Table Of Contents

set port auxiliaryvlan

set port broadcast

set port channel

set port cops

set port disable

set port duplex

set port enable

set port flowcontrol

set port gmrp

set port gvrp

set port host

set port inlinepower

set port jumbo

set port membership

set port name

set port negotiation

set port protocol

set port qos

set port qos cos

set port qos trust

set port qos trust-ext

set port rsvp dsbm-election

set port security

set port speed

set port trap

set port voice interface dhcp

set power redundancy

set prompt

set protocolfilter

set pvlan

set pvlan mapping

set qos

set qos acl default-action

set qos acl ip

set qos acl ipx

set qos acl mac

set qos acl map

set qos bridged-microflow-policing

set qos cos-dscp-map

set qos drop-threshold

set qos dscp-cos-map

set qos ipprec-dscp-map

set qos mac-cos

set qos map

set qos policed-dscp-map

set qos policer

set qos policy-source

set qos rsvp

set qos txq-ratio

set qos wred-threshold

set qos wrr

set radius deadtime

set radius key

set radius retransmit

set radius server

set radius timeout

2

set port auxiliaryvlan

Use the set port auxiliaryvlan command to configure the auxiliary VLAN ports.

set port auxiliaryvlan mod[/ports] {vlan | untagged | dot1p | none}

Syntax Description

mod [/ports]	Number of the module and (optional) ports.
vlan	Number of the VLAN; valid values are from 1 to 1000.
untagged	Keyword to specify the IP Phone 7960 send untagged packets without 802.1p priority.
dot1p	Keyword to specify the IP Phone 7960 send packets with 802.1p priority.
none	Keyword to specify that the switch does not send any auxiliary VLAN information in the CDP packets from that port.

Defaults

The default setting is none.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

ExamplesIf you do not specify a port, all ports are selected.The vlan option specifies that the IP Phone 7960 send packets tagged with a specific VLAN.

This example shows how to set the auxiliary VLAN port to untagged:

Console> (enable) set port auxiliaryvlan 5/7 untagged

Port 5/7 allows the connected device send and receive untagged packets and without 802.1p 
priority.

Console> (enable)

This example shows how to set the auxiliary VLAN port to dot1p:

Console> (enable) set port auxiliaryvlan 5/9 dot1p

Port 5/9 allows the connected device send and receive packets with 802.1p priority.

Console> (enable)

This example shows how to set the auxiliary VLAN port to none:

Console> (enable) set port auxiliaryvlan 5/12 none 

Port 5/12 will not allow sending CDP packets with AuxiliaryVLAN information.

Console> (enable)

This example shows how to set the auxiliary VLAN port to a specific module, port, and VLAN:

Console> (enable) set port auxiliaryvlan 2/1-3 222 

Auxiliaryvlan 222 configuration successful.

AuxiliaryVlan AuxVlanStatus Mod/Ports

------------- ------------- -------------------------

222           active        1/2,2/1-3

Console> (enable)

Related Commands

show port auxiliaryvlan

set port broadcast

Use the set port broadcast command to set the broadcast suppression for one or more ports. The broadcast threshold limits the backplane traffic received from the module.

set port broadcast mod/port threshold%

Syntax Description

mod/port	Number of the module and the port on the module.
threshold%	Percentage of total available bandwidth that can be used by broadcast traffic.

Defaults

The default is broadcast suppression is disabled (no broadcast limit).

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

Examples

This example shows how to limit broadcast traffic to 20 percent to all ports on module 4:

Console> (enable) set port broadcast 4/3 20%

Port 4/1-24 broadcast traffic limited to 20.00%.

Console> (enable) 

This example shows how to allow unlimited broadcast traffic to all ports on module 4:

Console> (enable) set port broadcast 4/3 100%

Port 4/1-24 broadcast traffic unlimited.

