Table Of Contents

set logout

set mls agingtime

set mls cef load-balance

set mls exclude protocol

set mls flow

set mls nde

set mls rate

set mls statistics protocol

set module

set module name

set module power

set module shutdown

set msfcautostate

set msmautostate

set multicast router

set ntp broadcastclient

set ntp broadcastdelay

set ntp client

set ntp server

set ntp summertime

set ntp timezone

set password

set pbf

set logout

Use the set logout command to set the number of minutes until the system disconnects an idle session automatically.

set logout timeout

Syntax Description

timeout

Number of minutes until the system disconnects an idle session automatically; valid values are from 0 to 10,000 minutes.

Defaults

The default is 20 minutes.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Setting the value to 0 disables the automatic disconnection of idle sessions.

The show tech-support command may time out if the configuration file output takes longer to display than the configured session timeout time. If this happens, enter a set logout timeout value of 0 to disable automatic disconnection of idle sessions or enter a longer timeout value.

Examples

This example shows how to set the number of minutes until the system disconnects an idle session automatically:

Console> (enable) set logout 20

Sessions will be automatically logged out after 20 minutes of idle time.

Console> (enable)

This example shows how to disable the automatic disconnection of idle sessions:

Console> (enable) set logout 0

Sessions will not be automatically logged out.

Console> (enable)

Related Commands

show tech-support

set mls agingtime

Use the set mls agingtime command set to specify the MLS aging time of shortcuts to an MLS entry in the Catalyst 6000 family switches.

set mls agingtime [ip | ipx] {agingtime}

set mls agingtime fast {fastagingtime} {pkt_threshold}

Syntax Description

ip	(Optional) Keyword to specify IP MLS.
ipx	(Optional) Keyword to specify IPX MLS.
agingtime	MLS aging time of shortcuts to an MLS entry; valid values are multiples of 8 to any value in the range of 8 to 2024 seconds.
fast	Keyword to specify the MLS aging time of shortcuts to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created.
fastagingtime	MLS aging time of shortcuts to an MLS entry; valid values are multiples of 8 to any value in the range from 0 to 128 seconds.
pkt_threshold	Packet threshold value; valid values are 0, 1, 3, 7, 15, 31, 63, and 127 packets.

Defaults

The default agingtime is 256 seconds. The default fastagingtime is 0, no fast aging. The default pkt_threshold is 0.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use the ip keyword, you are specifying a shortcut for IP MLS. If you use the ipx keyword, you are specifying a shortcut for IPX MLS.

If you enter fastagingtime 0, fast aging is disabled.

If you do not specify fastagingtime or pkt_threshold, the default value is used.

If you enter any of the set mls commands on a Catalyst 6000 family switch without MLS, this warning message displays:

MLS not supported on feature card.

agingtime can be configured as multiples of 8 in the range of 8 to 2024 seconds. The values are picked up in numerical order to achieve efficient aging. Any value for agingtime that is not a multiple of 8 seconds is adjusted to the closest one. For example, 65 is adjusted to 64, while 127 is adjusted to 128.

fastagingtime can be configured as multiples of 8 to any value in the range of 0 to 128 seconds.

The default pkt_threshold is 0. It can be configured as 0, 1, 3, 7, 15, 31, 63, or 127 (the values picked for efficient aging). If you do not configure fastagingtime exactly the same for these values, it adjusts to the closest value. A typical value for fastagingtime and pkt_threshold is 32 seconds and 0 packet, respectively (it means no packet switched within 32 seconds after the entry was created).

Agingtime applies to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created. A typical example is the MLS entry destined to/sourced from a DNS or TFTP server. This entry may never be used again once it is created. For example, only one request goes to a server and one reply returns from the server, and then the connection is closed.

The agingtime fast option is used to purge entries associated with very short flows, such as DNS and TFTP.

Keep the number of MLS entries in the MLS cache below 32K. If the number of MLS entries exceed 32K, some flows (less than 1 percent) are sent to the router.

To keep the number of MLS cache entries below 32K, decrease the aging time up to 8 seconds. If your switch has a lot of short flows used by only a few packets, then you can use fast aging.

If cache entries continue to exceed 32K, decrease the normal aging time in 64-second increments from the 256-second default.

