Feedback
Table Of Contents
show controllers ethernet-controller
show controllers lre link monitor
show mac address-table multicast
show mac address-table notification
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
spanning-tree loopguard default
spanning-tree mst configuration
spanning-tree mst forward-time
spanning-tree mst port-priority
spanning-tree portfast (global configuration)
spanning-tree portfast (interface configuration)
switchport port-security aging
2service password-recovery
Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the boot process while the switch is powering up and to assign a new password. Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.
service password-recovery
no service password-recovery
This command is available only on Catalyst 2950 Long-Reach Ethernet (LRE) switches.
Syntax Description
This command has no arguments or keywords.
Defaults
The password-recovery mechanism is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
This command is valid only on Catalyst 2950 LRE switches.
As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration.
The password-recovery mechanism has been triggered, butis currently disabled. Access to the boot loader promptthrough the password-recovery mechanism is disallowed atthis point. However, if you agree to let the system bereset back to the default system configuration, accessto the boot loader prompt can still be allowed.Would you like to reset the system back to the default configuration (y/n)?If the user chooses not to reset the system back to the default configuration, the normal boot process continues, as if the Mode button had not been pressed. If you choose to reset the system back to the default configuration, the configuration file in flash memory is deleted and the VLAN database file, flash:vlan.dat (if present) is deleted.
Note
If you use the no service password-recovery command to control end user access to passwords, we recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values. Do not keep a backup copy of the config file on the switch.
If the switch is operating in VTP transparent mode, we recommend that you also save a copy of the vlan.dat file in a location away from the switch.You can verify if password recovery is enabled or disabled by entering the show version privileged EXEC command.
Examples
This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration.
Switch(config)# no service-password recoverySwitch(config)# exitRelated Commands
service-policy
Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to the input of a particular interface. Use the no form of this command to remove the policy map and interface association.
service-policy input policy-map-name
no service-policy input policy-map-name
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
No policy maps are attached to the interface.
Command Modes
Interface configuration
Command History
Usage Guidelines
Only one policy map per ingress interface is supported.
Service policy maps cannot be defined on egress interfaces.
Note
Examples
This example shows how to apply plcmap1 to an ingress interface:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# service-policy input plcmap1You can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.
Displays quality of service (QoS) policy maps.
set
Use the set policy-map class configuration command to classify IP traffic by setting a Differentiated Services Code Point (DSCP) value. Use the no form of this command to remove traffic classification.
set ip dscp new-dscp
no set ip dscp new-dscp
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
new-dscp
New DSCP value assigned to the classified traffic.
The supported DSCP values are 0, 8, 10, 16, 18, 24, 26, 32, 34, 40, 46, 48, and 56.
Defaults
No traffic classification is defined.
Command Modes
Policy-map class configuration
Command History
Usage Guidelines
The set command can be used in a policy with a match command.
The set command sets the DSCP value for in-profile packets.
Note
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Note
Examples
This example shows how to assign a DSCP value of 10 to all FTP traffic without any policers:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set ip dscp 10Switch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
setup express
Use the setup express global configuration command to enable Express Setup mode on the switch. This is the default setting. Use the no form of this command to disable Express Setup mode.
setup express
no setup express
This command is available only on Catalyst 2950 switches.
Syntax Description
This command has no arguments or keywords.
Defaults
Express Setup is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
When Express Setup is enabled on a new (unconfigured) switch, pressing the Mode button for 2 seconds activates Express Setup. You can access the switch through an Ethernet port by using the IP address 10.0.0.1 and then can configure the switch with the web-based Express Setup program or the command-line interface (CLI)-based setup program.
When you press the Mode button for 2 seconds on a configured switch, the mode LEDs start blinking. If you press the Mode button for a total of 10 seconds, the switch configuration is deleted, and the switch reboots. The switch can then be configured like a new switch, either through the web-based Express Setup program or the CLI-based setup program.
Note
If Express Setup is active on the switch, entering the write memory or copy running-configuration startup-configuration privileged EXEC commands deactivates Express Setup. The IP address 10.0.0.1 is no longer valid on the switch, and your connection using this IP address ends.
The primary purpose of the no setup express command is to prevent someone from deleting the switch configuration by pressing the Mode button for 10 seconds.
Examples
This example shows how to enable Express Setup mode:
Switch(config)# setup expressYou can verify that Express Setup mode is enabled by pressing the Mode button:
•
•
Caution
This example shows how to disable Express Setup mode:
Switch(config)# no setup expressYou can verify that Express Setup mode is disabled by pressing the Mode button. The mode LEDs only turn solid green or begin blinking green if Express Setup mode is enabled on the switch.
Related Commands
Exits Express Setup mode without saving the configuration.
Displays if Express Setup mode is active on the switch.
show access-lists
Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.
show access-lists [name | number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show access-lists command:
Switch# show access-listsStandard IP access list testingaclpermit 10.10.10.2Standard IP access list wizard_1-1-1-2permit 1.1.1.2Extended IP access list 103permit tcp any any eq wwwExtended IP access list CMP-NAT-ACLDynamic Cluster-HSRP deny ip any anyDynamic Cluster-NAT permit ip any anypermit ip host 10.123.222.192 anypermit ip host 10.228.215.0 anypermit ip host 10.245.137.0 anypermit ip host 10.245.155.128 anypermit ip host 10.221.111.64 anypermit ip host 10.216.25.128 anypermit ip host 10.186.122.64 anypermit ip host 10.169.110.128 anypermit ip host 10.146.106.192 anyRelated Commands
show auto qos
Use the show auto qos user EXEC command to display the automatic quality of service (auto-QoS) configuration that is applied.
show auto qos [interface [interface-id]] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The show auto qos [interface [interface-id]] command displays the auto-QoS configuration; it does not display any user changes to the configuration that might be in effect.
To display information about the QoS configuration that might be affected by auto-QoS, use one of these commands:
•
•
•
•
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show auto qos command when auto-QoS is enabled:
Switch> show auto qosInitial configuration applied by AutoQoS:wrr-queue bandwidth 20 1 80 0no wrr-queue cos-mapwrr-queue cos 1 0 1 2 4wrr-queue cos 3 3 6 7wrr-queue cos 4 5mls qos map cos-dscp 0 8 16 26 32 46 48 56!interface FastEthernet0/3mls qos trust device cisco-phonemls qos trust cosThis is an example of output from the show auto qos interface command when the auto qos voip cisco-phone interface configuration command is entered:
Switch> show auto qos interfaceInitial configuration applied by AutoQoS:!interface FastEthernet0/3mls qos trust device cisco-phonemls qos trust cosThis is an example of output from the show auto qos interface fastethernet0/3 command when the auto qos voip cisco-phone interface configuration command is entered:Switch> show auto qos interface fastethernet0/3Initial configuration applied by AutoQoS:!interface FastEthernet0/3mls qos trust device cisco-phonemls qos trust cosThis is an example of output from the show auto qos command when auto-QoS is disabled:
Switch> show auto qosAutoQoS is disabledRelated Commands
show boot
Use the show boot privileged EXEC command to display the settings of the boot environment variables.
show boot [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Note
Examples
This is an example of output from the show boot command. Table 2-8 describes each field in the output.
Switch# show bootBOOT path-list: flash:bootConfig file: flash:config.textPrivate Config file: flash:private-config.textEnable Break: noManual Boot: yesHELPER path-list:NVRAM/Config filebuffer size: 32768
Related Commands
Specifies the filename that the software uses to read and write a nonvolatile copy of the private configuration.
show class-map
Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.
show class-map [class-map-name] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not specify a class-map-name, all class maps appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show class-map test command:
Switch> show class-map testClass Map match-all test (id 2)Match access-group name testingaclThis is an example of output from the show class-map command:
Switch> show class-mapClass Map match-all wizard_1-1-1-2 (id 3)Match access-group name videowizard_1-1-1-2Class Map match-all test (id 2)Match access-group name testingaclClass Map match-any class-default (id 0)Match anyClass Map match-all class1 (id 5)Match access-group 103Class Map match-all classtest (id 4)Description: This is a test.Match access-group name testingaclRelated Commands
Creates a class map to be used for matching packets to the class whose name you specify.
Defines the match criteria to classify traffic.
show cluster
Use the show cluster privileged EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on command and member switches.
show cluster [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
On a member switch, this command displays the identity of the command switch, the switch member number, and the state of its connectivity with the command switch.
On a command switch, this command displays the cluster name and the total number of members. It also shows the cluster status and time since the status changed. If redundancy is enabled, it displays the primary and secondary command-switch information.
If you enter this command on a switch that is not a cluster member, the error message Not a management cluster member appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output when this command is entered on the active command switch:
Switch# show clusterCommand switch for cluster "Switch1"Total number of members: 7Status: 1 members are unreachableTime since last status change: 0 days, 0 hours, 2 minutesRedundancy: EnabledStandby command switch: Member 1Standby Group: Switch1_standbyStandby Group Number: 110Heartbeat interval: 8Heartbeat hold-time: 80Extended discovery hop count: 3This is an example of output when this command is entered on a member switch:
Switch# show clusterMember switch for cluster "commander"Member number: 3Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80This is an example of output when this command is entered on a member switch that is configured as the standby command switch:
Switch# show clusterMember switch for cluster "commander"Member number: 3 (Standby command switch)Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80This is an example of output when this command is entered on the command switch that has lost connectivity from member 1:
Switch# show clusterCommand switch for cluster "Switch1"Total number of members: 7Status: 1 members are unreachableTime since last status change: 0 days, 0 hours, 5 minutesRedundancy: DisabledHeartbeat interval: 8Heartbeat hold-time: 80Extended discovery hop count: 3This is an example of output when this command is entered on a member switch that has lost connectivity with the command switch:
Switch# show clusterMember switch for cluster "commander"Member number: <UNKNOWN>Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80Related Commands
show cluster candidates
Use the show cluster candidates privileged EXEC command on the command switch to display a list of candidate switches.
show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
You should only enter this command on a command switch.
If the switch is not a command switch, the command displays an empty line at the prompt.
The SN in the output means switch member number. If E is in the SN column, it means that the switch is discovered through extended discovery. If E does not appear in the SN column, it means that the switch member number is the upstream neighbor of the candidate switch. The hop count is the number of devices the candidate is from the command switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show cluster candidates command:
Switch# show cluster candidates|---Upstream---|MAC Address Name Device Type PortIf FEC Hops SN PortIf FEC00d0.7961.c4c0 c2950-012 WS-C2950-12 Fa0/5 1 0 Fa0/300d0.bbf5.e900 ldf-dist-128 WS-C3524-XL Fa0/7 1 0 Fa0/2400e0.1e7e.be80 1900_Switch 1900 3 0 1 0 Fa0/1100e0.1e9f.7a00 c2924XL-24 WS-C2924-XL Fa0/5 1 0 Fa0/300e0.1e9f.8c00 c2912XL-12-2 WS-C2912-XL Fa0/4 1 0 Fa0/700e0.1e9f.8c40 c2912XL-12-1 WS-C2912-XL Fa0/1 1 0 Fa0/90050.2e4a.9fb0 C3508XL-0032 WS-C3508-XL E0050.354e.7cd0 C2924XL-0034 WS-C2924-XL EThis is an example of output from the show cluster candidates command that uses the MAC address of a member switch directly connected to the command switch:
Switch# show cluster candidates mac-address 00d0.7961.c4c0Device 'c2950-12' with mac address number 00d0.7961.c4c0Device type: cisco WS-C2950-12Upstream MAC address: 00d0.796d.2f00 (Cluster Member 0)Local port: Fa0/3 FEC number:Upstream port: Fa0/13 FEC Number:Hops from cluster edge: 1Hops from command device: 1This is an example of output from the show cluster candidates command that uses the MAC address of a member switch three hops from the cluster edge:
Switch# show cluster candidates mac-address 0010.7bb6.1cc0Device 'c2950-24' with mac address number 0010.7bb6.1cc0Device type: cisco WS-C2950-24Upstream MAC address: 0010.7bb6.1cd4Local port: Fa2/1 FEC number:Upstream port: Fa0/24 FEC Number:Hops from cluster edge: 3Hops from command device: -This is an example of output from the show cluster candidates detail command:
Switch# show cluster candidates detailDevice 'c2950-12' with mac address number 00d0.7961.c4c0Device type: cisco WS-C2950-12Upstream MAC address: 00d0.796d.2f00 (Cluster Member 1)Local port: Fa0/3 FEC number:Upstream port: Fa0/13 FEC Number:Hops from cluster edge: 1Hops from command device: 2Device '1900_Switch' with mac address number 00e0.1e7e.be80Device type: cisco 1900Upstream MAC address: 00d0.796d.2f00 (Cluster Member 2)Local port: 3 FEC number: 0Upstream port: Fa0/11 FEC Number:Hops from cluster edge: 1Hops from command device: 2Device 'c2924-XL' with mac address number 00e0.1e9f.7a00Device type: cisco WS-C2924-XLUpstream MAC address: 00d0.796d.2f00 (Cluster Member 3)Local port: Fa0/5 FEC number:Upstream port: Fa0/3 FEC Number:Hops from cluster edge: 1Hops from command device: 2Related Commands
Displays the cluster status and a summary of the cluster to which the switch belongs.
Displays information about the cluster members.
show cluster members
Use the show cluster members privileged EXEC command on the command switch to display information about the cluster members.
show cluster members [n | detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
You should only enter this command on a command switch.
If the cluster has no members, this command displays an empty line at the prompt.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show cluster members command. The SN in the display means switch number.
Switch# show cluster members|---Upstream---|SN MAC Address Name PortIf FEC Hops SN PortIf FEC State0 0002.4b29.2e00 StLouis1 0 Up (Cmdr)1 0030.946c.d740 tal-switch-1 Fa0/13 1 0 Gi0/1 Up2 0002.b922.7180 nms-2820 10 0 2 1 Fa0/18 Up3 0002.4b29.4400 SanJuan2 Gi0/1 2 1 Fa0/11 Up4 0002.4b28.c480 GenieTest Gi0/2 2 1 Fa0/9 UpThis is an example of output from the show cluster members 3 command for cluster member 3:
Switch# show cluster members 3Device 'SanJuan2' with member number 3Device type: cisco WS-C3550-12TMAC address: 0002.4b29.4400Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/1 FEC number:Upstream port: Fa0/11 FEC Number:Hops from command device: 2This is an example of output from the show cluster members detail command:
Switch# show cluster members detailDevice 'StLouis1' with member number 0 (Command Switch)Device type: cisco WS-C3550-12TMAC address: 0002.4b29.2e00Upstream MAC address:Local port: FEC number:Upstream port: FEC Number:Hops from command device: 0Device 'tal-switch-14' with member number 1Device type: cisco WS-C3548-XLMAC address: 0030.946c.d740Upstream MAC address: 0002.4b29.2e00 (Cluster member 0)Local port: Fa0/13 FEC number:Upstream port: Gi0/1 FEC Number:Hops from command device: 1Device 'nms-2820' with member number 2Device type: cisco 2820MAC address: 0002.b922.7180Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: 10 FEC number: 0Upstream port: Fa0/18 FEC Number:Hops from command device: 2Device 'SanJuan2' with member number 3Device type: cisco WS-C3550-12TMAC address: 0002.4b29.4400Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/1 FEC number:Upstream port: Fa0/11 FEC Number:Hops from command device: 2Device 'Test' with member number 4Device type: cisco SeaHorseMAC address: 0002.4b28.c480Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/2 FEC number:Upstream port: Fa0/9 FEC Number:Hops from command device: 2Device 'Palpatine' with member number 5Device type: cisco WS-C2924M-XLMAC address: 00b0.6404.f8c0Upstream MAC address: 0002.4b29.2e00 (Cluster member 0)Local port: Gi2/1 FEC number:Upstream port: Gi0/7 FEC Number:Hops from command device: 1Related Commands
Displays the cluster status and a summary of the cluster to which the switch belongs.
Displays a list of candidate switches.
show controllers ethernet-controller
Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-interface transmit and receive statistics read from the hardware. Use this command with keywords to display the interface internal registers or to display the statistics read from Long-Reach Ethernet (LRE) and customer premises equipment (CPE) ports.
show controllers ethernet-controller interface-id [asic | cpe [port port-id] | phy 32] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC (only supported with the interface-id keywords in user EXEC mode)
Command History
12.1(6)EA2
This command was introduced.
12.1(11)YJ
The cpe and port port-id keywords were added.
12.1(19)EA1
The phy keyword was changed to phy 32.
Usage Guidelines
Use this command without keywords to display traffic statistics, basically the RMON statistics for the interface. If this command is entered on a Catalyst 2950 LRE switch, the command output also shows the statistics for the LRE switch interfaces.
When you enter the asic or phy 32 keyword, the displayed information is primarily useful for Cisco technical support representatives troubleshooting the switch.
When you enter the cpe keyword, the displayed information shows the traffic statistics for the connected CPE devices. The CPE Ethernet link on an LRE switch port is the connection between the Cisco LRE CPE and the remote Ethernet device (such as a PC) connected to it. It is not the link between the LRE switch port and the LRE CPE device.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers ethernet-controller command on a non-LRE switch. For this example, Table 2-9 describes the Transmit fields, Table 2-10 describes the Receive fields, and Table 2-11 describes the Transmit and Receive fields.
Switch# show controllers ethernet-controller fastethernet0/2Transmit Receive19555003 Bytes 23485398 Bytes222479 Frames 313530 Frames161490 Multicast frames 0 FCS errors256 Broadcast frames 313467 Multicast frames0 Pause frames 1 Broadcast frames0 Single defer frames 0 Control frames0 Multiple defer frames 0 Pause frames0 1 collision frames 0 Unknown opcode frames0 2-15 collisions 0 Alignment errors0 Late collisions 0 Length out of range0 Excessive collisions 0 Symbol error frames0 Total collisions 0 False carrier errors0 Control frames 0 Valid frames, too small0 VLAN discard frames 0 Valid frames, too large0 Too old frames 0 Invalid frames, too small0 Tagged frames 0 Invalid frames, too large0 Aborted Tx frames 0 Discarded framesTransmit and Receive384595 Minimum size frames131178 65 to 127 byte frames6 128 to 255 byte frames20229 256 to 511 byte frames1 512 to 1023 byte frames0 1024 to 1518 byte frames0 1519 to 1522 byte frames
Table 2-9 Transmit Field Descriptions
Bytes
The total number of bytes sent on an interface.
Frames
The total number of frames sent on an interface.
Multicast frames
The total number of frames sent to multicast addresses.
Broadcast frames
The total number of frames sent to broadcast addresses.
Pause frames
The number of pause frames sent on an interface.
Single defer frames
The number of frames for which the first transmission attempt on an interface is not successful. This value excludes frames in collisions.
Multiple defer frames
The number of frames that are not sent after the time exceeds 2*maximum-packet time.
1 collision frames
The number of frames that are successfully sent on an interface after one collision occurs.
2-15 collisions
The number of frames that are successfully sent on an interface after more than one collision occurs.
Late collisions
After a frame is sent, the number of times that a collision is detected on an interface later than 512 bit times.
Excessive collisions
The number of frames that could not be sent on an interface because more than 16 collisions occurred.
Total collisions
The total number of collisions on an interface.
Control frames
The number of control frames sent on an interface, such as STP1 BPDUs2 .
VLAN discard frames
The number of frames dropped on an interface because the CFI3 bit is set.
Too old frames
The number of frames dropped on the egress port because the packet aged out.
Tagged frames
The number of tagged frames sent on an interface.
Aborted Tx frames
The number of aborted transmission attempts on the interface.
1 STP = Spanning Tree Protocol
2 BPDU = bridge protocol data unit
3 CFI = Canonical Format Indicator
Table 2-10 Receive Field Descriptions
Bytes
The total amount of memory (in bytes) used by frames received on an interface, including the FCS1 value and the incorrectly formed frames. This value excludes the frame header bits.
Frames
The total number of frames received on an interface, including multicast frames, broadcast frames, and incorrectly formed frames.
