Table Of Contents
Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V -
index
Symbols
$ matches the end of a string 1-7
( ) in commands 1-11
* matches 0 or more sequences of a pattern 1-7
+ matches 1 or more sequences of a pattern 1-7
. matches any single character 1-7
? command 1-1
? matches 0 or 1 occurrence of a pattern 1-7
^ matches the beginning of a string 1-7
_ matches a comma (,), left brace ({), left parenthesis 1-7
" 1-10
Numerics
802.1s Multiple Spanning Tree
see MST
802.1x Authentication
See 802.1x Port Based Authentication
802.1x Port Based Authentication
allowing multiple hosts on a port 2-65
debugging 802.1x Port Based Authentication 2-33
displaying port based authentication 2-175
enabling authentication on the system 2-70
enabling manual control of the authorization state on a port 2-66
enabling periodic re-authentication of the client 2-69
initializing manually a re-authentication of all dot1x ports 2-68
initializing state machines 2-63
setting maximum number of times to send EAP requests 2-64
A
abbreviating commands
context-sensitive help 1-1
access lists
clearing an access template 2-15
See also ACLs, MAC ACLs, and VACLs
access maps
applying with VLAN filter 2-383
ACLs
using ACL name naming conventions in a MAC ACL 2-117
acronyms, list of A-1
action clause
specifying drop or forward action in a VACL 2-2
adjacency
debugging the adjacency table 2-27
disabling the debug facility 2-27
displaying IPC table entries 2-27
displaying table information 2-167
aggregate policer
displaying information 2-264
aging time
displaying MAC address aging time 2-235
MAC address table 2-120
alarms
displaying operational status 2-178
alternation
description 1-10
anchoring
description 1-10
AppleTalk
See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1
audience xiii
authentication
setting username 2-373
using an MD5-type encryption method 2-373
verifying MD5 signature 2-375
verifying the checksum for Flash memory file system 2-375
authorization state of a controlled port 2-66
B
Baby Giants
displaying the system MTU setting 2-287
setting the maximum Layer 2 payload size 2-358
BackboneFast
displaying debugging messages 2-51
displaying spanning tree status 2-280
enabling debugging 2-51
BOOT environment variable
displaying information 2-171
bootflash
displaying information 2-169
BPDUs
debugging spanning tree activities 2-50
bridge protocol data units
See BPDUs
C
Catalyst 4507R power redundancy mode 2-139
Catalyst 4507R power supply 2-137
CEF
displaying next-hop information 2-209
displaying VLAN configuration information 2-209
characters
used for searching command output 1-7
Cisco Express Forwarding (CEF)
See CEF
clear commands
clearing Gigabit Ethernet interfaces 2-13
clearing IGMP group cache entries 2-17
clearing interface counters 2-11
clearing IP access lists 2-15
clearing MFIB counters and routes 2-19
clearing MFIB fastdrop entries 2-20
clearing PAgP channel information 2-23
clearing QoS aggregate counters 2-24
clearing VLAN interfaces 2-14
CLI string search
anchoring 1-10
expressions 1-7
filtering 1-6
multiple-character patterns 1-8
multipliers 1-9
parentheses for recall 1-11
searching outputs 1-6
single-character patterns 1-7
using 1-6
command modes
accessing privileged EXEC mode 1-5
exiting 1-5
understanding user EXEC and configuration modes 1-5
condition interface
debugging interface-related activities 2-29
condition vlan
debugging VLAN output 2-32
configuration, saving 1-11
configuring
root as secondary 2-323
configuring a SPAN session to monitor 2-125
configuring forward delay 2-319
configuring root as primary 2-323
CoS QoS default
defining value on an interface 2-150
Cost of Service (CoS)
See QoS CoS
counters
clearing interface counters 2-11
D
DBL
displaying qos dbl 2-265
enabling DBL globally on the switch 2-151
debug commands
debugging backup events 2-28
debugging DHCP snooping events 2-38
debugging DHCP snooping messages 2-39
debugging EtherChannel/PAgP/shim 2-34
debugging IPC activity 2-37
debugging NVRAM activities 2-42