Console> (enable) 

Related Commands

clear port broadcast
show port broadcast

set port channel

Use the set port channel command set to configure EtherChannel on Ethernet module ports.

set port channel mod/port [admin_group]

set port channel mod/port mode {on | off | desirable | auto} [silent | non-silent]

set port channel all distribution {ip | mac} [source | destination | both]

Syntax Description

mod/port	Number of the module and the port on the module.
admin_group	(Optional) Number of administrative group; valid values are from 1 to 1024.
mode	Keyword to specify the EtherChannel mode.
on	Keyword to enable and force specified ports to channel without PAgP.
off	Keyword to prevent ports from channeling.
desirable	Keyword to set a PAgP mode that places a port into an active negotiating state, in which the port initiates negotiations with other ports by sending PAgP packets.
auto	Keyword to set a PAgP mode that places a port into a passive negotiating state, in which the port responds to PAgP packets it receives, but does not initiate PAgP packet negotiation.
silent	(Optional) Keyword to use with auto or desirable when no traffic is expected from the other device to prevent the link from being reported to STP as down.
non-silent	(Optional) Keyword to use with auto or desirable when traffic is expected from the other device.
all distribution	Keywords to apply frame distribution to all ports in the switch.
ip	Keyword to specify the frame distribution method using IP address values.
mac	Keyword to specify the frame distribution method using MAC address values.
source	(Optional) Keyword to specify the frame distribution method using source address values.
destination	(Optional) Keyword to specify the frame distribution method using destination address values.
both	(Optional) Keyword to specify the frame distribution method using source and destination address values.

Defaults

The default is EtherChannel is set to auto and silent on all module ports. The defaults for frame distribution are ip and both.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

Make sure that all ports in the channel are configured with the same port speed, duplex mode, and so forth. For more information on EtherChannel, refer to the Catalyst 6000 Family Software Configuration Guide.

With the on mode, a usable EtherChannel exists only when a port group in on mode is connected to another port group in on mode.

If you are running QoS, make sure that bundled ports are all of the same trust types and have similar queueing and drop capabilities.

Disable the port security feature on the channeled ports (see the set port security command). If you enable port security for a channeled port, the port shuts down when it receives packets with source addresses that do not match the secure address of the port.

You can configure up to eight ports on the same switch in each administrative group.

When you assign ports to an existing admin group, the original ports associated with the admin group will move to an automatically picked new admin group. You cannot add ports to the same admin group.

If you do not enter an admin_group, it means that you want to create a new administrative group with admin_group selected automatically. The next available admin_group is automatically selected.

If you do not enter the channel mode, the channel mode of the ports addressed are not modified.

The silent | non-silent parameters only apply if desirable or auto modes are entered.

If you do not specify silent or non-silent, the current setting is not affected.

Examples

This example shows how to set the channel mode to desirable:

Console> (enable) set port channel 2/2-8 mode desirable

Ports 2/2-8 channel mode set to desirable.

This example shows how to set the channel mode to auto:

Console> (enable) set port channel 2/7-8,3/1 mode auto

Ports 2/7-8,3/1 channel mode set to auto.

Console> (enable)

This example shows how to group ports 4/1 through 4 in an admin group:

Console> (enable) set port channel 4/1-4 96

Port(s) 4/1-4 are assigned to admin group 96.

Console> (enable)

This example shows the display when the port list is exceeded:

Console> (enable) set port channel 2/1-9 1

No more than 8 ports can be assigned to an admin group.

Console> (enable) 

This example shows how to disable EtherChannel on module 4, ports 4 through 6:

Console> (enable) set port channel 4/4-6 mode off

Port(s) 4/4-6 channel mode set to off.

Console> (enable) 

This example shows the display output when you assign ports to an existing admin group. This example moves ports in admin group 96 to another admin group and assigns ports 4/4 through 6 to admin group 96:

Console> (enable) set port channel 4/4-6 96

Port(s) 4/1-3 are moved to admin group 97.

Port(s) 4/4-6 are assigned to admin group 96.

Console> (enable) 

This example shows how to set the channel mode to off for ports 4/4 through 6 and assign ports 4/4 through 6 to an automatically selected admin group:

Console> (enable) set port channel 4/4-6 off

Port(s) 4/4-6 channel mode set to off.

Port(s) 4/4-6 are assigned to admin group 23.

Console> (enable) 

This example shows how to configure the EtherChannel load-balancing feature:

Console> (enable) set port channel all distribution ip destination

Channel distribution is set to ip destination.

Console> (enable) 

Related Commands

show port channel
show channel
show channel group

set port cops

Use the set port cops command to create port roles.

set port cops mod/port roles role1 [role2]...

Syntax Description

mod/port	Number of the module and the port on the module.
roles role#	Keyword and variable to specify the roles.

Defaults

The default is all ports have a default role of null string, for example, the string of length 0.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

A port may have multiple roles. You can configure a maximum of 64 total roles per switch. You can specify multiple roles in a single command.

