Catalyst 4500 Series Switch Cisco IOS Command Reference, IOS-XE 3.2.x SG
Index
Downloads: This chapterpdf (PDF - 631.0KB) The complete bookPDF (PDF - 11.54MB) | Feedback

Index

Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Symbols

$ matches the end of a string 1-7

( ) in commands 1-11

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10

Numerics

10-Gigabit Ethernet uplink

selecting 2-198

showing the mode 2-512, 2-513

802.1Q trunk ports and native VLANs 2-854

802.1Q tunnel ports

configuring 2-798

802.1S Multiple Spanning Tree

see MST

802.1X

configuring for multiple hosts 2-154

configuring for single host 2-154

configuring multiple domains 2-154

disabling port control 2-147

enabling port control 2-147

802.1X Critical Authentication

disabling on a port 2-148

disabling on a VLAN 2-151

EAPOL

disabling send success packets 2-149

enabling send success packets 2-149

enabling on a port 2-148

enabling on a VLAN 2-151

returning delay time to default setting 2-150

setting delay time on a port 2-150

802.1X critical authentication

configure parameters 2-21

802.1X critical recovery delay, configuring 2-21

802.1X Port Based Authentication

debugging 802.1X Port Based Authentication 2-105

displaying port based authentication 2-492

enabling accounting for authentication sessions 2-4

enabling authentication on the system 2-165

enabling guest VLAN 2-152

enabling guest VLAN supplicant 2-145, 2-153

enabling manual control of auth state 2-161

enabling periodic re-authentication of the client 2-164

initializing re-authentication of dot1x ports 2-163

initializing state machines 2-156

receive session termination message upon reboot 2-5

setting maximum number for EAP requests 2-159

setting the reauthentication timer 2-166

A

abbreviating commands

context-sensitive help 1-1

Access Gateway Module

connecting to a module 2-18

connecting to a remote module 2-423

connecting to a specific remote module 2-435

access-group

displaying mac interface 2-619

show mode interface 2-455, 2-672

access groups

IP 2-6

access lists

clearing an access template 2-70

defining ARP 2-17

displaying ARP information 2-458

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-856

access-policies, applying using host-mode 2-26

ACLs

access-group mode 2-6

balancing hardware regions 2-12

capturing control packets 2-8

determining ACL hardware programming 2-10

disabling hardware statistics 2-192

displaying mac access-group interface 2-619

enabling hardware statisctics 2-192

using ACL naming conventions for MAC ACLs 2-313

action clause

specifying drop or forward action in a VACL 2-13

addresses, configuring a maximum 2-386

adjacency

debugging the adjacency table 2-98

disabling the debug facility 2-98

displaying information about the adjacency table 2-456

displaying IPC table entries 2-98

aggregate policer

displaying information 2-673

aging time

displaying MAC address aging time 2-622

alarms

displaying operational status 2-500

alternation

description 1-10

anchoring

description 1-10

ARP

access list, displaying detailed information 2-458

defining access-lists 2-17

ARP inspection

enforce certain types of checking 2-219

ARP packet

deny based on DHCP bindings 2-137

permit based on DHCP bindings 2-364

authentication 2-21, 2-28

changing the control-direction 2-19

configure actions for events

configuring the actions 2-22

configuring port-control 2-32

enabling reauthentication 2-31

enabling Webauth fallback 2-25

host-mode configuration 2-26

setting priority of methods 2-34

setting the timer 2-36

setting username 2-841

specifying the order of methods 2-29

using an MD5-type encryption method 2-841

verifying MD5 signature 2-843

verifying the checksum for Flash memory 2-843

authentication control-direction command 2-19

authentication critical recovery delay command 2-21

authentication event command 2-22

authentication fallback command 2-25

authentication host-mode 2-26

authentication methods, setting priority 2-34

authentication methods, specifying the order of attempts 2-29

authentication open command 2-28

authentication order command 2-29

authentication periodic command 2-31

authentication port-control command 2-32

authentication priority command 2-34

authentication timer, setting 2-36

authentication timer command 2-36

auth fail VLAN

enable on a port 2-146

set max number of attempts 2-145

Auth Manager

configuring

authentication timer 2-36

authorization state

enabling manual control 2-161

authorization state of a controlled port 2-161

automatic installation

displaying status 2-463

automatic medium-dependent interface crossover

See Auto-MDIX

Auto-MDIX

disabling 2-346

enabling 2-346

auto-negotiate interface speed

example 2-775

auto-QoS

configuring for VoIP 2-38

displaying configuration 2-464

B

baby giants

displaying the system MTU setting 2-704

setting the maximum Layer 2 payload size 2-822

BackboneFast

displaying debugging messages 2-124

displaying spanning tree status 2-694

enabling debugging 2-124

bandwidth command 2-42

bindings

store for DHCP snooping 2-230

BOOT environment variable

displaying information 2-467

bootflash

displaying information 2-465

BPDUs

debugging spanning tree activities 2-122

bridge protocol data units

See BPDUs

broadcast

counters 2-95

broadcast suppression level

configuring 2-776, 2-778

enabling 2-776, 2-778

C

cable diagnostics

TDR

displaying test results 2-468

testing conditions of copper cables 2-824

call home

displaying information 2-470

e-mailing output 2-50

entering configuration submode 2-45

executing 2-50

manually send test message 2-53

receiving information 2-48

sending alert group message 2-51

submitting information 2-48

call home destination profiles

displaying 2-472

Catalyst 4507R 2-384

CDP

configuring tunneling encapsulation rate 2-301

displaying

neighbor information 2-475

enabling protocol tunneling for 2-296

set drop threshold for 2-299

CEF

displaying next-hop information 2-549

displaying VLAN configuration information 2-549

cisco-desktop

macro apply 2-325

Cisco Express Forwarding

See CEF

cisco-phone

macro apply 2-327

cisco-router

macro apply 2-329

cisco-switch

macro apply 2-331

class maps

creating 2-61

defining the match criteria 2-339

clear commands

clearing Gigabit Ethernet interfaces 2-68

clearing IGMP group cache entries 2-77

clearing interface counters 2-63

clearing IP access lists 2-70, 2-71

