A -
B -
C -
D -
E -
F -
G -
H -
I -
J -
L -
M -
N -
O -
P -
Q -
R -
S -
T -
U -
V -
Index
A
aaa accounting dot1x command 1
aaa authentication dot1x command 3
aaa authorization network command 5, 18, 23, 25, 27, 29, 126, 486, 5, 36
AAA methods 3
abort command 856
access control entries
See ACEs
access control lists
See ACLs
access groups
IP 189
MAC, displaying 612
access list, IPv6 259
access map configuration mode 337
access mode 797
access ports 797
ACEs 111, 413
ACLs
deny 109
displaying 468
for non-IP protocols 308
IP 189
matching 337
on Layer 2 interfaces 189
permit 411
action command 6
address aliasing 386
aggregate-port learner 399
allowed VLANs 817
apply command 856
archive download-sw command 8
archive tar command 11
archive upload-sw command 14
arp access-list command 16
authentication control-direction command 18
authentication event command 20
authentication failed VLAN
See dot1x auth-fail vlan
authentication fallback command 23
authentication host-mode command 25
authentication open command 27
authentication order command 29
authentication periodic command 31
authentication port-control command 33
authentication priority command 35
authentication timer command 37
authentication violation command 39
auth-fail max-attempts
See dot1x auth-fail max-attempts
auth-fail vlan
See dot1x auth-fail vlan
auth open command 27
auth order command 29
authorization state of controlled port 145
auth timer command 37
autonegotiation of duplex mode 158
auto qos voip command 41
B
BackboneFast, for STP 728
backup interfaces
configuring 791
displaying 541
boot (boot loader) command 2
boot auto-download-sw command 45
boot config-file command 47
boot enable-break command 48
boot helper command 49
boot helper-config file command 50
booting
Cisco IOS image 53
displaying environment variables 481
interrupting 45, 48
manually 51
boot loader
accessing 1
booting
Cisco IOS image 2
helper image 49
directories
creating 14
displaying a list of 7
removing 18
displaying
available commands 12
memory heap utilization 13
version 25
environment variables
described 19
displaying settings 19
location of 20
setting 19
unsetting 23
files
copying 5
deleting 6
displaying a list of 7
displaying the contents of 4, 15, 22
renaming 16
file system
formatting 10
initializing flash 9
running a consistency check 11
prompt 1
resetting the system 17
boot manual command 51
boot private-config-file command 52
boot system command 53
BPDU filtering, for spanning tree 729, 764
BPDU guard, for spanning tree 731, 764
broadcast storm control 782
C
candidate switches
See clusters
cat (boot loader) command 4
CDP, enabling protocol tunneling for 287
channel-group command 54
channel-protocol command 57
Cisco SoftPhone
auto-QoS configuration 41
trusting packets sent from 378
CISP
See Client Information Signalling Protocol
cisp
debug platform cisp command 36
cisp enable command 58
class command 59
class-map command 61
class maps
creating 61
defining the match criteria 339
displaying 487
class of service
See CoS
clear dot1x command 63
clear eap sessions command 64
clear energywise neighbors command 65
clear errdisable interface 66
clear ip arp inspection log command 67
clear ip arp inspection statistics command 68
clear ipc command 71
clear ip dhcp snooping database command 69
clear ipv6 dhcp conflict command 72
clear l2protocol-tunnel counters command 73
clear lacp command 74
clear mac address-table command 75, 76
clear nmsp statistics command 77
clear pagp command 78
clear port-security command 79
clear spanning-tree counters command 81
clear spanning-tree detected-protocols command 82
clear vmps statistics command 83
clear vtp counters command 84
Client Information Signalling Protocol 58, 126, 486, 5, 36
cluster commander-address command 85
cluster discovery hop-count command 87
cluster enable command 88
cluster holdtime command 89
cluster member command 90
cluster outside-interface command 92
cluster run command 93
clusters
adding candidates 90
binding to HSRP group 94
building manually 90
communicating with
devices outside the cluster 92
members by using Telnet 440
debug messages, display 6
displaying
candidate switches 490
debug messages 6
member switches 492
status 488
hop-count limit for extended discovery 87
HSRP standby groups 94
redundancy 94
SNMP trap 717
cluster standby-group command 94
cluster timer command 96
command modes defined 1
command switch
See clusters
configuration files
password recovery disable considerations 1
specifying the name 47, 52
configuring multiple interfaces 185
config-vlan mode
commands 842
description 4
entering 841
summary 2
copy (boot loader) command 5
CoS
assigning default value to incoming packets 348
assigning to Layer 2 protocol packets 290
overriding the incoming value 348
CoS-to-DSCP map 352
CPU ASIC statistics, displaying 494
crashinfo files 178
D
debug auto qos command 2
debug backup command 4
debug cisp command 5
debug cluster command 6
debug dot1x command 8
debug dtp command 10
debug eap command 11
debug etherchannel command 12
debug ilpower command 14
debug interface command 15
debug ip dhcp snooping command 17
