Table Of Contents

sdm prefer

service password-recovery

service-policy

set

setup

setup express

show access-lists

show archive status

show auto qos

show boot

show class-map

show cluster

show cluster candidates

show cluster members

show controllers cpu-interface

show controllers ethernet-controller

show controllers switch

show controllers tcam

show controllers utilization

show dot1q-tunnel

show dot1x

show env

show errdisable detect

show errdisable flap-values

show errdisable recovery

show etherchannel

show flowcontrol

show fm

show fm interface

show fm vlan

show forward

show interfaces

show interfaces counters

show inventory

show arp access-list

show ip arp inspection

show ip dhcp snooping

show ip dhcp snooping binding

show ip dhcp snooping database

show ip igmp profile

show ip igmp snooping

show ip igmp snooping groups

show ip igmp snooping mrouter

show ip igmp snooping querier

show ip source binding

show ip verify source

show l2protocol-tunnel

show l2tcam

show l3tcam

show lacp

show mac access-group

show mac address-table

show mac address-table address

show mac address-table aging-time

show mac address-table count

show mac address-table dynamic

show mac address-table interface

show mac address-table multicast

show mac address-table notification

show mac address-table static

show mac address-table vlan

show mls qos

show mls qos aggregate-policer

show mls qos interface

show mls qos maps

show monitor

show mvr

show mvr interface

show mvr members

show pagp

show parser macro

show policy-map

show port-security

show power inline

show running-config vlan

show sdm prefer

show setup express

show spanning-tree

show storm-control

show system mtu

show tcam

show tcam pbr

show tcam qos

show udld

show version

show vlan

show vlan access-map

show vlan filter

show vmps

show vtp

shutdown

shutdown vlan

snmp-server enable traps

snmp-server host

snmp-server ip

snmp trap mac-notification

spanning-tree backbonefast

spanning-tree bpdufilter

spanning-tree bpduguard

spanning-tree cost

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

spanning-tree guard

spanning-tree link-type

spanning-tree loopguard default

spanning-tree mode

spanning-tree mst configuration

spanning-tree mst cost

spanning-tree mst forward-time

spanning-tree mst hello-time

spanning-tree mst max-age

spanning-tree mst max-hops

spanning-tree mst port-priority

spanning-tree mst pre-standard

spanning-tree mst priority

spanning-tree mst root

spanning-tree port-priority

spanning-tree portfast (global configuration)

spanning-tree portfast (interface configuration)

spanning-tree stack-port

spanning-tree transmit hold-count

spanning-tree uplinkfast

spanning-tree vlan

speed

storm-control

switchcore

switchport

switchport access

switchport backup interface

switchport block

switchport broadcast

switchport host

switchport mode

switchport multicast

switchport nonegotiate

switchport port-security

switchport port-security aging

switchport priority extend

switchport protected

switchport trunk

switchport unicast

switchport voice vlan

system mtu

2

sdm prefer

Use the sdm prefer global configuration command to configure the template used in Switch Database Management (SDM) resource allocation. You use a template to allocate system memory to best support the features being used in your application. Use a template to approximate the maximum number of unicast MAC addresses, Internet Group Management Protocol (IGMP) groups, quality of service (QoS) access control entries (ACEs), security ACEs, unicast routes, multicast routes, subnet VLANs (routed interfaces), and Layer 2 VLANs that can be configured on the switch. Use the no form of this command to return to the default template.

sdm prefer {access [extended-match] | extended-match | routing [extended-match] | vlan}

no sdm prefer

Syntax Description

access	Provide maximum system utilization for multicast traffic, QoS classification ACEs, and security ACEs. You would typically use this template for an access switch at the network edge.
extended-match	Reformat routing-table memory allocation to allow 144-bit Layer 3 ternary content addressable memory (TCAM) with the default template, the access template, or the routing template. Reformatting routing table memory space reduces the number of allowed unicast routes by one half.
routing	Provide maximum system utilization for unicast routing, minimizing QoS classification ACLs and security ACLs. You would typically use this template for a router or aggregator in the middle of a network.
vlan	Provide maximum system utilization for VLANs, with routing disabled. This template maximizes system memory for use as a Layer 2 switch with no routing.

Defaults

The default template provides a balance to all features.

Command Modes

Global configuration

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(6)EA1	Template values revised. Templates for Fast Ethernet switches were added.
12.1(8)EA1	Template values for Gigabit Ethernet switches were revised.
12.1(11)EA1	The extended-match keyword was added.

Usage Guidelines

You must reload the switch for the configuration to take effect.

The sdm prefer vlan command disables routing capability in the switch. Any routing configurations are rejected after the reload, and any previously configured routing options might be lost. Use the sdm prefer vlan command only on switches intended for Layer 2 switching with no routing.

Do not use the routing template if you do not have routing enabled on your switch. Entering the sdm prefer routing global configuration command prevents other features from using the memory allocated to unicast and multicast routing in the routing template (approximately 17 K for Fast Ethernet switches and 30 K for Gigabit Ethernet switches).

When running the Web Cache Communication Protocol (WCCP) or multiple Virtual Private Network (VPN) routing/forwarding (multi-VRF) instances in customer edge (CE) devices (multi-VRF CE), extra fields are required in the routing tables stored in TCAM. You must use the extended-match keyword with the default, access, or routing templates to enable the switch to support 144-bit Layer 3 TCAM when using these features. The keyword reformats the memory space allocated for routing, reducing the number of allowed unicast routes by half.

Table 2-12 lists the approximate number of each resource supported in each of the four templates for a Gigabit Ethernet switch. Table 2-13 lists the approximate number supported for a switch with mostly Fast Ethernet ports. The first six rows in the tables (unicast MAC addresses through multicast routes) represent approximate hardware boundaries set when a template is selected. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance.

The last two rows, the total number of routed ports and SVIs and the number of Layer 2 VLANs, are guidelines used to calculate hardware resource consumption related to the other resource parameters.

The number of subnet VLANs (routed ports and SVIs) are not limited by software and can be set to a number higher than indicated in the tables. If the number of subnet VLANs configured is lower or equal to the number in the tables, the number of entries in each category (Unicast addresses, IGMP groups, and so on) for each template will be as indicated. As the number of subnet VLANs is increased, CPU utilization will typically increase. If the number of subnet VLANs is increased beyond the number indicated in the tables, the number of supported entries in each category may decrease depending on features that are enabled. For example, if PIM-DVMRP is enabled with more than 16 subnet VLANs, the number of entries for multicast routes will be in the range of 1K-5K entries for the access template.

Table 2-12 Approximate Number of Feature Resources Allowed by Each Template for Gigabit Ethernet Switches

Resource	Default Template	Access Template	Routing Template	VLAN Template
Unicast MAC addresses	6 K	2 K	6 K	12 K
IGMP groups (managed by Layer 2 multicast features such as MVR or IGMP snooping)	6 K	8 K	6 K	6 K
QoS classification ACEs	2K	2 K	1 K	2 K
Security ACEs	2 K	4 K	1 K	2 K
Unicast routes	12 K or 6 K1	4 K or 2 K1	24 K or 12 K1	0
Multicast routes	6 K	8 K	6 K	0
Routed interfaces (routed ports and SVIs)	16	16	16	16
Layer 2 VLANs	1 K	1 K	1 K	1 K

1 When the extended-match keyword is used with the indicated template. This keyword affects only the number of unicast routes allowed.

Table 2-13 Approximate Number of Feature Resources Allowed by Each Template for Fast Ethernet Switches

Resource	Default Template	Access Template	Routing Template	VLAN Template
Unicast MAC addresses	5 K	1 K	5 K	8 K
IGMP groups (managed by Layer 2 multicast features such as MVR and IGMP snooping)	1 K	2 K	1 K	1 K
QoS ACEs	1 K	1 K	512	1 K
Security ACEs	1 K	2 K	512	1 K
Unicast routes	8 K or 4K1	2 K or 1K1	16 K or 8K1	0
Multicast routes	1 K	2 K	1 K	0
Routed interfaces (routed ports and SVIs)	8	8	8	8
Layer 2 VLANs	1 K	1 K	1 K	1 K

1 When the extended-match keyword is used with the indicated template. This keyword affects only the number of unicast routes allowed.

Examples

This example shows how to configure the routing template on the switch:

Switch(config)# sdm prefer routing

Switch(config)# exit

Switch# reload

This example shows how to configure the routing template with a 144-bit routing table allocation:

Switch(config)# sdm prefer routing extended-match

Switch(config)# exit

Switch# reload

This example shows how to remove the routing template and to use the default template with the standard 72-bit routing table allocation:

Switch(config)# no sdm prefer routing

Switch(config)# exit

Switch# reload

You can verify your settings by entering the show sdm prefer privileged EXEC command.

Related Commands

Command	Description
show sdm prefer	Displays the current SDM template in use or displays the templates that can be used, with approximate resource allocation per feature.

service password-recovery

Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.

service password-recovery

no service password-recovery

Syntax Description

This command has no arguments or keywords.

Defaults

The password-recovery mechanism is enabled.

Command Modes

Global configuration

Command History

Release	Modification
12.1(6)EA1a	This command was introduced.

Usage Guidelines

This command is valid only on Catalyst 3550 Fast Ethernet switches; it is not available for Gigabit Ethernet switches.

As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration.

The password-recovery mechanism has been triggered, but

is currently disabled.  Access to the boot loader prompt

through the password-recovery mechanism is disallowed at

this point.  However, if you agree to let the system be

reset back to the default system configuration, access

to the boot loader prompt can still be allowed.

Would you like to reset the system back to the default configuration (y/n)?

If the user chooses not to reset the system back to the default configuration, the normal boot process continues, as if the Mode button had not been pressed. If you choose to reset the system back to the default configuration, the configuration file in flash memory is deleted, and the VLAN database file, flash:vlan.dat (if present), is deleted.

---

Note If you use the no service password-recovery command to control end user access to passwords, we recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values. Do not keep a backup copy of the config file on the switch.

If the switch is operating in VTP transparent mode, we recommend that you also save a copy of the vlan.dat file in a location away from the switch.

---

You can verify if password recovery is enabled or disabled by entering the show version privileged EXEC command.

Examples

This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration:

Switch(config)# no service-password recovery

Switch(config)# exit

This is an example of the output from the show version privileged EXEC command when password-recovery is disable:

Switch# show version

1w6d: %SYS-5-CONFIG_I: Configured from console by console

Cisco Internetwork Operating System Software

IOS (tm) C3550 Software (C3550-IPSERVICES-M), Version 12.2(25)SEB, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2005 by cisco Systems, Inc.

Compiled Wed 14-Feb-05 06:20 by antonino

Image text-base: 0x00003000, data-base: 0x004C1864

ROM: Bootstrap program is C3550 boot loader

flam-1-6 uptime is 1 week, 6 days, 3 hours, 59 minutes

System returned to ROM by power-on

System image file is 
"flash:c3550-ipservices-mz.122-25.SEB/c3550-ipservices-mz.122-25.SEB.bin"

cisco WS-C3550-48 (PowerPC) processor with 65526K/8192K bytes of memory.

Last reset from warm-reset

Running Layer2 Switching Only Image

Ethernet-controller 1 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 2 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 3 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 4 has 12 Fast Ethernet/IEEE 802.3 interfaces

Ethernet-controller 5 has 1 Gigabit Ethernet/IEEE 802.3 interface

Ethernet-controller 6 has 1 Gigabit Ethernet/IEEE 802.3 interface

48 FastEthernet/IEEE 802.3 interface(s)

2 Gigabit Ethernet/IEEE 802.3 interface(s)

The password-recovery mechanism is disabled.

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: AA:00:0B:2B:02:00

Configuration register is 0x10F

Related Commands

Command	Description
show version	Displays version information for the hardware and firmware.

service-policy

Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to the input or output of a particular interface. Use the no form of this command to remove the policy map and interface association.

service-policy {input policy-map-name | output policy-map-name}

no service-policy {input policy-map-name | output policy-map-name}

Syntax Description

input policy-map-name	Apply the specified policy-map to the input of an interface.
output policy-map-name	Apply the specified policy-map to the output of an interface.

---

Note Though visible in the command-line help strings, the history keyword is not supported, and you should ignore the statistics it gathers.

---

Defaults

No policy maps are attached to the interface.

Command Modes

Interface configuration

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Only one policy map per interface per direction is supported.

You cannot use the service-policy interface configuration command to attach policy maps that contain these elements to an egress interface:

•set or trust policy-map class configuration commands. Instead, you can use the police policy-map class configuration command to mark down (reduce) the DSCP value at the egress interface.

•Access control list (ACL) classification.

•Per-port per-VLAN classification.

The only match criterion in a policy map that can be attached to an egress interface is the match ip dscp dscp-list class-map configuration command.

A classification that uses a port trust state (for example, mls qos trust [cos | dscp | ip-precedence] and classification that uses a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last setting configured overwrites the previous configuration.

Examples

This example shows how to apply plcmap1 to an ingress interface:

Switch(config)# interface gigabitethernet0/1

Switch(config-if)# service-policy input plcmap1

This example shows how to apply plcmap2 to an egress interface:

Switch(config)# interface gigabitethernet0/2

Switch(config-if)# service-policy output plcmap2

This example shows how to detach plcmap2 from an interface:

Switch(config)# interface gigabitethernet0/2

Switch(config-if)# no service-policy input plcmap2

You can verify your settings by entering the show running-config privileged EXEC command.

Related Commands

Command	Description
policy-map	Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.
show policy-map	Displays quality of service (QoS) policy maps.

set

Use the set policy-map class configuration command to classify IP traffic by setting a class of service (CoS), Differentiated Services Code Point (DSCP), or IP-precedence value in the packet. Use the no form of this command to remove the traffic classification.

set {cos new-cos | dscp new-dscp | ip precedence new-precedence}

no set {cos new-cos | dscp new-dscp | ip precedence new-precedence}

---

Note Beginning with Cisco IOS Release 12.2(25)SE, the set dscp new-dscp command replaces the set ip dscp new-dscp command.

---

Syntax Description

cos new-cos	New CoS value assigned to the classified traffic. The range is from 0 to 7.
dscp new-dscp	New DSCP value assigned to the classified traffic. The range is 0 to 63. You also can enter a mnemonic name for a commonly used value.
ip precedence new-precedence	New IP-precedence value assigned to the classified traffic. The range is 0 to 7. You also can enter a mnemonic name for a commonly used value.

Defaults

No traffic classification is defined.

Command Modes

Policy-map class configuration

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(12c)EA1	The cos keyword was added.
12.2(25)SE	The ip dscp new-dscp keyword was changed to dscp new-dscp.

Usage Guidelines

Within the same policy map, you should not use the set command with the trust policy-map class configuration command unless you also use the mls qos cos policy-map global configuration command. For information about using this command, see the "mls qos cos policy-map" section.

You cannot use the service-policy interface configuration command to attach policy maps that contain these elements to an egress interface:

•set or trust policy-map class configuration commands. Instead, you can use the police policy-map class configuration command to mark down (reduce) the DSCP value at the egress interface.

•Access control list (ACL) classification.

•Per-port per-VLAN classification.

The only match criterion in a policy map that can be attached to an egress interface is the match ip dscp dscp-list class-map configuration command.

