Table Of Contents
show controllers cpu-interface
show controllers ethernet-controller
show ip igmp snooping multicast
show mac address-table address
show mac address-table aging-time
show mac address-table dynamic
show mac address-table interface
show mac address-table multicast
show mac address-table notification
show mls qos aggregate-policer
spanning-tree extend system-id
spanning-tree loopguard default
spanning-tree mst configuration
spanning-tree mst forward-time
spanning-tree mst port-priority
spanning-tree portfast (global configuration)
spanning-tree portfast (interface configuration)
switchport port-security aging
2]rmon collection stats
Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include usage statistics about broadcast and multicast packets, and error statistics about cyclic redundancy check (CRC) alignment errors and collisions. Use the no form of this command to return to the default setting.
rmon collection stats index [owner name]
no rmon collection stats index [owner name]
Syntax Description
index
Remote Network Monitoring (RMON) collection control index. The range is 1 to 65535.
owner name
(Optional) Owner of the RMON collection.
Defaults
The RMON statistics collection is disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
The RMON statistics collection command is based on hardware counters.
Examples
This example shows how to collect RMON statistics for the owner root:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# rmon collection stats 2 owner rootYou can verify your setting by entering the show rmon statistics privileged EXEC command.
Related Commands
sdm prefer
Use the sdm prefer global configuration command on the switch to configure the template used in Switch Database Management (SDM) resource allocation. Use the no form of this command to return to the default template.
sdm prefer {default | routing | vlan}
no sdm prefer
Syntax Description
Defaults
The default template provides a balance to all features.
Command Modes
Global configuration
Command History
Usage Guidelines
You can use a template to allocate system resources to best support the features being used in your application. Use a template to provide maximum system usage for unicast routing or for VLAN configuration. You must reload the switch for the configuration to take effect. If you enter the show sdm prefer command before you enter the reload privileged EXEC command, the show sdm prefer command shows the template currently in use and the template that will become active after a reload.
Use the no sdm prefer command to set the switch to the default desktop template.
The default template balances the use of system resources.
Use the sdm prefer vlan global configuration command only on switches intended for Layer 2 switching with no routing. When you use the VLAN template, no system resources are reserved for routing entries, and any routing is done through software. This overloads the CPU and severely degrades routing performance.
Do not use the routing template if you do not have routing enabled on your switch. Entering the sdm prefer routing global configuration command prevents other features from using the memory allocated to unicast routing in the routing template.
Table 2-15 lists the approximate number of each resource supported in each of the three templates for a switch. The first eight rows in the tables (unicast MAC addresses through security ACEs) represent approximate hardware boundaries set when a template is selected. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance. The last row is a guideline used to calculate hardware resource consumption related to the number of Layer 3 VLANs configured.
Examples
This example shows how to configure the routing template on a switch:
Switch(config)# sdm prefer routingSwitch(config)# exitSwitch# reloadThis example shows how to change a switch template to the default template.
Switch(config)# no sdm preferSwitch(config)# exitSwitch# reloadYou can verify your settings by entering the show sdm prefer privileged EXEC command.
Related Commands
Displays the current SDM template in use or displays the templates that can be used, with approximate resource allocation per feature.
service password-recovery
Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the boot process while the switch is powering up and to assign a new password. Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.
service password-recovery
no service password-recovery
Syntax Description
This command has no arguments or keywords.
Defaults
The password-recovery mechanism is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration.
The password-recovery mechanism has been triggered, butis currently disabled. Access to the boot loader promptthrough the password-recovery mechanism is disallowed atthis point. However, if you agree to let the system bereset back to the default system configuration, accessto the boot loader prompt can still be allowed.Would you like to reset the system back to the default configuration (y/n)?If the user chooses not to reset the system back to the default configuration, the normal boot process continues, as if the Mode button had not been pressed. If you choose to reset the system back to the default configuration, the configuration file in Flash memory is deleted, and the VLAN database file, flash:vlan.dat (if present), is deleted.
Note
If you use the no service password-recovery command to control end user access to passwords, we recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values. Do not keep a backup copy of the config file on the switch.
If the switch is operating in VTP transparent mode, we recommend that you also save a copy of the vlan.dat file in a location away from the switch.You can verify if password recovery is enabled or disabled by entering the show version privileged EXEC command.
Examples
This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration.
Switch(config)# no service-password recoverySwitch(config)# exitRelated Commands
service-policy
Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to the input of a port. Use the no form of this command to remove the policy map and port association.
service-policy input policy-map-name
no service-policy input policy-map-name
Syntax Description
Note
Defaults
No policy maps are attached to the port.
Command Modes
Interface configuration
Command History
Usage Guidelines
Only one policy map per ingress port is supported.
Classification using a port trust state (for example, mls qos trust [cos | dscp | ip-precedence] and a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last one configured overwrites the previous configuration.
Examples
This example shows how to apply plcmap1 to an ingress port:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# service-policy input plcmap1This example shows how to detach plcmap2 from a port:
Switch(config)# interface gigabitethernet0/2Switch(config-if)# no service-policy input plcmap2You can verify your settings by entering the show running-config privileged EXEC command.
Related Commands
Creates or modifies a policy map that can be attached to multiple ports to specify a service policy.
Displays quality of service (QoS) policy maps.
set
Use the set policy-map class configuration command to classify IP traffic by setting a Differentiated Services Code Point (DSCP) or an IP-precedence value in the packet. Use the no form of this command to remove traffic classification.
set {ip dscp new-dscp | ip precedence new-precedence}
no set {ip dscp new-dscp | ip precedence new-precedence}
Syntax Description
Note
Defaults
No traffic classification is defined.
Command Modes
Policy-map class configuration
Command History
Usage Guidelines
The set command is mutually exclusive with the trust policy-map class configuration command within the same policy map.
For the set ip dscp new-dscp or the set ip precedence new-precedence command, you can enter a mnemonic name for a commonly used value. For example, you can enter the set ip dscp af11 command, which is the as same entering the set ip dscp 10 command. You can enter the set ip precedence critical command, which is the same as entering the set ip precedence 5 command. For a list of supported mnemonics, enter the set ip dscp ? or the set ip precedence ? command to see the command-line help strings.
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to assign DSCP 10 to all FTP traffic without any policers:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set ip dscp 10Switch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
setup
Use the setup privileged EXEC command to configure the switch with its initial configuration.
setup
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
When you use the setup command, make sure that you have this information:
•
•
•
When you enter the setup command, an interactive dialog, called the System Configuration Dialog, appears. It guides you through the configuration process and prompts you for information. The values shown in brackets next to each prompt are the default values last set by using either the setup command facility or the configure privileged EXEC command.
Help text is provided for each prompt. To access help text, press the question mark (?) key at a prompt.
To return to the privileged EXEC prompt without making changes and without running through the entire System Configuration Dialog, press Ctrl-C.
When you complete your changes, the setup program shows you the configuration command script that was created during the setup session. You can save the configuration in NVRAM or return to the setup program or the command-line prompt without saving it.
Examples
This is an example of output from the setup command:
Switch# setup--- System Configuration Dialog ---Continue with configuration dialog? [yes/no]: yesAt any point you may enter a question mark '?' for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets '[]'.Basic management setup configures only enough connectivityfor management of the system, extended setup will ask youto configure each interface on the system.Would you like to enter basic management setup? [yes/no]: yesConfiguring global parameters:Enter host name [Switch]:host-nameThe enable secret is a password used to protect access toprivileged EXEC and configuration modes. This password, afterentered, becomes encrypted in the configuration.Enter enable secret: enable-secret-passwordThe enable password is used when you do not specify anenable secret password, with some older software versions, andsome boot images.Enter enable password: enable-passwordThe virtual terminal password is used to protectaccess to the router over a network interface.Enter virtual terminal password: terminal-passwordConfigure SNMP Network Management? [no]: yesCommunity string [public]:Current interface summaryAny interface listed with OK? value "NO" does not have a valid configurationInterface IP-Address OK? Method Status ProtocolVlan1 172.20.135.202 YES NVRAM up upGigabitEthernet0/1 unassigned YES unset up upGigabitEthernet0/2 unassigned YES unset up down<output truncated>Port-channel1 unassigned YES unset up downEnter interface name used to connect to themanagement network from the above interface summary: vlan1Configuring interface vlan1:Configure IP on this interface? [yes]: yesIP address for this interface: ip_addressSubnet mask for this interface [255.0.0.0]: subnet_maskWould you like to enable as a cluster command switch? [yes/no]: yesEnter cluster name: cluster-nameThe following configuration command script was created:hostname host-nameenable secret 5 $1$LiBw$0Xc1wyT.PXPkuhFwqyhVi0enable password enable-passwordline vty 0 15password terminal-passwordsnmp-server community public!no ip routing!interface GigabitEthernet0/1no ip address!interface GigabitEthernet0/2no ip address!cluster enable cluster-name!endUse this configuration? [yes/no]: yes![0] Go to the IOS command prompt without saving this config.[1] Return back to the setup without saving this config.[2] Save this configuration to nvram and exit.Enter your selection [2]:Related Commands
setup express
Use the setup express global configuration command to enable Express Setup mode. Use the no form of this command to disable Express Setup mode.
setup express
no setup express
Syntax Description
This command has no arguments or keywords.
