Table Of Contents
Symbols - Numerics - A - B - C - D - E - F - G - H - I - L - M - N - P - Q - R - S - T - U - V -
Index
Symbols
$ matches the end of a string 1-7
( ) in commands 1-10
* matches 0 or more sequences of a pattern 1-7
+ matches 1 or more sequences of a pattern 1-7
. matches any single character 1-7
? command 1-1
? matches 0 or 1 occurrence of a pattern 1-7
^ matches the beginning of a string 1-7
_ matches a comma (,), left brace ({), left parenthesis 1-7
" 1-10
Numerics
802.1s Multiple Spanning Tree
802.1x Authentication
See 802.1x Port Based Authentication
802.1x Port Based Authentication
allowing multiple hosts on a port 2-56
debugging 802.1x Port Based Authentication 2-28
displaying port based authentication 2-157
enabling authentication on the system 2-61
enabling manual control of the authorization state on a port 2-57
enabling periodic re-authentication of the client 2-60
initializing manually a re-authentication of all dot1x ports 2-59
initializing state machines 2-54
setting maximum number of times to send EAP requests 2-55
A
abbreviating commands
context-sensitive help 1-1
Access Control List (ACLs)
access lists
clearing an access template 2-13
See also ACLs, MAC ACLs, and VACLs
access maps
applying with VLAN filter 2-365
ACLs
using ACL name naming conventions in a MAC ACL 2-103
action clause
specifying drop or forward action in a VACL 2-2
adjacency
debugging the adjacency table 2-22
disabling the debug facility 2-22
displaying IPC table entries 2-22
displaying table information 2-149
aggregate policer
displaying information 2-261
aging time
displaying MAC address aging time 2-209
MAC address table 2-106
alarms
displaying operational status 2-160
alternation
description 1-9
anchoring
description 1-10
AppleTalk
See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1
audience xi
authentication
setting username 2-356
using an MD5-type encryption method 2-356
verifying MD5 signature 2-357
verifying the checksum for Flash memory file system 2-357
authorization state of a controlled port 2-57
B
Baby Giants
displaying the system MTU setting 2-284
setting the maximum Layer 2 payload size 2-347
BackboneFast
displaying debugging messages 2-42
displaying spanning tree status 2-276
enabling debugging 2-42
BOOT environment variable
displaying information 2-153
bootflash
displaying information 2-151
BPDUs
debugging spanning tree activities 2-41
bridge protocol data units
C
Catalyst 4507R power redundancy mode 2-123
Catalyst 4507R power supply 2-121
CEF
displaying next-hop information 2-190
displaying VLAN configuration information 2-190
characters
used for searching command output 1-7
Cisco Express Forwarding (CEF)
clear commands
clearing Gigabit Ethernet interfaces 2-11
clearing IGMP group cache entries 2-14
clearing interface counters 2-9
clearing IP access lists 2-13
clearing MFIB counters and routes 2-16
clearing MFIB fastdrop entries 2-17
clearing PAgP channel information 2-19
clearing QoS aggregate counters 2-20
clearing VLAN interfaces 2-12
CLI string search
anchoring 1-10
expressions 1-7
filtering 1-6
multiple-character patterns 1-8
multipliers 1-9
parentheses for recall 1-10
searching outputs 1-6
single-character patterns 1-7
using 1-6
command modes
accessing privileged EXEC mode 1-4
exiting 1-4
understanding user EXEC and configuration modes 1-4
condition interface
debugging interface-related activities 2-24
condition vlan
debugging VLAN output 2-27
configuration, saving 1-11
configuring
root as secondary 2-315
configuring a SPAN session to monitor 2-111
configuring forward delay 2-311
configuring root as primary 2-315
CoS QoS default
defining value on an interface 2-134
Cost of Service (CoS)
counters
clearing interface counters 2-9
D
debug commands
debugging backup events 2-23
debugging DHCP snooping events 2-33
debugging DHCP snooping messages 2-34
debugging EtherChannel/PAgP/shim 2-29
debugging IPC activity 2-32
debugging NVRAM activities 2-36
debugging PAgP activities 2-37
debugging port manager activities 2-38
debugging software MAC filter updates 2-40
debugging spanning tree activities 2-41
debugging spanning tree backbonefast 2-42
debugging spanning tree uplinkfast 2-45
debugging supervisor redundancy 2-39
debugging VLAN manager activities 2-46
displaying monitor activity 2-35
displaying the adjacency table 2-22
enabling debug dot1x 2-28
enabling debugging messages that trace the activation and deactivation of ISL VLAN IDs 2-49
enabling debugging messages to be generatd by VTP 2-50
enabling debugging of UDLD activity 2-52
enabling switch shim debugging 2-43
enabling VLAN manager IOS file system error tests 2-47
