The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
A
aaa accounting dot1x command 2-1
aaa authentication dot1x command 2-3
AAA methods 2-3
access control entries
access control lists
access groups
IP 2-147
MAC, displaying 2-523
matching for QoS classification 2-283
access list, IPv6 2-216
access mode 2-682
access ports 2-682
ACLs
as match criteria for QoS classes 2-283
deny 2-88
displaying 2-398
for non-IP protocols 2-261
IP 2-147
on Layer 2 interfaces 2-147
permit 2-320
action command 2-5
address aliasing 2-303
aggregate policers
applying 2-332
creating 2-328
displaying 2-558
QoS 2-330
aggregate-port learner 2-309
alarm-contact command 2-7
alarm-contact status, displaying 2-431
allowed VLANs 2-698
archive download-sw command 2-9
archive tar command 2-12
archive upload-sw command 2-15
arp (boot loader) command A-2
arp access-list command 2-17
attaching policy maps to interfaces 2-381
authorization state of controlled port 2-103
autonegotiation of duplex mode 2-115
B
backup interfaces
configuring 2-675
displaying 2-453
bandwidth, configuring for QoS 2-19
bandwidth command 2-19
boot (boot loader) command A-3
boot config-file command 2-22
boot enable-break command 2-23
boot helper command 2-24
boot helper-config file command 2-25
booting
Cisco IOS image 2-28
displaying environment variables 2-403
interrupting 2-23
manually 2-26
boot loader
accessing A-1
booting
Cisco IOS image A-3
helper image 2-24
directories
creating A-18
displaying a list of A-8
removing A-22
displaying
available commands A-13
memory heap utilization A-14
version A-29
environment variables
described A-23
displaying settings A-23
location of A-24
setting A-23
unsetting A-27
files
copying A-6
deleting A-7
displaying a list of A-8
displaying the contents of A-5, A-19, A-26
renaming A-20
file system
formatting A-11
initializing flash A-10
running a consistency check A-12
prompt A-1
resetting the system A-21
boot manual command 2-26
boot private-config-file command 2-27
boot system command 2-28
BPDU filtering, for spanning tree 2-620, 2-658
BPDU guard, for spanning tree 2-622, 2-658
broadcast storm control 2-668
bundling characteristics, UNI 2-123
burst bytes, in QoS policers 2-324, 2-328
C
cat (boot loader) command A-5
CBWFQ, configuring 2-19
CDP, enabling protocol tunneling for 2-241
CFM 2-308
CFM as OAM protocol 2-308
channel-group command 2-29
channel-protocol command 2-33
child policy maps 2-383
class-based traffic shaping 2-396
class-based weighted fair queuing
class command 2-35
class-map command 2-37
class-map configuration mode 2-37
class maps
creating 2-37
defining the match criteria 2-284
displaying 2-407
matching in 2-37
class of service
clear ip arp inspection log command 2-39
clear ip arp inspection statistics command 2-40
clear ipc command 2-43
clear ipv6 dhcp conflict command 2-44
clear l2protocol-tunnel counters command 2-45
clear lacp command 2-46
clear logging onboard command 2-47
clear mac address-table command 2-48, 2-49
clear policer cpu uni-eni counters command 2-51
clear port-security command 2-52
clear spanning-tree counters command 2-55
clear spanning-tree detected-protocols command 2-56
clear vmps statistics command 2-58
command modes defined 1-1
committed information rate in QoS policers 2-323, 2-328
configuration files
password recovery disable considerations A-1
specifying the name 2-22, 2-27
configuring multiple interfaces 2-143
conform-action command 2-59
control-plane policer 2-51
control-plane policer information, displaying 2-559
control-plane security 2-334
control plane statistics, clearing 2-51
copy (boot loader) command A-6
copy logging onboard module command 2-61
CoS
as match criteria for QoS groups 2-284
for QoS classification 2-385
setting value in policy maps 2-385
CoS value, assigning to Layer 2 protocol packets 2-244
CPU ASIC statistics, displaying 2-408
CPU protection policers, displaying C-26
cpu traffic qos cos command 2-63
cpu traffic qos dscp command 2-67
cpu traffic qos precedence command 2-72
cpu traffic qos qos-group command 2-75
D
DC power supply 2-343
debug backup command B-2
debug dot1x command B-3
debug etherchannel command B-4
debug interface command B-7
debug ip dhcp snooping command B-8
debug ip igmp filter command B-9
debug ip igmp max-groups command B-10
debug ip igmp snooping command B-11
debug ip sla error twamp connection command B-12
debug ip sla error twamp control reflector command B-14
debug ip sla error twamp control server command B-16
debug ip sla error twamp session command B-18
debug ip sla trace twamp connection command B-20
debug ip sla trace twamp control reflector command B-22
debug ip sla trace twamp control server command B-24
debug ip sla trace twamp session command B-26
debug ip verify source packet command B-28
debug lacp command B-29
debug mac-notification command B-30
debug matm command B-31
debug matm move update command B-32
debug monitor command B-33
debug mvrdbg command B-34
