Catalyst 4500 Series Switch Cisco IOS Command Reference, 12.1(13)EW
Index

Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V -

index

Symbols

$ matches the end of a string 1-7

( ) in commands 1-11

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10

Numerics

802.1s Multiple Spanning Tree

see MST

802.1x Authentication

See 802.1x Port Based Authentication

802.1x Port Based Authentication

allowing multiple hosts on a port 2-65

debugging 802.1x Port Based Authentication 2-33

displaying port based authentication 2-175

enabling authentication on the system 2-70

enabling manual control of the authorization state on a port 2-66

enabling periodic re-authentication of the client 2-69

initializing manually a re-authentication of all dot1x ports 2-68

initializing state machines 2-63

setting maximum number of times to send EAP requests 2-64

A

abbreviating commands

context-sensitive help 1-1

access lists

clearing an access template 2-15

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-383

ACLs

using ACL name naming conventions in a MAC ACL 2-117

acronyms, list of A-1

action clause

specifying drop or forward action in a VACL 2-2

adjacency

debugging the adjacency table 2-27

disabling the debug facility 2-27

displaying IPC table entries 2-27

displaying table information 2-167

aggregate policer

displaying information 2-264

aging time

displaying MAC address aging time 2-235

MAC address table 2-120

alarms

displaying operational status 2-178

alternation

description 1-10

anchoring

description 1-10

AppleTalk

See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1

audience xiii

authentication

setting username 2-373

using an MD5-type encryption method 2-373

verifying MD5 signature 2-375

verifying the checksum for Flash memory file system 2-375

authorization state of a controlled port 2-66

B

Baby Giants

displaying the system MTU setting 2-287

setting the maximum Layer 2 payload size 2-358

BackboneFast

displaying debugging messages 2-51

displaying spanning tree status 2-280

enabling debugging 2-51

BOOT environment variable

displaying information 2-171

bootflash

displaying information 2-169

BPDUs

debugging spanning tree activities 2-50

bridge protocol data units

See BPDUs

C

Catalyst 4507R power redundancy mode 2-139

Catalyst 4507R power supply 2-137

CEF

displaying next-hop information 2-209

displaying VLAN configuration information 2-209

characters

used for searching command output 1-7

Cisco Express Forwarding (CEF)

See CEF

clear commands

clearing Gigabit Ethernet interfaces 2-13

clearing IGMP group cache entries 2-17

clearing interface counters 2-11

clearing IP access lists 2-15

clearing MFIB counters and routes 2-19

clearing MFIB fastdrop entries 2-20

clearing PAgP channel information 2-23

clearing QoS aggregate counters 2-24

clearing VLAN interfaces 2-14

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-11

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-5

exiting 1-5

understanding user EXEC and configuration modes 1-5

condition interface

debugging interface-related activities 2-29

condition vlan

debugging VLAN output 2-32

configuration, saving 1-11

configuring

root as secondary 2-323

configuring a SPAN session to monitor 2-125

configuring forward delay 2-319

configuring root as primary 2-323

CoS QoS default

defining value on an interface 2-150

Cost of Service (CoS)

See QoS CoS

counters

clearing interface counters 2-11

D

DBL

displaying qos dbl 2-265

enabling DBL globally on the switch 2-151

debug commands

debugging backup events 2-28

debugging DHCP snooping events 2-38

debugging DHCP snooping messages 2-39

debugging EtherChannel/PAgP/shim 2-34

debugging IPC activity 2-37

debugging NVRAM activities 2-42

debugging PAgP activities 2-43

debugging port manager activities 2-46

debugging software MAC filter updates 2-49

debugging spanning tree activities 2-50

debugging spanning tree backbonefast 2-51

debugging spanning tree uplinkfast 2-54

debugging supervisor redundancy 2-48

debugging VLAN manager activities 2-55

displaying monitor activity 2-41

displaying the adjacency table 2-27

enabling debug dot1x 2-33

enabling debugging messages that trace the activation and deactivation of ISL VLAN IDs 2-58