Examples

These examples show how to set the agingtime:

Console> (enable) set mls agingtime 512

IP Multilayer switching aging time set to 512 seconds.

Console> (enable)

Console> (enable) set mls agingtime ipx 512

IPX Multilayer switching aging time set to 512

Console> (enable)

This example shows how to set the fast agingtime:

Console> (enable) set mls agingtime fast 32 0

Multilayer switching fast aging time set to 32 seconds for entries with no more than 0 
packet switched.

Console> (enable) 

Related Commands

clear mls statistics entry
show mls

set mls cef load-balance

Use the set mls cef load-balance command to include or exclude Layer 4 ports in a load-balancing hash.

set mls cef load-balance {full | source-destination-ip}

Syntax Description

full	Keyword to base the hash on Layer 4 ports and source and destination IP addresses.
source-destination-ip	Keyword to base the hash on source and destination IP addresses.

Defaults

By default, the load-balancing hash is based on source and destination IP addresses.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When multiple paths are available to reach a destination, the new hash is applied to pick the path to be used for forwarding.

Examples

This example shows how to base the hash on Layer 4 ports and source and destination IP addresses:

Console> (enable) set mls cef load-balance full

Console> (enable)

This example shows how to base the hash on source and destination IP addresses:

Console> (enable) set mls cef load-balance source-destination-ip

Console> (enable)

Related Commands

show mls

set mls exclude protocol

Use the set mls exclude protocol command on a switch configured with the Supervisor Engine 1 with Layer 3 Switching Engine WS-F6K-PFC to add a protocol port to be excluded from being shortcut. Use this command on switches configured with the Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2) to exclude protocols from statistics gathering.

set mls exclude protocol {tcp | udp | both} {port_number | port_name}

Syntax Description

tcp | udp | both	Keyword to specify a TCP, UDP port, or that the port be applied to both TCP and UDP traffic.
port_number	Number of the protocol port; valid values are from 1 to 65535.
port_name	Name of the port; valid values are dns, ftp, smtp, telnet, x, www.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter any of the set mls commands on a Catalyst 6000 family switch without MLS, this warning message displays:

MLS not supported on feature card.

You can add a maximum of four protocol ports to the exclude table.

MLS exclusion is supported in full flow mode only.

If you enter x for the port name, this specifies the Layer 4 port used by the X-windows application.

Examples

This example shows how to exclude TCP packets on protocol port 6017:

Console> (enable) set mls exclude protocol tcp 6017

TCP packets with protocol port 6017 will be switched by RP.

Console> (enable)

This example shows how to exclude UDP packets on protocol port 6017:

Console> (enable) set mls exclude protocol udp 6017

TCP and UDP packets with protocol port 6017 will be switched by RP.

Console> (enable)

Related Commands

show mls

set mls flow

Use the set mls flow command to specify the minimum flow mask used for MLS. This command is needed to collect statistics for the supervisor engine.

set mls flow {destination | destination-source | full}

---

Caution Use this command carefully. This command purges all existing shortcuts and affects the number of active shortcuts. This command can increase the cache usage and increase the load on the router.

---

---

Caution Be extremely careful if you enter this command on a switch that already has a large number of shortcuts (greater than 16K).

---

---

Caution Do not place this command in scripts that are frequently executed—changing the MLS flow mask purges all MLS cache entries.

---

Syntax Description

destination	Keyword to set the minimum flow mask to destination flow.
destination-source	Keyword to set the minimum flow mask to source flow.
full	Keyword to set the minimum flow mask to an extended access list.

Defaults

If there are no access lists on any MLS-RP, the flow mask is set to destination flow.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This command specifies the minimum MLS flow mask. Depending on the MLS-RP configuration, the actual flow mask used might be more specific than the specified minimum flow mask. For example, if you configure the minimum flow mask to destination-source, but an MLS-RP interface is configured with IP extended access lists, the actual flow mask used will be full.

If you configure a more specific flow mask (for example, destination-source or full), the number of active flow entries increases. To limit the number of active flow entries, you might need to decrease the MLS aging time.

This command is intended to be used for gathering very detailed statistics at the protocol port level; for example, when NetFlow data is exported to an RMON2 probe.