Examples

This example shows how to create roles on a port:

Console> (enable) set port cops 3/1 roles backbone_port main_port

New role `backbone_port' created.

New role `main_port' created.

Roles added for port 3/1-4.

Console> (enable)

This example shows the display if you attempt to create a roll and exceed the maximum allowable number of roles:

Console> (enable) set port cops 3/1 roles access_port

Unable to add new role. Maximum number of roles is 64.

Console> (enable)

Related Commands

clear port cops
show port cops

set port disable

Use the set port disable command to disable a port or a range of ports.

set port disable mod/port

Syntax Description

mod/port

Number of the module and the port on the module.

Defaults

The default system configuration has all ports enabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

It takes approximately 30 seconds for this command to take effect.

Examples

This example shows how to disable a port using the set port disable command:

Console> (enable) set port disable 5/10

Port 5/10 disabled.

Console> (enable) 

Related Commands

set port enable
show port

set port duplex

Use the set port duplex command to configure the duplex type of an Ethernet port or a range of ports.

set port duplex mod/port {full | half}

Syntax Description

mod/port	Number of the module and the port on the module.
full	Keyword to specify full-duplex transmission.
half	Keyword to specify half-duplex transmission.

Defaults

The default configuration for 10-Mbps and 100-Mbps modules has all Ethernet ports set to half duplex.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You can configure Ethernet and Fast Ethernet interfaces to either full duplex or half duplex.

Gigabit ports only support full-duplex mode.

Examples

This example shows how to set port 1 on module 2 to full duplex:

Console> (enable) set port duplex 2/1 full

Port 2/1 set to full-duplex.

Console> (enable)

Related Commands

show port

set port enable

Use the set port enable command to enable a port or a range of ports.

set port enable mod/port

Syntax Description

mod/port

Number of the module and the port on the module.

Defaults

The default is all ports are enabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

It takes approximately 30 seconds for this command to take effect.

Examples

This example shows how to enable port 3 on module 2:

Console> (enable) set port enable 2/3

Port 2/3 enabled.

Console> (enable) 

Related Commands

set port disable
show port

set port flowcontrol

Use the set port flowcontrol command to configure a port to send or receive pause frames. Pause frames are special packets that signal a source to stop sending frames for a specific period of time because the buffers are full.

set port flowcontrol {mod/port} {receive | send} {off | on | desired}

Syntax Description

mod/port	Number of the module and the port on the module.
receive	Keyword to specify a port processes pause frames.
send	Keyword to specify a port sends pause frames.
off	Keyword to prevent a local port from receiving and processing pause frames from remote ports or from sending pause frames to remote ports.
on	Keyword to enable a local port to receive and process pause frames from remote ports or send pause frames to remote ports.
desired	Keyword to obtain predictable results regardless of whether a remote port is set to on, off, or desired.

Defaults

Flow-control defaults vary depending upon port speed:

•Gigabit Ethernet ports default to off for receive (Rx) and desired for transmit (Tx)

•Fast Ethernet ports default to off for receive and on for transmit

On the 24-port 100BaseFX and 48-port 10/100 BaseTX RJ-45 modules, the default is off for receive and off for send.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

When you configure the 24-port 100BaseFX and 48-port 10/100 BaseTX RJ-45 modules, you can set the receive flow control to on or off and the send flow control to off.

All Catalyst Gigabit Ethernet ports can receive and process pause frames from remote devices.

To obtain predictable results, use these guidelines:

•Use send on only when remote ports are set to receive on or receive desired.

•Use send off only when remote ports are set to receive off or receive desired.

•Use receive on only when remote ports are set to send on or send desired.

•Use send off only when remote ports are set to receive off or receive desired.

Table 2-11 describes guidelines for different configurations of the send and receive keywords.

Table 2-11 send and receive Keyword Configurations

Configuration	Description
send on	Enables a local port to send pause frames to remote ports.
send off	Prevents a local port from sending pause frames to remote ports.
send desired	Obtains predictable results whether a remote port is set to receive on, receive off, or receive desired.
receive on	Enables a local port to process pause frames that a remote port sends.
receive off	Prevents a local port from sending pause frames to remote ports.
receive desired	Obtains predictable results whether a remote port is set to send on, send off, or send desired.

