Catalyst 3550 Multilayer Switch Command Reference, Rel. 12.2(25)SE
Catalyst 3550 Switch Cisco IOS Commands - s
Downloads: This chapterpdf (PDF - 2.16MB) The complete bookPDF (PDF - 6.1MB) | Feedback

2

Table Of Contents

sdm prefer

service password-recovery

service-policy

set

setup

setup express

show access-lists

show archive status

show auto qos

show boot

show class-map

show cluster

show cluster candidates

show cluster members

show controllers cpu-interface

show controllers ethernet-controller

show controllers switch

show controllers tcam

show controllers utilization

show dot1q-tunnel

show dot1x

show env

show errdisable detect

show errdisable flap-values

show errdisable recovery

show etherchannel

show flowcontrol

show fm

show fm interface

show fm vlan

show forward

show interfaces

show interfaces counters

show ip dhcp snooping

show ip dhcp snooping binding

show ip igmp profile

show ip igmp snooping

show ip igmp snooping groups

show l2protocol-tunnel

show l2tcam

show l3tcam

show lacp

show mac access-group

show mac address-table

show mac address-table address

show mac address-table aging-time

show mac address-table count

show mac address-table dynamic

show mac address-table interface

show mac address-table multicast

show mac address-table notification

show mac address-table static

show mac address-table vlan

show mls qos

show mls qos aggregate-policer

show mls qos interface

show mls qos maps

show monitor

show mvr

show mvr interface

show mvr members

show pagp

show parser macro

show policy-map

show port-security

show power inline

show running-config vlan

show sdm prefer

show setup express

show spanning-tree

show storm-control

show system mtu

show tcam

show tcam pbr

show tcam qos

show udld

show version

show vlan

show vlan access-map

show vlan filter

show vmps

show vtp

shutdown

shutdown vlan

snmp-server enable traps

snmp-server host

snmp-server ip

snmp trap mac-notification

spanning-tree backbonefast

spanning-tree bpdufilter

spanning-tree bpduguard

spanning-tree cost

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

spanning-tree guard

spanning-tree link-type

spanning-tree loopguard default

spanning-tree mode

spanning-tree mst configuration

spanning-tree mst cost

spanning-tree mst forward-time

spanning-tree mst hello-time

spanning-tree mst max-age

spanning-tree mst max-hops

spanning-tree mst port-priority

spanning-tree mst priority

spanning-tree mst root

spanning-tree port-priority

spanning-tree portfast (global configuration)

spanning-tree portfast (interface configuration)

spanning-tree stack-port

spanning-tree uplinkfast

spanning-tree vlan

speed

storm-control

switchcore

switchport

switchport access

switchport block

switchport broadcast

switchport host

switchport mode

switchport multicast

switchport nonegotiate

switchport port-security

switchport port-security aging

switchport priority extend

switchport protected

switchport trunk

switchport unicast

switchport voice vlan

system mtu


2

sdm prefer

Use the sdm prefer global configuration command to configure the template used in Switch Database Management (SDM) resource allocation. You use a template to allocate system memory to best support the features being used in your application. Use a template to approximate the maximum number of unicast MAC addresses, Internet Group Management Protocol (IGMP) groups, quality of service (QoS) access control entries (ACEs), security ACEs, unicast routes, multicast routes, subnet VLANs (routed interfaces), and Layer 2 VLANs that can be configured on the switch. Use the no form of this command to return to the default template.

sdm prefer {access [extended-match] | extended-match | routing [extended-match] | vlan}

no sdm prefer

Syntax Description

access

Provide maximum system utilization for multicast traffic, QoS classification ACEs, and security ACEs. You would typically use this template for an access switch at the network edge.

extended-match

Reformat routing-table memory allocation to allow 144-bit Layer 3 ternary content addressable memory (TCAM) with the default template, the access template, or the routing template. Reformatting routing table memory space reduces the number of allowed unicast routes by one half.

routing

Provide maximum system utilization for unicast routing, minimizing QoS classification ACLs and security ACLs. You would typically use this template for a router or aggregator in the middle of a network.

vlan

Provide maximum system utilization for VLANs, with routing disabled. This template maximizes system memory for use as a Layer 2 switch with no routing.


Defaults

The default template provides a balance to all features.

Command Modes

Global configuration

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(6)EA1

Template values revised. Templates for Fast Ethernet switches were added.

12.1(8)EA1

Template values for Gigabit Ethernet switches were revised.

12.1(11)EA1

The extended-match keyword was added.


Usage Guidelines

You must reload the switch for the configuration to take effect.

The sdm prefer vlan command disables routing capability in the switch. Any routing configurations are rejected after the reload, and any previously configured routing options might be lost. Use the sdm prefer vlan command only on switches intended for Layer 2 switching with no routing.

Do not use the routing template if you do not have routing enabled on your switch. Entering the sdm prefer routing global configuration command prevents other features from using the memory allocated to unicast and multicast routing in the routing template (approximately 17 K for Fast Ethernet switches and 30 K for Gigabit Ethernet switches).

When running the Web Cache Communication Protocol (WCCP) or multiple Virtual Private Network (VPN) routing/forwarding (multi-VRF) instances in customer edge (CE) devices (multi-VRF CE), extra fields are required in the routing tables stored in TCAM. You must use the extended-match keyword with the default, access, or routing templates to enable the switch to support 144-bit Layer 3 TCAM when using these features. The keyword reformats the memory space allocated for routing, reducing the number of allowed unicast routes by half.

Table 2-12 lists the approximate number of each resource supported in each of the four templates for a Gigabit Ethernet switch. Table 2-13 lists the approximate number supported for a switch with mostly Fast Ethernet ports. The first six rows in the tables (unicast MAC addresses through multicast routes) represent approximate hardware boundaries set when a template is selected. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance.

The last two rows, the total number of routed ports and SVIs and the number of Layer 2 VLANs, are guidelines used to calculate hardware resource consumption related to the other resource parameters.

The number of subnet VLANs (routed ports and SVIs) are not limited by software and can be set to a number higher than indicated in the tables. If the number of subnet VLANs configured is lower or equal to the number in the tables, the number of entries in each category (Unicast addresses, IGMP groups, and so on) for each template will be as indicated. As the number of subnet VLANs is increased, CPU utilization will typically increase. If the number of subnet VLANs is increased beyond the number indicated in the tables, the number of supported entries in each category may decrease depending on features that are enabled. For example, if PIM-DVMRP is enabled with more than 16 subnet VLANs, the number of entries for multicast routes will be in the range of 1K-5K entries for the access template.

Table 2-12 Approximate Number of Feature Resources Allowed by Each Template for Gigabit Ethernet Switches

Resource
Default Template
Access Template
Routing Template
VLAN Template

Unicast MAC addresses

6 K

2 K

6 K

12 K

IGMP groups (managed by Layer 2 multicast features such as MVR or IGMP snooping)

6 K

8 K

6 K

6 K

QoS classification ACEs

2K

2 K

1 K

2 K

Security ACEs

2 K

4 K

1 K

2 K

Unicast routes

12 K or 6 K1

4 K or 2 K1

24 K or 12 K1

0

Multicast routes

6 K

8 K

6 K

0

Routed interfaces (routed ports and SVIs)

16

16

16

16

Layer 2 VLANs

1 K

1 K

1 K

1 K

1 When the extended-match keyword is used with the indicated template. This keyword affects only the number of unicast routes allowed.


Table 2-13 Approximate Number of Feature Resources Allowed by Each Template for Fast Ethernet Switches

Resource
Default Template
Access Template
Routing Template
VLAN Template

Unicast MAC addresses

5 K

1 K

5 K

8 K

IGMP groups (managed by Layer 2 multicast features such as MVR and IGMP snooping)

1 K

2 K

1 K

1 K

QoS ACEs

1 K

1 K

512

1 K

Security ACEs

1 K

2 K

512

1 K

Unicast routes

8 K or 4K1

2 K or 1K1

16 K or 8K1

0

Multicast routes

1 K

2 K

1 K

0

Routed interfaces (routed ports and SVIs)

8

8

8

8

Layer 2 VLANs

1 K

1 K

1 K

1 K

1 When the extended-match keyword is used with the indicated template. This keyword affects only the number of unicast routes allowed.


Examples

This example shows how to configure the routing template on the switch:

Switch(config)# sdm prefer routing
Switch(config)# exit
Switch# reload

This example shows how to configure the routing template with a 144-bit routing table allocation:

Switch(config)# sdm prefer routing extended-match
Switch(config)# exit
Switch# reload

This example shows how to remove the routing template and to use the default template with the standard 72-bit routing table allocation:

Switch(config)# no sdm prefer routing
Switch(config)# exit
Switch# reload

You can verify your settings by entering the show sdm prefer privileged EXEC command.

Related Commands

Command
Description

show sdm prefer

Displays the current SDM template in use or displays the templates that can be used, with approximate resource allocation per feature.


service password-recovery

Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.

service password-recovery

no service password-recovery

Syntax Description

This command has no arguments or keywords.

Defaults

The password-recovery mechanism is enabled.

Command Modes

Global configuration

Command History

Release
Modification

12.1(6)EA1a

This command was introduced.


Usage Guidelines

This command is valid only on Catalyst 3550 Fast Ethernet switches; it is not available for Gigabit Ethernet switches.

As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration.

The password-recovery mechanism has been triggered, but
is currently disabled.  Access to the boot loader prompt
through the password-recovery mechanism is disallowed at
this point.  However, if you agree to let the system be
reset back to the default system configuration, access
to the boot loader prompt can still be allowed.

Would you like to reset the system back to the default configuration (y/n)?

If the user chooses not to reset the system back to the default configuration, the normal boot process continues, as if the Mode button had not been pressed. If you choose to reset the system back to the default configuration, the configuration file in flash memory is deleted, and the VLAN database file, flash:vlan.dat (if present), is deleted.


Note If you use the no service password-recovery command to control end user access to passwords, we recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values. Do not keep a backup copy of the config file on the switch.

If the switch is operating in VTP transparent mode, we recommend that you also save a copy of the vlan.dat file in a location away from the switch.


You can verify if password recovery is enabled or disabled by entering the show version privileged EXEC command.

Examples

This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration:

Switch(config)# no service-password recovery
Switch(config)# exit

This is an example of the output from the show version privileged EXEC command when password-recovery is disable:

Switch# show version
1w6d: %SYS-5-CONFIG_I: Configured from console by console
Cisco Internetwork Operating System Software
IOS (tm) C3550 Software (C3550-I9Q3L2-M), Version 12.1(8)EA1, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Wed 24-Oct-01 06:20 by antonino
Image text-base: 0x00003000, data-base: 0x004C1864

ROM: Bootstrap program is C3550 boot loader

flam-1-6 uptime is 1 week, 6 days, 3 hours, 59 minutes
System returned to ROM by power-on
System image file is "flash:c3550--i9q3l2-mz.121-8EA1.bin"

cisco WS-C3550-48 (PowerPC) processor with 65526K/8192K bytes of memory.
Last reset from warm-reset
Running Layer2 Switching Only Image

Ethernet-controller 1 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 2 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 3 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 4 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 5 has 1 Gigabit Ethernet/IEEE 802.3 interface

Ethernet-controller 6 has 1 Gigabit Ethernet/IEEE 802.3 interface

48 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)

The password-recovery mechanism is disabled.
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: AA:00:0B:2B:02:00
Configuration register is 0x10F

Related Commands

Command
Description

show version

Displays version information for the hardware and firmware.


service-policy

Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to the input or output of a particular interface. Use the no form of this command to remove the policy map and interface association.

service-policy {input policy-map-name | output policy-map-name}

no service-policy {input policy-map-name | output policy-map-name}

Syntax Description

input policy-map-name

Apply the specified policy-map to the input of an interface.

output policy-map-name

Apply the specified policy-map to the output of an interface.



Note Though visible in the command-line help strings, the history keyword is not supported, and you should ignore the statistics it gathers.


Defaults

No policy maps are attached to the interface.

Command Modes

Interface configuration

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Only one policy map per interface per direction is supported.

You cannot use the service-policy interface configuration command to attach policy maps that contain these elements to an egress interface:

set or trust policy-map class configuration commands. Instead, you can use the police policy-map class configuration command to mark down (reduce) the DSCP value at the egress interface.

Access control list (ACL) classification.

Per-port per-VLAN classification.

The only match criterion in a policy map that can be attached to an egress interface is the match ip dscp dscp-list class-map configuration command.

A classification that uses a port trust state (for example, mls qos trust [cos | dscp | ip-precedence] and classification that uses a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last setting configured overwrites the previous configuration.

Examples

This example shows how to apply plcmap1 to an ingress interface:

Switch(config)# interface gigabitethernet0/1
Switch(config-if)# service-policy input plcmap1

This example shows how to apply plcmap2 to an egress interface:

Switch(config)# interface gigabitethernet0/2
Switch(config-if)# service-policy output plcmap2

This example shows how to detach plcmap2 from an interface:

Switch(config)# interface gigabitethernet0/2
Switch(config-if)# no service-policy input plcmap2

You can verify your settings by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

policy-map

Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.

show policy-map

Displays quality of service (QoS) policy maps.


set

Use the set policy-map class configuration command to classify IP traffic by setting a class of service (CoS), Differentiated Services Code Point (DSCP), or IP-precedence value in the packet. Use the no form of this command to remove the traffic classification.

set {cos new-cos | dscp new-dscp | ip precedence new-precedence}

no set {cos new-cos | dscp new-dscp | ip precedence new-precedence}


Note Beginning with Cisco IOS Release 12.2(25)SE, the set dscp new-dscp command replaces the set ip dscp new-dscp command.


Syntax Description

cos new-cos

New CoS value assigned to the classified traffic. The range is from 0 to 7.

dscp new-dscp

New DSCP value assigned to the classified traffic. The range is 0 to 63. You also can enter a mnemonic name for a commonly used value.

ip precedence new-precedence

New IP-precedence value assigned to the classified traffic. The range is 0 to 7. You also can enter a mnemonic name for a commonly used value.


Defaults

No traffic classification is defined.

Command Modes

Policy-map class configuration

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(12c)EA1

The cos keyword was added.

12.2(25)SE

The ip dscp new-dscp keyword was changed to dscp new-dscp.


Usage Guidelines

Within the same policy map, you should not use the set command with the trust policy-map class configuration command unless you also use the mls qos cos policy-map global configuration command. For information about using this command, see the "mls qos cos policy-map" section.

You cannot use the service-policy interface configuration command to attach policy maps that contain these elements to an egress interface:

set or trust policy-map class configuration commands. Instead, you can use the police policy-map class configuration command to mark down (reduce) the DSCP value at the egress interface.

Access control list (ACL) classification.

Per-port per-VLAN classification.

The only match criterion in a policy map that can be attached to an egress interface is the match ip dscp dscp-list class-map configuration command.

For the set dscp new-dscp or the set ip precedence new-precedence command, you can enter a mnemonic name for a commonly used value. For example, you can enter the set dscp af11 command, which is the as same entering the set dscp 10 command. You can enter the set ip precedence critical command, which is the same as entering the set ip precedence 5 command. For a list of supported mnemonics, enter the set dscp ? or the set ip precedence ? command to see the command-line help strings.

To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.

Examples

This example shows how to assign DSCP 10 to all FTP traffic without any policers:

Switch(config)# policy-map policy_ftp
Switch(config-pmap)# class ftp_class
Switch(config-pmap-c)# set dscp 10
Switch(config-pmap)# exit

This example shows how to assign a CoS value in a policy map:

Switch(config)# mls qos cos policy-map
Switch(config)# policy-map policy2
Switch(config-pmap)# class class1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# set cos 3
Switch(config-pmap-c)# exit

You can verify your settings by entering the show policy-map privileged EXEC command.

Related Commands

Command
Description

police

Defines a policer for classified traffic.

policy-map

Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.

show policy-map

Displays quality of service (QoS) policy maps.

trust

Defines a trust state for traffic classified by the class policy-map configuration command or the class-map global configuration command.


setup

Use the setup privileged EXEC command to configure the switch with its initial configuration.

setup

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

When you use the setup command, make sure that you have this information:

IP address and network mask

Password strategy for your environment

Whether the switch will be used as the command switch in a cluster and the cluster name

When you enter the setup command, an interactive dialog, called the System Configuration Dialog, appears. It guides you through the configuration process and prompts you for information. The values shown in brackets next to each prompt are the default values last set by using either the setup command facility or the configure privileged EXEC command.

Help text is provided for each prompt. To access help text, press the question mark (?) key at a prompt.

To return to the privileged EXEC prompt without making changes and without running through the entire System Configuration Dialog, press Ctrl-C.

When you complete your changes, the setup program shows you the configuration command script that was created during the setup session. You can save the configuration in NVRAM, return to the setup program without saving, or return to the command-line prompt without saving the configuration.

Examples

This is an example of output from the setup command:

Switch# setup

--- System Configuration Dialog ---

Continue with configuration dialog? [yes/no]: yes

At any point you may enter a question mark '?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets '[]'.

Basic management setup configures only enough connectivity
for management of the system, extended setup will ask you
to configure each interface on the system.

Would you like to enter basic management setup? [yes/no]: yes
Configuring global parameters:

Enter host name [Switch]:host-name

  The enable secret is a password used to protect access to
  privileged EXEC and configuration modes. This password, after
  entered, becomes encrypted in the configuration.
  Enter enable secret: enable-secret-password

  The enable password is used when you do not specify an
  enable secret password, with some older software versions, and
  some boot images.
  Enter enable password: enable-password

  The virtual terminal password is used to protect
  access to the router over a network interface.
  Enter virtual terminal password: terminal-password

  Configure SNMP Network Management? [no]: yes
  Community string [public]: 

Current interface summary
Any interface listed with OK? value "NO" does not have a valid configuration

Interface                  IP-Address      OK? Method Status                Protocol
Vlan1                      172.20.135.202  YES NVRAM  up                    up

GigabitEthernet0/1         unassigned      YES unset  up                    up

GigabitEthernet0/2         unassigned      YES unset  up                    down

<output truncated>

Port-channel1              unassigned      YES unset  up                    down

Enter interface name used to connect to the
management network from the above interface summary: vlan1

Configuring interface vlan1:
Configure IP on this interface? [yes]: yes 
IP address for this interface: ip_address
Subnet mask for this interface [255.0.0.0]: subnet_mask

Would you like to enable as a cluster command switch? [yes/no]: yes

Enter cluster name: cluster-name

The following configuration command script was created:

hostname host-name
enable secret 5 $1$LiBw$0Xc1wyT.PXPkuhFwqyhVi0
enable password enable-password
line vty 0 15
password terminal-password
snmp-server community public
!
no ip routing
!
interface GigabitEthernet0/1
no ip address
!
interface GigabitEthernet0/2
no ip address
! 
<output truncated>

cluster enable cluster-name
!
end
Use this configuration? [yes/no]: yes
!
[0] Go to the IOS command prompt without saving this config.

[1] Return back to the setup without saving this config.

[2] Save this configuration to nvram and exit.

Enter your selection [2]:

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.

show version

Displays version information for the hardware and firmware.


setup express

Use the setup express global configuration command to enable Express Setup mode on the switch. This is the default setting. Use the no form of this command to disable Express Setup mode.

setup express

no setup express

Syntax Description

This command has no arguments or keywords.

Defaults

Express Setup is enabled.

Command Modes

Global configuration

Command History

Release
Modification

12.1(14)EA1

This command was introduced.


Usage Guidelines

When Express Setup is enabled on a new (unconfigured) switch, pressing the Mode button for 2 seconds activates Express Setup. You can access the switch through an Ethernet port by using the IP address 10.0.0.1 and then can configure the switch with the web-based Express Setup program or the command-line interface (CLI)-based setup program.

When you press the Mode button for 2 seconds on a configured switch, the mode LEDs start blinking. If you press the Mode button for a total of 10 seconds, the switch configuration is deleted, and the switch reboots. The switch can then be configured like a new switch, either through the web-based Express Setup program or the CLI-based setup program.


Note As soon as you make any change to the switch configuration (including entering no at the beginning of the CLI-based setup program), configuration by Express Setup is no longer available. You can only run Express Setup again by pressing the Mode button for 10 seconds. This deletes the switch configuration and reboots the switch.


If Express Setup is active on the switch, entering the write memory or copy running-configuration startup-configuration privileged EXEC commands deactivates Express Setup. The IP address 10.0.0.1 is no longer valid on the switch, and your connection using this IP address ends.

The primary purpose of the no setup express command is to prevent someone from deleting the switch configuration by pressing the Mode button for 10 seconds.

Examples

This example shows how to enable Express Setup mode:

Switch(config)# setup express

You can verify that Express Setup mode is enabled by pressing the Mode button:

On an unconfigured switch, the mode LEDs begin blinking green after 2 seconds.

On a configured switch, the mode LEDs turn solid green after a total of 10 seconds.


Caution If you hold the Mode button down for a total of 10 seconds, the configuration is deleted, and the switch reboots.

This example shows how to disable Express Setup mode:

Switch(config)# no setup express

You can verify that Express Setup mode is disabled by pressing the Mode button. The mode LEDs only turn solid green or begin blinking green if Express Setup mode is enabled on the switch.

Related Commands

Command
Description

show setup express

Displays if Express Setup mode is active on the switch.


show access-lists

Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.

show access-lists [name | number | hardware counters] [ | {begin | exclude | include} expression]

Syntax Description

name

(Optional) Name of the ACL.

number

(Optional) ACL number. The range is from 1 to 2699.

hardware counters

(Optional) Display global hardware ACL statistics for switched and routed packets.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

The switch supports only IP standard and extended access lists. Therefore, the allowed numbers are only 1 to 199 and 1300 to 2699.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show access-lists command:

Switch# show access-lists
Standard IP access list 13
    10 permit any
Standard IP access list permit Any
    10 permit any
Extended IP access list 101
    10 permit icmp any any conversion-error
    20 permit 234 host 172.30.40.1 host 123.23.23.2
Extended IP access list 102
    10 permit esp any any
    20 permit eigrp any any tos min-monetary-cost
Extended IP access list 103
    10 permit icmp any any 40 60
Extended IP access list CMP-NAT-ACL
    10 Dynamic Cluster-NAT permit ip any any
Extended MAC access list abc2
    10 permit host 1100.bb00.00cc host 2234.0123.2345     

This is an example of output from the show access-lists hardware counters command:

Switch# show access-lists hardware counters
Input Drops:             0 matches (0 bytes)
Output Drops:            0 matches (0 bytes)
Input Forwarded:         234781 matches (19942889 bytes)
Output Forwarded:        0 matches (0 bytes)
Input Bridge Only:       0 matches (0 bytes)
Bridge and Route in CPU: 0 matches (0 bytes)
Route in CPU:            160 matches (10344 bytes)

Related Commands

Command
Description

access-list

Configures a standard or extended numbered access list on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2 > IP Services Commands.

ip access list

Configures a named IP access list on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2 > IP Services Commands.

mac access-list extended

Configures a named or numbered MAC access list on the switch.


show archive status

Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or TFTP protocol.

show archive status [{begin | exclude | include} expression]

Syntax Description

begin

(Optional) Display begins with the line that matches the expression.

exclude

(Optional) Display excludes lines that match the expression.

include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(25)SE

This command was introduced.


Usage Guidelines

If you use the archive download-sw privileged EXEC command to download an image to a TFTP server, the output of the archive download-sw command shows the status of the download.

If you do not have a TFTP server, you can use Network Assistant or the embedded device manager to download the image by using the HTTP protocol. The show archive status command shows the progress of the download.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Examples

These are examples of output from the show archive status command:

Switch# show archive status
IDLE: No upgrade in progress

Switch# show archive status
LOADING: Upgrade in progress

Switch# show archive status
EXTRACT: Extracting the image

Switch# show archive status
VERIFY: Verifying software

Switch# show archive status
RELOAD: Upgrade completed. Reload pending

Related Commands

Command
Description

archive download-sw

Downloads a new image from a TFTP server to the switch.


show auto qos

Use the show auto qos user EXEC command to display the quality of service (QoS) commands entered on the interfaces on which automatic QoS (auto-QoS) configuration is enabled.

show auto qos [interface [interface-id]

Syntax Description

interface [interface-id]

(Optional) Display auto-QoS information for the specified interface or for all interfaces. Valid interfaces include physical ports.


Command Modes

User EXEC

Command History

Release
Modification

12.1(12c)EA1

This command was introduced.

12.1(20)EA2

The information in the command output changed, and the user guidelines were updated.


Usage Guidelines

In releases earlier than Cisco IOS Release 12.1(20)EA2, the show auto qos [interface [interface-id]] command output shows the initial generated auto-QoS configuration.

In Cisco IOS Release 12.1(20)EA2 or later, the show auto qos command output shows only the auto-QoS commands entered on each interface. The show auto qos interface interface-id command output shows the auto-QoS command entered on a specific interface.

