Table Of Contents
set qos mac-cos
set qos map
set qos policy-source
set qos router-mac
set qos wred-threshold
set radius deadtime
set radius key
set radius retransmit
set radius server
set radius timeout
set rcp username
set rgmp
set rsmautostate
set snmp access
set snmp community
set snmp extendedrmon
set snmp extendedrmon netflow
set snmp extendedrmon vlanagent
set snmp extendedrmon vlanmode
set snmp group
set snmp notify
set snmp rmon
set snmp rmonmemory
set snmp targetaddr
set snmp targetparams
set snmp trap
set snmp user
set snmp view
set span
set spantree backbonefast
set spantree bpdu-skewing
set spantree disable
set spantree enable
set spantree fwddelay
set spantree guard
set spantree hello
set spantree macreduction
set spantree maxage
set spantree multicast-address
set spantree portcost
set spantree portfast
set spantree portfast bpdu-filter
set spantree portfast bpdu-guard
set spantree portpri
set spantree portstate
set spantree portvlancost
set spantree portvlanpri
2
set qos mac-cos
Use the set qos mac-cos command to map a CoS value to a MAC address and VLAN pair.
set qos mac-cos dest_mac vlan cos
Syntax Description
dest_mac
|
MAC address of the destination host.
|
vlan
|
Number of the VLAN; valid values are from 1 to 1001.
|
cos
|
CoS value; valid values are from 0 to 7, with the higher numbers representing higher priority.
|
Defaults
This command has no default settings.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported only on Supervisor Engine II G or III G, or Supervisor Engine III.
The set qos mac-cos command creates a permanent CAM entry that remains in the CAM table until the active supervisor is reset.
The port associated with the MAC address is learned when the first packet with this source MAC address is received. These entries are not aged out.
If you enter the show cam command, entries made with the set qos mac-cos command are displayed as dynamic. Entries made using the set qos mac-cos command do not age out.
Examples
This example shows how to map a CoS value to a MAC address and VLAN:
Console> (enable) set qos mac-cos 0f-ab-12-12-00-13 2 3
CoS 3 is assigned to 0f-ab-12-12-00-13 vlan 2.
Related Commands
clear qos mac-cos
show qos mac-cos
set qos map
Use the set qos map command to associate CoS values to a transmit queue and drop threshold.
set qos map port_type q# threshold# cos coslist
Syntax Description
port_type
|
1q4t is the only valid port type.
|
q#
|
Transmit queue number.
|
threshold#
|
Drop threshold number. The higher the threshold number, the lower the chance traffic will be dropped.
|
cos coslist
|
Keyword and variable to specify the CoS values; valid values are from 0 to 7, with the higher numbers indicating higher priority.
|
Defaults
The default mappings are:
•
CoS value-to-drop threshold mapping
–
Drop threshold 1: CoS 0-1
–
Drop threshold 2: CoS 2-3
–
Drop threshold 3: CoS 4-5
–
Drop threshold 4: CoS 6-7
•
CoS value-to-transmit queue mapping
–
Transmit queue 1: CoS 0-7
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported on switches configured with Supervisor Engine II G or III G or Supervisor Engine III.
Only port type 1q4t is supported, which consists of one transmit queue and four drop thresholds.
Examples
This example shows how to assign the CoS values 1 and 2 to the first transmit queue and the first drop threshold for that queue on a 1q4t port (Catalyst 5000 family switches):
Console> (enable) set qos map 1q4t tx 1 1 cos 1-2
Qos tx priority queue and threshold mapped to cos successfully.
This example shows how to assign the CoS values 4 through 7 to the first transmit queue and the second drop threshold for that queue on a 1q4t port (Catalyst 5000 family switches):
Console> (enable) set qos map 1q4t tx 1 2 cos 4-7
Qos tx priority queue and threshold mapped to cos successfully.
Related Commands
clear qos map
show qos info
set qos policy-source
Use the set qos policy-source command to set the QoS policy source.
set qos policy-source local | cops
Syntax Description
local
|
Keyword to set the policy source to local NVRAM configuration.
|
cops
|
Keyword to set the policy source to COPS configuration.
|
Defaults
The default is all ports are set to local.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
When you set the policy source to local, the QoS policy is taken from local configuration stored in NVRAM. If you set the policy source to local after it was set to COPS, the QoS policy reverts back to the local configuration stored in NVRAM.
