Table Of Contents
set port flowcontrol
set vlan mapping
set vlan
show mac-address-table aging-time
show mac-address-table dynamic
show mac-address-table static
show mac-address-table
show mls masks
show mls qos interface
show mls qos maps
show mls rp interface
show mls rp ip multicast
show mls rp ipx
show mls rp vtp-domain
show mls rp
show port flowcontrol
show spanning-tree
show spantree
show vlans dot1q
show vlans
show vlan-switch
show vtp
spanning-tree backbonefast
spanning-tree cost
spanning-tree port-priority
spanning-tree vlan
set port flowcontrol
To set the receive flow-control value for a particular Gigabit Ethernet switching module port, use the set port flowcontrol command in privileged EXEC mode. To reset the receive flow-control value to the default, use the no form of this command.
set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
no set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
Syntax Description
receive
|
Indicates whether the port can receive administrative status from a remote device.
|
send
|
Indicates whether the local port can send administrative status to a remote device.
|
module-number
|
(Optional) Number of the module.
|
port-number
|
(Optional) Number of the port on the module.
|
off
|
When used with receive, it turns off an attached device's ability to send flow-control packets to a local port.
When used with send, it turns off the local port's ability to send administrative status to a remote device.
|
on
|
When used with receive, it requires that a local port receive administrative status from a remote device.
When used with send, the local port sends administrative status to a remote device.
|
desired
|
When used with receive, it allows a local port to operate with an attached device that is required to send flow-control packets or with an attached device that is not required to, but may send flow-control packets.
When used with send, the local port sends administrative status to a remote device if the remote device supports it.
|
Defaults
receive—off
send—desired
Default on multiplexed ports is on. The exception to these defaults applies to the 18-port Gigabit Ethernet switching module. For this module, the defaults are shown below:
•
Ports 1-2—send is off and receive is desired
•
Ports 3-18—send is on and receive is desired
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.2(11)T
|
This command was introduced and implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers
|
Usage Guidelines
This command is supported on Gigabit Ethernet switching modules only.
Examples
The following examples show how to use the set port flowcontrol command set.
The following example show how to set the port 5/1 flow-control receive administration status to on (port requires far end to send flowcontrol packets):
Router# set port flowcontrol receive 5/1 on
The following example show how to set the port 5/1 flow-control receive administration status to desired (port allows far end to send flowcontrol packets if far end supports it):
Router# set port flowcontrol receive 5/1 desired
The following example show how to set the port 5/1 flow-control receive administration status to off (port does not allow far end to send flowcontrol packets):
Router# set port flowcontrol receive 5/1 off
The following example show how to set port 5/1 flow-control send administration status o on (port sends flowcontrol packets to far end):
Router# set port flowcontrol send 5/1 on
The following example show how to set port 5/1 flow-control send administration status to desired (port sends flowcontrol packets to far end if far end supports it):
Router# set port flowcontrol send 5/1 desired
The following example show how to set port 5/1 flow-control send administration status to off (port does not send flowcontrol packets to far end):
Router# set port flowcontrol send 5/1 off
Related Commands
Command
|
Description
|
show port flowcontrol
|
Displays per-port status information and statistics related to flow control.
|
set vlan mapping
To map 802.1Q virtual LANs (VLANs) to Inter-Switch Link (ISL) VLANs, use the set vlan mapping command in privileged EXEC mode.
set vlan mapping dot1q 1q-vlan-number isl isl-vlan-number
Syntax Description
dot1q
|
Specifies the 802.1Q VLAN.
|
1q-vlan-number
|
Number identifying the 802.1Q VLAN; valid values are 1001 to 4095.
|
isl
|
Specifies the ISL VLAN.
|
isl-vlan-number
|
Number identifying the ISL VLAN; valid values are 1 to 1000.
|
Defaults
No 802.1Q-to-ISL mappings are defined.
Command Modes
Privileged EXEC
Usage Guidelines
IEEE 802.1Q VLAN trunks support VLANs 1 through 4095. ISL VLAN trunks support VLANs 1 through 1000. The switch automatically maps 802.1Q VLANs 1000 and lower to ISL VLANs with the same number.
The native VLAN of the 802.1Q trunk cannot be used in the mapping.
Use this feature to map 802.1Q VLANs above 1000 to ISL VLANs. Note that if you map a 802.1Q VLAN over 1000 to an ISL VLAN, the corresponding 802.1Q VLAN will be blocked. For example, if you map 802.1Q VLAN 2000 to ISL VLAN 200, then 802.1Q VLAN 200 will be blocked.
You can map up to seven VLANs. Only one 802.1Q VLAN can be mapped to an ISL VLAN. For example, if 802.1Q VLAN 800 has been automatically mapped to ISL VLAN 800, do not manually map any other 802.1Q VLANs to ISL VLAN 800.
You cannot overwrite existing 802.1Q VLAN mapping. If the 802.1Q VLAN number is in the mapping table, the command is aborted. You must first clear that mapping.
If vlan-number does not exist, then either of the following occurs:
•
If the switch is in server or transparent mode, the VLAN is created with all default values.
•
If the switch is in client mode, then the command proceeds without creating the VLAN. A warning will be given indicating that the VLAN does not exist.
If the table is full, the command is aborted with an error message indicating the table is full.
Examples
The following example shows how to map VLAN 1022 to ISL VLAN 850:
Router# set vlan mapping dot1q 1022 isl 850
Vlan 850 configuration successful
The following example shows the display if you enter a VLAN that does not exist:
Router# set vlan mapping dot1q 1017 isl 999
Warning: vlan 999 non-existent
Vlan 999 configuration successful
The following example shows the display if you enter an existing mapping:
Router# set vlan mapping dot1q 1033 isl 722
722 exists in the mapping table. Please clear the mapping first.
The following example shows the display if the mapping table is full:
Router# set vlan mapping dot1q 1099 isl 917
Related Commands
Command
|
Description
|
clear vlan mapping
|
Deletes existing 802.1Q VLAN to ISL VLAN-mapped pairs.
|
show vlans
|
Displays VLAN subinterfaces.
|
set vlan
To group ports into a virtual LAN (VLAN), use the set vlan command in privileged EXEC mode.
set vlan vlan-number module/port
set vlan vlan-number [name name] [type {ethernet | fddi | fddinet | trcrf | trbrf}]
[state {active | suspend}] [sa-id sa-id] [mtu mtu] [ring hex-ring-number]
[decring decimal-ring-number] [bridge bridge-number] [parent vlan-number] [mode {srt |
srb}] [stp {ieee | ibm | auto}] [translation vlan-number] [backupcrf {off | on}]
[aremaxhop hop-count] [stemaxhop hop-count]
Syntax Description
vlan-number
|
Number identifying the VLAN.
|
module
|
Number of the module. This argument is not valid when defining or configuring Token Ring Bridge Relay Functions (TRBRFs).
|
port
|
Number of the port on the module belonging to the VLAN; this argument does not apply to TRBRFs.
|
name name
|
(Optional) Defines a text string used as the name of the VLAN (1 to 32 characters).
|
type {ethernet | fddi | fddinet | trcrf | trbrf}
|
(Optional) Identifies the VLAN type. The default type is Ethernet.
|
state {active | suspend}
|
(Optional) Specifies whether the state of the VLAN is active or suspended. VLANs in suspended state do not pass packets. The default state is active.
|
sa-id sa-id
|
(Optional) Specifies the security association identifier. Possible values are 1 to 4294967294. The default is 100001 for VLAN1, 100002 for VLAN 2, 100003 for VLAN 3, and so on. This argument does not apply to Token Ring Concentrator Relay Functions (TRCRFs) or TRBRFs.
|
mtu mtu
|
(Optional) Specifies the maximum transmission unit (packet size, in bytes) that the VLAN can use. Possible values are 576 to 18190. The default is 1500 bytes.
|
ring hex-ring-number
|
(Optional) Specifies the logical ring number for Token Ring VLANs. Possible values are hexadecimal numbers 0x1 to 0xFFF. This argument is valid and required only when defining a TRCRF.
|
decring decimal-ring-number
|
(Optional) Specifies the logical ring number for Token Ring VLANs. Possible values are decimal numbers 1 to 4095. This argument is valid and required only when defining a TRCRF.
|
bridge bridge-number
|
(Optional) Specifies the identification number of the bridge. Possible values are hexadecimal numbers 0x1 to 0xF. For Token Ring VLANs, the default is 0F. This argument is not valid for TRCRFs.
|
parent vlan-number
|
(Optional) Sets a parent VLAN. The range for vlan-number is 2 to 1005. This argument identifies the TRBRF to which a TRCRF belongs and is required when defining a TRCRF.
|
mode {srt | srb}
|
(Optional) Specifies the TRCRF bridging mode.
|
stp {ieee | ibm | auto}
|
(Optional) Specifies the Spanning Tree Protocol version for a TRBRF to use: source-routing transparent (ieee), source-route bridging (ibm), or automatic source selection (auto).
|
translation vlan-number
|
(Optional) Specifies a translational VLAN used to translate FDDI to Ethernet. Valid values are from 1 to 1005. This argument is not valid for defining or configuring Token Ring VLANs.
|
backupcrf {off | on}
|
(Optional) Specifies whether the TRCRF is a backup path for traffic.
|
aremaxhop hop-count
|
(Optional) Specifies the maximum number of hops for All-Routes Explorer frames. Possible values are 1 to 14. The default is 7. This argument is only valid when defining or configuring TRCRFs.
|
stemaxhop hop-count
|
(Optional) Specifies the maximum number of hops for Spanning-Tree Explorer frames. Possible values are 1 to 14. The default is 7. This argument is only valid when defining or configuring TRCRFs.
|
Defaults
The default configuration has all switched Ethernet ports and Ethernet repeater ports in VLAN 1. The default SAID is 100001 for VLAN 1, 100002 for VLAN 2, 100003 for VLAN 3, and so on. The default type is Ethernet. The default MTU is 1500 bytes. The default state is active.
The default TRBRF is 1005, the default TRCRF is 1003, and the default MTU for TRBRFs and TRCRFs is 4472. The default state is active. The default aremaxhop is 7; the default stemaxhop is 7.
Command Modes
Privileged EXEC
Usage Guidelines
You cannot use the set vlan command until the networking device is either in VTP transparent mode (set vtp mode) or until a VTP domain name has been set (set vtp).
Valid MTU values for Token Ring VLAN are 1500 or 4472. While you can enter any value for the MTU value, the value you enter defaults to the next lowest valid value.
You cannot set multiple VLANs for Inter-Switch Link (ISL) ports using this command. The VLAN name can be from 1 to 32 characters in length. If adding a new VLAN, the VLAN number must be within the range 2 to 1001. When modifying a VLAN, the valid range for the VLAN number is 2 to 1005.
On a new Token Ring VLAN, if you do not specify the parent parameter for a TRCRF, the default TRBRF (1005) is used.