For the set dscp new-dscp or the set ip precedence new-precedence command, you can enter a mnemonic name for a commonly used value. For example, you can enter the set dscp af11 command, which is the as same entering the set dscp 10 command. You can enter the set ip precedence critical command, which is the same as entering the set ip precedence 5 command. For a list of supported mnemonics, enter the set dscp ? or the set ip precedence ? command to see the command-line help strings.

To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.

Examples

This example shows how to assign DSCP 10 to all FTP traffic without any policers:

Switch(config)# policy-map policy_ftp

Switch(config-pmap)# class ftp_class

Switch(config-pmap-c)# set dscp 10

Switch(config-pmap)# exit

This example shows how to assign a CoS value in a policy map:

Switch(config)# mls qos cos policy-map

Switch(config)# policy-map policy2

Switch(config-pmap)# class class1

Switch(config-pmap-c)# trust dscp

Switch(config-pmap-c)# set cos 3

Switch(config-pmap-c)# exit

You can verify your settings by entering the show policy-map privileged EXEC command.

Related Commands

Command	Description
police	Defines a policer for classified traffic.
policy-map	Creates or modifies a policy map that can be attached to multiple interfaces to specify a service policy.
show policy-map	Displays quality of service (QoS) policy maps.
trust	Defines a trust state for traffic classified by the class policy-map configuration command or the class-map global configuration command.

setup

Use the setup privileged EXEC command to configure the switch with its initial configuration.

setup

Syntax Description

This command has no arguments or keywords.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

When you use the setup command, make sure that you have this information:

•IP address and network mask

•Password strategy for your environment

•Whether the switch will be used as the command switch in a cluster and the cluster name

When you enter the setup command, an interactive dialog, called the System Configuration Dialog, appears. It guides you through the configuration process and prompts you for information. The values shown in brackets next to each prompt are the default values last set by using either the setup command facility or the configure privileged EXEC command.

Help text is provided for each prompt. To access help text, press the question mark (?) key at a prompt.

To return to the privileged EXEC prompt without making changes and without running through the entire System Configuration Dialog, press Ctrl-C.

When you complete your changes, the setup program shows you the configuration command script that was created during the setup session. You can save the configuration in NVRAM, return to the setup program without saving, or return to the command-line prompt without saving the configuration.

Examples

This is an example of output from the setup command:

Switch# setup

--- System Configuration Dialog ---

Continue with configuration dialog? [yes/no]: yes

At any point you may enter a question mark '?' for help.

Use ctrl-c to abort configuration dialog at any prompt.

Default settings are in square brackets '[]'.

Basic management setup configures only enough connectivity

for management of the system, extended setup will ask you

to configure each interface on the system.

Would you like to enter basic management setup? [yes/no]: yes

Configuring global parameters:

Enter host name [Switch]:host-name

  The enable secret is a password used to protect access to

  privileged EXEC and configuration modes. This password, after

  entered, becomes encrypted in the configuration.

  Enter enable secret: enable-secret-password

  The enable password is used when you do not specify an

  enable secret password, with some older software versions, and

  some boot images.

  Enter enable password: enable-password

  The virtual terminal password is used to protect

  access to the router over a network interface.

  Enter virtual terminal password: terminal-password

  Configure SNMP Network Management? [no]: yes

  Community string [public]: 

Current interface summary

Any interface listed with OK? value "NO" does not have a valid configuration

Interface                  IP-Address      OK? Method Status                Protocol

Vlan1                      172.20.135.202  YES NVRAM  up                    up

GigabitEthernet0/1         unassigned      YES unset  up                    up

GigabitEthernet0/2         unassigned      YES unset  up                    down

<output truncated>

Port-channel1              unassigned      YES unset  up                    down

Enter interface name used to connect to the

management network from the above interface summary: vlan1

Configuring interface vlan1:

Configure IP on this interface? [yes]: yes 

IP address for this interface: ip_address

Subnet mask for this interface [255.0.0.0]: subnet_mask

Would you like to enable as a cluster command switch? [yes/no]: yes

Enter cluster name: cluster-name

The following configuration command script was created:

hostname host-name

enable secret 5 $1$LiBw$0Xc1wyT.PXPkuhFwqyhVi0

enable password enable-password

line vty 0 15

password terminal-password

snmp-server community public

!

no ip routing

!

interface GigabitEthernet0/1

no ip address

!

interface GigabitEthernet0/2

no ip address

! 

<output truncated>

cluster enable cluster-name

!

end

Use this configuration? [yes/no]: yes

!

[0] Go to the IOS command prompt without saving this config.

[1] Return back to the setup without saving this config.

[2] Save this configuration to nvram and exit.

Enter your selection [2]:

Related Commands

Command	Description
show running-config	Displays the running configuration on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
show version	Displays version information for the hardware and firmware.

setup express

Use the setup express global configuration command to enable Express Setup mode on the switch. This is the default setting. Use the no form of this command to disable Express Setup mode.

setup express

no setup express

Syntax Description

This command has no arguments or keywords.

Defaults

Express Setup is enabled.

Command Modes

Global configuration

Command History

Release	Modification
12.1(14)EA1	This command was introduced.

Usage Guidelines

When Express Setup is enabled on a new (unconfigured) switch, pressing the Mode button for 2 seconds activates Express Setup. You can access the switch through an Ethernet port by using the IP address 10.0.0.1 and then can configure the switch with the web-based Express Setup program or the command-line interface (CLI)-based setup program.

When you press the Mode button for 2 seconds on a configured switch, the mode LEDs start blinking. If you press the Mode button for a total of 10 seconds, the switch configuration is deleted, and the switch reboots. The switch can then be configured like a new switch, either through the web-based Express Setup program or the CLI-based setup program.

---

Note As soon as you make any change to the switch configuration (including entering no at the beginning of the CLI-based setup program), configuration by Express Setup is no longer available. You can only run Express Setup again by pressing the Mode button for 10 seconds. This deletes the switch configuration and reboots the switch.

---

If Express Setup is active on the switch, entering the write memory or copy running-configuration startup-configuration privileged EXEC commands deactivates Express Setup. The IP address 10.0.0.1 is no longer valid on the switch, and your connection using this IP address ends.

The primary purpose of the no setup express command is to prevent someone from deleting the switch configuration by pressing the Mode button for 10 seconds.

Examples

This example shows how to enable Express Setup mode:

Switch(config)# setup express

You can verify that Express Setup mode is enabled by pressing the Mode button:

•On an unconfigured switch, the mode LEDs begin blinking green after 2 seconds.

•On a configured switch, the mode LEDs turn solid green after a total of 10 seconds.

---

Caution If you hold the Mode button down for a total of 10 seconds, the configuration is deleted, and the switch reboots.

---

This example shows how to disable Express Setup mode:

Switch(config)# no setup express

You can verify that Express Setup mode is disabled by pressing the Mode button. The mode LEDs only turn solid green or begin blinking green if Express Setup mode is enabled on the switch.

Related Commands

Command	Description
show setup express	Displays if Express Setup mode is active on the switch.

show access-lists

Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.

show access-lists [name | number | hardware counters] [ | {begin | exclude | include} expression]

Syntax Description

name	(Optional) Name of the ACL.
number	(Optional) ACL number. The range is from 1 to 2699.
hardware counters	(Optional) Display global hardware ACL statistics for switched and routed packets.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

The switch supports only IP standard and extended access lists. Therefore, the allowed numbers are only 1 to 199 and 1300 to 2699.

This command also displays the MAC ACLs that are configured.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show access-lists command:

Switch# show access-lists

Standard IP access list 13

    10 permit any

Standard IP access list permit Any

    10 permit any

Extended IP access list 101

    10 permit icmp any any conversion-error

    20 permit 234 host 172.30.40.1 host 123.23.23.2

Extended IP access list 102

    10 permit esp any any

    20 permit eigrp any any tos min-monetary-cost

Extended IP access list 103

    10 permit icmp any any 40 60

Extended IP access list CMP-NAT-ACL

    10 Dynamic Cluster-NAT permit ip any any

Extended MAC access list abc2

    10 permit host 1100.bb00.00cc host 2234.0123.2345     

This is an example of output from the show access-lists hardware counters command:

Switch# show access-lists hardware counters

Input Drops:             0 matches (0 bytes)

Output Drops:            0 matches (0 bytes)

Input Forwarded:         234781 matches (19942889 bytes)

Output Forwarded:        0 matches (0 bytes)

Input Bridge Only:       0 matches (0 bytes)

Bridge and Route in CPU: 0 matches (0 bytes)

Route in CPU:            160 matches (10344 bytes)

Related Commands

Command	Description
access-list	Configures a standard or extended numbered access list on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2 > IP Services Commands.
ip access list	Configures a named IP access list on the switch. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS IP Command Reference, Volume 1 of 3: Addressing and Services, Release 12.2 > IP Services Commands.
mac access-list extended	Configures a named or numbered MAC access list on the switch.

show archive status

Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or TFTP protocol.

show archive status [{begin | exclude | include} expression]

Syntax Description

begin	(Optional) Display begins with the line that matches the expression.
exclude	(Optional) Display excludes lines that match the expression.
include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.2(25)SE	This command was introduced.

Usage Guidelines

If you use the archive download-sw privileged EXEC command to download an image to a TFTP server, the output of the archive download-sw command shows the status of the download.

If you do not have a TFTP server, you can use Network Assistant or the embedded device manager to download the image by using the HTTP protocol. The show archive status command shows the progress of the download.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Examples

These are examples of output from the show archive status command:

Switch# show archive status

IDLE: No upgrade in progress

Switch# show archive status

LOADING: Upgrade in progress

Switch# show archive status

EXTRACT: Extracting the image

Switch# show archive status

VERIFY: Verifying software

Switch# show archive status

RELOAD: Upgrade completed. Reload pending

Related Commands

Command	Description
archive download-sw	Downloads a new image from a TFTP server to the switch.

show auto qos

Use the show auto qos user EXEC command to display the quality of service (QoS) commands entered on the interfaces on which automatic QoS (auto-QoS) configuration is enabled.

show auto qos [interface [interface-id]

Syntax Description

interface [interface-id]

(Optional) Display auto-QoS information for the specified interface or for all interfaces. Valid interfaces include physical ports.

Command Modes

User EXEC

Command History

Release	Modification
12.1(12c)EA1	This command was introduced.
12.1(20)EA2	The information in the command output changed, and the user guidelines were updated.

Usage Guidelines

In releases earlier than Cisco IOS Release 12.1(20)EA2, the show auto qos [interface [interface-id]] command output shows the initial generated auto-QoS configuration.

In Cisco IOS Release 12.1(20)EA2 or later, the show auto qos command output shows only the auto-QoS commands entered on each interface. The show auto qos interface interface-id command output shows the auto-QoS command entered on a specific interface.

Use the show running-config privileged EXEC command to display the auto-QoS configuration and the user modifications.

To display information about the QoS configuration that might be affected by auto-QoS, use one of these commands:

•show mls qos

•show mls qos map cos-dscp

•show mls qos interface [interface-id] [buffers | queueing]

•show running-config

Examples

This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered:

Switch> show auto qos 

FastEthernet0/1

auto qos voip cisco-softphone

FastEthernet0/2

auto qos voip cisco-phone

FastEthernet0/4

auto qos voip cisco-softphone

This is an example of output from the show auto qos interface interface-id command when the auto 
qos voip cisco-phone interface configuration command is entered:

Switch> show auto qos interface fastethernet0/2

FastEthernet0/2

auto qos voip cisco-phone

This is an example of output from the show running-config privileged EXEC command when the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered on 10/100 Ethernet interfaces:

Switch# show running-config

Building configuration...

...

mls qos map policed-dscp  24 26 46 to 0

mls qos map cos-dscp 0 8 16 26 32 46 48 56

mls qos min-reserve 5 170

mls qos min-reserve 6 85

mls qos min-reserve 7 51

mls qos min-reserve 8 34

mls qos

!

class-map match-all AutoQoS-VoIP-RTP-Trust

  match ip dscp 46

class-map match-all AutoQoS-VoIP-Control-Trust

  match ip dscp 24 26

!

!

policy-map AutoQoS-Police-SoftPhone

  class AutoQoS-VoIP-RTP-Trust

    set dscp 46

    police 320000 8000 exceed-action policed-dscp-transmit

  class AutoQoS-VoIP-Control-Trust

    set dscp 24

    police 32000 8000 exceed-action policed-dscp-transmit

!

...

interface FastEthernet0/6

 switchport mode dynamic desirable

 mls qos trust device cisco-phone

 mls qos trust cos

 auto qos voip cisco-phone

 wrr-queue bandwidth 10 20 70 1

 wrr-queue min-reserve 1 5

 wrr-queue min-reserve 2 6

 wrr-queue min-reserve 3 7

 wrr-queue min-reserve 4 8

 wrr-queue cos-map 1 0 1

 wrr-queue cos-map 2 2 4

 wrr-queue cos-map 3 3 6 7

 wrr-queue cos-map 4 5

 priority-queue out

!

interface FastEthernet0/7

 switchport mode dynamic desirable

!

interface FastEthernet0/8

 switchport mode dynamic desirable

 mls qos trust device cisco-phone

 mls qos trust cos

 auto qos voip cisco-phone

 wrr-queue bandwidth 10 20 70 1

 wrr-queue min-reserve 1 5

 wrr-queue min-reserve 2 6

 wrr-queue min-reserve 3 7

 wrr-queue min-reserve 4 8

 wrr-queue cos-map 1 0 1

 wrr-queue cos-map 2 2 4

 wrr-queue cos-map 3 3 6 7

 wrr-queue cos-map 4 5

 priority-queue out

!

<output truncated>

These are examples of output from the show auto qos command when auto-QoS is disabled on the switch:

Switch> show auto qos

AutoQoS not enabled on any interface

These are examples of output from the show auto qos interface interface-id command when auto-QoS is disabled on an interface:

Switch> show auto qos interface fastethernet0/1

AutoQoS is disabled

Related Commands

Command	Description
auto qos voip	Automatically configures QoS for VoIP within a QoS domain.

show boot

Use the show boot privileged EXEC command to display the settings of the boot environment variables.

show boot [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(11)EA1	The Private Config file field description was added.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

---

Note Only the Cisco IOS software can read and write a copy of the private configuration file. You cannot read, write, delete, or display a copy of this file.

---

Examples

This is an example of output from the show boot command. Table 2-14 describes each field in the display.

