Catalyst 4500 Series Switch Cisco IOS Command Reference, 15.0(2)SG
Index file
Downloads: This chapterpdf (PDF - 718.0KB) The complete bookPDF (PDF - 13.73MB) | Feedback

Index

Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Symbols

$ matches the end of a string 1-7

( ) in commands 1-11

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10

Numerics

10-Gigabit Ethernet uplink

selecting 2-233

showing the mode 2-641, 2-642

802.1Q trunk ports and native VLANs 2-1024

802.1Q tunnel ports

configuring 2-956

802.1S Multiple Spanning Tree

see MST

802.1X

configuring for multiple hosts 2-182

configuring for single host 2-182

configuring multiple domains 2-182

disabling port control 2-174

enabling port control 2-174

802.1X Critical Authentication

disabling on a port 2-176

disabling on a VLAN 2-179

EAPOL

disabling send success packets 2-177

enabling send success packets 2-177

enabling on a port 2-176

enabling on a VLAN 2-179

returning delay time to default setting 2-178

setting delay time on a port 2-178

802.1X critical authentication

configure parameters 2-25

802.1X critical recovery delay, configuring 2-25

802.1X Port Based Authentication

debugging 802.1X Port Based Authentication 2-122

displaying port based authentication 2-621

enabling accounting for authentication sessions 2-4

enabling authentication on the system 2-193

enabling guest VLAN 2-180

enabling guest VLAN supplicant 2-172, 2-181

enabling manual control of auth state 2-189

enabling periodic re-authentication of the client 2-192

initializing re-authentication of dot1x ports 2-191

initializing state machines 2-184

receive session termination message upon reboot 2-5

setting maximum number for EAP requests 2-187

setting the reauthentication timer 2-194

A

aaa authorization network command 2-175

abbreviating commands

context-sensitive help 1-1

Access Gateway Module

connecting to a module 2-22

connecting to a remote module 2-533

connecting to a specific remote module 2-562

access-group

displaying mac interface 2-756

show mode interface 2-475, 2-583, 2-823

access groups

IP 2-6, 2-169

access lists

clearing an access template 2-79

defining ARP 2-21

displaying ARP information 2-587

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-1026

access-node-identifier, setting for the switch 2-478

access-policies, applying using host-mode 2-30

ACLs

access-group mode 2-6

balancing hardware regions 2-12

capturing control packets 2-8

determining ACL hardware programming 2-10

disabling hardware statistics 2-227

displaying mac access-group interface 2-756

enabling hardware statisctics 2-227

using ACL naming conventions for MAC ACLs 2-358

action clause

specifying drop or forward action in a VACL 2-13

addresses, configuring a maximum 2-461

adjacency

debugging the adjacency table 2-115

disabling the debug facility 2-115

displaying information about the adjacency table 2-584

displaying IPC table entries 2-115

aggregate policer

displaying information 2-824

aging time

displaying MAC address aging time 2-759

MAC address table 2-361

alarms

displaying operational status 2-629

alternation

description 1-10

anchoring

description 1-10

ancp, show multicast 2-586

ANCP client

port identifier 2-16

remote server 2-17

set router to become 2-18

ARP

access list, displaying detailed information 2-587

defining access-lists 2-21

ARP inspection

enforce certain types of checking 2-251

ARP packet

deny based on DHCP bindings 2-157

permit based on DHCP bindings 2-439

authentication 2-25, 2-32

changing the control-direction 2-23

configure actions for events

configuring the actions 2-26

configuring port-control 2-36

enabling reauthentication 2-35

enabling Webauth fallback 2-29

host-mode configuration 2-30

setting priority of methods 2-38

setting the timer 2-40

setting username 2-1011

specifying the order of methods 2-33

using an MD5-type encryption method 2-1011

verifying MD5 signature 2-1013

verifying the checksum for Flash memory 2-1013

authentication control-direction command 2-23

authentication critical recovery delay command 2-25

authentication event command 2-26

authentication fallback command 2-29

authentication host-mode 2-30

authentication methods, setting priority 2-38

authentication methods, specifying the order of attempts 2-33

authentication open command 2-32

authentication order command 2-33

authentication periodic command 2-35

authentication port-control command 2-36

authentication priority command 2-38

authentication timer, setting 2-40

authentication timer command 2-40

authentication violation command 2-42

auth fail VLAN

enable on a port 2-173

set max number of attempts 2-172

Auth Manager

configuring

authentication timer 2-40

authorization state

enabling manual control 2-189

authorization state of a controlled port 2-189

automatic installation

displaying status 2-592

automatic medium-dependent interface crossover

See Auto-MDIX

Auto-MDIX

disabling 2-406

enabling 2-406

auto-negotiate interface speed

example 2-933

auto-QoS

configuring for VoIP 2-44

displaying configuration 2-593

average-packet-size (netflow-lite monitor submode) command 2-48

B

baby giants

displaying the system MTU setting 2-858

setting the maximum Layer 2 payload size 2-983

BackboneFast

displaying debugging messages 2-144

displaying spanning tree status 2-847

enabling debugging 2-144

bandwidth command 2-50

bindings

store for DHCP snooping 2-263

BOOT environment variable

displaying information 2-596

bootflash

displaying information 2-594

BPDUs

debugging spanning tree activities 2-142

bridge protocol data units

See BPDUs

broadcast suppression level

configuring 2-934, 2-936

enabling 2-934, 2-936

C

cable diagnostics

TDR

displaying test results 2-597

testing conditions of copper cables 2-987

call home

displaying information 2-599

e-mailing output 2-58

entering configuration submode 2-53

executing 2-58

manually send test message 2-61

receiving information 2-56

sending alert group message 2-59

submitting information 2-56

call home destination profiles

displaying 2-601

Catalyst 4507R 2-459

CDP

configuring tunneling encapsulation rate 2-345

displaying

neighbor information 2-604

enabling protocol tunneling for 2-340

set drop threshold for 2-343

CEF

displaying next-hop information 2-678

displaying VLAN configuration information 2-678

chassis

displaying

chassis MAC address ranges 2-753

current and peak traffic meter readings 2-753

percentage of backplane utilization 2-753

switching clock failure recovery mode 2-753

circuit-id

setting for an interface 2-480

circuit-id, setting for an interface VLAN range 2-481

cisco-desktop

macro apply 2-370

Cisco Express Forwarding

See CEF

cisco-phone

macro apply 2-372

cisco-router

macro apply 2-374

cisco-switch

macro apply 2-376

CISP

See Client Information Signalling Protocol

cisp enable command 2-66

class maps

creating 2-70

defining the match criteria 2-399

clear commands

clearing Gigabit Ethernet interfaces 2-77

clearing IGMP group cache entries 2-86

clearing interface counters 2-72

clearing IP access lists 2-79, 2-80

clearing IP ARP inspection statistics VLAN 2-81

clearing IP DHCP snooping database statistics 2-85

clearing MFIB counters and routes 2-89

clearing MFIB fastdrop entries 2-90

clearing PAgP channel information 2-99