debug nvram command B-35
debug pagp command B-36
debug platform acl command B-37
debug platform backup interface command B-39
debug platform cfm command B-38
debug platform cpu-queues command B-40
debug platform dot1x command B-42
debug platform etherchannel command B-43
debug platform forw-tcam command B-44
debug platform ip arp inspection command B-45
debug platform ipc command B-54
debug platform ip dhcp command B-46
debug platform ip igmp snooping command B-47
debug platform ip multicast command B-49
debug platform ip source-guard command B-51
debug platform led command B-55
debug platform matm command B-56
debug platform messaging application command B-57
debug platform phy command B-58
debug platform pm command B-60
debug platform policer cpu uni-eni command B-62
debug platform port-asic command B-63
debug platform port-security command B-64
debug platform qos-acl-tcam command B-65
debug platform qos-manager command B-66
debug platform remote-commands command B-67
debug platform rep command B-68
debug platform resource-manager command B-69
debug platform snmp command B-70
debug platform span command B-71
debug platform supervisor-asic command B-72
debug platform sw-bridge command B-73
debug platform tcam command B-74
debug platform udld command B-76
debug platform vlan command B-77
debug pm command B-78
debug port-security command B-80
debug qos-manager command B-81
debug spanning-tree bpdu command B-84
debug spanning-tree bpdu-opt command B-85
debug spanning-tree command B-82
debug spanning-tree mstp command B-86
debug spanning-tree switch command B-88
debug sw-vlan command B-90
debug sw-vlan ifs command B-91
debug sw-vlan notification command B-92
debug udld command B-94
debug vqpc command B-96
default policer configuration
NNIs C-29
UNIs C-27
define interface-range command 2-77
delete (boot loader) command A-7
delete command 2-79
deny (ARP access-list configuration) command 2-80
deny (IPv6) command 2-82
deny command 2-88
detect mechanism, causes 2-116
DHCP snooping
accepting untrusted packets from edge switch 2-172
enabling
on a VLAN 2-178
trust on an interface 2-176
error recovery timer 2-118
rate limiting 2-175
DHCP snooping binding database
binding file, configuring 2-168
bindings
adding 2-166
deleting 2-166
displaying 2-475
clearing database agent statistics 2-41
database agent, configuring 2-168
displaying
binding entries 2-475
database agent status 2-477, 2-479
renewing 2-358
diagnostic monitor command 2-91
diagnostic schedule test command 2-93
diagnostic start test command 2-95
differentiated service code point
Digital Optical Monitoring
dir (boot loader) command A-8
directories, deleting 2-79
DoM
displaying supported transceivers 2-465, 2-610, 2-611
domains, CFM 2-308
dot1x default command 2-97
dot1x host-mode command 2-98
dot1x initialize command 2-100
dot1x max-req command 2-101, 2-102
dot1x port-control command 2-103
dot1x re-authenticate command 2-105
dot1x reauthentication command 2-106
dot1x supplicant force-multicast command 2-107
dot1x system-auth-control command 2-108
dot1x test eapol-capable command 2-109
dot1x test timeout command 2-110
dot1x timeout command 2-111
dot1x violation-mode command 2-113
dropping packets, with ACL matches 2-5
drop threshold, Layer 2 protocol tunneling 2-241
DSCP
as match criteria for QoS groups 2-285, 2-291
for QoS traffic marking 2-387
setting in policy maps 2-387
dual IPv4 and IPv6 templates 2-315
dual-purpose uplink ports, selecting the type 2-296
duplex command 2-114
dynamic-access ports
configuring 2-673
restrictions 2-674
dynamic ARP inspection
ARP ACLs
apply to a VLAN 2-152
define 2-17
deny packets 2-80
display 2-402
permit packets 2-313
clear
log buffer 2-39
statistics 2-40
display
ARP ACLs 2-402
configuration and operating state 2-470
log buffer 2-470
statistics 2-470
trust state and rate limit 2-470
enable per VLAN 2-161
error detection for 2-116
error recovery timer 2-118
log buffer
clear 2-39
configure 2-156
display 2-470
rate-limit incoming ARP packets 2-154
statistics
clear 2-40
display 2-470
trusted interface state 2-158
type of packet logged 2-162
validation checks 2-159
Dynamic Host Configuration Protocol (DHCP)
E
EAP-request/identity frame
maximum number to send 2-102
response time before retransmitting 2-111
E-LMI
enabling 2-121
mapping 2-123
environment variables, displaying 2-403
errdisable detect cause command 2-116
errdisable recovery command 2-118
error conditions, displaying 2-435
error disable detection 2-116
error-disabled interfaces, displaying 2-453
EtherChannel
assigning Ethernet interface to channel group 2-29
creating port-channel logical interface 2-141
debug EtherChannel/PAgP, display B-4
debug platform-specific events, display B-43
displaying 2-439
enabling Layer 2 protocol tunneling for
LACP 2-242
PAgP 2-242
UDLD 2-242
interface information, displaying 2-453
LACP
clearing channel-group information 2-46
debug messages, display B-29
displaying 2-510
