Catalyst 4500 Series Switch Cisco IOS Command Reference, 12.2(25)EW
Downloads: This chapterpdf (PDF - 584.0 KB) The complete bookPDF (PDF - 1.49 MB) | Feedback


Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V -



$ matches the end of a string 1-7

( ) in commands 1-10

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10


10-Gigabit Ethernet uplink

selecting 2-105

showing the mode 2-291

802.1Q trunk ports and native VLANs 2-533

802.1Q tunnel ports

configuring 2-492

802.1S Multiple Spanning Tree

see MST

802.1X Port Based Authentication

allowing multiple hosts on a port 2-86

debugging 802.1X Port Based Authentication 2-49

displaying port based authentication 2-277

enabling accounting for authentication sessions 2-3

enabling authentication on the system 2-91

enabling guest VLAN 2-82

enabling manual control of auth state 2-87

enabling periodic re-authentication of the client 2-90

initializing re-authentication of dot1x ports 2-89

initializing state machines 2-83

receive session termination message upon reboot 2-4

setting maximum number for EAP requests 2-85


abbreviating commands

context-sensitive help 1-1

Access Gateway Module

connecting to a module 2-11

connecting to a remote module 2-243

connecting to a specific remote module 2-249


displaying mac interface 2-364

show mode interface 2-253

access groups

IP 2-5

access lists

clearing an access template 2-26

defining ARP 2-10

displaying ARP information 2-256

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-534


access-group mode 2-5

determining ACL hardware programming 2-6

displaying mac access-group interface 2-364

using ACL naming conventions for MAC ACLs 2-170

action clause

specifying drop or forward action in a VACL 2-8


debugging the adjacency table 2-43

disabling the debug facility 2-43

displaying information about the adjacency table 2-254

displaying IPC table entries 2-43

aggregate policer

displaying information 2-397

aging time

displaying MAC address aging time 2-367

MAC address table 2-173


displaying operational status 2-280


description 1-9


description 1-10


access list, displaying detailed information 2-256

defining access-lists 2-10

ARP inspection

enforce certain types of checking 2-122

ARP packet

deny based on DHCP bindings 2-79

permit based on DHCP bindings 2-203


setting username 2-524

using an MD5-type encryption method 2-524

verifying MD5 signature 2-525

verifying the checksum for Flash memory 2-525

authorization state

enabling manual control 2-87

authorization state of a controlled port 2-87

automatic installation

displaying status 2-257

auto-negotiate interface speed

example 2-483


configuring for VoIP 2-12

displaying configuration 2-258


baby giants

displaying the system MTU setting 2-423

setting the maximum Layer 2 payload size 2-509


displaying debugging messages 2-68

displaying spanning tree status 2-413

enabling debugging 2-68


store for DHCP snooping 2-130

BOOT environment variable

displaying information 2-262


displaying information 2-260


debugging spanning tree activities 2-67

bridge protocol data units


broadcast suppression level

configuring 2-484, 2-486

enabling 2-484, 2-486


Catalyst 4507R 2-213

power redundancy mode 2-215


configuring tunneling encapsulation rate 2-166


neighbor information 2-263

enabling protocol tunneling for 2-162

set drop threshold for 2-164


displaying next-hop information 2-324

displaying VLAN configuration information 2-324


macro apply 2-179

Cisco Express Forwarding



macro apply 2-181


macro apply 2-183


macro apply 2-185

clear commands

clearing Gigabit Ethernet interfaces 2-24

clearing IGMP group cache entries 2-31

clearing interface counters 2-21

clearing IP access lists 2-26, 2-27

clearing IP ARP inspection statistics VLAN 2-28

clearing IP DHCP snooping database 2-29

clearing IP DHCP snooping database statistics 2-30

clearing MFIB counters and routes 2-34

clearing MFIB fastdrop entries 2-35

clearing PAgP channel information 2-38

clearing QoS aggregate counters 2-40

clearing VLAN interfaces 2-25

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-10

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-4

exiting 1-4

understanding user EXEC and configuration modes 1-4

condition interface

debugging interface-related activities 2-45

condition vlan

debugging VLAN output 2-48

configuration, saving 1-11


root as secondary 2-467

configuring a SPAN session to monitor

limit SPAN source traffic 2-195