Defaults
Express Setup is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
When Express Setup is enabled on a new (unconfigured) switch, you can press the Mode button for 2 seconds to activate Express Setup. You can access the switch through an Ethernet port by using the IP address 10.0.0.1 and then can configure the switch with the web-based Express Setup program or the command-line interface (CLI)-based setup program.
When you press the Mode button for 2 seconds on a configured switch, switch, the LEDs above the Mode button start blinking. If you press the Mode button for a total of 10 seconds, the switch configuration is deleted, and the switch reboots. The switch can then be configured like a new switch, either through the web-based Express Setup program or the CLI-based setup program.
Note
If Express Setup is active on the switch, entering the write memory or copy running-configuration startup-configuration privileged EXEC commands deactivates Express Setup. The IP address 10.0.0.1 is no longer valid on the switch, and your connection using this IP address ends.
The primary purpose of the no setup express command is to prevent someone from deleting the switch configuration by pressing the Mode button for 10 seconds.
Examples
This example shows how to enable Express Setup mode:
Switch(config)# setup expressYou can verify that Express Setup mode is enabled by pressing the Mode button:
•
•
Caution
This example shows how to disable Express Setup mode:
Switch(config)# no setup expressYou can verify that Express Setup mode is disabled by pressing the Mode button. The mode LEDs do not turn solid green or begin blinking green if Express Setup mode is not enabled on the switch.
Related Commands
show access-lists
Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.
show access-lists [name | number | hardware counters | ipc] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The switch supports only IP standard and extended access lists. Therefore, the allowed numbers are only 1 to 199 and 1300 to 2699.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show access-lists command:
Switch# show access-listsStandard IP access list 1permit 1.1.1.1permit 2.2.2.2permit anypermit 0.255.255.255, wildcard bits 12.0.0.0Standard IP access list videowizard_1-1-1-1permit 1.1.1.1Standard IP access list videowizard_10-10-10-10permit 10.10.10.10Extended IP access list 121permit ahp host 10.10.10.10 host 20.20.10.10 precedence routineExtended IP access list CMP-NAT-ACLDynamic Cluster-HSRP deny ip any anydeny ip any host 19.19.11.11deny ip any host 10.11.12.13Dynamic Cluster-NAT permit ip any anypermit ip host 10.99.100.128 anypermit ip host 10.46.22.128 anypermit ip host 10.45.101.64 anypermit ip host 10.45.20.64 anypermit ip host 10.213.43.128 anypermit ip host 10.91.28.64 anypermit ip host 10.99.75.128 anypermit ip host 10.38.49.0 anyThis is an example of output from the show access-lists hardware counters command:
Switch# show access-lists hardware countersL2 ACL INPUT StatisticsDrop: All frame count: 855Drop: All bytes count: 94143Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 2121Forwarded: All bytes count: 180762Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L3 ACL INPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 13586Forwarded: All bytes count: 1236182Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L2 ACL OUTPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 232983Forwarded: All bytes count: 16825661Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L3 ACL OUTPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 514434Forwarded: All bytes count: 39048748Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0Related Commands
show auto qos
Use the show auto qos user EXEC command to display the initial configuration that is generated by the automatic quality of service (auto-QoS) feature.
show auto qos [interface [interface-id]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The show auto qos [interface [interface-id]] command displays the initial auto-QoS configuration; it does not display any user changes to the configuration that might be in effect. Use the show running-config privileged EXEC command to display the auto-QoS configuration and the user modifications.
To display information about the QoS configuration that might be affected by auto-QoS, use one of these commands:
•
•
•
•
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show auto qos command when auto-QoS is enabled:
Switch# show auto qosInitial configuration applied by AutoQoS:mls qos map cos-dscp 0 8 16 26 32 46 48 56mls qosno mls qos srr-queue input cos-mapno mls qos srr-queue output cos-mapmls qos srr-queue input cos-map queue 1 threshold 3 0mls qos srr-queue input cos-map queue 1 threshold 2 1mls qos srr-queue input cos-map queue 2 threshold 1 2mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7mls qos srr-queue input cos-map queue 2 threshold 3 3 5mls qos srr-queue output cos-map queue 1 threshold 3 5mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7mls qos srr-queue output cos-map queue 3 threshold 3 2 4mls qos srr-queue output cos-map queue 4 threshold 2 1mls qos srr-queue output cos-map queue 4 threshold 3 0no mls qos srr-queue input dscp-mapno mls qos srr-queue output dscp-mapmls qos srr-queue input dscp-map queue 1 threshold 2 9 10 11 12 13 14 15mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 4 5 6 7mls qos srr-queue input dscp-map queue 1 threshold 3 32mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23mls qos srr-queue input dscp-map queue 2 threshold 2 26 33 34 35 36 37 38 39mls qos srr-queue input dscp-map queue 2 threshold 2 48 49 50 51 52 53 54 55mls qos srr-queue input dscp-map queue 2 threshold 2 56 57 58 59 60 61 62 63mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 27 28 29 30 31 40mls qos srr-queue input dscp-map queue 2 threshold 3 41 42 43 44 45 46 47mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 42 43 44 45 46 47mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 18 19 20 21 22 23mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 34 35 36 37 38 39mls qos srr-queue output dscp-map queue 4 threshold 1 8mls qos srr-queue output dscp-map queue 4 threshold 2 9 10 11 12 13 14 15mls qos srr-queue output dscp-map queue 4 threshold 3 0 1 2 3 4 5 6 7no mls qos srr-queue input priority-queue 1no mls qos srr-queue input priority-queue 2mls qos srr-queue input bandwidth 90 10no mls qos srr-queue input buffersmls qos queue-set output 1 buffers 20 20 20 40!interface GigabitEthernet0/2mls qos trust device cisco-phonemls qos trust cosno queue-set 1srr-queue bandwidth shape 10 0 0 0srr-queue bandwidth share 10 10 60 20This is an example of output from the show auto qos interface command after the auto qos voip cisco-phone interface configuration command is entered:
Switch# show auto qos interfaceInitial configuration applied by AutoQoS:!interface GigabitEthernet0/2mls qos trust device cisco-phonemls qos trust cosno queue-set 1srr-queue bandwidth shape 10 0 0 0srr-queue bandwidth share 10 10 60 20This is an example of output from the show auto qos interface interface-id command after the auto qos voip cisco-phone interface configuration command is entered:
Switch# show auto qos interface gigabitethernet0/2mls qos trust device cisco-phonemls qos trust cosno queue-set 1srr-queue bandwidth shape 10 0 0 0srr-queue bandwidth share 10 10 60 20Related Commands
Automatically configures QoS for VoIP within a QoS domain.
Enables debugging of the auto-QoS feature.
show boot
Use the show boot privileged EXEC command to display the settings of the boot environment variables.
show boot [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show boot command. Table 2-16 describes each field in the display.
Switch# show bootBOOT path-list: flash:c3560-i5-mz.121-19.EA1/c3560-i5-mz.121-19.EA1.binConfig file: flash:config.textPrivate Config file: private-configEnable Break: noManual Boot: yesHELPER path-list:NVRAM/Config filebuffer size: 32768
Related Commands
show cable-diagnostics tdr
Use the show cable-diagnostics tdr privileged EXEC command to display the Time Domain Reflector (TDR) results.
show cable-diagnostics tdr interface interface-id [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
TDR is supported only on copper Ethernet 10/100/1000 ports. It is not supported on 10/100 ports or small form-factor pluggable (SFP)-module ports. For more information about TDR, refer to the software configuration guide for this release
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show cable-diagnostics tdr interface interface-id command:
Switch# show cable-diagnostics tdr interface gigabitethernet0/2TDR test last run on: March 01 20:15:40Interface Speed Local pair Pair length Remote pair Pair status--------- ----- ---------- ------------------ ----------- --------------------Gi0/2 auto Pair A 0 +/- 2 meters N/A OpenPair B 0 +/- 2 meters N/A OpenPair C 0 +/- 2 meters N/A OpenPair D 0 +/- 2 meters N/A OpenTable 2-17 lists the descriptions of the fields in the show cable-diagnostics tdr command output.
For more examples of output from the show cable-diagnostics tdr interface interface-id command, refer to the software configuration guide for this release.
Related Commands
show class-map
Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.
show class-map [class-map-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show class-map command:
Switch> show class-mapClass Map match-all videowizard_10-10-10-10 (id 2)Match access-group name videowizard_10-10-10-10Class Map match-any class-default (id 0)Match anyClass Map match-all dscp5 (id 3)Match ip dscp 5Related Commands
Creates a class map to be used for matching packets to the class whose name you specify.
Defines the match criteria to classify traffic.
show cluster
Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on the cluster command switch and cluster member switches.
show cluster [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you enter this command on a switch that is not a cluster member, the error message Not a management cluster member appears.
On a cluster member switch, this command displays the identity of the cluster command switch, the switch member number, and the state of its connectivity with the cluster command switch.
