supported in Cisco IOS 12.2SE.

The Catalyst 2960 switch rejects these commands, and this message appears: 

Switch(config)# aaa processes 10

               ^

%Invalid input detected at `^' marker.

Clustering

The Catalyst 2950 switch supports only one management VLAN. You can use this global configuration command to change it:

cluster management-vlan vlan-id

This command communicates the management VLAN when the switch is configured for clustering.

With the Catalyst 2960 switch, you can connect to candidate and cluster member switches through any VLAN in common with the cluster command switch.

The Catalyst 2960 switch rejects the command, and this message appears: 

Switch(config)# cluster management-vlan 2

               ^

%Invalid input detected at `^' marker.

DHCP snooping

A Catalyst 2950 switch DHCP snooping feature limits the number of DHCP packets per second that an interface can receive. You use this interface configuration command to configure it:

ip dhcp snooping limit rate rate

The range is 1 to 4294967294, and by default, the rate limit is not configured.

In Cisco IOS 12.2SE, the range was changed to 1 to 2048 messages per second.

The Catalyst 2960 switch accepts any range value. It changes the maximum value to 2048 (if it is more than 2048), and this message appears: 

%Invalid input detected at `^' marker.%

Flow control

The Catalyst 2950 switch supports pause frames on Gigabit Ethernet interfaces. You use this interface configuration command to configure it:

flowcontrol send {desired | off | on}

The Catalyst 2960 switch accepts received pause frames but cannot send them. The flowcontrol send command is not supported on the Catalyst 2960 switch.

The Catalyst 2960 switch rejects the command, and this message appears: 

Switch(config-if)# flowcontrol send 
desired

                              ^

%Invalid input detected at `^' marker.

You can configure QoS to restrict data traffic without affecting the control traffic. With flow control, all traffic is stopped. For more information, see "Configuring QoS."

IEEE 802.1x

In Cisco IOS 12.1EA, the Catalyst 2950 switch ranges for the IEEE 802.1x server-timeout, supp-timeout, and tx-period are 1 to 65535. You use these interface configuration commands to configure them:

dot1x timeout server-timeout seconds

dot1x timeout supp-timeout seconds

dot1x timeout tx-period seconds

In Cisco IOS 12.2SE, the IEEE 802.1x server-timeout and supp-timeout ranges are 30 to 65535. The tx-period range is 15 to 65535.

For server-timeout, the Catalyst 2960 switch accepts 1 to 29 as a valid lower value and changes the value to 30.

For supp-timeout, the Catalyst 2960 switch accepts 1 to 29 as a valid lower value and changes the value to 30.

For tx-timeout, the Catalyst 2960 switch accepts 1 to 14 as a valid lower value and changes the value to 15.

For all three commands, this message appears: 

%Invalid input detected at `^' marker.

IGMP1 snooping

The Catalyst 2950 switch implements IGMP snooping based on MAC addresses. You use this global configuration command to configure static groups:

ip igmp snooping vlan vlan-id static mac-address interface interface-id

These Catalyst 2950 switch global configuration commands were implemented to address hardware limitations:

ip igmp snooping source-only-learning [age-timer value]

no ip igmp snooping mrouter learn pim v2

The Catalyst 2960 switch implements IGMP snooping based on IP addresses and uses other advanced hardware. It rejects the Catalyst 2950 IGMP snooping commands, and these messages appear: 

Switch(config)# ip igmp snooping vlan 1 
static 0002.4b28.c482 interface 
gigabitethernet0/1

               ^

%Invalid input detected at `^' marker.


Switch(config)# ip igmp snooping 
source-only-learning

               ^

%Invalid input detected at `^' marker.


Switch(config)# no ip igmp snooping 
mrouter learn pim v2

               ^

%Invalid input detected at `^' marker.

Interface MAC address

On the Catalyst 2950 switch, you can set the MAC address for both physical and switch virtual interfaces (SVIs) by using this interface configuration command:

mac-address mac-address

On the Catalyst 2960 switch, you cannot set the MAC address for physical and SVIs.

The switch rejects the command, and this message appears: 

Switch(config-if)# mac-address 
0100.0ccc.cccc

                  ^

%Invalid input detected at `^' marker.