limiting debugging output for a specific VLAN 2-27
limiting interface debugging output 2-24
limiting output for debugging standby state changes 2-25
taking shortcut to debug condition interface 2-31
debugging
activity monitoring 2-35
DHCP snooping events 2-33
DHCP snooping packets 2-34
IPC activities 2-32
NVRAM activities 2-36
PAgP activities 2-37
PAgP shim 2-29
PM activities 2-38
SMF address insertions and deletions 2-40
spanning tree BackboneFast events 2-42
spanning tree switch shim 2-43
spanning tree UplinkFast events 2-45
VLAN manager activities 2-46
VLAN manager IOS file system error tests 2-47
VTP protocol debug messages 2-50
debug spanning tree switch 2-43
debug sw-vlan vtp 2-50
default CoS value 2-134
default form of a command, using 1-6
defining egress DSCP-to-CoS mapping 2-137
DHCP snooping
displaying 2-191
displaying binding table 2-192
enabling DHCP globally 2-79
enabling on a VLAN 2-83
enabling option 82 2-80
enabling rate limiting on an interface 2-81
enabling trust on an interface 2-82
diagnostics
displaying Power-ON-SELF-Test (POST) results and online diagnostics 2-155
displaying inline power status 2-257
displaying monitoring activity 2-35
displaying SPAN session information 2-225
displaying SPAN software tables 2-251
document conventions xii
document organization xi
duplex mode
configuring autonegotiation on an interface 2-64
configuring full duplex on an interface 2-64
configuring half duplex on an interface 2-64
Dynamic Host Configuration Protocol (DHCP)
E
EAP
restarting authentication process based on number of times switch sends frames 2-55
enabling debugging for UDLD 2-52
enabling voice VLANs 2-332
environmental
alarms 2-160
displaying information 2-160
status 2-160
temperature 2-160
error disable detection
displaying disable detection status 2-163
enabling error disable detection 2-66
error-disabled state
displaying 2-182
error disable recovery
configuring recovery mechanism variables 2-67
displaying recovery timer information 2-164
specifying recovery cause 2-67
EtherChannel
assigning interfaces to EtherChannel groups 2-5
debugging EtherChannel 2-29
debugging PAgP shim 2-29
debugging spanning tree activities 2-41
displaying information for a channel 2-165
removing interfaces from EtherChannel groups 2-5
EtherChannel guard
enabling detection of STP misconfiguration and displaying an error message 2-302
expressions
matching multiple expression occurrences 1-9
multiple-character patterns 1-8
multiplying pattern occurrence 1-10
single-character patterns 1-7
Extensible Authentication Protocol (EAP)
F
field replaceable unit (FRU)
displaying status information 2-160
Flash memory file system
displaying file system information 2-151
verifying checksum 2-357
flow control
configuring a gigabit interface to send or receive pause frames 2-69
displaying per-interface status and statistics related to flow control 2-169
G
Gigabit Ethernet interface
clearing the hardware logic 2-11
global configuration mode
using this command mode 1-5
H
hardware Layer 3 switching
displaying adjacency table information 2-149
hardware module
resetting a module by turning the power off and then on 2-72
hot standby protocol
debugging 2-25
disabling debugging 2-25
limiting output 2-25
I
IDPROMs
displaying Serial Electrically Erasable Programmable Read Only Memory information for the chassis, supervisor engine, module, power supplies, fan trays, clock module, and mux buffer 2-171
IGMP
applying filters with a profile to control which hosts on a Layer 2 interface can join one or more IP multicast groups 2-85
clearing IGMP group cache entries 2-14
configuring frequency that the switch sends IGMP host-query messages 2-88
creating an IGMP profile 2-87
displaying IGMP interface status and configuration information 2-195
setting maximum group numbers 2-86
IGMP profiles
displaying 2-196
IGMP snooping
configuring a Layer 2 interface as a member of a group 2-97
configuring a static VLANn interface 2-97
configuring statically a Layer 2 interface as a multicast router interface for a VLAN 2-95
displaying multicast information on dynamically learned and manually configured switch interfaces 2-197
displaying VLAN information 2-198
enabling IGMP snooping 2-89
enabling IGMP snooping immediate-leave processing 2-94
enabling IGMP snooping on a VLAN 2-93
inline power
displaying inline power status 2-257
interface configuration mode, summary 1-5
interfaces
creating an interface-range macro 2-53
debugging output of interface related activities 2-24
displaying broadcast suppression discard counts 2-178
displaying description 2-180
displaying error counters 2-178
displaying error-disabled state 2-182