configuring forward delay 2-463

configuring root as primary 2-467


assigning to Layer 2 protocol packets 2-163

CoS QoS default

defining value on an interface 2-228

Cost of Service

See QoS CoS


clearing interface counters 2-21



clear statistics 2-28


displaying qos dbl 2-398

enabling DBL globally on the switch 2-229

debug commands

debugging backup events 2-44

debugging DHCP snooping events 2-54

debugging DHCP snooping messages 2-55

debugging EtherChannel/PAgP/shim 2-50

debugging IPC activity 2-53

debugging IP DHCP snooping security messages 2-56

debugging NVRAM activities 2-59

debugging PAgP activities 2-60

debugging port manager activities 2-63

debugging software MAC filter updates 2-66

debugging spanning tree activities 2-67

debugging spanning tree backbonefast 2-68

debugging spanning tree UplinkFast 2-71

debugging supervisor redundancy 2-65

debugging VLAN manager activities 2-72

displaying monitor activity 2-58

displaying the adjacency table 2-43

enabling debug dot1x 2-49

enabling debugging messages for ISL VLAN IDs 2-74

enabling debugging messages for VTP 2-75

enabling debugging of UDLD activity 2-76

enabling switch shim debugging 2-69

enabling VLAN manager file system error tests 2-73

limiting debugging output for VLANs 2-48

limiting interface debugging output 2-45

limiting output for debugging standby state changes 2-46

shortcut to the debug condition interface 2-52


activity monitoring 2-58

DHCP snooping events 2-54

DHCP snooping packets 2-55

IPC activities 2-53

IP DHCP snooping security packets 2-56

NVRAM activities 2-59

PAgP activities 2-60

PAgP shim 2-50

PM activities 2-63

SMF address insertions and deletions 2-66

spanning tree BackboneFast events 2-68

spanning tree switch shim 2-69

spanning tree UplinkFast events 2-71

VLAN manager activities 2-72

VLAN manager IOS file system error tests 2-73

VTP protocol debug messages 2-75

debug spanning tree switch 2-69

debug sw-vlan vtp 2-75

default CoS value 2-228

default form of a command, using 1-6

defining egress DSCP-to-CoS mapping 2-233


clearing database statistics 2-30

DHCP bindings

configuring bindings 2-129

deny ARP packet based on matches 2-79

permit ARP packet based on matches 2-203

DHCP snooping

clearing database 2-29

displaying 2-325

displaying binding table 2-326

displaying status of DHCP database 2-329

displaying status of error detection 2-283

enabling DHCP globally 2-128

enabling IP source guard 2-160

enabling on a VLAN 2-135

enabling option 82 2-132

enabling rate limiting on an interface 2-133

enabling trust on an interface 2-134

establishing binding configuration 2-129

renew binding database 2-245

store generated bindings 2-130

diagnostic test

displaying attributes 2-267

display module-based results 2-269

displaying error disable recovery 2-284

displaying inline power status 2-392

displaying monitoring activity 2-58

displaying SEEPROM information

GBIC 2-292

displaying SPAN session information 2-422, 2-485

document conventions xvi

document organization xv

DOS attack

protecting system's resources 2-117

drop threshold, Layer 2 protocol tunneling 2-164

DSCP rewrite for IP packets

enable 2-236

dual-capable port

selecting a connector 2-192

duplex mode

configuring autonegotiation on an interface 2-94

configuring full duplex on an interface 2-94

configuring half duplex on an interface 2-94

dynamic ARP inspection

preventing 2-117

Dynamic Buffer Limiting


Dynamic Host Configuration Protocol




restarting authentication process 2-85


debugging for UDLD 2-76

voice VLANs 2-487


alarms 2-280

displaying information 2-280

status 2-280

temperature 2-280

error disable detection

enabling error disable detection 2-96

error-disabled state

displaying 2-310

error disable recovery

configuring recovery mechanism variables 2-98

displaying recovery timer information 2-284

enabling ARP inspection timeout 2-98

specifying recovery cause 2-98


assigning interfaces to EtherChannel groups 2-16

debugging EtherChannel 2-50

debugging PAgP shim 2-50

debugging spanning tree activities 2-67

displaying information for a channel 2-285

removing interfaces from EtherChannel groups 2-16

EtherChannel guard

detecting STP misconfiguration 2-454

Explicit Host Tracking

clearing the database 2-33

enabling per-VLAN 2-147


matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-10

single-character patterns 1-7

Extensible Authentication Protocol



field replaceable unit (FRU)

