Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W - X -

Index

Symbols

!Mini Protocol Analyzer 56-1

Numerics

4K VLANs (support for 4,096 VLANs) 12-2

802.10 SAID (default) 12-6

802.1Q

encapsulation 8-3

Layer 2 protocol tunneling

See Layer 2 protocol tunneling

mapping to ISL VLANs 12-12, 12-15

trunks 8-2

restrictions 8-5

tunneling 15-1

configuration guidelines 15-4

configuring tunnel ports 15-6

802.1Q Ethertype, specifying custom 8-15

802.1X

See port-based authentication

802.3ad

See LACP

802.3X Flow Control 7-12

A

AAA 29-1, 30-1, 32-1

access control entries and lists 29-1, 30-1, 32-1

access-enable host timeout (not supported) 30-2

access interface (IP subscriber) 22-3

access lists, using with WCCP 48-10

access port, configuring 8-14

ACEs and ACLs 29-1, 30-1, 32-1

acronyms, list of A-1, B-1

addresses

IP, see IP addresses

MAC, see MAC addresses

advertisements, VTP 11-3

aggregate label 21-2, 21-4

aggregate policing

see QoS policing

aging time

IP MLS 43-20

maximum

for MSTP 17-47

MSTP accelerated 17-46

MSTP maximum 17-47

alarms

major 46-12

minor 46-12

Allow DHCP Option 82 on Untrusted Port

configuring 33-10

understanding 33-3

any transport over MPLS (AToM) 21-13

compatibility with previous releases of AToM 21-15

Ethernet over MPLS 21-16

ARP spoofing 34-1

AToM 21-13

authentication

See also port-based authentication

Authentication, Authorization, and Accounting

See AAA

Authentication, Authorization, and Accounting (AAA) 32-1

authorized ports with 802.1X 40-4

auto-sync command 6-6

B

BackboneFast

See STP BackboneFast

backup interfaces

See Flex Links

bandwidth-remaining ratio (BRR), IP subscriber 22-4, 22-5, 22-6, 22-7

binding database, DHCP snooping

See DHCP snooping binding database

binding database, DHCP snooping

See DHCP snooping binding database

blocking floods 36-1

blocking state, STP 17-7

boot bootldr command 2-19

boot command 2-15

boot config command 2-19

boot system command 2-14, 2-19

boot system flash command 2-15

BPDU, RSTP format 17-15

BPDU guard

See STP BPDU guard

bridge groups 19-2

bridge ID

See STP bridge ID

bridge priority, STP 17-33

bridge protocol data units

see BPDUs

bridging 19-2

broadcast storms

see traffic-storm control

C

cache engine clusters 48-1

cache engines 48-1

cache farms

See cache engine clusters

Call Home

description 55-1

message format options 55-1

messages

format options 55-1

call home 55-1

alert groups 55-6

configuring e-mail options 55-8

contact information 55-3

default settings 55-15

destination profiles 55-4

displaying information 55-11

mail-server priority 55-9

pattern matching 55-8

periodic notification 55-7

rate limit messages 55-8

severity threshold 55-8

smart call home feature 55-2

SMTP server 55-8

testing communications 55-10

call home alert groups

configuring 55-6

description 55-6

subscribing 55-6

call home contacts

assigning information 55-3

call home destination profiles

attributes 55-4

configuring 55-5

description 55-4

displaying 55-14

call home notifications

full-txt format for syslog 55-25

XML format for syslog 55-25

cautions for passwords

encrypting 2-10

TACACS+ 2-10

CEF

configuring

MSFC2 23-5

supervisor engine 23-4

examples 23-3

Layer 3 switching 23-2

packet rewrite 23-2

certificate authority (CA) 55-3

CGMP 27-8

channel-group group

command 10-8, 10-12, 10-13

command example 10-9

checking running configuration 2-4

Cisco Cache Engines 48-2

Cisco Express Forwarding 21-3

Cisco Group Management Protocol

See CGMP

Cisco IOS Release 12.2SRB software images C-1

Cisco IOS Unicast Reverse Path Forwarding 29-2

CiscoView 1-2

CIST regional root

See MSTP

CIST root

See MSTP

class command 37-60

classification (QoS) 37-106

class-map command 37-52

class map configuration 37-57

class of service (CoS) 37-106

clear mls ip multicast statistics command

clears IP MMLS statistics 25-24

Committed Access Rate (CAR), not supported 37-2

community ports 13-3

community VLANs 13-2, 13-3

Concurrent routing and bridging (CRB) 19-2

CONFIG_FILE environment variable

configuration file, viewing 2-19

description 2-18

config-register command 2-16

config terminal command 2-3

configuration

file, saving 2-5

register

changing settings 2-16

configuration2-14to 2-17

settings at startup 2-15

configuration example

EoMPLS port mode 21-17, 21-20

EoMPLS VLAN mode 21-17

configuration register boot field

listing value 2-17

modification tasks 2-16

configure command 2-3

configure terminal command 2-16, 7-2

configuring 37-59

global parameters

sample configuration 2-2

using configuration mode2-3to 2-4

contact information

assigning for call home 55-3

control plane policing

See CoPP

control plane policing and protection (CoPP)

per-subscriber 22-4

CoPP

applying QoS service policy to control plane 32-20

configuring

ACLs to match traffic 32-20

enabling MLS QoS 32-20

packet classification criteria 32-20

service-policy map 32-20

control plane configuration mode, entering 32-20

displaying

dynamic information 32-21

number of conforming bytes and packets 32-21

rate information 32-21

entering control plane configuration mode 32-20

monitoring statistics 32-21

overview 32-19

packet classification guidelines 32-21

traffic classification

defining 32-23

guidelines 32-24

overview 32-23

sample ACLs 32-24

sample classes 32-23

CoPP. See control plane policing and protection (CoPP)

