Catalyst 4000 Family Command Reference, 7.3
set spantree portpri through set vtp pruning

Table Of Contents

set spantree portpri

set spantree portvlancost

set spantree portvlanpri

set spantree priority

set spantree root

set spantree uplinkfast

set summertime

set switchacceleration

set system baud

set system contact

set system countrycode

set system location

set system modem

set system name

set tacacs directedrequest

set tacacs key

set tacacs server

set tacacs timeout

set test diaglevel

set time

set timezone

set trace

set traffic monitor

set trunk

set udld

set udld aggressive-mode

set udld interval

set vlan

set vlan mapping

set vmps downloadmethod

set vmps downloadserver

set vmps server

set vmps state

set vtp

set vtp pruneeligible

set vtp pruning


set spantree portpri

Use the set spantree portpri command to set the bridge priority for a spanning tree port.

set spantree portpri mod/port priority [mst]

Syntax Description

mod/port

Variable that specifies the number of the module and the port on the module.

priority

Variable that specifies the number that represents the cost of a link in a spanning tree bridge; valid values are 0, 16, 32, 48, 64, 80, 96, 112, 128, 144,160, 176, 192, 208, 224, 240, with 0 indicating high priority and 240, low priority. See "Usage Guidelines" for more information.

mst

(Optional) Keyword to set the bridge priority for an MST port.


Defaults

By default, all ports with bridge priority are set to 32.

Command Types

Switch command.

Command Modes

Privileged.

ExamplesPriority values that are not a multiple of 16 (between the values of 0 to 63) are converted to the nearest multiple of 16.

This example shows how to set the priority of port 1 on module 4 to 63:

Console> (enable) set spantree portpri 2/3 48
Bridge port  2/3 port priority set to 48.
Console> (enable)

This example shows the output when you have specified a priority value that is not a multiple of 16:

Console> (enable) set spantree portpri 2/3 2
Vlan port priority must be one of these numbers:0, 16, 32, 48, 64, 80,
96, 112, 128, 144,
160, 176, 192, 208, 224, 240
converting 2 to 0 nearest multiple of 16
Bridge port  2/3 port priority set to 0.
Console> (enable)

Related Commands

show spantree

set spantree portvlancost

Use the set spantree portvlancost command to assign a lower path cost to a set of VLANs on a port.

set spantree portvlancost mod_num/port_num [cost cost_value] [preferred_vlans]

Syntax Description

mod_num

Variable that specifies the number of the module.

port_num

Variable that specifies the number of the port.

cost cost_value

(Optional) Keyword that indicates the path cost. The port VLAN cost applies only to trunk ports; valid values are from 1 to 65535.

preferred_vlans

(Optional) Variable that specifies the preferred VLANs. If you do not list a specific VLAN, the VLANs that were listed in prior use of this command are affected. If you do not list a specific cost, and previous cost values are specified in prior use of the command, then the port VLAN cost is set to one less than the current port cost for a port. However, this might not ensure load balancing in all cases; valid values are from 1 to 1005.


Defaults

The value specified is used as the path cost of the port for the specified set of VLANs. The rest of the VLANs have a path cost equal to the port path cost, set with the set spantree portcost command. If the path cost is not set, the value is the default path cost of the port.

Command Types

Switch command.

Command Modes

Privileged.

Examples

These examples show various ways to use the set spantree portvlancost command:

Console> (enable) set spantree portvlancost 2/10 cost 25 1-20
Cannot set portvlancost to a higher value than the port cost, 10, for port 2/10.
Console> (enable)

Console> (enable) set spantree portvlancost 2/10 1-20
Port 2/10 VLANs 1-20 have a path cost of 9.
Console> (enable)

Console> (enable) set spantree portvlancost 2/10 cost 4 1-20
Port 2/10 VLANs 1-20 have path cost 4.
Port 2/10 VLANs 21-1000 have path cost 10.
Console> (enable)
Console> (enable) set spantree portvlancost 2/10 cost 6 21
Port 2/10 VLANs 1-21 have path cost 6.
Port 2/10 VLANs 22-1000 have path cost 10.
Console> (enable) 

These examples show how to use the set spantree portvlancost command without explicitly
specifying cost:

Console> (enable) set spantree portvlancost 1/2
Port 1/2 VLANs 1-1005 have path cost 3100.
Console> (enable)

Console> (enable) set spantree portvlancost 1/2 21
Port 1/2 VLANs 1-20,22-1005 have path cost 3100.
Port 1/2 VLANs 21 have path cost 3099.
Console> (enable) 

Related Commands

clear spantree portvlancost
show spantree

set spantree portvlanpri

Use the set spantree portvlanpri command to set the port priority for a subset of VLANs in the trunk port.

set spantree portvlanpri mod/port priority [vlans]

Syntax Description

mod/port

Variable that specifies the number of the module and the port on the module.

priority

Variable that specifies the number that represents the cost of a link in a spanning tree bridge; valid values are 0, 16, 32, 48, 64, 80, 96, 112, 128, 144,160, 176, 192, 208, 224, 240, with 0 indicating high priority and 240, low priority. See "Usage Guidelines" for more information.

vlans

(Optional) Variable that specifies VLANs that use the specified priority level; valid values are from 1 to 1005.


Defaults

By default, the port VLAN priority is set to 0 with no VLANs specified.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Priority values that are not a multiple of 16 (between the values of 0 to 63) are converted to the nearest multiple of 16.This command is not supported by extended-range VLANs.

Use this command to add VLANs to a specified port priority level. Subsequent calls to this command do not replace VLANs that are already set at a specified port priority level.

This feature is not supported for the MSM.

The set spantree portvlanpri command applies only to trunk ports. If you enter this command, this message is displayed:

Port xx is not a trunk-capable port

Examples

This example shows how to set the port priority for module 1, port 2, on VLANs 21 to 40:

Console> (enable) set spantree portvlanpri 1/2 16 21-40
Port 1/2 vlans 3,6-20,41-1000 using portpri 32
Port 1/2 vlans 1-2,4-5,21-40 using portpri 16
Console> (enable)

Related Commands

clear spantree portvlanpri
show spantree

set spantree priority

Use the set spantree priority command to set the bridge priority for a VLAN or an instance when PVST+ or MISTP is running.

set spantree priority bridge_priority [vlans]

set spantree priority bridge_priority mistp-instance instances

set spantree priority bridge_priority mst instances

Syntax Description

bridge_priority

Variable that specifies the number representing the priority of the bridge; see "Usage Guidelines" for valid values.

vlans

(Optional) Variable that specifies the number of the VLAN. If you do not specify a VLAN number, VLAN 1 is used; valid values are from 1 to 1005.

mistp-instance instances

Keyword and variable that specify the instance numbers; valid values are from 1 to 16.

mst instances

Keyword and variable that specify the MST instance numbers; valid values are from 0 to 15.


Defaults

By default, the bridge priority is set to 32768.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If the MAC reduction feature is enabled, valid bridge_priority values are 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440, with 0 indicating high priority and 61440 indicating low priority. Any other value will be rejected.

If the MAC reduction feature is disabled, valid bridge_priority values are from 0 to 65535.