clearing IP ARP inspection statistics VLAN 2-72

clearing IP DHCP snooping database statistics 2-76

clearing MFIB counters and routes 2-80

clearing MFIB fastdrop entries 2-81

clearing PAgP channel information 2-86

clearing QoS aggregate counters 2-89

clearing VLAN interfaces 2-69

clear energywise neighbors command 2-65

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-11

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-5

exiting 1-5

understanding user EXEC and configuration modes 1-5

condition interface

debugging interface-related activities 2-100

condition vlan

debugging VLAN output 2-103

configuration, saving 1-11

configuring

root as secondary 2-759

configuring a SPAN session to monitor

limit SPAN source traffic 2-351

configuring critical recovery 2-21

configuring forward delay 2-755

configuring root as primary 2-759

CoPP

attaching

policy map to control plane 2-433

displaying

policy-map class information 2-648

entering configuration mode 2-93

removing

service policy from control plane 2-433

CoS

assigning to Layer 2 protocol packets 2-298

counters

clearing interface counters 2-63

critical authentication, configure 802.1X parameters 2-21

critical recovery, configuring 802.1X parameter 2-21

D

DAI

clear statistics 2-72

DBL

displaying qos dbl 2-674

debug commands

debugging backup events 2-99

debugging DHCP snooping events 2-110

debugging DHCP snooping messages 2-111

debugging EtherChannel/PAgP/shim 2-106

debugging IPC activity 2-109

debugging IP DHCP snooping security messages 2-112

debugging NVRAM activities 2-115

debugging PAgP activities 2-116

debugging port manager activities 2-119

debugging spanning tree activities 2-122

debugging spanning tree backbonefast 2-124

debugging spanning tree UplinkFast 2-127

debugging supervisor redundancy 2-121

debugging VLAN manager activities 2-128

displaying monitor activity 2-114

displaying the adjacency table 2-98

enabling debug dot1x 2-105

enabling debugging messages for ISL VLAN IDs 2-131

enabling debugging messages for VTP 2-132

enabling debugging of UDLD activity 2-133

enabling switch shim debugging 2-125

enabling VLAN manager file system error tests 2-129

limiting debugging output for VLANs 2-103

limiting interface debugging output 2-100

limiting output for debugging standby state changes 2-101

shortcut to the debug condition interface 2-108

debugging

activity monitoring 2-114

DHCP snooping events 2-110

DHCP snooping packets 2-111

IPC activities 2-109

IP DHCP snooping security packets 2-112

NVRAM activities 2-115

PAgP activities 2-116

PAgP shim 2-106

PM activities 2-119

spanning tree BackboneFast events 2-124

spanning tree switch shim 2-125

spanning tree UplinkFast events 2-127

VLAN manager activities 2-128

VLAN manager IOS file system error tests 2-129

VTP protocol debug messages 2-132

debug spanning tree switch 2-125

debug sw-vlan vtp 2-132

default form of a command, using 1-6

DHCP

clearing database statistics 2-76

DHCP bindings

configuring bindings 2-228

deny ARP packet based on matches 2-137

permit ARP packet based on matches 2-364

DHCP snooping

clearing binding entries 2-73

clearing database 2-75

displaying binding table 2-552

displaying configuration information 2-550

displaying status of DHCP database 2-555

displaying status of error detection 2-503

enabling DHCP globally 2-227

enabling IP source guard 2-267

enabling on a VLAN 2-237

enabling option 82 2-232, 2-234

enabling option-82 2-239

enabling rate limiting on an interface 2-235

enabling trust on an interface 2-236

establishing binding configuration 2-228

renew binding database 2-425

store generated bindings 2-230

diagnostic test

bootup packet memory 2-486

displaying attributes 2-480

display module-based results 2-482

running 2-144

show results for TDR 2-468

testing conditions of copper cables 2-824

displaying error disable recovery 2-504

displaying inline power status 2-663

displaying monitoring activity 2-114

displaying PoE policing and monitoring status 2-671

displaying SEEPROM information

GBIC 2-514

displaying SPAN session information 2-703, 2-778

DoS

CoPP

attaching policy map to control plane 2-433

displaying policy-map class information 2-648

entering configuration mode 2-93

removing service policy from control plane 2-433

entering

CoPP configuration mode 2-93

DOS attack

protecting system's resources 2-214

drop threshold, Layer 2 protocol tunneling 2-299

dual-capable port

selecting a connector 2-348

duplex mode

configuring autonegotiation on an interface 2-168

configuring full duplex on an interface 2-168

configuring half duplex on an interface 2-168

dynamic ARP inspection

preventing 2-214

Dynamic Host Configuration Protocol

See DHCP

E

EAP

restarting authentication process 2-159

EDCS-587028 2-459, 2-616

EIGRP (Enhanced IGRP)

filters

routing updates, preventing 2-361

enabling

debugging for UDLD 2-133

voice VLANs 2-791

enabling open access 2-28

EnergyWise

display power information through queries 2-177

display setting, status of entity and PoE ports 2-496

on an entity

enable, assign to domain, and set password 2-175

on an entity, enable and configure 2-170

on a PoE port

configuring on PoE port 2-172

energywise (global configuration) command 2-170, 2-172

energywise domain command 2-175

EnergyWise neighbor table, deleting 2-65

energywise query command 2-177

environmental

alarms 2-500

displaying information 2-500

status 2-500

temperature 2-500

erase a file 2-181

error disable detection

clearing error disable on an interface 2-66

enabling error disable detection 2-66, 2-184

enabling per-VLAN on BPDU guard 2-184

error-disabled state

displaying 2-533

error disable recovery

configuring recovery mechanism variables 2-186

displaying recovery timer information 2-504

enabling ARP inspection timeout 2-186

specifying recovery cause 2-186

EtherChannel

assigning interfaces to EtherChannel groups 2-54

debugging EtherChannel 2-106

debugging PAgP shim 2-106

debugging spanning tree activities 2-122

displaying information for a channel 2-506

removing interfaces from EtherChannel groups 2-54

EtherChannel guard

detecting STP misconfiguration 2-745

Explicit Host Tracking

clearing the database 2-79

enabling per-VLAN 2-251

expressions

matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-11

single-character patterns 1-7

Extensible Authentication Protocol

See EAP

F

fallback profile, specifying 2-25

field replaceable unit (FRU)