Use the show running-config privileged EXEC command to display the auto-QoS configuration and the user modifications.

To display information about the QoS configuration that might be affected by auto-QoS, use one of these commands:

show mls qos

show mls qos map cos-dscp

show mls qos interface [interface-id] [buffers | queueing]

show running-config

Examples

This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered:

Switch> show auto qos 
FastEthernet0/1
auto qos voip cisco-softphone

FastEthernet0/2
auto qos voip cisco-phone

FastEthernet0/4
auto qos voip cisco-softphone

This is an example of output from the show auto qos interface interface-id command when the auto 
qos voip cisco-phone interface configuration command is entered:

Switch> show auto qos interface fastethernet0/2
FastEthernet0/2
auto qos voip cisco-phone

This is an example of output from the show running-config privileged EXEC command when the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered on 10/100 Ethernet interfaces:

Switch# show running-config
Building configuration...
...
mls qos map policed-dscp  24 26 46 to 0
mls qos map cos-dscp 0 8 16 26 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 85
mls qos min-reserve 7 51
mls qos min-reserve 8 34
mls qos
!
class-map match-all AutoQoS-VoIP-RTP-Trust
  match ip dscp 46
class-map match-all AutoQoS-VoIP-Control-Trust
  match ip dscp 24 26
!
!
policy-map AutoQoS-Police-SoftPhone
  class AutoQoS-VoIP-RTP-Trust
    set dscp 46
    police 320000 8000 exceed-action policed-dscp-transmit
  class AutoQoS-VoIP-Control-Trust
    set dscp 24
    police 32000 8000 exceed-action policed-dscp-transmit
!
...
interface FastEthernet0/6
 switchport mode dynamic desirable
 mls qos trust device cisco-phone
 mls qos trust cos
 auto qos voip cisco-phone
 wrr-queue bandwidth 10 20 70 1
 wrr-queue min-reserve 1 5
 wrr-queue min-reserve 2 6
 wrr-queue min-reserve 3 7
 wrr-queue min-reserve 4 8
 wrr-queue cos-map 1 0 1
 wrr-queue cos-map 2 2 4
 wrr-queue cos-map 3 3 6 7
 wrr-queue cos-map 4 5
 priority-queue out
!
interface FastEthernet0/7
 switchport mode dynamic desirable
!
interface FastEthernet0/8
 switchport mode dynamic desirable
 mls qos trust device cisco-phone
 mls qos trust cos
 auto qos voip cisco-phone
 wrr-queue bandwidth 10 20 70 1
 wrr-queue min-reserve 1 5
 wrr-queue min-reserve 2 6
 wrr-queue min-reserve 3 7
 wrr-queue min-reserve 4 8
 wrr-queue cos-map 1 0 1
 wrr-queue cos-map 2 2 4
 wrr-queue cos-map 3 3 6 7
 wrr-queue cos-map 4 5
 priority-queue out
!
<output truncated>

These are examples of output from the show auto qos command when auto-QoS is disabled on the switch:

Switch> show auto qos
AutoQoS not enabled on any interface

These are examples of output from the show auto qos interface interface-id command when auto-QoS is disabled on an interface:

Switch> show auto qos interface fastethernet0/1
AutoQoS is disabled

Related Commands

Command
Description

auto qos voip

Automatically configures QoS for VoIP within a QoS domain.


show boot

Use the show boot privileged EXEC command to display the settings of the boot environment variables.

show boot [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The Private Config file field description was added.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.


Note Only the Cisco IOS software can read and write a copy of the private configuration file. You cannot read, write, delete, or display a copy of this file.


Examples

This is an example of output from the show boot command. Table 2-14 describes each field in the display.

Switch# show boot
BOOT path-list:      flash:c3550-i5q3l2-mz-121.4.EA1/c3550-i5q3l2-mz-121.4.EA1.bin
Config file:         flash:config.text
Private Config file: flash:private-config.text
Enable Break:        no
Manual Boot:         yes
HELPER path-list:
NVRAM/Config file
      buffer size:   32768 

Table 2-14 show boot Field Descriptions

Field
Description

BOOT path-list

Displays a semicolon separated list of executable files to try to load and execute when automatically booting.

If the BOOT environment variable is not set, the system attempts to load and execute the first executable image it can find by using a recursive, depth-first search through the flash file system. In a depth-first search of a directory, each encountered subdirectory is completely searched before continuing the search in the original directory.

If the BOOT variable is set but the specified images cannot be loaded, the system attempts to boot the first bootable file that it can find in the flash file system.

Config file

Displays the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration.

Private Config file

Displays the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration.

Note Only the Cisco IOS software can read and write a copy of the private configuration file. You cannot read, write, delete, or display a copy of this file.

Enable Break

Displays whether a break during booting is enabled or disabled. If it is set to yes, on, or 1, you can interrupt the automatic boot process by pressing the Break key on the console after the flash file system is initialized.

Manual Boot

Displays whether the switch automatically or manually boots. If it is set to no or 0, the boot loader attempts to automatically boot the system. If it is set to anything else, you must manually boot the switch from the boot loader mode.

Helper path-list

Displays a semicolon separated list of loadable files to dynamically load during the boot loader initialization. Helper files extend or patch the functionality of the boot loader.

NVRAM/Config file buffer size

Displays the buffer size that Cisco IOS uses to hold a copy of the configuration file in memory. The configuration file cannot be larger than the buffer size allocation.


Related Commands

Command
Description

boot buffersize

Specifies the size of the file system-simulated NVRAM in flash memory.

boot config-file

Specifies the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration.

boot enable-break

Enables interrupting the automatic boot process.

boot manual

Enables manually booting the switch during the next boot cycle.

boot private-config-file

Specifies the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration.

boot system

Specifies the Cisco IOS image to load during the next boot cycle.


show class-map

Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.

show class-map [class-map-name] [ | {begin | exclude | include} expression]

Syntax Description

class-map-name

(Optional) Display the contents of the specified class map.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show class-map command:

Switch> show class-map 
 Class Map match-any dscp_class 
   Match ip dscp 9 
Class Map match-all vlan_class
  Match vlan 10 20-30 40
  Match class-map dscp_class

Related Commands

Command
Description

class-map

Creates a class map to be used for matching packets to the class whose name you specify.

match (class-map configuration)

Defines the match criteria to classify traffic.


show cluster

Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on command and member switches.

show cluster [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

If the switch is not a command switch or a member switch, the command displays an empty line at the prompt.

On a member switch, this command displays the identity of the command switch, the switch member number, and the state of its connectivity with the command switch.

On a command switch, this command displays the cluster name, and the total number of members. It also shows the cluster status and time since the status changed. If redundancy is enabled, it displays the primary and secondary command-switch information.

If you enter this command on a switch that is not a cluster member, the error message Not a management cluster member appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output when the show cluster command is entered on the active command switch:

Switch> show cluster
Command switch for cluster "Ajang"
        Total number of members:        7
        Status:                         1 members are unreachable
        Time since last status change:  0 days, 0 hours, 2 minutes
        Redundancy:                     Enabled
                Standby command switch: Member 1
                Standby Group:          Ajang_standby
                Standby Group Number:   110
        Heartbeat interval:             8
        Heartbeat hold-time:            80
        Extended discovery hop count:   3 

This is an example of output when the show cluster command is entered on a member switch:

Switch1> show cluster
Member switch for cluster "hapuna"
        Member number:                  3
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

This is an example of output when the show cluster command is entered on a member switch that is configured as the standby command switch:

Switch> show cluster
Member switch for cluster "hapuna"
        Member number:                  3 (Standby command switch)
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

This is an example of output when the show cluster command is entered on the command switch that has lost connectivity with member 1:

Switch> show cluster
Command switch for cluster "Ajang"
        Total number of members:        7
        Status:                         1 members are unreachable
        Time since last status change:  0 days, 0 hours, 5 minutes
        Redundancy:                     Disabled
        Heartbeat interval:             8
        Heartbeat hold-time:            80
        Extended discovery hop count:   3 

This is an example of output when the show cluster command is entered on a member switch that has lost connectivity with the command switch:

Switch> show cluster
Member switch for cluster "hapuna"
        Member number:                  <UNKNOWN>
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

Related Commands

Command
Description

cluster enable

Enables a command-capable switch as the cluster command switch, assigns a cluster name, and optionally assigns a member number to it.

show cluster candidates

Displays a list of candidate switches.

show cluster members

Displays information about the cluster members.


show cluster candidates

Use the show cluster candidates privileged EXEC command on the command switch to display a list of candidate switches.

show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]

Syntax Description

detail

(Optional) Display detailed information for all candidates.

mac-address H.H.H.

(Optional) MAC address of the cluster candidate.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Enter this command only on a command switch.

If the switch is not a command switch, the command returns an empty line at the prompt.

The SN in the display means switch member number. If E appears in the SN column, it means that the switch is discovered through extended discovery. If E does not appear in the SN column, it means that the switch member number is the upstream neighbor of the candidate switch. The hop count is the number of devices the candidate is from the command switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show cluster candidates command:

Switch> show cluster candidates
                                                             |---Upstream---|
MAC Address    Name         Device Type      PortIf  FEC Hops SN PortIf  FEC
00d0.7961.c4c0 StLouis-2    WS-C3550-12T     Gi0/1        2   1  Fa0/11 
00d0.bbf5.e900 ldf-dist-128 WS-C3524-XL      Fa0/7        1   0  Fa0/24      
00e0.1e7e.be80 1900_Switch  1900             3        0   1   0  Fa0/11      
00e0.1e9f.7a00 Surfers-24   WS-C2924-XL      Fa0/5        1   0  Fa0/3       
00e0.1e9f.8c00 Surfers-12-2 WS-C2912-XL      Fa0/4        1   0  Fa0/7       
00e0.1e9f.8c40 Surfers-12-1 WS-C2912-XL      Fa0/1        1   0  Fa0/9       

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch directly connected to the command switch:

Switch> show cluster candidates mac-address 00d0.7961.c4c0
Device 'Tahiti-12' with mac address number 00d0.7961.c4c0
        Device type:            cisco WS-C3512-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 0)
        Local port:             Fa0/3   FEC number: 
        Upstream port:          Fa0/13  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 1

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch three hops from the cluster edge:

Switch> show cluster candidates mac-address 0010.7bb6.1cc0
Device 'Ventura' with mac address number 0010.7bb6.1cc0
        Device type:            cisco WS-C2912MF-XL
        Upstream MAC address:   0010.7bb6.1cd4
        Local port:             Fa2/1   FEC number: 
        Upstream port:          Fa0/24  FEC Number: 
        Hops from cluster edge: 3
        Hops from command device: -

This is an example of output from the show cluster candidates detail command:

Switch> show cluster candidates detail
Device 'Tahiti-12' with mac address number 00d0.7961.c4c0
        Device type:            cisco WS-C3512-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 1)
        Local port:             Fa0/3   FEC number: 
        Upstream port:          Fa0/13  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2
	Device '1900_Switch' with mac address number 00e0.1e7e.be80
        Device type:            cisco 1900
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 2)
        Local port:             3       FEC number: 0
        Upstream port:          Fa0/11  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2
Device 'Surfers-24' with mac address number 00e0.1e9f.7a00
        Device type:            cisco WS-C2924-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 3)
        Local port:             Fa0/5   FEC number: 
        Upstream port:          Fa0/3   FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster members

Displays information about the cluster members.


show cluster members

Use the show cluster members privileged EXEC command on the command switch to display information about the cluster members.

show cluster members [n | detail] [ | {begin | exclude | include} expression]

Syntax Description

n

(Optional) Number that identifies a cluster member. The range is from 0 to 15.

detail

(Optional) Display detailed information for all cluster members.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

You should enter this command only on a command switch.

If the cluster has no members, this command displays an empty line at the prompt.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show cluster members command. The SN in the display means switch number.

Switch# show cluster members
                                                |---Upstream---|
SN MAC Address    Name         PortIf FEC Hops   SN PortIf  FEC  State
0  0002.4b29.2e00 StLouis1                 0                    Up   (Cmdr)
1  0030.946c.d740 tal-switch-1 Fa0/13      1     0  Gi0/1       Up
2  0002.b922.7180 nms-2820     10      0   2     1  Fa0/18      Up
3  0002.4b29.4400 SanJuan2     Gi0/1       2     1  Fa0/11      Up
4  0002.4b28.c480 GenieTest    Gi0/2       2     1  Fa0/9       Up

This is an example of output from the show cluster members for cluster member 3:

Switch# show cluster members 3
Device 'SanJuan2' with member number 3
        Device type:            cisco WS-C3550-12T
        MAC address:            0002.4b29.4400
        Upstream MAC address:   0030.946c.d740 (Cluster member 1)
        Local port:             Gi0/1   FEC number:
        Upstream port:          Fa0/11  FEC Number:
        Hops from command device: 2    

This is an example of output from the show cluster members detail command:

Switch# show cluster members detail
Device 'StLouis1' with member number 0 (Command Switch)
        Device type:            cisco WS-C3550-12T
        MAC address:            0002.4b29.2e00
        Upstream MAC address:
        Local port:                     FEC number:
        Upstream port:                  FEC Number:
        Hops from command device: 0                 
Device 'tal-switch-14' with member number 1
        Device type:            cisco WS-C3548-XL
        MAC address:            0030.946c.d740
        Upstream MAC address:   0002.4b29.2e00 (Cluster member 0)
        Local port:             Fa0/13  FEC number:
        Upstream port:          Gi0/1   FEC Number:
        Hops from command device: 1                   
Device 'nms-2820' with member number 2
        Device type:            cisco 2820
        MAC address:            0002.b922.7180
        Upstream MAC address:   0030.946c.d740 (Cluster member 1)
        Local port:             10      FEC number: 0
        Upstream port:          Fa0/18  FEC Number:
        Hops from command device: 2                        
Device 'SanJuan2' with member number 3
        Device type:            cisco WS-C3550-12T
        MAC address:            0002.4b29.4400
        Upstream MAC address:   0030.946c.d740 (Cluster member 1)
        Local port:             Gi0/1   FEC number:
        Upstream port:          Fa0/11  FEC Number:
        Hops from command device: 2
Device 'GenieTest' with member number 4
        Device type:            cisco SeaHorse
        MAC address:            0002.4b28.c480
        Upstream MAC address:   0030.946c.d740 (Cluster member 1)
        Local port:             Gi0/2   FEC number:
        Upstream port:          Fa0/9   FEC Number:
        Hops from command device: 2
Device 'Palpatine' with member number 5
        Device type:            cisco WS-C2924M-XL
        MAC address:            00b0.6404.f8c0
        Upstream MAC address:   0002.4b29.2e00 (Cluster member 0)
        Local port:             Gi2/1   FEC number:
        Upstream port:          Gi0/7   FEC Number:
        Hops from command device: 1                            

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster candidates

Displays a list of candidate switches.


show controllers cpu-interface

Use the show controllers cpu-interface privileged EXEC command to display the state of the CPU network interface application-specific integrated circuit (ASIC) and the send and receive statistics for packets reaching the CPU.

show controllers cpu-interface [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is a partial output example from the show controllers cpu- interface command:

Switch# show controllers cpu-interface
stp packets :950454 retrieved, 0 dropped
ram access packets :18944680 retrieved, 0 dropped
routing protocol packets :170334 retrieved, 0 dropped
forwarding packets :0 retrieved, 0 dropped
routing packets :249 retrieved, 0 dropped
L2 protocol packets :95025 retrieved, 0 dropped
igmp snooping protocol packets :746 retrieved, 0 dropped
queue7 :0 retrieved, 0 dropped
icmp redirect packets :0 retrieved, 0 dropped
icmp unreachable packets :0 retrieved, 0 dropped
logging packets :0 retrieved, 0 dropped
addr learning packets :0 retrieved, 0 dropped
rpffail packets :0 retrieved, 0 dropped
queue13 :50 retrieved, 0 dropped
queue14 :0 retrieved, 0 dropped
queue15 :0 retrieved, 0 dropped
RAM Access:
   11375600 sends   18944688 read replies       2829 write replies
   11375597 completed          0 retries          0 failures
          0 nomem          0 nobuffers          0 errors
          0 expedite toggles          0 fa-lost          0 fa-passives
SCInstance = 0xD9D558
SCInstance fields:fs_notify_failed = 0, no_fsd_space = 0
           invalid_frames = 0, unexpected_valid_frames = 0
           too_large_frames = 0
           Aged frames from notify queues and unexpected retrieves:
               aged_frames[0] = 0, unexpected_retrieves[0] = 0
               aged_frames[1] = 0, unexpected_retrieves[1] = 0
               aged_frames[2] = 0, unexpected_retrieves[2] = 0
               aged_frames[3] = 0, unexpected_retrieves[3] = 0
              
<output truncated>

               aged_frames[14] = 0, unexpected_retrieves[14] = 0
               aged_frames[15] = 0, unexpected_retrieves[15] = 0
           sc_cpu_buffer = 0x80000000, sc_regs = 0x81000000
           sc_notify_ram = 0x81010000
CPU Interface registers:
    0x810004A4:storage_congestion_time = 0x10
    0x810004A8:channel_number = 0x102
    0x810004AC:cpu_buffer_control = 0x1
    0x810004B0:current_time = 0x0
                  
<output truncated>

    0x810004FC:notify_overrun_count = 0x0
    0x81000500:notify_ring_control = 0x85
    0x81000504:pci_control = 0x2A00002
          
<output truncated>

Related Commands

Command
Description

show controllers ethernet-controller

Displays per-interface send and receive statistics read from the hardware or the interface internal registers.

show interfaces

Displays the administrative and operational status of all interfaces or a specified interface.


show controllers ethernet-controller

Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-interface send and receive statistics read from the hardware. Use with keywords to display the interface internal registers.

show controllers ethernet-controller interface-id [asic | phy] [ | {begin | exclude | include} expression]

Syntax Description

interface-id

The physical interface.

asic

(Optional) Display the state of the internal registers on the forwarding application-specific integrated circuit (ASIC) for the interface.

phy

(Optional) Display the status of the internal registers on the switch physical layer device (PHY) for the interface.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC (only supported with the interface-id keywords in user EXEC mode)

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

This display without keywords provides traffic statistics, basically the RMON statistics for the interface.

When you enter the asic or phy keyword, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers ethernet-controller command. Table 2-15 describes the Transmit fields, and Table 2-16 describes the Receive fields.

Switch# show controllers ethernet-controller gigabitethernet0/2
Transmit GigabitEthernet0/2        Receive
3617834078 Bytes                 39726165 Bytes
    419261 Unicast frames          161535 Unicast frames
  82798461 Multicast frames        146421 Multicast frames
     12718 Broadcast frames             1 Broadcast frames
         0 Discarded frames             0 No dest, unicast
         0 Too old frames              43 No dest, multicast
         0 Deferred frames              0 No dest, broadcast
         0  1 collision frames
         0  2 collision frames          0 FCS errors
         0  3 collision frames          0 Oversize frames
         0  4 collision frames          0 Undersize frames
         0  5 collision frames          0 Collision fragments
         0  6 collision frames
         0  7 collision frames     220108 Minimum size frames
         0  8 collision frames     60959  65 to 127 byte frames
         0  9 collision frames          0 128 to 255 byte frames
         0 10 collision frames      26931 256 to 511 byte frames
         0 11 collision frames          0 512 to 1023 byte frames
         0 12 collision frames          0 1024 to 1518 byte frames
         0 13 collision frames
         0 14 collision frames          0 Flooded frames
         0 15 collision frames          0 Overrun frames
         0 Excessive collisions        16 VLAN filtered frames
         0 Late collisions              0 Source routed frames
         0 Good (1 coll) frames         0 Valid oversize frames
         0 Good(>1 coll) frames         0 Pause frames
         0 Pause frames                 0 Symbol error frames
         0 VLAN discard frames          0 Invalid frames, too large
         0 Excess defer frames          0 Valid frames, too large
         0 Too large frames             0 Invalid frames, too small
  80469577 64 byte frames               3 Valid frames, too small
   2605574 127 byte frames
     58711 255 byte frames
     26956 511 byte frames
     70222 1023 byte frames
         0 1518 byte frames

Table 2-15 Transmit Field Descriptions 

Field
Description

Bytes

The total number of bytes sent on an interface.

Unicast frames

The total number of frames sent to unicast addresses.

Multicast frames

The total number of frames sent to multicast addresses.

Broadcast frames

The total number of frames sent to broadcast addresses.

Discarded frames

The number of frames dropped on an interface.

Too old frames

The number of frames dropped on the egress port because the packet aged out.

Deferred frames

The number of frames that are not sent after the time exceeds 2*maximum-packet time.

1 collision frames

The number of frames that are successfully sent on an interface after one collision occurs.

2 collision frames

The number of frames that are successfully sent on an interface after two collisions occur.

3 collision frames

The number of frames that are successfully sent on an interface after three collisions occur.

4 collision frames

The number of frames that are successfully sent on an interface after four collisions occur.

5 collision frames

The number of frames that are successfully sent on an interface after five collisions occur.

6 collision frames

The number of frames that are successfully sent on an interface after six collisions occur.

7 collision frames

The number of frames that are successfully sent on an interface after seven collisions occur.

8 collision frames

The number of frames that are successfully sent on an interface after eight collisions occur.

9 collision frames

The number of frames that are successfully sent on an interface after nine collisions occur.

10 collision frames

The number of frames that are successfully sent on an interface after ten collisions occur.

11 collision frames

The number of frames that are successfully sent on an interface after 11 collisions occur.

12 collision frames

The number of frames that are successfully sent on an interface after 12 collisions occur.

13 collision frames

The number of frames that are successfully sent on an interface after 13 collisions occur.

14 collision frames

The number of frames that are successfully sent on an interface after 14 collisions occur.

15 collision frames

The number of frames that are successfully sent on an interface after 15 collisions occur.

Excessive collisions

The number of frames that could not be sent on an interface after 16 collisions occur.

Late collisions

After a frame is sent, the number of frames dropped because late collisions were detected while the frame was sent.

Good (1 coll) frames

The number of frames that are successfully sent on an interface after one collision occurs. This value does not include the number of frames that are not successfully sent after one collision occurs.

Good (>1 coll) frames

The number of frames that are successfully sent on an interface after more than one but less than 15 collisions occur. This value does not include the number of frames that are not successfully sent after more than one collision occurs.

Pause frames

The number of pause frames sent on an interface.

VLAN discard frames

The number of frames dropped on an interface because the CFI1 bit is set.

Excess defer frames

The number of frames that are not sent after the time exceeds the maximum-packet time.

Too large frames

The number of frames sent on an interface that are larger than the maximum allowed frame size.

64 byte frames

The total number of frames sent on an interface that are 64 bytes.

127 byte frames

The total number of frames sent on an interface that are from 65 to 127 bytes.

255 byte frames

The total number of frames sent on an interface that are from 128 to 255 bytes.

511 byte frames

The total number of frames sent on an interface that are from 256 to 511 bytes.

1023 byte frames

The total number of frames sent on an interface that are from 512 to 1023 bytes.

1518 byte frames

The total number of frames sent on an interface that are from 1024 to 1518 bytes.

1 CFI = Canonical Format Indicator


Table 2-16 Receive Field Descriptions 

Field
Description

Bytes

The total amount of memory (in bytes) used by frames received on an interface, including the FCS1 value and the incorrectly formed frames. This value excludes the frame header bits.

Unicast Frames

The total number of frames successfully received on the interface that are forwarded to unicast addresses.

Multicast frames

The total number of frames successfully received on the interface that are forwarded to multicast addresses.

Broadcast frames

The total number of frames successfully received on an interface that are forwarded to broadcast addresses.

No dest, unicast

The total number of frames received with a unicast destination address that cannot be forwarded.

No dest, multicast

The total number of frames received with a multicast destination address that cannot be forwarded.

No dest, broadcast

The total number of frames received with a broadcast destination address that cannot be forwarded.

FCS errors

The total number of frames received on an interface that have a valid length (in bytes) but do not have the correct FCS values.

Oversize frames

The number of frames received on an interface that are larger than the maximum allowed frame size.

Undersize frames

The number of frames received on an interface that are smaller than 64 bytes.

Collision fragments

The number of collision fragments received on an interface.

Minimum size frames

The total number of frames that are the minimum frame size.

65 to 127 byte frames

The total number of frames that are from 65 to 127 bytes.

128 to 255 byte frames

The total number of frames that are from 128 to 255 bytes.

256 to 511 byte frames

The total number of frames that are from 256 to 511 bytes.

512 to 1023 byte frames

The total number of frames that are from 512 to 1023 bytes.

1024 to 1518 byte frames

The total number of frames that are from 1024 to 1518 bytes.