debug ip igmp filter command 19
debug ip igmp max-groups command 20
debug ip igmp snooping command 21
debug ip verify source packet command 18
debug lacp command 22
debug lldp packets command 23
debug mac-notification command 24
debug matm command 25
debug matm move update command 26
debug monitor command 27
debug mvrdbg command 29
debug nmsp command 31
debug nvram command 32
debug pagp command 33
debug platform acl command 34
debug platform backup interface command 35
debug platform cisp command 36
debug platform configuration command 44
debug platform cpu-queues command 37
debug platform device-manager command 39
debug platform dot1x command 40
debug platform etherchannel command 41
debug platform fallback-bridging command 42
debug platform forw-tcam command 43
debug platform ip arp inspection command 46
debug platform ip dhcp command 47
debug platform ip igmp snooping command 48
debug platform ip multicast command 50
debug platform ip source-guard command 52
debug platform ip unicast command 53
debug platform ip wccp command 55
debug platform led command 56
debug platform matm command 57
debug platform messaging application command 59
debug platform phy command 60
debug platform pm command 62
debug platform port-asic command 64
debug platform port-security command 65
debug platform qos-acl-tcam command 66
debug platform remote-commands command 67
debug platform resource-manager command 68
debug platform snmp command 69
debug platform span command 70
debug platform supervisor-asic command 71
debug platform sw-bridge command 72
debug platform tcam command 73
debug platform udld command 75
debug platform vlan command 76
debug pm command 77
debug port-security command 79
debug qos-manager command 80
debug spanning-tree backbonefast command 83
debug spanning-tree bpdu command 84
debug spanning-tree bpdu-opt command 85
debug spanning-tree command 81
debug spanning-tree mstp command 86
debug spanning-tree switch command 88
debug spanning-tree uplinkfast command 90
debug sw-vlan command 91
debug sw-vlan ifs command 93
debug sw-vlan notification command 95
debug sw-vlan vtp command 97
debug udld command 99
debug vqpc command 101
define interface-range command 98
delete (boot loader) command 6
delete command 100
deny (ARP access-list configuration) command 102
deny (IPv6) command 104
deny command 109
detect mechanism, causes 169
DHCP snooping
accepting untrusted packets from edge switch 217
enabling
on a VLAN 224
option 82 215, 217
trust on an interface 222
error recovery timer 175
rate limiting 221
DHCP snooping binding database
binding file, configuring 213
bindings
adding 211
deleting 211
displaying 561
clearing database agent statistics 69
database agent, configuring 213
displaying
binding entries 561
database agent status 564, 566
renewing 444
dir (boot loader) command 7
directories, deleting 100
domain name, VTP 867, 871
dot1x auth-fail max-attempts 120
dot1x auth-fail vlan 122
dot1x command 118
dot1x control-direction command 124
dot1x credentials (global configuration) command 126
dot1x critical global configuration command 127
dot1x critical interface configuration command 129
dot1x default command 131
dot1x fallback command 132
dot1x guest-vlan command 133
dot1x host-mode command 136
dot1x initialize command 138
dot1x mac-auth-bypass command 139
dot1x max-reauth-req command 141
dot1x max-req command 142
dot1x multiple-hosts command 143
dot1x pae command 144
dot1x port-control command 145
dot1x re-authenticate command 147
dot1x re-authentication command 148
dot1x reauthentication command 149
dot1x test eapol-capable command 150
dot1x test timeout command 151
dot1x timeout command 152
dot1x violation-mode command 155
dropping packets, with ACL matches 6
drop threshold, Layer 2 protocol tunneling 287
DSCP-to-CoS map 352
DSCP-to-DSCP-mutation map 352
DTP 798
DTP flap
error detection for 169
error recovery timer 175
DTP negotiation 802
dual-purpose uplink ports
selecting the type 342
duplex command 157
dynamic-access ports
configuring 787
restrictions 788
dynamic ARP inspection
ARP ACLs
apply to a VLAN 197
define 16
deny packets 102
display 472
permit packets 403
dynamic ARP inspection (continued)
clear
log buffer 67
statistics 68
display
ARP ACLs 472
configuration and operating state 556
log buffer 556
statistics 556
trust state and rate limit 556
enable per VLAN 207
error detection for 169
error recovery timer 175
log buffer
clear 67
configure 201
display 556
rate-limit incoming ARP packets 199
statistics
clear 68
display 556
trusted interface state 203
type of packet logged 208
validation checks 205
dynamic auto VLAN membership mode 797
dynamic desirable VLAN membership mode 797
Dynamic Host Configuration Protocol (DHCP)
See DHCP snooping
Dynamic Trunking Protocol
See DTP
E
EAP-request/identity frame
maximum number to send 142
response time before retransmitting 152
encapsulation methods 817
energywise (global configuration) command 159, 161
energywise domain command 163
energywise query command 165
environment variables, displaying 481
errdisable detect cause command 169
errdisable detect cause small-frame command 172