Examples
The following example shows how to set VLAN 850 to include ports 4 through 7 on module 3. Because ports 4 through 7 were originally assigned to TRCRF 1003, the message reflects the modification of VLAN 1003.
Router# set vlan 850 3/4-7
---- -----------------------
Related Commands
Command
|
Description
|
clear vlan
|
Deletes an existing VLAN from a management domain.
|
show vlans
|
Displays VLAN subinterfaces.
|
show mac-address-table aging-time
To display the MAC address aging time, use the show mac-address-table aging-time command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table aging-time
Catalyst Switches
show mac-address-table aging-time [vlan vlan] [[begin | exclude | include] expression]
Syntax Description
Vlan vlan
|
(Optional) Specifies a VLAN; valid values are from 1 to 1005.
|
begin
|
(Optional) Specifies that the output display begin with the line that matches the expression.
|
exclude
|
(Optional) Specifies that the output display excludes lines that match the expression.
|
include
|
(Optional) Specifies that the output display includes lines that match the specified expression.
|
expression
|
Expression in the output to use as a reference point.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on Catalyst 6000 family switches.
|
12.2(2)XT
|
This command was implemented on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(11)T
|
This command was integrated into Cisco IOS Release 12.2(11)T.
|
Examples
The following example shows how to display the current configured aging time for all VLANs:
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Router# show mac-address-table aging-time
Mac address aging time 300
Catalyst Switches
Router# show mac-address-table aging-time
The following example show how to display the current configured aging time for a specific VLAN:
Router# show mac-address-table aging-time vlan 100
Related Commands
Command
|
Description
|
show mac-address-table address
|
Displays MAC address table information for a specific MAC address.
|
show mac-address-table count
|
Displays the number of entries currently in the MAC address table.
|
show mac-address-table detail
|
Displays detailed MAC address table information.
|
show mac-address-table dynamic
|
Displays dynamic MAC address table entries only.
|
show mac-address-table interface
|
Displays the MAC address table information for a specific interface.
|
show mac-address-table multicast
|
Displays multicast MAC address table information.
|
show mac-address-table protocol
|
Displays MAC address table information based on protocol.
|
show mac-address-table static
|
Displays static MAC address table entries only.
|
show mac-address-table vlan
|
Displays the MAC address table information for a specific VLAN.
|
show mac-address-table dynamic
To display dynamic MAC address table entries only, use the show mac-address-table dynamic command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table dynamic [address mac-address | interface type slot/port | vlan vlan]
Catalyst Switches
show mac-address-table dynamic [address mac-address | detail | interface type number | protocol
protocol | vlan vlan] [[begin |exclude | include] expression]
Syntax Description
address mac-address
|
(Optional) Specifies a 48-bit MAC address; valid format is H.H.H.
|
detail
|
(Optional) Specifies a detailed display of MAC address table information.
|
interface type number
|
(Optional) Specifies an interface to match; valid type values are FastEthernet and GigabitEthernet, valid number values are from 1 to 9.
|
interface type
|
(Optional) Specifies an interface to match; valid type values are FastEthernet and GigabitEthernet.
|
slot
|
(Optional) Adds dynamic addresses to module in slot 1 or 2.
|
port
|
(Optional) Port interface number ranges based on type of Ethernet switch network module used:
0 to 15 for NM-16ESW 0 to 35 for NM-36ESW 0 to 1 for GigabitEthernet
|
protocol protocol
|
(Optional) Specifies a protocol. See the "Usage Guidelines" section for keyword definitions.
|
vlan vlan
|
(Optional) Displays entries for a specific VLAN; valid values are from 1 to 1005.
|
begin
|
(Optional) Specifies that the output display begin with the line that matches the expression.
|
exclude
|
(Optional) Specifies that the output display exclude lines that match the expression.
|
include
|
(Optional) Specifies that the output display include lines that match the specified expression.
|
expression
|
Expression in the output to use as a reference point.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on Catalyst 6000 family switches.
|
12.2(2)XT
|
This command was implemented on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(11)T
|
This command was integrated into Cisco IOS Release 12.2(11)T.
|
Usage Guidelines
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
The show mac-address-table dynamic command output for an EtherChannel interface changes the port-number designation (for example, 5/7) to a port-group number.
Catalyst Switches
The keyword definitions for the protocol argument are:
•
ip—Specifies IP protocol
•
ipx—Specifies IPX protocols
•
assigned—Specifies assigned protocol entries
•
other—Specifies other protocol entries
The show mac-address-table dynamic command output for an EtherChannel interface changes the port-number designation (for example, 5/7) to a port-group number.
Examples
The following examples shows how to display all dynamic MAC address entries:
Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series Routers
Router# show mac-address-table dynamic
Non-static Address Table:
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- --------------------
000a.000a.000a Dynamic 1 FastEthernet4/0
002a.2021.4567 Dynamic 2 FastEthernet4/0
Catalyst Switches
Router# show mac-address-table dynamic
vlan mac address type protocol qos ports
-----+---------------+--------+---------+---+--------------------------------
200 0010.0d40.37ff dynamic ip -- 5/8
1 0060.704c.73ff dynamic ip -- 5/9
4095 0000.0000.0000 dynamic ip -- 15/1
1 0060.704c.73fb dynamic other -- 5/9
1 0080.1c93.8040 dynamic ip -- 5/9
4092 0050.f0ac.3058 dynamic ip -- 15/1
1 00e0.4fac.b3ff dynamic other -- 5/9
The following example show how to display dynamic MAC address entries with a specific protocol type (in this case, assigned):
Router# show mac-address-table dynamic protocol assigned
vlan mac address type protocol qos ports
-----+---------------+--------+---------+---+--------------------------------
4092 0000.0000.0000 dynamic assigned -- Router
4092 0050.f0ac.3059 dynamic assigned -- Router
1 0010.7b3b.0978 dynamic assigned -- Fa5/9
The following example shows the detailed output for the previous example:
Router# show mac-address-table dynamic protocol assigned detail
MAC Table shown in details
========================================
Type Always Learn Trap Modified Notify Capture Protocol Flood
-------+------------+----+--------+------+-------+--------+-----+
QoS bit L3 Spare Mac Address Age Byte Pvlan Xtag SWbits Index
-----------------+--------+--------------+--------+-----+----+------+-----
DYNAMIC NO NO YES NO NO assigned NO
Bit Not On 0 0000.0000.0000 255 4092 0 0 0x3
DYNAMIC NO NO YES NO NO assigned NO
Bit Not On 0 0050.f0ac.3059 254 4092 0 0 0x3
DYNAMIC NO NO YES NO NO assigned NO
Bit Not On 0 0010.7b3b.0978 254 1 0 0 0x108
Related Commands
Command
|
Description
|
show mac-address-table address
|
Displays MAC address table information for a specific MAC address.
|
show mac-address-table aging-time
|
Displays the MAC address aging time.
|
show mac-address-table count
|
Displays the number of entries currently in the MAC address table.
|
show mac-address-table detail
|
Displays detailed MAC address table information.
|
show mac-address-table interface
|
Displays the MAC address table information for a specific interface.
|
show mac-address-table multicast
|
Displays multicast MAC address table information.
|
show mac-address-table protocol
|
Displays MAC address table information based on protocol.
|
show mac-address-table static
|
Displays static MAC address table entries only.
|
show mac-address-table vlan
|
Displays the MAC address table information for a specific VLAN.
|
show mac-address-table static
To display static MAC address table entries only, use the show mac-address-table static command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table static [address mac-address | interface type slot/port | vlan vlan]
Catalyst Switches
show mac-address-table static [address mac-address | detail | interface type number | protocol
protocol | vlan vlan] [[begin |exclude | include] expression]
Syntax Description
address mac-address
|
(Optional) Specifies a 48-bit MAC address to match; valid format is H.H.H.
|
detail
|
(Optional) Specifies a detailed display of MAC address table information.
|
interface type number
|
(Optional) Specifies an interface to match; valid type values are Ethernet, FastEthernet, and Gigabit Ethernet and valid number values are from 1 to 9.
|
interface type
|
(Optional) Specifies an interface to match; valid type values are FastEthernet and Gigabit Ethernet.
|
slot
|
(Optional) Adds dynamic addresses to module in slot 1 or 2.
|
port
|
(Optional) Port interface number ranges based on type of Ethernet switch network module used:
0 to 15 for NM-16ESW 0 to 35 for NM-36ESW 0 to 1 for Gigabit Ethernet
|
protocol protocol
|
(Optional) Specifies a protocol. See the "Usage Guidelines" section for keyword definitions.
|
vlan vlan
|
(Optional) Displays entries for a specific VLAN; valid values are from 1 to 1005.
|
begin
|
(Optional) Specifies that the output display begin with the line that matches the expression.
|
exclude
|
(Optional) Specifies that the output display exclude lines that match the expression.
|
include
|
(Optional) Specifies that the output display include lines that match the specified expression.
|
expression
|
Expression in the output to use as a reference point.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on Catalyst 6000 family switches.
|
12.2(2)XT
|
This command was implemented on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(11)T
|
This command was integrated into Cisco IOS Release 12.2(11)T.
|
Usage Guidelines
Catalyst Switches
The keyword definitions for the protocol argument are:
•
ip—Specifies IP protocol.
•
ipx—Specifies IPX protocols.
•
assigned—Specifies assigned protocol entries.
•
other—Specifies other protocol entries.