debugging PAgP activities 2-43
debugging port manager activities 2-46
debugging software MAC filter updates 2-49
debugging spanning tree activities 2-50
debugging spanning tree backbonefast 2-51
debugging spanning tree uplinkfast 2-54
debugging supervisor redundancy 2-48
debugging VLAN manager activities 2-55
displaying monitor activity 2-41
displaying the adjacency table 2-27
enabling debug dot1x 2-33
enabling debugging messages that trace the activation and deactivation of ISL VLAN IDs 2-58
enabling debugging messages to be generatd by VTP 2-59
enabling debugging of UDLD activity 2-60
enabling switch shim debugging 2-52
enabling VLAN manager IOS file system error tests 2-56
limiting debugging output for a specific VLAN 2-32
limiting interface debugging output 2-29
limiting output for debugging standby state changes 2-30
taking shortcut to debug condition interface 2-36
debugging
activity monitoring 2-41
DHCP snooping events 2-38
DHCP snooping packets 2-39
IPC activities 2-37
NVRAM activities 2-42
PAgP activities 2-43
PAgP shim 2-34
PM activities 2-46
SMF address insertions and deletions 2-49
spanning tree BackboneFast events 2-51
spanning tree switch shim 2-52
spanning tree UplinkFast events 2-54
VLAN manager activities 2-55
VLAN manager IOS file system error tests 2-56
VTP protocol debug messages 2-59
debug spanning tree switch 2-52
debug sw-vlan vtp 2-59
default CoS value 2-150
default form of a command, using 1-6
defining egress DSCP-to-CoS mapping 2-155
DHCP snooping
displaying 2-210
displaying binding table 2-211
enabling DHCP globally 2-89
enabling on a VLAN 2-93
enabling option 82 2-90
enabling rate limiting on an interface 2-91
enabling trust on an interface 2-92
diagnostics
displaying Power-ON-SELF-Test (POST) results and online diagnostics 2-173
displaying inline power status 2-260
displaying monitoring activity 2-41
displaying SPAN session information 2-251
document conventions xiv
document organization xiii
duplex mode
configuring autonegotiation on an interface 2-73
configuring full duplex on an interface 2-73
configuring half duplex on an interface 2-73
Dynamic Buffer Limiting (DBL)
See DBL
Dynamic Host Configuration Protocol (DHCP)
See DHCP snooping
E
EAP
restarting authentication process based on number of times switch sends frames 2-64
enabling debugging for UDLD 2-60
enabling voice VLANs 2-340
environmental
alarms 2-178
displaying information 2-178
status 2-178
temperature 2-178
error disable detection
displaying disable detection status 2-181
enabling error disable detection 2-75
error-disabled state
displaying 2-200
error disable recovery
configuring recovery mechanism variables 2-76
displaying recovery timer information 2-182
specifying recovery cause 2-76
EtherChannel
assigning interfaces to EtherChannel groups 2-5
debugging EtherChannel 2-34
debugging PAgP shim 2-34
debugging spanning tree activities 2-50
displaying information for a channel 2-183
removing interfaces from EtherChannel groups 2-5
EtherChannel guard
enabling detection of STP misconfiguration and displaying an error message 2-310
expressions
matching multiple expression occurrences 1-9
multiple-character patterns 1-8
multiplying pattern occurrence 1-11
single-character patterns 1-7
Extensible Authentication Protocol (EAP)
See EAP
F
field replaceable unit (FRU)
displaying status information 2-178
Flash memory file system
displaying file system information 2-169
verifying checksum 2-375
flow control
configuring a gigabit interface to send or receive pause frames 2-78
displaying per-interface status and statistics related to flow control 2-187
G
Gigabit Ethernet interface
clearing the hardware logic 2-13
global configuration mode
using this command mode 1-5
H
hardware Layer 3 switching
displaying adjacency table information 2-167
hardware module
resetting a module by turning the power off and then on 2-81
hot standby protocol
debugging 2-30
disabling debugging 2-30
limiting output 2-30
I
IDPROMs