copy running-config startup-config command 2-5

copy system

running-config nvram

startup-config command 2-19

CoS, override priority 14-7, 14-8

D

dCEF 23-4, 23-5

debug commands

IP MMLS 25-24

debug fm private-hosts command 34-30

debug private-hosts command 34-31

DEC spanning-tree protocol 19-2

default configuration

802.1X 40-6

dynamic ARP inspection 34-5

Flex Links 9-2

IP MMLS 25-6

MSTP 17-38

supervisor engine 2-2

UDLD 42-3

voice VLAN 14-4

VTP 11-6

default NDE configuration 43-13

default VLAN 8-10

deficit weighted round robin 37-94

denial of service protection

See DoS protection

description command 7-14

destination-ip flow mask 43-3

destination-source-ip flow mask 43-3

device IDs

call home format 55-22

DHCP binding database

See DHCP snooping binding database

DHCP binding table

See DHCP snooping binding database

DHCP option 82

circuit ID suboption 33-5

overview 33-3

packet format, suboption

circuit ID 33-5

remote ID 33-5

remote ID suboption 33-5

DHCP option 82 allow on untrusted port 33-10

DHCP snooping

binding database

See DHCP snooping binding database

configuration guidelines 33-6

configuring 33-8

default configuration 33-6

displaying binding tables 33-18

enabling 33-9, 33-10, 33-11, 33-13, 33-14

enabling the database agent 33-14

message exchange process 33-4

option 82 data insertion 33-3

overview 33-1

Snooping database agent 33-5

DHCP snooping binding database

described 33-2

entries 33-2

DHCP snooping binding table

See DHCP snooping binding database

DHCP Snooping Database Agent

adding to the database (example) 33-18

enabling (example) 33-15

overview 33-5

reading from a TFTP file (example) 33-17

DHCP snooping increased bindings limit 33-7, 33-15

differentiated services codepoint

See QoS DSCP

Differentiated Services Code Point (DSCP) 37-106

DiffServ

configuring short pipe mode 38-34

configuring uniform mode 38-39

short pipe mode 38-31

uniform mode 38-32

DiffServ tunneling modes 38-4

Disabling PIM Snooping Designated Router Flooding 28-6

distributed Cisco Express Forwarding

See dCEF

documentation, related 1-4

document organization 1-2

DoS protection

monitoring packet drop statistics

using monitor session commands 32-15

using VACL capture 32-17

PFC configuration guidelines and restrictions 32-14

Supervisor Engine 720 32-2

default configurations 32-13

egress ACL bridget packet rate limiters 32-7

FIB glean rate limiters 32-9

FIB receive rate limiters 32-9

ICMP redirect rate limiters 32-9

IGMP unreachable rate limiters 32-8

ingress ACL bridget packet rate limiters 32-7

IP errors rate limiters 32-11

IPv4 multicast rate limiters 32-11

IPv6 multicast rate limiters 32-12

Layer 2 PDU rate limiters 32-10

Layer 2 protocol tunneling rate limiters 32-10

MTU failure rate limiters 32-10

multicast directyly connected rate limiters 32-11

multicast FIB miss rate limiters 32-11

multicast IGMP snooping rate limiters 32-10

network under SYN attack 32-5

QoS ACLs 32-3

security ACLs 32-3

TCP intercept 32-5

traffic storm control 32-4

TTL failure rate limiter 32-8

uRPF check 32-4

uRPF failure rate limiters 32-8

VACL log rate limiters 32-10

Supervisor Engine 720Layer 3 security features rate limiters 32-9

understanding how it works 32-2

DSCP

See QoS DSCP

DSCP-based queue mapping 37-85

dual-priority queues

IP subscriber 22-4, 22-9

duplex command 7-7, 7-8

duplex mode

configuring interface 7-6

DWRR 37-94

dynamic ARP inspection

ARP cache poisoning 34-2

ARP requests, described 34-1

ARP spoofing attack 34-2

clearing

log buffer 34-16

statistics 34-15

configuration guidelines 34-5

configuring

log buffer 34-13, 34-14

logging system messages 34-13

rate limit for incoming ARP packets 34-4, 34-9

default configuration 34-5

denial-of-service attacks, preventing 34-9

described 34-1

DHCP snooping binding database 34-3

displaying

ARP ACLs 34-15

configuration and operating state 34-15

log buffer 34-16

statistics 34-15

trust state and rate limit 34-15

error-disabled state for exceeding rate limit 34-4

function of 34-2

interface trust states 34-3

log buffer

clearing 34-16

configuring 34-13, 34-14

displaying 34-16

logging of dropped packets, described 34-4

logging system messages

configuring 34-13

man-in-the middle attack, described 34-2

network security issues and interface trust states 34-3

priority of ARP ACLs and DHCP snooping entries 34-4

rate limiting of ARP packets

configuring 34-9

described 34-4

error-disabled state 34-4

statistics

clearing 34-15

displaying 34-15

validation checks, performing 34-11

Dynamic Host Configuration Protocol snooping

See DHCP snooping

E

eFSU. See enhanced Fast Software Upgrade (eFSU)

Egress ACL support for remarked DSCP 37-12

egress ACL support for remarked DSCP 37-48

egress replication performance improvement 25-12

e-mail addresses

assigning for call home 55-3

e-mail notifications

Call Home 55-1

Embedded CiscoView 1-2

enable command 2-3, 2-16

enable sticky secure MAC address 41-8

enabling

IP MMLS

on router interfaces 25-10

encapsulation 8-3

enhanced Fast Software Upgrade (eFSU)