Examples
The following example shows how to display all static MAC address entries:
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Router# show mac-address-table static
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- --------------------
2323.3214.5432 Static 4 FastEthernet4/1
2323.3214.5431 Static 5 FastEthernet4/1
2323.3214.5432 Static 6 FastEthernet4/1
2323.3214.5434 Static 7 FastEthernet4/1
2323.3214.5435 Static 8 FastEthernet4/1
Catalyst Switches
Router# show mac-address-table static
*Oct 22 12:15:35: %SYS-5-CONFIG_I: Configured from console by console
vlan mac address type protocol qos ports
-----+---------------+--------+---------+---+--------------------------------
200 0050.3e8d.6400 static assigned -- Router
100 0050.3e8d.6400 static assigned -- Router
4092 0050.f0ac.3058 static other -- Router
917 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
5 0050.3e8d.6400 static assigned -- Router
303 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
850 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
1002 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
802 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
2 0100.0cdd.dddd static other -- Fa5/9,Router,Switch
304 0100.5e00.0001 static ip -- Fa5/9,Switch
The following example shows how to display static MAC address entries with a specific protocol type (in this case, assigned):
Router# show mac-address-table static protocol assigned
vlan mac address type protocol qos ports
-----+---------------+--------+---------+---+--------------------------------
200 0050.3e8d.6400 static assigned -- Router
100 0050.3e8d.6400 static assigned -- Router
5 0050.3e8d.6400 static assigned -- Router
The following example shows the detailed output for the previous example:
Router# show mac-address-table static protocol assigned detail
MAC Table shown in details
========================================
Type Always Learn Trap Modified Notify Capture Protocol Flood
-------+------------+----+--------+------+-------+--------+-----+
QoS bit L3 Spare Mac Address Age Byte Pvlan Xtag SWbits Index
-----------------+--------+--------------+--------+-----+----+------+-----
STATIC NO NO NO NO NO assigned NO
Bit Not On 0 0050.3e8d.6400 254 200 1 0 0x3
STATIC NO NO NO NO NO assigned NO
Bit Not On 0 0050.3e8d.6400 254 100 1 0 0x3
STATIC NO NO NO NO NO assigned NO
Bit Not On 0 0050.3e8d.6400 254 5 1 0 0x3
S Bit Not On 0 0050.f0ac.3058 254 4092 1 0 0x3
Related Commands
Command
|
Description
|
show mac-address-table address
|
Displays MAC address table information for a specific MAC address.
|
show mac-address-table aging-time
|
Displays the MAC address aging time.
|
show mac-address-table count
|
Displays the number of entries currently in the MAC address table.
|
show mac-address-table detail
|
Displays detailed MAC address table information.
|
show mac-address-table dynamic
|
Displays dynamic MAC address table entries only.
|
show mac-address-table interface
|
Displays the MAC address table information for a specific interface.
|
show mac-address-table multicast
|
Displays multicast MAC address table information.
|
show mac-address-table protocol
|
Displays MAC address table information based on protocol.
|
show mac-address-table vlan
|
Displays the MAC address table information for a specific VLAN.
|
show mac-address-table
To display the MAC address table, use the show mac-address-table command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table [static | dynamic | secure | self | aging-time | count] [address
hardware-address] [interface type] [fa | gi slot/port] [vlan vlan-id]
Catalyst Switches
show mac-address-table [static | dynamic | secure | self | aging-time | count] [address
hardware-address] [interface interface] [atm slot/port] [vlan vlan-id]
Syntax Description
static
|
(Optional) Displays only the static addresses.
|
dynamic
|
(Optional) Displays only the dynamic addresses.
|
secure
|
(Optional) Displays only the secure addresses.
|
self
|
(Optional) Displays only addresses added by the switch itself.
|
aging-time
|
(Optional) Displays aging-time for dynamic addresses for all VLANs.
|
count
|
(Optional) Displays a count for different kinds of MAC addresses.
|
address hardware-address
|
(Optional) Displays information for a specific hardware address.
|
interface type
|
(Optional) Displays addresses for a specific port.
|
interface interface
|
(Optional) Displays addresses for a specific port.
|
fa
|
(Optional) Specifies FastEthernet.
|
gi
|
(Optional) Specifies GigabitEthernet.
|
slot/port
|
(Optional) Adds dynamic addresses to module in slot 1 or 2.
|
atm slot/port
|
(Optional) Adds dynamic addresses to ATM module slot/port. Use 1 or 2 for the slot number. Use 0 as the port number.
|
vlan vlan-id
|
(Optional) Displays addresses for a specific VLAN. Valid IDs are from 1 to 1005; do not enter leading zeroes.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
11.2(8)SA
|
This command was first introduced.
|
11.2(8)SA3
|
The self, aging-time, count, and vlan vlan-id keywords were added.
|
11.2(8)SA5
|
The atm slot/port keywords were added.
|
12.2(2)XT
|
This command was implemented on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(11)T
|
This command was integrated into Cisco IOS Release 12.2(11)T.
|
Usage Guidelines
This command displays the MAC address table for the switch. Specific views can be defined by using the optional keywords and values. If more than one optional keyword is used, then all of the conditions must be true in order for that entry to be displayed.
Examples
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
The following is sample output from the show mac-address-table command:
Router# show mac-address-table
Dynamic Addresses Count: 9
Secure Addresses (User-defined) Count: 0
Static Addresses (User-defined) Count: 0
System Self Addresses Count: 41
Non-static Address Table:
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- --------------------
0010.0de0.e289 Dynamic 1 FastEthernet0/1
0010.7b00.1540 Dynamic 2 FastEthernet0/5
0010.7b00.1545 Dynamic 2 FastEthernet0/5
0060.5cf4.0076 Dynamic 1 FastEthernet0/1
0060.5cf4.0077 Dynamic 1 FastEthernet0/1
0060.5cf4.1315 Dynamic 1 FastEthernet0/1
0060.70cb.f301 Dynamic 1 FastEthernet0/1
00e0.1e42.9978 Dynamic 1 FastEthernet0/1
00e0.1e9f.3900 Dynamic 1 FastEthernet0/1
Catalyst Switches
The following is sample output from the show mac-address-table command:
Switch# show mac-address-table
Dynamic Addresses Count: 9
Secure Addresses (User-defined) Count: 0
Static Addresses (User-defined) Count: 0
System Self Addresses Count: 41
Non-static Address Table:
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- --------------------
0010.0de0.e289 Dynamic 1 FastEthernet0/1
0010.7b00.1540 Dynamic 2 FastEthernet0/5
0010.7b00.1545 Dynamic 2 FastEthernet0/5
0060.5cf4.0076 Dynamic 1 FastEthernet0/1
0060.5cf4.0077 Dynamic 1 FastEthernet0/1
0060.5cf4.1315 Dynamic 1 FastEthernet0/1
0060.70cb.f301 Dynamic 1 FastEthernet0/1
00e0.1e42.9978 Dynamic 1 FastEthernet0/1
00e0.1e9f.3900 Dynamic 1 FastEthernet0/1
Related Commands
Command
|
Description
|
clear mac-address-table
|
Deletes entries from the MAC address table.
|
show mls masks
To display the details of the Access Control Parameters (ACPs) that are used for Multilayer Switching (MLS) quality of service (QoS) and security access control lists (ACLs), use the show mls masks command in privileged EXEC mode.
show mls masks [qos | security]
Syntax Description
qos
|
(Optional) Displays details of ACPs used for QoS ACLs.
|
security
|
(Optional) Displays details of ACPs used for security ACLs.
|
Note
ACPs are called masks in the command-line interface (CLI) commands and output.
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.1(6)EA2
|
This command was introduced.
|
12.2(15)ZJ
|
This command was implemented on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.3(4)T
|
This command was integrated into Cisco IOS Release 12.3(4)T on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
Use the show mls mask command without keywords to display all ACPs configured on the switch.
Use this command with the qos keyword to display the ACPs used for QoS ACLs.
Use this command with the security keyword to display the ACPs used for security ACLs.
Note
You can configure up to four ACPs (QoS and security) on a switch.
Examples
The following is sample output from the show mls masks command. In this example, Mask 1 is a QoS ACP consisting of an IP source address (with wildcard bits 0.0.0.255), an IP destination address, and Layer 4 destination port fields. This ACP is used by the QoS policy maps pmap1 and pmap2.
Fields : ip-sa(0.0.0.255), ip-da(host), dest-port
Interfaces: Fa0/1, Fa0/5, Fa0/13
Related Commands
Command
|
Description
|
ip access-group
|
Applies an IP ACL to an interface.
|
policy-map
|
Creates or modifies a policy map that can be attached to one or more interfaces to specify a service policy.
|
show mls qos interface
To display Multilayer Switching (MLS) quality of service (QoS) information at the interface level, use the show mls qos interface command in privileged EXEC mode.
show mls qos interface [interface-id] [policers]
Syntax Description
interface-id
|
(Optional) Specifies the interface for which QoS information is to be displayed.
|
policers
|
(Optional) Displays all the policers configured on the interface, their settings, and the number of policers unassigned.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.1(6)EA2
|
This command was introduced.
|
12.2(15)ZJ
|
This command was implemented on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.3(4)T
|
This command was integrated into Cisco IOS Release 12.3(4)T on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
Use the show mls qos interface command without keywords to display parameters for all interfaces.
Use the show mls qos interface interface-id command to display the parameters for a specific interface.
Examples
The following is sample output from the show mls qos interface fastethernet0/1 command:
Router# show mls qos interface fastethernet0/1
Related Commands
Command
|
Description
|
mls qos cos
|
Defines the default MLS CoS value of a port or assigns the default CoS value to all incoming packets on the port.
|
mls qos map
|
Defines the MLS CoS-to-DSCP map and DSCP-to-CoS map.
|
mls qos trust
|
Configures the MLS port trust state and classifies traffic by an examination of the CoS or DSCP value.
|
show mls qos maps
To display Multilayer Switching (MLS) quality of service (QoS) mapping information, use the show mls qos maps command in privileged EXEC mode.
show mls qos maps [cos-dscp | dscp-cos]
Syntax Description
cos-dscp
|
(Optional) Displays the class of service (CoS)-to-Differentiated Services Code Point (DSCP) map.
|
dscp-cos
|
(Optional) Displays the DSCP-to-CoS map.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.1(6)EA2
|
This command was introduced.
|
12.2(15)ZJ
|
This command was implemented on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.3(4)T
|
This command was integrated into Cisco IOS Release 12.3(4)T on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
Maps are used to generate an internal DSCP value, which represents the priority of the traffic. Use the show mls qos maps command without keywords to display all maps.
Use this command with the cos-dscp keyword to display the CoS-to-DSCP map.
Use this command with the dscp-cos keyword to display the DSCP-to-CoS map.
Examples
The following is sample output from the show mls qos maps cos-dscp command:
Router# show mls qos maps cos-dscp
--------------------------------
dscp: 8 8 8 8 24 32 56 56
The following is sample output from the show mls qos maps dscp-cos command:
Router# show mls qos maps dscp-cos
dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56
-----------------------------------------------
cos: 0 1 1 1 2 2 3 3 4 4 5 6 7
The following is sample output from the show mls qos maps command:
Router# show mls qos maps
dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56
-----------------------------------------------
cos: 0 1 1 2 2 3 7 4 4 5 5 7 7
--------------------------------
dscp: 0 8 16 24 32 40 48 56
Related Commands
Command
|
Description
|
mls qos map
|
Defines the CoS-to-DSCP map and DSCP-to-CoS map.
|
show mls rp interface
To display IPX Multilayer Switching (MLS) details for the Route Processor (RP), including specific information about the Multilayer Switching Protocol (MLSP), use the show mls rp interface command in user EXEC or privileged EXEC mode.
show mls rp interface type number
Syntax Description
type
|
Interface type.
|
number
|
Interface number.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
12.0(5)T
|
This command was introduced.
|
Examples
The following displays sample output from the show mls rp interface command. The interface type is VLAN, and its number is 10.
