Table Of Contents

Numerics - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X -

Index

Numerics

802.1D

See STP

802.1Q

and trunk ports     10-3

configuration limitations     12-19

encapsulation     12-16

native VLAN for untagged traffic     12-23

tunneling

compatibility with other features     16-6

defaults     16-4

described     16-1

tunnel ports with other features     16-6

802.1s

See MSTP

802.1w

See RSTP

802.1x

See port-based authentication

802.3ad

See EtherChannel

802.3af

See PoE

802.3z flow control     10-18

A

abbreviating commands     2-3

ABRs     34-24

access-class command     31-20

access control entries

See ACEs

access-denied response, VMPS     12-28

access groups

applying ACLs to interfaces     31-21

IP     31-21

Layer 2     31-21

Layer 3     31-21

access lists

See ACLs

access ports

and Layer 2 protocol tunneling     16-11

defined     10-3

accounting

with 802.1x     9-5, 9-20

with RADIUS     8-28

with TACACS+     8-11, 8-17

ACEs

and QoS     32-7

defined     31-2

Ethernet     31-2

IP     31-2

ACLs

ACEs     31-2

any keyword     31-13

applying

on bridged packets     31-39

on multicast packets     31-40

on routed packets     31-39

on switched packets     31-38

time ranges to     31-17

to an interface     31-20

to QoS     32-7

classifying traffic for QoS     32-43

comments in     31-19

ACLs (continued)

compiling     31-22

configuring with VLAN maps     31-37

defined     31-1, 31-7

examples of     31-22, 32-43

extended IP

configuring for QoS classification     32-45

creating     31-10

matching criteria     31-7

hardware and software handling     31-22

host keyword     31-13

IP

applying to interfaces     31-20

creating     31-7

fragments and QoS guidelines     32-34

implicit deny     31-9, 31-14, 31-16

implicit masks     31-9

matching criteria     31-7

named     31-15

terminal lines, setting on     31-20

undefined     31-21

violations, logging     31-16

limiting actions     31-38

logging messages     31-10

log keyword     31-16

MAC extended     31-27, 32-46

matching     31-7, 31-21

monitoring     31-41

named     31-15

number per QoS class map     32-34

numbers     31-7

port     31-2

precedence of     31-2

QoS     32-7, 32-43

resequencing entries     31-15

router     31-2

ACLs (continued)

