Table Of Contents
2set logging history
Use the set logging history command to set the size of the syslog history table.
set logging history syslog_history_table_size
Syntax Description
Defaults
This command has no default setting.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the size of the syslog history table to 400:
Console> (enable) set logging history 400System logging history table size set to <400>.Console> (enable)Related Commands
set logging level
Use the set logging level command to set the facility and severity level used when logging system messages.
set logging level facility severity [default]
Syntax Description
facility
Value for the type of system messages to capture. Facility types are shown in Table 2-3.
severity
Value for the severity level of system messages to capture. Severity level definitions are shown in Table 2-4.
default
(Optional) Keyword that specifies the logging level to apply to all sessions. If default is not used, the specified logging level applies only to the current session.
Defaults
The switches ship with the following default configuration:
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the default system message logging severity level for the SNMP facility:
Console> (enable) set logging level snmp 2 defaultSystem logging facility <snmp> set to severity 2(critical).Console> (enable)Related Commands
show logging
show logging bufferset logging server
Use the set logging server command to enable and disable system message logging to configured syslog servers and to add a syslog server to the system logging server table.
set logging server {enable | disable}
set logging server ip_addr
set logging server facility server_facility_parameter
set logging server severity server_severity_level
Syntax Description
enable
Keyword that specifies to enable system message logging to configured syslog servers.
disable
Keyword that specifies to disable system message logging to configured syslog servers.
ip_addr
IP address of the syslog server to be added to the configuration. An IP alias or a host name that can be resolved through DNS can also be used.
facility
Keyword that specifies to set the type of system messages to capture.
server_facility_parameter
Value that specifies the logging facility of syslog server; valid values are local0, local1, local2, local3, local4, local5, local6, local7, and syslog.
severity
Keyword to set the severity level of system messages to capture.
server_severity_level
Value that specifies the severity level of system messages to capture; valid values are 0 through 7. Severity level definitions are shown in Table 2-4.
Defaults
By default, no syslog servers are configured to receive system messages.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to enable system message logging to the console:
Console> (enable) set logging server enableSystem logging messages will be sent to the configured syslog servers.Console> (enable)This example shows how to add a syslog server to the system logging server table:
Console> (enable) set logging server 192.168.255.255192.168.255.255 added to the System logging server table.Console> (enable)This example shows how to set the syslog server facility to local7:
Console> (enable) set logging server facility local7System logging server facility set to <local7>Console> (enable)This example shows how to set the syslog server severity level to 4:
Console> (enable) set logging server severity 4System logging server severity set to <4>Console> (enable)This example shows how to set the syslog history table size to 400:
Console> (enable) set logging history 400System logging history table size set to <400>Console> (enable)Related Commands
clear logging server
show loggingset logging session
Use the set logging session command to enable or disable the sending of system logging messages to the current login session.
set logging session {enable | disable}
Syntax Description
Defaults
By default, system message logging to the current login session is enabled.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to prevent system logging messages from being sent to the current login session:
Console> (enable) set logging session disableSystem logging messages will not be sent to the current login session.Console> (enable)This example shows how to cause system logging messages to be sent to the current login session:
Console> (enable) set logging session enableSystem logging messages will be sent to the current login session.Console> (enable)Related Commands
set logging buffer
set logging level
show logging
show logging bufferset logging timestamp
Use the set logging timestamp command to enable or disable the timestamp display on system logging messages.
set logging timestamp {enable | disable}
Syntax Description
enable
Keyword that specifies to enable the timestamp display.
disable
Keyword that specifies to disable the timestamp display.
Defaults
By default, system message logging timestamp is enabled.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to enable the timestamp display:
Console> (enable) set logging timestamp enableSystem logging messages timestamp will be enabled.Console> (enable)This example shows how to disable the timestamp display:
Console> (enable) set logging timestamp disableSystem logging messages timestamp will be disabled.Console> (enable)Related Commands
set logout
Use the set logout command to set the number of minutes until the system disconnects an idle session automatically.
set logout timeout
Syntax Description
timeout
Number of minutes (0 to 10,000) until the system disconnects an idle session automatically. Setting the value to 0 disables the automatic disconnection of idle sessions.
