- Preface
- Product Overview
- Command-Line Interfaces
- Configuring the Switch for the First Time
- Administering the Switch
- Configuring Virtual Switching Systems
- Configuring the Cisco IOS In-Service Software Upgrade Process
- Configuring the Cisco IOS XE In Service Software Upgrade Process
- Configuring Interfaces
- Checking Port Status and Connectivity
- Configuring Trustsec
- RPR
- Configuring Supervisor Engine Redundancy Using RPR and SSO on Supervisor Engine 7-E and Supervisor Engine 7L-E
- Configuring Cisco NSF with SSO Supervisor Engine Redundancy
- Environmental Monitoring and Power Management
- Configuring Power over Ethernet
- Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant
- Configuring VLANs, VTP, and VMPS
- Configuring IP Unnumbered Interface
- Configuring Layer 2 Ethernet Interfaces
- Configuring SmartPort Macros
- Configuring Cisco IOS Auto Smartport Macros
- Configuring STP and MST
- Configuring Flex Links and MAC Address-Table Move Update
- Configuring Resilient Ethernet Protocol
- Configuring Optional STP Features
- Configuring EtherChannel and Link State Tracking
- Configuring IGMP Snooping and Filtering, and MVR
- Configuring IPv6 MLD Snooping
- Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling
- Configuring CDP
- Configuring LLDP, LLDP-MED, and Location Service
- Configuring UDLD
- Configuring Unidirectional Ethernet
- Configuring Layer 3 Interfaces
- Configuring Cisco Express Forwarding
- Configuring Unicast Reverse Path Forwarding
- Configuring IP Multicast
- Configuring ANCP Client
- Configuring Bidirectional Forwarding Detection
- Configuring Policy-Based Routing
- Configuring VRF-lite
- Configuring Quality of Service
- Configuring Voice Interfaces
- Configuring Private VLANs
- Configuring MACsec Encryption
- Configuring 802.1X Port-Based Authentication
- Configuring the PPPoE Intermediate Agent
- Configuring Web-Based Authentication
- Configuring Port Security
- Configuring Control Plane Policing and Layer 2 Control Packet QoS
- Configuring Dynamic ARP Inspection
- Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts
- Configuring Network Security with ACLs
- Support for IPv6
- Port Unicast and Multicast Flood Blocking
- Configuring Storm Control
- Configuring SPAN and RSPAN
- Configuring Wireshark
- Configuring Enhanced Object Tracking
- Configuring System Message Logging
- Onboard Failure Logging (OBFL)
- Configuring SNMP
- Configuring NetFlow-lite
- Configuring Flexible NetFlow
- Configuring Ethernet OAM and CFM
- Configuring Y.1731 (AIS and RDI)
- Configuring Call Home
- Configuring Cisco IOS IP SLA Operations
- Configuring RMON
- Performing Diagnostics
- Configuring WCCP Version 2 Services
- Configuring MIB Support
- ROM Monitor
- Acronyms and Abbreviations
- configIX
- About Power over Ethernet
- Power Management Modes
- Configuring Power Consumption for Powered Devices on an Interface
- Displaying the Operational Status for an Interface
- Displaying all PoE Detection and Removal Events
- Displaying the PoE Consumed by a Module
- PoE Policing and Monitoring
- Enhanced Power PoE Support on the E-Series Chassis
Configuring Power over Ethernet
Note
Before reading this chapter, read the “Preparing for Installation” section of the
Catalyst 4500 Series Installation Guide. You must ensure that your installation site has enough power and cooling to accommodate the additional electrical load and heat introduced by PoE.
This chapter describes how to configure Power over Ethernet (PoE) on the Catalyst 4500 series switch.
This chapter contains the following sections:
- About Power over Ethernet
- Power Management Modes
- Configuring Power Consumption for Powered Devices on an Interface
- Displaying the Operational Status for an Interface
- Displaying all PoE Detection and Removal Events
- Displaying the PoE Consumed by a Module
- PoE Policing and Monitoring
- Enhanced Power PoE Support on the E-Series Chassis
Note For complete syntax and usage information for the switch commands used in this chapter, see the Cisco Catalyst 4500 Series Switch Command Reference and related publications at this location:
http://www.cisco.com/en/US/products/hw/switches/ps4324/index.html
If a command is not in the Catalyst 4500 Series Switch Command Reference, you can locate it in the Cisco IOS library. See the Cisco IOS Command Reference and related publications at this location:
http://www.cisco.com/en/US/products/ps6350/index.html
About Power over Ethernet
The Catalyst 4500 series switch provides Power over Ethernet (PoE) support for both Cisco Prestandard PoE and the IEEE 802.3af standard (ratified in 2003). PoE is supported by all Catalyst 4500 series chassis and requires a PoE module and power supply. The amount of PoE power available depends on the PoE capabilities of individual power supplies. Support for PoE enables the system to power inline devices, such as IP phones, IP video phones, and wireless access points over standard copper cabling (Category 5, 5e, or 6 cabling).
