Catalyst 2900 XL and Catalyst 3500 XL Command Reference, Releases 12.0(5)WC4 and 12.0(5)WC5
Cisco IOS Commands

Table Of Contents

Cisco IOS Commands

abort

apply

cgmp

clear cgmp

clear controllers ethernet-controller

clear controllers lre log

clear ip address

clear mac-address-table

clear mac-address-table notification

clear vmps statistics

clear vtp counters

cluster commander-address

cluster discovery hop-count

cluster enable

cluster holdtime

cluster management-vlan

cluster member

cluster run

cluster standby-group

cluster timer

debug lre

delete

duplex

errdisable detect cause

errdisable recovery

exit

flowcontrol

interface

ip address

ip igmp filter

ip igmp max-groups

ip igmp profile

login authentication

lre patchfile

lre profile

lre profile global

lre reset

lre shutdown

mac-address-table aging-time

mac-address-table dynamic

mac-address-table notification

mac-address-table secure

mac-address-table static

management

mvr (global configuration)

mvr (interface configuration)

ntp broadcast client

ntp broadcast destination

ntp broadcast key

ntp broadcast version

ntp max-associations

ntp source

port block

port group

port monitor

port network

port protected

port security

port storm-control

power inline

rcommand

reset

rmon collection stats

session

show cgmp

show changes

show cluster

show cluster candidates

show cluster members

show controllers ethernet-controller

show controllers lre cpe info

show controllers lre interface-id actual

show controllers lre interface-id admin

show controllers lre log

show controllers lre profile

show controllers lre status

show controllers lre version

show controllers lre version mfg

show current

show diags

show env

show errdisable detect

show errdisable recovery

show file systems

show interface

show ip igmp profile

show mac-address-table

show mac-address-table notification

show mvr

show mvr interface

show mvr members

show port block

show port group

show port monitor

show port network

show port protected

show port security

show port storm-control

show power inline

show proposed

show remote ethernet-statistics

show remote interfaces status

show rps

show spanning-tree

show tacacs

show tech-support

show udld

show version

show vlan

show vmps

show vmps statistics

show vtp

shutdown

shutdown vlan

snmp-server enable traps mac-notification

snmp-server enable traps vlan-membership

snmp-server enable traps vtp

snmp-server host

snmp trap mac-notification

spanning-tree

spanning-tree cost

spanning-tree forward-time

spanning-tree hello-time

spanning-tree max-age

spanning-tree portfast

spanning-tree portfast bpduguard

spanning-tree port-priority

spanning-tree priority

spanning-tree protocol

spanning-tree rootguard

spanning-tree stack-port

spanning-tree uplinkfast

speed

switchport access

switchport mode

switchport multi

switchport priority

switchport trunk allowed vlan

switchport trunk encapsulation

switchport trunk native

switchport trunk pruning

switchport voice vlan

tacacs-server attempts

tacacs-server dns-alias-lookup

udld

udld enable

udld reset

vlan

vlan database

vmps reconfirm

vmps reconfirm

vmps retry

vmps server

vtp

vtp domain

vtp file

vtp password

vtp pruning

vtp v2-mode


Cisco IOS Commands


abort

Use the abort VLAN database command to abandon the proposed VLAN database, exit VLAN database mode, and return to privileged EXEC mode.

abort

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

VLAN database

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Usage Guidelines

If you have added, deleted, or modified VLAN parameters in VLAN database mode but you do not want to keep the changes, the abort command causes all the changes to be abandoned. The VLAN configuration that was running before you entered VLAN database mode continues to be used.

Examples

This example shows how to abandon the proposed VLAN database and to exit to the privileged EXEC mode:

Switch(vlan)# abort
Switch#

You can verify that no VLAN database changes occurred by entering the show vlan brief user EXEC command.

Related Commands

Command
Description

apply

Implements the proposed VLAN database, increments the database configuration revision number, propagates it throughout the administrative domain, and remains in VLAN database mode.

exit

Implements the proposed VLAN database, increments the database configuration number, propagates it throughout the administrative domain, and returns to privileged EXEC mode.

reset

Abandons the proposed VLAN database and remains in VLAN database mode. Resets the proposed database to the currently implemented VLAN database on the switch.

show vlan

Displays the parameters for all configured VLANs in the administrative domain.

shutdown vlan

Shuts down (suspends) local traffic on the specified VLAN.

vlan database

Enters VLAN database mode from the command-line interface (CLI).


apply

Use the apply VLAN database command to implement the proposed VLAN database to increment the database configuration revision number, to propagate it throughout the administrative domain, and to remain in VLAN database mode.

apply

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

VLAN database

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Usage Guidelines

The apply command implements the configuration changes that you made after you entered VLAN database mode and uses them for the running configuration. This command keeps you in VLAN database mode.

You cannot use this command when the switch is in the VLAN Trunking Protocol (VTP) client mode.

Examples

This example shows how to implement the proposed VLAN database as the running database:

Switch(vlan)# apply

You can verify that VLAN database changes occurred by entering the show vlan user EXEC command.

Related Commands

Command
Description

apply

Implements the proposed VLAN database, increments the database configuration revision number, propagates it throughout the administrative domain, and remains in VLAN database mode.

exit

Implements the proposed VLAN database, increments the database configuration number, propagates it throughout the administrative domain, and returns to privileged EXEC mode.

reset

Abandons the proposed VLAN database and remains in VLAN database mode. Resets the proposed database to the currently implemented VLAN database on the switch.

show vlan

Displays the parameters for all configured VLANs in the administrative domain.

shutdown vlan

Shuts down (suspends) local traffic on the specified VLAN.

vlan database

Enters VLAN database mode from the command-line interface (CLI).


cgmp

Use the cgmp global configuration command to enable Cisco Group Management Protocol (CGMP) and other CGMP options. Use the no form of this command to disable CGMP and its options.

cgmp {leave-processing | holdtime time | reserved}

no cgmp {leave-processing | holdtime | reserved}

Syntax Description

leave-processing

Enable Fast Leave processing on the switch.

holdtime time

Number of seconds a router connection is retained before the switch ceases to exchange messages with it. You can enter a number from 10 to 6000 (seconds).

reserved

Allow reserved addresses from 0100.5E00.0000 to 0100.5E00.00FF to join as group destination addresses.


Defaults

CGMP is enabled.

Fast Leave is disabled.

The hold time is 300 seconds.

Reserved addresses are allowed as group destination addresses.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA3

This command was first introduced.

12.0(5)XP

The reserved keyword was added.


Usage Guidelines

CGMP must be enabled before the Fast Leave option can be enabled.

Examples

This example shows how to disable CGMP:

Switch(config)# no cgmp

This example shows how to disable the Fast Leave option:

Switch(config)# no cgmp leave-processing

This example shows how to set 400 seconds as the length of time the switch waits before ceasing to exchange messages with a router:

Switch(config)# cgmp holdtime 400

This example shows how to remove the amount of time the switch waits before ceasing to exchange messages with a router:

Switch(config)# no cgmp holdtime

This example shows how to exclude reserved addresses from the group destination address for compatibility with Catalyst 5000 series switches.

Switch(config)# no cgmp reserved

You can verify the previous commands by entering the show cgmp user EXEC command.

Related Commands

Command
Description

clear cgmp

Deletes information that the switch learned by using CGMP.

show cgmp

Displays the state of the CGMP-learned multicast groups and routers.


clear cgmp

Use the clear cgmp privileged EXEC command to delete information that was learned by the switch by using the Cisco Group Management Protocol (CGMP).

clear cgmp [vlan vlan-id] | [group [address] | router [address]]

Syntax Description

vlan vlan-id

(Optional) VLAN for which the CGMP groups or routers are to be deleted. Valid IDs are from 1 to 1001; do not enter leading zeros.

group address

Delete all known multicast groups and their destination ports. Limited to a VLAN if the vlan keyword is entered. Limited to a specific group if the address parameter (MAC address of the group or router) is entered.

router address

(Optional) Delete all routers, their ports, and expiration times. Limited to a given VLAN if the vlan keyword is entered. Limited to a specific router if the address parameter is entered.


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA3

This command was first introduced.


Usage Guidelines

Using clear cgmp with no arguments deletes all groups and routers in all VLANs.

Examples

This example shows how to delete all groups and routers on VLAN 2:

Switch# clear cgmp vlan 2

This example shows how to delete all groups on all VLANs:

Switch# clear cgmp group

This example shows how to delete a router address on VLAN 2:

Switch# clear cgmp vlan 2 router 0012.1234.1234

You can verify the previous commands by entering the show cgmp user EXEC command.

Related Commands

Command
Description

cgmp

Enables CGMP and the Fast Leave option and sets the router port aging time.

show cgmp

Displays the state of the CGMP-learned multicast groups and routers.


clear controllers ethernet-controller

Use the clear controllers ethernet-controller privileged EXEC command to delete the Ethernet link transmit and receive statistics on a switch port and on a Long-Reach Ethernet (LRE) customer premises equipment (CPE) device.

clear controllers ethernet-controller [interface-id]

Syntax Description

interface-id

(Optional) ID of the switch port.


Defaults

No default is defined.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Using the clear controllers ethernet-controller command without specifying a switch port clears the Ethernet link statistics for all ports on the switch. If you use this command on a switch LRE port, this command clears the statistics on the Ethernet port on the Cisco 575 LRE CPE or on all four Ethernet ports on the Cisco 585 LRE CPE. The Cisco 585 LRE CPE Ethernet ports cannot be cleared on a per-port basis.

The CPE Ethernet link is the connection between the CPE Ethernet port and the remote Ethernet device (such as a PC) connected to it. It is not the link between the switch LRE port and the LRE CPE.

It takes the switch several seconds to clear all of the ports. The switch LRE ports take longer to clear than all the other port types.

Examples

This example shows how to use the clear controllers ethernet-controller command to delete the Ethernet link statistics on Fast Ethernet port 0/1:

Switch# clear controllers ethernet-controller FastEthernet 0/1
Switch#

This example shows how to use the clear controllers ethernet-controller command to delete the Ethernet link statistics between the LRE CPE and the remote Ethernet device. The LRE CPE is connected to switch LRE port 1:

Switch# clear controllers ethernet-controller lo0/1
Switch#

You can verify that information was deleted by entering the show controllers ethernet-controller user EXEC command.

Related Commands

Command
Description

show controllers ethernet-controller

Displays the Ethernet link transmit and receive statistics on a Fast Ethernet or switch LRE port.


clear controllers lre log

Use the clear controllers lre log privileged EXEC command to delete the history of link, configuration, and timer events for a specific Long-Reach Ethernet (LRE) port or for all switch LRE ports.

clear controllers lre log [interface-id]

Syntax Description

interface-id

(Optional) ID of the switch LRE port.


Defaults

No default is defined.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Using the clear controllers lre log command without specifying a switch LRE port deletes the history of events on all switch LRE ports.

Examples

This example shows how to use the clear controllers lre log command to delete the history of events on switch LRE port 3:

Switch# clear controllers lre log longReachEthernet 0/3
Switch# 

You can verify that information was deleted by entering the show controllers lre log privileged EXEC command.

Related Commands

Command
Description

show controllers lre log

Displays the history of link, configuration, and timer events for a specific switch LRE port or for all LRE ports on the switch.


clear ip address

Use the clear ip address privileged EXEC command to delete an IP address for a switch without disabling the IP processing.

clear ip address [vlan vlan-id]

Syntax Description

vlan vlan-id

(Optional) Delete an IP address only within the specified VLAN.
Valid IDs are from 1 to 1000; do not enter leading zeros.


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.


Usage Guidelines

A switch can have one IP address.

The IP address of the switch can be accessed only by nodes connected to ports that belong to the management VLAN. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

If your switch receives its IP address from a Bootstrap Protocol (BOOTP) or Dynamic Host Configuration Protocol (DHCP) server and you delete the switch IP address by using the clear ip address command, the BOOTP or DHCP server reassigns the address.

Examples

This example shows how to clear the IP address for the switch on VLAN 1:

Switch# clear ip address vlan 1

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch.


clear mac-address-table

Use the clear mac-address-table privileged EXEC command to delete entries from the MAC address table.

clear mac-address-table [static | dynamic | secure] [address hw-addr] [interface interface]
[atm slot/port] [vlan vlan-id]

Syntax Description

static

(Optional) Delete only static addresses.

dynamic

(Optional) Delete only dynamic addresses.

secure

(Optional) Delete only secure addresses.

address hw-addr

(Optional) Delete the address hw-addr of type static, dynamic, and secure as specified.

interface interface

(Optional) Delete an address on the interface interface of type static, dynamic, or secure as specified.

atm slot/port

(Optional) Delete only ATM addresses on this slot and port.

vlan vlan-id

(Optional) Delete all the MAC addresses for vlan-id. Valid IDs are from
1 to 1005; do not enter leading zeros.


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.

11.2(8)SA5

The atm keyword was added.


Usage Guidelines

This command deletes entries from the global MAC address table. Specific subsets can be deleted by using the optional keywords and values. If more than one optional keyword is used, all of the conditions in the argument must be true for that entry to be deleted.

Examples

This example shows how to delete static addresses on port fa0/7:

Switch# clear mac-address-table static interface fa0/7

This example shows how to delete all secure addresses in VLAN 3:

Switch# clear mac-address-table secure vlan 3

This example shows how to delete address 0099.7766.5544 from all ports in all VLANs. If the address exists in multiple VLANs or multiple ports, all the instances are deleted.

Switch# clear mac-address-table address 0099.7766.5544

This example shows how to delete address 0099.7766.5544 only in VLAN 2:

Switch# clear mac-address-table address 0099.7766.5544 vlan 2

This example shows how to delete the secure MAC address 00c0.00a0.03fa associated with the ATM port in expansion slot 2:

Switch(config)# clear mac-address-table secure 00c0.00a0.03fa atm 2/1

This example shows how to delete the static address 00c0.00a0.03fa associated with the ATM port in expansion slot 2:

Switch(config)# clear mac-address-table static 00c0.00a0.03fa atm 2/1

You can verify the previous commands by entering the show mac-address-table user EXEC command.

Related Commands

Command
Description

show mac-address-table

Displays the MAC address table.


clear mac-address-table notification

Use the clear mac-address-table notification privileged EXEC command to clear the addresses maintained by the MAC address notification feature.

clear mac-address-table notification

Syntax Description

This command has no keywords or options.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC3

This command was first introduced.


Usage Guidelines

This command clears the counters for the MAC addresses added, the MAC addresses removed, and the number of traps sent to the NMS counters on the switch. This command does not clear the history table on the switch.

Related Commands

Command
Description

show mac-address-table

Displays the MAC address table.


clear vmps statistics

Use the clear vmps statistics privileged EXEC command to clear the statistics maintained by the VLAN Query Protocol (VQP) client.

clear vmps statistics

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Examples

This example shows how to clear VLAN Membership Policy Server (VMPS) statistics:

Switch# clear vmps statistics

You can verify the previous command by entering the show vmps statistics privileged EXEC command.

Related Commands

Command
Description

show vmps statistics

Displays the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VMPS IP addresses, and the current and primary servers.


clear vtp counters

Use the clear vtp counters privileged EXEC command to clear the VLAN Trunking Protocol (VTP) and pruning counters.

clear vtp counters

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Examples

This example shows how to clear the VTP counters:

Switch# clear vtp counters

You can verify the previous command by entering the show vtp counters user EXEC command.