Defaults
The default value is 20 minutes.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the number of minutes until the system disconnects an idle session automatically:
Console> (enable) set logout 20Sessions will be automatically logged out after 20 minutes of idle time.Console> (enable)This example shows how to disable the automatic disconnection of idle sessions:
Console> (enable) set logout 0Sessions will not be automatically logged out.Console> (enable)set mls
Use the set mls command to enable and disable IP or IPX MLS on the switch.
set mls {enable | disable} {ip | ipx}
Syntax Description
Defaults
By default, IP MLS is enabled and IPX MLS is disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.
If you do not specify the ip or ipx keyword, ip is assumed.
Examples
This example shows how to disable IP MLS on the switch:
Console> (enable) set mls disable ipIP Multilayer switching is disabled.Console> (enable)This example shows how to enable IPX MLS on the switch:
Console> (enable) set mls enable ipxIPX Multilayer switching is enabledConsole> (enable)Related Commands
set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rpset mls agingtime
Use the set mls agingtime command to configure the IP and IPX MLS entry aging time.
set mls agingtime {ip | ipx} agingtime
Syntax Description
ip
Keyword that specifies IP MLS agingtime.
ipx
Keyword that specifies IPX MLS agingtime.
agingtime
(Optional) Aging time of MLS entries, in seconds.
Defaults
The default MLS entry aging time is set to 256 seconds.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.
If you do not specify the ip or ipx keyword, ip is assumed.
The agingtime must be specified as a multiple of 8 seconds in the range of 8 to 2024 seconds. If you enter a value for agingtime that is not a multiple of 8 seconds, the value is adjusted to the closest one. For example, 65 is adjusted to 64, while 127 is adjusted to 128.
Examples
This example shows how to set the IP MLS aging time to 512 seconds:
Console>(enable) set mls agingtime 512IP Multilayer switching aging time set to 512 seconds.Console> (enable)Related Commands
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
set mls agingtime fast
show mls rpset mls agingtime fast
Use the set mls agingtime fast command to specify the MLS aging time of shortcuts to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created.
set mls agingtime fast fastagingtime pkt_threshold
Syntax Description
Defaults
The default fastagingtime is 0, no fast aging. The default pkt_threshold is 0.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
This command is not available for IPX MLS.
When you set the fastagingtime value, it can be configured as multiples of 8 to any value in the range of 0 to 128 seconds.
The default pkt_threshold is 0. It can be configured as one of the 0, 1, 3, 7, 15, 31, 63, and 127 (the values picked for efficient aging). If fastagingtime is not configured exactly the same among these values, it is adjusted to the closest one. A typical value for fastagingtime and pkt_threshold is 32 seconds and 0 packet, respectively (it means no packet switched within 32 seconds after the entry created).
Agingtime applies to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created. A typical example is the MLS entry destined to or sourced from a DNS or TFTP server. This entry may never be used again after it is created. For example, only one request goes to a server and one reply returns from the server, and then the connection is closed.
The fastagingtime option is used to purge entries associated with very short flows, such as DNS and TFTP.
We recommend that you keep the number of MLS entries in the MLS cache below 32K. If the number of MLS entries is more than 32K, some flows (less than 1 percent) are sent to the router.
To keep the number of MLS cache entries below 32K, decrease the aging time. Aging time can be decreased up to 8 seconds. If your switch has a lot of short flows that are used by only a few packets, then you can use fast aging.
If cache entries continue to exceed 32K, decrease the normal aging time in 64-second increments from the 256-second default.