Examples

This example shows how to set the bridge priority of instance 3:

Console> (enable) set spantree priority 14 mistp-instance 3  
Instance 3 bridge priority set to 14.
Instance 3 does not exist.
Your configuration has been saved to NVRAM only.
Console> (enable)

This example shows how to set the bridge priority for MST instance 0:

Console> (enable) set spantree priority 28672 mst 0 
MST Spantree 0 bridge priority set to 28672. 
Console> (enable) 

This example shows how to set the bridge priority for multiple MST instances:

Console> (enable) set spantree priority 28672 mst 0-4 
MST Spantrees 0-4 bridge priority set to 28672. 
Console> (enable) 

Related Commands

show spantree

set spantree root

Use the set spantree root command to set the primary or secondary root for specific VLANs of the switch or for all VLANs of the switch.

set spantree root [secondary] [vlans] [dia network_diameter] [hello hello_time]

set spantree root [secondary] mistp-instance instances [ dia network_diameter]

set spantree root [secondary] mst {instance | {[ dia network_diameter] [ hello hello_time]}}

Syntax Description

secondary

(Optional) Keyword that designates this switch as a secondary root, if the primary root fails.

vlans

(Optional) Variable that specifies the number of the VLAN; valid values are from 1 to 1005.

dia network_diameter

(Optional) Keyword that specifies the maximum number of bridges between any two points of attachment of end stations; valid values are from 2 to 7.

hello hello_time

(Optional) Keyword that specifies, in seconds, the duration between generation of configuration messages by the root switch; valid values are from 1 to 10.

mistp-instance instances

Keyword and variable that specify the instance number; valid values are from 1 to 16.

mst instance

Keyword and variable that set the forward delay time for the IST instance and all MST instances.


Defaults

If the secondary keyword is not specified, the switch is, by default, the primary root.

The default value of network_diameter is 7.

If not specified, the current value of hello_time in NVRAM is used.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you do not specify a VLAN number, VLAN 1 is used.

This command is not supported by the NAM.

This command runs on backbone or distribution switches.

This command increases path costs to a value greater than 3000.

If you enable MISTP, you cannot set the VLAN root. If you enable PVST+, you cannot set the instance root.

You can run the secondary root many times to create backup switches for use in case of a root failure.

The set spantree root secondary bridge priority value 1s 16,384 except when MAC reduction or MISTP are enabled, then the value is 28,672.

The set spantree root bridge priority value is 16,384 except when MAC reduction or MISTP are enabled, then the value is 24,576.

Examples

This example shows how to set the primary root for a range of VLANs:

Console> (enable) set spantree root 1-10 dia 4
VLANs 1-10 bridge priority set to 8192
VLANs 1-10 bridge max aging time set to 14 seconds.
VLANs 1-10 bridge hello time set to 2 seconds.
VLANs 1-10 bridge forward delay set to 9 seconds.
Switch is now the root switch for active VLANs 1-6.
Console> (enable) 

This example shows how to set the primary root for an instance:

Console> (enable) set spantree root mistp-instance 2-4 dia 4
Instances 2-4 bridge priority set to 8192
VLInstances 2-4 bridge max aging time set to 14 seconds.
Instances 2-4 bridge hello time set to 2 seconds.
Instances 2-4 bridge forward delay set to 9 seconds.
Switch is now the root switch for active Instances 1-6.
Console> (enable) 

This example shows how to set the primary root for MST instance 5:

Console> (enable) set spantree root mst 5
Instance 5 bridge priority set to 24576.
Instance 5 bridge max aging time set to 16.
Instance 5 bridge hello time set to 2.
Instance 5 bridge forward delay set to 15.
Switch is now the root switch for active Instance 5.
Console> (enable)

This example shows how to set the secondary root for MST instance 0:

Console> (enable) set spantree root secondary mst 0 
Instance 0 bridge priority set to 28672. 
Instance 0 bridge max aging time set to 20. 
Instance 0 bridge hello time set to 2. 
Instance 0 bridge forward delay set to 15. 
Console> (enable)

This example shows how to set the maximum number of bridges and the hello time of the root for MST instance 0:

Console> (enable) set spantree root mst 0 dia 7 hello 2 
Instance 0 bridge priority set to 24576. 
Instance 0 bridge max aging time set to 20. 
Instance 0 bridge hello time set to 2. 
Instance 0 bridge forward delay set to 15. 
Switch is now the root switch for active Instance 0. 
Console> (enable) 

These examples show that setting the bridge priority to 8192 was not sufficient to make this switch the root. So, the priority was further reduced to 7192 (100 less than the current root switch) to make this switch the root switch. However, reducing it to this value did not make it the root switch for active VLANs 16 and 17.

Console> (enable) set spantree root 11-20.
VLANs 11-20 bridge priority set to 7192
VLANs 11-10 bridge max aging time set to 20 seconds.
VLANs 1-10 bridge hello time set to 2 seconds.
VLANs 1-10 bridge forward delay set to 13 seconds.
Switch is now the root switch for active VLANs 11-15,18-20.
Switch could not become root switch for active VLAN 16-17.
Console> (enable) 

Console> (enable) set spantree root secondary 22,24 dia 5 hello 1
VLANs 22,24 bridge priority set to 16384.
VLANs 22,24 bridge max aging time set to 10 seconds.
VLANs 22,24 bridge hello time set to 1 second.
VLANs 22,24 bridge forward delay set to 7 seconds.
Console> (enable) 

Related Commands

clear spantree root
show spantree

set spantree uplinkfast

Use the set spantree uplinkfast command to enable and Uplink Fast Switchover to alternate ports when the root port fails. This command applies to a switch, not to a WAN.

set spantree uplinkfast enable [rate station_update_rate] [all-protocols {off | on}]

set spantree uplinkfast disable

Syntax Description

enable

Keyword that enables a fast switchover.

rate station_update_rate

(Optional) Keyword and variable that specify the number of multicast packets transmitted per 100 ms when an alternate port is chosen after the root port goes down.

all-protocols

(Optional) Keyword that specifies whether the switch generates dummy multicast packets for all protocol groups (IP, IPX, and Group) in a network with switches using protocol filtering.

off

(Optional) Keyword that prevents the switch from generating multicasts for all protocol groups.

on

(Optional) Keyword that causes the switch to generate multicasts for all protocol groups.

disable

Keyword that disables Uplink Fast Switchover.


Defaults

By default, the value for station_update_rate is 15 packets per 100 ms.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The set spantree uplinkfast enable command has the following results:

Changes the bridge priority to 49152 for all VLANs (allowed VLANs).

Increases the path cost and port VLAN cost of all ports to a value greater than 3000.

On detecting the failure of a root port, an instant cutover occurs to an alternate port selected by Spanning Tree Protocol.

If you run set spantree uplinkfast enable on a switch that has this feature already enabled, only the station update rate is updated. The rest of the parameters are not modified.

If you run set spantree uplinkfast disable on a switch, the UplinkFast feature is disabled, but the switch priority and port cost values are not reset to the factory defaults. To reset the values to the factory defaults, enter the clear spantree uplinkfast command.

The default station_update_rate value is 15 packets per 100 ms, which is equivalent to a 1 percent load on a 10-Mbps Ethernet port. If you specify this value as 0, the switch does not generate station-update-rate packets.

Use the all-protocols on keywords on switches that have UplinkFast enabled but do not have protocol filtering enabled, and that are connected to upstream switches in the network that have protocol filtering enabled. The all-protocols on keywords cause the switch to generate multicasts for each protocol-filtering group.

On switches with both UplinkFast and protocol filtering enabled, or if no other switches have protocol filtering enabled, you do not need to use the all-protocols on keywords.

Examples

This example shows how to enable the spantree UplinkFast feature and specify the number of multicast packets transmitted to 40 packets per 100 ms:

Console>(enable) set spantree uplinkfast enable rate 40
VLANs 1-1005 bridge priority set to 49152.
The port cost and portvlancost of all ports increased to above 3000.
Station update rate set to 40 packets/100ms.
uplinkfast turned on for bridge.
Console> (enable) 

This example shows how to disable the spantree UplinkFast feature:

console> (enable) set spantree uplinkfast disable
Uplinkfast disabled for switch. 
Use clear spantree uplinkfast to return stp parameters to default.
console>(enable) clear spantree uplink
This command will cause all portcosts, portvlancosts, and the 
bridge priority on all vlans to be set to default.
Do you want to continue (y/n) [n]? y
VLANs 1-1005 bridge priority set to 32768.
The port cost of all bridge ports set to default value.
The portvlancost of all bridge ports set to default value.
uplinkfast disabled for bridge.
Console> (enable) 

This example shows how to enable the all-protocols feature:

Console> (enable) set spantree uplinkfast enable all-protocols on
uplinkfast update packets enabled for all protocols.
uplinkfast already enabled for bridge.