Related Commands

Command
Description

show vtp counters

Display general information about the VTP management domain, status, and counters.


cluster commander-address

You do not need to enter this command. The command switch automatically provides its MAC address to member switches when these switches join the cluster. The member switch adds this information and other cluster information to its running configuration file. Enter the no form of this global configuration command from the member switch console port to remove it from a cluster only during debugging or recovery procedures.

cluster commander-address mac-address [member number name name]

no cluster commander-address

Syntax Description

mac-address

MAC address of the cluster command switch.

member number

Number of member switch. The range is from 0 to 15.

name name

Name of the cluster up to 31 characters.

no

Remove a switch from the cluster. Entered on the member switch.

default

Remove a switch from the cluster. Entered on the member switch.


Defaults

The switch is not a member of any cluster.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.

12.0(5)XU

The member and name keywords were added.


Usage Guidelines

A cluster member can belong to only one command switch.

The member switch retains the identity of the command switch during a system reload by using the mac-address parameter.

You can enter the no form on a member switch to remove it from the cluster during debugging or recovery procedures. You would normally use this command from the member switch console port only when the member has lost communication with the command switch. With normal switch configuration, we recommend that you remove member switches only by entering the no cluster member n global configuration command on the command switch.

When a standby command-switch becomes active (becomes the command switch), it removes the cluster commander-address line from its configuration.

Examples

This is partial sample output from the running configuration of a cluster member.

Switch(config)# show running-configuration

<output truncated>

cluster commander-address 00e0.9bc0.a500 member 4 name my_cluster

<output truncated>

This example shows how to remove a member from the cluster by using the cluster member console.

Switch-es3# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch-es3(config)# no cluster commander-address

You can verify the previous command by entering the show cluster command in user EXEC mode.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.


cluster discovery hop-count

Use the cluster discovery hop-count global configuration command on the command switch to set the hop-count limit for extended discovery of candidate switches. Use the no form of this command to set the hop count to the default value.

cluster discovery hop-count number

no cluster discovery hop-count

default cluster discovery hop-count

Syntax Description

number

Number of hops from the cluster edge that the command switch limits the discovery of candidates. The range is from 1 to 7.

no

Set the hop count to the default value (3).

default

Set the hop count to the default value (3).


Defaults

The hop count is set to 3.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

Enter this command only on the command switch. This command does not operate on member switches.

If the hop count is set to 1, it disables extended discovery. The command switch discovers only candidates that are one hop from the edge of the cluster. The edge of the cluster is the point between the last discovered member switch and the first discovered candidate switch.

Examples

This example shows how to set the hop count limit to 4. This command is entered on the command switch.

Switch(config)# cluster discovery hop-count 4

You can verify the previous command by entering the show cluster command in user EXEC mode.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster candidates

Displays a list of candidate switches.


cluster enable

Use the cluster enable global configuration command on a command-capable switch to enable it as the cluster command switch, assign a cluster name, and optionally assign a member number to it. Use the no form of the command to remove all members and to make the command switch a candidate switch.

cluster enable name [command-switch-member-number]

no cluster enable

default cluster enable

Syntax Description

name

Name of the cluster up to 31 characters. Valid characters include only alphanumerics, dashes, and underscores.

command-switch-member-number

(Optional) Assign a member number to the command switch of the cluster. The range is from 0 to 15.

no

Remove all member switches, and make the command switch a candidate.

default

Switch is not a command switch.


Defaults

The switch is not a command switch.

No cluster name is defined.

The member number is 0 when this is the command switch.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.

12.0(5)XU

The command-switch-member-number variable was added.


Usage Guidelines

This command runs on any command-capable switch that is not part of any cluster. This command fails if a device is already configured as a member of the cluster.

You must name the cluster when you enable the command switch. If the switch is already configured as the command switch, this command changes the cluster name if it is different from the previous name.

Examples

This example shows how to enable the command switch, to name the cluster, and to set the command switch member number to 4.

Switch(config)# cluster enable Engineering-IDF4 4

You can verify the previous command by entering the show cluster command in user EXEC mode on the command switch.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.


cluster holdtime

Use the cluster holdtime global configuration command on the command switch to set the duration in seconds before a switch (either the command or member switch) declares the other switch down after not receiving heartbeat messages. Use the no form of this command to set the duration to the default value.

cluster holdtime holdtime-in-secs

no cluster holdtime

default cluster holdtime

Syntax Description

holdtime-in-secs

Duration in seconds before a switch (either a command or member switch) declares the other switch down. The range is from 1 to 300 seconds.

no

Set the holdtime to the default value (80 seconds).

default

Set the holdtime to the default value (80 seconds).


Defaults

The holdtime is 80 seconds.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

Use this command with the cluster timer global configuration command only on the command switch. The command switch propagates the values to all its cluster members so that the setting is consistent among all switches in the cluster.

The holdtime is typically set as a multiple of the interval timer (cluster timer). For example, it takes (holdtime-in-secs divided by interval-in-secs) number of heartbeat messages to be missed in a row to declare a switch down.

Examples

This example shows how to change the interval timer and the duration on the command switch.

Switch(config)# cluster timer 3
Switch(config)# cluster holdtime 30

You can verify the previous commands by entering the show cluster command in user EXEC mode.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.


cluster management-vlan

Use the cluster management-vlan global configuration command on the command switch to change the management VLAN for the entire cluster. Use the no form of this command to change the management VLAN to VLAN 1.

cluster management-vlan n

no cluster management-vlan

default cluster management-vlan

Syntax Description

n

VLAN ID of the new management VLAN. Valid VLAN IDs are from 1 to 1001.

no

Set the management VLAN to VLAN 1.

default

Set the management VLAN to VLAN 1.


Defaults

The default management VLAN is VLAN 1.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

Enter this command only on the command switch. This command changes the management VLAN of the command switch and member switches. Member switches must have either a trunk connection or connection to the new command-switch management VLAN to maintain communication with the command switch.

This command is not written to the configuration file.

Examples

This example shows how to change the management VLAN to VLAN 5 on the entire cluster.

Switch(config)# cluster management-vlan 5

You can verify the previous command by entering the show interface vlan number user EXEC command.

Related Commands

Command
Description

management

Shuts down the management VLAN interface and enables the new management VLAN interface on an individual switch.


cluster member

Use the cluster member global configuration command on the command switch to add members to a cluster. Use the no form of the command to remove members from the cluster.

cluster member [n] mac-address H.H.H [password enable-password]

no cluster member n

default cluster member n

Syntax Description

n

The number that identifies a cluster member. The range is from 0 to 15.

mac-address H.H.H

MAC address of the member switch in hexadecimal format.

password enable-password

Enable password of the candidate switch. The password is not required if there is no password on the candidate switch.

no

Remove the specified member from the cluster.

default

Remove the specified member from the cluster.


Defaults

A newly enabled command switch has no associated cluster members.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Enter this command only on the command switch to add a member to or remove a member from the cluster. If you enter this command on a switch other than the command switch, the switch rejects the command and displays an error message.

You must enter a member number to remove a switch from the cluster. However, you do not need to enter a member number to add a switch to the cluster. The command switch selects the next available member number and assigns it to the switch joining the cluster.

You must enter the enable password of the candidate switch for authentication when it joins the cluster. The password is not saved in the running or startup configuration. After a candidate switch becomes a member of the cluster, its password becomes the same as the command-switch password.

If a switch does not have a configured host name, the command switch appends a member number to the command-switch host name and assigns it to the member switch.

Examples

This example shows how to add a switch as member 2 with MAC address 00E0.1E00.2222 and the password key to a cluster.

Switch(config)# cluster member 2 mac-address 00E0.1E00.2222 password key

This example shows how to add a switch with MAC address 00E0.1E00.3333 to the cluster. This switch does not have a password. The command switch selects the next available member number and assigns it to the switch joining the cluster.

Switch(config)# cluster member mac-address 00E0.1E00.3333

You can verify the previous command by entering the show cluster members command in user EXEC mode on the command switch.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster candidates

Displays a list of candidate switches.

show cluster members

Displays information about the cluster members.


cluster run

Use the cluster run global configuration command to enable clustering on a switch. Use the no form of this command to disable clustering on a switch.

cluster run

no cluster run

default cluster run

Syntax Description

no

Disable clustering on a switch.

default

Enable clustering on a switch.


Defaults

Clustering is enabled on all switches.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

When you enter the no cluster run command on a command switch, the command switch is disabled. Clustering is disabled, and the switch is incapable of becoming a candidate switch.

When you enter the no cluster run command on a member switch, it is removed from the cluster. Clustering is disabled, and the switch is incapable of becoming a candidate switch.

When you enter the no cluster run command on a switch that is not part of a cluster, clustering is disabled on this switch. This switch cannot then become a candidate switch.

Examples

This example shows how to disable clustering on the command switch:

Switch(config)# no cluster run

You can verify the previous command by entering the show cluster command in user EXEC mode.

Related Commands

Command
Description

cluster enable

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.


cluster standby-group

Use the cluster standby-group global configuration command to enable command switch redundancy by binding the Hot Standby Router Protocol (HSRP) standby group to the cluster. Use the no form of this command to unbind the cluster from the HSRP standby group.

cluster standby-group HSRP-group-name

no cluster standby-group

default cluster standby-group

Syntax Description

HSRP-group-name

Name of the HSRP group that is bound to the cluster. The group name is limited to 32 characters.

no

Unbind the cluster from the HSRP standby group.

default

Unbind the cluster from the HSRP standby group.


Defaults

The cluster is not bound to any HSRP group.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

You must enter this command only on the command switch. If you enter it on a member switch, an error message appears.

The command switch propagates the cluster-HSRP binding information to all members. Each member switch stores the binding information in its nonvolatile RAM (NVRAM).

The HSRP group name must be a valid standby group; otherwise, the command exits with an error.

Examples

This example shows how to bind the HSRP group named my_hsrp to the cluster. This command is entered on the command switch.

Switch(config)# cluster standby-group my_hsrp

This example shows the error message when this command is entered on a command switch and the specified HSRP standby group does not exist:

Switch(config)# cluster standby-group my_hsrp
%ERROR: Standby group (my_hsrp) doesn't exist

This example shows the error message when this command is entered on a member switch.

Switch(config)# cluster standby-group my_hsrp
%ERROR: This command runs on a cluster command switch

You can verify the previous commands by entering the show cluster command in user EXEC mode.

Related Commands

Command
Description

standby ip

Enables HSRP on the interface.

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show standby

Displays standby group information.


cluster timer

Use the cluster timer global configuration command on the command switch to set the interval in seconds between heartbeat messages. Use the no form of this command to set the interval to the default value.

cluster timer interval-in-secs

no cluster timer

default cluster timer

Syntax Description

interval-in-secs

Interval in seconds between heartbeat messages. The range is from 1 to 300 seconds.

no

Set the interval to the default value (8 seconds).

default

Set the interval to the default value (8 seconds).


Defaults

The interval is 8 seconds.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

Use this command with the cluster holdtime global configuration command only on the command switch. The command switch propagates the values to all its cluster members so that the setting is consistent among all switches in the cluster.

The holdtime is typically set as a multiple of the heartbeat interval timer (cluster timer). For example, it takes (holdtime-in-secs divided by the interval-in-secs) number of heartbeat messages to be missed in a row to declare a switch down.

Examples

This example shows how to change the heartbeat interval timer and the duration on the command switch.

Switch(config)# cluster timer 3
Switch(config)# cluster holdtime 30

You can verify the previous commands by entering the show cluster user EXEC command.

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.


debug lre

Use the debug lre privileged EXEC command to enable debugging of Long-Reach Ethernet (LRE)-related events. Use the no form to disable debugging.

debug lre [controller | errors | profile | state] [interface-id]

no debug lre [controller | profile | state]

Syntax Description

controller

Display the customer premises equipment (CPE) Ethernet interface control access and CPE timing information.

errors

Display certain types of unexpected events that mean that the switch is configured or operating in a nonstandard way.

profile

Display profile management events on the switch.

state

Display state transition events of each switch LRE port.

interface-id

(Optional) ID of the switch LRE port.


Defaults

The default is off.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

If you use the debug lre command without providing a specific debug option, all LRE debug options are enabled. Conversely, if you use the no debug lre command without providing a specific debug option, all LRE debug options are disabled.

You can enable and disable the LRE debug options on individual ports, for example, by using the debug lre state interface-id command. If a specific port is not provided, the debug option applies to all switch LRE ports.

To troubleshoot LRE connectivity problems, use the debug lre state command to display the state machine transitions and the debug lre errors command to display other information that might explain unusual occurrences that could be affecting connectivity.

Examples

This example shows how to use the command to enable LRE controller event debugging on all switch LRE ports:

Switch# debug lre controller
LRE Controller Events debugging is on

This is an example of output when the debug lre state option is enabled.

*Mar  1 02:11:39: LRE: Lo0/3: FSM_PROFILE_LINKUP: event:EVT_PORT_CONFIG_CHANGE
*Mar  1 02:11:40: LRE: Lo0/3: FSM_PROFILE_APPLIED: event:EVT_LRE_LINK_DOWN
*Mar  1 02:11:41: LRE: Lo0/3: FSM_PROFILE_APPLIED: event:EVT_LRE_LINK_UP

This example shows how to disable LRE controller event debugging:

Switch# no debug lre controller

Related Commands

Command
Description

show controllers lre status

Displays the Long-Reach Ethernet (LRE) link statistics and the profile information on a switch LRE port, including link state, link duration, data rates, power levels, signal-to-noise ratio, and Reed-Solomon errors.


delete

Use the delete privileged EXEC command to delete a file from the file system.

delete {device:}filename

Syntax Description

device:

Device containing the file to be deleted. Valid devices include the switch Flash memory and Asynchronous Transfer Mode (ATM) module files. To access the ATM module, specify the slot number (1 or 2).

filename

Name of file.


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

A colon (:) follows the device variable. Do not enter spaces after the colon.

Examples

This example shows how to delete the file atm_image from the file system for an ATM
module installed in slot 1:

Switch# delete slot1:atm_image

This example shows how to delete a file from the switch Flash memory:

Switch# delete flash:filename

You can verify that the file was removed by entering the show flash: user EXEC command.

Related Commands

Command
Description

copy tftp

Downloads a file from a TFTP server to a device.


duplex

Use the duplex interface configuration command to specify the duplex mode of operation for Fast Ethernet and Gigabit Ethernet ports. Use the no form of this command to return the port to its default value.

duplex {full | half | auto}

no duplex

Syntax Description

full

Port is in full-duplex mode.

half

Port is in half-duplex mode.

auto

Port automatically detects whether it should run in full- or half-duplex mode.


Defaults

For 10/100, 100BASE-FX, and Gigabit ports, the default is auto.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

12.0(5)WC1

This command was extended to support the Cisco 575 LRE CPE.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Certain ports can be configured as either full duplex or half duplex. Applicability of this command depends on the device to which the switch is attached.

For Fast Ethernet ports, setting the port to auto has the same effect as specifying half if the attached device does not autonegotiate the duplex parameter.

For Gigabit Ethernet ports, setting the port to auto has the same effect as specifying full if the attached device does not autonegotiate the duplex parameter.

If the speed is set to auto, the switch negotiates with the device at the other end of the link for the speed setting and then forces the speed setting to the negotiated value. The duplex setting remains as configured on each end of the link, which could result in a duplex setting mismatch.

If both the speed and duplex are set to specific values, autonegotiation is disabled.

This command is not supported on the ATM module.

For CPE Ethernet ports, the default is half duplex with back pressure. You can change the duplex setting on the Cisco 575 LRE CPE, but not on the Cisco 585 LRE CPE. Duplex autonegotiation is supported on the Cisco 575 LRE CPE, but not on the Cisco 585 LRE CPE.


Note For guidelines on setting the switch speed and duplex parameters, refer to the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.


