Catalyst 3560 Switch Command Reference, Rel. 12.2(40)SE
Index

Table Of Contents

A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V -

Index

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

aaa authorization network command 2-5

AAA methods 2-3

abort command 2-749

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-146

MAC, displaying 2-520

access list, IPv6 2-211

access map configuration mode 2-270

access mode 2-690

access ports 2-690

ACEs 2-87, 2-340

ACLs

deny 2-85

displaying 2-389

for non-IP protocols 2-250

IP 2-146

matching 2-270

on Layer 2 interfaces 2-146

permit 2-338

action command 2-6

address aliasing 2-321

aggregate-port learner 2-326

allowed VLANs 2-710

apply command 2-749

archive download-sw command 2-8

archive tar command 2-11

archive upload-sw command 2-14

arp access-list command 2-16

audience xix

authentication failed VLAN

See dot1x auth-fail vlan

auth-fail max-attempts

See dot1x auth-fail max-attempts

auth-fail vlan

See dot1x auth-fail vlan

authorization state of controlled port 2-119

autonegotiation of duplex mode 2-128

auto qos voip command 2-18

B

BackboneFast, for STP 2-623

backup interfaces

configuring 2-684

displaying 2-453

boot (boot loader) command A-2

boot auto-download-sw command 2-23

boot boothlpr command 2-25

boot config-file command 2-26

boot enable-break command 2-27

boot helper command 2-28

boot helper-config file command 2-29

booting

Cisco IOS image 2-32

displaying environment variables 2-398

interrupting 2-23, 2-27

manually 2-30

boot loader

accessing A-1

booting

Cisco IOS image A-2

helper image 2-28

directories

creating A-14

displaying a list of A-7

removing A-18

displaying

available commands A-12

memory heap utilization A-13

version A-25

environment variables

described A-19

displaying settings A-19

location of A-20

setting A-19

unsetting A-23

files

copying A-5

deleting A-6

displaying a list of A-7

displaying the contents of A-4, A-15, A-22

renaming A-16

file system

formatting A-10

initializing flash A-9

running a consistency check A-11

prompt A-1

resetting the system A-17

boot manual command 2-30

boot private-config-file command 2-31

boot system command 2-32

BPDU filtering, for spanning tree 2-624, 2-659

BPDU guard, for spanning tree 2-626, 2-659

broadcast storm control 2-677

C

candidate switches

See clusters

cat (boot loader) command A-4

caution, description xx

CDP, enabling protocol tunneling for 2-229

channel-group command 2-33

channel-protocol command 2-36

Cisco Network Assistant

See Network Assistant xx

Cisco SoftPhone

auto-QoS configuration 2-18

trusting packets sent from 2-312

class command 2-38

class-map command 2-40

class maps

creating 2-40

defining the match criteria 2-272

displaying 2-403

class of service

See CoS

clear dot1x command 2-42

clear eap sessions command 2-43

clear errdisable interface 2-44

clear ip arp inspection log command 2-45

clear ip arp inspection statistics command 2-46

clear ipc command 2-49

clear ip dhcp snooping database command 2-47

clear l2protocol-tunnel counters command 2-50

clear lacp command 2-51

clear mac address-table command 2-52, 2-54

clear pagp command 2-55

clear port-security command 2-56

clear spanning-tree counters command 2-58

clear spanning-tree detected-protocols command 2-59

clear vmps statistics command 2-60

clear vtp counters command 2-61

cluster commander-address command 2-62

cluster discovery hop-count command 2-64

cluster enable command 2-65

cluster holdtime command 2-66

cluster member command 2-67

cluster outside-interface command 2-69

cluster requirements xxi

cluster run command 2-70

clusters

adding candidates 2-67

binding to HSRP group 2-71

building manually 2-67

communicating with

devices outside the cluster 2-69

members by using Telnet 2-367

debug messages, display B-5

displaying

candidate switches 2-406

debug messages B-5

member switches 2-408

status 2-404

hop-count limit for extended discovery 2-64

HSRP standby groups 2-71

redundancy 2-71

SNMP trap 2-613

cluster standby-group command 2-71

cluster timer command 2-73

command modes defined 1-1

commands changed in Cisco IOS Release 12.2(20)SE 1-5

command switch

See clusters

configuration, initial

See getting started guide and hardware installation guide

configuration files

password recovery disable considerations A-1

specifying the name 2-26, 2-31

configuring multiple interfaces 2-141

config-vlan mode

commands 2-735

description 1-4

entering 2-734

summary 1-2

conventions

command xx

for examples xx

publication xx

text xx

copy (boot loader) command A-5

CoS

assigning default value to incoming packets 2-282

assigning to Layer 2 protocol packets 2-232

overriding the incoming value 2-282

CoS-to-DSCP map 2-286

CPU ASIC statistics, displaying 2-410

crashinfo files 2-134

D

debug auto qos command B-2

debug backup command B-4

debug cluster command B-5

debug dot1x command B-7

debug dtp command B-9

debug eap command B-10

debug etherchannel command B-12

debug ilpower command B-13

debug interface command B-14