Flooded frames

The total number of flooded frames received on an interface.

Overrun frames

The total number of overrun frames received on an interface.

VLAN filtered frames

The total number of frames that are filtered because of the VLAN information in the frame, such as an 802.1Q tag or a VLAN ID other than the IDs configured on the interface. This value does not include frames that are smaller than 64 bytes or larger than the maximum frame size

Source routed frames

The total number of frames received on an interface that are dropped because the source route bit is set in the source address of the native frame. This value includes frames that have a valid FCS value and are between 64 bytes and the maximum allowed frame size.

Valid oversize frames

The number of frames received on an interface that are larger than the maximum allowed frame size and have valid FCS values. The frame size includes the FCS value but does not include the VLAN tag.

Pause frames

The number of pause frames received on an interface.

Symbol error frames

The number of frames received on an interface that have symbol errors.

Invalid frames, too large

The number of frames received that were larger than maximum allowed MTU2 size (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.

Valid frames, too large

The number of frames received on an interface that are larger than the maximum allowed frame size.

Invalid frames, too small

The number of frames received that are smaller than 64 bytes (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.

Valid frames, too small

The number of frames received on an interface that are smaller than 64 bytes (or 68 bytes for VLAN-tagged frames) and have valid FCS values. The frame size includes the FCS bits but excludes the frame header bits.

1 FCS = frame check sequence

2 MTU = maximum transmission unit


Related Commands

Command
Description

show controllers cpu-interface

Displays the state of the CPU network ASIC and send and receive statistics for packets reaching the CPU.

show interfaces

Displays the administrative and operational status of all interfaces or a specified interface.


show controllers switch

Use the show controllers switch privileged user command to display the settings of the resource-allocation priority or the wirespeed-store feature.

show controllers switch {resource-allocation priority | wirespeed-store} [ | {begin | exclude | include} expression]

Syntax Description

resource-allocation priority

Display the resource-allocation priority setting.

wirespeed-store

Display the wirespeed setting.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(6)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers switch resource-allocation priority command:

Switch> show controllers resource-allocation priority

Switch Priority Resource Allocation is enabled.

Related Commands

Command
Description

switchcore resource-allocation priority

switchcore wirespeed-store

Reserves switch resources for high-priority traffic or gives buffer storage more priority than packet retrieval.


show controllers tcam

Use the show controllers tcam privileged EXEC command to display the state of the registers for all ternary content addressable memory (TCAM) in the system and for all TCAM interface application-specific integrated circuits (ASICs) that are CAM controllers.

show controllers tcam [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers tcam command:

Switch# show controllers tcam
CAM Controller 1:
  Revision: 5A5A5A00, Control: 0000025F, Status: 00000000.
  CAM 1:
    Revision: 00 00000000 00B30101
    Size: 00 00000000 00080040
    Device ID: 00 00000000 00000000
    Config: 00 00000000 88000002
    ReplyID[0]: 00 00000000 00000000
    ReplyID[1]: 00 00000000 00000000
    ReplyID[2]: 00 00000000 00000000
    ReplyID[3]: 00 00000000 00000000
    Hit Result[0]: 00 00000000 00000000
    Hit Result[1]: 00 00000000 00000000
    Hit Result[2]: 00 00000000 00000000
    Hit Result[3]: 00 00000000 00000000
    Hit Result[4]: 00 00000000 00000000
    Hit Result[5]: 00 00000000 00000000
    Hit Result[6]: 00 00000000 00000000
    Hit Result[7]: 00 E00004E8 40001A63
    Global Mask[10]: FF FFFFFFFF FFFFFFFF
    Global Mask[11]: FF FFFFFFFF FFFFFFFF
    Global Mask[12]: FF FFFFFFFF FFFFFFFF
    Global Mask[13]: FF FFFFFFFF FFFFFFFF
    Global Mask[14]: FF FFFFFFFF FFFFFFFF
    Global Mask[15]: FF FFFFFFFF FFFFFFFF
    Global Mask[16]: FF FFFFFFFF FFFFFFFF
    Global Mask[20]: FF FFFFFFFF FFFFFFFF
    Global Mask[21]: FF FFFFFFFF FFFFFFFF
    Global Mask[22]: FF FFFFFFFF FFFFFFFF
    Global Mask[23]: FF FFFFFFFF FFFFFFFF
    Global Mask[24]: FF FFFFFFFF FFFFFFFF
    Global Mask[25]: FF FFFFFFFF FFFFFFFF
    Global Mask[26]: FF FFFFFFFF FFFFFFFF
    Global Mask[27]: FF FFFFFFFF FFFFFFFF
    Global Mask[30]: FF FFFFFFFF FFFFFFFF
    Global Mask[31]: FF FFFFFFFF FFFFFFFF
    Global Mask[32]: FF FFFFFFFF FFFFFFFF
    Global Mask[33]: FF FFFFFFFF FFFFFFFF
  CAM 2:
    Revision: 00 00000000 00B30101
    Size: 00 00000000 00080040
    Device ID: 00 00000000 00000001
    Config: 00 00000000 B8000022
    ReplyID[0]: 00 01010101 01010101
    ReplyID[1]: 00 01010101 01010101
   ReplyID[2]: 00 01010101 01010101
   ReplyID[3]: 00 01010101 01010101
   Hit Result[0]: 00 00000000 00000000
   Hit Result[1]: 00 00000000 00000000
   Hit Result[2]: 00 00000000 00000000
   Hit Result[3]: 00 00000000 00000000
   Hit Result[4]: 00 00000000 00000000
   Hit Result[5]: 00 00000000 00000000
   Hit Result[6]: 00 00000000 00000000
   Hit Result[7]: 00 60003880 C00011D3
   Global Mask[10]: FF FFFFFFFF FFFFFFFF
   Global Mask[11]: FF FFFFFFFF FFFFFFFF
   Global Mask[12]: FF FFFFFFFF FFFFFFFF
   Global Mask[13]: FF FFFFFFFF FFFFFFFF
   Global Mask[14]: FF FFFFFFFF FFFFFFFF
   Global Mask[15]: FF FFFFFFFF FFFFFFFF
   Global Mask[16]: FF FFFFFFFF FFFFFFFF
   Global Mask[20]: FF FFFFFFFF FFFFFFFF
   Global Mask[21]: FF FFFFFFFF FFFFFFFF
   Global Mask[22]: FF FFFFFFFF FFFFFFFF

<output truncated>

show controllers utilization

Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports.

show controllers [interface-id] utilization [ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) ID of the switch interface.

| begin

(Optional) Display begins with the line that matches the specified expression.

| exclude

(Optional) Display excludes lines that match the specified expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.2(25)SE

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers utilization command.

Switch> show controllers utilization
Port       Receive Utilization  Transmit Utilization
Fa0/1              0                    0
Fa0/2              0                    0

<output truncated>

Total Ports : 12
Switch Receive Bandwidth Percentage Utilization  : 0
Switch Transmit Bandwidth Percentage Utilization : 0

Switch Fabric Percentage Utilization : 0

This is an example of output from the show controllers utilization command on a specific port:

Switch> show controllers fastethernet0/1 utilization
Receive Bandwidth Percentage Utilization   : 0
Transmit Bandwidth Percentage Utilization  : 0

Table 2-17 show controllers utilization Field Descriptions

Field
Description

Receive Bandwidth Percentage Utilization

Displays the received bandwidth usage of the switch, which is the sum of the received traffic on all the ports divided by the switch receive capacity.

Transmit Bandwidth Percentage Utilization

Displays the transmitted bandwidth usage of the switch, which is the sum of the transmitted traffic on all the ports divided it by the switch transmit capacity.

Fabric Percentage Utilization

Displays the average of the transmitted and received bandwidth usage of the switch.


Related Commands

Command
Description

show controllers ethernet-controller

Displays the interface internal registers.


show dot1q-tunnel

Use the show dot1q-tunnel user EXEC command to display information about 802.1Q tunnel ports.

show dot1q-tunnel [interface interface-id] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id

(Optional) Specify the interface for which to display 802.1Q tunneling information. Valid interfaces include physical ports and port channels.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(9)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

These are examples of output from the show dot1q-tunnel command:

Switch> show dot1q-tunnel
LAN Port(s)
-----
Gi0/1
Gi0/2
Gi0/3
Gi0/6
Po2

Switch> show dot1q-tunnel interface gigabitethernet0/1 
LAN Port(s)
-----
Gi0/1

Related Commands

Command
Description

show vlan dot1q tag native

Displays 802.1Q native VLAN tagging status.

switchport mode dot1q-tunnel

Configures an interface as an 802.1Q tunnel port.


show dot1x

Use the show dot1x privileged EXEC command to display 802.1x statistics, administrative status, and operational status for the switch or for the specified interface.

show dot1x [all] | [interface interface-id] | [statistics [interface interface-id]] [ | {begin | exclude | include} expression]

Syntax Description

all

(Optional) Display the 802.1x status for all interfaces.

interface interface-id

(Optional) Display the 802.1x status for the specified interface.

statistics [interface interface-id]

(Optional) Display 802.1x statistics for the switch or the specified interface.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(8)EA1

This command was introduced.

12.1(14)EA1

The all keyword was added.


Usage Guidelines

If you do not specify an interface, global parameters and a summary appear. If you specify an interface, details for that interface appear.

If you specify the statistics keyword without the interface interface-id option, statistics appear for all interfaces. If you specify the statistics keyword with the interface interface-id option, statistics appear for the specified interface.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show dot1x and the show dot1x all privileged EXEC commands:

Switch# show dot1x 
Sysauthcontrol                    = Enabled 
Supplicant Allowed In Guest Vlan  = Disabled
Dot1x Protocol Version            = 1 
Dot1x Oper Controlled Directions  = Both 
Dot1x Admin Controlled Directions = Both 

Switch# show dot1x all
Dot1x Info for interface FastEthernet0/3 
----------------------------------------------------
Supplicant MAC 00d0.b71b.35de
   AuthSM State      = CONNECTING
   BendSM State      = IDLE
PortStatus        = UNAUTHORIZED
MaxReq            = 2 
HostMode          = Single 
Port Control      = Auto
QuietPeriod       = 60 Seconds 
Re-authentication = Disabled 
ReAuthPeriod      = 3600 Seconds
ServerTimeout     = 30 Seconds 
SuppTimeout       = 30 Seconds 
TxPeriod          = 30 Seconds 
Guest-Vlan        = 0 

Dot1x Info for interface FastEthernet0/7 
----------------------------------------------------
PortStatus        = UNAUTHORIZED
MaxReq            = 2 
HostMode          = Multi 
Port Control      = Auto
QuietPeriod       = 60 Seconds 
Re-authentication = Disabled 
ReAuthPeriod      = 3600 Seconds
ServerTimeout     = 30 Seconds 
SuppTimeout       = 30 Seconds 
TxPeriod          = 30 Seconds 
Guest-Vlan        = 0 

This is an example of output from the show dot1x interface fastethernet0/3 privileged EXEC command:

Switch# show dot1x interface fastethernet0/3
Supplicant MAC 00d0.b71b.35de
   AuthSM State      = AUTHENTICATED
   BendSM State      = IDLE
PortStatus        = AUTHORIZED
MaxReq            = 2 
HostMode          = Single 
Port Control      = Auto
QuietPeriod       = 60 Seconds 
Re-authentication = Disabled 
ReAuthPeriod      = 3600 Seconds
ServerTimeout     = 30 Seconds 
SuppTimeout       = 30 Seconds 
TxPeriod          = 30 Seconds 
Guest-Vlan        = 0 

This is an example of output from the show dot1x statistics interface fastethernet0/3 command. Table 2-18 describes the fields in the display.

Switch# show dot1x statistics interface fastethernet0/3
PortStatistics Parameters for Dot1x 
--------------------------------------------
TxReqId = 15    TxReq = 0       TxTotal = 15 
RxStart = 4     RxLogoff = 0    RxRespId = 1    RxResp = 1
RxInvalid = 0   RxLenErr = 0    RxTotal= 6
RxVersion = 1   LastRxSrcMac 00d0.b71b.35de 

Table 2-18 show dot1x statistics Field Descriptions 

Field
Description

TxReqId

Number of Extensible Authentication Protocol (EAP)-request/identity frames that have been sent.

TxReq

Number of EAP-request frames (other than request/identity frames) that have been sent.

TxTotal

Number of Extensible Authentication Protocol over LAN (EAPOL) frames of any type that have been sent.

RxStart

Number of valid EAPOL-start frames that have been received.

RxLogoff

Number of EAPOL-logoff frames that have been received.

RxRespId

Number of EAP-response/identity frames that have been received.

RxResp

Number of valid EAP-response frames (other than response/identity frames) that have been received.

RxInvalid

Number of EAPOL frames that have been received and have an unrecognized frame type.

RxLenErr

Number of EAPOL frames that have been received in which the packet body length field is invalid.

RxTotal

Number of valid EAPOL frames of any type that have been received.

RxVersion

Received packets in the 802.1x version 1 format.

LastRxSrcMac

Source MAC address carried in the most recently received EAPOL frame.


Related Commands

Command
Description

dot1x default

Resets the configurable 802.1x parameters to their default values.


show env

Use the show env user EXEC command to display fan, temperature, and power information for the switch.

show env {all | fan | power | rps | temperature} [ | {begin | exclude | include} expression]

Syntax Description

all

Display both fan and temperature environmental status.

fan

Display the switch fan status.

power

Display the switch power status.

rps

Display the Redundant Power System (RPS) status.

temperature

Display the switch temperature status.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(9)EA1

The power and rps keywords were added.

12.1(12c)EA1

The fan and power keywords were added.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show env all command:

Switch> show env all
FAN is FAULTY
TEMPERATURE is OK 

This is an example of output from the show env power command:

Switch> show env power
POWER is OK

This is an example of output from the show env rps command:

Switch> show env rps
RPS is NOT PRESENT

show errdisable detect

show errdisable detect [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable detect command:

Switch> show errdisable detect
ErrDisable Reason    Detection status
-----------------    ----------------
udld                 Enabled
bpduguard            Enabled
security-violatio    Enabled
channel-misconfig    Enabled
psecure-violation    Enabled
vmps                 Enabled
loopback             Enabled
unicast-flood        Enabled
pagp-flap            Enabled
dtp-flap             Enabled
link-flap            Enabled
l2ptguard            Enabled
gbic-invalid         Enabled
dhcp-rate-limit      Enabled
unicast-flood        Enabled
storm-control        Enabled
ilpower              Enabled
arp-inspection       Enabled


Note Though visible in the output, the arp-inspection, ilpower, storm-control, and unicast-flood fields are not valid.


Related Commands

Command
Description

errdisable detect cause

Enables error-disable detection for a specific cause or all causes.

show errdisable flap-values

Displays error condition recognition information.

show errdisable recovery

Displays error-disable recovery timer information.

show interfaces status

Displays interface status or a list of interfaces in error-disabled state.


show errdisable flap-values

Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause.

show errdisable flap-values [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.

ErrDisable Reason    Flaps    Time (sec)
-----------------    ------   ----------
pagp-flap              3       30
dtp-flap               3       30
link-flap              5       10

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable flap-values command:

Switch> show errdisable flap-values
ErrDisable Reason    Flaps    Time (sec)
-----------------    ------   ----------
pagp-flap              3       30
dtp-flap               3       30
link-flap              5       10

Related Commands

Command
Description

errdisable detect cause

Enables error-disable detection for a specific cause or all causes.

show errdisable detect

Displays error-disable detection status.

show errdisable recovery

Displays error-disable recovery timer information.

show interfaces status

Displays interface status or a list of interfaces in error-disabled state.


show errdisable recovery

Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.

show errdisable recovery [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable recovery command:

Switch> show errdisable recovery
ErrDisable Reason    Timer Status
-----------------    --------------
udld                 Disabled
bpduguard            Disabled
security-violatio    Disabled
channel-misconfig    Disabled
vmps                 Disabled
pagp-flap            Disabled
dtp-flap             Disabled
link-flap            Disabled
l2ptguard            Disabled
psecure-violation    Disabled
gbic-invalid         Disabled
dhcp-rate-limit      Disabled
unicast-flood        Disabled
storm-control        Disabled
arp-inspection       Disabled
loopback             Disabled

Timer interval:300 seconds

Interfaces that will be enabled at the next timeout:

Interface    Errdisable reason    Time left(sec)
---------    -----------------    --------------
Gi0/4           link-flap             279 


Note Though visible in the output, the unicast-flood field is not valid.


Related Commands

Command
Description

errdisable recovery

Configures the recover mechanism variables.

show errdisable detect

Displays error disable detection status.

show errdisable flap-values

Displays error condition recognition information.

show interfaces status

Displays interface status or a list of interfaces in error-disabled state.


show etherchannel

Use the show etherchannel user EXEC command to display EtherChannel information for a channel.

show etherchannel [channel-group-number] {detail | load-balance | port | port-channel | summary | protocol} [ | {begin | exclude | include} expression]

Syntax Description

channel-group-number

(Optional) Number of the channel group. The range is 1 to 64.

detail

Display detailed EtherChannel information.

load-balance

Display the load-balance or frame-distribution scheme among ports in the port channel.

port

Display EtherChannel port information.

port-channel

Display port-channel information.

protocol

Display the protocol that is being used in the EtherChannel.

summary

Display a one-line summary per channel-group.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(14)EA1

The brief keyword was removed.


Usage Guidelines

If you do not specify a channel-group, all channel groups appear.

In the output, the Passive port list field appears only for Layer 3 port channels. This field means that the physical interface, which is still not up, is configured to be in the channel group (and indirectly is in the only port channel in the channel group).

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show etherchannel 1 detail command:

Switch> show etherchannel 1 detail
Group state = L2 
Ports: 2   Maxports = 8 
Port-channels: 1 Max Port-channels = 1
                Ports in the group:
                -------------------
Port: Gi0/1
------------

Port state    = Up Mstr In-Bndl 
Channel group = 1           Mode = Desirable-Sl     Gcchange = 0
Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1
Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.        P - Device learns on physical port.
        d - PAgP is down.
Timers: H - Hello timer is running.        Q - Quit timer is running.
        S - Switching timer is running.    I - Interface timer is running.

Local information:
                                Hello    Partner  PAgP     Learning  Group
Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex
Gi0/1     SC    U6/S7   H       30s      1        128        Any      16
          
Partner's information:

          Partner              Partner          Partner         Partner Group
Port      Name                 Device ID        Port       Age  Flags   Cap.
Gi0/1     vegas-p2             0002.4b29.4600   Gi0/1        9s SC      10001 

Age of the port in the current state: 00d:00h:07m:52s
Port: Gi0/2
------------

Port state    = Up Mstr In-Bndl 
Channel group = 1           Mode = Desirable-Sl     Gcchange = 0
Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1
Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.        P - Device learns on physical port.
        d - PAgP is down.
Timers: H - Hello timer is running.        Q - Quit timer is running.
        S - Switching timer is running.    I - Interface timer is running.

Local information:
                                Hello    Partner  PAgP     Learning  Group
Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex
Gi0/2     SC    U6/S7   H       30s      1        128        Any      16

Partner's information:

          Partner              Partner          Partner         Partner Group
Port      Name                 Device ID        Port       Age  Flags   Cap.
Gi0/2     vegas-p2             0002.4b29.4600   Gi0/2        4s SC      10001 

Age of the port in the current state: 00d:00h:07m:55s
                Port-channels in the group: 
                ----------------------
Port-channel: Po1
------------

Age of the Port-channel   = 00d:00h:08m:28s
Logical slot/port   = 1/0           Number of ports = 2
GC                  = 0x00010001      HotStandBy port = null
Port state          = Port-channel Ag-Inuse 

Ports in the Port-channel: 
          
Index   Load   Port    EC state
------+------+------+------------
  0     00     Gi0/1    desirable-sl  
  0     00     Gi0/2    desirable-sl  

Time since last port bundled:    00d:00h:07m:56s    Gi0/1

This is an example of output from the show etherchannel 1 protocol command:

Switch# show etherchannel 1 protocol
Protocol:  LACP

This is an example of output from the show etherchannel 1 summary command:

Switch> show etherchannel 1 summary
Flags:  D - down        P - in port-channel
        I - stand-alone s - suspended
        R - Layer3      S - Layer2
        U - port-channel in use
Group Port-channel  Ports
-----+------------+-----------------------------------------------------------
1     Po1(SU)     Gi0/1(P)   Gi0/2(P) 

This is an example of output from the show etherchannel 1 port-channel command:

Switch> show etherchannel 1 port-channel 
Port-channels in the group: 
                ----------------------

Port-channel: Po1
------------

Age of the Port-channel   = 00d:00h:10m:41s
Logical slot/port   = 1/0           Number of ports = 2
GC                  = 0x00010001      HotStandBy port = null
Port state          = Port-channel Ag-Inuse 

Ports in the Port-channel: 

Index   Load   Port    EC state
------+------+------+------------
  0     00     Gi0/1    desirable-sl  
  0     00     Gi0/2    desirable-sl  

Time since last port bundled:    00d:00h:10m:08s    Gi0/1

Related Commands

Command
Description

channel-group

Assigns an Ethernet interface to an EtherChannel group.

interface port-channel

Accesses or creates the port channel.


show flowcontrol

Use the show flowcontrol user EXEC command to display the flow control status and statistics.

show flowcontrol [interface interface-id | module module-number] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id

(Optional) Display the flow control status and statistics for a specific interface.

module module-number

(Optional) Display the flow control status and statistics for all interfaces. The only valid module-slot value is 0.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(14)EA1

This command was introduced.


Usage Guidelines

Use this command to display the flow control status and statistics on the switch or about a specific interface.

Use the show flowcontrol command to display information about all the switch interfaces. The output from the show flowcontrol command is the same as the output from the show flowcontrol module module-number command.

Use the show flowcontrol interface interface-id command to display information about the Gigabit Ethernet interfaces on the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show flowcontrol command:

Switch> show flowcontrol
Port       Send FlowControl  Receive FlowControl  RxPause TxPause
           admin    oper     admin    oper
---------  -------- -------- -------- --------    ------- -------
Gi0/1      Unsupp.  Unsupp.  off      off         0       0
Gi0/2      desired  off      off      off         0       0
<output truncated>

This is an example of output from the show flowcontrol interface interface-id command:

Switch> show flowcontrol gigabitethernet0/2
Port       Send FlowControl  Receive FlowControl  RxPause TxPause
           admin    oper     admin    oper
---------  -------- -------- -------- --------    ------- -------
Gi0/2      desired  off      off      off         0       0

Related Commands

Command
Description

flowcontrol

Sets the receive flow-control state for an interface.


show fm

Use the show fm privileged EXEC command to display feature-manager information for a specified port label or VLAN label to list features associated with that label, including if any features were not able to fit in the hardware or if configuration conflicts have occurred. Use the show fm interface or show fm vlan command to determine the port-label or vlan-label number.

show fm {{port-label label-id} | {vlan-label label-id}} [ | {begin | exclude | include} expression]

Syntax Description

port-label label-id

Port labels are used features configured on a port, such as port ACLs. The range is 0 to 127.

vlan-label label-id

VLAN labels are used for features configured on VLANs, such as router ACLs and VLAN maps. The range is 0 to 255.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(9)EA1

The label keyword was replaced by the port-label and vlan-label keywords.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

When the output shows Conflicts exist with other access groups, there is a configuration conflict with access control lists (ACLs) on the switch. You are trying to apply a port ACL to a switch that already has VLAN maps or input router ACLs applied; or you are trying to apply an input router ACL or VLAN map to a switch that has port ACLs applied.

When the output shows an unloaded indicator or no number following the Loaded into CAM(s): entry, the feature was not loaded in the hardware. To allocate more system resources to maximize the number of security ACLs that can fit in the hardware, you can use the sdm prefer access global configuration command to set the Switch Database Management feature to the access template.

If the output shows a merge failure, the sdm prefer access global configuration command has no effect.

Examples

You can enter the show fm interface privileged EXEC command for an interface to learn the port-label number for the port. You can then enter the show fm port-label privileged EXEC command to display more details, as shown in this example:

Switch# show fm interface gigabitethernet0/1
Conflicts exist with layer 3 access groups.
Input Port Label:2
Switch# show fm port-label 2
Conflicts exist with layer 3 access groups.
Needed in CAM(s):1
Loaded into CAM(s):1
Sent to CPU by CAM(s):
Interfaces: Gi0/1
IP Access Group:ip3 0 VMRs
DHCP Broadcast Suppression Disabled.
MAC Access Group:(None) 0 VMRs

This example of the show fm port-label 3 output shows that there was not enough room in hardware to load an ACL. Label 3 is needed in CAM 1 but is not loaded in CAM 1; instead, it is sent to the CPU.