Switch# show boot

BOOT path-list:      
flash:c3550-ipservices-mz-122-25.SEB/c3550-ipservices-mz-122-25.SEB.bin

Config file:         flash:config.text

Private Config file: flash:private-config.text

Enable Break:        no

Manual Boot:         yes

HELPER path-list:

NVRAM/Config file

      buffer size:   32768 

Table 2-14 show boot Field Descriptions

Field	Description
BOOT path-list	Displays a semicolon separated list of executable files to try to load and execute when automatically booting. If the BOOT environment variable is not set, the system attempts to load and execute the first executable image it can find by using a recursive, depth-first search through the flash file system. In a depth-first search of a directory, each encountered subdirectory is completely searched before continuing the search in the original directory. If the BOOT variable is set but the specified images cannot be loaded, the system attempts to boot the first bootable file that it can find in the flash file system.
Config file	Displays the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration.
Private Config file	Displays the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration. Note Only the Cisco IOS software can read and write a copy of the private configuration file. You cannot read, write, delete, or display a copy of this file.
Enable Break	Displays whether a break during booting is enabled or disabled. If it is set to yes, on, or 1, you can interrupt the automatic boot process by pressing the Break key on the console after the flash file system is initialized.
Manual Boot	Displays whether the switch automatically or manually boots. If it is set to no or 0, the boot loader attempts to automatically boot the system. If it is set to anything else, you must manually boot the switch from the boot loader mode.
Helper path-list	Displays a semicolon separated list of loadable files to dynamically load during the boot loader initialization. Helper files extend or patch the functionality of the boot loader.
NVRAM/Config file buffer size	Displays the buffer size that Cisco IOS uses to hold a copy of the configuration file in memory. The configuration file cannot be larger than the buffer size allocation.

Related Commands

Command	Description
boot buffersize	Specifies the size of the file system-simulated NVRAM in flash memory.
boot config-file	Specifies the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration.
boot enable-break	Enables interrupting the automatic boot process.
boot manual	Enables manually booting the switch during the next boot cycle.
boot private-config-file	Specifies the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration.
boot system	Specifies the Cisco IOS image to load during the next boot cycle.

show class-map

Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.

show class-map [class-map-name] [ | {begin | exclude | include} expression]

Syntax Description

class-map-name	(Optional) Display the contents of the specified class map.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show class-map command:

Switch> show class-map 

 Class Map match-any dscp_class 

   Match ip dscp 9 

Class Map match-all vlan_class

  Match vlan 10 20-30 40

  Match class-map dscp_class

Related Commands

Command	Description
class-map	Creates a class map to be used for matching packets to the class whose name you specify.
match (class-map configuration)	Defines the match criteria to classify traffic.

show cluster

Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on command and member switches.

show cluster [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

If the switch is not a command switch or a member switch, the command displays an empty line at the prompt.

On a member switch, this command displays the identity of the command switch, the switch member number, and the state of its connectivity with the command switch.

On a command switch, this command displays the cluster name, and the total number of members. It also shows the cluster status and time since the status changed. If redundancy is enabled, it displays the primary and secondary command-switch information.

If you enter this command on a switch that is not a cluster member, the error message Not a management cluster member appears.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output when the show cluster command is entered on the active command switch:

Switch> show cluster

Command switch for cluster "Ajang"

        Total number of members:        7

        Status:                         1 members are unreachable

        Time since last status change:  0 days, 0 hours, 2 minutes

        Redundancy:                     Enabled

                Standby command switch: Member 1

                Standby Group:          Ajang_standby

                Standby Group Number:   110

        Heartbeat interval:             8

        Heartbeat hold-time:            80

        Extended discovery hop count:   3 

This is an example of output when the show cluster command is entered on a member switch:

Switch1> show cluster

Member switch for cluster "hapuna"

        Member number:                  3

        Management IP address:          192.192.192.192

        Command switch mac address:     0000.0c07.ac14

        Heartbeat interval:             8

        Heartbeat hold-time:            80 

This is an example of output when the show cluster command is entered on a member switch that is configured as the standby command switch:

Switch> show cluster

Member switch for cluster "hapuna"

        Member number:                  3 (Standby command switch)

        Management IP address:          192.192.192.192

        Command switch mac address:     0000.0c07.ac14

        Heartbeat interval:             8

        Heartbeat hold-time:            80 

This is an example of output when the show cluster command is entered on the command switch that has lost connectivity with member 1:

Switch> show cluster

Command switch for cluster "Ajang"

        Total number of members:        7

        Status:                         1 members are unreachable

        Time since last status change:  0 days, 0 hours, 5 minutes

        Redundancy:                     Disabled

        Heartbeat interval:             8

        Heartbeat hold-time:            80

        Extended discovery hop count:   3 

This is an example of output when the show cluster command is entered on a member switch that has lost connectivity with the command switch:

Switch> show cluster

Member switch for cluster "hapuna"

        Member number:                  <UNKNOWN>

        Management IP address:          192.192.192.192

        Command switch mac address:     0000.0c07.ac14

        Heartbeat interval:             8

        Heartbeat hold-time:            80 

Related Commands

Command	Description
cluster enable	Enables a command-capable switch as the cluster command switch, assigns a cluster name, and optionally assigns a member number to it.
show cluster candidates	Displays a list of candidate switches.
show cluster members	Displays information about the cluster members.

show cluster candidates

Use the show cluster candidates privileged EXEC command on the command switch to display a list of candidate switches.

show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]

Syntax Description

detail	(Optional) Display detailed information for all candidates.
mac-address H.H.H.	(Optional) MAC address of the cluster candidate.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Enter this command only on a command switch.

If the switch is not a command switch, the command returns an empty line at the prompt.

The SN in the display means switch member number. If E appears in the SN column, it means that the switch is discovered through extended discovery. If E does not appear in the SN column, it means that the switch member number is the upstream neighbor of the candidate switch. The hop count is the number of devices the candidate is from the command switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show cluster candidates command:

Switch> show cluster candidates

                                                             |---Upstream---|

MAC Address    Name         Device Type      PortIf  FEC Hops SN PortIf  FEC

00d0.7961.c4c0 StLouis-2    WS-C3550-12T     Gi0/1        2   1  Fa0/11 

00d0.bbf5.e900 ldf-dist-128 WS-C3524-XL      Fa0/7        1   0  Fa0/24      

00e0.1e7e.be80 1900_Switch  1900             3        0   1   0  Fa0/11      

00e0.1e9f.7a00 Surfers-24   WS-C2924-XL      Fa0/5        1   0  Fa0/3       

00e0.1e9f.8c00 Surfers-12-2 WS-C2912-XL      Fa0/4        1   0  Fa0/7       

00e0.1e9f.8c40 Surfers-12-1 WS-C2912-XL      Fa0/1        1   0  Fa0/9       

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch directly connected to the command switch:

Switch> show cluster candidates mac-address 00d0.7961.c4c0

Device 'Tahiti-12' with mac address number 00d0.7961.c4c0

        Device type:            cisco WS-C3512-XL

        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 0)

        Local port:             Fa0/3   FEC number: 

        Upstream port:          Fa0/13  FEC Number: 

        Hops from cluster edge: 1

        Hops from command device: 1

This is an example of output from the show cluster candidates command that uses the MAC address of a member switch three hops from the cluster edge:

Switch> show cluster candidates mac-address 0010.7bb6.1cc0

Device 'Ventura' with mac address number 0010.7bb6.1cc0

        Device type:            cisco WS-C2912MF-XL

        Upstream MAC address:   0010.7bb6.1cd4

        Local port:             Fa2/1   FEC number: 

        Upstream port:          Fa0/24  FEC Number: 

        Hops from cluster edge: 3

        Hops from command device: -

This is an example of output from the show cluster candidates detail command:

Switch> show cluster candidates detail

Device 'Tahiti-12' with mac address number 00d0.7961.c4c0

        Device type:            cisco WS-C3512-XL

        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 1)

        Local port:             Fa0/3   FEC number: 

        Upstream port:          Fa0/13  FEC Number: 

        Hops from cluster edge: 1

        Hops from command device: 2

	Device '1900_Switch' with mac address number 00e0.1e7e.be80

        Device type:            cisco 1900

        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 2)

        Local port:             3       FEC number: 0

        Upstream port:          Fa0/11  FEC Number: 

        Hops from cluster edge: 1

        Hops from command device: 2

Device 'Surfers-24' with mac address number 00e0.1e9f.7a00

        Device type:            cisco WS-C2924-XL

        Upstream MAC address:   00d0.796d.2f00 (Cluster Member 3)

        Local port:             Fa0/5   FEC number: 

        Upstream port:          Fa0/3   FEC Number: 

        Hops from cluster edge: 1

        Hops from command device: 2

Related Commands

Command	Description
show cluster	Displays the cluster status and a summary of the cluster to which the switch belongs.
show cluster members	Displays information about the cluster members.

show cluster members

Use the show cluster members privileged EXEC command on the command switch to display information about the cluster members.

show cluster members [n | detail] [ | {begin | exclude | include} expression]

Syntax Description

n	(Optional) Number that identifies a cluster member. The range is from 0 to 15.
detail	(Optional) Display detailed information for all cluster members.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

You should enter this command only on a command switch.

If the cluster has no members, this command displays an empty line at the prompt.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show cluster members command. The SN in the display means switch number.

Switch# show cluster members

                                                |---Upstream---|

SN MAC Address    Name         PortIf FEC Hops   SN PortIf  FEC  State

0  0002.4b29.2e00 StLouis1                 0                    Up   (Cmdr)

1  0030.946c.d740 tal-switch-1 Fa0/13      1     0  Gi0/1       Up

2  0002.b922.7180 nms-2820     10      0   2     1  Fa0/18      Up

3  0002.4b29.4400 SanJuan2     Gi0/1       2     1  Fa0/11      Up

4  0002.4b28.c480 GenieTest    Gi0/2       2     1  Fa0/9       Up

This is an example of output from the show cluster members for cluster member 3:

Switch# show cluster members 3

Device 'SanJuan2' with member number 3

        Device type:            cisco WS-C3550-12T

        MAC address:            0002.4b29.4400

        Upstream MAC address:   0030.946c.d740 (Cluster member 1)

        Local port:             Gi0/1   FEC number:

        Upstream port:          Fa0/11  FEC Number:

        Hops from command device: 2    

This is an example of output from the show cluster members detail command:

Switch# show cluster members detail

Device 'StLouis1' with member number 0 (Command Switch)

        Device type:            cisco WS-C3550-12T

        MAC address:            0002.4b29.2e00

        Upstream MAC address:

        Local port:                     FEC number:

        Upstream port:                  FEC Number:

        Hops from command device: 0                 

Device 'tal-switch-14' with member number 1

        Device type:            cisco WS-C3548-XL

        MAC address:            0030.946c.d740

        Upstream MAC address:   0002.4b29.2e00 (Cluster member 0)

        Local port:             Fa0/13  FEC number:

        Upstream port:          Gi0/1   FEC Number:

        Hops from command device: 1                   

Device 'nms-2820' with member number 2

        Device type:            cisco 2820

        MAC address:            0002.b922.7180

        Upstream MAC address:   0030.946c.d740 (Cluster member 1)

        Local port:             10      FEC number: 0

        Upstream port:          Fa0/18  FEC Number:

        Hops from command device: 2                        

Device 'SanJuan2' with member number 3

        Device type:            cisco WS-C3550-12T

        MAC address:            0002.4b29.4400

        Upstream MAC address:   0030.946c.d740 (Cluster member 1)

        Local port:             Gi0/1   FEC number:

        Upstream port:          Fa0/11  FEC Number:

        Hops from command device: 2

Device 'GenieTest' with member number 4

        Device type:            cisco SeaHorse

        MAC address:            0002.4b28.c480

        Upstream MAC address:   0030.946c.d740 (Cluster member 1)

        Local port:             Gi0/2   FEC number:

        Upstream port:          Fa0/9   FEC Number:

        Hops from command device: 2

Device 'Palpatine' with member number 5

        Device type:            cisco WS-C2924M-XL

        MAC address:            00b0.6404.f8c0

        Upstream MAC address:   0002.4b29.2e00 (Cluster member 0)

        Local port:             Gi2/1   FEC number:

        Upstream port:          Gi0/7   FEC Number:

        Hops from command device: 1                            

Related Commands

Command	Description
show cluster	Displays the cluster status and a summary of the cluster to which the switch belongs.
show cluster candidates	Displays a list of candidate switches.

show controllers cpu-interface

Use the show controllers cpu-interface privileged EXEC command to display the state of the CPU network interface application-specific integrated circuit (ASIC) and the send and receive statistics for packets reaching the CPU.

show controllers cpu-interface [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is a partial output example from the show controllers cpu- interface command:

Switch# show controllers cpu-interface

stp packets :950454 retrieved, 0 dropped

ram access packets :18944680 retrieved, 0 dropped

routing protocol packets :170334 retrieved, 0 dropped

forwarding packets :0 retrieved, 0 dropped

routing packets :249 retrieved, 0 dropped

L2 protocol packets :95025 retrieved, 0 dropped

igmp snooping protocol packets :746 retrieved, 0 dropped

queue7 :0 retrieved, 0 dropped

icmp redirect packets :0 retrieved, 0 dropped

icmp unreachable packets :0 retrieved, 0 dropped

logging packets :0 retrieved, 0 dropped

addr learning packets :0 retrieved, 0 dropped

rpffail packets :0 retrieved, 0 dropped

queue13 :50 retrieved, 0 dropped

queue14 :0 retrieved, 0 dropped

queue15 :0 retrieved, 0 dropped

RAM Access:

   11375600 sends   18944688 read replies       2829 write replies

   11375597 completed          0 retries          0 failures

          0 nomem          0 nobuffers          0 errors

          0 expedite toggles          0 fa-lost          0 fa-passives

SCInstance = 0xD9D558

SCInstance fields:fs_notify_failed = 0, no_fsd_space = 0

           invalid_frames = 0, unexpected_valid_frames = 0

           too_large_frames = 0

           Aged frames from notify queues and unexpected retrieves:

               aged_frames[0] = 0, unexpected_retrieves[0] = 0

               aged_frames[1] = 0, unexpected_retrieves[1] = 0

               aged_frames[2] = 0, unexpected_retrieves[2] = 0

               aged_frames[3] = 0, unexpected_retrieves[3] = 0

<output truncated>

               aged_frames[14] = 0, unexpected_retrieves[14] = 0

               aged_frames[15] = 0, unexpected_retrieves[15] = 0

           sc_cpu_buffer = 0x80000000, sc_regs = 0x81000000

           sc_notify_ram = 0x81010000

CPU Interface registers:

    0x810004A4:storage_congestion_time = 0x10

    0x810004A8:channel_number = 0x102

    0x810004AC:cpu_buffer_control = 0x1

    0x810004B0:current_time = 0x0

<output truncated>

    0x810004FC:notify_overrun_count = 0x0

    0x81000500:notify_ring_control = 0x85

    0x81000504:pci_control = 0x2A00002

<output truncated>

Related Commands

Command	Description
show controllers ethernet-controller	Displays per-interface send and receive statistics read from the hardware or the interface internal registers.
show interfaces	Displays the administrative and operational status of all interfaces or a specified interface.

show controllers ethernet-controller

Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-interface send and receive statistics read from the hardware. Use with keywords to display the interface internal registers.

show controllers ethernet-controller interface-id [asic | phy] [ | {begin | exclude | include} expression]

Syntax Description

interface-id	The physical interface.
asic	(Optional) Display the state of the internal registers on the forwarding application-specific integrated circuit (ASIC) for the interface.
phy	(Optional) Display the status of the internal registers on the switch physical layer device (PHY) for the interface.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC (only supported with the interface-id keywords in user EXEC mode)

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

This display without keywords provides traffic statistics, basically the RMON statistics for the interface.

When you enter the asic or phy keyword, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers ethernet-controller command. Table 2-15 describes the Transmit fields, and Table 2-16 describes the Receive fields.