displaying status information 2-500

filters

EIGRP

routing updates, preventing 2-361

Flash memory file system

displaying file system information 2-465

verifying checksum 2-843

flow control

configuring a gigabit interface for pause frames 2-189

displaying per-interface statistics for flow control 2-510

G

GBIC

displaying SEEPROM information 2-514

Gigabit Ethernet interface

clearing the hardware logic 2-68

Gigabit Ethernet uplink

selecting 2-198

showing the mode 2-512, 2-513

global configuration mode

using 1-5

H

hardware module

resetting a module by toggling the power 2-194

hardware statistics

disabling 2-192

enabling 2-192

hardware uplink

selecting the mode 2-198

showing the mode 2-512, 2-513

helper addresses, IP 2-570

hot standby protocol

debugging 2-101

disabling debugging 2-101

limiting output 2-101

hw-module uplink mode shared-backplane command 2-196

I

IDPROMs

displaying SEEPROM information

chassis 2-514

clock module 2-514

fan trays 2-514

module 2-514

mux buffer 2-514

power supplies 2-514

supervisor engine 2-514

ifIndex persistence

clearing SNMP ifIndex commands 2-727

compress SNMP ifIndex table format 2-736

disabling globally 2-735

disabling on an interface 2-729

enabling globally 2-735

enabling on an interface 2-729

IGMP

applying filters for host joining on Layer 2 interfaces 2-241

clearing IGMP group cache entries 2-77

configuring frequency for IGMP host-query messages 2-244

creating an IGMP profile 2-243

displaying IGMP interface configuration information 2-557

displaying profiles 2-559

setting maximum group numbers 2-242

IGMP profiles

displaying 2-559

IGMP snooping

clearing the EHT database 2-79

configuring a Layer 2 interface as a group member 2-257

configuring a Layer 2 interface as a multicast router 2-255

configuring a static VLAN interface 2-257

displaying multicast information 2-566

displaying VLAN information 2-560, 2-564, 2-567

enabling 2-246

enabling immediate-leave processing 2-253

enabling on a VLAN 2-250

enabling per-VLAN Explicit Host Tracking 2-251

inline power

displaying inline power status 2-663

In Service Software Upgrade

See ISSU

inspection log

clearing log buffer 2-71

interface

displaying suppressed multicast bytes 2-527

interface capabilities

displaying 2-523

interface configuration mode

summary 1-5

interface link

display cable disconnect time 2-530

interfaces

configuring dot1q tunnel ports 2-798

creating an interface-range macro 2-136

debugging output of interface related activities 2-100

displaying description 2-529

displaying error-disabled state 2-533

displaying information when tunneling is enabled 2-610

displaying status 2-529

displaying traffic for a specific interface 2-520

entering interface configuration mode 2-205

executing a command on multiple ports in a range 2-208

selecting an interface to configure 2-205

setting a CoS value for Layer 2 packets 2-298

setting drop threshold for Layer 2 packets 2-299

setting the interface type 2-798

interface speed

configuring interface speed 2-773

interface transceiver

displaying diagnostic data 2-537

internal VLAN allocation

configuring 2-857

default setting 2-857

displaying allocation information 2-716

Internet Group Management Protocol

See IGMP

IP ARP

applying ARP ACL to VLAN 2-212

clearing inspection statistics 2-72

clearing status of log buffer 2-71

controlling packet logging 2-223

enabling dynamic inspection 2-221

limit rate of incoming requests 2-214

set per-port config trust state 2-218

showing status of dynamic ARP inspection 2-544

showing status of log buffer 2-547

IPC

debugging IPC activities 2-109

IP DHCP Snooping

See DHCP snooping

IP header validation

disabling 2-266

enabling 2-266

IP interfaces

displaying usability status 2-569

IP multicast

displaying multicast routing table information 2-575

IP phone and standard desktop

enabling Cisco-recommended features 2-327

IP Port Security

enabling 2-267

IP source binding

adding or deleting 2-263

displaying bindingstagging 2-580

IP source guard

debugging messages 2-112