errdisable recovery cause small-frame 174
errdisable recovery command 175
error conditions, displaying 530
error disable detection 169
error-disabled interfaces, displaying 541
EtherChannel
assigning Ethernet interface to channel group 54
creating port-channel logical interface 183
debug EtherChannel/PAgP, display 12
debug platform-specific events, display 41
displaying 534
enabling Layer 2 protocol tunneling for
LACP 288
PAgP 288
UDLD 288
interface information, displaying 541
LACP
clearing channel-group information 74
debug messages, display 22
displaying 603
modes 54
port priority for hot-standby ports 291
restricting a protocol 57
system priority 293
load-distribution methods 421
PAgP
aggregate-port learner 399
clearing channel-group information 78
debug messages, display 33
displaying 663
error detection for 169
error recovery timer 175
learn method 399
modes 54
physical-port learner 399
priority of interface for transmitted traffic 401
Ethernet controller, internal register display 496
Ethernet statistics, collecting 449
exception crashinfo command 178
exit command 856
extended discovery of candidate switches 87
extended-range VLANs
and allowed VLAN list 817
and pruning-eligible list 817
configuring 841
extended system ID for STP 737
F
fallback profile command 179
fallback profiles, displaying 537
fan information, displaying 526
file name, VTP 867
files, deleting 100
flash_init (boot loader) command 9
flexible authentication ordering 29
Flex Links
configuring 791
configuring preferred VLAN 793
displaying 541
flowcontrol command 181
format (boot loader) command 10
forwarding packets, with ACL matches 6
forwarding results, display 6
frame forwarding information, displaying 6
front-end controller, counter and status information 8
fsck (boot loader) command 11
G
global configuration mode 2, 3
H
hardware ACL statistics 468
help (boot loader) command 12
hierarchical policy maps 419
hop-count limit for clusters 87
host connection, port configuration 796
host ports, private VLANs 800
Hot Standby Router Protocol
See HSRP
HSRP
binding HSRP group to cluster 94
standby group 94
I
IEEE 802.1Q trunk ports and native VLANs 858
IEEE 802.1Q tunnel ports
configuring 797
displaying 511
limitations 798
IEEE 802.1x
and switchport modes 798
violation error recovery 175
See also port-based authentication
IEEE 802.1X Port Based Authentication
enabling guest VLAN supplicant 121, 132, 180
IGMP filters
applying 227
debug messages, display 19
IGMP groups, setting maximum 229
IGMP maximum groups, debugging 20
IGMP profiles
creating 231
displaying 569
IGMP snooping
adding ports as a static member of a group 248
displaying 570, 575, 577
enabling 233
enabling the configurable-leave timer 235
enabling the Immediate-Leave feature 244
flooding query count 241
interface topology change notification behavior 243
multicast table 573
querier 237
query solicitation 241
report suppression 239
switch topology change notification behavior 241
images
See software images
Immediate-Leave feature, MVR 388
immediate-leave processing 244
Immediate-Leave processing, IPv6 283
interface configuration mode 2, 4
interface port-channel command 183
interface range command 185
interface-range macros 98
interfaces
assigning Ethernet interface to channel group 54
configuring 157
configuring multiple 185
creating port-channel logical 183
debug messages, display 15
disabling 713
displaying the MAC address table 624
restarting 713
interface speed, configuring 774
interface vlan command 187
internal registers, displaying 496, 505
Internet Group Management Protocol
See IGMP
invalid GBIC
error detection for 169
error recovery timer 175
ip access-group command 189
ip address command 192
IP addresses, setting 192
IP address matching 337
ip admission command 194
ip admission name proxy http command 195
ip arp inspection filter vlan command 197
ip arp inspection limit command 199
ip arp inspection log-buffer command 201
ip arp inspection trust command 203
ip arp inspection validate command 205
ip arp inspection vlan command 207
ip arp inspection vlan logging command 208
IP DHCP snooping
See DHCP snooping
ip dhcp snooping binding command 211
ip dhcp snooping command 210
ip dhcp snooping database command 213
ip dhcp snooping information option allow-untrusted command 217
ip dhcp snooping information option command 215
ip dhcp snooping information option format remote-id command 219
ip dhcp snooping limit rate command 221
ip dhcp snooping trust command 222
ip dhcp snooping verify command 223
ip dhcp snooping vlan command 224
ip dhcp snooping vlan information option format-type circuit-id string command 225
ip igmp filter command 227
ip igmp max-groups command 229, 254, 256
ip igmp profile command 231
ip igmp snooping command 233
ip igmp snooping last-member-query-interval command 235
ip igmp snooping querier command 237
ip igmp snooping report-suppression command 239
ip igmp snooping tcn command 241
ip igmp snooping tcn flood command 243
ip igmp snooping vlan immediate-leave command 244
ip igmp snooping vlan mrouter command 246
ip igmp snooping vlan static command 248