Switch# show controllers ethernet-controller gigabitethernet0/2

Transmit GigabitEthernet0/2        Receive

3617834078 Bytes                 39726165 Bytes

    419261 Unicast frames          161535 Unicast frames

  82798461 Multicast frames        146421 Multicast frames

     12718 Broadcast frames             1 Broadcast frames

         0 Discarded frames             0 No dest, unicast

         0 Too old frames              43 No dest, multicast

         0 Deferred frames              0 No dest, broadcast

         0  1 collision frames

         0  2 collision frames          0 FCS errors

         0  3 collision frames          0 Oversize frames

         0  4 collision frames          0 Undersize frames

         0  5 collision frames          0 Collision fragments

         0  6 collision frames

         0  7 collision frames     220108 Minimum size frames

         0  8 collision frames     60959  65 to 127 byte frames

         0  9 collision frames          0 128 to 255 byte frames

         0 10 collision frames      26931 256 to 511 byte frames

         0 11 collision frames          0 512 to 1023 byte frames

         0 12 collision frames          0 1024 to 1518 byte frames

         0 13 collision frames

         0 14 collision frames          0 Flooded frames

         0 15 collision frames          0 Overrun frames

         0 Excessive collisions        16 VLAN filtered frames

         0 Late collisions              0 Source routed frames

         0 Good (1 coll) frames         0 Valid oversize frames

         0 Good(>1 coll) frames         0 Pause frames

         0 Pause frames                 0 Symbol error frames

         0 VLAN discard frames          0 Invalid frames, too large

         0 Excess defer frames          0 Valid frames, too large

         0 Too large frames             0 Invalid frames, too small

  80469577 64 byte frames               3 Valid frames, too small

   2605574 127 byte frames

     58711 255 byte frames

     26956 511 byte frames

     70222 1023 byte frames

         0 1518 byte frames

Table 2-15 Transmit Field Descriptions 

Field	Description
Bytes	The total number of bytes sent on an interface.
Unicast frames	The total number of frames sent to unicast addresses.
Multicast frames	The total number of frames sent to multicast addresses.
Broadcast frames	The total number of frames sent to broadcast addresses.
Discarded frames	The number of frames dropped on an interface.
Too old frames	The number of frames dropped on the egress port because the packet aged out.
Deferred frames	The number of frames that are not sent after the time exceeds 2*maximum-packet time.
1 collision frames	The number of frames that are successfully sent on an interface after one collision occurs.
2 collision frames	The number of frames that are successfully sent on an interface after two collisions occur.
3 collision frames	The number of frames that are successfully sent on an interface after three collisions occur.
4 collision frames	The number of frames that are successfully sent on an interface after four collisions occur.
5 collision frames	The number of frames that are successfully sent on an interface after five collisions occur.
6 collision frames	The number of frames that are successfully sent on an interface after six collisions occur.
7 collision frames	The number of frames that are successfully sent on an interface after seven collisions occur.
8 collision frames	The number of frames that are successfully sent on an interface after eight collisions occur.
9 collision frames	The number of frames that are successfully sent on an interface after nine collisions occur.
10 collision frames	The number of frames that are successfully sent on an interface after ten collisions occur.
11 collision frames	The number of frames that are successfully sent on an interface after 11 collisions occur.
12 collision frames	The number of frames that are successfully sent on an interface after 12 collisions occur.
13 collision frames	The number of frames that are successfully sent on an interface after 13 collisions occur.
14 collision frames	The number of frames that are successfully sent on an interface after 14 collisions occur.
15 collision frames	The number of frames that are successfully sent on an interface after 15 collisions occur.
Excessive collisions	The number of frames that could not be sent on an interface after 16 collisions occur.
Late collisions	After a frame is sent, the number of frames dropped because late collisions were detected while the frame was sent.
Good (1 coll) frames	The number of frames that are successfully sent on an interface after one collision occurs. This value does not include the number of frames that are not successfully sent after one collision occurs.
Good (>1 coll) frames	The number of frames that are successfully sent on an interface after more than one but less than 15 collisions occur. This value does not include the number of frames that are not successfully sent after more than one collision occurs.
Pause frames	The number of pause frames sent on an interface.
VLAN discard frames	The number of frames dropped on an interface because the CFI1 bit is set.
Excess defer frames	The number of frames that are not sent after the time exceeds the maximum-packet time.
Too large frames	The number of frames sent on an interface that are larger than the maximum allowed frame size.
64 byte frames	The total number of frames sent on an interface that are 64 bytes.
127 byte frames	The total number of frames sent on an interface that are from 65 to 127 bytes.
255 byte frames	The total number of frames sent on an interface that are from 128 to 255 bytes.
511 byte frames	The total number of frames sent on an interface that are from 256 to 511 bytes.
1023 byte frames	The total number of frames sent on an interface that are from 512 to 1023 bytes.
1518 byte frames	The total number of frames sent on an interface that are from 1024 to 1518 bytes.

1 CFI = Canonical Format Indicator

Table 2-16 Receive Field Descriptions 

Field	Description
Bytes	The total amount of memory (in bytes) used by frames received on an interface, including the FCS1 value and the incorrectly formed frames. This value excludes the frame header bits.
Unicast Frames	The total number of frames successfully received on the interface that are forwarded to unicast addresses.
Multicast frames	The total number of frames successfully received on the interface that are forwarded to multicast addresses.
Broadcast frames	The total number of frames successfully received on an interface that are forwarded to broadcast addresses.
No dest, unicast	The total number of frames received with a unicast destination address that cannot be forwarded.
No dest, multicast	The total number of frames received with a multicast destination address that cannot be forwarded.
No dest, broadcast	The total number of frames received with a broadcast destination address that cannot be forwarded.
FCS errors	The total number of frames received on an interface that have a valid length (in bytes) but do not have the correct FCS values.
Oversize frames	The number of frames received on an interface that are larger than the maximum allowed frame size.
Undersize frames	The number of frames received on an interface that are smaller than 64 bytes.
Collision fragments	The number of collision fragments received on an interface.
Minimum size frames	The total number of frames that are the minimum frame size.
65 to 127 byte frames	The total number of frames that are from 65 to 127 bytes.
128 to 255 byte frames	The total number of frames that are from 128 to 255 bytes.
256 to 511 byte frames	The total number of frames that are from 256 to 511 bytes.
512 to 1023 byte frames	The total number of frames that are from 512 to 1023 bytes.
1024 to 1518 byte frames	The total number of frames that are from 1024 to 1518 bytes.
Flooded frames	The total number of flooded frames received on an interface.
Overrun frames	The total number of overrun frames received on an interface.
VLAN filtered frames	The total number of frames that are filtered because of the VLAN information in the frame, such as an IEEE 802.1Q tag or a VLAN ID other than the IDs configured on the interface. This value does not include frames that are smaller than 64 bytes or larger than the maximum frame size
Source routed frames	The total number of frames received on an interface that are dropped because the source route bit is set in the source address of the native frame. This value includes frames that have a valid FCS value and are between 64 bytes and the maximum allowed frame size.
Valid oversize frames	The number of frames received on an interface that are larger than the maximum allowed frame size and have valid FCS values. The frame size includes the FCS value but does not include the VLAN tag.
Pause frames	The number of pause frames received on an interface.
Symbol error frames	The number of frames received on an interface that have symbol errors.
Invalid frames, too large	The number of frames received that were larger than maximum allowed MTU2 size (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too large	The number of frames received on an interface that are larger than the maximum allowed frame size.
Invalid frames, too small	The number of frames received that are smaller than 64 bytes (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too small	The number of frames received on an interface that are smaller than 64 bytes (or 68 bytes for VLAN-tagged frames) and have valid FCS values. The frame size includes the FCS bits but excludes the frame header bits.

1 FCS = frame check sequence 2 MTU = maximum transmission unit

Related Commands

Command	Description
show controllers cpu-interface	Displays the state of the CPU network ASIC and send and receive statistics for packets reaching the CPU.
show interfaces	Displays the administrative and operational status of all interfaces or a specified interface.

show controllers switch

Use the show controllers switch privileged user command to display the settings of the resource-allocation priority or the wirespeed-store feature.

show controllers switch {resource-allocation priority | wirespeed-store} [ | {begin | exclude | include} expression]

Syntax Description

resource-allocation priority	Display the resource-allocation priority setting.
wirespeed-store	Display the wirespeed setting.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(6)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers switch resource-allocation priority command:

Switch> show controllers resource-allocation priority

Switch Priority Resource Allocation is enabled.

Related Commands

Command	Description
switchcore resource-allocation priority switchcore wirespeed-store	Reserves switch resources for high-priority traffic or gives buffer storage more priority than packet retrieval.

show controllers tcam

Use the show controllers tcam privileged EXEC command to display the state of the registers for all ternary content addressable memory (TCAM) in the system and for all TCAM interface application-specific integrated circuits (ASICs) that are CAM controllers.

show controllers tcam [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers tcam command:

Switch# show controllers tcam

CAM Controller 1:

  Revision: 5A5A5A00, Control: 0000025F, Status: 00000000.

  CAM 1:

    Revision: 00 00000000 00B30101

    Size: 00 00000000 00080040

    Device ID: 00 00000000 00000000

    Config: 00 00000000 88000002

    ReplyID[0]: 00 00000000 00000000

    ReplyID[1]: 00 00000000 00000000

    ReplyID[2]: 00 00000000 00000000

    ReplyID[3]: 00 00000000 00000000

    Hit Result[0]: 00 00000000 00000000

    Hit Result[1]: 00 00000000 00000000

    Hit Result[2]: 00 00000000 00000000

    Hit Result[3]: 00 00000000 00000000

    Hit Result[4]: 00 00000000 00000000

    Hit Result[5]: 00 00000000 00000000

    Hit Result[6]: 00 00000000 00000000

    Hit Result[7]: 00 E00004E8 40001A63

    Global Mask[10]: FF FFFFFFFF FFFFFFFF

    Global Mask[11]: FF FFFFFFFF FFFFFFFF

    Global Mask[12]: FF FFFFFFFF FFFFFFFF

    Global Mask[13]: FF FFFFFFFF FFFFFFFF

    Global Mask[14]: FF FFFFFFFF FFFFFFFF

    Global Mask[15]: FF FFFFFFFF FFFFFFFF

    Global Mask[16]: FF FFFFFFFF FFFFFFFF

    Global Mask[20]: FF FFFFFFFF FFFFFFFF

    Global Mask[21]: FF FFFFFFFF FFFFFFFF

    Global Mask[22]: FF FFFFFFFF FFFFFFFF

    Global Mask[23]: FF FFFFFFFF FFFFFFFF

    Global Mask[24]: FF FFFFFFFF FFFFFFFF

    Global Mask[25]: FF FFFFFFFF FFFFFFFF

    Global Mask[26]: FF FFFFFFFF FFFFFFFF

    Global Mask[27]: FF FFFFFFFF FFFFFFFF

    Global Mask[30]: FF FFFFFFFF FFFFFFFF

    Global Mask[31]: FF FFFFFFFF FFFFFFFF

    Global Mask[32]: FF FFFFFFFF FFFFFFFF

    Global Mask[33]: FF FFFFFFFF FFFFFFFF

  CAM 2:

    Revision: 00 00000000 00B30101

    Size: 00 00000000 00080040

    Device ID: 00 00000000 00000001

    Config: 00 00000000 B8000022

    ReplyID[0]: 00 01010101 01010101

    ReplyID[1]: 00 01010101 01010101

   ReplyID[2]: 00 01010101 01010101

   ReplyID[3]: 00 01010101 01010101

   Hit Result[0]: 00 00000000 00000000

   Hit Result[1]: 00 00000000 00000000

   Hit Result[2]: 00 00000000 00000000

   Hit Result[3]: 00 00000000 00000000

   Hit Result[4]: 00 00000000 00000000

   Hit Result[5]: 00 00000000 00000000

   Hit Result[6]: 00 00000000 00000000

   Hit Result[7]: 00 60003880 C00011D3

   Global Mask[10]: FF FFFFFFFF FFFFFFFF

   Global Mask[11]: FF FFFFFFFF FFFFFFFF

   Global Mask[12]: FF FFFFFFFF FFFFFFFF

   Global Mask[13]: FF FFFFFFFF FFFFFFFF

   Global Mask[14]: FF FFFFFFFF FFFFFFFF

   Global Mask[15]: FF FFFFFFFF FFFFFFFF

   Global Mask[16]: FF FFFFFFFF FFFFFFFF

   Global Mask[20]: FF FFFFFFFF FFFFFFFF

   Global Mask[21]: FF FFFFFFFF FFFFFFFF

   Global Mask[22]: FF FFFFFFFF FFFFFFFF

<output truncated>

show controllers utilization

Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports.

show controllers [interface-id] utilization [ | {begin | exclude | include} expression]

Syntax Description

interface-id	(Optional) ID of the switch interface.
| begin	(Optional) Display begins with the line that matches the specified expression.
| exclude	(Optional) Display excludes lines that match the specified expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.2(25)SE	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show controllers utilization command.

Switch> show controllers utilization

Port       Receive Utilization  Transmit Utilization

Fa0/1              0                    0

Fa0/2              0                    0

<output truncated>

Total Ports : 12

Switch Receive Bandwidth Percentage Utilization  : 0

Switch Transmit Bandwidth Percentage Utilization : 0

Switch Fabric Percentage Utilization : 0

This is an example of output from the show controllers utilization command on a specific port:

Switch> show controllers fastethernet0/1 utilization

Receive Bandwidth Percentage Utilization   : 0

Transmit Bandwidth Percentage Utilization  : 0

Table 2-17 show controllers utilization Field Descriptions

Field	Description
Receive Bandwidth Percentage Utilization	Displays the received bandwidth usage of the switch, which is the sum of the received traffic on all the ports divided by the switch receive capacity.
Transmit Bandwidth Percentage Utilization	Displays the transmitted bandwidth usage of the switch, which is the sum of the transmitted traffic on all the ports divided it by the switch transmit capacity.
Fabric Percentage Utilization	Displays the average of the transmitted and received bandwidth usage of the switch.

Related Commands

Command	Description
show controllers ethernet-controller	Displays the interface internal registers.

show dot1q-tunnel

Use the show dot1q-tunnel user EXEC command to display information about IEEE 802.1Q tunnel ports.

show dot1q-tunnel [interface interface-id] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id	(Optional) Specify the interface for which to display IEEE 802.1Q tunneling information. Valid interfaces include physical ports and port channels.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(9)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

These are examples of output from the show dot1q-tunnel command:

Switch> show dot1q-tunnel

LAN Port(s)

-----

Gi0/1

Gi0/2

Gi0/3

Gi0/6

Po2

Switch> show dot1q-tunnel interface gigabitethernet0/1 

LAN Port(s)

-----

Gi0/1

Related Commands

Command	Description
show vlan dot1q tag native	Displays IEEE 802.1Q native VLAN tagging status.
switchport mode dot1q-tunnel	Configures an interface as an IEEE 802.1Q tunnel port.

show dot1x

Use the show dot1x user EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified interface.

show dot1x [{all [summary] | interface interface-id} [details | statistics]] [ | {begin | exclude | include} expression]

Syntax Description

all [summary]	(Optional) Display the IEEE 802.1x status for all ports.
interface interface-id	(Optional) Display the IEEE 802.1x status for the specified interface.
details	(Optional) Display the IEEE 802.1x interface details.
statistics	(Optional) Display IEEE 802.1x statistics for the specified port.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(8)EA1	This command was introduced.
12.1(14)EA1	The all keyword was added.
12.2(25)SED	The display was expanded to include auth-fail-vlan in the authorization state machine state and port status fields.
12.2(25)SEE	The command syntax was changed, and the command output was modified.