displaying status 2-180
displaying traffic for a specific interface 2-176
displaying trunk counters 2-178
executing a command on multiple ports in a range 2-76
setting the interface type 2-336
interface speed
configuring interface speed 2-329
Internet Group Management Protocol
IPC
debugging IPC activities 2-32
IP DHCP Snooping
IP multicast
displaying multicast routing table information 2-202
IPX
See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1
L
Layer 2 interface type
specifying a nontrunking, nontagged single VLAN Layer 2 interface 2-336
specifying a trunking VLAN Layer 2 interface 2-336
Layer 2 switching
enabling voice VLANs 2-332
modifying switching characteristics 2-332
Layer 3 switching
displaying administrative and operational status of a Layer 3 switching port 2-183
displaying hardware multicast expansion table (MET) table entries 2-237
displaying the contents of the Layer 3 forwarding memory 2-234
M
MAC Access Control Lists
MAC access lists
MAC ACLs
define extended MAC access list 2-103
displaying MAC ACL information 2-291
naming an ACL 2-103
MAC address table
adding static entries 2-107
clearing dynamic entries 2-18
configuring aging time 2-106
displaying dynamic table entry information 2-211
displaying entry count 2-210
displaying information 2-207
displaying interface-based information 2-213
displaying multicast information 2-215
displaying protocol-based information 2-217
displaying static table entry information 2-219
displaying the MAC address aging time 2-209
displaying VLAN-based information 2-221
removing static entries 2-107
mapping secondary VLANs to MST instance 2-128
mapping VLAN(s) to an MST instance 2-73
match subcommand
accessing 2-7
maximum transmission unit (MTU)
displaying the system MTU setting 2-284
setting the maximum Layer 2 payload size 2-347
MD5
verifying MD5 signature 2-357
message digest 5
MFIB
clearing ip mfib counters 2-16
clearing ip mfib fastdrop 2-17
displaying all active MFIB routes 2-199
displaying MFIB fastdrop table entries 2-201
enabling IP MFIB fastdrops 2-100
modes
module reset
resetting a module by turning the power off and then on 2-72
--More-- prompt
filter 1-6
search 1-7
MST
designating the primary and secondary root 2-315
displaying MST protocol information 2-281
displaying region configuration information 2-281
displaying spanning tree information 2-281
entering MST configuration submode 2-309
setting configuration revision number 2-147
setting path cost and port priority for instances 2-308
setting the bridge priority and timer value 2-315
setting the bridge priority and timer value for the instance 2-315
setting the forward delay timer for all instances 2-311
setting the hello-time delay timer for all instances 2-312
setting the max-age timer for all instances 2-313
setting the MST region name 2-113
specifying the maximum number of hops in a region before a BPDU is discarded 2-314
switching between PVST+ and MST spanning tree modes 2-307
using the MST configuration submode name command 2-113
using the MST configuration submode revision command 2-147
MTU
displaying global MTU settings 2-284
Multicast Forwarding Information Base (MFIB)
multiple-character patterns 1-8
multiple hosts on authorized port 2-56
Multiple Spanning Tree (MST)
N
next-hop
displaying CEF VLAN information 2-190
no form of a command, using 1-6
NVRAM
debugging NVRAM activities 2-36
P
paging prompt
PAgP
clearing port channel information 2-19
debugging PAgP activity 2-37
displaying port channel information 2-227
hot standby mode
returning to defaults 2-115
selecting ports 2-115
input interface of incoming packets
learning 2-114
returning to defaults 2-114
parentheses 1-10
password
establishing enhanced password security 2-356
setting username 2-356
PM activities
debugging 2-38
disabling debugging 2-38
Port Aggregation Protocol
port-based authentication
debug messages, display 2-28
enabling 802.1X 2-57
manual control of authorization state 2-57
multiple hosts on authorized port 2-56
periodic re-authentication
enabling 2-60
re-authenticating 802.1X-enabled ports 2-59
statistics and status display 2-157
switch-to-client frame-retransmission number 2-55
port channel
displaying information 2-227
load distribution method
resetting to defaults 2-118
setting 2-118
port-channel
accessing 2-75
creating 2-75
port range
executing 2-76
POST
Power-ON-SELF-Test (POST) results and online diagnostics
displaying diagnostics 2-155
power status
displaying 2-257
displaying inline power 2-257
displaying power status 2-257
power supply
configuring combined and redundant power on the Catalyst 4507R 2-121
configuring the power redundancy mode on the Catalyst 4507R 2-123