IP multicast addresses 385
IP phones
auto-QoS configuration 41
trusting packets sent from 378
IP-precedence-to-DSCP map 352
ip source binding command 250
IP source guard
disabling 258
displaying
binding entries 579
configuration 581
dynamic binding entries only 561
enabling 258
static IP source bindings 250
ip ssh command 252
IPv6 access list, deny conditions 104
ipv6 access-list command 259
ipv6 address dhcp command 262
ipv6 dhcp client request vendor command 263
ipv6 dhcp ping packets command 264
ipv6 dhcp pool command 266
ipv6 dhcp server command 269
ipv6 mld snooping command 271
ipv6 mld snooping last-listener-query count command 273
ipv6 mld snooping last-listener-query-interval command 275
ipv6 mld snooping listener-message-suppression command 277
ipv6 mld snooping robustness-variable command 279
ipv6 mld snooping tcn command 281
ipv6 mld snooping vlan command 283
IPv6 SDM template 450
ipv6 traffic-filter command 285
ip verify source command 258
J
jumbo frames
See MTU
L
l2protocol-tunnel command 287
l2protocol-tunnel cos command 290
LACP
See EtherChannel
lacp port-priority command 291
lacp system-priority command 293
Layer 2 mode, enabling 785
Layer 2 protocol ports, displaying 600
Layer 2 protocol-tunnel
error detection for 169
error recovery timer 175
Layer 2 protocol tunnel counters 73
Layer 2 protocol tunneling error recovery 288
Layer 2 traceroute
IP addresses 832
MAC addresses 829
Layer 3 mode, enabling 785
line configuration mode 2, 5
Link Aggregation Control Protocol
See EtherChannel
link flap
error detection for 169
error recovery timer 175
link state group command 299
link state track command 301
load-distribution methods for EtherChannel 421
location (global configuration) command 295
location (interface configuration) command 297
logging event command 302
logging event power-inline-status command 303
logging file command 304
logical interface 183
loopback error
detection for 169
recovery timer 175
loop guard, for spanning tree 739, 743
M
mac access-group command 306
MAC access-groups, displaying 612
MAC access list configuration mode 308
mac access-list extended command 308
MAC access lists 109
MAC addresses
disabling MAC address learning per VLAN 311
displaying
aging time 618
all 616
dynamic 622
MAC address-table move updates 627
notification settings 626, 629
number of addresses in a VLAN 620
per interface 624
per VLAN 633
static 631
static and dynamic entries 614
dynamic
aging time 310
deleting 75
displaying 622
enabling MAC address notification 315
enabling MAC address-table move update 313
matching 337
MAC addresses (continued)
static
adding and removing 317
displaying 631
dropping on an interface 318
tables 616
MAC address notification, debugging 24
mac address-table aging-time 306, 337
mac address-table aging-time command 310
mac address-table learning command 311
mac address-table move update command 313
mac address-table notification command 315
mac address-table static command 317
mac address-table static drop command 318
macro apply command 320
macro auto execute command 323
macro auto global processing command 328
macro description command 330
macro global command 331
macro global description command 334
macro name command 335
macros
adding a description 330
adding a global description 334
applying 331
creating 335
displaying 665
interface range 98, 185
specifying parameter values 331
tracing 331
maps
QoS
defining 352
displaying 643
VLAN
creating 853
defining 337
displaying 702
match (access-map configuration) command 337
match (class-map configuration) command 339
maximum transmission unit
See MTU
mdix auto command 341
media-type command 342
member switches
See clusters
memory (boot loader) command 13
mkdir (boot loader) command 14
MLD snooping
configuring 277, 279
configuring queries 273, 275
configuring topology change notification 281
displaying 590, 592, 594, 596
enabling 271
MLD snooping on a VLAN, enabling 283
mls qos aggregate-policer command 346
mls qos command 344
mls qos cos command 348
mls qos dscp-mutation command 350
mls qos map command 352
mls qos queue-set output buffers command 356
mls qos queue-set output threshold command 358
mls qos rewrite ip dscp command 360
mls qos srr-queue input bandwidth command 362
mls qos srr-queue input buffers command 364
mls qos-srr-queue input cos-map command 366
mls qos srr-queue input dscp-map command 368
mls qos srr-queue input priority-queue command 370
mls qos srr-queue input threshold command 372
mls qos-srr-queue output cos-map command 374
mls qos srr-queue output dscp-map command 376
mls qos trust command 378
mls qos vlan-based command 380
mode, MVR 385
Mode button, and password recovery 454
modes, commands 1
monitor session command 381
more (boot loader) command 15
MSTP
displaying 683
interoperability 82
link type 741
MST region
aborting changes 747
applying changes 747
configuration name 747
configuration revision number 747
current or pending display 747
displaying 683
MST configuration mode 747
VLANs-to-instance mapping 747
path cost 749
protocol mode 745
restart protocol migration process 82
root port
loop guard 739