aborting (issu abortversion command) 8-19

accepting the new software version 8-17

commiting the new software to standby RP (issu commitversion command) 8-17

disabling compatibility matrix check 8-9

displaying maximum outage time for line cards 8-14

error handling 8-4

forcing a switchover (issu runversion command) 8-14

issu loadversion command 8-12

loading new software onto standby RP 8-12

memory reservation on line card 8-3

memory reservation on line card, prohibiting 8-3

OIR not supported 8-7

operation 8-2

outage times 8-3

overview 8-1

performing 8-7

SSO, RPR, and RPR+ modes 8-7

steps 8-8

usage guidelines and limitations 8-6

verifying redundancy mode 8-10

enhanced interface range command 7-3

environmental monitoring

LED indications 46-12

SNMP traps 46-12

supervisor engine and switching modules 46-12

Syslog messages 46-12

using CLI commands 46-10

environment variables

CONFIG_FILE 2-18

controlling 2-19

viewing 2-19

EoMPLS 21-14

configuring 21-16

configuring VLAN mode 21-16

guidelines and restrictions 21-14

port mode 21-16

port mode configuration guidelines 21-20

VLAN mode 21-16

erase startup-config command

configuration files cleared with 2-6

ERSPAN 44-1

EtherChannel

channel-group group

command 10-8, 10-12, 10-13

command example 10-9

configuration guidelines 10-5

configuring

Layer 2 10-8

configuring (tasks) 10-7

interface port-channel

command example 10-8

interface port-channel (command) 10-7

lacp system-priority

command example 10-10

Layer 2, configuring 10-8

load balancing

configuring 10-11

understanding 10-5

modes 10-2

PAgP, understanding 10-3

port-channel interfaces 10-5

port-channel load-balance

command 10-10, 10-11

command example 10-11

STP 10-5

switchport trunk encapsulation dot1q 10-6

understanding 10-1

EtherChannel Guard

See STP EtherChannel Guard

EtherChannel Min-Links 10-12

Ethernet, setting port duplex 7-13

Ethernet over MPLS (EoMPLS) configuration

EoMPLS port mode 21-20

EoMPLS VLAN mode 21-17

examples

software configuration register2-14to 2-17

EXP mutation 38-4

extended range VLANs 12-2

See VLANs

extended system ID, MSTP 17-40

Extensible Authentication Protocol over LAN 40-1

F

fabric switching mode

See switch fabric module

fabric switching-mode allow dcef-only command on Supervisor Engine 720 5-2, 6-4

fall-back bridging 19-2

fiber-optic, detecting unidirectional links 42-1

FIB TCAM 21-2

filters, NDE

destination host filter, specifying 43-27

destination TCP/UDP port, specifying 43-26

overview 43-7

protocol 43-27

source host and destination TCP/UDP port 43-26

Flash memory

configuration process 2-18

configuring router to boot from 2-18

loading system image from 2-17

security precautions 2-18

write protection 2-18

Flex Links 9-1

configuration guidelines 9-2

configuring 9-3

default configuration 9-2

description 9-1

monitoring 9-3

flood blocking 36-1

flow control 7-12

flow masks

IP MLS

destination-ip 43-3

destination-source-ip 43-3

interface-destination-source-ip 43-3

ip-full 43-3

ip-interface-full 43-3

minimum 43-19

overview 43-3

flowmasks

NetFlow (Release 12.2SRA) 43-3

NetFlow (Release 12.2SRB) 43-3

flows

IP MMLS

completely and partially switched 25-3

forward-delay time

MSTP 17-46

forward-delay time, MSTP 17-46

forward-delay time, STP 17-35

frame distribution

See EtherChannel load balancing

G

global parameters, configuring 2-2

H

hardware Layer 3 switching, guidelines 23-4

hello time, MSTP 17-45

hello time, STP 17-34

High Capacity Power Supply Support 46-4

host ports 13-3

I

ICMP unreachable messages 30-1

IDs

serial IDs 55-22

IEEE 802.10 SAID (default) 12-6

IEEE 802.1Q

See 802.1Q

IEEE 802.1Q Ethertype

specifying custom 8-15

IEEE 802.1w

See RSTP

IEEE 802.3ad

See LACP

IEEE 802.3X Flow Control 7-12

IEEE bridging protocol 19-2

IGMP

configuration guidelines 26-7, 27-7

enabling 27-10

Internet Group Management Protocol 27-1

join messages 27-2

leave processing

enabling 27-12

queries 27-3

query interval, configuring 27-11

snooping

fast leave 27-5

joining multicast group 27-2

leaving multicast group 27-4

understanding 27-2

snooping querier

enabling 27-9

understanding 27-2

IGMPv3 25-9

IGMP v3lite 25-9

In Service Software Upgrade (ISSU) 8-1

Integrated routing and bridging (IRB) 19-2

interface

command 2-3

Layer 2 modes 8-4

number 7-1

interface, access (IP subscriber) 22-3

interface access command 22-17

interface-destination-source-ip flow mask 43-3

interface port-channel

command example 10-8

interface port-channel (command) 10-7

interfaces

configuring 7-2

configuring, duplex mode 7-5

configuring, speed 7-5

configururing, overview 7-1

descriptive name, adding 7-14

naming 7-14

range of 7-3

interfaces command 7-2

interfaces range command 7-3

interfaces range macro command 7-4

Internet Group Management Protocol

See IGMP

IP accounting, IP MMLS and 25-8

IP addresses

assigned by BOOTP protocol 2-6

set to default 2-6

IP CEF, topology (figure) 23-3

ip flow-export destination command 43-23

ip flow-export source command 43-22, 43-24, 49-3, 49-4

ip-full flow mask 43-3

ip http server 1-1

ip-interface-full flow mask 43-3

IP MLS

aging-time 43-20

flow masks

destination-ip 43-3

destination-source-ip 43-3

interface-destination-source-ip 43-3

ip-full 43-3

ip-interface-full 43-3

minimum 43-19

overview 43-3

NDE

See NDE

IP MMLS

cache, overview 25-2

configuration guideline 25-7

debug commands 25-24

default configuration 25-6

enabling

on router interfaces 25-10

flows

completely and partially switched 25-3

Layer 3 MLS cache 25-2

overview 25-2

packet rewrite 25-3

router

displaying interface information 25-16

enabling globally 25-9

enabling on interfaces 25-10

multicast routing table, displaying 25-18

PIM, enabling 25-9

switch

statistics, clearing 25-24

unsupported features 25-8

IP multicast

IGMP snooping and 27-9

MLDv2 snooping and 26-9

overview 27-1

IP multicast MLS

See IP MMLS

ip multicast-routing command

enabling IP multicast 25-9

IP phone, configuring 14-5

ip pim command

enabling IP PIM 25-9, 25-10

IP precedence 37-107

IP static routes 2-5

IP subscriber awareness

benefits 22-2

configuration example 22-14

configuration guidelines 22-11

configuring 22-12, 22-13

control plane policing and protection (CoPP) 22-4

interface access command 22-17

IP subscriber interface 22-3

IP subscriber session 22-3

lawful intercept 22-4

overview 22-1

per-subscriber features 22-4

QoS 22-4

bandwidth-remaining ratio (BRR) 22-4, 22-5, 22-6, 22-7

dual-priority queues 22-4, 22-9

priority-rate propagation 22-5, 22-9, 22-10

QoS recommendations 22-5

Radius accounting 22-4

security ACLs 22-4

unsupported features 22-10

IP unnumbered 19-1

IPv4 Multicast over Point-to-Point GRE Tunnels 1-4

IPv4 Multicast VPN 22-1

IPv6 Multicast PFC3 and DFC3 Layer 3 Switching 24-1

ip wccp version command 48-8

ISL encapsulation 8-3

ISL trunks 8-2

isolated port 13-3

isolated VLANs 13-2, 13-3

ISSU, See In Service Software Upgrade (ISSU)