On a cluster command switch, this command displays the cluster name and the total number of members. It also shows the cluster status and time since the status changed. If redundancy is enabled, it displays the primary and secondary command-switch information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output when the show cluster command is entered on the active cluster command switch:
Switch> show clusterCommand switch for cluster "Ajang"Total number of members: 7Status: 1 members are unreachableTime since last status change: 0 days, 0 hours, 2 minutesRedundancy: EnabledStandby command switch: Member 1Standby Group: Ajang_standbyStandby Group Number: 110Heartbeat interval: 8Heartbeat hold-time: 80Extended discovery hop count: 3This is an example of output when the show cluster command is entered on a cluster member switch:
Switch1> show clusterMember switch for cluster "hapuna"Member number: 3Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80This is an example of output when the show cluster command is entered on a cluster member switch that is configured as the standby cluster command switch:
Switch> show clusterMember switch for cluster "hapuna"Member number: 3 (Standby command switch)Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80This is an example of output when the show cluster command is entered on the cluster command switch that has lost connectivity with member 1:
Switch> show clusterCommand switch for cluster "Ajang"Total number of members: 7Status: 1 members are unreachableTime since last status change: 0 days, 0 hours, 5 minutesRedundancy: DisabledHeartbeat interval: 8Heartbeat hold-time: 80Extended discovery hop count: 3This is an example of output when the show cluster command is entered on a cluster member switch that has lost connectivity with the cluster command switch:
Switch> show clusterMember switch for cluster "hapuna"Member number: <UNKNOWN>Management IP address: 192.192.192.192Command switch mac address: 0000.0c07.ac14Heartbeat interval: 8Heartbeat hold-time: 80Related Commands
show cluster candidates
Use the show cluster candidates privileged EXEC command to display a list of candidate switches.
show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
This command is available only on the cluster command switch.
If the switch is not a cluster command switch, the command displays an empty line at the prompt.
The SN in the display means switch member number. If E appears in the SN column, it means that the switch is discovered through extended discovery. If E does not appear in the SN column, it means that the switch member number is the upstream neighbor of the candidate switch. The hop count is the number of devices the candidate is from the cluster command switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show cluster candidates command:
Switch> show cluster candidates|---Upstream---|MAC Address Name Device Type PortIf FEC Hops SN PortIf FEC00d0.7961.c4c0 StLouis-2 WS-C3560-12T Gi0/1 2 1 Fa0/1100d0.bbf5.e900 ldf-dist-128 WS-C3524-XL Fa0/7 1 0 Fa0/2400e0.1e7e.be80 1900_Switch 1900 3 0 1 0 Fa0/1100e0.1e9f.7a00 Surfers-24 WS-C2924-XL Fa0/5 1 0 Fa0/300e0.1e9f.8c00 Surfers-12-2 WS-C2912-XL Fa0/4 1 0 Fa0/700e0.1e9f.8c40 Surfers-12-1 WS-C2912-XL Fa0/1 1 0 Fa0/9This is an example of output from the show cluster candidates command that uses the MAC address of a cluster member switch directly connected to the cluster command switch:
Switch> show cluster candidates mac-address 00d0.7961.c4c0Device 'Tahiti-12' with mac address number 00d0.7961.c4c0Device type: cisco WS-C3560-12TUpstream MAC address: 00d0.796d.2f00 (Cluster Member 0)Local port: Gi0/1 FEC number:Upstream port: GI0/11 FEC Number:Hops from cluster edge: 1Hops from command device: 1This is an example of output from the show cluster candidates command that uses the MAC address of a cluster member switch three hops from the cluster edge:
Switch> show cluster candidates mac-address 0010.7bb6.1cc0Device 'Ventura' with mac address number 0010.7bb6.1cc0Device type: cisco WS-C2912MF-XLUpstream MAC address: 0010.7bb6.1cd4Local port: Fa2/1 FEC number:Upstream port: Fa0/24 FEC Number:Hops from cluster edge: 3Hops from command device: -This is an example of output from the show cluster candidates detail command:
Switch> show cluster candidates detailDevice 'Tahiti-12' with mac address number 00d0.7961.c4c0Device type: cisco WS-C3512-XLUpstream MAC address: 00d0.796d.2f00 (Cluster Member 1)Local port: Fa0/3 FEC number:Upstream port: Fa0/13 FEC Number:Hops from cluster edge: 1Hops from command device: 2Device '1900_Switch' with mac address number 00e0.1e7e.be80Device type: cisco 1900Upstream MAC address: 00d0.796d.2f00 (Cluster Member 2)Local port: 3 FEC number: 0Upstream port: Fa0/11 FEC Number:Hops from cluster edge: 1Hops from command device: 2Device 'Surfers-24' with mac address number 00e0.1e9f.7a00Device type: cisco WS-C2924-XLUpstream MAC address: 00d0.796d.2f00 (Cluster Member 3)Local port: Fa0/5 FEC number:Upstream port: Fa0/3 FEC Number:Hops from cluster edge: 1Hops from command device: 2Related Commands
Displays the cluster status and a summary of the cluster to which the switch belongs.
Displays information about the cluster members.
show cluster members
Use the show cluster members privileged EXEC command to display information about the cluster members.
show cluster members [n | detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This command is available only on the cluster command switch.
If the cluster has no members, this command displays an empty line at the prompt.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show cluster members command. The SN in the display means switch number.
Switch# show cluster members|---Upstream---|SN MAC Address Name PortIf FEC Hops SN PortIf FEC State0 0002.4b29.2e00 StLouis1 0 Up (Cmdr)1 0030.946c.d740 tal-switch-1 Fa0/13 1 0 Gi0/1 Up2 0002.b922.7180 nms-2820 10 0 2 1 Fa0/18 Up3 0002.4b29.4400 SanJuan2 Gi0/1 2 1 Fa0/11 Up4 0002.4b28.c480 GenieTest Gi0/2 2 1 Fa0/9 UpThis is an example of output from the show cluster members for cluster member 3:
Switch# show cluster members 3Device 'SanJuan2' with member number 3Device type: cisco WS-C3560-12TMAC address: 0002.4b29.4400Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/1 FEC number:Upstream port: GI0/11 FEC Number:Hops from command device: 2This is an example of output from the show cluster members detail command:
Switch# show cluster members detailDevice 'StLouis1' with member number 0 (Command Switch)Device type: cisco WS-C3560-12TMAC address: 0002.4b29.2e00Upstream MAC address:Local port: FEC number:Upstream port: FEC Number:Hops from command device: 0Device 'tal-switch-14' with member number 1Device type: cisco WS-C3548-XLMAC address: 0030.946c.d740Upstream MAC address: 0002.4b29.2e00 (Cluster member 0)Local port: Fa0/13 FEC number:Upstream port: Gi0/1 FEC Number:Hops from command device: 1Device 'nms-2820' with member number 2Device type: cisco 2820MAC address: 0002.b922.7180Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: 10 FEC number: 0Upstream port: Fa0/18 FEC Number:Hops from command device: 2Device 'SanJuan2' with member number 3Device type: cisco WS-C3560-12TMAC address: 0002.4b29.4400Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/1 FEC number:Upstream port: Fa0/11 FEC Number:Hops from command device: 2Device 'GenieTest' with member number 4Device type: cisco SeaHorseMAC address: 0002.4b28.c480Upstream MAC address: 0030.946c.d740 (Cluster member 1)Local port: Gi0/2 FEC number:Upstream port: Fa0/9 FEC Number:Hops from command device: 2Device 'Palpatine' with member number 5Device type: cisco WS-C2924M-XLMAC address: 00b0.6404.f8c0Upstream MAC address: 0002.4b29.2e00 (Cluster member 0)Local port: Gi2/1 FEC number:Upstream port: Gi0/7 FEC Number:Hops from command device: 1Related Commands
Displays the cluster status and a summary of the cluster to which the switch belongs.