Examples

This example shows how to configure port 1 of module 5 to receive and process pause frames:

Console> (enable) set port flowcontrol receive 5/1 on

Port 5/1 flow control receive administration status set to on

(port will require far end to send flowcontrol)

Console> (enable)

This example shows how to configure port 1 of module 5 to receive and process pause frames if the remote port is configured to send pause frames:

Console> (enable) set port flowcontrol receive 5/1 desired

Port 5/1 flow control receive administration status set to desired

(port will allow far end to send flowcontrol if far end supports it)

Console> (enable)

This example shows how to configure port 1 of module 5 to receive but NOT process pause frames on port 1 of module 5:

Console> (enable) set port flowcontrol receive 5/1 off

Port 5/1 flow control receive administration status set to off

(port will not allow far end to send flowcontrol)

Console> (enable)

This example shows how to configure port 1 of module 5 to send pause frames:

Console> (enable) set port flowcontrol send 5/1 on

Port 5/1 flow control send administration status set to on

(port will send flowcontrol to far end)

Console> (enable)

This example shows how to configure port 1 of module 5 to send pause frames and yield predictable results even if the remote port is set to receive off:

Console> (enable) set port flowcontrol send 5/1 desired

Port 5/1 flow control send administration status set to desired

(port will send flowcontrol to far end if far end supports it)

Console> (enable)

Related Commands

show port flowcontrol

set port gmrp

Use the set port gmrp command to enable or disable GMRP on the specified ports in all VLANs.

set port gmrp {mod/port} {enable | disable}

Syntax Description

mod/port	Number of the module and the port on the module.
enable	Keyword to enable GVRP on a specified port.
disable	Keyword to disable GVRP on a specified port.

Defaults

The default is GMRP is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

You can enter this command even when GMRP is not enabled, but the values come into effect only when you enable GMRP using the set gmrp enable command.

Examples

This example shows how to enable GMRP on module 3, port 1:

Console> (enable) set port gmrp 3/1 enable

GMRP enabled on port(s) 3/1.

GMRP feature is currently disabled on the switch.

Console> (enable)

This example shows how to disable GMRP on module 3, ports 1 through 5:

Console> (enable) set port gmrp 3/1-5 disable

GMRP disabled on port(s) 3/1-5.

Console> (enable)

Related Commands

show gmrp configuration

set port gvrp

Use the set port gvrp command to enable or disable GVRP on the specified ports in all VLANs.

set port gvrp {mod/port} {enable | disable}

Syntax Description

mod/port	Number of the module and the port on the module.
enable	Keyword to enable GVRP on a specified port.
disable	Keyword to disable GVRP on a specified port.

Defaults

The default is GVRP is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

When you enable VTP pruning, it runs on all the GVRP-disabled trunks.

To run GVRP on a trunk, you need to enable GVRP both globally on the switch and individually on the trunk.

You can configure GVRP on a port even when you globally enable GVRP. However, the port will not become a GVRP participant until you globally enable GVRP.

You can enable GVRP on an 802.1Q trunk only.

If you enter the set port gvrp command without specifying the port number, GVRP is affected globally in the switch.

Examples

This example shows how to enable GVRP on module 3, port 2:

Console> (enable) set port gvrp 3/2 enable

GVRP enabled on 3/2.

Console> (enable) 

This example shows how to disable GVRP on module 3, port 2:

Console> (enable) set port gvrp 3/2 disable

GVRP disabled on 3/2.

Console> (enable) 

This example shows what happens if you try to enable GVRP on a port that is not an 802.1Q trunk:

Console> (enable) set port gvrp 4/1 enable

Failed to set port 4/1 to GVRP enable. Port not allow GVRP.

Console> (enable) 

This example shows what happens if you try to enable GVRP on a specific port when GVRP has not first been enabled using the set gvrp command:

Console> (enable) set port gvrp 5/1 enable

GVRP enabled on port(s) 5/1.

GVRP feature is currently disabled on the switch.

Console> (enable)

Related Commands

show gvrp configuration
set gvrp
clear gvrp statistics

set port host

Use the set port host command to optimize the port configuration for a host connection.

set port host {mod/port}

Syntax Description

mod/port

Number of the module and the port on the module.

Defaults

This command has no default setting.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

The set port host command sets channel mode to off, enables spanning tree PortFast, and sets the trunk mode to off. Only an end station can accept this configuration.

Because spanning tree PortFast is enabled, you should enter the set port host command only on ports connected to a single host. Connecting hubs, concentrators, switches, and bridges to a fast-start port can cause temporary spanning tree loops.

Enable the set port host command to decrease the time it takes to start up packet forwarding.