displaying Serial Electrically Erasable Programmable Read Only Memory information for the chassis, supervisor engine, module, power supplies, fan trays, clock module, and mux buffer 2-189
IGMP
applying filters with a profile to control which hosts on a Layer 2 interface can join one or more IP multicast groups 2-96
clearing IGMP group cache entries 2-17
configuring frequency that the switch sends IGMP host-query messages 2-99
creating an IGMP profile 2-98
displaying IGMP interface status and configuration information 2-216
setting maximum group numbers 2-97
IGMP profiles
displaying 2-217
IGMP snooping
configuring a Layer 2 interface as a member of a group 2-109
configuring a static VLANn interface 2-109
configuring statically a Layer 2 interface as a multicast router interface for a VLAN 2-107
displaying multicast information on dynamically learned and manually configured switch interfaces 2-218
displaying VLAN information 2-219
enabling IGMP snooping 2-101
enabling IGMP snooping immediate-leave processing 2-106
enabling IGMP snooping on a VLAN 2-105
informs, enabling 2-303
inline power
displaying inline power status 2-260
interface configuration mode, summary 1-5
interfaces
creating an interface-range macro 2-62
debugging output of interface related activities 2-29
displaying broadcast suppression discard counts 2-195
displaying description 2-197
displaying error counters 2-195
displaying error-disabled state 2-200
displaying status 2-197
displaying traffic for a specific interface 2-193
displaying trunk counters 2-195
executing a command on multiple ports in a range 2-85
setting the interface type 2-344
interface speed
configuring interface speed 2-337
Internet Group Management Protocol
See IGMP
IPC
debugging IPC activities 2-37
IP DHCP Snooping
See DHCP snooping
IP multicast
displaying multicast routing table information 2-223
IPX
See Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.1
J
Jumbo frames
enabling jumbo frames 2-127
L
LACP
deselecting channeling protocol 2-7
enabling LACP on an interface 2-7
setting channeling protocol 2-7
setting system priority 2-116
setting the lacp system-priority 2-116
Layer 2 interface type
specifying a nontrunking, nontagged single VLAN Layer 2 interface 2-344
specifying a trunking VLAN Layer 2 interface 2-344
Layer 2 switching
enabling voice VLANs 2-340
modifying switching characteristics 2-340
Layer 2 traceroute
IP addresses 2-362
Layer 3 switching
displaying administrative and operational status of a Layer 3 switching port 2-202
M
MAC Access Control Lists
See MAC ACLs
MAC ACLs
define extended MAC access list 2-117
displaying MAC ACL information 2-294
naming an ACL 2-117
MAC address filtering
configuring 2-121
disabling 2-121
enabling 2-121
MAC address table
adding static entries 2-123
clearing dynamic entries 2-22
configuring aging time 2-120
displaying dynamic table entry information 2-237
displaying entry count 2-236
displaying information 2-233
displaying interface-based information 2-239
displaying multicast information 2-241
displaying protocol-based information 2-243
displaying static table entry information 2-245
displaying the MAC address aging time 2-235
displaying VLAN-based information 2-247
removing static entries 2-123
MAC address tables
adding static entries 2-121
disabling IGMP snooping on static MAC addresses 2-121
removing static entries 2-121
mac-address-table static 2-121
MAC address unicast filtering
dropping unicast traffic for a MAC 2-121
mapping secondary VLANs to MST instance 2-144
mapping VLAN(s) to an MST instance 2-82
match subcommand
accessing 2-9
maximum transmission unit (MTU)
displaying the system MTU setting 2-287
setting the maximum Layer 2 payload size 2-358
MD5
verifying MD5 signature 2-375
message digest 5
See MD5
MFIB
clearing ip mfib counters 2-19
clearing ip mfib fastdrop 2-20
displaying all active MFIB routes 2-220
displaying MFIB fastdrop table entries 2-222
enabling IP MFIB fastdrops 2-111
modes
See command modes
module reset
resetting a module by turning the power off and then on 2-81
--More-- prompt
filter 1-6
search 1-7
MST