clearing QoS aggregate counters 2-103

clearing VLAN interfaces 2-78

clear energywise neighbors command 2-74

clear ip wccp command 2-91

clear netflow-lite exporter statistics command 2-96

clear netflow-lite monitor statistics interface command 2-97

clear nmsp statistics command 2-98

Client Information Signalling Protocol 2-175

Client Information Signalling Protocol, enabling 2-66

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-11

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-5

exiting 1-5

understanding user EXEC and configuration modes 1-5

condition interface

debugging interface-related activities 2-117

condition vlan

debugging VLAN output 2-120

configuration, saving 1-11

configuring

root as secondary 2-917

configuring a SPAN session to monitor

limit SPAN source traffic 2-411

configuring critical recovery 2-25

configuring forward delay 2-913

configuring root as primary 2-917

CoPP

attaching

policy map to control plane 2-560

displaying

policy-map class information 2-797

entering configuration mode 2-107

removing

service policy from control plane 2-560

CoS

assigning to Layer 2 protocol packets 2-342

cos (netflow-lite exporter submode) command 2-109

CoS QoS default

defining value on an interface 2-509

Cost of Service

See QoS CoS

counter command 2-111

counters

clearing interface counters 2-72

critical authentication, configure 802.1X parameters 2-25

critical recovery, configuring 802.1X parameter 2-25

D

DAI

clear statistics 2-81

DBL

displaying qos dbl 2-825

enabling DBL globally on the switch 2-510

debug commands

debugging backup events 2-116

debugging DHCP snooping events 2-127

debugging DHCP snooping messages 2-128

debugging EtherChannel/PAgP/shim 2-123

debugging IPC activity 2-126

debugging IP DHCP snooping security messages 2-129

debugging NVRAM activities 2-133

debugging PAgP activities 2-134

debugging port manager activities 2-137

debugging spanning tree activities 2-142

debugging spanning tree backbonefast 2-144

debugging spanning tree UplinkFast 2-147

debugging supervisor redundancy 2-141

debugging VLAN manager activities 2-148

displaying monitor activity 2-131

displaying the adjacency table 2-115

enabling debug dot1x 2-122

enabling debugging messages for ISL VLAN IDs 2-151

enabling debugging messages for VTP 2-152

enabling debugging of UDLD activity 2-153

enabling switch shim debugging 2-145

enabling VLAN manager file system error tests 2-149

limiting debugging output for VLANs 2-120

limiting interface debugging output 2-117

limiting output for debugging standby state changes 2-118

shortcut to the debug condition interface 2-125

debugging

activity monitoring 2-131

DHCP snooping events 2-127

DHCP snooping packets 2-128

IPC activities 2-126

IP DHCP snooping security packets 2-129

NVRAM activities 2-133

PAgP activities 2-134

PAgP shim 2-123

PM activities 2-137

PPPoE Intermediate Agent 2-139

spanning tree BackboneFast events 2-144

spanning tree switch shim 2-145

spanning tree UplinkFast events 2-147

VLAN manager activities 2-148

VLAN manager IOS file system error tests 2-149

VTP protocol debug messages 2-152

debug nmsp command 2-132

debug spanning tree switch 2-145

debug sw-vlan vtp 2-152

default CoS value 2-509

default form of a command, using 1-6

defining egress DSCP-to-CoS mapping 2-516

destination (netflow-lite exporter submode) command 2-159

DHCP

clearing database statistics 2-85

DHCP bindings

configuring bindings 2-261

deny ARP packet based on matches 2-157

permit ARP packet based on matches 2-439

DHCP snooping

clearing binding entries 2-82

clearing database 2-84

displaying binding table 2-681

displaying configuration information 2-679

displaying status of DHCP database 2-684

displaying status of error detection 2-632

enabling DHCP globally 2-260

enabling IP source guard 2-302

enabling on a VLAN 2-270

enabling option 82 2-265, 2-267

enabling option-82 2-272

enabling rate limiting on an interface 2-268

enabling trust on an interface 2-269

establishing binding configuration 2-261

renew binding database 2-535

store generated bindings 2-263

diagnostic fpga soft-error recover command 2-169

diagnostic test

bootup packet memory 2-615

displaying attributes 2-609

display module-based results 2-611

running 2-171

show results for TDR 2-597

testing conditions of copper cables 2-987

displaying error disable recovery 2-633

displaying inline power status 2-812

displaying monitoring activity 2-131

displaying PoE policing and monitoring status 2-820

displaying SEEPROM information

GBIC 2-643

displaying SPAN session information 2-858, 2-936

document conventions 1-xxii

document organization 1-xxi

DoS

CoPP

attaching policy map to control plane 2-560

displaying policy-map class information 2-797

entering configuration mode 2-107

removing service policy from control plane 2-560

entering

CoPP configuration mode 2-107

DOS attack

protecting system's resources 2-246

dot1x credentials (global configuration) command 2-175

drop threshold, Layer 2 protocol tunneling 2-343

dscp (netflow-lite exporter submode command 2-196

DSCP rewrite for IP packets

enable 2-520

dual-capable port

selecting a connector 2-408

duplex mode

configuring autonegotiation on an interface 2-198

configuring full duplex on an interface 2-198

configuring half duplex on an interface 2-198

dynamic ARP inspection

preventing 2-246

Dynamic Buffer Limiting

See DBL

Dynamic Host Configuration Protocol

See DHCP

E

EAP

restarting authentication process 2-187

EDCS-587028 2-588, 2-753

EIGRP (Enhanced IGRP)

filters

routing updates, preventing 2-436

enabling

debugging for UDLD 2-153

voice VLANs 2-949

enabling open access 2-32

EnergyWise

display power information through queries 2-207

display setting, status of entity and PoE ports 2-625

on an entity

enable, assign to domain, and set password 2-205

on an entity, enable and configure 2-200

on a PoE port

configuring on PoE port 2-202

energywise (global configuration) command 2-200, 2-202

energywise domain command 2-205

EnergyWise neighbor table, deleting 2-74

energywise query command 2-207

environmental

alarms 2-629

displaying information 2-629

status 2-629

temperature 2-629

epm access control command 2-211

erase a file 2-212

error disable detection

clearing error disable on an interface 2-75

enabling error disable detection 2-75, 2-215

enabling per-VLAN on BPDU guard 2-215

error-disabled state

displaying 2-662

error disable recovery

configuring recovery mechanism variables 2-217

displaying recovery timer information 2-633

enabling ARP inspection timeout 2-217

specifying recovery cause 2-217

EtherChannel

assigning interfaces to EtherChannel groups 2-62

debugging EtherChannel 2-123

debugging PAgP shim 2-123

debugging spanning tree activities 2-142

displaying information for a channel 2-635

removing interfaces from EtherChannel groups 2-62

EtherChannel guard

detecting STP misconfiguration 2-903

Explicit Host Tracking

clearing the database 2-88

enabling per-VLAN 2-284

exporter (netflow-lite monitor submode) command 2-222

expressions

matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-11

single-character patterns 1-7

Extensible Authentication Protocol

See EAP

F

fallback profile, specifying 2-29

field replaceable unit (FRU)

