Table Of Contents
A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V - W -
Index
A
aaa authentication command2-1
abort command2-493
access control entries
access control lists
Access Control Parameters
access groups
IP2-124
MAC
applying ACL to interface2-163
displaying2-316
access-list (IP extended) command2-3
access-list (IP standard) command2-6
access-list configuration mode
deny2-83
entering2-126
permit2-201
access ports2-447
ACLs
IP
applying to interface2-124
deny2-83
permit2-201
ACLs (continued)MAC
applying to interface2-163
deny2-86
displaying2-232
permit2-204
ACPs, displaying2-325
aggregate-port learner2-198
alarm commandA-6
alarm facility fcs-hysteresis commandA-2
alarm facility power-supply commandA-3
alarm facility temperature commandA-4
alarm profile
attaching to a portA-8
creatingA-6
displayingA-12
alarm profile (global configuration) commandA-6
alarm profile (interface configuration) commandA-8
alarm profile configuration modeA-6
apply command2-493
archive download-sw command2-8
archive tar command2-10
archive upload-sw command2-13
audiencexiii
authorization state of controlled port2-96
autonegotiation of duplex mode2-105
auto qos voip command2-15
B
BackboneFast, for STP2-390
boot boothlpr command2-19
boot buffersize command2-20
boot commandB-2
boot config-file command2-21
boot enable-break command2-22
boot helper command2-23
boot helper-config file command2-24
booting
interrupting2-22
IOS image2-27
manually2-25
booting, displaying environment variables2-236
boot loader
accessingB-1
booting
helper image2-23
IOS imageB-2
directories
creatingB-16
displaying a list ofB-7
removingB-20
displaying
available commandsB-12
memory heap utilizationB-14
versionB-27
environment variables
describedB-21
displaying settingsB-21
location ofB-23
settingB-21
unsettingB-25
bootloader (continued)files
copyingB-5
deletingB-6
displaying a list ofB-7
displaying the contents ofB-3, B-17, B-24
renamingB-18
file system
formattingB-10
initializing FlashB-9
running a consistency checkB-11
loading helper imagesB-13
promptB-1
resetting the systemB-19
boot manual command2-25
boot private-config-file command2-26
boot system command2-27
BPDU filtering, for spanning tree2-391, 2-427
BPDU guard, for spanning tree2-393, 2-427
broadcast suppression level
configuring2-441
displaying2-357
broadcast traffic counters2-300
C
cat commandB-3
caution, descriptionxiv
channel-group command2-28
channel-protocol command2-31
class command2-33
class-map command2-35
class maps
creating2-35
defining the match criteria2-175
displaying2-238
class of service
clear controllers ethernet-controller command2-37
clear controllers lre command2-39
clear controllers lre link monitor command2-40
clear controllers lre log command2-41
clear interface command2-42
clear lacp command2-43
clear LRE configuration events2-41
clear LRE timer events2-41
clear mac address-table command2-45
clear pagp command2-47
clear port-security command2-48
clear setup express command2-50
clear spanning-tree counters command2-51
clear spanning-tree detected-protocols command2-52
clear vmps statistics command2-53
clear vtp counters command2-54
cluster commander-address command2-55
cluster discovery hop-count command2-57
cluster enable command2-58
cluster holdtime command2-59
cluster management-vlan command2-60
cluster member command2-61
cluster run command2-63
clusters
adding candidates2-61
binding to HSRP2-64
building manually2-61
communicating with members by using Telnet2-222
displaying
candidate switches2-242
member switches2-244
status2-240
clusters (continued)heartbeat messages
duration after which switch declared down2-59
interval between2-66
hop-count limit for extended discovery2-57
HSRP standby groups2-64
redundancy2-64
SNMP trap2-381
cluster standby-group command2-64
cluster timer command2-66
command modes defined1-2
command switch
configuration files
password recovery disable considerationsB-1
setting the NVRAM size for2-20
specifying the name2-21
configuration files, private2-26
configuring multiple interfaces2-120to 2-121
config-vlan mode
commands2-481
description1-4
entering2-480
summary1-2
controller longreachethernet command2-67
conventions
commandxiv
for examplesxiv
publicationxiv
textxiv
copy commandB-5
CoS