Usage Guidelines

If you do not specify a port, global parameters and a summary appear. If you specify a port, details for that port appear.

If the port control is configured as unidirectional or bidirectional control and this setting conflicts with the switch configuration, the show dot1x {all | interface interface-id} privileged EXEC command output has this information:

ControlDirection          = In (Inactive)

If you do not specify an interface, global parameters and a summary appear. If you specify an interface, details for that interface appear.

If you specify the statistics keyword without the interface interface-id option, statistics appear for all interfaces. If you specify the statistics keyword with the interface interface-id option, statistics appear for the specified interface.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show dot1x user EXEC command:

Switch> show dot1x 

Sysauthcontrol              Enabled

Dot1x Protocol Version            2

Critical Recovery Delay         100

Critical EAPOL             Disabled

This is an example of output from the show dot1x all user EXEC command:

Switch> show dot1x all

Sysauthcontrol              Enabled

Dot1x Protocol Version            2

Critical Recovery Delay         100

Critical EAPOL             Disabled

Dot1x Info for FastEthernet0/1

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = Both

HostMode                  = SINGLE_HOST

ReAuthentication          = Disabled

QuietPeriod               = 60

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 30

RateLimitPeriod           = 0

<output truncated>

This is an example of output from the show dot1x all summary user EXEC command:

Interface       PAE     Client          Status

--------------------------------------------------------

Fa0/1           AUTH    none            UNAUTHORIZED

Fa0/2           AUTH    00a0.c9b8.0072  AUTHORIZED

Fa0/3           AUTH    none            UNAUTHORIZED

This is an example of output from the show dot1x interface interface-id user EXEC command:

Switch> show dot1x interface fastethernet0/2

Dot1x Info for FastEthernet0/2

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = In

HostMode                  = SINGLE_HOST

ReAuthentication          = Disabled

QuietPeriod               = 60

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 30

RateLimitPeriod           = 0

This is an example of output from the show dot1x interface interface-id details user EXEC commmand:

Switch# show dot1x interface fastethernet0/2 details

Dot1x Info for FastEthernet0/2

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = Both

HostMode                  = SINGLE_HOST

ReAuthentication          = Disabled

QuietPeriod               = 60

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 30

RateLimitPeriod           = 0

Dot1x Authenticator Client List Empty

This is an example of output from the show dot1x interface interface-id details command when a port is assigned to a guest VLAN and the host mode changes to multiple-hosts mode:

Switch# show dot1x interface fastethernet0/1 details

Dot1x Info for FastEthernet0/1

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = Both 

HostMode                  = SINGLE_HOST

ReAuthentication          = Enabled

QuietPeriod               = 60

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 30

RateLimitPeriod           = 0

Guest-Vlan                = 182

Dot1x Authenticator Client List Empty

Port Status               = AUTHORIZED

Authorized By             = Guest-Vlan

Operational HostMode      = MULTI_HOST 

Vlan Policy               = 182

This is an example of output from the show dot1x interface interface-id statistics command. Table 2-18 describes the fields in the display.

Switch> show dot1x interface fastethernet0/2 statistics

Dot1x Authenticator Port Statistics for FastEthernet0/2

--------------------------------------------

RxStart = 0     RxLogoff = 0    RxResp = 1      RxRespID = 1

RxInvalid = 0   RxLenErr = 0    RxTotal = 2

TxReq = 2       TxReqID = 132   TxTotal = 134

RxVersion = 2   LastRxSrcMAC = 00a0.c9b8.0072

Table 2-18 show dot1x statistics Field Descriptions 

Field	Description
RxStart	Number of valid EAPOL-start frames that have been received.
RxLogoff	Number of EAPOL-logoff frames that have been received.
RxResp	Number of valid EAP-response frames (other than response/identity frames) that have been received.
RxRespID	Number of EAP-response/identity frames that have been received.
RxInvalid	Number of EAPOL frames that have been received and have an unrecognized frame type.
RxLenError	Number of EAPOL frames that have been received in which the packet body length field is invalid.
RxTotal	Number of valid EAPOL frames of any type that have been received.
TxReq	Number of EAP-request frames (other than request/identity frames) that have been sent.
TxReqId	Number of Extensible Authentication Protocol (EAP)-request/identity frames that have been sent.
TxTotal	Number of Extensible Authentication Protocol over LAN (EAPOL) frames of any type that have been sent.
RxVersion	Number of received packets in the IEEE 802.1x Version 1 format.
LastRxSrcMac	Source MAC address carried in the most recently received EAPOL frame.

Related Commands

Command	Description
dot1x control-direction	Resets the configurable IEEE 802.1x parameters to their default values.

show env

Use the show env user EXEC command to display fan, temperature, and power information for the switch.

show env {all | fan | power | rps | temperature} [ | {begin | exclude | include} expression]

Syntax Description

all	Display both fan and temperature environmental status.
fan	Display the switch fan status.
power	Display the switch power status.
rps	Display the Redundant Power System (RPS) status.
temperature	Display the switch temperature status.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(9)EA1	The power and rps keywords were added.
12.1(12c)EA1	The fan and power keywords were added.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show env all command:

Switch> show env all

FAN is FAULTY

TEMPERATURE is OK 

This is an example of output from the show env power command:

Switch> show env power

POWER is OK

This is an example of output from the show env rps command:

Switch> show env rps

RPS is NOT PRESENT

show errdisable detect

show errdisable detect [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable detect command:

Switch> show errdisable detect

ErrDisable Reason    Detection status

-----------------    ----------------

udld                 Enabled

bpduguard            Enabled

security-violatio    Enabled

channel-misconfig    Enabled

psecure-violation    Enabled

vmps                 Enabled

loopback             Enabled

unicast-flood        Enabled

pagp-flap            Enabled

dtp-flap             Enabled

link-flap            Enabled

l2ptguard            Enabled

gbic-invalid         Enabled

dhcp-rate-limit      Enabled

unicast-flood        Enabled

storm-control        Enabled

ilpower              Enabled

arp-inspection       Enabled

---

Note Though visible in the output, the arp-inspection, ilpower, storm-control, and unicast-flood fields are not valid.

---

Related Commands

Command	Description
errdisable detect cause	Enables error-disable detection for a specific cause or all causes.
show errdisable flap-values	Displays error condition recognition information.
show errdisable recovery	Displays error-disable recovery timer information.
show interfaces status	Displays interface status or a list of interfaces in error-disabled state.

show errdisable flap-values

Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause.

show errdisable flap-values [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.

ErrDisable Reason    Flaps    Time (sec)

-----------------    ------   ----------

pagp-flap              3       30

dtp-flap               3       30

link-flap              5       10

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable flap-values command:

Switch> show errdisable flap-values

ErrDisable Reason    Flaps    Time (sec)

-----------------    ------   ----------

pagp-flap              3       30

dtp-flap               3       30

link-flap              5       10

Related Commands

Command	Description
errdisable detect cause	Enables error-disable detection for a specific cause or all causes.
show errdisable detect	Displays error-disable detection status.
show errdisable recovery	Displays error-disable recovery timer information.
show interfaces status	Displays interface status or a list of interfaces in error-disabled state.

show errdisable recovery

Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.

show errdisable recovery [ | {begin | exclude | include} expression]

Syntax Description

| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show errdisable recovery command:

Switch> show errdisable recovery

ErrDisable Reason    Timer Status

-----------------    --------------

udld                 Disabled

bpduguard            Disabled

security-violatio    Disabled

channel-misconfig    Disabled

vmps                 Disabled

pagp-flap            Disabled

dtp-flap             Disabled

link-flap            Disabled

l2ptguard            Disabled

psecure-violation    Disabled

gbic-invalid         Disabled

dhcp-rate-limit      Disabled

unicast-flood        Disabled

storm-control        Disabled

arp-inspection       Disabled

loopback             Disabled

Timer interval:300 seconds

Interfaces that will be enabled at the next timeout:

Interface    Errdisable reason    Time left(sec)

---------    -----------------    --------------

Gi0/4           link-flap             279 

---

Note Though visible in the output, the unicast-flood field is not valid.

---

Related Commands

Command	Description
errdisable recovery	Configures the recover mechanism variables.
show errdisable detect	Displays error disable detection status.
show errdisable flap-values	Displays error condition recognition information.
show interfaces status	Displays interface status or a list of interfaces in error-disabled state.

show etherchannel

Use the show etherchannel user EXEC command to display EtherChannel information for a channel.

show etherchannel [channel-group-number] {detail | load-balance | port | port-channel | summary | protocol} [ | {begin | exclude | include} expression]

Syntax Description

channel-group-number	(Optional) Number of the channel group. The range is 1 to 64.
detail	Display detailed EtherChannel information.
load-balance	Display the load-balance or frame-distribution scheme among ports in the port channel.
port	Display EtherChannel port information.
port-channel	Display port-channel information.
protocol	Display the protocol that is being used in the EtherChannel.
summary	Display a one-line summary per channel-group.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(14)EA1	The brief keyword was removed.

Usage Guidelines

If you do not specify a channel-group, all channel groups appear.

In the output, the Passive port list field appears only for Layer 3 port channels. This field means that the physical interface, which is still not up, is configured to be in the channel group (and indirectly is in the only port channel in the channel group).

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show etherchannel 1 detail command:

Switch> show etherchannel 1 detail

Group state = L2 

Ports: 2   Maxports = 8 

Port-channels: 1 Max Port-channels = 1

                Ports in the group:

                -------------------

Port: Gi0/1

------------

Port state    = Up Mstr In-Bndl 

Channel group = 1           Mode = Desirable-Sl     Gcchange = 0

Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1

Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.

        A - Device is in Auto mode.        P - Device learns on physical port.

        d - PAgP is down.

Timers: H - Hello timer is running.        Q - Quit timer is running.

        S - Switching timer is running.    I - Interface timer is running.

Local information:

                                Hello    Partner  PAgP     Learning  Group

Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex

Gi0/1     SC    U6/S7   H       30s      1        128        Any      16

Partner's information:

          Partner              Partner          Partner         Partner Group

Port      Name                 Device ID        Port       Age  Flags   Cap.

Gi0/1     vegas-p2             0002.4b29.4600   Gi0/1        9s SC      10001 

Age of the port in the current state: 00d:00h:07m:52s

Port: Gi0/2

------------

Port state    = Up Mstr In-Bndl 

Channel group = 1           Mode = Desirable-Sl     Gcchange = 0

Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1

Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.

        A - Device is in Auto mode.        P - Device learns on physical port.

        d - PAgP is down.

Timers: H - Hello timer is running.        Q - Quit timer is running.

        S - Switching timer is running.    I - Interface timer is running.

Local information:

                                Hello    Partner  PAgP     Learning  Group

Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex

Gi0/2     SC    U6/S7   H       30s      1        128        Any      16

Partner's information:

          Partner              Partner          Partner         Partner Group

Port      Name                 Device ID        Port       Age  Flags   Cap.

Gi0/2     vegas-p2             0002.4b29.4600   Gi0/2        4s SC      10001 

Age of the port in the current state: 00d:00h:07m:55s

                Port-channels in the group: 

                ----------------------

Port-channel: Po1

------------

Age of the Port-channel   = 00d:00h:08m:28s

Logical slot/port   = 1/0           Number of ports = 2

GC                  = 0x00010001      HotStandBy port = null

Port state          = Port-channel Ag-Inuse 

Ports in the Port-channel: 

Index   Load   Port    EC state

------+------+------+------------

  0     00     Gi0/1    desirable-sl  

  0     00     Gi0/2    desirable-sl  

Time since last port bundled:    00d:00h:07m:56s    Gi0/1

This is an example of output from the show etherchannel 1 protocol command:

Switch# show etherchannel 1 protocol

Protocol:  LACP

This is an example of output from the show etherchannel 1 summary command:

Switch> show etherchannel 1 summary

Flags:  D - down        P - in port-channel

        I - stand-alone s - suspended

        R - Layer3      S - Layer2

        U - port-channel in use

Group Port-channel  Ports

-----+------------+-----------------------------------------------------------

1     Po1(SU)     Gi0/1(P)   Gi0/2(P) 

This is an example of output from the show etherchannel 1 port-channel command:

Switch> show etherchannel 1 port-channel 

Port-channels in the group: 

                ----------------------

Port-channel: Po1

------------

Age of the Port-channel   = 00d:00h:10m:41s

Logical slot/port   = 1/0           Number of ports = 2

GC                  = 0x00010001      HotStandBy port = null

Port state          = Port-channel Ag-Inuse 

Ports in the Port-channel: 

Index   Load   Port    EC state

------+------+------+------------

  0     00     Gi0/1    desirable-sl  

  0     00     Gi0/2    desirable-sl  

Time since last port bundled:    00d:00h:10m:08s    Gi0/1

Related Commands

Command	Description
channel-group	Assigns an Ethernet interface to an EtherChannel group.
interface port-channel	Accesses or creates the port channel.

show flowcontrol

Use the show flowcontrol user EXEC command to display the flow control status and statistics.

show flowcontrol [interface interface-id | module module-number] [ | {begin | exclude | include} expression]

Syntax Description

interface interface-id	(Optional) Display the flow control status and statistics for a specific interface.
module module-number	(Optional) Display the flow control status and statistics for all interfaces. The only valid module-slot value is 0.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.1(14)EA1	This command was introduced.

Usage Guidelines

Use this command to display the flow control status and statistics on the switch or about a specific interface.

Use the show flowcontrol command to display information about all the switch interfaces. The output from the show flowcontrol command is the same as the output from the show flowcontrol module module-number command.

Use the show flowcontrol interface interface-id command to display information about the Gigabit Ethernet interfaces on the switch.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show flowcontrol command:

Switch> show flowcontrol

Port       Send FlowControl  Receive FlowControl  RxPause TxPause

           admin    oper     admin    oper

---------  -------- -------- -------- --------    ------- -------

Gi0/1      Unsupp.  Unsupp.  off      off         0       0

Gi0/2      desired  off      off      off         0       0

<output truncated>

This is an example of output from the show flowcontrol interface interface-id command:

Switch> show flowcontrol gigabitethernet0/2

Port       Send FlowControl  Receive FlowControl  RxPause TxPause

           admin    oper     admin    oper

---------  -------- -------- -------- --------    ------- -------

Gi0/2      desired  off      off      off         0       0

Related Commands

Command	Description
flowcontrol	Sets the receive flow-control state for an interface.

show fm

Use the show fm privileged EXEC command to display feature-manager information for a specified port label or VLAN label to list features associated with that label, including if any features were not able to fit in the hardware or if configuration conflicts have occurred. Use the show fm interface or show fm vlan command to determine the port-label or vlan-label number.

show fm {{port-label label-id} | {vlan-label label-id}} [ | {begin | exclude | include} expression]

Syntax Description

port-label label-id	Port labels are used features configured on a port, such as port ACLs. The range is 0 to 127.
vlan-label label-id	VLAN labels are used for features configured on VLANs, such as router ACLs and VLAN maps. The range is 0 to 255.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(9)EA1	The label keyword was replaced by the port-label and vlan-label keywords.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

When the output shows Conflicts exist with other access groups, there is a configuration conflict with access control lists (ACLs) on the switch. You are trying to apply a port ACL to a switch that already has VLAN maps or input router ACLs applied; or you are trying to apply an input router ACL or VLAN map to a switch that has port ACLs applied.