preventing from becoming designated 739
restricting which can be root 739
root guard 739
root switch
affects of extended system ID 737
hello-time 752, 760
interval between BDPU messages 753
interval between hello BPDU messages 752, 760
max-age 753
maximum hop count before discarding BPDU 754
port priority for selection of 756
primary or secondary 760
switch priority 759
state changes
blocking to forwarding state 766
enabling BPDU filtering 729, 764
enabling BPDU guard 731, 764
enabling Port Fast 764, 766
forward-delay time 751
length of listening and learning states 751
rapid transition to forwarding 741
shutting down Port Fast-enabled ports 764
state information display 682
MTU
configuring size 826
displaying global setting 691
multicast group address, MVR 388
multicast groups, MVR 386
Multicast Listener Discovery
See MLD
multicast router learning method 246
multicast router ports, configuring 246
multicast router ports, IPv6 283
multicast storm control 782
multicast VLAN, MVR 385
multicast VLAN registration
See MVR
Multiple Spanning Tree Protocol
See MSTP
MVR
and address aliasing 386
configuring 385
configuring interfaces 388
debug messages, display 29
displaying 652
displaying interface information 654
members, displaying 656
mvr (global configuration) command 385
mvr (interface configuration) command 388
mvr vlan group command 389
N
native VLANs 817
native VLAN tagging 858
Network Admission Control Software Configuration Guide 194, 196
network-policy (global configuration) command 392
network-policy command 391
network-policy profile (network-policy configuration) command 394
nmsp attachment suppress command 398
nmsp command 396
nonegotiate, speed 774
nonegotiating DTP messaging 802
non-IP protocols
denying 109
forwarding 411
non-IP traffic access lists 308
non-IP traffic forwarding
denying 109
permitting 411
normal-range VLANs 841, 847
no vlan command 841, 851
O
online diagnostics
displaying
configured boot-up coverage level 509
current scheduled tasks 509
event logs 509
supported test suites 509
test ID 509
test results 509
test statistics 509
global configuration mode
clearing health monitoring diagnostic test schedule 67
clearing test-based testing schedule 115
setting health monitoring diagnostic testing 67
setting test-based testing 115
setting up health monitoring diagnostic test schedule 67
setting up test-based testing 115
health monitoring diagnostic tests, configuring 112
online diagnostics (continued)
scheduled switchover
disabling 115
enabling 115
scheduling
enabling 115
removing 115
test interval, setting 115
P
PAgP
See EtherChannel
pagp learn-method command 399
pagp port-priority command 401
password, VTP 867, 871
password-recovery mechanism, enabling and disabling 454
permit (ARP access-list configuration) command 403
permit (IPv6) command 405
permit (MAC access-list configuration) command 411
per-VLAN spanning-tree plus
See STP
physical-port learner 399
PID, displaying 555
PIM-DVMRP, as multicast router learning method 246
PoE
configuring the power budget 426
configuring the power management mode 423
displaying controller register values 503
displaying power management information 673
logging of status 303
police aggregate command 416
police command 414
policed-DSCP map 352
policy-map command 418
policy maps
applying to an interface 456, 461
creating 418
displaying 668
hierarchical 419
policers
displaying 636
for a single class 414
for multiple classes 346, 416
policed-DSCP map 352
traffic classification
defining the class 59
defining trust states 834
setting DSCP or IP precedence values 459
Port Aggregation Protocol
See EtherChannel
port-based authentication
AAA method list 3
configuring violation modes 155
debug messages, display 8
enabling IEEE 802.1x
globally 118
per interface 145
guest VLAN 133
host modes 136
IEEE 802.1x AAA accounting methods 1
initialize an interface 138, 151
MAC authentication bypass 139
manual control of authorization state 145
PAE as authenticator 144
periodic re-authentication
enabling 149
time between attempts 152
quiet period between failed authentication exchanges 152
re-authenticating IEEE 802.1x-enabled ports 147
resetting configurable IEEE 802.1x parameters 131
switch-to-authentication server retransmission time 152
port-based authentication (continued)
switch-to-client frame-retransmission number141to 142
switch-to-client retransmission time 152
test for IEEE 802.1x readiness 150
port-channel load-balance command 421
Port Fast, for spanning tree 766
port ranges, defining 98
ports, debugging 77
ports, protected 815
port security
aging 809
debug messages, display 79
enabling 804
violation error recovery 175
port trust states for QoS 378
port types, MVR 388
power information, displaying 526
power inline command 423
power inline consumption command 426
Power over Ethernet
See PoE
priority-queue command 428
private-vlan command 430
private-vlan mapping command 433
private VLANs
association 813
configuring 430
configuring ports 800
displaying 697
host ports 800
mapping
configuring 813
displaying 541
promiscuous ports 800
privileged EXEC mode 2, 3