Examples

These examples show how to specify that only expired flows to subnet 171.69.194.0 are exported:

Console> (enable) set mls flow destination

Configured flow mask is set to destination flow.

Console> (enable) 

Console> (enable) set mls flow destination-source

Configured flow mask is set to destination-source flow.

Console> (enable) 

Console> (enable) set mls flow full

Configured flow mask is set to full flow.

Console> (enable) 

Related Commands

show mls

set mls nde

Use the set mls nde command set to configure the NDE feature in the Catalyst 6000 family switches to allow command-exporting statistics to be sent to the preconfigured collector.

set mls nde {enable | disable}

set mls nde {collector_ip | collector_name} {udp_port_num}

set mls nde version {1 | 7 | 8}

set mls nde flow [exclude | include] [destination ip_addr_spec] [source ip_addr_spec]
[protocol protocol] [src-port src_port] [dst-port dst_port]

Syntax Description

enable	Keyword to enable NDE.
disable	Keyword to disable NDE.
collector_ip	IP address of the collector if DNS is enabled.
collector_name	Name of the collector if DNS is enabled.
udp_port_num	Number of the UDP port to receive the exported statistics.
version	Keyword to specify the version of the NDE; valid versions are 1, 7, and 8.
1 | 7 | 8	Version of the NDE feature.
flow	Keyword to add filtering to NDE.
exclude	(Optional) Keyword to allow exporting of all flows except the flows matching the given filter.
include	(Optional) Keyword to allow exporting of all flows matching the given filter.
destination	(Optional) Keyword to specify the destination IP address.
ip_addr_spec	(Optional) Full IP address or a subnet address in these formats: ip_addr, ip_addr/netmask, or ip_addr/maskbit.
source	(Optional) Keyword to specify the source IP address.
protocol	(Optional) Keyword to specify the protocol type.
protocol	(Optional) Protocol type; valid values can be a number from 0 to 255 or ip, ipinip, icmp, igmp, tcp, or udp. 0 indicates "do not care."
src-port src_port	(Optional) Keyword and variable to specify the number of the TCP/UDP source port (decimal). Used with dst-port to specify the port pair if the protocol is tcp or udp. 0 indicates "do not care."
dst-port dst_port	(Optional) Keyword and variable to specify the number of the TCP/UDP destination port (decimal). Used with src-port to specify the port pair if the protocol is tcp or udp. 0 indicates "do not care."

Defaults

The defaults are Netflow Data Export version 7, and all expired flows are exported until the filter is specified explicitly.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter any set mls nde commands on a Catalyst 6000 family switch without MLS, this warning message displays:

mls not supported on feature card.

When you try to enable NDE and there are previously configured filtered flows on the switch, this warning message displays:

Console> (enable) set mls nde enable

Netflow export configured for port 80 on host 172.20.25.101

Netflow export enabled.

Warning!! There is a potential statistics mismatch due to existing excluded

protocols.

When you try to add a filter to exclude some protocol packets and NDE is currently enabled, this warning message displays:

Console> (enable) set mls exclude protocol tcp 80

Netflow tables will not create entries for TCP packets with protocol port

80.

Warning!! There's a potential statistics mismatch due to enabled NDE.

Before you use the set mls nde command for the first time, you must configure the host to collect MLS statistics. The host name and UDP port number are saved in NVRAM, so you do not need to specify them. If you specify a host name and UDP port, values in NVRAM overwrite the old values. Collector values in NVRAM do not clear when NDE is disabled, because this command configures the collector, but does not enable NDE automatically.

The set mls nde enable command enables NDE, exporting statistics to the preconfigured collector.

If the protocol is not tcp or udp, set the dst-port dst_port and src-port src_port values to 0; otherwise, no flows are displayed.

If you try to enable NDE without first specifying a collector, you see this display:

Console> (enable) set mls nde enable

Please set host name and UDP port number with `set mls nde <collector_name | collector_ip> 
<udp_port_number>'.

Console> (enable)

The set mls nde flow command adds filtering to the NDE. Expired flows matching the specified criteria are exported. These values are stored in NVRAM and do not clear when NDE is disabled. If any option is not specified in this command, it is treated as a wildcard. The NDE filter in NVRAM does not clear when NDE is disabled.