When you set the policy source to COPS, all configuration that is global to the device, such as the DSCP to marked-down DSCP, is taken from policy downloaded to the PEP by the PDP. Configuration of each physical port, however, is taken from COPS only if the policy source for that port has been set to COPS.
Examples
This example shows how to set the policy source to COPS:
Console> (enable) set qos policy-source cops
QoS policy source for the switch set to COPS.
This example shows how to set the policy source to local NVRAM:
Console> (enable) set qos policy-source local
QoS policy source for the switch set to local.
This example shows the output if you attempt to set the policy source to COPS and none are available:
Console> (enable) set qos policy-source cops
QoS policy source for the switch set to COPS.
Warning: No COPS servers configured. Use the `set cops server' command
to configure COPS servers.
Related Commands
clear qos config
show qos info
show qos policy-source
set qos router-mac
Use the set qos router-mac command to specify router MAC addresses for ACE-based classification.
set qos router-mac mac_address vlan
Syntax Description
mac_address
|
MAC address contained in the packets to be filtered. You can enter this address in canonical format (00-11-33-44-55) or noncanonical format (00:11:22:33:44:55).
|
vlan
|
Number of the VLAN; valid values are from 1 to 1005.
|
Defaults
This command has no default settings.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported only on Supervisor Engine II G or III G, or Supervisor Engine III.
This command is not supported by the MLS-RP.
Use this command to specify the MAC address of a router for which to perform ACE-based classification. For IPv4 traffic destined for a router, QoS can classify packets that match an ACE by setting the IP precedence bits (in the IP TOS header) and CoS value in the frame header.
If you are using MLS, QoS can perform ACE-based classification only for traffic that is switched using MLS. ACE-based classification is performed at the switch egress port as the flow is being multilayer switched. QoS cannot perform ACE-based classification on traffic that the MLS-RP routes off the switch. QoS learns the address of the MLS-RP automatically when MLS is configured on the switch.
Examples
This example shows how to set the router MAC address on a specific VLAN:
Console> (enable) set qos router-mac 00-40-0b-30-03-48 2
Router MAC/Vlan is set for QoS.
Related Commands
clear qos router-mac
show qos mac-cos
set qos wred-threshold
Use the set qos wred-threshold command to specify the transmit queue drop thresholds on all ports in the switch.
set qos wred-threshold port_type [rx | tx] queue {q# thr1 thr2 thr3 thr4}
Syntax Description
port_type
|
Only valid value for port_type is 1q4t.
|
rx
|
(Optional) Keyword to specify input queuing. This keyword is not supported.
|
tx
|
(Optional) Keyword to specify output queuing.
|
queue
|
Keyword to specify the queue value.
|
q#
|
Number of queue. The only valid value is 1.
|
thr#
|
Value of threshold; valid values are from 1 to 100 percent.
|
Defaults
The defaults are output queuing and the threshold values are 30%, 50%, 80%, and 100%.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
This command is supported only on Supervisor Engine II G or III G, or Supervisor Engine III.
The number preceding the t letter in the port_type (1q4t) determines the number of threshold values the hardware supports. For example, with 1q4t, the number of thresholds specified is four.
The number preceding the q letter in the port_type determines the number of the queues that the hardware supports. For example, with 1q4t, the number of queues specified is one.
The transmit drop threshold percentages specified select a buffer usage level where each threshold applies.
The percentages to buffer usage level are as follows:
•
1% is a threshold when 2,044 bytes of the transmit queue buffer have been used
•
2% and 3% = 4,092 bytes have been used
•
4% through 7% = 8,188 bytes have been used
•
8% through 14% = 16,380 bytes have been used
•
15% through 28% = 32,767 bytes have been used
•
29% through 57% = 65,532 bytes have been used
•
58% through 100% = 131,068 bytes have been used
Due to the granularity of programming the hardware, the values set in hardware will be close approximations of the values provided.
Examples
This example shows how to configure the transmit queue drop thresholds:
Console> (enable) set qos wred-threshold 1q4t tx queue 1 30 50 80 100
Transmit drop thresholds for queue 1 set at 30% 50% 80% 100%
Related Commands
show qos info
set radius deadtime
Use the set radius deadtime command to set the time to skip RADIUS servers that do not reply.
set radius deadtime minutes
Syntax Description
minutes
|
The length of time a RADIUS server does not respond to an authentication request; valid values are from 0 to 1440 minutes.
|
Defaults
The default is 0 minutes.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If only one RADIUS server is configured or if all the configured servers are marked dead, deadtime will be ignored because there are no alternate servers available. By default, the deadtime will be 0 minutes, that is, the RADIUS servers will not be marked dead if they do not respond.