FCS errors
The total number of frames received on an interface that have a valid length (in bytes) but do not have the correct FCS values.
Multicast frames
The total number of frames successfully received on the interface that are directed to multicast addresses.
Broadcast frames
The total number of frames successfully received on an interface that are directed to broadcast addresses.
Control frames
The number of control frames received on an interface, such as STP BPDUs.
Pause frames
The number of pause frames received on an interface.
Unknown opcode frames
The number of frames received with an unknown operation code.
Alignment errors
The total number of frames received on an interface that have alignment errors.
Length out of range
The number of frames received on an interface that have an out-of-range length.
Symbol error frames
The number of frames received on an interface that have symbol errors.
False carrier errors
The number of occurrences in which the interface detects a false carrier when frames are not sent or received.
Valid frames, too small
The number of frames received on an interface that are smaller than 64 bytes (or 68 bytes for VLAN-tagged frames) and have valid FCS values. The frame size includes the FCS bits but excludes the frame header bits.
Valid frames, too large
The number of frames received on an interface that are larger than the maximum allowed frame size.
Invalid frames, too small
The number of frames received that are smaller than 64 bytes (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Invalid frames, too large
The number of frames received that were larger than maximum allowed MTU2 size (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Note
Discarded frames
The number of frames discarded because of lack of receive buffer memory.
1 FCS = frame check sequence
2 MTU = maximum transmission unit
This is an example of output from the show controllers ethernet-controller command on an LRE switch. For this example, Table 2-9 describes the Transmit fields, Table 2-10 describes the Receive fields, Table 2-11 describes the Transmit and Receive fields, and Table 2-12 describes the LRE Enet Stats on Switch fields.
Switch# show controllers ethernet-controller longreachethernet0/4Transmit Receive64 Bytes 64 Bytes1 Frames 1 Frames0 Multicast frames 0 FCS errors0 Broadcast frames 0 Multicast frames0 Pause frames 0 Broadcast frames0 Single defer frames 0 Control frames0 Multiple defer frames 0 Pause frames0 1 collision frames 0 Unknown opcode frames0 2-15 collisions 0 Alignment errors0 Late collisions 0 Length out of range0 Excessive collisions 0 Symbol error frames0 Total collisions 0 False carrier errors0 Control frames 0 Valid frames, too small0 VLAN discard frames 0 Valid frames, too large0 Too old frames 0 Invalid frames, too small0 Tagged frames 0 Invalid frames, too large0 Aborted Tx frames 0 Discarded framesTransmit and Receive2 Minimum size frames0 65 to 127 byte frames0 128 to 255 byte frames0 256 to 511 byte frames0 512 to 1023 byte frames0 1024 to 1518 byte frames0 1519 to 1522 byte framesLRE Enet Stats on Switch:Transmit Receive0 Bytes 0 Bytes0 Frames 0 Frames0 Broadcast frames0 Pause frames 0 Pause frames0 1 collision frames 0 Alignment errors0 Multiple collisions 0 Collisions and Runts0 Late collisions 0 Oversize frames0 Excessive collisions 0 FCS errors0 Deferred frames0 Carrier sense errors
This is an example of output from the show controllers ethernet-controller longreachethernet0/4 cpe command. It shows the statistics of the LRE chipset and the all the LRE ports on the CPE. For this example, Table 2-13 describes the LRE Enet Stats on CPE fields, and Table 2-14 describes the CPE Fast Ethernet Port fields.
Switch# show controllers ethernet-controller longreachethernet0/4 cpeLRE Enet Stats on CPE:Transmit Receive0 Bytes 0 Bytes0 Frames 0 Frames0 Broadcast frames0 Pause frames 0 Pause frames0 1 collision frames 0 Alignment errors0 Multiple collisions 0 Collisions and Runts0 Late collisions 0 Oversize frames0 Excessive collisions 0 FCS errors0 Deferred frames0 Carrier sense errorsCPE Fast Ethernet Port: 1Transmit Receive0 Bytes 0 Bytes0 Good Bytes0 Unicast Frames 0 Unicast Frames0 Multicast Frames 0 Multicast Frames0 Broadcast Frames 0 Broadcast Frames0 Dropped Frames 0 Dropped Frames0 Pause Frames 0 Pause Frames0 Collision Frames 0 Alignment Errors0 One Collision Frames 0 Fragments0 Multiple Collisions 0 Undersize Frames0 Late Collisions 0 Oversize Frames0 Excess Collisions 0 FCS errors0 Frame Discard 0 Excess Size Discards0 Deferred Frames 0 Jabbers0 Source Address Chang0 Symbol Errors0 64 Byte Frames0 65-127 Byte Frames0 128-255 Byte Frames0 256-511 Byte Frames0 512-1023 Byte Frames0 1024-1522 Byte FrameThis is an example of output from the show controllers ethernet-controller longreachethernet0/4 cpe port 1 command. It shows the statistics for a specific LRE port on the CPE. For this example, Table 2-14 describes the CPE Fast Ethernet Port fields.
Switch# show controllers ethernet-controller longreachethernet0/4 cpe port 1CPE Fast Ethernet Port: 1Transmit Receive42308326 Bytes 8264733 Bytes8264733 Good Bytes193 Unicast Frames 68745 Unicast Frames511408 Multicast Frames 11469 Multicast Frames1886 Broadcast Frames 0 Broadcast Frames0 Dropped Frames 0 Dropped Frames0 Pause Frames 0 Pause Frames0 Collision Frames 0 Alignment Errors0 One Collision Frames 0 Fragments0 Multiple Collisions 0 Undersize Frames0 Late Collisions 0 Oversize Frames0 Excess Collisions 0 FCS errors0 Frame Discard 0 Excess Size Discards2 Deferred Frames 0 Jabbers1 Source Address Change0 Symbol Errors68745 64 Byte Frames0 65-127 Byte Frames0 128-255 Byte Frames11469 256-511 Byte Frames0 512-1023 Byte Frames0 1024-1522 Byte Frame
Related Commands
show controllers lre cpe
Use the show controllers lre cpe privileged EXEC command to display information about the Cisco Long-Reach Ethernet (LRE) customer premises equipment (CPE) devices connected to an LRE switch.
show controllers lre cpe {identity | mfg | protected | version}[interface-id] [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The show controllers lre cpe identity privileged EXEC command output shows the type of CPE device attached to each LRE interface. For all Cisco supported CPE devices, the status can be certified, non-certified, or NA:
•
•
•
Use the show controllers lre cpe identity privileged EXEC command without specifying an LRE switch port to display the model numbers and status of all connected CPE devices.
Use the show controllers lre cpe mfg privileged EXEC command output to display fields specific to each CPE device unit. The software uses the model number field to identify the kind of CPE device attached to an LRE interface. The System Serial Number is also unique to each CPE device unit.
Use the show controllers lre cpe protected privileged EXEC command without specifying an LRE interface to display the protected port setting for all CPE ports. The Cisco 575 LRE CPE or Cisco 576 LRE 997 CPE devices display a protected field output of NA.
Use the show controllers lre cpe version privileged EXEC command without specifying an LRE switch port to display the version numbers of all CPE interfaces.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre cpe identity command for the Cisco 575 LRE and Cisco 585 LRE CPE devices:
Switch# show controllers lre cpe identityPort CPE Model Status Family------ ------------ --------------- ------Lo0/1 CISCO585-LRE CERTIFIED CISCO585-LRELo0/2 CISCO585-LRE CERTIFIED CISCO585-LRELo0/3 CISCO585-LRE CERTIFIED CISCO585-LRELo0/4 NA NA NALo0/5 NA NA NALo0/6 Cisco575-LRE CERTIFIED CISCO575-LRELo0/7 NA NA NALo0/8 Cisco575-LRE CERTIFIED CISCO575-LRELo0/9 NA NA NALo0/10 NA NA NALo0/11 CISCO585-LRE CERTIFIED CISCO585-LRELo0/12 CISCO585-LRE CERTIFIED CISCO585-LRELo0/13 CISCO585-LRE CERTIFIED CISCO585-LRELo0/14 NA NA NALo0/15 NA NA NALo0/16 NON-CERTIFIED UNSUPPORTED-MAC-MODE<output truncated>This is an example of output from the show controllers lre cpe mfg command that shows the manufacturing information for the Cisco 575 LRE and Cisco 585 CPE devices:
Switch# show controllers lre cpe mfgCPE Manufacturer Information:Lo0/1Assembly Revision Number:Model Number :CISCO585-LREModel Revision Number :A0Board Assembly Number :Board Serial Number :System Serial Number :ACT0613004ELo0/2Assembly Revision Number:Model Number :CISCO585-LREModel Revision Number :A0Board Assembly Number :Board Serial Number :System Serial Number :ACT0613005B<output truncated>This is an example of output from the show controllers lre cpe protected command that shows the CPE protected-port information for an LRE interface:
Switch# show controllers lre cpe protected longreachethernet0/9Interface Port Protected--------- ---- ---------Lo0/9 1 trueLo0/9 2 trueLo0/9 3 trueLo0/9 4 trueThis is an example of output from the show controllers lre cpe protected command that shows the CPE protected-port information for all LRE interfaces:
Switch# show controllers lre cpe protectedInterface Port Protected--------- ---- ---------Lo0/1 1 NALo0/2 1 NALo0/3 1 NALo0/4 1 NALo0/5 1 NALo0/6 1 NALo0/7 1 NALo0/8 1 falseLo0/8 2 false<output truncated>This is an example of output from the show controllers lre cpe version command:
Switch# show controllers lre cpe version longreachethernet0/5Interface Hw Sw Patch Boot App--------- --- --- ------ ----- -----Lo0/5 52 B4 51 1.02 1.02Related Commands
show controllers lre actual
Use the show controllers lre actual privileged EXEC command to display the actual values of the Long-Reach Ethernet (LRE) link on a specific LRE switch port.
show controllers lre interface-id actual {dsrserrs | link | rxpower | snr | txpower | usrserrs}
[ | {begin | exclude | include} expression]This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
You can use the SNR and Reed-Solomon error information to measure the quality of the LRE link. The SNR is the amount of increased received signal-power (in decibels) relative to the noise-power level that the switch can tolerate without disconnecting from the CPE device. The higher the ratio, the more resilient is the link.
The Reed-Solomon errors show the number of errors detected and corrected in the data being received on and sent from the switch LRE ports. Reed-Solomon errors are the result of noise exceeding the noise margin. For short bursts of noise (such as motor power on or power surges), the interleave feature prevents the loss of Ethernet data packets. Then the number of Reed-Solomon errors exceeds the number of Ethernet CRC errors.
The remote transmit power-rates from the connected CPE devices might be different from each other, depending on how long the cable is between the switch and the CPE device. A longer cable typically causes the CPE device to send a higher signal to overcome the loss effects of distance.
The local receive-power actually displays the switch's adjustment to the incoming power level. These numbers might be different from LRE port to LRE port, as the length of the cables to the CPE devices might be different.
If the SNR is too low for the environment but the link still establishes, the Reed-Solomon error rate is high, and there might be link instability (as shown by the number of Fail events counted). If the network is being used for data only, a high incidence of Ethernet Frame Check Sequence (FCS) errors or micro-interruptions might be tolerable.
For more information about what can affect the LRE link and for the minimum required SNR ratios, refer to the "LRE Links and LRE Profiles" section in the "Configuring LRE" chapter of the switch software configuration guide for this release.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre interface-id actual dsrserrs command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual dsrserrs0Switch#This is an example of output from the show controllers lre interface-id actual link command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual linkUPSwitch#This is an example of output from the show controllers lre interface-id actual rxpower command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual rxpower26.0Switch#This is an example of output from the show controllers lre interface-id actual snr command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual snr27Switch#This is an example of output from the show controllers lre interface-id actual txpower command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual txpower-89.7Switch#This is an example of output from the show controllers lre interface-id actual usrserrs command on LRE port 2:
Switch# show controllers lre longreachethernet0/2 actual usrserrs0Switch#This is an example of output from the show controllers lre interface-id actual link command on LRE port 1:
Switch# show controllers lre longreachethernet0/1 actual linkDOWNSwitch#Related Commands
Displays the administrative settings of the LRE link on a specific switch LRE port.
show controllers lre admin
Use the show controllers lre interface-id admin privileged EXEC command to display the administrative settings of the Long-Reach Ethernet (LRE) link for a specific switch LRE port.
show controllers lre interface-id admin {dsrate | usrate}[ |{begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command displays the profile settings of an LRE switch port, even though they might not be active if a global profile is configured on the switch.
The upstream and downstream rates are defined by the profile on the switch LRE port. To change these rates, assign a different profile to the switch LRE port. For information about the LRE profiles, refer to the switch software configuration guide for this release.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre interface-id admin dsrate and show controllers lre interface-id admin usrate commands on LRE ports 1 and 2:
Switch# show controllers lre longreachethernet0/1 admin usrate18.750Switch# show controllers lre longreachethernet0/1 admin dsrate16.667Switch# show controllers lre longreachethernet0/2 admin usrate12.500Switch# show controllers lre longreachethernet0/2 admin dsrate12.500Related Commands
show controllers lre cpe identity
Displays the actual values of the LRE link on a specific switch LRE port.
Assigns a profile to all switch LRE ports.
Assigns a profile to a specific switch LRE port.
show controllers lre link monitor
Use the show controllers lre link monitor privileged EXEC command to display Long-Reach Ethernet (LRE) link monitor information.
show controllers lre monitor {errors | parameters | statistics} {local [interface-id] | remote [interface-id]} [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The link monitor process collects error information at 1-minute intervals for 15 minutes. After 15 minutes, the data is analyzed and stored before starting a new collection sequence. Up to 2 hours of link monitor data can be shown.
Local monitoring collects data from the LRE switch. Remote monitoring collects data from attached CPE device.
The Time heading in the show controllers lre link monitor errors command output shows the timestamp for the last collection sequence. The RS error count shows the cumulative error count from the last reading. Alignment errors, frame check sequence (FCS) errors, receive errors, and oversize errors are the Ethernet statistics collected either at the switch or at the CPE device.
The Time heading in the show controllers lre link monitor parameters command output shows the timestamp for the last collection sequence. The signal-to-noise (SNR) error counter, shown under the SNR Err heading, increments when the SNR value read from the chipset falls below the theoretical SNR added to the threshold.
The Time heading in the show controllers lre link monitor statistics command output shows the timestamp for the last collection sequence. The RS error count shows the cumulative error count from the last reading. This count is cleared only when the interface is shut down or when the clear controllers lre link monitor privileged EXEC command is entered. The RS error alarm shows the number of 1 minute intervals that had RS errors above the configured threshold.
Use the show controllers lre monitor {errors | parameters | statistics} privileged EXEC command without specifying a switch interface to display data for all interfaces.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output that shows how to display LRE RS and Ethernet errors for the LRE switch on LRE port 0/1:
Switch# show controllers lre link monitor errors local longreachethernet0/1LongReachEthernet0/1:LRE Link Health Monitor Error counts :Time RS Errors Align Errs FCS Errs Rcv Errs Oversz Errs-------- ---------- ---------- ---------- ---------- -----------14:42:28 41216 0 0 0 014:30:28 40960 0 0 0 014:15:28 40960 0 0 0 014:00:29 40704 0 0 0 013:45:28 40704 0 0 0 013:30:29 40448 0 0 0 013:15:29 40448 0 0 0 013:00:28 40448 0 0 0 0This is an exampleof output that shows Reed-Solomon and Ethernet errors for a CPE device connected to LRE port 0/1:
Switch# show controllers lre link monitor errors remote longreachethernet0/1LongReachEthernet0/1:LRE Link Health Monitor Error counts :Time RS Errors Align Errs FCS Errs Rcv Errs Oversz Errs-------- ---------- ---------- ---------- ---------- -----------14:42:28 6400 45835 0 0 014:30:28 6400 45835 0 0 014:15:28 6400 45835 0 0 014:00:29 6400 45835 0 0 013:45:28 6144 45835 0 0 013:30:29 6144 45835 0 0 013:15:29 6144 45835 0 0 013:00:28 6144 45835 0 0 0This is an example that shows how to display all LRE link monitor parameters for the attached CPE device:
Switch# show controllers lre link monitor parameters remoteLongReachEthernet0/1: LRE Link Health Monitor Parameters :SNR Tx Power SwAGCGainTime Samples Min Max Err Min Max Min Max-------- ------- --- --- --- ------- ------- ------- -------00:32:30 2 0 0 0 - 85.6 - 85.6 - 2.0 - 2.000:30:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.000:15:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.000:00:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.023:45:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.023:30:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.023:15:30 15 0 0 0 - 85.6 - 85.6 - 2.0 - 2.0<output truncated>This is an example that shows how to display all LRE link monitor statistics for the LRE controller:
Switch# show controllers lre link monitor statistics localLongReachEthernet0/1: LRE Link Health Monitor Stats :RS Errors Link Fail FreezeTime Samples Count Alarm Count Count-------- ------- --------------- ---------- ----------06:58:30 13 0 0 2 306:45:30 15 0 0 2 306:30:30 15 0 0 2 306:15:30 15 0 0 2 306:00:30 15 0 0 2 305:45:30 15 0 0 2 305:30:30 15 0 0 2 305:15:30 15 0 0 2 3Related Commands
show controllers lre log
Use the show controllers lre log user EXEC command without keywords to display the history of link, configuration, and timer events for a specific Long-Reach Ethernet (LRE) port or for all switch LRE ports. Use this command with keywords to display information about the LRE event log level.
show controllers lre log [level] [interface-id] [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show controllers lre log command without specifying a switch LRE port to display the events for all LRE switch ports. The time-stamped and sequentially tagged log entries can be helpful in confirming LRE link drops and configuration changes.
Use the show controllers lre log level command without specifying an LRE switch port to list the log level for each LRE port on the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre log command that shows events on an LRE interface:
Switch> show controllers lre log longreachethernet0/5LongReachEthernet0/5: Events Log: ==================================1d00h: [0]: State RESTART: Got event:Reset1d00h: [1]: State MODEZERO_APPLIED: Got event:Link Up1d00h: [2]: State MODEZERO_APPLIED: Got event:Link Down1d00h: [3]: State PROFILE_APPLIED: Got event:Link Up1d00h: [4]: State PROFILE_LINKUP: Got event:Link Down1d00h: [5]: State PROFILE_LINKUP: Got event:Link Up1d00h: [6]: State PROFILE_LINKUP: Got event:Link Down1d00h: [7]: State PROFILE_LINKUP: Got event:Link UpThis is an example of output from the show controllers lre log level command that displays the log level on an LRE port:
Switch> show controllers lre log level longreachethernet0/1Port Log Level================Lo0/1 Logging disabledRelated Commands
show controllers lre profile
Use the show controllers lre profile privileged EXEC command to display information about the Long-Reach Ethernet (LRE) profiles and sequences available on the switch.
show controllers lre profile {details | names} [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show controllers lre profile details privileged EXEC command to see the profiles and sequences running on each port. This command also shows global profiles and sequences.
For information about LRE profiles supported on your switch and about LRE links, refer to the "LRE Profiles" section in the "Configuring LRE" chapter of the switch software configuration guide for this release.