Router# show mls rp interface vlan 10
IPX MLS active on Vlan 10, domain WBU
Related Commands
Command
|
Description
|
mls rp ipx (global)
|
Enables the router as an IPX MLS RP.
|
mls rp locate ipx
|
Displays information about all switches currently shortcutting for the specified IPX flow(s).
|
mls rp vtp-domain
|
Assigns an MLS interface to a specific VTP domain on the MLS RP.
|
mls rp management-interface
|
Designates an interface as the management interface for MLSP packets.
|
mls rp vlan-id
|
Assigns a VLAN identification number to an IPX MLS interface.
|
show mls rp ipx
|
Displays details for all IPX MLS interfaces on the IPX MLS router.
|
show mls rp vtp-domain
|
Displays IPX MLS interfaces for a specific VTP domain on the route processor.
|
show mls rp ip multicast
To display hardware-switched multicast flow information about IP multicast Multilayer Switching (MLS), use the show mls rp ip multicast command in user EXEC or privileged EXEC mode.
show mls rp ip multicast [locate] [group [source] [vlan-id]] | [statistics] | [summary]
Syntax Description
locate
|
(Optional) Displays flow information associated with the switch. This keyword applies only to a single router and multiple switches.
|
group
|
(Optional) Address of the IP multicast group about which to display information.
|
source
|
(Optional) IP multicast source sending to the specified multicast group about which to display information.
|
vlan-id
|
(Optional) Source VLAN about which to display information.
|
statistics
|
(Optional) Displays MLS statistics.
|
summary
|
(Optional) Displays MLS summary.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
12.0(5)T
|
This command was introduced.
|
Examples
The following is sample output of the show mls rp ip multicast command using the locate keyword:
Router# show mls rp ip multicast locate
Source Group Vlan SwitchIP SwitchMAC
------ ----- ---- -------- ---------
192.1.10.6 239.255.158.197 10 1.2.10.199 0010.a60b.b4ff
The following is sample output of the show mls rp ip multicast command for a specific IP multicast group:
Router# show mls rp ip multicast 224.1.1.1
Multicast hardware switched flows:
(1.1.13.1, 224.1.1.1) Incoming interface: Vlan13, Packets switched: 61590
Hardware switched outgoing interfaces: Vlan20 Vlan9
(1.1.9.3, 224.1.1.1) Incoming interface: Vlan9, Packets switched: 0
Hardware switched outgoing interfaces: Vlan20
(1.1.12.1, 224.1.1.1) Incoming interface: Vlan12, Packets switched: 62010
Hardware switched outgoing interfaces: Vlan20 Vlan9
(1.1.12.3, 224.1.1.1) Incoming interface: Vlan12, Packets switched: 61980
Hardware switched outgoing interfaces: Vlan20 Vlan9
(1.1.11.1, 224.1.1.1) Incoming interface: Vlan11, Packets switched: 62430
Hardware switched outgoing interfaces: Vlan20 Vlan9
(1.1.11.3, 224.1.1.1) Incoming interface: Vlan11, Packets switched: 62430
Hardware switched outgoing interfaces: Vlan20 Vlan9
Total shortcut installed: 6
The following is sample output of the show mls rp ip multicast command using the statistics keyword:
Router# show mls rp ip multicast statistics
MLS Multicast Operation Status:
MLS Multicast configuration and state:
Router Mac: 0010.298f.0009
Switch Mac: 0010.0d70.a3ff Switch IP: 1.2.10.195
MLS Multicast Operating state: ACTIVE
Active management vlan: Vlan1, 192.1.4.1
User configured management vlan: None, 0.0.0.0
Include-List: IP1 = 192.1.28.2, IP2 = 0.0.0.0
Router IP used in MLS Multicast messages: 192.1.28.2
MLS Multicast statistics:
Keepalive ACK received: 90
Open request ACK received: 3
Delete notifications received: 3
Flow statistics messages received: 181
Flow message Ack received: 14
Flow message Nack received: 0
Complete flow install Ack: 3
Complete flow install Nack: 0
Complete flow delete Ack: 1
Output vlan delete Ack: 0
L2 entry not found error: 0
LTL entry not found error: 0
MET entry not found error: 0
L3 entry not found error: 0
L3 entry exists error : 0
Sequence number error : 0
The following is sample output of the show mls rp ip multicast command using the summary keyword:
Router# show mls rp ip multicast summary
Switch IP:0.0.0.0 Switch MAC:0000.0000.0000
Number of complete flows: 0
Total hardware-switched flows: 0
Switch IP:1.2.10.199 Switch MAC:0010.a60b.b4ff
Number of complete flows: 1
Total hardware-switched flows: 1
Related Commands
Command
|
Description
|
mls rp ip multicast
|
Enables IP multicast MLS (hardware switching) on an external or internal router in conjunction with Layer 3 switching hardware for the Catalyst 5000 switch.
|
show mls rp ipx
To display details for all IPX Multilayer Switching (MLS) interfaces on the IPX MLS router, use the show mls rp ipx command in privileged EXEC mode.
show mls rp ipx
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(5)T
|
This command was introduced.
|
Usage Guidelines
This command gives you details about the following:
•
MLS status (enabled or disabled) for switch interfaces and subinterfaces
•
Flow mask required when creating Layer 3 switching entries for the router
•
Current settings for the keepalive timer, retry timer, and retry count
•
MLS identifier used in Multilayer Switching Protocol (MLSP) messages
•
List of all interfaces in all Virtual Trunk Protocol (VTP) domains enabled for MLS
Examples
The following example displays sample output from the show mls rp ipx command for all IPX MLS interfaces on an MLS-Route Processor (RP):
ipx multilayer switching is globally enabled
ipx mls inbound acl override is globally disabled
IPX MLS flow mask is source-destination
number of domains configured for mls 1
vlan domain name:Engineering
current ipx flow mask:source-destination
ipx current/next global purge:false/false
ipx current/next purge count:0/0
current sequence number:4086390283
current/maximum retry count:0/10
current domain state:no-change
keepalive timer expires in 3 seconds
1 management interface(s) currently defined:
2 mac-vlan(s) enabled for ipx multi-layer switching:
router currently aware of following 1 switch(es):
Related Commands
Command
|
Description
|
mls rp ipx (global)
|
Enables the router as an IPX MLS RP.
|
mls rp locate ipx
|
Displays information about all switches currently shortcutting for the specified IPX flows.
|
mls rp management-interface
|
Designates an interface as the management interface for MLSP packets.
|
mls rp vlan-id
|
Assigns a VLAN identification number to an IPX MLS interface.
|
show mls rp interface
|
Displays IPX MLS details for the RP, including specific information about the MLSP.
|
show mls rp vtp-domain
|
Displays IPX MLS interfaces for a specific VTP domain on the RP.
|
show mls rp vtp-domain
To display IPX Multilayer Switching (MLS) interfaces for a specific Virtual Trunk Protocol (VTP) domain on the Route Processor (RP), use the show mls rp vtp-domain command in privileged EXEC mode.
show mls rp vtp-domain domain-name
Syntax Description
domain-name
|
The name of the VTP domain whose MLS interfaces will be displayed.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
11.3(3) WA4(4)
|
This command was introduced.
|
Examples
This example shows details about IPX MLS interfaces in a VTP domain named WBU:
Router# show mls rp vtp-domain WBU
current ipx flow mask: destination
ipx current/next global purge: false/false
ipx current/next purge count: 0/0
current ipx flow mask: destination
ipx current/next global purge: false/false
ipx current/next purge count: 0/0
current sequence number: 590678296
current/maximum retry count: 0/10
current domain state: no-change
keepalive timer expires in 3 seconds
1 management interface(s) currently defined:
20 mac-vlan(s) configured for multi-layer switching
17 mac-vlan(s) enabled for ipx multi-layer switching:
18 mac-vlan(s) enabled for ipx multi-layer switching:
router currently aware of following 1 switch(es):
Related Commands
Command
|
Description
|
mls rp ipx (global)
|
Enables the router as an IPX MLS RP.
|
mls rp locate ipx
|
Displays information about all switches currently shortcutting for the specified IPX flows.
|
mls rp management-interface
|
Designates an interface as the management interface for MLSP packets.
|
mls rp vlan-id
|
Assigns a VLAN identification number to an IPX MLS interface.
|
show mls rp interface
|
Displays IPX MLS details for the RP, including specific information about the MLSP.
|
show mls rp ipx
|
Displays details for all IPX MLS interfaces on the IPX MLS router.
|
show mls rp vtp-domain
|
Displays IPX MLS interfaces for a specific VTP domain on the RP.
|
show mls rp
To display Multilayer Switching (MLS) details, including specifics for the Multilayer Switching Protocol (MLSP), use the show mls rp command in user EXEC or privileged EXEC mode.
show mls rp [interface]
Syntax Description
interface
|
(Optional) Displays information for one interface. Without this argument, detailed views of all interfaces are displayed.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.3(3) WA4(4)
|
This command was introduced.
|
Examples
The following is sample output for the show mls rp command:
multilayer switching is globally enabled
mls ip address 10.20.26.64
current flow mask: ip-flow
current sequence number: 80709115
current/maximum retry count: 0/10
current domain state: no-change
current/next global purge: false/false
current/next purge count: 0/0
keepalive timer expires in 9 seconds
1 management interface(s) currently defined:
7 mac-vlan(s) configured for multi-layer switching:
router currently aware of following 1 switch(es):
The following is sample output for the show mls rp command for a specific interface:
Router# show mls rp int vlan 10
mls active on Vlan10, domain WBU
Related Commands
Command
|
Description
|
mls rp ip
|
Enables MLSP.
|
mls rp management-interface
|
Designates an interface as the management interface for MLSP packets.
|
mls rp nde-address
|
Specifies a NetFlow Data Export address.
|
mls rp vlan-id
|
Assigns a VLAN ID.
|
mls rp vtp-domain
|
Selects the router interface to be Layer 3 switched and then adds that interface to a VTP domain.
|
show mls rp vtp-domain
|
Displays MLS interfaces for a specific VTP domain.
|
show port flowcontrol
To display per-port status information and statistics related to flow control, use the show port flowcontrol command in privileged EXEC mode.
show port flowcontrol [module-number[/port-number]]
Syntax Description
module-number
|
(Optional) Number of the module.
|
port-number
|
(Optional) Number of the port on the module. If you do not specify a number, filters configured on all the ports on the module are shown.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.2(11)T
|
This command was introduced and implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
The Catalyst 2948G is a fixed configuration switch. All ports are located on module 2; for this reason, if you enter module-number/port-number 1/N, an error message is displayed.
Examples
The following example shows how to display the flow-control port status and statistics:
Router# show port flowcontrol
Port Send-Flowcontrol Receive-Flowcntl RxPause TxPause
----- ---------------- ---------------- ------- ------
3/1 on disagree on disagree 0 0
3/3 desired on desired off 10 10
Table 3 describes the fields shown in the display.
Table 3 show port flowcontrol Field Descriptions
Field
|
Description
|
Port
|
Module and port number.
|
Send-Flowcontrol Admin
|
Flow-control administration. Possible settings:
• On indicates the local port sends flow control to the far end.
• Off indicates the local port does not send flow control to the far end.
• Desired indicates the local end sends flow control to the far end if the far end supports it.
|
Send-Flowcontrol Oper
|
Flow-control operation. Possible setting:
• Disagree indicates the two ports could not agree on a link protocol.
