We would like to test the autoinstall feature with the vstack technology. Earlier, we had no vstack on our switches, cause it would fill our log files with unnecessary messages all the time. I enabled vstack on one test switch, but i cant get the service to work with vstack basic.     swTST01#show running-config | include vstack vstack director 172.16.220.4 no vstack swTST01#configure terminal Enter configuration commands, one per line. End with CNTL/Z. swTST01(config)#vstack swTST01(config)#vstack director 172.16.220.4 swTST01(config)#vstack basic ^ % Invalid input detected at '^' marker. swTST01(config)#vstack ? director Configure director's IP address <cr> swTST01(config)#end     swTST01#show vstack ?   config       View configuration parameters under Vstack mode   group        Show vstack group information   join-window  Show the join window information swTST01#show vstack config  Capability: Client  Oper Mode: Enabled  Role: Client  Vstack Director IP address: 172.16.220.   Some details on what we use:   swTST01#show version | include IOS Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.2(2)E7, RELEASE SOFTWARE (fc3) swTST01#show ver | include \* * 1 28 WS-C2960X-24PS-L 15.2(2)E7 C2960X-UNIVERSALK9-M swTST01#show license Index 1 Feature: lanlite                 Period left: 0  minute  0  second   Index 2 Feature: lanbase                 Period left: Life time         License Type: Permanent         License State: Active, In Use         License Priority: Medium         License Count: Non-Counted I checked on the official Cisco Documentation: https://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/commands.html#53643   That the vstack basic command should be supported by the IOS version we use:   12.2(52)SE This command was introduced. 15.1(1)SY This command was integrated into Cisco IOS Release 15.1(1)SY. 3.4SG This command was integrated into Cisco IOS XE Release 3.4SG. 15.1(2)SG This command was integrated into Cisco IOS Release 15.1(2)SG. 15.0(2)EX This command was integrated into Cisco IOS Release 15.0(2)EX. 15.0(2)EX1 This command was integrated into Cisco IOS Release 15.0(2)EX1. 3.2(0)SE This command was integrated into Cisco IOS Release 3.2(0)SE. As well the model and license we use:     2960-X LAN Base 2960X-24PD-L   24 ports, 2 SFP+, PoE 2960X-24PS-L   24 ports, 4 SFP, PoE 2960X-24PSQ-L  24 ports, 2 SFP, 8PoE 2960X-24TD-L   24 ports, 2 SFP+ 2960X-24TS-L   24 ports, 4 SFP 2960X-48FPD-L  48 ports, 2 SFP+, PoE 2960X-48FPS-L  48 ports, 4 SFP, PoE 2960X-48LPD-L  48 ports, 2 SFP+, PoE 2960X-48LPS-L  48 ports, 4 SFP, PoE 2960X-48TD-L   48 ports, 2 SFP+, 2960X-48TS-L   48 ports, 2 SFP 2960-X LAN Lite 2960X-24TS-LL  24 ports, 2 SFP 2960X-48TS-LL  48 ports, 2 SFP So all the vstack based commands like dhcp-localserver, backup and hostname-prefix are missing. I tried to just write the command without autocomplete, as i know of some "hidden" commands. Can anybody shed some light on this? Has this feature been cancelled?   ... View more

One big issue i always had with Cisco IOS is, that the interface names are named after the max ethernet standard speed they support.   FastEthernet GigabitEthernet TenGigabitEthernet FortyGigabitEthernet This becomes especially annoying if you use a network module that supports TenGigabitEthernet SFP's. The interfaces are showing up twice in the configuration, representing their speed. A network module with 4x 10gig capable SFPs presents itself in the configuration as 8 ports: Gi1/1/1 Gi1/1/2 Gi1/1/3 Gi1/1/4 Te1/1/1 Te1/1/2 Te1/1/3 Te1/1/4 It would be great if Cisco would allow the interface to be called in a speed neutral way, like: Ethernet1/1/1 Ethernet1/1/2 Ethernet1/1/3 Ethernet1/1/4 Of course there would be a transition period of a few IOS(XE/XR) generations needed that would allow the use of both old and new names. Are there any plans for the future, how the interface name scheme could look like? ... View more

We have a hard time checking any blocks that have subblocks like routing (EIGRP named mode), policy-maps and crypto pki certificates. Let me show one example. We want to check following code: policy-map QOS_OUT_CHILD  class QOS_ROUTING   set dscp cs6   priority percent 5  class class-default   fair-queue ! policy-map QOS_OUT  class class-default   shape average 2000000       service-policy QOS_OUT_CHILD  We have tried following rule set A: Rule1: Condition Scope: Configuration Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression policy-map QOS_OUT_CHILD Rule2: Condition Scope: Previously Matched Blocks Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression class QOS_ROUTING Rule3: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression set dscp cs6 Rule4: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression priority percent 5 Rule5: Condition Scope: Configuration Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression policy-map QOS_OUT_CHILD Rule6: Condition Scope: Previously Matched Blocks Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression class class-default Rule7: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression fair-queue With this ruleset, there is no violation even if we delete the fair-queue part in the configuration. It finishes with all green. We have done some two level block verification in our switch configuration (archive command) where we used following approach: Rule1: Condition Scope: Configuration Parse as Blocks: No Condition match criteria: Matches the expression policy-map QOS_OUT_CHILD Rule2: Condition Scope: Configuration Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression class QOS_ROUTING Rule3: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression set dscp cs6 Rule4: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression priority percent 5 Rule5: Condition Scope: Configuration Parse as Blocks: Yes (setting start expression only) Condition match criteria: Matches the expression class class-default Rule6: Condition Scope: Previously Matched Blocks Parse as Blocks: No Condition match criteria: Matches the expression fair-queue This works great, if the commands you want to check are unique in the configuration. The problem with policy-maps is, that we have multiple class-default classes, so prime builds multiple blocks and there is always a violation to be found because the fair-queue command is not present in the policy-map QOS_OUT. I couldnt find anything in the cisco prime documentary and the examples do not cover such a scenario. To check EIGRP in named mode, it is more complicated, as you have 4 levels down if you go into the af-interface mode. How do you get prime to check blocks within blocks to make sure the configuration is complete? ... View more