Examples

This example shows how to set port 1 on a Fast Ethernet module installed in slot 2 to full duplex:

Switch(config)#interface fastethernet2/1
Switch(config-if)#duplex full

This example shows how to set port 1 on a Gigabit Ethernet module installed in slot 2 to full duplex:

Switch(config)# interface gigabitethernet2/1
Switch(config-if)# duplex full

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch.

speed

Specifies the speed of a Fast Ethernet port.


errdisable detect cause

Use the errdisable detect cause global configuration command to enable error disable detection for a UniDirectional Link Detection (UDLD) cause. Use the no form of this command to disable the error disable detection feature.

errdisable detect cause {udld}

no errdisable detect cause {udld}

Syntax Description

udld

Enable error detection on udld.


Defaults

Detection is enabled.

Command Modes

Global configuration

Command History

Release
Modification

Release 12.0(5)WC5

This command was first introduced.


Usage Guidelines

A cause (udld) is defined as the reason why the error-disabled state occurred. When a cause is detected on an interface, the interface is placed in error-disabled state, an operational state similar to link-down state.

Use the errdisable recovery global configuration command to set a recovery mechanism for the cause. The switch re-enables the interface and tries the operation again when all causes have timed out. If you do not set a recovery mechanism, you must enter the shutdown and then the no shutdown commands to manually recover an interface from the error-disabled state.


Note This feature is not available on the Catalyst 2900 LRE XL switches.


Examples

This example shows how to enable error disable detection for the udld error-disable cause:

Switch(config)# errdisable detect cause udld

You can verify your setting by entering the show errdisable detect user EXEC command.

Related Commands

Command
Description

show errdisable detect

Displays errdisable detection information.


errdisable recovery

Use the errdisable recovery global configuration command to configure the recovery mechanism variables. Use the no form of this command to return to the default setting.

errdisable recovery {cause {udld} | {interval interval}

no errdisable recovery {cause {udld} | {interval interval}

Syntax Description

cause

Enable error disable to recover from a specific cause.

udld

Enable the timer to recover from the UniDirectional Link Detection (UDLD) error-disable state.

interval interval

Specify the time to recover from the specified error-disable state. The range is 30 to 86400 seconds. The same interval is applied to all causes.


Defaults

Recovery is disabled for all causes.

The default recovery interval is 300 seconds.

Command Modes

Global configuration

Command History

Release
Modification

Release 12.0(5)WC5

This command was first introduced.


Usage Guidelines

A cause (udld) is defined as the reason why the error-disabled state occurred. When a cause is detected on an interface, the interface is placed in error-disabled state, an operational state similar to link-down state.

Use this command to set a recovery mechanism for the cause. The switch re-enables the interface and tries the operation again when all causes have timed out. If you do not set a recovery mechanism, you must enter the shutdown and then the no shutdown commands to manually recover an interface from the error-disabled state.


Note This feature is not available on the Catalyst 2900 LRE XL switches.


Examples

This example shows how to enable the recovery timer for the udld error-disable cause:

Switch(config)# errdisable recovery cause udld

This example shows how to set the timer to 500 seconds:

Switch(config)# errdisable recovery interval 500

You can verify your settings by entering the show errdisable recovery privileged EXEC command.

Related Commands

Command
Description

show errdisable recovery

Displays errdisable recovery timer information.


exit

Use the exit VLAN database command to implement the proposed VLAN database, to increment the database configuration number, to propagate it throughout the administrative domain, and to return to privileged EXEC mode.

exit

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

VLAN database

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Usage Guidelines

The exit command implements all the configuration changes that you made since you entered VLAN database mode and uses them for the running configuration. This command returns you to privileged EXEC mode.

Examples

This example shows how to implement the proposed VLAN database and to exit to privileged EXEC mode:

Switch(vlan)# exit
Switch#

You can verify the previous command by entering the show vlan brief user EXEC command.

Related Commands

Command
Description

abort

Abandons the proposed VLAN database, exits VLAN database mode, and returns to privileged EXEC mode.

apply

Implements the proposed VLAN database, increments the database configuration revision number, propagates it throughout the administrative domain, and remains in VLAN database mode.

reset

Abandons the proposed VLAN database and remains in VLAN database mode. Resets the proposed database to the currently implemented VLAN database on the switch.

show vlan

Displays the parameters for all configured VLANs in the administrative domain.

shutdown vlan

Shuts down (suspends) local traffic on the specified VLAN.

vlan database

Enters VLAN database mode from the command-line interface (CLI).


flowcontrol

Use the flowcontrol interface configuration command on Gigabit Ethernet ports to control traffic rates during congestion. Use the no form of this command to disable flow control on the port.

flowcontrol {asymmetric | symmetric}

no flowcontrol

Syntax Description

asymmetric

Enable the local port to perform flow control of the remote port. If the local port is congested, it can request the remote port to stop transmitting. The local port requests that the remote port begin transmitting after the congestion clears.

symmetric

Enable the local port to perform flow control only if the remote port can also perform flow control of the local port. If the remote port cannot perform flow control, the local port also does not.


Defaults

The default is asymmetric.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Examples

This example shows how to configure the local port to support any level of flow control by the remote port:

Switch(config-if)# flowcontrol 

This example shows how to configure the local port to control the traffic flow from the remote port:

Switch(config-if)# flowcontrol asymmetric

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show interface [interface-id] flow-control

Displays flow-control information for the specified port.


interface

Use the interface global configuration command to configure an interface type, to create a switch virtual interface to be used as the management VLAN interface, and to enter interface configuration mode.

interface type slot/port | vlan number

no interface type slot/port | vlan number

Syntax Description

type

Type of interface to be configured. Can be Fast Ethernet, Gigabit Ethernet, or Asynchronous Transfer Mode (ATM).

slot

Slot number (0, 1, or 2). For an ATM module, use slot number 1 or 2.

port

Port ID.

vlan number

VLAN number from 1 to 1001 to be used as the management VLAN. Do not enter leading zeros.


Defaults

The default management VLAN interface is VLAN 1.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.


Usage Guidelines

When creating a management VLAN interface, a space between vlan and number is accepted.

Only one management VLAN interface can be active.

You cannot delete the management VLAN 1 interface.

Before bringing up a new management VLAN interface with the no shutdown command, you must enter the shutdown command to disable the old one.

You can use the management command to shut down the active management VLAN interface and to enable the newly created management VLAN interface.

You can configure the management VLAN interface on static-access, multi-VLAN, dynamic-access, and trunk ports.

Examples

This example shows how to enable the switch to act on ATM interface 1/2:

Switch(config)# interface atm 1/2
Switch(config-if)#

This example shows how to change the management VLAN from VLAN 1 to VLAN 3. Enter this series of commands only from the console. If you enter these commands through a Telnet session, the shutdown command disconnects the session, and you cannot to use IP to access the system.

Switch#configure terminal
Switch(config)# interface vlan 3
Switch(config-subif)# ip address 172.20.128.176 255.255.255.0
Switch(config-subif)# exit
Switch(config-if)# exit
Switch(config)# interface vlan 1
Switch(config-subif)# shutdown
Switch(config-subif)# exit
Switch(config-if)# exit
Switch(config)# interface vlan 3
Switch(config-subif)# no shutdown
Switch(config-subif)# exit
Switch(config-if)# exit

This example shows how to change the management VLAN from VLAN 1 to VLAN 3 through a Telnet session. In this situation, the management command shuts down VLAN 1 and brings up VLAN 3. The Telnet session must be re-established through the new management VLAN.

Switch# configure terminal
Switch(config)# interface vlan 3
Switch(config-subif)# ip address 172.20.128.176 255.255.255.0
Switch(config-subif)# management

This example shows how to copy the IP address and the network mask information from the current management VLAN to VLAN 3 and to make VLAN 3 the new management VLAN:

Switch# configure terminal
Switch(config)# interface vlan 3
Switch(config-subif)# management

You can verify the previous commands by entering the show interface and show interface vlan number commands in user EXEC mode.

Related Commands

Command
Description

management

Shuts down the current management VLAN interface and enables the new management VLAN interface.

show interface

Displays the administrative and operational status of a switching (nonrouting) port.

shutdown

Disables a port and shuts down the management VLAN.


ip address

Use the ip address interface configuration command to set an IP address for a switch. Use the no form of this command to remove an IP address or to disable IP processing.

ip address ip-address subnet-mask

no ip address ip-address subnet-mask

Syntax Description

ip-address

IP address.

subnet-mask

Mask for the associated IP subnet.


Defaults

No IP address is defined for the switch.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.


Usage Guidelines

A switch can have one IP address.

The IP address of the switch can be accessed only by nodes connected to ports that belong to the management VLAN. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

If you remove the IP address through a Telnet session, your connection to the switch will be lost.

If your switch receives its IP address from a Bootstrap Protocol (BOOTP) or Dynamic Host Configuration Protocol (DHCP) server and you remove the switch IP address by using the no ip address command, IP processing is disabled, and the BOOTP or DHCP server cannot reassign the address.

Examples

This example shows how to configure the IP address for the switch on a subnetted network:

Switch(config)# interface vlan 1
Switch(config-if)# ip address 172.20.128.2 255.255.255.0 

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch.

clear ip address

Deletes an IP address for a switch without disabling the IP processing.


ip igmp filter

Use the ip igmp filter interface configuration command to apply an Internet Group Management Protocol (IGMP) profile to an interface and to prevent hosts on an interface from joining one or more IP multicast groups. Use the no form of this command to remove a specified profile from an interface.

ip igmp filter profile number

no ip igmp filter profile number

Syntax Description

profile number

The range is from 1 to 4294967295.


Defaults

No IGMP filtering profiles are assigned to an interface.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)WC3

This command was first introduced.


Usage Guidelines

The same IGMP profile can be applied to more than one switch port interface.

Examples

This example shows how to apply an IGMP filtering profile to an interface:

Switch(config-if)# ip igmp filter 30 

You can verify your settings by entering the show ip igmp profile profile number user EXEC command.

Related Commands

Command
Description

ip igmp profile

Defines a new IGMP filtering profile.

show ip igmp profile

Displays the details of an IGMP filtering profile entry.

show running-config interface interface name

Displays the running configuration on the switch, including any profiles assigned to a port.


ip igmp max-groups

Use the ip igmp max-groups interface configuration command to specify the maximum number of Internet Group Management Protocol (IGMP) groups that can be active on a port.

ip igmp max-groups number

Syntax Description

number

The maximum number of IGMP filtering groups that can be active on a port. The range is from 0 to 256.


Defaults

No maximum number of IGMP groups are defined.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)WC3

This command was first introduced.


Usage Guidelines

There is no limit to the number of multicast groups that a port can join.

If 0 is specified as the maxgroups value for an interface, that interface cannot join any multicast groups.

Examples

This example shows how to limit the number of IGMP groups that an interface can join to 25.

Switch(config)# interface fastethernet 0/12
Switch(config-if)# ip igmp max-groups 25

You can verify your setting by using the show running-configuration privileged EXEC command and by specifying an interface.

Switch# show running-config interface fastethernet 0/12
Building configuration...

Current configuration :124 bytes
!
interface FastEthernet0/12
 no ip address
 shutdown
 snmp trap link-status
 ip igmp max-groups 25
 ip igmp filter 22
end

You can verify your settings by entering the show running-config interface interface configuration command.

Related Commands

ip igmp profile

Applies an IGMP filtering profile to an interface.

show ip igmp profile

Displays the details of an IGMP filtering profile entry.

show running-config interface

Displays the running configuration on the switch, including any profiles assigned to a port.


ip igmp profile

Use the ip igmp profile global configuration command to create an Internet Group Management Protocol (IGMP) profile and to enter IGMP profile configuration mode. From this mode, you can specify the configuration of the IGMP profile. Use the no form of this command and a profile number to delete an IGMP profile.

ip igmp profile profile number

no ip igmp profile profile number

Syntax Description

profile number

The IGMP profile being created. The range is 1 to 4294967295.


Defaults

No IGMP profiles are defined. When a profile configured, the default action is to deny the addresses in the profile.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)WC3

This command was first introduced.


Usage Guidelines

When you are in IGMP profile configuration mode, you can create the profile by using these keywords:

deny: specifies that matching addresses are denied; this is the default.

permit: specifies that matching address are permitted.

range: adds a range to the set range of IP address. This can be a single IP address or a range with start and end addresses.

exit: saves changes to the IGMP profile and exits from IGMP profile configuration mode.

no: negates the command or sets it to the defaults.

Examples

This example shows how to create an IGMP filtering profile:

host1# config terminal
Enter configuration commands, one per line.  End with CNTL/Z.
host1(config)# ip igmp profile 30
host1(config-igmp-profile)# 
host1(config-igmp-profile)# deny    
host1(config-igmp-profile)# range 233.1.1.1 233.255.255.255 
host1(config-igmp-profile)# range 235.1.1.1 235.255.255.255 
host1(config-igmp-profile)# end 
host1#

Related Commands

Command
Description

ip igmp profile

Applies an IGMP filtering profile to an interface.

show ip igmp profile

Displays the details of an IGMP filtering profile entry.

show running-config interface

Displays the running configuration on the switch, including any profiles assigned to a port.


login authentication

Use the login authentication line configuration command to enable authentication, authorization, and accounting (AAA) for logins. Use the no form of this command to either disable Terminal Access Controller Access Control System Plus (TACACS+) authentication for logins or to return to the default.

login authentication {default | list-name}

no login {default | list-name}

Syntax Description

default

Use the default list created with the AAA authentication login command.

list-name

Use the indicated list created with the AAA authentication login command.


Defaults

Login authentication is disabled.

Command Modes

Line configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

To create a default list that is used if no list is specified in the login authentication command, use the default keyword followed by the methods that you want used in default situations. The default method list is automatically applied to all interfaces.

Examples

This example shows how to specify TACACS+ as the default method for user authentication during login:

Switch(config)# aaa new-model
Switch(config)# aaa authentication login default tacacs
Switch(config)# line vty 0 4
Switch(config-line)# login authentication default tacacs

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

enable password

Specifies a local password to control access to various privilege levels.

password

Specifies a password on a line.

show running-config

Displays the running configuration on the switch.

username

Establishes a username-based authentication system.


lre patchfile

Use the lre patchfile global configuration command to specify the Long-Reach Ethernet (LRE) patch file used when the switch boots.

lre patchfile patchfile-name


Caution Do not use the lre patchfile command on the switch without Cisco assistance. This command is for updating the LRE switch patch file in future maintenance releases. Contact Cisco Systems for information about the Cisco LRE CPE.

Syntax Description

patchfile-name

Name of the LRE patch file for the switch.


Defaults

The default name of the LRE patch file is flash:e2rb.bin.

Command Modes

Global configuration mode

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.


Usage Guidelines

The switch LRE interface might require software maintenance releases referred to as patches. Each patch provides a complete set of LRE features. To take advantage of the full feature set, the LRE switch and the connected customer premises equipment (CPE) device should use the same patch version.

If you use this command to change to a different patch file, the change takes effect on the next reload only if you have saved this change to the startup configuration.

If you rename the patch file, use the new name when using this command.

Use the show controllers lre version privileged EXEC command to display the patch version used by the LRE switch and CPE.

Examples

This example shows how to use the lre patchfile e2rb.bin command:

Switch(config)#lre patchfile flash:e2rb.bin

Switch(config)#

Related Commands

Command
Description

show controllers lre version

Displays the version number of the hardware, software, and patch software components of the switch LRE interface and the CPE LRE interface.

debug lre

Enable debugging of LRE-related events.


lre profile

Use the lre profile interface configuration command to assign a Long-Reach Ethernet (LRE) private profile to a specific switch LRE port.

lre profile profile-name

Syntax Description

profile-name

Name of the private profile:

LRE-5

LRE-10

LRE-15

LRE-10-1

LRE-10-3

LRE-10-5

LRE-5LL

LRE-10LL

LRE-15LL


Defaults

The LRE-10 private profile is the default profile on each switch LRE port.