displaying configuration and filters 2-581

enabling on DHCP snooping 2-267

IPv6 MLD

configuring queries 2-273, 2-275

configuring snooping last-listener-query-intervals 2-275

configuring snooping listener-message-suppression 2-277

configuring snooping robustness-variables 2-278

configuring tcn topology change notifications 2-280

counting snooping last-listener-queries 2-273

displaying information 2-586

displaying ports for a switch or VLAN 2-588

displaying querier information 2-589

enabling snooping 2-271

enabling snooping on a VLAN 2-281

ISSU

canceling process 2-283

configuring rollback timer 2-295

displaying capability 2-591

displaying client information 2-593

displaying compatibility matrix 2-595

displaying endpoint information 2-600

displaying entities 2-601

displaying FSM session 2-602

displaying messages 2-603

displaying negotiated 2-605

displaying rollback-timer 2-606

displaying session information 2-607

displaying software version 2-608

displaying state 2-608

forcing switchover to standby supervisor engine 2-293

initiating an automatic ISSU upgrade procedure 2-287

loading new image 2-289

starting process 2-291

stopping rollback timer 2-285

J

Jumbo frames

enabling jumbo frames 2-357

L

LACP

deselecting channeling protocol 2-56

enabling LACP on an interface 2-56

setting channeling protocol 2-56

lacp port-priority command 2-303

lacp system-priority command 2-304

Layer 2

displaying ACL configuration 2-619

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN interface 2-798

specifying a trunking VLAN interface 2-798

Layer 2 protocol ports

displaying 2-610

Layer 2 protocol tunneling error recovery 2-301

Layer 2 switching

enabling voice VLANs 2-791

modifying switching characteristics 2-791

Layer 2 traceroute

IP addresses 2-829

Layer 3 switching

displaying information about an adjacency table 2-456

displaying port status 2-535

displaying status of native VLAN tagging 2-535

link-status event messages

disabling

globally 2-305, 2-308

on an interface 2-306, 2-309

enabling

globally 2-305, 2-308

on an interface 2-306, 2-309

log buffer

show status 2-547

logging

controlling IP ARP packets 2-223

M

MAB, display information 2-616

MAB, enable and configure 2-311

mab command 2-311

MAC Access Control Lists

See MAC ACLs

MAC ACLs

defining extended MAC access list 2-313

displaying MAC ACL information 2-713

naming an ACL 2-313

MAC addresses

disabling MAC address learning per VLAN 2-320

MAC address filtering

configuring 2-324

disabling 2-324

enabling 2-324

MAC address learning on a VLAN, enabling 2-320

MAC address table

adding static entries 2-336

clearing dynamic entries 2-83, 2-85

displaying dynamic table entry information 2-626

displaying entry count 2-624

displaying information 2-620

displaying interface-based information 2-628

displaying multicast information 2-630

displaying notification information 2-632

displaying protocol-based information 2-634

displaying static table entry information 2-636

displaying the MAC address aging time 2-622

displaying VLAN-based information 2-639

enabling authentication bypass 2-157

enabling notifications 2-322

learning in the protocol buckets 2-317

removing static entries 2-336

mac-address-table aging-time command 2-316

mac address-table learning vlan command 2-320

MAC address tables

adding static entries 2-324

deleting secure or specific addresses 2-87

disabling IGMP snooping on static MAC addresses 2-324

removing static entries 2-324

mac-address-table static 2-324

MAC address unicast filtering

dropping unicast traffic 2-324

MAC authentication bypass (MAB), display information 2-616

MAC authorization bypass(MAB), enable and configure 2-311

macro

displaying descriptions 2-335

macro keywords

help strings 2-2

macros

adding a global description 2-335

cisco global 2-333

system-cpp 2-334

mapping secondary VLANs to MST instance 2-409

mapping VLAN(s) to an MST instance 2-202

match (class-map configuration) command 2-14, 2-139, 2-140, 2-141, 2-142, 2-339, 2-779, 2-781, 2-783, 2-785, 2-789

maximum transmission unit (MTU)

