Index
Symbols
^ matches the beginning of a string 1-7
_ matches a comma (,), left brace ({), left parenthesis 1-7
? command 1-1
? matches 0 or 1 occurrence of a pattern 1-7
. matches any single character 1-7
( ) in commands 1-11
* matches 0 or more sequences of a pattern 1-7
+ matches 1 or more sequences of a pattern 1-7
$ matches the end of a string 1-7
Numerics
10-Gigabit Ethernet uplink
selecting 2-275
showing the mode 2-701, 2-704
802.1Q trunk ports and native VLANs 2-1127
802.1Q tunnel ports
configuring 2-1059
802.1S Multiple Spanning Tree
see MST
802.1X
configuring for multiple hosts 2-221
configuring for single host 2-221
configuring multiple domains 2-221
disabling port control 2-213
enabling port control 2-213
802.1X Critical Authentication
disabling on a port 2-215
disabling on a VLAN 2-218
EAPOL
disabling send success packets 2-216
enabling send success packets 2-216
enabling on a port 2-215
enabling on a VLAN 2-218
returning delay time to default setting 2-217
setting delay time on a port 2-217
802.1X critical authentication
configure parameters 2-25
802.1X critical recovery delay, configuring 2-25
802.1X Port Based Authentication
debugging 802.1X Port Based Authentication 2-152
displaying port based authentication 2-684
enabling accounting for authentication sessions 2-4
enabling authentication on the system 2-232
enabling guest VLAN 2-219
enabling guest VLAN supplicant 2-212, 2-220
enabling manual control of auth state 2-228
enabling periodic re-authentication of the client 2-231
initializing re-authentication of dot1x ports 2-230
initializing state machines 2-223
receive session termination message upon reboot 2-5
setting maximum number for EAP requests 2-226
setting the reauthentication timer 2-233
A
aaa authorization network command 2-214
abbreviating commands
context-sensitive help 1-1
Access Gateway Module
connecting to a module 2-22
connecting to a remote module 2-591
connecting to a specific remote module 2-620
access-group
displaying mac interface 2-825
show mode interface 2-555, 2-641, 2-911
access groups
IP 2-6, 2-72, 2-73, 2-208, 2-653
access lists
clearing an access template 2-106
defining ARP 2-21
displaying ARP information 2-645
See also ACLs, MAC ACLs, and VACLs
access maps
applying with VLAN filter 2-1129
access-node-identifier, setting for the switch 2-558
access-policies, applying using host-mode 2-30
ACLs
access-group mode 2-6
balancing hardware regions 2-12
capturing control packets 2-8
determining ACL hardware programming 2-10
disabling hardware statistics 2-261
displaying mac access-group interface 2-825
enabling hardware statisctics 2-261
using ACL naming conventions for MAC ACLs 2-406
action clause
specifying drop or forward action in a VACL 2-13
addresses, configuring a maximum 2-532
adjacency
debugging the adjacency table 2-143
disabling the debug facility 2-143
displaying information about the adjacency table 2-642
displaying IPC table entries 2-143
aggregate policer
displaying information 2-912
aging time
displaying MAC address aging time 2-828
MAC address table 2-409, 2-411
alarms
displaying operational status 2-688
alternation
description 1-10
anchoring
description 1-10
ancp, show multicast 2-644
ANCP client
port identifier 2-16
remote server 2-17
set router to become 2-18
ARP
access list, displaying detailed information 2-645
defining access-lists 2-21
ARP inspection
enforce certain types of checking 2-297
ARP packet
deny based on DHCP bindings 2-187
permit based on DHCP bindings 2-510
authentication 2-25, 2-32
changing the control-direction 2-23
configure actions for events
configuring the actions 2-26
configuring port-control 2-36
enabling reauthentication 2-35
enabling Webauth fallback 2-29
host-mode configuration 2-30
setting priority of methods 2-38
setting the timer 2-40
setting username 2-1114
specifying the order of methods 2-33
using an MD5-type encryption method 2-1114
verifying MD5 signature 2-1116
verifying the checksum for Flash memory 2-1116
authentication control-direction command 2-23
authentication critical recovery delay command 2-25
authentication event command 2-26
authentication fallback command 2-29
authentication host-mode 2-30
authentication methods, setting priority 2-38
authentication methods, specifying the order of attempts 2-33
authentication open command 2-32
authentication order command 2-33
authentication periodic command 2-35
authentication port-control command 2-36
authentication priority command 2-38
authentication timer, setting 2-40
authentication timer command 2-40
authentication violation command 2-42
auth fail VLAN
enable on a port 2-212
set max number of attempts 2-211
Auth Manager
configuring
authentication timer 2-40
authorization state
enabling manual control 2-228
authorization state of a controlled port 2-228
automatic installation
displaying status 2-651
automatic medium-dependent interface crossover
See Auto-MDIX
Auto-MDIX
disabling 2-457
enabling 2-457
auto-negotiate interface speed
example 2-1029
auto-QoS
configuring for VoIP 2-64
displaying configuration 2-652
auto qos srnd4 command 2-52
auto security command 2-72
auto security-port 2-73
average-packet-size (netflow-lite monitor submode) command 2-75
B
baby giants
displaying the system MTU setting 2-952
setting the maximum Layer 2 payload size 2-1086
BackboneFast
displaying debugging messages 2-174
displaying spanning tree status 2-935
enabling debugging 2-174
bandwidth command 2-77
bindings
store for DHCP snooping 2-309
BOOT environment variable
displaying information 2-657
bootflash
displaying information 2-655
BPDUs
debugging spanning tree activities 2-172
bridge protocol data units
See BPDUs
broadcast suppression level
configuring 2-1030, 2-1032
enabling 2-1030, 2-1032
C
cable diagnostics
TDR
displaying test results 2-658