standard IP

configuring for QoS classification     32-44

creating     31-9

matching criteria     31-7

supported features     31-22

support for     1-6

time ranges     31-17

unsupported features     31-6

using router ACLs with VLAN maps     31-37

VLAN maps

configuration guidelines     31-31

configuring     31-30

active links     20-1

active router     36-1

address aliasing     23-2

addresses

displaying the MAC address table     6-27

dynamic

accelerated aging     17-8

changing the aging time     6-21

default aging     17-8

defined     6-20

learning     6-20

removing     6-22

MAC, discovering     6-27

multicast

group address range     37-3

STP address management     17-8

static

adding and removing     6-24

defined     6-20

address resolution     6-27, 34-8

Address Resolution Protocol

See ARP

adjacency tables, with CEF     34-60

administrative distances

defined     34-71

OSPF     34-30

routing protocol defaults     34-62

advanced IP services image     1-1, 35-1

advertisements

CDP     25-1

RIP     34-19

VTP     12-19, 13-3

aggregatable global unicast addresses     35-3

aggregate addresses, BGP     34-54

aggregated ports

See EtherChannel

aggregate policers     32-58

aggregate policing     1-8

aging, accelerating     17-8

aging time

accelerated

for MSTP     18-20

for STP     17-8, 17-21

MAC address table     6-21

maximum

for MSTP     18-21

for STP     17-21

alarms, RMON     28-3

allowed-VLAN list     12-21

area border routers

See ABRs

ARP

configuring     34-8

defined     1-4, 6-27, 34-8

encapsulation     34-10

static cache configuration     34-8

table

address resolution     6-27

managing     6-27

ASBRs     34-24

AS-path filters, BGP     34-49

asymmetrical links, and 802.1Q tunneling     16-4

attributes, RADIUS

vendor-proprietary     8-31

vendor-specific     8-29

audience     xxxvii

authentication

EIGRP     34-37

HSRP     36-9

local mode with AAA     8-36

NTP associations     6-5

RADIUS

key     8-21

login     8-23

TACACS+

defined     8-11

key     8-13

login     8-14

See also port-based authentication

authentication keys, and routing protocols     34-72

authoritative time source, described     6-2

authorization

with RADIUS     8-27

with TACACS+     8-11, 8-16

authorized ports with 802.1x     9-4

autoconfiguration     3-3

automatic QoS

See QoS

autonegotiation

duplex mode     1-3

interface configuration guidelines     10-16

mismatches     40-11

autonomous system boundary routers

See ASBRs

autonomous systems, in BGP     34-43

Auto-RP, described     37-5

autosensing, port speed     1-3

auxiliary VLAN

See voice VLAN

availability, features     1-5

B

BackboneFast

described     19-5

disabling     19-14

enabling     19-13

support for     1-5

backup interfaces

See Flex Links

backup links     20-1

banners

configuring

login     6-19

message-of-the-day login     6-18

default configuration     6-18

when displayed     6-18

BGP

aggregate addresses     34-54

aggregate routes, configuring     34-54

CIDR     34-54

clear commands     34-58

community filtering     34-51

configuring neighbors     34-53

default configuration     34-41

described     34-40

enabling     34-43

monitoring     34-58

multipath support     34-46

neighbors, types of     34-43

path selection     34-46

peers, configuring     34-53

prefix filtering     34-50

resetting sessions     34-45

route dampening     34-57

route maps     34-48

route reflectors     34-56

routing domain confederation     34-55

show commands     34-58

supernets     34-54

BGP (continued)

support for     1-8

Version 4     34-40

binding cluster group and HSRP group     36-11

binding database

address, DHCP server

See DHCP, Cisco IOS server database

DHCP snooping

See DHCP snooping binding database

bindings

address, Cisco IOS DHCP server     21-5

DHCP snooping database     21-6

IP source guard     21-14

binding table, DHCP snooping

See DHCP snooping binding database

blocking packets     24-6

booting

boot loader, function of     3-2

boot process     3-2

manually     3-13

specific image     3-13

boot loader

accessing     3-14

described     3-2

environment variables     3-14

prompt     3-14

trap-door mechanism     3-2

bootstrap router (BSR), described     37-5

Border Gateway Protocol

See BGP

BPDU

error-disabled state     19-2

filtering     19-3

RSTP format     18-9

BPDU filtering

described     19-3

disabling     19-12

enabling     19-12

support for     1-5

BPDU guard

described     19-2

disabling     19-11

enabling     19-11

support for     1-5

bridged packets, ACLs on     31-39

bridge groups

See fallback bridging

bridge protocol data unit

See BPDU

broadcast flooding     34-16

broadcast packets

directed     34-13

flooded     34-13

broadcast storm-control command     24-4

broadcast storms     24-1, 34-13

C

cables, monitoring for unidirectional links     26-1

candidate switch

defined     5-3

requirements     5-3

See also command switch, cluster standby group, and member switch

CA trustpoint

configuring     8-44

defined     8-42

caution, described     xxxviii

CDP

and trusted boundary     32-40

configuring     25-2

default configuration     25-2

described     25-1

disabling for routing device     25-3 to  25-4

enabling and disabling

on an interface     25-4

on a switch     25-3

Layer 2 protocol tunneling     16-8

CDP (continued)

monitoring     25-5

overview     25-1

power negotiation extensions     10-6

support for     1-4

transmission timer and holdtime, setting     25-2

updates     25-2

CEF

defined     34-59

enabling     34-60

IPv6     35-14

CGMP

as IGMP snooping learning method     23-8

clearing cached group entries     37-49

enabling server support     37-32

joining multicast group     23-3

overview     37-7

server support only     37-7

switch support of     1-3

CIDR     34-54

CipherSuites     8-43

Cisco 7960 IP Phone     15-1

Cisco Discovery Protocol

See CDP

Cisco Express Forwarding

See CEF

Cisco Group Management Protocol

See CGMP

Cisco intelligent power management     10-6

Cisco IOS DHCP server

See DHCP, Cisco IOS DHCP server

Cisco IOS File System

See IFS

Cisco Network Assistant

See Network Assistant

Cisco Networking Services

See IE2100

CiscoWorks 2000     1-4, 30-4

classless interdomain routing

See CIDR

classless routing     34-6

class maps for QoS

configuring     32-47

described     32-7

displaying     32-78

class of service

See CoS

clearing interfaces     10-25

CLI

abbreviating commands     2-3

command modes     2-1

described     1-4

editing features

enabling and disabling     2-6

keystroke editing     2-6

wrapped lines     2-8

error messages     2-4

filtering command output     2-8

getting help     2-3

history

changing the buffer size     2-5

described     2-4

disabling     2-5

recalling commands     2-5

managing clusters     5-3

no and default forms of commands     2-4

client mode, VTP     13-3

clock

See system clock

cluster requirements     xxxix

clusters, switch

benefits     1-2

described     5-1

managing

through CLI     5-3

through SNMP     5-4

clusters, switch (continued)