Examples
This example shows how to set the RADIUS deadtime to 10 minutes:
Console> (enable) set radius deadtime 10
Radius deadtime set to 10 minutes.
Related Commands
show radius
set radius key
Use the set radius key command to set the encryption and authentication for all communication between the RADIUS client and the server.
set radius key key
Syntax Description
key
|
Key to authenticate the transactions between the RADIUS client and the server.
|
Defaults
The default of the key is set to NULL.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
The key you set must be the same one as configured in the RADIUS server. All leading spaces are ignored, spaces within and at the end of the key are not ignored. Double quotes are not required even if there are spaces in the key, unless the quotes themselves are part of the key. The length of the key is limited to 65 characters. It can include any printable ASCII character except tabs.
Examples
This example shows how to set the RADIUS encryption and authentication key to Make my day:
Console> (enable) set radius key Make my day
Radius key set to Make my day.
Related Commands
show radius
set radius retransmit
Use the set radius retransmit command to specify the number of times the RADIUS servers are tried before giving up on the server.
set radius retransmit count
Syntax Description
count
|
Number of times the RADIUS servers are tried before giving up on the server; valid values are from 1 to 100.
|
Defaults
The default is two times (three attempts).
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the retransmit attempts to 3:
Console> (enable) set radius retransmit 3
Radius retransmit count set to 3.
Related Commands
show radius
set radius server
Use the set radius server command to set up the RADIUS server.
set radius server ipaddr [auth-port port] [acct-port port][primary]
Syntax Description
ipaddr
|
Number of the IP address or IP alias in dot notation a.b.c.d.
|
auth-port port
|
(Optional) Keyword and variable to specify a destination UDP port for RADIUS authentication messages.
|
acct-port port
|
(Optional) Keyword and variable to specify a destination UDP port for RADIUS accounting messages.
|
primary
|
(Optional) Keyword to specify that this server be contacted first.
|
Defaults
The default auth-port is 1812. The default acct-port is 1813.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
You can add up to three RADIUS servers.
The RADIUS server will not be used for authentication if the port number is set to 0.
Examples
This example shows how to add a primary server using an IP alias:
Console> (enable) set radius server tampa.users.com
tampa.users.com added to RADIUS server table as primary server.
Related Commands
show radius
set radius timeout
Use the set radius timeout command to set the time between retransmissions to the RADIUS server.
set radius timeout seconds
Syntax Description
seconds
|
Number of seconds to wait for a reply; valid values are from 1 to 1000 seconds.
|
Defaults
The default timeout is 5 seconds.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to set the time between retransmissions to 7 seconds:
Console> (enable) set radius timeout 7
Radius timeout set to 7 seconds.
Related Commands
show radius
set rcp username
Use the set rcp username command to specify your username for rcp file transfers.
set rcp username username
Syntax Description
username
|
Username up to 14 characters long.
|
Defaults
This command has no default settings.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
Username must be different from "root" and not a null string. The only case where rcp username is not used is for the VMPS database. For the VMPS database, an rcp VMPS username is used.
Examples
This example shows how to set the username for rcp:
Console> (enable) set rcp username jdoe
Related Commands
set vmps downloadmethod
set rgmp
Use the set rgmp command to enable or disable the RGMP feature on the switch.
set rgmp {enable | disable}
Syntax Description
enable
|
Keyword to enable RGMP on the switch.
|
disable
|
Keyword to disable RGMP on the switch.
|
Defaults
The default is RGMP is disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
RGMP is a global command. You cannot enable or disable RGMP on a per-VLAN basis.
The RGMP feature is operational only if IGMP snooping is enabled on the switch (see the set igmp command).
Examples
This example shows how to enable RGMP on the switch:
Console> (enable) set rgmp enable
This example shows how to disable RGMP on the switch:
Console> (enable) set rgmp disable
Related Commands
clear rgmp statistics
set igmp
set igmp fastleave
show rgmp group
show rgmp statistics
set rsmautostate
Use the set rsmautostate command to enable and disable line protocol state determination of the RSMs due to port state changes.
set rsmautostate {enable | disable}
Syntax Description
enable
|
Keyword to activate line protocol state determination.
|
disable
|
Keyword to deactivate line protocol state determination.
|
Defaults
The default configuration has line protocol state determination disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
When you enable rsmautostate, VLAN interfaces on the RSM are active only when there is at least one other active interface within the Catalyst 5000 family switches. This interface could be a physical end-user port, a trunk connection for which the VLAN is active, or another RSM with an equivalent VLAN interface.