enabling debugging messages to be generatd by VTP 2-59

enabling debugging of UDLD activity 2-60

enabling switch shim debugging 2-52

enabling VLAN manager IOS file system error tests 2-56

limiting debugging output for a specific VLAN 2-32

limiting interface debugging output 2-29

limiting output for debugging standby state changes 2-30

taking shortcut to debug condition interface 2-36

debugging

activity monitoring 2-41

DHCP snooping events 2-38

DHCP snooping packets 2-39

IPC activities 2-37

NVRAM activities 2-42

PAgP activities 2-43

PAgP shim 2-34

PM activities 2-46

SMF address insertions and deletions 2-49

spanning tree BackboneFast events 2-51

spanning tree switch shim 2-52

spanning tree UplinkFast events 2-54

VLAN manager activities 2-55

VLAN manager IOS file system error tests 2-56

VTP protocol debug messages 2-59

debug spanning tree switch 2-52

debug sw-vlan vtp 2-59

default CoS value 2-150

default form of a command, using 1-6

defining egress DSCP-to-CoS mapping 2-155

DHCP snooping

displaying 2-210

displaying binding table 2-211

enabling DHCP globally 2-89

enabling on a VLAN 2-93

enabling option 82 2-90

enabling rate limiting on an interface 2-91

enabling trust on an interface 2-92

diagnostics

displaying Power-ON-SELF-Test (POST) results and online diagnostics 2-173

displaying inline power status 2-260

displaying monitoring activity 2-41

displaying SPAN session information 2-251

document conventions xiv

document organization xiii

duplex mode

configuring autonegotiation on an interface 2-73

configuring full duplex on an interface 2-73

configuring half duplex on an interface 2-73

Dynamic Buffer Limiting (DBL)

See DBL

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

E

EAP

restarting authentication process based on number of times switch sends frames 2-64

enabling debugging for UDLD 2-60

enabling voice VLANs 2-340

environmental

alarms 2-178

displaying information 2-178

status 2-178

temperature 2-178

error disable detection

displaying disable detection status 2-181

enabling error disable detection 2-75

error-disabled state

displaying 2-200

error disable recovery

configuring recovery mechanism variables 2-76

displaying recovery timer information 2-182

specifying recovery cause 2-76

EtherChannel

assigning interfaces to EtherChannel groups 2-5

debugging EtherChannel 2-34

debugging PAgP shim 2-34

debugging spanning tree activities 2-50

displaying information for a channel 2-183

removing interfaces from EtherChannel groups 2-5

EtherChannel guard

enabling detection of STP misconfiguration and displaying an error message 2-310

expressions

matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-11

single-character patterns 1-7

Extensible Authentication Protocol (EAP)

See EAP

F

field replaceable unit (FRU)

displaying status information 2-178

Flash memory file system

displaying file system information 2-169

verifying checksum 2-375

flow control

configuring a gigabit interface to send or receive pause frames 2-78

displaying per-interface status and statistics related to flow control 2-187

G

Gigabit Ethernet interface

clearing the hardware logic 2-13

global configuration mode

using this command mode 1-5

H

hardware Layer 3 switching

displaying adjacency table information 2-167

hardware module

resetting a module by turning the power off and then on 2-81

hot standby protocol

debugging 2-30

disabling debugging 2-30

limiting output 2-30

I

IDPROMs

displaying Serial Electrically Erasable Programmable Read Only Memory information for the chassis, supervisor engine, module, power supplies, fan trays, clock module, and mux buffer 2-189

IGMP

applying filters with a profile to control which hosts on a Layer 2 interface can join one or more IP multicast groups 2-96

clearing IGMP group cache entries 2-17

configuring frequency that the switch sends IGMP host-query messages 2-99

creating an IGMP profile 2-98

displaying IGMP interface status and configuration information 2-216

setting maximum group numbers 2-97

IGMP profiles

displaying 2-217

IGMP snooping

configuring a Layer 2 interface as a member of a group 2-109

configuring a static VLANn interface 2-109

configuring statically a Layer 2 interface as a multicast router interface for a VLAN 2-107

displaying multicast information on dynamically learned and manually configured switch interfaces 2-218

displaying VLAN information 2-219

enabling IGMP snooping 2-101

enabling IGMP snooping immediate-leave processing 2-106

enabling IGMP snooping on a VLAN 2-105

informs, enabling 2-303

inline power

displaying inline power status 2-260

interface configuration mode, summary 1-5

interfaces

creating an interface-range macro 2-62

debugging output of interface related activities 2-29

displaying broadcast suppression discard counts 2-195

displaying description 2-197

displaying error counters 2-195

displaying error-disabled state 2-200

displaying status 2-197

displaying traffic for a specific interface 2-193

displaying trunk counters 2-195

executing a command on multiple ports in a range 2-85

setting the interface type 2-344

interface speed

configuring interface speed 2-337

Internet Group Management Protocol

See IGMP

IPC

debugging IPC activities 2-37

IP DHCP Snooping

See DHCP snooping

IP multicast

displaying multicast routing table information 2-223

IPX

See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1

J

Jumbo frames

enabling jumbo frames 2-127

L

LACP

deselecting channeling protocol 2-7

enabling LACP on an interface 2-7

setting channeling protocol 2-7

setting system priority 2-116

setting the lacp system-priority 2-116

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN Layer 2 interface 2-344

specifying a trunking VLAN Layer 2 interface 2-344

Layer 2 switching

enabling voice VLANs 2-340

modifying switching characteristics 2-340

Layer 2 traceroute

IP addresses 2-362

Layer 3 switching

displaying administrative and operational status of a Layer 3 switching port 2-202