• Off indicates that the local port cannot send flowcontrol to a remote port.
|
Receive-Flowcntl Admin
|
Flow-control administration. Possible settings:
• On indicates the local port requires the far end to send flow control.
• Off indicates the local port does not allow the far end to send flow control.
• Desired indicates the local end allows the far end to send flow control.
|
Receive-Flowcntl Oper
|
Flow-control operation. Possible setting:
• Disagree indicates the two ports could not agree on a link protocol.
• Off indicates that the local port cannot receive flowcontrol from a remote port.
|
RxPause
|
Number of pause frames received.
|
TxPause
|
Number of pause frames transmitted.
|
Related Commands
Command
|
Description
|
set port flowcontrol
|
Sets the receive flow-control value for a particular Gigabit Ethernet switching module port.
|
show spanning-tree
To display spanning-tree information for the specified spanning-tree instances, use the show spanning-tree command in privileged EXEC mode.
show spanning-tree [bridge-group] [active | backbonefast | blockedports | bridge | brief |
inconsistentports | interface interface-id | pathcost method | root | summary [totals] |
uplinkfast | vlan vlan-id]
Syntax Description
bridge-group
|
(Optional) Specifies the bridge group number. The range is 1 to 255.
|
active
|
(Optional) Displays spanning-tree information on active interfaces only.
|
backbonefast
|
(Optional) Displays spanning-tree BackboneFast status.
|
blockedports
|
(Optional) Displays blocked port information.
|
bridge
|
(Optional) Displays status and configuration of this switch.
|
brief
|
(Optional) Specifies a brief summary of interface information.
|
inconsistentports
|
(Optional) Displays information about inconsistent ports.
|
interface interface-id
|
(Optional) Specifies a list of interfaces for which spanning-tree information appears. Enter each interface designator, using a space to separate it from the one before and the one after. Ranges are not supported. Valid interfaces include physical ports and virtual LANs (VLANs).
|
pathcost method
|
(Optional) Displays the default path cost method.
|
root
|
(Optional) Displays root-switch status and configuration.
|
summary
|
(Optional) Specifies a summary of port states.
|
totals
|
(Optional) Displays the total lines of the spanning-tree state section.
|
uplinkfast
|
(Optional) Displays spanning-tree UplinkFast status.
|
vlan vlan-id
|
(Optional) Specifies the VLAN ID. The range is 1 to 1005. If the vlan-id value is omitted, the command applies to the spanning-tree instance for all VLANs.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(1)T
|
This command was introduced.
|
12.0(5.2)WC(1)
|
This command was integrated into Cisco IOS Release 12.0(5.2)WC(1).
|
12.1(6)EA2
|
This command was integrated into Cisco IOS Release 12.1(6)EA2. The bridge-group argument and the active, backbonefast, blockedports, bridge, inconsistentports, pathcost method, root, total, and uplinkfast keywords were added.
|
12.2(15)ZJ
|
The syntax added in Cisco IOS Release 12.1(6)EA2 was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.3(4)T
|
The platform support and syntax added in Cisco IOS Release 12.2(15)ZJ was integrated into Cisco IOS Release 12.3(4)T .
|
Usage Guidelines
The keywords and arguments that are available with the show spanning-tree command will vary depending on the platform you are using and the network modules that are installed and operational.
Examples
The following example shows that bridge group 1 is running the VLAN Bridge Spanning Tree Protocol.
Router# show spanning-tree 1
Bridge group 1 is executing the VLAN Bridge compatible Spanning Tree Protocol
Bridge Identifier has priority 32768, address 0000.0c37.b055
Configured hello time 2, max age 30, forward delay 20
We are the root of the spanning tree
Port Number size is 10 bits
Topology change flag not set, detected flag not set
Times: hold 1, topology change 35, notification 2
hello 2, max age 30, forward delay 20
Timers: hello 0, topology change 0, notification 0
Port 8 (Ethernet1) of Bridge group 1 is forwarding
Port path cost 100, Port priority 128
Designated root has priority 32768, address 0000.0c37.b055
Designated bridge has priority 32768, address 0000.0c37.b055
Designated port is 8, path cost 0
Timers: message age 0, forward delay 0, hold 0
BPDU: sent 184, received 0
The following is sample output from the show spanning-tree summary command:
Router# show spanning-tree summary
Name Blocking Listening Learning Forwarding STP Active
-------------------- -------- --------- -------- ---------- ----------
-------------------- -------- --------- -------- ---------- ----------
Table 4 describes the significant fields shown in the display.
Table 4 show spanning-tree summary Field Descriptions
Field
|
Description
|
UplinkFast
|
Indicates whether the spanning-tree UplinkFast feature is enabled or disabled.
|
Name
|
Name of VLAN.
|
Blocking
|
Number of ports in the VLAN in a blocking state.
|
Listening
|
Number of ports in a listening state.
|
Learning
|
Number of ports in a learning state.
|
Forwarding
|
Number of ports in a forwarding state.
|
STP Active
|
Number of ports using the spanning-tree protocol (STP).
|
The following is sample output from the show spanning-tree brief command:
Router# show spanning-tree brief
Spanning tree enabled protocol IEEE
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Spanning tree enabled protocol IEEE
Name Port ID Prio Cost Sts Cost Bridge ID Port ID
------- ------- ---- ---- --- ---- -------------- -------
Fa0/11 128.17 128 100 BLK 38 0404.0400.0001 128.17
Fa0/12 128.18 128 100 BLK 38 0404.0400.0001 128.18
Fa0/13 128.19 128 100 BLK 38 0404.0400.0001 128.19
Fa0/14 128.20 128 100 BLK 38 0404.0400.0001 128.20
Fa0/15 128.21 128 100 BLK 38 0404.0400.0001 128.21
Fa0/16 128.22 128 100 BLK 38 0404.0400.0001 128.22
Fa0/17 128.23 128 100 BLK 38 0404.0400.0001 128.23
Fa0/18 128.24 128 100 BLK 38 0404.0400.0001 128.24
Fa0/19 128.25 128 100 BLK 38 0404.0400.0001 128.25
Fa0/20 128.26 128 100 BLK 38 0404.0400.0001 128.26
Fa0/21 128.27 128 100 BLK 38 0404.0400.0001 128.27
Name Port ID Prio Cost Sts Cost Bridge ID Port ID
------- ------- ---- ---- --- ---- -------------- -------
Fa0/22 128.28 128 100 BLK 38 0404.0400.0001 128.28
Fa0/23 128.29 128 100 BLK 38 0404.0400.0001 128.29
Fa0/24 128.30 128 100 BLK 38 0404.0400.0001 128.30 Hello Time 2 sec Max Age 20
sec Forward Delay 15 sec
Table 5 describes the significant fields shown in the display.
Table 5 show spanning-tree brief Field Descriptions
Field
|
Description
|
VLAN
|
VLAN for which spanning-tree information is shown.
|
Spanning tree enabled protocol
|
Type of spanning tree (IEEE, IBM, CISCO).
|
ROOT ID
|
Indicates the root bridge.
|
Priority
|
Priority indicator.
|
Address
|
MAC address of the port.
|
Hello Time
|
Amount of time, in seconds, that the bridge sends Bridge Protocol Data Units (BPDUs).
|
Max Age
|
Amount of time, in seconds, that a BPDU packet should be considered valid.
|
Forward Delay
|
Amount of time, in seconds, that the port spends in listening or learning mode.
|
Port Name
|
Interface type and number of the port.
|
Port ID
|
Identifier of the named port.
|
Prio
|
Priority associated with the port.
|
Cost
|
Cost associated with the port.
|
Sts
|
Status of the port.
|
Designated Cost
|
Designated cost for the path.
|
Designated Bridge ID
|
Bridge identifier of the bridge assumed to be the designated bridge for the LAN associated with the port.
|
The following is sample output from the show spanning-tree vlan 1 command:
Router# show spanning-tree vlan 1
Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol
Bridge Identifier has priority 32768, address 00e0.1eb2.ddc0
Configured hello time 2, max age 20, forward delay 15
Current root has priority 32768, address 0010.0b3f.ac80
Root port is 5, cost of root path is 10
Topology change flag not set, detected flag not set, changes 1
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15
Timers: hello 0, topology change 0, notification 0
Interface Fa0/1 in Spanning tree 1 is down
Port path cost 100, Port priority 128
Designated root has priority 32768, address 0010.0b3f.ac80
Designated bridge has priority 32768, address 00e0.1eb2.ddc0
Designated port is 1, path cost 10
Timers: message age 0, forward delay 0, hold 0
Table 6 describes the significant fields shown in the display.
Table 6 show spanning-tree vlan Field Descriptions
Field
|
Description
|
Spanning tree
|
Type of spanning tree (IEEE, IBM, CISCO).
|
Bridge Identifier
|
Part of the bridge identifier and taken as the most significant part for bridge ID comparisons.
|
address
|
Bridge MAC address.
|
Root port
|
Identifier of the root port.
|
Topology change
|
Flags and timers associated with topology changes.
|
The following is sample output from the show spanning-tree interface fastethernet0/3 command:
Router# show spanning-tree interface fastethernet0/3
Interface Fa0/3 (port 3) in Spanning tree 1 is down
Port path cost 100, Port priority 128
Designated root has priority 6000, address 0090.2bba.7a40
Designated bridge has priority 32768, address 00e0.1e9f.4abf
Designated port is 3, path cost 410
Timers: message age 0, forward delay 0, hold 0
Related Commands
Command
|
Description
|
spanning-tree vlan
|
Enables the Spanning Tree Protocol on a VLAN.
|
show spantree
To display spanning-tree information for a virtual LAN (VLAN) or port, use the show spantree command in privileged EXEC mode.
show spantree [vlan] [active]
show spantree mod/port
Syntax Description
vlan
|
(Optional) Number of the VLAN; valid values are from 1 to 1001 and from 1025 to 4094.
|
active
|
(Optional) Displays only the active ports.
|
mod/port
|
Number of the module and the port on the module. The slash mark is required.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on the Catalyst 6000 family switches.
|
12.2(2)XT
|
This command was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
If you do not specify the VLAN number, VLAN 1 is displayed.
If you are in Multiple Instances of Spanning Tree (MISTP) mode, instance information is not displayed.
The maximum length of the channel port list can be 47. The space in the Port(s) column might not be enough to display the entire list in one line. If this is the case, the port list is split into multiple lines. For example, in the following display, ports 6/5-8, 6/13, 6/15, 6/17, 6/19 are channeling:
Port(s) Vlan Port-State Cost Prio Portfast Channel_id
------------------------ ---- ------------- --------- ---- -------- ----------
6/5-8,6/13,6/15,6/17,6/1 1 not-connected 2684354 32 disabled 0
The Link Aggregation Control Protocol (LACP) channel protocol does not support half-duplex links. If a port is in active/passive mode and becomes half duplex, the port is suspended (and a syslog message is generated). The port is shown as "connected" using the show port command and as "not connected" using the show spantree command. This discrepancy is because the port is physically connected but never joined between spanning tree. To get the port to join spanning tree, either set the duplex to full or set the channel mode to off for that port.