Displays a list of candidate switches.
show controllers cpu-interface
Use the show controllers cpu-interface privileged EXEC command to display the state of the CPU network interface ASIC and the send and receive statistics for packets reaching the CPU.
show controllers cpu-interface [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is a partial output example from the show controllers cpu-interface command:
Switch# show controllers cpu-interfacecpu-queue-frames retrieved dropped invalid hol-block----------------- ---------- ---------- ---------- ----------rpc 4523063 0 0 0stp 1545035 0 0 0ipc 1903047 0 0 0routing protocol 96145 0 0 0L2 protocol 79596 0 0 0remote console 0 0 0 0sw forwarding 5756 0 0 0host 225646 0 0 0broadcast 46472 0 0 0cbt-to-spt 0 0 0 0igmp snooping 68411 0 0 0icmp 0 0 0 0logging 0 0 0 0rpf-fail 0 0 0 0queue14 0 0 0 0cpu heartbeat 1710501 0 0 0Supervisor ASIC receive-queue parameters----------------------------------------queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFCqueue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8<output truncated>Supervisor ASIC Mic Registers------------------------------MicDirectPollInfo 80000800MicIndicationsReceived 00000000MicInterruptsReceived 00000000MicPcsInfo 0001001FMicPlbMasterConfiguration 00000000MicRxFifosAvailable 00000000MicRxFifosReady 0000BFFFMicTimeOutPeriod: FrameTOPeriod: 00000EA6 DirectTOPeriod: 00004000<output truncated>MicTransmitFifoInfo:Fifo0: StartPtrs: 038C2800 ReadPtr: 038C2C38WritePtrs: 038C2C38 Fifo_Flag: 8A800800Weights: 001E001EFifo1: StartPtr: 03A9BC00 ReadPtr: 03A9BC60WritePtrs: 03A9BC60 Fifo_Flag: 89800400writeHeaderPtr: 03A9BC60Fifo2: StartPtr: 038C8800 ReadPtr: 038C88E0WritePtrs: 038C88E0 Fifo_Flag: 88800200writeHeaderPtr: 038C88E0Fifo3: StartPtr: 03C30400 ReadPtr: 03C30638WritePtrs: 03C30638 Fifo_Flag: 89800400writeHeaderPtr: 03C30638Fifo4: StartPtr: 03AD5000 ReadPtr: 03AD50A0WritePtrs: 03AD50A0 Fifo_Flag: 89800400writeHeaderPtr: 03AD50A0Fifo5: StartPtr: 03A7A600 ReadPtr: 03A7A600WritePtrs: 03A7A600 Fifo_Flag: 88800200writeHeaderPtr: 03A7A600Fifo6: StartPtr: 03BF8400 ReadPtr: 03BF87F0WritePtrs: 03BF87F0 Fifo_Flag: 89800400<output truncated>Related Commands
show controllers ethernet-controller
Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-interface send and receive statistics read from the hardware. Use with the phy keyword to display the interface internal registers or the port-asic keyword to display information about the port ASIC.
show controllers ethernet-controller [interface-id] [phy [detail]] [port-asic {configuration | statistics}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC (only supported with the interface-id keywords in user EXEC mode)
Command History
Usage Guidelines
This display without keywords provides traffic statistics, basically the RMON statistics for all interfaces or for the specified interface.
When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers ethernet-controller command for an interface. Table 2-18 describes the Transmit fields, and Table 2-19 describes the Receive fields.
Switch# show controllers ethernet-controller gigabitethernet0/1Transmit GigabitEthernet0/1 Receive0 Bytes 0 Bytes0 Unicast frames 0 Unicast frames0 Multicast frames 0 Multicast frames0 Broadcast frames 0 Broadcast frames0 Too old frames 0 Unicast bytes0 Deferred frames 0 Multicast bytes0 MTU exceeded frames 0 Broadcast bytes0 1 collision frames 0 Alignment errors0 2 collision frames 0 FCS errors0 3 collision frames 0 Oversize frames0 4 collision frames 0 Undersize frames0 5 collision frames 0 Collision fragments0 6 collision frames0 7 collision frames 0 Minimum size frames0 8 collision frames 0 65 to 127 byte frames0 9 collision frames 0 128 to 255 byte frames0 10 collision frames 0 256 to 511 byte frames0 11 collision frames 0 512 to 1023 byte frames0 12 collision frames 0 1024 to 1518 byte frames0 13 collision frames 0 Overrun frames0 14 collision frames 0 Pause frames0 15 collision frames 0 Symbol error frames0 Excessive collisions0 Late collisions 0 Invalid frames, too large0 VLAN discard frames 0 Valid frames, too large0 Excess defer frames 0 Invalid frames, too small0 64 byte frames 0 Valid frames, too small0 127 byte frames0 255 byte frames 0 Too old frames0 511 byte frames 0 Valid oversize frames0 1023 byte frames 0 System FCS error frames0 1518 byte frames 0 RxPortFifoFull drop frame0 Too large frames0 Good (1 coll) frames
Table 2-18 Transmit Field Descriptions
Bytes
The total number of bytes sent on an interface.
Unicast Frames
The total number of frames sent to unicast addresses.
Multicast frames
The total number of frames sent to multicast addresses.
Broadcast frames
The total number of frames sent to broadcast addresses.
Too old frames
The number of frames dropped on the egress port because the packet aged out.
Deferred frames
The number of frames that are not sent after the time exceeds 2*maximum-packet time.
MTU exceeded frames
The number of frames that are larger than the maximum allowed frame size.
1 collision frames
The number of frames that are successfully sent on an interface after one collision occurs.
2 collision frames
The number of frames that are successfully sent on an interface after two collisions occur.
3 collision frames
The number of frames that are successfully sent on an interface after three collisions occur.
4 collision frames
The number of frames that are successfully sent on an interface after four collisions occur.
5 collision frames
The number of frames that are successfully sent on an interface after five collisions occur.
6 collision frames
The number of frames that are successfully sent on an interface after six collisions occur.
7 collision frames
The number of frames that are successfully sent on an interface after seven collisions occur.
8 collision frames
The number of frames that are successfully sent on an interface after eight collisions occur.
9 collision frames
The number of frames that are successfully sent on an interface after nine collisions occur.
10 collision frames
The number of frames that are successfully sent on an interface after ten collisions occur.
11 collision frames
The number of frames that are successfully sent on an interface after 11 collisions occur.
12 collision frames
The number of frames that are successfully sent on an interface after 12 collisions occur.
13 collision frames
The number of frames that are successfully sent on an interface after 13 collisions occur.
14 collision frames
The number of frames that are successfully sent on an interface after 14 collisions occur.
15 collision frames
The number of frames that are successfully sent on an interface after 15 collisions occur.
Excessive collisions
The number of frames that could not be sent on an interface after 16 collisions occur.
Late collisions
After a frame is sent, the number of frames dropped because late collisions were detected while the frame was sent.
VLAN discard frames
The number of frames dropped on an interface because the CFI1 bit is set.
Excess defer frames
The number of frames that are not sent after the time exceeds the maximum-packet time.
64 byte frames
The total number of frames sent on an interface that are 64 bytes.
127 byte frames
The total number of frames sent on an interface that are from 65 to 127 bytes.
255 byte frames
The total number of frames sent on an interface that are from 128 to 255 bytes.
511 byte frames
The total number of frames sent on an interface that are from 256 to 511 bytes.
1023 byte frames
The total number of frames sent on an interface that are from 512 to 1023 bytes.
1518 byte frames
The total number of frames sent on an interface that are from 1024 to 1518 bytes.
Too large frames
The number of frames sent on an interface that are larger than the maximum allowed frame size.
Good (1 coll) frames
The number of frames that are successfully sent on an interface after one collision occurs. This value does not include the number of frames that are not successfully sent after one collision occurs.
1 CFI = canonical format indicator
Table 2-19 Receive Field Descriptions
Bytes
The total amount of memory (in bytes) used by frames received on an interface, including the FCS1 value and the incorrectly formed frames. This value excludes the frame header bits.
Unicast frames
The total number of frames successfully received on the interface that are directed to unicast addresses.
Multicast frames
The total number of frames successfully received on the interface that are directed to multicast addresses.
Broadcast frames
The total number of frames successfully received on an interface that are directed to broadcast addresses.
Unicast bytes
The total amount of memory (in bytes) used by unicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Multicast bytes
The total amount of memory (in bytes) used by multicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Broadcast bytes
The total amount of memory (in bytes) used by broadcast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Alignment errors
The total number of frames received on an interface that have alignment errors.
FCS errors
The total number of frames received on an interface that have a valid length (in bytes) but do not have the correct FCS values.
Oversize frames
The number of frames received on an interface that are larger than the maximum allowed frame size.
Undersize frames
The number of frames received on an interface that are smaller than 64 bytes.
Collision fragments
The number of collision fragments received on an interface.
Minimum size frames
The total number of frames that are the minimum frame size.
65 to 127 byte frames
The total number of frames that are from 65 to 127 bytes.
128 to 255 byte frames
The total number of frames that are from 128 to 255 bytes.
256 to 511 byte frames
The total number of frames that are from 256 to 511 bytes.
512 to 1023 byte frames
The total number of frames that are from 512 to 1023 bytes.
1024 to 1518 byte frames
The total number of frames that are from 1024 to 1518 bytes.
Overrun frames
The total number of overrun frames received on an interface.
Pause frames
The number of pause frames received on an interface.
Symbol error frames
The number of frames received on an interface that have symbol errors.
Invalid frames, too large
The number of frames received that were larger than maximum allowed MTU2 size (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too large
The number of frames received on an interface that are larger than the maximum allowed frame size.
Invalid frames, too small
The number of frames received that are smaller than 64 bytes (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too small
The number of frames received on an interface that are smaller than 64 bytes (or 68 bytes for VLAN-tagged frames) and that have valid FCS values. The frame size includes the FCS bits but excludes the frame header bits.
Too old frames
The number of frames dropped on the ingress port because the packet aged out.
Valid oversize frames
The number of frames received on an interface that are larger than the maximum allowed frame size and have valid FCS values. The frame size includes the FCS value but does not include the VLAN tag.
System FCS error frames
The total number of frames received on an interface that have a valid length (in bytes) but that do not have the correct FCS values.