This example shows how to disable the all-protocols feature:

Console> (enable) set spantree uplinkfast disable all-protocols off
uplinkfast all-protocols field set to off.
uplinkfast already enabled for bridge.
Console> (enable)

Related Commands

clear spantree uplinkfast
show spantree

set summertime

Use the set summertime command to specify whether the system should set the clock ahead one hour during daylight saving time.

set summertime {enable | disable} [zone]

set summertime recurring {week} {day} {month} {hh:mm} {week} {day} {month} {hh:mm}
[
offset]

set summertime date {month} {date} {year} {hh:mm}{month} {date} {year} {hh:mm} [offset]

Syntax Description

enable

Keyword that causes the system to set the clock ahead one hour during daylight saving time.

disable

Keyword that prevents the system from setting the clock ahead one hour during daylight saving time.

zone

(Optional) Variable that specifies the time zone used by the set summertime command.

week

Variable that specifies the week of the month (first, second, third, fourth, last, 1...5).

day

Variable that specifies the day of the week; valid values are sunday, monday, tuesday, wednesday, thursday, friday, and saturday.

month

Variable that specifies the month of the year; valid values are january, february, march, and so on.

hh:mm

Variable that specifies the time in hours and minutes.

offset

(Optional) Variable that specifies the amount of offset in minutes; valid values are from 1 to 1440 minutes.

date

Variable that specifies the day of the month; valid values are from 1 to 31.

year

Variable that specifies the number of the year; valid values are from 1993 to 2035.


Defaults

The default is that the set summertime command is disabled. When the command is enabled, the default for offset is 60 minutes, following U.S. standards.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you enter the clear config command, the dates and times are set back to the default.

Unless otherwise configured, this command advances the clock one hour at 2:00 a.m. on the first Sunday in April and moves the clock back one hour at 2:00 a.m. on the last Sunday in October.

Examples

This example shows how to cause the system to set the clock ahead one hour during daylight saving time:

Console> (enable) set summertime enable PDT
Summertime is enabled and set to "PDT".
Console> (enable)

This example shows how to prevent the system from setting the clock ahead one hour during daylight saving time:

Console> (enable) set summertime disable
Summertime disabled.
Console> (enable)

This example shows how to set daylight saving time to zone name "AUS," repeat every year, starting from the third Monday of February at noon and ending at the second Saturday of August at
3:00 p.m. with an offset of 30 minutes:

Console> (enable) set summertime recurring 3 Mon Feb 03:00 4 Thursday oct 08:00 500
Command authorization none.
Summertime is enabled and set to '' 
   start: Mon Feb 21 2000, 03:00:00
   end:   Fri Oct 20 2000. 08:00:00
   offset: 1..1440 minutes (default 60)	
   Recurring: yes, starting at 03:00:00am of third Monday of February and ending on 
08:00am of fourth Thursday of October.
Console> (enable)

This example shows how to set the daylight saving time to start on January 29, 1999 at 2:00 a.m. and end on August 19, 2004 at 3:00 p.m. with an offset of 30 minutes:

Console> (enable) set summertime date jan 29 1999 02:00 aug 19 2004 15:00 30 
Summertime is disabled and set to ''
Start : Fri Jan 29 1999, 02:00:00
End   : Thu Aug 19 2004, 15:00:00
Offset: 30 minutes
Recurring: no
Console> (enable) 

Related Commands

show summertime

set switchacceleration

Use the set switchacceleration command to increase the switching bandwidth of the switch.

set switchacceleration {enable | disable} mod_num

Syntax Description

enable

Keyword that activates switch acceleration.

disable

Keyword that deactivates switch acceleration.

mod_num

Variable that specifies the number of the module.


Defaults

By default, switch acceleration is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The set switchacceleration command is valid only on Catalyst 4000 family switches with Supervisor Engine II. To enable switch acceleration on the switch, you must disable both the ports on it. Switch acceleration on the switch can be disabled without any conditions.

Examples

This example shows how to enable switch acceleration on port 1 of module 1 on the switch:

Console> (enable) set switchacceleration enable 1
Enabling or Disabling switch acceleration may impact performance for 1-2 seconds.
Do you want to continue (y/n) [n]? y
Switch Acceleration on module 1 enabled.
Console> (enable)

This example shows how to disable switch acceleration on port 1 of module 1 on the switch:

Console> (enable) set switchacceleration disable 1
Enabling or Disabling switch acceleration may impact performance for 1-2 seconds.
Do you want to continue (y/n) [n]? y
Switch Acceleration on module 1 disabled.
Console> (enable)

Related Commands

show switchacceleration

set system baud

Use the set system baud command to set the console port baud rate.

set system baud rate

Syntax Description

rate

Variable that specifies the baud rate; valid baud rates are 600, 1200, 2400, 4800, 9600, 19200, and 38400.


Defaults

By default, the console port baud rate is 9600 baud.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the system baud rate to 19,200:

Console> (enable) set system baud 19200
System console port baud rate set to 19200.
Console> (enable) 

Related Commands

show system

set system contact

Use the set system contact command to identify a contact person for the system.

set system contact [contact_string]

Syntax Description

contact_string

(Optional) Variable text string that contains the name of the person to contact for system administration. If no contact string is specified, the system contact string is cleared.


Defaults

By default, no system contact is configured.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the system contact string to Xena at ext. 24:

Console> (enable) set system contact Xena ext.24
System contact set.
Console> (enable) 

Related Commands

show system

set system countrycode

Use the set system countrycode command to specify the country where the system is physically located.

set system countrycode code

Syntax Description

code

Variable that specifies the country code. See "Usage Guidelines" for more information.


Defaults

By default, the country is US (United States).

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The country code is a 2-letter country code taken from ISO-3166 (for example, VU=Vanuatu and TF=French Southern Territories).

Examples

This example shows how to set the system country code to Great Britain:

Console> (enable) set system countrycode GB
Country code is set to GB
Console> (enable) 

set system location

Use the set system location command to identify the location of the system.

set system location [location_string]

Syntax Description

location_string

(Optional) Variable text string that indicates where the system is located.


Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If no location_string is specified, the system location is cleared.

Examples

This example shows how to set the system location string to Closet 230 on the 4th floor:

Console> (enable) set system location Closet 230 4/F
System location set.
Console> (enable)

Related Commands

show system

set system modem

Use the set system modem command to enable or disable modem control lines on the console port.

set system modem {enable | disable}

Syntax Description

enable

Keyword that activates modem control lines on the console port.

disable

Keyword that deactivates modem control lines on the console port.


Defaults

By default, modem control lines are disabled.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to enable modem control lines on the console port:

Console> (enable) set system modem enable
Modem control lines enabled on console port.
Console> (enable) 

This example shows how to disable modem control lines on the console port:

Console> (enable) set system modem disable
Modem control lines disabled on console port.
Console> (enable) 

Related Commands

show system

set system name

Use the set system name command to configure a name for the system.

set system name [name_string]

Syntax Description

name_string

(Optional) Variable text string that identifies the system.


Defaults

By default, no system name is configured.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

In Catalyst 4000 family software release 4.4 and later, if you use the set system name command to assign a name to the switch, the switch name is used as the prompt string. However, if you specify a different prompt string using the set prompt command, that string is used for the prompt. If no name is specified, the system name is cleared.

The system name can be 255 characters long, and the prompt can be 20 characters long. The system name is truncated appropriately when used as a prompt; a greater-than symbol (>) is appended to the truncated system name. If the system name was found from a DNS lookup, it is truncated to delete the domain name. If the prompt is obtained using the system name, it is updated whenever the system name changes. You can overwrite this prompt any time by setting the prompt manually. Any change in the prompt is reflected in all current open sessions.