Examples
The following example shows how to display the active spanning tree port configuration for VLAN 1 while in Per VLAN Spanning Tree (PVST+ mode):
Router# (enable) show spantree 1 active
Designated Root 00-60-70-4c-70-00
Designated Root Priority 16384
Root Max Age 14 sec Hello Time 2 sec Forward Delay 10 sec
Bridge ID MAC ADDR 00-d0-00-4c-18-00
Bridge Max Age 20 sec Hello Time 2 sec Forward Delay 15 sec
Port Vlan Port-State Cost Prio Portfast Channel_id
------------------------ ---- ------------- --------- ---- -------- ----------
2/3 1 forwarding 19 32 disabled 0
2/12 1 forwarding 19 32 disabled 0
The following example shows how to display the active spanning-tree port configuration for VLAN 1 (while in MISTP mode):
Router# (enable) show spantree 1 active
VLAN mapped to MISTP Instance: 1
Port Vlan Port-State Cost Prio Portfast Channel_id
------------------------ ---- ------------- --------- ---- -------- ----------
2/3 1 forwarding 200000 32 disabled 0
2/12 1 forwarding 200000 32 disabled 0
Table 7 describes the significant fields shown in the displays.
Table 7 show spantree Field Descriptions
Field
|
Description
|
VLAN
|
VLAN for which the spanning-tree information is shown.
|
Spanning tree
|
Status of whether Spanning Tree Protocol is enabled or disabled.
|
Designated Root
|
MAC address of the designated spanning-tree root bridge.
|
Designated Root Priority
|
Priority of the designated root bridge.
|
Designated Root Cost
|
Total path cost to reach the root.
|
Designated Root Port
|
Port through which the root bridge can be reached (shown only on nonroot bridges).
|
Root Max Age
|
Amount of time a bridge packet data unit (BPDU) packet should be considered valid.
|
Hello Time
|
Number of times the root bridge sends BPDUs.
|
Forward Delay
|
Amount of time the port spends in listening or learning mode.
|
Port
|
Port number.
|
Vlan
|
VLAN to which the port belongs.
|
Port-State
|
Spanning tree port state (disabled, inactive, not-connected, blocking, listening, learning, forwarding, bridging, or type-pvid-inconsistent).
|
Cost
|
Cost associated with the port.
|
Prio
|
Priority associated with the port.
|
Portfast
|
Status of whether the port is configured to use the PortFast feature.
|
Channel_id
|
Channel ID number.
|
Related Commands
Command
|
Description
|
show spantree backbonefast
|
Displays whether the spanning-tree BackboneFast Convergence feature is enabled.
|
show spantree blockedports
|
Displays only the blocked ports on a per-VLAN or per-instance basis.
|
show spantree portvlancost
|
Shows the path cost for the VLANs or extended-range VLANs.
|
show spantree statistics
|
Shows spanning tree statistical information
|
show spantree summary
|
Displays a summary of spanning-tree information.
|
show spantree uplinkfast
|
Shows the UplinkFast feature settings.
|
show vlans dot1q
To display statistics about 802.1q virtual LAN (VLAN) subinterfaces, use the show vlans dot1q command in privileged EXEC mode.
show vlans dot1q [internal | interface-type interface-number.subinterface-number [detail] |
outer-id [interface-type interface-number | second-dot1q [inner-id | any]] [detail]]
Syntax Description
internal
|
(Optional) Displays internal Q-in-Q information. Used for troubleshooting purposes.
|
interface-type
|
(Optional) Interface type.
|
interface-number
|
(Optional) Interface number.
|
.subinterface-number
|
(Optional) Subinterface number in the range 1 to 4294967293. A period (.) must be entered between the interface-number argument and the subinterface-number argument.
|
detail
|
(Optional) Displays detailed information.
|
outer-id
|
(Optional) Outer VLAN identifier. The allowed range is from 1 to 4095.
|
second-dot1q
|
(Optional) Displays inner VLAN subinterface information.
|
inner-id
|
(Optional) Inner VLAN identifier. The allowed range is from 1 to 4095.
|
any
|
(Optional) Displays information for all of the inner VLAN subinterfaces configured as "any."
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.3(7)T
|
This command was introduced.
|
Usage Guidelines
If no arguments or keywords are entered, statistics for all of the 802.1q VLAN IDs are displayed.
Examples
The following sample output from the show vlans dot1q command displays the statistics for all of the 802.1q VLAN IDs. Only the outer VLAN IDs are displayed.
Total statistics for 802.1Q VLAN 1:
441 packets, 85825 bytes input
1028 packets, 69082 bytes output
Total statistics for 802.1Q VLAN 101:
5173 packets, 510384 bytes input
3042 packets, 369567 bytes output
Total statistics for 802.1Q VLAN 201:
1012 packets, 119254 bytes input
1018 packets, 120393 bytes output
Total statistics for 802.1Q VLAN 301:
3163 packets, 265272 bytes input
1011 packets, 120750 bytes output
Total statistics for 802.1Q VLAN 401:
1012 packets, 119254 bytes input
1010 packets, 119108 bytes output
Table 8 describes the significant fields shown in the display.
Table 8 show vlans dot1q Field Descriptions
Field
|
Description
|
Total statistics for 802.1Q VLAN 1
|
Statistics are shown for the VLAN ID with the specified outer ID.
|
packets
|
Number of packets encapsulated by the 802.1Q-in-Q VLAN.
|
bytes input
|
Number of bytes input.
|
bytes output
|
Number of bytes output.
|
The following sample output from the show vlans dot1q command displays the statistics for the 802.1q VLAN subinterface configured on Gigabit Ethernet interface 5/0:
Router# show vlans dot1q GigabitEthernet5/0.1011001
GigabitEthernet5/0.1011001 (101/1001)
1005 packets, 122556 bytes input
1023 packets, 125136 bytes output
Table 9 describes the significant fields shown in the display.
Table 9 show vlans dot1q (subinterface) Field Descriptions
Field
|
Description
|
GigabitEthernet5/0.1011001 (101/1001)
|
Statistics are shown for subinterface Gigabit Ethernet 5/0.1011001 with an outer VLAN ID of 101 and an inner VLAN ID of 1001.
|
packets
|
Number of packets encapsulated by the 802.1Q-in-Q VLAN.
|
bytes input
|
Number of bytes input.
|
bytes output
|
Number of bytes output.
|
The following sample output from the show vlans dot1q command displays the summary statistics for all of the VLAN subinterfaces under the physical interface Gigabit Ethernet 5/0 that have an outer VLAN ID of 101:
Router# show vlans dot1q 101 GigabitEthernet5/0
Total statistics for 802.1Q VLAN 101 on GigabitEthernet5/0:
5218 packets, 513444 bytes input
3042 packets, 369567 bytes output
The following sample output from the show vlans dot1q command displays the individual subinterface statistics and summary statistics for all of the VLAN subinterfaces under the physical interface Gigabit Ethernet 5/0 that have an outer VLAN ID of 101:
Router# show vlans dot1q 101 GigabitEthernet5/0 detail
GigabitEthernet5/0.101 (0)
3220 packets, 269148 bytes input
1008 packets, 119622 bytes output
GigabitEthernet5/0.1019999 (101/1-1000,1003-2000)
3 packets, 1143 bytes output
GigabitEthernet5/0.1011001 (101/1001)
1005 packets, 122556 bytes input
1023 packets, 125136 bytes output
GigabitEthernet5/0.1011002 (101/1002)
1005 packets, 122556 bytes input
1008 packets, 123666 bytes output
Total statistics for 802.1Q VLAN 101 on GigabitEthernet5/0:
5230 packets, 514260 bytes input
3042 packets, 369567 bytes output
The following sample output from the show vlans dot1q command displays the statistics for an outer VLAN and inner VLAN ID combination. This is a summary that displays the total for all of the subinterfaces on the router that are configured with the specified IDs.
Note
When ambiguous subinterfaces are used, the statistics displayed are at subinterface-level granularity, not VLAN-ID granularity. For example, when a range of inner VLAN IDs is assigned to a subinterface, the statistics are reported only at the subinterface level. Statistics are not available for each inner VLAN ID.
Router# show vlans dot1q 101 second-dot1q 1001 detail
GigabitEthernet5/0.1011001 (101/1001)
1005 packets, 122556 bytes input
1023 packets, 125136 bytes output
Total statistics for Outer/Inner VLAN 101/1001:
1005 packets, 122556 bytes input
1023 packets, 125136 bytes output
The following sample output from the show vlans dot1q command displays the statistics for a specific outer VLAN ID of 301 and an inner VLAN ID of any. This is a summary that displays the total for all of the subinterfaces on the router that are configured with the specified IDs.
Router# show vlans dot1q 301 second-dot1q any
GigabitEthernet5/0.301999 (301/any)
3 packets, 1128 bytes output
Total statistics for Outer/Inner VLAN 301/"any":
3 packets, 1128 bytes output
The following sample output from the show vlans dot1q command displays some internal information about the Q-in-Q subsystem and is used for troubleshooting purposes (typically by Cisco engineers):
Router# show vlans dot1q internal
Internal VLAN representation on FastEthernet0/0:
VLAN Id: 201 (.1Q-in-.1Q tree, 3 elements)
Inner VLAN Id: (0 -0 ) Fa0/0.201
dot1q software subblock bitlist missing
Inner VLAN Id: (2001-2001) Fa0/0.2012001
Inner VLAN Id: (2002-2002) Fa0/0.2012002
VLAN Id: 401 (.1Q-in-.1Q tree, 3 elements)
Inner VLAN Id: (0 -0 ) Fa0/0.401
dot1q software subblock bitlist missing
Inner VLAN Id: (100 -900 ) Fa0/0.4019999
Inner VLAN Id: (1001-2000) Fa0/0.4019999
Internal VLAN representation on GigabitEthernet5/0:
VLAN Id: 101 (.1Q-in-.1Q tree, 5 elements)
Inner VLAN Id: (0 -0 ) Gi5/0.101
dot1q software subblock bitlist missing
Inner VLAN Id: (1 -1000) Gi5/0.1019999
Inner VLAN Id: (1001-1001) Gi5/0.1011001
Inner VLAN Id: (1002-1002) Gi5/0.1011002
Inner VLAN Id: (1003-2000) Gi5/0.1019999
VLAN Id: 301 (.1Q-in-.1Q tree, 1 elements)
Inner VLAN Id: (0 -0 ) Gi5/0.301
dot1q software subblock bitlist missing
Related Commands
Command
|
Description
|
encapsulation dot1q
|
Enables IEEE 802.1q encapsulation of traffic on a specified subinterface in a VLAN.
|
vlan (VLAN configuration mode)
|
Configures a specific VLAN.
|
vlan database
|
Enters VLAN configuration mode.
|
show vlans
To view virtual LAN (VLAN) subinterfaces, use the show vlans command in privileged EXEC mode.
show vlans
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
11.0
|
This command was introduced.
|
12.1(3)T
|
This command was modified to display traffic count on FastEthernet subinterfaces.
|
Examples
The following is sample output from the show vlans command indicating a native VLAN and a bridged group:
Virtual LAN ID: 1 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: FastEthernet1/0/2
This is configured as native Vlan for the following interface(s) :
Protocols Configured: Address: Received: Transmitted:
Virtual LAN ID: 100 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: FastEthernet1/0/2.1
Protocols Configured: Address: Received: Transmitted:
Bridging Bridge Group 1 0 0
The following is sample output from the show vlans command that shows the traffic count on Fast Ethernet subinterfaces:
Virtual LAN ID: 2 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: FastEthernet5/0.1
Protocols Configured: Address: Received: Transmitted:
Virtual LAN ID: 3 (IEEE 802.1Q Encapsulation)
vLAN Trunk Interface: Ethernet6/0/1.1
Protocols Configured: Address: Received: Transmitted:
Virtual LAN ID: 4 (Inter Switch Link Encapsulation)
vLAN Trunk Interface: FastEthernet5/0.2
Protocols Configured: Address: Received: Transmitted:
Table 10 describes the significant fields shown in the display.