Note
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre profile details command on the
Catalyst 2950ST-8 LRE and 2950ST-24 LRE switches:Switch# show controllers lre profile detailsGlobal Profile:LRE-10-3Interface Configured Profile Running Profile Type--------- ------------------ --------------- ------Lo0/1 LRE-10-5 LRE-15 Port SequenceLo0/2 LRE-10-3 LRE-10-3 Global ProfileLo0/3 LRE-10-3 LRE-15 Port SequenceLo0/4 LRE-10-3 LRE-10-3 Global ProfileLo0/5 LRE-10-3 LRE-10-3 Global ProfileLo0/6 LRE-10-3 LRE-10-3 Global ProfileLo0/7 LRE-10-3 LRE-15 Global ProfileLo0/8 LRE-10-3 LRE-10-3 Global ProfileLo0/9 LRE-10-3 LRE-10-3 Global ProfileLo0/10 LRE-10-3 LRE-10-3 Global ProfileLo0/11 LRE-10-3 LRE-10-3 Global ProfileLo0/12 LRE-10-3 LRE-10-3 Global Profile<output truncated>This is an example of output from the show controllers lre profile details command on the
Catalyst 2950ST-24 LRE 997 switch:Switch# show controllers lre profile detailsGlobal Profile:LRE-6Interface Configured Profile Running Profile Type--------- ------------------ --------------- ------Lo0/1 LRE-6 LRE-6 Global ProfileLo0/2 LRE-6 LRE-6 Global ProfileLo0/3 LRE-6 LRE-6 Global ProfileLo0/4 LRE-6 LRE-6 Global ProfileLo0/5 LRE-6 LRE-6 Global ProfileLo0/6 LRE-6 LRE-6 Global ProfileLo0/7 LRE-6 LRE-6 Global ProfileLo0/8 LRE-6 LRE-6 Global ProfileLo0/9 LRE-6 LRE-6 Global ProfileLo0/10 LRE-6 LRE-6 Global ProfileLo0/11 LRE-6 LRE-6 Global ProfileLo0/12 LRE-6 LRE-6 Global Profile<output truncated>This is an example of output from the show controllers lre profile names command on the
Catalyst 2950ST-8 LRE and 2950ST-24 LRE switches:Switch# show controllers lre profile namesProfile Name Type Downstream UpstreamRate(Mbps) Rate(Mbps)------------ ----------------- ---------- ----------LRE-15 System-Configured 16.667 18.750LRE-10 System-Configured 12.500 12.500LRE-5 System-Configured 6.250 6.250LRE-998-15-4 System-Configured 16.667 4.688LRE-997-10-4 System-Configured 12.500 4.688LRE-15LL System-Configured 16.667 18.750LRE-10LL System-Configured 12.500 12.500LRE-5LL System-Configured 6.250 6.250LRE-10-5 System-Configured 12.500 6.250LRE-10-3 System-Configured 12.500 3.125LRE-10-1 System-Configured 12.500 1.563LRE-8 System-Configured 9.375 9.375LRE-7 System-Configured 8.333 8.333LRE-15-5 System-Configured 16.667 6.250LRE-15-3 System-Configured 16.667 3.125LRE-15-1 System-Configured 16.667 1.563LRE-4 System-Configured 4.167 4.167LRE-3 System-Configured 3.125 3.125LRE-2 System-Configured 2.083 2.083LRE-4-1LL System-Configured 4.167 1.563This is an example of output from the show controllers lre profile names command on the
Catalyst 2950ST-24 LRE 997 switch:Switch# show controllers lre profile namesProfile Name Type Downstream UpstreamRate(Mbps) Rate(Mbps)------------ ----------------- ---------- ----------LRE-12-9 System-Configured 12.500 9.375LRE-12-3 System-Configured 12.500 3.125LRE-9 System-Configured 9.375 9.375LRE-9-6 System-Configured 9.375 6.250LRE-9-4 System-Configured 9.375 4.688LRE-9-3 System-Configured 9.375 3.125LRE-6 System-Configured 6.250 6.250LRE-6-4 System-Configured 6.250 4.688LRE-6-3 System-Configured 6.250 3.125LRE-4 System-Configured 4.688 4.688Related Commands
show controllers lre sequence
Use the show controllers lre sequence privileged EXEC command to display the list of sequences, the profiles that are configured in that sequence, and the downstream and upstream rates of the corresponding profiles.
show controllers lre sequence [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show controllers lre sequence command to display the list of sequences supported in the switch. This command displays the system-defined and user-defined sequences.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers lre sequence command on the
Catalyst 2950ST-8 LRE and 2950ST-24 LRE switches:Switch# show controllers lre sequenceGlobal Sequence:LRE-SEQ-COMPLETE-REACHSequence:LRE-SEQ-COMPLETE-REACH Type:System-ConfiguredProfile Name Downstream UpstreamRate(Mbps) Rate(Mbps)-------------- ---------- ----------LRE-15 16.667 18.750LRE-10 12.500 12.500LRE-15-5 16.667 6.250LRE-10-5 12.500 6.250LRE-8 9.375 9.375LRE-7 8.333 8.333LRE-15-3 16.667 3.125LRE-10-3 12.500 3.125LRE-5 6.250 6.250LRE-15-1 16.667 1.563LRE-10-1 12.500 1.563LRE-4 4.167 4.167LRE-3 3.125 3.125LRE-2 2.083 2.083LRE-4-1 4.167 1.563Sequence:LRE-SEQ-DOWNSTREAM Type:System-ConfiguredProfile Name Downstream UpstreamRate(Mbps) Rate(Mbps)-------------- ---------- ----------LRE-15 16.667 18.750LRE-15-5 16.667 6.250LRE-15-3 16.667 3.125LRE-15-1 16.667 1.563LRE-10 12.500 12.500<output truncated>This is an example of output from the show controllers lre sequence command on the
Catalyst 2950ST-24 LRE 997 switch:Switch# show controllers lre sequenceGlobal Sequence:N/ASequence:LRE-SEQ-COMPLETE-REACH Type:System-ConfiguredProfile Name Downstream UpstreamRate(Mbps) Rate(Mbps)-------------- ---------- ----------LRE-12-9 12.500 9.375LRE-12-3 12.500 3.125LRE-9 9.375 9.375LRE-9-6 9.375 6.250LRE-9-4 9.375 4.688LRE-6 6.250 6.250LRE-6-4 6.250 4.688LRE-9-3 9.375 3.125LRE-4 4.688 4.688LRE-6-3 6.250 3.125LRE-4-3 4.688 3.125Sequence:LRE-SEQ-DOWNSTREAM Type:System-ConfiguredProfile Name Downstream UpstreamRate(Mbps) Rate(Mbps)-------------- ---------- ----------LRE-12-9 12.500 9.375LRE-12-3 12.500 3.125LRE-9 9.375 9.375LRE-9-6 9.375 6.250LRE-9-4 9.375 4.688<output truncated>Related Commands
Assigns a rate selection sequence to the entire switch.
Defines a user-defined sequence.
show controllers lre status
Use the show controllers lre status privileged EXEC command to display the Long-Reach Ethernet (LRE) link statistics and profile information on a switch LRE port, including link state, link duration, profile name, and data rates.
show controllers lre status {cpe | interleave | link | profile | psd | sequence [detail]} [interface-id]
[ | {begin | exclude | include} expression]This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
12.1(11)YJ
This command was introduced.
12.1(11)YJ4
The interleave keyword was added.
12.1(14)EA1
The cpe keyword was added.
Usage Guidelines
Use the show controllers lre status privileged EXEC command to display the status of all switch LRE ports.
Use the signal-to-noise ratio (SNR) and Reed-Solomon error information to measure the quality of the LRE link. The SNR represents the amount of increased received signal power (in decibels) relative to the noise power-level that the switch can tolerate without disconnecting from the CPE device. The higher the ratio, the more resilient is the link.
The Reed-Solomon errors show the number of errors detected and corrected in the data being received on and sent from the switch LRE ports. Reed-Solomon errors are the result of noise exceeding the noise margin. For short bursts of noise (such as motor power on or power surges), the interleaver prevents the loss of Ethernet data packets. The number of Reed-Solomon errors then exceeds the number of Ethernet CRC errors.
Note
The remote transmit power levels from the connected CPE devices might be different from each other, depending on how long the cable is between the switch and the CPE device. A longer cable typically causes the CPE device to send a higher signal to overcome the loss effects of distance.
The local receive-power rates actually displays the switch's adjustment to the incoming power level. These numbers might be different from LRE port to LRE port, as the length of the cables to the CPE devices might be different.
The interleaver columns display the interleaver block size for both directions of data. A higher interleaver setting is less susceptible to certain kinds of impairments but can introduce a very small amount of delay in the data path.
The PMD-S column refers to physical media dependent status and is provided as diagnostic information.
For more information about what can affect the LRE link and for the minimum required SNR ratios, refer to the "LRE Links and LRE Profiles" section in the "Configuring LRE" chapter of the switch software configuration guide for this release.
The sequence and sequence detail keywords display these status codes of profiles and sequences during rate selection:
•
•
•
•
•
You can adjust the noise level during convergence by using the margin interface configuration command.
Use the show controllers lre status cpe [interface-id] privileged EXEC command to display information about a specific CPE port or all the CPE ports.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output that shows link information for an LRE interface:
Switch# show controller lre status link longreachethernet0/2Port Link SNR RS Errs CPE-Tx Sw-AGC-Gain Interleaver PMD-S(dB) (dBm/Hz) (dB) Rx-Bsz Tx-Bsz------ ---- ---- ----------- -------- ----------- ------------- -----Lo0/2 UP 41 4829 - 57.7 - 7.6 16 16 0x04This is an example of output from the show controllers lre status profile command:
Switch# show controllers lre status profilePort Link Uptime Profile DSRate USRate Fail------ ---- -------- ------------------- ------ ------ ----Lo0/1 UP 2d23h LRE-10 12.500 12.500 0Lo0/2 UP 2d23h LRE-10 4.167 1.563 0Lo0/3 UP 2d23h LRE-10 4.167 1.563 0Lo0/4 UP 2d23h LRE-10 4.167 1.563 0Lo0/5 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/6 UP 2d23h LRE-10 4.167 1.563 0Lo0/7 UP 2d23h LRE-10 4.167 1.563 0Lo0/8 UP 2d23h LRE-10 4.167 1.563 0Lo0/9 UP 2d23h LRE-10 4.167 1.563 0Lo0/10 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/11 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/12 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/13 UP 2d23h LRE-10 12.500 12.500 0Lo0/14 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/15 UP 2d23h LRE-10 4.167 1.563 0Lo0/16 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/17 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/18 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/19 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/20 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/21 UP 2d23h LRE-10 4.167 1.563 0Lo0/22 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/23 DOWN 00:00:00 LRE-10 0.000 0.000 0Lo0/24 DOWN 00:00:00 LRE-10 0.000 0.000 0This is an example of output from the show controllers lre status psd command:
Switch# show controllers lre status psd------- Switch ------------ ----------- CPE -----------Port Link SNR RSErr TxPwr AGCgain SNR RSErr TxPwr AGCgain------ ---- --- ---------- ------ ------- --- ---------- ------ -------Lo0/1 UP 32 0 - 6.13 13.0 43 0 - 85.6 - 2.0Lo0/2 UP 32 0 - 6.13 15.1 42 0 - 85.9 - 2.0Lo0/3 UP 32 0 - 6.13 13.5 42 0 - 85.6 - 2.0Lo0/4 DOWN 10 0 - 5.85 63.9 0 0 0.0 0.0Lo0/5 DOWN 10 0 - 5.85 58.9 0 0 0.0 0.0Lo0/6 UP 33 0 - 6.13 15.1 42 0 - 85.9 - 2.0Lo0/7 DOWN 10 0 - 5.85 54.2 0 0 0.0 0.0Lo0/8 UP 33 0 - 6.13 14.6 42 0 - 85.9 - 2.5Lo0/9 DOWN 10 0 - 5.85 52.9 0 0 0.0 0.0Lo0/10 DOWN 10 0 - 5.85 61.5 0 0 0.0 0.0Lo0/11 UP 33 0 - 6.13 15.1 42 0 - 85.9 - 1.6Lo0/12 UP 33 0 - 6.13 15.1 42 0 - 85.9 - 2.5Lo0/13 UP 33 0 - 6.13 15.1 42 0 - 85.9 - 2.5Lo0/14 DOWN 10 268305 - 5.85 57.5 0 0 0.0 0.0Lo0/15 DOWN 10 0 - 5.85 50.7 0 0 0.0 0.0Lo0/16 UP 35 38 - 5.85 15.1 41 1238 - 85.9 - 6.4Lo0/17 DOWN 10 767128 - 5.85 61.8 0 0 0.0 0.0Lo0/18 DOWN 10 0 - 5.85 54.2 0 0 0.0 0.0Lo0/19 DOWN 10 0 - 5.85 51.5 0 0 0.0 0.0Lo0/20 DOWN 10 0 - 5.85 54.7 0 0 0.0 0.0Lo0/21 DOWN 10 0 - 5.85 67.8 0 0 0.0 0.0Lo0/22 DOWN 10 0 - 5.85 50.7 0 0 0.0 0.0Lo0/23 DOWN 10 0 - 5.85 66.5 0 0 0.0 0.0Lo0/24 DOWN 10 0 - 5.85 53.6 0 0 0.0 0.0This is an example of output from the show controllers lre status sequence command:
Switch# show controllers lre status sequencePort Sequence Status Profile----- ----------------------- -------------- ---------------Lo0/1 LRE-SEQ-DOWNSTREAM Converged LRE-15Lo0/2 N/A N/A N/ALo0/3 LRE-SEQ-SYM Converged LRE-15This is an example of output from the show controllers lre status interleave command:
Switch# show controllers lre status interleave longreachethernet0/2Port Link Profile Line Rate Block Size Delay(mSec)DS US DS US DS US------ ---- ---------------- -------------- ----------- -------------Lo0/2 UP LRE-6 6.250 6.250 16 16 20.316 20.316This is an example of output using the details keyword to obtain further information about the sequence:
Switch# show controllers lre status sequence detailLo0/1 :Sequence:LRE-SEQ-DOWNSTREAM Status:Converged Attempts:1Profile:LRE-15 Convergence Time: 00:01:54Rate-Selection:Enabled Locking:Not-ConfiguredDownstream Margin:2 Upstream Margin:0Lo0/2 :Sequence:N/A Status:N/A Attempts:0Profile:N/A Convergence Time: 00:00:00Rate-Selection:Disabled Locking:Not-ConfiguredDownstream Margin:0 Upstream Margin:0<output truncated>This is an example of output from the show controllers lre status cpe command:
Switch# show controllers lre status cpeLo0/1 : CPE-TYPE:Cisco575-LREPort Status Speed Duplex Protected---- ------------ ----- ------ ---------1 notconnected NA NA falseLo0/2 : CPE-TYPE:NAPort Status Speed Duplex Protected---- ------------ ----- ------ ---------1 NA NA NA NALo0/3 : CPE-TYPE:CISCO585-LREPort Status Speed Duplex Protected---- ------------ ----- ------ ---------1 notconnected auto NA false2 notconnected auto NA true3 notconnected auto NA false4 notconnected auto NA false5 connected 100 half falseRelated Commands
show controllers lre version
Use the show controllers lre version privileged EXEC command to display the version numbers of the various components (hardware, firmware, and patch software) that make up the Long-Reach Ethernet (LRE) switch interface.
show controllers lre version [interface-id] [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show controllers lre version command without specifying a switch LRE port to display the version numbers of all switch LRE interfaces.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output that shows the version information for an LRE interface:
Switch# show controllers lre version longreachethernet0/2Interface Hw Sw Patch-------- --- --- -----Lo0/2 32 B4 50Related Commands
show dot1x
Use the show dot1x privileged EXEC command to display 802.1X statistics, administrative status, and operational status for the switch or for the specified interface.
show dot1x [all] | [interface interface-id] | [statistics [interface interface-id]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.1(6)EA2
This command was first introduced.
12.1(14)EA1
The all keyword was added.
Usage Guidelines
If you do not specify an interface, global parameters and a summary appear. If you specify an interface, details for that interface appear.
If you specify the statistics keyword without the interface interface-id option, statistics appear for all interfaces. If you specify the statistics keyword with the interface interface-id option, statistics appear for the specified interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show dot1x and the show dot1x all privileged EXEC commands:
Switch# show dot1xSysauthcontrol = EnabledDot1x Protocol Version = 1Dot1x Oper Controlled Directions = BothDot1x Admin Controlled Directions = BothSwitch# show dot1x allDot1x Info for interface FastEthernet 0/3----------------------------------------------------Supplicant MAC 00d0.b71b.35deAuthSM State = CONNECTINGBendSM State = IDLEPortStatus = UNAUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0Dot1x Info for interface FastEthernet 0/7----------------------------------------------------PortStatus = UNAUTHORIZEDMaxReq = 2HostMode = MultiPort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x interface fastethernet 0/3 privileged EXEC command.
Switch# show dot1x interface fastethernet 0/3Supplicant MAC 00d0.b71b.35deAuthSM State = AUTHENTICATEDBendSM State = IDLEPortStatus = AUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x statistics interface fastethernet 0/3 command. Table 2-15 describes the fields in the display.
Switch# show dot1x statistics interface fastethernet 0/3PortStatistics Parameters for Dot1x--------------------------------------------TxReqId = 15 TxReq = 0 TxTotal = 15RxStart = 4 RxLogoff = 0 RxRespId = 1 RxResp = 1RxInvalid = 0 RxLenErr = 0 RxTotal= 6RxVersion = 1 LastRxSrcMac 00d0.b71b.35de
Related Commands
show env
Use the show env user EXEC command to display fan information for the switch.
show env {all | fan | power | rps} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.0(5.2)WC(1)
This command was first introduced.
12.1(12c)EA1
The fan and power keywords were added.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show env all command:
Switch> show env allFAN is OKInternal POWER supply is FAULTYRPS is presentRPS is supplying powerThis is an example of output from the show env fan command:
Switch# show env fanFAN 1 is FAULTYThis is an example of output from the show env power command:
Switch> show env powerInternal POWER supply is FAULTYThis is an example of output from the show env rps command:
Switch> sho env rpsRPS is supplying powershow errdisable recovery
Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.
show errdisable recovery [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show errdisable recovery command:
Switch> show errdisable recoveryErrDisable Reason Timer Status----------------- --------------udld Enabledbpduguard Enabledchannel-misconfig Enabledpagp-flap Enableddtp-flap Enabledlink-flap Enabledpsecure-violation Enabledgbic-invalid EnabledTimer interval:300 secondsInterfaces that will be enabled at the next timeout:Interface Errdisable reason Time left(sec)--------- ----------------- --------------Gi0/4 link-flap 279Related Commands
Configures the recover mechanism variables.
show interfaces trunk
Displays interface status or a list of interfaces in error-disabled state.
show etherchannel
Use the show etherchannel user EXEC command to display EtherChannel information for a channel.
show etherchannel [channel-group-number] {detail | load-balance | port | port-channel | summary} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.1(6)EA2
This command was first introduced. It replaced the show port group command.
12.1(14)EA1
The brief keyword was removed.
Usage Guidelines
If you do not specify a channel-group, all channel groups appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show etherchannel 1 detail command:
Switch> show etherchannel 1 detailGroup state = L2Ports: 1 Maxports = 8Port-channels: 1 Max Port-channels = 1Ports in the group:-------------------Port: Fa0/3------------Port state = Down Not-in-BndlChannel group = 1 Mode = Automatic-Sl Gcchange = 0Port-channel = null GC = 0x00000000 Pseudo port-channel = Po1Port index = 0 Load = 0x00Flags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode. P - Device learns on physical port.d - PAgP is down.Timers: H - Hello timer is running. Q - Quit timer is running.S - Switching timer is running. I - Interface timer is running.Local information:Hello Partner PAgP Learning GroupPort Flags State Timers Interval Count Priority Method IfindexFa0/3 dA U1/S1 1s 0 200 Any 0Age of the port in the current state: 10d:23h:07m:37sPort-channels in the group:----------------------Port-channel: Po1------------Age of the Port-channel = 03d:02h:22m:43sLogical slot/port = 1/0 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InuseThis is an example of output from the show etherchannel 1 summary command:
Switch> show etherchannel 1 summaryFlags: D - down P - in port-channelI - stand-alone s - suspendedR - Layer3 S - Layer2u - unsuitable for bundlingU - port-channel in used - default portGroup Port-channel Ports-----+------------+-----------------------------------------------------------1 Po1(SU) Fa0/6(Pd) Fa0/15(P)This is an example of output from the show etherchannel 1 port command:
Switch> show etherchannel 1 portPorts in the group:-------------------Port: Fa0/3------------Port state = Down Not-in-BndlChannel group = 1 Mode = Automatic-Sl Gcchange = 0Port-channel = null GC = 0x00000000 Pseudo port-channel = Po1Port index = 0 Load = 0x00Flags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode. P - Device learns on physical port.d - PAgP is down.Timers: H - Hello timer is running. Q - Quit timer is running.S - Switching timer is running. I - Interface timer is running.Local information:Hello Partner PAgP Learning GroupPort Flags State Timers Interval Count Priority Method IfindexFa0/3 dA U1/S1 1s 0 200 Any 0Age of the port in the current state: 10d:23h:13m:21sRelated Commands
Assigns an Ethernet interface to an EtherChannel group.