Examples

This example shows how to set the system name to Information Systems:

Console> (enable) set system name Information Systems
System name set.
Console> (enable) 

Related Commands

set prompt
show system

set tacacs directedrequest

Use the set tacacs directedrequest command to enable or disable the TACACS+ directed-request option. When enabled, you can direct a request to any of the configured TACACS+ servers and only the username is sent to the specified server.

set tacacs directedrequest {enable | disable}

Syntax Description

enable

Keyword that specifies to send the portion of the address before the at (@) sign (the username) to the host specified after the @ sign.

disable

Keyword that specifies to send the entire address string to the default TACACS+ server.


Defaults

By default, the TACACS+ directed-request option is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When tacacs directedrequest is enabled, you must specify a configured TACACS+ server after the @ sign. If the specified host name does not match the IP address of a configured TACACS+ server, the request is rejected. When tacacs directedrequest is disabled, the 4000 family, 2948G, and 2980G switch queries the list of servers beginning with the first server in the list and then sends the entire string, accepting the first response from the server. This command is useful for sites that have developed their own TACACS+ server software to parse the entire address string and make decisions based on the contents of the string.

Examples

This example shows how to enable the TACACS+ directed-request option:

Console> (enable) set tacacs directedrequest enable
Tacacs direct request has been enabled.
Console> (enable) 

This example shows how to disable the TACACS+ directed-request option:

Console> (enable) set tacacs directedrequest disable
Tacacs direct request has been disabled.
Console> (enable) 

Related Commands

show tacacs

set tacacs key

Use the set tacacs key command to set the key for TACACS+ authentication and encryption.

set tacacs key key

Syntax Description

key

Variable that specifies printable ASCII characters used for authentication and encryption.


Defaults

By default, the value of the key is NULL.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The key length that you set must be less than 100 characters. The key must be the same as the key used on the TACACS+ server. All leading spaces are ignored. Spaces within the key and at the end of the key are included. Double quotation marks are not required, even if there are spaces between words in the key, unless the quotation marks themselves are part of the key. The key can consist of any printable ASCII characters except the tab character.

Examples

This example shows how to set the authentication and encryption key:

Console> (enable) set tacacs key Who Goes There
The tacacs key has been set to Who Goes There.
Console> (enable) 

Related Commands

clear tacacs key
show tacacs

set tacacs server

Use the set tacacs server command to define a TACACS+ server.

set tacacs server ip_addr [primary]

Syntax Description

ip_addr

Variable that specifies the IP address of the server on which the TACACS+ server resides.

primary

(Optional) Keyword that designates the specified server as the primary TACACS+ server.


Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You can configure a maximum of three servers. The primary server, if configured, is contacted first. If no primary server is configured, the first server configured becomes the primary server.

Examples

This example shows how to configure the server on which the TACACS+ server resides and to designate it as the primary server:

Console> (enable) set tacacs server 170.1.2.20 primary
170.1.2.20 added to TACACS server table as primary server.
Console> (enable) 

Related Commands

clear tacacs server
show tacacs

set tacacs timeout

Use the set tacacs timeout command to set the response timeout interval for the TACACS+ server daemon. The TACACS+ server must respond to a TACACS+ authentication request before this interval expires or the next configured server is queried.

set tacacs timeout seconds

Syntax Description

seconds

Variable that specifies the timeout response interval in seconds; valid values are from 1 to 255.


Defaults

By default, the value for the response timeout interval for the TACACS+ server is 5 seconds.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the response timeout interval for the TACACS+ server to 8 seconds:

Console> (enable) set tacacs timeout 8
Tacacs timeout set to 8 seconds.
Console> (enable)

Related Commands

show tacacs

set test diaglevel

Use the set test diaglevel command to set the diagnostic level.

set test diaglevel {complete | minimal | bypass}

Syntax Description

complete

Keyword that specifies complete diagnostics.

minimal

Keyword that specifies minimal diagnostics.

bypass

Keyword that bypasses diagnostics.


Defaults

By default, the diagnostic level is set to complete.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The minimal keyword is not supported at this time. Setting the diagnostic level to minimal will be ignored.

Setting the diagnostic level to bypass will skip POST and online diagnostic testing. If you skip diagnostic testing, the show test mod_num command reports that the module has passed all tests.


Caution Be careful when setting the diagnostic level to bypass. Bypassing diagnostic tests allows hardware failures to go undetected and could cause other problems.

Examples

This example shows how to set the diagnostic level to complete:

Console> (enable) set test diaglevel complete
Diagnostic level set to complete.
Console> (enable)

This example shows how to set the diagnostic level to minimal:

Console> (enable) set test diaglevel minimal
Diagnostic level set to minimal.
Console> (enable)

This example shows how to set the diagnostic level to bypass:

Console> (enable) set test diaglevel bypass
Diagnostic level set to bypass.
Console> (enable)

Related Commands

show test

set time

Use the set time command to change the time of day on the system clock.

set time [day_of_week] [mm/dd/yyyy] [hh:mm:ss]

Syntax Description

day_of_week

(Optional) Variable that specifies the day of the week; valid values are mon, tues, wed, thur, fri, sat, and sun.

mm/dd/yyyy

(Optional) Variable that specifies the month (in numeric form), day, and year.

hh:mm:ss

(Optional) Variable that specifies the current time, in 24-hour format.


Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the system clock to Sunday, March 21, 2000, 7:50 a.m:

Console> (enable) set time sun 03/21/2000 7:50
Sun Mar 21 2000, 07:50:00
Console> (enable)

Related Commands

show time

set timezone

Use the set timezone command to set the time zone for the system.

set timezone [zone_name] [hours [minutes]]

Syntax Description

zone_name

(Optional) Variable that specifies the name of the time zone to be displayed.

hours

(Optional) Variable that specifies the number of hours offset from UTC; valid values are from -12 to 12.

minutes

(Optional) Variable that specifies the number of minutes offset from UTC; valid values are from 0 to 59.


Defaults

By default, the time zone is set to UTC.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If the specified hours value is a negative number, then the minutes value is assumed to be negative as well.

The set timezone command is effective only when NTP is running. If you set the time explicitly and NTP is disengaged, the set timezone command has no effect. If you have enabled NTP and have not entered the set timezone command, the Catalyst 4000 family switch displays UTC by default.

Examples

This example shows how to set the time zone to Pacific Standard Time with an offset of -8 hours from UTC:

Console> (enable) set timezone PST -8
Timezone set to "PST", offset from UTC is -8 hours.
Console> (enable)

Related Commands

clear timezone
show timezone

set trace

Use the set trace command to obtain the debugging information for the switch web interface.

set trace {category} [level]

set trace monitor {enable | disable}

Syntax Description

category

Variable that specifies the trace category.

level

(Optional) Variable that specifies the trace level; see "Usage Guidelines" for valid values.

monitor

Keyword that monitors the switch web interface for debugging information.

enable

Keyword that enables the trace monitor.

disable

Keyword that disables the trace monitor.


Defaults

By default, the trace level is 1.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Valid values for the trace level are 0 to 15. Trace levels 0 to 255 are for inband only. To disable the trace level, set the value to 0.

Examples

This example shows how to obtain switch web interface debugging information:

Console> (enable) set trace vmps
VMPS tracing set to 1.
Warning!! Turning on trace may affect the operation of the system.
Use with caution.
Console> (enable) 

This example shows how to enable trace monitoring:

Console> (enable) set trace monitor enable
Trace monitor is enabled for this session.
Console> (enable)

This example shows how to disable trace monitoring:

Console> (enable) set trace monitor disable
Trace monitor is disabled for this session.
Console> (enable)

Related Commands

show trace

set traffic monitor

Use the set traffic monitor command to configure the threshold at which a high traffic log will be generated.

set traffic monitor threshold

Syntax Description

threshold

Variable that specifies the threshold percentage at which a high traffic log will be generated; valid values are from 0 to 100 percent.