In addition, with PoE, you do not need to provide wall power for each PoE enabled device. This eliminates the cost for additional electrical cabling that is otherwise necessary for connected devices. Moreover, PoE enables you to isolate critical devices on a single power system, enabling the entire system to be supported by UPS backup.
You typically deploy a Catalyst 4500 series switch in one of two deployment scenarios. The first scenario is data-only, which requires power to operate the switch and the associated modules. The second scenario supports data and PoE (also termed “inline power”) for deployments where the attached device derives power from the Ethernet port.
Catalyst 4500 series switches can sense if a powered device is connected to a PoE module. They can supply PoE to the powered device if there is no power on the circuit. (If there is power on the circuit, the switch does not supply it.) The powered device can also be connected to an AC power source and supply its own power to the voice circuit.
Note You should select the amount of PoE desired using the Cisco Power Calculator:
http://tools.cisco.com/cpc/
Hardware Requirements
To power a device using PoE, your chassis must use at least one of the power supplies listed in Table 1-1 , and connect the device to at least one of the switching modules listed in Table 1-1 .
|
|
|
|---|---|
Power Management Modes
If your switch has a module capable of providing PoE to end stations, you can set each interface on the module to automatically detect and apply PoE if the end station requires power.
The Catalyst 4500 series switch has three PoE modes:
- auto—PoE interface. The supervisor engine directs the switching module to power up the interface only if the switching module discovers the phone and the switch has enough power. You can specify the maximum wattage that is allowed on the interface. If you do not specify a wattage, then the switch delivers no more than the hardware-supported maximum value. This mode has no effect if the interface is not capable of providing PoE.
- static —High priority PoE interface. The supervisor engine preallocates power to the interface, even when nothing is connected, guaranteeing that power exists for the interface. You can specify the maximum wattage that is allowed on the interface. If you do not specify a wattage, then the switch preallocates the hardware-supported maximum value. If the switch does not have enough power for the allocation, the command fails. The supervisor engine directs the switching module to power up the interface only if the switching module discovers the powered device.
- never —Data interface only The supervisor engine never powers up the interface, even if an unpowered phone is connected. This mode is only needed when you want to make sure power is never applied to a PoE-capable interface.
The switch can measure the actual PoE consumption for an 802.3af-compliant PoE module, and displays this in the show power module command.
PoE consumption cannot be measured on the WS-X4148-RJ45V PoE module. For all PoE calculations, the PoE consumption on this module is presumed to be equal to its administrative PoE.
For more information, see the “Displaying the PoE Consumed by a Module” section.
For most users, the default configuration of “auto” works well, providing plug-and-play capability. No further configuration is required. However, to make an interface higher priority or data only, or to specify a maximum wattage, perform this task:
|
|
|
|
|---|---|---|
|
|
||
max
milli-watts ] |
never |
static
[
max
milli-watts ]}
|
The auto keyword sets the interface to automatically detect and supply power to the powered device. it is the default configuration. The static keyword sets the interface to higher priority than auto. If necessary, use the max keyword to specify the maximum wattage allowed on the interface (4000 to 15400 milliwatts for most switching modules. As of Cisco IOS Release 12.2(44)SG, the WS-X4648-RJ45V+E can support up to 30 W available per-port and the WS-X4648-RJ45V-E supports up to 20 W. For more information, see “Enhanced Power PoE Support on the E-Series Chassis” section). Use the never keyword to disable detection and power for the PoE capable interface. |
|
|
|
||
|
|
Note If you set a non-PoE-capable interface to automatically detect and apply power, an error message indicates that the configuration is not valid.
The following example shows how to set the Fast Ethernet interface 4/1 to automatically detect PoE and send power through that interface, and to verify the PoE configuration:
Switch(config-if)# power inline auto
Switch(config-if)# end
The following example shows how to configure an interface so that it never supplies power through the interface:
Switch(config-if)# power inline never
Switch(config-if)# end
Intelligent Power Management
All Catalyst 4500 PoE-capable modules use Intelligent Power Management to provide power on each interface. When a powered device (PD) is attached to a PoE-capable port, the port detects the PD and provision power accordingly. If a Cisco PD is used, the switch and PD negotiate power using CDP packets to determine the precise amount of power needed by the PD. If the PD is 802.3af compatible, the difference between what is mandated by the 802.3af class and what is actually needed by the PD is returned to the power budget for use by additional devices. In this way, power negotiation enables customers to stretch their power budget and use it more effectively.
Power negotiation also enables the interoperability of newer Cisco powered devices with older legacy PoE-capable ports from Cisco. Newer Cisco PDs do not consume more than what the switch port can provide.