Accesses or creates the port channel.
show file
Use the show file privileged EXEC command to display a list of open file descriptors, file information, and file system information.
show file {descriptors | information {device:}filename | systems} [ | {begin | exclude |
include} expression]Syntax Description
Command Modes
Privileged EXEC
Command History
12.0(5.2)WC(1)
This command was first introduced.
12.1(6)EA2
The descriptors and information keywords were added.
Usage Guidelines
File descriptors are the internal representations of open files. You can use this command to see if another user has a file open.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show file descriptors command:
Switch# show file descriptorsFile Descriptors:FD Position Open PID Path0 187392 0001 2 tftp://temp/hampton/c2950g.a1 184320 030A 2 flash:c2950-i-m.aTable 2-16 describes the fields in the show file descriptors command output.
This is an example of output from the show file information nvram:startup-config command:
Switch# show file information nvram:startup-confignvram:startup-config:type is ascii textTable 2-17 lists the possible file types for the previous example.
This is an example of output from the show file systems command:
Switch# show file systemsFile Systems:Size(b) Free(b) Type Flags Prefixes* 7741440 433152 flash rw flash:7741440 433152 unknown rw zflash:32768 25316 nvram rw nvram:- - network rw tftp:- - opaque rw null:- - opaque rw system:- - opaque ro xmodem:- - opaque ro ymodem:- - network rw rcp:- - network rw ftp:For this example, Table 2-18 describes the fields in the show file systems command output. Table 2-19 lists the file system types. Table 2-20 lists the file system flags.
Table 2-20 File System Flags
ro
The file system is Read Only.
wo
The file system is Write Only
rw
The file system is Read/Write.
show interfaces
Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.
show interfaces [interface-id | vlan vlan-id] [accounting | capabilities [module {module-number]} | cpe [port port-id] | description | etherchannel | flowcontrol | media [interface-id] | pruning | stats | status [err-disabled] | switchport | trunk] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
12.0(5.2)WC(1)
This command was first introduced.
12.1(11)YJ
The cpe, port port-id, and media keywords were added.
12.1(12c)EA1
The capabilities keyword was added.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show interfaces accounting command:
Switch# show interfaces accountingVlan1Protocol Pkts In Chars In Pkts Out Chars OutIP 17950 2351279 3205 411175ARP 8626 552064 62 3720Interface Vlan5 is disabledFastEthernet0/1Protocol Pkts In Chars In Pkts Out Chars OutSpanning Tree 2956958 179218508 34383 2131700CDP 14301 5777240 14307 5722418VTP 0 0 1408 145908DTP 28592 1572560 0 0<output truncated>This is an example of output from the show interfaces capabilities command:
Switch# show interfaces fastethernet0/1 capabilitiesFastEthernet0/1Model: WS-C2950G-48-EIType: 10/100BaseTXSpeed: 10,100,autoDuplex: half,full,autoUDLD: yesTrunk encap. type: 802.1QTrunk mode: on,off,desirable,nonegotiateChannel: yesBroadcast suppression: percentage(0-100)Flowcontrol: rx-(none),tx-(none)Fast Start: yesCoS rewrite: yesToS rewrite: yesInline power: noSPAN: source/destinationPortSecure: YesDot1x: YesThis is an example of output from the show interfaces gigabitethernet0/1 command:
Switch# show interfaces gigabitethernet0/1FastEthernet0/1 is up, line protocol is downHardware is Fast Ethernet, address is 0005.7428.09c1 (bia 0005.7428.09c1)MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Auto-duplex, Auto-speedinput flow-control is off, output flow-control is offLast input never, output 4d21h, output hang neverLast clearing of "show interface" counters neverInput queue:0/75/0/0 (size/max/drops/flushes); Total output drops:0Queueing strategy:fifoOutput queue :0/40 (size/max)5 minute input rate 0 bits/sec, 0 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec1 packets input, 64 bytes, 0 no bufferReceived 0 broadcasts, 0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast, 0 pause input0 input packets with dribble condition detected1 packets output, 64 bytes, 0 underruns0 output errors, 0 collisions, 2 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped outThis is an example of output from the show interfaces gigabitethernet0/2 description command when the interface has been described as Connects to Marketing by using the description interface configuration command.
Switch# show interfaces gigabitethernet0/2 descriptionInterface Status Protocol DescriptionG10/2 up down Connects to MarketingThis is an example of output from the show interfaces fastethernet0/1 pruning command when pruning is enabled in the VTP domain:
Switch# show interfaces fastethernet0/1 pruningPort Vlans pruned for lack of request by neighborFa0/1 4,196Port Vlan traffic requested of neighborFa0/1 1,4This is an example of output from the show interfaces stats command:
Switch# show interfaces statsVlan1Switching path Pkts In Chars In Pkts Out Chars OutProcessor 3224706 223689126 3277307 280637322Route cache 0 0 0 0Total 3224706 223689126 3277307 280637322Interface Vlan5 is disabledFastEthernet0/1Switching path Pkts In Chars In Pkts Out Chars OutProcessor 3286423 231672787 179501 17431060Route cache 0 0 0 0Total 3286423 231672787 179501 17431060This is an example of output from the show interfaces status command. It displays the status of all interfaces.
Switch# show interfaces statusPort Name Status Vlan Duplex Speed TypeFa0/1 notconnect 1 auto auto 10/100BaseTXFa0/2 notconnect 1 auto auto 10/100BaseTXFa0/3 disabled 100 auto auto 10/100BaseTXFa0/4 connected trunk a-full a-100 10/100BaseTXFa0/5 notconnect 1 auto auto 10/100BaseTXFa0/6 connected trunk a-full a-100 10/100BaseTXFa0/7 notconnect 1 auto auto 10/100BaseTXFa0/8 connected 1 a-full a-100 10/100BaseTXFa0/9 disabled 1 auto auto 10/100BaseTXFa0/10 notconnect 5 auto 100 10/100BaseTXFa0/11 disabled 1 auto auto 10/100BaseTXFa0/12 disabled 1 auto auto 10/100BaseTXGi0/1 disabled 1 auto auto unknownGi0/2 notconnect 1 auto auto unknownPo1 notconnect 1 auto autoThis is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in error-disabled state.
switch# show interfaces fastethernet0/15 status err-disabledPort Name Status ReasonFa0/15 err-disabled psecure-violationThis is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:
Switch# show interfaces etherchannel----FastEthernet0/1:Port state = Up Mstr In-BndlChannel group = 1 Mode = On/FEC Gcchange = 0Port-channel = Po1 GC = 0x00010001 Pseudo port-channel = Po1Port index = 0 Load = 0x00Age of the port in the current state:00d:00h:06m:54s----Port-channel1:Age of the Port-channel = 09d:22h:45m:14sLogical slot/port = 1/0 Number of ports = 1GC = 0x00010001 HotStandBy port = nullPort state = Port-channel Ag-InusePorts in the Port-channel:Index Load Port EC state------+------+------+------------0 00 Fa0/1 onTime since last port bundled: 00d:00h:06m:54s Fa0/1This is an example of output from the show interfaces flowcontrol command. Table 2-21 lists the fields in this display.
Switch# show interfaces flowcontrolPort Send FlowControl Receive FlowControl RxPause TxPauseadmin oper admin oper----- -------- -------- -------- -------- ------- -------Fa0/1 Unsupp. Unsupp. off off 0 0Fa0/2 Unsupp. Unsupp. off off 0 0<output truncated>Gi0/1 desired off off off 0 0Gi0/2 desired off off off 0 0Po1 Unsupp. Unsupp. off off 0 0Po2 Unsupp. Unsupp. off off 0 0
This is an example of output from the show interfaces switchport command for a single interface. Table 2-22 describes the fields in the output.
Switch# show interfaces gigabitethernet0/1 switchportName: Gi0/1Switchport:EnabledAdministrative Mode:dynamic desirableOperational Mode:static accessAdministrative Trunking Encapsulation:negotiateNegotiation of Trunking:OnAccess Mode VLAN:1 (default)Trunking Native Mode VLAN:1 (default)Voice VLAN:noneAdministrative private-vlan host-association:noneAdministrative private-vlan mapping:noneOperational private-vlan:noneTrunking VLANs Enabled:ALLPruning VLANs Enabled:2-1001Capture Mode: DisabledCapture VLANs Allowed:ALLProtected:trueUnknown unicast blocked:disabledUnknown multicast blocked:disabledVoice VLAN:none (Inactive)Appliance trust:none
This is an example of output from the show interfaces trunk command:
Switch# show interfaces trunkPort Mode Encapsulation Status Native vlanFa0/4 on 802.1q trunking 1Fa0/6 on 802.1q trunking 1Port Vlans allowed on trunkFa0/4 1-4094Fa0/6 1-4094Port Vlans allowed and active in management domainFa0/4 1-2,51-52Fa0/6 1-2,51-52Port Vlans in spanning tree forwarding state and not prunedFa0/4 1Fa0/6 1-2,51-52This is an example of output from the show interfaces fastethernet0/1 trunk command. It displays trunking information for the interface.
Switch# show interfaces fastethernet0/1 trunkPort Mode Encapsulation Status Native vlanFa0/1 desirable 802.1q trunking 1Port Vlans allowed on trunkFa0/1 1-4094Port Vlans allowed and active in management domainFa0/1 1,4,196,306Port Vlans in spanning tree forwarding state and not prunedFa0/1 1,306This is an example of output from the show interfaces command for LRE port 5 on an LRE switch:
Switch# show interfaces longreachethernet0/5LongReachEthernet0/5 is up, line protocol is upHardware is Ethernet over LRE, address is 0006.2871.5902 (bia 0006.2871.5902)MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive not setHalf-duplex, Auto Speed (10), 100BaseTX/FXARP type: ARPA, ARP Timeout 04:00:00Last input 00:00:21, output 00:00:00, output hang neverLast clearing of "show interface" counters neverQueueing strategy: fifoOutput queue 0/40, 0 drops; input queue 0/75, 0 drops5 minute input rate 0 bits/sec, 0 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec8272 packets input, 852898 bytes, 0 no bufferReceived 1182 broadcasts, 0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 1182 multicast0 input packets with dribble condition detected61899 packets output, 17981033 bytes, 0 underruns0 output errors, 0 collisions, 1 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier0 output buffer failures, 0 output buffers swapped outThis is an example of output from the show interfaces command for all interfaces on a CPE device:
Switch# show interfaces longreachethernet0/2 cpePort Status Speed Duplex---- ------------ ----- ------1 notconnected auto NA2 notconnected auto NA3 notconnected auto NA4 notconnected auto NA5 connected 100 halfSwitch#This is an example of output from the show interfaces command for port 5 on a CPE device:
Switch# show interfaces longreachethernet0/2 cpe port 5Port Status Speed Duplex---- ------------ ----- ------5 connected 100 halfSwitch#This is an example of output from the show interfaces media command on an interface:
Switch# show interfaces gigabitethernet0/1 mediaPort Media-configured Active AttachedGi0/1 auto-select rj45 1000BaseSX-10/100/1000BaseTXSwitch#This is an example of output from the show interfaces media command:
Switch# show interfaces mediaPort Media-configured Active AttachedGi0/1 auto-select rj45 1000BaseSX-10/100/1000BaseTXGi0/2 prefer-sfp sfp 1000BaseSX-10/100/1000BaseTXRelated Commands
Configures a port as a static-access or dynamic-access port.
Isolates Layer 2 unicast, multicast, and broadcast traffic from other protected ports on the same switch.
switchport trunk pruning
Configures the VLAN pruning-eligible list for ports in trunking mode.
show interfaces counters
Use the show interfaces counters privileged EXEC command to display various counters for a specific interface or for all interfaces.
show interfaces [interface-id | vlan vlan-id] counters [broadcast | errors | multicast | trunk | unicast] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not enter any keywords, all counters for all interfaces are included.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show interfaces counters command. It displays all the counters for the switch. Table 2-23 describes the fields in the output.
Switch# show interfaces countersPort InOctets InUcastPkts InMcastPkts InBcastPktsGi0/1 23324617 10376 185709 126020Gi0/2 0 0 0 0Port OutOctets OutUcastPkts OutMcastPkts OutBcastPktsGi0/1 4990607 28079 21122 10Gi0/2 1621568 25337 0 0
This is an example of output from the show interfaces counters broadcast command. It displays the dropped broadcast traffic for all interfaces. The BcastSuppDiscards field displays the number of broadcast packets dropped on the interface because of broadcast suppression.
Switch# show interfaces counters broadcastPort BcastSuppDiscardsGi0/1 1Gi0/2 0This is an example of output from the show interfaces gigabitethernet0/1 counters broadcast command. It displays the dropped broadcast traffic for an specific interface.
Switch# show interfaces gigabitethernet0/1 counters broadcastPort BcastSuppDiscardsGi0/1 0This is an example of output from the show interfaces counters errors command. It displays the interface error counters for all interfaces. Table 2-24 describes the fields in the output.
Switch# show interfaces counters errorsPort Align-Err FCS-Err Xmit-Err Rcv-Err UnderSizeGi0/1 0 0 0 0 0Gi0/2 0 0 0 0 0Port Single-Col Multi-Col Late-Col Excess-Col Carri-Sen Runts GiantsGi0/1 0 0 0 0 0 0 0Gi0/2 0 0 0 0 0 0 0
Table 2-24 show interfaces counters errors Field Descriptions
Align-Err
Displays the total number of frames that are received on an interface and have alignment errors.
FCS-Err
Displays the total number of frames that are received on an interface, have a valid length (in bytes), but do not have the correct FCS1 values.
Xmit-Err
Displays the total number of frames that have errors during transmission.
Rcv-Err
Displays the total number of frames that are received on an interface and have errors.
Undersize
Displays the total number of frames received that are less than 64 bytes (including the FCS bits and excluding the frame header) and have either an FCS or an alignment error.
Single-col
Displays the total number of frames that are successfully sent on an interface after one collision occurs.
Multi-col
Displays the total number of frames that are successfully sent on an interface after more than one collision occurs.
Late-col
After a frame is sent, displays the number of times that a collision is detected on an interface after 512 bit times.
Excess-col
Display the number of frames that could not be sent on an interface because more than 16 collisions occurs.
Carri-Sen
Displays the number of occurrences in which the interface detects a false carrier when frames are not sent or received.
Runts
Displays the number of frames received on an interface that are smaller than 64 bytes and have an invalid FCS value.
Giants
Displays the number of frames that are larger than the maximum allowed frame size and have a valid FCS value.
1 FCS = frame check sequence
This is an example of output from the show interfaces counters multicast command. It displays the dropped multicast traffic for all interfaces. The McastSuppDiscards displays the number of multicast packets dropped on the interface because of multicast suppression.
Switch# show interfaces counters multicastPort McastSuppDiscardsGi0/1 0Gi0/2 0This is an example of output from the show interfaces counters trunk command. It displays the trunk counters for all interfaces. Table 2-25 describes the fields in the output.
Switch# show interfaces counters trunkPort TrunkFramesTx TrunkFramesRx WrongEncapGi0/1 0 0 0Gi0/2 0 0 0
This is an example of output from the show interfaces counters unicast command. It displays the dropped unicast traffic for all interfaces. The UcastSuppDiscards field displays the number of unicast packets dropped on the interface because of unicast suppression.
Switch# show interfaces counters unicastPort UcastSuppDiscardsGi0/1 6872Gi0/2 0Related Commands
Displays interface characteristics.
Configures broadcast, multicast, and unicast storm control for an interface.
show ip access-lists
Use the show ip access-lists privileged EXEC command to display IP access control lists (ACLs) configured on the switch.
show ip access-lists [name | number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip access-lists command:
Switch# show ip access-listsStandard IP access list testingaclpermit 10.10.10.2Standard IP access list wizard_1-1-1-2permit 1.1.1.2Extended IP access list 103permit tcp any any eq wwwExtended IP access list CMP-NAT-ACLDynamic Cluster-HSRP deny ip any anyDynamic Cluster-NAT permit ip any anypermit ip host 10.245.155.128 anypermit ip host 10.245.137.0 anypermit ip host 10.146.106.192 anypermit ip host 10.216.25.128 anypermit ip host 10.228.215.0 anypermit ip host 10.221.111.64 anypermit ip host 10.123.222.192 anypermit ip host 10.169.110.128 anypermit ip host 10.186.122.64 anyThis is an example of output from the show ip access-lists 103 command:
Switch# show ip access-lists 103Extended IP access list 103permit tcp any any eq wwwRelated Commands
Configures an extended IP ACL on the switch.
Configures a standard IP ACL on the switch.
Configures an IP ACL on the switch.
Displays ACLs configured on a switch.
show ip dhcp snooping
Use the show ip dhcp snooping privileged EXEC command to display the Dynamic Host Configuration Protocol (DHCP) snooping configuration.
show ip dhcp snooping
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Examples
This is an example of output from the show ip dhcp snooping command.
Switch# show ip dhcp snoopingSwitch DHCP snooping is enabledDHCP snooping is configured on following VLANs:40-42Insertion of option 82 is enabledInterface Trusted Rate limit (pps)------------------------ ------- ----------------FastEthernet0/5 yes unlimitedFastEthernet0/7 yes unlimitedFastEthernet0/3 no 5000FastEthernet0/5 yes unlimitedFastEthernet0/7 yes unlimitedFastEthernet0/5 yes unlimitedFastEthernet0/7 yes unlimitedRelated Commands
show ip dhcp snooping binding
Use the show ip dhcp snooping binding privileged EXEC command to display the Dynamic Host Configuration Protocol (DHCP) snooping binding table and configuration information for all interfaces on a switch.
show ip dhcp snooping binding [ip-address] [mac-address] [dynamic] [interface interface-id] [static] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the DHCP snooping binding entries for a switch.
Switch# show ip dhcp snooping bindingMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 286 dynamic 41 FastEthernet0/300:D0:B7:1B:35:DE 41.0.0.52 237 dynamic 41 FastEthernet0/300:00:00:00:00:01 40.0.0.46 286 dynamic 40 FastEthernet0/900:00:00:00:00:03 42.0.0.33 286 dynamic 42 FastEthernet0/900:00:00:00:00:02 41.0.0.53 286 dynamic 41 FastEthernet0/9This example shows how to display the DHCP snooping binding entries for a specific IP address.
Switch#show ip dhcp snooping binding 41.0.0.51MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 285 dynamic 41 FastEthernet0/3This example shows how to display the DHCP snooping binding entries for a specific MAC address.
Switch#show ip dhcp snooping binding 0030.94c2.ef35MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 279 dynamic 41 FastEthernet0/3This example shows how to display the DHCP snooping dynamic binding entries on a switch.
Switch#show ip dhcp snooping binding dynamicMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 286 dynamic 41 FastEthernet0/300:D0:B7:1B:35:DE 41.0.0.52 296 dynamic 41 FastEthernet0/300:00:00:00:00:01 40.0.0.46 46 dynamic 40 FastEthernet0/900:00:00:00:00:03 42.0.0.33 46 dynamic 42 FastEthernet0/900:00:00:00:00:02 41.0.0.53 46 dynamic 41 FastEthernet0/9This example shows how to display the DHCP snooping binding entries on Fast Ethernet interface 0/3.