displaying status information 2-280

Flash memory file system

displaying file system information 2-260

verifying checksum 2-525

flow control

configuring a gigabit interface for pause frames 2-101

displaying per-interface statistics for flow control 2-289



displaying SEEPROM information 2-292

Gigabit Ethernet interface

clearing the hardware logic 2-24

Gigabit Ethernet uplink

selecting 2-105

showing the mode 2-291

global configuration mode

using 1-5


hardware module

resetting a module by toggling the power 2-104

hardware uplink

selecting the mode 2-105

showing the mode 2-291

helper addresses, IP 2-343

hot standby protocol

debugging 2-46

disabling debugging 2-46

limiting output 2-46



displaying SEEPROM information

chassis 2-292

clock module 2-292

fan trays 2-292

module 2-292

mux buffer 2-292

power supplies 2-292

supervisor engine 2-292

ifIndex persistence

clearing SNMP ifIndex commands 2-443

compress SNMP ifIndex table format 2-448

disabling globally 2-447

disabling on an interface 2-444

enabling globally 2-447

enabling on an interface 2-444


applying filters for host joining on Layer 2 interfaces 2-137

clearing IGMP group cache entries 2-31

configuring frequency for IGMP host-query messages 2-140

creating an IGMP profile 2-139

displaying IGMP interface configuration information 2-331

displaying profiles 2-333

setting maximum group numbers 2-138

IGMP profiles

displaying 2-333

IGMP snooping

clearing the EHT database 2-33

configuring a Layer 2 interface as a group member 2-151

configuring a Layer 2 interface as a multicast router 2-149

configuring a static VLAN interface 2-151

displaying multicast information 2-340

displaying VLAN information 2-334, 2-338, 2-341

enabling 2-142

enabling immediate-leave processing 2-148

enabling on a VLAN 2-146

enabling per-VLAN Explicit Host Tracking 2-147


enabling 2-445

inline power

displaying inline power status 2-392

inspection log

clearing log buffer 2-27


displaying suppressed multicast bytes 2-304

interface capabilities

displaying 2-301

interface configuration mode

summary 1-5

interface link

display cable disconnect time 2-307


configuring dot1q tunnel ports 2-492

creating an interface-range macro 2-78

debugging output of interface related activities 2-45

displaying description 2-306

displaying error-disabled state 2-310

displaying information when tunneling is enabled 2-358

displaying status 2-306

displaying traffic for a specific interface 2-298

entering interface configuration mode 2-109

executing a command on multiple ports in a range 2-112

selecting an interface to configure 2-109

setting a CoS value for Layer 2 packets 2-163

setting drop threshold for Layer 2 packets 2-164

setting the interface type 2-492

interface speed

configuring interface speed 2-481

interface transceiver

displaying diagnostic data 2-313

internal VLAN allocation

configuring 2-535

default setting 2-535

displaying allocation information 2-434

Internet Group Management Protocol



applying ARP ACL to VLAN 2-115

clearing inspection statistics 2-28

clearing status of log buffer 2-27

controlling packet logging 2-125

enabling dynamic inspection 2-124

limit rate of incoming requests 2-117

set per-port config trust state 2-121

showing status of dynamic ARP inspection 2-320

showing status of log buffer 2-323


debugging IPC activities 2-53

IP DHCP Snooping

See DHCP snooping

IP header validation

disabling 2-159

enabling 2-159

IP interfaces

displaying usability status 2-342

IP multicast

displaying multicast routing table information 2-348

IP packets

enable DSCP rewrite 2-236

IP phone and standard desktop

enabling Cisco-recommended features 2-181

IP source binding

adding or deleting 2-156

displaying bindingstagging 2-353

IP source guard

debugging messages 2-56

displaying configuration and filters 2-354

enabling on DHCP snooping 2-160


Jumbo frames

enabling jumbo frames 2-199



deselecting channeling protocol 2-18

enabling LACP on an interface 2-18

setting channeling protocol 2-18

Layer 2

displaying ACL configuration 2-364

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN interface 2-492

specifying a trunking VLAN interface 2-492

Layer 2 protocol ports

displaying 2-358

Layer 2 protocol tunneling error recovery 2-166

Layer 2 switching

enabling voice VLANs 2-487

modifying switching characteristics 2-487

Layer 2 traceroute

IP addresses 2-513

Layer 3 switching

displaying information about an adjacency table 2-254

displaying port status 2-311

displaying status of native VLAN tagging 2-311

log buffer

show status 2-323


controlling IP ARP packets 2-125


MAC Access Control Lists



defining extended MAC access list 2-170

displaying MAC ACL information 2-431

naming an ACL 2-170

MAC address filtering

configuring 2-177

disabling 2-177

enabling 2-177

MAC address table

adding static entries 2-187

clearing dynamic entries 2-37

configuring aging time 2-173

displaying dynamic table entry information 2-369

displaying entry count 2-368

displaying information 2-365

displaying interface-based information 2-371

displaying multicast information 2-373

displaying protocol-based information 2-375

displaying static table entry information 2-377

displaying the MAC address aging time 2-367

displaying VLAN-based information 2-379

learning in the protocol buckets 2-174

removing static entries 2-187

MAC address tables

adding static entries 2-177

deleting secure or specific addresses 2-39

disabling IGMP snooping on static MAC addresses 2-177

removing static entries 2-177

mac-address-table static 2-177

MAC address unicast filtering

dropping unicast traffic 2-177

macro keywords

help strings 2-2

mapping secondary VLANs to MST instance 2-220

mapping VLAN(s) to an MST instance 2-107

match subcommand

accessing 2-19

maximum transmission unit (MTU)