displaying status information 2-629

filters

EIGRP

routing updates, preventing 2-436

Flash memory file system

displaying file system information 2-594

verifying checksum 2-1013

flow control

configuring a gigabit interface for pause frames 2-224

displaying per-interface statistics for flow control 2-639

G

GBIC

displaying SEEPROM information 2-643

generic-error-message, setting for the switch 2-478

Gigabit Ethernet interface

clearing the hardware logic 2-77

Gigabit Ethernet uplink

selecting 2-233

showing the mode 2-641, 2-642

global configuration mode

using 1-5

H

hardware module

resetting a module by toggling the power 2-229

hardware statistics

disabling 2-227

enabling 2-227

hardware uplink

selecting the mode 2-233

showing the mode 2-641, 2-642

helper addresses, IP 2-699

hot standby protocol

debugging 2-118

disabling debugging 2-118

limiting output 2-118

hw-module system max-queue-limit command 2-230

hw-module uplink mode shared-backplane command 2-231

I

identifier-string, setting for the switch 2-478

ID mapping, creating an ANCP client 2-16

IDPROMs

displaying SEEPROM information

chassis 2-643

clock module 2-643

fan trays 2-643

module 2-643

mux buffer 2-643

power supplies 2-643

supervisor engine 2-643

ifIndex persistence

clearing SNMP ifIndex commands 2-885

compress SNMP ifIndex table format 2-892

disabling globally 2-891

disabling on an interface 2-887

enabling globally 2-891

enabling on an interface 2-887

IGMP

applying filters for host joining on Layer 2 interfaces 2-274

clearing IGMP group cache entries 2-86

configuring frequency for IGMP host-query messages 2-277

creating an IGMP profile 2-276

displaying IGMP interface configuration information 2-686

displaying profiles 2-688

setting maximum group numbers 2-275

IGMP profiles

displaying 2-688

IGMP snooping

clearing the EHT database 2-88

configuring a Layer 2 interface as a group member 2-290

configuring a Layer 2 interface as a multicast router 2-288

configuring a static VLAN interface 2-290

displaying multicast information 2-695

displaying VLAN information 2-689, 2-693, 2-696

enabling 2-279

enabling immediate-leave processing 2-286

enabling on a VLAN 2-283

enabling per-VLAN Explicit Host Tracking 2-284

informs

enabling 2-889

inline power

displaying inline power status 2-812

In Service Software Upgrade

See ISSU

inspection log

clearing log buffer 2-80

interface

displaying suppressed multicast bytes 2-656

interface capabilities

displaying 2-652

interface configuration mode

summary 1-5

interface link

display cable disconnect time 2-659

interfaces

configuring dot1q tunnel ports 2-956

creating an interface-range macro 2-156

debugging output of interface related activities 2-117

displaying description 2-658

displaying error-disabled state 2-662

displaying information when tunneling is enabled 2-747

displaying status 2-658

displaying traffic for a specific interface 2-649

entering interface configuration mode 2-237

executing a command on multiple ports in a range 2-240

selecting an interface to configure 2-237

setting a CoS value for Layer 2 packets 2-342

setting drop threshold for Layer 2 packets 2-343

setting the interface type 2-956

interface speed

configuring interface speed 2-931

interface transceiver

displaying diagnostic data 2-666

internal VLAN allocation

configuring 2-1029

default setting 2-1029

displaying allocation information 2-872

Internet Group Management Protocol

See IGMP

IP address of remote ANCP server, setting 2-17

IP ARP

applying ARP ACL to VLAN 2-244

clearing inspection statistics 2-81

clearing status of log buffer 2-80

controlling packet logging 2-255

enabling dynamic inspection 2-253

limit rate of incoming requests 2-246

set per-port config trust state 2-250

showing status of dynamic ARP inspection 2-673

showing status of log buffer 2-676

IPC

debugging IPC activities 2-126

IP DHCP Snooping

See DHCP snooping

IP header validation

disabling 2-301

enabling 2-301

IP interfaces

displaying usability status 2-698

IP multicast

displaying multicast routing table information 2-704

ip multicast multipath command 2-294

IP packets

enable DSCP rewrite 2-520

IP phone and standard desktop

enabling Cisco-recommended features 2-372

IP Port Security

enabling 2-302

IP source binding

adding or deleting 2-298

displaying bindingstagging 2-709

IP source guard

debugging messages 2-129

displaying configuration and filters 2-710

enabling on DHCP snooping 2-302

IPv4 statistics, enabling collection 2-111

IPv6 MLD

configuring queries 2-319, 2-321

configuring snooping last-listener-query-intervals 2-321

configuring snooping listener-message-suppression 2-323

configuring snooping robustness-variables 2-324

configuring tcn topology change notifications 2-326

counting snooping last-listener-queries 2-319

displaying information 2-722

displaying ports for a switch or VLAN 2-724

displaying querier information 2-725

enabling snooping 2-317

enabling snooping on a VLAN 2-327

IPv6 statistics, enabling collection 2-111

ip wccp check services all command 2-309

ip wccp command 2-306

ip wccp group-address command 2-306

ip wccp group-list command 2-306

ip wccp group-listen command 2-311

ip wccp password command 2-306, 2-308

ip wccp redirect command 2-313

ip wccp redirect exclude in command 2-315

ip wccp redirect-list command 2-306

ISSU

canceling process 2-329

configuring rollback timer 2-339

displaying capability 2-728

displaying client information 2-730

displaying compatibility matrix 2-732

displaying endpoint information 2-737

displaying entities 2-738

displaying FSM session 2-739

displaying messages 2-740

displaying negotiated 2-742

displaying rollback-timer 2-743

displaying session information 2-744

displaying software version 2-745

displaying state 2-745

forcing switchover to standby supervisor engine 2-337

loading new image 2-333

starting process 2-335

stopping rollback timer 2-331

J

Jumbo frames

enabling jumbo frames 2-417

L

LACP

deselecting channeling protocol 2-64

enabling LACP on an interface 2-64

setting channeling protocol 2-64

lacp system-priority command 2-348

Layer 2

displaying ACL configuration 2-756

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN interface 2-956

specifying a trunking VLAN interface 2-956

Layer 2 protocol ports

displaying 2-747

Layer 2 protocol tunneling error recovery 2-345

Layer 2 switching

enabling voice VLANs 2-949

modifying switching characteristics 2-949

Layer 2 traceroute

IP addresses 2-992

Layer 3 interface, assign counters 2-111

Layer 3 switching

displaying information about an adjacency table 2-584

displaying port status 2-664

displaying status of native VLAN tagging 2-664

link-status event messages

disabling

globally 2-350, 2-353

on an interface 2-351, 2-354

enabling

globally 2-350, 2-353

on an interface 2-351, 2-354

LLDP

enabling power negotiation 2-349

lldp tlv-select power-management command 2-349

log buffer

show status 2-676

logging

controlling IP ARP packets 2-255

M

MAB, display information 2-753

MAB, enable and configure 2-356

mab command 2-356

MAC Access Control Lists

See MAC ACLs

MAC ACLs

defining extended MAC access list 2-358

displaying MAC ACL information 2-868

naming an ACL 2-358

MAC addresses

disabling MAC address learning per VLAN 2-365

displaying

notification settings 2-211, 2-727, 2-767

MAC address filtering

configuring 2-369

disabling 2-369

enabling 2-369

MAC address learning on a VLAN, enabling 2-365

MAC address table

adding static entries 2-396

clearing dynamic entries 2-93, 2-95

configuring aging time 2-361

displaying dynamic table entry information 2-763

displaying entry count 2-761

displaying information 2-757

displaying interface-based information 2-765

displaying multicast information 2-768

displaying notification information 2-770

displaying protocol-based information 2-772

displaying static table entry information 2-774

displaying the MAC address aging time 2-759

displaying VLAN-based information 2-777

enabling authentication bypass 2-185

enabling notifications 2-367

learning in the protocol buckets 2-362

removing static entries 2-396

mac address-table learning vlan command 2-365

MAC address tables

adding static entries 2-369

deleting secure or specific addresses 2-100

disabling IGMP snooping on static MAC addresses 2-369

removing static entries 2-369

mac-address-table static 2-369

MAC address unicast filtering

dropping unicast traffic 2-369

MAC authentication bypass (MAB), display information 2-753

MAC authorization bypass(MAB), enable and configure 2-356

macro

displaying descriptions 2-395

macro auto global processing command 2-378, 2-380, 2-383, 2-385, 2-387, 2-389, 2-390, 2-392, 2-779