Examples
This example shows how to use the set mls agingtime fast command to set the agingtime:
Console>(enable) set mls agingtime fast 32 0Multilayer switching fast aging time set to 32 seconds for entries with no more than 0 packet switched.Console> (enable)Related Commands
set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statisticsset mls flow
Use the set mls flow command to specify the minimum flow mask used for MLS. This command is needed to collect statistics for the supervisor engine module.
set mls flow {destination | destination-source | full}
CautionUse this command carefully. This command purges all existing shortcuts and affects the number of active shortcuts. This command can increase the cache usage and increase the load on the router.
Caution
Caution
Syntax Description
Defaults
If there are no access lists on any MLS-RP, the flow mask is set to destination flow.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
This command specifies the minimum MLS flow mask. Depending on the MLS-RP configuration, the actual flow mask used might be more specific than the specified minimum flow mask. For example, if you configure the minimum flow mask to destination-source, but an MLS-RP interface is configured with IP extended access lists, the actual flow mask used will be full.
If you configure a more specific flow mask (for example, destination-source or full), the number of active flow entries increases. To limit the number of active flow entries, you might need to decrease the MLS aging time.
This command is intended to be used for gathering very detailed statistics at the protocol port level; for example, when NetFlow data is exported to an RMON2 probe.
Examples
These examples show how to specify that only expired flows to subnet 171.69.194.0 are exported:
Console> (enable) set mls flow destinationConfigured flow mask is set to destination flow.Console> (enable)Console> (enable) set mls flow destination-sourceConfigured flow mask is set to destination-source flow.Console> (enable)Console> (enable) set mls flow fullConfigured flow mask is set to full flow.Console> (enable)Related Commands
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
set mls agingtimeset mls include
Use the set mls include command to specify routers to add to the IP MLS-RP include list.
set mls include {ip | ipx} ip_addr1 [ip_addr2...]
Syntax Description
Defaults
If a Catalyst 5000 family RSM or RSFC is installed in the switch, it is added to the MLS-RP include list automatically.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.
If you do not specify the ip or ipx keyword, ip is assumed.
You must use the IP address or DNS host name of the router to add to the IP or IPX MLS-RP include list. You cannot specify the router IPX address.
You can specify the IP addresses of multiple MLS-RPs on the same command line. Up to 16 MLS-RPs can be selected to participate in MLS.
The switch does not process MLSP messages from routers that are not in the MLS-RP include list.
Examples
This example shows how to add a router to the IP MLS-RP include list:
Console> (enable) set mls include ip 172.170.2.1IP Multilayer switching is enabled for router 172.170.2.1Console> (enable)This example shows how to add a router to the IPX MLS-RP include list:
Console> (enable) set mls include ipx 172.170.2.1IPX Multilayer switching is enabled for router 172.170.2.1Console> (enable)Related Commands
set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statisticsset mls multicast
Use the set mls multicast command to enable and disable IP multicast MLS on the switch.
set mls multicast {enable | disable}
Syntax Description
enable
Keyword that specifies to enable IP multicast MLS on the switch.
disable
Keyword that specifies to disable IP multicast MLS on the switch.
Defaults
The default is that IP multicast MLS is disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.
You must enable one of the Layer 2 multicast protocols (CGMP, IGMP snooping, or GMRP) on the switch before you enable IP multicast MLS.
Examples
This example shows how to enable IP multicast MLS on the switch:
Console> (enable) set mls multicast enableMultilayer switching for Multicast is enabled for this device.Console> (enable)Related Commands
show mls multicast entry
set mls multicast include
clear mls multicast include
clear mls multicast statisticsset mls multicast include
Use the set mls multicast include command to specify routers to add to the IP MMLS-RP include list.
set mls multicast include ip_addr
Syntax Description
Defaults
The default is no routers are in the IP MMLS-RP include list.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches.
You can specify only one router IP address at a time. You can configure a maximum of two internal or directly attached participating routers.
The switch does not process MLSP messages from routers that are not in the MMLS-RP include list.