product identification information, displaying 555
promiscuous ports, private VLANs 800
protected ports, displaying 546
pruning
VLANs 817
VTP
displaying interface information 541
enabling 867, 871
pruning-eligible VLAN list 819
PVST+
See STP
Q
QoS
auto-QoS
configuring 41
debug messages, display 2
displaying 477
class maps
creating 61
defining the match criteria 339
displaying 487
defining the CoS value for an incoming packet 348
displaying configuration information 477, 635
DSCP transparency 360
DSCP trusted ports
applying DSCP-to-DSCP-mutation map to 350
defining DSCP-to-DSCP-mutation map 352
egress queues
allocating buffers 356
defining the CoS output queue threshold map 374
defining the DSCP output queue threshold map 376
displaying buffer allocations 639
displaying CoS output queue threshold map 643
displaying DSCP output queue threshold map 643
displaying queueing strategy 639
displaying queue-set settings 646
enabling bandwidth shaping and scheduling 778
enabling bandwidth sharing and scheduling 780
limiting the maximum output on a port 776
mapping a port to a queue-set 435
mapping CoS values to a queue and threshold 374
mapping DSCP values to a queue and threshold 376
setting maximum and reserved memory allocations 358
setting WTD thresholds 358
enabling 344
ingress queues
allocating buffers 364
assigning SRR scheduling weights 362
defining the CoS input queue threshold map 366
defining the DSCP input queue threshold map 368
displaying buffer allocations 639
displaying CoS input queue threshold map 643
displaying DSCP input queue threshold map 643
displaying queueing strategy 639
displaying settings for 637
enabling the priority queue 370
mapping CoS values to a queue and threshold 366
mapping DSCP values to a queue and threshold 368
setting WTD thresholds 372
maps
defining 352, 366, 368, 374, 376
displaying 643
policy maps
applying an aggregate policer 416
applying to an interface 456, 461
creating 418
defining policers 346, 414
displaying policers 636
displaying policy maps 668
hierarchical 419
policed-DSCP map 352
setting DSCP or IP precedence values 459
traffic classifications 59
trust states 834
port trust states 378
queues, enabling the expedite 428
statistics
in-profile and out-of-profile packets 639
packets enqueued or dropped 639
sent and received CoS values 639
sent and received DSCP values 639
trusted boundary for IP phones 378
VLAN-based 380
quality of service
See QoS
querytime, MVR 385
queue-set command 435
R
radius-server dead-criteria command 436
radius-server host command 438
rapid per-VLAN spanning-tree plus
See STP
rapid PVST+
See STP
rcommand command 440
re-authenticating IEEE 802.1x-enabled ports 147
re-authentication
periodic 149
time between attempts 152
receiver ports, MVR 388
receiving flow-control packets 181
recovery mechanism
causes 175
display 66, 483, 528, 532
timer interval 176
redundancy for cluster switches 94
remote-span command 442
Remote Switched Port Analyzer
See RSPAN
rename (boot loader) command 16
renew ip dhcp snooping database command 444
reset (boot loader) command 17
reset command 856
resource templates, displaying 675
restricted VLAN
See dot1x auth-fail vlan
rmdir (boot loader) command 18
rmon collection stats command 449
root guard, for spanning tree 739
routed ports
IP addresses on 193
number supported 193
RSPAN
configuring 381
displaying 649
filter RSPAN traffic 381
remote-span command 442
sessions
displaying 649
S
scheduled switchover
disabling 115
enabling 115
sdm prefer command 450
SDM templates
allowed resources 451
displaying 675
dual IPv4 and IPv6 450
secure ports, limitations 806
sending flow-control packets 181
service password-recovery command 454
service-policy command 456
set (boot loader) command 19
set command 459
setup command 461
setup express command 464
shell trigger command 466
show access-lists command 468
show archive status command 471
show arp access-list command 472
show authentication command 473
show auto qos command 477
show boot command 481
show cable-diagnostics tdr command 483
show changes command 856
show cisp command 486
show class-map command 487
show cluster candidates command 490
show cluster command 488
show cluster members command 492
show controllers cpu-interface command 494
show controllers ethernet-controller command 496
show controllers power inline command 503
show controllers tcam command 505
show controller utilization command 507
show current command 856
show dot1q-tunnel command 511
show dot1x command 512
show dtp 517
show eap command 519
show energywise command 522
show env command 526
show errdisable detect command 528
show errdisable flap-values command 530
show errdisable recovery command 532
show etherchannel command 534
show fallback profile command 537
show flowcontrol command 539
show interfaces command 541
show interfaces counters command 552
show inventory command 555
show ip arp inspection command 556
show ipc command 583
show ip dhcp snooping binding command 561
show ip dhcp snooping command 560
show ip dhcp snooping database command 564, 566
show ip igmp profile command 569
show ip igmp snooping address command 592