testing conditions of copper cables 2-1090
call home
displaying information 2-660
e-mailing output 2-85
entering configuration submode 2-80
executing 2-85
manually send test message 2-88
receiving information 2-83
sending alert group message 2-86
submitting information 2-83
call home destination profiles
displaying 2-662
Catalyst 4507R 2-530
CDP
configuring tunneling encapsulation rate 2-391
displaying
neighbor information 2-665
enabling protocol tunneling for 2-386
set drop threshold for 2-389
CEF
displaying next-hop information 2-741
displaying VLAN configuration information 2-741
chassis
displaying
chassis MAC address ranges 2-822
current and peak traffic meter readings 2-822
percentage of backplane utilization 2-822
switching clock failure recovery mode 2-822
circuit-id
setting for an interface 2-560
circuit-id, setting for an interface VLAN range 2-561
cisco-desktop
macro apply 2-420
Cisco Express Forwarding
See CEF
cisco-phone
macro apply 2-422
cisco-router
macro apply 2-424
cisco-switch
macro apply 2-426
CISP
See Client Information Signalling Protocol
cisp enable command 2-93
class maps
creating 2-97
defining the match criteria 2-450
monitor capture 2-463
clear commands
clearing Gigabit Ethernet interfaces 2-104
clearing IGMP group cache entries 2-113
clearing interface counters 2-99
clearing IP access lists 2-106, 2-107
clearing IP ARP inspection statistics VLAN 2-108
clearing IP DHCP snooping database statistics 2-112
clearing MFIB counters and routes 2-116
clearing MFIB fastdrop entries 2-117
clearing PAgP channel information 2-126
clearing QoS aggregate counters 2-130
clearing VLAN interfaces 2-105
clear ip wccp command 2-118
clear netflow-lite exporter statistics command 2-123
clear netflow-lite monitor statistics interface command 2-124
clear nmsp statistics command 2-125
Client Information Signalling Protocol 2-214
Client Information Signalling Protocol, enabling 2-93
CLI string search
anchoring 1-10
expressions 1-7
filtering 1-6
multiple-character patterns 1-8
multipliers 1-9
parentheses for recall 1-11
searching outputs 1-6
single-character patterns 1-7
using 1-6
command 2-463
command modes
accessing privileged EXEC mode 1-5
exiting 1-5
understanding user EXEC and configuration modes 1-5
condition interface
debugging interface-related activities 2-145
condition vlan
debugging VLAN output 2-148
configuration, saving 1-11
configuring
root as secondary 2-1013
configuring a SPAN session to monitor
limit SPAN source traffic 2-476
configuring critical recovery 2-25
configuring forward delay 2-1009
configuring root as primary 2-1013
CoPP
attaching
policy map to control plane 2-618
displaying
policy-map class information 2-886
entering configuration mode 2-135
removing
service policy from control plane 2-618
CoS
assigning to Layer 2 protocol packets 2-388
cos (netflow-lite exporter submode) command 2-137
counter command 2-139
counters
clearing interface counters 2-99
critical authentication, configure 802.1X parameters 2-25
critical recovery, configuring 802.1X parameter 2-25
D
DAI
clear statistics 2-108
DBL
displaying qos dbl 2-913
debug commands
debugging backup events 2-144
debugging DHCP snooping events 2-157
debugging DHCP snooping messages 2-158
debugging EtherChannel/PAgP/shim 2-153
debugging IPC activity 2-156
debugging IP DHCP snooping security messages 2-159
debugging NVRAM activities 2-163
debugging PAgP activities 2-164
debugging port manager activities 2-167
debugging spanning tree activities 2-172
debugging spanning tree backbonefast 2-174
debugging spanning tree UplinkFast 2-177
debugging supervisor redundancy 2-171
debugging VLAN manager activities 2-178
displaying monitor activity 2-161
displaying the adjacency table 2-143
enabling debug dot1x 2-152
enabling debugging messages for ISL VLAN IDs 2-181
enabling debugging messages for VTP 2-182
enabling debugging of UDLD activity 2-183
enabling switch shim debugging 2-175
enabling VLAN manager file system error tests 2-179
limiting debugging output for VLANs 2-148
limiting interface debugging output 2-145
limiting output for debugging standby state changes 2-146
shortcut to the debug condition interface 2-155
debugging
activity monitoring 2-161
DHCP snooping events 2-157
DHCP snooping packets 2-158
IPC activities 2-156
IP DHCP snooping security packets 2-159
NVRAM activities 2-163
PAgP activities 2-164
PAgP shim 2-153
PM activities 2-167
PPPoE Intermediate Agent 2-169
spanning tree BackboneFast events 2-174
spanning tree switch shim 2-175
spanning tree UplinkFast events 2-177
VLAN manager activities 2-178
VLAN manager IOS file system error tests 2-179
VTP protocol debug messages 2-182
debug nmsp command 2-162
debug spanning tree switch 2-175
debug sw-vlan vtp 2-182
default form of a command, using 1-6
destination (netflow-lite exporter submode) command 2-189
detect mechanism, causes 2-248
device-sensor filter-list command 2-199
device-sensor filter-list dhcp command 2-202
device-sensor filter-spec command 2-204
device-sensor notify command 2-206
DHCP
clearing database statistics 2-112
DHCP bindings
configuring bindings 2-307
deny ARP packet based on matches 2-187
permit ARP packet based on matches 2-510
DHCP snooping
clearing binding entries 2-109
clearing database 2-111
displaying binding table 2-743
displaying configuration information 2-742
displaying status of DHCP database 2-747
displaying status of error detection 2-691
enabling DHCP globally 2-306
enabling IP source guard 2-348
enabling on a VLAN 2-316
enabling option 82 2-311, 2-313
enabling option-82 2-318
enabling rate limiting on an interface 2-314
enabling trust on an interface 2-315
establishing binding configuration 2-307
renew binding database 2-593
store generated bindings 2-309
diagnostic fpga soft-error recover command 2-208
diagnostic test
bootup packet memory 2-678