debug ip dhcp snooping command B-15

debug ip igmp filter command B-17

debug ip igmp max-groups command B-18

debug ip igmp snooping command B-19

debug ip verify source packet command B-16

debug lacp command B-20

debug mac-notification command B-21

debug matm command B-22

debug matm move update command B-23

debug monitor command B-24

debug mvrdbg command B-25

debug nvram command B-26

debug pagp command B-27

debug platform acl command B-28

debug platform backup interface command B-29

debug platform configuration command B-37

debug platform cpu-queues command B-30

debug platform device-manager command B-32

debug platform dot1x command B-33

debug platform etherchannel command B-34

debug platform fallback-bridging command B-35

debug platform forw-tcam command B-36

debug platform ip arp inspection command B-38

debug platform ip dhcp command B-39

debug platform ip igmp snooping command B-40

debug platform ip multicast command B-42

debug platform ip unicast command B-44

debug platform ip wccp command B-46

debug platform led command B-47

debug platform matm command B-48

debug platform messaging application command B-49

debug platform phy command B-50

debug platform pm command B-52

debug platform port-asic command B-54

debug platform port-security command B-55

debug platform qos-acl-tcam command B-56

debug platform remote-commands command B-57

debug platform resource-manager command B-58

debug platform snmp command B-59

debug platform span command B-60

debug platform supervisor-asic command B-61

debug platform sw-bridge command B-62

debug platform tcam command B-63

debug platform udld command B-65

debug platform vlan command B-66

debug pm command B-67

debug port-security command B-69

debug qos-manager command B-70

debug spanning-tree backbonefast command B-73

debug spanning-tree bpdu command B-74

debug spanning-tree bpdu-opt command B-75

debug spanning-tree command B-71

debug spanning-tree mstp command B-76

debug spanning-tree switch command B-78

debug spanning-tree uplinkfast command B-80

debug sw-vlan command B-81

debug sw-vlan ifs command B-83

debug sw-vlan notification command B-84

debug sw-vlan vtp command B-86

debug udld command B-88

debug vqpc command B-90

define interface-range command 2-75

delete (boot loader) command A-6

delete command 2-77

deny (ARP access-list configuration) command 2-78

deny (IPv6) command 2-80

deny command 2-85

detect mechanism, causes 2-129

device manager requirements xx

DHCP snooping

accepting untrusted packets from edge switch 2-174

enabling

on a VLAN 2-180

option 82 2-172, 2-174

trust on an interface 2-178

error recovery timer 2-131

rate limiting 2-177

DHCP snooping binding database

binding file, configuring 2-170

bindings

adding 2-168

deleting 2-168

displaying 2-472

clearing database agent statistics 2-47

database agent, configuring 2-170

displaying

binding entries 2-472

database agent status 2-474, 2-476

renewing 2-371

dir (boot loader) command A-7

directories, deleting 2-77

documentation, related xx

document conventions xx

domain name, VTP 2-759, 2-763

dot1x auth-fail max-attempts 2-95

dot1x auth-fail vlan 2-97

dot1x command 2-93

dot1x control-direction command 2-99

dot1x critical global configuration command 2-101

dot1x critical interface configuration command 2-103

dot1x default command 2-105

dot1x fallback command 2-106

dot1x guest-vlan command 2-107

dot1x host-mode command 2-110

dot1x initialize command 2-112

dot1x mac-auth-bypass command 2-113

dot1x max-reauth-req command 2-115

dot1x max-req command 2-116

dot1x multiple-hosts command 2-117

dot1x pae command 2-118

dot1x port-control command 2-119

dot1x re-authenticate command 2-121

dot1x re-authentication command 2-122

dot1x reauthentication command 2-123

dot1x timeout command 2-124

dropping packets, with ACL matches 2-6

drop threshold, Layer 2 protocol tunneling 2-229

DSCP-to-CoS map 2-286

DSCP-to-DSCP-mutation map 2-286

DTP 2-691

DTP flap

error detection for 2-129

error recovery timer 2-131

DTP negotiation 2-695

dual-purpose uplink ports

selecting the type 2-276

duplex command 2-127

dynamic-access ports

configuring 2-682

restrictions 2-683

dynamic ARP inspection

ARP ACLs

apply to a VLAN 2-154

define 2-16

deny packets 2-78

display 2-393

permit packets 2-330

clear

log buffer 2-45

statistics 2-46

display

ARP ACLs 2-393

configuration and operating state 2-467

log buffer 2-467

statistics 2-467

trust state and rate limit 2-467

enable per VLAN 2-164

error detection for 2-129

error recovery timer 2-131

log buffer

clear 2-45

configure 2-158

display 2-467

rate-limit incoming ARP packets 2-156

statistics

clear 2-46

display 2-467

trusted interface state 2-160

type of packet logged 2-165

validation checks 2-162

dynamic auto VLAN membership mode 2-690

dynamic desirable VLAN membership mode 2-690

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

Dynamic Trunking Protocol

See DTP

E

EAP-request/identity frame

maximum number to send 2-116

response time before retransmitting 2-124

encapsulation methods 2-710