Only one filter can be active at a time. If you do not enter the exclude or include keyword, the filter is assumed to be an inclusion filter.

Use the following syntax to specify an IP subnet address:

•ip_subnet_addr—This is the short subnet address format. The trailing decimal number 00 in an IP address YY.YY.YY.00 specifies the boundary for an IP subnet address. For example, 172.22.36.00 indicates a 24-bit subnet address (subnet mask 172.22.36.00/255.255.255.0), and 173.24.00.00 indicates a 16-bit subnet address (subnet mask 173.24.00.00/255.255.0.0). However, this format can identify only a subnet address of 8, 16, or 24 bits.

•ip_addr/subnet_mask—This is the long subnet address format. For example, 172.22.252.00/255.255.252.00 indicates a 22-bit subnet address. This format can specify a subnet address of any bit number. To provide more flexibility, the ip_addr is a full host address, such as 172.22.253.1/255.255.252.00.

•ip_addr/maskbits—This is the simplified long subnet address format. The mask bits specify the number of bits of the network masks. For example, 172.22.252.00/22 indicates a 22-bit subnet address. The ip_addr is a full host address, such as 193.22.253.1/22, which has the same subnet address as the ip_subnet_addr.

When you use the set mls nde {collector_ip | collector_name} {udp_port_num} command, the host name and UDP port number are saved in NVRAM and need not be specified again. If you specify a host name and UDP port, the new values overwrite the values in NVRAM. Collector values in NVRAM do not clear when you disable NDE.

Examples

This example shows how to specify that only expired flows to a specific subnet are exported:

Console> (enable) set mls nde flow include destination 171.69.194.140/24

NDE destination filter set to 171.69.194.0/24

Console> (enable)

This example shows how to specify that only expired flows to a specific host are exported:

Console> (enable) set mls nde flow include destination 171.69.194.140

NDE destination filter set to 171.69.194.140/32.

Console> (enable)

This example shows how to specify that only expired flows from a specific subnet to a specific host are exported:

Console> (enable) set mls nde flow include destination 171.69.194.140/24 source 171.69.173.5/24

NDE destination filter set to 171.69.194.0/24, source filter set to 171.69.173.0/24

Console> (enable)

This example shows how to specify that only flows from a specific port are exported:

Console> (enable) set mls nde flow include dst_port 23

NDE source port filter set to 23.

Console> (enable)

This example shows how to specify that only expired flows from a specific host that are of a specified protocol are exported:

Console> (enable) set mls nde flow include source 171.69.194.140 protocol 51

NDE destination filter set to 171.69.194.140/32, protocol set to 51.

Console> (enable)

This example shows how to specify that all expired flows except those from a specific host to a specific destination port are exported:

Console> (enable) set mls nde flow exclude source 171.69.194.140 dst_port 23

NDE destination filter set to 171.69.194.140/32, source port filter set to 23.

Flows matching the filter will be excluded. 

Console> (enable)

Related Commands

clear mls nde flow
show mls

set mls rate

To set the rate at which index-directed packets are sent to the MSFC, use the set mls rate command.

set mls rate kpps

Syntax Description

kpps	MLS rate in thousands of packets per second; valid values are from 0 to 700. See the "Usage Guidelines" section for more information.

Defaults

The kpps argument is 0.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You disable MLS rate limiting when you set the kpps argument to 0. When you disable MLS rate limiting, the switch bridges packets to the MSFC; packets are not index-directed.

Examples

This example shows how to set MLS rate limiting to 100 kpps:

Console> (enable) set mls rate 100

MLS rate limiting set to 100 Kpps

Console> (enable)

This example shows how to disable MLS rate limiting:

Console> (enable) set mls rate 0

MLS rate limiting disabled

Console> (enable)

Related Commands

show mls

set mls statistics protocol

Use the set mls statistics protocol command to add protocols to the protocols statistics list.

set mls statistics protocol protocol src_port

Syntax Description

protocol	Name or number of the protocol; valid values are from 1 to 255, ip, ipinip, icmp, igmp, tcp, and udp.
src_port	Number or type of the source port; valid values are from 1 to 65535, dns, ftp, smtp, telnet, x, and www.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you enter any set mls commands on a Catalyst 6000 family switch without MLS, this warning message displays:

MLS not supported on feature card.