displaying attributes 2-672
display module-based results 2-674
running 2-210
show results for TDR 2-658
testing conditions of copper cables 2-1090
displaying error disable recovery 2-693
displaying inline power status 2-900
displaying monitoring activity 2-161
displaying PoE policing and monitoring status 2-908
displaying SEEPROM information
GBIC 2-705
displaying SPAN session information 2-952, 2-1032
document conventions 1-20
document organization 1-19
DoS
CoPP
attaching policy map to control plane 2-618
displaying policy-map class information 2-886
entering configuration mode 2-135
removing service policy from control plane 2-618
entering
CoPP configuration mode 2-135
DOS attack
protecting system’s resources 2-292
dot1x credentials (global configuration) command 2-214
drop threshold, Layer 2 protocol tunneling 2-389
dscp (netflow-lite exporter submode command 2-235
DSCP rewrite for IP packets
enable 2-581
DTP flap
error detection for 2-248
dual-active detection (virtual switch) command 2-237
dual-active recovery ip address command 2-240
dual-capable port
selecting a connector 2-459
duplex mode
configuring autonegotiation on an interface 2-242
configuring full duplex on an interface 2-242
configuring half duplex on an interface 2-242
dynamic ARP inspection
error detection for 2-248
preventing 2-292
Dynamic Host Configuration Protocol
See DHCP
E
EAP
restarting authentication process 2-226
EDCS-587028 2-646, 2-822
EIGRP (Enhanced IGRP)
filters
routing updates, preventing 2-507
enabling
debugging for UDLD 2-183
voice VLANs 2-1046, 2-1047, 2-1049, 2-1051, 2-1052
enabling open access 2-32
environmental
alarms 2-688
displaying information 2-688
status 2-688
temperature 2-688
epm access control command 2-244
erase a file 2-245
errdisable detect cause command 2-248
error disable detection 2-248
clearing error disable on an interface 2-101
enabling error disable detection 2-101, 2-248
enabling per-VLAN on BPDU guard 2-248
error-disabled state
displaying 2-725
error disable recovery
configuring recovery mechanism variables 2-251
displaying recovery timer information 2-693
enabling ARP inspection timeout 2-251
specifying recovery cause 2-251
EtherChannel
assigning interfaces to EtherChannel groups 2-89
debugging EtherChannel 2-153
debugging PAgP shim 2-153
debugging spanning tree activities 2-172
displaying information for a channel 2-695
PAgP
error detection for 2-248
removing interfaces from EtherChannel groups 2-89
EtherChannel guard
detecting STP misconfiguration 2-999
Explicit Host Tracking
clearing the database 2-115
enabling per-VLAN 2-330
exporter (netflow-lite monitor submode) command 2-256
expressions
matching multiple expression occurrences 1-9
multiple-character patterns 1-8
multiplying pattern occurrence 1-11
single-character patterns 1-7
Extensible Authentication Protocol
See EAP
F
fallback profile, specifying 2-29
field replaceable unit (FRU)
displaying status information 2-688
filters
EIGRP
routing updates, preventing 2-507
Flash memory file system
displaying file system information 2-655
verifying checksum 2-1116
flow control
configuring a gigabit interface for pause frames 2-258
displaying per-interface statistics for flow control 2-699
G
GBIC
displaying SEEPROM information 2-705
generic-error-message, setting for the switch 2-558
Gigabit Ethernet interface
clearing the hardware logic 2-104
Gigabit Ethernet uplink
selecting 2-275
showing the mode 2-701, 2-704
global configuration mode
using 1-5
H
hardware module
resetting a module by toggling the power 2-268
hardware statistics
disabling 2-261
enabling 2-261
hardware uplink
selecting the mode 2-275
showing the mode 2-701, 2-704
helper addresses, IP 2-762
hot standby protocol
debugging 2-146
disabling debugging 2-146
limiting output 2-146
hw-module beacon command 2-262
hw-module module start command 2-263
hw-module module stop command 2-265
hw-module system max-port-num-mode 1/2 command 2-269
hw-module system max-port-num-mode 1/2 switch 1/2/all command 2-270
hw-module uplink mode command 2-273
I
identifier-string, setting for the switch 2-558
ID mapping, creating an ANCP client 2-16
IDPROMs
displaying SEEPROM information
chassis 2-705
clock module 2-705
fan trays 2-705
module 2-705
mux buffer 2-705
power supplies 2-705
supervisor engine 2-705
ifIndex persistence
clearing SNMP ifIndex commands 2-981
compress SNMP ifIndex table format 2-988
disabling globally 2-987
disabling on an interface 2-983
enabling globally 2-987
enabling on an interface 2-983
IGMP
applying filters for host joining on Layer 2 interfaces 2-320
clearing IGMP group cache entries 2-113
configuring frequency for IGMP host-query messages 2-323
creating an IGMP profile 2-322
displaying IGMP interface configuration information 2-749
displaying profiles 2-751
setting maximum group numbers 2-321
IGMP profiles
displaying 2-751
IGMP snooping
clearing the EHT database 2-115
configuring a Layer 2 interface as a group member 2-336
configuring a Layer 2 interface as a multicast router 2-334
configuring a static VLAN interface 2-336
displaying multicast information 2-758
displaying VLAN information 2-752, 2-756, 2-759
enabling 2-325
enabling immediate-leave processing 2-332
enabling on a VLAN 2-329
enabling per-VLAN Explicit Host Tracking 2-330
Immediate-Leave feature, MVR 2-485
informs
enabling 2-985
inline power
displaying inline power status 2-900
In Service Software Upgrade
See ISSU
inspection log
clearing log buffer 2-107
interface
displaying suppressed multicast bytes 2-716, 2-718
interface (virtual switch) command 2-283
interface capabilities
displaying 2-714
interface configuration mode
summary 1-5
interface link
display cable disconnect time 2-722
interfaces
configuring dot1q tunnel ports 2-1059
creating an interface-range macro 2-186