show ip igmp snooping command 570, 590
show ip igmp snooping groups command 573
show ip igmp snooping mrouter command 575, 594
show ip igmp snooping querier command 577, 596
show ip source binding command 579
show ipv6 access-list command 587
show ipv6 dhcp conflict command 589
show ipv6 route updated 598
show ip verify source command 581
show l2protocol-tunnel command 600
show lacp command 603
show link state group command 610
show location 607
show mac access-group command 612
show mac address-table address command 616
show mac address-table aging time command 618
show mac address-table command 614
show mac address-table count command 620
show mac address-table dynamic command 622
show mac address-table interface command 624
show mac address-table learning command 626
show mac address-table move update command 627
show mac address-table notification command 76, 629, 26
show mac address-table static command 631
show mac address-table vlan command 633
show mls qos aggregate-policer command 636
show mls qos command 635
show mls qos input-queue command 637
show mls qos interface command 639
show mls qos maps command 643
show mls qos queue-set command 646
show mls qos vlan command 648
show monitor command 649
show mvr command 652
show mvr interface command 654
show mvr members command 656
show network-policy profile command 658
show nmsp command 660
show pagp command 663
show parser macro command 665
show platform acl command 2
show platform backup interface command 3
show platform configuration command 4
show platform etherchannel command 5
show platform forward command 6
show platform frontend-controller command 8
show platform igmp snooping command 9
show platform ip multicast command 11
show platform ip unicast command 12
show platform ipv6 unicast command 17
show platform ip wccp command 16
show platform layer4op command 19
show platform mac-address-table command 20
show platform messaging command 21
show platform monitor command 22
show platform mvr table command 23
show platform pm command 24
show platform port-asic command 25
show platform port-security command 30
show platform qos command 31
show platform resource-manager command 32
show platform snmp counters command 34
show platform spanning-tree command 35
show platform stack manager command 37
show platform stp-instance command 36
show platform tcam command 38
show platform vlan command 41
show policy-map command 668
show port security command 670
show power inline command 673
show proposed command 856
show sdm prefer command 675
show setup express command 678
show shell command 679
show spanning-tree command 682
show storm-control command 688
show system mtu command 691
show trust command 834
show udld command 692
show version command 695
show vlan access-map command 702
show vlan command 697
show vlan command, fields 699
show vlan filter command 704
show vmps command 705
show vtp command 708
shutdown command 713
shutdown threshold, Layer 2 protocol tunneling 287
shutdown vlan command 714
small violation-rate command 715
Smartports macros
See macros
SNMP host, specifying 721
SNMP informs, enabling the sending of 717
snmp-server enable traps command 717
snmp-server host command 721
snmp trap mac-notification command 726
SNMP traps
enabling MAC address notification trap 726
enabling the MAC address notification feature 315
enabling the sending of 717
SoftPhone
See Cisco SoftPhone
software images
deleting 100
downloading 8
upgrading 8
uploading 14
software version, displaying 695
source ports, MVR 388
SPAN
configuring 381
debug messages, display 27
displaying 649
filter SPAN traffic 381
sessions
add interfaces to 381
displaying 649
start new 381
spanning-tree backbonefast command 728
spanning-tree bpdufilter command 729
spanning-tree bpduguard command 731
spanning-tree cost command 733
spanning-tree etherchannel command 735
spanning-tree extend system-id command 737
spanning-tree guard command 739
spanning-tree link-type command 741
spanning-tree loopguard default command 743
spanning-tree mode command 745
spanning-tree mst configuration command 747
spanning-tree mst cost command 749
spanning-tree mst forward-time command 751
spanning-tree mst hello-time command 752
spanning-tree mst max-age command 753
spanning-tree mst max-hops command 754
spanning-tree mst port-priority command 756
spanning-tree mst pre-standard command 758
spanning-tree mst priority command 759
spanning-tree mst root command 760
spanning-tree portfast (global configuration) command 764
spanning-tree portfast (interface configuration) command 766
spanning-tree port-priority command 762
Spanning Tree Protocol
See STP
spanning-tree transmit hold-count command 768
spanning-tree uplinkfast command 769
spanning-tree vlan command 771
speed command 774
srr-queue bandwidth limit command 776
srr-queue bandwidth share command 780
SSH, configuring version 252
static-access ports, configuring 787
statistics, Ethernet group 449
sticky learning, enabling 804
storm-control command 782
STP
BackboneFast 728
counters, clearing 81
debug messages, display
BackboneFast events 83
MSTP 86