M

MAC Access Control Lists

See MAC ACLs

MAC ACLs

define extended MAC access list 2-117

displaying MAC ACL information 2-294

naming an ACL 2-117

MAC address filtering

configuring 2-121

disabling 2-121

enabling 2-121

MAC address table

adding static entries 2-123

clearing dynamic entries 2-22

configuring aging time 2-120

displaying dynamic table entry information 2-237

displaying entry count 2-236

displaying information 2-233

displaying interface-based information 2-239

displaying multicast information 2-241

displaying protocol-based information 2-243

displaying static table entry information 2-245

displaying the MAC address aging time 2-235

displaying VLAN-based information 2-247

removing static entries 2-123

MAC address tables

adding static entries 2-121

disabling IGMP snooping on static MAC addresses 2-121

removing static entries 2-121

mac-address-table static 2-121

MAC address unicast filtering

dropping unicast traffic for a MAC 2-121

mapping secondary VLANs to MST instance 2-144

mapping VLAN(s) to an MST instance 2-82

match subcommand

accessing 2-9

maximum transmission unit (MTU)

displaying the system MTU setting 2-287

setting the maximum Layer 2 payload size 2-358

MD5

verifying MD5 signature 2-375

message digest 5

See MD5

MFIB

clearing ip mfib counters 2-19

clearing ip mfib fastdrop 2-20

displaying all active MFIB routes 2-220

displaying MFIB fastdrop table entries 2-222

enabling IP MFIB fastdrops 2-111

modes

See command modes

module reset

resetting a module by turning the power off and then on 2-81

--More-- prompt

filter 1-6

search 1-7

MST

designating the primary and secondary root 2-323

displaying MST protocol information 2-285

displaying region configuration information 2-285

displaying spanning tree information 2-285

entering MST configuration submode 2-317

setting configuration revision number 2-165

setting path cost and port priority for instances 2-316

setting the bridge priority and timer value 2-323

setting the bridge priority and timer value for the instance 2-323

setting the forward delay timer for all instances 2-319

setting the hello-time delay timer for all instances 2-320

setting the max-age timer for all instances 2-321

setting the MST region name 2-128

specifying the maximum number of hops in a region before a BPDU is discarded 2-322

switching between PVST+ and MST spanning tree modes 2-315

using the MST configuration submode name command 2-128

using the MST configuration submode revision command 2-165

MTU

displaying global MTU settings 2-287

Multicast Forwarding Information Base (MFIB)

See MFIB

multiple-character patterns 1-8

multiple hosts on authorized port 2-65

Multiple Spanning Tree (MST)

see MST

N

NetFlow

clearing statistics 2-16

enabling NetFlow statistics 2-112

specifying the period of time before flows should timeout 2-95

next-hop

displaying CEF VLAN information 2-209

no form of a command, using 1-6

NVRAM

debugging NVRAM activities 2-42

P

paging prompt

see --More-- prompt

PAgP

clearing port channel information 2-23

debugging PAgP activity 2-43

deselecting channeling protocol 2-7

displaying port channel information 2-253

hot standby mode

returning to defaults 2-130

selecting ports 2-130

input interface of incoming packets

learning 2-129

returning to defaults 2-129

setting channeling protocol 2-7

parentheses 1-11

password

establishing enhanced password security 2-373

setting username 2-373

PBR

displaying route maps

redistributing route maps

PM activities

debugging 2-46

disabling debugging 2-46

Policy Based Routing (PBR)

See PBR

Port Aggregation Protocol

See (PAgP)

port-based authentication

debug messages, display 2-33

enabling 802.1X 2-66

manual control of authorization state 2-66

multiple hosts on authorized port 2-65

periodic re-authentication

enabling 2-69

re-authenticating 802.1X-enabled ports 2-68

statistics and status display 2-175

switch-to-client frame-retransmission number 2-64

port channel

displaying information 2-253

load distribution method

resetting to defaults 2-133

setting 2-133

port-channel

accessing 2-84

creating 2-84

port range

executing 2-85

Port Security

debugging ports security 2-47

port security

enabling 2-346

POST

See Power-On-Self-Test

Power-ON-SELF-Test (POST) results and online diagnostics

displaying diagnostics 2-173

power status

displaying 2-260

displaying inline power 2-260

displaying power status 2-260

power supply

configuring combined and redundant power on the Catalyst 4507R 2-137

configuring the power redundancy mode on the Catalyst 4507R 2-139

display power status 2-260

display Serial Electrically Erasable Programmable Read Only Memory (SEEPROM) 2-189