J

join messages, IGMP 27-2

jumbo frames 7-9

L

label edge router 21-2

label switched path 21-16

label switch router 21-2, 21-3

LACP

system ID 10-4

lawful intercept, per-subscriber 22-4

Layer 2

configuring interfaces 8-6

access port 8-14

trunk 8-7

defaults 8-5

interface modes 8-4

show interfaces 7-11, 7-12, 8-7, 8-12

switching 8-1

trunks 8-2

VLAN interface assignment 12-11

Layer 2 interfaces, configuring 8-1

Layer 2 protocol tunneling

configuring Layer 2 tunnels 16-2

overview 16-1

Layer 2 remarking 37-15

Layer 2 Traceroute 50-1

Layer 2 traceroute

and ARP 50-2

and CDP 50-1

described 50-1

IP addresses and subnets 50-2

MAC addresses and VLANs 50-2

multicast traffic 50-2

multiple devices on a port 50-2

unicast traffic 50-1

usage guidelines 50-1

Layer 3

IP MMLS and MLS cache 25-2

Layer 3 switched packet rewrite

CEF 23-2

Layer 3 switching

CEF 23-2

Layer 4 port operations (ACLs) 30-5

leave processing, IGMP

enabling 27-12

leave processing, MLDv2

enabling 26-12

LERs 38-2, 38-6, 38-7

link failure, detecting unidirectional 17-24

link negotiation 7-7

link redundancy

See Flex Links

Load Balancing 21-8

Local Egress Replication 25-12

logical operation unit

See LOU

loop guard

See STP loop guard

LOU

description 30-6

determining maximum number of 30-6

LSRs 38-2, 38-6

M

MAC address

adding to BOOTP configuration file 2-7

MAC address-based blocking 29-1

MAC move (port security) 41-2

macro, interfaces range 7-4

main-cpu command 6-6

mapping 802.1Q VLANs to ISL VLANs 12-12, 12-15

markdown

see QoS markdown

maximum aging time, MSTP 17-47

maximum aging time, STP 17-36

maximum hop count, MSTP 17-47

microflow policing rule

see QoS policing

Min-Links 10-12

MLD report 26-4

MLD snooping

query interval, configuring 26-11

MLDv2 26-1

enabling 26-9

leave processing

enabling 26-12

queries 26-4

snooping

fast leave 26-6

joining multicast group 26-4

leaving multicast group 26-6

understanding 26-1

snooping querier

enabling 26-8

understanding 26-1

MLDv2 Snooping 26-1

MLS

configuring threshold 25-13

MSFC threshold 25-13

mls aging command

configuring IP MLS 43-20

mls flow command

configuring IP MLS 43-18, 43-19

mls ip multicast command

enabling IP MMLS 25-10, 25-11, 25-13, 25-14, 25-15, 25-20, 25-21

mls nde flow command

configuring a host and port filter 43-26

configuring a host flow filter 43-27

configuring a port filter 43-26

configuring a protocol flow filter 43-27

mls nde sender command 43-21

monitoring

Flex Links 9-3

private VLANs 13-17

MPLS 21-2

aggregate label 21-2

any transport over MPLS 21-13

basic configuration 21-8

core 21-3

DiffServ Tunneling Modes 38-31

egress 21-4

experimental field 38-3

guidelines and restrictions 21-7

ingress 21-3

IP to MPLS path 21-3

labels 21-2

Layer 2 VPN load balancing 21-8

MPLS to IP path 21-4

MPLS to MPLS path 21-3

nonaggregate lable 21-2

QoS default configuration 38-15

VPN 38-12

VPN guidelines and restrictions 21-11

mpls l2 transport route command 21-15

MPLS QoS

Classification 38-2

Class of Service 38-2

commands 38-16

configuring a class map 38-20

configuring a policy map 38-23

configuring egress EXP mutation 38-28

configuring EXP Value Maps 38-30

Differentiated Services Code Point 38-2

displaying a policy map 38-27

E-LSP 38-2

enabling QoS globally 38-18

EXP bits 38-2

features 38-3

IP Precedence 38-2

QoS Tags 38-2

queueing-only mode 38-19

MPLS QoS configuration

class map to classify MPLS packets 38-20

MPLS VPN, limitations and restrictions 21-11

MQC 37-1

not supported

CAR 37-2

queuing 37-2

supported

policy maps 37-3

MSTP

boundary ports

configuration guidelines 17-38

described 17-22

CIST, described 17-19

CIST regional root 17-20

CIST root 17-21

configuration guidelines 17-38

configuring

forward-delay time 17-46

link type for rapid convergence 17-47

maximum aging time 17-47

maximum hop count 17-47

MST region 17-39

neighbor type 17-48

path cost 17-43

port priority 17-42

root switch 17-40

secondary root switch 17-42

switch priority 17-44

configuring hello time 17-45

CST

defined 17-19

operations between regions 17-20

default configuration 17-38

displaying status 17-49

enabling the mode 17-39

extended system ID

effects on root switch 17-40

effects on secondary root switch 17-42

unexpected behavior 17-41

IEEE 802.1s

implementation 17-23

port role naming change 17-23

terminology 17-21

interoperability with IEEE 802.1D

described 17-25

restarting migration process 17-49

IST

defined 17-19

master 17-20

operations within a region 17-20

mapping VLANs to MST instance 17-39

MST region

CIST 17-19

configuring 17-39

described 17-18

hop-count mechanism 17-22

IST 17-19

supported spanning-tree instances 17-19

overview 17-18

root switch

configuring 17-40

effects of extended system ID 17-40

unexpected behavior 17-41

status, displaying 17-49

MTU size (default) 12-6

multicast

IGMP snooping and 27-9

MLDv2 snooping and 26-9

NetFlow statistics 43-14

non-RPF 25-5

overview 27-1

PIM snooping 28-4

multicast, displaying routing table 25-18

Multicast enhancement - egress replication performance improvement 25-12

Multicast Enhancement - Replication Mode Detection 25-11

multicast flood blocking 36-1

multicast groups

joining 27-2

leaving 26-6, 27-4

multicast groups, IPv6

joining 26-4

Multicast Listener Discovery version 2

See MLDv2

multicast multilayer switching

See IPv4 MMLS

Multicast Replication Mode Detection enhancement 25-11

