Table Of Contents
show cable-diagnostics tdr
show catalyst6000
show cdp neighbors
show cef interface policy-statistics
show class-map
show counters interface
show diagnostic
show diagnostic cns
show diagnostic sanity
show dot1q-tunnel
show dot1x
show dss log
show environment alarm
show environment cooling
show environment status
show environment temperature
show eobc
show erm statistics
show errdisable detect
show errdisable flap-value
show errdisable recovery
show etherchannel
show fm features
show fm inband-counters
show fm insp
show fm interface
show fm ipv6 traffic-filter
show fm nat netflow data
show fm reflexive
show fm summary
show fm vlan
show icc
show idprom
show interfaces
show interfaces accounting
show interfaces capabilities
show interfaces counters
show interfaces debounce
show interfaces description
show interfaces flowcontrol
show interfaces private-vlan mapping
show interfaces status
show interfaces summary
show interfaces switchport
show interfaces switchport backup
show interfaces transceiver
show interfaces trunk
show interfaces unidirectional
show interfaces vlan mapping
show ip arp inspection
show ip arp inspection log
show ip auth-proxy watch-list
show ipc
show ip cache flow
show ip cache verbose flow
show cable-diagnostics tdr
To display the test results for the TDR cable diagnostics, use the show cable-diagnostics tdr command.
show cable-diagnostics tdr {interface {interface interface-number}}
Syntax Description
interface interface
|
Specifies the interface type; valid values are fastethernet and gigabitethernet.
|
interface-number
|
Module and port number.
|
Command Default
This command has no default settings.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The show cable-diagnostics tdr command is supported on specific modules. See the Release Notes for Cisco IOS Release 12.2 ZY Supervisor Engine 32 PISA for the list of the modules that support TDR.
In the event of an open or shorted cable, the accuracy of length of where the cable is open or shorted is plus or minus 2 meters.
The pair length can be displayed in meters (m), centimeters (cm), or kilometers (km).
If the TDR test has not been run on the port, the following message is displayed:
TDR test was never run on Gi2/12
Examples
This example shows how to display the information about the TDR test:
Router> show cable-diagnostics tdr interface gigabitethernet8/1
TDR test last run on: February 25 11:18:31
Interface Speed Pair Cable length Distance to fault Channel Pair status
--------- ----- ---- ------------------- ------------------- ------- ------------
Gi8/1 1000 1-2 1 +/- 6 m N/A Pair B Terminated
3-4 1 +/- 6 m N/A Pair A Terminated
5-6 1 +/- 6 m N/A Pair C Terminated
7-8 1 +/- 6 m N/A Pair D Terminated
Table 2-32 describes the fields in the show cable-diagnostics tdr command output.
Table 2-32 show cable-diagnostics tdr Command Output Fields
Field
|
Description
|
Interface
|
Interface tested.
|
Speed
|
Current line speed.
|
Pair
|
Local pair name.
|
Cable Length
|
Cable length and accuracy. The accuracy unit is displayed in meters (m), centimeters (cm), or kilometers (km).
|
Channel
|
Pair designation.
|
Pair status
|
Pair status displayed is one of the following:
• Terminated—The link is up.
• Shorted—A short is detected on the cable.
• Open—An opening is detected on the cable.
• Not Completed—The test on the port failed.
• Not Supported—The test on the port is not supported.
• Broken—The pair is bad—either open or shorted.
• ImpedanceMis—The impedance is mismatched.
• InProgress—The diagnostic test is in progress.
|
Related Commands
Command
|
Description
|
clear cable-diagnostics tdr
|
Clears a specific interface or clears all interfaces that support TDR.
|
test cable-diagnostics
|
Tests the condition of 10-Gigabit Ethernet links or copper cables on 48-port 10/100/1000 BASE-T modules.
|
show catalyst6000
To display the information about the Catalyst 6500 series switch, use the show catalyst6000 command.
show catalyst6000 {all | chassis-mac-address | switching-clock | traffic-meter}
Syntax Description
all
|
Displays the MAC-address ranges and the current and peak traffic-meter reading.
|
chassis-mac-address
|
Displays the MAC-address range.
|
switching-clock
|
Displays the failure recovery mode of the switching clock.
|
traffic-meter
|
Displays the percentage of the backplane (shared bus) utilization.
|
Command Default
all
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
If you enter the switching-clock keywords, the Catalyst 6500 series switch displays whether switching of the redundant clock sources on the backplane is allowed if the active clock source fails.
The Catalyst 6500 series switch has either 64 or 1024 MAC addresses that are available to support the software features. You can enter the show catalyst6000 chassis-mac-address command to display the MAC-address range on your chassis.