debugging output of interface related activities 2-145
displaying description 2-721
displaying error-disabled state 2-725
displaying information when tunneling is enabled 2-810
displaying status 2-721
displaying traffic for a specific interface 2-711
entering interface configuration mode 2-281, 2-283
executing a command on multiple ports in a range 2-286
selecting an interface to configure 2-281, 2-283
setting a CoS value for Layer 2 packets 2-388
setting drop threshold for Layer 2 packets 2-389
setting the interface type 2-1059
interface speed
configuring interface speed 2-1027
interface transceiver
displaying diagnostic data 2-729
internal VLAN allocation
configuring 2-1132
default setting 2-1132
displaying allocation information 2-966
Internet Group Management Protocol
See IGMP
invalid GBIC
error detection for 2-248
IP address of remote ANCP server, setting 2-17
IP ARP
applying ARP ACL to VLAN 2-290
clearing inspection statistics 2-108
clearing status of log buffer 2-107
controlling packet logging 2-301
enabling dynamic inspection 2-299
limit rate of incoming requests 2-292
set per-port config trust state 2-296
showing status of dynamic ARP inspection 2-736
showing status of log buffer 2-739
IPC
debugging IPC activities 2-156
IP DHCP Snooping
See DHCP snooping
IP header validation
disabling 2-347
enabling 2-347
IP interfaces
displaying usability status 2-761
IP multicast
displaying multicast routing table information 2-767
IP multicast addresses 2-482
ip multicast multipath command 2-340
IP packets
enable DSCP rewrite 2-581
IP phone and standard desktop
enabling Cisco-recommended features 2-422
IP Port Security
enabling 2-348
IP source binding
adding or deleting 2-344
displaying bindingstagging 2-772
IP source guard
debugging messages 2-159
displaying configuration and filters 2-773
enabling on DHCP snooping 2-348
IPv4 statistics, enabling collection 2-139
IPv6 MLD
configuring queries 2-365, 2-367
configuring snooping last-listener-query-intervals 2-367
configuring snooping listener-message-suppression 2-369
configuring snooping robustness-variables 2-370
configuring tcn topology change notifications 2-372
counting snooping last-listener-queries 2-365
displaying information 2-786
displaying ports for a switch or VLAN 2-788
displaying querier information 2-789
enabling snooping 2-363
enabling snooping on a VLAN 2-373
IPv6 statistics, enabling collection 2-139
ip wccp check services all command 2-355
ip wccp command 2-352
ip wccp group-address command 2-352
ip wccp group-list command 2-352
ip wccp group-listen command 2-357
ip wccp password command 2-352, 2-354
ip wccp redirect command 2-359
ip wccp redirect exclude in command 2-361
ip wccp redirect-list command 2-352
ISSU
canceling process 2-375
configuring rollback timer 2-385
displaying capability 2-791
displaying client information 2-793
displaying compatibility matrix 2-795
displaying endpoint information 2-800
displaying entities 2-801
displaying FSM session 2-802
displaying messages 2-803
displaying negotiated 2-805
displaying rollback-timer 2-806
displaying session information 2-807
displaying software version 2-808
displaying state 2-808
forcing switchover to standby supervisor engine 2-383
loading new image 2-379
starting process 2-381
stopping rollback timer 2-377
J
Jumbo frames
enabling jumbo frames 2-481
L
LACP
deselecting channeling protocol 2-91
enabling LACP on an interface 2-91
setting channeling protocol 2-91
lacp port-priority command 2-393
lacp system-priority command 2-394
Layer 2
displaying ACL configuration 2-825
Layer 2 interface type
specifying a nontrunking, nontagged single VLAN interface 2-1059
specifying a trunking VLAN interface 2-1059
Layer 2 protocol ports
displaying 2-810
Layer 2 protocol-tunnel
error detection for 2-248
Layer 2 protocol tunneling error recovery 2-391
Layer 2 switching
enabling voice VLANs 2-1046, 2-1047, 2-1049, 2-1051, 2-1052
modifying switching characteristics 2-1046, 2-1047, 2-1049, 2-1051, 2-1052
Layer 2 traceroute
IP addresses 2-1095
Layer 3 interface, assign counters 2-139
Layer 3 switching
displaying information about an adjacency table 2-642
displaying port status 2-727
displaying status of native VLAN tagging 2-727
license right-to-use activate command 2-395
license right-to-use deactivate command 2-396
link flap
error detection for 2-248
link-status event messages
disabling
globally 2-398, 2-401
on an interface 2-399, 2-402
enabling
globally 2-398, 2-401
on an interface 2-399, 2-402
LLDP
enabling power negotiation 2-397
lldp tlv-select power-management command 2-397
log buffer
show status 2-739
logging
controlling IP ARP packets 2-301
loopback error
detection for 2-248
M
MAB, display information 2-822
MAB, enable and configure 2-404
mab command 2-404
MAC Access Control Lists
See MAC ACLs
MAC ACLs
defining extended MAC access list 2-406
displaying MAC ACL information 2-962
naming an ACL 2-406
mac-address (virtual switch) command 2-409
MAC addresses
disabling MAC address learning per VLAN 2-415
displaying
notification settings 2-244, 2-785, 2-836
MAC address filtering
configuring 2-419
disabling 2-419
enabling 2-419
MAC address learning on a VLAN, enabling 2-415
MAC address table
adding static entries 2-447
clearing dynamic entries 2-120, 2-122
configuring aging time 2-409, 2-411
displaying dynamic table entry information 2-832
displaying entry count 2-830
displaying information 2-826
displaying interface-based information 2-834
displaying multicast information 2-837
displaying notification information 2-839
displaying protocol-based information 2-841
displaying static table entry information 2-843
displaying the MAC address aging time 2-828
displaying VLAN-based information 2-846
enabling authentication bypass 2-224
enabling notifications 2-417
learning in the protocol buckets 2-412