macro keywords

help strings 2-2

macros

adding a global description 2-395

cisco global 2-393

system-cpp 2-394

mapping secondary VLANs to MST instance 2-494

mapping VLAN(s) to an MST instance 2-235

match (class-map configuration) command 2-14, 2-161, 2-163, 2-165, 2-167, 2-399, 2-937, 2-939, 2-941, 2-943, 2-947

maximum transmission unit (MTU)

displaying the system MTU setting 2-858

setting the maximum Layer 2 payload size 2-983

MD5

verifying MD5 signature 2-1013

message digest 5

See MD5

MFIB

clearing ip mfib counters 2-89

clearing ip mfib fastdrop 2-90

displaying all active MFIB routes 2-701

displaying MFIB fastdrop table entries 2-703

enabling IP MFIB fastdrops 2-293

MLD

configuring snooping last-listener-query-intervals 2-321

configuring snooping listener-message-suppression 2-323

configuring snooping robustness-variables 2-324

configuring topology change notifications 2-326

counting snooping last-listener-queries 2-319

enabling snooping 2-317

enabling snooping on a VLAN 2-327

MLD snooping

displaying 2-725

modes

access-group 2-6

show access-group interface 2-475, 2-583, 2-823

switching between PVST+, MST, and Rapid PVST 2-908

See also command modes

module password clearing 2-76

module reset

resetting a module by toggling the power 2-229

--More-- prompt

filter 1-6

search 1-7

MST

designating the primary and secondary root 2-917

displaying MST protocol information 2-852

displaying region configuration information 2-852

displaying spanning tree information 2-852

entering MST configuration submode 2-911

setting configuration revision number 2-552

setting path cost and port priority for instances 2-909

setting the forward delay timer for all instances 2-913

setting the hello-time delay timer for all instances 2-914

setting the max-age timer for all instances 2-915

setting the MST region name 2-418

specifying the maximum number of hops 2-916

switching between PVST+ and Rapid PVST 2-908

using the MST configuration submode revision command 2-552

using the submode name command 2-418

MTU

displaying global MTU settings 2-858

multi-auth, setting 2-30

Multicase Listener Discovery

See MLD

multicast

enabling storm control 2-936

show ancp 2-586

multicast/unicast packets

prevent forwarding 2-955

Multicast Forwarding Information Base

See MFIB

multi-domain, setting 2-30

multiple-character patterns 1-8

Multiple Spanning Tree

See MST

N

native VLAN

controlling tagging of traffic 2-976

displaying ports eligible for native tagging 2-870

displaying ports eligible for tagging 2-870

enabling tagging on 802.1Q trunk ports 2-1024

specifing the tagging of traffic 2-977

NetFlow

enabling NetFlow statistics 2-296

including infer fields in routing statistics 2-296

netflow-lite exporter command 2-419

netflow-lite monitor command 2-421

netflow-lite sampler command 2-423

next-hop

displaying CEF VLAN information 2-678

nmsp attachment suppress command 2-426

nmsp command 2-425

no form of a command, using 1-6

NVRAM

debugging NVRAM activities 2-133

O

open access on a port, enabling 2-32

options timeout (netflow-lite exporter submode) command 2-220, 2-427

output

pattern searches 1-7

P

packet counters (statistics)