Command Modes

Interface configuration mode

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC2

Asynchronous and low-latency (LL) profiles were added.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

You can use a private profile if the LRE switch is not used with equipment connected to a PSTN. The switch supports a variety of private profiles that offer different link speeds and maximum distances. In general, the higher the link speed, the shorter the maximum distance. Private profiles are assigned on a per-port basis. The ports on an LRE switch can be assigned the same or different private profiles.

Each switch LRE port always has a private profile assigned to it. The LRE-10 profile is the default. Public profiles have priority over private profiles. If you assign a public profile to the switch, the switch uses the public profile and ignores any private profile assigned to the switch LRE ports. If a public profile is configured on the switch and you want the switch LRE ports to use private profiles, you must first disable the public profile by using the no lre profile global global configuration command.

When you assign a different profile to a switch LRE port, the port immediately resets and uses the newly assigned profile.

Before you add an LRE switch to a cluster, make sure that you assign it the same public profile that is used by other LRE switches in the cluster. A configuration conflict occurs if a switch cluster has LRE switches using both private and public profiles. If one LRE switch in a cluster is assigned a public profile, all LRE switches in that cluster must have that same public profile. A cluster can have a mix of LRE switches using different private profiles. For more information about clusters, refer to the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

For a complete list of considerations for using LRE profiles, refer to the "LRE Links and LRE Profiles" section in the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

Examples

This example shows how to assign the LRE-15 private profile to switch LRE port 1:

Switch(config)# interface lo0/1
Switch(config-if)# lre profile LRE-15

Related Commands

Command
Description

lre profile global

Assigns a public profile to all switch LRE ports.

show controllers lre profile

Displays information about the LRE profiles available on the switch and how they are assigned to the switch LRE ports.


lre profile global

Use the lre profile global global configuration command to assign a Long-Reach Ethernet (LRE) public profile to all switch LRE ports.

lre profile global profile-name [public-ansi | public-etsi]

no lre profile global

Syntax Description

profile-name

Name of the public profile, either PUBLIC-ANSI or PUBLIC-ETSI.


Defaults

No default is defined.

Command Modes

Global configuration mode

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

We strongly recommend using a public profile if the switch is used with equipment directly connected to a Public Switched Telephone Network (PSTN) without a private branch exchange (PBX) between the LRE switch and the public telephone lines. When the switch is configured with a public profile, all LRE ports use the same configuration to prevent the switch from causing interference with the other lines on the PSTN.


Note Consult the regulations for connecting to the PSTN in your area.



Note Cisco LRE products can share lines with analog telephones, Integrated Services Digital Network (ISDN), and digital PBX switch telephones that use the 0 to 700 kHz frequency range.


The standards for spectral profiles have not yet been ratified. The PUBLIC-ANSI profile corresponds to ANSI Plan 998. The PUBLIC-ETSI profile corresponds to ETSI Plan 997. Both plans are draft standards. Contact Cisco Systems for the latest information about standards ratification or for updates to the public profiles.

Each switch LRE port always has a private profile assigned to it. The LRE-10 profile is the default. Public profiles have priority over private profiles. If you assign a public profile to the switch, the switch uses the public profile and ignores any private profile assigned to the switch LRE ports. If a public profile is configured on the switch and you want the switch LRE ports to use private profiles, you must first disable the public profile by using the no lre profile global global configuration command.

When you assign a different profile to a switch LRE port, the port immediately resets and uses the newly assigned profile.

Before you add an LRE switch to a cluster, make sure that you assign it the same public profile that is used by other LRE switches in the cluster. A configuration conflict occurs if a switch cluster has LRE switches using both private and public profiles. If one LRE switch in a cluster is assigned a public profile, all LRE switches in that cluster must have that same public profile. A cluster can have a mix of LRE switches using different private profiles. For more information about clusters, refer to the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

For a complete list of considerations for using LRE profiles, refer to the "LRE Links and LRE Profiles" section in the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

Examples

This example shows how to use the lre profile global PUBLIC-ANSI command:

Switch(config)# lre profile global PUBLIC-ANSI

You can verify your settings by entering the show controllers lre profile privileged EXEC command.

Related Commands

Command
Description

lre profile

Assigns a private profile to a specific switch LRE port.

show controllers lre profile

Displays information about the LRE profiles available on the switch and how they are assigned to the switch LRE ports.


lre reset

Use the lre reset interface configuration command to reset the switch Long-Reach Ethernet (LRE) interface or the Cisco LRE customer premises equipment (CPE) interface.

lre reset [local | remote | micro]

Syntax Description

local

Resets the switch LRE interface.

remote

Resets the Cisco 575 LRE CPE interface.

micro

Resets the Cisco 585 LRE CPE interface.


Defaults

No default is defined.

Command Modes

Interface configuration mode

Command History

Release
Modification

12.0(5)WC4

This command was first introduced.


Usage Guidelines

Use this command to troubleshoot LRE port performance.

The lre reset micro command is not supported on the Cisco 575 LRE CPE.

Examples

This example shows how to reset switch LRE port 1:

Switch(config)# interface lo0/1
Switch(config-if)# lre reset local

This example shows how to reset the Cisco 575 LRE CPE that is connected to switch LRE port 1:

Switch(config)# interface lo0/1
Switch(config-if)# lre reset remote

This example shows how to reset the Cisco 585 LRE CPE that connected to switch LRE port 1:

Switch(config)# interface lo0/1
Switch(config-if)# lre reset micro

Related Commands

Command
Description

lre shutdown

Disables the LRE transmitter of an LRE interface that not being used.


lre shutdown

Use the lre shutdown interface configuration command to disable the Long-Reach Ethernet (LRE) transmitter of an LRE interface that not being used.

lre shutdown

Defaults

No default is defined.

Command Modes

Interface configuration mode

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.


Usage Guidelines

Use this command to disable the LRE transmitter of an LRE interface that is not connected to a working CPE. In some unusual circumstances, the power emitted by switch LRE ports can affect other switch LRE ports in various ways. We recommend that ports that are not wired to CPEs be shut down in this way. Use this command to also disable access to the switch from this port.

Examples

This example shows how to deactivate the LRE link on switch LRE port 1:

Switch(config)# interface lo0/1
Switch(config-if)# lre shutdown

Related Commands

Command
Description

lre reset

Resets the switch LRE interface or the CPE LRE interface.


mac-address-table aging-time

Use the mac-address-table aging-time global configuration command to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated. Use the no form of this command to use the default aging-time interval. The aging time applies to all VLANs.

mac-address-table aging-time age

no mac-address-table aging-time

Syntax Description

age

Number from 10 to 1000000 (seconds).


Defaults

The default is 300 seconds.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.


Usage Guidelines

If hosts do not transmit continuously, increase the aging time to record the dynamic entries for a longer time. This can reduce the possibility of flooding when the hosts transmit again.

Examples

This example shows how to set the aging time to 200 seconds:

Switch(config)# mac-address-table aging-time 200

You can verify the previous command by entering the show mac-address-table user EXEC command.

Related Commands

Command
Description

clear mac-address-table

Deletes entries from the MAC address table.

mac-address-table dynamic

Adds dynamic addresses to the MAC address table.

mac-address-table secure

Adds secure addresses to the MAC address table.

port block

Blocks the flooding of unknown unicast or multicast packets to a port.

show cgmp

Displays the state of the CGMP-learned multicast groups and routers.

show mac-address-table

Displays the MAC address table.


mac-address-table dynamic

Use the mac-address-table dynamic global configuration command to add dynamic addresses to the MAC address table. Dynamic addresses are automatically added to the address table and dropped from it when they are not in use. Use the no form of this command to remove dynamic entries from the MAC address table.

mac-address-table dynamic hw-addr interface [atm slot/port] [vlan vlan-id]

no mac-address-table dynamic hw-addr [vlan vlan-id]

Syntax Description

hw-addr

MAC address added to or removed from the table.

interface

Port to which packets destined for hw-addr are forwarded.

atm slot/port

(Optional) Add dynamic addresses to ATM module in slot 1 or 2. The port is always 0 for an ATM interface.

vlan vlan-id

(Optional) The interface and vlan parameters together specify a destination to which packets destined for hw-addr are forwarded.

The vlan keyword is optional if the port is a static-access or dynamic-access VLAN port. The VLAN assigned to the port is then assumed to be that of the port associated with the MAC address.

Note When this command is entered on a dynamic-access port, queries to the VLAN Membership Policy Server (VMPS) do not occur. The VMPS cannot verify that the address is allowed or determine to which VLAN the port should be assigned. Use this command only for testing purposes.

The vlan keyword is required for multi-VLAN and trunk ports. This keyword is required on trunk ports to specify to which VLAN the dynamic address is assigned.

The vlan-id is the ID of the VLAN to which packets destined for hw-addr are forwarded. Valid IDs are 1 to 1005; do not enter leading zeros.


Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.

11.2(8)SA5

The atm keyword was added.


Usage Guidelines

If the variable vlan-id is omitted and the no form of the command is used, the MAC address is removed from all VLANs.

Examples

This example shows how to add a MAC address on port fa1/1 to VLAN 4:

Switch(config)# mac-address-table dynamic 00c0.00a0.03fa fa1/1 vlan 4

You can verify the previous command by entering the show mac-address-table user EXEC command.

Related Commands

Command
Description

clear mac-address-table

Deletes entries from the MAC address table.

mac-address-table aging-time

Specifies the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.

mac-address-table static

Adds static addresses to the MAC address table.

show mac-address-table

Displays the MAC address table.


mac-address-table notification

Use the mac-address-table notification global configuration command to enable the MAC address notification feature and to configure the notification-trap interval or history table. Use the no form of this command to disable this feature or return to the default setting.

mac-address-table notification [interval seconds] | [history-size value]

no mac-address-table notification [interval seconds] | [history-size value]

Syntax Description

interval interval

(Optional) Configures the notification trap interval in seconds. The range is from 0 to 2147483647. The switch sends notification traps only after this interval has elapsed.

history-size size

(Optional) Configures the maximum number of entries in the MAC notification history table. The range is from 1 to 500. When this command is issued, the previous table is deleted, and a new table is created.


Defaults

MAC notification feature is disabled.

The default trap interval value is one second.

The default number of entries in the history table is one.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)WC3

This command was first introduced.


Usage Guidelines

The MAC notification feature sends SNMP traps when a MAC address is learned or deleted from the forwarding tables.


Note You must use the snmp-server enable traps mac-notification global configuration command to enable MAC address traps on the switch before enabling the MAC notification feature.


Use the mac-address-table notification command without keywords to enable or disable the feature.

Use this command with the interval or history-size keywords to configure the trap interval or the maximum number of entries in the MAC notification history table.


Note The interval seconds and history-size value keywords must be entered as separate commands.


Use the no mac-address-table notification interval global configuration command to reset the MAC notification history table size to the default of 1 second.

Use the no mac-address-table notification history-size global configuration command to reset the MAC notification history table size to the default of one.

Examples

This example shows how to enable the MAC notification feature:

Switch(config)# mac-address-table notification

This example shows how to set the notification trap interval to 60 seconds:

Switch(config)# mac-address-table notification interval 60

This example shows how to set the number of entries in the history table to 32:

Switch(config)# mac-address-table notification history-size 32

You can verify this command by entering the show mac-address-table notification user EXEC command.

Related Commands

snmp-server enable traps mac-notification

Enables the MAC-notification traps on a port.

show mac-address-table notification

Displays MAC-notification parameters.


mac-address-table secure

Use the mac-address-table secure global configuration command to add secure addresses to the MAC address table. Use the no form of this command to remove secure entries from the MAC address table.

mac-address-table secure hw-addr interface [atm slot/port] [vlan vlan-id]

no mac-address-table secure hw-addr [vlan vlan-id]

Syntax Description

hw-addr

MAC address that is added to the table.

interface

Port to which packets destined for hw-addr are forwarded.

atm slot/port

(Optional) Add secure address to the Asynchronous Transfer Mode (ATM) module in slot 1 or 2. The port is always 0 for an ATM interface.

vlan vlan-id

(Optional) The interface and vlan parameters together specify a destination to which packets destined for hw-addr are forwarded.

The vlan keyword is optional if the port is a static-access VLAN port. The VLAN assigned to the port is then assumed to be that of the port associated with the MAC address. This keyword is required for multi-VLAN and trunk ports.

The vlan-id is the ID of the VLAN to which secure entries are added. Valid IDs are 1 to 1005; do not enter leading zeros.


Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.

11.2(8)SA5

The atm keyword was added.


Usage Guidelines

Secure addresses can be assigned only to one port at a time. Therefore, if a secure address table entry for the specified MAC address and VLAN already exists on another port, it is removed from that port and assigned to the specified one.

Dynamic-access ports cannot be configured with secure addresses.

Examples

This example shows how to add a secure MAC address to VLAN 6 of port fa1/1:

Switch(config)# mac-address-table secure 00c0.00a0.03fa fa1/1 vlan 6

This example shows how to add a secure MAC address to ATM port 2/1:

Switch(config)# mac-address-table secure 00c0.00a0.03fa atm 2/1

You can verify the previous command by entering the show mac-address-table user EXEC command.

Related Commands

Command
Description

clear mac-address-table

Deletes entries from the MAC address table.

mac-address-table aging-time

Specifies the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.

mac-address-table dynamic

Adds dynamic addresses to the MAC address table.

mac-address-table static

Adds static addresses to the MAC address table.

show mac-address-table

Displays the MAC address table.


mac-address-table static

Use the mac-address-table static global configuration command to add static addresses to the MAC address table. Use the no form of this command to remove static entries from the MAC address table.

mac-address-table static hw-addr in-port out-port-list [atm slot/port] [vlan vlan-id]

no mac-address-table static hw-addr [in-port in-port] [out-port-list out-port-list] [vlan vlan-id]

Syntax Description

hw-addr

MAC address to add to the address table.

in-port

Input port from which packets received with a destination address of hw-addr are forwarded to the list of ports in the out-port-list. The in-port must belong to the same VLAN as all the ports in the out-port-list.

out-port-list

List of ports to which packets received on ports in in-port are forwarded. All ports in the list must belong to the same VLAN.

atm slot/port

(Optional) Add static addresses to Asynchronous Transfer Mode (ATM) module in slot 1 or 2. The port is always 0 for an ATM interface.

vlan vlan-id

(Optional) The interface and vlan parameters together specify a destination to which packets destined for the specified MAC address are forwarded.

The vlan keyword is optional if all the ports specified by in-port and out-port-list are static-access VLAN ports. The VLAN assigned to the ports is assumed. This keyword is required for multi-VLAN and trunk ports.

Dynamic-access ports cannot be included in static addresses as either the source (inport) or destination (outport).

The vlan keyword is required on trunk ports to specify to which VLAN the static address is assigned.

The vlan-id is the ID of the VLAN to which static address entries are forwarded. Valid IDs are 1 to 1005; do not enter leading zeros.


Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.

11.2(8)SA5

The atm keyword was added.


Usage Guidelines

When a packet is received on the input port, it is forwarded to the VLAN of each port that you specify for the out-port-list. Different input ports can have different output-port lists for each static address. Adding a static address already defined as one modifies the port map (vlan and out-port-list) for the input port specified.

If the variable vlan-id is omitted and the no form of the command is used, the MAC address is removed from all VLANs.

Traffic from a static address is only accepted from a port defined in the in-port variable.

Dynamic-access ports cannot be configured as the source or destination port in a static address entry.