modes 2-29
port priority for hot-standby ports 2-245
restricting a protocol 2-33
system priority 2-247
load-distribution methods 2-339
PAgP
aggregate-port learner 2-309
clearing channel-group information 2-50
debug messages, display B-36
displaying 2-554
error detection for 2-116
error recovery timer 2-118
learn method 2-309
modes 2-29
physical-port learner 2-309
priority of interface for transmitted traffic 2-311
Ethernet controller, internal register display 2-410
ethernet evc command 2-120
ethernet lmi ce-vlan map command 2-121, 2-123
ethernet lmi command 2-121
ethernet lmi global command 2-121
Ethernet Local Management Interface
ethernet loopback interface configuration command 2-125
ethernet loopback privileged EXEC command 2-128
ethernet oam remote-failure command 2-130
Ethernet service
debugging B-5
displaying 2-444
Ethernet service instance 2-377
Ethernet service interfaces 2-447
Ethernet statistics, collecting 2-373
Ethernet UNI configuration 2-132
ethernet uni id command 2-134
Ethernet virtual connections
EVC configuration mode 2-120
EVCs 2-120
and VLANs 2-132
service instances 2-377
UNI counts 2-720
EVC service
point-to-multipoint 2-720
point-to-point 2-720
exceed-action command 2-135
extended-range VLANs
and allowed VLAN list 2-698
configuring 2-726
extended system ID for STP 2-628
external alarms, configuring 2-7
F
failure logging data
clearing 2-47
copying 2-61
fan information, displaying 2-431
files, deleting 2-79
flash_init (boot loader) command A-10
Flex Links
configuring 2-675
configuring preferred VLAN 2-677
displaying 2-453
flowcontrol command 2-137
format (boot loader) command A-11
forwarding packets, with ACL matches 2-5
forwarding results, display C-8
frame forwarding information, displaying C-8
front-end controller counter and status information C-10
fsck (boot loader) command A-12
G
global configuration mode 1-2, 1-3
H
hardware ACL statistics 2-398
health-monitoring diagnostic testing 2-91
help (boot loader) command A-13
host connection, port configuration 2-681
host ports, private VLANs 2-685
hw-module module logging onboard command 2-139
I
IEEE 802.1ag Connectivity Fault Management
IEEE 802.1Q trunk ports and native VLANs 2-731
IEEE 802.1Q tunnel ports
configuring 2-682
displaying 2-427
limitations 2-683
IEEE 802.1x
and switchport modes 2-683
violation error recovery 2-118
See also port-based authentication
IGMP filters
applying 2-181
debug messages, display B-9
IGMP groups, setting maximum 2-183
IGMP maximum groups, debugging B-10
IGMP profiles
creating 2-185
displaying 2-482
IGMP snooping
adding ports as a static member of a group 2-200
displaying 2-483, 2-487, 2-489
enabling 2-187
enabling the configurable-leave timer 2-189
enabling the Immediate-Leave feature 2-197
flooding query count 2-195
interface topology change notification behavior 2-196
multicast table 2-485
querier 2-191
query solicitation 2-195
report suppression 2-193
switch topology change notification behavior 2-195
images
Immediate-Leave feature, MVR 2-305
immediate-leave processing 2-197
Immediate-Leave processing, IPv6 2-237
input policy maps
and ACL classification 2-283
and aggregate policers 2-330
commands not supported in 2-337
configuration guidelines 2-337
interface command 2-145
interface configuration mode 1-2, 1-4
interface port-channel command 2-141
interface range command 2-143
interface-range macros 2-77
interfaces
assigning Ethernet interface to channel group 2-29
configuring 2-114
configuring multiple 2-143
creating port-channel logical 2-141
debug messages, display B-7
disabling 2-605
displaying the MAC address table 2-535
restarting 2-605
interface speed, configuring 2-666
internal registers, displaying 2-410, 2-417
Internet Group Management Protocol
invalid GBIC
error detection for 2-116
error recovery timer 2-118
ip address command 2-150
IP addresses, setting 2-150
IP address matching 2-281
ip arp inspection filter vlan command 2-152
ip arp inspection limit command 2-154
ip arp inspection log-buffer command 2-156
ip arp inspection trust command 2-158
ip arp inspection validate command 2-159
ip arp inspection vlan command 2-161
ip arp inspection vlan logging command 2-162
IP DHCP snooping
ip dhcp snooping binding command 2-166
ip dhcp snooping command 2-165
ip dhcp snooping database command 2-168
ip dhcp snooping information option allow-untrusted command 2-172
ip dhcp snooping information option command 2-170
ip dhcp snooping information option format remote-id command 2-174
ip dhcp snooping limit rate command 2-175
ip dhcp snooping trust command 2-176
ip dhcp snooping verify command 2-177
ip dhcp snooping vlan command 2-178
ip dhcp snooping vlan information option format-type circuit-id string command 2-179
ip igmp filter command 2-181
ip igmp max-groups command 2-183, 2-210, 2-212
ip igmp profile command 2-185
ip igmp snooping command 2-187
ip igmp snooping last-member-query-interval command 2-189