Defaults

By default, threshold is set to 100 percent. No high traffic log is created.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If backplane traffic exceeds the threshold configured by the set traffic monitor command, a high traffic log is created. If the threshold is set to 100 percent, no high-traffic system warning is generated.

Examples

This example shows how to set the high traffic threshold to 80 percent:

Console> (enable) set traffic monitor 80
Traffic monitoring threshold set to 80%.
Console> (enable) 

Related Commands

show traffic

set trunk

Use the set trunk command to configure trunk ports and to add VLANs to the allowed VLAN list for existing trunks.

set trunk mod_num/port_num [on | off | desirable | auto | nonegotiate] [vlan_range] [isl | dot1q
dot10 | lane | negotiate]

Syntax Description

mod_num

Variable that specifies the number of the module.

port_num

Variable that specifies the number of the port on the module.

on

(Optional) Keyword that forces the port to become a trunk port and persuade the neighboring port to become a trunk port.

off

(Optional) Keyword that forces a port to become a nontrunk port and persuades the neighboring port to become a nontrunk port.

desirable

(Optional) Keyword that causes a port to negotiate actively with the neighbor port to become a trunk link. This mode is not allowed on FDDI and ATM ports.

auto

(Optional) Keyword that causes the port to become a trunk port if the neighboring port tries to negotiate a trunk link.

nonegotiate

(Optional) Keyword that forces the port to become a trunk port but prevents it from sending DTP frames to its neighbor.

vlan_range

(Optional) VLANs to add to the list of allowed VLANs on the trunk; valid values are from 1 to 1005.

isl

(Optional) Keyword that specifies an ISL trunk on an Ethernet port.

dot1q

(Optional) Keyword that specifies an IEEE 802.1Q trunk on an Ethernet port.

dot10

(Optional) Keyword that specifies an IEEE 802.10 trunk on a FDDI or CDDI port.

lane

(Optional) Keyword that specifies an ATM LANE trunk on an ATM port.

negotiate

(Optional) Keyword that causes the port to become an ISL (preferred) or 802.1Q trunk, depending on the configuration and capabilities of the neighboring port.


Defaults

All ports except ATM LANE ports are nontrunk ports by default. ATM LANE and RSM ports are always configured as trunk ports.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you configure a port to trunk it becomes a trunk port even if the neighbor port does not agree to become a trunk. The only possible mode for ATM ports is on.

When you configure a port not to trunk it becomes a nontrunk port even if the neighbor port does not agree to become a nontrunk port. This is the default mode for FDDI trunks. This option is not allowed for ATM ports.

Setting the mode to auto is not allowed on FDDI and ATM ports. This is the default mode for Fast Ethernet and Gigabit Ethernet ports.

Setting the mode to nonegotiate is allowed only on ISL and IEEE 802.1Q trunks.

IEEE 802.1Q trunks are supported in Catalyst 5000 family and 2926G series software release 4.1(1) and later with 802.1Q-capable hardware. Automatic negotiation of 802.1Q trunks is supported in software release 4.2(1) and later. In software release 4.1, you must use the nonegotiate keyword with 802.1Q trunks.

Trunking capabilities are hardware dependent. Refer to the Module Installation Guide for your switch to determine the trunking capabilities of your hardware, or enter the show port capabilities command.

The Catalyst 4000 family switches use the DTP (formerly known as DISL) to negotiate trunk links automatically on Fast Ethernet and Gigabit Ethernet ports. Whether a port will negotiate to become a trunk port depends on both the mode and the trunk type specified for that port. Refer to the Software Configuration Guide-Catalyst 4000 Family, 2948G, and 2980G Switches for detailed information on how trunk ports are negotiated.

DTP is a point-to-point protocol. However, some internetworking devices might improperly forward DTP frames. You can avoid this problem by ensuring that trunking is turned off on ports connected to non-Catalyst 4000 family devices if you do not intend to trunk across those links. When enabling trunking on a link to a Cisco router, enter the nonegotiate keyword to cause the port to become a trunk but not generate DTP frames. The nonegotiate keyword is available in Catalyst 4000 family software release 2.4(3) and later.

For trunking to be negotiated on Fast Ethernet and Gigabit Ethernet ports, the ports must be in the same VTP domain. However, you can use the on or nonegotiate keywords to force a port to become a trunk, even if it is in a different domain.

To delete VLANs from the allowed list for a trunk, enter the clear trunk mod_num/port_num vlan_range command. When you first configure a port as a trunk, the set trunk command always adds all VLANs to the allowed VLAN list for the trunk, even if you specify a VLAN range (the specified VLAN range is ignored).

To delete VLANs from the allowed list, enter the clear trunk mod_num/port_num vlan_range command. To later add VLANs that were deleted, enter the set trunk mod_num/port_num vlan_range command.

If you do not enter a trunk-type keyword, the value is unchanged from the previous configuration.

The dot1q trunk type is the only trunk type supported by the Catalyst 4000 family switches.

To return a trunk to its default trunk type and mode, enter the clear trunk mod_num/port_num command.

If you enter the set trunk command on a Token Ring port, you receive a message indicating that the port is "not a trunk-capable port."

When you are running the set trunk command on an Access Gateway module, you have limited usage of the command.

Examples

This example shows how to set port 2 on module 1 as a trunk port:

Console> (enable) set trunk 1/2 on
Port(s) 1/2 trunk mode set to on.
Console> (enable)

This example shows how to set port 2 on module 1 as a nontrunk port:

Console> (enable) set trunk 1/2 off
Port(s)  1/2 trunk mode set to off.
Console> (enable) 

This example shows how to set port 2 on module 1 as a preferred trunk port:

Console> (enable) set trunk 1/2 desirable 
Port(s)  1/2 trunk mode set to desirable.
Console> (enable) 2000 Jan 11 09:16:29 %DTP-5-TRUNKPORTON:Port 1/2 has become ik

This example shows how to add VLANs 5 through 50 to the allowed VLAN list for a trunk port (VLANs were previously deleted from the allowed list with the clear trunk command):

Console> (enable) set trunk 1/1 5-50
Adding vlans 5-50 to allowed list.
Port(s) 1/1 allowed vlans modified to 1,5-50,101-1005.
Console> (enable)

This example shows how to set port 5 on module 4 as an 802.1Q trunk port in desirable mode:

Console> (enable) set trunk 4/5 desirable dot1q
Port(s) 4/5 trunk mode set to desirable.
Port(s) 4/5 trunk type set to dot1q.
Console> (enable)

This example shows how to set port 1 on module 1 as an ISL trunk port:

Console> (enable) set trunk 1/1 isl      
Port(s)  1/1 trunk type set to isl.
Console> (enable) 

Related Commands

clear trunk
set vtp
show trunk
show vtp statistics

set udld

Use the set udld command to enable or disable the UDLD feature on specified ports or globally on all ports.

set udld {enable | disable} mod/ports...

Syntax Description

enable

Keyword that enables the UDLD feature.

disable

Keyword that disables the UDLD feature.

mod/ports...

Variable that specifies the number of the module and ports.


Defaults

By default, UDLD is globally disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Whenever a unidirectional connection is detected, UDLD displays a syslog message to notify you and the network management application (via SNMP) that the port on which the misconfiguration has been detected has been disabled.

If you enter the global set udld enable or disable command, UDLD is globally configured. If UDLD is globally disabled, UDLD is automatically disabled on all interfaces, but the per-port enable (or disable) configuration is not changed. If UDLD is globally enabled, whether UDLD is running on an interface or not depends on its per-port configuration.

UDLD is supported on both Ethernet fiber and copper interfaces and only those interfaces can be enabled.