Switch# show fm port-label 3
Needed in CAM(s):1
Loaded into CAM(s):
Sent to CPU by CAM(s):1
Interfaces: Gi0/3
IP Access Group:100 3400 VMRs
DHCP Broadcast Suppression Disabled.
MAC Access Group:(None) 2 VMRs

This is an example of output from the show fm vlan-label command when there has been a merge failure on an input access-group:

Switch# show fm vlan-label 1
Unloaded due to merge failure or lack of space:
  InputAccessGroup 
  Merge Fail:input
Input Features:
  Interfaces or VLANs: Vl1
  Priority:normal
  Vlan Map:(none)
  Access Group:131, 6788 VMRs
  Multicast Boundary:(none), 0 VMRs
Output Features:
  Interfaces or VLANs:
  Priority:low
  Bridge Group Member:no
  Vlan Map:(none)
  Access Group:(none), 0 VMRs

This is an example of output from the show fm vlan-label command when there was not enough room for an input access group in the hardware:

Switch# show fm vlan-label 1
Unloaded due to merge failure or lack of space:
  InputAccessGroup 
Input Features:
  Interfaces or VLANs: Vl1
  Priority:normal
  Vlan Map:(none)
  Access Group:bigone, 11 VMRs
  Multicast Boundary:(none), 0 VMRs
Output Features:
  Interfaces or VLANs:
  Priority:low
  Bridge Group Member:no
  Vlan Map:(none)
  Access Group:(none), 0 VMRs

This is an example of output from the show fm vlan-label command when there was not enough room for the input access group or the output access group on the label. Note that the access groups were configured on two different interfaces. Labels are assigned independently for input and output.

Switch# show fm vlan-label 1
Unloaded due to merge failure or lack of space:
  InputAccessGroup OutputAccessGroup 
Input Features:
  Interfaces or VLANs: Vl1
  Priority:normal
  Vlan Map:(none)
  Access Group:bigone, 11 VMRs
  Multicast Boundary:(none), 0 VMRs
Output Features:
  Interfaces or VLANs: Vl2
  Priority:normal
  Bridge Group Member:no
  Vlan Map:(none)
  Access Group:bigtwo, 11 VMRs

Related Commands

Command
Description

show fm interface

Displays per-interface feature manager information.

show fm vlan

Displays per-VLAN feature manager information.


show fm interface

Use the show fm interface privileged EXEC command to display per-interface feature-manager information. Use it with the show fm port-label privileged EXEC command to get information about features applied to the interface.

show fm interface interface-id [ | {begin | exclude | include} expression]

Syntax Description

interface-id

Specify an interface; valid interfaces include:

physical interface—type and port number.

port channel—port-channel port-channel-number (1 to 64).

null—null 0.

VLAN—vlan vlan-id (1 to 4094; do not enter leading zeros). VLAN interfaces are VLANs that have a switch virtual interface (SVI) assigned.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(13)EA1

This command was modified to include policy-based routing (PBR) information.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show fm interface gigabitethernet0/1 command:

Switch# show fm interface gigabitethernet0/1
  Conflicts exist with layer 3 access groups.
  Input Port Label:2

You can then use the show fm port-label 2 privileged EXEC command to view more detail.

This is an example of output from the show fm interface vlan 1 command with PBR enabled on the interface.

Switch# show fm interface vlan 1
Input VLAN Label: 1
Output VLAN Label: 0 (default)
Policy Label: 9
Priority: normal

Related Commands

Command
Description

show fm

Displays feature-manager information for a specified label and lists configuration conflicts or features associated with that label that were not able to fit into the hardware.

show fm vlan

Displays per-VLAN feature manager information.


show fm vlan

Use the show fm vlan privileged EXEC command to display per-VLAN feature-manager information. Use with the show fm vlan-label privileged EXEC command to get information about features applied to the VLAN.

show fm vlan vlan-id [ | {begin | exclude | include} expression]

Syntax Description

vlan-id

Any VLAN ID, whether or not a switch virtual interface (SVI) has been assigned. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show fm vlan 1 command that shows an ACL configuration conflict. It displays the VLAN label used in hardware for VLAN feature configuration.

Switch# show fm vlan 1
Conflicts exist with layer 2 access groups.
Input VLAN Label:1
Output VLAN Label:0 (default)
Priority:normal

Related Commands

Command
Description

show fm interface

Displays per-interface feature manager information.

show fm

Displays feature-manager information for a specified label and lists configuration conflicts or features associated with that label that were not able to fit into the hardware.



show forward

Use the show forward privileged EXEC command for an interface to determine how the hardware would forward a frame that matches the specified parameters.

show forward interface-id [vlan vlan-id] src-mac dst-mac [ex-class] [ex-l4op] [ex-qos] [ex-sig] {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac [ip src-ip dst-ip [protocol-num] [adjacency adjacency_index] [dscp dscp] [frag fragment] [option] | {icmp icmp-type icmp-code} | {igmp igmp-version igmp-type} | {tcp src-port dst-port flags} | {udp src-port dst-port}}] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac sap lsap [cos cos] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac [arpa ethertype | snap snap_type] [cos cos] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

Syntax Description

interface-id

The input physical interface.

vlan vlan-id

(Optional) Input VLAN ID. The range is 1 to 4094. If not specified, and the input interface is not a routed port, the default is 1. You should specify the input VLAN even for access ports.

src-mac

48-bit source MAC address.

dst-mac

48-bit destination MAC address.

ex-class

(Optional) Display detailed packet processing information related to classification.

ex-l4op

(Optional) Display detailed packet processing information related to Layer 4 operations.

ex-qos

(Optional) Display detailed packet processing information related to quality of service (QoS).

ex-sig

(Optional) Display detailed packet processing information related to the part of the hardware that recognizes frame formats (signature tables).

ip src-ip dst-ip

(Optional) Source and destination IP addresses in dotted decimal notation.

protocol-num

The numeric value of the protocol field in the IP header. The range is 0 to 255. For example, 47 is generic routing encapsulation (GRE), 89 is Open Shortest Path First (OSPF). If is TCP, UDP, ICMP, or IGMP, you should use the appropriate keyword instead of a numeric value.

adjacency adjacency_index

(Optional) Hardware adjacency to be used when a route has more than one adjacency as with multipath routes. The range is from 0 to 7.

dscp dscp

(Optional) Differentiated services code point (DSCP) field in the IP header. The range is 0 to 63.

frag fragment

(Optional) Two-byte IP fragment field in the IP header. This field includes the Don't Fragment bit (0x4000), the More Fragments bit (0x2000), and the Fragment Offset (0x0 through 0x1FFF). The default is 0x0 (unfragmented packet).

option

(Optional) Keyword signifying IP options are present in the packet.

icmp icmp-type icmp-code

Internet Control Message Protocol (ICMP) parameters. The icmp-type and icmp-code ranges are 0 to 255.

igmp igmp-version igmp-type

Internet Group Management Protocol (IGMP) parameters. The igmp-version and igmp-type ranges are 0 to 255.

tcp src-port dst-port flags

TCP parameters: TCP source port, destination port, and the numeric value of the TCP flags byte. The src-port and dst-port ranges are 0 to 65535.

udp src-port dst-port

User Datagram Protocol (UDP) parameters. The src-port and dst-port ranges are 0 to 65535.

cos cos

(Optional) Class of service (CoS) value of the frame. The range is 0 to 1024.

arpa ethertype

(Optional) Address Resolution Protocol (ARP) Ethernet II encapsulation type and the Ethertype field. The range is 0 to 65535.

snap snap_type

(Optional) Subnetwork Access Protocol (SNAP) encapsulation type and the Ethertype field. The range is 0 to 65535.

sap lsap

(Optional) Service access point (SAP) encapsulation type and the LSAP field. The range is 0 to 65535.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

If you enter this command without any arguments, you enter a dialog mode. This mode is not operational in this release.

Because of the many and varied items that go into the forwarding decision, this command requires detailed information about the frame in order to correctly indicate how the hardware would forward the frame.

This command has limited ability to account for QoS settings. It does not take into account any packet arrival rates, so if the system has been configured to mark down or police traffic based on data arrival rates, the command will display inaccurate information for traffic that exceeds the configured rates.

If QoS or ACLs are not configured, and if no port-channel interfaces are present, the most important parameters to specify are source interface, source VLAN, destination MAC address, and destination IP address (if applicable). The output is likely to be accurate, even if other parameters are missing or estimated.

If port channel interfaces are present, it is important to specify the source MAC address and IP address correctly.

If ACLs are present, all keywords in the command could be important to the forwarding decision.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

Following are three examples of outputs from the show forward command. Table 2-19 describes the major sections in the output display.

In this example, the destination MAC address is the router's MAC address and routing lookups are performed:

Switch# show forward fastethernet0/1 vlan 8 0000.1111.2222 0022.3355.8800 ip 8.8.8.10 
4.4.4.33 255
signature:00000007, comparison ind:10, control info:2000941A control map:00000000
vlan:8, vlanid entry:000C0012 00000000 00000000 04400000
adjptr:D  adjacency:E0002409 00000404 04210000
vlan:1033, vlanid entry:0004000A 00000000 00000000 00000000
vlan:1033, vlanid entry:0004000A 00000000 00000000 00000000

lookup  key                                   bk adata    rawoff secoff sec
qos     960808080A04040421 800000000000FF0000 0  00000000 006304 004064  4
acl     960808080A04040421 800000000000FF0000 1  00000082 045408 002016  1
route   420808080A04040421 000000000000000000 0  3FFF800D 006361 000025  3
learn   187008000011112222 901208000004040421 0  80010003 002176 002176  0
forw    187008000011112222 901208000004040421 1  40020000 043328 010560  5
outacli A60808080A04040421 800000000000FF0000 0  00000083 012448 002016  2

bridgeDestMap:  00000000 00000000 0000FFFF FFFFFFC7
vlanMask:       00000000 00000000 0000FFFF EFFFFFFF
sourceMask:     00000000 00000000 00000000 00000000
globalMap:      00000000 00000000 00000000 00000000
globalMask:     00000000 00000000 0002FFFF EFFFFC03
forwMap:        00000000 00000000 00000000 10000000

frame notifies:
src u_dat vlan fl q-map
2   00    8    01 00000000 00000000 00000000 10000000

Egress q 44
signature:00000007, comparison ind:10, control info:2000941A control map:00000000
vlan:8, vlanid entry:000C0012 00000000 00000000 00000000
adjptr:D  adjacency:E0002409 00000404 04210000
vlan:1033, vlanid entry:0004000A 00000000 88000000 00000000

lookup  key                                   bk adata    rawoff secoff sec
route   420808080A04040421 000000000000000000 0  3FFF800D 006361 000025  3
GigabitEthernet0/1 vlan 1033, dst 0000.0404.0421 src 0022.3355.8800, cos 0x0, dscp 0x0

In this example, the destination MAC address is not the router's MAC address. No routing lookups are performed:

Switch# show forward fastethernet0/1 vlan 8 0000.1111.2222 0022.3355.9800 ip 8.8.8.10 
4.4.4.33 255
signature:00000007, comparison ind:10, control info:2000941A control map:00000000
vlan:8, vlanid entry:000C0012 00000000 00000000 04620000
vlan:8, vlanid entry:000C0012 00000000 00000000 04620000

lookup  key                                   bk adata    rawoff secoff sec
qos     940808080A04040421 800000000000FF0000 0  00000000 006304 004064  4
acl     940808080A04040421 800000000000FF0000 1  00000082 045408 002016  1
learn   187008000011112222 801008002233559800 0  80010003 002176 002176  0
forw    187008000011112222 801008002233559800 1  40020000 043328 010560  5

bridgeDestMap:  00000000 00000000 0000FFFF FFFFFFC7
vlanMask:       00000000 00000000 0000FFFF FFFFFE7F
portMask:       00000000 00000000 00000000 00000080
sourceMask:     00000000 00000000 00000000 00000000
globalMap:      00000000 00000000 00000000 00000000
globalMask:     00000000 00000000 0002FFFF EFFFFC03
forwMap:        00000000 00000000 00000000 00000100

frame notifies:
src u_dat vlan fl q-map
2   00    8    00 00000000 00000000 00000000 00000100

Egress q 8
signature:00000007, comparison ind:10, control info:2000941A control map:00000000
vlan:8, vlanid entry:000C0012 00000000 00000000 04620000
FastEthernet0/2 vlan 8, dst 0022.3355.9800 src 0000.1111.2222, cos 0x0, dscp 0x0

This is an example of the display that results if one of the destinations for the packet is the switch CPU. Note that in this case the section after the frame notifies section is labeled Cpu q and that a queue name appears:

Switch# show forward fastethernet0/1 vlan 7 0000.1111.2222 0022.3355.8800 ip 1.1.1.1 
7.7.7.1 255
signature:00000007, comparison ind:11, control info:2000941A control map:00000000
vlan:7, vlanid entry:000C0011 00000000 00318C60 88000000
adjptr:0  adjacency:00000000 00000000 0000C000
vlan:7, vlanid entry:000C0011 00000000 00318C60 88000000

lookup  key                                   bk adata    rawoff secoff sec
qos     960101010107070701 800000000000FF0000 0  00000000 006304 004064  4
acl     960101010107070701 800000000000FF0000 1  00000082 045408 002016  1
route   420101010107070701 000000000000000000 0  00048000 006345 000009  3
learn   186007000011112222 800E08002233558800 0  80010003 002176 002176  0
forw    186007000011112222 800E08002233558800 1  40090000 033000 000232  5

bridgeDestMap:  00000000 00000000 00000000 00000000
routeDestMap:   00000000 00000000 00100000 00000000
sourceMask:     00000000 00000000 00000000 00000000
globalMap:      00000000 00000000 00000000 00000000
globalMask:     00000000 00000000 0002FFFF EFBFFC03
forwMap:        00000000 00000000 00100000 00000000

frame notifies:
src u_dat vlan fl q-map
2   00    7    01 00000000 00000000 00100000 00000000

Cpu q:100 - routing queue

Table 2-19 show forward Output Description  

Output Section
Description

General (no heading)
Includes the first few lines of the display.

Displays lookup results for several tables in the input portion of the hardware. The output includes packet formats, the configuration of the input VLAN, and other information.

lookup section

Describes TCAM lookups performed during the input forwarding decision and the results of these lookups.

Bitmaps and masks

Displays maps and masks used to calculate the final set of forwarding destinations.

frame notifies section

Contains the bitmap that results from combining the maps and masks from the bitmaps section. If SPAN is configured, there might be additional bitmaps displayed.

Egress q <nn> section

There is an egress section for each separate destination port. The output is varied, but the important information is in the line containing the name of an output interface, output VLAN ID, and rewritten destination MAC address for the frame. If the output interface is a trunk port that needs to send multiple copies of the frame on different VLANs (for example, for IP multicast frames), several lines might contain the same output interface name, but a different output VLANs.

If output security ACLs are present, it is possible that one or more of these egress q sections will not contain a line listing an output port. This happens when the output ACL denies the packet.

Cpu q <nn> <name> section

When the CPU is one of the destinations for a packet, this section appears, followed by a queue name. This name should correspond to one of the queue names in the output from the show controllers cpu-interface privileged EXEC command, where statistics appear for the number of packets received at each queue.



show interfaces

Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.

show interfaces [interface-id | vlan vlan-id] [accounting | capabilities [module {module-number}] description | etherchannel | flowcontrol | pruning | stats | status [err-disabled] | switchport | trunk] | [transceiver properties] | [ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) Valid interfaces include physical ports (including type, slot, and port number) and port channels. The port-channel range is 1 to 64.

vlan vlan-id

(Optional) VLAN identification. The range is 1 to 4094.

accounting

(Optional) Display accounting information on the interface, including active protocols and input and output packets and octets.

capabilities [module module-number]

(Optional) Display the capabilities of the ports.

(Optional) The module or interface number. If you do not specify a module number, the information appears for all ports.

description

(Optional) Display the administrative status and description set for an interface.

etherchannel

(Optional) Display interface EtherChannel information.

flowcontrol

(Optional) Display interface flowcontrol information.

pruning

(Optional) Display interface trunk VTP pruning information.

stats

(Optional) Display the input and output packets by switching path for the interface.

status

(Optional) Display the status of the interface.

err-disabled

(Optional) Display interfaces in error-disabled state.

switchport

(Optional) Display the administrative and operational status of a switching (nonrouting) port, including port blocking and port protection settings.

transceiver properties

(Optional) Display the speed and duplex settings and inline power status on an interface.

trunk

Display interface trunk information. If you do not specify an interface, information for only active trunking ports appears.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.



Note Though visible in the command-line help strings, the crb, fair-queue, irb, mac-accounting, precedence, private-vlan mapping, random-detect, rate-limit, and shape keywords are not supported.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(12c)EA1

The capabilities keyword was added.

12.1(22)EA1

The transceiver and properties keywords were added.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show interfaces gigabitethernet0/1 command:

Switch# show interfaces gigabitethernet0/1 
GigabitEthernet0/1 is up, line protocol is up
  Hardware is Gigabit Ethernet, address is 0002.4b29.4401 (bia 0002.4b29.4401)
  MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Half-duplex, 100Mb/s
  input flow-control is off, output flow-control is off
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:08, output hang never
  Last clearing of "show interface" counters never
  Queueing strategy: fifo
  Output queue 0/40, 0 drops; input queue 0/75, 0 drops
  5 minute input rate 1000 bits/sec, 2 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     7122 packets input, 783062 bytes, 0 no buffer
     Received 5137 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 input packets with dribble condition detected
     9222 packets output, 2188728 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 babbles, 0 late collision, 1 deferred
     0 lost carrier, 0 no carrier
     0 output buffer failures, 0 output buffers swapped out 

This is an example of output from the show interfaces accounting command:

Switch# show interfaces accounting
Vlan1
                Protocol    Pkts In   Chars In   Pkts Out  Chars Out
                      IP       1073      69828        325      31868
                     ARP          6        384          2        120
Vlan10
                Protocol    Pkts In   Chars In   Pkts Out  Chars Out
No traffic sent or received on this interface.
GigabitEthernet0/1
                Protocol    Pkts In   Chars In   Pkts Out  Chars Out
           Spanning Tree          8        480        326      19560
                     CDP         28      10920         29      11513
GigabitEthernet0/2
                Protocol    Pkts In   Chars In   Pkts Out  Chars Out
No traffic sent or received on this interface.
GigabitEthernet0/3
                Protocol    Pkts In   Chars In   Pkts Out  Chars Out
No traffic sent or received on this interface.
<output truncated> 

This is an example of output from the show interfaces capabilities command:

Switch# show interfaces fastethernet0/1 capabilities 
FastEthernet0/1
  Model:                 WS-C3550G-48-EI
  Type:                  10/100BaseTX
  Speed:                 10,100,auto
  Duplex:                half,full,auto
  UDLD:                  yes
  Trunk encap. type:     802.1Q
  Trunk mode:            on,off,desirable,nonegotiate
  Channel:               yes
  Broadcast suppression: percentage(0-100)
  Flowcontrol:           rx-(none),tx-(none)
  Fast Start:            yes
  CoS rewrite:           yes
  ToS rewrite:           yes
  Inline power:          no
  SPAN:                  source/destination
  PortSecure:            Yes
  Dot1x:                 Yes

This is an example of output from the show interfaces gigabitethernet0/4 description command when the interface has been described as Connects to Marketing by using the description interface configuration command:

Switch# show interfaces gigabitethernet0/4 description
Interface Status         Protocol Description
G10/4     up             down     Connects to Marketing

This is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:

Switch# show interfaces etherchannel
----
GigabitEthernet0/9:
Port state    = Down Not-in-Bndl
Channel group = 6           Mode = Desirable-Sl     Gcchange = 0
Port-channel  = null        GC   = 0x00000000    Pseudo port-channel = Po6
Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.        P - Device learns on physical port.
        d - PAgP is down.
Timers: H - Hello timer is running.        Q - Quit timer is running.
        S - Switching timer is running.    I - Interface timer is running.

Local information:
                                Hello    Partner  PAgP     Learning  Group
Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex
Gi0/9     d     U1/S1           1s       0        128        Any      0

Age of the port in the current state: 14d:12h:32m:05s
----
GigabitEthernet0/10:
Port state    = Up Sngl-port-Bndl Mstr Not-in-Bndl
Channel group = 10          Mode = Desirable-Sl     Gcchange = 0
Port-channel  = null        GC   = 0x000A0001    Pseudo port-channel = Po10
Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.        P - Device learns on physical port.
        d - PAgP is down.

Timers: H - Hello timer is running.        Q - Quit timer is running.
        S - Switching timer is running.    I - Interface timer is running.

Local information:
                                Hello    Partner  PAgP     Learning  Group
Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex
Gi0/10          U4/S4   H       30s      0        128        Any      0

Age of the port in the current state: 01d:06h:05m:59s
----
Port-channel6:
Age of the Port-channel   = 01d:06h:05m:38s
Logical slot/port   = 1/1           Number of ports = 0
GC                  = 0x00000000      HotStandBy port = null
Port state          = Port-channel Ag-Not-Inuse
----
Port-channel10:
Age of the Port-channel   = 01d:06h:06m:15s
Logical slot/port   = 1/0           Number of ports = 0
GC                  = 0x00000000      HotStandBy port = null
Port state          = Port-channel Ag-Not-Inuse

This is an example of output from the show interfaces flowcontrol command. Table 2-20 lists the fields in this display.

Switch# show interfaces flowcontrol
Port    Send FlowControl  Receive FlowControl  RxPause TxPause
        admin    oper     admin    oper
-----   -------- -------- -------- --------    ------- -------
Fa0/1   Unsupp.  Unsupp.  off      off         0       0
Fa0/2   Unsupp.  Unsupp.  off      off         0       0
<output truncated>
Gi0/1   desired  off      off      off         0       0
Gi0/2   desired  off      off      off         0       0
Po1     Unsupp.  Unsupp.  off      off         0       0
Po2     Unsupp.  Unsupp.  off      off         0       0
Po59    Unsupp.  Unsupp.  off      off         0       0
Po60    Unsupp.  Unsupp.  off      off         0       0
Po63    Unsupp.  Unsupp.  off      off         0       0
Po64    Unsupp.  Unsupp.  off      off         0       0

Table 2-20 show interfaces flowcontrol Field Descriptions 

Field
Description

Port

Displays the port name.

Send FlowControl

Admin

Displays the administrative (configured) setting for the flow control send mode.

Oper

Displays the operational (running) setting for the flow control send mode.

Receive FlowControl

Admin

Displays the administrative (configured) setting for the flow control receive mode.

Oper

Displays the operational (running) setting for the flow control receive mode.

RxPause

Displays the number of pause frames received.

TxPause

Displays the number of pause frames sent.

On

Flow control is enabled.

Off

Flow control is disabled.

Desired

Flow control is enabled if the other end supports it.

Unsupp.

Flow control is not supported.


This is an example of output from the show interfaces gigabitethernet0/1 pruning command when pruning is enabled in the VTP domain:

Switch# show interfaces gigibitethernet0/1 pruning
Port    Vlans pruned for lack of request by neighbor
Gi0/1   3,4

Port    Vlans traffic requested of neighbor
Gi0/1   1-3

This is an example of output from the show interfaces stats command for a specified interface:

Switch# show interface gigabitethernet0/1 stats
GigabitEthernet0/1
Switching path    Pkts In   Chars In   Pkts Out  Chars Out
Processor            7790    1122034         23       1938
Route cache             0          0          0          0
Total                7790    1122034         23       1938

This is an example of output from the show interfaces status command. It displays the status of all interfaces.

Switch# show interfaces status

Port    Name               Status       Vlan       Duplex  Speed Type
Gi0/1   CubeA              connected    1          a-full  a-100 10/100/1000Base TX
Gi0/2   CubeC              notconnect   1            auto   auto 10/100/1000Base TX
Gi0/3   CubeE              disabled     1            auto   auto 10/100/1000Base TX
Gi0/4   CubeG              notconnect   1            auto   auto 10/100/1000Base TX
Gi0/5   CubeI              notconnect   routed       auto   auto 10/100/1000Base TX
Gi0/6   CubeK              notconnect   routed       auto   auto 10/100/1000Base TX
Gi0/7   CubeM              notconnect   1            auto   auto 10/100/1000Base TX

This is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in error-disabled state.

Switch# show interfaces status err-disabled 

Port    Name               Status       Reason
Gi0/4                      notconnect   link-flap

informational error message when the timer expires on a cause
--------------------------------------------------------------

5d04h:%PM-SP-4-ERR_RECOVER:Attempting to recover from link-flap err-disable state on Gi0/4

This is an example of output from the show interfaces switchport command for a single interface. Table 2-21 describes the fields in the display.