RxPortFifoFull drop frames
The total number of frames received on an interface that are dropped because the ingress queue is full.
1 FCS = frame check sequence
2 MTU = maximum transmission unit
This is an example of output from the show controllers ethernet-controller phy command for a specific interface. Note that the last line of the display is the setting for Auto-MDIX for the interface.
Switch# show controllers ethernet-controller gigabitethernet0/2 phyControl Register : 0001 0001 0100 0000Control STATUS : 0111 1001 0100 1001Phy ID 1 : 0000 0001 0100 0001Phy ID 2 : 0000 1100 0010 0100Auto-Negotiation Advertisement : 0000 0011 1110 0001Auto-Negotiation Link Partner : 0000 0000 0000 0000Auto-Negotiation Expansion Reg : 0000 0000 0000 0100Next Page Transmit Register : 0010 0000 0000 0001Link Partner Next page Registe : 0000 0000 0000 00001000BASE-T Control Register : 0000 1111 0000 00001000BASE-T Status Register : 0100 0000 0000 0000Extended Status Register : 0011 0000 0000 0000PHY Specific Control Register : 0000 0000 0111 1000PHY Specific Status Register : 1000 0001 0100 0000Interrupt Enable : 0000 0000 0000 0000Interrupt Status : 0000 0000 0100 0000Extended PHY Specific Control : 0000 1100 0110 1000Receive Error Counter : 0000 0000 0000 0000Reserved Register 1 : 0000 0000 0000 0000Global Status : 0000 0000 0000 0000LED Control : 0100 0001 0000 0000Manual LED Override : 0000 1000 0010 1010Extended PHY Specific Control : 0000 0000 0001 1010Disable Receiver 1 : 0000 0000 0000 1011Disable Receiver 2 : 1000 0000 0000 0100Extended PHY Specific Status : 1000 0100 1000 0000Auto-MDIX : On [AdminState=1 Flags=0x00052248]This is an example of output from the show controllers ethernet-controller port-asic configuration command:
Switch# show controllers ethernet-controller port-asic configuration========================================================================PortASIC 0 Registers------------------------------------------------------------------------DeviceType : 000101BCReset : 00000000PmadMicConfig : 00000001PmadMicDiag : 00000003SupervisorReceiveFifoSramInfo : 000007D0 000007D0 40000000SupervisorTransmitFifoSramInfo : 000001D0 000001D0 40000000GlobalStatus : 00000800IndicationStatus : 00000000IndicationStatusMask : FFFFFFFFInterruptStatus : 00000000InterruptStatusMask : 01FFE800SupervisorDiag : 00000000SupervisorFrameSizeLimit : 000007C8SupervisorBroadcast : 000A0F01GeneralIO : 000003F9 00000000 00000004StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFFFF0FFF00 86020000 5555FFFF 00000000StackRacInfo : 73001630 00000003 7F001644 0000000324140003 FD632B00 18E418E0 FFFFFFFFStackControlStatus : 18E418E0stackControlStatusMask : FFFFFFFFTransmitBufferFreeListInfo : 00000854 00000800 00000FF8 000000000000088A 0000085D 00000FF8 00000000TransmitRingFifoInfo : 00000016 00000016 40000000 000000000000000C 0000000C 40000000 00000000TransmitBufferInfo : 00012000 00000FFF 00000000 00000030TransmitBufferCommonCount : 00000F7ATransmitBufferCommonCountPeak : 0000001ETransmitBufferCommonCommonEmpty : 000000FFNetworkActivity : 00000000 00000000 00000000 02400000DroppedStatistics : 00000000FrameLengthDeltaSelect : 00000001SneakPortFifoInfo : 00000000MacInfo : 0EC0801C 00000001 0EC0801B 0000000100C0001D 00000001 00C0001E 00000001<output truncated>This is an example of output from the show controllers ethernet-controller port-asic statistics command:
Switch# show controllers ethernet-controller port-asic statistics===========================================================================PortASIC 0 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames4118966 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames0 RxQ-1, wt-0 enqueue frames 0 RxQ-1, wt-0 drop frames296 RxQ-1, wt-1 enqueue frames 0 RxQ-1, wt-1 drop frames2836036 RxQ-1, wt-2 enqueue frames 0 RxQ-1, wt-2 drop frames0 RxQ-2, wt-0 enqueue frames 0 RxQ-2, wt-0 drop frames0 RxQ-2, wt-1 enqueue frames 0 RxQ-2, wt-1 drop frames158377 RxQ-2, wt-2 enqueue frames 0 RxQ-2, wt-2 drop frames0 RxQ-3, wt-0 enqueue frames 0 RxQ-3, wt-0 drop frames0 RxQ-3, wt-1 enqueue frames 0 RxQ-3, wt-1 drop frames0 RxQ-3, wt-2 enqueue frames 0 RxQ-3, wt-2 drop frames15 TxBufferFull Drop Count 0 Rx Fcs Error Frames0 TxBufferFrameDesc BadCrc16 0 Rx Invalid Oversize Frames0 TxBuffer Bandwidth Drop Cou 0 Rx Invalid Too Large Frames0 TxQueue Bandwidth Drop Coun 0 Rx Invalid Too Large Frames0 TxQueue Missed Drop Statist 0 Rx Invalid Too Small Frames74 RxBuffer Drop DestIndex Cou 0 Rx Too Old Frames0 SneakQueue Drop Count 0 Tx Too Old Frames0 Learning Queue Overflow Fra 0 System Fcs Error Frames0 Learning Cam Skip Count15 Sup Queue 0 Drop Frames 0 Sup Queue 8 Drop Frames0 Sup Queue 1 Drop Frames 0 Sup Queue 9 Drop Frames0 Sup Queue 2 Drop Frames 0 Sup Queue 10 Drop Frames0 Sup Queue 3 Drop Frames 0 Sup Queue 11 Drop Frames0 Sup Queue 4 Drop Frames 0 Sup Queue 12 Drop Frames0 Sup Queue 5 Drop Frames 0 Sup Queue 13 Drop Frames0 Sup Queue 6 Drop Frames 0 Sup Queue 14 Drop Frames0 Sup Queue 7 Drop Frames 0 Sup Queue 15 Drop Frames===========================================================================PortASIC 1 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames52 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames<output truncated>Related Commands
show controllers power inline
Use the show controllers power inline privileged EXEC command to display the values in the registers of the specified Power over Ethernet (PoE) controller.
show controllers power inline [instance] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers power inline command:
Switch# show controllers power inlineController Instance 0, Address 0x40Interrupt Reg 0x0 = 0x0Intr Mask Reg 0x1 = 0xF6Power Event Reg 0x2 = 0x0Detect Event Reg 0x4 = 0x0Fault Event Reg 0x6 = 0x0T-Start Event Reg 0x8 = 0x0Supply Event Reg 0xA = 0x0Port 1 Status Reg 0xC = 0x64Port 2 Status Reg 0xD = 0x3Port 3 Status Reg 0xE = 0x3Port 4 Status Reg 0xF = 0x3Power Status Reg 0x10 = 0xFFPin Status Reg 0x11 = 0x0Operating Mode Reg 0x12 = 0xAADisconnect Enable Reg 0x13 = 0xF0Detect/Class Enable Reg 0x14 = 0xFFReserved Reg 0x15 = 0x0Timing Config Reg 0x16 = 0x0Misc Config Reg 0x17 = 0xA0ID Revision Reg 0x1A = 0x64Controller Instance 1, Address 0x42--More--Related Commands
show controllers tcam
Use the show controllers tcam privileged EXEC command to display the state of the registers for all the ternary content addressable memory (TCAM) in the system and for all TCAM interface ASICs that are CAM controllers.
show controllers tcam [asic [number]] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers tcam command:
Switch# show controllers tcam------------------------------------------------------------------------TCAM-0 Registers------------------------------------------------------------------------REV: 00B30103SIZE: 00080040ID: 00000000CCR: 00000000_F0000020RPID0: 00000000_00000000RPID1: 00000000_00000000RPID2: 00000000_00000000RPID3: 00000000_00000000HRR0: 00000000_E000CAFCHRR1: 00000000_00000000HRR2: 00000000_00000000HRR3: 00000000_00000000HRR4: 00000000_00000000HRR5: 00000000_00000000HRR6: 00000000_00000000HRR7: 00000000_00000000<output truncated>GMR31: FF_FFFFFFFF_FFFFFFFFGMR32: FF_FFFFFFFF_FFFFFFFFGMR33: FF_FFFFFFFF_FFFFFFFF=============================================================================TCAM related PortASIC 1 registers=============================================================================LookupType: 89A1C67D_24E35F00LastCamIndex: 0000FFE0LocalNoMatch: 000069E0ForwardingRamBaseAddress:00022A00 0002FE00 00040600 0002FE00 0000D40000000000 003FBA00 00009000 00009000 0004060000000000 00012800 00012900Related Commands
show dot1x
Use the show dot1x privileged EXEC command to display 802.1X statistics, administrative status, and operational status for the switch or for the specified port.
show dot1x [all | interface interface-id | statistics interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not specify a port, global parameters and a summary appear. If you specify a port, details for that port appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output appear.