ip igmp snooping querier command 2-191
ip igmp snooping report-suppression command 2-193
ip igmp snooping tcn command 2-195
ip igmp snooping tcn flood command 2-196
ip igmp snooping vlan immediate-leave command 2-197
ip igmp snooping vlan mrouter command 2-198
ip igmp snooping vlan static command 2-200
IP multicast addresses 2-302
IP precedence, as match criteria for QoS groups 2-287
ip sla responder twamp command 2-202
ip sla server twamp command 2-204
ip source binding command 2-206
IP source guard
disabling 2-214
displaying
binding entries 2-496
configuration 2-497
enabling 2-214
static IP source bindings 2-206
IP source guard, displaying dynamic binding entries 2-475
ip ssh command 2-208
IPv6 access list, deny conditions 2-82
ipv6 access-list command 2-216
ipv6 address dhcp command 2-218
ipv6 dhcp client request vendor command 2-219
ipv6 dhcp ping packets command 2-220
ipv6 dhcp pool command 2-221
ipv6 dhcp server command 2-224
ipv6 mld snooping command 2-226
ipv6 mld snooping last-listener-query count command 2-228
ipv6 mld snooping last-listener-query-interval command 2-230
ipv6 mld snooping listener-message-suppression command 2-232
ipv6 mld snooping robustness-variable command 2-233
ipv6 mld snooping tcn command 2-235
ipv6 mld snooping vlan command 2-237
IPv6 SDM template 2-374
ipv6 traffic-filter command 2-239
ip verify source command 2-214
J
jumbo frames
L
l2protocol-tunnel command 2-241
l2protocol-tunnel cos command 2-244
LACP
lacp port-priority command 2-245
lacp system-priority command 2-247
Layer 2 mode, enabling 2-671
Layer 2 protocol ports, displaying 2-508
Layer 2 protocol-tunnel
error detection for 2-116
error recovery timer 2-118
Layer 2 protocol tunnel counters 2-45
Layer 2 protocol tunneling error recovery 2-242
Layer 2 traceroute
IP addresses 2-713
MAC addresses 2-710
Layer 3 mode, enabling 2-671
line configuration mode 1-2, 1-4
Link Aggregation Control Protocol
link flap
error detection for 2-116
error recovery timer 2-118
link state group command 2-249
link state track command 2-251
load-distribution methods for EtherChannel 2-339
location (global configuration) command 2-252
location (interface configuration) command 2-254
logging event command 2-256
logging file command 2-257
logical interface 2-141
loopback error
detection for 2-116
recovery timer 2-118
loop guard, for spanning tree 2-630, 2-634
M
mac access-group command 2-259
MAC access-groups, displaying 2-523
MAC access list configuration mode 2-261
mac access-list extended command 2-261
MAC access lists 2-88
MAC addresses
disabling MAC address learning per VLAN 2-264
displaying
aging time 2-529
all 2-527
dynamic 2-533
MAC address-table move updates 2-538
notification settings 2-537, 2-540
number of addresses in a VLAN 2-531
per interface 2-535
per VLAN 2-544
static 2-542
static and dynamic entries 2-525
dynamic
aging time 2-263
deleting 2-48
displaying 2-533
enabling MAC address notification 2-268
enabling MAC address-table move update 2-266
matching 2-281
static
adding and removing 2-270
displaying 2-542
dropping on an interface 2-271
tables 2-527
MAC address notification, debugging B-30
mac address-table aging-time 2-259, 2-281
mac address-table aging-time command 2-263
mac address-table learning command 2-264
mac address-table move update command 2-266
mac address-table notification command 2-268
mac address-table static command 2-270
mac address-table static drop command 2-271
macro description command 2-275
macro global command 2-276
macro global description command 2-278
macro name command 2-279
macros
adding a description 2-275
adding a global description 2-278
applying 2-276
creating 2-279
displaying 2-556
specifying parameter values 2-276
tracing 2-276
maintenance end points 2-720
mapping tables, QoS 2-706
maps
class
creating 2-37
VLAN
creating 2-729
defining 2-281
displaying 2-599
match access-group command 2-283
match cos command 2-284
match ip dscp command 2-285
match ip precedence command 2-287
match qos-group command 2-289
match vlan command 2-291
maximum transmission unit
mdix auto command 2-294
ME 34000EG-2CS switch policers C-26
ME 3400E-24TS switch policers C-26, C-27
ME 3400EG-12CS switch policers C-26
media-type command 2-296
memory (boot loader) command A-14
mgmt_clr (boot loader) command A-15
mgmt_init (boot loader) command A-16, A-17
mkdir (boot loader) command A-18
MLD snooping
configuring queries 2-228, 2-230
configuring topology change notification 2-235
enabling 2-226
MLD snooping on a VLAN, enabling 2-237
mode, MVR 2-302
modes, commands 1-1
monitor session command 2-298
more (boot loader) command A-19
MSTP
interoperability 2-56
link type 2-632
MST region
aborting changes 2-638
applying changes 2-638
configuration name 2-638
configuration revision number 2-639
current or pending display 2-639
MST configuration mode 2-638
VLANs-to-instance mapping 2-638
path cost 2-640
protocol mode 2-636
restart protocol migration process 2-56