environment variables, displaying 2-398

errdisable detect cause command 2-129

errdisable recovery command 2-131

error conditions, displaying 2-442

error disable detection 2-129

error-disabled interfaces, displaying 2-453

EtherChannel

assigning Ethernet interface to channel group 2-33

creating port-channel logical interface 2-139

debug EtherChannel/PAgP, display B-12

debug platform-specific events, display B-34

displaying 2-446

enabling Layer 2 protocol tunneling for

LACP 2-230

PAgP 2-230

UDLD 2-230

interface information, displaying 2-453

LACP

clearing channel-group information 2-51

debug messages, display B-20

displaying 2-511

modes 2-33

port priority for hot-standby ports 2-233

restricting a protocol 2-36

system priority 2-235

load-distribution methods 2-348

PAgP

aggregate-port learner 2-326

clearing channel-group information 2-55

debug messages, display B-27

displaying 2-565

error detection for 2-129

error recovery timer 2-131

learn method 2-326

modes 2-33

physical-port learner 2-326

priority of interface for transmitted traffic 2-328

Ethernet controller, internal register display 2-412

Ethernet statistics, collecting 2-373

examples, conventions for xx

exception crashinfo command 2-134

exit command 2-749

extended discovery of candidate switches 2-64

extended-range VLANs

and allowed VLAN list 2-710

and pruning-eligible list 2-710

configuring 2-734

extended system ID for STP 2-632

F

fallback profile command 2-135

fallback profiles, displaying 2-449

fan information, displaying 2-438

file name, VTP 2-759

files, deleting 2-77

flash_init (boot loader) command A-9

Flex Links

configuring 2-684

configuring preferred VLAN 2-686

displaying 2-453

flowcontrol command 2-137

format (boot loader) command A-10

forwarding packets, with ACL matches 2-6

forwarding results, display C-6

frame forwarding information, displaying C-6

front-end controller, counter and status information C-8

fsck (boot loader) command A-11

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-389

help (boot loader) command A-12

hierarchical policy maps 2-346

hop-count limit for clusters 2-64

host connection, port configuration 2-689

host ports, private VLANs 2-693

Hot Standby Router Protocol

See HSRP

HSRP

binding HSRP group to cluster 2-71

standby group 2-71

I

IEEE 802.1Q trunk ports and native VLANs 2-751

IEEE 802.1Q tunnel ports

configuring 2-690

displaying 2-427

limitations 2-691

IEEE 802.1x

and switchport modes 2-691

violation error recovery 2-131

See also port-based authentication

IEEE 802.1X Port Based Authentication

enabling guest VLAN supplicant 2-96, 2-106, 2-136

IGMP filters

applying 2-183

debug messages, display B-17

IGMP groups, setting maximum 2-185

IGMP maximum groups, debugging B-18

IGMP profiles

creating 2-187

displaying 2-479

IGMP snooping

adding ports as a static member of a group 2-203

displaying 2-480, 2-485, 2-487

enabling 2-189

enabling the configurable-leave timer 2-191

enabling the Immediate-Leave feature 2-200

flooding query count 2-197

interface topology change notification behavior 2-199

multicast table 1-5, 2-483

querier 2-193

query solicitation 2-197

report suppression 2-195

switch topology change notification behavior 2-197

images

See software images

Immediate-Leave feature, MVR 2-323

immediate-leave processing 2-200

Immediate-Leave processing, IPv6 2-225

initial configuration

See getting started guide and hardware installation guide

interface configuration mode 1-2, 1-4

interface port-channel command 2-139

interface range command 2-141

interface-range macros 2-75

interfaces

assigning Ethernet interface to channel group 2-33

configuring 2-127

configuring multiple 2-141

creating port-channel logical 2-139

debug messages, display B-14

disabling 2-611

displaying the MAC address table 2-532

restarting 2-611

interface speed, configuring 2-669

interface vlan command 2-144

internal registers, displaying 2-412, 2-421

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for 2-129

error recovery timer 2-131

ip access-group command 2-146

ip address command 2-149

IP addresses, setting 2-149

IP address matching 2-270

ip admission command 2-151

ip admission name proxy http command 2-152

ip arp inspection filter vlan command 2-154

ip arp inspection limit command 2-156

ip arp inspection log-buffer command 2-158

ip arp inspection trust command 2-160

ip arp inspection validate command 2-162

ip arp inspection vlan command 2-164

ip arp inspection vlan logging command 2-165

IP DHCP snooping

See DHCP snooping

ip dhcp snooping binding command 2-168

ip dhcp snooping command 2-167

ip dhcp snooping database command 2-170

ip dhcp snooping information option allow-untrusted command 2-174

ip dhcp snooping information option command 2-172

ip dhcp snooping information option format remote-id command 2-176

ip dhcp snooping limit rate command 2-177

ip dhcp snooping trust command 2-178

ip dhcp snooping verify command 2-179

ip dhcp snooping vlan command 2-180

ip dhcp snooping vlan information option format-type circuit-id string command 2-181