default value, assigning to incoming packets2-179
incoming value, overriding2-179
priority queue, assigning values to2-512
priority queue mapping, displaying2-378
WRR bandwidth allocation, displaying2-377
WRR weights, assigning to CoS priority queues2-510
CoS-to-DSCP map
default2-181
defining2-181
cpe duplex command2-68
CPE Ethernet ports, clearing2-37
cpe protected command2-70
cpe shutdown command2-72
cpe type command2-78
cross-stack UplinkFast, for STP2-431
D
debug autoqos commandC-2
debug dot1x commandC-4
debug etherchannel commandC-5
debug lreC-6
debug pagp commandC-7
debug pm commandC-8
debug spanning-tree backbonefast commandC-12
debug spanning-tree bpdu commandC-13
debug spanning-tree bpdu-opt commandC-14
debug spanning-tree commandC-10
debug spanning-tree mstp commandC-15
debug spanning-tree switch commandC-17
debug spanning-tree uplinkfast commandC-19
debug sw-vlan commandC-20
debug sw-vlan ifs commandC-22
debug sw-vlan notification commandC-23
debug sw-vlan vtp commandC-24
debug udld commandC-26
define interface-range command2-80
delete LRE link history2-41
delete LRE link monitor data2-40
deny (access-list configuration) command2-83
deny (MAC access-list configuration) command2-86
dir commandB-7
documentation
feedbackxvii
obtaining
CD-ROMxvi
World Wide Webxvi
orderingxvii
relatedxv
document conventionsxiv
dot1x default command2-89
dot1x guest-vlan command2-90
dot1x host-mode command2-91
dot1x initialize command2-93
dot1x max-req command2-94
dot1x multiple-hosts command2-95
dot1x port-control command2-96
dot1x re-authenticate command2-98
dot1x re-authentication command2-99
dot1x reauthentication command2-100
dot1x system-auth-control command2-102
DSCP-to-CoS map
default2-181
defining2-181
DTP2-448
DTP flap, error recovery timer2-109
duplex command2-105
dynamic-access ports, configuring2-444
Dynamic Trunking Protocol
E
EAP-request/identity frame
maximum number to send2-94
response time before retransmitting2-103
environmental alarms, displayingA-14
environment variables, displaying2-236
errdisable detect command2-107
errdisable recovery command2-109
EtherChannel
assigning Ethernet interface to channel group2-28
creating port-channel logical interface2-119
debug messages, displayingC-5to C-7
displaying2-285
LACP, modes2-28
load-distribution methods2-212
PAgP
aggregate-port learner2-198
clearing channel-group information2-43, 2-47
debug messages, displayingC-7
error recovery timer2-109
learn method2-198
modes2-28
priority of interface for transmitted traffic2-200
Ethernet controller, internal register display2-246
Ethernet link statistics2-37
Ethernet statistics, collecting2-226
examples, conventions forxiv
exit command2-493
expedite queue, QoS2-510
express setup-related commands2-50, 2-230, 2-350
extended discovery of candidate switches2-57
extended-range VLANs
and allowed VLAN list2-460
and pruning-eligible list2-460
configuring2-480
extended system ID for STP2-399
F
facility alarm relays, displayingA-18
facility alarm status, displayingA-19
fan information, displaying2-282
FCS bit error rate
displayingA-20
fluctuation thresholdA-2
settingA-9
FCS hysteresis thresholdA-2
fcs-threshold commandA-9
feedback to Cisco Systems, webxvii
file name, VTP2-500
files, deleting2-82
flash_init commandB-9
flowcontrol command2-111
flow-control packets
receiving2-111
sending2-111
format commandB-10
frame check sequence
fsck commandB-11
G
global configuration mode1-2, 1-4
H
heartbeat messages
duration after which switch declared dead2-59
interval between2-66
help commandB-12
holdtime for clusters2-59
hop-count limit for clusters2-57
Hot Standby Router Protocol
HSRP
binding HSRP group to cluster2-64
standby group2-64
hw-module slot command2-114
I
IDS, using with SPAN and RSPAN2-188
IEEE 802.1X commands, authentication methods2-1
IGMP snooping
adding ports statically2-138
configuration, displaying2-306
enabling2-129
Immediate-Leave processing2-135
MAC address tables2-321
multicast router ports, displaying2-308
multicast routers2-136
per VLAN2-134
source-only-learning2-130
source-only-learning aging time2-132
images
Immediate-Leave feature, MVR2-192
Immediate-Leave processing2-135
interface command2-117
interface configuration mode1-2, 1-4
interface port-channel command2-119