Switch# show interfaces gigabitethernet0/1 switchport
Name: Gi0/1
Switchport:Enabled
Administrative Mode:dynamic desirable
Operational Mode:static access
Administrative Trunking Encapsulation:negotiate
Negotiation of Trunking:On
Access Mode VLAN:1 (default)
Trunking Native Mode VLAN:1 (default)
Voice VLAN:none
Administrative private-vlan host-association:none
Administrative private-vlan mapping:none
Operational private-vlan:none
Trunking VLANs Enabled:ALL
Pruning VLANs Enabled:2-1001
Capture Mode: Disabled
Capture VLANs Allowed:ALL

Protected:true
Unknown unicast blocked:disabled
Unknown multicast blocked:disabled

Voice VLAN:none (Inactive)
Appliance trust:none

Table 2-21 show interfaces switchport Field Descriptions 

Field
Description

Name

Displays the port name.

Switchport

Displays the administrative and operational status of the port. In this display, the port is in switchport mode.

Administrative Mode

Operational Mode

Displays the administrative and operational mode.

Administrative Trunking Encapsulation

Negotiation of Trunking

Displays the administrative and operational encapsulation method, and whether trunking negotiation is enabled.

Access Mode VLAN

Displays the VLAN ID to which the port is configured.

Trunking Native Mode VLAN

Trunking VLANs Enabled

Trunking VLANs Active

Lists the VLAN ID of the trunk that is in native mode. Lists the allowed VLANs on the trunk. Lists the active VLANs on the trunk.

Pruning VLANs Enabled

Lists the VLANs that are pruning-eligible.

Administrative private-vlan host-association

Administrative private-vlan mapping

Operational private-vlan

Displays the administrative and operational status of the private VLAN, and displays the private-VLAN mapping.

Capture Mode

Captured VLANs Allowed

Displays the capture mode and the number of captured VLANs allowed.

Note Because the switch does not support the capture feature, the values for these fields do not change.

Protected

Displays whether or not protected port is enabled (True) or disabled (False) on the interface.

Unknown unicast blocked

Unknown multicast blocked

Displays whether or not unknown multicast and unknown unicast traffic is blocked on the interface.

Voice VLAN

Displays the VLAN ID on which voice VLAN is enabled.

Appliance trust

Displays the CoS setting of the data packets of the IP phone.


This is an example of output from the show interfaces gigabitethernet0/1 trunk command. It displays trunking information for the interface.

Switch# show interfaces gigabitethernet0/1 trunk

Port      Mode         Encapsulation  Status        Native vlan
Gi0/1     desirable    negotiate      not-trunking  1

Port      Vlans allowed on trunk
Gi0/1     1

Port      Vlans allowed and active in management domain
Gi0/1     1

Port      Vlans in spanning tree forwarding state and not pruned
Gi0/1     1 

This is an example of output from the show interfaces transceiver properties command. If you do not specify an interface, the output of the command shows the status on all switch ports:

Switch# show interfaces transceiver properties
Name : Fa0/1
Administrative Speed: auto 10 100
Administrative Duplex: auto
Administrative Auto-MDIX: N/A 
Administrative Power Inline: enable
Operational Speed: 100
Operational Duplex: full
Operational Auto-MDIX: N/A 

Name : Fa0/2
Administrative Speed: auto 10 
Administrative Duplex: auto
Administrative Auto-MDIX: N/A 
Administrative Power Inline: enable
Operational Speed: auto
Operational Duplex: auto
Operational Auto-MDIX: N/A 

<output truncated> 

This is an example of output from the show interfaces module number transceiver properties command for a specific interface:

Switch# show interfaces fastethernet0/1 transceiver properties
Name : Fa0/1
Administrative Speed: auto
Administrative Duplex: auto
Administrative Auto-MDIX: N/A
Administrative Power Inline: disable
Operational Speed: 100
Operational Duplex: full

Operational Auto-MDIX: N/A

Related Commands

Command
Description

switchport access

Configures a port as a static-access or dynamic-access port.

switchport block

Blocks unknown unicast or multicast traffic on an interface.

switchport broadcast

Configures the VLAN membership mode of a port.

switchport protected

Isolates unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch.

switchport trunk pruning

Configures the VLAN pruning-eligible list for ports in trunking mode.


show interfaces counters

Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface.

show interfaces [interface-id] counters [errors | etherchannel | protocol status | trunk] [ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) ID of the physical interface, including type and slot and port number.

errors

(Optional) Display error counters.

etherchannel

(Optional) Display EtherChannel counters.

protocol status

(Optional) Display the current status of enabled protocols.

trunk

(Optional) Display trunk counters.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.



Note Though visible in the command-line help strings, the module and vlan-id keywords are not supported.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.2(25)SE

The etherchannel and protocol status keywords were added and the broadcast, multicast, and unicast keywords were removed.


Usage Guidelines

If you do not enter any keywords, all counters for all interfaces are included.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show interfaces counters command. It displays all counters for the switch.

Switch# show interfaces counters
Port            InOctets   InUcastPkts   InMcastPkts   InBcastPkts
Gi0/1           23324617         10376        185709        126020
Gi0/2                  0             0             0             0

Port           OutOctets  OutUcastPkts  OutMcastPkts  OutBcastPkts
Gi0/1            4990607         28079         21122            10
Gi0/2            1621568         25337             0             0

Switch# show interfaces counters errors

Port        Align-Err    FCS-Err   Xmit-Err    Rcv-Err UnderSize
Gi0/1               0          0          0          0         0
Gi0/2               0          0          0          0         0
Gi0/3               0          0          0          0         0
Gi0/4               0          0          0          0         0


Port      Single-Col Multi-Col  Late-Col Excess-Col Carri-Sen     Runts    Giants
Gi0/1              0         0         0          0         0         0      0
Gi0/2              0         0         0          0         0         0      0
Gi0/3              0         0         0          0         0         0      0
Gi0/4              0         0         0          0         0         0      0

This is an example of output from the show interfaces counters protocol status command for all interfaces.

Switch# show interfaces counters protocol status
Protocols allocated:
 Vlan1: Other, IP
 Vlan1001: Other, IP, ARP
 FastEthernet0/1: Other, IP
 FastEthernet0/2: Other, IP, Spanning Tree, ARP, CDP
 FastEthernet0/3: Other, IP
 FastEthernet0/4: Other, IP
 FastEthernet0/5: Other, IP
 FastEthernet0/6: Other, IP
 FastEthernet0/7: Other, IP

<output truncated>

This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces.

Switch# show interfaces counters trunk

Port        TrunkFramesTx  TrunkFramesRx  WrongEncap
Gi0/1                   0              0           0
Gi0/2                   0              0           0 

Related Commands

Command
Description

show interfaces

Displays additional interface characteristics.


show ip dhcp snooping

Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration.

show ip dhcp snooping

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC

Command History

Release
Modification

12.1(19)EA1

This command was introduced


Examples

This is an example of output from the show ip dhcp snooping command.

Switch> show ip dhcp snooping
Switch DHCP snooping is enabled
DHCP snooping is configured on following VLANs:
40-42
Insertion of option 82 is enabled
Verification of hwaddr field is enabled
Interface                    Trusted     Rate limit (pps)
------------------------     -------     ----------------
FastEthernet0/5              yes         unlimited
FastEthernet0/7              yes         unlimited
FastEthernet0/3              no          5000     
FastEthernet0/5              yes         unlimited
FastEthernet0/7              yes         unlimited
FastEthernet0/5              yes         unlimited
FastEthernet0/7              yes         unlimited

Related Commands

Command
Description

show ip dhcp snooping binding

Displays the DHCP snooping binding information.


show ip dhcp snooping binding

Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding table and configuration information for all interfaces on a switch.

show ip dhcp snooping binding [ip-address] [mac-address] [interface interface-id] [vlan vlan-id]| {begin | exclude | include} expression]

Syntax Description

ip-address

(Optional) Specify the binding entry IP address.

mac-address

(Optional) Specify the binding entry MAC address.

interface interface-id

(Optional) Specify the binding input interface.

vlan vlan-id

(Optional) Specify the binding entry VLAN.

| begin

Display begins with the line that matches the expression.

| exclude

Display excludes lines that match the expression.

| include

Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(19)EA1

This command was introduced

12.2(25)SE

The dynamic and static keywords were removed.


Usage Guidelines

The show ip dhcp snooping binding command output shows the dynamically configured bindings.

If DHCP snooping is enabled and an interface changes to the down state, the switch does not delete the statically configured bindings.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This example shows how to display the DHCP snooping binding entries for a switch:

Switch> show ip dhcp snooping binding
MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
------------------  ---------------  ----------  -------------  ----  --------------------
01:02:03:04:05:06   10.1.2.150       9837        dhcp-snooping  20    GigabitEthernet0/1
00:D0:B7:1B:35:DE   10.1.2.151       237         dhcp-snooping  20    GigabitEthernet0/2
Total number of bindings: 2

This example shows how to display the DHCP snooping binding entries for a specific IP address:

Switch> show ip dhcp snooping binding 10.1.2.150
MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
------------------  ---------------  ----------  -------------  ----  --------------------
01:02:03:04:05:06   10.1.2.150       9810        dhcp-snooping  20    GigabitEthernet0/1
Total number of bindings: 1

This example shows how to display the DHCP snooping binding entries for a specific MAC address:

Switch> show ip dhcp snooping binding 0102.0304.0506
MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
------------------  ---------------  ----------  -------------  ----  --------------------
01:02:03:04:05:06   10.1.2.150       9788        dhcp-snooping  20    GigabitEthernet0/2
Total number of bindings: 1

This example shows how to display the DHCP snooping binding entries on an interface:

Switch> show ip dhcp snooping binding interface gigabitethernet0/2
MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
------------------  ---------------  ----------  -------------  ----  --------------------
00:30:94:C2:EF:35   10.1.2.151       290         dhcp-snooping  20    GigabitEthernet0/2
Total number of bindings: 1

This example shows how to display the DHCP snooping binding entries on VLAN 20:

Switch> show ip dhcp snooping binding vlan 20
MacAddress          IpAddress        Lease(sec)  Type           VLAN  Interface
------------------  ---------------  ----------  -------------  ----  --------------------
01:02:03:04:05:06   10.1.2.150       9747        dhcp-snooping  20    GigabitEthernet0/1
00:00:00:00:00:02   10.1.2.151       65          dhcp-snooping  20    GigabitEthernet0/2
Total number of bindings: 2

Table 2-22 describes the fields in the show ip dhcp snooping binding command output.

Table 2-22 show ip dhcp snooping binding Command Output 

Field
Description

MAC Address

Client hardware MAC address

IP Address

Client IP address assigned from the DHCP server

Lease (seconds)

IP address lease time

Type

Binding type

VLAN

VLAN number of the client interface

Interface

Interface that connects to the DHCP client host

Total number of bindings

Total number of bindings configured on the switch

Note The command output might not show the total number of bindings. For example, if 200 bindings are configured on the switch and you stop the display before all the bindings appear, the total number does not change.


Related Commands

Command
Description

show ip dhcp snooping

Displays the DHCP snooping configuration.


show ip igmp profile

Use the show ip igmp profile privileged EXEC command to view all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.

show ip igmp profile [profile number] [ | {begin | exclude | include} expression]

Syntax Description

profile number

(Optional) The IGMP profile number to be displayed. The range is 1 to 4294967295. If no profile number is entered, all IGMP profiles appear.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(8)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

These are examples of output from the show ip igmp profile privileged EXEC command, with and without specifying a profile number. If no profile number is entered, the display includes all profiles configured on the switch.

Switch# show ip igmp profile 40
IGMP Profile 40
    permit
    range 233.1.1.1 233.255.255.255

Switch# show ip igmp profile
IGMP Profile 3
    range 230.9.9.0 230.9.9.0
IGMP Profile 4
    permit
    range 229.9.9.0 229.255.255.255

Related Commands

Command
Description

ip igmp profile

Configures the specified IGMP profile number.


show ip igmp snooping

Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN. Use the mrouter keyword to display the dynamically learned and manually configured multicast router ports.

show ip igmp snooping [groups | mrouter | querier] [vlan vlan-id] [ | {begin | exclude | include} expression]

Syntax Description

groups

(Optional) See the show ip igmp snooping groups command.

mrouter

(Optional) Display the IGMP snooping dynamically learned and manually configured multicast router ports.

querier

(Optional) Display information about the IGMP version that an interface supports.

vlan vlan-id

(Optional) Specify a VLAN; the range is 1 to 4094 (only available in privileged EXEC mode).

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

The vlan vlan-id keyword is available only in privileged EXEC mode.

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(19)EA1

The group and querier keywords were added.

12.2(25)SE

The groups keyword was added, and the group keyword was removed.


Usage Guidelines

Use this command to display snooping characteristics for the switch or for a specific VLAN.

You can also use the show mac address-table multicast privileged EXEC command to display entries in the MAC address table for a VLAN that has IGMP snooping enabled.

When multicast VLAN registration (MVR) is enabled, use the show ip igmp snooping mrouter command to display the IGMP snooping dynamically learned and manually configured multicast router ports.

Use the show ip igmp snooping querier command to display the IGMP version and IP address of a detected device that sends IGMP query messages, also called a querier. A subnet can have multiple multicast routers but has only one IGMP querier. In a subnet running IGMPv2, one of the multicast routers is elected as the querier. The querier can be a Layer 3 switch.

The show ip igmp snooping querier command output also shows the VLAN and interface on which the querier was detected. If the querier is the switch, the command output shows the Port field as internal. If the querier is a multicast router, the output shows the Port field as Router.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show ip igmp snooping command. It shows how to display snooping characteristics for all VLANs on the switch.

Switch> show ip igmp snooping 
Global IGMP Snooping configuration:
-----------------------------------
IGMP snooping             : Enabled
IGMPv3 snooping (minimal) : Enabled
Report suppression        : Enabled
TCN solicit query         : Disabled
TCN flood query count     : 2

Vlan 1:
--------
IGMP snooping                       :Enabled
Immediate leave                     :Disabled
Multicast router learning mode      :pim-dvmrp
Source only learning age timer      :10
CGMP interoperability mode          :IGMP_ONLY

Vlan 2:
--------
IGMP snooping                       :Enabled
Immediate leave                     :Disabled
Multicast router learning mode      :pim-dvmrp
Source only learning age timer      :10
CGMP interoperability mode          :IGMP_ONLY

<output truncated>

This is an example of output from the show ip igmp snooping vlan 1 command. It shows how to display snooping characteristics for a specific VLAN.

Switch# show ip igmp snooping vlan 1
Global IGMP Snooping configuration:
-----------------------------------
IGMP snooping             : Enabled
IGMPv3 snooping (minimal) : Enabled
Report suppression        : Enabled
TCN solicit query         : Disabled
TCN flood query count     : 2

Vlan 1:
--------
IGMP snooping                       :Enabled
Immediate leave                     :Disabled
Multicast router learning mode      :pim-dvmrp
Source only learning age timer      :10
CGMP interoperability mode          :IGMP_ONLY

This is an example of output from the show ip igmp snooping mrouter command. It shows how to display multicast router ports on the switch.

Switch> show ip igmp snooping mrouter
vlan            ports
-----+----------------------------------------
  1          Gi0/1,Gi0/1, Router
  2          Gi0/3,Gi0/4

This is an example of output from the show ip igmp snooping mrouter vlan 1 command. It shows how to display multicast router ports for a specific VLAN.

Switch# show ip igmp snooping mrouter vlan 1
vlan            ports
-----+----------------------------------------
  1          Gi0/1,Gi0/1, Router

This is an example of output from the show ip igmp snooping querier command:

Switch> show ip igmp snooping querier
Vlan      IP Address     IGMP Version        Port
---------------------------------------------------
1         172.20.50.11   v3                  fa0/1
2         172.20.40.20   v2                  Router

Related Commands

Command
Description

ip igmp snooping

Enables and configures IGMP snooping on the switch or on a VLAN.

show ip igmp snooping groups

Displays IGMP snooping multicast information for the switch or for the specified parameter.

ip igmp snooping report-suppression

Enables IGMP report suppression.

ip igmp snooping source-only-learning age-timer

Enables and configures the aging time of the forward-table entries that the switch learns by using the source-only learning method.

show mac address-table multicast

Displays the Layer 2 multicast entries for a VLAN.


show ip igmp snooping groups

Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.

show ip igmp snooping groups [count | vlan vlan-id [ip_address | count]] [ | {begin | exclude | include} expression]

Syntax Description

count

(Optional) Display the total number of entries for the specified command

options instead of the actual entries.

vlan-id

(Optional) Specify a VLAN; the range is 1 to 4094.

ip_address

(Optional) Display characteristics of the multicast group with the specified group IP address.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.2(25)SE

This command was introduced.


Usage Guidelines

Use this command to display multicast information or the multicast table.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch.

Switch# show ip igmp snooping groups

Vlan      Group          Type        Version     Port List
-------------------------------------------------------------
104       224.1.4.2      igmp        v2          Gi0/1, Gi0/2
104       224.1.4.3      igmp        v2          Gi0/1, Gi0/2

This is an example of output from the show ip igmp snooping groups count command. It displays the total number of multicast groups on the switch.

Switch# show ip igmp snooping groups count
Total number of multicast groups: 2

This is an example of output from the show ip igmp snooping groups dynamic command. It shows only the entries learned by IGMP snooping.

Switch# show ip igmp snooping groups vlan 1 dynamic
Vlan      Group          Type        Version     Port List
-------------------------------------------------------------
104       224.1.4.2      igmp        v2          Gi0/1
104       224.1.4.3      igmp        v2          Gi0/1

This is an example of output from the show ip igmp snooping groups vlan vlan-id ip-address command. It shows the entries for the group with the specified IP address.

Switch# show ip igmp snooping groups vlan 104 224.1.4.2
Vlan      Group          Type        Version     Port List
-------------------------------------------------------------
104       224.1.4.2      igmp        v2          Gi0/1

Related Commands

Command
Description

ip igmp snooping

Enables and configures IGMP snooping on the switch or on a VLAN.

show ip igmp snooping

Displays the IGMP snooping configuration of the switch or the VLAN


show l2protocol-tunnel

Use the show l2protocol-tunnel user EXEC command to display information about Layer 2 protocol tunnel ports. Displays information for interfaces with protocol tunneling enabled.

show l2protocol-tunnel [interface interface-id] [summary] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id

(Optional) Specify the interface for which protocol tunneling information appears. Valid interfaces are physical ports and port channels; the port channel range is 1 to 64.

summary

(Optional) Display only Layer 2 protocol summary information.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(9)EA1

This command was introduced.


Usage Guidelines

After enabling Layer 2 protocol tunneling on an access or 802.1Q tunnel port by using the l2protocol-tunnel interface configuration command, you can configure some or all of these parameters:

Protocol type to be tunneled

Shutdown threshold

Drop threshold

If you enter the show l2protocol-tunnel [interface interface-id] command, only information about the active ports on which all the parameters are configured appears.

If you enter the show l2protocol-tunnel summary command, only information about the active ports on which some or all of the parameters are configured appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show l2protocol-tunnel command:

Switch> show l2protocol-tunnel
COS for Encapsulated Packets: 5

Port    Protocol Shutdown  Drop      Encapsulation Decapsulation Drop
                 Threshold Threshold Counter       Counter       Counter
------- -------- --------- --------- ------------- ------------- -------------
Fa0/10  ---           ----      ----          ----          ----          ----
        stp           ----      ---- 9847          1866          0
        vtp           ----      ---- 77            12            0
        pagp          ----      ---- 859           860           0
        lacp          ----      ---- 0             0             0
        udld          ----      ---- 219           211           0
Fa0/11  cdp           1100      ---- 2356          2350          0
        stp           1100      ---- 116           13            0
        vtp           1100      ---- 3             67            0
        pagp          ----       900 856           5848          0
        lacp          ----       900 0             0             0
        udld          ----       900 0             0             0
Fa0/12  cdp           ----      ---- 2356          0             0
        stp           ----      ---- 11787         0             0
        vtp           ----      ---- 81            0             0
        pagp          ----      ---- 0             0             0
        lacp          ----      ---- 849           0             0
        udld          ----      ---- 0             0             0
Fa0/13  cdp           ----      ---- 2356          0             0
        stp           ----      ---- 11788         0             0
        vtp           ----      ---- 81            0             0
        pagp          ----      ---- 0             0             0
        lacp          ----      ---- 849           0             0
        udld          ----      ---- 0             0             0

This is an example of output from the show l2protocol-tunnel summary command:

Switch> show l2protocol-tunnel summary
COS for Encapsulated Packets: 5

Port    Protocol    Shutdown         Drop            Status
                    Threshold        Threshold
                    (cdp/stp/vtp)    (cdp/stp/vtp)
                    (pagp/lacp/udld) (pagp/lacp/udld)
------- ----------- ---------------- ---------------- ----------
Fa0/10  --- stp vtp ----/----/----   ----/----/----   up
     pagp lacp udld ----/----/----   ----/----/----
Fa0/11  cdp stp vtp 1100/1100/1100   ----/----/----   up
     pagp lacp udld ----/----/----    900/ 900/ 900
Fa0/12  cdp stp vtp ----/----/----   ----/----/----   up
     pagp lacp udld ----/----/----   ----/----/----
Fa0/13  cdp stp vtp ----/----/----   ----/----/----   up
     pagp lacp udld ----/----/----   ----/----/----
Fa0/14  cdp stp vtp ----/----/----   ----/----/----   down
     pagp ---- udld ----/----/----   ----/----/----
Fa0/15  cdp stp vtp ----/----/----   ----/----/----   down
     pagp ---- udld ----/----/----   ----/----/----
Fa0/16  cdp stp vtp ----/----/----   ----/----/----   down
     pagp lacp udld ----/----/----   ----/----/----
Fa0/17  cdp stp vtp ----/----/----   ----/----/----   down
     pagp lacp udld ----/----/----   ----/----/----

Related Commands

Command
Description

clear l2protocol-tunnel counters

Clears counters for protocol tunneling ports.

l2protocol-tunnel

Enables Layer 2 protocol tunneling for CDP, STP, or VTP packets on an interface.

l2protocol-tunnel cos

Configures a class of service (CoS) value for tunneled Layer 2 protocol packets.


show l2tcam

Use the show l2tcam privileged EXEC command to display information about the portion of the ternary content addressable memory (TCAM) devoted to Layer 2 addresses. Use the keywords to display forwarding (bridging) or learning (MAC address learning) information or to display allocation statistics of MAC address types.

show l2tcam {cam {forwarding [entry-id] learning} | shadow} [ | {begin | exclude | include} expression]

Syntax Description

cam

Display contents and associated information about TCAM Layer 2 contents. This display output is a raw hex dump of information, intended for a Cisco technical support representative.

forwarding

Display TCAM Layer 2 forwarding (bridging) information.

entry-id

Number from 0 to 4294967295 identifying a forwarding entry.

learning

Display TCAM Layer 2 learning (MAC address learning) information.

shadow

Display allocation statistics for various address types of MAC addresses that the software keeps track of. Address types are identified only by number.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show l2tcam cam learning command:

Switch# show l2tcam cam learning
mask 1156  F7 FFFFFFFF FFFFFFFF
mask 1157  F7 FFFFFFFF FFFFFFFF
mask 1158  F7 FFFFFFFF FFFFFFFF
mask 1159  F7 FFFFFFFF FFFFFFFF
9248       00 00000000 00000000     80070000
9249       00 00000000 00000000     80060000
9250       00 00000000 00000000     80070000
9251       18 00010002 4B293A00     80020000
9252       00 00000000 00000000     80060000
9253       00 00000000 00000000     80010000
9254       00 00000000 00000000     80030000
9255       18 00010002 4B296700     80040000
<output truncated>

 9368       FF FFFFFFFF FFFFFFFF     5E731478
9369       FF FFFFFFFF FFFFFFFF     17B195AE
9370       FF FFFFFFFF FFFFFFFF     AB2DECEA
9371       FF FFFFFFFF FFFFFFFF     D821EC4E
9372       FF FFFFFFFF FFFFFFFF     E6E55344
9373       FF FFFFFFFF FFFFFFFF     FBFB0EEE
9374       FF FFFFFFFF FFFFFFFF     2057A03D
9375       FF FFFFFFFF FFFFFFFF     E55FE7C3

This is an example of output from the show l2tcam shadow command:

Switch# show l2tcam shadow
learning table
type  start  end   firstfree  firstfreeentry  flag  used/free
0     0      79    0          0               4        0/640
1     80     83    80         0               4        0/32
2     1159   84    1159       3               2        3/8605
3     1160   1167  1160       0               1        0/64
4     1168   1171  1168       1               1        1/31

forwarding table
type  start  end   firstfree  firstfreeentry  flag  used/free
0     0      0     0          0               12       0/0
1     0      0     0          0               12       0/0
2     0      77    0          0               4        0/624
3     78     83    82         6               1       38/10
4     84     1159  84         3               4        3/8605
5     1287   1160  1275       3               2       99/925
6     1415   1288  1403       3               2       99/925
7     1416   1417  1416       0               1        0/16
8     1801   1418  1801       0               2        0/3072
9     1802   1803  1802       1               1        1/15
10    1804   1805  1804       1               1        1/15
11    1809   1806  1809       0               2        0/32
12    1810   1811  1810       2               1        2/14