ip igmp filter command 2-183

ip igmp max-groups command 2-185

ip igmp profile command 2-187

ip igmp snooping command 2-189

ip igmp snooping last-member-query-interval command 2-191

ip igmp snooping querier command 2-193

ip igmp snooping report-suppression command 2-195

ip igmp snooping tcn command 2-197

ip igmp snooping tcn flood command 2-199

ip igmp snooping vlan immediate-leave command 2-200

ip igmp snooping vlan mrouter command 2-201

ip igmp snooping vlan static command 2-203

IP multicast addresses 2-320

IP phones

auto-QoS configuration 2-18

trusting packets sent from 2-312

IP-precedence-to-DSCP map 2-286

ip source binding command 2-205

IP source guard

disabling 2-209

displaying

binding entries 2-489

configuration 2-490

dynamic binding entries only 2-472

enabling 2-209

static IP source bindings 2-205

ip ssh command 2-207

IPv6 access list, deny conditions 2-80

ipv6 access-list command 2-211

ipv6 mld snooping command 2-214

ipv6 mld snooping last-listener-query count command 2-216

ipv6 mld snooping last-listener-query-interval command 2-218

ipv6 mld snooping listener-message-suppression command 2-220

ipv6 mld snooping robustness-variable command 2-221

ipv6 mld snooping tcn command 2-223

ipv6 mld snooping vlan command 2-225

IPv6 SDM template 2-374

ipv6 traffic-filter command 2-227

ip verify source command 2-209

J

jumbo frames

See MTU

L

l2protocol-tunnel command 2-229

l2protocol-tunnel cos command 2-232

LACP

See EtherChannel

lacp port-priority command 2-233

lacp system-priority command 2-235

Layer 2 mode, enabling 2-680

Layer 2 protocol ports, displaying 2-508

Layer 2 protocol-tunnel

error detection for 2-129

error recovery timer 2-131

Layer 2 protocol tunnel counters 2-50

Layer 2 protocol tunneling error recovery 2-230

Layer 2 traceroute

IP addresses 2-725

MAC addresses 2-722

Layer 3 mode, enabling 2-680

line configuration mode 1-2, 1-5

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for 2-129

error recovery timer 2-131

link state group command 2-241

link state track command 2-243

load-distribution methods for EtherChannel 2-348

location (global configuration) command 2-237

location (interface configuration) command 2-239

logging event command 2-244

logging event power-inline-status command 2-245

logging file command 2-246

logical interface 2-139

loopback error

detection for 2-129

recovery timer 2-131

loop guard, for spanning tree 2-634, 2-638

M

mac access-group command 2-248

MAC access-groups, displaying 2-520

MAC access list configuration mode 2-250

mac access-list extended command 2-250

MAC access lists 2-85

MAC addresses

displaying

aging time 2-526

all 2-524

dynamic 2-530

MAC address-table move updates 2-534

notification settings 2-536

number of addresses in a VLAN 2-528

per interface 2-532

per VLAN 2-540

static 2-538

static and dynamic entries 2-522

dynamic

aging time 2-252

deleting 2-52

displaying 2-530

enabling MAC address notification 2-255

enabling MAC address-table move update 2-253

matching 2-270

static

adding and removing 2-257

displaying 2-538

dropping on an interface 2-258

tables 2-524

MAC address notification, debugging B-21

mac address-table aging-time 2-248, 2-270

mac address-table aging-time command 2-252

mac address-table move update command 2-253

mac address-table notification command 2-255

mac address-table static command 2-257

mac address-table static drop command 2-258

macro apply command 2-260

macro description command 2-263

macro global command 2-264

macro global description command 2-267

macro name command 2-268

macros

adding a description 2-263

adding a global description 2-267

applying 2-264

creating 2-268

displaying 2-567

interface range 2-75, 2-141

specifying parameter values 2-264

tracing 2-264

manual

audience xix

purpose of xix

maps

QoS

defining 2-286

displaying 2-550

VLAN

creating 2-746

defining 2-270

displaying 2-600

match (access-map configuration) command 2-270

match (class-map configuration) command 2-272

maximum transmission unit

See MTU

mdix auto command 2-274

media-type command 2-276

member switches

See clusters

memory (boot loader) command A-13

mkdir (boot loader) command A-14

MLD snooping

configuring 2-220, 2-221

configuring queries 2-216, 2-218

configuring topology change notification 2-223

displaying 2-498, 2-500, 2-502, 2-504

enabling 2-214

MLD snooping on a VLAN, enabling 2-225

mls qos aggregate-policer command 2-280

mls qos command 2-278

mls qos cos command 2-282

mls qos dscp-mutation command 2-284

mls qos map command 2-286

mls qos queue-set output buffers command 2-290

mls qos queue-set output threshold command 2-292

mls qos rewrite ip dscp command 2-294

mls qos srr-queue input bandwidth command 2-296

mls qos srr-queue input buffers command 2-298

mls qos-srr-queue input cos-map command 2-300

mls qos srr-queue input dscp-map command 2-302

mls qos srr-queue input priority-queue command 2-304

mls qos srr-queue input threshold command 2-306

mls qos-srr-queue output cos-map command 2-308

mls qos srr-queue output dscp-map command 2-310

mls qos trust command 2-312

mls qos vlan-based command 2-314

mode, MVR 2-320

Mode button, and password recovery 2-377

modes, commands 1-1

monitor session command 2-315

more (boot loader) command A-15

MSTP

displaying 2-582

interoperability 2-59

link type 2-636

MST region

aborting changes 2-642

applying changes 2-642

configuration name 2-642

configuration revision number 2-642