root port
loop guard 2-630
preventing from becoming designated 2-630
restricting which can be root 2-630
root guard 2-630
root switch
affects of extended system ID 2-628
interval between BDPU messages 2-645
interval between hello BPDU messages 2-643, 2-654
max-age 2-645
maximum hop count before discarding BPDU 2-647
port priority for selection of 2-649
primary or secondary 2-654
switch priority 2-652
state changes
blocking to forwarding state 2-661
enabling BPDU filtering 2-620, 2-658
enabling BPDU guard 2-622, 2-658
enabling Port Fast 2-658, 2-661
forward-delay time 2-642
length of listening and learning states 2-642
rapid transition to forwarding 2-632
shutting down Port Fast-enabled ports 2-658
state information display 2-577
MTU
configuring size 2-704
displaying global setting 2-586
multicast group address, MVR 2-305
multicast groups, MVR 2-303
Multicast Listener Discovery
multicast router learning method 2-198
multicast router ports, configuring 2-198
multicast router ports, IPv6 2-237
multicast storm control 2-668
multicast VLAN, MVR 2-303
multicast VLAN registration
multiple hosts on authorized port 2-98
Multiple Spanning Tree Protocol
multiplexing, UNI 2-132
MVR
and address aliasing 2-303
configuring 2-302
configuring interfaces 2-305
debug messages, display B-34
displaying 2-548
displaying interface information 2-550
members, displaying 2-552
mvr (global configuration) command 2-302
mvr (interface configuration) command 2-305
mvr vlan group command 2-306
N
native VLANs 2-698
native VLAN tagging 2-731
network node interface 2-341
nonegotiate, speed 2-666, 2-667
non-IP protocols
denying 2-88
forwarding 2-320
non-IP traffic access lists 2-261
non-IP traffic forwarding
denying 2-88
permitting 2-320
normal-range VLANs 2-726
no vlan command 2-726
O
OAM PDUs 2-130
OAM protocol 2-308
oam protocol cfm svlan command 2-308
on-board failure logging, displaying 2-519
on-board failure logging, enabling 2-139
online diagnostics
enabling
scheduling 2-93
global configuration mode
clearing test-based testing schedule 2-93
setting test-based testing 2-93
setting up test-based testing 2-93
removing scheduling 2-93
scheduled switchover
disabling 2-93
enabling 2-93
setting test interval 2-93
starting testing 2-95
online diagnostic tests, displaying results 2-423
online diagnostic tests, starting 2-95
operation, administration, and maintenance protocol
output policy maps
and QoS group classification 2-289
and traffic shaping 2-396
commands not supported in 2-337
configuration guidelines 2-337
priority in 2-346
queue limit in 2-353
P
PAgP
pagp learn-method command 2-309
pagp port-priority command 2-311
parent policy maps 2-383
password-recovery mechanism, enabling and disabling 2-379
permit (ARP access-list configuration) command 2-313
permit (IPv6) command 2-315
permit command 2-320
per-VLAN spanning-tree plus
physical-port learner 2-309
PID, displaying 2-469
PIM-DVMRP, as multicast router learning method 2-198
police
multiple conform actions for a class 2-59
multiple exceed actions for a class 2-135
multiple violate actions for a class 2-724
with priority 2-323
police aggregate command 2-332
police command 2-323
policer aggregate command 2-328
policer configuration
default for NNIs C-29
default for UNIs C-27
policer cpu uni command 2-334
policers
for CPU protection 2-334
individual 2-323
policy-map class, configuring multiple actions 2-59, 2-135, 2-724
policy-map class configuration mode 2-35
policy-map class police configuration mode 2-59, 2-326
policy-map command 2-336
policy-map configuration mode 2-336
policy maps
and CoS classification 2-284
and DSCP classification 2-285
and IP precedence classification 2-287
and policing 2-326
applying 2-381
applying to an interface 2-337, 2-381, 2-393
child 2-383
creating 2-336
displaying 2-562
hierarchical 2-383
parent 2-383
policy maps (continued)
policers
for a single class 2-323
for multiple classes 2-328, 2-332, 2-334, 2-383
setting priority 2-345
setting QoS group identifier 2-391
traffic classification, defining 2-35
traffic marking
setting CoS values 2-385
setting DSCP values 2-387
setting IP precedence values 2-389
Port Aggregation Protocol
port-based authentication
AAA method list 2-3
configuring violation modes 2-113
debug messages, display B-3
enabling 802.1x
globally 2-108
per interface 2-103
host modes 2-98
IEEE 802.1x AAA accounting methods 2-1
initialize an interface 2-100, 2-110
manual control of authorization state 2-103
multiple hosts on authorized port 2-98
periodic re-authentication
enabling 2-106
time between attempts 2-111
quiet period between failed authentication exchanges 2-111
re-authenticating 802.1x-enabled ports 2-105
resetting configurable 802.1x parameters 2-97
switch-to-authentication server retransmission time 2-111
switch-to-client frame-retransmission number2-101to 2-102
switch-to-client retransmission time 2-111
test for IEEE 802.1x readiness 2-109
port-channel load-balance command 2-339