Examples
This is an example of output from the show dot1x and the show dot1x all privileged EXEC commands:
Switch# show dot1xSysauthcontrol = EnabledDot1x Protocol Version = 1Dot1x Oper Controlled Directions = BothDot1x Admin Controlled Directions = BothSwitch# show dot1x allDot1x Info for interface GigabitEthernet0/1----------------------------------------------------Supplicant MAC 00d0.b71b.35deAuthSM State = CONNECTINGBendSM State = IDLEPortStatus = UNAUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0Dot1x Info for interface GigabitEthernet0/2----------------------------------------------------PortStatus = UNAUTHORIZEDMaxReq = 2HostMode = MultiPort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x interface interface-id privileged EXEC command:
Switch# show dot1x interface gigabitethernet0/1Supplicant MAC 00d0.b71b.35deAuthSM State = AUTHENTICATEDBendSM State = IDLEPortStatus = AUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x statistics interface interface-id command. Table 2-20 describes the fields in the display.
Switch# show dot1x statistics interface gigabitethernet0/1PortStatistics Parameters for Dot1x--------------------------------------------TxReqId = 15 TxReq = 0 TxTotal = 15RxStart = 4 RxLogoff = 0 RxRespId = 1 RxResp = 1RxInvalid = 0 RxLenErr = 0 RxTotal= 6RxVersion = 1 LastRxSrcMac 00d0.b71b.35de
Related Commands
show dtp
Use the show dtp privileged EXEC command to display Dynamic Trunking Protocol (DTP) information for the switch or for a specified interface.
show dtp [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show dtp command:
Switch# show dtpGlobal DTP informationSending DTP Hello packets every 30 secondsDynamic Trunk timeout is 300 seconds21 interfaces using DTPThis is an example of output from the show dtp interface command:
Switch# show dtp interface gigabitethernet0/1DTP information for GigabitEthernet0/1:TOS/TAS/TNS: ACCESS/AUTO/ACCESSTOT/TAT/TNT: NATIVE/NEGOTIATE/NATIVENeighbor address 1: 000943A7D081Neighbor address 2: 000000000000Hello timer expiration (sec/state): 1/RUNNINGAccess timer expiration (sec/state): never/STOPPEDNegotiation timer expiration (sec/state): never/STOPPEDMultidrop timer expiration (sec/state): never/STOPPEDFSM state: S2:ACCESS# times multi & trunk 0Enabled: yesIn STP: noStatistics----------3160 packets received (3160 good)0 packets dropped0 nonegotiate, 0 bad version, 0 domain mismatches, 0 bad TLVs, 0 other6320 packets output (6320 good)3160 native, 3160 software encap isl, 0 isl hardware native0 output errors0 trunk timeouts1 link ups, last link up on Mon Mar 01 1993, 01:02:290 link downsRelated Commands
show interfaces trunk
Displays interface trunking information.
show env
Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch.
show env {all | fan | power | rps| temperature} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show env all command entered:
Switch> show env allFAN is OKTEMPERATURE is OKPOWER is OKRPS is AVAILABLEThis is an example of output from the show env fan command:
Switch> show env fanFAN is OKshow errdisable detect
Use the show errdisable detect user EXEC command to display error-disable detection status.
show errdisable detect [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
A displayed gbic-invalid error reason refers to an invalid small form-factor pluggable (SFP) module.
Examples
This is an example of output from the show errdisable detect command:
Switch> show errdisable detectErrDisable Reason Detection status----------------- ----------------udld Enabledbpduguard Enabledsecurity-violation Enabledchannel-misconfig Enabledpsecure-violation Enableddhcp-rate-limit Enabledunicast-flood Enabledvmps Enabledpagp-flap Enableddtp-flap Enabledlink-flap Enabledgbic-invalid Enabledloopback Enabled
Note
Related Commands
Enables error-disable detection for a specific cause or all causes.
Displays error condition recognition information.
Displays error-disable recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show errdisable flap-values
Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause.
show errdisable flap-values [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.
ErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show errdisable flap-values command:
Switch> show errdisable flap-valuesErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10Related Commands
Enables error-disable detection for a specific cause or all causes.
Displays error-disable detection status.
Displays error-disable recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show errdisable recovery
Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.
show errdisable recovery [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
A gbic-invalid error-disable reason refers to an invalid small form-factor pluggable (SFP) interface.
Examples
This is an example of output from the show errdisable recovery command:
Switch> show errdisable recoveryErrDisable Reason Timer Status----------------- --------------udld Disabledbpduguard Disabledsecurity-violatio Disabledchannel-misconfig Disabledvmps Disabledpagp-flap Disableddtp-flap Disabledlink-flap Disabledgbic-invalid Disabledpsecure-violation Disabledgbic-invalid Disableddhcp-rate-limit Disabledunicast-flood Disabledloopback DisabledTimer interval:300 secondsInterfaces that will be enabled at the next timeout:Interface Errdisable reason Time left(sec)--------- ----------------- --------------Gi0/2 link-flap 279Related Commands
Configures the recover mechanism variables.
Displays error disable detection status.
Displays error condition recognition information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show etherchannel
Use the show etherchannel user EXEC command to display EtherChannel information for a channel.
show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not specify a channel-group, all channel groups are displayed.
In the output, the Passive port list field is displayed only for Layer 3 port channels. This field means that the physical port, which is still not up, is configured to be in the channel group (and indirectly is in the only port channel in the channel group).
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show etherchannel 1 detail command:
Switch> show etherchannel 1 detailGroup state = L2Ports: 2 Maxports = 16Port-channels: 1 Max Port-channels = 16Protocol: LACPPorts in the group:-------------------Port: Gi0/1------------Port state = Up Mstr In-BndlChannel group = 1 Mode = Active Gcchange = -Port-channel = Po1 GC = - Pseudo port-channel = Po1Port index = 0 Load = 0x00 Protocol = LACPFlags: S - Device is sending Slow LACPDUs F - Device is sending fast LACPDUA - Device is in active mode. P - Device is in passive mode.Local information:LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateGi0/1 SA bndl 32768 0x0 0x1 0x0 0x3DAge of the port in the current state: 01d:20h:06m:04sPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:20m:26sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi0/1 Active 00 00 Gi0/2 Active 0Time since last port bundled: 01d:20h:20m:20s Gi0/2This is an example of output from the show etherchannel 1 summary command:
Switch> show etherchannel 1 summaryFlags: D - down P - in port-channelI - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3 S - Layer2u - unsuitable for bundlingU - in use f - failed to allocate aggregatord - default portNumber of channel-groups in use: 1Number of aggregators: 1Group Port-channel Protocol Ports------+-------------+-----------+----------------------------------------1 Po1(SU) LACP Gi0/1(P) Gi0/2(P)This is an example of output from the show etherchannel 1 port-channel command:
Switch> show etherchannel 1 port-channelPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:24m:50sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi0/1 Active 00 00 Gi0/2 Active 0Time since last port bundled: 01d:20h:24m:44s Gi0/2This is an example of output from show etherchannel protocol command:
Switch# show etherchannel protocolChannel-group listing:-----------------------Group: 1----------Protocol: LACPGroup: 2----------Protocol: PAgPRelated Commands
Assigns an Ethernet port to an EtherChannel group.
Restricts the protocol used on a port to manage channeling.
Accesses or creates the port channel.
show interfaces
Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.
show interfaces [interface-id | vlan vlan-id] [accounting | capabilities [module number] | counters | description | etherchannel | flowcontrol | pruning | stats | status [err-disabled] | switchport | trunk] [ | {begin | exclude | include} expression]
Syntax Description
interface-id
(Optional) Valid interfaces include physical ports (including type, module, and port number) and port channels. The valid port-channel range is 1 to 12.
vlan vlan-id
(Optional) VLAN identification. The range is 1 to 4094.
accounting
(Optional) Display accounting information on the interface, including active protocols and input and output packets and octets.
capabilities
(Optional) Display the capabilities of all interfaces or the specified interface, including the features and options that you can configure on the interface. Though visible in the command line help, this option is not available for VLAN IDs.
module number
(Optional) Display capabilities of all interfaces on the switch. Although the indicated range is from 1 to 9, entering only module 1 displays the switch capabilities. This option is not available if you enter a specific interface ID before the capabilities keyword.
counters
(Optional) See the show interfaces counters command.
description
(Optional) Display the administrative status and description set for an interface.
etherchannel
(Optional) Display interface EtherChannel information.
flowcontrol
(Optional) Display interface flowcontrol information
pruning
(Optional) Display interface trunk VTP pruning information.
stats
(Optional) Display the input and output packets by switching path for the interface.
status
(Optional) Display the status of the interface.
err-disabled
(Optional) Display interfaces in error-disabled state.
switchport
(Optional) Display the administrative and operational status of a switching (nonrouting) port, including port blocking and port protection settings.
trunk
Display interface trunk information. If you do not specify an interface, information for only active trunking ports is displayed.