multicast RPF 25-2

multicast storms

see traffic-storm control

multilayer switch feature card

see MSFC

multiple path RPF check 29-2

N

native VLAN 8-10

NBAR 37-1

NDE

configuration, displaying 43-27

displaying configuration 43-27

enabling 43-15

filters

destination host, specifying 43-27

destination TCP/UDP port, specifying 43-26

overview 43-7

protocol, specifying 43-27

source host and destination TCP/UDP port, specifying 43-26

multicast 43-14

overview 43-1

specifying

destination host filters 43-27

destination TCP/UDP port filters 43-26

protocol filters 43-27

NDE configuration, default 43-13

NDE version 8 43-10

NetFlow and NDE for Ingress Bridged IP Traffic 43-23

NetFlow Data Export

See NDE

Netflow Multiple Export Destinations 43-23

NetFlow version 9 43-3

Network-Based Application Recognition 37-1

nonaggregate label 21-2, 21-4

non-RPF multicast 25-5

Nonstop Forwarding

See NSF

nonvolatile random-access memory

See NVRAM

normal-range VLANs

See VLANs

NSF 5-1

NSF with SSO does not support IPv6 multicast traffic. 5-1

NVRAM

saving settings 2-5

O

OIR 7-15

online diagnostics

configuring 47-2

diagnostic sanity check 47-11

memory tests 47-10

overview 47-1

running tests 47-6

schedule switchover 47-10

test descriptions A-1

understanding 47-1

online diagnostic tests A-1

online insertion and removal

See OIR

operating system image

See system image

out of profile

see QoS out of profile

P

packet burst 32-7

packet capture 56-1

packet recirculation 37-12

packet rewrite

CEF 23-2

IP MMLS and 25-3

packets

multicast 31-4

PACLs. See private hosts feature

PAgP

understanding 10-3

passwords

configuring

enable password 2-8

enable secret 2-8

line password 2-9

static enable password 2-8

TACACS+ 2-9

TACACS+ (caution) 2-10

encrypting 2-10

(caution) 2-10

recovering lost enable passwords 2-12

path cost

MSTP 17-43

PBR 1-4, 19-4

PFC3BXL

hardware features 21-4

MPLS guidelines and restrictions 21-7

MPLS label switching 21-1

MPLS supported commands 21-7

recirculation 21-4

supported Cisco IOS features 21-5

VPN supported commands 21-11

VPN switching 21-10

PFC compatibility with RSP720 3-2

PIM, IP MMLS and 25-9

PIM snooping

designated router flooding 28-6

enabling globally 28-5

enabling in a VLAN 28-5

overview 28-4

police command 37-63

policing

See QoS policing

policing, QoS (definition) 37-107

policy 37-52

policy-based routing

See PBR

policy map 37-59

attaching to an interface 37-66

policy-map command 37-53, 37-60

Port Aggregation Protocol

see PAgP

port-based ACLs (PACLs). See private hosts feature

port-based authentication

authentication server

defined 40-2

RADIUS server 40-2

client, defined 40-2

configuration guidelines 40-7

configuring

initializing authentication of a client 40-11

manual reauthentication of a client 40-11

quiet period 40-12

RADIUS server 40-10

RADIUS server parameters on the switch 40-9

switch-to-authentication-server retransmission time 40-14

switch-to-client EAP-request frame retransmission time 40-13

switch-to-client frame-retransmission number 40-14

switch-to-client retransmission time 40-13

default configuration 40-6

described 40-1

device roles 40-2

displaying statistics 40-16

EAPOL-start frame 40-3

EAP-request/identity frame 40-3

EAP-response/identity frame 40-3

enabling

802.1X authentication 40-8, 40-9

periodic reauthentication 40-10

encapsulation 40-2

initiation and message exchange 40-3

method lists 40-8

ports

authorization state and dot1x port-control command 40-4

authorized and unauthorized 40-4

resetting to default values 40-16

switch

as proxy 40-2

RADIUS client 40-2

topologies, supported 40-5

port-based QoS features

see QoS

port channel

switchport trunk encapsulation dot1q 10-6

port-channel

see EtherChannel

port-channel load-balance

command 10-10, 10-11

command example 10-10, 10-11

port cost, STP 17-32

port debounce timer 7-13

PortFast

See STP PortFast

PortFast BPDU filtering

See STP PortFast BPDU filtering

port mode 21-16

port negotiation 7-7

port priority

MSTP 17-42

port priority, STP 17-30

ports

setting the debounce timer 7-13

port security

aging 41-10, 41-11

configuring 41-4

default configuration 41-3

described 41-1

displaying 41-11

enable sticky secure MAC address 41-8

violations 41-2

Port Security is supported on trunks 41-4, 41-7, 41-9

port security MAC move 41-2

port security on PVLAN ports 41-3

Port Security with Sticky Secure MAC Addresses 41-2

power management

enabling/disabling redundancy 46-2

overview 46-1

powering modules up or down 46-3

system power requirements, nine-slot chassis 46-5

primary links 9-1

primary VLANs 13-2

priority

overriding CoS 14-7, 14-8

priority-rate propagation, IP subscriber 22-5, 22-9, 22-10

private-hosts command 34-13

private hosts feature

command reference 34-12

configuration guidelines 34-5, 34-6

configuring (detailed steps) 34-9

configuring (summary) 34-8

debug fm private-hosts command 34-30

debug private-hosts command 34-31

isolating hosts in a VLAN 34-2

multicast operation 34-7

overview 34-1

port ACLs (PACLs) 34-5

port types 34-3, 34-4

private-hosts command 34-13

private-hosts mac-list command 34-14

private-hosts mode command 34-16

private-hosts promiscuous command 34-18

private-hosts vlan-list command 34-20

protocol-independent MAC ACLs 34-1

restricting traffic flow with PACLs 34-3

show fm private-hosts command 34-22

show private-hosts access-lists command 34-25