Examples

This example shows how to add a static address with port 1 as an input port and ports 2 and 8 of VLAN 4 as output ports:

Switch(config)# mac-address-table static c2f3.220a.12f4 fa0/1 fa0/2 fa0/8 vlan 4

You can verify the previous command by entering the show mac-address-table user EXEC command.

Related Commands

Command
Description

clear mac-address-table

Deletes entries from the MAC address table.

mac-address-table aging-time

Specifies the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.

mac-address-table dynamic

Adds dynamic addresses to the MAC address table.

mac-address-table secure

Adds secure addresses to the MAC address table.

show mac-address-table

Displays the MAC address table.


management

Use the management interface configuration command to shut down the current management VLAN interface and to enable the new management VLAN interface. The management VLAN is the VLAN used for managing a cluster of switches. To use this VLAN for switch management, apply this VLAN to a switched virtual interface or to the management interface. The default management VLAN is VLAN 1; however, it can be changed to a new management interface on a different VLAN with valid IDs from 1 to 1001.

This command also copies the current management VLAN IP information to the new management VLAN interface if no new IP address or network mask is provided. It also copies the cluster standby group configuration to the new management VLAN.

management

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)XP

This command was first introduced.


Usage Guidelines

No default management or no management command exists to return the management VLAN to its default state.

The management command is not written to the configuration file, and it is not displayed in the output of the show running-config privileged EXEC command.

Before entering the management command, make sure that these conditions exist:

You must be able to move your network management station to a switch port assigned to the same VLAN as the new management VLAN. (Depending on your network topology, you might not need to move your network management station: for example, you have ISL routing configured on a router between two VLANs.)

Connectivity through the network must exist from the network management station to all switches involved in the management VLAN change.

The switch must already have a port assigned to the same VLAN as the management VLAN.

Use the management command to change the management VLAN on a single switch. Use the global cluster management-vlan n configuration command on the command switch to change the management VLAN on the entire cluster.

Examples

This example shows how to shut down the current management VLAN interface and start VLAN 2 as the management VLAN:

Switch# configure terminal
Switch(config)# interface vlan 2
Switch(config-subif)# ip address 172.20.128.176 255.255.255.0
Switch(config-subif)# management
Switch(config-subif)# exit
Switch(config)#

This example shows how to copy the IP address and network mask from the current management VLAN to VLAN 2 and make VLAN 2 the management VLAN:

Switch# configure terminal
Switch(config)# interface vlan 2
Switch(config-subif)# management
Switch(config-subif)# exit
Switch(config)#

You can verify the previous command by entering the show interface vlan number user EXEC command.

Related Commands

Command
Description

cluster management-vlan

Changes the management VLAN for the entire cluster.

interface vlan

Configures an interface type, creates a switch virtual interface to be used as the management VLAN interface, and enters interface configuration mode.

show interface vlan number

Displays the administrative and operational status of a switching (nonrouting) port.


mvr (global configuration)

Use the mvr global configuration command without keywords to enable the multicast VLAN registration (MVR) feature on the switch. Use the no form of this command to disable MVR and its options.

Use the command with keywords to set the maximum time to wait for a query reply before removing a port from group membership and to specify the MVR multicast VLAN. Use the no form of the commands to return the switch to the default settings.

mvr [group ip-address [count] [querytime value] [vlan vlan-id] ]

no mvr [group ip-address [count] [querytime value] [vlan vlan-id] ]

Syntax Description

group ip-address

Statically configure an MVR group IP multicast address on the switch.

Use the no form of this command to remove a statically configured IP multicast address or contiguous addresses or, when no IP address is entered, to remove all statically configured MVR IP multicast addresses.

querytime value

(Optional) Set the maximum time to wait for IGMP report memberships on a receiver port. This time only applies to receiver-port leave processing. When an IGMP query is sent from a receiver port, the switch waits for the default or configured MVR querytime for an IGMP group membership report before removing the port from multicast group membership.

The value is the response time in units of tenths of a second. The default is 0.5 second.

Use the no form of the command to return to the default setting.

vlan vlan-id

Specify the VLAN on which MVR multicast data is expected to be received. This is also the VLAN to which all the source ports belong.


Defaults

MVR is disabled.

The switch hardware determines the maximum number of MVR entries.

No IP multicast addresses are configured on the switch.

The default count is 1.

The default query response time is 0.5 second.

The default multicast VLAN is VLAN 1.

Command Modes

Global configuration

Command History

Release
Modification

12.0(5)XW

This command was first introduced.


Usage Guidelines

The switch hardware determines the maximum number of MVR entries.

Use the mvr group command to statically set all the IP multicast addresses that will take part in MVR. Any multicast data sent to a configured multicast address is sent to all the source ports on the switch and to all receiver ports that have registered to receive data on that IP multicast address.


Note The mvr group command prevents adding IP multicast addresses that cause address aliasing. Each IP multicast address translates to a multicast 48-bit MAC address. If the IP address being configured translates (aliases) to the same 48-bit MAC address as a previously configured IP multicast address, the command fails.


The mvr querytime parameter applies only to receiver ports. You should configure the query time before enabling MVR and configuring the static multicast groups. You can change the query time after MVR is enabled, but you receive a warning message:

Warning: Changing MVR query response time while MVR is running.

Set the MVR multicast VLAN before the multicast addresses are configured. If it is necessary to change the multicast VLAN, disable MVR, change the VLAN number, and then reenable MVR. Previously configured groups are restored.

Examples

This example shows how to enable MVR:

Switch(config)# mvr

This example shows how to disable MVR:

Switch(config)# no mvr

Use the show mvr privileged EXEC command to display the setting for maximum multicast groups.

This example shows how to configure 228.1.23.4 as an IP multicast address:

Switch(config)# mvr group 228.1.23.4

This command fails because of address aliasing:

Switch(config)# mvr group 230.1.23.4

Cannot add this IP address - aliases with previously configured IP address 228.1.23.4. 

This example shows how to configure ten contiguous IP multicast groups with multicast addresses from 228.1.23.1 to 228.1.23.10:

Switch(config)# mvr group 228.1.23.1 10

This example shows how to delete the previously configured ten IP multicast addresses:

Switch(config)# no mvr group 228.1.23.1 10

This example shows how to delete all previously configured IP multicast addresses:

Switch(config)# no mvr group

Use the command show mvr members to display the IP multicast group addresses configured on the switch.

This example shows how to set the maximum query response time as 1 second (10 tenths):

Switch(config)# mvr querytime 10

This example shows how to return the maximum query response time to the default setting of 0.5 second:

Switch(config)# no mvr querytime

This example shows how to set VLAN 2 as the multicast VLAN:

Switch(config)# mvr vlan 2 

You can verify your settings by entering the show mvr privileged EXEC command.

Related Commands

Command
Description

mvr (interface configuration)

Configures MVR source or receiver ports.

show mvr

Displays MVR global parameters or port parameters.

show mvr members

Displays all receiver ports that are members of an MVR multicast group.

show mvr interface

Displays the configured MVR interfaces.


mvr (interface configuration)

Use the mvr interface configuration command to configure a port as a multicast VLAN registration (MVR) receiver or source port and set the Immediate Leave feature.

Use the no form of the commands to return the port to the default settings.

mvr {type {source | receiver} | immediate}

no mvr {type {source | receiver} | immediate}

Syntax Description

type value

(Optional) Configure the port as an MVR receiver port or source port.

The default port type is neither an MVR source nor receiver port. The no mvr type command resets the port to the default.

source

Configure the port as an uplink port that can send and receive multicast data for the configured multicast groups. All source ports on a switch belong to a single multicast VLAN.

receiver

Configure the port as a subscriber port that can only receive multicast data. Receiver ports cannot belong to the multicast VLAN.

immediate

Enable the Immediate Leave feature of MVR on a port. Use the no form of this command to disable the feature.


Defaults

A port is configured as neither receiver nor source.

The Immediate Leave feature is disabled on all ports.

No receiver port is a member of any configured multicast group.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)XW

This command was first introduced.


Usage Guidelines

Configure a port as a source port if that port should be able to both send and receive multicast data bound for the configured multicast groups. Multicast data is received on all ports configured as source ports.

Configure a port as a receiver port if that port should only be able to receive multicast data and should not be able to send multicast data to the configured multicast groups. None of the receiver ports receives multicast data unless it sends an Internet Group Management Protocol (IGMP) group join message for a multicast group.


Note For the Catalyst 2900 XL and Catalyst 3500 XL switches, all receiver ports must belong to the same VLAN and must not be trunk ports.


A port that is not taking part in MVR should not be configured as an MVR receiver port or source port. This port is a normal switch port and is able to send and receive multicast data with normal switch behavior.

The Immediate Leave feature applies only to receiver ports. When the Immediate Leave feature is enabled, a receiver port leaves a multicast group more quickly. When the switch receives an IGMP leave message from a group on a receiver port, it sends out an IGMP query on that port and waits for IGMP group membership reports. If no reports are received in a configured time period, the receiver port is removed from multicast group membership. With Immediate Leave, an IGMP query is not sent from the receiver port on which the IGMP leave was received. As soon as the leave message is received, the receiver port is removed from multicast group membership, thus speeding up leave latency.

Enable the Immediate Leave feature only on receiver ports to which a single receiver device is connected.

All receiver ports must be on the same VLAN and cannot be trunk ports. A receiver configured as a static member of a multicast group remains a member until statically removed from membership.

MVR does not support IGMP dynamic joins. You must configure static multicast addresses for receiver ports.

The receiver VLAN is the VLAN to which the first configured receiver port belongs. If the first receiver port is a dynamic port with an unassigned VLAN, it becomes an inactive receiver port and does not take part in MVR until it is assigned to the receiver VLAN. The receiver VLAN is reset whenever there are no remaining receiver ports on the switch (active or inactive), which means that the receiver VLAN might change every time the first receiver port is configured.

Examples

This example shows how to configure port 0/1 as an MVR receiver port:

Switch(config)# interface FastEthernet 0/1
Switch(config-if)# mvr type receiver

This example shows how to configure port 0/3 as an MVR source port:

Switch(config)# interface FastEthernet 0/3
Switch(config-if)# mvr type source

This example shows how to remove port 0/1 from taking part in MVR:

Switch(config)# interface FastEthernet 0/1
Switch(config-if))# no mvr

This example shows how to display configured receiver ports and source ports.:

Switch# show mvr interface

MVR PORTS
Port: Fa0/1 Type: RECEIVER Status: ACTIVE
Port: Fa0/2 Type: RECEIVER Status: ACTIVE
Port: Fa0/3 Type: SOURCE Status: ACTIVE

This example shows how to enable Immediate Leave on Fast Ethernet port 0/1:

Switch(config)# interface FastEthernet 0/1
Switch(config-if)# mvr immediate

This example shows how to disable Immediate Leave on port 0/1:

Switch(config)# interface FastEthernet 0/1
Switch(config-if)# no mvr immediate

To display whether or not Immediate Leave is enabled on an interface, use the command show mvr for the interface as in this example:

Switch# show mvr interface fastethernet 0/1
Interface: Fa0/1
         Immediate Leave: FALSE

Use the show mvr members privileged EXEC command to display the multicast group address, the VLAN, and the receiver port.

Related Commands

Command
Description

mvr (global configuration)

Enables multicast VLAN registration on the switch.

show mvr

Displays MVR global parameters or port parameters.

show mvr members

Displays all receiver ports that are members of an MVR multicast group.

show mvr interface

Displays the configured MVR ports.


ntp broadcast client

Use the ntp broadcast client interface configuration command to allow the system to receive Network Time Protocol (NTP) broadcast packets on an interface. Use the no form of the command to disable this capability.

ntp broadcast client

no ntp broadcast client

Syntax Description

This command has no arguments or keywords.

Defaults

Broadcast client mode is disabled.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Use this command to allow the system to listen to broadcast packets on an interface-by-interface basis. Enter this command on the management VLAN interface. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

Examples

This example shows how to synchronize the router to NTP packets that are broadcast on interface VLAN1:

Switch(config-if)# interface vlan1
Switch(config-if)# ntp broadcast client

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch.


ntp broadcast destination

Use the ntp broadcast destination interface configuration command to configure a Network Time Protocol (NTP) server or peer to restrict the broadcast of NTP frames to the IP address of a designated client or a peer. Use the no form of the command to return the setting to its default.

ntp broadcast destination IP-address

no ntp broadcast destination

Syntax Description

IP-address

IP address or host name of a designated client or a peer.


Defaults

No IP address or host name is assigned.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Enter this command on the management VLAN interface. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

Examples

This example shows how to restrict the broadcast of NTP frames to a specific IP address:

Switch(config-if)# interface vlan1
Switch(config-if)# ntp broadcast destination 172.20.128.176

Related Commands

Command
Description

ntp broadcast client

Allows the system to receive NTP broadcast packets on an interface.


ntp broadcast key

Use the ntp broadcast key interface configuration command to configure a Network Time Protocol (NTP) server or peer to broadcast NTP frames with the authentication key that is embedded in the NTP packet. Use the no form of the command to return the setting to its default.

ntp broadcast key number

no ntp broadcast key

Syntax Description

number

The NTP authentication key that is embedded in the NTP packet. The range is from 0 to 4294967295.


Defaults

No NTP broadcast key is defined.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Enter this command on the management VLAN interface. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

Examples

This example shows how to assign an authentication key to outgoing NTP frames:

Switch(config)# interface vlan1
Switch(config-if)# ntp broadcast key 1

Related Commands

Command
Description

ntp broadcast client

Allows the system to receive NTP broadcast packets on an interface.


ntp broadcast version

Use the ntp broadcast interface configuration command to specify that a specific interface should send Network Time Protocol (NTP) broadcast packets. Use the no form of the command to disable this capability.

ntp broadcast version number

no ntp broadcast

Syntax Description

number

The range is 1 to 3.


Defaults

Version 3 is the default.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Cisco IOS uses NTP version 3 by default. If the network (NTP server) is using NTP version 2, and synchronization does not occur, use NTP version 2.

Enter this command on the management VLAN interface. By default, the management VLAN is VLAN 1, but you can configure a different VLAN as the management VLAN.

Examples

This example shows how to configure interface VLAN 1 to send NTP version 2 packets:

Switch(config-if)# interface vlan1
Switch(config-if)# ntp broadcast version 2

You can verify the previous commands by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

ntp broadcast client

Allows the system to receive NTP broadcast packets on an interface.

show running-config

Displays the running configuration on the switch.


ntp max-associations

Use the ntp max-associations global configuration command to set the maximum number of Network Time Protocol (NTP) associations that are allowed on a server. Use the no form of this command to disable this feature.

ntp max-associations [number]

no ntp max-associations

Syntax Description

number

(Optional) Specify the number of NTP associations. The range is from 0 to 4294967295.


Defaults

The number of NTP associations is 100.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

This command can control the number of peers that can use the switch to synchronize to it through NTP.

After you enable a switch as an NTP server, use this command to set the maximum number of associations that are allowed on a server.

Examples

This example shows how to set the maximum number of NTP associations to 44:

Switch(config)# ntp max-associations 44

You can verify the previous command by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

show running-config

Displays the running configuration on the switch.


ntp source

Use the ntp source global configuration command to use a particular source address in Network Time Protocol (NTP) packets. Use the no form of this command to remove the specified source address.

ntp source interface

no ntp source

Syntax Description

interface

Any valid system interface name.


Defaults

No source address is defined.

Command Modes

Global configuration

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

Use this command when you want to use a particular source IP address for all NTP packets. The address is taken from the specified interface. This command is useful if the address on an interface cannot be used as the destination for reply packets. If the source keyword is present on an ntp server or ntp peer command, that value overrides the global value.

Examples

This example shows how to configure the switch to use the IP address of VLAN1 as the source address of all outgoing NTP packets:

Switch(config)# ntp source vlan1

You can verify the previous command by entering the show running-config privileged EXEC command.