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The show interfaces capabilities command with different keywords has these results:
•
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show interfaces command for Gigabit Ethernet interface 3:
Switch# show interfaces gigabitethernet0/2GigabitEthernet0/2 is down, line protocol is downHardware is Gigabit Ethernet, address is 0009.43a7.d085 (bia 0009.43a7.d085)MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Auto-duplex, Auto-speedinput flow-control is off, output flow-control is offARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang neverLast clearing of "show interface" counters neverInput queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0Queueing strategy: fifoOutput queue :0/40 (size/max)5 minute input rate 0 bits/sec, 0 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec2 packets input, 1040 bytes, 0 no bufferReceived 0 broadcasts, 0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast, 0 pause input0 input packets with dribble condition detected4 packets output, 1040 bytes, 0 underruns0 output errors, 0 collisions, 3 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped outThis is an example of output from the show interfaces accounting command.
Switch# show interfaces accountingVlan1Protocol Pkts In Chars In Pkts Out Chars OutIP 1094395 131900022 559555 84077157Spanning Tree 283896 17033760 42 2520ARP 63738 3825680 231 13860Interface Vlan2 is disabledVlan7Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.Vlan31Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet0/1Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet0/2Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.<output truncated>This is an example of output from the show interfaces capabilities command for an interface.
Switch# show interfaces gigabitethernet0/2 capabilitiesGigabitEthernet0/2Model: WS-C3560-24PSType: 10/100/1000BaseTXSpeed: 10,100,1000,autoDuplex: full,autoTrunk encap. type: 802.1Q,ISLTrunk mode: on,off,desirable,nonegotiateChannel: yesBroadcast suppression: percentage(0-100)Flowcontrol: rx-(off,on,desired),tx-(none)Fast Start: yesQoS scheduling: rx-(not configurable on per port basis),tx-(4q2t)CoS rewrite: yesToS rewrite: yesUDLD: yesInline power: noSPAN: source/destinationPortSecure: yesDot1x: yesDot1x: yesThis is an example of output from the show interfaces gigabitethernet0/2 description command when the interface has been described as Connects to Marketing by using the description interface configuration command.
Switch# show interfaces gigabitethernet0/2 descriptionInterface Status Protocol DescriptionGi0/2 up down Connects to MarketingThis is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:
Switch# show interfaces etherchannel----Port-channel1:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/1 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel2:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/2 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel3:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/3 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InuseThis is an example of output from the show interfaces gigabitethernet0/2 pruning command when pruning is enabled in the VTP domain:
Switch# show interfaces gigibitethernet0/2 pruningPort Vlans pruned for lack of request by neighborGi0/2 3,4Port Vlans traffic requested of neighborGi0/2 1-3This is an example of output from the show interfaces stats command for a specified interface.
Switch# show interfaces vlan 1 statsSwitching path Pkts In Chars In Pkts Out Chars OutProcessor 1165354 136205310 570800 91731594Route cache 0 0 0 0Total 1165354 136205310 570800 91731594This is an example of partial output from the show interfaces status command. It displays the status of all interfaces.
Switch# show interfaces statusPort Name Status Vlan Duplex Speed TypeFa0/1 notconnect 1 auto auto 10/100BaseTXFa0/2 notconnect 1 auto auto 10/100BaseTXFa0/3 notconnect 1 auto auto 10/100BaseTXFa0/4 Test notconnect 1 auto auto 10/100BaseTXFa0/5 notconnect 1 auto auto 10/100BaseTX<output truncated>Gi0/1 notconnect 1 auto auto 10/100/1000BaseTXGi0/2 notconnect 1 auto auto 10/100/1000BaseTX<output truncated>This is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in the error-disabled state.
Switch# show interfaces status err-disabledPort Name Status ReasonGi0/2 err-disabled dtp-flapThis is an example of output from the show interfaces switchport command for a single port. Table 2-21 describes the fields in the display.
Note
Switch# show interfaces gigabitethernet0/3 switchportName: Gi0/3Switchport: EnabledAdministrative Mode: static accessOperational Mode: downAdministrative Trunking Encapsulation: negotiateNegotiation of Trunking: OffAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Voice VLAN: noneAdministrative private-vlan host-association: noneAdministrative private-vlan mapping: noneAdministrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk encapsulation: dot1Administrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk private VLANs: noneOperational private-vlan: noneTrunking VLANs Enabled: ALLPruning VLANs Enabled: 2-1001Capture Mode DisabledCapture VLANs Allowed: ALLProtected: falseUnknown unicast blocked: disabledUnknown multicast blocked: disabledAppliance trust: none
This is an example of output from the show interfaces interface trunk command. It displays trunking information for the port.
Switch# show interfaces gigabitethernet0/1 trunkPort Mode Encapsulation Status Native vlanGi0/1 auto negotiate trunking 1Port Vlans allowed on trunkGi0/1 1-4094Port Vlans allowed and active in management domainGi0/1 1-4Port Vlans in spanning tree forwarding state and not prunedGi0/1 1-4Related Commands
Configures a port as a static-access or dynamic-access port.
Blocks unknown unicast or multicast traffic on an interface.
Configures the VLAN membership mode of a port.
Isolates unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch.
switchport trunk pruning
Configures the VLAN pruning-eligible list for ports in trunking mode.
show interfaces counters
Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface.
show interfaces [interface-id | vlan vlan-id] counters [broadcast | errors | multicast | trunk | unicast] [ | {begin | exclude | include} expression]
Syntax Description
s
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not enter any keywords, all counters for all interfaces are included.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of partial output from the show interfaces counters command. It displays all counters for the switch.
Switch# show interfaces countersPort InOctets InUcastPkts InMcastPkts InBcastPktsFa0/1 0 0 0 0Fa0/2 0 0 0 0Fa0/3 0 0 0 0Fa0/4 0 0 0 0Fa0/5 0 0 0 0<output truncated>This is an example of partial output from the show interfaces counters broadcast command. It displays dropped broadcast traffic for all interfaces.
Switch# show interfaces counters broadcastPort BcastSuppDiscardsFa0/1 0Fa0/2 0Fa0/3 0Fa0/4 0Fa0/5 0Fa0/6 0<output truncated>This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces.
Switch# show interfaces counters trunkPort TrunkFramesTx TrunkFramesRx WrongEncapFa0/1 0 0 0Fa0/2 0 0 0Fa0/3 80678 4155 0Fa0/4 82320 126 0Fa0/5 0 0 0<output truncated>Related Commands
show ip dhcp snooping
Use the show ip dhcp snooping privileged EXEC command to display the Dynamic Host Configuration Protocol (DHCP) snooping configuration.
show ip dhcp snooping
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Examples
This is an example of output from the show ip dhcp snooping command.
Switch# show ip dhcp snoopingSwitch DHCP snooping is enabledDHCP snooping is configured on following VLANs:40-42Insertion of option 82 is enabledInterface Trusted Rate limit (pps)------------------------ ------- ----------------GigabitEthernet0/1 yes unlimitedGigabitEthernet0/2 yes unlimitedRelated Commands
show ip dhcp snooping binding
Use the show ip dhcp snooping binding privileged EXEC command to display the Dynamic Host Configuration Protocol (DHCP) snooping binding table and configuration information for all interfaces on a switch.
show ip dhcp snooping binding [ip-address] [mac-address] [dynamic] [interface interface-id] [static] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Examples
This example shows how to display the DHCP snooping binding entries for a switch.
Switch# show ip dhcp snooping bindingMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 286 dynamic 41 GigabitEthernet0/100:D0:B7:1B:35:DE 41.0.0.52 237 dynamic 41 GigabitEthernet0/2This example shows how to display the DHCP snooping binding entries for a specific IP address.
Switch# show ip dhcp snooping binding 41.0.0.51MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 285 dynamic 41 GigabitEthernet0/2This example shows how to display the DHCP snooping binding entries for a specific MAC address.
Switch# show ip dhcp snooping binding 0030.94c2.ef35MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 279 dynamic 41 GigabitEthernet0/2This example shows how to display the DHCP snooping dynamic binding entries on a switch.
Switch# show ip dhcp snooping binding dynamicMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 286 dynamic 41 GigabitEthernet0/100:D0:B7:1B:35:DE 41.0.0.52 296 dynamic 41 GigabitEthernet0/100:00:00:00:00:01 40.0.0.46 46 dynamic 40 GigabitEthernet0/200:00:00:00:00:03 42.0.0.33 46 dynamic 42 GigabitEthernet0/2This example shows how to display the DHCP snooping binding entries on a port.
Switch# show ip dhcp snooping binding interface gi/0/2MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 290 dynamic 41 GigabitEthernet0/200:D0:B7:1B:35:DE 41.0.0.52 270 dynamic 41 GigabitEthernet0/2This example shows how to display the DHCP snooping binding entries on VLAN 41.