Configuring Power Consumption for Powered Devices on an Interface
By default, when the switch detects a powered device on an interface, it assumes the powered device consumes the maximum the port can provide (7 W on a legacy PoE module and 15.4W on the IEEE PoE modules introduced in Cisco IOS Release 12.2(18)EW). When the switch receives a CDP packet from the powered device, the wattage automatically adjusts downward to the specific amount required by that device. Normally, this automatic adjustment works well, and no further configuration is required or recommended. However, you can specify the powered device's consumption for a particular interface to provide extra functionality from your switch. This behavior is useful when CDP is disabled or not available.
Note When manually configuring the consumption for powered devices, you need to account for the power loss over the cable between the switch and the powered device.
Note The inline power consumption command overrides the power allocated to the port through IEEE/Cisco phone discovery and CDP/LLDP power negotiation. To guarantee safe operation of the system, ensure that the value configured here is no less than the actual power requirement of the attached device. If the power drawn by the inline powered devices exceeds the capability of the power supply, it could trip the power supply.
To change the power consumption of a single powered device, perform this task:
This example shows how to set the PoE consumption to 5000 milliwatts for interface gi 7/1 regardless what is mandated by the 802.3af class of the discovered device, or by any CDP packet received from the powered device. This example also verifies the PoE consumption on interface gi 7/1.
The following output displays the initial power consumption of the interface:
The following output displays the power consumption after entering the power inline consumption command on the interface:
Displaying the Operational Status for an Interface
Each interface has an operational status which reflects the PoE status for an interface. The operational status for an interface is defined as one of the following:
- on—Power is supplied by the port.
- off—Power is not supplied by the port. If a powered device is connected to an interface with external power, the switch does not recognize the powered device. The “Device” column in the show power inline command displays as n/a.
- Power-deny—The supervisor engine does not have enough power to allocate to the port, or the power that is configured for the port is less than the power required by the port; power is not being supplied by the port.
- err-disable —The port is unable to provide power to the connected device that is configured in static mode.
- faulty —The port failed diagnostics tests.
To view the operational status for an interface, use the show power inline command.
This example shows how to display the operational status for all interfaces on module 3:
This example shows how to display the operational status for Fast Ethernet interface 4/1:
Displaying all PoE Detection and Removal Events
Starting with Cisco IOS Release 15.0(2)SG2/XE 3.2.2SG, a Catalyst 4500 series switch can display all PoE detection and removal events.
To enable PoE event logging, you use the power inline logging global command:
Displaying the PoE Consumed by a Module
A Catalyst 4500 series switch can measure the actual PoE consumption for an 802.3af-compliant PoE module. You can observe this consumption by using show power module and show power detail commands. For all PoE calculations, presume that the PoE consumption on the WS-X4148-RJ45V module equals its administrative PoE.
The 802.3af-compliant PoE modules can consume up to 20 W of PoE to power FPGAs and other hardware components on the module. To ensure that the system has sufficient power for the PDs connected to the switch, add at least 20 W to your PoE requirements for each 802.3af-compliant PoE module.
The following example uses the show power module command to display the PoE consumption for an 802.3af-compliant module:
The Inline Power Oper column displays the amount of PoE consumed by the powered devices that are attached to the module, in addition to the PoE consumed by the FPGAs and other hardware components on the module.
The Inline Power Admin column displays only the amount of PoE allocated by the powered devices attached to the module.
Note The operating PoE consumption for an 802.3af-compliant module can be non-zero, even when no powered devices are attached to the module, because of the PoE consumed by FPGAs and other hardware components on the module. In addition, the operating PoE can vary because of fluctuations in the PoE consumed by the hardware components.
The following example uses the show power detail and show power inline commands to display the PoE consumption for an 802.3af-compliant module:
PoE Policing and Monitoring
Note This functionality is supported on the WS-X4548-RJ45V+, WS-X4648-RJ45V-E, and WS-X4648-RJ45V+E line cards.
PoE policing protects a switch from faulty inline powered devices that may draw more current than they were designed for. When a device is connected to a port, a line card detects the type of device connected and allocates the appropriate amount of power. It sets a PoE policing threshold to a value 5 percent greater than the allocated power. If the device consumes more power than specified by the policing threshold for a more than 1 second, the port shuts down. Depending on the policing action configured, the port may then be error-disabled, or a message might be logged to the console and the port restarted.
PoE monitoring lets you display the true power consumption of inline powered devices attached to the switch, allowing you determine your actual power consumption.
This section includes these topics:
- PoE Policing Modes
- Configuring Power Policing on an Interface
- Displaying Power Policing on an Interface
- Configuring Errdisable Recovery
PoE Policing Modes
PoE policing comprises two modes, which determine the action to take on the interface after a port shuts down because of an inline-power policing violation:
- Logging — An error message is logged to the console and the interface restarts; the device powers up.