Related Commands

Command
Description

show l3tcam

Displays information about the TCAM devoted to Layer 3 forwarding information.

show mac address-table

Displays the MAC address table static and dynamic entries.


show l3tcam

Use the show l3tcam privileged EXEC command to display information about the portion of the ternary content addressable memory (TCAM) devoted to Layer 3 forwarding (IP routing) information.

show l3tcam {cam | shadow} [ | {begin | exclude | include} expression]

Syntax Description

cam

Display contents and associated information about TCAM Layer 3 contents devoted to unicast and multicast IP routing. This display output is a raw hex dump of information, intended for a Cisco technical support representative.

shadow

Display contents and associated information about TCAM Layer 3 contents formatted to display routes and adjacencies associated with each mask, and some overall statistics.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show l3tcam cam command:

Switch# show l3tcam cam
C2 00 00 00 00 00 00 00 00 
Mask(s)
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 
F1 00 00 00 00 FF FF FF FF - 80 07 00 00 00 00 00 00 00 

Entries
C2 00 00 00 00 00 00 00 00 - 80 00 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 FF FF FF FF - 80 00 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 00 00 00 00 - 80 01 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 FF FF FF FF - 80 01 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 00 00 00 00 - 80 02 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 FF FF FF FF - 80 02 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 00 08 - 80 00 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 01 08 - 80 01 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 02 08 - 80 02 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 0A 08 - 80 00 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 0B 08 - 80 01 00 00 00 00 00 00 00         ( 00 04 80 00 )
C2 00 00 00 00 08 08 0C 08 - 80 02 00 00 00 00 00 00 00         ( 00 04 80 00 )

<output truncated>

This is an example of output from the show l3tcam shadow command:

Switch# show l3tcam shadow
L3 TCAM:total words = 30720, used words = 194

Prefix 34:Start=0(0) End=15(127) FirstFree=98, NumFree = 30

Offset  Tbl+Flg SA              DA              Lbl Assoc
==============================================================
Mask    0xF1    0.0.0.0         255.255.255.255   7 --

     0  0xC2    0.0.0.0         0.0.0.0           0 0x00048000 (CPU)
     2  0xC2    0.0.0.0         255.255.255.255   0 0x00048000 (CPU)
     4  0xC2    0.0.0.0         0.0.0.0           1 0x00048000 (CPU)
     6  0xC2    0.0.0.0         255.255.255.255   1 0x00048000 (CPU)
     8  0xC2    0.0.0.0         0.0.0.0           2 0x00048000 (CPU)
    10  0xC2    0.0.0.0         255.255.255.255   2 0x00048000 (CPU)
    12  0xC2    0.0.0.0         8.8.0.8           0 0x00048000 (CPU)
    14  0xC2    0.0.0.0         8.8.1.8           1 0x00048000 (CPU)
    16  0xC2    0.0.0.0         8.8.2.8           2 0x00048000 (CPU)
    18  0xC2    0.0.0.0         8.8.10.8          0 0x00048000 (CPU)
    20  0xC2    0.0.0.0         8.8.11.8          1 0x00048000 (CPU)
    22  0xC2    0.0.0.0         8.8.12.8          2 0x00048000 (CPU)
    24  0xC2    0.0.0.0         10.10.10.40       0 0x00048000 (CPU)
    26  0xC2    0.0.0.0         10.10.0.0         0 0x00048000 (CPU)
    28  0xC2    0.0.0.0         10.10.255.255     0 0x00048000 (CPU)
    30  0xC2    0.0.0.0         38.0.0.8          1 0x00048000 (CPU)

<output truncated>

Related Commands

Command
Description

show adjacency

Displays Cisco Express Forwarding (CEF) adjacency table information. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Switching Services Command Reference, Release 12.2.

show arp

Displays the entries in the ARP table. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2.

show ip route

Displays the current state of the routing table. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 2 of 3: Routing Protocols, Release 12.2.

show l2tcam

Displays information about the portion of the TCAM devoted to Layer 2 information.


show lacp

Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information.

show lacp {channel-group-number {counters | internal | neighbor} | {counters | internal | neighbor | sys-id}} [ | {begin | exclude | include} expression]

Syntax Description

channel-group-number

(Optional) Number of the channel group. The range is 1 to 6.

counters

Display traffic information.

internal

Display internal information.

neighbor

Display neighbor information.

sys-id

Display the system identifier that is being used by LACP. The system identifier is made up of the LACP system priority and a MAC address.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(12c)EA1

This command was introduced.


Usage Guidelines

You can enter any show lacp command to display the active port-channel information. To display the nonactive information, enter the show lacp command with a group number.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show lacp counters command:

Switch> show lacp counters
LACPDUs         Marker      Marker Response    LACPDUs
Port       Sent   Recv     Sent   Recv     Sent   Recv      Pkts Err
---------------------------------------------------------------------
Channel group:1
Fa0/5      19     10       0      0        0      0         0     
Fa0/6      14     6        0      0        0      0         0     
Fa0/7      8      7        0      0        0      0         0 

This is an example of output from the show lacp internal command:

Switch> show lacp 1 internal 
Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs
        A - Device is in Active mode       P - Device is in Passive mode     
 
Channel group 1
                            LACP port     Admin     Oper    Port     Port
Port      Flags   State     Priority      Key       Key     Number   State
Fa0/5     SP      indep     32768         0x1       0x1     0x4      0x7C  
Fa0/6     SP      indep     32768         0x1       0x1     0x5      0x7C  
Fa0/7     SP      down      32768         0x1       0x1     0x6      0xC 

This is an example of output from the show lacp neighbor command:

Switch> show lacp 1 neighbor

Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs
        A - Device is in Active mode       P - Device is in Passive mode     
 
Channel group 1 neighbors
 
Partner's information:
 
          Partner               Partner                     Partner
Port      System ID             Port Number     Age         Flags
Fa0/5     00000,0000.0000.0000  0x0             85947s        SP
 
          LACP Partner         Partner         Partner
          Port Priority        Oper Key        Port State
          0                    0x0             0x0 

Partner's information:
 
          Partner               Partner                     Partner
Port      System ID             Port Number     Age         Flags
Fa0/6     00000,0000.0000.0000  0x0             86056s        SP
 
          LACP Partner         Partner         Partner
          Port Priority        Oper Key        Port State
          0                    0x0             0x0 
 
Partner's information:
 
          Partner               Partner                     Partner
Port      System ID             Port Number     Age         Flags
Fa0/7     00010,0008.a343.b580  0x6             86032s        SA
 
          LACP Partner         Partner         Partner
          Port Priority        Oper Key        Port State
          32768                0x1             0x35

This is an example of output from the show lacp sys-id command:

Switch> show lacp sys-id 
32765,0002.4b29.3a00

Related Commands

Command
Description

clear lacp

Clears the LACP channel-group information.


show mac access-group

Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.

show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id

(Optional) Display the MAC ACLs configured on a specific interface. Valid interfaces are physical ports and port channels; the port channel range is 1 to 64.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC; the interface keyword is available only in privileged EXEC mode.

Command History

Release
Modification

12.1(9)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac-access group user EXEC command. In this display, port 2 has the MAC access list macl_e1 applied; no MAC ACLs are applied to other interfaces.

Switch> show mac access-group 
Interface GigabitEthernet0/1:
   Inbound access-list is not set
Interface GigabitEthernet0/2:
   Inbound access-list is macl_e1
Interface GigabitEthernet0/3:
   Inbound access-list is not set
Interface GigabitEthernet0/4:
   Inbound access-list is not set
Interface GigabitEthernet0/5:
   Inbound access-list is not set

<output truncated>

Interface GigabitEthernet0/10:
   Inbound access-list is not set
Interface GigabitEthernet0/11:
   Inbound access-list is not set
Interface GigabitEthernet0/12:
   Inbound access-list is not set

This is an example of output from the show mac access-group interface gigabitethernet0/2 command:

Switch# show mac access-group interface gigabitethernet0/2
Interface GigabitEthernet0/2:
   Inbound access-list is macl_e1

Related Commands

Command
Description

mac access-group

Applies a MAC access group to an interface.


show mac address-table

Use the show mac address-table user EXEC command with no keywords to display the MAC address table static and dynamic entries.

show mac address-table [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table command replaces the show mac-address-table command (with the hyphen).


Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table command was replaced by the show mac address-table command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table command:

Switch> show mac address-table
          Mac Address Table
------------------------------------------

Vlan    Mac Address       Type       Ports
----    -----------       ----       -----
All    0000.0000.0001    STATIC     CPU
All    0000.0000.0002    STATIC     CPU
All    0000.0000.0003    STATIC     CPU
All    0000.0000.0009    STATIC     CPU
All    0000.0000.0012    STATIC     CPU
All    0180.c200.000b    STATIC     CPU
All    0180.c200.000c    STATIC     CPU
All    0180.c200.000d    STATIC     CPU
All    0180.c200.0010    STATIC     CPU
   1    0030.9441.6327    DYNAMIC    Fa0/23
Total Mac Addresses for this criterion: 9

Related Commands

Command
Description

clear mac address-table dynamic

Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table address

Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address.

show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table address command replaces the show mac-address-table address command (with the hyphen).


Syntax Description

mac-address

Specify the 48-bit MAC address; the valid format is H.H.H.

interface interface-id

(Optional) Display information for a specific interface. Valid interfaces include physical ports and port channels.

vlan vlan-id

(Optional) Display entries for the specific VLAN only. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table address command was replaced by the show mac address-table address command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table address command:

Switch> show mac address-table address 0002.4b28.c482
          Mac Address Table
------------------------------------------

Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
 All    0002.4b28.c482  STATIC  CPU
Total Mac Addresses for this criterion: 1 

Related Commands

Command
Description

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table aging-time

Use the show mac address-table aging-time user EXEC command to display the aging time in all VLANs or the specified VLAN.

show mac address-table aging-time [vlan vlan-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table aging-time command replaces the show mac-address-table aging-time command (with the hyphen).


Syntax Description

vlan vlan-id

(Optional) Display aging time information for a specific VLAN. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table aging-time command was replaced by the show mac address-aging-time command.


Usage Guidelines

If no VLAN number is specified, the aging time for all VLANs appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table aging-time command:

Switch> show mac address-table aging-time
Vlan    Aging Time
----    ----------
   1     300 

This is an example of output from the show mac address-table aging-time vlan 10 command:

Switch> show mac address-table aging-time vlan 10
Vlan    Aging Time
----    ----------
  10     300 

Related Commands

Command
Description

mac address-table aging-time

Sets the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table count

Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN.

show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table count command replaces the show mac-address-table count command (with the hyphen).


Syntax Description

vlan vlan-id

(Optional) Display the number of addresses for a specific VLAN. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table count command was replaced by the show mac address-table count command.


Usage Guidelines

If no VLAN number is specified, the address count for all VLANs appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table count command:

Switch> show mac address-table count

Mac Entries for Vlan   : 1
---------------------------
Dynamic Address Count  : 2
Static  Address Count  : 0
Total Mac Addresses    : 2 

Related Commands

Command
Description

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table dynamic

Use the show mac address-table dynamic user EXEC command to display dynamic MAC address table entries only.

show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table dynamic command replaces the show mac-address-table dynamic command (with the hyphen).


Syntax Description

address mac-address

(Optional) Specify a 48-bit MAC address; the valid format is H.H.H.

interface interface-id

(Optional) Specify an interface to match; valid interfaces include physical ports and port channels.

vlan vlan-id

(Optional) Display entries for a specific VLAN; the range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table dynamic command was replaced by the show mac address-table dynamic command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table dynamic command:

Switch> show mac address-table dynamic
          Mac Address Table
------------------------------------------

Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
   1    0030.b635.7862  DYNAMIC Gi0/2
   1    00b0.6496.2741  DYNAMIC Gi0/2
Total Mac Addresses for this criterion: 2 

Related Commands

Command
Description

clear mac address-table dynamic

Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table interface

Use the show mac address-table interface user EXEC command to display the MAC address table information for the specified interface in the specified VLAN.

show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table interface command replaces the show mac-address-table interface command (with the hyphen).


Syntax Description

interface-id

Specify an interface type; valid interfaces include physical ports and port channels.

vlan vlan-id

(Optional) Display entries for a specific VLAN; the range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table interface command was replaced by the show mac address-table interface command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table interface command:

Switch> show mac address-table interface gigabitethernet0/2
          Mac Address Table
------------------------------------------

Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
   1    0030.b635.7862  DYNAMIC Gi0/2
   1    00b0.6496.2741  DYNAMIC Gi0/2
Total Mac Addresses for this criterion: 2 

Related Commands

Command
Description

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table multicast

Use the show mac address-table multicast user EXEC command to display the Layer 2 multicast entries for all VLANs. Use the command in privileged EXEC mode to display specific multicast entries.

show mac address-table multicast [count] | igmp-snooping [count] | user [count] | vlan [count] | [vlan-id [count] | igmp-snooping [count] | user [count]] [ | {begin | exclude | include} expression]


Note The show mac address-table multicast command only shows non-IP multicast addresses. Use the show ip igmp snooping multicast user EXEC command to display IP multicast addresses.



Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table multicast command replaces the show mac-address-table multicast command (with the hyphen).


Syntax Description

count

(Optional) Display the total number of entries for the specified command options instead of the actual entries.

igmp-snooping

(Optional) Display entries learned through Internet Group Management Protocol (IGMP) snooping.

user

(Optional) Display only the user-configured multicast entries.

vlan vlan-id

(Optional) Display addresses for a specific VLAN. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table multicast command was replaced by the show mac address-table multicast command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table multicast command. It shows how to display all multicast entries for the switch.

Switch> show mac address-table multicast
Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
   1    0100.5e00.0128  IGMP    Gi0/1 

This is an example of output from the show mac address-table multicast count command. It shows how to display a total count of MAC address entries for the switch.

Switch> show mac address-table multicast count

Multicast MAC Entries for all vlans:    10

This is an example of output from the show mac address-table multicast vlan 1 count command. It shows how to display a total count of MAC address entries for a VLAN.

Switch> show mac address-table multicast vlan 1 count

Multicast MAC Entries for vlan 1:    4

This is an example of output from the show mac address-table multicast interface vlan1 command. It shows how to display the user-configured multicast entries for VLAN 1.

Switch> show mac address-table multicast interface vlan1
vlan   mac address     type 	        ports
-----+---------------+--------+---------+---+--------------------------------
  1  0100.5e02.0203    user           Gi0/1,Gi0/2
  1  0100.5e00.0128    user           Gi0/1,Gi0/2

This is an example of output from the show mac address-table multicast vlan 1 igmp-snooping count command. It shows how to display the total number of entries learned through IGMP snooping for VLAN 1:

Switch> show mac address-table multicast vlan 1 igmp-snooping count
Number of IGMP Learned Multicast Addresses:    2

Related Commands

Command
Description

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table notification

Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface.

show mac address-table notification [interface [interface-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table notification command replaces the show mac-address-table notification command (with the hyphen).


Syntax Description

interface

(Optional) Display information for all interfaces. Valid interfaces include physical ports and port channels.

interface-id

(Optional) Display information for the specified interface. Valid interfaces include physical ports and port channels.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(8)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table notification command was replaced by the show mac address-table notification command.


Usage Guidelines

Use the show mac address-table notification command without any keywords to display whether the feature is enabled or disabled, the MAC notification interval, the maximum number of entries allowed in the history table, and the history table contents.

Use the interface keyword to display the flags for all interfaces. If the interface-id is included, only the flags for that interface appear.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table notification command:

Switch> show mac address-table notification
MAC Notification Feature is Enabled on the switch
Interval between Notification Traps : 60 secs
Number of MAC Addresses Added : 4
Number of MAC Addresses Removed : 4
Number of Notifications sent to NMS : 3
Maximum Number of entries configured in History Table : 100
Current History Table Length : 3
MAC Notification Traps are Enabled
History Table contents
----------------------
History Index 0, Entry Timestamp 1032254, Despatch Timestamp 1032254
MAC Changed Message :
Operation: Added   Vlan: 2     MAC Addr: 0000.0000.0001 Module: 0   Port: 1

History Index 1, Entry Timestamp 1038254, Despatch Timestamp 1038254
MAC Changed Message :
Operation: Added   Vlan: 2     MAC Addr: 0000.0000.0000 Module: 0   Port: 1
Operation: Added   Vlan: 2     MAC Addr: 0000.0000.0002 Module: 0   Port: 1
Operation: Added   Vlan: 2     MAC Addr: 0000.0000.0003 Module: 0   Port: 1

History Index 2, Entry Timestamp 1074254, Despatch Timestamp 1074254
MAC Changed Message :
Operation: Deleted Vlan: 2     MAC Addr: 0000.0000.0000 Module: 0   Port: 1
Operation: Deleted Vlan: 2     MAC Addr: 0000.0000.0001 Module: 0   Port: 1
Operation: Deleted Vlan: 2     MAC Addr: 0000.0000.0002 Module: 0   Port: 1
Operation: Deleted Vlan: 2     MAC Addr: 0000.0000.0003 Module: 0   Port: 1

Related Commands

Command
Description

clear mac address-table notification

Clears the MAC address notification global counters.

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table static

Displays static MAC address table entries only.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table static

Use the show mac address-table static user EXEC command to display static MAC address table entries only.

show mac address-table static [[address mac-address [interface interface-id | vlan vlan-id]] | [interface interface-id [vlan vlan-id]] | vlan vlan-id] [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table static command replaces the show mac-address-table static command (with the hyphen).


Syntax Description

address mac-address

(Optional) Specify a 48-bit MAC address; the valid format is H.H.H.

interface interface-id

(Optional) Specify an interface to match; valid interfaces include physical ports and port channels.

vlan vlan-id

(Optional) Display addresses for a specific VLAN. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table static command was replaced by the show mac address-table static command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table static command:

Switch> show mac address-table static
          Mac Address Table
------------------------------------------

Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
 All    0100.0ccc.cccc  STATIC  CPU
 All    0180.c200.0000  STATIC  CPU
 All    0100.0ccc.cccd  STATIC  CPU
 All    0180.c200.0001  STATIC  CPU
 All    0180.c200.0002  STATIC  CPU
 All    0180.c200.0003  STATIC  CPU
 All    0180.c200.0004  STATIC  CPU
 All    0180.c200.0005  STATIC  CPU
   4    0001.0002.0004  STATIC  Drop
   6    0001.0002.0007  STATIC  Drop
Total Mac Addresses for this criterion: 10 

Related Commands

Command
Description

mac address-table static

Adds static addresses to the MAC address table.

mac address-table static drop

Enables unicast MAC address filtering and configures the switch to drop traffic with a specific source or destination MAC address.

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table vlan

Displays the MAC address table information for the specified VLAN.


show mac address-table vlan

Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN.

show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]


Note Beginning with Cisco IOS Release 12.1(11)EA1, the show mac address-table vlan command replaces the show mac-address-table vlan command (with the hyphen).


Syntax Description

vlan-id

(Optional) Display addresses for a specific VLAN. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The show mac-address-table vlan command was replaced by the show mac address-table vlan command.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mac address-table vlan 1 command:

Switch> show mac address-table vlan 1
          Mac Address Table
------------------------------------------
Vlan    Mac Address     Type    Ports
----    -----------     ----    -----
   1    0100.0ccc.cccc  STATIC  CPU
   1    0180.c200.0000  STATIC  CPU
   1    0100.0ccc.cccd  STATIC  CPU
   1    0180.c200.0001  STATIC  CPU
   1    0180.c200.0002  STATIC  CPU
   1    0180.c200.0003  STATIC  CPU
   1    0180.c200.0004  STATIC  CPU
   1    0180.c200.0005  STATIC  CPU
Total Mac Addresses for this criterion: 8 

Related Commands

Command
Description

show mac address-table address

Displays MAC address table information for the specified MAC address.

show mac address-table aging-time

Displays the aging time in all VLANs or the specified VLAN.

show mac address-table count

Displays the number of addresses present in all VLANs or the specified VLAN.

show mac address-table dynamic

Displays dynamic MAC address table entries only.

show mac address-table interface

Displays the MAC address table information for the specified interface.

show mac address-table multicast

Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.

show mac address-table notification

Displays the MAC address notification settings for all interfaces or the specified interface.

show mac address-table static

Displays static MAC address table entries only.


show mls qos

Use the show mls qos user EXEC command to display global quality of service (QoS) configuration information.

show mls qos [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mls qos command:

Switch> show mls qos 
Qos is enabled

Related Commands

Command
Description

mls qos

Enables quality of service (QoS) for the entire switch.


show mls qos aggregate-policer

Use the show mls qos aggregate-policer user EXEC command to display the quality of service (QoS) aggregate policer configuration. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.

show mls qos aggregate-policer [aggregate-policer-name] [ | {begin | exclude | include} expression]

Syntax Description

aggregate-policer-name

(Optional) Display the policer configuration for the specified name.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mls qos aggregate-policer command:

Switch> show mls qos aggregate-policer policer1
aggregate-policer policer1 88000 2000000 exceed-action drop
Not used by any policy map 

Related Commands

Command
Description

mls qos aggregate-policer

Defines policer parameters that can be shared by multiple classes within a policy map.


show mls qos interface

Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the interface level.

show mls qos interface [interface-id] [buffers | policers | queueing | statistics]
[ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) Display QoS information for the specified interface. Valid interfaces include physical ports.

buffers

(Optional) Display buffer settings of the queues. For Gigabit-capable Ethernet ports, the display includes the queue depth for each of the four queues and the tail drop or Weighted Random Early Detection (WRED) thresholds. For 10/100 Ethernet ports, the display includes the configured minimum-reserve settings.

policers

(Optional) Display all the policers configured on the interface, their settings, and the number of policers that are currently unassigned.

queueing

(Optional) Display queueing strategy (weighted round robin, priority queueing), the weights corresponding to the queues, and the class of service (CoS)-to-egress-queue map.

statistics

(Optional) Display all the Differentiated Services Code Points (DSCPs) for which statistics are maintained and the corresponding ingress and egress statistics, including the number of bytes dropped.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

If no keyword is specified with the show mls qos interface command, the display shows the port trusted mode (DSCP trusted, CoS trusted, untrusted, and so forth), the default CoS value, the DSCP-to-DSCP-mutation map (if any) attached to the port, and the policy map (if any) attached to the interface. If a specific interface is not specified, the information for all interfaces appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mls qos interface command:

Switch# show mls qos interface fastethernet0/1
FastEthernet0/1
trust state: not trusted
trust mode: trust cos
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
trust device: cisco-phone

This is an example of output from the show mls qos interface gigabitethernet0/1 buffers command:

Switch> show mls qos interface gigabitethernet0/1 buffers
GigabitEthernet0/1
Notify Q depth:
qid-size
 1 - 25
 2 - 25
 3 - 25
 4 - 25
qid WRED thresh1 thresh2
 1  dis   100      100
 2  dis   100      100
 3  dis   100      100
 4  dis   100      100

In the preceding display, the qid-size section shows the weight (the amount of space allocated to each queue) as configured by the wrr-queue queue-limit interface configuration command. The next section of the display shows the settings of the tail-drop thresholds for all four queues. The WRED column shows that it is disabled, which means that tail drop is in effect. Tail-drop thresholds are configured by using the wrr-queue threshold interface configuration command.

This is an example of output from the show mls qos interface fastethernet0/1 buffers command:

Switch> show mls qos interface fastethernet0/1 buffers
FastEthernet0/1
Minimum reserve buffer size:
 100 100 100 100 100 100 100 100
Minimum reserve buffer level select:
 4 2 5 7

This sample shows that the buffer size for all minimum-reserve levels is set to 100 packets. The last line of the display shows that queue 1 selects minimum-reserve level 4, queue 2 selects minimum-reserve level 2, queue 3 selects minimum-reserve level 5, and queue 4 selects minimum-reserve level 7.