displaying the system MTU setting 2-704

setting the maximum Layer 2 payload size 2-822

MD5

verifying MD5 signature 2-843

message digest 5

See MD5

MFIB

clearing ip mfib counters 2-80

clearing ip mfib fastdrop 2-81

displaying all active MFIB routes 2-572

displaying MFIB fastdrop table entries 2-574

enabling IP MFIB fastdrops 2-260

MLD

configuring snooping last-listener-query-intervals 2-275

configuring snooping listener-message-suppression 2-277

configuring snooping robustness-variables 2-278

configuring topology change notifications 2-280

counting snooping last-listener-queries 2-273

enabling snooping 2-271

enabling snooping on a VLAN 2-281

MLD snooping

displaying 2-589

modes

access-group 2-6

show access-group interface 2-455, 2-672

switching between PVST+, MST, and Rapid PVST 2-750

See also command modes

module password clearing 2-67

module reset

resetting a module by toggling the power 2-194

--More-- prompt

filter 1-6

search 1-7

MST

designating the primary and secondary root 2-759

displaying MST protocol information 2-699

displaying region configuration information 2-699

displaying spanning tree information 2-699

entering MST configuration submode 2-753

setting configuration revision number 2-427

setting path cost and port priority for instances 2-751

setting the forward delay timer for all instances 2-755

setting the hello-time delay timer for all instances 2-756

setting the max-age timer for all instances 2-757

setting the MST region name 2-358

specifying the maximum number of hops 2-758

switching between PVST+ and Rapid PVST 2-750

using the MST configuration submode revision command 2-427

using the submode name command 2-358

MTU

displaying global MTU settings 2-704

multi-auth, setting 2-26

Multicase Listener Discovery

See MLD

multicast

counters 2-95

enabling storm control 2-778

multicast/unicast packets

prevent forwarding 2-797

Multicast Forwarding Information Base

See MFIB

multi-domain, setting 2-26

multiple-character patterns 1-8

Multiple Spanning Tree

See MST

N

native VLAN

controlling tagging of traffic 2-818

displaying ports eligible for native tagging 2-715

displaying ports eligible for tagging 2-715

enabling tagging on 802.1Q trunk ports 2-854

specifing the tagging of traffic 2-819

NetFlow

enabling NetFlow statistics 2-261

including infer fields in routing statistics 2-261

next-hop

displaying CEF VLAN information 2-549

no form of a command, using 1-6

NVRAM

debugging NVRAM activities 2-115

O

open access on a port, enabling 2-28

output

pattern searches 1-7

P

packet forwarding

prevent unknown packets 2-797

packet memory failure

direct switch action upon detection 2-143

packet memory test

bootup, displaying results 2-486, 2-488

ongoing, displaying results 2-490

PACL

access-group mode 2-6

paging prompt

see --More-- prompt

PAgP

clearing port channel information 2-86

debugging PAgP activity 2-116

deselecting channeling protocol 2-56

displaying port channel information 2-645

hot standby mode

returning to defaults 2-360

selecting ports 2-360

input interface of incoming packets

learning 2-359

returning to defaults 2-359

setting channeling protocol 2-56

parentheses 1-11

password

clearing on an intelligent line module 2-67

establishing enhanced password security 2-841

setting username 2-841

PM activities

debugging 2-119

disabling debugging 2-119

PoE policing

configure on an interface 2-396

PoE policing and monitoring

displaying status 2-671

police (percent) command 2-371

police (two rates) command 2-373, 2-375

police command 2-366

policing, configure PoE 2-396

policing and monitoring status

displaying PoE 2-671

policy maps

creating 2-379

marking 2-437

See also QoS, hierarchical policies

traffic classification

defining the class

defining trust states 2-832

port, dual-capable

selecting the connector 2-348

Port Aggregation Protocol

See PAgP

port-based authentication

displaying debug messages 2-105

displaying statistics and status 2-492

enabling 802.1X 2-161

host modes 2-154

manual control of authorization state 2-161

periodic re-authentication

enabling 2-164

re-authenticating 802.1X-enabled ports 2-163

switch-to-client frame-retransmission number 2-159

port channel

accessing 2-207

creating 2-207

displaying information 2-645

load distribution method

resetting to defaults 2-381

setting 2-381

port-channel standalone-disable command 2-383