Related Commands

Command
Description

ntp source

Allows the switch system clock to be synchronized by a time server.

show running-config

Displays the running configuration on the switch.


port block

Use the port block interface configuration command to block the flooding of unknown unicast or multicast packets to a port. Use the no form of this command to resume normal forwarding.

port block {unicast | multicast}

no port block {unicast | multicast}

Syntax Description

unicast

Packets with unknown unicast addresses are not forwarded to this port.

multicast

Packets with unknown multicast addresses are not forwarded to this port.


Defaults

Flood unknown unicast and multicast packets to all ports.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.


Usage Guidelines

The port block command cannot be entered for a network port.

If a trunk port is not a network port, the unicast keyword applies. The multicast keyword is supported on trunk ports. Both port block features affect all the VLANs associated with the trunk port.

Examples

This example shows how to block the forwarding of multicast and unicast packets to a port:

Switch(config-if)# port block unicast
Switch(config-if)# port block multicast

You can verify the previous commands by entering the show port block user EXEC command.

Related Commands

Command
Description

show port block

Displays the blocking of unicast or multicast flooding to a port.


port group

Use the port group interface configuration command to assign a port to a Fast EtherChannel or Gigabit EtherChannel port group. Up to 12 port groups can be created on a switch. Any number of ports can belong to a destination-based port group. Up to eight ports can belong to a source-based port group. Use the no form of this command to remove a port from a port group.

port group group-number [distribution {source | destination}]

no port group

Syntax Description

group-number

Port group number to which the port belongs. The range is
from 1 to 12.

distribution {source | destination}

(Optional) Forwarding method for the port group.

source—Set the port to forward traffic to a port group based on the packet source address. This is the default forwarding method.

destination—Set the port to forward traffic to a port group based on the packet destination address.


Defaults

Port does not belong to a port group.

The default forwarding method is source.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA3

This command was first introduced.


Usage Guidelines

An Asynchronous Transfer Mode (ATM) port is the only port that cannot belong to a port group. For all other ports, these restrictions apply:

Do not group Fast Ethernet and Gigabit ports together.

No port group member can be configured for Switched Port Analyzer (SPAN) port monitoring.

No port group member can be enabled for port security.

You can create up to 12 port groups. You can have source-based port groups and destination-based source groups. A source-based port group can have up to eight ports in its group. A destination-based port group can contain an unlimited number of ports in its group. You cannot mix source-based and destination-based ports in the same group. You can independently configure port groups that link switches, but you must consistently configure both ends of a port group.

Port group members must belong to the same set of VLANs and must be all static-access, all multi-VLAN, or all trunk ports.

Dynamic-access ports cannot be grouped with any other port, not even with other dynamic-access ports.

When a group is first formed, the switch automatically sets these parameters to be the same on all ports:

VLAN membership of ports in the group

VLAN mode (static, multi, trunk) of ports in the group

Encapsulation method of the trunk

Native VLAN configuration if the trunk uses IEEE 802.1Q

Allowed VLAN list configuration of the trunk port

Spanning Tree Protocol (STP) Port Fast option

STP port priority

STP path cost

Network port configuration for source-based port group

Protected port

Configuration of the first port added to the group is used when setting the above parameters for other ports in the group. After a group is formed, changing any parameter in the above list changes the parameter on all other ports.

Use the distribution keyword to customize the port group to your particular environment. The forwarding method you choose depends on how your network is configured. However, source-based forwarding works best for most network configurations.

This command is not supported on the ATM modules.

Examples

This example shows how to add a port to a port group by using the default source-based forwarding:

Switch(config-if)# port group 1

This example shows how to add a port to a group by using destination-based forwarding:

Switch(config-if)# port group 2 distribution destination

You can verify the previous commands by entering the show port group user EXEC command.

Related Commands

Command
Description

show port group

Displays the ports that belong to a port group.


port monitor

Use the port monitor interface configuration command to enable Switch Port Analyzer (SPAN) port monitoring on a port. Use the no form of this command to return the port to its default value.

port monitor [interface | vlan vlan-id]

no port monitor [interface | vlan vlan-id]

Syntax Description

interface

(Optional) Module type, slot, and port number for the SPAN to be enabled. The interface specified is the port to be monitored.

vlan vlan-id

(Optional) ID of the VLAN to be monitored.

Note VLAN 1 is the only valid option.


Defaults

Port does not monitor any other ports.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

11.2(8)SA3

The vlan keyword was added.


Usage Guidelines

Enabling port monitoring without specifying a port causes all other ports in the same VLAN to be monitored.

Entering the port monitor vlan 1 command causes monitoring of all traffic to and from the IP address configured on VLAN 1.

Asynchronous Transfer Mode (ATM) ports are the only ports that cannot be monitor ports. However, you can monitor ATM ports. These restrictions apply for ports that have port-monitoring capability:

A monitor port cannot be in a Fast EtherChannel or Gigabit EtherChannel port group.

A monitor port cannot be enabled for port security.

A monitor port cannot be a multi-VLAN port.

A monitor port must be a member of the same VLAN as the port monitored. VLAN membership changes are not allowed on monitor ports and ports being monitored.

A monitor port cannot be a dynamic-access port or a trunk port. However, a static-access port can monitor a VLAN on a trunk, a multi-VLAN port, or a dynamic-access port. The VLAN monitored is the one associated with the static-access port.

Port monitoring does not work if both the monitor and monitored ports are protected ports.

Examples

This example shows how to enable port monitoring on port fa0/2:

Switch(config-if)# port monitor fa0/2

You can verify the previous command by entering the show port monitor user EXEC command.

Related Commands

Command
Description

show port monitor

Displays the ports for which SPAN port monitoring is enabled.


port network

Use the port network interface configuration command to define a port as the switch network port. All traffic with unknown unicast addresses is forwarded to the network port on the same VLAN. Use the no form of this command to return the port to the default value.

port network

no port network

Syntax Description

This command has no arguments or keywords.

Defaults

No network port is defined.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Usage Guidelines

These restrictions apply to network ports:

A network port can be a static-access port, a multi-VLAN port, a port group, or a trunk port. Both the multi-VLAN port and the trunk port become the network port for all the VLANs associated with that port.

A network port cannot be an Asynchronous Transfer Mode (ATM), a secure, a monitor, a protected, or a dynamic-access port. You can assign a dynamic-access port to a VLAN in which another port is the network port.

Each VLAN can have one network port.

A network port cannot be in a destination-based port group.

A network port cannot be on an ATM module.

A network port cannot be a protected port.

Examples

This example shows how to set a port as a network port:

Switch(config-if)# port network

You can verify the previous command by entering the show port network privileged EXEC command.

Related Commands

Command
Description

show port network

Displays the network port defined for the switch or VLAN.


port protected

Use the port protected interface configuration command to isolate unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch. Use the no form of the command to disable the protected port.

port protected

no port protected

Syntax Description

This command has no keywords or arguments.

Defaults

No protected port is defined.

A protected port does not forward any unicast, multicast, or broadcast traffic to any other protected port.

A protected port continues to forward and receive unicast, multicast, and broadcast traffic to and from unprotected ports.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Usage Guidelines

The port protection feature is local to the switch; communication between protected ports on the same switch is possible only through a Layer 3 device. To prevent communication between protected ports on different switches, you must configure the protected ports for unique VLANs on each switch and configure a trunk link between the switches.

A protected port cannot be a network port.

Port monitoring does not work if both the monitor and monitored ports are protected ports.

A protected port is different from a secure port.

Examples

This example shows how to enable a protected port on interface fa0/3:

Switch(config)# interface fa0/3
Switch(config-if)# port protected

You can verify the previous command by entering the show port protected user EXEC command.

Related Commands

Command
Description

show port protected

Displays the ports that are in port-protected mode.


port security

Use the port security interface configuration command to enable port security on a port, to set the aging time for dynamic and static secure address entries, and to restrict the use of the port to a user-defined group of stations. Use the no form of this command to return the port to its default value.

port security [action {shutdown | trap} | aging | max-mac-count addresses]

no port security

Syntax Description

action {shutdown | trap}

(Optional) Action to take when an address violation occurs on this port.

shutdown—Disable the port when a security violation occurs.

trap—Generate a Simple Network Management Protocol (SNMP) trap when a security violation occurs.

aging {time time}

(Optional) Enable port security aging for this port and set the aging time. The range is 0 to 1440 minutes. If aging time is 0, aging is disabled for the port.

max-mac-count addresses

(Optional) The maximum number of secure addresses that this port can support. The range is from 1 to 132.


Defaults

Port security is disabled.

When enabled, the default action is to generate an SNMP trap.

The port security aging feature is disabled. The default time is 0.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.


Usage Guidelines

To enable aging for all dynamic and static secure addresses on a particular port, set the aging time to a value other than 0 for that port.


Note The port security aging feature is not available on the Catalyst 2900 LRE XL switches.


If you specify trap, use the snmp-server host global configuration command to configure the SNMP trap host to receive traps.

These restrictions apply to secure ports:

A secure port cannot belong to a Fast EtherChannel or Gigabit EtherChannel port group.

A secure port cannot have Switched Port Analyzer (SPAN) port monitoring enabled on it.

A secure port cannot be a multi-VLAN port.

A secure port cannot be a network port.

A secure port cannot be an Asynchronous Transfer Mode (ATM) port.

A secure port cannot be a dynamic-access port or a trunk port.

Examples

This example shows how to enable port security and what action the port takes in case of an address violation (shutdown).

Switch(config-if)# port security action shutdown

This example shows how to set the port security aging time to 2 hours on port 1.

Switch(config)#interface fa0/1
Switch(config-if)#port security aging time 120

This example shows how to set the maximum number of addresses that the port can learn to 8.

Switch(config-if)# port security max-mac-count 8

You can verify the previous commands by entering the show port security privileged EXEC command.

Related Commands

Command
Description

show port security

Displays the port security settings defined for the port.


port storm-control

Use the port storm-control interface configuration command to enable broadcast, multicast, or unicast storm control on a port. Use the no form of this command to disable storm control or one of the storm-control parameters on the port.

port storm-control {broadcast | multicast | unicast} {{action {filter | shutdown} | threshold {rising rising-number falling falling-number} | trap}}

no port storm-control {broadcast | multicast | unicast}

Syntax Description

{broadcast | multicast | unicast}

Determine the type of packet-storm suppression.

broadcast—Enable broadcast storm control on the port.

multicast—Enable multicast storm control on the port.

unicast—Enable unicast storm control on the port.

{action {filter | shutdown}

(Optional) Determine the type of action to perform.

filter—Filter traffic during a storm.

shutdown—Disable the port during a storm.

threshold {rising rising-number falling falling-number}

Defines the rising and falling thresholds.

rising rising-number—Block the flooding of storm packets when the value specified for rising-number is reached. The rising-number is 0 to 4294967295 packets per second.

falling falling-number—Restart the normal transmission of broadcast packets when the value specified for falling-number is reached. The falling-number is 0 to 4294967295 packets per second.

trap

(Optional) Generate a Simple Network Management Protocol (SNMP) trap when the traffic on the port crosses the rising or falling threshold. Traps are generated only for broadcast traffic and not for unicast or multicast traffic.


Defaults

Broadcast, multicast, and unicast storm control are disabled.

The rising thresholds are 500 broadcast packets per second, 2500 multicast packets per second, and 5000 unicast packets per second.

The falling thresholds are 250 broadcast packets per second, 1200 multicast packets per second, and 2500 unicast packets per second.

Command Modes

Interface configuration

Command History

Release
Modification

11.2(8)SA

This command was first introduced.

12.0(5)XU

The multicast, unicast, action, and shutdown keywords were added.


Usage Guidelines

Do not set the rising and falling thresholds to the same value.

Examples

This example shows how to enable broadcast storm control on a port. In this example, transmission is inhibited when the number of broadcast packets arriving on the port reaches 1000 and is restarted when the number drops to 200.

Switch(config-if)# port storm-control broadcast threshold rising 1000 falling 200

You can verify the previous command by entering the show port storm-control user EXEC command.

Related Commands

Command
Description

show port storm-control

Displays the packet storm-control information.


power inline

Use the power inline interface configuration command to determine how inline power is applied to the device on the specified Fast Ethernet port of the Catalyst 3524-PWR XL switch. Use the no form of this command to return the setting to its default.

power inline {auto | never}

no power inline

Syntax Description

auto

Automatically detect and power inline devices.

never

Never apply inline power.


Defaults

Power is applied when a telephone is detected on the port (auto).

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)XU

This command was first introduced.


Examples

This example shows how to always apply power to the port:

Switch(config-if)# power inline auto

You can verify the previous command by entering the show power inline privileged EXEC command.

Related Commands

Command
Description

show power inline

Displays the power status for the specified port or for all ports.

switchport priority extend

Determines how the inline device connected to the specified port handles priority traffic received on its incoming port.

switchport voice vlan

Configures the voice VLAN on the port.


rcommand

Use the rcommand user EXEC command to start a Telnet session and to enter commands on a member switch from the command switch. To end the session, enter the exit command.

rcommand {n | commander | mac-address hw-addr}

Syntax Description

n

Provide the number that identifies a cluster member. The range is from 0 to 15.

commander

Provide access to the command switch from a member switch.

mac-address hw-addr

MAC address of the member switch.


Command Modes

User EXEC

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

If the switch is the command switch but the member switch n does not exist, an error message appears. To obtain the switch number, enter the show cluster members privileged EXEC command from the command switch.

You can use this command to access a member switch from the command-switch prompt or to access a command switch from the member-switch prompt.

For Catalyst 2900 XL and Catalyst 3500 XL switches, the Telnet session accesses the member-switch command-line interface (CLI) at the same privilege level as on the command switch. For example, if you enter this command at user level on the cluster command switch, the member switch is accessed at user level. If you use this command on the command switch at privileged level, the command accesses the remote device at privileged level. If you use an intermediate enable-level lower than privileged, access to the member switch is at user level.

For Catalyst 1900 and Catalyst 2820 switches running standard edition software, the Telnet session accesses the menu console (the menu-driven interface) if the command switch is at privilege level 15. If the command switch is at privilege level 1, you are prompted for the password before being able to access the menu console. Command switch privilege levels map to the member switches running standard edition software as follows:

If the command switch privilege level is from 1 to 14, the member switch is accessed at privilege level 1.

If the command switch privilege level is 15, the member switch is accessed at privilege level 15.

The Catalyst 1900 and Catalyst 2820 CLI is available only on switches running Enterprise Edition Software.

This command does not work if the vty lines of the command switch have access-class configurations.

You are not prompted for a password because the member switches inherited the password of the command switch when they joined the cluster.

Examples

This example shows how to start a session with member 3. All subsequent commands are directed to member 3 until you enter the exit command or close the session.

Switch> rcommand 3
Switch-3> show version
Cisco Internet Operating System Software ...
...
Switch-3> exit
Switch>

Related Commands

Command
Description

show cluster members

Displays information about the cluster members.


reset

Use the reset VLAN database command to abandon the proposed VLAN database and to remain in VLAN database mode. This command resets the proposed database to the currently implemented VLAN database on the switch.

reset

Syntax Description

This command has no arguments or keywords.

Defaults

No default is defined.

Command Modes

VLAN database

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Examples

This example shows how to abandon the proposed VLAN database and to reset to the VLAN database:

Switch(vlan)# reset
Switch(vlan)#

You can verify the previous command by entering the show changes and show proposed VLAN database commands.