This is an example of output from the show mls qos interface gigabitethernet0/1 queueing command:

Switch> show mls qos interface gigabitethernet0/1 queueing
GigabitEthernet0/1
Ingress expedite queue: dis
Egress expedite queue: ena
wrr bandwidth weights:
qid-weights
 1 - 25
 2 - 25
 3 - 25
Dscp-threshold map:
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     ---------------------------------------
      0 :    01 01 01 01 01 01 01 01 01 01
      1 :    01 01 01 01 01 01 01 01 01 01
      2 :    01 01 01 01 01 01 01 01 01 01
      3 :    01 01 01 01 01 01 01 01 01 01
      4 :    01 01 01 01 01 01 01 01 01 01
      5 :    01 01 01 01 01 01 01 01 01 01
      6 :    01 01 01 01
Cos-queue map:
cos-qid
 0 - 1
 1 - 1
 2 - 2
 3 - 2
 4 - 3
 5 - 3
 6 - 4
 7 - 4 

In the preceding display, the egress expedite queue is enabled. Because of this, the weight of the expedite queue (queue 4) is ignored and not used in the ratio calculation. Only the bandwidth weights for the remaining queues appear. The bandwidth weight of the queues is configured by the wrr-queue bandwidth interface configuration command. The CoS-to-queue map shows the CoS values that are mapped to select a queue; this map is configured by the wrr-queue cos-map interface configuration command.

This is an example of output from the show mls qos interface gigabitethernet0/1 statistics command. Table 2-23 describes the fields in this display.

Switch> show mls qos interface gigabitethernet0/1 statistics
Ingress
  dscp: incoming   no_change  classified policed    dropped (in bytes)
    1 : 0          0          0          0          0
    2 : 0          0          0          0          0
    3 : 0          0          0          0          0
    45: 0          0          0          0          0
    23: 0          0          0          0          0
Others: 203216935  24234242   178982693  0          0
Egress
  dscp: incoming   no_change  classified policed    dropped (in bytes)
   1 : 0             n/a       n/a      0          0
   2 : 0             n/a       n/a      0          0
   3 : 0             n/a       n/a      0          0
   45: 0             n/a       n/a      0          0
   23: 0             n/a       n/a      0          0
Others: 155983       n/a       n/a      0          0 

WRED drop counts:
  qid  thresh1    thresh2   FreeQ
   1 : 0          0         1024
   2 : 0          0         1024
   3 : 0          0         1024
   4 : 0          0         1024

Table 2-23 show mls qos interface statistics Field Descriptions 

 
Field
Description

Ingress

incoming

Number of packets or bytes with a specific DSCP entering the ingress QoS process.

no_change

Number of packets or bytes for which the DSCP value did not change after classification.

classified

Number of packets or bytes classified to this DSCP value.

policed

Number of packets or bytes marked down from this DSCP value.

dropped (in bytes)

Number of packets or bytes dropped by policing.

Egress

incoming

Number of packets or bytes with a specific DSCP entering the egress QoS process.

no_change

Number of packets with a specific DSCP that did not change.

classified

Number of packets with a specific DSCP that were classified according to the class map.

policed

Number of packets or bytes marked down from this DSCP.

dropped (in bytes)

Number of packets or bytes of this DSCP dropped.

WRED drop counts

qid

Queue number.

thresh1 and thresh2

Number of DSCPs of a specific value dropped at threshold 1 and threshold 2.

FreeQ

Amount of free queue space available per queue.


Related Commands

Command
Description

mls qos monitor

Defines up to 16 DSCP values for which byte or packet statistics are gathered by hardware.


show mls qos maps

Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. Maps are used to generate an internal Differentiated Services Code Point (DSCP) value, which represents the priority of the traffic.

show mls qos maps [cos-dscp | dscp-cos | dscp-mutation dscp-mutation-name | dscp-switch-priority | ip-prec-dscp | policed-dscp] [ | {begin | exclude | include} expression]

Syntax Description

cos-dscp

(Optional) Display class of service (CoS)-to-DSCP map.

dscp-cos

(Optional) Display DSCP-to-CoS map.

dscp-mutation dscp-mutation-name

(Optional) Display the specified DSCP-to-DSCP-mutation map.

dscp-switch-priority

(Optional) Display the DSCP-to-switch-priority map.

ip-prec-dscp

(Optional) Display the IP-precedence-to-DSCP map.

policed-dscp

(Optional) Display the policed-DSCP map.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mls qos maps command:

Switch> show mls qos maps
Policed-dscp map:
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     ---------------------------------------
      0 :    00 01 02 03 04 05 06 07 08 09
      1 :    10 11 12 13 14 15 16 17 18 19
      2 :    20 21 22 23 24 25 26 27 28 29
      3 :    30 31 32 33 34 35 36 37 38 39
      4 :    40 41 42 43 44 45 46 47 48 49
      5 :    50 51 52 53 54 55 56 57 58 59
      6 :    60 61 62 63

Dscp-cos map:
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     ---------------------------------------
      0 :    00 00 00 00 00 00 00 00 01 01
      1 :    01 01 01 01 01 01 02 02 02 02
      2 :    02 02 02 02 03 03 03 03 03 03
      3 :    03 03 04 04 04 04 04 04 04 04
      4 :    05 05 05 05 05 05 05 05 06 06
      5 :    06 06 06 06 06 06 07 07 07 07
      6 :    07 07 07 07

Dscp-switch priority map:
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     ---------------------------------------
      0 :    00 00 00 00 00 00 00 00 00 00
      1 :    00 00 00 00 00 00 01 01 01 01
      2 :    01 01 01 01 01 01 01 01 01 01
      3 :    01 01 02 02 02 02 02 02 02 02
      4 :    02 02 02 02 02 02 02 02 03 03
      5 :    03 03 03 03 03 03 03 03 03 03
      6 :    03 03 03 03

Cos-dscp map:
        cos:   0  1  2  3  4  5  6  7
     --------------------------------
       dscp:   0  8 16 24 32 40 48 56

IpPrecedence-dscp map:
     ipprec:   0  1  2  3  4  5  6  7
     --------------------------------
       dscp:   0  8 16 24 32 40 48 56

Dscp-dscp mutation map:
   Default DSCP Mutation Map:
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     ---------------------------------------
      0 :    00 01 02 03 04 05 06 07 08 09
      1 :    10 11 12 13 14 15 16 17 18 19
      2 :    20 21 22 23 24 25 26 27 28 29
      3 :    30 31 32 33 34 35 36 37 38 39
      4 :    40 41 42 43 44 45 46 47 48 49
      5 :    50 51 52 53 54 55 56 57 58 59
      6 :    60 61 62 63 


Note The d1 column specifies the most-significant digit in the internal DSCP; the d2 row specifies the least-significant digit in the internal DSCP. The intersection of the d1 and d2 values provides the policed-DSCP, the CoS, the switch priority, or the mutated-DSCP value. For example, in the DSCP-to-CoS map, an internal DSCP value of 43 corresponds to a CoS value of 5.


Related Commands

Command
Description

mls qos map

Defines the CoS-to-DSCP map, DSCP-to-CoS map, DSCP-to-DSCP-mutation map, IP-precedence-to-DSCP map, and the policed-DSCP map.


show monitor

Use the show monitor user EXEC command to display Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) session information.

show monitor [session {session_number | all | local | range | remote}] | {begin | exclude | include} expression]

Syntax Description

session session_number

(Optional) Specify the number of the SPAN or RSPAN session. The range is 1 to 2.

all

Specify all sessions.

local

Specify local sessions.

range

Specify a range of sessions.

remote

Specify remote sessions.

| begin

Display begins with the line that matches the expression.

| exclude

Display excludes lines that match the expression.

| include

Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(6)EA1

This command was introduced.

12.1(11)EA1

The all, local, and remote keywords were added.

12.1(13)EA1

The range keyword was added.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output for the show monitor privileged EXEC command for SPAN source session 1:

Switch# show monitor session 1
Session 1
---------
Type: Local Source Session
Source Ports:
    RX Only: 		 Fa0/13
    TX Only:       None
    Both:          None
Source VLANs:
    RX Only:       None
    TX Only:       None
    Both:          None
Source RSPAN VLAN: None
Destination Ports: None
	Encapsulation: DOT1Q
	Ingress:	Enabled, default VLAN=5
Reflector Ports:	 None
Filter VLANs:      None
Dest RSPAN VLAN: 	None

Related Commands

Command
Description

monitor session

Starts a new SPAN or RSPAN session, adds or deletes interfaces or VLANs to or from an existing SPAN or RSPAN session, and filters SPAN source traffic to specific source VLANs.


show mvr

Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).

show mvr [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mvr command:

Switch# show mvr
MVR Running: TRUE
MVR multicast vlan: 1
MVR Max Multicast Groups: 256
MVR Current multicast groups: 256
MVR Global query response time: 5 (tenths of sec)
MVR Mode: compatible 

In the preceding display, the maximum number of multicast groups is fixed at 256. The MVR mode is either compatible (for inter-operability with Catalyst 2900 XL and Catalyst 3500 XL switches) or dynamic (where operation is consistent with IGMP snooping operation and dynamic MVR membership on source ports is supported).

Related Commands

Command
Description

mvr (global configuration)

Enables and configures multicast VLAN registration on the switch.

mvr (interface configuration)

Configures MVR ports.

show mvr interface

Displays the configured MVR interfaces, status of the specified interface, or all multicast groups to which the interface belongs when the interface and members keywords are appended to the command.

show mvr members

Displays all ports that are members of an MVR multicast group or, if there are no members, means the group is inactive.


show mvr interface

Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports. Use the command with keywords to display MVR parameters for a specific receiver port.

show mvr interface [interface-id [members [vlan vlan-id]]] [ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) Display MVR type, status, and Immediate Leave setting for the interface.

members

(Optional) Display all MVR groups to which the specified interface belongs.

vlan vlan-id

(Optional) Display all MVR group members on this VLAN. The range is from 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

If the entered port identification is a non-MVR port or a source port, the command returns an error message. For receiver ports, it displays the port type, per port status, and Immediate-Leave setting.

If you enter the members keyword, all MVR group members on the interface appear. If you enter a VLAN ID, all MVR group members in the VLAN appear.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mvr interface command:

Switch# show mvr interface
Port    Type            Status          Immediate Leave
----    ----            -------         ---------------
Gi0/1   SOURCE          ACTIVE/UP       DISABLED
Gi0/2   RECEIVER        ACTIVE/DOWN     DISABLED
Gi0/5   RECEIVER        ACTIVE/UP       ENABLED 

In the preceding display, Status is defined as follows:

Active means the port is part of a VLAN

Up/Down means that the port is forwarding/nonforwarding

Inactive means that the port is not yet part of any VLAN.

This is an example of output from the show mvr interface gigabitethernet0/2 command:

Switch# show mvr interface gigabitethernet0/2
Type: RECEIVER Status: ACTIVE Immediate Leave: DISABLED 

This is an example of output from the show mvr interface gigabitethernet0/1 members command:

Switch# show mvr interface gigabitethernet0/1 members
239.255.0.0     DYNAMIC ACTIVE
239.255.0.1     DYNAMIC ACTIVE
239.255.0.2     DYNAMIC ACTIVE
239.255.0.3     DYNAMIC ACTIVE
239.255.0.4     DYNAMIC ACTIVE
239.255.0.5     DYNAMIC ACTIVE
239.255.0.6     DYNAMIC ACTIVE
239.255.0.7     DYNAMIC ACTIVE
239.255.0.8     DYNAMIC ACTIVE
239.255.0.9     DYNAMIC ACTIVE

Related Commands

Command
Description

mvr (global configuration)

Enables and configures multicast VLAN registration on the switch.

mvr (interface configuration)

Configures MVR ports.

show mvr

Displays the global MVR configuration on the switch.

show mvr members

Displays all receiver ports that are members of an MVR multicast group.


show mvr members

Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group.

show mvr members [ip-address] [ | {begin | exclude | include} expression]

Syntax Description

ip-address

(Optional) The IP multicast address. If the address is entered, all receiver and source ports that are members of the multicast group appear. If no address is entered, all members of all Multicast VLAN Registration (MVR) groups are listed. If a group has no members, the group is listed as Inactive.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

The show mvr members command applies to receiver and source ports. For MVR compatible mode, all source ports are members of all multicast groups.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show mvr members command:

Switch# show mvr members
MVR Group IP    Status          Members
------------    ------          -------
239.255.0.1     ACTIVE          Gi0/1(d), Gi0/5(s)
239.255.0.2     INACTIVE        None
239.255.0.3     INACTIVE        None
239.255.0.4     INACTIVE        None
239.255.0.5     INACTIVE        None
239.255.0.6     INACTIVE        None
239.255.0.7     INACTIVE        None
239.255.0.8     INACTIVE        None
239.255.0.9     INACTIVE        None
239.255.0.10    INACTIVE        None

<output truncated>

239.255.0.255   INACTIVE        None
239.255.1.0     INACTIVE        None 

This is an example of output from the show mvr members 239.255.0.2 command. It shows how to view the members of the IP multicast group 239.255.0.2:

Switch# show mvr members 239.255.0.2
239.255.0.2     ACTIVE          Gi0/1(d), Gi0/2(d), Gi0/3(d), 
                                Gi0/4(d), Gi0/5(s)

Related Commands

Command
Description

mvr (global configuration)

Enables and configures multicast VLAN registration on the switch.

mvr (interface configuration)

Configures MVR ports.

show mvr

Displays the global MVR configuration on the switch.

show mvr interface

Displays the configured MVR interfaces, status of the specified interface, or all multicast groups to which the interface belongs when the members keyword is appended to the command.


show pagp

Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information.

show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude | include} expression]]

Syntax Description

channel-group-number

(Optional) Number of the channel group.The range is 1 to 64.

counters

Display traffic information.

internal

Display internal information.

neighbor

Display neighbor information.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

You can enter any show pagp command to display the active port channel information. To display the nonactive information, enter the show pagp command with a group number.

Examples

This is an example of output from the show pagp 1 counters command:

Switch> show pagp 1 counters
           Information        Flush
Port       Sent   Recv     Sent   Recv
--------------------------------------
Channel group: 1
  Gi0/1    45     42       0      0 
  Gi0/2    45     41       0      0 

This is an example of output from the show pagp 1 internal command:

Switch> show pagp 1 internal
Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.
Timers: H - Hello timer is running.        Q - Quit timer is running.
        S - Switching timer is running.    I - Interface timer is running.

Channel group 1
                                Hello    Partner  PAgP     Learning  Group
Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex
Gi0/1     SC    U6/S7   H       30s      1        128        Any      16
Gi0/2     SC    U6/S7   H       30s      1        128        Any      16

This is an example of output from the show pagp 1 neighbor command:

Switch> show pagp 1 neighbor
Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.
        A - Device is in Auto mode.        P - Device learns on physical port.

Channel group 1 neighbors
          Partner              Partner          Partner         Partner Group
Port      Name                 Device ID        Port       Age  Flags   Cap.
Gi0/1     vegas-p2             0002.4b29.4600   Gi0/1        9s SC      10001 
Gi0/2     vegas-p2             0002.4b29.4600   Gi0/2       24s SC      10001 

Related Commands

Command
Description

clear pagp

Clears PAgP channel-group information.


show parser macro

Use the show parser macro user EXEC command to display the parameters for all configured macros or for one macro on the switch.

show parser macro [{brief | description [interface interface-id] | name macro-name}] | {begin | exclude | include} expression]

Syntax Description

brief

(Optional) Display the name of each macro.

description [interface interface-id]

(Optional) Display all macro descriptions or the description of a specific interface.

name macro-name

(Optional) Display information about a single macro identified by the macro name.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(19)EA1

The command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is a partial output example from the show parser macro command. The output for the Cisco-default macros varies depending on the switch platform and the software image running on the switch:

Switch# show parser macro
Total number of macros = 6
--------------------------------------------------------------
Macro name : cisco-global
Macro type : default global
# Enable dynamic port error recovery for link state
# failures
errdisable recovery cause link-flap
errdisable recovery interval 60

<output truncated>

--------------------------------------------------------------
Macro name : cisco-desktop
Macro type : default interface
# macro keywords $AVID
# Basic interface - Enable data VLAN only
# Recommended value for access vlan (AVID) should not be 1
switchport access vlan $AVID
switchport mode access

<output truncated>

--------------------------------------------------------------
Macro name : cisco-phone
Macro type : default interface
# Cisco IP phone + desktop template
# macro keywords $AVID $VVID
# VoIP enabled interface - Enable data VLAN
# and voice VLAN (VVID)
# Recommended value for access vlan (AVID) should not be 1
switchport access vlan $AVID
switchport mode access

<output truncated>

--------------------------------------------------------------
Macro name : cisco-switch
Macro type : default interface
# macro keywords $NVID
# Access Uplink to Distribution
# Do not apply to EtherChannel/Port Group
# Define unique Native VLAN on trunk ports
# Recommended value for native vlan (NVID) should not be 1
switchport trunk native vlan $NVID

<output truncated>

--------------------------------------------------------------
Macro name : cisco-router
Macro type : default interface
# macro keywords $NVID
# Access Uplink to Distribution
# Define unique Native VLAN on trunk ports
# Recommended value for native vlan (NVID) should not be 1
switchport trunk native vlan $NVID

<output truncated>

--------------------------------------------------------------
Macro name : snmp
Macro type : customizable

#enable port security, linkup, and linkdown traps
snmp-server enable traps port-security
snmp-server enable traps linkup
snmp-server enable traps linkdown
#set snmp-server host
snmp-server host ADDRESS
#set SNMP trap notifications precedence
snmp-server ip precedence VALUE

--------------------------------------------------------------

This is an example of output from the show parser macro name command:

Switch# show parser macro name standard-switch10
Macro name : standard-switch10
Macro type : customizable
macro description standard-switch10
# Trust QoS settings on VOIP packets
auto qos voip trust
# Allow port channels to be automatically formed
channel-protocol pagp

This is an example of output from the show parser macro brief command:

Switch# show parser macro brief
    default global   : cisco-global
    default interface: cisco-desktop
    default interface: cisco-phone
    default interface: cisco-switch
    default interface: cisco-router
    customizable     : snmp

This is an example of output from the show parser description command:

Switch# show parser macro description 
Global Macro(s): cisco-global
Interface    Macro Description(s)
--------------------------------------------------------------
Fa0/1        standard-switch10
Fa0/2       this is test macro
--------------------------------------------------------------

This is an example of output from the show parser description interface command:

Switch# show parser macro description interface fastethernet0/2
Interface    Macro Description
--------------------------------------------------------------
Fa0/2      this is test macro
--------------------------------------------------------------

Related Commands

Command
Description

macro apply

Applies a macro on an interface or applies and traces a macro on an interface.

macro description

Adds a description about the macros that are applied to an interface.

macro global

Applies a macro on a switch or applies and traces a macro on a switch.

macro global description

Adds a description about the macros that are applied to the switch.

macro name

Creates a macro.

show running-config

Displays the current operating configuration, including defined macros. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.


show policy-map

Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming traffic. Policy maps can include policers that specify the bandwidth limitations and the action to take if the limits are exceeded.

show policy-map [policy-map-name [class class-map-name]] [ | {begin | exclude | include} expression]

Syntax Description

policy-map-name

(Optional) Display the specified policy-map name.

class class-map-name

(Optional) Display QoS policy actions for an individual class.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.



Note Though visible in the command-line help string, the interface keyword is not supported, and the statistics shown in the display should be ignored.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(6)EA1

The class keyword was added.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show policy-map command:

Switch> show policy-map
Policy Map policy1
  class  class1
   set dscp 7

Policy Map policy3
  class  class99
   police 96000 999999 exceed-action drop
  class  class3
   police 8000 98989 exceed-action drop
  class  class20
   police 8000 9090 exceed-action drop
  class  class21
   police 904000 9090909 exceed-action policed-dscp-transmit
  class  class22
   police 904000 9090909 exceed-action policed-dscp-transmit 

Related Commands

Command
Description

mls qos cos policy-map

Defines the class of service (CoS) value of a port in a policy map.

policy-map

Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.


show port-security

Use the show port-security privileged EXEC command to display port-security settings for an interface or for the switch.

show port-security [address] [interface interface-id [address | vlan]] [ | {begin | exclude | include} expression]

Syntax Description

address

(Optional) Display all secure MAC addresses on all ports or a specified port.

interface interface-id

(Optional) Display port security settings for the specified interface.

address

(Optional) Display port security settings for the specified interface and MAC address.

vlan

(Optional) Display port security settings for all VLANs on the specified interface. This keyword is only visible on interfaces that have the switchport mode set to trunk.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(8)EA1

This command was introduced.

12.1(14)EA1

The vlan keyword was added.


Usage Guidelines

If you enter the command without keywords, the output includes the administrative and operational status of all secure ports on the switch.

If you enter an interface-id, the show port-security command displays port security settings for the interface.

If you enter an interface-id and vlan, the show port-security command displays the maximum number of secure addresses for the interface and the VLAN.

If you enter the address keyword, the show port-security address command displays the secure MAC addresses for all interfaces and the aging information for each secure address.

If you enter an interface-id and the address keyword, the show port-security interface interface-id address command displays all the MAC addresses for the interface with aging information for each secure address. You can also use this command to display all the MAC addresses for an interface even if you have not enabled port security on it.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of the output from the show port-security command:

Switch# show port-security
Secure Port      MaxSecureAddr  CurrentAddr  SecurityViolation  Security
Action
                    (Count)        (Count)      (Count)
----------------------------------------------------------------------------

     Fa0/1           11            11            0            Shutdown
     Fa0/5           15            5             0            Restrict
     Fa0/11          5             4             0            Protect
----------------------------------------------------------------------------

Total Addresses in System :21
Max Addresses limit in System :6176

This is an example of output from the show port-security interface fastethernet0/2 command:

Switch# show port-security interface fastethernet0/2
Port Security              : Enabled
Port Status                : Secure-up
Violation Mode             : Shutdown
Aging Time                 : 20 mins
Aging Type                 : Inactivity
SecureStatic Address Aging : Enabled
Maximum MAC Addresses      : 11
Total MAC Addresses        : 11
Configured MAC Addresses   : 3
Sticky MAC Addresses       : 0
Last Source Address        : 0000.0000.0000
Security Violation Count   : 0

This is an example of output from the show port-security address command:

Switch# show port-security address

Secure Mac Address Table
-------------------------------------------------------------------
Vlan    Mac Address       Type                Ports   Remaining Age
                                                         (mins)
----    -----------       ----                -----   -------------
   1    0001.0001.0001    SecureDynamic       Fa0/1      15 (I)
   1    0001.0001.0002    SecureDynamic       Fa0/1      15 (I)
   1    0001.0001.1111    SecureConfigured    Fa0/1      16 (I)
   1    0001.0001.1112    SecureConfigured    Fa0/1      -
   1    0001.0001.1113    SecureConfigured    Fa0/1      -
   1    0005.0005.0001    SecureConfigured    Fa0/5      23
   1    0005.0005.0002    SecureConfigured    Fa0/5      23
   1    0005.0005.0003    SecureConfigured    Fa0/5      23
   1    0011.0011.0001    SecureConfigured    Fa0/11     25 (I)
   1    0011.0011.0002    SecureConfigured    Fa0/11     25 (I)
-------------------------------------------------------------------
Total Addresses in System :10
Max Addresses limit in System :6176

This is an example of output from the show port-security interface fastethernet0/2 vlan command:

Switch# show port-security interface fastethernet0/2 vlan
Default maximum: not set, using 6176
VLAN  Maximum    Current
    1    default          0
    5          5          0

This is an example of output from the show port-security interface fastethernet0/5 address command:

Switch# show port-security interface fastethernet0/5 address
Secure Mac Address Table
-------------------------------------------------------------------
Vlan    Mac Address       Type                Ports   Remaining Age
                                                         (mins)
----    -----------       ----                -----   -------------
   1    0005.0005.0001    SecureConfigured    Fa0/5      19 (I)
   1    0005.0005.0002    SecureConfigured    Fa0/5      19 (I)
   1    0005.0005.0003    SecureConfigured    Fa0/5      19 (I)
-------------------------------------------------------------------
Total Addresses:3

Related Commands

Command
Description

switchport port-security

Enables port security on a port, restricts the use of the port to a user-defined group of stations, and configures secure MAC addresses.


show power inline

Use the show power inline user EXEC command to display the power status for the specified Power over Ethernet (PoE) port or for all PoE ports on the Catalyst 3550-24PWR switch.

show power inline [interface-id] | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) ID of the interface.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(12c)EA1

This command was introduced.

12.1(19)EA1

The Class field was added to the output.

12.2(25)SE

The Max field was added to the output.


Usage Guidelines

This command is supported only on PoE-capable ports. PoE ports were previously referred to as inline power ports in earlier versions of the command reference.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show power inline command:

Switch> show power inline
Interface Admin  Oper       Power   Device              Class Max
                            (Watts)                            
--------- ------ ---------- ------- ------------------- ----- ----
Fa0/1     auto   off        0.0     n/a                 n/a   15.4 
Fa0/2     auto   off        0.0     n/a                 n/a   15.4
Fa0/3     auto   on         5.4     Cisco IP phone 7960 n/a   15.4 
Fa0/4     auto   on         15.4    Ieee PD                   15.4 
Fa0/5     auto   off        0.0     n/a                 n/a   15.4 
Fa0/6     auto   off        0.0     n/a                 n/a   15.4 
Fa0/7     auto   off        0.0     n/a                 n/a   15.4 
Fa0/8     auto   off        0.0     n/a                 n/a   15.4 
Fa0/9     auto   off        0.0     n/a                 n/a   15.4 
Fa0/10    auto   off        0.0     n/a                 n/a   15.4 

<output truncated>

Table 2-24 show power inline Command Output Fields

Field
Description

Interface

Interface ID.