removing static entries 2-447
mac address-table learning vlan command 2-415
MAC address tables
adding static entries 2-419
deleting secure or specific addresses 2-127
disabling IGMP snooping on static MAC addresses 2-419
removing static entries 2-419
mac-address-table static 2-419
MAC address unicast filtering
dropping unicast traffic 2-419
MAC authentication bypass (MAB), display information 2-822
MAC authorization bypass(MAB), enable and configure 2-404
macro
displaying descriptions 2-446
macro auto global processing command 2-428, 2-430, 2-433, 2-435, 2-437, 2-439, 2-441, 2-443, 2-848
macro auto monitor command 2-440
macro keywords
help strings 2-2
macros
adding a global description 2-446
cisco global 2-444
system-cpp 2-445
mapping secondary VLANs to MST instance 2-574
mapping VLAN(s) to an MST instance 2-279
match (class-map configuration) command 2-14, 2-191, 2-193, 2-195, 2-197, 2-450, 2-577, 2-1034, 2-1036, 2-1038, 2-1040, 2-1044
maximum transmission unit (MTU)
displaying the system MTU setting 2-952
setting the maximum Layer 2 payload size 2-1086
MD5
verifying MD5 signature 2-1116
message digest 5
See MD5
MFIB
clearing ip mfib counters 2-116
clearing ip mfib fastdrop 2-117
displaying all active MFIB routes 2-764
displaying MFIB fastdrop table entries 2-766
enabling IP MFIB fastdrops 2-339
MLD
configuring snooping last-listener-query-intervals 2-367
configuring snooping listener-message-suppression 2-369
configuring snooping robustness-variables 2-370
configuring topology change notifications 2-372
counting snooping last-listener-queries 2-365
enabling snooping 2-363
enabling snooping on a VLAN 2-373
MLD snooping
displaying 2-789
mode, MVR 2-482
modes
access-group 2-6
show access-group interface 2-555, 2-641, 2-911
switching between PVST+, MST, and Rapid PVST 2-1004
See also command modes
module password clearing 2-103
module reset
resetting a module by toggling the power 2-268
monitor capture {access-list | class-map} command 2-462
monitor capture mycap match command 2-469
monitor capture start command 2-471
--More-- prompt
filter 1-6
search 1-7
MST
designating the primary and secondary root 2-1013
displaying MST protocol information 2-940
displaying region configuration information 2-940
displaying spanning tree information 2-940
entering MST configuration submode 2-1007
setting configuration revision number 2-610
setting path cost and port priority for instances 2-1005
setting the forward delay timer for all instances 2-1009
setting the hello-time delay timer for all instances 2-1010
setting the max-age timer for all instances 2-1011
setting the MST region name 2-488
specifying the maximum number of hops 2-1012
switching between PVST+ and Rapid PVST 2-1004
using the MST configuration submode revision command 2-610
using the submode name command 2-488
MTU
displaying global MTU settings 2-952
multi-auth, setting 2-30
Multicase Listener Discovery
See MLD
multicast
enabling storm control 2-1032
show ancp 2-644
multicast/unicast packets
prevent forwarding 2-1058
Multicast Forwarding Information Base
See MFIB
multicast group address, MVR 2-485
multicast VLAN, MVR 2-482
multicast VLAN registration
See MVR
multi-domain, setting 2-30
multiple-character patterns 1-8
Multiple Spanning Tree
See MST
MVR
configuring 2-482
configuring interfaces 2-485
displaying 2-868
displaying interface information 2-869
members, displaying 2-871
mvr (global configuration) command 2-482
mvr (interface configuration) command 2-485
mvr vlan group command 2-486
N
native VLAN
controlling tagging of traffic 2-1079
displaying ports eligible for native tagging 2-964
displaying ports eligible for tagging 2-964
enabling tagging on 802.1Q trunk ports 2-1127
specifing the tagging of traffic 2-1080
NetFlow
enabling NetFlow statistics 2-342
including infer fields in routing statistics 2-342
netflow-lite exporter command 2-489
netflow-lite monitor command 2-491
netflow-lite sampler command 2-493
next-hop
displaying CEF VLAN information 2-741
nmsp attachment suppress command 2-496
nmsp command 2-495
no form of a command, using 1-6
NVRAM
debugging NVRAM activities 2-163
O
open access on a port, enabling 2-32
options timeout (netflow-lite exporter submode) command 2-254, 2-497
output
pattern searches 1-7
P
packet counters, display for PPPoE Intermediate Agent 2-909
packet counters (statistics)
clear for PPPoE Intermediate Agent 2-129
packet forwarding
prevent unknown packets 2-1058
packet memory failure
direct switch action upon detection 2-209
packet memory test
bootup, displaying results 2-678, 2-680
ongoing, displaying results 2-682
packet-offset (netflow-lite sampler submode) command 2-499
packet rate (netflow-lite sampler submode) command 2-501
packet-section size (netflow-lite sampler submode command 2-503
PACL
access-group mode 2-6
paging prompt
see --More-- prompt
PAgP
clearing port channel information 2-126
debugging PAgP activity 2-164
deselecting channeling protocol 2-91
displaying port channel information 2-881, 2-883
hot standby mode
returning to defaults 2-506
selecting ports 2-506
input interface of incoming packets
learning 2-505
returning to defaults 2-505
setting channeling protocol 2-91
parentheses 1-11
password
clearing on an intelligent line module 2-103
establishing enhanced password security 2-1114
setting username 2-1114
PBR
displaying route maps 1-20
redistributing route maps 1-20
PM activities
debugging 2-167
disabling debugging 2-167
PoE
error detection for 2-248
PoE policing
configure on an interface 2-543
PoE policing and monitoring
displaying status 2-908
police (percent) command 2-517
police (two rates) command 2-519, 2-521
police command 2-512
policing, configure PoE 2-543
policing and monitoring status
displaying PoE 2-908
Policy Based Routing
See PBR
policy maps
creating 2-525
marking 2-622