optimized BPDUs handling 85
spanning-tree activity 81
switch shim 88
transmitted and received BPDUs 84
UplinkFast 90
detection of indirect link failures 728
enabling protocol tunneling for 287
EtherChannel misconfiguration 735
extended system ID 737
path cost 733
protocol modes 745
root port
accelerating choice of new 769
loop guard 739
preventing from becoming designated 739
restricting which can be root 739
root guard 739
UplinkFast 769
root switch
affects of extended system ID 737, 772
hello-time 771
interval between BDPU messages 771
interval between hello BPDU messages 771
max-age 771
port priority for selection of 762
primary or secondary 771
switch priority 771
state changes
blocking to forwarding state 766
enabling BPDU filtering 729, 764
enabling BPDU guard 731, 764
enabling Port Fast 764, 766
enabling timer to recover from error state 175
forward-delay time 771
length of listening and learning states 771
shutting down Port Fast-enabled ports 764
state information display 682
VLAN options 759, 771
SVIs, creating 187
SVI status calculation 789
Switched Port Analyzer
See SPAN
switching characteristics
modifying 785
returning to interfaces 785
switchport access command 787
switchport autostate exclude command 789
switchport backup interface command 791
switchport block command 795
switchport command 785
switchport host command 796
switchport mode command 797
switchport mode private-vlan command 800
switchport nonegotiate command 802
switchport port-security aging command 809
switchport port-security command 804
switchport priority extend command 811
switchport private-vlan command 813
switchport protected command 815
switchports, displaying 541
switchport trunk command 817
switchport voice vlan command 821, 822
system env temperature threshold yellow command 824
system message logging 303
system message logging, save message to flash 304
system mtu command 826
system resource templates 450
T
tar files, creating, listing, and extracting 11
TDR, running 828
Telnet, using to communicate to cluster switches 440
temperature information, displaying 526
templates, system resources 450
test cable-diagnostics tdr command 828
test relay 829
traceroute mac command 829
traceroute mac ip command 832
trunking, VLAN mode 797
trunk mode 797
trunk ports 797
trunks, to non-DTP device 798
trusted boundary for QoS 378
trusted port states for QoS 378
tunnel ports, Layer 2 protocol, displaying 600
type (boot loader) command 22
U
UDLD
aggressive mode 836, 838
debug messages, display 99
enable globally 836
enable per interface 838
error recovery timer 175
message timer 836
normal mode 836, 838
reset a shutdown interface 840
status 692
udld command 836
udld port command 838
udld reset command 840
unicast storm control 782
UniDirectional Link Detection
See UDLD
unknown multicast traffic, preventing 795
unknown unicast traffic, preventing 795
unset (boot loader) command 23
upgrading
software images
downloading 8
monitoring status of 471
UplinkFast, for STP 769
user EXEC mode 2, 3
V
version (boot loader) command 25
vlan (global configuration) command 841
vlan (VLAN configuration) command 847
vlan access-map command 853
VLAN access map configuration mode 853
VLAN access maps
actions 6
displaying 702
VLAN-based QoS 380
VLAN configuration
rules 844, 849
saving 841, 851
VLAN configuration mode
commands
VLAN 847
VTP 871
description 5
entering 855
summary 2
vlan database command 855
vlan dot1q tag native command 858
vlan filter command 860
VLAN filters, displaying 704
VLAN ID range 841, 847
VLAN maps
applying 860
creating 853
defining 337
displaying 702
VLAN Query Protocol
See VQP
VLANs
adding 841
configuring 841, 847
debug messages, display
ISL 95
VLAN IOS file system error tests 93
VLAN manager activity 91
VTP 97
displaying configurations 697
enabling guest VLAN supplicant 121, 132, 180
extended-range 841
MAC addresses
displaying 633
number of 620
media types 844, 849
normal-range 841, 847
private 800
configuring 430
displaying 697
See also private VLANs
restarting 714
saving the configuration 841
shutting down 714
SNMP traps for VTP 719, 723
suspending 714
variables 847
VLAN Trunking Protocol
See VTP
VMPS
configuring servers 865
displaying 705
error recovery timer 176
reconfirming dynamic VLAN assignments 862
vmps reconfirm (global configuration) command 863
vmps reconfirm (privileged EXEC) command 862
vmps retry command 864
vmps server command 865
voice VLAN
configuring 821, 822
setting port priority 811
VQP
and dynamic-access ports 788
clearing client statistics 83
displaying information 705
per-server retry count 864
reconfirmation interval 863
reconfirming dynamic VLAN assignments 862
VTP
changing characteristics 867
clearing pruning counters 84
configuring
domain name 867, 871
file name 867
mode 867, 871
password 867, 871
counters display fields 709
displaying information 708
enabling
pruning 867, 871
tunneling for 287
Version 2 867, 871
mode 867, 871
pruning 867, 871
saving the configuration 841, 851
statistics 708
status 708
status display fields 711
vtp (global configuration) command 867
vtp (VLAN configuration) command 871