current or pending display 2-642

displaying 2-582

MST configuration mode 2-642

VLANs-to-instance mapping 2-642

path cost 2-644

protocol mode 2-640

restart protocol migration process 2-59

root port

loop guard 2-634

preventing from becoming designated 2-634

restricting which can be root 2-634

root guard 2-634

root switch

affects of extended system ID 2-632

hello-time 2-647, 2-655

interval between BDPU messages 2-648

interval between hello BPDU messages 2-647, 2-655

max-age 2-648

maximum hop count before discarding BPDU 2-649

port priority for selection of 2-651

primary or secondary 2-655

switch priority 2-654

state changes

blocking to forwarding state 2-661

enabling BPDU filtering 2-624, 2-659

enabling BPDU guard 2-626, 2-659

enabling Port Fast 2-659, 2-661

forward-delay time 2-646

state changes

length of listening and learning states 2-646

rapid transition to forwarding 2-636

shutting down Port Fast-enabled ports 2-659

state information display 2-581

MTU

configuring size 2-719

displaying global setting 2-589

Multicase Listener Discovery

See MLD

multicast group address, MVR 2-323

multicast groups, MVR 2-321

Multicast Listener Discovery

See MLD

multicast router learning method 2-201

multicast router ports, configuring 2-201

multicast router ports, IPv6 2-225

multicast storm control 2-677

multicast VLAN, MVR 2-320

multicast VLAN registration

See MVR

Multiple Spanning Tree Protocol

See MSTP

MVR

and address aliasing 2-321

configuring 2-320

configuring interfaces 2-323

debug messages, display B-25

displaying 2-559

displaying interface information 2-561

members, displaying 2-563

mvr (global configuration) command 2-320

mvr (interface configuration) command 2-323

mvr vlan group command 2-324

N

native VLANs 2-710

native VLAN tagging 2-751

Network Admission Control Software Configuration Guide 2-151, 2-153

Network Assistant requirements xx

nonegotiate, speed 2-669

nonegotiating DTP messaging 2-695

non-IP protocols

denying 2-85

forwarding 2-338

non-IP traffic access lists 2-250

non-IP traffic forwarding

denying 2-85

permitting 2-338

normal-range VLANs 2-734, 2-740

note, description xx

no vlan command 2-734, 2-744

O

online diagnostics

displaying

configured boot-up coverage level 2-425

current scheduled tasks 2-425

event logs 2-425

supported test suites 2-425

test ID 2-425

test results 2-425

test statistics 2-425

global configuration mode

clearing health monitoring diagnostic test schedule 2-45

clearing test-based testing schedule 2-90, 2-92

setting health monitoring diagnostic testing 2-45

setting test-based testing 2-90, 2-92

setting up health monitoring diagnostic test schedule 2-45

setting up test-based testing 2-90, 2-92

health monitoring diagnostic tests, configuring 2-88

scheduled switchover

disabling 2-90, 2-92

enabling 2-90, 2-92

scheduling

enabling 2-90, 2-92

removing 2-90, 2-92

test interval, setting 2-90, 2-92

P

PAgP

See EtherChannel

pagp learn-method command 2-326

pagp port-priority command 2-328

password, VTP 2-759, 2-763

password-recovery mechanism, enabling and disabling 2-377

permit (ARP access-list configuration) command 2-330

permit (IPv6) command 2-332

permit (MAC access-list configuration) command 2-338

per-VLAN spanning-tree plus

See STP

physical-port learner 2-326

PID, displaying 2-466

PIM-DVMRP, as multicast router learning method 2-201

PoE

configuring the power budget 2-353

configuring the power management mode 2-350

displaying controller register values 2-419

displaying power management information 2-575

logging of status 2-245

police aggregate command 2-343

police command 2-341

policed-DSCP map 2-286

policy-map command 2-345

policy maps

applying to an interface 2-379, 2-384

creating 2-345

displaying 2-570

hierarchical 2-346

policers

displaying 2-543

for a single class 2-341

for multiple classes 2-280, 2-343

policed-DSCP map 2-286

traffic classification

defining the class 2-38

defining trust states 2-727

setting DSCP or IP precedence values 2-382

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list 2-3

debug messages, display B-7

enabling IEEE 802.1x

globally 2-93

per interface 2-119

guest VLAN 2-107

host modes 2-110

IEEE 802.1x AAA accounting methods 2-1

initialize an interface 2-112

MAC authentication bypass 2-113

manual control of authorization state 2-119

PAE as authenticator 2-118

periodic re-authentication

enabling 2-123

time between attempts 2-124

quiet period between failed authentication exchanges 2-124

re-authenticating IEEE 802.1x-enabled ports 2-121

resetting configurable IEEE 802.1x parameters 2-105

switch-to-authentication server retransmission time 2-124

switch-to-client frame-retransmission number2-115to 2-116

switch-to-client retransmission time 2-124

port-channel load-balance command 2-348

Port Fast, for spanning tree 2-661

port ranges, defining 2-75

ports, debugging B-67

ports, protected 2-708

port security

aging 2-702

debug messages, display B-69

enabling 2-697

violation error recovery 2-131

port trust states for QoS 2-312

port types, MVR 2-323

power information, displaying 2-438

power inline command 2-350

power inline consumption command 2-353

Power over Ethernet

See PoE

priority-queue command 2-355

private-vlan command 2-357

private-vlan mapping command 2-360

private VLANs

association 2-706

configuring 2-357

configuring ports 2-693

displaying 2-595

host ports 2-693

mapping

configuring 2-706

displaying 2-453

promiscuous ports 2-693