Port Fast, for spanning tree 2-661
port ranges, defining 2-47, 2-61, 2-77
ports, debugging B-78
ports, protected 2-696
port security
aging 2-692
debug messages, display B-80
enabling 2-688
violation error recovery 2-118
port shaping 2-397
port-type command 2-341
port types, MVR 2-305
power information, displaying 2-431
power-supply alarm indications, configuring 2-343
power-supply dual command 2-343
power-supply status, displaying 2-431
precedence
for QoS traffic marking 2-389
setting in policy maps 2-389
priority command 2-345
priority queuing, QoS 2-345
priority with police, QoS 2-345
private-vlan command 2-348
private-vlan mapping command 2-351
private VLANs
association 2-694
configuring 2-348
configuring ports 2-685
displaying 2-594
host ports 2-685
mapping
configuring 2-694
displaying 2-453
promiscuous ports 2-685
product identification information, displaying 2-469
promiscuous ports, private VLANs 2-685
PVST+
Q
QoS
aggregate policers
applying 2-332
creating 2-328
displaying 2-558
class maps
creating 2-37
defining the match criteria 2-284
displaying 2-407
conform actions, configuring 2-60
displaying statistics for 2-562, C-35
exceed actions, configuring 2-136
policy maps
applying an aggregate policer 2-328, 2-332, 2-334, 2-383
applying to an interface 2-381, 2-393
creating 2-336
defining policers 2-323
displaying policy maps 2-562
setting CoS values 2-385
setting DSCP values 2-387
setting IP precedence values 2-389
setting QoS group identifier 2-391
traffic classifications 2-35
table maps
configuring 2-706
displaying 2-587
violate actions, configuring 2-725
QoS groups
as match criteria 2-289
for QoS traffic classification 2-391
setting in policy maps 2-391
QoS match criteria
ACLs 2-283
CoS value 2-284
precedence value 2-287
QoS group number 2-289
quality of service
querytime, MVR 2-302
queue-limit command 2-353
R
rapid per-VLAN spanning-tree plus
rapid PVST+
re-authenticating 802.1x-enabled ports 2-105
re-authentication
periodic 2-106
time between attempts 2-111
receiver ports, MVR 2-305
receiving flow-control packets 2-137
recovery mechanism
causes 2-118
timer interval 2-119
remote-span command 2-356
Remote Switched Port Analyzer
rename (boot loader) command A-20
renew ip dhcp snooping database command 2-358
rep admin vlan command 2-359
rep block port command 2-360
rep lsl-age-timer command 2-363
rep preempt delay command 2-365
rep preempt segment command 2-367
rep segment command 2-368
rep stcn command 2-371
reset (boot loader) command A-21
resource templates, displaying 2-575
rmdir (boot loader) command A-22
rmon collection stats command 2-373
root guard, for spanning tree 2-630
routed ports
IP addresses on 2-151
number supported 2-151
RSPAN
configuring 2-298
displaying 2-546
filter RSPAN traffic 2-298
remote-span command 2-356
sessions
add interfaces to 2-298
displaying 2-546
start new 2-298
S
scheduled switchover
disabling 2-93
enabling 2-93
scheduling diagnostic tests 2-93
sdm prefer command 2-374
SDM templates
allowed resources 2-375
displaying 2-575
dual IPv4 and IPv6 2-374
secure ports, limitations 2-690
sending flow-control packets 2-137
service instance command 2-377
service instances, displaying 2-445
service password-recovery command 2-379
service policy (policy-map class configuration) command 2-383
service-policy interface configuration command 2-381
service-policy policy-map class configuration command 2-383
set (boot loader) command A-23
set cos command 2-385
set dscp command 2-387
set precedence command 2-389
set qos-group command 2-391
setup command 2-393
SFPs, displaying information about 2-469
shape average command 2-396
show access-lists command 2-398
show aggregate-policer command 2-587
show archive status command 2-401
show arp access-list command 2-402
show boot command 2-403
show class-map command 2-407
show controllers cpu-interface command 2-408
show controllers ethernet-controller command 2-410
show controllers tcam command 2-417
show controllers utilization command 2-419
show controller utilization command 2-419
show cpu traffic qos command 2-421
show diagnostic command 2-423
show dot1q-tunnel command 2-427
show dot1x command 2-428
show env command 2-431
show errdisable detect command 2-433
show errdisable flap-values command 2-435
show errdisable recovery command 2-437
show etherchannel command 2-439
show ethernet loopback command 2-442
show ethernet service evc command 2-444
show ethernet service instance command 2-445
show ethernet service interface command 2-447
show flowcontrol command 2-449
show idprom command 2-451
show interface rep command 2-463
show interfaces command 2-453
show interfaces counters command 2-461
show interfaces rep command 2-463
show interface transceivers command 2-465
show inventory command 2-469
show ip arp inspection command 2-470
show ipc command 2-499
show ip dhcp snooping binding command 2-475
show ip dhcp snooping command 2-474