setting inline power state 2-135

Private VLAN

See PVLANs

privileged EXEC mode, summary 1-5

prompts

system 1-5

PVLANs

configuring isolated and primary PVLANs 2-140

disabling sticky-ARP 2-113

displaying map information for VLAN SVIs 2-199

displaying PVLAN information 2-297

enabling interface configuration mode 2-344

enabling sticky-ARP 2-113

mapping a primary and secondary VLAN to the same SVI 2-142

specifying host ports 2-344

specifying promiscuous ports 2-344

PVLAN trunk

setting trunk characteristics in interface trunk mode 2-355

Q

QoS

accessing the QoS policy map configuration mode to configure a QoS policy map 2-131

attaching a policy-map to an interface 2-166

clearing global and per interface aggregate QoS counters 2-24

defining a named aggregate policer for use in policy maps 2-147

defining default CoS value on an interface 2-150

defining the ingress CoS-to-DSCP mapping for trusted interfaces 2-154

displaying aggregate policer information 2-264

displaying class maps information 2-172

displaying policy map information 2-255

displaying QoS information 2-263

displaying QoS map information 2-267

displaying queue information 2-266

displaying statistics and configurations of input and output policies attached to an interface 2-256

enabling per-VLAN QoS for a Layer 2 interface 2-160

enabling QoS global configuration mode on the switch 2-145

enabling QoS on an interface 2-146

mapping DSCP values to selected transmit queues 2-155

mapping egress DSCP-to-CoS 2-155

mapping the DSCP-to-CoS value 2-155

setting the mapping of policed DSCP values to marked down DSCP values 2-157

setting the QoS trust state on an interface 2-158

QoS CoS

defining default CoS value on an interface 2-150

qos dbl 2-151

question command 1-1

R

re-authenticating 802.1X-enabled ports 2-68

re-authentication

periodic 2-69

redundancy

changing from active to standby supervisor engine 2-162

displaying information 2-269

displaying redundancy facility information 2-269

displaying RF client list 2-269

displaying RF operational counters 2-269

displaying RF states 2-269

enabling automatic synchronization of the configuration files in NVRAM 2-4

entering main CPU mode to manually synchronize the configurations on the two supervisor engines 2-123

entering redundancy configuration mode to access main CPU 2-161

forcing switchover to standby supervisor engine 2-162

synchronizing automatically the primary and secondary route processor configurations 2-123

related documentation xiii

resetting PVLAN trunk

setting switchport in interface configuration mode to trunk 2-344

ROM monitor mode,

summary 1-6

root guard

displaying root inconsistency status 2-280

Route Processor Redundancy (RPR)

See redundancy

S

saving configuration changes 1-11

secure ports, limitations 2-347

show commands

filtering parameters 1-7

searching and filtering 1-6

show ip flow export command 2-214

show platform commands

troubleshooting a problem 1-11

show port security command 2-258

Simple Network Management Protocol

See SNMP

single-character patterns

special characters 1-7

slaveslot0

displaying information about the file system on the standby supervisor 2-276

slot0

displaying information about the slot0

file system 2-278

SMF

debugging address insertions and deletions 2-49

SNMP

debugging spanning tree activities 2-50

informs

disabling 2-303

enabling 2-303

traps

disabling 2-303

enabling 2-303

software MAC filter

See SMF

SPAN commands

configuring a SPAN session to monitor 2-125

displaying SPAN session information 2-251

Spanning Tree Protocol

See STP

special characters

anchoring, table 1-10

sticky-ARP

disabling on PVLANs 2-113

enabling on PVLANs 2-113

STP

configuring link type for a port 2-313

debugging all activities 2-50

debugging spanning tree activities 2-50

debugging spanning tree BackboneFast events 2-51

debugging spanning tree UplinkFast 2-54

displaying active interfaces only 2-280

displaying BackboneFast status 2-280

displaying bridge status and configuration 2-280

displaying default path cost method 2-280

displaying spanning tree debug messages 2-50

displaying status information 2-280

displaying status per VLAN 2-280

displaying summary of interface information 2-280

displaying UplinkFast status 2-280

enabling BPDU filtering by default on all PortFast ports 2-330

enabling BPDU filtering on an interface 2-306

enabling BPDU guard as a default on all PortFast ports in global configuration mode 2-326