Switch# show ip dhcp snooping binding vlan 41MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------- ---- --------------------00:30:94:C2:EF:35 41.0.0.51 274 dynamic 41 GigabitEthernet0/100:D0:B7:1B:35:DE 41.0.0.52 165 dynamic 41 GigabitEthernet0/100:00:00:00:00:02 41.0.0.53 65 dynamic 41 GigabitEthernet0/2Related Commands
show ip igmp profile
Use the show ip igmp profile privileged EXEC command to view all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
show ip igmp profile [profile number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of output from the show ip igmp profile privileged EXEC command, with and without specifying a profile number. If no profile number is entered, the display includes all profiles configured on the switch.
Switch# show ip igmp profile 40IGMP Profile 40permitrange 233.1.1.1 233.255.255.255Switch# show ip igmp profileIGMP Profile 3range 230.9.9.0 230.9.9.0IGMP Profile 4permitrange 229.9.9.0 229.255.255.255Related Commands
show ip igmp snooping
Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
show ip igmp snooping [mrouter | multicast | querier] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
mrouter
(Optional) See the show ip igmp snooping mrouter command.
multicast
(Optional) See the show ip igmp snooping multicast command.
querier
(Optional) Display information about the IGMP version that an interface supports.
vlan vlan-id
(Optional) Specify a VLAN; the range is 1 to 4094 (only available in privileged EXEC mode).
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Command Modes
User EXEC
The vlan vlan-id keyword is available only in privileged EXEC mode.
Command History
Usage Guidelines
Use this command to display snooping configuration for the switch or for a specific VLAN.
Although visible in the output display, output lines related to TCN and source-only learning are not supported.
Use the show ip igmp snooping querier command to display the IGMP version and ports that are associated with a multicast IP address.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ip igmp snooping vlan 1 command. It shows snooping characteristics for a specific VLAN.
Switch# show ip igmp snooping vlan 1Global IGMP Snooping configuration:-----------------------------------IGMP snooping :EnabledIGMPv3 snooping (minimal) :EnabledReport suppression :EnabledTCN solicit query :DisabledTCN flood query count :2Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLY
Note
This is an example of output from the show ip igmp snooping command. It displays snooping characteristics for all VLANs on the switch.
Switch> show ip igmp snoopingGlobal IGMP Snooping configuration:-----------------------------------IGMP snooping : EnabledIGMPv3 snooping (minimal) : EnabledReport suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYVlan 2:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLY<output truncated>This is an example of output from the show ip igmp snooping querier command:
Switch> show ip igmp snooping querierVlan IP Address IGMP Version Port---------------------------------------------------1 172.20.50.11 v3 Gi0/12 172.20.40.20 v2 RouterRelated Commands
show ip igmp snooping mrouter
Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
show ip igmp snooping mrouter [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use this command to display multicast router ports on the switch or for a specific VLAN.
When multicast VLAN registration (MVR) is enabled, the show ip igmp snooping mrouter command displays MVR multicast router information and IGMP snooping information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping mrouter command. It shows how to display multicast router ports on the switch.
Switch# show ip igmp snooping mrouterVlan ports---- -----1 Gi0/1(dynamic)Related Commands
show ip igmp snooping multicast
Use the show ip igmp snooping multicast privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or multicast information for the selected parameter. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or information about the selected parameter for the VLAN.
show ip igmp snooping multicast [vlan vlan-id] [count | dynamic [count | group ip_address] | group ip_address | user [count | group ip_address]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use this command to display multicast information and the multicast table for specified parameters.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping multicast command without any keywords. It displays the multicast table for the switch.
Switch# show ip igmp snooping multicastVlan Group Address Type Ports---- ------------- ---- -----1 224.1.2.30 IGMP Gi0/1, Gi0/21 224.1.2.1 IGMP Gi0/1, Gi0/21 224.4.4.4 USER Gi0/1, Gi0/2This is an example of output from the show ip igmp snooping multicast count command. It displays the total number of multicast groups on the switch.
Switch# show ip igmp snooping multicast countTotal number of multicast groups: 3This is an example of output from the show ip igmp snooping multicast dynamic command. It shows only the entries learned through IGMP snooping.
Switch# show ip igmp snooping multicast dynamicVlan Group Address Type Ports---- ------------- ---- -----1 224.1.2.30 IGMP Gi0/1, Gi0/21 224.1.2.1 IGMP Gi0/1, Gi0/2This is an example of output from the show ip igmp snooping multicast group command. It shows the entries for the group with the specified IP address.
Switch# show ip igmp snooping multicast group 224.1.2.30Vlan Group Address Type Ports---- ------------- ---- -----1 224.1.2.30 IGMP Gi0/1, Gi0/2This is an example of output from the show ip igmp snooping multicast vlan command. It displays all entries belonging to the specified VLAN.
Switch# show ip igmp snooping multicast vlan 1Vlan Group Address Type Ports---- ------------- ---- -----1 224.1.2.30 IGMP Gi0/1, Gi0/21 224.1.2.1 IGMP Gi0/1, Gi0/2Related Commands
show lacp
Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information.
show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show lacp command to display the active channel-group information. To display specific channel information, enter the show lacp command with a channel-group number.
If you do not specify a channel group, information for all channel groups appears.
You can enter the channel-group-number option to specify a channel group for all keywords except sys-id.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show lacp counters user EXEC command. Table 2-22 describes the fields in the display.
Switch> show lacp countersLACPDUs Marker Marker Response LACPDUsPort Sent Recv Sent Recv Sent Recv Pkts Err---------------------------------------------------------------------Channel group:1Gi0/1 19 10 0 0 0 0 0Gi0/2 14 6 0 0 0 0 0
This is an example of output from the show lacp internal command:
Switch> show lacp 1 internalFlags: S - Device is requesting Slow LACPDUsF - Device is requesting Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 1LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateGi0/1 SA bndl 32768 0x3 0x3 0x4 0x3DGi0/2 SA bndl 32768 0x3 0x3 0x5 0x3DTable 2-23 describes the fields in the display:
This is an example of output from the show lacp neighbor command:
Switch> show lacp neighborFlags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 3 neighborsPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsGi0/1 32768,0007.eb49.5e80 0xC 19s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsGi0/2 32768,0007.eb49.5e80 0xD 15s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CThis is an example of output from the show lacp sys-id command:
Switch> show lacp sys-id32765,0002.4b29.3a00The system identification is made up of the system priority and the system MAC address. The first two bytes are the system priority, and the last six bytes are the globally administered individual MAC address associated to the system.
Related Commands
Clears the LACP channel-group information.
Configures the LACP port priority.
Configures the LACP system priority.
show mac access-group
Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.
show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC; the interface keyword is available only in privileged EXEC mode.
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac-access group user EXEC command. In this display, Gigabit Ethernet interface 0/1 has the MAC access list macl_e1 applied; no MAC ACLs are applied to other interfaces.
Switch> show mac access-groupInterface GigabitEthernet0/1:Inbound access-list is not setInterface GigabitEthernet0/2:Inbound access-list is macl_e1<output truncated>This is an example of output from the show mac access-group interface gigabitethernet0/1 command:
Switch# show mac access-group interface GigabitEthernet0/1Interface GigabitEthernet0/1:Inbound access-list is macl_e1Related Commands
show mac address-table
Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
show mac address-table [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table command:
Switch> show mac address-tableMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0000.0000.0001 STATIC CPUAll 0000.0000.0002 STATIC CPUAll 0000.0000.0003 STATIC CPUAll 0000.0000.0009 STATIC CPUAll 0000.0000.0012 STATIC CPUAll 0180.c200.000b STATIC CPUAll 0180.c200.000c STATIC CPUAll 0180.c200.000d STATIC CPUAll 0180.c200.000e STATIC CPUAll 0180.c200.000f STATIC CPUAll 0180.c200.0010 STATIC CPU1 0030.9441.6327 DYNAMIC Gi0/4Total Mac Addresses for this criterion: 12Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays dynamic MAC address table entries only.
Displays the MAC address table information for the specified interface.
Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
Displays the MAC address notification settings for all interfaces or the specified interface.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table address
Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address.
show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table address command:
Switch# show mac address-table address 0002.4b28.c482Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0002.4b28.c482 STATIC CPUTotal Mac Addresses for this criterion: 1Related Commands
show mac address-table aging-time
Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
show mac address-table aging-time [vlan vlan-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the aging time for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table aging-time command:
Switch> show mac address-table aging-timeVlan Aging Time---- ----------1 300This is an example of output from the show mac address-table aging-time vlan 10 command:
Switch> show mac address-table aging-time vlan 10Vlan Aging Time---- ----------10 300Related Commands
show mac address-table count
Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN.
show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the address count for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table count command:
Switch# show mac address-table countMac Entries for Vlan : 1---------------------------Dynamic Address Count : 2Static Address Count : 0Total Mac Addresses : 2Related Commands
show mac address-table dynamic
Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries.
show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC; address keyword available only in privileged EXEC mode.
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table dynamic command:
Switch> show mac address-table dynamicMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0030.b635.7862 DYNAMIC Gi0/21 00b0.6496.2741 DYNAMIC Gi0/2Total Mac Addresses for this criterion: 2Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays MAC address table information for the specified MAC address.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays the MAC address table information for the specified interface.
Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table interface
Use the show mac address-table interface