Examples

This example shows how to optimize the port configuration for end station/host connections on ports 2/1 and 3/1:

Console> (enable) set port host 2/1,3/1

Warning: Span tree port fast start should only be enabled on ports connected to a single 
host.  Connecting hubs, concentrators, switches, bridges, etc. to a fast start port can 
cause temporary spanning tree loops.  Use with caution.

Spantree ports 2/1,3/1 fast start enabled.

Port(s) 2/1,3/1 trunk mode set to off.

Port(s) 2/1 channel mode set to off.

Console> (enable) 

Related Commands

clear port host

set port inlinepower

Use the set port inlinepower command to set the inline power mode of a port or group of ports.

set port inlinepower mod/ports {off | auto}

Syntax Description

mod/ports	Number of the module and the ports on the module.
off	Keyword to not power up the port even if an unpowered phone is connected.
auto	Keyword to power up the port only if the switching module has discovered the phone.

Defaults

The default is auto.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

If you enter this command on a port that does not support the IP phone power feature, an error message is displayed.

You can enter a single port or a range of ports, but you cannot enter the module number only.

An inline power-capable device can still be detected even if the inlinepower mode is set to off.

---

Caution Damage can occur to equipment connected to the port if you are not using a phone that can be configured for the IP phone phantom power feature.

---

Examples

This example shows how to set the inlinepower to off:

Console> (enable) set port inlinepower 2/5 off

Inline power for port 2/5 set to off.

Console> (enable) 

This example shows the output if the inlinepower feature is not supported:

Console> (enable) set port inlinepower 2/3-9 auto

Feature not supported on module 2.

		Console> (enable)

Related Commands

set inlinepower defaultallocation
show environment power
show port inlinepower

set port jumbo

Use the set port jumbo command to enable or disable the jumbo frame feature on a per-port basis.

set port jumbo {mod/port} {enable | disable}

Syntax Description

mod/port	Number of the module and the port on the module.
enable	Keyword to enable jumbo frames on a specified port.
disable	Keyword to disable jumbo frames on a specified port.

Defaults

If you enable the jumbo frame feature, the MTU size for packet acceptance is 9216 bytes for nontrunking ports.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

You can use the jumbo frame feature to transfer large frames or jumbo frames through Catalyst 6000 family switches to optimize server-to-server performance.

The jumbo frames feature is only supported on Layer 2-switched frames.

The MSFC and MSM do not support the routing of jumbo frames; if jumbo frames are sent to these routers, router performance is significantly degraded.

The GSR supports jumbo frames.

To enable the jumbo frame feature on a port, the port must meet the following conditions:

•The port must be a Gigabit Ethernet port.

•The trunking mode on the port must be set to OFF.

•The channeling mode on the port must be set to OFF.

For information on how to set the jumbo frame MTU size, contact Cisco's Technical Assistance Center (TAC) at 800 553-2447, 408 526-7209, or tac@cisco.com.

Examples

This example shows how to enable the jumbo frames feature on module 3, port 2:

Console> (enable) set port jumbo 3/2 enable

Jumbo frames enabled on port 5/3.

Console> (enable) 

This example shows how to disable the jumbo frames feature on module 3, port 2:

Console> (enable) set port jumbo 3/2 disable

Jumbo frames disabled on port 3/2.

Console> (enable) 

This example shows what happens if you try to enable the jumbo frames feature on a port that is not a Gigabit Ethernet port:

Console> (enable) set port jumbo 3/1 enable

Feature not supported on port 3/1.

Console> (enable) 

This example shows what happens if you try to enable the jumbo frames feature on a port that does not have the trunking mode set to OFF:

Console> (enable) set port jumbo 6/1 enable

Failed to enable the port jumbo frame feature on port 6/1.

The trunking mode for jumbo enabled ports must be set to off.

Console> (enable) 

This example shows what happens if you try to enable the jumbo frames feature on a port that does not have the channeling mode set to OFF:

Console> (enable) set port jumbo 6/2 enable

Failed to enable the port jumbo frame feature on port 6/2.

The channelling mode for jumbo enabled ports must be set to off.

Console> (enable) 

Related Commands

set port channel
set trunk
show port jumbo

set port membership

Use the set port membership command to set the VLAN membership assignment to a port.

set port membership mod/port {dynamic | static}

Syntax Description

mod/port	Number of the module and the port on the module.
dynamic	Keyword to specify the port become a member of dynamic VLANs.
static	Keyword to specify the port become a member of static VLANs.