display power status 2-257
display Serial Electrically Erasable Programmable Read Only Memory (SEEPROM) 2-171
setting inline power state 2-120
Private VLAN
privileged EXEC mode, summary 1-5
prompts
system 1-5
PVLANs
configuring isolated and primary PVLANs 2-124
disabling sticky-ARP 2-101
displaying map information for VLAN SVIs 2-181
displaying PVLAN information 2-292
enabling interface configuration mode 2-336
enabling sticky-ARP 2-101
mapping a primary and secondary VLAN to the same SVI 2-126
specifying host ports 2-336
specifying promiscuous ports 2-336
PVLAN trunk
setting trunk characteristics in interface trunk mode 2-344
Q
QoS
accessing the QoS policy map configuration mode to configure a QoS policy map 2-116
attaching a policy-map to an interface 2-148
clearing global and per interface aggregate QoS counters 2-20
defining a named aggregate policer for use in policy maps 2-131
defining default CoS value on an interface 2-134
defining the ingress CoS-to-DSCP mapping for trusted interfaces 2-136
displaying aggregate policer information 2-261
displaying class maps information 2-154
displaying policy map information 2-254
displaying QoS information 2-260
displaying QoS map information 2-263
displaying queue information 2-262
displaying statistics and configurations of input and output policies attached to an interface 2-255
enabling per-VLAN QoS for a Layer 2 interface 2-142
enabling QoS global configuration mode on the switch 2-129
enabling QoS on an interface 2-130
mapping DSCP values to selected transmit queues 2-137
mapping egress DSCP-to-CoS 2-137
mapping the DSCP-to-CoS value 2-137
setting the mapping of policed DSCP values to marked down DSCP values 2-139
setting the QoS trust state on an interface 2-140
QoS CoS
defining default CoS value on an interface 2-134
question command 1-1
R
re-authenticating 802.1X-enabled ports 2-59
re-authentication
periodic 2-60
redundancy
changing from active to standby supervisor engine 2-144
displaying information 2-265
displaying redundancy facility information 2-265
displaying RF client list 2-265
displaying RF operational counters 2-265
displaying RF states 2-265
enabling automatic synchronization of the configuration files in NVRAM 2-4
entering main CPU mode to manually synchronize the configurations on the two supervisor engines 2-109
entering redundancy configuration mode to access main CPU 2-143
forcing switchover to standby supervisor engine 2-144
synchronizing automatically the primary and secondary route processor configurations 2-109
related documentation xi
resetting PVLAN trunk
setting switchport in interface configuration mode to trunk 2-336
ROM monitor mode
summary 1-6
root guard
displaying root inconsistency status 2-276
Route Processor Redundancy (RPR)
S
saving configuration changes 1-11
show commands
filtering parameters 1-7
searching and filtering 1-6
show platform commands
debugging chassis, module, and port information 2-229
displaing port channels in software 2-252
displaying ACL related hardware tables 2-232
displaying ACL related software state 2-247
displaying CAM related hardware tables 2-235
displaying CPU and memory utilization 2-242
displaying currently enabled log features 2-243
displaying entries in the hardware MAC address table 2-236
displaying events in CPU related software tables 2-248
displaying hardware multicast expansion table (MET) table entries 2-237
displaying information from the most recent crash 2-231
displaying memory of an address 2-244
displaying MRQ registers 2-239
displaying NVRAM environment variables 2-245
displaying QoS related hardware tables 2-240
displaying the actual hardware spanning tree (STP) state for the VLAN and interface 2-241
displaying the contents of the Layer 3 forwarding memory 2-234
displaying the mapping between front panel interfaces and internal port numbering schemes 2-246
Simple Network Management Protocol
single-character patterns
special characters 1-7
slaveslot0
displaying information about the file system on the standby supervisor 2-272
slot0
displaying information about the slot0
file system 2-274
SMF
debugging address insertions and deletions 2-40
SNMP
debugging spanning tree activities 2-41
software MAC filter
SPAN commands
configuring a SPAN session to monitor 2-111
displaying hardware SPAN state 2-238
displaying SPAN session information 2-225
displaying SPAN software tables 2-251
Spanning Tree Protocol
special characters
anchoring, table 1-10
sticky-ARP
disabling on PVLANs 2-101
enabling on PVLANs 2-101
STP
configuring link type for a port 2-305
debugging all activities 2-41
debugging spanning tree activities 2-41