show private-hosts configuration command 34-27

show private-hosts interface configuration command 34-28

show private-hosts mac-list command 34-29

spoofing protection 34-7

private-hosts mac-list command 34-14

private-hosts mode command 34-16

private-hosts promiscuous command 34-18

private-hosts vlan-list command 34-20

private VLANs 13-1

across multiple switches 13-5

and SVIs 13-6

benefits of 13-2

community VLANs 13-2, 13-3

configuration guidelines 13-7, 13-9, 13-11

configuring 13-11

host ports 13-14

pomiscuous ports 13-15

routing secondary VLAN ingress traffic 13-13

secondary VLANs with primary VLANs 13-12

VLANs as private 13-11

end station access to 13-4

IP addressing 13-4

isolated VLANs 13-2, 13-3

monitoring 13-17

ports

community 13-3

configuration guidelines 13-9

isolated 13-3

promiscuous 13-3

primary VLANs 13-2

secondary VLANs 13-2

subdomains 13-2

traffic in 13-6

privileges

changing default 2-11

configuring

multiple levels 2-10

privilege level 2-11

exiting 2-12

logging in 2-11

procedures

global parameters, configuring 2-2

using configuration mode2-3to 2-4

promiscuous ports 13-3

protocol tunneling

See Layer 2 protocol tunneling 16-1

pruning, VTP

See VTP, pruning

PVLANs

See private VLANs

PVRST

See Rapid-PVST 17-17

Q

QoS

class of service (CoS), definition 37-106

DSCP (definition) 37-106

IP precedence 37-107

marking 37-107

policing 37-107

Type of Service (ToS) 37-107

QoS, per-subscriber 22-4

QoS classification (definition)

QoS

classification 37-106

QoS congestion avoidance

QoS

congestion avoidance 37-106

QoS CoS

and ToS final L3 Switching Engine values 37-11

and ToS final values from L3 Switching Engine 37-11

port value, configuring 37-78

QoS default configuration 37-96, 39-2

QoS DSCP

definition 37-106

internal values 37-9

maps, configuring 37-72

QoS dual transmit queue

thresholds

configuring 37-78, 37-83

QoS enhancements, RSP720 3-5

QoS Ethernet egress port

scheduling 37-96

scheduling, congestion avoidance, and marking 37-11, 37-13

QoS Ethernet ingress port

classification, marking, scheduling, and congestion avoidance 37-6

QoS final L3 Switching Engine CoS and ToS values 37-11

QoS internal DSCP values 37-9

QoS L3 Switching Engine

classification, marking, and policing 37-9

feature summary 37-16

QoS labels (definition) 37-107

QoS mapping

CoS values to DSCP values 37-69, 37-73

DSCP markdown values 37-27, 37-74, 38-16

DSCP mutation 37-68, 38-29

DSCP values to CoS values 37-75

IP precedence values to DSCP values 37-73

QoS markdown 37-20

QoS marking

definition 37-107

trusted ports 37-14

untrusted ports 37-14

QoS MSFC

marking 37-17

QoS multilayer switch feature card 37-17

QoS OSM egress port

feature summary 37-13

QoS out of profile 37-19

QoS policing

definition 37-107

microflow, enabling for nonrouted traffic 37-47

QoS policing rule

aggregate 37-17

creating 37-51

microflow 37-17

QoS port

trust state 37-76

QoS port-based or VLAN-based 37-47

QoS queues

transmit, allocating bandwidth between 37-94

QoS receive queue 37-8, 37-89, 37-92

drop thresholds 37-22

QoS scheduling (definition) 37-107

QoS statistics data export 39-1

configuring 39-2

configuring destination host 39-7

configuring time interval 39-6, 39-9

QoS ToS

and CoS final values from L3 Switching Engine 37-11

definition 37-107

QoS traffic flow through QoS features 37-4

QoS transmit queue

size ratio 37-95, 37-96

QoS transmit queues 37-23, 37-86, 37-88, 37-90, 37-91

QoS trust-cos

port keyword 37-14, 37-16

QoS trust-dscp

port keyword 37-14, 37-15

QoS trust-ipprec

port keyword 37-14, 37-15

QoS untrusted port keyword 37-14, 37-15

QoS VLAN-based or port-based 37-10, 37-47

queries, IGMP 27-3

queries, MLDv2 26-4

queues

dual-priority (IP subscriber) 22-4, 22-9

R

Radius accounting, per-subscriber 22-4

rapid convergence 17-13

Rapid-PVST

enabling 17-36

overview 17-17

Rapid Spanning Tree

See RSTP

Rapid Spanning Tree Protocol

See RSTP

receive queues

see QoS receive queues

recirculation 21-4, 37-12

reduced MAC address 17-2

redundancy (NSF) 5-1

configuring

BGP 5-13

CEF 5-13

EIGRP 5-18

IS-IS 5-16

OSPF 5-15

configuring multicast NSF with SSO 5-12

configuring supervisor engine 5-10

routing protocols 5-4

redundancy (RPR+) 6-1

configuring 6-6

configuring supervisor engine 6-5

displaying supervisor engine configuration 6-7

redundancy command 6-6

route processor redundancy plus 6-3

redundancy (SSO)

redundancy command 5-11

related documentation 1-4

reload command 2-16

Remote source-route bridging (RSRB) 19-2

Replication Mode Detection 25-11

report, MLD 26-4

reserved-range VLANs

See VLANs

rewrite, packet

CEF 23-2

IP MMLS 25-3

RIF cache monitoring 7-15

rommon command 2-17

ROM monitor

boot process and 2-13

root bridge, STP 17-28

root guard

See STP root guard

root switch

MSTP 17-40

route processor redundancy

See redundancy (RPR+)

Route Switch Processor 720 (RSP720)

chassis support 3-1

feature support 3-2

flash memory 3-6

hardware components 3-2

high availability 3-3

IPv6 ACL enhancements 3-3

load balancing on GE bundles 3-4

overview 3-1

packet fragmentation over GRE tunnels 3-4

performance improvements 3-3

PFC compatibility 3-2

ports 3-6

QoS enhancements 3-5

rate-limiting of unknown unicast packets 3-3

scalability 3-3

switching modes 3-8

unsupported features 3-5

routing table, multicast 25-18

RPF

failure 25-5

multicast 25-2

non-RPF multicast 25-5

unicast 29-2

RPR+

See redundancy (RPR+)