This command is useful for discontinuing the advertisement of routing paths when access to them is severed (either through fault or administrative disabling).
If you disable rsmautostate, you might have to use the shutdown/no shutdown Cisco IOS command to disable and then restart the VLAN interface to bring the RSM back up.
Examples
This example shows how to enable the line protocol state determination of the RSM:
Console> (enable) set rsmautostate enable
This example shows how to disable the line protocol state determination of the RSM:
Console> (enable) set rsmautostate disable
Related Commands
show rsmautostate
set snmp access
Use the set snmp access command to define the access rights of an SNMP group with a specific security model in different security levels.
set snmp access [-hex] {groupname} {security-model {v1 | v2c}} [read [-hex] {readview}]
[write [-hex] {writeview}] [notify [-hex] {notifyview}] [volatile | nonvolatile]
set snmp access [-hex] {groupname} {security-model v3 {noauthentication | authentication
| privacy}} [read [-hex] {readview}] [write [-hex] {writeview}] [notify [-hex]
{notifyview}] [volatile | nonvolatile]
Syntax Description
-hex
|
(Optional) Keyword to display the groupname, readview, writeview, and notifyview as a hexadecimal format.
|
groupname
|
Name of the SNMP group.
|
security-model v1| v2c
|
Keywords to specify security-model v1 or v2c.
|
read readview
|
(Optional) Keyword and variable to specify the name of the view that allows you to see the MIB objects
|
write writeview
|
(Optional) Keyword and variable to specify the name of the view that allows you to configure the contents of the agent.
|
notify notifyview
|
(Optional) Keyword and variable to specify the name of the view that allows you to send a trap about MIB objects.
|
v3
|
Keyword to specify security model v3.
|
noauthentication
|
Keyword to specify the security model is not set to use the authentication protocol.
|
authentication
|
Keyword to specify the type of authentication protocol.
|
privacy
|
Keyword to specify the messages sent on behalf of the user are protected from disclosure.
|
volatile
|
(Optional) Keyword to specify that the storage type is defined as temporary memory and the content is deleted if the device is turned off.
|
nonvolatile
|
(Optional) Keyword to specify that the storage type is defined as persistent memory and the content remains after the device is power cycled.
|
Defaults
The defaults are as follows:
•
storage type is nonvolatile.
•
read readview is Internet OID space.
•
write writeview is NULL OID.
•
notify notifyview is NULL OID.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If you use special characters for groupname, readview, writeview, and notifyview (nonprintable delimiters for these parameters), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.
readview is assumed to be every object belonging to the Internet (1.3.6.1) OID space; you can use the read option to override this state.
For writeview, you must also configure write access.
For notifyview, if a view is specified, any notifications in that view are sent to all users associated with the group (an SNMP server host configuration must exist for the user).
Examples
This example shows how to set the SNMP access rights for a group:
Console> (enable) set snmp access cisco-group security-model v3 authentication
SNMP access group was set to cisco-group version v3 level authentication, readview
internet, nonvolatile.
Related Commands
clear snmp access
show snmp
set snmp community
Use the set snmp community command to set SNMP communities and associated access types.
set snmp community {read-only | read-write | read-write-all} [community_string]
Syntax Description
read-only
|
Keyword to assign read-only access to the specified SNMP community.
|
read-write
|
Keyword to assign read-write access to the specified SNMP community.
|
read-write-all
|
Keyword to assign read-write-all access to the specified SNMP community.
|
community_string
|
(Optional) Name of the SNMP community.
|
Defaults
The default configuration has the following communities and access types defined:
•
public—read-only
•
private—read-write
•
secret—read-write-all
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
There are three configurable SNMP communities, one for each access type. If you do not specify the community string, the community string configured for that access type is cleared.
Examples
This example shows how to set read-write access to the SNMP community called yappledapple:
Console> (enable) set snmp community read-write yappledapple
SNMP read-write community string set.
This example shows how to clear the community string defined for read-only access:
Console> (enable) set snmp community read-only
SNMP read-only community string cleared.