You can configure a maximum of 64 ports using the set mls statistics protocol command.

If you enter x for the source port, this specifies the Layer 4 port used by the X-windows application.

Examples

This example shows how to set protocols for statistic collection:

Console> (enable) set mls statistics protocol 17 1934

Protocol 17 port 1934 is added to protocol statistics list.

Console> (enable) 

Related Commands

clear mls statistics entry
show mls statistics

set module

Use the set module command to enable or disable a module.

set module enable | disable mod

Syntax Description

enable	Keyword to enable a module.
disable	Keyword to disable a module.
mod	Number of the module.

Defaults

The default is all modules are enabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Avoid disabling a module when you are connected via a Telnet session; if you disable your session, you will disconnect your Telnet session.

If there are no other network connections to a Catalyst 6000 family switch (for example, on another module), you have to reenable the module from the console.

You can specify a series of modules by entering a comma between each module number (for
example, 2,3,5). You can specify a range of modules by entering a dash between module numbers (for example, 2-5).

The set module disable command does not cut off the power to a module, it only disables the module. To turn off power to a module, refer to the set module power command.

If an individual port on a module was previously disabled, enabling the module does not enable the disabled port.

Examples

This example shows how to enable module 2:

Console> (enable) set module enable 2

Module 2 enabled.

Console> (enable)

This example shows how to disable module 3 when connected via the console port:

Console> (enable) set module disable 3

Module 3 disabled.

Console> (enable)

This example shows how to disable module 2 when connected via a Telnet session:

Console> (enable) set module disable 2

This command may disconnect your telnet session.

Do you want to continue (y/n) [n]? y

Module 2 disabled.

Console> (enable) 

Related Commands

show module

set module name

Use the set module name command to set the name for a module.

set module name mod [mod_name]

Syntax Description

mod	Number of the module.
mod_name	(Optional) Name created for the module.

Defaults

The default is no module names are configured for any modules.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If no module name is specified, any previously specified name is cleared.

Use the set module name command to set the module for the MSM. Additional set module commands are not supported by the MSM.

Examples

This example shows how to set the name for module 1 to Supervisor:

Console> (enable) set module name 1 Supervisor

Module name set.

Console> (enable)

Related Commands

show module

set module power

Use the set module power command to turn on or shut off the power to a module.

set module power up | down mod

Syntax Description

up	Keyword to turn on the power to a module.
down	Keyword to turn off the power to a module.
mod	Number of the module.

Defaults

The default is power is on to a module.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The set module power up command allows you to check if adequate power is available in the system to turn the power on. If not enough power is available, the module status changes from power-down to power-deny, and this message displays:

Module 4 could not be powered up due to insufficient power.

Examples

This example shows how to power up module 4:

Console> (enable) set module power up 4

Module 4 powered up.

Console> (enable) 

This example shows how to power down module 4:

Console> (enable) set module power down 4

Module 4 powered down.

Console> (enable) 

Related Commands

show environment

set module shutdown

Use the set module shutdown command to shut down the NAM and IDSM.

set module shutdown all | mod

Syntax Description

all	Keyword to shut down NAM and IDSMs.
mod	Number of the module.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

If you use the set module shutdown command, the configuration is not saved in NVRAM. The next time when the module boots up, it will come online. You can either reinsert or reset the module to bring it online.

If there are no other network connections to a Catalyst 6000 family switch (for example, on another module), you have to reenable the module from the console.

You can specify a series of modules by entering a comma between each module number (for
example, 2,3,5).

Examples

This example shows how to shutdown the NAM or IDSM:

Console> (enable) set module shutdown 2

Console> (enable) 

set msfcautostate

Use the set msfcautostate command to enable or disable the line protocol state determination of the MSFCs due to port state changes.

set msfcautostate {enable | disable}

Syntax Description

enable	Keyword to activate the line protocol state determination.
disable	Keyword to deactivate the line protocol state determination.

Defaults

The default is enabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This feature is used to accurately reflect the Layer 3 interface status based on the underlying Layer 2 interface status so that routing and other protocols converge faster. Faster protocol convergence prevents traffic from being discarded without notice.