When the output shows an unloaded indicator or no number following the Loaded into CAM(s): entry, the feature was not loaded in the hardware. To allocate more system resources to maximize the number of security ACLs that can fit in the hardware, you can use the sdm prefer access global configuration command to set the Switch Database Management feature to the access template.

If the output shows a merge failure, the sdm prefer access global configuration command has no effect.

Examples

You can enter the show fm interface privileged EXEC command for an interface to learn the port-label number for the port. You can then enter the show fm port-label privileged EXEC command to display more details, as shown in this example:

Switch# show fm interface gigabitethernet0/1

Conflicts exist with layer 3 access groups.

Input Port Label:2

Switch# show fm port-label 2

Conflicts exist with layer 3 access groups.

Needed in CAM(s):1

Loaded into CAM(s):1

Sent to CPU by CAM(s):

Interfaces: Gi0/1

IP Access Group:ip3 0 VMRs

DHCP Broadcast Suppression Disabled.

MAC Access Group:(None) 0 VMRs

This example of the show fm port-label 3 output shows that there was not enough room in hardware to load an ACL. Label 3 is needed in CAM 1 but is not loaded in CAM 1; instead, it is sent to the CPU.

Switch# show fm port-label 3

Needed in CAM(s):1

Loaded into CAM(s):

Sent to CPU by CAM(s):1

Interfaces: Gi0/3

IP Access Group:100 3400 VMRs

DHCP Broadcast Suppression Disabled.

MAC Access Group:(None) 2 VMRs

This is an example of output from the show fm vlan-label command when there has been a merge failure on an input access-group:

Switch# show fm vlan-label 1

Unloaded due to merge failure or lack of space:

  InputAccessGroup 

  Merge Fail:input

Input Features:

  Interfaces or VLANs: Vl1

  Priority:normal

  Vlan Map:(none)

  Access Group:131, 6788 VMRs

  Multicast Boundary:(none), 0 VMRs

Output Features:

  Interfaces or VLANs:

  Priority:low

  Bridge Group Member:no

  Vlan Map:(none)

  Access Group:(none), 0 VMRs

This is an example of output from the show fm vlan-label command when there was not enough room for an input access group in the hardware:

Switch# show fm vlan-label 1

Unloaded due to merge failure or lack of space:

  InputAccessGroup 

Input Features:

  Interfaces or VLANs: Vl1

  Priority:normal

  Vlan Map:(none)

  Access Group:bigone, 11 VMRs

  Multicast Boundary:(none), 0 VMRs

Output Features:

  Interfaces or VLANs:

  Priority:low

  Bridge Group Member:no

  Vlan Map:(none)

  Access Group:(none), 0 VMRs

This is an example of output from the show fm vlan-label command when there was not enough room for the input access group or the output access group on the label. Note that the access groups were configured on two different interfaces. Labels are assigned independently for input and output.

Switch# show fm vlan-label 1

Unloaded due to merge failure or lack of space:

  InputAccessGroup OutputAccessGroup 

Input Features:

  Interfaces or VLANs: Vl1

  Priority:normal

  Vlan Map:(none)

  Access Group:bigone, 11 VMRs

  Multicast Boundary:(none), 0 VMRs

Output Features:

  Interfaces or VLANs: Vl2

  Priority:normal

  Bridge Group Member:no

  Vlan Map:(none)

  Access Group:bigtwo, 11 VMRs

Related Commands

Command	Description
show fm interface	Displays per-interface feature manager information.
show fm vlan	Displays per-VLAN feature manager information.

show fm interface

Use the show fm interface privileged EXEC command to display per-interface feature-manager information. Use it with the show fm port-label privileged EXEC command to get information about features applied to the interface.

show fm interface interface-id [ | {begin | exclude | include} expression]

Syntax Description

interface-id	Specify an interface; valid interfaces include: •physical interface—type and port number. •port channel—port-channel port-channel-number (1 to 64). •null—null 0. •VLAN—vlan vlan-id (1 to 4094; do not enter leading zeros). VLAN interfaces are VLANs that have a switch virtual interface (SVI) assigned.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(13)EA1	This command was modified to include policy-based routing (PBR) information.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show fm interface gigabitethernet0/1 command:

Switch# show fm interface gigabitethernet0/1

  Conflicts exist with layer 3 access groups.

  Input Port Label:2

You can then use the show fm port-label 2 privileged EXEC command to view more detail.

This is an example of output from the show fm interface vlan 1 command with PBR enabled on the interface.

Switch# show fm interface vlan 1

Input VLAN Label: 1

Output VLAN Label: 0 (default)

Policy Label: 9

Priority: normal

Related Commands

Command	Description
show fm	Displays feature-manager information for a specified label and lists configuration conflicts or features associated with that label that were not able to fit into the hardware.
show fm vlan	Displays per-VLAN feature manager information.

show fm vlan

Use the show fm vlan privileged EXEC command to display per-VLAN feature-manager information. Use with the show fm vlan-label privileged EXEC command to get information about features applied to the VLAN.

show fm vlan vlan-id [ | {begin | exclude | include} expression]

Syntax Description

vlan-id	Any VLAN ID, whether or not a switch virtual interface (SVI) has been assigned. The range is 1 to 4094.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show fm vlan 1 command that shows an ACL configuration conflict. It displays the VLAN label used in hardware for VLAN feature configuration.

Switch# show fm vlan 1

Conflicts exist with layer 2 access groups.

Input VLAN Label:1

Output VLAN Label:0 (default)

Priority:normal

Related Commands

Command	Description
show fm interface	Displays per-interface feature manager information.
show fm	Displays feature-manager information for a specified label and lists configuration conflicts or features associated with that label that were not able to fit into the hardware.

show forward

Use the show forward privileged EXEC command for an interface to determine how the hardware would forward a frame that matches the specified parameters.

show forward interface-id [vlan vlan-id] src-mac dst-mac [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac [ip src-ip dst-ip [protocol-num] [adjacency adjacency_index] [dscp dscp] [frag fragment] [option] | {icmp icmp-type icmp-code} | {igmp igmp-version igmp-type} | {tcp src-port dst-port flags} | {udp src-port dst-port}}] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac sap lsap [cos cos] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

show forward interface-id [vlan vlan-id] src-mac dst-mac [arpa ethertype | snap snap_type] [cos cos] [ex-class] [ex-l4op] [ex-qos] [ex-sig] [ | {begin | exclude | include} expression]

Syntax Description

interface-id	The input physical interface.
vlan vlan-id	(Optional) Input VLAN ID. The range is 1 to 4094. If not specified, and the input interface is not a routed port, the default is 1. You should specify the input VLAN even for access ports.
src-mac	48-bit source MAC address.
dst-mac	48-bit destination MAC address.
ex-class	(Optional) Display detailed packet processing information related to classification.
ex-l4op	(Optional) Display detailed packet processing information related to Layer 4 operations.
ex-qos	(Optional) Display detailed packet processing information related to quality of service (QoS).
ex-sig	(Optional) Display detailed packet processing information related to the part of the hardware that recognizes frame formats (signature tables).
ip src-ip dst-ip	(Optional) Source and destination IP addresses in dotted decimal notation.
protocol-num	The numeric value of the protocol field in the IP header. The range is 0 to 255. For example, 47 is generic routing encapsulation (GRE), 89 is Open Shortest Path First (OSPF). If is TCP, UDP, ICMP, or IGMP, you should use the appropriate keyword instead of a numeric value.
adjacency adjacency_index	(Optional) Hardware adjacency to be used when a route has more than one adjacency as with multipath routes. The range is from 0 to 7.
dscp dscp	(Optional) Differentiated services code point (DSCP) field in the IP header. The range is 0 to 63.
frag fragment	(Optional) Two-byte IP fragment field in the IP header. This field includes the Don't Fragment bit (0x4000), the More Fragments bit (0x2000), and the Fragment Offset (0x0 through 0x1FFF). The default is 0x0 (unfragmented packet).
option	(Optional) Keyword signifying IP options are present in the packet.
icmp icmp-type icmp-code	Internet Control Message Protocol (ICMP) parameters. The icmp-type and icmp-code ranges are 0 to 255.
igmp igmp-version igmp-type	Internet Group Management Protocol (IGMP) parameters. The igmp-version and igmp-type ranges are 0 to 255.
tcp src-port dst-port flags	TCP parameters: TCP source port, destination port, and the numeric value of the TCP flags byte. The src-port and dst-port ranges are 0 to 65535.
udp src-port dst-port	User Datagram Protocol (UDP) parameters. The src-port and dst-port ranges are 0 to 65535.
cos cos	(Optional) Class of service (CoS) value of the frame. The range is 0 to 1024.
arpa ethertype	(Optional) Address Resolution Protocol (ARP) Ethernet II encapsulation type and the Ethertype field. The range is 0 to 65535.
snap snap_type	(Optional) Subnetwork Access Protocol (SNAP) encapsulation type and the Ethertype field. The range is 0 to 65535.
sap lsap	(Optional) Service access point (SAP) encapsulation type and the LSAP field. The range is 0 to 65535.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.

Usage Guidelines

If you enter this command without any arguments, you enter a dialog mode. This mode is not operational in this release.

Because of the many and varied items that go into the forwarding decision, this command requires detailed information about the frame in order to correctly indicate how the hardware would forward the frame.

This command has limited ability to account for QoS settings. It does not take into account any packet arrival rates, so if the system has been configured to mark down or police traffic based on data arrival rates, the command will display inaccurate information for traffic that exceeds the configured rates.

If QoS or ACLs are not configured, and if no port-channel interfaces are present, the most important parameters to specify are source interface, source VLAN, destination MAC address, and destination IP address (if applicable). The output is likely to be accurate, even if other parameters are missing or estimated.

If port channel interfaces are present, it is important to specify the source MAC address and IP address correctly.

If ACLs are present, all keywords in the command could be important to the forwarding decision.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

Following are three examples of outputs from the show forward command. Table 2-19 describes the major sections in the output display.

In this example, the destination MAC address is the router's MAC address and routing lookups are performed:

Switch# show forward fastethernet0/1 vlan 8 0000.1111.2222 0022.3355.8800 ip 8.8.8.10 
4.4.4.33 255

signature:00000007, comparison ind:10, control info:2000941A control map:00000000

vlan:8, vlanid entry:000C0012 00000000 00000000 04400000

adjptr:D  adjacency:E0002409 00000404 04210000

vlan:1033, vlanid entry:0004000A 00000000 00000000 00000000

vlan:1033, vlanid entry:0004000A 00000000 00000000 00000000

lookup  key                                   bk adata    rawoff secoff sec

qos     960808080A04040421 800000000000FF0000 0  00000000 006304 004064  4

acl     960808080A04040421 800000000000FF0000 1  00000082 045408 002016  1

route   420808080A04040421 000000000000000000 0  3FFF800D 006361 000025  3

learn   187008000011112222 901208000004040421 0  80010003 002176 002176  0

forw    187008000011112222 901208000004040421 1  40020000 043328 010560  5

outacli A60808080A04040421 800000000000FF0000 0  00000083 012448 002016  2

bridgeDestMap:  00000000 00000000 0000FFFF FFFFFFC7

vlanMask:       00000000 00000000 0000FFFF EFFFFFFF

sourceMask:     00000000 00000000 00000000 00000000

globalMap:      00000000 00000000 00000000 00000000

globalMask:     00000000 00000000 0002FFFF EFFFFC03

forwMap:        00000000 00000000 00000000 10000000

frame notifies:

src u_dat vlan fl q-map

2   00    8    01 00000000 00000000 00000000 10000000

Egress q 44

signature:00000007, comparison ind:10, control info:2000941A control map:00000000

vlan:8, vlanid entry:000C0012 00000000 00000000 00000000

adjptr:D  adjacency:E0002409 00000404 04210000

vlan:1033, vlanid entry:0004000A 00000000 88000000 00000000

lookup  key                                   bk adata    rawoff secoff sec

route   420808080A04040421 000000000000000000 0  3FFF800D 006361 000025  3

GigabitEthernet0/1 vlan 1033, dst 0000.0404.0421 src 0022.3355.8800, cos 0x0, dscp 0x0

In this example, the destination MAC address is not the router's MAC address. No routing lookups are performed:

Switch# show forward fastethernet0/1 vlan 8 0000.1111.2222 0022.3355.9800 ip 8.8.8.10 
4.4.4.33 255

signature:00000007, comparison ind:10, control info:2000941A control map:00000000

vlan:8, vlanid entry:000C0012 00000000 00000000 04620000

vlan:8, vlanid entry:000C0012 00000000 00000000 04620000

lookup  key                                   bk adata    rawoff secoff sec

qos     940808080A04040421 800000000000FF0000 0  00000000 006304 004064  4

acl     940808080A04040421 800000000000FF0000 1  00000082 045408 002016  1

learn   187008000011112222 801008002233559800 0  80010003 002176 002176  0

forw    187008000011112222 801008002233559800 1  40020000 043328 010560  5

bridgeDestMap:  00000000 00000000 0000FFFF FFFFFFC7

vlanMask:       00000000 00000000 0000FFFF FFFFFE7F

portMask:       00000000 00000000 00000000 00000080

sourceMask:     00000000 00000000 00000000 00000000

globalMap:      00000000 00000000 00000000 00000000

globalMask:     00000000 00000000 0002FFFF EFFFFC03

forwMap:        00000000 00000000 00000000 00000100

frame notifies:

src u_dat vlan fl q-map

2   00    8    00 00000000 00000000 00000000 00000100

Egress q 8

signature:00000007, comparison ind:10, control info:2000941A control map:00000000

vlan:8, vlanid entry:000C0012 00000000 00000000 04620000

FastEthernet0/2 vlan 8, dst 0022.3355.9800 src 0000.1111.2222, cos 0x0, dscp 0x0

This is an example of the display that results if one of the destinations for the packet is the switch CPU. Note that in this case the section after the frame notifies section is labeled Cpu q and that a queue name appears:

Switch# show forward fastethernet0/1 vlan 7 0000.1111.2222 0022.3355.8800 ip 1.1.1.1 
7.7.7.1 255

signature:00000007, comparison ind:11, control info:2000941A control map:00000000

vlan:7, vlanid entry:000C0011 00000000 00318C60 88000000

adjptr:0  adjacency:00000000 00000000 0000C000

vlan:7, vlanid entry:000C0011 00000000 00318C60 88000000

lookup  key                                   bk adata    rawoff secoff sec

qos     960101010107070701 800000000000FF0000 0  00000000 006304 004064  4

acl     960101010107070701 800000000000FF0000 1  00000082 045408 002016  1

route   420101010107070701 000000000000000000 0  00048000 006345 000009  3

learn   186007000011112222 800E08002233558800 0  80010003 002176 002176  0

forw    186007000011112222 800E08002233558800 1  40090000 033000 000232  5

bridgeDestMap:  00000000 00000000 00000000 00000000

routeDestMap:   00000000 00000000 00100000 00000000

sourceMask:     00000000 00000000 00000000 00000000

globalMap:      00000000 00000000 00000000 00000000

globalMask:     00000000 00000000 0002FFFF EFBFFC03

forwMap:        00000000 00000000 00100000 00000000

frame notifies:

src u_dat vlan fl q-map

2   00    7    01 00000000 00000000 00100000 00000000

Cpu q:100 - routing queue

Table 2-19 show forward Output Description  

Output Section	Description
General (no heading) Includes the first few lines of the display.	Displays lookup results for several tables in the input portion of the hardware. The output includes packet formats, the configuration of the input VLAN, and other information.
lookup section	Describes TCAM lookups performed during the input forwarding decision and the results of these lookups.
Bitmaps and masks	Displays maps and masks used to calculate the final set of forwarding destinations.
frame notifies section	Contains the bitmap that results from combining the maps and masks from the bitmaps section. If SPAN is configured, there might be additional bitmaps displayed.
Egress q <nn> section	There is an egress section for each separate destination port. The output is varied, but the important information is in the line containing the name of an output interface, output VLAN ID, and rewritten destination MAC address for the frame. If the output interface is a trunk port that needs to send multiple copies of the frame on different VLANs (for example, for IP multicast frames), several lines might contain the same output interface name, but a different output VLANs. If output security ACLs are present, it is possible that one or more of these egress q sections will not contain a line listing an output port. This happens when the output ACL denies the packet.
Cpu q <nn> <name> section	When the CPU is one of the destinations for a packet, this section appears, followed by a queue name. This name should correspond to one of the queue names in the output from the show controllers cpu-interface privileged EXEC command, where statistics appear for the number of packets received at each queue.

show interfaces

Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.

show interfaces [interface-id | vlan vlan-id] [accounting | capabilities [module {module-number}] | counters | description | etherchannel | flowcontrol | pruning | stats | status [err-disabled] | switchport [backup | module {module-number}] | trunk] | [transceiver properties | detail] [module {module-number} | trunk] | [ | {begin | exclude | include} expression]

Syntax Description

interface-id	(Optional) Valid interfaces include physical ports (including type, module, and port number) and port channels. The port-channel range is 1 to 48.
vlan vlan-id	(Optional) VLAN identification. The range is 1 to 4094.
accounting	(Optional) Display accounting information on the interface, including active protocols and input and output packets and octets. Note The display shows only packets processed in software; hardware-switched packets do not appear.
capabilities	(Optional) Display the capabilities of all interfaces or the specified interface, including the features and options that you can configure on the interface. Though visible in the command line help, this option is not available for VLAN IDs.
module module-number	(Optional) Display capabilities, switchport configuration, or transceiver characteristics (depending on preceding keyword) of all interfaces on the The range is 1 to 9. This option is not available if you entered a specific interface ID.
counters	(Optional) See the show interfaces counters command.
description	(Optional) Display the administrative status and description set for an interface.
etherchannel	(Optional) Display interface EtherChannel information.
flowcontrol	(Optional) Display interface flowcontrol information
pruning	(Optional) Display interface trunk VTP pruning information.
stats	(Optional) Display the input and output packets by switching path for the interface.
status	(Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot.
err-disabled	(Optional) Display interfaces in error-disabled state.
switchport	(Optional) Display the administrative and operational status of a switching (nonrouting) port, including port blocking and port protection settings.
backup	(Optional) Display Flex Link backup interface configuration and status for the specified interface.
transceiver [detail | properties]	(Optional) Display the physical properties of a CWDM1 or DWDM2 small form-factor (SFP) module interface. The keywords have these meanings: •detail—(Optional) Display calibration properties, including high and low numbers and any alarm information. •properties—(Optional) Display speed, duplex, and inline power settings on an interface.
trunk	Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

1 coarse wavelength-division multiplexer 2 dense wavelength-division multiplexer

---

Note Though visible in the command-line help strings, the crb, fair-queue, irb, mac-accounting, precedence, private-vlan mapping, random-detect, rate-limit, and shape keywords are not supported.

---

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.1(12c)EA1	The capabilities keyword was added.
12.1(22)EA1	The transceiver and properties keywords were added.
12.2(22)SEE	The counters, backup, detail, and trunk keywords were added.

Usage Guidelines

The show interfaces capabilities command with different keywords has these results:

•Use the show interface capabilities module number command to display the capabilities of all interfaces on that switch. If there is no switch with that module number, there is no output.

•Use the show interfaces interface-id capabilities to display the capabilities of the specified interface.

•Use the show interfaces capabilities (with no module number or interface ID) to display the capabilities of all interfaces.

•Use the show interface switchport module number command to display the switch port characteristics of all interfaces on that switch. If there is no switch with that module number, there is no output.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show interfaces gigabitethernet0/1 command:

Switch# show interfaces gigabitethernet0/1 

GigabitEthernet0/1 is up, line protocol is up

  Hardware is Gigabit Ethernet, address is 0002.4b29.4401 (bia 0002.4b29.4401)

  MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Half-duplex, 100Mb/s

  input flow-control is off, output flow-control is off

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:08, output hang never

  Last clearing of "show interface" counters never

  Queueing strategy: fifo

  Output queue 0/40, 0 drops; input queue 0/75, 0 drops

  5 minute input rate 1000 bits/sec, 2 packets/sec

  5 minute output rate 0 bits/sec, 0 packets/sec

     7122 packets input, 783062 bytes, 0 no buffer

     Received 5137 broadcasts, 0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 input packets with dribble condition detected

     9222 packets output, 2188728 bytes, 0 underruns

     0 output errors, 0 collisions, 2 interface resets

     0 babbles, 0 late collision, 1 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out 

This is an example of output from the show interfaces accounting command:

Switch# show interfaces accounting

Vlan1

                Protocol    Pkts In   Chars In   Pkts Out  Chars Out

                      IP       1073      69828        325      31868

                     ARP          6        384          2        120

Vlan10

                Protocol    Pkts In   Chars In   Pkts Out  Chars Out

No traffic sent or received on this interface.

GigabitEthernet0/1

                Protocol    Pkts In   Chars In   Pkts Out  Chars Out

           Spanning Tree          8        480        326      19560

                     CDP         28      10920         29      11513

GigabitEthernet0/2

                Protocol    Pkts In   Chars In   Pkts Out  Chars Out

No traffic sent or received on this interface.

GigabitEthernet0/3

                Protocol    Pkts In   Chars In   Pkts Out  Chars Out

No traffic sent or received on this interface.

<output truncated> 

This is an example of output from the show interfaces capabilities command:

Switch# show interfaces fastethernet0/1 capabilities 

FastEthernet0/1

  Model:                 WS-C3550G-48-EI

  Type:                  10/100BaseTX

  Speed:                 10,100,auto

  Duplex:                half,full,auto

  UDLD:                  yes

  Trunk encap. type:     802.1Q

  Trunk mode:            on,off,desirable,nonegotiate

  Channel:               yes

  Broadcast suppression: percentage(0-100)

  Flowcontrol:           rx-(none),tx-(none)

  Fast Start:            yes

  CoS rewrite:           yes

  ToS rewrite:           yes

  Inline power:          no

  SPAN:                  source/destination

  PortSecure:            Yes

  Dot1x:                 Yes

This is an example of output from the show interfaces gigabitethernet0/4 description command when the interface has been described as Connects to Marketing by using the description interface configuration command:

Switch# show interfaces gigabitethernet0/4 description

Interface Status         Protocol Description

G10/4     up             down     Connects to Marketing

This is an example of output from the show interfaces interface description command when the interface has been described as Connects to Marketing by using the description interface configuration command.

Switch# show interfaces gigabitethernet1/0/2 description

Interface Status         Protocol Description

Gi1/0/2     up             down     Connects to Marketing

This is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:

Switch# show interfaces etherchannel

----

GigabitEthernet0/9:

Port state    = Down Not-in-Bndl

Channel group = 6           Mode = Desirable-Sl     Gcchange = 0

Port-channel  = null        GC   = 0x00000000    Pseudo port-channel = Po6

Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.

        A - Device is in Auto mode.        P - Device learns on physical port.

        d - PAgP is down.

Timers: H - Hello timer is running.        Q - Quit timer is running.

        S - Switching timer is running.    I - Interface timer is running.

Local information:

                                Hello    Partner  PAgP     Learning  Group

Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex

Gi0/9     d     U1/S1           1s       0        128        Any      0

Age of the port in the current state: 14d:12h:32m:05s

----

GigabitEthernet0/10:

Port state    = Up Sngl-port-Bndl Mstr Not-in-Bndl

Channel group = 10          Mode = Desirable-Sl     Gcchange = 0

Port-channel  = null        GC   = 0x000A0001    Pseudo port-channel = Po10

Port index    = 0           Load = 0x00

Flags:  S - Device is sending Slow hello.  C - Device is in Consistent state.

        A - Device is in Auto mode.        P - Device learns on physical port.

        d - PAgP is down.

Timers: H - Hello timer is running.        Q - Quit timer is running.

        S - Switching timer is running.    I - Interface timer is running.

Local information:

                                Hello    Partner  PAgP     Learning  Group

Port      Flags State   Timers  Interval Count   Priority   Method  Ifindex

Gi0/10          U4/S4   H       30s      0        128        Any      0

Age of the port in the current state: 01d:06h:05m:59s

----

Port-channel6:

Age of the Port-channel   = 01d:06h:05m:38s

Logical slot/port   = 1/1           Number of ports = 0

GC                  = 0x00000000      HotStandBy port = null

Port state          = Port-channel Ag-Not-Inuse

----

Port-channel10:

Age of the Port-channel   = 01d:06h:06m:15s

Logical slot/port   = 1/0           Number of ports = 0

GC                  = 0x00000000      HotStandBy port = null

Port state          = Port-channel Ag-Not-Inuse

This is an example of output from the show interfaces flowcontrol command. Table 2-20 lists the fields in this display.

Switch# show interfaces flowcontrol

Port    Send FlowControl  Receive FlowControl  RxPause TxPause

        admin    oper     admin    oper

-----   -------- -------- -------- --------    ------- -------

Fa0/1   Unsupp.  Unsupp.  off      off         0       0

Fa0/2   Unsupp.  Unsupp.  off      off         0       0

<output truncated>

Gi0/1   desired  off      off      off         0       0

Gi0/2   desired  off      off      off         0       0

Po1     Unsupp.  Unsupp.  off      off         0       0

Po2     Unsupp.  Unsupp.  off      off         0       0

Po59    Unsupp.  Unsupp.  off      off         0       0

Po60    Unsupp.  Unsupp.  off      off         0       0

Po63    Unsupp.  Unsupp.  off      off         0       0

Po64    Unsupp.  Unsupp.  off      off         0       0

Table 2-20 show interfaces flowcontrol Field Descriptions 

Field	Description
Port	Displays the port name.
Send FlowControl
Admin	Displays the administrative (configured) setting for the flow control send mode.
Oper	Displays the operational (running) setting for the flow control send mode.
Receive FlowControl
Admin	Displays the administrative (configured) setting for the flow control receive mode.
Oper	Displays the operational (running) setting for the flow control receive mode.
RxPause	Displays the number of pause frames received.
TxPause	Displays the number of pause frames sent.
On	Flow control is enabled.
Off	Flow control is disabled.
Desired	Flow control is enabled if the other end supports it.
Unsupp.	Flow control is not supported.

This is an example of output from the show interfaces gigabitethernet0/1 pruning command when pruning is enabled in the VTP domain:

Switch# show interfaces gigibitethernet0/1 pruning

Port    Vlans pruned for lack of request by neighbor

Gi0/1   3,4

Port    Vlans traffic requested of neighbor

Gi0/1   1-3

This is an example of output from the show interfaces stats command for a specified interface:

Switch# show interface gigabitethernet0/1 stats

GigabitEthernet0/1

Switching path    Pkts In   Chars In   Pkts Out  Chars Out

Processor            7790    1122034         23       1938

Route cache             0          0          0          0

Total                7790    1122034         23       1938

This is an example of output from the show interfaces status command. It displays the status of all interfaces.

Switch# show interfaces status

Port    Name               Status       Vlan       Duplex  Speed Type

Gi0/1   CubeA              connected    1          a-full  a-100 10/100/1000Base TX

Gi0/2   CubeC              notconnect   1            auto   auto 10/100/1000Base TX

Gi0/3   CubeE              disabled     1            auto   auto 10/100/1000Base TX

Gi0/4   CubeG              notconnect   1            auto   auto 10/100/1000Base TX

Gi0/5   CubeI              notconnect   routed       auto   auto 10/100/1000Base TX

Gi0/6   CubeK              notconnect   routed       auto   auto 10/100/1000Base TX

Gi0/7   CubeM              notconnect   1            auto   auto 10/100/1000Base TX

This is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in error-disabled state.

Switch# show interfaces status err-disabled 

Port    Name               Status       Reason

Gi0/4                      notconnect   link-flap

informational error message when the timer expires on a cause

--------------------------------------------------------------

5d04h:%PM-SP-4-ERR_RECOVER:Attempting to recover from link-flap err-disable state on Gi0/4

This is an example of output from the show interfaces switchport command for a single interface. Table 2-21 describes the fields in the display.

Switch# show interfaces gigabitethernet1/0/1 switchport

Name: Gi1/0/1

Switchport: Enabled

Administrative Mode: dynamic auto

Operational Mode: static access

Administrative Trunking Encapsulation: negotiate

Operational Trunking Encapsulation: native

Negotiation of Trunking: On

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Voice VLAN: none

Trunking VLANs Enabled: ALL

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

Capture VLANs Allowed: ALL

Protected: false

Unknown unicast blocked: disabled

Unknown multicast blocked: disabled

Voice VLAN: none (Inactive)

Appliance trust: none

Table 2-21 show interfaces switchport Field Descriptions 

Field	Description
Name	Displays the port name.
Switchport	Displays the administrative and operational status of the port. In this display, the port is in switchport mode.
Administrative Mode Operational Mode	Displays the administrative and operational modes.
Administrative Trunking Encapsulation Operational Trunking Encapsulation Negotiation of Trunking	Displays the administrative and operational encapsulation method and whether trunking negotiation is enabled.
Access Mode VLAN	Displays the VLAN ID to which the port is configured.
Trunking Native Mode VLAN Trunking VLANs Enabled Trunking VLANs Active	Lists the VLAN ID of the trunk that is in native mode. Lists the allowed VLANs on the trunk. Lists the active VLANs on the trunk.
Pruning VLANs Enabled	Lists the VLANs that are pruning-eligible.
Protected	Displays whether or not protected port is enabled (True) or disabled (False) on the interface.
Unknown unicast blocked Unknown multicast blocked	Displays whether or not unknown multicast and unknown unicast traffic is blocked on the interface.
Voice VLAN	Displays the VLAN ID on which voice VLAN is enabled.
Appliance trust	Displays the class of service (CoS) setting of the data packets of the IP phone.