planning considerations

CLI     5-3

SNMP     5-4

See also Getting Started with Cisco Network Assistant

cluster standby group

and HSRP group     36-11

requirements     5-2

Coarse Wave Division Multiplexer

See CWDM SFPs

command-line interface

See CLI

command modes     2-1

commands

abbreviating     2-3

no and default     2-4

commands, setting privilege levels     8-8

command switch

configuration conflicts     40-11

defined     5-2

password privilege levels     5-4

recovery

from command-switch failure     40-7

from lost member connectivity     40-11

replacing

with another switch     40-10

with cluster member     40-8

requirements     5-2

See also candidate switch, cluster standby group, member switch, and standby command switch

community list, BGP     34-52

community ports     14-2

community strings

configuring     30-8

for cluster switches     30-4

overview     30-4

community VLANs     14-2, 14-3

compatibility, feature     24-11

config.text     3-12

configuration, initial

defaults     1-10

Express Setup     1-2

See also getting started guide and hardware installation guide

configuration conflicts, recovering from lost member connectivity     40-11

configuration examples, network     1-12

configuration files

clearing the startup configuration     B-18

creating using a text editor     B-9

default name     3-12

deleting a stored configuration     B-18

described     B-8

downloading

automatically     3-12

preparing     B-10, B-12, B-15

reasons for     B-8

using FTP     B-13

using RCP     B-16

using TFTP     B-10

guidelines for creating and using     B-8

invalid combinations when copying     B-5

limiting TFTP server access     30-15

obtaining with DHCP     3-7

password recovery disable considerations     8-5

specifying the filename     3-12

system contact and location information     30-14

types and location     B-9

uploading

preparing     B-10, B-12, B-15

reasons for     B-8

using FTP     B-14

using RCP     B-17

using TFTP     B-11

configuration settings, saving     3-10

configure terminal command     10-10

config-vlan mode     2-2, 12-7

conflicts, configuration     40-11

connections, secure remote     8-38

connectivity problems     40-13, 40-15, 40-16

consistency checks in VTP Version 2     13-4

console port, connecting to     2-9

conventions

command     xxxviii

for examples     xxxviii

publication     xxxviii

text     xxxviii

corrupted software, recovery steps with Xmodem     40-2

CoS

in Layer 2 frames     32-2

override priority     15-6

trust priority     15-6

CoS input queue threshold map for QoS     32-17

CoS output queue threshold map for QoS     32-20

CoS-to-DSCP map for QoS     32-60

counters, clearing interface     10-25

crashinfo file     40-23

cryptographic software image

Kerberos     8-32

SSH     8-37

SSL     8-41

CWDM SFPs     1-17

D

daylight saving time     6-13

debugging

enabling all system diagnostics     40-20

enabling for a specific feature     40-19

redirecting error message output     40-20

using commands     40-19

default commands     2-4

default configuration

802.1Q tunneling     16-4

802.1x     9-10

auto-QoS     32-21

banners     6-18

default configuration (continued)

BGP     34-41

booting     3-12

CDP     25-2

DHCP     21-7

DHCP option 82     21-7

DHCP snooping     21-7

DHCP snooping binding database     21-8

DNS     6-16

dynamic ARP inspection     22-5

EIGRP     34-34

EtherChannel     33-8

fallback bridging     39-3

Flex Links     20-2

HSRP     36-5

IGMP     37-26

IGMP filtering     23-21

IGMP snooping     23-6

IGMP throttling     23-21

initial switch information     3-3

IP addressing, IP routing     34-4

IP multicast routing     37-8

IP source guard     21-15

IPv6     35-9

Layer 2 interfaces     10-14

Layer 2 protocol tunneling     16-11

MAC address table     6-21

MSDP     38-4

MSTP     18-12

MVR     23-16

NTP     6-4

optional spanning-tree configuration     19-9

OSPF     34-25

password and privilege level     8-2

PIM     37-8

private VLANs     14-6

RADIUS     8-20

RIP     34-20

RMON     28-3

default configuration (continued)