enabling BPDU guard on an interface 2-308

enabling detection of STP misconfiguration and displaying an error message 2-310

enabling extended system ID on chassis that support 4095 MAC addresses 2-311

enabling loop guard as a default for all ports on a bridge 2-314

enabling loopguard as a default on all ports 2-314

enabling PortFast as default on all access ports 2-327

enabling PortFast mode, where the interface is put into the forwarding state upon linkup without waiting for the timer to expire 2-328

enabling root guard 2-312

enabling spanning tree BackboneFast 2-305

enabling spanning tree on a per VLAN basist 2-335

enabling spanning tree UplinkFast 2-333

set an interface priority when two bridges compete for position as the root bridge 2-332

setting default spanning tree pathcost calculation method 2-325

setting path cost on an interface for spanning tree calculations. 2-309

subinterface configuration mode, summary 1-6

SVI

creating a Layer 3 interface on a VLAN 2-87

switchport 2-355

switchport interfaces

displaying administrative and operational status of a Layer 3 switching port 2-202

switchport port-security aging command 2-349

switchport port-security command 2-346

switch shim

debugging 2-52

disabling debugging 2-52

switch virtual interface

See SVI

sw-vlan 2-55

system prompts 1-5

T

Tab key

command completion 1-1

tables

characters with special meaning 1-7

mac access-list extended subcommands 2-117

match syntax description 2-10

multipliers 1-9

relationship between duplex and speed commands 2-338

show ip cache flow command output fields—flow switching cache 2-206, 2-214

show ip cache flow command output fields—NetFlow activity by protocol 2-207

show vlan command output fields 2-298

show vtp command output fields 2-301

special characters 1-9

special characters used for anchoring 1-10

speed command options 2-337

TAC

displaying iinformation that is useful to TAC when they are working on a problem you have reported 2-288

TCAM

debugging spanning tree activities 2-50

temperature readings

displaying information 2-178

traps, enabling 2-303

trunk interfaces

displaying trunk nterfaces information 2-204

TX queues

allocating bandwidth 2-365

returning to default values 2-365

setting priority to high 2-365

specifying burst size 2-365

specifying traffic rate 2-365

U

UDLD

enabling UDLD by default on all fiber interfaces.aggressive or normal mode 2-367

enabling UDLD on an individual interface 2-369

preventing a fiber interface from being enabled 2-369

resetting all ports shutdown by UDLD 2-371

setting the message timer 2-367

Unidirectional Link Detection protocol

See UDLD

user EXEC mode, summary 1-5

username

setting password and privilege level 2-373

V

VACLs

applying VLAN access maps 2-383

displaying VLAN access map information 2-294

specifying drop or forward action in a VLAN access map 2-2

specifying the match clause by selecting one or more ACLs for a VLAN access-map sequence 2-124

using a VLAN filter 2-383

VLAN

configuring a specific VLAN in configuration mode 2-377

displaying CEF information 2-209

displaying CEF next-hop information 2-209

displaying information on dynamically learned and manually configured VLAN switch interfaces 2-219

displaying Layer 2 VLAN information 2-291

displaying statistical information 2-249

displaying VLAN information 2-293

entering VLAN configuration mode 2-381

VLAN Access Control Lists (VACLs)

See VACLs

VLAN access map

See VACLs

VLAN database

resetting 2-164

VLAN debugging

limiting VLAN output for debugging

disabling debugging 2-32

VLAN manager

debugging 2-55

disabling debugging 2-55

IOS file system error tests

debugging 2-56

disabling debugging 2-56

VLAN query protocol (VQPC)

debugging 2-61

VLANs

clearing

counters 2-25

clearing the hardware logic 2-14

entering VLAN configuration mode 2-381

VMPS

configuring servers 2-387

reconfirming dynamic VLAN assignments 2-385

vmps reconfirm (global configuration) command 2-384

vmps reconfirm (privileged EXEC) command 2-385

vmps retry command 2-386

vmps server command 2-387

Voice VLANs

enabling voice VLANs 2-340

VQP

per-server retry count 2-386

reconfirming dynamic VLAN assignments 2-385

VTP

configuring the administrative domain name 2-391

configuring the device in VTP client mode 2-390

configuring the device in VTP server mode 2-394

configuring the device in VTP transparent mode 2-395

creating a VTP domain password 2-392

displaying domain information 2-300

displaying statistics information 2-300

enabling pruning in the VLAN database 2-393

enabling VTP version 2 mode 2-396

modifying the VTP configuration storage file name 2-389

VTP protocol code

activating debug messages 2-59

deactivating debug messages 2-59