Examples
This example shows how to add a router to the MMLS-RP include list:
Console> (enable) set mls multicast include 172.170.2.1Multilayer switching enabled for router 172.170.2.1Console> (enable)Related Commands
show mls multicast entry
clear mls multicast include
clear mls multicast statistics
clear mls ndeset mls nde
Use the set mls nde command to enable and disable NDE on the switch and to configure the switch to export statistics to the specified collector.
set mls nde {disable | enable}
set mls nde {collector_ip} {udp_port_num}
set mls nde flow [destination ip_addr_spec] [source ip_addr_spec] [protocol protocol]
[src-port port_number] [dst-port port_number]Syntax Description
Defaults
All expired flows are exported until the filter is specified explicitly.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
Before you use the set mls nde command for the first time, you must configure the host to collect the MLS statistics. The host name and UDP port number are saved in NVRAM, and you do not need to specify them. If you specify a host name and UDP port, values in NVRAM overwrite the old values. Collector's values in NVRAM do not clear when NDE is disabled; this command configures the collector, but does not enable NDE automatically.
The set mls nde enable command enables NDE, exporting statistics to the preconfigured collector.
The set mls nde flow command adds filtering to the NDE. Expired flows matching the specified criteria are exported. These values are stored in NVRAM. They are not cleared when NDE is disabled. If any option is not specified in this command, it is treated as a wildcard. The NDE filter in NVRAM does not clear when NDE is disabled.
Use the following syntax to specify an IP subnet address:
•
•
•
If the protocol value is not set to TCP or UDP, we recommend you set the dst_port and src_port values to 0; otherwise, no flows will be displayed.
Examples
These examples show how to use the set mls nde command set to configure NDE:
Console> (enable) set mls nde Stargate 120Netflow data export not enabled.Netflow data export to port 120 on 172.20.15.1(Stargate)Console> (enable)Console>(enable) set mls nde enableNetflow data export enabled.Netflow data export to port 120 on 172.20.15.1 (Stargate)Console> (enable)Console> (enable) set mls nde disabledNetflow data export disabled.Console> (enable)Console> (enable) set mls nde flow destination 171.69.194.140/24Netflow data export: destination filter set to 171.69.194.0/24Console> (enable)Console> (enable) set mls nde flow destination 171.69.194.140Netflow data export: destination filter set to 171.69.194.140/32Console> (enable)Console>(enable) set mls nde flow destination 171.69.194.140/24 source 171.69.173.5/24Netflow data export: destination filter set to 171.69.194.0/24Netflow data export: source filter set to 171.69.173.0/24Console>(enable)console> (enable) set mls nde flow source 171.69.194.140 protocol 51Netflow data export: source filter set to 171.69.194.140/32Netflow data export: protocol filter set to 51.Console> (enable)Console>(enable) set mls nde flow dst-port 23Netflow data export: destination port filter set to 23.Console>(enable)Console>(enable) set mls nde flow source 171.69.194.140 dst-port 23Netflow data export: destination port filter set to 23Netflow data export: source filter set to 171.69.194.140/32Console>(enable)Related Commands
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statistics
set mls agingtime
set mls agingtime fastset mls statistics protocol
Use the set mls statistics protocol command to specify protocols and ports for which to gather MLS statistics.
set mls statistics protocol protocol port
Syntax Description
Defaults
The default is no protocols are specified for statistics collection.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported by the Catalyst 5000 family switches and the Catalyst 2926G series switches.
You can configure a maximum of 64 ports on which to collect protocol statistics. Use the show mls statistics command to view MLS statistics for the specified protocols.
Examples
This example shows how to specify a protocol and port for which to gather MLS statistics:
Console>(enable) set mls statistics protocol 17 1934Protocol 17 port 1934 is added to protocol statistics list.Console> (enable)Related Commands
set module disable
Use the set module disable command to disable a module.
set module disable mod_num
Syntax Description
Defaults
The default configuration has all modules enabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
Avoid disabling a module when you are connected through a Telnet session; if you disable the module that contains the port through which your Telnet session was established, you will disconnect your Telnet session.