interface range command2-120
interface-range macros2-80
interfaces
assigning Ethernet interface to channel group2-28
configuring2-105
configuring multiple2-120to 2-121
creating port-channel logical2-119
disabling2-379
restarting2-379
interleave command2-122
internal registers, displaying2-246
Intrusion Detection System
invalid GBIC
error detection for2-107
error recovery timer2-109
ip access-group command2-124
ip access-list command2-126
ip address command2-128
ip addresses, setting2-128
ip igmp snooping command2-129
ip igmp snooping source-only-learning command2-130
ip igmp snooping source-only-learning command age-timer2-132
ip igmp snooping vlan command2-134
ip igmp snooping vlan immediate-leave command2-135
ip igmp snooping vlan mrouter command2-136
ip igmp snooping vlan static command2-138
IP multicast addresses2-189
J
jumbo frames
displaying setting2-360
setting switch for2-465
L
LACP
lacp port-priority command2-140
lacp system-priority command2-141
Layer 2 traceroute
IP addresses2-470
MAC addresses2-467
line configuration mode1-3, 1-5
Link Aggregation Control Protocol
link flap
enable error detection for2-107
enable timer to recover from error state2-109
link statistics, clearing2-37
load_helper commandB-13
load-distribution methods for EtherChannel2-212
local duplex command2-147
local speed command2-148
logging lre command2-149
logical interface2-119
loop guard, for spanning tree2-401, 2-404
LRE controller, defined2-67
lre profile command2-151
lre rate selection command2-44
lre rate selection sequence command2-153
lre sequence command2-155
lre syslog command2-157
lre upbo command2-159
M
mac access-group command2-163
MAC access-list configuration mode
deny2-86
entering2-165
permit2-204
mac access-list extended command2-165
MAC ACLs
deny2-86
permit2-204
MAC addresses
and port security2-451
clearing notification global counters2-45
displaying
aging time2-318
dynamic2-318
multicast entries2-321
notification setting2-323
number of addresses2-318
per interface2-318
per VLAN2-318
secure2-343
static2-318
dynamic
aging time2-167
deleting2-45
displaying2-318
MAC addresses (continued)enabling MAC address notification2-169
secure
adding2-451
displaying2-343
static
adding2-171
displaying2-318
sticky
configuring manually2-451
enabling sticky learning2-451
learning dynamically2-451
mac address-table aging-time command2-167
mac address-table notification command2-169
mac address-table static command2-171
MAC-named extended ACLs2-165
MAC notification feature
clearing global counters2-45
configuring2-169
enabling2-169
macros, interface range2-80
manual
audiencexiii
purpose ofxiii
maps, QoS
defining2-181
displaying2-329
margin command2-173
masks
match (class-map configuration) command2-175
maximum transmission unit
media-type command2-177
member switches
memory commandB-14
mkdir commandB-16
mls qos cos command2-179
mls qos map command2-181
mls qos trust command2-183
mode, MVR2-189
monitor session command2-186
more commandB-17
MSTP
displaying2-352
interoperability2-52
link type2-403
MST region
aborting changes2-408
applying changes2-408
configuration name2-408
configuration revision number2-408
current or pending display2-408
displaying2-352
MST configuration mode2-408
VLANs-to-instance mapping2-408
path cost2-410
protocol mode2-406
restart protocol migration process2-52
root port
loop guard2-401
preventing from becoming designated2-401
restricting which can be root2-401
root guard2-401
root switch
affects of extended system ID2-399
interval between BDPU messages2-415
interval between hello BPDU messages2-413, 2-423
max-age2-415
maximum hop count before discarding BPDU2-417
port priority for selection of2-419
primary or secondary2-423
switch priority2-421
MSTP (continued)state changes
blocking to forwarding state2-429
enabling BPDU filtering2-391, 2-427
enabling BPDU guard2-393, 2-427
enabling Port Fast2-427, 2-429
forward-delay time2-412
length of listening and learning states2-412
rapid transition to forwarding2-403
shutting down Port Fast-enabled ports2-427
state information display2-351
MTU
configuring size2-465
displaying global setting2-360
multicast groups
multicast groups, MVR2-190
multicast router learning method2-136
multicast router ports, configuring2-136