debugging spanning tree BackboneFast events 2-42
debugging spanning tree UplinkFast 2-45
displaying active interfaces only 2-276
displaying BackboneFast status 2-276
displaying bridge status and configuration 2-276
displaying default path cost method 2-276
displaying spanning tree debug messages 2-41
displaying status information 2-276
displaying status per VLAN 2-276
displaying summary of interface information 2-276
displaying UplinkFast status 2-276
enabling BPDU filtering by default on all PortFast ports 2-320
enabling BPDU filtering on an interface 2-298
enabling BPDU guard as a default on all PortFast ports in global configuration mode 2-322
enabling BPDU guard on an interface 2-300
enabling detection of STP misconfiguration and displaying an error message 2-302
enabling extended system ID on chassis that support 4095 MAC addresses 2-303
enabling loop guard as a default for all ports on a bridge 2-306
enabling loopguard as a default on all ports 2-306
enabling PortFast as default on all access ports 2-323
enabling PortFast mode, where the interface is put into the forwarding state upon linkup without waiting for the timer to expire 2-318
enabling root guard 2-304
enabling spanning tree BackboneFast 2-297
enabling spanning tree on a per VLAN basist 2-327
enabling spanning tree UplinkFast 2-325
set an interface priority when two bridges compete for position as the root bridge 2-324
setting default spanning tree pathcost calculation method 2-317
setting path cost on an interface for spanning tree calculations. 2-301
subinterface configuration mode, summary 1-6
SVI
creating a Layer 3 interface on a VLAN 2-78
switchport 2-344
switchport interfaces
displaying administrative and operational status of a Layer 3 switching port 2-183
switch shim
debugging 2-43
disabling debugging 2-43
switch virtual interface
sw-vlan 2-46
system prompts 1-5
T
Tab key
command completion 1-1
tables
characters with special meaning 1-7
mac access-list extended subcommands 2-103
match syntax description 2-8
multipliers 1-9
relationship between duplex and speed commands 2-330
show vlan command output fields 2-293
show vtp command output fields 2-295
special characters 1-9
special characters used for anchoring 1-10
speed command options 2-329
TAC
displaying iinformation that is useful to TAC when they are working on a problem you have reported 2-285
TCAM
debugging spanning tree activities 2-41
temperature readings
displaying information 2-160
trunk interfaces
displaying trunk nterfaces information 2-185
TX queues
allocating bandwidth 2-349
returning to default values 2-349
setting priority to high 2-349
specifying burst size 2-349
specifying traffic rate 2-349
U
UDLD
enabling UDLD by default on all fiber interfaces.aggressive or normal mode 2-351
enabling UDLD on an individual interface 2-353
preventing a fiber interface from being enabled 2-353
resetting all ports shutdown by UDLD 2-355
setting the message timer 2-351
Unidirectional Link Detection protocol
user EXEC mode, summary 1-5
username
setting password and privilege level 2-356
V
VACLs
applying VLAN access maps 2-365
displaying VLAN access map information 2-291
specifying drop or forward action in a VLAN access map 2-2
specifying the match clause by selecting one or more ACLs for a VLAN access-map sequence 2-110
using a VLAN filter 2-365
VLAN
configuring a specific VLAN in configuration mode 2-359
displaying CEF information 2-190
displaying CEF next-hop information 2-190
displaying information on dynamically learned and manually configured VLAN switch interfaces 2-198
displaying Layer 2 VLAN information 2-288
displaying statistical information 2-223
displaying VLAN information 2-290
entering VLAN configuration mode 2-363
VLAN Access Control Lists (VACLs)
VLAN access map
VLAN database
resetting 2-146
VLAN debugging
limiting VLAN output for debugging
disabling debugging 2-27
VLAN manager
debugging 2-46
disabling debugging 2-46
IOS file system error tests
debugging 2-47
disabling debugging 2-47
VLANs
clearing the hardware logic 2-12
entering VLAN configuration mode 2-363
Voice VLANs
enabling voice VLANs 2-332
VTP
configuring the administrative domain name 2-368
configuring the device in VTP client mode 2-367
configuring the device in VTP server mode 2-371
configuring the device in VTP transparent mode 2-372
creating a VTP domain password 2-369
displaying domain information 2-294
displaying statistics information 2-294
enabling pruning in the VLAN database 2-370
enabling VTP version 2 mode 2-373
modifying the VTP configuration storage file name 2-366
VTP protocol code
activating debug messages 2-50
deactivating debug messages 2-50