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-466

promiscuous ports, private VLANs 2-693

protected ports, displaying 2-459

pruning

VLANs 2-710

VTP

displaying interface information 2-453

enabling 2-759, 2-763

pruning-eligible VLAN list 2-712

PVST+

See STP

Q

QoS

auto-QoS

configuring 2-18

debug messages, display 1-5, B-2

displaying 2-394

class maps

creating 2-40

defining the match criteria 2-272

displaying 2-403

defining the CoS value for an incoming packet 2-282

displaying configuration information 2-394, 2-542

DSCP transparency 2-294

DSCP trusted ports

applying DSCP-to-DSCP-mutation map to 2-284

defining DSCP-to-DSCP-mutation map 2-286

egress queues

allocating buffers 2-290

defining the CoS output queue threshold map 2-308

defining the DSCP output queue threshold map 2-310

displaying buffer allocations 2-546

displaying CoS output queue threshold map 2-550

displaying DSCP output queue threshold map 2-550

displaying queueing strategy 2-546

displaying queue-set settings 2-553

QoS

egress queues

enabling bandwidth shaping and scheduling 2-673

enabling bandwidth sharing and scheduling 2-675

limiting the maximum output on a port 2-671

mapping a port to a queue-set 2-362

mapping CoS values to a queue and threshold 2-308

mapping DSCP values to a queue and threshold 2-310

setting maximum and reserved memory allocations 2-292

setting WTD thresholds 2-292

enabling 2-278

ingress queues

allocating buffers 2-298

assigning SRR scheduling weights 2-296

defining the CoS input queue threshold map 2-300

defining the DSCP input queue threshold map 2-302

displaying buffer allocations 2-546

displaying CoS input queue threshold map 2-550

displaying DSCP input queue threshold map 2-550

displaying queueing strategy 2-546

displaying settings for 2-544

enabling the priority queue 2-304

mapping CoS values to a queue and threshold 2-300

mapping DSCP values to a queue and threshold 2-302

setting WTD thresholds 2-306

maps

defining 2-286, 2-300, 2-302, 2-308, 2-310

displaying 2-550

QoS

policy maps

applying an aggregate policer 2-343

applying to an interface 2-379, 2-384

creating 2-345

defining policers 2-280, 2-341

displaying policers 2-543

displaying policy maps 2-570

hierarchical 2-346

policed-DSCP map 2-286

setting DSCP or IP precedence values 2-382

traffic classifications 2-38

trust states 2-727

port trust states 2-312

queues, enabling the expedite 2-355

statistics

in-profile and out-of-profile packets 2-546

packets enqueued or dropped 2-546

sent and received CoS values 2-546

sent and received DSCP values 2-546

trusted boundary for IP phones 2-312

VLAN-based 2-314

quality of service

See QoS

querytime, MVR 2-320

queue-set command 2-362

R

radius-server dead-criteria command 2-363

radius-server host command 2-365

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

rcommand command 2-367

re-authenticating IEEE 802.1x-enabled ports 2-121

re-authentication

periodic 2-123

time between attempts 2-124

receiver ports, MVR 2-323

receiving flow-control packets 2-137

recovery mechanism

causes 2-131

display 2-44, 2-400, 2-440, 2-444

timer interval 2-132

redundancy for cluster switches 2-71

remote-span command 2-369

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-16

renew ip dhcp snooping database command 2-371

requirements

cluster xxi

device manager xx

Network Assistant xx

reset (boot loader) command A-17

reset command 2-749

resource templates, displaying 2-577

restricted VLAN

See dot1x auth-fail vlan

rmdir (boot loader) command A-18

rmon collection stats command 2-373

root guard, for spanning tree 2-634

routed ports

IP addresses on 2-150

number supported 2-150

RSPAN

configuring 2-315

displaying 2-556

filter RSPAN traffic 2-315

remote-span command 2-369

sessions

add interfaces to 2-315

displaying 2-556

start new 2-315

S

scheduled switchover

disabling 2-90, 2-92

enabling 2-90, 2-92

sdm prefer command 2-374

SDM templates

allowed resources 2-375

displaying 2-577

dual IPv4 and IPv6 2-374

secure ports, limitations 2-699

sending flow-control packets 2-137

service password-recovery command 2-377

service-policy command 2-379

set (boot loader) command A-19

set command 2-382

setup command 2-384

setup express command 2-387

show access-lists command 2-389

show archive status command 2-392

show arp access-list command 2-393

show auto qos command 2-394

show boot command 2-398

show cable-diagnostics tdr command 2-400

show changes command 2-749

show class-map command 2-403

show cluster candidates command 2-406

show cluster command 2-404

show cluster members command 2-408

show controllers cpu-interface command 2-410

show controllers ethernet-controller command 2-412

show controllers power inline command 2-419

show controllers tcam command 2-421

show controller utilization command 2-423

show current command 2-749

show dot1q-tunnel command 2-427

show dot1x command 2-428

show dtp 2-433

show eap command 2-435

show env command 2-438

show errdisable detect command 2-440

show errdisable flap-values command 2-442

show errdisable recovery command 2-444

show etherchannel command 2-446

show fallback profile command 2-449

show flowcontrol command 2-451

show interfaces command 2-453

show interfaces counters command 2-463

show inventory command 2-466

show ip arp inspection command 2-467

show ipc command 2-492

show ip dhcp snooping binding command 2-472

show ip dhcp snooping command 2-471