Switch#show ip dhcp snooping binding interface f2/0/3MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 290 dynamic 41 FastEthernet0/300:D0:B7:1B:35:DE 41.0.0.52 270 dynamic 41 FastEthernet0/3This example shows how to display the DHCP snooping binding entries on VLAN 41.
Switch#show ip dhcp snooping binding vlan 41MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 274 dynamic 41 FastEthernet0/300:D0:B7:1B:35:DE 41.0.0.52 165 dynamic 41 FastEthernet0/300:00:00:00:00:02 41.0.0.53 65 dynamic 41 FastEthernet0/9Related Commands
show ip igmp profile
Use the show ip igmp profile privileged EXEC command to view all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
show ip igmp profile [profile number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
These are examples of output from the show ip igmp profile privileged EXEC command, with and without specifying a profile number. If no profile number is entered, the display includes all profiles configured on the switch.
Switch# show ip igmp profile 40IGMP Profile 40permitrange 233.1.1.1 233.255.255.255Switch# show ip igmp profileIGMP Profile 3range 230.9.9.0 230.9.9.0IGMP Profile 4permitrange 229.9.9.0 229.255.255.255Related Commands
show ip igmp snooping
Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN. Use the mrouter keyword to display the dynamically learned and manually configured multicast router ports.
show ip igmp snooping [group | mrouter | querier] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.0(5.2)WC(1)
This command was introduced.
12.1(19)EA1
The group and querier keywords were added.
Usage Guidelines
Use this command to display snooping characteristics for the switch or for a specific VLAN.
You can also use the show mac address-table multicast privileged EXEC command to display entries in the MAC address table for a VLAN that has IGMP snooping enabled.
When multicast VLAN registration (MVR) is enabled, use the show ip igmp snooping mrouter command to display MVR multicast router information and IGMP snooping information.
Use the group keyword to display the multicast groups, the compatibility mode, and the ports that are associated with each group.
Use the querier keyword to display the IGMP version and ports that are associated with a multicast IP address.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping command:
Switch> show ip igmp snoopingGlobal IGMP Snooping configuration:-----------------------------------IGMP snooping : EnabledIGMPv3 snooping (minimal) : EnabledReport suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYVlan 2:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLY<output truncated>This is an example of output from the show ip igmp snooping vlan 1 command:
Switch# show ip igmp snooping vlan 1Global IGMP Snooping configuration:-----------------------------------IGMP snooping : EnabledIGMPv3 snooping (minimal) : EnabledReport suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYThis is an example of output from the show ip igmp snooping mrouter vlan 1 command:
Note
Switch# show ip igmp snooping mrouter vlan 1Vlan ports---- -----1 Fa0/2(static), Fa0/3(dynamic)This is an example of output from the show ip igmp snooping group vlan 1 command:
Switch# show ip igmp snooping group vlan 1Vlan Group Version Port List---------------------------------------------------------1 229.2.3.4 v3 fa0/1 fa0/31 224.1.1.1 v2 fa0/8This is an example of output from the show ip igmp snooping querier command:
Switch> show ip igmp snooping querierVlan IP Address IGMP Version Port---------------------------------------------------1 172.20.50.11 v3 fa0/12 172.20.40.20 v2 RouterRelated Commands
Enables IGMP snooping.
Enables IGMP report suppression.
Enables IP multicast-source-only learning on the switch.
Enables and configures the aging time of the forwarding-table entries that the switch learns by using the source-only learning method.
ip igmp snooping vlan vlan-id
Enables IGMP snooping on the VLAN interface.
Configures IGMP Immediate-Leave processing.
Configures a Layer 2 port as a multicast router port.
Displays the Layer 2 multicast entries for a VLAN.
show lacp
Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information.
show lacp {channel-group-number {counters | internal | neighbor} | {counters | internal | neighbor | sys-id}} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show lacp command to display the active port-channel information. To display the nonactive information, enter the show lacp command with a group number.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show lacp counters command:
Switch> show lacp countersLACPDUs Marker Marker Response LACPDUsPort Sent Recv Sent Recv Sent Recv Pkts Err---------------------------------------------------------------------Channel group:1Fa0/5 19 10 0 0 0 0 0Fa0/6 14 6 0 0 0 0 0Fa0/7 8 7 0 0 0 0 0This is an example of output from the show lacp 1 internal command:
Switch> show lacp internalFlags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 1LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateFa0/5 SP indep 32768 0x1 0x1 0x4 0x7CFa0/6 SP indep 32768 0x1 0x1 0x5 0x7CFa0/7 SP down 32768 0x1 0x1 0x6 0xCThis is an example of output from the show lacp neighbor command:
Switch> show lacp neighborFlags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 1 neighborsPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsFa0/5 00000,0000.0000.0000 0x0 85947s SPLACP Partner Partner PartnerPort Priority Oper Key Port State0 0x0 0x0Partner's information:Partner Partner PartnerPort System ID Port Number Age FlagsFa0/6 00000,0000.0000.0000 0x0 86056s SPLACP Partner Partner PartnerPort Priority Oper Key Port State0 0x0 0x0Partner's information:Partner Partner PartnerPort System ID Port Number Age FlagsFa0/7 00010,0008.a343.b580 0x6 86032s SALACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x1 0x35This is an example of output from the show lacp sys-id command:
Switch> show lacp sys-id32765,0002.4b29.3a00Related Commands
show lre upgrade
show lre upgrade {binaries | status | version} [ | {begin | exclude | include} expression]
This command is available only on Catalyst 2950 LRE switches.
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
•
•
•
Files marked with an exclamation point (!) are version description files. A version description file is only for informational purposes and is not a candidate for upgrade. Version description files are used to determine whether or not a CPE device on an LRE link is running a supported LRE binary version.
•
•
•
•
•
•
•
During data transfer but before the upgrade completes, the status also shows the time in hours and minutes that the upgrade has been in progress and the number of attempts that were made.
•
•
•
Examples
This example shows output from the show lre upgrade binaries command:
Switch# show lre upgrade binariesPath containing LRE binaries is flash:/c2950lre-i6l2q4-mz.121-0.18.YJ/lre-bin;zflash:/c2950lre-i6l2q4-mz.121-0.18.YJ/lre-binLRE Binary: CISCO585-LRE_vdslsngl_51.00.00,Flash file name: CISCO585-LRE_vd slsngl_51.00.00.binLRE Binary: CISCO585-LRE_MC8051boot_01.03.00,Flash file name: CISCO585-LRE_MC 8051boot_01.03.00.bin!LRE Binary: CISCO585-LRE_MC8051boot_01.02.00,Flash file name: CISCO585-LRE_MC 8051boot_01.02.00.bin!LRE Binary: CISCO585-LRE_MC8051appl_01.03.00,Flash file name: CISCO585-LRE_MC 8051appl_01.03.00.bin!LRE Binary: CISCO585-LRE_MC8051appl_01.02.00,Flash file name: CISCO585-LRE_MC 8051appl_01.02.00.bin!LRE Binary: CISCO575-LRE_vdslsngl_50.00.00,Flash file name: CISCO575-LRE_vd slsngl_50.00.00.binLRE Binary: CISCO2950-LRE_vdsloctl_02.60.00,Flash file name: CISCO2950-LRE_v dsloctl_02.60.00.binLRE Binary: CISCO2950-LRE_vdsloctl_02.51.00,Flash file name: CISCO2950-LRE_v dsloctl_02.51.00.binLRE Binary: CISCO2950-LRE_vdsloctl_02.50.00,Flash file name: CISCO2950-LRE_v dsloctl_02.50.00.binThis example shows the status of an upgrade after it starts, but before the data transfer begins:
Switch# show lre upgrade statusLo0/1:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:PendingLo0/2:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:PendingLo0/3:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:PendingLo0/4:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:Pending<output truncated>This example shows the status of an upgrade after data transfer is in progress.
Switch# show lre upgrade statusLo0/1:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:Active10 HHMM:0000, Attempt:001Lo0/2:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:Active09 HHMM:0000, Attempt:001Lo0/3:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00Status:Pendingrmt curr:CISCO575-LRE_vdslsngl_52.00.00 new:CISCO575-LRE_vdslsngl_52.00.00Status:Active22 HHMM:0000, Attempt:001Lo0/4:lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 new:CISCO2950-LRE_vdsloctl_02.60.00<output truncated>This example shows output from the show lre upgrade version command:
Switch# show lre upgrade versionLo0/1:CPE:Family CISCO575-LRE, Model Cisco575-LRE , Rev A0lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 cfg:CISCO2950-LRE_vdsloctl_02.60.00rmt curr:CISCO575-LRE_vdslsngl_52.00.00 cfg:CISCO575-LRE_vdslsngl_52.00.00Lo0/2:CPE:Family CISCO575-LRE, Model Cisco575-LRE , Rev A0lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 cfg:CISCO2950-LRE_vdsloctl_02.60.00rmt curr:CISCO575-LRE_vdslsngl_52.00.00 cfg:CISCO575-LRE_vdslsngl_52.00.00Lo0/3:CPE:Family CISCO575-LRE, Model Cisco575-LRE , Rev A0lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 cfg:CISCO2950-LRE_vdsloctl_02.60.00rmt curr:CISCO575-LRE_vdslsngl_52.00.00 cfg:CISCO575-LRE_vdslsngl_52.00.00Lo0/4:CPE:Family CISCO575-LRE, Model Cisco575-LRE , Rev A0lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 cfg:CISCO2950-LRE_vdsloctl_02.60.00rmt curr:CISCO575-LRE_vdslsngl_52.00.00 cfg:CISCO575-LRE_vdslsngl_52.00.00Lo0/5:CPE:Family CISCO575-LRE, Model Cisco575-LRE , Rev A0lcl curr:CISCO2950-LRE_vdsloctl_02.60.00 cfg:CISCO2950-LRE_vdsloctl_02.60.00rmt curr:CISCO575-LRE_vdslsngl_52.00.00 cfg:CISCO575-LRE_vdslsngl_52.00.00<output truncated>Related Commands
Displays the upgrade status on all ports in the switch or the versions of binaries on local and remote ends on all ports.
show mac access-group
Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.
show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show mac access-group command without keywords to display MAC ACLs for all interfaces.
Use this command with the interface keyword to display ACLs for a specific interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac access-group command:
Switch> show mac access-groupInterface FastEthernet0/1:Inbound access-list is not setInterface FastEthernet0/2:Inbound access-list is not setInterface FastEthernet0/3:Inbound access-list is not setInterface FastEthernet0/4:Inbound access-list is not set...Interface FastEthernet0/47:Inbound access-list is not setInterface FastEthernet0/48:Inbound access-list is not setInterface GigabitEthernet0/1:Inbound access-list is not setInterface GigabitEthernet0/2:Inbound access-list is 101This is an example of output from the show mac access-group interface gigabitethernet 0/2 command:
Switch# show mac access-group interface gigabitethernet 0/2Interface GigabitEthernet0/2:Inbound access-list is 101Related Commands
show mac address-table
Use the show mac address-table user EXEC command to display the MAC address table.
show mac address-table [aging-time | count | dynamic | static] [address hw-addr]
[interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
The address and count keywords are available only in privileged EXEC mode.
Command History
Usage Guidelines
This command displays the MAC address table for the switch. Specific views can be defined by using the optional keywords and values. If more than one optional keyword is used, all of the conditions must be true in order for that entry to appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table command:
Switch> show mac address-tableDynamic Addresses Count: 9Secure Addresses (User-defined) Count: 0Static Addresses (User-defined) Count: 0System Self Addresses Count: 41Total MAC addresses: 50Non-static Address Table:Destination Address Address Type VLAN Destination Port------------------- ------------ ---- --------------------0010.0de0.e289 Dynamic 1 FastEthernet0/10010.7b00.1540 Dynamic 2 FastEthernet0/50010.7b00.1545 Dynamic 2 FastEthernet0/50060.5cf4.0076 Dynamic 1 FastEthernet0/10060.5cf4.0077 Dynamic 1 FastEthernet0/10060.5cf4.1315 Dynamic 1 FastEthernet0/10060.70cb.f301 Dynamic 1 FastEthernet0/100e0.1e42.9978 Dynamic 1 FastEthernet0/100e0.1e9f.3900 Dynamic 1 FastEthernet0/1This is an example of output from the show mac address-table static command:
Switch> show mac address-table staticvlan mac address type ports-----+---------------+--------+---------All 0180.c200.0003 STATIC CPUAll 0180.c200.0004 STATIC CPUAll 0180.c200.0005 STATIC CPU4 0001.0002.0004 STATIC Drop6 0001.0002.0007 STATIC DropThis is an example of output from the show mac address-table static interface fastethernet0/2
vlan 1 command:Switch> show mac address-table static interface fastethernet0/2 vlan 1vlan mac address type ports-----+---------------+--------+---------1 abcd.2345.0099 STATIC Fa0/21 abcd.0070.0070 STATIC Fa0/21 abcd.2345.0099 STATIC Fa0/21 abcd.2345.0099 STATIC Fa0/21 00d0.d333.7f34 STATIC Fa0/21 abcd.2345.0099 STATIC Fa0/21 0005.6667.0007 STATIC Fa0/2This is an example of output from the show mac address-table count vlan 1 command:
Switch# show mac address-table count vlan 1MAC Entries for Vlan 1 :Dynamic Address Count: 1Static Address (User-defined) Count: 41Total MAC Addresses In Use:42Remaining MAC addresses: 8150This is an example of output from the show mac address-table aging-time command:
Switch> show mac address-table aging-timeVlan Aging Time---- ----------1 4502 3003 600300 450301 450This is an example of output from the show mac address-table aging-time vlan 1 command:
Switch> show mac address-table aging-time vlan 1Vlan Aging Time---- ----------1 450Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
show mac address-table multicast
Use the show mac address-table multicast user EXEC command to display the Layer 2 multicast entries for the switch or for the VLAN.
show mac address-table multicast [vlan vlan-id] [count] [igmp-snooping | user] [ | {begin | exclude | include} expression]
Note
Syntax Description
Defaults
This command has no default setting.
Command Modes
User EXEC
Command History
12.0(5.2)WC(1)
This command was first introduced.
12.1(11)EA1
The show mac-address-table multicast command was replaced by the show mac address-table multicast command.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table multicast vlan 1 command:
Switch# show mac address-table multicast vlan 1Vlan Mac Address Type Ports---- ----------- ---- -----1 0100.5e00.0128 IGMP Fa0/111 0100.5e01.1111 USER Fa0/5, Fa0/6, Fa0/7, Fa0/11This is an example of output from the show mac address-table multicast count command:
Switch# show mac address-table multicast countMulticast Mac Entries for all vlans: 10This is an example of output from the show mac address-table multicast vlan 1 count command:
Switch# show mac address-table multicast vlan 1 countMulticast Mac Entries for vlan 1: 2This is an example of output from the show mac address-table multicast vlan 1 user command:
Switch# show mac address-table multicast vlan 1 uservlan mac address type ports-----+----------------+-------+---------------------1 0100.5e02.0203 user Fa0/1,Fa0/2,Fa0/4This is an example of output from the show mac address-table multicast vlan 1 igmp-snooping count command:
Switch# show mac address-table multicast vlan 1 igmp-snooping countNumber of igmp-snooping programmed entries : 1show mac address-table notification
Use the show mac address-table notification user EXEC command to display parameters for the MAC notification feature.
show mac address-table notification [interface interface-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Defaults
This command has no default setting.
Command Modes
User EXEC
Command History
12.1(6)EA2
This command was first introduced.
12.1(11)EA1
The show mac-address-table notification command was replaced by the show mac address-table notification command.
Usage Guidelines
Use the show mac address-table notification command without keywords to display parameters for all interfaces.
Use this command with the interface keyword to display parameters for a specific interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table notification command:
Switch> show mac address-table notificationMAC Notification Feature is Disabled on the switchRelated Commands
clear mac address-table notification
Clears the MAC address notification global counters.
Enables the MAC notification feature.
Enables MAC-notification traps on a port.
show mls masks
Use the show mls masks user EXEC command to display the details of the access control parameters (ACPs) used for quality of service (QoS) and security access control lists (ACLs).
show mls masks [qos | security] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Note
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show mls masks command without keywords to display all ACPs configured on the switch.
Use this command with the qos keyword to display the ACPs used for QoS ACLs.
Use this command with the security keyword to display the ACPs used for security ACLs.
Note
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mls masks command:
Switch> show mls masksMask1Type : qosFields : ip-sa(0.0.0.255), ip-da(host), dest-port, ip-dscpPolicymap: pmap1Interfaces: Fa0/9, Gi0/1Policymap: pmap2Interfaces: Fa0/1, Fa0/5, Fa0/13Mask2Type : securityFields : mac-sa (host), ethertype, ip-dscpAccess-group: 3Interfaces: Fa0/2, Fa0/6Access-group: macag1Interfaces: Fa0/16In this example, Mask 1 is a QoS ACP consisting an IP source address (with wildcard bits 0.0.0.255), an IP destination address, and Layer 4 destination port fields. This ACP is used by the QoS policy maps pmap1 and pmap2.
Mask 2 is a security ACP consisting of a MAC source address and ethertype fields. This ACP is used by the MAC security access groups 3 and macag1.
Related Commands
show mls qos interface
Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the interface level.
show mls qos interface [interface-id] [policers] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
User EXEC
Command History
Usage Guidelines
Though visible in the command-line help string, the policers keyword is available only when your switch is running the EI.
Use the show mls qos interface command without keywords to display parameters for all interfaces.
Use the show mls qos interface interface-id command to display the parameters for a specific interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mls qos interface command when the Cisco IP phone is a trusted device:
Switch> show mls qos interface fastethernet0/1FastEthernet0/1trust state:trust costrust mode:trust cosCOS override:disdefault COS:0pass-through:nonetrust device:cisco-phoneThis is an example of output from the show mls qos interface command when pass-through mode is configured on an interface:
Switch> show mls qos interface fastethernet0/2FastEthernet0/2trust state:not trustedtrust mode:not trustedCOS override:disdefault COS:0pass-through:dscpThis is an example of output from the show mls qos interface-id policers command:
Switch> show mls qos interface fastethernet0/1 policersFastEthernet0/1policymap=pmtimerintype=Single rate=1000000, burst=4096type=Single rate=2000000, burst=4096Related Commands
show mls qos maps
Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. Maps are used to generate an internal Differentiated Services Code Point (DSCP) value, which represents the priority of the traffic.
show mls qos maps [cos-dscp | dscp-cos] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show mls qos maps command without keywords to display all maps.
Use this command with the cos-dscp keyword to display the CoS-to-DSCP map.
Use this command with the dscp-cos keyword to display the DSCP-to-CoS map.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mls qos maps cos-dscp command:
Switch> show mls qos maps cos-dscpCos-dscp map:cos: 0 1 2 3 4 5 6 7--------------------------------dscp: 8 8 8 8 24 32 56 56This is an example of output from the show mls qos maps dscp-cos command:
Switch> show mls qos maps dscp-cosDscp-cos map:dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56-----------------------------------------------cos: 0 1 1 1 2 2 3 3 4 4 5 6 7This is an example of output from the show mls qos maps command:
Switch> show mls qos mapsDscp-cos map:dscp: 0 8 10 16 18 24 26 32 34 40 46 48 56-----------------------------------------------cos: 0 1 1 2 2 3 7 4 4 5 5 7 7Cos-dscp map:cos: 0 1 2 3 4 5 6 7--------------------------------dscp: 0 8 16 24 32 40 48 56Related Commands
show monitor
Use the show monitor user EXEC command to display Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) session information.
show monitor [session {session_number | all | local | range | remote}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.1(6)EA1
This command was first introduced.
12.1(11)EA1
The all, local, and remote keywords were added.