Examples

This example shows how to enable the UDLD feature for port 1 on module 2:

Console> (enable) set udld enable 2/1
UDLD enabled on port 2/1.
Warning:UniDirectional Link Detection should be enabled on all the ends of the connection 
in order to work properly.
Console> (enable)

This example shows how to disable the UDLD feature for port 1 on module 2:

Console> (enable) set udld disable 2/1
UDLD disabled on port 2/1.
Warning:UniDirectional Link Detection should be enabled on all the ends of the connection 
in order to work properly.
Console> (enable)

This example shows how to enable the UDLD feature for all ports on all modules:

Console> (enable) set udld enable
UDLD enabled globally
Console> (enable) 

This example shows how to disable the UDLD message display for all ports on all modules:

Console> (enable) set udld disable
UDLD disabled globally
Console> (enable) 

Related Commands

show udld

set udld aggressive-mode

Use the set udld aggressive-mode command to enable UDLD aggressive mode on specified ports or globally on all ports.

set udld aggressive-mode {enable | disable} mod/port

Syntax Description

enable

Keyword that enables UDLD aggressive mode.

disable

Keyword that disables UDLD aggressive mode.

mod/port

Variable that specifies the number of the module and port(s).


Defaults

By default, aggressive mode is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

After all the neighbors of a port have aged out either in the advertisement or in the detection phase, aggressive mode allows UDLD to restart the linkup sequence to resynchronize with any potentially out-of-sync neighbors, and shut down the port if the link is still undetermined after the fast train of messages.

You also can enable aggressive mode to shut down an active port that does not support FEFI or autonegotiation and becomes connected to its neighbor by a single fiber strand or copper wire after being part of a bidirectional link. This prevents possible spanning tree loops if the port belongs to a channel.

Examples

This example shows how to enable aggressive mode:

Console> (enable) set udld aggressive-mode enable 2/1
Aggressive UDLD enabled on port 2/1.
Warning: UniDirectional Link Detection should be enabled on all the ends of the connection 
in order to work properly.
Console> (enable)

This example shows how to disable aggressive mode:

Console> (enable) set udld aggressive-mode disable 2/1
Aggressive UDLD disabled on port 2/1.
Warning: UniDirectional Link Detection should be enabled on all the ends of the connection 
in order to work properly.
Console> (enable) 

Related Commands

show udld

set udld interval

Use the set udld interval command to set the UDLD message interval timer.

set udld interval interval

Syntax Description

interval

Variable that specifies the message interval in seconds; valid values are from 7 to 90 seconds.


Defaults

By default, the UDLD message interval timer is set to 60 seconds.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the message interval timer:

Console> (enable) set udld interval 90
UDLD message interval set to 90 seconds
Console> (enable)

Related Commands

show udld

set vlan

Use the set vlan command to group ports into a VLAN, set the private VLAN type, or map or unmap VLANs to or from an instance.

set vlan {vlans}{mod/ports}

set vlan {vlans} [name name] [type type] [state state] [said said] [mtu mtu]
[
bridge bridge_num] [mode bridge_mode] [stp stp_type] [translation vlan_num]
[
aremaxhop hopcount] [pvlan-type pvlan_type] [mistp-instance mistp_instance] [ring hex_ring_number] [decring decimal_ring_number] [parent vlan_num] [backupcrf {off | on}] [stemaxhop hopcount] [rspan]

Syntax Description

vlans

Variable that specifies the number identifying the VLAN; valid values are from 1 to 1000 and from 1025 to 4094.

mod/ports

Variable that specifies the number of the module and ports on the module belonging to the VLAN.

name name

(Optional) Keyword and variable that define a text string used as the name of the VLAN; valid values are from 1 to 32 characters.

type type

(Optional) Keyword and variable that identify the VLAN type.

state state

(Optional) Keyword and variable that specify whether the state of the VLAN is active or suspended.

said said

(Optional) Keyword and variable that specify the security association identifier; valid values are from 1 to 4294967294.

mtu mtu

(Optional) Keyword and variable that specify the maximum transmission unit (packet size, in bytes) that the VLAN can use; valid values are from 576 to 18190.

bridge bridge_num

(Optional) Keyword and variable that specify the identification number of the bridge; valid values are hexadecimal numbers from 0x1 to 0xF.

mode bridge_mode

(Optional) Keyword and variable that specify the bridge mode; valid values are srt and srb.

stp stp_type

(Optional) Keyword and variable that specify the STP type; valid values are ieee, ibm, and auto.

translation vlan_num

(Optional) Keyword and variable that specify a translational VLAN used to translate FDDI or Token Ring to Ethernet; valid values are from 1 to 1000 and from 1025 to 4094.

aremaxhop hopcount

(Optional) Keyword and variable that specify the maximum number of hops for All-Routes Explorer frames; valid values are from 1 to 13.

pvlan-type pvlan-type

(Optional) Keyword and options that specify the private VLAN type. See the "Usage Guidelines" section for valid values.

mistp-instance mistp_instance

(Optional) Keyword and variable that specify the MISTP instance; valid values are none and from 1 to 16.

ring hex_ring_number

(Optional) Keyword that specify the VLAN as the primary VLAN in a private VLAN.

decring decimal_ring_number

(Optional) Keyword and variable that specify the decimal ring number; valid values are from 1 to 4095.

parent vlan_num

(Optional) Keyword and variable that specify the VLAN number of the parent VLAN; valid values are from 1 to 1000 and from 1025 to 4094.

backupcrf off | on

(Optional) Keywords that specify whether the TrCRF is a backup path for traffic. TrCRFs are achieved when you subdivide a Token Ring switching module into multiple virtual rings.

stemaxhop hopcount

(Optional) Keyword and variable that specify the maximum number of hops for Spanning Tree Explorer frames; valid values are from 1 to 14.

rspan

(Optional) Keyword that create a VLAN for remote SPAN.


Defaults

The default values are as follows:

Switched Ethernet ports and Ethernet repeater ports are in VLAN 1.

said is 100001 for VLAN 1, 100002 for VLAN 2, 100003 for VLAN 3, and so forth.

type is Ethernet.

mtu is 1500 bytes.

state is active.

hopcount is 7.

pvlan type is none.

mistp_instance is no new instances have any VLANs mapped. For an existing VLAN, the existing instance configuration is used.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you are configuring normal-range VLANs, you cannot use the set vlan command until the Catalyst 4000 family switch is either in VTP transparent mode (set vtp mode transparent) or until a VTP domain name has been set (set vtp domain name). To create a private VLAN, UTP mode must be transparent.

VLAN 1 parameters are factory configured and cannot be changed.

If you specify a range of VLANs, you cannot use the VLAN name.

If you enter the mistp-instance none command, the specified VLANs are unmapped from any instance they are mapped to.

The set vlan vlan_num mistp-instance mistp_instance command is available in PVST+ mode.

You cannot set multiple VLANs for ISL ports using this command. The VLAN name can be from 1 to 32 characters in length. If you are adding a new VLAN or modifying an existing VLAN, the VLAN number must be within the range of 1 to 1000 or 1025 to 4094.

If you want to use the extended-range VLANs (1025 to 4094), you must enable the MAC address reduction feature using the set spantree macreduction command. When you enable MAC address reduction, the pool of MAC addresses used for the VLAN spanning tree is disabled, leaving a single MAC address that identifies the switch.

If you use the rspan keyword for remote SPAN VLANs, you should not configure an access port (except the remote SPAN destination ports) on these VLANs. Learning is disabled for remote SPAN VLANs.

If you use the rspan keyword for remote SPAN VLANs, only the name name and the state {active | suspend} variables are supported.

The stemaxhop hopcount parameter is valid only when defining or configuring TrCRFs.

The bridge bridge_num, mode bridge_mode, stp stp_type, and translation vlan_num keywords and values are supported only when the Catalyst 4000 family switch is used as a VTP server for Catalyst 5000 family switches in the Token Ring and FDDI networks.