If there are no other network connections to the switch, you must connect to the switch through the console port to reenable the module.
Examples
This example shows how to disable module 3 when connected through the console port:
Console> (enable) set module disable 3Module 3 disabled.Console> (enable)This example shows how to disable module 2 when connected through a Telnet session:
Console> (enable) set module disable 2This command may disconnect your telnet session.Do you want to continue (y/n) [n]? yModule 2 disabled.Related Commands
set module enable
Use the set module enable command to enable a module.
set module enable mod_num
Syntax Description
Defaults
The default setting has all modules enabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If an individual port on a module was previously disabled, enabling the module does not enable the disabled port.
Examples
This example shows how to enable module 2:
Console> (enable) set module enable 2Module 2 enabled.Console> (enable)Related Commands
set module name
Use the set module name command to set the name for a module.
set module name mod_num [mod_name]
Syntax Description
Defaults
The default configuration has no module names configured for any modules.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If you do not specify a mod_name value, any previously specified name is cleared.
Module names configured using the set module name command are displayed in the output of the show module command and other commands.
Examples
This example shows how to set the name for module 1 to Supervisor:
Console> (enable) set module name 1 SupervisorModule name set.Console> (enable)Related Commands
set multicast router
Use the set multicast router command to manually configure a port as a multicast router port.
set multicast router mod_num/port _num
Syntax Description
Defaults
By default, no ports are configured as multicast router ports.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
When you enable CGMP or IGMP snooping, the ports to which a multicast-capable router is attached are identified automatically. The set multicast router command allows you to configure multicast router ports statically.
Examples
This example shows how to configure a multicast router port:
Console> (enable) set multicast router 3/1Port 3/1 added to multicast router port list.Console> (enable)Related Commands
clear multicast router
set cgmp
set igmp
show multicast router
show multicast group countset ntp authentication
Use the set ntp authentication command to enable or disable the NTP authentication feature.
set ntp authentication {enable | disable}
Syntax Description
enable
Keyword that specifies to enable NTP authentication.
disable
Keyword that specifies to disable NTP authentication.
Defaults
The default is NTP authentication.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to enable NTP authentication:
Console> (enable) set ntp authentication enableNTP authentication feature enabled.At least one trusted key must be set for NTP to work.Console> (enable)This example shows how to disable NTP authentication:
Console> (enable) set ntp authentication disableNTP authentication feature disabled.Console> (enable)Related Commands
set ntp broadcastclient
Use the set ntp broadcastclient command to enable or disable NTP broadcast-client mode.
set ntp broadcastclient {enable | disable}
Syntax Description
enable
Keyword that specifies to enable NTP broadcast-client mode.
disable
Keyword that specifies to disable NTP broadcast-client mode.
Defaults
The default setting for this command is disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
You can configure NTP in either broadcast-client mode or client mode. The broadcast-client mode assumes that a broadcast server, such as a router, sends time-of-day information regularly to the switch.
Examples
This example shows how to enable NTP broadcast client:
Console> (enable) set ntp broadcastclient enableNTP Broadcast Client mode enabled.Console> (enable)This example shows how to disable NTP broadcast client:
Console> (enable) set ntp broadcastclient disableNTP Broadcast Client mode disabled.Console> (enable)Related Commands
set ntp broadcastdelay
Use the set ntp broadcastdelay command to configure a time-adjustment factor so the switch can receive broadcast packets.
set ntp broadcastdelay microseconds
Syntax Description
microseconds
Estimated round-trip time, in microseconds, for NTP broadcasts. Allowable range is from 1 to 999999.
Defaults
By default, the NTP broadcast delay is set to 3000.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the NTP broadcast delay to 4000 microseconds:
Console> (enable) set ntp broadcastdelay 4000NTP broadcast delay set to 4000 microseconds.Console> (enable)Related Commands
Guest