Table 10 show vlans Field Descriptions
Field
|
Description
|
Virtual LAN ID
|
Domain number of the VLAN.
|
vLAN Trunk Interface
|
Subinterface that carries the VLAN traffic.
|
Protocols Configured
|
Protocols configured on the VLAN.
|
Address
|
Network address.
|
Received
|
Packets received.
|
Transmitted
|
Packets sent.
|
Related Commands
Command
|
Description
|
vlan (VLAN configuration mode)
|
Configures a specific VLAN.
|
vlan database
|
Enters VLAN configuration mode.
|
show vlan-switch
To display virtual LAN (VLAN) information, use the show vlan-switch command in privileged EXEC mode.
show vlan-switch [brief | id vlan | name name]
Syntax Description
brief
|
(Optional) Displays only a single line for each VLAN, naming the VLAN, status, and ports.
|
id vlan
|
(Optional) Displays information about a single VLAN identified by VLAN ID number; valid values are from 1 to 1005.
|
name name
|
(Optional) Displays information about a single VLAN identified by VLAN name; valid values are an ASCII string from 1 to 32 characters.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.2(2)XT
|
This command was introduced on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
Each Ethernet switch port and Ethernet repeater group belongs to only one VLAN. Trunk ports can be on multiple VLANs.
Examples
The following example shows how to display the VLAN parameters for all VLANs within the administrative domain:
---- -------------------------------- --------- -------------------------------
1 default active Fa4/0, Fa4/1, Fa4/2, Fa4/3
Fa4/4, Fa4/5, Fa4/6, Fa4/7
Fa4/8, Fa4/9, Fa4/10, Fa4/11
Fa4/12, Fa4/13, Fa4/14, Fa4/15
Fa4/16, Fa4/17, Fa4/18, Fa4/19
Fa4/20, Fa4/21, Fa4/22, Fa4/23
Fa4/24, Fa4/25, Fa4/26, Fa4/27
Fa4/28, Fa4/29, Fa4/30, Fa4/31
Fa4/32, Fa4/33, Fa4/34, Fa4/35
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 1002 1003
2 enet 100002 1500 - - - - - 0 0
3 enet 100003 1500 - - - - - 0 0
5 enet 100005 1500 - - - - - 0 0
1002 fddi 101002 1500 - 0 - - - 1 1003
1003 tr 101003 1500 1005 0 - - srb 1 1002
1004 fdnet 101004 1500 - - 1 ibm - 0 0
1005 trnet 101005 1500 - - 1 ibm - 0 0
Table 11 describes the significant fields shown in the display.
Table 11 show vlan Field Descriptions
Field
|
Description
|
VLAN
|
VLAN number.
|
Name
|
Name, if configured, of the VLAN.
|
Status
|
Status of the VLAN (active or suspend).
|
Ports
|
Ports that belong to the VLAN.
|
Type
|
Media type of the VLAN.
|
SAID
|
Security association ID value for the VLAN.
|
MTU
|
Maximum transmission unit size for the VLAN.
|
Parent
|
Parent VLAN, if one exists.
|
RingNo
|
Ring number for the VLAN, if applicable.
|
BrdgNo
|
Bridge number for the VLAN, if applicable.
|
Stp
|
Spanning-Tree Protocol type used on the VLAN.
|
BrdgMode
|
Bridging mode for this VLAN—possible values are source-route bridging (SRB) and source-route transparent bridging (SRT); the default is SRB.
|
Trans1, Trans2
|
Types of translational bridges that the VLAN in the VLAN column is configured to translate to. Translational bridge VLANs must be a VLAN media type different from the affected VLAN; if two VLANs are specified, each one must be a different type.
Common VLAN types include Ethernet (enet), FDDI (fdnet), and Token Ring (tnet). The numbers in the "Trans1" and "Trans2" columns refer to the VLAN ID numbers of the translational bridge VLANs.
Note The term "VLAN translation" is also used in Cisco configuration guides for mapping specific VLANs in a given trunk to another VLAN that is of the same media type. In this context the term VLAN translation refers to a form of VLAN mapping that is using the term "VLAN translation" to describe it.>
|
show vtp
To display general information about the virtual LAN (VLAN) Trunk Protocol (VTP) management domain, status, and counters, use the show vtp command in privileged EXEC mode.
show vtp {counters | status}
Syntax Description
counters
|
Displays the VTP counters for the switch.
|
status
|
Displays the general information about the VTP management domain.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
11.2(8)SA4
|
This command was introduced.
|
12.2(2)XT
|
This command was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Examples
The following is sample output from the show vtp counters command:
Router# show vtp counters
Summary advertisements received : 38
Subset advertisements received : 0
Request advertisements received : 0
Summary advertisements transmitted : 13
Subset advertisements transmitted : 3
Request advertisements transmitted : 0
Number of config revision errors : 0
Number of config digest errors : 0
Number of V1 summary errors : 0
Trunk Join Transmitted Join Received Summary advts received from
non-pruning-capable device
---------------- ---------------- ---------------- ---------------------------
Table 12 describes the significant fields shown in the display.
Table 12 show vtp counters Field Descriptions
Field
|
Description
|
Summary advertisements received
|
Number of summary advertisements received by this switch on its trunk ports. Summary advertisements contain the management domain name, the configuration revision number, the update time stamp and identity, the authentication checksum, and the number of subset advertisements to follow.
|
Subset advertisements received
|
Number of subset advertisements received by this switch on its trunk ports. Subset advertisements contain all the information for one or more VLANs.
|
Request advertisements received
|
Number of advertisement requests received by this switch on its trunk ports. Advertisement requests normally request information on all VLANs. They can also request information on a subset of VLANs.
|
Summary advertisements transmitted
|
Number of summary advertisements sent by this switch on its trunk ports. Summary advertisements contain the management domain name, the configuration revision number, the update timestamp and identity, the authentication checksum, and the number of subset advertisements to follow.
|
Subset advertisements transmitted
|
Number of subset advertisements sent by this switch on its trunk ports. Subset advertisements contain all the information for one or more VLANs.
|
Request advertisements transmitted
|
Number of advertisement requests sent by this switch on its trunk ports. Advertisement requests normally request information on all VLANs. They can also request information on a subset of VLANs.
|
Number of config revision errors
|
Number of revision errors.
Whenever you define a new VLAN, delete an existing VLAN, suspend or resume an existing VLAN, or modify the parameters on an existing VLAN, the configuration revision number of the switch increments.
Revision errors increment whenever the switch receives an advertisement whose revision number matches the revision number of the switch, but the MD5 digest values do not match. This error indicates that the VTP password in the two switches is different, or the switches have different configurations.
These errors indicate that the switch is filtering incoming advertisements, which causes the VTP database to become unsynchronized across the network.
|
Number of config digest errors
|
Number of MD5 digest errors.
Digest errors increment whenever the MD5 digest in the summary packet and the MD5 digest of the received advertisement calculated by the switch do not match. This error usually indicates that the VTP password in the two switches is different. To solve this problem, make sure the VTP password on all switches is the same.
These errors indicate that the switch is filtering incoming advertisements, which causes the VTP database to become unsynchronized across the network.
|
Number of V1 summary errors
|
Number of version 1 errors.
Version 1 summary errors increment whenever a switch in VTP V2 mode receives a VTP version 1 frame. These errors indicate that at least one neighboring switch is either running VTP version 1 or VTP version 2 with V2-mode disabled. To solve this problem, change the configuration of the switches in VTP V2-mode to disabled.
|
Join Transmitted
|
Number of VTP pruning messages transmitted on the trunk.
|
Join Received
|
Number of VTP pruning messages received on the trunk.
|
Summary Advts Received from non-pruning-capable device
|
Number of VTP summary messages received on the trunk from devices that do not support pruning.
|
The following is sample output from the show vtp status command:
Configuration Revision : 1
Maximum VLANs supported locally : 68
Number of existing VLANs : 7
VTP Operating Mode : Server
VTP Pruning Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x3D 0x02 0xD4 0x3A 0xC4 0x46 0xA1 0x03
Configuration last modified by 172.20.130.52 at 3-4-93 22:25:
Table 13 describes the significant fields shown in the display.
Table 13 show vtp status Field Descriptions
Field
|
Description
|
VTP Version
|
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Displays the VTP version operating on the switch. By default, switches implement version 1.
Catalyst Switches
Displays the VTP version operating on the switch. By default, Catalyst 2900 and 3500 XL switches implement version 1 but can be set to version 2.
|
Configuration Revision
|
Current configuration revision number on this switch.
|
Maximum VLANs Supported Locally
|
Maximum number of VLANs supported locally.
|
Number of Existing VLANs
|
Number of existing VLANs.
|
VTP Operating Mode
|
Displays the VTP operating mode, which can be server, client, or transparent.
Server—A switch in VTP server mode is enabled for VTP and sends advertisements. You can configure VLANs on it. The switch guarantees that it can recover all VLAN information in the current VTP database from nonvolatile storage after reboot. By default, every switch is a VTP server.
Client—A switch in VTP client mode is enabled for VTP, can send advertisements, but does not have enough nonvolatile storage to store VLAN configurations. You cannot configure VLANs on it. When a VTP client starts up, it does not transmit VTP advertisements until it receives advertisements to initialize its VLAN database.
Transparent—A switch in VTP transparent mode is disabled for VTP, does not transmit advertisements or learn from advertisements sent by other devices, and cannot affect VLAN configurations on other devices in the network. The switch receives VTP advertisements and forwards them on all trunk ports except the one on which the advertisement was received. The configuration of multi-VLAN ports causes the switch to automatically enter transparent mode.