When you enable the MSFC auto state feature, VLAN interfaces on the MSFC are active only when there is at least one other active interface in the spanning tree forwarding state on the Catalyst 6000 family switch. This interface could be a physical end-user port, a trunk connection for which the VLAN is active, or even another MSFC with an equivalent VLAN interface.

If you enable and then disable or disable and then enable the set msfcautostate command, you might have to use the shutdown and no shutdown commands to disable and then restart the VLAN and WAN interfaces on the MSFC.

If your FXS module ports are in an auxiliary VLAN and there are no switching module ports active in the VLAN, the FXS module will not initialize because the MSFC auto state feature shuts down all MSFC interfaces and subinterfaces. We recommend that you add a physical Ethernet port to the VLAN.

---

Caution You should not disable the MSFC auto state feature because the Layer 3 interface status might not accurately reflect the Layer 2 interface status. If you disable this feature, traffic might be discarded without notice even though other valid traffic paths might exist.

---

Examples

This example shows how to enable the line protocol state determination of the MSFC:

Console> (enable) set msfcautostate enable

Console> (enable)

This example shows how to disable the line protocol state determination of the MSFC:

Console> (enable) set msfcautostate disable

Console> (enable)

Related Commands

show msfcautostate

set msmautostate

Use the set msmautostate command to enable or disable the line protocol state determination of the MSMs due to port state changes.

set msmautostate {enable | disable}

Syntax Description

enable	Keyword to activate the line protocol state determination.
disable	Keyword to deactivate the line protocol state determination.

Defaults

The default configuration has line protocol state determination disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

This feature is useful for discontinuing the advertisement of routing paths when access to them is severed (either through fault or administrative disabling).

When you enable msmautostate, VLAN interfaces on the MSM are active only when there is at least one other active interface within the Catalyst 6000 family switch. This could be a physical end-user port, a trunk connection for which the VLAN is active, or even another MSM with an equivalent VLAN interface.

If you disable msmautostate, you might have to use the shutdown and no shutdown commands to disable and then restart the VLAN interface to bring the MSM back up.

Examples

This example shows how to enable the line protocol state determination of the MSM:

Console> (enable) set msmautostate enable

MSM port auto state enabled.

Console> (enable)

This example shows how to disable the line protocol state determination of the MSM:

Console> (enable) set msmautostate disable

MSM port auto state disabled.

Console> (enable)

Related Commands

show msmautostate

set multicast router

Use the set multicast router command to configure a port manually as a multicast router port.

set multicast router mod/port

Syntax Description

mod/port

Number of the module and port on the module.

Defaults

The default is no ports are configured as multicast router ports.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

When you enable IGMP snooping, the ports to which a multicast-capable router is attached are identified automatically. The set multicast router command allows you to configure multicast router ports statically.

Examples

This example shows how to configure a multicast router port:

Console> (enable) set multicast router 3/1

Port 3/1 added to multicast router port list.

Console> (enable)

Related Commands

clear multicast router
set igmp
show multicast router
show multicast group count

set ntp broadcastclient

Use the set ntp broadcastclient command to enable or disable NTP in broadcast-client mode.

set ntp broadcastclient {enable | disable}

Syntax Description

enable	Keyword to enable NTP in broadcast-client mode.
disable	Keyword to disable NTP in broadcast-client mode.

Defaults

The default is broadcast-client mode is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The broadcast-client mode assumes that a broadcast server, such as a router, sends time-of-day information regularly to a Catalyst 6000 family switch.

Examples

This example shows how to enable an NTP broadcast client:

Console> (enable) set ntp broadcastclient enable

NTP Broadcast Client mode enabled.

Console> (enable)

This example shows how to disable an NTP broadcast client:

Console> (enable) set ntp broadcastclient disable

NTP Broadcast Client mode disabled.

Console> (enable)

Related Commands

show ntp

set ntp broadcastdelay

Use the set ntp broadcastdelay command to configure a time-adjustment factor so the Catalyst 6000 family switch can receive broadcast packets.

set ntp broadcastdelay microseconds

Syntax Description

microseconds

Estimated round-trip time, in microseconds, for NTP broadcasts; valid values are from 1 to 999999.

Defaults

The default is the NTP broadcast delay is set to 3000 ms.

Command Types

Switch command.

Command Modes

Privileged.