12.1(13)EA1
The range keyword was added.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output for the show monitor privileged EXEC command for RSPAN source session 1:
Switch# show monitor session 1Session 1---------Type: Remote Source SessionSource Ports:RX Only: Fa0/3TX Only: NoneBoth: NoneSource VLANs:RX Only: NoneTX Only: NoneBoth: NoneSource RSPAN VLAN: NoneDestination Ports: NoneEncapsulation: NativeReflector Port: Fa0/4Filter VLANs: NoneDest RSPAN VLAN: 901Related Commands
Enables SPAN and RSPAN monitoring on a port and configures a port as a source or destination port.
show mvr
Use the show mvr privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).
show mvr [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr command:
Switch# show mvrMVR Running: TRUEMVR multicast vlan: 1MVR Max Multicast Groups: 256MVR Current multicast groups: 256MVR Global query response time: 5 (tenths of sec)MVR Mode: compatibleIn the previous example, the maximum number of multicast groups is 256. The MVR mode is either compatible (for interoperability with Catalyst 2900 XL and Catalyst 3500 XL switches) or dynamic (where operation is consistent with Internet Group Management Protocol [IGMP] snooping operation, and dynamic MVR membership on source ports is supported).
Related Commands
show mvr interface
Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports. Use the command with keywords to display MVR parameters for a specific receiver port.
show mvr interface [interface-id [members [vlan vlan-id]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If the entered port identification is a non-MVR port or a source port, the command returns an error message. For receiver ports, it displays the port type, per port status, and Immediate-Leave setting.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr interface command:
Switch# show mvr interfacePort Type Status Immediate Leave---- ---- ------- ---------------Gi0/1 SOURCE ACTIVE/UP DISABLEDGi0/2 RECEIVER ACTIVE/DOWN DISABLEDIn the previous example, Status is defined as:
•
•
•
This is an example of output from the show mvr interface gigabitethernet0/2 command:
Switch# show mvr interface gigabitethernet0/2Type: RECEIVER Status: ACTIVE Immediate Leave: DISABLEDThis is an example of output from the show mvr interface fastethernet0/6 member command:
Switch# show mvr interface fastethernet0/6 member239.255.0.0 DYNAMIC ACTIVE239.255.0.1 DYNAMIC ACTIVE239.255.0.2 DYNAMIC ACTIVE239.255.0.3 DYNAMIC ACTIVE239.255.0.4 DYNAMIC ACTIVE239.255.0.5 DYNAMIC ACTIVE239.255.0.6 DYNAMIC ACTIVE239.255.0.7 DYNAMIC ACTIVE239.255.0.8 DYNAMIC ACTIVE239.255.0.9 DYNAMIC ACTIVERelated Commands
show mvr members
Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group.
show mvr members [ip-address] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The show mvr members command applies to receiver and source ports. For MVR compatible mode, all source ports are members of all multicast groups.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr members command:
Switch# show mvr membersMVR Group IP Status Members------------ ------ -------239.255.0.1 ACTIVE Gi0/1(d), Gi0/2(s)239.255.0.2 INACTIVE None239.255.0.3 INACTIVE None239.255.0.4 INACTIVE None239.255.0.5 INACTIVE None239.255.0.6 INACTIVE None239.255.0.7 INACTIVE None239.255.0.8 INACTIVE None239.255.0.9 INACTIVE None239.255.0.10 INACTIVE None<output truncated>239.255.0.255 INACTIVE None239.255.1.0 INACTIVE NoneThis is an example of output from the show mvr members 239.255.0.2 command. It shows how to view the members of the IP multicast group 239.255.0.2.
Switch# show mvr member 239.255.0.2239.255.0.2 ACTIVE Gi0/1(d), Gi0/2(d)Related Commands
show pagp
Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information.
show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show pagp command to display the active port channel information. To display the nonactive information, enter the show pagp command with a group number.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show pagp 1 counters command:
Switch> show pagp 1 countersInformation FlushPort Sent Recv Sent Recv--------------------------------------Channel group: 1Gi0/1 45 42 0 0Gi0/2 45 41 0 0This is an example of output from the show pagp 1 internal command:
Switch> show pagp 1 internalFlags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode.Timers: H - Hello timer is running. Q - Quit timer is running.S - Switching timer is running. I - Interface timer is running.Channel group 1Hello Partner PAgP Learning GroupPort Flags State Timers Interval Count Priority Method IfindexGi0/1 SC U6/S7 H 30s 1 128 Any 16Gi0/2 SC U6/S7 H 30s 1 128 Any 16This is an example of output from the show pagp 1 neighbor command:
Switch> show pagp 1 neighborFlags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode. P - Device learns on physical port.Channel group 1 neighborsPartner Partner Partner Partner GroupPort Name Device ID Port Age Flags Cap.Gi0/1 device-p2 0002.4b29.4600 Gi0/1 9s SC 10001Gi0/2 device-p2 0002.4b29.4600 Gi0/2 24s SC 10001Related Commands
Clears PAgP channel-group information.
Sets the source-address learning method of incoming packets received from an EtherChannel port.
show parser macro
Use the show parser macro user EXEC command to display the parameters for all configured macros or for one macro on the switch.
show parser macro [{brief | description [interface interface-id] | name macro-name}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show parser macro command:
Switch# show parser macroTotal number of macros = 2--------------------------------------------------------------Macro name : standard-switch10Macro type : customizablemacro description standard-switch10# Trust QoS settings on VOIP packetsauto qos voip trust# Allow port channels to be automatically formedchannel-protocol pagp--------------------------------------------------------------Macro name : testmMacro type : customizablemacro description this is test macrospeed 100--------------------------------------------------------------This is an example of output from the show parser macro name command:
Switch# show parser macro name standard-switch10Macro name : standard-switch10Macro type : customizablemacro description standard-switch10# Trust QoS settings on VOIP packetsauto qos voip trust# Allow port channels to be automatically formedchannel-protocol pagpThis is an example of output from the show parser brief command:
Switch# show parser macro briefstandard-switch10testmThis is an example of output from the show parser description command:
Switch# show parser macro descriptionInterface Macro Description--------------------------------------------------------------Fa0/9 standard-switch10Fa0/10 this is test macro--------------------------------------------------------------This is an example of output from the show parser description interface command:
Switch# show parser macro description interface fa0/10Interface Macro Description--------------------------------------------------------------Fa0/10 this is test macro--------------------------------------------------------------Related Commands
Applies a macro on an interface or applies and traces a macro on an interface.
Adds a description about the macros that are applied to an interface.
Creates a macro.
show policy-map
Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming traffic. Policy maps can include policers that specify the bandwidth limitations and the action to take if the limits are exceeded.
show policy-map [policy-map-name [class class-name]] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show policy-map command without keywords to display all policy maps configured on the switch.
Note
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show policy-map command:
Switch> show policy-mapPolicy Map bumbumDescription: this is a description.Policy Map wizard_policy3class wizard_1-1-1-2set ip dscp 34Policy Map testPolicy Map policytestclass classtestset ip dscp 20police 10000000 8192 exceed-action dropThis is an example of output from the show policy-map pmtimerin command:
Switch> show policy-map pmtimerinPolicy Map pmtimerinclass cmtimerinset ip dscp 10police 1000000 4096 exceed-action dropclass ctimerin1police 2000000 4096 exceed-action dropThis is an example of output from the show policy-map policytest class classtest command:
Switch> show policy-map policytest class classtestset ip dscp 20police 10000000 8192 exceed-action dropRelated Commands
Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.
show port-security
Use the show port-security privileged EXEC command to display the port security settings defined for an interface or for the switch.
show port-security [interface interface-id] [address] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.1(6)EA2
This command was first introduced. It replaced the show port security and show mac-address-table secure commands.
Usage Guidelines
If you enter this command without keywords, the output includes the administrative and the operational status of all secure ports on the switch.
If you enter an interface-id, the show port-security command displays port security settings for the interface.
If you enter the address keyword, the show port-security address command displays the secure MAC addresses for all interfaces and the aging information for each secure address.
If you enter an interface-id and the address keyword, the show port-security interface interface-id address command displays all the MAC addresses for the interface with aging information for each secure address. You can also use this command to display all the MAC addresses for an interface even if you have not enabled port security on it.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show port-security command:
Switch# show port-securitySecure Port MaxSecureAddr CurrentAddr SecurityViolation SecurityAction(Count) (Count) (Count)-------------------------------------------------------------------------------Fa0/1 11 11 0 ShutdownFa0/5 15 5 0 RestrictFa0/11 5 4 0 Protect-------------------------------------------------------------------------------Total Addresses in System :21Max Addresses limit in System :1024This is an example of output from the show port-security interface fastethernet0/2 command:
Switch# show port-security interface fastethernet0/2Port Security :EnabledPort status :SecureUpViolation mode :ShutdownMaximum MAC Addresses :11Total MAC Addresses :11Configured MAC Addresses :3Aging time :20 minsAging type :InactivitySecureStatic address aging :EnabledSecurity Violation count :0This is an example of output from the show port-security address command:
Switch# show port-security addressSecure Mac Address Table-------------------------------------------------------------------Vlan Mac Address Type Ports Remaining Age(mins)---- ----------- ---- ----- -------------1 0001.0001.0001 SecureDynamic Fa0/1 15 (I)1 0001.0001.0002 SecureDynamic Fa0/1 15 (I)1 0001.0001.1111 SecureConfigured Fa0/1 16 (I)1 0001.0001.1112 SecureConfigured Fa0/1 -1 0001.0001.1113 SecureConfigured Fa0/1 -1 0005.0005.0001 SecureConfigured Fa0/5 231 0005.0005.0002 SecureConfigured Fa0/5 231 0005.0005.0003 SecureConfigured Fa0/5 231 0011.0011.0001 SecureConfigured Fa0/11 25 (I)1 0011.0011.0002 SecureConfigured Fa0/11 25 (I)-------------------------------------------------------------------Total Addresses in System :10Max Addresses limit in System :1024This is an example of output from the show port-security interface fastethernet0/5 address command:
Switch# show port-security interface fastethernet0/5 addressSecure Mac Address Table-------------------------------------------------------------------Vlan Mac Address Type Ports Remaining Age(mins)---- ----------- ---- ----- -------------1 0005.0005.0001 SecureConfigured Fa0/5 19 (I)1 0005.0005.0002 SecureConfigured Fa0/5 19 (I)1 0005.0005.0003 SecureConfigured Fa0/5 19 (I)-------------------------------------------------------------------Total Addresses:3Related Commands
Enables port security on a port, restricts the use of the port to a user-defined group of stations, and configures secure MAC addresses.
show rps
Use the show rps privileged EXEC command to display the status of the Cisco Redundant Power System (RPS).
show rps [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show rps command. Table 2-26 describes the possible output.
Switch# show rpsGREEN
show running-config vlan
Use the show running-config vlan privileged EXEC command to display all or a range of VLAN-related configurations on the switch.
show running-config vlan [vlan-ids] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show running-config vlan command:
Switch# show running-config vlan 900-2005Building configuration...Current configuration:!vlan 907!vlan 920!vlan 1025!vlan 2000!vlan 2001endRelated Commands
show setup express
Use the show setup express privileged EXEC command to show if Express Setup mode is active on the switch.
show setup express
This command is available only on Catalyst 2950 switches.
Syntax Description
This command has no arguments or keywords.
Defaults
No default is defined.
Command Modes
Privileged EXEC
Command History
Examples
This is an example of output from the show setup express command:
Switch# show setup expressexpress setup mode is activeRelated Commands
Exits Express Setup mode without saving the configuration.
Enables Express Setup mode on the switch.
show spanning-tree
Use the show spanning-tree user EXEC command to display spanning-tree state information.
show spanning-tree [active [detail] | backbonefast | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary [totals] | uplinkfast | vlan vlan-id] [ | {begin | exclude | include} expression]
show spanning-tree vlan vlan-id [active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | root | summary] [ | {begin | exclude | include} expression
show spanning-tree {vlan vlan-id} bridge [address | detail | forward-time | hello-time | id | max-age | priority [system-id] | protocol] [ | {begin | exclude | include} expression]
show spanning-tree {vlan vlan-id} root [address | cost | detail | forward-time | hello-time | id | max-age | port | priority [system-id] [ | {begin | exclude | include} expression]
show spanning-tree interface interface-id [active [detail] | cost | detail [active] | inconsistency | portfast | priority | rootcost | state] [ | {begin | exclude | include} expression]
show spanning-tree mst [configuration | instance-id] [detail | interface interface-id [detail]]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC; indicated keywords available only in privileged EXEC mode
Command History
Usage Guidelines
If the vlan-id variable is omitted, the command applies to the spanning-tree instance for all VLANs.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show spanning-tree active command:
Switch# show spanning-tree activeVLAN0001Spanning tree enabled protocol ieeeRoot ID Priority 20481Address 0008.217a.5800Cost 38Port 1 (FastEthernet0/1)Hello Time 2 sec Max Age 20 sec Forward Delay 15 secBridge ID Priority 32769 (priority 32768 sys-id-ext 1)Address 0008.205e.6600Hello Time 2 sec Max Age 20 sec Forward Delay 15 secAging Time 300Interface Role Sts Cost Prio.Nbr Type---------------- ---- --- --------- -------- --------------------------------Fa0/1 Root FWD 19 128.1 P2pThis is an example of output from the show spanning-tree detail command:
Switch> show spanning-tree detailVLAN0001 is executing the ieee compatible Spanning Tree protocolBridge Identifier has priority 32768, sysid 1, address 0008.205e.6600Configured hello time 2, max age 20, forward delay 15Current root has priority 20481, address 0008.217a.5800Root port is 1 (FastEthernet0/1), cost of root path is 38Topology change flag not set, detected flag not setNumber of topology changes 0 last change occurred 3w0d agoTimes: hold 1, topology change 35, notification 2hello 2, max age 20, forward delay 15Timers: hello 0, topology change 0, notification 0, aging 300Port 1 (FastEthernet0/1) of VLAN0001 is forwardingPort path cost 19, Port priority 128, Port Identifier 128.1.Designated root has priority 20481, address 0008.217a.5800Designated bridge has priority 65535, address 0050.2aed.5c80Designated port id is 128.26, designated path cost 19Timers: message age 3, forward delay 0, hold 0Number of transitions to forwarding state: 1Link type is point-to-point by defaultBPDU: sent 0, received 947349<output truncated>This is an example of output from the show spanning-tree interface fastethernet 0/1 command:
Switch> show spanning-tree interface fastethernet0/1Vlan Role Sts Cost Prio.Nbr Type---------------- ---- --- --------- -------- --------------------------------VLAN0001 Root FWD 19 128.1 P2pThis is an example of output from the show spanning-tree summary command:
Switch> show spanning-tree summarySwitch is in pvst modeRoot bridge for: noneEtherChannel misconfiguration guard is enabledExtended system ID is enabledPortfast is disabled by defaultPortFast BPDU Guard is disabled by defaultPortfast BPDU Filter is disabled by defaultLoopguard is disabled by defaultUplinkFast is disabledBackboneFast is disabledPathcost method used is shortName Blocking Listening Learning Forwarding STP Active---------------------- -------- --------- -------- ---------- ----------VLAN0001 0 0 0 1 1---------------------- -------- --------- -------- ---------- ----------1 vlan 0 0 0 1 1<output truncated>This is an example of output from the show spanning-tree mst configuration command:
Switch# show spanning-tree mst configurationName [region1]Revision 1Instance Vlans mapped-------- ---------------------------------------------------------------------0 101-40941 1-100-------------------------------------------------------------------------------This is an example of output from the show spanning-tree mst interface fastethernet0/1 command:
Switch# show spanning-tree mst interface fastethernet0/1FastEthernet0/1 of MST00 is designated forwardingEdge port:no (default) port guard :none (default)Link type:point-to-point (auto) bpdu filter:disable (default)Boundary :internal bpdu guard :disable (default)Bpdus sent 84122, received 83933Instance Role Sts Cost Prio.Nbr Vlans mapped-------- ---- --- --------- -------- -------------------------------0 Desg FWD 200000 128.1 101-40941 Root FWD 200000 128.1 1-100This is an example of output from the show spanning-tree mst 0 command:
Switch# show spanning-tree mst 0###### MST00 vlans mapped: 101-4094Bridge address 0005.7428.1f40 priority 32768 (32768 sysid 0)Root address 0001.42e2.cdc6 priority 32768 (32768 sysid 0)port Gi0/2 path cost 200038IST master this switchOperational hello time 2, forward delay 15, max age 20Configured hello time 2, forward delay 15, max age 20, max hops 20Interface Role Sts Cost Prio.Nbr Type---------------- ---- --- --------- -------- --------------------------------Gi/1 Desg FWD 200000 128.1 P2pGi0/2 Root FWD 200000 128.2 P2p Bound(PVST)Related Commands
show storm-control
Use the show storm-control user EXEC command to display the packet-storm control information. This command also displays the action that the switch takes when the thresholds are reached.
show storm-control [interface-id] [{broadcast | history | multicast | unicast}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.1(6)EA2
This command was first introduced. It replaced the show port storm-control command.
Usage Guidelines
If the variable interface-id is omitted, the show storm-control command displays storm-control settings for all ports on the switch.
You can display broadcast, multicast, or unicast packet-storm information by using the corresponding keyword. When no option is specified, the default is to display broadcast storm-control information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show storm-control broadcast command when the rising and falling suppression levels are defined as percentages of the total bandwidth:
Switch> show storm-control broadcastInterface Filter State Trap State Upper Lower Current Traps Sent--------- ------------- ------------- ------- ------- ------- ----------Fa0/1 <inactive> <inactive> 100.00% 100.00% 0.00% 0Fa0/2 <inactive> <inactive> 100.00% 100.00% 0.00% 0Fa0/3 <inactive> <inactive> 100.00% 100.00% 0.00% 0Fa0/4 Forwarding Below rising 30.00% 20.00% 20.32% 17. . . .Table 2-27 lists the show storm-control field descriptions.
This is an example of output from the show storm-control fastethernet0/4 history command, which displays the ten most recent storm events for an interface.
Switch> show storm-control fastethernet0/4 historyInterface Fa0/4 Storm Event HistoryEvent Type Event Start Time Duration (seconds)------------------ ---------------- ------------------Unicast 04:58:18 206Broadcast 05:01:54 n/aMulticast 05:01:54 n/aUnicast 05:01:54 108Broadcast 05:05:00 n/aMulticast 05:05:00 n/aUnicast 05:06:00 n/aBroadcast 05:09:39 n/aMulticast 05:09:39 n/aBroadcast 05:11:32 172
Note
Related Commands
show system mtu
Use the show system mtu privileged EXEC command to display the global maximum packet size or maximum transmission unit (MTU) set for the switch.
show system mtu [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show system mtu command:
Switch# show system mtuSystem MTU size is 1500 bytesRelated Commands
show udld
Use the show udld user EXEC command to display UniDirectional Link Detection (UDLD) status for all ports or the specified port.
show udld [interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not enter an interface-id, the administrative and the operational UDLD status for all interfaces appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show udld gigabitethernet0/1 command. In this example, UDLD is enabled on both ends of the link, and UDLD detects that the link is bidirectional. Table 2-28 describes the fields in this example.
Switch> show udld gigabitethernet0/1Interface gi0/1---Port enable administrative configuration setting: Follows device defaultPort enable operational state: EnabledCurrent bidirectional state: BidirectionalCurrent operational state: Advertisement - Single Neighbor detectedMessage interval: 60Time out interval: 5Entry 1Expiration time: 146Device ID: 1Current neighbor state: BidirectionalDevice name: Switch-APort ID: Gi0/2Neighbor echo 1 device: Switch-BNeighbor echo 1 port: Gi0/1Message interval: 5CDP Device name: Switch-A
Table 2-28 show udld Field Descriptions
Interface
The interface on the local device configured for UDLD.
Port enable administrative configuration setting
How UDLD is configured on the port. If UDLD is enabled or disabled, the port enable configuration setting is the same as the operational enable state. Otherwise, the enable operational setting depends on the global enable setting.
Port enable operational state
Operational state that shows whether UDLD is actually running on this port.
Current bidirectional state
The bidirectional state of the link. An unknown state appears if the link is down or if it is connected to an UDLD-incapable device. A bidirectional state appears if the link is a normal two-way connection to a UDLD-capable device. All other values mean miswiring.