designating the primary and secondary root 2-323
displaying MST protocol information 2-285
displaying region configuration information 2-285
displaying spanning tree information 2-285
entering MST configuration submode 2-317
setting configuration revision number 2-165
setting path cost and port priority for instances 2-316
setting the bridge priority and timer value 2-323
setting the bridge priority and timer value for the instance 2-323
setting the forward delay timer for all instances 2-319
setting the hello-time delay timer for all instances 2-320
setting the max-age timer for all instances 2-321
setting the MST region name 2-128
specifying the maximum number of hops in a region before a BPDU is discarded 2-322
switching between PVST+ and MST spanning tree modes 2-315
using the MST configuration submode name command 2-128
using the MST configuration submode revision command 2-165
MTU
displaying global MTU settings 2-287
Multicast Forwarding Information Base (MFIB)
See MFIB
multiple-character patterns 1-8
multiple hosts on authorized port 2-65
Multiple Spanning Tree (MST)
see MST
N
NetFlow
clearing statistics 2-16
enabling NetFlow statistics 2-112
specifying the period of time before flows should timeout 2-95
next-hop
displaying CEF VLAN information 2-209
no form of a command, using 1-6
NVRAM
debugging NVRAM activities 2-42
P
paging prompt
see --More-- prompt
PAgP
clearing port channel information 2-23
debugging PAgP activity 2-43
deselecting channeling protocol 2-7
displaying port channel information 2-253
hot standby mode
returning to defaults 2-130
selecting ports 2-130
input interface of incoming packets
learning 2-129
returning to defaults 2-129
setting channeling protocol 2-7
parentheses 1-11
password
establishing enhanced password security 2-373
setting username 2-373
PBR
displaying route maps
redistributing route maps
PM activities
debugging 2-46
disabling debugging 2-46
Policy Based Routing (PBR)
See PBR
Port Aggregation Protocol
See (PAgP)
port-based authentication
debug messages, display 2-33
enabling 802.1X 2-66
manual control of authorization state 2-66
multiple hosts on authorized port 2-65
periodic re-authentication
enabling 2-69
re-authenticating 802.1X-enabled ports 2-68
statistics and status display 2-175
switch-to-client frame-retransmission number 2-64
port channel
displaying information 2-253
load distribution method
resetting to defaults 2-133
setting 2-133
port-channel
accessing 2-84
creating 2-84
port range
executing 2-85
Port Security
debugging ports security 2-47
port security
enabling 2-346
POST
See Power-On-Self-Test
Power-ON-SELF-Test (POST) results and online diagnostics
displaying diagnostics 2-173
power status
displaying 2-260
displaying inline power 2-260
displaying power status 2-260
power supply
configuring combined and redundant power on the Catalyst 4507R 2-137
configuring the power redundancy mode on the Catalyst 4507R 2-139
display power status 2-260
display Serial Electrically Erasable Programmable Read Only Memory (SEEPROM) 2-189
setting inline power state 2-135
Private VLAN
See PVLANs
privileged EXEC mode, summary 1-5
prompts
system 1-5
PVLANs
configuring isolated and primary PVLANs 2-140
disabling sticky-ARP 2-113
displaying map information for VLAN SVIs 2-199
displaying PVLAN information 2-297
enabling interface configuration mode 2-344
enabling sticky-ARP 2-113
mapping a primary and secondary VLAN to the same SVI 2-142
specifying host ports 2-344
specifying promiscuous ports 2-344
PVLAN trunk
setting trunk characteristics in interface trunk mode 2-355
Q
QoS
accessing the QoS policy map configuration mode to configure a QoS policy map 2-131
attaching a policy-map to an interface 2-166
clearing global and per interface aggregate QoS counters 2-24
defining a named aggregate policer for use in policy maps 2-147
defining default CoS value on an interface 2-150
defining the ingress CoS-to-DSCP mapping for trusted interfaces 2-154
displaying aggregate policer information 2-264
displaying class maps information 2-172