show ip dhcp snooping database command 2-477, 2-479
show ip igmp profile command 2-482
show ip igmp snooping command 2-483
show ip igmp snooping command querier detail 2-489
show ip igmp snooping groups command 2-485
show ip igmp snooping mrouter command 2-487
show ip igmp snooping querier command 2-489
show ip igmp snooping querier detail command 2-489
show ip sla standards command 2-491
show ip sla twamp connection 2-421
show ip sla twamp connection command 2-492
show ip sla twamp session command 2-494
show ip source binding command 2-496
show ipv6 access-list command 2-503
show ipv6 dhcp conflict command 2-505
show ipv6 route updated command 2-506
show ip verify source command 2-497
show l2protocol-tunnel command 2-508
show lacp command 2-510
show link state group command 2-514
show location command 2-516
show logging onboard command 2-519
show mac access-group command 2-523
show mac address-table address command 2-527
show mac address-table aging time command 2-529
show mac address-table command 2-525
show mac address-table count command 2-531
show mac address-table dynamic command 2-533
show mac address-table interface command 2-535
show mac address-table learning command 2-537
show mac address-table move update command 2-538
show mac address-table notification command 2-49, 2-540, B-32
show mac address-table static command 2-542
show mac address-table vlan command 2-544
show monitor command 2-546
show mvr command 2-548
show mvr interface command 2-550
show mvr members command 2-552
show pagp command 2-554
show parser macro command 2-556
show platform acl command C-2
show platform backup interface command C-3
show platform cfm command C-4
show platform configuration command C-5
show platform dl command C-6
show platform etherchannel command C-7
show platform forward command C-8
show platform frontend-controller command C-10
show platform igmp snooping command C-11
show platform ipc trace command C-16
show platform ip multicast command C-13
show platform ip unicast command C-14
show platform ipv6 unicast command C-17
show platform l2pt dm command C-19
show platform layer4op command C-20, C-42
show platform mac-address-table command C-21
show platform messaging command C-22
show platform monitor command C-23
show platform mvr table command C-24
show platform pm command C-25
show platform policer cpu command C-26
show platform port-asic command C-30
show platform port-security command C-34
show platform qos command C-35
show platform resource-manager command C-38
show platform snmp counters command C-40
show platform spanning-tree synchronization command C-41
show platform stp-instance command C-43
show platform tcam command C-44
show platform vlan command C-47
show platform vlan mapping command C-48
show policer aggregate command 2-558
show policer cpu uni-eni command 2-559
show policy-map command 2-562
show policy-map interface output fields 2-566
show port security command 2-567
show port-type command 2-570
show rep topology command 2-572
show sdm prefer command 2-575
show spanning-tree command 2-577
show storm-control command 2-584
show system mtu command 2-586
show udld command 2-589
show version command 2-592
show vlan access-map command 2-599
show vlan command 2-594
show vlan command, fields 2-596
show vlan filter command 2-600
show vlan mapping command 2-601
show vmps command 2-603
shutdown command 2-605
shutdown threshold, Layer 2 protocol tunneling 2-241
shutdown vlan command 2-606
SNMP host, specifying 2-612
SNMP informs, enabling the sending of 2-608
snmp mib rep trap-rate command 2-607
snmp-server enable traps command 2-608
snmp-server host command 2-612
snmp trap mac-notification change command 2-616
SNMP traps
enabling MAC address notification trap 2-616
enabling the MAC address notification feature 2-268
enabling the sending of 2-608
software images
deleting 2-79
downloading 2-9
upgrading 2-9
uploading 2-15
software version, displaying 2-592
source ports, MVR 2-305
SPAN
configuring 2-298
debug messages, display B-33
displaying 2-546
filter SPAN traffic 2-298
sessions
add interfaces to 2-298
displaying 2-546
start new 2-298
spanning-tree bpdufilter command 2-618, 2-620
spanning-tree bpduguard command 2-622
spanning-tree cost command 2-624
spanning-tree etherchannel command 2-626
spanning-tree extend system-id command 2-628
spanning-tree guard command 2-630
spanning-tree link-type command 2-632
spanning-tree loopguard default command 2-634
spanning-tree mode command 2-636
spanning-tree mst configuration command 2-638
spanning-tree mst cost command 2-640
spanning-tree mst forward-time command 2-642
spanning-tree mst hello-time command 2-643
spanning-tree mst max-age command 2-645
spanning-tree mst max-hops command 2-647
spanning-tree mst port-priority command 2-649
spanning-tree mst pre-standard command 2-651
spanning-tree mst priority command 2-652
spanning-tree mst root command 2-654
spanning-tree portfast (global configuration) command 2-658