You must configure a private VLAN on the supervisor engine.

Valid values for pvlan-type are as follows:

primary specifies the VLAN as the primary VLAN in a private VLAN.

isolated specifies the VLAN as the isolated VLAN in a private VLAN.

community specifies the VLAN as the community VLAN in a private VLAN.

twoway-community specifies the VLAN as a bidirectional community VLAN that carries the traffic among community ports and to and from community ports to and from the MSFC.

none specifies that the VLAN is a normal Ethernet VLAN, not a private VLAN.

Only regular VLANs with no access ports assigned to them can be used in private VLANs. Do not use the set vlan command to add ports to a private VLAN; use the set pvlan command to add ports to a private VLAN.

VLANs 1001, 1002, 1003, 1004, and 1005 cannot be used in private VLANs.

VLANs 1025 to 4094 are extended-range VLANs.

VLANs in a suspended state do not pass packets.

Examples

This example shows how to set VLAN 850 to include ports 3 through 7 on module 3:

Console> (enable) set vlan 850 3/4-7
VLAN 850 modified.
VLAN  Mod/Ports
---- -----------------------
850   3/4-7
Console> (enable) 

This example shows how to set VLAN 7 as a primary VLAN:

Console> (enable) set vlan 7 pvlan-type primary
Console> (enable)

This example shows how to set VLAN 901 as an isolated VLAN:

Console> (enable) set vlan 901 pvlan-type isolated
Console> (enable)

This example shows how to set VLAN 903 as a community VLAN:

Console> (enable) set vlan 903 pvlan-type community
Console> (enable)

This example shows how to unmap all instances currently mapped to VLAN 5:

Console> (enable) set vlan 5 mistp-instance none
Vlan 5 configuration successful
Console> (enable) 

Related Commands

clear config pvlan
clear pvlan mapping
clear vlan
set pvlan
set spantree macreduction
set vlan mapping
show pvlan
show pvlan mapping
show vlan

set vlan mapping

Use the set vlan mapping command to map 802.1Q VLANs to ISL VLANs.

set vlan mapping dot1q 1q_vlan_num isl isl_vlan_num

Syntax Description

dot1q 1q_vlan_num

Keyword and variable that specify the 802.1Q VLAN; valid values are from 1001 to 4094.

isl isl_vlan_num

Keyword that specifies the ISL VLAN; valid values are from 1 to 1024.


Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

VLAN and MISTP instance mapping can be set only on the switch that is in either VTP server mode or in transparent mode.

IEEE 802.1Q VLAN trunks support VLANs 1 through 4094. ISL VLAN trunks support VLANs 1 through 1024 (1005 to 1024 are reserved). The switch automatically maps 802.1Q VLANs 1000 and lower to ISL VLANs with the same number.

Use this feature to map 802.1Q VLANs above 1000 to ISL VLANs.

The total of all mappings must be less than or equal to eight. Only one 802.1Q VLAN can be mapped to an ISL VLAN. For example, if 802.1Q VLAN 800 has been automatically mapped to ISL VLAN 800, do not manually map any other 802.1Q VLANs to ISL VLAN 800.

You cannot overwrite existing 802.1Q VLAN mapping. If the 802.1Q VLAN number already exists, the command is aborted. You must first clear that mapping.

The reserved vlan range is 1002 to 1024. You can map the entire reserved range with the exception of the default media VLANs 1002 to 1005.

You cannot overwrite existing VLAN mapping. If the VLAN number already exists, the command is aborted. You must first clear that mapping.

If the VLAN number does not exist, then either of the following occurs:

If the switch is in server or transparent mode, the VLAN is created with all default values.

If the switch is in client mode, then the command proceeds without creating the VLAN. A warning will be given indicating that the VLAN does not exist.

If the table is full, the command is aborted with an error message indicating the table is full.

dot1q VLANs are rejected if any extended-range VLANs are present.

Examples

This example shows how to map reserved VLAN 1010 to nonreserved VLAN 4000:

Console> (enable) set vlan mapping reserved 1010 non-reserved 4000
Vlan 1010 successfully mapped to 4000. 
Console> (enable)

This example shows the display if you enter an existing mapping:

Console> (enable) set vlan mapping reserved 1011 non-reserved 4001
Vlan mapping from vlan 1011 to vlan 4001 already exists.
Console> (enable)

This example shows the display if the mapping table is full:

Console> (enable) set vlan mapping reserved 1010 non-reserved 4000
Vlan mapping table full. Maximum of 8 mappings allowed.
Console> (enable) 

This example shows how to map VLAN 850 to ISL VLAN 1022:

Console> (enable) set vlan mapping dot1q 850 isl 1022
Vlan 850 configuration successful
Vlan mapping successful
Console> (enable)

This example shows the display if you enter a VLAN that does not exist:

Console> (enable) set vlan mapping dot1q 2 isl 1016
Vlan Mapping Set
Warning: Vlan 2 Nonexistent
Console> (enable)

This example shows the display if you enter an existing mapping:

Console> (enable) set vlan mapping dot1q 3 isl 1022
1022 exists in the mapping table. Please clear the mapping first.
Console> (enable)

This example shows the display if the mapping table is full:

Console> (enable) set vlan mapping dot1q 99 isl 1017
Vlan Mapping Table Full.
Console> (enable) 

Related Commands

clear vlan mapping
show vlan

set vmps downloadmethod

Use the set vmps downloadmethod command to specify whether to use TFTP or rcp to download the VMPS database.

set vmps downloadmethod {rcp | tftp} [username]

Syntax Description

rcp

Keyword that specifies rcp as the method for downloading the VMPS database.

tftp

Keyword that specifies TFTP as the method for downloading the VMPS database.

username

(Optional) Variable that specifies the username for downloading with rcp.


Defaults

By default TFTP will be used if no other method is specified.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The username option is not allowed if you specify tftp as the download method.

Examples

This example shows how to specify the method for downloading the VMPS database:

Console> (enable) set vmps downloadmethod rcp jdoe
vmps downloadmethod : RCP
rcp vmps username   : jdoe
Console> (enable) 

Related Commands

download
set rcp username
show vmps

set vmps downloadserver

Use the set vmps downloadserver command to specify the IP address of the TFTP or rcp server from which the VMPS database is downloaded.

set vmps downloadserver ip_addr [filename]

Syntax Description

ip_addr

Variable that specifies the IP address of the TFTP or rcp server from which the VMPS database is downloaded.

filename

(Optional) Variable that specifies the VMPS configuration filename on the TFTP or rcp server.


Defaults

If filename is not specified, the set vmps downloadserver command uses the default filename vmps-config-database.1.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to specify the server from which the VMPS database is downloaded and how to specify the configuration filename:

Console> (enable) set vmps downloadserver 192.168.69.100 vmps_config.1
IP address of the server set to 192.168.69.100
VMPS configuration filename set to vmps_config.1
Console> (enable)

Related Commands

download
set vmps state
show vmps

set vmps server

Use the set vmps server command to configure the VMPS server.

set vmps server ip_addr [primary]

set vmps server retry count

set vmps server reconfirminterval interval

Syntax Description

ip_addr

Variable that specifies the IP address of the VMPS server.

primary

(Optional) Keyword that specifies the device as the primary VMPS server.

retry count

Keyword and variable that specify the retry interval; valid values are from 1 to 10 minutes.

reconfirminterval interval

Keyword and variable that specify the reconfirmation interval; valid values are from 0 to 120 minutes.


Defaults

If no IP address is specified, VMPS uses the local VMPS configuration.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You can specify the IP addresses of up to three VMPS servers. You can define any VMPS server as the primary VMPS server.

If the primary VMPS server is down, all subsequent queries go to a secondary VMPS server. VMPS checks on the primary server's availability once every five minutes. When the primary VMPS server comes back online, subsequent VMPS queries are directed back to the primary VMPS server.