port control, changing from unidirectional or bidirectional 2-19

port-control value, configuring 2-32

port range

executing 2-208

port security

debugging ports security 2-120

deleting secure or specific addresses 2-87

displaying settings for an interface or switch 2-656

enabling 2-803

filter source IP and MAC addresses 2-267

setting action upon security violation 2-803

setting the rate limit for bad packets 2-803

sticky port 2-803

Port Trust Device

displaying 2-675

power efficient-ethernet auto command 2-389

power inline four-pair forced command 2-393

power inline logging global command 2-395

power status

displaying inline power 2-663

displaying power status 2-663

power supply

configuring combined and redundant power on the Catalyst 4507R 2-384

configuring inline power 2-390

configuring power consumption 2-384

displaying the SEEPROM 2-514

setting inline power state 2-388

priority command 2-400

priority-queue command 2-96

Private VLAN

See PVLANs

privileged EXEC mode, summary 1-5

prompts

system 1-5

protocol tunneling

configuring encapsulation rate 2-301

disabling 2-296

displaying port information 2-610

enabling 2-296

setting a CoS value for Layer 2 packets 2-298

setting a drop threshold for Layer 2 packets 2-299

PVLANs

configuring isolated, primary, and community PVLANs 2-402

controlling tagging of native VLAN traffic 2-818

disabling sticky-ARP 2-264

displaying map information for VLAN SVIs 2-532

displaying PVLAN information 2-718

enabling interface configuration mode 2-798

enabling sticky-ARP 2-264

mapping VLANs to the same SVI 2-406

specifying host ports 2-798

specifying promiscuous ports 2-798

PVST+

switching between PVST and MST 2-750

Q

QoS

attaching a policy-map to an interface 2-428

automatic configuration 2-38

class maps

creating 2-61

defining the match criteria 2-339

clearing aggregate counters 2-89

configuring auto 2-38

defining a named aggregate policer 2-413

displaying aggregate policer information 2-673

displaying auto configuration 2-464

displaying class maps information 2-478

displaying configuration information 2-464

displaying configurations of policies 2-651

displaying policy map information 2-647, 2-654

displaying QoS information 2-672

displaying QoS map information 2-677

egress queue-sets

enabling the priority queue 2-96

hierarchical policies

average-rate traffic shaping on a class 2-450

bandwidth allocation for a class 2-42, 2-60

creating a service policy 2-431

marking 2-437

strict priority queueing (LLQ) 2-400

policy maps

creating 2-379

marking 2-437

traffic classifications

trust states 2-832

setting the trust state 2-413

specifying flow-based match criteria 2-342

Supervisor Engine 6-E

setting CoS 2-439

setting DSCP 2-442

setting precedence values 2-445

setting QoS group identifiers 2-448

QoS CoS

configuring for tunneled Layer 2 protocol packets 2-298

quality of service

See QoS

question command 1-1

queueing information

displaying 2-675

queue limiting

configuring packet limits 2-415

R

Rapid PVST

switching between PVST and MST 2-750

re-authenticating 802.1X-enabled ports 2-163

re-authentication

periodic 2-164

set the time 2-166

reauthentication, enabling 2-31

reboots

restoring bindings across 2-228

redundancy

accessing the main CPU 2-417

changing from active to standby supervisor engine 2-421

displaying information 2-679

displaying ISSU config-sync failure information 2-683

displaying redundancy facility information 2-679

displaying RF client list 2-679

displaying RF operational counters 2-679

displaying RF states 2-679

enabling automatic synchronization 2-41

forcing switchover to standby supervisor engine 2-421

mismatched command listing 2-419

set the mode 2-349

synchronizing the route processor configurations 2-336

remote SPAN

See RSPAN

renew commands

ip dhcp snooping database 2-425

resetting PVLAN trunk

setting switchport to trunk 2-798

retry failed authentiation, configuring 2-22

rj45 connector, selecting the connector 2-348

ROM monitor mode

summary 1-6

Route Processor Redundancy

See redundancy

RPF

disabling IPv4 exists-only checks 2-269

enabling IPv4 exists-only checks 2-269

RPR

set the redundancy mode 2-349

RSPAN

converting VLAN to RSPAN VLAN 2-424

displaying list 2-720

S

saving configuration changes 1-11

secure address, configuring 2-384

secure ports, limitations 2-804