Current operational state
The phase of the UDLD state machine. For a normal bidirectional link, the state machine is usually in the Advertisement phase.
Message interval
How often advertisement messages are sent from the local device. Measured in seconds.
Time out interval
The time period, in seconds, that UDLD waits for echoes from a neighbor device during the detection window.
Entry 1
Information from the first cache entry, which contains a copy of echo information received from the neighbor.
Expiration time
The amount of time in seconds remaining before this cache entry is aged out.
Device ID
The neighbor device identification.
Current neighbor state
The neighbor's state. If both the local and neighbor devices are running UDLD, the neighbor state and the local state is bidirectional. If the link is down or the neighbor is not UDLD-capable, no cache entries appear.
Device name
The device name or the system serial number of the neighbor. The system serial number appears if the device name is not set or is set to the default (Switch).
Port ID
The neighbor port ID enabled for UDLD.
Neighbor echo 1 device
The device name of the neighbors' neighbor from which the echo originated.
Neighbor echo 1 port
The port number ID of the neighbor from which the echo originated.
Message interval
The rate, in seconds, at which the neighbor is sending advertisement messages.
CDP1 device name
The CDP device name or the system serial number. The system serial number appears if the device name is not set or is set to the default (Switch).
1 CDP = Cisco Discovery Protocol
This is an example of output from the show udld interface configuration command when the aggressive mode is configured:
Switch# show udld gigabitethernet0/1Interface Gi0/1---Port enable administrative configuration setting:Enabled / in aggressive modePort enable operational state:Enabled / in aggressive modeCurrent bidirectional state:UnknownCurrent operational state:Link downMessage interval:7Time out interval:5No neighbor cache information stored
Related Commands
Enables UDLD on all ports on the switch.
Enables UDLD on a specific port.
Resets any interface that was shut down by UDLD.
show version
Use the show version user EXEC command to display version information for the hardware and firmware.
show version [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show version command:
Switch> show versionCisco Internetwork Operating System SoftwareIOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(9)EA1Copyright (c) 1986-2002 by cisco Systems, Inc.Compiled Wed 27-Feb-02 06:51 by antoninoImage text-base:0x80010000, data-base:0x804E2000ROM:Bootstrap program is C2950 boot loaderSwitch uptime is 1 hour, 54 minutesSystem returned to ROM by power-onSystem image file is "flash:c2950-i6q4l2-mz.121-0.0.9.EA1.bin"cisco WS-C2950G-12-EI (RC32300) processor with 20830K bytes of memory.Last reset from system-resetRunning Enhanced Image12 FastEthernet/IEEE 802.3 interface(s)2 Gigabit Ethernet/IEEE 802.3 interface(s)32K bytes of flash-simulated non-volatile configuration memory.Base ethernet MAC Address:00:05:74:28:09:C0Configuration register is 0xFshow vlan
Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
show vlan [brief | id vlan-id | name vlan-name | remote-span | summary] [ | {begin | exclude | include} expression]
Syntax Description
Syntax Description
Syntax DescriptionN
Note
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vlan command. Table 2-29 describes each field in the display.
Switch> show vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/5, Fa0/7Fa0/8, Fa0/9, Fa0/11, Fa0/12Gi0/1, Gi0/22 VLAN0002 active51 VLAN0051 active52 VLAN0052 active100 VLAN0100 suspended Fa0/3400 VLAN0400 suspended1002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeVLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------1 enet 100001 1500 - - - - - 1002 10032 enet 100002 1500 - - - - - 0 051 enet 100051 1500 - - - - - 0 052 enet 100052 1500 - - - - - 0 0100 enet 100100 1500 - - - - - 0 0400 enet 100400 1500 - - - - - 0 01002 fddi 101002 1500 - - - - - 1 10031003 tr 101003 1500 1005 3276 - - srb 1 10021004 fdnet 101004 1500 - - 1 ieee - 0 01005 trnet 101005 1500 - - 15 ibm - 0 0Remote SPAN VLANs------------------------------------------------------------------------------Primary Secondary Type Ports------- --------- ----------------- ------------------------------------------
This is an example of output from the show vlan brief command:
Switch> show vlan briefVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/121002 fddi-default active1003 token-ring-default active1004 fddinet-default active1005 trnet-default activeThis is an example of output from the show vlan id command. The specified VLAN is in the extended VLAN range.
Switch# show vlan id 2005VLAN Name Status Ports---- -------------------------------- --------- -------------------------------2005 VLAN2005 active Fa0/2VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------2005 enet 102005 1500 - - - - - 0 0This is an example of output from the show vlan summary command:
Switch> show vlan summaryNumber of existing VLANs : 7Number of existing VTP VLANs : 7Number of existing extended VLANs : 0Related Commands
show vmps
Use the show vmps user EXEC command without keywords to display the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VLAN Membership Policy Server (VMPS) IP addresses, and the current and primary servers, or use the statistics keyword to display client-side statistics.
show vmps [statistics] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vmps command:
Switch> show vmpsVQP Client Status:--------------------VMPS VQP Version: 1Reconfirm Interval: 60 minServer Retry Count: 3VMPS domain server:Reconfirmation status---------------------VMPS Action: otherThis is an example of output from the show vmps statistics command. Table 2-30 describes each field in the example.
Switch> show vmps statisticsVMPS Client Statistics----------------------VQP Queries: 0VQP Responses: 0VMPS Changes: 0VQP Shutdowns: 0VQP Denied: 0VQP Wrong Domain: 0VQP Wrong Version: 0VQP Insufficient Resource: 0
Related Commands
show vtp
Use the show vtp user EXEC command to display general information about the VLAN Trunking Protocol (VTP) management domain, status, and counters.
show vtp {counters | status} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vtp counters command. Table 2-31 describes each field in the display.
Switch> show vtp countersVTP statistics:Summary advertisements received : 38Subset advertisements received : 0Request advertisements received : 0Summary advertisements transmitted : 13Subset advertisements transmitted : 3Request advertisements transmitted : 0Number of config revision errors : 0Number of config digest errors : 0Number of V1 summary errors : 0VTP pruning statistics:Trunk Join Transmitted Join Received Summary advts received fromnon-pruning-capable device---------------- ---------------- ---------------- ---------------------------Fa0/9 827 824 0Fa0/10 827 823 0Fa0/11 827 823 0
This is an example of output from the show vtp status command. Table 2-32 describes each field in the display.
Switch> show vtp statusVTP Version : 2Configuration Revision : 0Maximum VLANs supported locally : 250Number of existing VLANs : 5VTP Operating Mode : ServerVTP Domain Name :VTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xBF 0x86 0x94 0x45 0xFC 0xDF 0xB5 0x70Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00Local updater ID is 172.20.135.196 on interface Vl1 (lowest numbered VLAN interface found)
Related Commands
show wrr-queue bandwidth
Use the show wrr-queue bandwidth user EXEC command to display the weighted round-robin (WRR) bandwidth allocation for the four class of service (CoS) priority queues.
show wrr-queue bandwidth [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show wrr-queue bandwidth command:
Switch> show wrr-queue bandwidthWRR Queue : 1 2 3 4Bandwidth : 10 20 30 40Related Commands
Displays the mapping of the CoS to the priority queues.
Assigns WRR weights to the four CoS priority queues.
Assigns CoS values to the CoS priority queues.
show wrr-queue cos-map
Use the show wrr-queue cos-map user EXEC command to display the mapping of the class of service (CoS) priority queues.
show wrr-queue cos-map [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show wrr-queue cos-map command:
Switch> show wrr-queue cos-mapCoS Value : 0 1 2 3 4 5 6 7Priority Queue : 1 1 2 2 3 3 4 4Related Commands
shutdown
Use the shutdown interface configuration command to disable a port and to shut down the management VLAN. Use the no form of this command to enable a disabled port or to activate the management VLAN.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Command Modes
Interface configuration
Command History
Usage Guidelines
The shutdown interface configuration command for a port causes it to stop forwarding. You can enable the port with the no shutdown command.
The no shutdown command has no effect if the port is a static-access port assigned to a VLAN that has been deleted, suspended, or shut down. The port must first be a member of an active VLAN before it can be re-enabled.
Only one management VLAN interface can be active at a time. The remaining VLANs are shut down. In the show running-config command, the active management VLAN interface is the one without the shutdown command displayed.
When you enter the shutdown command on an LRE switch, the switch disables the interface by de-activating the MAC interface and the LRE chipset transmitter. Under some circumstances, the power emitted by LRE switch ports can affect other LRE switch ports. We recommend that ports that are not connected to CPE devices be shut down by using this command. You can also use this command to disable access to the switch from a particular port.
Examples
This example shows how to disable fixed Fast Ethernet port 0/8 and how to re-enable it:
Switch(config)# interface fastethernet0/8Switch(config-if)# shutdownSwitch(config-if)# no shutdownYou can verify your settings by entering the show interfaces privileged EXEC command.
shutdown vlan
Use the shutdown vlan global configuration command to shut down (suspend) local traffic on the specified VLAN. Use the no form of this command to restart local traffic on the VLAN.
shutdown vlan vlan-id
no shutdown vlan vlan-id
Syntax Description
Defaults
No default is defined.
Command Modes
Global configuration
Command History
Usage Guidelines
The shutdown vlan command does not change the VLAN information in the VTP database. It shuts down traffic locally, but the switch still advertises VTP information.
Examples
This example shows how to shutdown traffic on VLAN 2:
Switch(config)# shutdown vlan 2You can verify your setting by entering the show vlan privileged EXEC command.
Related Commands
snmp-server enable traps
Use the snmp-server enable traps global configuration command to enable the switch to send Simple Network Management Protocol (SNMP) notification for various trap types to the network management system (NMS). Use the no form of this command to return to the default setting.
snmp-server enable traps [alarms | bridge | c2900 | cluster | config | copy-config | entity | envmon [fan | shutdown | supply | temperature | voltage] | flash | hsrp | mac-notification | port-security [trap-rate value] | rtr | snmp [authentication | coldstart | linkdown | linkup | warmstart] | stpx | syslog | vlan-membership | vlancreate | vlandelete | vtp]
no snmp-server enable traps [alarms | bridge | c2900 | cluster | config | copy-config | entity | envmon | flash | hsrp | mac-notification | port-security | rtr | snmp | stpx | syslog | vlan-membership | vlancreate | vlandelete | vtp]
Syntax Description
Note
Defaults
The sending of SNMP traps is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
Specify the host (NMS) that receives the traps by using the snmp-server host global configuration command. If no trap types are specified, all trap types are sent.
Use the snmp-server enable traps command to enable sending of traps or informs, when supported.
Note
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type.
Examples
This example shows how to send EnvMon traps to the NMS:
Switch(config)# snmp-server enable traps envmon fanThis example shows how to send VTP traps to the NMS:
Switch(config)# snmp-server enable traps vtpYou can verify your setting by entering the show vtp status privileged EXEC or the show running-config privileged EXEC command.
Related Commands
snmp-server host
Use the snmp-server host global configuration command to specify the recipient (host) of a Simple Network Management Protocol (SNMP) notification operation. Use the no form of this command to remove the specified host.
snmp-server host host-addr [informs | traps] [version {1 | 2c | 3 [auth | noauth | priv]}] community-string [alarms] [bridge] [c2900] [cluster] [config] [copy-config] [entity] [envmon] [flash] [hsrp] [mac-notification] [port-security] [rtr] [snmp] [stpx] [syslog] [tty] [udp-port] [vlan-membership] [vlancreate] [vlandelete] [vtp]
no snmp-server host host-addr [informs | traps] [version {1 | 2c | 3 [auth | noauth | priv]}] community-string
Syntax Description
Defaults
This command is disabled. No notifications are sent.
If you enter this command with no keywords, the default is to send all trap types to the host. No informs are sent to this host.
If no version keyword is present, the default is version 1.
If version 3 is selected and no authentication keyword is entered, the default is the noauth (noAuthNoPriv) security level.
Note
Command Modes
Global configuration
Command History
Usage Guidelines
SNMP notifications can be sent as traps or inform requests. Traps are unreliable because the receiver does not send acknowledgments when it receives traps. The sender cannot determine if the traps were received. However, an SNMP entity that receives an inform request acknowledges the message with an SNMP response PDU. If the sender never receives the response, the inform request can be sent again. Thus, informs are more likely to reach their intended destinations.
However, informs consume more resources in the agent and in the network. Unlike a trap, which is discarded as soon as it is sent, an inform request must be held in memory until a response is received or the request times out. Traps are also sent only once, but an inform might be retried several times. The retries increase traffic and contribute to a higher overhead on the network.
If you do not enter an snmp-server host command, no notifications are sent. To configure the switch to send SNMP notifications, you must enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host. To enable multiple hosts, you must enter a separate snmp-server host command for each host. You can specify multiple notification types in the command for each host.
When multiple snmp-server host commands are given for the same host and kind of notification (trap or inform), each succeeding command overwrites the previous command. Only the last snmp-server host command is in effect. For example, if you enter an snmp-server host inform command for a host and then enter another snmp-server host inform command for the same host, the second command replaces the first.
The snmp-server host command is used with the snmp-server enable traps global configuration command. Use the snmp-server enable traps command to specify which SNMP notifications are sent globally. For a host to receive most notifications, at least one snmp-server enable traps command and the snmp-server host command for that host must be enabled. Some notification types cannot be controlled with the snmp-server enable traps command. For example, some notification types are always enabled. Other notification types are enabled by a different command.
The no snmp-server host command with no keywords disables traps, but not informs, to the host. To disable informs, use the no snmp-server host informs command.
Examples
This example shows how to configure a unique SNMP community string named comaccess for traps and prevent SNMP polling access with this string through access-list 10:
Switch(config)# snmp-server community comaccess ro 10Switch(config)# snmp-server host 172.20.2.160 comaccessSwitch(config)# access-list 10 deny anyThis example shows how to send the SNMP traps to the host specified by the name myhost.cisco.com. The community string is defined as comaccess:
Switch(config)# snmp-server enable trapsSwitch(config)# snmp-server host myhost.cisco.com comaccess snmpThis example shows how to enable the switch to send all traps to the host myhost.cisco.com using the community string public:
Switch(config)# snmp-server enable trapsSwitch(config)# snmp-server host myhost.cisco.com publicThis example shows how to enable the switch to send EnvMon traps to the host myhost.cisco.com using the community string public:
Switch(config)# snmp-server host myhost.cisco.com version 2c public envmonRelated Commands
snmp trap mac-notification
Use the snmp trap mac-notification interface configuration command to enable the MAC notification traps on a port. Use the no form of this command to disable the traps and to return the port to default settings.
snmp trap mac-notification [added | removed]
no snmp trap mac-notification [added | removed]
Syntax Description
added
(Optional) Enable MAC notification traps when a MAC address is added to a port.
removed
(Optional) Enable MAC notification traps when a MAC address is removed from a port.
Defaults
The Simple Network Management Protocol (SNMP) address-addition and address-removal traps are disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
Even though you enable the notification trap for a specific interface by using the snmp trap mac-notification command, the trap is generated only when you enter the snmp-server enable traps mac-notification and the mac address-table notification global configuration commands.
Examples
This example shows how to enable an address-addition trap on a port:
Switch(config-if)# snmp trap mac-notification addedThis example shows how to enable an address-removal trap on a port:
Switch(config-if)# snmp trap mac-notification removedYou can verify your settings by entering the show mac address-table notification privileged EXEC command.
Related Commands
clear mac address-table notification
Clears the MAC address notification global counters.
Enables the MAC notification feature on a switch.
Displays MAC notification parameters.
Enables SNMP notification for various trap types.
spanning-tree backbonefast
Use the spanning-tree backbonefast global configuration command to enable the BackboneFast feature. Use the no form of this command to return to the default setting.
spanning-tree backbonefast
no spanning-tree backbonefast
Syntax Description
This command has no arguments or keywords.
Defaults
BackboneFast is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
The BackboneFast feature is supported only when the switch is running per-VLAN spanning-tree plus (PVST+). It is not supported when the switch is running rapid PVST+ or multiple spanning-tree (MST).
BackboneFast is started when a root port or blocked port on a switch receives inferior bridge protocol data units (BPDUs) from its designated bridge. An inferior BPDU identifies one switch as both the root bridge and the designated bridge. When a switch receives an inferior BPDU, it means that a link to which the switch is not directly connected (an indirect link) has failed (that is, the designated bridge has lost its connection to the root switch). If there are alternate paths to the root switch, BackboneFast causes the maximum aging time on the ports on which it received the inferior BPDU to expire and allows a blocked port to move immediately to the listening state. BackboneFast then transitions the interface to the forwarding state. For more information, refer to the software configuration guide for this release.
Enable BackboneFast on all supported switches to allow the detection of indirect link failures and to start the spanning-tree reconfiguration sooner.
Examples
This example shows how to enable BackboneFast on the switch:
Switch(config)# spanning-tree backbonefastYou can verify your setting by entering the show spanning-tree summary privileged EXEC command.
Related Commands
show spanning-tree summary
Displays a summary of the spanning-tree port states.
spanning-tree bpdufilter
Use the spanning-tree bpdufilter interface configuration command to prevent a port from sending or receiving bridge protocol data units (BPDUs). Use the no form of this command to return to the default setting.
spanning-tree bpdufilter {disable | enable}
no spanning-tree bpdufilter
Syntax Description
disable
Disable BPDU filtering on the specified interface.
enable
Enable BPDU filtering on the specified interface.
Defaults
BPDU filtering is disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
You can enable the BPDU filtering feature when the switch is operating in the per-VLAN spanning-tree plus (PVST+), rapid-PVST+, or in the multiple spanning-tree (MST) mode. The rapid-PVST+ and MST modes are available only if you have the enhanced software image (EI) installed on your switch.
Caution
You can globally enable BPDU filtering on all Port Fast-enabled ports by using the spanning-tree portfast bpdufilter default global configuration command.
You can use the spanning-tree bpdufilter interface configuration command to override the setting of the spanning-tree portfast bpdufilter default global configuration command.
Examples
This example shows how to enable the BPDU filtering feature on a port:
Switch(config)# interface fastethernet0/1Switch(config-if)# spanning-tree bpdufilter enableYou can verify your setting by entering the show running-config privileged EXEC command.
Related Commands
spanning-tree bpduguard
Use the spanning-tree bpduguard interface configuration command to put a port in the error-disabled state when it receives a bridge protocol data unit (BPDU). Use the no form of this command to return to the default setting.
spanning-tree bpduguard {disable | enable}
no spanning-tree bpduguard
Syntax Description
disable
Disable BPDU guard on the specified interface.
enable
Enable BPDU guard on the specified interface.
Defaults
BPDU guard is disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
The BPDU guard feature provides a secure response to invalid configurations because you must manually put the port back in service. Use the BPDU guard feature in a service-provider network to prevent a port from being included in the spanning-tree topology.
You can enable the BPDU guard feature when the switch is operating in the per-VLAN spanning-tree plus (PVST+), rapid-PVST+, or the multiple spanning-tree (MST) mode. The rapid-PVST+ and MST modes are available only if you have the enhanced software image (EI) installed on your switch.
You can globally enable BPDU guard on all Port Fast-enabled ports by using the spanning-tree portfast bpduguard default global configuration command.
You can use the spanning-tree bpduguard interface configuration command to override the setting of the spanning-tree portfast bpduguard default global configuration command.
Examples
This example shows how to enable the BPDU guard feature on a port:
Switch(config)# interface fastethernet0/1Switch(config-if)# spanning-tree bpduguard enableYou can verify your setting by entering the show running-config privileged EXEC command.
Related Commands
spanning-tree cost
Use the spanning-tree cost interface configuration command to set the path cost for spanning-tree calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to place in the forwarding state. Use the no form of this command to return to the default setting.
spanning-tree [vlan vlan-id] cost cost
no spanning-tree [vlan vlan-id] cost
Syntax Description
Defaults
The default path cost is computed from the interface bandwidth setting. These are the IEEE default path cost values:
•
•
•
•
•
•
•
Command Modes
Interface configuration
Command History
12.0(5.2)WC(1)
This command was first introduced.