clear for PPPoE Intermediate Agent 2-102

packet counters, display for PPPoE Intermediate Agent 2-821

packet forwarding

prevent unknown packets 2-955

packet memory failure

direct switch action upon detection 2-170

packet memory test

bootup, displaying results 2-615, 2-617

ongoing, displaying results 2-619

packet-offset (netflow-lite sampler submode) command 2-429

packet rate (netflow-lite sampler submode) command 2-430

packet-section size (netflow-lite sampler submode command 2-432

PACL

access-group mode 2-6

paging prompt

see --More-- prompt

PAgP

clearing port channel information 2-99

debugging PAgP activity 2-134

deselecting channeling protocol 2-64

displaying port channel information 2-794

hot standby mode

returning to defaults 2-435

selecting ports 2-435

input interface of incoming packets

learning 2-434

returning to defaults 2-434

setting channeling protocol 2-64

parentheses 1-11

password

clearing on an intelligent line module 2-76

establishing enhanced password security 2-1011

setting username 2-1011

PBR

displaying route maps 1-xxii

redistributing route maps 1-xxii

PM activities

debugging 2-137

disabling debugging 2-137

PoE policing

configure on an interface 2-470

PoE policing and monitoring

displaying status 2-820

police (percent) command 2-446

police (two rates) command 2-448, 2-450

police command 2-441

policing, configure PoE 2-470

policing and monitoring status

displaying PoE 2-820

Policy Based Routing

See PBR

policy maps

creating 2-454

marking 2-564

See also QoS, hierarchical policies

traffic classification

defining the class

defining trust states 2-999

port, dual-capable

selecting the connector 2-408

Port Aggregation Protocol

See PAgP

port-based authentication

displaying debug messages 2-122

displaying statistics and status 2-621

enabling 802.1X 2-189

host modes 2-182

manual control of authorization state 2-189

periodic re-authentication

enabling 2-192

re-authenticating 802.1X-enabled ports 2-191

switch-to-client frame-retransmission number 2-187

port channel

accessing 2-239

creating 2-239

displaying information 2-794

load distribution method

resetting to defaults 2-456

setting 2-456

port-channel standalone-disable command 2-458

port control, changing from unidirectional or bidirectional 2-23

port-control value, configuring 2-36

port range

executing 2-240

port security

debugging ports security 2-138

deleting secure or specific addresses 2-100

displaying settings for an interface or switch 2-805

enabling 2-961

filter source IP and MAC addresses 2-302

setting action upon security violation 2-961

setting the rate limit for bad packets 2-961

sticky port 2-961

Port Trust Device

displaying 2-826

power efficient-ethernet auto command 2-464

power inline logging global command 2-469

power negotiation through LLDP, enabling 2-349

power status

displaying inline power 2-812

displaying power status 2-812

power supply

configuring combined and redundant power on the Catalyst 4507R 2-459

configuring inline power 2-465

configuring power consumption 2-459

displaying the SEEPROM 2-643

setting inline power state 2-463

PPPoE Discovery

enable vendor-tag stripping on packetsPPPoE Server

enable vendor-tag stripping on Discovery packets 2-484

PPPoE Discovery packets, limit rate arriving on an interfsce 2-482

PPPoE Intermediate Agent

clear statistics (packet counters) 2-102

debugging 2-139

pppoe intermediate-agent

enable intermediate agent on a switch 2-474

enable on an interface VLAN range 2-477

enable PPPoE Intermediate Agent on an interface 2-475

enable vendor-tag stripping of Discovery packets 2-484

format-type (global) 2-478

limit rate of PPPoE Discovery packets 2-482

set circuit-id or remote-id for an interface 2-480

set circuit-id or remote-id for an interface VLAN range 2-481

set trust configuration on an interface 2-482, 2-483

PPPoE Intermediate Agent, display configuration and statistics (packet counters) 2-821