server (AAA) alive actions, configuring 2-22

server (AAA) dead actions, configuring 2-22

service-policy command (policy-map class) 2-431

session classification, defining 2-26

set the redundancy mode 2-349

sfp connector, selecting the connector 2-348

shape command 2-450

show authentication interface command 2-459

show authentication registration command 2-459

show authentication sessions command 2-459

show commands

filtering parameters 1-7

searching and filtering 1-6

show platform commands 1-11

show energywise command 2-496

show lacp command 2-613

show mab command 2-616

Simple Network Management Protocol

See SNMP

single-character patterns

special characters 1-7

single-host, setting 2-26

slaveslot0

displaying information on the standby supervisor 2-690

slot0

displaying information about the system 2-692

SNMP

debugging spanning tree activities 2-122

ifIndex persistence

clearing SNMP ifIndex commands 2-727

compress SNMP ifIndex table format 2-736

disabling globally 2-735

disabling on an interface 2-729

enabling globally 2-735

enabling on an interface 2-729

traps

configuring to send when storm occurs 2-776

mac-notification 2-737

adding     1

snmp-server enable traps command 2-731

SPAN commands

configuring a SPAN session to monitor 2-351

displaying SPAN session information 2-703, 2-778

SPAN enhancements

displaying status 2-643

Spanning Tree Protocol

See STP

SPAN session

displaying session information 2-643

filter ACLs 2-351

specify encap type 2-351

turn off host learning based on ingress packets 2-351

special characters

anchoring, table 1-10

SSO 2-349

standard desktop

enabling Cisco-recommended features 2-325

standard desktop and Cisco IP phone

enabling Cisco-recommended features 2-327

sticky address, configuring 2-385

sticky-ARP

disabling on PVLANs 2-264

enabling on PVLANs 2-264

sticky port

deleting 2-87

enabling security 2-803

storm control

configuring for action when storm occurs 2-776

disabling suppression mode 2-503

displaying settings 2-702

enabling 2-776

enabling broadcast 2-776, 2-778

enabling multicast 2-776, 2-778

enabling suppression mode 2-503

enabling timer to recover from error disable 2-186

enabling unicast 2-776, 2-778

multicast, enabling 2-778

setting high and low levels 2-776

setting suppression level 2-503

STP

configuring link type for a port 2-748

configuring tunneling encapsulation rate 2-301

debugging all activities 2-122

debugging spanning tree activities 2-122

debugging spanning tree BackboneFast events 2-124

debugging spanning tree UplinkFast 2-127

detecting misconfiguration 2-745

displaying active interfaces only 2-694

displaying BackboneFast status 2-694

displaying bridge status and configuration 2-694

displaying spanning tree debug messages 2-122

displaying summary of interface information 2-694

enabling BPDU filtering by default on all PortFast ports 2-764

enabling BPDU filtering on an interface 2-741

enabling BPDU guard by default on all PortFast ports 2-766

enabling BPDU guard on an interface 2-743

enabling extended system ID 2-746

enabling loop guard as a default on all ports 2-749

enabling PortFast by default on all access ports 2-767

enabling PortFast mode 2-762

enabling protocol tunneling for 2-296

enabling root guard 2-747

enabling spanning tree BackboneFast 2-740

enabling spanning tree on a per VLAN basis 2-771

enabling spanning tree UplinkFast 2-769

setting an interface priority 2-768

setting drop threshold for 2-299

setting pathcost 2-744

setting the default pathcost calculation method 2-761

subinterface configuration mode, summary 1-6

SVI

creating a Layer 3 interface on a VLAN 2-210

switching characteristics

excluding from link-up calculation 2-795

modifying 2-795

returning to interfaces

capture function 2-795

switchport 2-819

switchport interfaces

displaying status of Layer 3 port 2-535

displaying status of native VLAN tagging 2-535

switch shim

debugging 2-125

disabling debugging 2-125

switch to router connection

enabling Cisco-recommended features 2-329

switch to switch connection

enabling Cisco-recommended features 2-331

switch virtual interface

See SVI

sw-vlan 2-128

system prompts 1-5

T

Tab key

command completion 1-1

tables

characters with special meaning 1-7

mac access-list extended subcommands 2-313

multipliers 1-9

relationship between duplex and speed commands 2-774

show cable-diagnostics tdr command output fields 2-469