displaying policy map information 2-255
displaying QoS information 2-263
displaying QoS map information 2-267
displaying queue information 2-266
displaying statistics and configurations of input and output policies attached to an interface 2-256
enabling per-VLAN QoS for a Layer 2 interface 2-160
enabling QoS global configuration mode on the switch 2-145
enabling QoS on an interface 2-146
mapping DSCP values to selected transmit queues 2-155
mapping egress DSCP-to-CoS 2-155
mapping the DSCP-to-CoS value 2-155
setting the mapping of policed DSCP values to marked down DSCP values 2-157
setting the QoS trust state on an interface 2-158
QoS CoS
defining default CoS value on an interface 2-150
qos dbl 2-151
question command 1-1
R
re-authenticating 802.1X-enabled ports 2-68
re-authentication
periodic 2-69
redundancy
changing from active to standby supervisor engine 2-162
displaying information 2-269
displaying redundancy facility information 2-269
displaying RF client list 2-269
displaying RF operational counters 2-269
displaying RF states 2-269
enabling automatic synchronization of the configuration files in NVRAM 2-4
entering main CPU mode to manually synchronize the configurations on the two supervisor engines 2-123
entering redundancy configuration mode to access main CPU 2-161
forcing switchover to standby supervisor engine 2-162
synchronizing automatically the primary and secondary route processor configurations 2-123
related documentation xiii
resetting PVLAN trunk
setting switchport in interface configuration mode to trunk 2-344
ROM monitor mode,
summary 1-6
root guard
displaying root inconsistency status 2-280
Route Processor Redundancy (RPR)
See redundancy
S
saving configuration changes 1-11
secure ports, limitations 2-347
show commands
filtering parameters 1-7
searching and filtering 1-6
show ip flow export command 2-214
show platform commands
troubleshooting a problem 1-11
show port security command 2-258
Simple Network Management Protocol
See SNMP
single-character patterns
special characters 1-7
slaveslot0
displaying information about the file system on the standby supervisor 2-276
slot0
displaying information about the slot0
file system 2-278
SMF
debugging address insertions and deletions 2-49
SNMP
debugging spanning tree activities 2-50
informs
disabling 2-303
enabling 2-303
traps
disabling 2-303
enabling 2-303
software MAC filter
See SMF
SPAN commands
configuring a SPAN session to monitor 2-125
displaying SPAN session information 2-251
Spanning Tree Protocol
See STP
special characters
anchoring, table 1-10
sticky-ARP
disabling on PVLANs 2-113
enabling on PVLANs 2-113
STP
configuring link type for a port 2-313
debugging all activities 2-50
debugging spanning tree activities 2-50
debugging spanning tree BackboneFast events 2-51
debugging spanning tree UplinkFast 2-54
displaying active interfaces only 2-280
displaying BackboneFast status 2-280
displaying bridge status and configuration 2-280
displaying default path cost method 2-280
displaying spanning tree debug messages 2-50
displaying status information 2-280
displaying status per VLAN 2-280
displaying summary of interface information 2-280
displaying UplinkFast status 2-280
enabling BPDU filtering by default on all PortFast ports 2-330
enabling BPDU filtering on an interface 2-306
enabling BPDU guard as a default on all PortFast ports in global configuration mode 2-326
enabling BPDU guard on an interface 2-308
enabling detection of STP misconfiguration and displaying an error message 2-310
enabling extended system ID on chassis that support 4095 MAC addresses 2-311
enabling loop guard as a default for all ports on a bridge 2-314
enabling loopguard as a default on all ports 2-314
enabling PortFast as default on all access ports 2-327
enabling PortFast mode, where the interface is put into the forwarding state upon linkup without waiting for the timer to expire 2-328
enabling root guard 2-312
enabling spanning tree BackboneFast 2-305
enabling spanning tree on a per VLAN basist 2-335