To use a co-resident VMPS (when VMPS is enabled in a device), configure one of the three VMPS addresses as the IP address of interface sc0.

When you specify the reconfirminterval interval, enter 0 to disable reconfirmation.

Examples

This example shows how to define a primary VMPS server:

Console> (enable) set vmps server 192.168.10.140 primary
192.168.10.140 added to VMPS table as primary domain server.
Console> (enable)

This example shows how to define a secondary VMPS server:

Console> (enable) set vmps server 192.168.69.171
192.168.69.171 added to VMPS table as backup domain server.
Console> (enable)

Related Commands

clear vmps server
show vmps

set vmps state

Use the set vmps state command to enable or disable VMPS.

set vmps state {enable | disable}

Syntax Description

enable

Keyword that enables VMPS.

disable

Keyword that disables VMPS.


Defaults

By default, VMPS is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Before using the set vmps state command, you must use the set vmps tftpserver command to specify the IP address of the server from which the VMPS database is downloaded.

Examples

This example shows how to enable VMPS:

Console> (enable) set vmps state enable
Vlan membership Policy Server enabled.
Console> (enable)

This example shows how to disable VMPS:

Console> (enable) set vmps state disable
All the VMPS configuration information will be lost and the resources released on disable.
Do you want to continue (y/n[n]):y
VLAN Membership Policy Server disabled.
Console> (enable)

Related Commands

download
show vmps

set vtp

Use the set vtp command to set the options for VTP.

set vtp [domain domain_name] [mode {client | server | transparent | off}] [passwd passwd]
[
pruning {enable | disable}] [v2 {enable | disable}]

Syntax Description

domain domain_name

(Optional) Keyword and variable that identify the VLAN management domain. The domain_name can be from 1 to 32 characters in length.

mode {client | server | transparent | off}

(Optional) Keywords that specify the VTP mode.

passwd passwd

(Optional) Keyword and variable that specify the VTP password; the VTP password can be from 8 to 64 characters in length.

pruning {enable | disable}

(Optional) Keywords that enable or disable VTP pruning for the entire management domain.

v2 {enable | disable}

(Optional) Keywords that enable or disable version 2 mode.


Defaults

The defaults are as follows: server mode, no password, pruning disabled, and v2 disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported on extended-range VLANs.

VTP pruning and MISTP cannot be enabled at the same time.

All switches in a VTP domain must run the same version of VTP. VTP version 1 and VTP version 2 do not operate on switches in the same VTP domain.

If all switches in a domain are VTP version 2-capable, enable VTP version 2 on one switch (using the set vtp v2 enable command). The version number is automatically propagated to the other version 2-capable switches in the VTP domain.

If the VTP password has already been defined, entering passwd 0 (zero) clears the VTP password.

VTP supports four different modes: server, client, transparent, and off. If you make a change to the VTP or VLAN configuration on a switch in server mode, that change is propagated to all of the switches in the same VTP domain.

If the receiving switch is in server mode and its revision number is higher than the sending switch, the configuration is not changed. If the revision number is lower, the configuration is duplicated.

VTP can be set to either server or client mode only when dynamic VLAN creation is disabled.

If the receiving switch is in server mode, the configuration is not changed.

If the receiving switch is in client mode, the client switch changes its configuration to duplicate the configuration of the server. Be sure you make all VTP or VLAN configuration changes on a switch in server mode.

If the receiving switch is in transparent mode, the configuration is not changed. Switches in transparent mode do not participate in VTP. If you make VTP or VLAN configuration changes on a switch in transparent mode, the changes are not propagated to the other switches in the network.

When you configure VTP "off" mode, the switch behaves the same as in VTP transparent mode with the exception that VTP advertisements are not forwarded.

The pruning keyword is used to enable or disable VTP pruning for the VTP domain. VTP pruning causes information about each pruning-eligible VLAN to be deleted from VTP updates if there are no stations belonging to that VLAN on a particular switch port. Use the set vtp pruneeligible and clear vtp pruning commands to specify which VLANs should or should not be pruned when pruning is enabled for the domain.

Use the clear config all command to delete the domain from the switch.

For more information about VTP, refer to Chapter 10, "Configuring VTP," in the Catalyst 6000 Family Configuration Guide.


Caution Be careful when you use the clear config all command. This command clears the entire switch configuration, not just the VTP domain.

Examples

This example shows how to use the set vtp command:

Console> (enable) set vtp domain Engineering mode client
VTP domain Engineering modified
Console> (enable)

This example shows what happens if you try to change VTP to server or client mode and dynamic VLAN creation is enabled:

Console> (enable) set vtp mode server
Failed to Set VTP to Server. Please disable Dynamic VLAN Creation First.
Console> (enable)

This command shows how to set VTP to off mode:

Console> (enable) set vtp mode off
VTP domain modified
Console> (enable)

Related Commands

show vtp domain
set vlan
clear vlan
show vlan
set vtp pruneeligible
clear vtp pruning

set vtp pruneeligible

Use the set vtp pruneeligible command to specify the VTP domain on which VLANs are prune eligible.

set vtp pruneeligible vlans

Syntax Description

vlans

Variable that specifies the range of VLAN numbers; valid values are from 2 to 1000.


Defaults

By default, VLANs 2 to 1000 are eligible for pruning.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

VTP pruning causes information about each pruning-eligible VLAN to be deleted from VTP updates if there are no stations belonging to that VLAN on a particular switch port. Use the set vtp command to enable VTP pruning.

By default, VLANs 2 to 1000 are pruning eligible. You do not need to use the set vtp pruning command unless you have previously used the clear vtp pruning command to make some VLANs pruning ineligible. If VLANs have been made pruning ineligible, use the set vtp pruning command to make them pruning eligible again.

Examples

This example shows how to configure pruning eligibility for VLANs 120 and 150:

Console> set vtp pruneeligible 120,150
Vlans 120,150 eligible for pruning on this device.
VTP domain nada modified.
Console>

In this example, VLANs 200 to 500 were made pruning ineligible using the clear vtp pruning command. This example shows how to make VLANs 220 to 320 pruning eligible again:

Console> set vtp pruneeligible 220-320
Vlans 2-199,220-320,501-1000 eligible for pruning on this device.
VTP domain Company modified.
Console>

Related Commands

clear vtp pruning
set vlan
show vtp domain

set vtp pruning

Use the set vtp pruning command to specify which VLANs in the VTP domain are eligible for pruning.

set vtp pruning vlans

Syntax Description

vlans

Variable that specifies the range of VLAN numbers; valid values are from 2 to 1000.


Defaults

By default, VLANs 2 to 1000 are eligible for pruning.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

VTP pruning causes information about each pruning-eligible VLAN to be deleted from VTP updates if there are no stations belonging to that VLAN out a particular switch port. Use the set vtp command to enable VTP pruning. You do not need to use the set vtp pruning command unless you have previously used the clear vtp pruning command to make some VLANs pruning ineligible. If VLANs have been made pruning ineligible, use the set vtp pruning command to make them pruning eligible again.

Examples

This example shows how to configure pruning eligibility for VLANs 120 and 150:

Console> (enable) set vtp pruning 120,150
Vlans 120,150 eligible for pruning on this device.
VTP domain nada modified.
Console> (enable)

In this example, VLANs 200-500 were made pruning ineligible using the clear vtp pruning command. This example shows how to make VLANs 220 to 320 pruning eligible again:

Console> (enable) clear vtp pruning 200-500
Vlans 1,200-500,1001-1005 will not be pruned on this device.
VTP domain Company modified.
Console> (enable)

Console> (enable) set vtp pruning 220-320
Vlans 2-199,220-320,501-1000 eligible for pruning on this device.
VTP domain Company modified.
Console> (enable)

Related Commands

clear vtp pruning
set vlan
show vtp domain

2