show ip dhcp snooping database command 2-474, 2-476

show ip igmp profile command 2-479

show ip igmp snooping address command 2-500

show ip igmp snooping command 2-480, 2-498

show ip igmp snooping groups command 2-483

show ip igmp snooping mrouter command 2-485, 2-502

show ip igmp snooping querier command 2-487, 2-504

show ip source binding command 2-489

show ipv6 access-list command 2-496

show ipv6 route updated 2-506

show ip verify source command 2-490

show l2protocol-tunnel command 2-508

show lacp command 2-511

show link state group command 2-518

show location 2-515

show mac access-group command 2-520

show mac address-table address command 2-524

show mac address-table aging time command 2-526

show mac address-table command 2-522

show mac address-table count command 2-528

show mac address-table dynamic command 2-530

show mac address-table interface command 2-532

show mac address-table move update command 2-534

show mac address-table notification command 2-54, 2-536, B-23

show mac address-table static command 2-538

show mac address-table vlan command 2-540

show mls qos aggregate-policer command 2-543

show mls qos command 2-542

show mls qos input-queue command 2-544

show mls qos interface command 2-546

show mls qos maps command 2-550

show mls qos queue-set command 2-553

show mls qos vlan command 2-555

show monitor command 2-556

show mvr command 2-559

show mvr interface command 2-561

show mvr members command 2-563

show pagp command 2-565

show parser macro command 2-567

show platform acl command C-2

show platform backup interface command C-3

show platform configuration command C-4

show platform etherchannel command C-5

show platform forward command C-6

show platform frontend-controller command C-8

show platform igmp snooping command C-9

show platform ip multicast command C-11

show platform ip unicast command C-12

show platform ipv6 unicast command C-17

show platform ip wccp command C-16

show platform layer4op command C-19

show platform mac-address-table command C-20

show platform messaging command C-21

show platform monitor command C-22

show platform mvr table command C-23

show platform pm command C-24

show platform port-asic command C-25

show platform port-security command C-29

show platform qos command C-30

show platform resource-manager command C-31

show platform snmp counters command C-33

show platform spanning-tree command C-34

show platform stp-instance command C-35

show platform tcam command C-36

show platform vlan command C-39

show policy-map command 2-570

show port security command 2-572

show power inline command 2-575

show proposed command 2-749

show sdm prefer command 2-577

show setup express command 2-580

show spanning-tree command 2-581

show storm-control command 2-587

show system mtu command 2-589

show trust command 2-727

show udld command 2-590

show version command 2-593

show vlan access-map command 2-600

show vlan command 2-595

show vlan command, fields 2-597

show vlan filter command 2-601

show vmps command 2-603

show vtp command 2-606

shutdown command 2-611

shutdown threshold, Layer 2 protocol tunneling 2-229

shutdown vlan command 2-612

Smartports macros

See macros

SNMP host, specifying 2-617

SNMP informs, enabling the sending of 2-613

snmp-server enable traps command 2-613

snmp-server host command 2-617

snmp trap mac-notification command 2-621

SNMP traps

enabling MAC address notification trap 2-621

enabling the MAC address notification feature 2-255

enabling the sending of 2-613

SoftPhone

See Cisco SoftPhone

software images

deleting 2-77

downloading 2-8

upgrading 2-8

uploading 2-14

software version, displaying 2-593

source ports, MVR 2-323

SPAN

configuring 2-315

debug messages, display B-24

displaying 2-556

filter SPAN traffic 2-315

sessions

add interfaces to 2-315

displaying 2-556

start new 2-315

spanning-tree backbonefast command 2-623

spanning-tree bpdufilter command 2-624

spanning-tree bpduguard command 2-626

spanning-tree cost command 2-628

spanning-tree etherchannel command 2-630

spanning-tree extend system-id command 2-632

spanning-tree guard command 2-634

spanning-tree link-type command 2-636

spanning-tree loopguard default command 2-638

spanning-tree mode command 2-640

spanning-tree mst configuration command 2-642

spanning-tree mst cost command 2-644

spanning-tree mst forward-time command 2-646

spanning-tree mst hello-time command 2-647

spanning-tree mst max-age command 2-648

spanning-tree mst max-hops command 2-649

spanning-tree mst port-priority command 2-651

spanning-tree mst pre-standard command 2-653

spanning-tree mst priority command 2-654

spanning-tree mst root command 2-655

spanning-tree portfast (global configuration) command 2-659

spanning-tree portfast (interface configuration) command 2-661

spanning-tree port-priority command 2-657

Spanning Tree Protocol

See STP

spanning-tree transmit hold-count command 2-663

spanning-tree uplinkfast command 2-664

spanning-tree vlan command 2-666

speed command 2-669

srr-queue bandwidth limit command 2-671

srr-queue bandwidth share command 2-675

SSH, configuring version 2-207

static-access ports, configuring 2-682

statistics, Ethernet group 2-373

sticky learning, enabling 2-697

storm-control command 2-677

STP

BackboneFast 2-623

counters, clearing 2-58

debug messages, display

BackboneFast events B-73

MSTP B-76

optimized BPDUs handling B-75

spanning-tree activity B-71

switch shim B-78

transmitted and received BPDUs B-74

UplinkFast B-80