Note Catalyst 2912MF, 2924M, and 3500 XL switches support up to 250 VLANs. All other Catalyst 2900 XL switches support up to 64 VLANs. If you define more than 250 or 64 or if the switch receives an advertisement that contains more than 250 or 64 VLANs, the switch automatically enters VTP transparent mode and operates with the VLAN configuration preceding the one that sent it into transparent mode.
Note Catalyst 2912MF, 2924M, and 3500 XL switches support up to 250 VLANs. All other Catalyst 2900 XL switches support up to 64 VLANs.
For Catalyst 2912MF, 2924M, and 3500 XL switches, if you define more than 250 or if the switch receives an advertisement that contains more than 250 VLANs, the switch automatically enters VTP transparent mode and operates with the VLAN configuration preceding the one that sent it into transparent mode.
For all other Catalyst 2900 XL switches, if you define more than 64 or if the switch receives an advertisement that contains more than 64 VLANs, the switch automatically enters VTP transparent mode and operates with the VLAN configuration preceding the one that sent it into transparent mode.
|
VTP Domain Name
|
Name that identifies the administrative domain for the switch.
|
VTP Pruning Mode
|
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
VTP pruning mode is not supported on the Cisco 2600 series and Cisco 3600 series routers.
Catalyst Switches
Displays whether pruning is enabled or disabled. Enabling pruning on a VTP server enables pruning for the entire management domain. Pruning restricts flooded traffic to those trunk links that the traffic must use to access the appropriate network devices.
|
VTP V2 Mode
|
Displays if VTP version 2 mode is enabled. All VTP version 2 switches operate in version 1 mode by default. Each VTP switch automatically detects the capabilities of all other VTP devices. A network of VTP devices should be configured to version 2 only if all VTP switches in the network can operate in version 2 mode.
|
VTP Traps Generation
|
Displays whether VTP traps are transmitted to a network management station.
|
MD5 Digest
|
16-byte checksum of the VTP configuration.
|
Configuration Last Modified
|
Displays the date and time of the last configuration modification. Displays the IP address of the switch that caused the configuration change to the database.
|
Related Commands
Command
|
Description
|
clear vtp counters
|
Clears the VTP and pruning counters.
|
vtp
|
Configures the VTP mode.
|
spanning-tree backbonefast
To enable the BackboneFast feature, use the spanning-tree backbonefast command in global configuration mode. To return to the default setting, use the no form of this command.
spanning-tree backbonefast
no spanning-tree backbonefast
Syntax Description
This command has no arguments or keywords.
Defaults
BackboneFast is disabled.
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.1(6)EA2
|
This command was introduced.
|
12.2(15)ZJ
|
This command was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.3(4)T
|
This command was integrated into Cisco IOS Release 12.3(4)T on the following platforms: Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
BackboneFast should be enabled on all of the Cisco routers containing an Ethernet switch network module. BackboneFast provides for fast convergence in the network backbone after a spanning-tree topology change. It enables the switch to detect an indirect link failure and to start the spanning-tree reconfiguration sooner than it would under normal spanning-tree rules.
Use the show spanning-tree privileged EXEC command to verify your settings.
Examples
The following example shows how to enable BackboneFast on the switch:
Router(config)# spanning-tree backbonefast
Related Commands
Command
|
Description
|
show spanning-tree
|
Displays spanning-tree information for the specified spanning-tree instances.
|
spanning-tree cost
To set the path cost of the interface for Spanning Tree Protocol (STP) calculations, use the spanning-tree cost command in interface configuration mode. To revert to the default value, use the no form of this command.
spanning-tree cost cost
no spanning-tree cost
Syntax Description
cost
|
Path cost; valid values are from 1 to 200000000 for Cisco IOS Releases 12.1(3a)E and later releases and from 1 to 65535 for Cisco IOS releases prior to Cisco IOS Release 12.1(3a)E.
|
Defaults
The default path cost is computed from the bandwidth setting of the interface; default path costs are:
Ethernet: 100
16-Mb Token Ring: 62
FDDI: 10
FastEthernet: 10
ATM 155: 6
GigibitEthernet: 1
HSSI: 647
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on the Catalyst 6000 family switches.
|
12.1(3a)E
|
This command was modified to support 32-bit path cost.
|
12.2(2)XT
|
This command was introduced on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
When you specify a value for the cost argument, higher values indicate higher costs. This range applies regardless of the protocol type specified.
Examples
The following example shows how to access an interface and set a path cost value of 250 for the spanning tree VLAN associated with that interface:
Router(config)# interface ethernet 2/0
Router(config-if)# spanning-tree cost 250
Related Commands
Command
|
Description
|
show spanning-tree
|
Displays spanning-tree information for the specified spanning-tree instances.
|
spanning-tree port-priority
|
Sets an interface priority when two bridges tie for position as the root bridge.
|
spanning-tree portfast (global configuration mode)
|
Enables PortFast mode, where the interface is immediately put into the forwarding state upon linkup without waiting for the timer to expire.
|
spanning-tree portfast (interface configuration mode)
|
Enables PortFast mode, where the interface is immediately put into the forwarding state upon linkup without waiting for the timer to expire.
|
spanning-tree uplinkfast
|
Enables the UplinkFast feature.
|
spanning-tree vlan
|
Configures STP on a per-VLAN basis.
|
spanning-tree port-priority
To set an interface priority when two bridges tie for position as the root bridge, use the spanning-tree port-priority command in interface configuration mode. To revert to the default value, use the no form of this command.
spanning-tree port-priority port-priority
no spanning-tree port-priority
Syntax Description
port-priority
|
Port priority; valid values are from 2 to 255. The default is 128.
|
Defaults
The port priority is 128.
Command Modes
Interface configuration
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on the Catalyst 6000 family switches.
|
12.2(2)XT
|
This command was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
The priority you set breaks the tie.
Examples
The following example shows how to increase the likelihood that the spanning tree instance 20 is chosen as the root-bridge on interface ethernet 2/0:
Router(config)# interface ethernet 2/0
Router(config-if)# spanning-tree port-priority 20
Related Commands
Command
|
Description
|
show spanning-tree
|
Displays spanning-tree information for the specified spanning-tree instances.
|
spanning-tree cost
|
Sets the path cost of the interface for STP calculations.
|
spanning-tree portfast (global configuration mode)
|
Enables PortFast mode, where the interface is immediately put into the forwarding state upon linkup without waiting for the timer to expire.
|
spanning-tree portfast (interface configuration mode)
|
Enables PortFast mode, which places the interface immediately into the forwarding state upon linkup without waiting for the timer to expire.
|
spanning-tree uplinkfast
|
Enables the UplinkFast feature.
|
spanning-tree vlan
|
Configures STP on a per-VLAN basis.
|
spanning-tree vlan
To configure Spanning Tree Protocol (STP) on a per-virtual LAN (VLAN) basis, use the spanning-tree vlan command in global configuration mode. To return to the default value, use the no form of this command.
spanning-tree vlan vlan-id [forward-time seconds | hello-time seconds | max-age seconds |
priority priority | protocol protocol | [root {primary | secondary} [diameter net-diameter
[hello-time seconds]]]]
no spanning-tree vlan vlan-id [forward-time | hello-time | max-age | priority | protocol | root]
Syntax Description
vlan-id
|
VLAN identification number; valid values are from 1 to 1005.
|
forward-time seconds
|
(Optional) Sets the STP forward delay time; valid values are from 4 to 30 seconds.
|
hello-time seconds
|
(Optional) Specifies in seconds, the duration between the generation of configuration messages by the root switch; valid values are from 1 to 10 seconds.
|
max-age seconds
|
(Optional) Sets the maximum number of seconds the information in a bridge packet data unit (BPDU) is valid; valid values are from 6 to 40 seconds.
|
priority priority
|
(Optional) Sets the STP bridge priority; valid values are from 0 to 65535.
|
protocol protocol
|
(Optional) Sets the STP. See the "Usage Guidelines" section for a list of valid values.
|
root primary
|
(Optional) Forces this switch to be the root bridge.
|
root secondary
|
(Optional) Specifies this switch to act as the root switch should the primary root fail.
|
diameter net-diameter
|
(Optional) Specifies the maximum number of bridges between any two points of attachment of end stations; valid values are from 2 through 7.
|
Defaults
forward-time: 15 seconds
hello-time: 2 seconds
max-age: 20 seconds
priority: The default with IEEE STP enabled is 32,768; with STP enabled, the default is 128.
protocol: IEEE
root: No STP root
Command Modes
Global configuration
Command History
Release
|
Modification
|
12.0(7)XE
|
This command was introduced on the Catalyst 6000 family switches.
|
12.1(1)E
|
Support for this command on the Catalyst 6000 family switches was extended to the E train.
|
12.2(2)XT
|
This command was implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
12.2(8)T
|
This command was integrated into Cisco IOS Release 12.2(8)T on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
|
Usage Guidelines
When setting the max-age seconds, if a bridge does not hear Bridge Protocol Data Units (BPDU) from the root bridge within the specified interval, it assumes that the network has changed and recomputes the spanning tree topology.
Valid values for protocol are dec (Digital STP), ibm (IBM STP), ieee (IEEE Ethernet STP), and vlan-bridge (VLAN Bridge STP).
The spanning-tree root primary command alters this switch's bridge priority to 8,192. If you enter after spanning-tree root primary command and the switch does not become root, then the bridge priority is changed to 100 less than the bridge priority of the current bridge. If the switch does not become root, an error results.
The spanning-tree root secondary command alters this switch's bridge priority to 16,384. If the root switch should fail, this switch becomes the next root switch.
Use the spanning-tree root commands on backbone switches only.
Examples
The following example shows how to enable spanning tree on VLAN 200:
Router(config)# spanning-tree vlan 200
The following example shows how to configure the switch as the root switch for VLAN 10 with a network diameter of 4:
Router(config)# spanning-tree vlan 10 root primary diameter 4
The following example shows how to configure the switch as the secondary root switch for VLAN 10 with a network diameter of 4:
Router(config)# spanning-tree vlan 10 root secondary diameter 4
Related Commands
Command
|
Description
|
show spanning-tree
|
Displays spanning-tree information for the specified spanning-tree instances.
|
spanning-tree cost
|
Sets the path cost of the interface for STP calculations.
|
spanning-tree port-priority
|
Sets an interface priority when two bridges tie for position as the root bridge.
|
spanning-tree portfast (global configuration mode)
|
Enables PortFast mode, where the interface is immediately put into the forwarding state upon linkup, without waiting for the timer to expire.
|
spanning-tree portfast (interface configuration mode)
|
Enables PortFast mode, where the interface is immediately put into the forwarding state upon linkup, without waiting for the timer to expire.
|
spanning-tree uplinkfast
|
Enables the UplinkFast feature.
|