Defaults

This command has no default setting.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the port membership VLAN assignment to dynamic:

Console> (enable) set port membership 5/5 dynamic

Port 5/5 vlan assignment set to dynamic.

Spantree port fast start option enabled for ports 5/5.

Console> (enable) 

This example shows how to set the port membership VLAN assignment to static:

Console> (enable) set port membership 5/5 static

Port 5/5 vlan assignment set to static.

Console> (enable) 

Related Commands

set vlan
set vlan mapping
set pvlan
set pvlan mapping

set port name

Use the set port name command to configure a name for a port.

set port name mod/port [port_name]

Syntax Description

mod/port	Number of the module and the port on the module.
port_name	(Optional) Name of the module.

Defaults

The default is no port name is configured for any port.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

If you do not specify the name string, the port name is cleared.

Examples

This example shows how to set port 1 on module 4 to Snowy:

Console> (enable) set port name 4/1 Snowy

Port 4/1 name set.

Console> (enable) 

Related Commands

show port

set port negotiation

Use the set port negotiation command to enable or disable the link negotiation protocol on the specified port.

set port negotiation mod/port {enable | disable}

Syntax Description

mod/port	Number of the module and the port on the module.
enable	Keyword to enable the link negotiation protocol.
disable	Keyword to disable the link negotiation protocol.

Defaults

The default is link negotiation protocol is enabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The set port negotiation command is supported on 1000Base (SX, LX, and ZX) modules only.

If the port does not support this command, the following message appears:

Feature not supported on Port N/N.

where N/N is the module and port number.

When you enable link negotiation, the system autonegotiates flow control, duplex mode, and remote fault information.

You must either enable or disable link negotiation on both ends of the link. Both ends of the link must be set to the same value or the link cannot connect.

Examples

This example shows how to disable link negotiation protocol on port 1, module 4:

Console> (enable) set port negotiation 4/1 disable

Link negotiation protocol disabled on port 4/1.

Console> (enable) 

Related Commands

show port negotiation

set port protocol

Use the set port protocol command to enable or disable protocol membership of ports.

set port protocol mod/port {ip | ipx | group} {on | off | auto}

Syntax Description

mod/port	Number of the module and the port on the module.
ip	Keyword to specify IP.
ipx	Keyword to specify IPX.
group	Keyword to specify VINES, AppleTalk, and DECnet protocols.
on	Keyword to indicate the port will receive all the flood traffic for that protocol.
off	Keyword to indicate the port will not receive any flood traffic for that protocol.
auto	Keyword to indicate the port will not receive any flood traffic for that protocol.

Defaults

The default is that the ports are configured to on for the IP protocol groups and auto for IPX and group protocols.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

Protocol filtering is supported only on nontrunking EtherChannel ports. Trunking ports are always members of all the protocol groups.

If the port configuration is set to auto, the port initially does not receive any flood packets for that protocol. When the corresponding protocol packets are received on that port, the supervisor engine detects this and adds the port to the protocol group.

Ports configured as auto are removed from the protocol group if no packets are received for that protocol within a certain period of time. This aging time is set to 60 minutes. They are also removed from the protocol group on detection of a link down.

Examples

This example shows how to disable IPX protocol membership of port 1 on module 2:

Console> (enable) set port protocol 2/1 ipx off

IPX protocol disabled on port 2/1.

Console> (enable)

This example shows how to enable automatic IP membership of port 1 on module 5:

Console> (enable) set port protocol 5/1 ip auto

IP protocol set to auto mode on module 5/1.

Console> (enable)

Related Commands

show port protocol

set port qos

Use the set port qos command to specify whether an interface is interpreted as a physical port or as a VLAN.

set port qos mod/ports... port-based | vlan-based

Syntax Description

mod/ports...	Number of the module and the ports on the module.
port-based	Keyword to interpret the interface as a physical port.
vlan-based	Keyword to interpret the interface as part of a VLAN.

Defaults

The default is ports are port-based.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

Changing a port from port-based to VLAN-based QoS detaches all ACLs from the port. Any ACLs attached to the VLAN apply to the port immediately.

When you set a port to VLAN-based using the set port qos command with RSVP or COPS enabled on that port, the QoS policy-source is COPS or DSBM-election is enabled. The VLAN-based setting has been saved in NVRAM only.