See also QoS, hierarchical policies
traffic classification
defining the class
defining trust states 2-1102
port, dual-capable
selecting the connector 2-459
Port Aggregation Protocol
See PAgP
port-based authentication
displaying debug messages 2-152
displaying statistics and status 2-684
enabling 802.1X 2-228
host modes 2-221
manual control of authorization state 2-228
periodic re-authentication
enabling 2-231
re-authenticating 802.1X-enabled ports 2-230
switch-to-client frame-retransmission number 2-226
port channel
accessing 2-285
creating 2-285
displaying information 2-881, 2-883
load distribution method
resetting to defaults 2-527
setting 2-527
port-channel standalone-disable command 2-529
port control, changing from unidirectional or bidirectional 2-23
port-control value, configuring 2-36
port range
executing 2-286
port security
debugging ports security 2-168
deleting secure or specific addresses 2-127
displaying settings for an interface or switch 2-894
enabling 2-1064
filter source IP and MAC addresses 2-348
setting action upon security violation 2-1064
setting the rate limit for bad packets 2-1064
sticky port 2-1064
Port Trust Device
displaying 2-914
port types, MVR 2-485
power efficient-ethernet auto command 2-535
power inline four-pair forced command 2-540
power inline logging global command 2-542
power negotiation through LLDP, enabling 2-397
power status
displaying inline power 2-900
displaying power status 2-900
power supply
configuring combined and redundant power on the Catalyst 4507R 2-530
configuring inline power 2-536
configuring power consumption 2-530
displaying the SEEPROM 2-705
setting inline power state 2-534
PPPoE Discovery
enable vendor-tag stripping on packetsPPPoE Server
enable vendor-tag stripping on Discovery packets 2-564
PPPoE Discovery packets, limit rate arriving on an interfsce 2-562
PPPoE Intermediate Agent
clear statistics (packet counters) 2-129
debugging 2-169
pppoe intermediate-agent
enable intermediate agent on a switch 2-554
enable on an interface VLAN range 2-557
enable PPPoE Intermediate Agent on an interface 2-555
enable vendor-tag stripping of Discovery packets 2-564
format-type (global) 2-558
limit rate of PPPoE Discovery packets 2-562
set circuit-id or remote-id for an interface 2-560
set circuit-id or remote-id for an interface VLAN range 2-561
set trust configuration on an interface 2-562, 2-563
PPPoE Intermediate Agent, display configuration and statistics (packet counters) 2-909
priority command 2-565
priority-queue command 2-141
Private VLAN
See PVLANs
privileged EXEC mode, summary 1-5
prompts
system 1-5
protocol tunneling
configuring encapsulation rate 2-391
disabling 2-386
displaying port information 2-810
enabling 2-386
setting a CoS value for Layer 2 packets 2-388
setting a drop threshold for Layer 2 packets 2-389
PVLANs
configuring isolated, primary, and community PVLANs 2-567
controlling tagging of native VLAN traffic 2-1079
disabling sticky-ARP 2-345
displaying map information for VLAN SVIs 2-724
displaying PVLAN information 2-970
enabling interface configuration mode 2-1059
enabling sticky-ARP 2-345
mapping VLANs to the same SVI 2-571
specifying host ports 2-1059
specifying promiscuous ports 2-1059
PVST+
switching between PVST and MST 2-1004
Q
QoS
account Layer 2 encapsulation 2-579
attaching a policy-map to an interface 2-613
automatic configuration 2-44, 2-48, 2-52, 2-56, 2-60, 2-64, 2-67
class maps
creating 2-97
defining the match criteria 2-450
clearing aggregate counters 2-130
configuring auto 2-64
defining a named aggregate policer 2-581
displaying aggregate policer information 2-912
displaying auto configuration 2-652
displaying class maps information 2-668
displaying configuration information 2-652
displaying configurations of policies 2-889
displaying policy map information 2-885, 2-892
displaying QoS information 2-911
displaying QoS map information 2-916
egress queue-sets
enabling the priority queue 2-141
enabling global configuration mode 2-56, 2-578
enabling per-VLAN QoS for a Layer 2 interface 2-583
hierarchical policies
average-rate traffic shaping on a class 2-635
bandwidth allocation for a class 2-77, 2-96
creating a service policy 2-616
marking 2-622
strict priority queueing (LLQ) 2-565
policy maps
creating 2-525
marking 2-622
traffic classifications
trust states 2-1102
setting the trust state 2-581
specifying flow-based match criteria 2-453
Supervisor Engine 6-E
setting CoS 2-624
setting DSCP 2-627
setting precedence values 2-630
setting QoS group identifiers 2-633
QoS CoS
configuring for tunneled Layer 2 protocol packets 2-388
quality of service
See QoS
querytime, MVR 2-482
question command 1-1
queueing information
displaying 2-914
queue limiting
configuring packet limits 2-583
R
Rapid PVST
switching between PVST and MST 2-1004
re-authenticating 802.1X-enabled ports 2-230
re-authentication
periodic 2-231
set the time 2-233
reauthentication, enabling 2-35
reboots
restoring bindings across 2-307
receiver ports, MVR 2-485
recovery mechanism
display 2-102, 2-693
redundancy
accessing the main CPU 2-585
changing from active to standby supervisor engine 2-589
displaying information 2-918
displaying ISSU config-sync failure information 2-922
displaying redundancy facility information 2-918
displaying RF client list 2-918
displaying RF operational counters 2-918
displaying RF states 2-918
enabling automatic synchronization 2-74
forcing switchover to standby supervisor engine 2-589
mismatched command listing 2-587
set the mode 2-460
synchronizing the route processor configurations 2-447
related documentation 1-20
remote-id, setting for an interface 2-560
remote-id, setting for an interface VLAN range 2-561
remote SPAN
See RSPAN
renew commands
ip dhcp snooping database 2-593
rep admin vlan command 2-594
rep block port command 2-595