Related Commands

Command
Description

abort

Abandons the proposed VLAN database, exits VLAN database mode, and returns to privileged EXEC mode.

apply

Implements the proposed VLAN database, increments the database configuration revision number, propagates it throughout the administrative domain, and remains in VLAN database mode.

exit

Implements the proposed VLAN database, increments the database configuration number, propagates it throughout the administrative domain, and returns to privileged EXEC mode.

show changes

Displays the differences between the VLAN database currently on the switch and the proposed VLAN database.

show proposed

Displays the proposed VLAN database or a selected VLAN from it.

shutdown vlan

Shuts down (suspends) local traffic on the specified VLAN.

vlan database

Enters VLAN database mode from the command-line interface (CLI).


rmon collection stats

Use the rmon collection stats interface configuration command to collect Ethernet group statistics. The Ethernet group statistics include utilization statistics about broadcast and multicast packets, and error statistics about Cyclic Redundancy Check (CRC) alignment errors and collisions. Use the no form of this command to return to the default setting.

rmon collection stats index [owner name]

no rmon collection stats index [owner name]

Syntax Description

index

Remote Network Monitoring (RMON) collection control index. The range is from 1 to 65535.

owner name

(Optional) Owner of the RMON collection.


Defaults

The RMON statistics collection is disabled.

Command Modes

Interface configuration

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.


Usage Guidelines

The RMON statistics collection command is based on hardware counters.

Examples

This example shows how to collect RMON statistics for the owner root on interface fa01:

Switch(config)# interface fa0/1
Switch(config-if)# rmon collection stats 2 owner root

You can verify this command by entering the show rmon statistics command in user EXEC mode.

Related Commands

Command
Description

show rmon statistics

Displays RMON statistics.

Refer to the Cisco IOS Release 12.0 documentation on Cisco.com for information about this command.


session

Use the session privileged EXEC command to log into the Asynchronous Transfer Mode (ATM) module operating system and to start a command-line interface (CLI) session. Enter the exit command, or press Ctrl-G to return to the switch command-line interface.

session number

Syntax Description

number

Slot number (1 or 2).


Command Modes

Privileged EXEC

Command History

Release
Modification

11.2(8)SA5

This command was first introduced.


Examples

This example shows how to log in to the ATM module number 1:

Switch# session 1

Related Commands

Command
Description

exit

Exits the session with the ATM module and returns you to the CLI.


show cgmp

Use the show cgmp user EXEC command to display the state of the Cisco Group Management Protocol (CGMP)-learned multicast groups and routers.

show cgmp [state | holdtime | [vlan vlan-id] | [group [address] | router [address]]]

Syntax Description

state

(Optional) Display whether CGMP is enabled or not, whether Fast Leave is enabled or not, and the router port timeout value.

holdtime

(Optional) Display the router port timeout value in seconds.

vlan vlan-id

(Optional) Limit the display to the specified VLAN. Valid IDs are from 1 to 1001; do not enter leading zeros.

group address

(Optional) Display all known multicast groups and the destination ports. Limited to given VLAN if vlan keyword is entered; limited to a specific group if the address variable is entered. The address is the MAC address of the group.

router address

(Optional) Display all routers, their ports, and expiration times. Limited to a given VLAN if the vlan keyword entered; limited to a specific router if the address variable is entered. The address is the MAC address of the router.


Command Modes

User EXEC

Command History

Release
Modification

11.2(8)SA3

This command was first introduced.


Usage Guidelines

This command displays CGMP information about known routers and groups, as well as whether CGMP is enabled, whether Fast Leave is enabled, and the value of the router timeout. If show cgmp is entered with no arguments, all information appears.

Examples

This is an example of output from the show cgmp command.

Switch> show cgmp

CGMP is running.
CGMP Fast Leave is not running.
CGMP Allow reserved address to join GDA.
Default router timeout is 300 sec.


vLAN     IGMP MAC Address   Interfaces
------  -----------------   -----------
    1    0100.5e01.0203      Fa0/8
    1    0100.5e00.0128      Fa0/8


vLAN     IGMP Router        Expire   Interface
------  -----------------  --------  ----------
    1    0060.5cf3.d1b3     197 sec   Fa0/8 

Related Commands

Command
Description

cgmp

Enables CGMP. Also enables and disables the Fast Leave parameter and sets the router port aging time.

clear cgmp

Deletes information that was learned by the switch by using CGMP.


show changes

Use the show changes VLAN database command to display the differences between the VLAN database on the switch and the proposed VLAN database. You can also display the differences between the two for a selected VLAN.

show changes [vlan-id]

Syntax Description

vlan-id

(Optional) ID of the VLAN in the current or proposed database. If this variable is omitted, all the differences between the two VLAN databases are displayed, including the pruning state and version 2 mode. Valid IDs are from 1 to 1005; do not enter leading zeros.


Command Modes

VLAN database

Command History

Release
Modification

11.2(8)SA4

This command was first introduced.


Examples

This is an example of output from the show changes command. It displays the differences between the current and proposed databases.

Switch(vlan)# show changes

DELETED:
  VLAN ISL Id: 4
    Name: VLAN0004
    Media Type: Ethernet
    VLAN 802.10 Id: 100004
    State: Operational
    MTU: 1500

DELETED:
  VLAN ISL Id: 6
    Name: VLAN0006
    Media Type: Ethernet
    VLAN 802.10 Id: 100006
    State: Operational
    MTU: 1500

MODIFIED:
  VLAN ISL Id: 7
    Current State: Operational
    Modified State: Suspended 

This is an example of output from the show changes 7 command. It displays the differences between VLAN 7 in the current and proposed database.

Switch(vlan)# show changes 7

MODIFIED:
  VLAN ISL Id: 7
    Current State: Operational
    Modified State: Suspended 

Related Commands

Command
Description

show current

Displays the VLAN database on the switch or a selected VLAN from it.

show proposed

Displays the proposed VLAN database or a selected VLAN from it.


show cluster

Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on command and member switches.

show cluster

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.


Usage Guidelines

If the switch is not a command switch or a member switch, the command displays an empty line at the prompt.

On a member switch, this command displays the identity of the command switch, the switch member number, and the state of its connectivity with the command switch.

On a command switch, this command displays the cluster name and the number of members. It also shows the cluster status and length of time since the status changed. If redundancy is enabled, it displays the primary and secondary command-switch information.

If you enter this command on a switch that is not a cluster member, the error message Not a management cluster member appears.

Examples

This is an example of output when this command is entered on the active command switch:

Switch> show cluster
Command switch for cluster "Ajang"
        Total number of members:        7
        Status:                         1 members are unreachable
        Time since last status change:  0 days, 0 hours, 2 minutes
        Redundancy:                     Enabled
                Standby command switch: Member 1
                Standby Group:          Ajang_standby
                Standby Group Number:   110
        Heartbeat interval:             8
        Heartbeat hold-time:            80
        Extended discovery hop count:   3 

This is an example of output when this command is entered on a member switch:

Switch1> show cluster
Member switch for cluster "mcluster"
        Member number:                  3
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

This is an example of output when this command is entered on a member switch that is configured as the standby command switch:

Switch> show cluster
Member switch for cluster "mcluster"
        Member number:                  3 (Standby command switch)
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

This is an example of output when this command is entered on the command switch that has lost connectivity with member 1:

3524-24> show cluster
Command switch for cluster "Ajang"
        Total number of members:        7
        Status:                         1 members are unreachable
        Time since last status change:  0 days, 0 hours, 5 minutes
        Redundancy:                     Disabled
        Heartbeat interval:             8
        Heartbeat hold-time:            80
        Extended discovery hop count:   3 

This is an example of output when this command is entered on a member switch that has lost connectivity with the command switch:

3512-12> show cluster
Member switch for cluster "mcluster"
        Member number:                  <UNKNOWN>
        Management IP address:          192.192.192.192
        Command switch mac address:     0000.0c07.ac14
        Heartbeat interval:             8
        Heartbeat hold-time:            80 

Related Commands

Command
Description

cluster enable

Enables a command-capable switch as the cluster command switch, assigns a cluster name, and optionally assigns a member number to it.

show cluster candidates

Displays a list of candidate switches.

show cluster members

Displays information about the cluster members.


show cluster candidates

Use the show cluster candidates user EXEC command on the command switch to display a list of candidate switches.

show cluster candidates [mac-address H.H.H. | detail]

Syntax Description

mac-address H.H.H.

(Optional) MAC address of the cluster candidate.

detail

(Optional) Display detailed information for all candidates.


Command Modes

User EXEC

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.

12.0(5)XU

The detail keyword was added.


Usage Guidelines

Enter this command only on a command switch.

If the switch is not a command switch, the command line displays an empty line at the prompt.

The SN in the display means switch member number. If E appears in the SN column, it means that the switch is discovered through extended discovery. If E does not appear in the SN column, it means that the switch member number of the upstream neighbor of the candidate switch. The hop count is the number of devices that the candidate is from the command switch.

Examples

This is an example of output from the show cluster candidates command.

Switch> show cluster candidates

                                                             |---Upstream---|
MAC Address    Name         Device Type      PortIf  FEC Hops SN PortIf  FEC
00d0.7961.c4c0 3512-12    WS-C3512-XL      Fa0/3        1   0  Fa0/13      
00d0.bbf5.e900 ldf-dist-128 WS-C3524-XL      Fa0/7        1   0  Fa0/24      
00e0.1e7e.be80 1900_Switch  1900             3        0   1   0  Fa0/11      
00e0.1e9f.7a00 2924-24   WS-C2924-XL      Fa0/5        1   0  Fa0/3       
00e0.1e9f.8c00 2912-12-2 WS-C2912-XL      Fa0/4        1   0  Fa0/7       
00e0.1e9f.8c40 2912-12-1 WS-C2912-XL      Fa0/1        1   0  Fa0/9       
0050.2e4a.9fb0      murali-132      WS-C3508-XL                     E
0050.354e.7cd0      murali-134      WS-C2924-XL                     E

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch directly connected to the command switch:

Switch> show cluster candidates mac-address 00d0.7961.c4c0
Device '3512-12' with mac address number 00d0.7961.c4c0
        Device type:            cisco WS-C3512-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 0)
        Local port:             Fa0/3   FEC number: 
        Upstream port:          Fa0/13  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 1

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch three hops from the cluster edge:

Switch> show cluster candidates mac-address 0010.7bb6.1cc0
Device '2912MF' with mac address number 0010.7bb6.1cc0
        Device type:            cisco WS-C2912MF-XL
        Upstream MAC address:   0010.7bb6.1cd4
        Local port:             Fa2/1   FEC number: 
        Upstream port:          Fa0/24  FEC Number: 
        Hops from cluster edge: 3
        Hops from command device: -

This is an example of output from the show cluster candidates detail command:

Switch> show cluster candidates detail
Device '3512-12' with mac address number 00d0.7961.c4c0
        Device type:            cisco WS-C3512-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 1)
        Local port:             Fa0/3   FEC number: 
        Upstream port:          Fa0/13  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2
	Device '1900_Switch' with mac address number 00e0.1e7e.be80
        Device type:            cisco 1900
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 2)
        Local port:             3       FEC number: 0
        Upstream port:          Fa0/11  FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2
Device '2924-24' with mac address number 00e0.1e9f.7a00
        Device type:            cisco WS-C2924-XL
        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 3)
        Local port:             Fa0/5   FEC number: 
        Upstream port:          Fa0/3   FEC Number: 
        Hops from cluster edge: 1
        Hops from command device: 2

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster members

Displays information about the cluster members.


show cluster members

Use the show cluster members user EXEC command on the command switch to display information about the cluster members.

show cluster members [n | detail]

Syntax Description

n

(Optional) Number that identifies a cluster member. The range is from 0 to 15.

detail

(Optional) Display detailed information for all cluster members.


Command Modes

User EXEC

Command History

Release
Modification

11.2(8)SA6

This command was first introduced.

12.0(5)XU

The detail keyword was added.


Usage Guidelines

You should enter this command only on a command switch.

If the cluster has no members, an empty line appears at the prompt.

Examples

This is an example of output from the show cluster members command. The SN in the display means switch number.

Switch> show cluster members

                                                |---Upstream---|
SN MAC Address    Name         PortIf FEC Hops   SN PortIf  FEC  State
0  00d0.796d.2f00 3524-24                0                     Up (Cmdr)
1  00d0.7960.66c0                          255                   Down
2  00e0.1e9f.8c00 2912-12-2 Fa0/4       1     0  Fa0/7        Up (Standby)
3  00e0.1e9f.7a00 2924-24   Fa0/5       1     0  Fa0/3        Up
4  00d0.bbf5.e900 ldf-dist-128 Fa0/7       1     0  Fa0/24       Up
5  00d0.7961.c4c0 3512-12    Fa0/3       1     0  Fa0/13       Up
6  00e0.1e9f.8c40 2912-12-1 Fa0/1       1     0  Fa0/9        Up
7  00e0.1e7e.be80 1900_Switch  3       0   1     0  Fa0/11       Up
8  00e0.1e9f.8300 2924M       Fa0/11      2     5  Fa0/12       Up
9  0010.7bb6.1cc0 2912MF      Fa2/1       3     8  Fa0/24       Up
10 00e0.1e87.2140 2820-01      24      0   4     9  Fa2/3        Up 

This is an example of output from the show cluster members for cluster member 3:

Switch> show cluster members 3
Device '2924-24' with member number 3
        Device type:            cisco WS-C2924M-XL
        MAC address:            00e0.1e9f.9440
        Upstream MAC address:   00d0.796d.2e00 (Cluster member 0)
        Local port:             Fa0/18  FEC number:
        Upstream port:          Fa0/20  FEC Number:
        Hops from command device: 1 

This is an example of output from the show cluster members detail command:

Switch> show cluster members detail
Device '3524-24' with member number 0 (Command Switch)
        Device type:            cisco WS-C3524-XL
        MAC address:            00d0.7964.1f00
        Upstream MAC address:
        Local port:                     FEC number: 
        Upstream port:                  FEC Number: 
        Hops from command device: 0
'Unknown'device with member number 1
        Device type: 
        MAC address: 
        Upstream MAC address:
        Local port:                     FEC number: 
        Upstream port:                  FEC Number: 
        Hops from command device: 255
Device '2912-12-2' with member number 2
        Device type:            cisco WS-C3548-XL
        MAC address:            00d0.5868.f5c0
        Upstream MAC address:   00d0.7964.1f00 (Cluster member 0)
        Local port:             Fa0/7   FEC number: 1
        Upstream port:          Fa0/6   FEC Number: 
        Hops from command device: 1
Device '2924-24' with member number 3
        Device type:            cisco WS-C3508G-XL
        MAC address:            00d0.7968.5380
        Upstream MAC address:   00d0.7964.1f00 (Cluster member 0)
        Local port:             Gi0/6   FEC number: 
        Upstream port:          Gi0/1   FEC Number: 
        Hops from command device: 1

Related Commands

Command
Description

show cluster

Displays the cluster status and a summary of the cluster to which the switch belongs.

show cluster candidates

Displays a list of candidate switches.


show controllers ethernet-controller

Use the show controllers ethernet-controller privileged EXEC command to display the Ethernet link transmit and receive statistics on a Fast Ethernet or Long-Reach Ethernet (LRE) port.

show controllers ethernet-controller [interface-id]

Syntax Description

interface-id

(Optional) ID of the Fast Ethernet or LRE port.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Using the show controllers ethernet-controller command without specifying a Fast Ethernet or LRE port displays the Ethernet link statistics of all Ethernet ports on the switch and on the connected customer premises equipment (CPE) devices. The output shows the internal switch statistics, the statistics collected by the LRE interface on the switch, and the statistics collected by the LRE interface on the CPE.

The CPE Ethernet link on a switch LRE port is the connection between the Cisco LRE CPE and the remote Ethernet device (such as a PC) connected to it. It is not the link between the switch LRE port and the LRE CPE.