- Errdisable (Default) — In addition to logging an error message to the console, the interface is placed in an errdisable state so that the device attached to the port does not receive inline-power until you restart the port or configure an errdisable autorecovery mechanism.
Note After an inline-power policing violation occurs and the port shuts down, PoE policing automatically turns on again when the port restarts. If the connected device exceeds its allocated power again, the port once again shuts down.
Configuring Power Policing on an Interface
The default policing levels are determined by the discovery and power allocation methods (listed in order of priority):
- Configured consumption values, in case any exist
- CDP allocated values (for Cisco devices using CDP)
- Allocated power from IEEE discovery (for devices using this mechanism)
To activate default PoE policing, enter the following:
The default action for power policing is to set the port to errdisable; the power inline police command is equivalent to the power inline police action errdisable command, as the above example illustrates. The following example illustrates how to configure the logging policing action:
When a PD consumes more than its allocated power, the port shuts down and a warning message similar to the following appears on the console.
For the WS-X4648-GB-RJ45V and WS-X4648-GB-RJ45V+:
For actions of Log type, the port restarts itself and the device reboots. In contrast, when the action is to set the port in an errdisable state, a log message similar to the following appears:
Displaying Power Policing on an Interface
You can display power policing on an interface, on a module, or for all the PoE-capable line cards in a chassis.
The following example shows output for the show power inline police command:
The following table lists the interface and the status.
If you enter the show power inline command at the global level (show power inline police), the last line of the output under the Oper Power field displays the total of true inline power consumption of all devices connected to the switch.
Configuring Errdisable Recovery
By default, errdisable auto recovery for inline-power is disabled; when an interface is placed in an errdisable state because of an inline-power policing violation, it remains in that state. You must enter shut and then no shut on the affected interface to revive it.
The errdisable autorecovery mechanism allows you to configure a timer for errdisable recovery so that when an interface enters errdisable state (after the timer expires), the interface returns from the errdisable state.
By default, errdisable detection for inline-power is enabled, as the following example illustrates:
Note If detection is disabled (through the errdisable detect cause inline-power command), the port is not placed in errdisable state when it exceeds its power policing threshold.
By default, errdisable recovery for inline-power is disabled. To enable errdisable recovery, enter the errdisable detect cause line-power command:
Enhanced Power PoE Support on the E-Series Chassis
The WS-X4648-RJ45V-E, WS-X4648-RJ45V+E, and WS-X4548-RJ45V+ switching modules support IEEE 802.3af PoE as well as the Cisco proprietary Inline Power standard. With
Cisco IOS Release 12.2(44)SG, the WS-X4648-RJ45V+E line card can also support the IEEE 802.3at standard with up to 30 W available per-port. The WS-X4648-RJ45V-E line card also supports up to 20 W. The WS-X4548-RJ45V+ switching module is supported with Cisco IOS Release 12.2(50)SG and can provide up to 30 W of inline power per-port.
For these switching modules, the valid milliwatt ranges for the power inline command have been increased appropriately for the module, as the following table illustrates:
|
|
|
|
|
|---|---|---|---|
The default power inline configurations usually are sifficient; no additional configuration is required even for high power-consumption Cisco powered devices (for example, a Cisco AP1250 Wireless Access Point). When a high-power consumption device is attached to a port on a WS-X4648-RJ45V-E or WS-X4648-RJ45V+E line card, the switch and device negotiate power using CDP packets to automatically determine the extended amount of power needed by the device.
Depending on the deployment requirements and design, you specify a specific configuration with the power inline command.
The following example shows how to pre-allocate PoE allocation to 16500 mW for Gi 2/1, regardless of what is mandated either by the 802.3af class of the discovered device or by any CDP packet that is received from the powered device:
Configuring Universal PoE
Note This feature is only available on Supervisor Engine 7-E and Supervisor Engine 7L-E.
Although IEEE 802.at only provides for power up to 30W per port, the WS-X4748-UPOE+E module can provide up to 60W using the spare pair of an RJ45 cable (wires 4,5,7,8) with the signal pair (wires 1,2,3,6). Power on the spare pair is enabled when the switch port and end-device mutually identify themselves as Universal PoE (UPOE) capable using CDP or LLDP and the end-device requests for power on the spare pair to be enabled. When the spare pair is powered, the end-device can negotiate up to 60W power from the switch using CDP or LLDP.
If the end-device is PoE capable on both signal and spare pairs but does not support the CDP or LLDP extensions required for UPOE, then the following configuration automatically enables power on both signal and spare pairs from the switch port:
The following example shows how to automatically enable power on both signal and spare pairs from switch port gigabit ethernet 2/1:
Do not enter this command if the end-device is incapable of sourcing inline power on the spare pair or if the end-device supports the CDP or LLDP extensions for UPOE.
Feedback