priority command 2-485

priority-queue command 2-113

Private VLAN

See PVLANs

privileged EXEC mode, summary 1-5

prompts

system 1-5

protocol tunneling

configuring encapsulation rate 2-345

disabling 2-340

displaying port information 2-747

enabling 2-340

setting a CoS value for Layer 2 packets 2-342

setting a drop threshold for Layer 2 packets 2-343

PVLANs

configuring isolated, primary, and community PVLANs 2-487

controlling tagging of native VLAN traffic 2-976

disabling sticky-ARP 2-299

displaying map information for VLAN SVIs 2-661

displaying PVLAN information 2-876

enabling interface configuration mode 2-956

enabling sticky-ARP 2-299

mapping VLANs to the same SVI 2-491

specifying host ports 2-956

specifying promiscuous ports 2-956

PVST+

switching between PVST and MST 2-908

Q

QoS

account Layer 2 encapsulation 2-501

attaching a policy-map to an interface 2-555

automatic configuration 2-44

class maps

creating 2-70

defining the match criteria 2-399

clearing aggregate counters 2-103

configuring auto 2-44

defining a named aggregate policer 2-503

defining default CoS value 2-509

defining ingress CoS-to-DSCP mapping 2-514

displaying aggregate policer information 2-824

displaying auto configuration 2-593

displaying class maps information 2-607

displaying configuration information 2-593

displaying configurations of policies 2-800

displaying policy map information 2-796, 2-803

displaying QoS information 2-823

displaying QoS map information 2-828

egress queue-sets

enabling the priority queue 2-113

enabling global configuration mode 2-497

enabling on control packets 2-506

enabling per-VLAN QoS for a Layer 2 interface 2-523

enabling QoS on an interface 2-498

hierarchical policies

average-rate traffic shaping on a class 2-577

bandwidth allocation for a class 2-50, 2-69

creating a service policy 2-558

marking 2-564

strict priority queueing (LLQ) 2-485

mapping DSCP values to transmit queues 2-516

mapping egress DSCP-to-CoS 2-516

mapping the DSCP-to-CoS value 2-516

policy maps

creating 2-454

marking 2-564

traffic classifications

trust states 2-999

setting the mapping of policed DSCP values 2-518

setting the trust state 2-521

specifying flow-based match criteria 2-402

Supervisor Engine 6-E

setting CoS 2-566

setting DSCP 2-569

setting precedence values 2-572

setting QoS group identifiers 2-575

QoS CoS

configuring for tunneled Layer 2 protocol packets 2-342

defining default CoS value 2-509

qos dbl 2-510

quality of service

See QoS

question command 1-1

queueing information

displaying 2-826

queue limiting

configuring packet limits 2-525

R

Rapid PVST

switching between PVST and MST 2-908

re-authenticating 802.1X-enabled ports 2-191

re-authentication

periodic 2-192

set the time 2-194

reauthentication, enabling 2-35

reboots

restoring bindings across 2-261

redundancy

accessing the main CPU 2-527

changing from active to standby supervisor engine 2-531

displaying information 2-830

displaying ISSU config-sync failure information 2-834

displaying redundancy facility information 2-830

displaying RF client list 2-830

displaying RF operational counters 2-830

displaying RF states 2-830

enabling automatic synchronization 2-47

forcing switchover to standby supervisor engine 2-531

mismatched command listing 2-529

set the mode 2-409

synchronizing the route processor configurations 2-396

related documentation 1-xxi

remote-id, setting for an interface 2-480

remote-id, setting for an interface VLAN range 2-481

remote SPAN

See RSPAN

renew commands

ip dhcp snooping database 2-535

rep admin vlan command 2-536

rep block port command 2-537

rep lsl-age-timer command 2-541

rep preempt delay command 2-543

rep preempt segment command 2-545

rep segment command 2-546

rep stcn command 2-549

resetting PVLAN trunk

setting switchport to trunk 2-956

retry failed authentiation, configuring 2-26

rj45 connector, selecting the connector 2-408

ROM monitor mode

summary 1-6

Route Processor Redundancy

See redundancy

router, set to become ANCP client 2-18

RPF

disabling IPv4 exists-only checks 2-304

enabling IPv4 exists-only checks 2-304

RPR

set the redundancy mode 2-409

RSPAN

converting VLAN to RSPAN VLAN 2-534

displaying list 2-878

S

sampler (netflow-lite monitor submode) command 2-553

saving configuration changes 1-11

secure address, configuring 2-459

secure ports, limitations 2-962

server (AAA) alive actions, configuring 2-26

server (AAA) dead actions, configuring 2-26

service-policy command (policy-map class) 2-558

session classification, defining 2-30

set the redundancy mode 2-409

sfp connector, selecting the connector 2-408

shape command 2-577

shell trigger command 2-581, 2-840

show ancp multicast 2-586

show authentication interface command 2-588

show authentication registration command 2-588

show authentication sessions command 2-588