This is an example of output from the show interfaces gigabitethernet0/1 trunk command. It displays trunking information for the interface.

Switch# show interfaces gigabitethernet0/1 trunk

Port      Mode         Encapsulation  Status        Native vlan

Gi0/1     desirable    negotiate      not-trunking  1

Port      Vlans allowed on trunk

Gi0/1     1

Port      Vlans allowed and active in management domain

Gi0/1     1

Port      Vlans in spanning tree forwarding state and not pruned

Gi0/1     1 

This is an example of output from the show interfaces transceiver properties command. If you do not specify an interface, the output of the command shows the status on all switch ports:

Switch# show interfaces transceiver properties

Name : Fa0/1

Administrative Speed: auto 10 100

Administrative Duplex: auto

Administrative Auto-MDIX: N/A 

Administrative Power Inline: enable

Operational Speed: 100

Operational Duplex: full

Operational Auto-MDIX: N/A 

Name : Fa0/2

Administrative Speed: auto 10 

Administrative Duplex: auto

Administrative Auto-MDIX: N/A 

Administrative Power Inline: enable

Operational Speed: auto

Operational Duplex: auto

Operational Auto-MDIX: N/A 

<output truncated> 

This is an example of output from the show interfaces module module-number transceiver properties command for a specific interface:

Switch# show interfaces fastethernet0/1 transceiver properties

Name : Fa0/1

Administrative Speed: auto

Administrative Duplex: auto

Administrative Auto-MDIX: N/A

Administrative Power Inline: disable

Operational Speed: 100

Operational Duplex: full

Operational Auto-MDIX: N/A

This is an example of output from the show interfaces switchport backup command:

Switch# show interfaces switchport backup

Switch Backup Interface Pairs:

     Active Interface    Backup Interface    State

     --------------------------------------------------------------

     Fa1/0/1             Fa1/0/2             Active Up/Backup Standby

     Fa3/0/3             Fa4/0/5             Active Down/Backup Up

     Po1                 Po2                 Active Standby/Backup Up

Related Commands

Command	Description
switchport access	Configures a port as a static-access or dynamic-access port.
switchport block	Blocks unknown unicast or multicast traffic on an interface.
switchport broadcast	Configures the VLAN membership mode of a port.
switchport protected	Isolates unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch.
switchport trunk pruning	Configures the VLAN pruning-eligible list for ports in trunking mode.

show interfaces counters

Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface.

show interfaces [interface-id] counters [errors | etherchannel | protocol status | trunk] [ | {begin | exclude | include} expression]

Syntax Description

interface-id	(Optional) ID of the physical interface, including type and slot and port number.
errors	(Optional) Display error counters.
etherchannel	(Optional) Display EtherChannel counters.
protocol status	(Optional) Display the current status of enabled protocols.
trunk	(Optional) Display trunk counters.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

---

Note Though visible in the command-line help strings, the module and vlan-id keywords are not supported.

---

Command Modes

Privileged EXEC

Command History

Release	Modification
12.1(4)EA1	This command was introduced.
12.2(25)SE	The etherchannel and protocol status keywords were added and the broadcast, multicast, and unicast keywords were removed.

Usage Guidelines

If you do not enter any keywords, all counters for all interfaces are included.

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.

Examples

This is an example of output from the show interfaces counters command. It displays all counters for the switch.

Switch# show interfaces counters

Port            InOctets   InUcastPkts   InMcastPkts   InBcastPkts

Gi0/1           23324617         10376        185709        126020

Gi0/2                  0             0             0             0

Port           OutOctets  OutUcastPkts  OutMcastPkts  OutBcastPkts

Gi0/1            4990607         28079         21122            10

Gi0/2            1621568         25337             0             0

Switch# show interfaces counters errors

Port        Align-Err    FCS-Err   Xmit-Err    Rcv-Err UnderSize

Gi0/1               0          0          0          0         0

Gi0/2               0          0          0          0         0

Gi0/3               0          0          0          0         0

Gi0/4               0          0          0          0         0

Port      Single-Col Multi-Col  Late-Col Excess-Col Carri-Sen     Runts    Giants

Gi0/1              0         0         0          0         0         0      0

Gi0/2              0         0         0          0         0         0      0

Gi0/3              0         0         0          0         0         0      0

Gi0/4              0         0         0          0         0         0      0

This is an example of output from the show interfaces counters protocol status command for all interfaces.

Switch# show interfaces counters protocol status

Protocols allocated:

 Vlan1: Other, IP

 Vlan1001: Other, IP, ARP

 FastEthernet0/1: Other, IP

 FastEthernet0/2: Other, IP, Spanning Tree, ARP, CDP

 FastEthernet0/3: Other, IP

 FastEthernet0/4: Other, IP

 FastEthernet0/5: Other, IP

 FastEthernet0/6: Other, IP

 FastEthernet0/7: Other, IP

<output truncated>

This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces.

Switch# show interfaces counters trunk

Port        TrunkFramesTx  TrunkFramesRx  WrongEncap

Gi0/1                   0              0           0

Gi0/2                   0              0           0 

Related Commands

Command	Description
show interfaces	Displays additional interface characteristics.

show inventory

Use the show inventory user EXEC command to display product identification (PID) information for the hardware.

show inventory [entity-name | raw] [ | {begin | exclude | include} expression]

Syntax Description

entity-name	(Optional) Display the specified entity. For example, enter the interface (such as gigabitethernet1/0/1) into which a small form-factor pluggable (SFP) module is installed.
raw	(Optional) Display every entity in the device.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.2(25)SEC	This command was introduced.

Usage Guidelines

The command is case sensitive. With no arguments, the show inventory command produces a compact dump of all identifiable entities that have a product identifier. The compact displays the entity location (slot identity), entity description, and the UDI (PID, VID, and SN) of that entity.

---

Note If there is no PID, no output is displayed when a user enters the show inventory command.

---

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Examples

This is an example of output from the show inventory command:

Switch# show inventory 

NAME: "sw-1-3-f48", DESCR: "Cisco Catalyst 3550 48 10/100 baseT ports + 2 Gig uplinks 
fixed configuration Layer 2/3 Ethernet Switch"

PID: WS-C3550-48      , VID: C0 , SN: CHK0614V09S

show arp access-list

Use the show arp access-list user EXEC command to display detailed information about Address Resolution Protocol (ARP) access control lists (ACLs).

show arp access-list [acl-name] [ | {begin | exclude | include} expression]

This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI).

Syntax Description

acl-name	(Optional) Name of the ACL.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

User EXEC

Command History

Release	Modification
12.2(25)SEA	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Examples

This is an example of output from the show arp access-list command:

Switch> show arp access-list

ARP access list rose

    permit ip 10.101.1.1 0.0.0.255 mac any

    permit ip 20.3.1.0 0.0.0.255 mac any

Related Commands

Command	Description
arp access-list	Defines an ARP ACL.
deny (ARP access-list configuration)	Denies an ARP packet based on matches against the Dynamic Host Configuration Protocol (DHCP) bindings.
ip arp inspection filter vlan	Permits ARP requests and responses from a host configured with a static IP address.
permit (ARP access-list configuration)	Permits an ARP packet based on matches against the DHCP bindings.

show ip arp inspection

Use the show ip arp inspection privileged EXEC command to display the configuration and the operating state of dynamic Address Resolution Protocol (ARP) inspection or the status of this feature for all VLANs or for the specified interface or VLAN.

show ip arp inspection [interfaces [interface-id] | log | statistics [vlan vlan-range] | vlan vlan-range] [ | {begin | exclude | include} expression]

Syntax Description

interfaces [interface-id]	(Optional) Display the trust state and the rate limit of ARP packets for the specified interface or all interfaces. Valid interfaces include physical ports and port channels.
log	(Optional) Display the configuration and contents of the dynamic ARP inspection log buffer.
statistics [vlan vlan-range]	(Optional) Display statistics for forwarded, dropped, MAC validation failure, IP validation failure, access control list (ACL) permitted and denied, and DHCP permitted and denied packets for the specified VLAN. If no VLANs are specified or if a range is specified, display information only for VLANs with dynamic ARP inspection enabled (active). You can specify a single VLAN identified by VLAN ID number, a range of VLANs separated by a hyphen, or a series of VLANs separated by a comma. The range is 1 to 4094.
vlan vlan-range	(Optional) Display the configuration and the operating state of dynamic ARP inspection for the specified VLAN. If no VLANs are specified or if a range is specified, display information only for VLANs with dynamic ARP inspection enabled (active). You can specify a single VLAN identified by VLAN ID number, a range of VLANs separated by a hyphen, or a series of VLANs separated by a comma. The range is 1 to 4094.
| begin	(Optional) Display begins with the line that matches the expression.
| exclude	(Optional) Display excludes lines that match the expression.
| include	(Optional) Display includes lines that match the specified expression.
expression	Expression in the output to use as a reference point.

Command Modes

Privileged EXEC

Command History

Release	Modification
12.2(25)SEA	This command was introduced.

Usage Guidelines

Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Examples

This is an example of output from the show ip arp inspection interfaces command:

Switch# show ip arp inspection interfaces

 Interface        Trust State     Rate (pps)    Burst Interval

 ---------------  -----------     ----------    --------------

 Gi0/1            Untrusted               15                 1

 Gi0/2            Untrusted               15                 1

 Gi0/3            Untrusted               15                 1

This is an example of output from the show ip arp inspection interfaces interface-id command:

Switch# show ip arp inspection interfaces gigabitethernet0/1

 Interface        Trust State     Rate (pps)    Burst Interval

 ---------------  -----------     ----------    --------------

 Gi0/1            Untrusted               15                 1

This is an example of output from the show ip arp inspection log command. It shows the contents of the log buffer before the buffers are cleared:

Switch# show ip arp inspection log

Total Log Buffer Size : 32

Syslog rate : 10 entries per 300 seconds.

Interface   Vlan  Sender MAC      Sender IP        Num Pkts   Reason       Time

----------  ----  --------------  ---------------  ---------  -----------  ----

Gi0/1       5     0003.0000.d673  192.2.10.4               5  DHCP Deny    19:39:01 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.0000.d774  128.1.9.25               6  DHCP Deny    19:39:02 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.c940.1111  10.10.10.1               7  DHCP Deny    19:39:03 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.c940.1112  10.10.10.2               8  DHCP Deny    19:39:04 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.c940.1114  173.1.1.1               10  DHCP Deny    19:39:06 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.c940.1115  173.1.1.2               11  DHCP Deny    19:39:07 UTC 
Mon Mar 1 1993

Gi0/1       5     0001.c940.1116  173.1.1.3               12  DHCP Deny    19:39:08 UTC 
Mon Mar 1 1993

If the log buffer overflows, it means that a log event does not fit into the log buffer, and the display for the show ip arp inspection log privileged EXEC command is affected. A -- in the display appears in place of all data except the packet count and the time. No other statistics are provided for the entry. If you see this entry in the display, increase the number of entries in the log buffer, or increase the logging rate in the ip arp inspection log-buffer global configuration command.

This is an example of output from the show ip arp inspection statistics command. It shows the statistics for packets that have been processed by dynamic ARP inspection for all active VLANs.

Switch# show ip arp inspection statistics

Vlan       Forwarded        Dropped     DHCP Drops      ACL Drops

 ----      ---------        -------     ----------      ---------

    5              3           4618           4605              4

 2000              0              0              0              0

 Vlan   DHCP Permits    ACL Permits   Source MAC Failures

 ----   ------------    -----------   -------------------

    5              0             12                     0

 2000              0              0                     0

 Vlan   Dest MAC Failures   IP Validation Failures

 ----   -----------------   ----------------------

    5                   0                        9

 2000                   0                        0

For the show ip arp inspection statistics command, the switch increments the number of forwarded packets for each ARP request and response packet on a trusted dynamic ARP inspection port. The switch increments the number of ACL- or DHCP-permitted packets for each packet that is denied by source MAC, destination MAC, or IP validation checks, and the switch increments the appropriate failure count.

This is an example of output from the show ip arp inspection statistics vlan 5 command. It shows statistics for packets that have been processed by dynamic ARP for VLAN 5.

Switch# show ip arp inspection statistics vlan 5

Vlan      Forwarded        Dropped     DHCP Drops      ACL Drops

 ----      ---------        -------     ----------      ---------

    5              3           4618           4605              4

 Vlan   DHCP Permits    ACL Permits   Source MAC Failures

 ----   ------------    -----------   -------------------

    5              0             12                     0

 Vlan   Dest MAC Failures   IP Validation Failures      Invalid Protocol Data

 ----   -----------------   ----------------------      ---------------------

    5                   0                        9                          3

This is an example of output from the show ip arp inspection vlan 5 command. It shows the configuration and the operating state of dynamic ARP inspection for VLAN 5.

Switch# show ip arp inspection vlan 5

Source Mac Validation      :Enabled

Destination Mac Validation :Enabled

IP Address Validation      :Enabled

 Vlan     Configuration    Operation   ACL Match          Static ACL

 ----     -------------    ---------   ---------          ----------

    5     Enabled          Active      second             No

 Vlan     ACL Logging      DHCP Logging

 ----     -----------      ------------

    5     Acl-Match        All

Related Commands

Command	Description
arp access-list	Defines an ARP ACL.
clear ip arp inspection log	Clears the dynamic ARP inspection log buffer.
clear ip arp inspection statistics	Clears the dynamic ARP inspection statistics.
ip arp inspection log-buffer	Configures the dynamic ARP inspection logging buffer.
ip arp inspection vlan logging	Controls the type of packets that are logged per VLAN.
show arp access-list	Displays detailed information about ARP access lists.

show ip dhcp snooping

Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration.

show ip dhcp snooping

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC

Command History

Release	Modification
12.1(19)EA1	This command was introduced
12.2(25)SEE	The command output was updated to show the global suboption configuration.

Usage Guidelines

This command displays only the results of global configuration. Therefore, in this example, the circuit ID suboption appears in its default format of vlan-mod-port, even if a string is configured for the circuit ID.

Examples

This is an example of output from the show ip dhcp snooping command.

Switch> show ip dhcp snooping

Switch DHCP snooping is enabled

DHCP snooping is configured on following VLANs:

40-42

Insertion of option 82 is enabled

	circuit-id format: vlan-mod-port

	remote-id format: string

Verification of hwaddr field is enabled

Interface                    Trusted     Rate limit (pps)

------------------------     -------     ----------------

FastEthernet0/5              yes         unlimited

FastEthernet0/7              yes         unlimited

FastEthernet0/3              no          5000     

FastEthernet0/5              yes         unlimited

FastEthernet0/7              yes         unlimited

FastEthernet0/5              yes         unlimited

FastEthernet0/7              yes         unlimited

Related Commands

Command	Description
show ip dhcp snooping binding	Displays the DHCP snooping binding information.

show ip dhcp snooping binding

Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding table and configuration information for all interfaces on a switch.

show ip dhcp snooping binding [ip-address] [mac-address] [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]

Syntax Description

ip-address	(Optional) Specify the binding entry IP address.
mac-address	(Optional) Specify the binding entry MAC address.
interface interface-id	(Optional) Specify the binding input interface.
vlan vlan-id	(Optional) Specify the binding entry VLAN.
| begin	Display begins with the line that matches the expression.
| e