displaying the system MTU setting 2-423

setting the maximum Layer 2 payload size 2-509


verifying MD5 signature 2-525

message digest 5

See MD5


clearing ip mfib counters 2-34

clearing ip mfib fastdrop 2-35

displaying all active MFIB routes 2-345

displaying MFIB fastdrop table entries 2-347

enabling IP MFIB fastdrops 2-153


access-group 2-5

show access-group interface 2-253

switching between PVST+, MST, and Rapid PVST 2-459

See also command modes

module password clearing 2-23

module reset

resetting a module by toggling the power 2-104

--More-- prompt

filter 1-6

search 1-7


designating the primary and secondary root 2-467

displaying MST protocol information 2-418

displaying region configuration information 2-418

displaying spanning tree information 2-418

entering MST configuration submode 2-461

setting configuration revision number 2-247

setting path cost and port priority for instances 2-460

setting the forward delay timer for all instances 2-463

setting the hello-time delay timer for all instances 2-464

setting the max-age timer for all instances 2-465

setting the MST region name 2-200

specifying the maximum number of hops 2-466

switching between PVST+ and Rapid PVST 2-459

using the MST configuration submode revision command 2-247

using the submode name command 2-200


displaying global MTU settings 2-423


enabling storm control 2-486

multicast/unicast packets

prevent forwarding 2-491

Multicast Forwarding Information Base


multiple-character patterns 1-8

multiple hosts on authorized port 2-86

Multiple Spanning Tree



native VLAN

controlling tagging of traffic 2-505

displaying ports eligible for native tagging 2-433

displaying ports eligible for tagging 2-433

enabling tagging on 802.1Q trunk ports 2-533

specifing the tagging of traffic 2-506


enabling NetFlow statistics 2-154

including infer fields in routing statistics 2-154


displaying CEF VLAN information 2-324

no form of a command, using 1-6


debugging NVRAM activities 2-59



pattern searches 1-7


packet forwarding

prevent unknown packets 2-491

packet memory failure

direct switch action upon detection 2-81

packet memory test

bootup, displaying results 2-273

ongoing, displaying results 2-275


access-group mode 2-5

paging prompt

see --More-- prompt


clearing port channel information 2-38

debugging PAgP activity 2-60

deselecting channeling protocol 2-18

displaying port channel information 2-385

hot standby mode

returning to defaults 2-202

selecting ports 2-202

input interface of incoming packets

learning 2-201

returning to defaults 2-201

setting channeling protocol 2-18

parentheses 1-10


clearing on an intelligent line module 2-23

establishing enhanced password security 2-524

setting username 2-524


displaying route maps xvi

redistributing route maps xvi

PM activities

debugging 2-63

disabling debugging 2-63

Policy Based Routing


port, dual-capable

selecting the connector 2-192

Port Aggregation Protocol

See PAgP

port-based authentication

displaying debug messages 2-49

displaying statistics and status 2-277

enabling 802.1X 2-87

manual control of authorization state 2-87

multiple hosts on authorized port 2-86

periodic re-authentication

enabling 2-90

re-authenticating 802.1X-enabled ports 2-89

switch-to-client frame-retransmission number 2-85

port channel

accessing 2-111

creating 2-111

displaying information 2-385

load distribution method

resetting to defaults 2-207

setting 2-207

port range

executing 2-112

port security

debugging ports security 2-64

deleting secure or specific addresses 2-39

displaying settings for an interface or switch 2-390

enabling 2-494