multicast suppression level
configuring2-441
displaying2-357
enabling2-441
multicast traffic counters2-300
multicast VLAN, MVR2-190
multicast VLAN registration
multiple hosts on authorized port2-91
Multiple Spanning Tree Protocol
MVR
configuring2-189
configuring interfaces2-194
displaying2-333
Immediate Leave feature2-192
receiver port2-194
source port2-194
mvr command2-189
mvr group command2-190
mvr immediate command2-192
mvr type command2-194
mvr vlan group command2-196
N
nonegotiate, speed2-438
normal-range VLANs2-480, 2-486
note, descriptionxiv
notifies commandA-6
P
PAgP
pagp learn-method command2-198
pagp port-priority command2-200
password, VTP2-500, 2-504, 2-506
permit (access-list configuration) command2-201
permit (MAC access-list configuration) command2-204
persistence command2-206
per-VLAN spanning-tree plus
PIM-DVMRP, as multicast router learning method2-136
police command2-207
policy-map command2-209
policy maps
applying to an interface2-227
creating2-209
displaying2-341
policers
displaying2-327
for a single class2-207
policy maps (continued)traffic classification
defining the class2-33
defining the trust states2-183
setting DSCP values2-228
Port Aggregation Protocol
port-based authentication
debug messages, displayC-4
enabling 802.1X2-96
guest VLAN2-90
manual control of authorization state2-96
multiple hosts on authorized port2-91
periodic re-authentication
enabling2-100
time between attempts2-103
quiet period between failed authentication exchanges2-103
re-authenticating 802.1X-enabled ports2-98
resetting configurable 802.1X parameters2-89
statistics and status display2-279
switch-to-client frame-retransmission number2-94
switch-to-client retransmission time2-103
port-channel load-balance command2-212
Port Fast, for spanning tree2-429
port ranges, defining2-80
ports, debug messages, displayC-8
port security
aging2-455
displaying2-343
enabling2-451
violation error recovery timer2-109
port trust states for QoS2-183
power supply alarms, settingA-3
power-supply dual commandA-10
power-supply modeA-10
primary temperature alarmA-4
private configuration files2-26
profile (interface configuration) command2-214
profile (sequence configuration) command2-216
protected ports
displaying2-297
enabling2-459
pruning, VTP
displaying interface information2-291
publications, relatedxv
PVST+
Q
QoS
ACPs, displaying2-325
automatic configuration2-15
class maps
creating2-35
defining the match criteria2-175
displaying2-238
configuration information, displaying2-327
defining the CoS value for an incoming packet2-179
displaying configuration information2-234
maps
defining2-181
displaying2-329
policers, displaying2-327
policy maps
applying to an interface2-227
creating2-209
defining policers2-207
displaying policy maps2-341
setting DSCP values2-228
traffic classifications2-33
QoS (continued)port trust states2-183
queues
CoS-to-egress-queue map2-512
expedite2-510
WRR weights2-510
quality of service
querytime, MVR2-189
R
rapid per-VLAN spanning-tree plus
rapid PVST+
rate selection, resetting2-44
rate selection command2-218
rate selection profile lock command2-219
rate selection sequence command2-220
rcommand command2-222
re-authenticating 802.1X-enabled ports2-98
re-authentication
periodic2-100
time between attempts2-103
receiver port, MVR2-194
receiving flow-control packets2-111
recovery mechanism
causes2-109
displaying2-283
timer interval2-109
redundancy for cluster switches2-64
relay-major commandA-6
relay-minor commandA-6
remote-span command2-224
Remote Switched Port Analyzer
rename commandB-18
reset interface2-39
reset LRE rate selection setting2-44
rmdir commandB-20
rmon collection stats command2-226
root guard, for spanning tree2-401
RPS status display2-346
RSPAN
and IDS2-188
configuring2-186
displaying2-331
remote-span command2-224
sessions
adding interfaces to2-186
displaying2-331
starting new2-186
S
secondary temperature alarmA-4
sending flow-control packets2-111
service-policy command2-227
set command2-228
set command, bootloaderB-21
setup express command2-230
SFP2-177
SFP module preferred2-177
show access-lists command2-232
show alarm description port commandA-11
show alarm profile commandA-12
show alarm settings commandA-14
show auto qos command2-234
show boot command2-236