QoS2

There is limited QoS configuration compatibility between the Catalyst 2950 switch and the Catalyst 2960 switch.

We recommend that you enable automatic QoS (auto-QoS) on the Catalyst 2950 switch by using the auto qos voip {cisco-phone | cisco-softphone | trust} interface configuration command.

If you have a custom QoS configuration on the Catalyst 2950 switch, we recommend that you use auto-QoS for transition to the Catalyst 2960 switch.

Note If auto-QoS does not provide the configuration required for your network, we recommend that you remove the QoS configuration on the Catalyst 2950 switch and create a new configuration on the Catalyst 2960 switch.

The Catalyst 2960 switch accepts the auto qos command and generates QoS commands that are appropriate for the Catalyst 2960 switch. The policer granularity is adjusted to 1 Mbps.

For more information about the generated commands, see the auto qos voip command in the command reference for this release.

 

Auto-QoS is not enabled on the Catalyst 2950 switch, but other QoS commands are configured.

These Catalyst 2950 switch commands might fail on the Catalyst 2960 switch:

mls qos map dscp-cos global configuration command

wrr-queue cos-map global configuration command

wrr-queue cos-bandwidth global configuration command

mls qos trust cos pass-through dscp interface configuration command

police policy-map class configuration command

The switch might display this message: 

               ^

%Invalid input detected at `^' marker.

RSPAN3

You have to specify one port as the reflector port with this global configuration command:

monitor session session_number destination remote vlan vlan-id reflector-port interface-id

Because of advanced hardware in the Catalyst 2960 switch, you do not need to configure a reflector port.

The Catalyst 2960 switch accepts the monitor session session-number destination remote vlan vlan-id reflector-port interface-id command, and this message appears: 

Note: Reflector port configuration is not 
required on this platform, ignoring the 
reflector port configuration

STP

The Catalyst 2950 switch supports cross-stack UplinkFast on GBIC4 interfaces. You enable the stack port with this interface configuration command:

spanning-tree stack-port

The Catalyst 2960 switch does not support GBIC interfaces.

It rejects the command, and this message appears: 

Switch(config-if)# spanning-tree 
stack-port

                                ^

%Invalid input detected at `^' marker.

1 IGMP = Internet Group Management Protocol

2 QoS = quality of service

3 RSPAN = Remote Switched Port Analyzer

4 GBIC = Gigabit Interface Converter


Feature Behavior Incompatibilities

Some features behave differently on the Catalyst 2950 and Catalyst 2960 switches, and some features are not supported on the Catalyst 2960 switch:

•Access control lists (ACLs)

Even though the command syntax is the same on the Catalyst 2960 switch and on the Catalyst 2950 switch, the semantics of the IP and the MAC ACL between the two platforms differ. For example, you can apply MAC ACLs for IP packets on the Catalyst 2950 switch, but on the Catalyst 2960 switch:

–You cannot apply MAC ACLs to IP packets.

–You cannot apply any ACLs for IPv6 frames.

–With MAC ACLs, an Ethertype of Appletalk is not supported.

•QoS

The Catalyst 2960 switch uses different port hardware than the Catalyst 2950 switch, and more QoS features are offered on the Catalyst 2960 switch. For example, the Catalyst 2950 switch supports WRR scheduling, whereas the Catalyst 2960 switch supports SRR scheduling. Also, you must enable QoS globally on the Catalyst 2960 switch, whereas QoS is enabled by default on the Catalyst 2950 switch. For more information, see "Configuring QoS."

•RSPAN

The Catalyst 2950 switch uses an extra port, called the reflector port, for its RSPAN implementation. This is not necessary in the Catalyst 2960 switch RSPAN implementation. The Catalyst 2960 switch also supports VLANs as SPAN sources and can forward received packets on SPAN destination ports.

•Multicast

The multicast forwarding decisions on the Catalyst 2960 switch are based on IP addresses. Some Catalyst 2950 switch workarounds to address platform limitations (such as the ip igmp snooping source-only-learning global configuration command) are not required on the Catalyst 2960 switch.