filter source IP and MAC addresses 2-160

setting action upon security violation 2-494

setting the rate limit for bad packets 2-494

sticky port 2-494

Port Trust Device

displaying 2-399

power status

displaying inline power 2-392

displaying power status 2-392

power supply

configuring combined and redundant power on the Catalyst 4507R 2-213

configuring inline power 2-210

configuring power consumption 2-212

configuring power redundancy on the Catalyst 4507R 2-215

displaying the SEEPROM 2-292

setting inline power state 2-209

Private VLAN


privileged EXEC mode, summary 1-5


system 1-5

protocol tunneling

configuring encapsulation rate 2-166

disabling 2-162

displaying port information 2-358

enabling 2-162

setting a CoS value for Layer 2 packets 2-163

setting a drop threshold for Layer 2 packets 2-164


configuring isolated, primary, and community PVLANs 2-216

controlling tagging of native VLAN traffic 2-505

disabling sticky-ARP 2-157

displaying map information for VLAN SVIs 2-309

displaying PVLAN information 2-436

enabling interface configuration mode 2-492

enabling sticky-ARP 2-157

mapping VLANs to the same SVI 2-218

specifying host ports 2-492

specifying promiscuous ports 2-492


switching between PVST and MST 2-459



account Layer 2 encapsulation 2-223

attaching a policy-map to an interface 2-248

automatic configuration 2-12

clearing aggregate counters 2-40

configuring a QoS policy map 2-205

configuring auto 2-12

defining a named aggregate policer 2-225

defining default CoS value 2-228

defining ingress CoS-to-DSCP mapping 2-232

displaying aggregate policer information 2-397

displaying auto configuration 2-258

displaying class maps information 2-266

displaying configuration information 2-258

displaying configurations of policies 2-388

displaying policy map information 2-387

displaying QoS information 2-396

displaying QoS map information 2-400

enabling global configuration mode 2-221

enabling per-VLAN QoS for a Layer 2 interface 2-239

enabling QoS on an interface 2-222

mapping DSCP values to transmit queues 2-233

mapping egress DSCP-to-CoS 2-233

mapping the DSCP-to-CoS value 2-233

setting the mapping of policed DSCP values 2-235

setting the trust state 2-237

specifying flow-based match criteria 2-189


configuring for tunneled Layer 2 protocol packets 2-163

defining default CoS value 2-228

qos dbl 2-229

question command 1-1

queueing information

displaying 2-399


Rapid PVST

switching between PVST and MST 2-459

re-authenticating 802.1X-enabled ports 2-89


periodic 2-90


restoring bindings across 2-129


accessing the main CPU 2-240

changing from active to standby supervisor engine 2-241

displaying information 2-402

displaying redundancy facility information 2-402

displaying RF client list 2-402

displaying RF operational counters 2-402

displaying RF states 2-402

enabling automatic synchronization 2-15

forcing switchover to standby supervisor engine 2-241

set the mode 2-193

synchronizing the route processor configurations 2-187

related documentation xv

remote SPAN


renew commands

ip dhcp snooping database 2-245

resetting PVLAN trunk

setting switchport to trunk 2-492

rj45 connector, selecting the connector 2-192

ROM monitor mode

summary 1-6

Route Processor Redundancy

See redundancy


set the redundancy mode 2-193


converting VLAN to RSPAN VLAN 2-244

displaying list 2-438


saving configuration changes 1-11

secure ports, limitations 2-495

set the redundancy mode 2-193

sfp connector, selecting the connector 2-192

show commands

filtering parameters 1-7

searching and filtering 1-6

show platform commands 1-11

Simple Network Management Protocol