Related Commands
clear snmp community
show snmp
set snmp extendedrmon
Use the set snmp extendedrmon command to enable or disable the Network Analysis Module.
set snmp extendedrmon {enable | disable}
Syntax Description
enable
|
Keyword to enable the Network Analysis Module.
|
disable
|
Keyword to disable the Network Analysis Module.
|
Defaults
The default is enabled.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to enable the Network Analysis Module:
Console> (enable) set snmp extendedrmon enable
Snmp extended RMON module enabled
This example shows how to disable the Network Analysis Module:
Console> (enable) set snmp extendedrmon disable
Snmp extended RMON module disabled
Related Commands
show snmp
set snmp extendedrmon netflow
Use the set snmp extendedrmon netflow command to enable or disable the Network Analysis Module to receive the NDE stream from an NFFC or NFFC II and present the resulting statistics on reserved ifIndex.3000.
set snmp extendedrmon netflow {enable password | disable}
Syntax Description
enable
|
Keyword to allow the Network Analysis Module to receive the NDE stream from an NFFC or NFFC II installed in the Catalyst 5000 family switches.
|
password
|
NetFlow Monitor registration password.
|
disable
|
Keyword to prevent the Network Analysis Module from receiving the NDE stream.
|
Defaults
The default is SNMP-extended RMON NetFlow disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
To enable the NetFlow Monitor option, you must purchase a NetFlow Monitor option license from your Cisco sales representative.
The option license has a registration key and URL on it. Access the URL and enter the registration key and the MAC address of the Network Analysis Module to generate the password for your Network Analysis Module.
Examples
This example shows how to enable SNMP-extended RMON NetFlow support:
Console> (enable) set snmp extendedrmon netflow enable <password>
Snmp extended RMON netflow enabled
This example shows how to disable SNMP-extended RMON NetFlow support:
Console> (enable) set snmp extendedrmon netflow disable
Snmp extended RMON netflow disabled
Related Commands
show snmp
set snmp extendedrmon vlanagent
Use the set snmp extendedrmon vlanagent command to enable or disable the VLANagent option. If the VLANagent option is enabled, the NAM aggregates statistics by VLAN as well as by port.
set snmp extendedrmon vlanagent {enable | disable}
Syntax Description
enable
|
Keyword to activate SNMP-extended RMON VLANagent support.
|
disable
|
Keyword to deactivate SNMP-extended RMON VLANagent support.
|
Defaults
The default is SNMP-extended RMON VLANagent disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
The VLANagent creates an increased memory load on the NAM and might not be suitable for use on a heavily loaded switch or when the switch is configured to analyze a high volume of network traffic.
Examples
This example shows how to enable extended RMON VLANagent support:
Console> (enable) set snmp extendedrmon vlanagent enable
Snmp extended RMON vlanagent enabled
This example shows how to disable extended RMON VLANagent support:
Console> (enable) set snmp extendedrmon vlanagent disable
Snmp extended RMON vlanagent disabled
Related Commands
show snmp
set snmp extendedrmon vlanmode
Use the set snmp extendedrmon vlanmode command to enable or disable the VLAN monitor option. If the VLAN monitor option is enabled, the Network Analysis Module aggregates statistics by VLAN, instead of by source MAC address.
set snmp extendedrmon vlanmode {enable | disable}
Syntax Description
enable
|
Keyword that activates SNMP-extended RMON VLAN mode support.
|
disable
|
Keyword that deactivates SNMP-extended RMON VLAN mode support.
|
Defaults
The default is SNMP-extended RMON VLAN mode disabled.
Command Types
Switch command.
Command Modes
Privileged.
Examples
This example shows how to enable extended-RMON VLAN mode support:
Console> (enable) set snmp extendedrmon vlanmode enable
Snmp extended RMON vlanmode enabled
This example shows how to disable extended-RMON VLAN mode support:
Console> (enable) set snmp extendedrmon vlanmode disable
Snmp extended RMON vlanmode disabled
Related Commands
show snmp
set snmp group
Use the set snmp group command to establish the relationship between an SNMP group and a user with a specific security model.
set snmp group [-hex] {groupname} user [-hex] {username} {security-model {v1 | v2c |
v3}} [volatile | nonvolatile]
Syntax Description
-hex
|
(Optional) Keyword to display the groupname and username as a hexadecimal format.
|
groupname
|
Name of the SNMP group that defines an access control; the maximum length is 32 bytes.
|
user
|
Keyword to specify the SNMP group user name.
|
username
|
Name of the SNMP user that belongs to the SNMP group; the maximum length is 32 bytes.
|
security-model v1 | v2c | v3
|
Keywords to specify security-model v1, v2c, or v3.
|
volatile
|
(Optional) Keyword to define the storage type as temporary memory and the content is deleted if the device is turned off.
|
nonvolatile
|
(Optional) Keyword to define the storage type as persistent memory and the content remains after the device is turned off and on again.
|
Defaults
This command has no default settings.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If you use special characters for groupname or username (nonprintable delimiters for these parameters), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.