enabling spanning tree UplinkFast 2-333
set an interface priority when two bridges compete for position as the root bridge 2-332
setting default spanning tree pathcost calculation method 2-325
setting path cost on an interface for spanning tree calculations. 2-309
subinterface configuration mode, summary 1-6
SVI
creating a Layer 3 interface on a VLAN 2-87
switchport 2-355
switchport interfaces
displaying administrative and operational status of a Layer 3 switching port 2-202
switchport port-security aging command 2-349
switchport port-security command 2-346
switch shim
debugging 2-52
disabling debugging 2-52
switch virtual interface
See SVI
sw-vlan 2-55
system prompts 1-5
T
Tab key
command completion 1-1
tables
characters with special meaning 1-7
mac access-list extended subcommands 2-117
match syntax description 2-10
multipliers 1-9
relationship between duplex and speed commands 2-338
show ip cache flow command output fields—flow switching cache 2-206, 2-214
show ip cache flow command output fields—NetFlow activity by protocol 2-207
show vlan command output fields 2-298
show vtp command output fields 2-301
special characters 1-9
special characters used for anchoring 1-10
speed command options 2-337
TAC
displaying iinformation that is useful to TAC when they are working on a problem you have reported 2-288
TCAM
debugging spanning tree activities 2-50
temperature readings
displaying information 2-178
traps, enabling 2-303
trunk interfaces
displaying trunk nterfaces information 2-204
TX queues
allocating bandwidth 2-365
returning to default values 2-365
setting priority to high 2-365
specifying burst size 2-365
specifying traffic rate 2-365
U
UDLD
enabling UDLD by default on all fiber interfaces.aggressive or normal mode 2-367
enabling UDLD on an individual interface 2-369
preventing a fiber interface from being enabled 2-369
resetting all ports shutdown by UDLD 2-371
setting the message timer 2-367
Unidirectional Link Detection protocol
See UDLD
user EXEC mode, summary 1-5
username
setting password and privilege level 2-373
V
VACLs
applying VLAN access maps 2-383
displaying VLAN access map information 2-294
specifying drop or forward action in a VLAN access map 2-2
specifying the match clause by selecting one or more ACLs for a VLAN access-map sequence 2-124
using a VLAN filter 2-383
VLAN
configuring a specific VLAN in configuration mode 2-377
displaying CEF information 2-209
displaying CEF next-hop information 2-209
displaying information on dynamically learned and manually configured VLAN switch interfaces 2-219
displaying Layer 2 VLAN information 2-291
displaying statistical information 2-249
displaying VLAN information 2-293
entering VLAN configuration mode 2-381
VLAN Access Control Lists (VACLs)
See VACLs
VLAN access map
See VACLs
VLAN database
resetting 2-164
VLAN debugging
limiting VLAN output for debugging
disabling debugging 2-32
VLAN manager
debugging 2-55
disabling debugging 2-55
IOS file system error tests
debugging 2-56
disabling debugging 2-56
VLAN query protocol (VQPC)
debugging 2-61
VLANs
clearing
counters 2-25
clearing the hardware logic 2-14
entering VLAN configuration mode 2-381
VMPS
configuring servers 2-387
reconfirming dynamic VLAN assignments 2-385
vmps reconfirm (global configuration) command 2-384
vmps reconfirm (privileged EXEC) command 2-385
vmps retry command 2-386
vmps server command 2-387
Voice VLANs
enabling voice VLANs 2-340
VQP
per-server retry count 2-386
reconfirming dynamic VLAN assignments 2-385
VTP
configuring the administrative domain name 2-391
configuring the device in VTP client mode 2-390
configuring the device in VTP server mode 2-394
configuring the device in VTP transparent mode 2-395
creating a VTP domain password 2-392
displaying domain information 2-300
displaying statistics information 2-300
enabling pruning in the VLAN database 2-393
enabling VTP version 2 mode 2-396
modifying the VTP configuration storage file name 2-389
VTP protocol code
activating debug messages 2-59
deactivating debug messages 2-59