show cdp neighbors detail field descriptions 2-477

show cdp neighbors field descriptions 2-476

show ip dhcp snooping command output 2-460, 2-616

show ip interface field descriptions 2-570

show policy-map control-plane field descriptions 2-650

show vlan command output fields 2-719

show vtp command output fields 2-724

special characters 1-9

special characters used for anchoring 1-10

speed command options 2-342, 2-774

valid interface types 2-205

TAC

displaying information useful to TAC 2-705

TCAM

debugging spanning tree activities 2-122

TDR

displaying cable diagnostic test results 2-468

test condition of copper cables 2-824

temperature readings

displaying information 2-500

timer information 2-504

traffic shaping

enable on an interface 2-452

trunk encapsulation

setting format 2-819

trunk interfaces

displaying trunk interfaces information 2-542

trust state

setting 2-218

tunnel ports

displaying information about Layer 2 protocol 2-610

TX queues

allocating bandwidth 2-834

returning to default values 2-834

setting priority to high 2-834

specifying burst size 2-834

specifying traffic rate 2-834

U

UDLD

displaying administrative and operational status 2-707

enabling by default on all fiber interfaces 2-836

enabling on an individual interface 2-838

preventing a fiber interface from being enabled 2-838

resetting all shutdown ports 2-840

setting the message timer 2-836

unicast

counters 2-95

Unidirectional Link Detection

See UDLD

unidirection port control, changing from bidirectional 2-19

unknown multicast traffic, preventing 2-797

unknown unicast traffic, preventing 2-797

user EXEC mode, summary 1-5

username

setting password and privilege level 2-841

V

VACLs

access-group mode 2-6

applying VLAN access maps 2-856

displaying VLAN access map information 2-713

specifying an action in a VLAN access map 2-13

specifying the match clause for a VLAN access-map sequence 2-337

using a VLAN filter 2-856

VLAN

applying an ARP ACL 2-212

configuring 2-845

configuring service policies 2-850

converting to RSPAN VLAN 2-424

displaying CEF information 2-549

displaying CEF next-hop information 2-549

displaying information on switch interfaces 2-560, 2-564

displaying information on VLAN switch interfaces 2-567

displaying information sorted by group IP address 2-560, 2-564

displaying IP address and version information 2-560, 2-564

displaying Layer 2 VLAN information 2-709

displaying statistical information 2-641

displaying VLAN information 2-711

enabling dynamic ARP inspection 2-221

enabling Explicit Host Tracking 2-251

enabling guest per-port 2-152

enabling guest VLAN supplicant 2-145, 2-153

entering VLAN configuration mode 2-850, 2-852

native frames

enabling tagging on all 802.1Q trunk ports 2-854

pruning the list for VTP 2-819

setting the list of allowed 2-819

VLAN Access Control Lists

See VACLs

VLAN access map

See VACLs

VLAN database

resetting 2-426

VLAN debugging

limiting output 2-103

VLAN link-up calculation

excluding a switch port 2-795

including a switch port 2-795

VLAN manager

debugging 2-128

disabling debugging 2-128

IOS file system error tests

debugging 2-129

disabling debugging 2-129

VLAN Query Protocol

See VQP

VLAN query protocol (VQPC)

debugging 2-135

VLANs

clearing

counters 2-91

clearing hardware logic 2-69

configuring

internal allocation scheme 2-857

displaying

internal VLAN allocation information 2-716

RSPAN VLANs 2-720

entering VLAN configuration mode 2-852

VMPS

configuring servers 2-861

reconfirming dynamic VLAN assignments 2-135, 2-859

voice VLANs

enabling 2-791

VoIP

configuring auto-QoS 2-38

VQP

per-server retry count 2-860

reconfirming dynamic VLAN assignments 2-135, 2-859

VTP

configuring the administrative domain name 2-865

configuring the device in VTP client mode 2-864

configuring the device in VTP server mode 2-868

configuring the device in VTP transparent mode 2-869

configuring tunnel encapsulation rate 2-301

creating a VTP domain password 2-866

displaying domain information 2-723

displaying statistics information 2-723

enabling protocol tunneling for 2-296

enabling pruning in the VLAN database 2-867

enabling VTP version 2 mode 2-870

modifying the VTP configuration storage file name 2-863

set drop threshold for 2-299

VTP protocol code

activating debug messages 2-132

deactivating debug messages 2-132

W

Webauth fallback, enabling 2-25