RPR and RPR+ support IPv6 multicast traffic 6-1

RSTP

active topology 17-12

BPDU

format 17-15

processing 17-16

designated port, defined 17-12

designated switch, defined 17-12

interoperability with IEEE 802.1D

described 17-25

restarting migration process 17-49

topology changes 17-17

overview 17-12

port roles

described 17-12

synchronized 17-14

proposal-agreement handshake process 17-13

rapid convergence

described 17-13

edge ports and Port Fast 17-13

point-to-point links 17-13, 17-47

root ports 17-13

root port, defined 17-12

See also MSTP

S

SAID 12-6

sample configuration 2-4

Sampled NetFlow

description 43-8

saving the configuration file 2-5

scheduling

see QoS

secondary VLANs 13-2

Secure MAC Address Aging Type 41-10

security

configuring 29-1, 30-1, 32-1

security, port 41-1

security ACLs, per-subscriber 22-4

security precautions with Flash memory card 2-18

serial IDs

description 55-22

server IDs

description 55-23

service-policy command 37-53

service-policy input command 37-48, 37-66, 37-69, 37-72, 38-29

service-provider network, MSTP and RSTP 17-18

set power redundancy enable/disable command 46-2

short pipe mode, configuring 38-34

show boot command 2-19

show catalyst6000 chassis-mac-address command 17-3

show ciscoview package command 1-3

show ciscoview version command 1-3

show configuration command 7-14

show eobc command 7-15

show fm private-hosts command 34-22

show hardware command 7-2

show ibc command 7-15

show interfaces command 7-2, 7-11, 7-12, 7-14, 7-15, 8-7, 8-12

displaying, interface type numbers 7-2

displaying, speed and duplex mode 7-8

show ip flow export command

displaying NDE export flow IP address and UDP port 43-25

show ip interface command

displaying IP MMLS interfaces 25-16

show ip mroute command

displaying IP multicast routing table 25-18

show ip pim interface command

displaying IP MMLS router configuration 25-16

show mls aging command 43-20

show mls entry command 23-5

show mls ip multicast group command

displaying IP MMLS group 25-19, 25-22

show mls ip multicast interface command

displaying IP MMLS interface 25-19, 25-22

show mls ip multicast source command

displaying IP MMLS source 25-19, 25-22

show mls ip multicast statistics command

displaying IP MMLS statistics 25-19, 25-22

show mls ip multicast summary

displaying IP MMLS configuration 25-19, 25-22

show mls nde command 43-27

displaying NDE flow IP address 43-25

show mls rp command

displaying IP MLS configuration 43-19

show module command 6-7

show private-hosts access-lists command 34-25

show private-hosts configuration command 34-27

show private-hosts interface configuration command 34-28

show private-hosts mac-list command 34-29

show protocols command 7-15

show rif command 7-15

show running-config command 2-4, 7-14, 7-15

show startup-config command 2-5

show version command 2-3, 2-16, 2-17, 7-15

slot number, description 7-1

smart call home 55-1

description 55-2

destination profile (note) 55-4

registration requirements 55-2

service contract requirements 55-3

Transport Gateway (TG) aggregation point 55-2

SMARTnet

smart call home registration 55-2

SNMP

support and documentation 1-1

snooping

See IGMP snooping

See MLDv2 snooping

software

upgrading router 8-7

software configuration register functions2-14to 2-17

software images, Release 12.2SRB C-1

source IDs

call home event format 55-22

source-only-ip flow mask 43-3

source specific multicast with IGMPv3, IGMP v3lite, and URD 25-9

SPAN

configuration guidelines 44-6

configuring 44-11

sources 44-15, 44-19, 44-25, 44-27

VLAN filtering 44-29

overview 44-1

SPAN Destination Port Permit Lists 44-14

spanning-tree backbonefast

command 18-13, 18-14

command example 18-13, 18-14

spanning-tree cost

command 17-32

command example 17-32, 17-33

spanning-tree portfast

command 18-8, 18-9

command example 18-8

spanning-tree portfast bpdu-guard

command 18-11

spanning-tree port-priority

command 17-30, 17-31

spanning-tree protocol for bridging 19-2

spanning-tree uplinkfast

command 18-12

command example 18-12

spanning-tree vlan

command 17-27, 17-29, 17-30, 18-14

command example 17-27, 17-29, 17-30

spanning-tree vlan cost

command 17-32

spanning-tree vlan forward-time

command 17-35

command example 17-35

spanning-tree vlan hello-time

command 17-34

command example 17-35

spanning-tree vlan max-age

command 17-36

command example 17-36

spanning-tree vlan port-priority

command 17-30

command example 17-31

spanning-tree vlan priority

command 17-34

command example 17-34

speed

configuring interface 7-6

speed command 3-2, 7-6

standby link 9-1

standby links 9-1

static route, configuring 2-5

statistics

802.1X 40-16

Sticky ARP 32-25

sticky ARP 32-25

Sticky secure MAC addresses 41-8, 41-9

storm control

see traffic-storm control

STP

configuring 17-25

bridge priority 17-33

enabling 17-26, 17-28

forward-delay time 17-35

hello time 17-34

maximum aging time 17-36

port cost 17-32

port priority 17-30

root bridge 17-28

secondary root switch 17-29

defaults 17-26

EtherChannel 10-5

understanding 17-1

802.1Q Trunks 17-11

Blocking State 17-7

BPDUs 17-3

disabled state 17-11

forwarding state 17-10

learning state 17-9

listening state 17-8

overview 17-2

port states 17-5

protocol timers 17-4

root bridge election 17-4

topology 17-4

STP BackboneFast

configuring 18-13

figure

adding a switch 18-7

spanning-tree backbonefast

command 18-13, 18-14

command example 18-13, 18-14

understanding 18-4

STP BPDU Guard

configuring 18-11

spanning-tree portfast bpdu-guard

command 18-11

understanding 18-2

STP bridge ID 17-2

STP EtherChannel guard 18-6

STP loop guard

configuring 18-15

overview 18-6

STP PortFast

BPDU filter

configuring 18-10

BPDU filtering 18-2

configuring 18-8

spanning-tree portfast

command 18-8, 18-9

command example 18-8

understanding 18-2

STP root guard 18-6, 18-14