Examples
This example shows how to set the SNMP group:
Console> (enable) set snmp group cisco-group user joe security-model v3
SNMP group was set to cisco-group user joe and version v3,nonvolatile.
Related Commands
clear snmp group
show snmp group
set snmp notify
Use the set snmp notify command to set the notifyname entry in the snmpNotifyTable and the notifytag entry in the snmpTargetAddrTable.
set snmp notify [-hex] {notifyname} tag [-hex] {notifytag} [trap | inform] [volatile | nonvolatile]
Syntax Description
-hex
|
(Optional) Keyword to display notifyname and notifytag as a hexadecimal format.
|
notifyname
|
Keyword to specify a unique identifier to index the snmpNotifyTable.
|
tag
|
Keyword to specify the tag name in the taglist.
|
notifytag
|
Keyword to specify selected entries in the snmpTargetAddrTable.
|
trap
|
(Optional) Keyword to specify all messages that contain snmpv2-Trap PDUs.
|
inform
|
(Optional) Keyword to specify all messages that contain InfoRequest PDUs
|
volatile
|
(Optional) Keyword to define the storage type as temporary memory and the content is deleted if the device is turned off.
|
nonvolatile
|
(Optional) Keyword to define the storage type as persistent memory and the content remains after the device is power cycled.
|
Defaults
The default storage type is volatile and the default notify type is trap.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If you use special characters for the notifyname and notifytag (nonprintable delimiters for these parameters), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.
Examples
This example shows how to set the SNMP notify for a specific notifyname:
Console> (enable) set snmp notify hello tag world inform
SNMP notify name was set to hello with tag world notifyType inform, and storageType
nonvolatile.
Related Commands
clear snmp notify
show snmp notify
set snmp rmon
Use the set snmp rmon command to enable or disable SNMP RMON support.
set snmp rmon {enable | disable}
Syntax Description
enable
|
Keyword to activate SNMP RMON support.
|
disable
|
Keyword to deactivate SNMP RMON support.
|
Defaults
The default for RMON support is disabled.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
RMON statistics are collected on a segment basis instead of a repeater-port basis for the Catalyst 5000 family switching Ethernet modules (WS-X5020 and WS-X5223).
The RMON feature deinstalls the domains for all of the interfaces on an Ethernet module that has been removed from the system.
RMON is supported on Ethernet, Fast Ethernet, Gigabit Ethernet, and Token Ring switch ports.
When RMON is enabled, the supported RMON groups for Ethernet ports are Statistics, History, Alarms, and Events, as specified in RFC 1757. When RMON is enabled, the supported RMON groups for Token Ring ports are Mac-Layer Statistics, Promiscuous Statistics, Mac-Layer History, Promiscuous History, Ring Station Order Table, Alarms, and Events, as specified in RFC 1513 and RFC 1757.
Note
You need a separate software license to use this command. Contact Cisco Technical Assistance Center for additional information.
Examples
This example shows how to enable RMON support:
Console> (enable) set snmp rmon enable
SNMP RMON support enabled.
This example shows how to disable RMON support:
Console> (enable) set snmp rmon disable
SNMP RMON support disabled.
Related Commands
show snmp
set snmp rmonmemory
Use the set snmp rmonmemory command to set the memory usage limit in a percentage value format.
set snmp rmonmemory percentage
Syntax Description
percentage
|
Memory usage limit: valid values are 0 to 100 percent. See the "Usage Guidelines" section for additional information.
|
Defaults
The default is 85 percent.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
When you set the percentage value to 85, the RMON is not using 85 percent of memory; this value does not allow you to create new RMON entries or restore entries from the NVRAM if the memory usage exceeds 85 percent.
If you expect the device to run other sessions such as Telnet, you need to set a lower value to the memory limit. Otherwise, the new Telnet sessions may fail because there is not enough available memory.