Admin

Administrative mode: auto or off.

Oper

Operating mode:

on—the powered device is detected and power is applied.

off—no power is applied.

faulty—device detection or a powered device is in a faulty state.

power-deny—a powered device is detected but no power is available.

Power

The supplied power in watts. A Cisco device shows reported power; a non-Cisco device is shown as an IEEE powered device at 15.4 W.

Device

The device type detected: n/a, unknown, Cisco PD, IEEE PD, <name from CDP>.

Class

The IEEE classification: n/a, Class <0-4>.

Max

The maximum power supported (15.4 W).


Related Commands

Command
Description

power inline

Enables or disables the PoE ports.


show running-config vlan

Use the show running-config vlan privileged EXEC command to display all or a range of VLAN-related configurations on the switch.

show running-config vlan [vlan-ids] [ | {begin | exclude | include} expression]

Syntax Description

vlan-ids

(Optional) Display configuration information for a single VLAN identified by VLAN ID number or a range of VLANs separated by a hyphen. The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(9)EA1

This command was introduced.


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show running-config vlan command:

Switch# show running-config vlan 900-2005
Building configuration...

Current configuration:
!
vlan 907
!
vlan 920
!
vlan 1025
!
vlan 2000
!
vlan 2001
end

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.

vlan (global configuration)

Enters config-vlan mode for creating and editing VLANs. When VLAN Trunking Protocol (VTP) mode is transparent, you can use this mode to create extended-range VLANs (VLAN IDs greater than 1005).

vlan database

Enters VLAN configuration mode for creating and editing normal-range VLANs.


show sdm prefer

Use the show sdm prefer privileged EXEC command to display information about the templates that can be used to maximize system resources for a particular feature, or use the command without a keyword to display the template in use.

show sdm prefer [access [extended-match] | default [extended-match] | routing [extended-match] | vlan] [ | {begin | exclude | include} expression]

Syntax Description

access

(Optional) Display the template that maximizes system resources for quality of service (QoS) classification and security access control entries (ACEs).

default

(Optional) Display the template that balances system resources among features.

extended-match

(Optional) Display the extended-match version of the indicated template that enables the switch to support 144-bit Layer 3 TCAM.

routing

(Optional) Display the template that maximizes system resources for routing.

vlan

(Optional) Display the template that maximizes system resources for Layer 2 VLANs.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(11)EA1

The extended-match keyword was added.


Usage Guidelines

If you did not reload the switch after entering the sdm prefer global configuration command, the show sdm prefer privileged EXEC command displays the template currently in use and not the newly configured template.

The numbers displayed for each template represent an approximate maximum number for each feature resource. The actual number might vary, depending on the actual number of other features configured. For example, in the default template if your switch had more than 16 routed interfaces (subnet VLANs), the number of possible unicast MAC addresses might be less than 6000.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show sdm prefer command on a Gigabit Ethernet switch, displaying the template currently in use:

Switch# show sdm prefer
The current template is default template.
 The selected template optimizes the resources in
 the switch to support this level of features for
 16 routed interfaces and 1K VLANs. 

 number of unicast mac addresses:  6K
 number of igmp groups:            6K
 number of qos aces:               2K
 number of security aces:          2K
 number of unicast routes:         12K
 number of multicast routes:       6K

This is an example of output from the show sdm prefer command on a Gigabit Ethernet switch when the default template has the extended-match keyword applied for 144-bit Layer 3 TCAM support:

Switch# show sdm prefer
The current template is the default extended-match template
 The selected template optimizes the resources in
 the switch to support this level of features for
 16 routed interfaces and 1K VLANs.

 number of unicast mac addresses:   6K
 number of igmp groups:             6K
 number of qos aces:                2K
 number of security aces:           2K
 number of unicast routes:          6K
 number of multicast routes:        6K

This is an example of output from the show sdm prefer access command on a Gigabit Ethernet switch, displaying the access template characteristics:

Switch# show sdm prefer access
access template:
 The selected template optimizes the resources in
 the switch to support this level of features for
 16 routed interfaces and 1K VLANs.

 number of unicast mac addresses:  2K
 number of igmp groups:            8K
 number of qos aces:               2K
 number of security aces:          4K
 number of unicast routes:         4K
 number of multicast routes:       8K

Related Commands

Command
Description

sdm prefer

Sets the SDM template to maximize feature resource utilization for QoS classification and security ACEs, routing, or VLANs, or to the default template, or to reformat memory space to support 144-bit Layer 3 TCAM.


show setup express

Use the show setup express privileged EXEC command to show if Express Setup mode is active on the switch.

show setup express

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(14)EA1

This command was introduced.


Examples

This is an example of output from the show setup express command:

Switch# show setup express
express setup mode is active

Related Commands

Command
Description

setup express

Enables Express Setup mode on the switch.


show spanning-tree

Use the show spanning-tree user EXEC command to display spanning-tree state information.

show spanning-tree [bridge-group | active [detail] | backbonefast | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary [totals] | uplinkfast | vlan vlan-id] [ | {begin | exclude | include} expression]

show spanning-tree bridge-group [active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | root | summary] [| {begin | exclude | include} expression]

show spanning-tree vlan vlan-id [active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | root | summary] [ | {begin | exclude | include} expression

show spanning-tree {vlan vlan-id | bridge-group} bridge [address | detail | forward-time | hello-time | id | max-age | priority [system-id] | protocol] [ | {begin | exclude | include} expression]

show spanning-tree {vlan vlan-id | bridge-group} root [address | cost | detail | forward-time | hello-time | id | max-age | port | priority [system-id] [ | {begin | exclude | include} expression]

show spanning-tree interface interface-id [active [detail] | cost | detail [active] | inconsistency | portfast | priority | rootcost | state] [ | {begin | exclude | include} expression]

show spanning-tree mst [configuration | instance-id] [detail | interface interface-id [detail]]
[ | {begin | exclude | include} expression]

Syntax Description

bridge-group

(Optional) Specify the bridge group number. The range is 1 to 255.

active [detail]

(Optional) Display spanning-tree information only on active interfaces (only available in privileged EXEC mode).

backbonefast

(Optional) Display spanning-tree BackboneFast status.

blockedports

(Optional) Display blocked port information (only available in privileged EXEC mode).

bridge [address | detail | forward-time | hello-time | id | max-age | priority [system-id] | protocol]

(Optional) Display status and configuration of this switch (optional keywords only available in privileged EXEC mode).

detail [active]

(Optional) Display a detailed summary of interface information (active keyword only available in privileged EXEC mode).

inconsistentports

(Optional) Display inconsistent port information (only available in privileged EXEC mode).

interface interface-id [active [detail] | cost | detail [active] | inconsistency | portfast | priority | rootcost | state]

(Optional) Display spanning-tree information for the specified interface (all options except portfast and state only available in privileged EXEC mode). Enter each interface separated by a space. Ranges are not supported. Valid interfaces include physical ports, VLANs, and port channels. The VLAN range is 1 to 4094. The port-channel range is 1 to 64.

mst [configuration | instance-id] [detail | interface interface-id [detail]]

(Optional) Display the multiple spanning-tree (MST) region configuration and status (all options only available in privileged EXEC mode).

Valid interfaces include physical ports, VLANs, and port channels. The VLAN range is 1 to 4094. The port-channel range is 1 to 64.

pathcost method

(Optional) Display the default path cost method (only available in privileged EXEC mode).

root [address | cost | detail | forward-time | hello-time | id | max-age | port | priority [system-id]]

(Optional) Display root switch status and configuration (all keywords only available in privileged EXEC mode).

summary [totals]

(Optional) Display a summary of port states or the total lines of the spanning-tree state section.

uplinkfast

(Optional) Display spanning-tree UplinkFast status.

vlan vlan-id [active [detail] | backbonefast | blockedports | bridge [address | detail | forward-time | hello-time | id | max-age | priority [system-id] | protocol]

(Optional) Display spanning-tree information for the specified VLAN (some keywords only available in privileged EXEC mode). The range is 1 to 4094.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC; indicated keywords available only in privileged EXEC mode

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(9)EA1

The mst keyword and options were added. The brief keyword was removed, and the detail keyword was added.


Usage Guidelines

If the vlan-id variable is omitted, the command applies to the spanning-tree instance for all VLANs.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show spanning-tree active command:

Switch# show spanning-tree active
VLAN0001
  Spanning tree enabled protocol ieee
  Root ID    Priority    20481
             Address     0008.217a.5800
             Cost        38
             Port        1 (GigabitEthernet0/1)
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec

  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)
             Address     0008.205e.6600
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
             Aging Time 300

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Gi0/1            Root FWD 19        128.1    P2p

This is an example of output from the show spanning-tree detail command:

Switch> show spanning-tree detail


VLAN0001 is executing the ieee compatible Spanning Tree protocol
  Bridge Identifier has priority 32768, sysid 1, address 0008.205e.6600
  Configured hello time 2, max age 20, forward delay 15
  Current root has priority 20481, address 0008.217a.5800
  Root port is 1 (GigabitEthernet0/1), cost of root path is 38
  Topology change flag not set, detected flag not set
  Number of topology changes 0 last change occurred 3w0d ago
  Times:  hold 1, topology change 35, notification 2
          hello 2, max age 20, forward delay 15
  Timers: hello 0, topology change 0, notification 0, aging 300

 Port 1 (GigabitEthernet0/1) of VLAN0001 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.1.
   Designated root has priority 20481, address 0008.217a.5800
   Designated bridge has priority 65535, address 0050.2aed.5c80
   Designated port id is 128.26, designated path cost 19
   Timers: message age 3, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   Link type is point-to-point by default
   BPDU: sent 0, received 947349

<output truncated>

This is an example of output from the show spanning-tree interface fastethernet0/1 command:

Switch> show spanning-tree interface fastethernet0/1

Vlan             Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
VLAN0001         Root FWD 19        128.1    P2p

This is an example of output from the show spanning-tree summary command:

Switch> show spanning-tree summary
Switch is in pvst mode
Root bridge for: none
EtherChannel misconfiguration guard is enabled
Extended system ID   is enabled
Portfast             is disabled by default
PortFast BPDU Guard  is disabled by default
Portfast BPDU Filter is disabled by default
Loopguard            is disabled by default
UplinkFast           is disabled
BackboneFast         is disabled
Pathcost method used is short

Name                   Blocking Listening Learning Forwarding STP Active
---------------------- -------- --------- -------- ---------- ----------
VLAN0001                     0         0        0          1          1
---------------------- -------- --------- -------- ---------- ----------
1 vlan                       0         0        0          1          1

<output truncated>

This is an example of output from the show spanning-tree mst configuration command:

Switch# show spanning-tree mst configuration
Name      [region1]
Revision  1
Instance  Vlans mapped
--------  ---------------------------------------------------------------------
0         101-4094
1         1-100
-------------------------------------------------------------------------------

This is an example of output from the show spanning-tree mst interface fastethernet0/1 command:

Switch# show spanning-tree mst interface fastethernet0/1

FastEthernet0/1 of MST00 is designated forwarding 
Edge port:no             (default)        port guard :none        (default)
Link type:point-to-point (auto)           bpdu filter:disable     (default)
Boundary :internal                        bpdu guard :disable     (default)
Bpdus sent 84122, received 83933

Instance Role Sts Cost      Prio.Nbr Vlans mapped
-------- ---- --- --------- -------- -------------------------------
0        Desg FWD 200000    128.1    101-4094
1        Root FWD 200000    128.1    1-100

This is an example of output from the show spanning-tree mst 0 command:

Switch# show spanning-tree mst 0
###### MST00        vlans mapped:  101-4094
Bridge      address 0005.7428.1f40  priority  32768 (32768 sysid 0)
Root        address 0001.42e2.cdc6  priority  32768 (32768 sysid 0)
            port    Gi0/2           path cost 200038   
IST master  this switch
Operational hello time 2, forward delay 15, max age 20
Configured  hello time 2, forward delay 15, max age 20, max hops 20

Interface        Role Sts Cost      Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Gi0/1            Desg FWD 200000    128.1    P2p 
Gi0/2            Root FWD 200000    128.2    P2p Bound(PVST) 
Gi0/5            Desg FWD 200000    128.5    P2p 

Related Commands

Command
Description

clear spanning-tree counters

Clears the spanning-tree counters.

clear spanning-tree detected-protocols

Restarts the protocol migration process.

spanning-tree backbonefast

Enables the BackboneFast feature.

spanning-tree bpdufilter

Prevents a port from sending or receiving bridge protocol data units (BPDUs).

spanning-tree bpduguard

Puts a port in the error-disabled state when it receives a BPDU.

spanning-tree cost

Sets the path cost for spanning-tree calculations.

spanning-tree extend system-id

Enables the extended system ID feature.

spanning-tree guard

Enables the root guard or the loop guard feature for all the VLANs associated with the selected interface.

spanning-tree link-type

Overrides the default link-type setting for rapid spanning-tree transitions to the forwarding state.

spanning-tree loopguard default

Prevents alternate or root ports from becoming the designated port because of a failure that leads to a unidirectional link.

spanning-tree mst configuration

Enters multiple spanning-tree (MST) configuration mode through which the MST region configuration occurs.

spanning-tree mst cost

Sets the path cost for MST calculations.

spanning-tree mst forward-time

Sets the forward-delay time for all MST instances.

spanning-tree mst hello-time

Sets the interval between hello BPDUs sent by root switch configuration messages.

spanning-tree mst max-age

Sets the interval between messages that the spanning tree receives from the root switch.

spanning-tree mst max-hops

Sets the number of hops in an MST region before the BPDU is discarded and the information held for a port is aged.

spanning-tree mst port-priority

Configures an interface priority.

spanning-tree mst priority

Configures the switch priority for the specified spanning-tree instance.

spanning-tree mst root

Configures the MST root switch priority and timers based on the network diameter.

spanning-tree port-priority

Configures an interface priority.

spanning-tree portfast (global configuration)

Globally enables the BPDU filtering or the BPDU guard feature on Port Fast-enabled ports or enables the Port Fast feature on all nontrunking ports.

spanning-tree portfast (interface configuration)

Enables the Port Fast feature on an interface and all its associated VLANs.

spanning-tree uplinkfast

Accelerates the choice of a new root port when a link or switch fails or when the spanning tree reconfigures itself.

spanning-tree vlan

Configures spanning tree on a per-VLAN basis.


show storm-control

Use the show storm-control user EXEC command to display broadcast, multicast, or unicast storm-control settings on the switch or on the specified interface.

show storm-control [interface-id] [broadcast | multicast | unicast] [ | {begin | exclude | include} expression]

Syntax Description

interface-id

(Optional) Interface ID for the physical port.

broadcast

(Optional) Display broadcast storm information.

multicast

(Optional) Display multicast storm information.

unicast

(Optional) Display unicast storm information.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(8)EA1

This command was introduced.


Usage Guidelines

When you enter an interface-id, the storm-control thresholds appear for the specified interface.

If you omit the interface-id and specify a traffic type, settings appear for the specified traffic type for all ports on the switch.

If you do not enter a traffic type, settings appear for broadcast storm control.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show storm-control command. Because no traffic type keyword was entered, the broadcast storm control settings appear.

Switch> show storm-control
Interface  Filter State   Upper       Lower      Current
---------  -------------  ----------  ---------  ---------
Fa0/1      Forwarding     20 pps      10 pps     5 pps
Fa0/2      Forwarding     50.00%      40.00%     0.00%
<output truncated>

This is an example of output from the show storm-control command for a specified interface. Because no traffic type keyword was entered, the broadcast storm control settings appear.

Switch> show storm-control fastethernet0/1
Interface  Filter State   Upper       Lower      Current
---------  -------------  ----------  ---------  ---------
Fa0/1      Forwarding     20 pps      10 pps     5 pps

Table 2-25 describes the fields in the show storm-control display.

Table 2-25 show storm-control Field Descriptions 

Field
Description

Interface

Displays the ID of the interface.

Filter State

Displays the status of the filter:

Blocking—Storm control is enabled, and a storm has occurred.

Forwarding—Storm control is enabled, and no storms have occurred.

Inactive—Storm control is disabled.

Upper

Displays the rising suppression level as a percentage of total available bandwidth or in packets per second.

Lower

Displays the falling suppression level as a percentage of total available bandwidth or in packets per second.

Current

Displays the bandwidth utilization of broadcast traffic or the specified traffic type (broadcast, multicast, or unicast) as a percentage of total available bandwidth or in packets per second. If storm control is disabled, this field displays N/A (not applicable).


Related Commands

Command
Description

storm-control

Configures the broadcast, the multicast, or the unicast storm control with the specified suppression level.


show system mtu

Use the show system mtu privileged EXEC command to display the global maximum transmission unit (MTU) or maximum packet size set for the switch.

show system mtu [ | {begin | exclude | include} expression]

Syntax Description

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.


Usage Guidelines

If you have used the system mtu global configuration command to change the MTU setting, the new setting does not take effect until you reset the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show system mtu command:

Switch# show system mtu
System MTU size is 1500 bytes

Related Commands

Command
Description

system mtu

Sets the maximum transmission unit (MTU) size for the switch.


show tcam

Use the show tcam user EXEC command to display information about the input security access control list (ACL) and output security ACL regions of the ternary content addressable memory (TCAM). Use the keywords to display information for a specific TCAM ID or specific characteristics.

show tcam {inacl | outacl} tcam-id {{entries [entry-id]} | {masks [mask-id]} | {port-labels [label-id]} | size |{statistics [entries | hits | labels | masks]} | {vlan-labels [label-id]}}| {begin | exclude | include} expression]

Syntax Description

inacl

Display information about the input security ACL TCAM portion.

outacl

Display information about the output security ACL TCAM portion.

tcam-id

(Optional) Display information for a specific TCAM ID. The ID range varies from 1 to 3, depending on the switch model.

entries [entry-id]

Display one or all TCAM ACL entries and associated information. When all entries appear, the mask information also appears. This display output is a raw hex dump of information, intended for a Cisco technical support representative. The range is 0 to 65535.

masks [mask-id]

Display mask information. This display output is a raw hex dump of information, intended for a Cisco technical support representative. The range is 0 to 65535.

port-labels [label-id]

Display entries and associated information for a feature manager port label (see the show fm command). Port labels are used for port ACLs. This display output is a raw hex dump of information, intended for a Cisco technical support representative. The range is 0 to 127.

size

Display the total size of the regions of TCAM in which the ACLs are entered.

statistics [entries | hits | labels | masks]

Display allocation statistics for the input or output ACL TCAM region, including allocated and available masks and entries.

(Optional) Display allocation statistics for entries, hits, labels, or masks. The labels keyword returns a total count of all labels present in TCAM.

vlan-labels [label-id]

Display entries and associated information for a feature manager VLAN label (see the show fm command). VLAN labels are used for router ACLs and VLAN maps. This display output is a raw hex dump of information, intended for a Cisco technical support representative. The range is 0 to 255.

| begin

(Optional) Display begins with the line that matches the expression.

| exclude

(Optional) Display excludes lines that match the expression.

| include

(Optional) Display includes lines that match the specified expression.

expression

Expression in the output to use as a reference point.


Command Modes

User EXEC

Command History

Release
Modification

12.1(4)EA1

This command was introduced.

12.1(9)EA1

The labels [label-id] keywords were replaced by port-labels [label-id] and vlan-labels [label-id]


Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

These displays provide information that might be useful for Cisco technical support representatives troubleshooting the switch.

Examples

This is an example of output from the show tcam inacl entries command for TCAM 1:

Switch> show tcam inacl 1 entries
Label Value: 8192(vlan label 0) Number of entries: 12
Ts - timestamp, Tb - TableId, L - L4OpSelect (IP) or lsapValid (MAC)
M - IP (1) or MAC (0), R - routerMacAddress
I - ipOption, S - lookupSize, Pl - Port Label, Vl - VLAN Label
F - fragmentInfo (IP) or IP header checksum error (MAC)
D - DSCP (IP) or IP header error (MAC)
T - tcpPacket (IP) or cos (MAC)
U - udpPacket (IP) or reserved bits (MAC)
MapR - l4MapResult (IP TCP/UDP) or l3 protocol type (MAC)
S-addr - source address, D-addr - destination address
S-pr - l4 source port (IP TCP/UDP) or IP protocol number
D-pr - l4 destination port or version and type (IP IGMP)
or type and code (IP ICMP)
Index Ts Tb L M R I S Pl Vl F D  T U MapR S-addr   S-pr D-addr   D-pr As data
==============================================================================
4     msk F 0 1 0 0 1 00 FF 0 00 1 1 0000 00000000 00FF E0000000 0000
32    1   9 0 1 0 0 1 00 00 0 00 0 0 0000 00000000 0009 E0000000 0000 00260086
5     msk F 0 1 0 1 1 00 FF 2 00 1 1 0000 00000000 0000 E0000000 FFFF
33    4   9 0 1 0 0 1 00 00 0 00 0 1 0000 00000000 0000 E0000000 0208 00260086
6     msk F 0 1 1 0 1 00 FF 0 00 1 1 0000 00000000 00FE 00000000 0000
48    42  9 0 1 1 0 1 00 00 0 00 0 0 0000 00000000 0058 00000000 0000 00260086
7     msk F 0 1 1 0 1 00 FF 0 00 1 1 0000 00000000 00FF 00000000 0000
49    4   9 0 1 1 0 1 00 00 0 00 0 0 0000 00000000 0009 00000000 0000 00260086
7     msk F 0 1 1 0 1 00 FF 0 00 1 1 0000 00000000 00FF 00000000 0000
51    64  9 0 1 1 0 1 00 00 0 00 0 0 0000 00000000 0067 00000000 0000 00260086
8     msk F 0 1 1 1 1 00 FF 2 00 1 1 0000 00000000 FFFF 00000000 0000
64    1   9 0 1 1 0 1 00 00 0 00 1 0 0000 00000000 0001 00000000 0000 00260086
9     msk F 0 1 1 1 1 00 FF 2 00 1 1 0000 00000000 0000 00000000 FFFF
65    4   9 0 1 1 0 1 00 00 0 00 1 0 0000 00000000 0000 00000000 00B3 00260086
9     msk F 0 1 1 1 1 00 FF 2 00 1 1 0000 00000000 0000 00000000 FFFF
67    64  9 0 1 1 0 1 00 00 0 00 0 1 0000 00000000 0000 00000000 0208 00260086
10    msk F 1 1 0 0 1 00 FF 0 00 0 0 FFFF 000000000000  010000000000
80    44  9 0 0 0 0 1 00 00 0 00 0 0 0806 000000000000  010000000000  00260086
11    msk F 1 1 1 0 1 00 FF 0 00 0 0 FFFF 000000000000  000000000000
81    42  9 0 0 1 0 1 00 00 0 00 0 0 0806 000000000000  000000000000  00260086
IP default entry
204   msk F 0 1 0 0 1 00 FF 0 00 0 0 0000 00000000 0000 00000000 0000
1636  42  9 0 1 0 0 1 00 00 0 00 0 0 0000 00000000 0000 00000000 0000 00000082
non-IP default entry
205   msk F 0 1 0 0 1 00 FF 0 00 0 0 0000 000000000000  000000000000
1637  48  9 0 0 0 0 1 00 00 0 00 0 0 0000 000000000000  000000000000  00000082

This is an example of output from the show tcam outacl masks command for TCAM 1:

Switch> show tcam outacl 1 masks
Number of active masks : 6
Mask Index : 0
F0 00 00 00 00 00 00 00 00 80 FF 00 00 00 00 00 00 00
Mask Index : 1
F0 00 00 00 00 00 00 00 00 FF 00 00 00 00 00 00 00 00
Mask Index : 508
F4 00 00 00 00 00 00 00 00 80 FF 00 00 00 00 00 00 00
Mask Index : 509
F4 00 00 00 00 00 00 00 00 80 FF 00 00 00 00 00 00 00
Mask Index : 510
F0 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00
Mask Index : 511
F0 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 00 00

This is an example of output from the show tcam inacl size command for TCAM 1:

Switch# show tcam inacl 1 size
Ingress ACL TCAM Size:6592 Entries

This is an example of output from the show tcam inacl statistics command for TCAM 1:

Switch# show tcam inacl 1 statistics
Ingress ACL TCAM#1:Number of active labels:3
Ingress ACL TCAM#1:Number of masks   allocated:  14, available: 810
Ingress ACL TCAM#1:Number of entries allocated:  17, available:6575

Related Commands