Examples

This example shows how to set the NTP broadcast delay to 4000 ms:

Console> (enable) set ntp broadcastdelay 4000

NTP broadcast delay set to 4000 microseconds.

Console> (enable)

Related Commands

show ntp

set ntp client

Use the set ntp client command to enable or disable a Catalyst 6000 family switch as an NTP client.

set ntp client {enable | disable}

Syntax Description

enable	Keyword to enable a Catalyst 6000 family switch as an NTP client.
disable	Keyword to disable a Catalyst 6000 family switch as an NTP client.

Defaults

The default is NTP client mode is disabled.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You can configure NTP in either broadcast-client mode or client mode. The broadcast-client mode assumes that a broadcast server, such as a router, sends time-of-day information regularly to a Catalyst 6000 family switch. The client mode assumes that the client (a Catalyst 6000 family switch) regularly sends time-of-day requests to the NTP server.

Examples

This example shows how to enable NTP client mode:

Console> (enable) set ntp client enable

NTP client mode enabled.

Console> (enable)

Related Commands

show ntp

set ntp server

Use the set ntp server command to specify the NTP server address and configure an NTP server authentication key.

set ntp server ip_addr [key public_keynum]

Syntax Description

ip_addr	IP address of the NTP server.
key public_keynum	(Optional) Keyword to specify the key number; valid values are 1 to 4292945295.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The client mode assumes that the client (a Catalyst 6000 family switch) sends time-of-day requests regularly to the NTP server. A maximum of ten servers per client is allowed.

Examples

This example shows how to configure an NTP server:

Console> (enable) set ntp server 172.20.22.191

NTP server 172.20.22.191 added.

Console> (enable)

Related Commands

clear ntp server
show ntp

set ntp summertime

Use the set ntp summertime command set to specify whether the system should set the clock ahead one hour during daylight saving time.

set ntp summertime {enable | disable} [zone]

set ntp summertime recurring [{week} {day} {month} {hh:mm} {week | day | month | hh:mm} [offset]]

set ntp summertime date {month} {date} {year} {hh:mm}{month | date | year | hh:mm} [offset]

Syntax Description

enable	Keyword to cause the system to set the clock ahead one hour during daylight saving time.
disable	Keyword to prevent the system from setting the clock ahead one hour during daylight saving time.
zone	(Optional) Time zone used by the set summertime command.
recurring	Keyword to specify the summertime dates that recur every year.
week	Week of the month (first, second, third, fourth, last, 1...5).
day	Day of the week (Sunday, Monday, Tuesday, and so forth).
month	Month of the year (January, February, March, and so forth).
hh:mm	Hours and minutes.
offset	(Optional) Amount of offset in minutes (1 to 1440 minutes).
date	Day of the month (1 to 31).
year	Number of the year (1993 to 2035).

Defaults

By default, the set ntp summertime command is disabled. Once enabled, the default for offset is 60 minutes, following U.S. standards.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

After you enter the clear config command, the dates and times are set to default.

Unless you configure it otherwise, this command advances the clock one hour at 2:00 a.m. on the first Sunday in April and moves back the clock one hour at 2:00 a.m. on the last Sunday in October.

Examples

This example shows how to cause the system to set the clock ahead one hour during daylight saving time:

Console> (enable) set ntp summertime enable PDT

Summertime is enabled and set to "PDT".

Console> (enable)

This example shows how to prevent the system from setting the clock ahead one hour during daylight saving time:

Console> (enable) set ntp summertime disable

Summertime disabled.

Console> (enable)

This example shows how to set daylight saving time to the zonename AUS and repeat every year, starting from the third Monday of February at noon and ending at the second Saturday of August at
3:00 p.m. with an offset of 30 minutes:

Console> (enable) set ntp summertime AUS recurring 3 Mon Feb 12:00 2 Saturday Aug 15:00 30

Summer time is disabled and set to 'AUS' with offset 30 minutes.

   start: 12:00:00 Sun Feb 13 2000

   end:   14:00:00 Sat Aug 26 2000

   Recurring, starting at 12:00:00 on Sunday of the third week of February and ending 
   on Saturday of the fourth week of August.