show commands

filtering parameters 1-7

searching and filtering 1-6

show platform commands 1-11

show energywise command 2-625

show ipv6 snooping counters command 2-727

show ip wccp command 2-713

show ip wccp detail command 2-713

show ip wccp view command 2-713

show mab command 2-753

show mac address-table learning command 2-211, 2-767

show netflow-lite exporter command 2-786

show netflow-lite monitor command 2-788

show netflow-lite sampler command 2-790

show nmsp command 2-791

show vlan group command 2-871

show vlan mapping command 2-873

Simple Network Management Protocol

See SNMP

single-character patterns

special characters 1-7

single-host, setting 2-30

slaveslot0

displaying information on the standby supervisor 2-843

slot0

displaying information about the system 2-845

SNMP

debugging spanning tree activities 2-142

ifIndex persistence

clearing SNMP ifIndex commands 2-885

compress SNMP ifIndex table format 2-892

disabling globally 2-891

disabling on an interface 2-887

enabling globally 2-891

enabling on an interface 2-887

informs

disabling 2-889

enabling 2-889

traps

configuring to send when storm occurs 2-934

disabling 2-889

enabling 2-889

mac-notification

adding     1

removing     1

source (netflow-lite exporter submode) command 2-894

SPAN commands

configuring a SPAN session to monitor 2-411

displaying SPAN session information 2-858, 2-936

SPAN enhancements

displaying status 2-784

Spanning Tree Protocol

See STP

SPAN session

displaying session information 2-784

filter ACLs 2-411

specify encap type 2-411

turn off host learning based on ingress packets 2-411

special characters

anchoring, table 1-10

SSO 2-409

standard desktop

enabling Cisco-recommended features 2-370

standard desktop and Cisco IP phone

enabling Cisco-recommended features 2-372

sticky address, configuring 2-460

sticky-ARP

disabling on PVLANs 2-299

enabling on PVLANs 2-299

sticky port

deleting 2-100

enabling security 2-961

storm control

configuring for action when storm occurs 2-934

disabling suppression mode 2-632

displaying settings 2-855

enabling 2-934

enabling broadcast 2-934, 2-936

enabling multicast 2-934, 2-936

enabling suppression mode 2-632

enabling timer to recover from error disable 2-217

enabling unicast 2-934, 2-936

multicast, enabling 2-936

setting high and low levels 2-934

setting suppression level 2-632

STP

configuring link type for a port 2-906

configuring tunneling encapsulation rate 2-345

debugging all activities 2-142

debugging spanning tree activities 2-142

debugging spanning tree BackboneFast events 2-144

debugging spanning tree UplinkFast 2-147

detecting misconfiguration 2-903

displaying active interfaces only 2-847

displaying BackboneFast status 2-847

displaying bridge status and configuration 2-847

displaying spanning tree debug messages 2-142

displaying summary of interface information 2-847

enabling BPDU filtering by default on all PortFast ports 2-922

enabling BPDU filtering on an interface 2-899

enabling BPDU guard by default on all PortFast ports 2-924

enabling BPDU guard on an interface 2-901

enabling extended system ID 2-904

enabling loop guard as a default on all ports 2-907

enabling PortFast by default on all access ports 2-925

enabling PortFast mode 2-920

enabling protocol tunneling for 2-340

enabling root guard 2-905

enabling spanning tree BackboneFast 2-898

enabling spanning tree on a per VLAN basis 2-929

enabling spanning tree UplinkFast 2-927

setting an interface priority 2-926

setting drop threshold for 2-343

setting pathcost 2-902

setting the default pathcost calculation method 2-919

subinterface configuration mode, summary 1-6

SVI

creating a Layer 3 interface on a VLAN 2-242

switching characteristics

excluding from link-up calculation 2-953

modifying 2-953

returning to interfaces

capture function 2-953

switchport 2-977

switchport interfaces

displaying status of Layer 3 port 2-664

displaying status of native VLAN tagging 2-664

switchport vlan mapping command 2-981

switch shim

debugging 2-145

disabling debugging 2-145

switch to router connection

enabling Cisco-recommended features 2-374

switch to switch connection

enabling Cisco-recommended features 2-376

switch virtual interface

See SVI

sw-vlan 2-148

system prompts 1-5

T

Tab key

command completion 1-1

tables

characters with special meaning 1-7

mac access-list extended subcommands 2-358

multipliers 1-9

relationship between duplex and speed commands 2-932

show cable-diagnostics tdr command output fields 2-598

show cdp neighbors detail field descriptions 2-606

show cdp neighbors field descriptions 2-605

show ip dhcp snooping command output 2-589, 2-753

show ip interface field descriptions 2-699

show policy-map control-plane field descriptions 2-799

show vlan command output fields 2-877

show vtp command output fields 2-882