RSPAN     27-9

SDM template     7-3

SNMP     30-6

SPAN     27-9

SSL     8-44

standard QoS     32-32

STP     17-11

system message logging     29-3

system name and prompt     6-15

TACACS+     8-13

UDLD     26-4

VLAN, Layer 2 Ethernet interfaces     12-19

VLANs     12-8

VMPS     12-29

voice VLAN     15-3

VTP     13-6

default gateway     3-10, 34-11

default networks     34-62

default routes     34-62

default routing     34-2

deleting VLANs     12-10

description command     10-21

designing your network, examples     1-12

destination addresses, in ACLs     31-12

destination-IP address-based forwarding, EtherChannel     33-7

destination-MAC address forwarding, EtherChannel     33-6

detecting indirect link failures, STP     19-5

device     B-18

device discovery protocol     25-1

device manager

benefits     1-2

described     1-2, 1-4

in-band management     1-5

requirements     xxxviii

upgrading a switch     B-18

DHCP

Cisco IOS server database

configuring     21-12

default configuration     21-7

described     21-5

enabling

relay agent     21-9

server     21-9

DHCP-based autoconfiguration

client request message exchange     3-4

configuring

client side     3-3

DNS     3-6

relay device     3-6

server side     3-5

server-side     21-9

TFTP server     3-5

example     3-8

lease options

for IP address information     3-5

for receiving the configuration file     3-5

overview     3-3

relationship to BOOTP     3-4

relay support     1-4, 1-9

support for     1-4

DHCP binding database

See DHCP snooping binding database

DHCP binding table

See DHCP snooping binding database

DHCP option 82

circuit ID suboption     21-5

configuration guidelines     21-8

default configuration     21-7

displaying     21-14

forwarding address, specifying     21-10

helper address     21-10

overview     21-3

DHCP option 82 (continued)

packet format, suboption

circuit ID     21-5

remote ID     21-5

remote ID suboption     21-5

DHCP snooping

accepting untrusted packets form edge switch     21-3, 21-11

and private VLANs     21-12

binding database

See DHCP snooping binding database

configuration guidelines     21-8

default configuration     21-7

displaying binding tables     21-14

message exchange process     21-4

option 82 data insertion     21-3

trusted interface     21-2

untrusted interface     21-2

untrusted messages     21-2

DHCP snooping binding database

adding bindings     21-13

binding file

format     21-6

location     21-6

bindings     21-6

clearing agent statistics     21-13

configuration guidelines     21-9

configuring     21-13

default configuration     21-7, 21-8

deleting

binding file     21-13

bindings     21-13

database agent     21-13

described     21-5

displaying     21-14

binding entries     21-14

status and statistics     21-14

enabling     21-13

entry     21-6

DHCP snooping binding database (continued)

renewing database     21-13

resetting

delay value     21-13

timeout value     21-13

updating process     21-6

DHCP snooping binding table

See DHCP snooping binding database

Differentiated Services architecture, QoS     32-2

Differentiated Services Code Point     32-2

Diffusing Update Algorithm (DUAL)     34-33

directed unicast requests     1-4

directories

changing     B-3

creating and removing     B-4

displaying the working     B-3

Distance Vector Multicast Routing Protocol

See DVMRP

distance-vector protocols     34-3

distribute-list command     34-70

DNS

and DHCP-based autoconfiguration     3-6

default configuration     6-16

displaying the configuration     6-17

in IPv6     35-4

overview     6-16

setting up     6-17

support for     1-4

documentation, related     xxxviii

document conventions     xxxviii

domain names

DNS     6-16

VTP     13-8

Domain Name System

See DNS

dot1q-tunnel switchport mode     12-18

double-tagged packets

802.1Q tunneling     16-2

Layer 2 protocol tunneling     16-10

downloading

configuration files

preparing     B-10, B-12, B-15

reasons for     B-8

using FTP     B-13

using RCP     B-16

using TFTP     B-10

image files

deleting old image     B-22

preparing     B-21, B-24, B-28

reasons for     B-19

using CMS     1-2

using FTP     B-25

using HTTP     1-2, B-18

using Network Assistant     1-2

using RCP     B-30

using TFTP     B-21

using the device manager or Network Assistant     B-18

drop threshold for Layer 2 protocol packets     16-11

DSCP     1-7, 32-2

DSCP input queue threshold map for QoS     32-17

DSCP output queue threshold map for QoS     32-20

DSCP-to-CoS map for QoS     32-63

DSCP-to-DSCP-mutation map for QoS     32-64

DSCP transparency     32-40

DTP     1-6, 12-17

DUAL finite state machine, EIGRP     34-33

dual IPv4 and IPv6 templates     7-2, 35-7

dual protocol stacks

configuring     35-12

IPv4 and IPv6     35-7

SDM templates supporting     35-8

duplex mode, configuring     10-15

DVMRP

autosummarization

configuring a summary address     37-46

disabling     37-48

connecting PIM domain to DVMRP router     37-38

enabling unicast routing     37-42

DVMRP (continued)

interoperability

with Cisco devices     37-36

with Cisco IOS software     37-7

mrinfo requests, responding to     37-41

neighbors

advertising the default route to     37-40

discovery with Probe messages     37-36

displaying information     37-41

prevent peering with nonpruning     37-44

rejecting nonpruning     37-42

overview     37-7

routes

adding a metric offset     37-48

advertising all     37-48

advertising the default route to neighbors     37-40

caching DVMRP routes learned in report messages     37-42

changing the threshold for syslog messages     37-45

deleting     37-49

displaying     37-50

favoring one over another     37-48

limiting the number injected into MBONE     37-45

limiting unicast route advertisements     37-36

routing table     37-7

source distribution tree, building     37-7

support for     1-9

tunnels

configuring     37-38

displaying neighbor information