single-character patterns

special characters 1-7


displaying information on the standby supervisor 2-409


displaying information about the system 2-411


debugging address insertions and deletions 2-66


debugging spanning tree activities 2-67

ifIndex persistence

clearing SNMP ifIndex commands 2-443

compress SNMP ifIndex table format 2-448

disabling globally 2-447

disabling on an interface 2-444

enabling globally 2-447

enabling on an interface 2-444


disabling 2-445

enabling 2-445


configuring to send when storm occurs 2-484

disabling 2-445

enabling 2-445

software MAC filter


SPAN commands

configuring a SPAN session to monitor 2-195

displaying SPAN session information 2-422, 2-485

SPAN enhancements

displaying status 2-383

Spanning Tree Protocol


SPAN session

displaying session information 2-383

filter ACLs 2-195

specify encap type 2-195

turn off host learning based on ingress packets 2-195

special characters

anchoring, table 1-10

SSO 2-193

standard desktop

enabling Cisco-recommended features 2-179

standard desktop and Cisco IP phone

enabling Cisco-recommended features 2-181


disabling on PVLANs 2-157

enabling on PVLANs 2-157

sticky port

deleting 2-39

enabling security 2-494

storm control

configuring for action when storm occurs 2-484

disabling suppression mode 2-283

displaying settings 2-421

enabling 2-484

enabling broadcast 2-484, 2-486

enabling multicast 2-484, 2-486

enabling suppression mode 2-283

enabling timer to recover from error disable 2-98

enabling unicast 2-484, 2-486

multicast, enabling 2-486

setting high and low levels 2-484

setting suppression level 2-283


configuring link type for a port 2-457

configuring tunneling encapsulation rate 2-166

debugging all activities 2-67

debugging spanning tree activities 2-67

debugging spanning tree BackboneFast events 2-68

debugging spanning tree UplinkFast 2-71

detecting misconfiguration 2-454

displaying active interfaces only 2-413

displaying BackboneFast status 2-413

displaying bridge status and configuration 2-413

displaying spanning tree debug messages 2-67

displaying summary of interface information 2-413

enabling BPDU filtering by default on all PortFast ports 2-472

enabling BPDU filtering on an interface 2-450

enabling BPDU guard by default on all PortFast ports 2-474

enabling BPDU guard on an interface 2-452

enabling extended system ID 2-455

enabling loop guard as a default on all ports 2-458

enabling PortFast by default on all access ports 2-475

enabling PortFast mode 2-470

enabling protocol tunneling for 2-162

enabling root guard 2-456

enabling spanning tree BackboneFast 2-449

enabling spanning tree on a per VLAN basis 2-479

enabling spanning tree UplinkFast 2-477

setting an interface priority 2-476

setting drop threshold for 2-164

setting pathcost 2-453

setting the default pathcost calculation method 2-469

subinterface configuration mode, summary 1-6


creating a Layer 3 interface on a VLAN 2-114

switchport 2-506

switchport interfaces

displaying status of Layer 3 port 2-311

displaying status of native VLAN tagging 2-311

switch shim

debugging 2-69

disabling debugging 2-69

switch to router connection

enabling Cisco-recommended features 2-183

switch to switch connection

enabling Cisco-recommended features 2-185

switch virtual interface


sw-vlan 2-72

system prompts 1-5


Tab key

command completion 1-1


characters with special meaning 1-7

mac access-list extended subcommands 2-170

match syntax description 2-20

multipliers 1-9

relationship between duplex and speed commands 2-482

show cdp neighbors detail field descriptions 2-265

show cdp neighbors field descriptions 2-264