special characters 1-9

special characters used for anchoring 1-10

speed command options 2-402, 2-932

valid interface types 2-237

TAC

displaying information useful to TAC 2-859

TCAM

debugging spanning tree activities 2-142

TDR

displaying cable diagnostic test results 2-597

test condition of copper cables 2-987

temperature readings

displaying information 2-629

template data timeout (netflow-lite exporter submode) command 2-985

timer information 2-633

traffic monitor

display status 2-753

traffic shaping

enable on an interface 2-579

transport udp (netflow-lite exporter submode) command 2-995

transport udp load-share (netflow-lite exporter submode) command 2-997

traps, enabling 2-889

trunk encapsulation

setting format 2-977

trunk interfaces

displaying trunk interfaces information 2-671

trunk port, configuring VLAN mapping 2-981

trunk ports, display VLAN mapping information 2-873

trust configuration, setting on an interface 2-482, 2-483

trust state

setting 2-250

ttl (netflow-lite exporter submode) command 2-1001

tunnel ports

displaying information about Layer 2 protocol 2-747

TX queues

allocating bandwidth 2-1003

returning to default values 2-1003

setting priority to high 2-1003

specifying burst size 2-1003

specifying traffic rate 2-1003

U

UDLD

displaying administrative and operational status 2-861

enabling by default on all fiber interfaces 2-1005

enabling on an individual interface 2-1007

preventing a fiber interface from being enabled 2-1007

resetting all shutdown ports 2-1009

setting the message timer 2-1005

Unidirectional Link Detection

See UDLD

unidirection port control, changing from bidirectional 2-23

unknown multicast traffic, preventing 2-955

unknown unicast traffic, preventing 2-955

user EXEC mode, summary 1-5

username

setting password and privilege level 2-1011

V

VACLs

access-group mode 2-6

applying VLAN access maps 2-1026

displaying VLAN access map information 2-868

specifying an action in a VLAN access map 2-13

specifying the match clause for a VLAN access-map sequence 2-397

using a VLAN filter 2-1026

VLAN

applying an ARP ACL 2-244

configuring 2-1015

configuring service policies 2-1020

converting to RSPAN VLAN 2-534

displaying CEF information 2-678

displaying CEF next-hop information 2-678

displaying information on switch interfaces 2-689, 2-693

displaying information on VLAN switch interfaces 2-696

displaying information sorted by group IP address 2-689, 2-693

displaying IP address and version information 2-689, 2-693

displaying Layer 2 VLAN information 2-864

displaying statistical information 2-782

displaying VLAN information 2-866

enabling dynamic ARP inspection 2-253

enabling Explicit Host Tracking 2-284

enabling guest per-port 2-180

enabling guest VLAN supplicant 2-172, 2-181

entering VLAN configuration mode 2-1020, 2-1022

native frames

enabling tagging on all 802.1Q trunk ports 2-1024

pruning the list for VTP 2-977

setting the list of allowed 2-977

VLAN, create or modify a group 2-1027

VLAN Access Control Lists

See VACLs

VLAN access map

See VACLs

VLAN database

resetting 2-551

VLAN debugging

limiting output 2-120

vlan group command 2-1027

VLAN groups, display VLANs mapped 2-871

VLAN link-up calculation

excluding a switch port 2-953

including a switch port 2-953

VLAN manager

debugging 2-148

disabling debugging 2-148

IOS file system error tests

debugging 2-149

disabling debugging 2-149

VLAN mapping

configuring 2-981

displaying 2-873

VLAN mapping, configure on trunk port 2-981

VLAN mapping on trunk ports, display information 2-873

VLAN Query Protocol

See VQP

VLAN query protocol (VQPC)

debugging 2-155

VLANs

clearing

counters 2-105

clearing hardware logic 2-78

configuring

internal allocation scheme 2-1029

displaying

internal VLAN allocation information 2-872

RSPAN VLANs 2-878

entering VLAN configuration mode 2-1022

VMPS

configuring servers 2-1033

reconfirming dynamic VLAN assignments 2-155, 2-1031

voice VLANs

enabling 2-949

VoIP

configuring auto-QoS 2-44

VQP

per-server retry count 2-1032

reconfirming dynamic VLAN assignments 2-155, 2-1031

vrf (netflow-lite exporter submode) command 2-1035

VTP

configuring the administrative domain name 2-1039

configuring the device in VTP client mode 2-1038

configuring the device in VTP server mode 2-1042

configuring the device in VTP transparent mode 2-1043

configuring tunnel encapsulation rate 2-345

creating a VTP domain password 2-1040

displaying domain information 2-881

displaying statistics information 2-881

enabling protocol tunneling for 2-340

enabling pruning in the VLAN database 2-1041

enabling VTP version 2 mode 2-1044

modifying the VTP configuration storage file name 2-1037

set drop threshold for 2-343

VTP protocol code

activating debug messages 2-152

deactivating debug messages 2-152

W

Webauth fallback, enabling 2-29