detection of indirect link failures 2-623

enabling protocol tunneling for 2-229

EtherChannel misconfiguration 2-630

extended system ID 2-632

path cost 2-628

protocol modes 2-640

root port

accelerating choice of new 2-664

loop guard 2-634

preventing from becoming designated 2-634

STP

root port

restricting which can be root 2-634

root guard 2-634

UplinkFast 2-664

root switch

affects of extended system ID 2-632, 2-667

hello-time 2-666

interval between BDPU messages 2-666

interval between hello BPDU messages 2-666

max-age 2-666

port priority for selection of 2-657

primary or secondary 2-666

switch priority 2-666

state changes

blocking to forwarding state 2-661

enabling BPDU filtering 2-624, 2-659

enabling BPDU guard 2-626, 2-659

enabling Port Fast 2-659, 2-661

enabling timer to recover from error state 2-131

forward-delay time 2-666

length of listening and learning states 2-666

shutting down Port Fast-enabled ports 2-659

state information display 2-581

VLAN options 2-654, 2-666

SVIs, creating 2-144

Switched Port Analyzer

See SPAN

switching characteristics

modifying 2-680

returning to interfaces 2-680

switchport access command 2-682

switchport backup interface command 2-684

switchport block command 2-688

switchport command 2-680

switchport host command 2-689

switchport mode command 2-690

switchport mode private-vlan command 2-693

switchport nonegotiate command 2-695

switchport port-security aging command 2-702

switchport port-security command 2-697

switchport priority extend command 2-704

switchport private-vlan command 2-706

switchport protected command 2-708

switchports, displaying 2-453

switchport trunk command 2-710

switchport voice vlan command 2-714, 2-715

system env temperature threshold yellow command 2-717

system message logging 2-245

system message logging, save message to flash 2-246

system mtu command 2-719

system resource templates 2-374

T

tar files, creating, listing, and extracting 2-11

TDR, running 2-721

Telnet, using to communicate to cluster switches 2-367

temperature information, displaying 2-438

templates, system resources 2-374

test cable-diagnostics tdr command 2-721

traceroute mac command 2-722

traceroute mac ip command 2-725

trunking, VLAN mode 2-690

trunk mode 2-690

trunk ports 2-690

trunks, to non-DTP device 2-691

trusted boundary for QoS 2-312

trusted port states for QoS 2-312

tunnel ports, Layer 2 protocol, displaying 2-508

type (boot loader) command A-22

U

UDLD

aggressive mode 2-729, 2-731

debug messages, display B-88

enable globally 2-729

enable per interface 2-731

error recovery timer 2-131

message timer 2-729

normal mode 2-729, 2-731

reset a shutdown interface 2-733

status 2-590

udld command 2-729

udld port command 2-731

udld reset command 2-733

unicast storm control 2-677

UniDirectional Link Detection

See UDLD

unknown multicast traffic, preventing 2-688

unknown unicast traffic, preventing 2-688

unset (boot loader) command A-23

upgrading

software images

downloading 2-8

monitoring status of 2-392

upgrading information

See release notes

UplinkFast, for STP 2-664

user EXEC mode 1-2, 1-3

V

version (boot loader) command A-25

vlan (global configuration) command 2-734

vlan (VLAN configuration) command 2-740

vlan access-map command 2-746

VLAN access map configuration mode 2-746

VLAN access maps

actions 2-6

displaying 2-600

VLAN-based QoS 2-314

VLAN configuration

rules 2-737, 2-742

saving 2-734, 2-744

VLAN configuration mode

commands

VLAN 2-740

VTP 2-763

description 1-5

entering 2-748

summary 1-2

vlan database command 2-748

vlan dot1q tag native command 2-751

vlan filter command 2-752

VLAN filters, displaying 2-601

VLAN ID range 2-734, 2-740

VLAN maps

applying 2-752

creating 2-746

defining 2-270

displaying 2-600

VLAN Query Protocol

See VQP

VLANs

adding 2-734

configuring 2-734, 2-740

debug messages, display

ISL B-84

VLAN IOS file system error tests B-83

VLAN manager activity B-81

VTP B-86

displaying configurations 2-595

enabling guest VLAN supplicant 2-96, 2-106, 2-136

extended-range 2-734

MAC addresses

displaying 2-540

number of 2-528

media types 2-737, 2-742

normal-range 2-734, 2-740

private 2-693

configuring 2-357

displaying 2-595

See also private VLANs

restarting 2-612

saving the configuration 2-734

shutting down 2-612

SNMP traps for VTP 2-615, 2-618

suspending 2-612

variables 2-740

VLAN Trunking Protocol

See VTP

VMPS

configuring servers 2-757

displaying 2-603

error recovery timer 2-132

reconfirming dynamic VLAN assignments 2-754

vmps reconfirm (global configuration) command 2-755

vmps reconfirm (privileged EXEC) command 2-754

vmps retry command 2-756

vmps server command 2-757

voice VLAN

configuring 2-714, 2-715

setting port priority 2-704

VQP

and dynamic-access ports 2-683

clearing client statistics 2-60

displaying information 2-603

per-server retry count 2-756

reconfirmation interval 2-755

reconfirming dynamic VLAN assignments 2-754

VTP

changing characteristics 2-759

clearing pruning counters 2-61

configuring

domain name 2-759, 2-763

file name 2-759

mode 2-759, 2-763

password 2-759, 2-763

counters display fields 2-607

displaying information 2-606

enabling

pruning 2-759, 2-763

tunneling for 2-229

Version 2 2-759, 2-763

mode 2-759, 2-763

pruning 2-759, 2-763

saving the configuration 2-734, 2-744

statistics 2-606

status 2-606

status display fields 2-609

vtp (global configuration) command 2-759

vtp (VLAN configuration) command 2-763