show changes command2-493
show class-map command2-238
show cluster candidates command2-242
show cluster command2-240
show cluster members command2-244
show controller lre cpe command2-255
show controllers ethernet-controller command2-246
show controllers lre actual command2-258
show controllers lre admin command2-261
show controllers lre link monitor command2-263
show controllers lre log2-41
show controllers lre log command2-266
show controllers lre profile command2-268
show controllers lre sequence command2-271
show controllers lre status command2-273
show controllers lre version command2-278
show current command2-493
show dot1x command2-279
show env command2-282
show env power commandA-16
show env temperature commandA-16
show errdisable recovery command2-283
show etherchannel command2-285
show facility-alarm relay commandA-18
show facility-alarm status commandA-19
show fcs threhsold commandA-20
show file command2-288
show interfaces command2-291
show interfaces counters command2-300
show ip access-list command2-304
show ip igmp snooping command2-306
show ip igmp snooping mrouter command2-308
show lacp command2-310
show lre upgrade command2-312
show mac access-group command2-316
show mac address-table command2-318
show mac address-table multicast command2-321
show mac address-table notification command2-323
show mls masks2-325
show mls qos interface command2-327
show mls qos maps command2-329
show monitor command2-331
show mvr command2-333
show mvr interface command2-335
show mvr members command2-337
show pagp command2-339
show policy-map command2-341
show port-security command2-343
show proposed command2-493
show rps command2-346
show running-config vlan command2-348
show setup express command2-350
show spanning-tree command2-351
show storm-control command2-357
show system mtu command2-360
show udld command2-361
show version command2-364
show vlan command2-365
show vlan command fields2-366
show vmps command2-369
show vtp command2-372
show wrr-queue bandwidth command2-377
show wrr-queue cos-map command2-378
shutdown command2-379
shutdown vlan command2-380
signal to noise ratio2-173
SNMP host, specifying2-384
snmp-server enable traps command2-381
snmp-server host command2-384
snmp trap mac-notification command2-388
SNMP traps
enabling MAC address notification2-169
enabling MAC address notification traps2-381, 2-388
enabling the sending of traps2-381
SNR
definition2-173
margins2-173
software images
downloading2-8
upgrading2-8
uploading2-13
software images, deleting2-82
software version, displaying2-364
source ports, MVR2-194
SPAN
and IDS2-188
configuring2-186
displaying2-331
sessions
add interfaces to2-186
displaying2-331
start new2-186
spanning-tree backbonefast command2-390
spanning-tree bpdufilter command2-391
spanning-tree bpduguard command2-393
spanning-tree cost command2-395
spanning-tree etherchannel command2-397
spanning-tree extend system-id command2-399
spanning-tree guard command2-401
spanning-tree link-type command2-403
spanning-tree loopguard default command2-404
spanning-tree mode command2-406
spanning-tree mst configuration command2-408
spanning-tree mst cost command2-410
spanning-tree mst forward-time command2-412
spanning-tree mst hello-time command2-413
spanning-tree mst max-age command2-415
spanning-tree mst max-hops command2-417
spanning-tree mst port-priority command2-419
spanning-tree mst priority command2-421
spanning-tree mst root command2-423
spanning-tree portfast (global configuration) command2-427
spanning-tree portfast (interface configuration) command2-429
spanning-tree port-priority command2-425
spanning-tree stack-port command2-431
spanning-tree uplinkfast command2-433
spanning-tree vlan command2-435
speed command2-438
static-access ports, configuring2-444
statistics, Ethernet group2-226
sticky learning, enabling2-451
storm control
broadcast, enabling2-441
displaying2-357
multicast, enabling2-441
unicast, enabling2-441
storm-control command2-441
STP
BackboneFast2-390
debug message display
BackboneFast eventsC-12
MSTPC-15
optimized BPDUs handlingC-14
spanning-tree activityC-10
switch shimC-17
transmitted and received BPDUsC-13
UplinkFastC-19
detection of indirect link failures2-390
EtherChannel misconfiguration2-397