show ip interface field descriptions 2-343

show vlan command output fields 2-437

show vtp command output fields 2-441

special characters 1-9

special characters used for anchoring 1-10

speed command options 2-189, 2-482

valid interface types 2-109


displaying information useful to TAC 2-424


debugging spanning tree activities 2-67

temperature readings

displaying information 2-280

timer information 2-284

traffic shaping

enable on an interface 2-250

traps, enabling 2-445

trunk encapsulation

setting format 2-506

trunk interfaces

displaying trunk interfaces information 2-318

trust state

setting 2-121

tunnel ports

displaying information about Layer 2 protocol 2-358

TX queues

allocating bandwidth 2-516

returning to default values 2-516

setting priority to high 2-516

specifying burst size 2-516

specifying traffic rate 2-516



displaying administrative and operational status 2-426

enabling by default on all fiber interfaces 2-518

enabling on an individual interface 2-520

preventing a fiber interface from being enabled 2-520

resetting all shutdown ports 2-522

setting the message timer 2-518

Unidirectional Link Detection


unknown multicast traffic, preventing 2-491

unknown unicast traffic, preventing 2-491

user EXEC mode, summary 1-5


setting password and privilege level 2-524



access-group mode 2-5

applying VLAN access maps 2-534

displaying VLAN access map information 2-431

specifying an action in a VLAN access map 2-8

specifying the match clause for a VLAN access-map sequence 2-188

using a VLAN filter 2-534


applying an ARP ACL 2-115

configuring 2-527

converting to RSPAN VLAN 2-244

displaying CEF information 2-324

displaying CEF next-hop information 2-324

displaying information on switch interfaces 2-334, 2-338

displaying information on VLAN switch interfaces 2-341

displaying information sorted by group IP address 2-334, 2-338

displaying IP address and version information 2-334, 2-338

displaying Layer 2 VLAN information 2-428

displaying statistical information 2-381

displaying VLAN information 2-430

enabling dynamic ARP inspection 2-124

enabling Explicit Host Tracking 2-147

enabling guest per-port 2-82

entering VLAN configuration mode 2-531

native frames

enabling tagging on all 802.1Q trunk ports 2-533

pruning the list for VTP 2-506

setting the list of allowed 2-506

VLAN Access Control Lists


VLAN access map


VLAN database

resetting 2-246

VLAN debugging

limiting output 2-48

VLAN manager

debugging 2-72

disabling debugging 2-72

IOS file system error tests

debugging 2-73

disabling debugging 2-73

VLAN Query Protocol


VLAN query protocol (VQPC)

debugging 2-77



counters 2-41

clearing hardware logic 2-25


internal allocation scheme 2-535


internal VLAN allocation information 2-434


entering VLAN configuration mode 2-531


configuring servers 2-539

reconfirming dynamic VLAN assignments 2-537

voice VLANs

enabling 2-487


configuring auto-QoS 2-12


per-server retry count 2-538

reconfirming dynamic VLAN assignments 2-537


configuring the administrative domain name 2-543

configuring the device in VTP client mode 2-542

configuring the device in VTP server mode 2-546

configuring the device in VTP transparent mode 2-547

configuring tunnel encapsulation rate 2-166

creating a VTP domain password 2-544

displaying domain information 2-440

displaying statistics information 2-440

enabling protocol tunneling for 2-162

enabling pruning in the VLAN database 2-545

enabling VTP version 2 mode 2-548

modifying the VTP configuration storage file name 2-541

set drop threshold for 2-164

VTP protocol code

activating debug messages 2-75

deactivating debug messages 2-75