12.1(9)EA1
The range for the cost variable increased.
12.1(13)EA1
The value for the vlan-id variable was changed.
Usage Guidelines
When you configure the cost, higher values represent higher costs.
You can set a cost on a VLAN that does not exist. The setting takes effect when the VLAN exists.
If you configure an interface with both the spanning-tree vlan vlan-id cost cost command and the spanning-tree cost cost command, the spanning-tree vlan vlan-id cost cost command takes effect.
Examples
This example shows how to set a path cost of 250 on an interface:
Switch(config)# interface fastethernet0/4Switch(config-if)# spanning-tree cost 250This example shows how to set a path cost of 300 for VLANs 10, 12 to 15, and 20:
Switch(config-if)# spanning-tree vlan 10,12-15,20 cost 300You can verify your settings by entering the show spanning-tree interface interface-id privileged EXEC command.
Related Commands
show spanning-tree interface interface-id
Displays spanning-tree information for the specified interface.
Configures an interface priority.
spanning-tree vlan priority
Sets the switch priority for the specified spanning-tree instance.
spanning-tree etherchannel guard misconfig
Use the spanning-tree etherchannel guard misconfig global configuration command to display an error message when the switch detects a loop that occurred because of an EtherChannel misconfiguration. Use the no form of this command to disable the feature.
spanning-tree etherchannel guard misconfig
no spanning-tree etherchannel guard misconfig
Syntax Description
This command has no arguments or keywords.
Defaults
EtherChannel guard is enabled on the switch.
Command Modes
Global configuration
Command History
Usage Guidelines
When the switch detects a loop that is caused by an EtherChannel misconfiguration, this error message appears:
PM-4-ERR_DISABLE: Channel-misconfig error detected on [chars], putting [chars] in err-disable state.To determine which switch ports are in the misconfigured EtherChannel, use the show interfaces status err-disabled privileged EXEC command. To verify the EtherChannel configuration on a remote device, use the show etherchannel summary privileged EXEC command on the remote device.
When a port is in the error-disabled state because of an EtherChannel misconfiguration, you can bring it out of this state by entering the errdisable recovery cause channel-misconfig global configuration command, or you can manually re-enable it by entering the shutdown and no shut down interface configuration commands.
Examples
This example shows how to enable the EtherChannel guard misconfiguration feature:
Switch(config)# spanning-tree etherchannel guard misconfigYou can verify your settings by entering the show spanning-tree summary privileged EXEC command.
Related Commands
errdisable recovery cause channel-misconfig
Enables the timer to recover from the EtherChannel misconfiguration error-disable state.
show etherchannel summary
Displays EtherChannel information for a channel as a one-line summary per channel-group.
show interfaces status err-disabled
Displays the interfaces in the error-disabled state.
spanning-tree extend system-id
Use the spanning-tree extend system-id global configuration command to enable the extended system ID feature.
spanning-tree extend system-id
Note
Syntax Description
This command has no arguments or keywords.
Defaults
The extended system ID is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
In Cisco IOS Release 12.1(9)EA1 and later, Catalyst 2950 switches support the 802.1T spanning-tree extensions, and some of the bits previously used for the switch priority are now used for the extended system ID (VLAN identifier for the per-VLAN spanning-tree plus [PVST+] and for rapid PVST+ or an instance identifier for the multiple spanning tree [MST]). In earlier releases, the switch priority is a 16-bit value.
The spanning tree uses the extended system ID, the switch priority, and the allocated spanning-tree MAC address to make the bridge ID unique for each VLAN or multiple spanning-tree instance. With earlier releases, spanning tree used one MAC address per VLAN to make the bridge ID unique for each VLAN.
Support for the extended system ID affects how you manually configure the root switch, the secondary root switch, and the switch priority of a VLAN. For more information, see the "spanning-tree mst root" and the "spanning-tree vlan" sections.
If your network consists of switches that do not support the extended system ID and switches that do support it, it is unlikely that the switch with the extended system ID support will become the root switch. The extended system ID increases the switch priority value every time the VLAN number is greater than the priority of the connected switches running older software.
Related Commands
show spanning-tree summary
Displays a summary of spanning-tree port states.
Configures the multiple spanning-tree (MST) root switch priority and timers based on the network diameter.
spanning-tree vlan priority
Sets the switch priority for the specified spanning-tree instance.
spanning-tree guard
Use the spanning-tree guard interface configuration command to enable root guard or loop guard on all the VLANs associated with the selected interface. Root guard restricts which interface is allowed to be the spanning-tree root port or the path-to-the root for the switch. Loop guard prevents alternate or root ports from becoming designated ports when a failure creates a unidirectional link. Use the no form of this command to return to the default setting.
spanning-tree guard {loop | none | root}
no spanning-tree guard
Syntax Description
Defaults
Root guard is disabled.
Loop guard is configured according to the spanning-tree loopguard default global configuration command (globally disabled).
Command Modes
Interface configuration
Command History
12.1(6)EA2
This command was first introduced. It replaced the spanning-tree rootguard command.
12.1(9)EA1
The loop keyword was added.
Usage Guidelines
You can enable root guard or loop guard when the switch is operating in the per-VLAN spanning-tree plus (PVST+), rapid-PVST+, or the multiple spanning-tree (MST) mode. However, you cannot enable both PVST+ and MST or both rapid PVST+ and MST at the same time. The rapid-PVST+ and MST modes are available only if you have the enhanced software image (EI) installed on your switch.
When root guard is enabled, if spanning-tree calculations cause a port to be selected as the root port, the port transitions to the root-inconsistent (blocked) state to prevent the customer's switch from becoming the root switch or being in the path to the root. The root port provides the best path from the switch to the root switch.
When the no spanning-tree guard or the no spanning-tree guard none command is entered, root guard is disabled for all VLANs on the selected interface. If this interface is in the root-inconsistent (blocked) state, it automatically transitions to the listening state.
Do not enable root guard on interfaces that will be used by the UplinkFast feature. With UplinkFast, the backup interfaces (in the blocked state) replace the root port in the case of a failure. However, if root guard is also enabled, all the backup interfaces used by the UplinkFast feature are placed in the root-inconsistent state (blocked) and prevented from reaching the forwarding state. The UplinkFast feature is not available when the switch is operating in rapid-PVST+ or MST mode.
Loop guard is most effective when it is configured on the entire switched network. When the switch is operating in PVST+ or rapid-PVST+ mode, loop guard prevents alternate and root ports from becoming designated ports, and spanning tree does not send bridge protocol data units (BPDUs) on root or alternate ports. When the switch is operating in MST mode, BPDUs are not sent on nonboundary ports only if the port is blocked by loop guard in all MST instances. On a boundary port, loop guard blocks the port in all MST instances.
To disable root guard or loop guard, use the spanning-tree guard none interface configuration command. You cannot enable both root guard and loop guard at the same time.
You can override the setting of the spanning-tree loopguard default global configuration command by using the spanning-tree guard loop interface configuration command.
Examples
This example shows how to enable root guard on all the VLANs associated with the specified interface:
Switch(config)# interface fastethernet0/3Switch(config-if)# spanning-tree guard rootThis example shows how to enable loop guard on all the VLANs associated with the specified interface:
Switch(config)# interface fastethernet0/3Switch(config-if)# spanning-tree guard loopYou can verify your settings by entering the show running-config privileged EXEC command.
Related Commands
show running-config
Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.1 > Cisco IOS File Management Commands > Configuration File Commands.
Sets the path cost for spanning-tree calculations.
Prevents alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link.
Configures the path cost for MST calculations.
Configures an interface priority.
Configures the MST root switch priority and timers based on the network diameter.
Configures an interface priority.
spanning-tree vlan priority
Sets the switch priority for the specified spanning-tree instance.
spanning-tree link-type
Use the spanning-tree link-type interface configuration command to override the default link-type setting, which is determined by the duplex mode of the port, and to enable Rapid Spanning-Tree Protocol (RSTP) transitions to the forwarding state. Use the no form of this command to return to the default setting.
spanning-tree link-type {point-to-point | shared}
no spanning-tree link-type
Syntax Description
point-to-point
Specify that the link type of a port is point-to-point.
shared
Specify that the link type of a port is shared.
Defaults
The switch derives the link type of a port from the duplex mode. A full-duplex port is considered a point-to-point link, and a half-duplex port is considered a shared link.
Command Modes
Interface configuration
Command History
Usage Guidelines
You can override the default setting of the link type by using the spanning-tree link-type command; for example, a half-duplex link can be physically connected point-to-point to a single port on a remote switch running the Multiple Spanning Tree Protocol (MSTP) or the rapid per-VLAN spanning-tree plus (rapid-PVST+) protocol and be enabled for rapid transitions.
Examples
This example shows how to specify the link type as shared (regardless of the duplex setting) and to prevent RSTP rapid transitions to the forwarding state:
Switch(config-if)# spanning-tree link-type sharedYou can verify your settings by entering the show spanning-tree mst interface interface-id privileged EXEC command.
Related Commands
show spanning-tree mst interface interface-id
Displays multiple spanning-tree (MST) information for the specified interface.
spanning-tree loopguard default
Use the spanning-tree loopguard default global configuration command to prevent alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link. Use the no form of this command to return to the default setting.
spanning-tree loopguard default
no spanning-tree loopguard default
Syntax Description
This command has no arguments or keywords.
Defaults
Loop guard is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
You can enable the loop guard feature when the switch is operating in the per-VLAN spanning-tree plus (PVST+), rapid-PVST+, or the multiple spanning-tree (MST) mode. The rapid-PVST+ and MST modes are available only if you have the enhanced software image (EI) installed on your switch.
Loop guard is most effective when it is configured on the entire switched network. When the switch is operating in PVST+ or rapid-PVST+ mode, loop guard prevents alternate and root ports from becoming designated ports, and spanning tree does not send bridge protocol data units (BPDUs) on root or alternate ports. When the switch is operating in MST mode, BPDUs are not sent on nonboundary ports only if the port is blocked by loop guard in all MST instances. On a boundary port, loop guard blocks the port in all MST instances.
Loop guard operates only on ports that are considered point-to-point by the spanning tree.
You can override the setting of the spanning-tree loopguard default global configuration command by using the spanning-tree guard loop interface configuration command.
Examples
This example shows how to globally enable loop guard:
Switch(config)# spanning-tree loopguard defaultYou can verify your settings by entering the show running-config privileged EXEC command.
Related Commands
show running-config
Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.1 > Cisco IOS File Management Commands > Configuration File Commands.
spanning-tree guard loop
Enables the loop guard feature on all the VLANs associated with the specified interface.
spanning-tree mode
Use the spanning-tree mode global configuration command to enable per-VLAN spanning-tree plus PVST+), rapid PVST+, or multiple spanning tree (MST) on your switch. Use the no form of this command to return to the default setting.
spanning-tree mode {mst | pvst | rapid-pvst}
no spanning-tree mode
Syntax Description
Defaults
The default mode is PVST+.
Command Modes
Global configuration
Command History
12.1(9)EA1
This command was first introduced.
12.1(13)EA1
The rapid-pvst keyword was added.
Usage Guidelines
The switch supports PVST+, rapid PVST+, and MSTP, but only one version can be active at any time. All VLANs run PVST+, all VLANs run rapid PVST+, or all VLANs run MSTP.
Caution
When you enable the MST mode, RSTP is automatically enabled.
Examples
This example shows to enable MST on the switch:
Switch(config)# spanning-tree mode mstThis example shows to enable rapid PVST+ on the switch:
Switch(config)# spanning-tree mode rapid-pvstYou can verify your setting by entering the show running-config privileged EXEC command.
Related Commands
spanning-tree mst configuration
Use the spanning-tree mst configuration global configuration command to enter multiple spanning-tree (MST) configuration mode through which you configure the MST region. Use the no form of this command to return to the default settings.
spanning-tree mst configuration
no spanning-tree mst configuration
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
This command has no arguments or keywords.
Defaults
The default mapping is that all VLANs are mapped to the common and internal spanning tree (CIST) instance (instance 0).
The default name is an empty string.
The revision number is 0.
Command Modes
Global configuration
Command History
Usage Guidelines
Entering the spanning-tree mst configuration command enables the MST configuration mode. These configuration commands are available:
•
•
•
•
•
•
•
•
In MST mode, the switch supports up to 16 MST instances. The number of VLANs that can be mapped to a particular MST instance is unlimited.
When you map VLANs to an MST instance, the mapping is incremental, and the VLANs specified in the command are added to or removed from the VLANs that were previously mapped. To specify a range, use a hyphen; for example, instance 1 vlan 1-63 maps VLANs 1 to 63 to MST instance 1. To specify a series, use a comma; for example, instance 1 vlan 10, 20, 30 maps VLANs 10, 20, and 30 to MST instance 1.
All VLANs that are not explicitly mapped to an MST instance are mapped to the common and internal spanning tree (CIST) instance (instance 0) and cannot be unmapped from the CIST by using the no form of the command.
For two or more switches to be in the same MST region, they must have the same VLAN mapping, the same configuration revision number, and the same name.
Examples
This example shows how to enter MST configuration mode, map VLAN 10 to 20 to MST instance 1, name the region region1, set the configuration revision to 1, display the pending configuration, apply the changes, and return to global configuration mode:
Switch# spanning-tree mst configurationSwitch(config-mst)# instance 1 vlan 10-20Switch(config-mst)# name region1Switch(config-mst)# revision 1Switch(config-mst)# show pendingPending MST configurationName [region1]Revision 1Instance Vlans Mapped-------- ---------------------0 1-9,21-40941 10-20-------------------------------Switch(config-mst)# exitSwitch(config)#This example shows how to add VLANs 1 to 100 to the ones already mapped (if any) to instance 2, to move VLANs 40 to 60 that were previously mapped to instance 2 to the CIST instance, to add VLAN 10 to instance 10, and to remove all the VLANs mapped to instance 2 and map them to the CIST instance:
Switch(config-mst)# instance 2 vlan 1-100Switch(config-mst)# no instance 2 vlan 40-60Switch(config-mst)# instance 10 vlan 10Switch(config-mst)# no instance 2You can verify your settings by entering the show pending MST configuration command.
Related Commands
show spanning-tree mst configuration
Displays the MST region configuration.
spanning-tree mst cost
Use the spanning-tree mst cost interface configuration command to set the path cost for multiple spanning-tree (MST) calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to put in the forwarding state. Use the no form of this command to return to the default setting.
spanning-tree mst instance-id cost cost
no spanning-tree mst instance-id cost
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
The default path cost is computed from the interface bandwidth setting. These are the IEEE default path cost values:
•
•
•
Command Modes
Interface configuration
Command History
12.1(9)EA1
This command was first introduced.
12.1(13)EA1
The value for the instance-id variable was changed.
Usage Guidelines
When you configure the cost, higher values represent higher costs.
Examples
This example shows how to set a path cost of 250 on an interface associated with instances 2 and 4:
Switch(config)# interface fastethernet0/4Switch(config-if)# spanning-tree mst 2,4 cost 250You can verify your settings by entering the show spanning-tree mst interface interface-id privileged EXEC command.
Related Commands
show spanning-tree mst interface interface-id
Displays MST information for the specified interface.
Configures an interface priority.
Configures the switch priority for the specified spanning-tree instance.
spanning-tree mst forward-time
Use the spanning-tree mst forward-time global configuration command to set the forward-delay time for all multiple spanning-tree (MST) instances. The forwarding time determines how long each of the listening and learning states last before the interface begins forwarding. Use the no form of this command to return to the default setting.
spanning-tree mst forward-time seconds
no spanning-tree mst forward-time
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
The default is 15 seconds.
Command Modes
Global configuration
Command History
Usage Guidelines
Changing the spanning-tree mst forward-time command affects all spanning-tree instances.
Examples
This example shows how to set the spanning-tree forwarding time to 18 seconds for all MST instances:
Switch(config)# spanning-tree mst forward-time 18You can verify your settings by entering the show spanning-tree mst privileged EXEC command.
Related Commands
spanning-tree mst hello-time
Use the spanning-tree mst hello-time global configuration command to set the interval between hello bridge protocol data units (BPDUs) sent by root switch configuration messages. Use the no form of this command to return to the default setting.
spanning-tree mst hello-time seconds
no spanning-tree mst hello-time
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
seconds
Interval between hello BPDUs sent by root switch configuration messages. The range is 1 to 10 seconds.
Defaults
The default is 2 seconds.
Command Modes
Global configuration
Command History
Usage Guidelines
After you set the spanning-tree mst max-age seconds global configuration command, if a switch does not receive BPDUs from the root switch within the specified interval, the switch recomputes the spanning-tree topology. The max-age setting must be greater than the hello-time setting.
Changing the spanning-tree mst hello-time command affects all spanning-tree instances.
Examples
This example shows how to set the spanning-tree hello time to 3 seconds for all MST instances:
Switch(config)# spanning-tree mst hello-time 3You can verify your settings by entering the show spanning-tree mst privileged EXEC command.
Related Commands
spanning-tree mst max-age
Use the spanning-tree mst max-age global configuration command to set the interval between messages that the spanning tree receives from the root switch. If a switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it recomputes the spanning-tree topology. Use the no form of this command to return to the default setting.
spanning-tree mst max-age seconds
no spanning-tree mst max-age
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
The default is 20 seconds.
Command Modes
Global configuration
Command History
Usage Guidelines
After you set the spanning-tree mst max-age seconds global configuration command, if a switch does not receive BPDUs from the root switch within the specified interval, the switch recomputes the spanning-tree topology. The max-age setting must be greater than the hello-time setting.
Changing the spanning-tree mst max-age command affects all spanning-tree instances.
Examples
This example shows how to set the spanning-tree max-age to 30 seconds for all MST instances:
Switch(config)# spanning-tree mst max-age 30You can verify your settings by entering the show spanning-tree mst privileged EXEC command.
Related Commands
spanning-tree mst max-hops
Use the spanning-tree mst max-hops global configuration command to set the number of hops in a region before the bridge protocol data unit (BPDU) is discarded and the information held for a port is aged. Use the no form of this command to return to the default setting.
spanning-tree mst max-hops hop-count
no spanning-tree mst max-hops
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
The default is 20 hops.
Command Modes
Global configuration
Command History
Usage Guidelines
The root switch of the instance always sends a BPDU (or M-record) with a cost of 0 and the hop count set to the maximum value. When a switch receives this BPDU, it decrements the received remaining hop count by one and propagates the decremented count as the remaining hop count in the generated M-records. A switch discards the BPDU and ages the information held for the port when the count reaches 0.
Changing the spanning-tree mst max-hops command affects all spanning-tree instances.
Examples
This example shows how to set the spanning-tree max-hops to 10 for all MST instances:
Switch(config)# spanning-tree mst max-hops 10You can verify your settings by entering the show spanning-tree mst privileged EXEC command.
Related Commands
spanning-tree mst port-priority
Use the spanning-tree mst port-priority interface configuration command to configure an interface priority. If a loop occurs, the Multiple Spanning Tree Protocol (MSTP) can determine which interface to put in the forwarding state. Use the no form of this command to return to the default setting.
spanning-tree mst instance-id port-priority priority
no spanning-tree mst instance-id port-priority
This command is available only if your switch is running the enhanced software image (EI).
Syntax Description
Defaults
The default is 128.
Command Modes
Interface configuration
Command History
12.1(9)EA1
This command was first introduced.
12.1(13)EA1
The values for the instance-id and the priority variables were changed.
Usage Guidelines
You can assign higher priority values (lower numerical values) to interfaces that you want selected first and lower priority values (higher numerical values) that you want selected last. If all interfaces have the same priority value, the MST puts the interface with the lowest interface number in the forwarding state and blocks other interfaces.
Examples
This example shows how to increase the likelihood that the interface associated with spanning-tree instance 20 is placed into the forwarding state if a loop occurs:
Switch(config)#