Examples

This example shows how to specify an interface as a physical port:

Console> (enable) set port qos 1/1-2 port-based

Updating configuration ...

QoS interface is set to port-based for ports 1/1-2.

Console> (enable) 

This example shows how to specify an interface as a VLAN:

Console> (enable) set port qos 3/1-48 vlan-based

Updating configuration ...

QoS interface is set to VLAN-based for ports 3/1-48.

Console> (enable) 

This example shows the output if you change from port-based to VLAN-based with either RSVP or COPS enabled on the port:

Console> (enable) set port qos 3/1-48 vlan

Qos interface is set to vlan-based for ports 3/1-48

Port(s) 3/1-48 - QoS policy-source is Cops or DSBM-election is enabled.

Vlan-based setting has been saved in NVRAM only.

Console> (enable) 

Related Commands

show port qos
set port qos cos
set port qos trust
show qos info

set port qos cos

Use the set port qos cos command to set the default value for all packets that have arrived through an untrusted port.

set port qos mod/ports cos cos_value

set port qos mod/ports cos-ext cos_value

Syntax Description

mod/ports	Number of the module and ports.
cos cos_value	Keyword and variable to specify the CoS value for a port; valid values are from 0 to 7.
cos-ext cos_value	Keyword and variable to specify the CoS extension for a phone port; valid values are from 0 to 8.

Defaults

The default is CoS 0.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command is not supported by the NAM.

If the default is enforced when you disable QoS, CoS is enforced when you enable QoS.

Examples

This example shows how to set the CoS default value on a port:

Console> (enable) set port qos 2/1 cos 3

Port 2/1 qos cos set to 3.

Console> (enable) 

This example shows how to set the CoS-ext default value on a port:

Console> (enable) set port qos 2/1 cos-ext 3

Port 2/1 qos cos-ext set to 3.

Console> (enable) 

Related Commands

clear port qos cos
show port qos
show qos info
set port qos trust
set port qos
show qos info

set port qos trust

Use the set port qos trust command to set the trusted state of a port; for example, whether the packets arriving at a port are trusted to carry the correct classification.

set port qos mod/ports... trust {untrusted | trust-cos | trust-ipprec | trust-dscp}

Syntax Description

mod/ports...	Number of the module and the ports on the module.
untrusted	Keyword to specify that packets need to be reclassified from the matching ACE.
trust-cos	Keyword to specify that although the CoS bits in the incoming packets are trusted, the ToS is invalid and a valid value needs to be derived from the CoS bits.
trust-ipprec	Keyword to specify that although the ToS/CoS bits in the incoming packets are trusted, the ToS is invalid and the ToS is set as IP Precedence.
trust-dscp	Keyword to specify that the ToS/CoS bits in the incoming packets can be accepted as is with no change.

Defaults

The default when you enable QoS is untrusted; when you disable QoS, the default is trust-cos on Layer 2 switches and trust-dscp on Layer 3 switches.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you disable QoS, the default is trust-cos on Layer 2 switches and trust-dscp on Layer 3 switches.

This command is not supported by the NAM.

On 10/100 ports, you can use only the set port qos trust command to activate the receive drop thresholds. To configure a trusted state, you have to convert the port to port-based QoS, define an ACL that defines all (or the desired subset) of ACEs to be trusted, and attach the ACL to that port.

Examples

This example shows how to set the port to a trusted state:

Console> (enable) set port qos 3/7 trust trust-cos

Port 3/7 qos set to trust-cos.

Console> (enable) 

This example shows how to set the trust extension on ports on the connected phone to a trusted state:

Console> (enable) set port qos 3/7 trust-ext trusted

Port in the phone device connected to port 3/7 is configured to be trusted.

Console> (enable) 

Related Commands

show qos info
show port qos
set port qos
set port qos cos

set port qos trust-ext

Use the set port qos trust-ext command to configure the access port on an IP phone connected to the switch port.

set port qos mod/ports... trust-ext {trusted | untrusted}

Syntax Description

mod/ports...	Number of the module and the ports on the module.
untrusted	Keyword to specify that all traffic in 802.1Q or 802.1p frames received through the access port is marked with a configured Layer 2 CoS value.
trusted	Keyword to specify that all traffic received through the access port passes through the phone switch unchanged.

Defaults

The default when the phone is connected to a Cisco LAN switch is untrusted mode; trusted mode is the default when the phone is not connected to a Cisco LAN switch.

Co