STP UplinkFast

configuring 18-12

spanning-tree uplinkfast

command 18-12

command example 18-12

understanding 18-3

subdomains, private VLAN 13-2

subscribers. See IP subscriber awareness

supervisor engine

configuring 2-1

default configuration 2-2

environmental monitoring 46-10

redundancy 5-1, 6-1

ROM monitor 2-13

startup configuration 2-13

static routes 2-5

synchronizing configurations 5-19, 6-7

Supervisor Engine 2, no longer supported

Supervisor Engine 32 4-1

flash memory 4-1

ports 4-2

supported chassis 4-1

supervisor engine redundancy

configuring 5-10, 6-5

supervisor engines

displaying redundancy configuration 6-7

Switched Port Analyzer

See SPAN

switch fabric functionality 3-7, 3-2

configuring 3-8, 3-4

monitoring 3-9, 3-4

switchport

configuring 8-14

example 8-13

show interfaces 7-11, 7-12, 8-7, 8-12

switchport access vlan 8-10, 8-14

example 8-14

switchport mode access 8-4, 8-14

example 8-14

switchport mode dynamic 8-9

switchport mode dynamic auto 8-4

switchport mode dynamic desirable 8-4

default 8-5

example 8-13

switchport mode trunk 8-4, 8-9

switchport nonegotiate 8-4

switchport trunk allowed vlan 8-11

switchport trunk encapsulation 8-8

switchport trunk encapsulation dot1q 8-3

example 8-13

switchport trunk encapsulation isl 8-3

switchport trunk encapsulation negotiate 8-3

default 8-5

switchport trunk native vlan 8-10

switchport trunk pruning vlan 8-11

switch priority

MSTP 17-44

switch TopN reports

foreground execution 49-2

overview 49-1

running 49-2

viewing 49-2

system

configuration register

configuration2-14to 2-17

settings at startup 2-15

configuring global parameters 2-2

System Hardware Capacity 46-5

system image

determining if and how to load 2-15

loading from Flash 2-17

T

TACACS+ 29-1, 30-1, 32-1

TCP Intercept 29-2

TDR

checking cable connectivity 7-16

enabling and disabling test 7-16

guidelines 7-16

Time Domain Reflectometer

See TDR

TopN reports

See switch TopN reports

traceroute, Layer 2

and ARP 50-2

and CDP 50-1

described 50-1

IP addresses and subnets 50-2

MAC addresses and VLANs 50-2

multicast traffic 50-2

multiple devices on a port 50-2

unicast traffic 50-1

usage guidelines 50-1

traffic flood blocking 36-1

traffic-storm control

command

broadcast 35-3

described 35-1

monitoring 35-5

thresholds 35-1

traffic suppression

see traffic-storm control

translational bridge numbers (defaults) 12-6

transmit queues

see QoS transmit queues

trunks 8-2

802.1Q Restrictions 8-5

allowed VLANs 8-11

configuring 8-7

default interface configuration 8-7

default VLAN 8-10

different VTP domains 8-3

encapsulation 8-3

native VLAN 8-10

to non-DTP device 8-4

VLAN 1 minimization 8-11

trust-dscp

see QoS trust-dscp

trust-ipprec

see QoS trust-ipprec

trustpoint 55-3

tunneling 38-4, 38-31

tunneling, 802.1Q

See 802.1Q 15-1

Type of Service (ToS) 37-107

U

UDE 20-1

configuration 20-3

overview 20-2

UDE and UDLR 20-1

UDLD

default configuration 42-3

enabling

globally 42-3

on ports 42-4

overview 42-1

UDLR 20-1

back channel 20-1

configuration 20-6

tunnel

(example) 20-7

ARP and NHRP 20-3

UDLR (unidirectional link routing)

See UDLR

unauthorized ports with 802.1X 40-4

Unicast and Multicast Flood Blocking 36-1

unicast flood blocking 36-1

unicast RPF 29-2

unicast storms

see traffic-storm control

Unidirectional Ethernet

see UDE

unidirectional ethernet

example of setting 20-5

UniDirectional Link Detection Protocol

see UDLD

uniform mode

configuring 38-39

untrusted

see QoS trust-cos

see QoS untrusted

upgrade guidelines 21-15

UplinkFast

See STP UplinkFast

URD 25-9

User-Based Rate Limiting 37-19, 37-64

V

VACLs 31-1

configuring 31-4

examples 31-9

Layer 3 VLAN interfaces 31-8

Layer 4 port operations 30-5

logging

configuration example 31-11

configuring 31-10

restrictions 31-10

MAC address based 31-5

multicast packets 31-4

overview 31-1

SVIs 31-8

WAN interfaces 31-1

version 8 (NDE) 43-10

virtual LAN

See VLANs

vlan

command 12-10, 12-11, 43-17, 43-18, 44-19

command example 12-10

VLAN-based QoS filtering 37-54

VLAN-bridge spanning-tree protocol 19-2

vlan database

command 12-10, 12-11, 43-17, 43-18, 44-19

vlan mapping dot1q

command 12-14, 12-15

command example 12-16

VLAN mode 21-16

VLANs

allowed on trunk 8-11

configuration guidelines 12-8

configuring 12-1

configuring (tasks) 12-8

defaults 12-6

extended range 12-2

ID (default) 12-6

interface assignment 12-11

name (default) 12-6

normal range 12-2

private

See private VLANs

reserved range 12-2

support for 4,096 VLANs 12-2

token ring 12-3

trunks

understanding 8-2

understanding 12-1

VLAN 1 minimization 8-11

VTP domain 12-3

VLAN translation

command example 12-14, 12-15

VLAN Trunking Protocol

See VTP

voice VLAN

Cisco 7960 phone, port connections 14-1

configuration guidelines 14-4

configuring IP phone for data traffic

override CoS of incoming frame 14-7, 14-8

configuring ports for voice traffic in

802.1Q frames 14-5

connecting to an IP phone 14-5

default configuration 14-4

overview 14-1

VPN

configuration example 21-12

guidelines and restrictions 21-11

VTP

advertisements 11-3

client, configuring 11-10

configuration guidelines 11-6

default configuration 11-6

disabling 11-10

domains 11-2

VLANs 12-3

modes

client 11-2

server 11-2

transparent 11-2

monitoring 11-13

overview 11-1

pruning

configuration 8-11

configuring 11-9

overview 11-5

server, configuring 11-10

statistics 11-13

transparent mode, configuring 11-10

version 2

enabling 11-10

overview 11-3

W

WCCP

configuring on a router 48-2, 48-14

service groups 48-8

specifying protocol version 48-7

web browser interface 1-1

Web Cache Communication Protocol

See WCCP

web caches

See cache engines

web cache services

description 48-5

web caching

See web cache services

See also WCCP

web scaling 48-1

weighted round robin 37-94

WRR 37-94

X

xconnect command 21-15