Examples

This is an example of output from the show controllers ethernet-controller command on Fast Ethernet port 1:

Switch# show controllers ethernet-controller fa0/1

  Transmit                           Receive
    877634 Bytes                     8834435 Bytes                    
      3853 Unicast frames               5212 Unicast frames           
       606 Multicast frames            20600 Multicast frames         
      3496 Broadcast frames            32756 Broadcast frames         
         0 Discarded frames                0 No bandwidth frames      
         0 Too old frames                  0 No buffers frames        
         0 Deferred frames             10697 No dest, unicast         
         0  1 collision frames         42555 No dest, multicast       
         0  2 collision frames             0 No dest, broadcast       
         0  3 collision frames             0 Alignment errors         
         0  4 collision frames             0 FCS errors               
         0  5 collision frames             0 Collision fragments      
         0  6 collision frames 
         0  7 collision frames             0 Undersize frames         
         0  8 collision frames         33602 Minimum size frames      
         0  9 collision frames         75929 65 to 127 byte frames    
         0 10 collision frames           760 128 to 255 byte frames   
         0 11 collision frames          1527 256 to 511 byte frames   
         0 12 collision frames             2 512 to 1023 byte frames  
         0 13 collision frames             0 1024 to 1518 byte frames 
         0 14 collision frames             0 Oversize frames          
         0 15 collision frames 
         0 Excessive collisions
         0 Late collisions 

This is an example of output from the show controllers ethernet-controller command to display the Ethernet link statistics between the CPE and PC when the CPE is connected to switch LRE port 2:

2900LRE-239-34#show controllers eth lo0/2

  Transmit                           Receive
        64 Bytes                          64 Bytes                    
         1 Unicast frames                  1 Unicast frames           
         0 Multicast frames                0 Multicast frames         
         0 Broadcast frames                0 Broadcast frames         
         0 Discarded frames                0 No bandwidth frames      
         0 Too old frames                  0 No buffers frames        
         0 Deferred frames                 0 No dest, unicast         
         0  1 collision frames             0 No dest, multicast       
         0  2 collision frames             0 No dest, broadcast       
         0  3 collision frames             0 Alignment errors         
         0  4 collision frames             0 FCS errors               
         0  5 collision frames             0 Collision fragments      
         0  6 collision frames 
         0  7 collision frames             0 Undersize frames         
         0  8 collision frames             1 Minimum size frames      
         0  9 collision frames             0 65 to 127 byte frames    
         0 10 collision frames             0 128 to 255 byte frames   
         0 11 collision frames             0 256 to 511 byte frames   
         0 12 collision frames             0 512 to 1023 byte frames  
         0 13 collision frames             0 1024 to 1518 byte frames 
         0 14 collision frames             0 Oversize frames          
         0 15 collision frames 
         0 Excessive collisions
         0 Late collisions     

LRE Enet Stats on Switch:

         0 Bytes                           0 Bytes               
         0 Frames                          0 Frames              
                                           0 Broadcast frames    
         0 Pause frames                    0 Pause frames        
        65 1 collision frames            520 Alignment errors    
         0 Multiple collisions             0 Collisions and Runts
         0 Late collisions                 0 Oversize frames     
         0 Excessive collisions            0 FCS errors          
         0 Deferred frames     
         0 Carrier sense errors

LRE Enet Stats on CPE:

         0 Bytes                           0 Bytes               
         0 Frames                          0 Frames              
                                           0 Broadcast frames    
         0 Pause frames                    0 Pause frames        
        24 1 collision frames            150 Alignment errors    
         0 Multiple collisions             0 Collisions and Runts
         0 Late collisions                 0 Oversize frames     
         0 Excessive collisions            0 FCS errors          
         0 Deferred frames     
         0 Carrier sense errors

Related Commands

Command
Description

clear controllers ethernet-controller

Deletes the Ethernet link transmit and receive statistics on a Fast Ethernet or LRE switch port.


show controllers lre cpe info

Use the show controllers lre cpe info privileged EXEC command to display the model numbers of the Long-Reach Ethernet (LRE) customer premises equipment (CPE) devices connected to the LRE switch. This command also shows whether or not the connected CPEs meet the minimum requirements to be managed by the LRE switch.

show controllers lre cpe info [interface-id]

Syntax Description

interface-id

(Optional) ID of the switch LRE port.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC4

This command was first introduced.


Usage Guidelines

The status of a connected LRE CPE can be pass or fail. A pass status means the CPE meets the minimum requirements (such as having a certain CPE patch version) to be managed by the LRE switch. A failed status means that it does not.

Using the show controllers lre cpe info command without specifying a switch LRE port displays the model numbers and status of all connected CPEs.

Examples

This is an example of output from the show controllers lre cpe info command:

2900LRE-239-34#show controllers lre cpe info

 Port      CPE Model        Status      Family
------   ------------  ---------------  -------
Lo0/1    CISCO575-LRE        CERTIFIED CISCO575-LRE
Lo0/2      SUDHI-575     NON-CERTIFIED CISCO575-LRE
Lo0/3    NON-CERT-HIL    NON-CERTIFIED CISCO575-LRE
Lo0/4    NON-SUPPORTE    NON-CERTIFIED CISCO575-LRE
Lo0/5              NA          NO LINK NA
Lo0/6    CISCO585-LRE    NON-CERTIFIED UNSUPPORTED-PHY-MODE
Lo0/7    SUP-PHY-MODE    NON-CERTIFIED UNSUPPORTED-PHY-MODE
Lo0/8    CISCO585-CLON    NON-CERTIFIED UNSUPPORTED-PHY-MODE
Lo0/9    NON-SUP-PHY-    NON-CERTIFIED UNSUPPORTED-PHY-MODE
Lo0/10             NA          NO LINK NA
Lo0/11             NA          NO LINK NA
Lo0/12             NA          NO LINK NA
Lo0/13   CISCO585-LRE        CERTIFIED CISCO585-LRE
Lo0/14             NA          NO LINK NA
Lo0/15       CMS-575     NON-CERTIFIED CISCO575-LRE
Lo0/16             NA          NO LINK NA
Lo0/17             NA          NO LINK NA
Lo0/18             NA          NO LINK NA
Lo0/19             NA          NO LINK NA
Lo0/20             NA          NO LINK NA
Lo0/21       CMS-575     NON-CERTIFIED UNSUPPORTED-MAC-MODE
Lo0/22             NA          NO LINK NA
Lo0/23             NA          NO LINK NA
Lo0/24             NA          NO LINK NA

Related Commands

Command
Description

debug lre

Enables debugging of LRE-related events.

show controllers lre version

Displays the version number of the hardware, software, and patch software components of the switch LRE interface and the CPE LRE interface.

show controllers lre version mfg

Displays the revision and serial numbers of the connected Cisco LRE CPE board, assembly, and system.


show controllers lre interface-id actual

Use the show controllers lre interface-id actual privileged EXEC command to display the actual values of the Long-Reach Ethernet (LRE) link on a specific switch LRE port.

show controllers lre interface-id actual [dsrserrs | usrserrs | txpower | rxpower | snr | link]

Syntax Description

interface-id

ID of the switch LRE port.

actual

Display the LRE port current status, which might not be the same as the administratively configured settings.

dsrserrs

Display the downstream Reed-Solomon errors on the LRE port.

usrserrs

Display the upstream Reed-Solomon errors on the LRE port.

txpower

Display the remote transmit power (dBm/Hz) on the LRE port.

rxpower

Display the local receive power (dBm/Hz) on the customer premises equipment (CPE) port.

snr

Display the signal-to-noise ratio (SNR) ratio on the LRE port.

link

Display the LRE link status of the LRE port.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Use the signal-to-noise ratio (SNR) and Reed-Solomon error information to measure the quality of the LRE link. The SNR represents the amount of increased received signal power (in decibels) relative to the noise power level that the switch is designed to tolerate without disconnecting from the CPE. The higher the ratio, the more resilient is the link.

The Reed-Solomon errors show the number of errors detected and corrected in the data being received on and transmitted from the switch LRE ports. Reed-Solomon errors are the result of noise exceeding the noise margin. For short bursts of noise (such as motor startup or power surges), the interleaver prevents the loss of Ethernet data packets. In this case, the number of Reed-Solomon errors exceeds the number of Ethernet CRC errors.

The remote transmit power rates from the connected CPEs might be different from each other, depending on how long the cable is between the switch and the CPE. A longer cable typically causes the CPE to transmit a higher signal to overcome the loss effects of distance.

The local receive power actually displays the switch's adjustment to the incoming power level. These numbers might be different from LRE port to LRE port, as the length of the cables to the CPEs might be different.

If the SNR is too low for the environment but the link still establishes, the Reed-Solomon error rate will be high, and there might be link instability (as shown by the number of Fail events counted). If the network is being used for data only, a high incidence of Ethernet First Customer Shipment (FCS) errors or micro-interruptions might be tolerable.

For more information about what can affect the LRE link and for the minimum required SNR ratios, refer to the "LRE Links and LRE Profiles" section in the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

Examples

This is an example of output from the show controllers lre interface-id actual dsrserrs command on switch LRE port 1:

Switch#show controller lre lo0/2 actual dsrserrs
0
Switch#show controller lre lo0/2 actual link
UP
Switch#show controller lre lo0/2 actual rxpower
26.0
Switch#show controller lre lo0/2 actual snr
27
Switch#show controller lre lo0/2 actual txpower
-89.7
Switch#show controller lre lo0/2 actual usrserrs
0

This is an example of output from the show controllers lre interface-id actual link command on switch LRE port 1:

Switch#show controllers lre lo0/1 actual link
DOWN

Related Commands

Command
Description

show controllers lre interface-id admin

Displays the administrative settings of the LRE link on a specific switch LRE port.

show controllers lre status

Displays the LRE link status of a specific switch LRE port.


show controllers lre interface-id admin

Use the show controllers lre interface-id admin privileged EXEC command to display the administrative settings of the Long-Reach Ethernet (LRE) link on a specific switch LRE port.

show controllers lre interface-id admin [dsrate | usrate]

Syntax Description

interface-id

ID of the switch LRE port.

admin

Display the administrative settings, which might not be the same as the actual values.

dsrate

Display the downstream rate (Mbps) of the LRE link.

usrate

Display the upstream rate (Mbps) of the LRE link.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.


Usage Guidelines

This command displays the private profile settings of a switch LRE port, even though they might not be active if a global profile is configured on the switch.

The upstream and downstream rates are defined by the profile on the switch LRE port. To change these rates, assign a different profile to the switch LRE port. For information about the LRE profiles, refer to the Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide.

Examples

This is an example of output from the show controllers lre interface-id admin dsrate and show controllers lre interface-id admin usrate commands on switch LRE ports 1 and 2:

Switch#show controller lre lo0/1 admin usrate
18.750
Switch#show controller lre lo0/1 admin dsrate
16.667
Switch#show controller lre lo0/2 admin usrate
12.500
Switch#show controller lre lo0/2 admin dsrate
12.500

Related Commands

Command
Description

show controllers lre interface-id actual

Displays the actual values of the LRE link on a specific switch LRE port.

show controllers lre status

Displays the LRE link status of a specific switch LRE port.

lre profile global

Assigns a public profile to all switch LRE ports.

lre profile

Assigns a private profile to a specific switch LRE port.


show controllers lre log

Use the show controllers lre log privileged EXEC command to display the history of link, configuration, and timer events for a specific Long-Reach Ethernet (LRE) port or all switch LRE ports.

show controllers lre log [interface-id]

Syntax Description

interface-id

(Optional) ID of the switch LRE port.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(5)WC1

This command was first introduced.

12.0(5)WC4

This command was extended to support the Cisco 585 LRE CPE.


Usage Guidelines

Using the show controllers lre log command without specifying a switch LRE port displays the events for all LRE ports on the switch.

The time-stamped and sequentially tagged log entries can be helpful in confirming LRE link drops and configuration changes. The format of the timestamps can be changed by using the service timestamps log global configuration command.

Examples

This is an example of output from the show controllers lre log command to display events on switch if you do not specify an LRE port:

Switch#show controllers lre log
2900LRE-239-34#show controllers lre log      

LongReachEthernet0/1: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset

  *Mar  1 00:00:51: [1]: State MODEZERO_APPLIED: Got event:Link Up

  *Mar  1 00:00:56: [2]: State MODEZERO_APPLIED: Got event:Link Down

  *Mar  1 00:00:58: [3]: State PROFILE_APPLIED: Got event:Link Up

  *Mar  1 00:01:27: [4]: State PROFILE_APPLIED: Got event:Timer 1 Expired


LongReachEthernet0/2: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset

  *Mar  1 00:00:51: [1]: State MODEZERO_APPLIED: Got event:Link Up


LongReachEthernet0/3: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset

  *Mar  1 00:00:51: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/4: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:51: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/5: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset
LongReachEthernet0/6: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:51: [1]: State MODEZERO_APPLIED: Got event:Link Up
  *Mar  1 00:01:13: [2]: State MODEZERO_APPLIED: Got event:CPE General Failure
LongReachEthernet0/7: Events Log: ==================================
  *Mar  1 00:00:50: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:52: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/8: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:52: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/9: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:52: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/10: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
LongReachEthernet0/11: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
LongReachEthernet0/12: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
LongReachEthernet0/13: Events Log: ==================================
  *Mar  1 00:00:51: [0]: State RESTART: Got event:Reset
  *Mar  1 00:01:01: [1]: State MODEZERO_APPLIED: Got event:Link Up
  *Mar  1 00:01:36: [2]: State MODEZERO_APPLIED: Got event:Link Down
  *Mar  1 00:01:37: [3]: State PROFILE_APPLIED: Got event:Link Up
LongReachEthernet0/14: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
LongReachEthernet0/15: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:53: [1]: State MODEZERO_APPLIED: Got event:Link Up
LongReachEthernet0/16: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
LongReachEthernet0/17: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
LongReachEthernet0/18: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
LongReachEthernet0/19: Events Log: ==================================
  *Mar  1 00:00:52: [0]: State RESTART: Got event:Reset
LongReachEthernet0/20: Events Log: ==================================
  *Mar  1 00:00:53: [0]: State RESTART: Got event:Reset
LongReachEthernet0/21: Events Log: ==================================
  *Mar  1 00:00:53: [0]: State RESTART: Got event:Reset
  *Mar  1 00:00:54: [1]: State MODEZERO_APPLIED: Got event:Link Up
  *Mar  1 00:01:29: [2]: State MODEZERO_APPLIED: Got event:CPE Patchfile Failure
LongReachEthernet0/22: Events Log: ==================================
  *Mar  1 00:00:53: [0]: State RESTART: Got event:Reset
LongReachEthernet0/23: Events Log: ==================================
  *Mar  1 00:00:53: [0]: State RESTART: Got event:Reset
LongReachEthernet0/24: Events Log: ==================================
  *Mar  1 00:00:53: [0]: State RESTART: Got event:Reset

Related Commands

Command
Description

clear controllers lre log

Deletes the history of link, configuration, and timer events for a specific switch LRE port or all LRE ports on the switch.

service timestamps log

Enables log timestamps.


show controllers lre profile

Use the show controllers lre profile privileged EXEC command to display information about the Long-Reach Ethernet (LRE) profiles available on the switch and how they are assigned to the switch LRE ports.

show controllers lre profile [mapping | names]

Syntax Description

mapping

Display a list of the switch LRE ports and their assigned private profiles. If a public profile is active on the switch, the output shows the status of any private profile assigned to an LRE port as inactive, and, appearing at the top of the output, is the name of the public profile that is active for all LRE ports.

names

Display the names, types, and upstream and downstream data rates of all profiles available on the switch.

The data rates displayed are the g