rep lsl-age-timer command 2-599
rep preempt delay command 2-601
rep preempt segment command 2-603
rep segment command 2-604
rep stcn command 2-607
resetting PVLAN trunk
setting switchport to trunk 2-1059
retry failed authentiation, configuring 2-26
rj45 connector, selecting the connector 2-459
ROM monitor mode
summary 1-6
Route Processor Redundancy
See redundancy
router, set to become ANCP client 2-18
RPF
disabling IPv4 exists-only checks 2-350
enabling IPv4 exists-only checks 2-350
RPR
set the redundancy mode 2-460
RSPAN
converting VLAN to RSPAN VLAN 2-592
displaying list 2-972
S
sampler (netflow-lite monitor submode) command 2-611
saving configuration changes 1-11
secure address, configuring 2-530
secure ports, limitations 2-1065
server (AAA) alive actions, configuring 2-26
server (AAA) dead actions, configuring 2-26
service-policy command (policy-map class) 2-616
session classification, defining 2-30
set the redundancy mode 2-460
sfp connector, selecting the connector 2-459
shape command 2-635
shell trigger command 2-639, 2-928
show ancp multicast 2-644
show authentication interface command 2-646
show authentication registration command 2-646
show authentication sessions command 2-646
show auto security command 2-653
show capture command 2-860
show commands
filtering parameters 1-7
searching and filtering 1-6
show platform commands 1-11
show device-sensor cache command 2-670
show interfaces (virtual switch) command 2-714
show interfaces counters (virtual switch) command 2-718
show ipv6 snooping counters command 2-785
show ip wccp command 2-776
show ip wccp detail command 2-776
show ip wccp view command 2-776
show license right-to-use command 2-816
show mab command 2-822
show mac address-table learning command 2-244, 2-836
show macro auto monitor device command 2-851, 2-853, 2-855
show monitor capture command 2-862, 2-864
show monitor capture file command 2-864
show mvr command 2-868
show mvr interface command 2-869
show mvr members command 2-871
show netflow-lite exporter command 2-873
show netflow-lite monitor command 2-875
show netflow-lite sampler command 2-877
show nmsp command 2-878
show pagp dual-active (virtual switch) command 2-883
show switch virtual (virtual switch) command 2-946
show vlan group command 2-965
show vlan mapping command 2-967
show vslp (virtual switch) command 2-975
Simple Network Management Protocol
See SNMP
single-character patterns
special characters 1-7
single-host, setting 2-30
slaveslot0
displaying information on the standby supervisor 2-931
slot0
displaying information about the system 2-933
SNMP
debugging spanning tree activities 2-172
ifIndex persistence
clearing SNMP ifIndex commands 2-981
compress SNMP ifIndex table format 2-988
disabling globally 2-987
disabling on an interface 2-983
enabling globally 2-987
enabling on an interface 2-983
informs
disabling 2-985
enabling 2-985
traps
configuring to send when storm occurs 2-1030
disabling 2-985
enabling 2-985
mac-notification
adding 2-989
removing 2-989
source (netflow-lite exporter submode) command 2-990
source ports, MVR 2-485
SPAN commands
configuring a SPAN session to monitor 2-476
displaying SPAN session information 2-952, 2-1032
SPAN enhancements
displaying status 2-860
Spanning Tree Protocol
See STP
SPAN session
displaying session information 2-860
filter ACLs 2-476
specify encap type 2-476
turn off host learning based on ingress packets 2-476
special characters
anchoring, table 1-10
SSO 2-460
standard desktop
enabling Cisco-recommended features 2-420
standard desktop and Cisco IP phone
enabling Cisco-recommended features 2-422
sticky address, configuring 2-531
sticky-ARP
disabling on PVLANs 2-345
enabling on PVLANs 2-345
sticky port
deleting 2-127
enabling security 2-1064
storm control
configuring for action when storm occurs 2-1030
disabling suppression mode 2-691
displaying settings 2-943
enabling 2-1030
enabling broadcast 2-1030, 2-1032
enabling multicast 2-1030, 2-1032
enabling suppression mode 2-691
enabling timer to recover from error disable 2-251
enabling unicast 2-1030, 2-1032
multicast, enabling 2-1032
setting high and low levels 2-1030
setting suppression level 2-691
STP
configuring link type for a port 2-1002
configuring tunneling encapsulation rate 2-391
debugging all activities 2-172
debugging spanning tree activities 2-172
debugging spanning tree BackboneFast events 2-174
debugging spanning tree UplinkFast 2-177
detecting misconfiguration 2-999
displaying active interfaces only 2-935
displaying BackboneFast status 2-935
displaying bridge status and configuration 2-935
displaying spanning tree debug messages 2-172
displaying summary of interface information 2-935
enabling BPDU filtering by default on all PortFast ports 2-1018
enabling BPDU filtering on an interface 2-995
enabling BPDU guard by default on all PortFast ports 2-1020
enabling BPDU guard on an interface 2-997
enabling extended system ID 2-1000
enabling loop guard as a default on all ports 2-1003
enabling PortFast by default on all access ports 2-1021
enabling PortFast mode 2-1016
enabling protocol tunneling for 2-386
enabling root guard 2-1001
enabling spanning tree BackboneFast 2-994
enabling spanning tree on a per VLAN basis 2-1025
enabling spanning tree UplinkFast 2-1023
setting an interface priority 2-1022
setting drop threshold for 2-389
setting pathcost 2-998
setting the default pathcost calculation method 2-1015
subinterface configuration mode, summary 1-6
SVI
creating a Layer 3 interface on a VLAN 2-288
switch (virtual switch) command 2-1046
switch convert mode (virtual switch) command 2-1047
switching characteristics
excluding from link-up calculation 2-1056
modifying 2-1056
returning to interfaces
capture function 2-1056
switchport 2-1080
switchport interfaces
displaying status of Layer 3 port 2-727