spanning-tree portfast (interface configuration) command 2-661
spanning-tree port-priority command 2-656
Spanning Tree Protocol
spanning-tree vlan command 2-663
speed command 2-666
SSH, configuring version 2-208
static-access ports, configuring 2-673
statistics, Ethernet group 2-373
sticky learning, enabling 2-688
storm-control command 2-668
STP
counters, clearing 2-55
debug messages, display
MSTP B-86
optimized BPDUs handling B-85
spanning-tree activity B-82
switch shim B-88
transmitted and received BPDUs B-84
enabling on ENIs 2-618
enabling protocol tunneling for 2-241
EtherChannel misconfiguration 2-626
extended system ID 2-628
path cost 2-624
protocol modes 2-636
root port
loop guard 2-630
preventing from becoming designated 2-630
restricting which can be root 2-630
root guard 2-630
root switch
affects of extended system ID 2-628, 2-664
hello-time 2-663
interval between BDPU messages 2-663
interval between hello BPDU messages 2-663
max-age 2-663
port priority for selection of 2-656
primary or secondary 2-663
switch priority 2-663
state changes
blocking to forwarding state 2-661
enabling BPDU filtering 2-620, 2-658
enabling BPDU guard 2-622, 2-658
enabling Port Fast 2-658, 2-661
enabling timer to recover from error state 2-118
forward-delay time 2-663
length of listening and learning states 2-663
shutting down Port Fast-enabled ports 2-658
state information display 2-577
SVIs, creating 2-145
Switched Port Analyzer
switching characteristics
modifying 2-671
returning to interfaces 2-671
switchport access command 2-673
switchport backup interface command 2-675
switchport block command 2-679
switchport command 2-671
switchport host command 2-681
switchport mode command 2-682
switchport mode private-vlan command 2-685
switchport port-security aging command 2-692
switchport port-security command 2-688
switchport private-vlan command 2-694
switchport protected command 2-696
switchports, displaying 2-453
switchport trunk command 2-698
switchport vlan mapping command 2-700
system env temperature threshold yellow command 2-703
system message logging, save message to flash 2-257
system mtu command 2-704
system resource templates 2-374
T
table-map command 2-706
table-map configuration mode 2-706
table maps
configuring 2-706
displaying 2-587
QoS 2-706
tar files, creating, listing, and extracting 2-12
TDR, running 2-708
temperature information, displaying 2-431
temperature status, displaying 2-431
templates, system resources 2-374
test cable-diagnostics tdr command 2-708
traceroute mac command 2-710
traceroute mac ip command 2-713
traffic shaping, QoS 2-396
trunking, VLAN mode 2-682
trunk mode 2-682
trunk ports 2-682
tunnel ports, Layer 2 protocol, displaying 2-508
type (boot loader) command A-26
U
UDLD
debug messages, display B-94
enable globally 2-715
enable per interface 2-717
error recovery timer 2-118
message timer 2-715
reset a shutdown interface 2-719
status 2-589
udld command 2-715
udld port command 2-717
udld reset command 2-719
UNI
bundling and multiplexing 2-132
Ethernet 2-132
unicast storm control 2-668
uni count command 2-720
UniDirectional Link Detection
UNI ID, Ethernet 2-134
uni-vlan command 2-722
unknown multicast traffic, preventing 2-679
unknown unicast traffic, preventing 2-679
unset (boot loader) command A-27
upgrading
software images 2-9
monitoring status of 2-401
user EXEC mode 1-2
user network interface 2-341
V
version (boot loader) command A-29
violate-action command 2-724
vlan access-map command 2-729
VLAN access map configuration mode 2-729
VLAN access maps
actions 2-5
displaying 2-599
vlan command 2-726
VLAN configuration mode
commands 2-726
description 1-4
entering 2-726
summary 1-2
vlan dot1q tag native command 2-731
vlan filter command 2-733
VLAN filters, displaying 2-600
VLAN ID range 2-726
VLAN ID translation
VLAN mapping
configuring 2-700
described 2-701
displaying 2-601
VLAN maps
applying 2-733
creating 2-729
defining 2-281
displaying 2-599
VLAN Query Protocol
VLANs
adding 2-726
configuring 2-726
debug messages, display
activation of B-92
VLAN IOS file system error tests B-91
VLAN manager activity B-90
displaying configurations 2-594
extended-range 2-726
MAC addresses
displaying 2-544
number of 2-531
normal-range 2-726
private 2-685
configuring 2-348
displaying 2-594
restarting 2-606
saving the configuration 2-726
shutting down 2-606
suspending 2-606
VMPS
configuring servers 2-738
displaying 2-603
error recovery timer 2-119
reconfirming dynamic VLAN assignments 2-735
vmps reconfirm (global configuration) command 2-736
vmps reconfirm (privileged EXEC) command 2-735
vmps retry command 2-737
vmps server command 2-738
VQP
and dynamic-access ports 2-674
clearing client statistics 2-58
displaying information 2-603
per-server retry count 2-737
reconfirmation interval 2-736
reconfirming dynamic VLAN assignments 2-735
VTP, enabling tunneling for 2-241
W
Weighted Tail Drop
WTD, queue-limit command 2-353