Examples
This example shows how to set the memory usage limit:
Console> (enable) set snmp rmonmemory 90
Related Commands
show snmp rmonmemory
set snmp targetaddr
Use the set snmp targetaddr command to configure the SNMP target address entries in the snmpTargetAddressTable.
set snmp targetaddr [-hex] {addrname} param [-hex] {paramsname}{ipaddr} [udpport
{port}] [timeout {value}] [retries {value}] [volatile | nonvolatile] [taglist {[-hex] tag}]
[[-hex] tag tagvalue]
Syntax Description
-hex
|
(Optional) Keyword to display the addrname, paramsname, tag, and tagvalue as a hexadecimal format.
|
addrname
|
Arbitrary but unique name of the target agent; the maximum length is 32 bytes.
|
param
|
Keyword to specify an entry in the snmpTargetParamsTable, which provides parameters to be used when generating a message to the target; the maximum length is 32 bytes.
|
paramsname
|
Entry in the snmpTargetParamsTable; the maximum length is 32 bytes.
|
ipaddr
|
IP address of the target.
|
udpport port
|
(Optional) Keyword and variable to specify which UDP port of the target host to use.
|
timeout value
|
(Optional) Keyword and variable to specify the number of timeouts.
|
retries value
|
(Optional) Keyword and variable to specify the number of retries.
|
volatile
|
(Optional) Keyword to define the storage type as temporary memory and the content is deleted if the device is turned off.
|
nonvolatile
|
(Optional) Keyword to define the storage type as persistent memory and the content remains after the device is power cycled.
|
taglist tag
|
(Optional) Keyword and variable to specify a tag name in the taglist.
|
tag tagvalue
|
(Optional) Keyword and variable to specify the tag name.
|
Defaults
The defaults are as follows:
•
storage type is nonvolatile.
•
udpport is 162.
•
timeout is 1500.
•
retries is 3.
•
taglist is NULL.
Command Types
Switch command.
Command Modes
Privileged.
Usage Guidelines
If you use special characters for the addrname, paramsname, tag, and tagvalue (nonprintable delimiters for these parameters), you must use a hexadecimal keyword, which is one or two hexadecimal digits separated by a colon (:); for example, 00:ab:34.
The maximum tagvalue and taglist length is 255 bytes.
Examples
This example shows how to set the target address in the snmpTargetAddressTable:
Console> (enable) set snmp targetaddr foo param bar 10.1.2.4 udp 160 timeout 10 retries 3
taglist tag1 tag2 tag3
SNMP targetaddr name was set to foo with param bar ipAddr 10.1.2.4, udpport 160, timeout
10, retries 3, storageType nonvolatile with taglist tag1 tag2 tag3.
Related Commands
clear snmp targetaddr
show snmp targetaddr
set snmp targetparams
Use the set snmp targetparams command set to configure the SNMP parameters used in the snmpTargetParamsTable when generating a message to a target.
set snmp targetparams [-hex] {paramsname} user [-hex] {username} {security-model
{v1 | v2c}} {message-processing {v1 | v2c | v3}} [volatile | nonvolatile]
set snmp targetparams [-hex] {paramsname} user [-hex] {username} {security-model v3}
{message-processing v3 {noauthentication | authentication | privacy}} [volatile |
nonvolatile]
Syntax Description
-hex
|
(Optional) Keyword to display the paramsname and username as a hexadecimal format.
|
paramsname
|
A unique identifier used to index the snmpTargetParamsTable; the maximum length is 32 bytes.
|
user
|
Keyword to specify the SNMP group user name.
|
username
|
Name of the SNMP user that belongs to the SNMP group; the maximum length is 32 bytes.
|
security-model v1 | v2c
|
Keywords to specify security-model v1 or v2c.
|
message-processing v1 | v2c | v3
|
Keywords to specify the version number used by the message processing model.
|
security-model v3
|
Keywords to specify security-model v3.
|
message-processing v3
|
Keywords to specify version 3 is used by the message-processing model.
|
noauthentication
|
Keyword to specify security model is not set to use authentication protocol.
|
authentication
|
Keyword to specify the type of authentication protocol.
|
privacy
|
Keyword to specify the messages sent on behalf of the user are protected from disclosure.
|
volatile
|
(Optional) Keyword to define the storage type as temporary memory and the content is deleted if the device is turned off.
|
nonvolatile
|
(Optional) Keyword to define the storage type as persistent memory and the content remains after the device is power cycled.
|
Defaults
The default storage type is volatile.