Console> (enable)

This example shows how to set the daylight saving time to start on January 29, 1999 at 2:00 a.m. and end on August 19, 2004 at 3:00 p.m. with an offset of 30 minutes:

Console> (enable) set ntp summertime date jan 29 1999 02:00 aug 19 2004 15:00 30 

Summertime is disabled and set to ''

Start : Fri Jan 29 1999, 02:00:00

End   : Thu Aug 19 2004, 15:00:00

Offset: 30 minutes

Recurring: no

Console> (enable) 

This example shows how to set recurring to reset default to US summertime:

Console> (enable) set ntp summertime recurring 3 mon feb 4 thurs oct 8:00 500

Command authorization none.

Summertime is enabled and set to `'

Start : Mon Feb 21 2000, 03:00:00

End   : Fri Oct 20 2000, 08:00:00

Offset: 500 minutes (8 hours 20 minutes)

Recurring: yes, starting at 03:00am of third Monday of February and ending on 08:00am of 
fourth Thursday of October.

Console> (enable) 

Related Commands

show ntp

set ntp timezone

Use the set ntp timezone command to configure the time offset from Greenwich Mean Time.

set timezone [zone_name] [hours [minutes]]

Syntax Description

zone_name	Name of the time zone.
hours	(Optional) Time offset (hours) from Greenwich Mean Time; valid values are from -12 to 12 hours.
munutes	(Optional) Time offset (minutes) from Greenwich Mean Time; valid values are 0 to 59 munutes.

Defaults

This command has no default settings.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

The set ntp timezone command is effective only when NTP is running. If you set the time explicitly and NTP is disengaged, the set ntp timezone command has no effect. If you have enabled NTP and have not entered the set timezone command, the Catalyst 6000 family switch displays UTC by default.

Examples

This example shows how to set the time zone to Pacific Standard Time with an offset of minus 8 hours from UTC:

Console> (enable) set ntp timezone PST -8

Timezone set to "PST", offset from UTC is -8 hours.

Console> (enable)

Related Commands

clear ntp timezone
show ntp

set password

Use the set password command to change the login password on the CLI.

set password

Syntax Description

This command has no arguments or keywords.

Defaults

The default is no password is configured.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

Passwords are case sensitive and may be from 0 to 19 characters in length, including spaces.

The command prompts you for the old password. If the password you enter is valid, you are prompted to enter a new password and to verify the new password. A zero-length password is allowed by pressing Return.

Examples

This example shows how to set an initial password:

Console> (enable) set password

Enter old password: <old_password>

Enter new password: <new_password>

Retype new password: <new_password>

Password changed.

Console> (enable)

set pbf

Use the set pbf command to enable PBF and to set a MAC address for the PFC2.

set pbf [mac mac_address]

Syntax Description

mac mac_address

(Optional) Keyword and variable to specify MAC address for the PFC2.

Defaults

You can use the default MAC address, or you can specify a MAC address.

Command Types

Switch command.

Command Modes

Privileged.

Usage Guidelines

You must set a MAC address for the PFC2. We recommend that you use the default MAC address provided by the MAC PROM. When you specify your own MAC address using the set pbf mac command, if the MAC address is a duplicate of a MAC address already in use, packets might be dropped.

PBF is not supported with an operating (booted) MSFC2 in the Catalyst 6000 family switch that is being used for PBF. If an MSFC2 is present but not booted, you can configure PBF.

PBF may require some configuration on attached hosts. When a router is not present in the network, ARP table entries have to be statically added on each host participating in PBF. Refer to the "Configuring Policy-Based Forwarding" section of Chapter 16, "Configuring Access Control," in the Catalyst 6000 Family Software Configuration Guide for detailed information on configuring hosts.

---

Note PBF does not work with 802.1Q tunnel traffic. PBF is supported on Layer 3 IP unicast traffic, but it is not applicable to Layer 2 traffic. At the intermediate (PBF) switch, all 802.1Q tunnel traffic appears as Layer 2 traffic.

---

Examples

This example shows how to set the default MAC address for the PFC2:

Console> (enable) set pbf

Console> (enable) Operation successful.

Console> (enable)

This example shows how to set a specific MAC address for the PFC2:

Console> (enable) set pbf mac 00-01-64-61-39-c2

Console> (enable) Operation successful.

Console> (enable)

Related Commands

clear pbf
show pbf