extended system ID2-399
path cost2-395
protocol mode2-406
root port
accelerating choice of new2-433
accelerating choice of new root in a stack2-431
cross-stack UplinkFast2-431
loop guard2-401
preventing from becoming designated2-401
restricting which can be root2-401
root guard2-401
UplinkFast2-433
STP (continued)root switch
affects of extended system ID2-399, 2-436
hello-time2-435
interval between BDPU messages2-435
interval between hello BPDU messages2-435
max-age2-435
port priority for selection of2-425
primary or secondary2-435
switch priority2-435
state changes
blocking to forwarding state2-429
enabling BPDU filtering2-391, 2-427
enabling BPDU guard2-393, 2-427
enabling Port Fast2-427, 2-429
enabling timer to recover from error state2-109
forward-delay time2-435
length of listening and learning states2-435
shutting down Port Fast-enabled ports2-427
state information display2-351
Switched Port Analyzer
switching characteristics
modifying2-449
returning to interfaces2-449
switchport access command2-444
switchport block command2-446
switchport mode command2-447
switchport nonegotiate command2-449
switchport port-security aging command2-455
switchport port-security command2-451
switchport priority extend command2-457
switchport protected command2-459
switchports, displaying2-291
switchport trunk command2-460
switchport voice vlan command2-463
syslog commandA-6
system mtu command2-465
T
tar files, creating, listing, and extracting2-10
technical assistance
TAC websitexviii
toll-free telephone numbersxix
Telnetting to cluster switches2-222
temperature alarms, settingA-4
test relay commandA-21
tips, descriptionxv
traceroute, Layer 2
traceroute mac command2-467
traceroute mac ip command2-470
trunk ports, configuring2-447
trunks
allowed VLANs2-460
native VLANs2-460
pruning-eligible VLAN list2-462
pruning VLANs2-460
VLAN 1 minimization2-461
trunks, to non-DTP device2-448
trusted boundary for QoS2-183
type commandB-24
U
UDLD
debug messages, displayingC-26
enabling globally2-473
enabling per interface2-475
error recovery timer2-109
message timer2-473
resetting shutdown interfaces2-477
status2-361
udld (global interface) command2-473
udld (interface configuration) command2-475
udld reset command2-477
unicast suppression level
configuring2-441
displaying2-357
enabling2-441
unicast traffic counters2-300
UniDirectional Link Detection
unknown multicast traffic, preventing2-446
unknown unicast traffic, preventing2-446
unset (boot loader) commandB-25
upgrade binary command2-478
upgrade preserve command2-479
upgrading software images2-8
UplinkFast, for STP2-433
upstream power back-off
configuring2-159
supported values2-160
URLs, Ciscoxvi
V
version commandB-27
vlan (global configuration) command2-480
vlan (VLAN configuration) command2-486
VLAN configuration
VLAN configuration mode
commands
VLAN2-486
VTP2-506
entering2-492
summary1-3
vlan database command2-492
VLAN Query Protocol
VLANs
adding2-480
debug message display
ISLC-23
VLAN IOS file system error testsC-22
VLAN manager activityC-20
VTPC-24
displaying configurations2-365
extended-range2-480
MAC addresses
displaying2-318
number of2-318
saving the configuration2-480
shutting down2-380
SNMP traps for VTP2-382, 2-385
trunks, VLAN 1 minimization2-461
variables2-486
VMPS
configuring servers2-498
reconfirming dynamic VLAN assignments2-496
vmps reconfirm (global configuration) command2-495
vmps reconfirm (privileged EXEC) command2-496
vmps retry command2-497
vmps server command2-498
voice VLAN
configuring2-463
setting port priority2-457
VQP
and dynamic-access ports2-445
clearing client statistics2-53
displaying information2-369
per-server retry count2-497
reconfirmation interval2-495
reconfirming dynamic VLAN assignments2-496
VTP
changing characteristics2-500
clearing pruning counters2-54
clearing VTP counters2-54
configuring
file name2-500
counters display fields2-373
displaying information2-372
enabling
saving the configuration2-481, 2-490
status display fields2-374
vtp (global configuration) command2-500
vtp (privileged EXEC) command2-504
vtp (VLAN configuration) command2-506
W
World Wide Web, for providing feedbackxvi
WRR, assigning weights to egress queues2-510
wrr-queue bandwidth command2-510
wrr-queue cos-map command2-512