displaying status of native VLAN tagging 2-727
switchport vlan mapping command 2-1084
switch shim
debugging 2-175
disabling debugging 2-175
switch to router connection
enabling Cisco-recommended features 2-424
switch to switch connection
enabling Cisco-recommended features 2-426
switch virtual domain (virtual switch) command 2-1049
switch virtual interface
See SVI
switch virtual link (virtual switch) command 2-1051
sw-vlan 2-178
system prompts 1-5
T
Tab key
command completion 1-1
tables
characters with special meaning 1-7
mac access-list extended subcommands 2-406
multipliers 1-9
relationship between duplex and speed commands 2-1028
show cable-diagnostics tdr command output fields 2-659
show cdp neighbors detail field descriptions 2-667
show cdp neighbors field descriptions 2-666
show ip dhcp snooping command output 2-647, 2-822
show ip interface field descriptions 2-762
show policy-map control-plane field descriptions 2-888
show vlan command output fields 2-971
show vtp command output fields 2-979
special characters 1-9
special characters used for anchoring 1-10
speed command options 2-453, 2-1028
valid interface types 2-281, 2-283
TAC
displaying information useful to TAC 2-953
TCAM
debugging spanning tree activities 2-172
TDR
displaying cable diagnostic test results 2-658
test condition of copper cables 2-1090
temperature readings
displaying information 2-688
template data timeout (netflow-lite exporter submode) command 2-1088
timer information 2-693
traffic monitor
display status 2-822
traffic shaping
enable on an interface 2-637
transport udp (netflow-lite exporter submode) command 2-1098
transport udp load-share (netflow-lite exporter submode) command 2-1100
traps, enabling 2-985
trunk encapsulation
setting format 2-1080
trunk interfaces
displaying trunk interfaces information 2-734
trunk port, configuring VLAN mapping 2-1084
trunk ports, display VLAN mapping information 2-967
trust configuration, setting on an interface 2-562, 2-563
trust state
setting 2-296
ttl (netflow-lite exporter submode) command 2-1104
tunnel ports
displaying information about Layer 2 protocol 2-810
TX queues
allocating bandwidth 2-1106
returning to default values 2-1106
setting priority to high 2-1106
specifying burst size 2-1106
specifying traffic rate 2-1106
U
UDLD
displaying administrative and operational status 2-955
enabling by default on all fiber interfaces 2-1108
enabling on an individual interface 2-1110
preventing a fiber interface from being enabled 2-1110
resetting all shutdown ports 2-1112
setting the message timer 2-1108
Unidirectional Link Detection
See UDLD
unidirection port control, changing from bidirectional 2-23
unknown multicast traffic, preventing 2-1058
unknown unicast traffic, preventing 2-1058
user EXEC mode, summary 1-5
username
setting password and privilege level 2-1114
V
VACLs
access-group mode 2-6
applying VLAN access maps 2-1129
displaying VLAN access map information 2-962
specifying an action in a VLAN access map 2-13
specifying the match clause for a VLAN access-map sequence 2-448
using a VLAN filter 2-1129
VLAN
applying an ARP ACL 2-290
configuring 2-1118
configuring service policies 2-1123
converting to RSPAN VLAN 2-592
displaying CEF information 2-741
displaying CEF next-hop information 2-741
displaying information on switch interfaces 2-752, 2-756
displaying information on VLAN switch interfaces 2-759
displaying information sorted by group IP address 2-752, 2-756
displaying IP address and version information 2-752, 2-756
displaying Layer 2 VLAN information 2-958
displaying statistical information 2-858
displaying VLAN information 2-960
enabling dynamic ARP inspection 2-299
enabling Explicit Host Tracking 2-330
enabling guest per-port 2-219
enabling guest VLAN supplicant 2-212, 2-220
entering VLAN configuration mode 2-1123, 2-1125
native frames
enabling tagging on all 802.1Q trunk ports 2-1127
pruning the list for VTP 2-1080
setting the list of allowed 2-1080
VLAN, create or modify a group 2-1130
VLAN Access Control Lists
See VACLs
VLAN access map
See VACLs
VLAN database
resetting 2-609
VLAN debugging
limiting output 2-148
vlan group command 2-1130
VLAN groups, display VLANs mapped 2-965
VLAN link-up calculation
excluding a switch port 2-1056
including a switch port 2-1056
VLAN manager
debugging 2-178
disabling debugging 2-178
IOS file system error tests
debugging 2-179
disabling debugging 2-179
VLAN mapping
configuring 2-1084
displaying 2-967
VLAN mapping, configure on trunk port 2-1084
VLAN mapping on trunk ports, display information 2-967
VLAN Query Protocol
See VQP
VLAN query protocol (VQPC)
debugging 2-185
VLANs
clearing
counters 2-133
clearing hardware logic 2-105
configuring
internal allocation scheme 2-1132
displaying
internal VLAN allocation information 2-966
RSPAN VLANs 2-972
entering VLAN configuration mode 2-1125
VMPS
configuring servers 2-1136
reconfirming dynamic VLAN assignments 2-185, 2-1134
voice VLANs
enabling 2-1052
VoIP
configuring auto-QoS 2-64
VQP
per-server retry count 2-1135
reconfirming dynamic VLAN assignments 2-185, 2-1134
vrf (netflow-lite exporter submode) command 2-1138
VTP
configuring the administrative domain name 2-1143
configuring the device in VTP client mode 2-1142
configuring the device in VTP server mode 2-1146
configuring the device in VTP transparent mode 2-1147
configuring tunnel encapsulation rate 2-391
creating a VTP domain password 2-1144
displaying domain information 2-978
displaying statistics information 2-978
enabling protocol tunneling for 2-386
enabling pruning in the VLAN database 2-1145
enabling VTP version 2 mode 2-1148
modifying the VTP configuration storage file name 2-1141
set drop threshold for 2-389
VTP protocol code
activating debug messages 2-182
deactivating debug messages 2-182
W
Webauth fallback, enabling 2-29