Examples
This example shows how to display the MAC-address ranges and the current and peak traffic-meter readings:
Router> show catalyst6000 all
chassis MAC addresses: 64 addresses from 0001.6441.60c0 to 0001.6441.60ff
traffic meter = 0% Never cleared
peak = 0% reached at 08:14:38 UTC Wed Mar 19 2003
switching-clock: clock switchover and system reset is allowed
This example shows how to display the MAC-address ranges:
Router# show catalyst6000 chassis-mac-address
chassis MAC addresses: 1024 addresses from 00d0.004c.1800 to 00d0.004c.1c00
This example shows how to display the current and peak traffic-meter readings:
Router> show catalyst6000 traffic-meter
traffic meter = 0% peak = 0% at 09:57:58 UTC Mon Nov 6 2000
This example shows how to display the failure recovery mode of the switching clock:
Router> show catalyst6000 switching-clock
switching-clock: clock switchover and system reset is allowed
show cdp neighbors
To display detailed information about the neighboring devices that are discovered through CDP, use the show cdp neighbors command.
show cdp neighbors [type number] [detail]
Syntax Description
type
|
(Optional) Interface type that is connected to the neighbors about which you want information; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, port-channel, and vlan.
|
number
|
(Optional) Interface number that is connected to the neighbors about which you want information.
|
detail
|
(Optional) Displays detailed information about a neighbor (or neighbors) including the network address, the enabled protocols, the hold time, and the software version.
|
Command Default
This command has no default settings.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The port-channel values are from 0 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display the information about the CDP neighbors:
Router# show cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone
Device ID Local Intrfce Holdtme Capability Platform Port ID
lab-7206 Eth 0 157 R 7206VXR Fas 0/0/0
lab-as5300-1 Eth 0 163 R AS5300 Fas 0
lab-as5300-2 Eth 0 159 R AS5300 Eth 0
lab-as5300-3 Eth 0 122 R AS5300 Eth 0
lab-as5300-4 Eth 0 132 R AS5300 Fas 0/0
lab-3621 Eth 0 140 R S 3631-telcoFas 0/0
008024 2758E0 Eth 0 132 T CAT3000 1/2
Table 2-33 describes the fields that are shown in the example.
Table 2-33 show cdp neighbors Field Descriptions
Field
|
Definition
|
Device ID
|
Configured ID (name), MAC address, or serial number of the neighbor device.
|
Local Intrfce
|
(Local Interface) The protocol that is used by the connectivity media.
|
Holdtme
|
(Holdtime) Remaining amount of time, in seconds, that the current device holds the CDP advertisement from a transmitting router before discarding it.
|
Capability
|
Capability code that is discovered on the device. This device type is listed in the CDP Neighbors table. Possible values are as follows:
R—Router
T—Transparent bridge
B—Source-routing bridge
S—Switch
H—Host
I—IGMP device
r—Repeater
P—Phone
|
Platform
|
Product number of the device.
|
Port ID
|
Protocol and port number of the device.
|
This example shows how to display detailed information about your CDP neighbors:
Router# show cdp neighbors detail
-------------------------
IP address: 172.19.169.83
Platform: cisco 7206VXR, Capabilities: Router
Interface: Ethernet0, Port ID (outgoing port): FastEthernet0/0/0
Cisco Internetwork Operating System Software
IOS (tm) 5800 Software (C5800-P4-M), Version 12.1(2)
Copyright (c) 1986-2002 by Cisco Systems, Inc.
-------------------------
IP address: 172.19.169.87
Table 2-34 describes the fields that are shown in the example.
Table 2-34 show cdp neighbors detail Field Descriptions
Field
|
Definition
|
Device ID
|
Name of the neighbor device and either the MAC address or the serial number of this device.
|
Entry address(es)
|
List of network addresses of neighbor devices.
|
[network protocol] address
|
Network address of the neighbor device. The address can be in IP, IPX, AppleTalk, DECnet, or CLNS protocol conventions.
|
Platform
|
Product name and number of the neighbor device.
|
Capabilities
|
Device type of the neighbor. This device can be a router, a bridge, a transparent bridge, a source-routing bridge, a switch, a host, an IGMP device, or a repeater.
|
Interface
|
Protocol and port number of the port on the current device.
|
Holdtime
|
Remaining amount of time, in seconds, that the current device holds the CDP advertisement from a transmitting router before discarding it.
|
Version:
|
Software version running on the neighbor device.
|
advertisement version:
|
Version of CDP that is being used for CDP advertisements.
|
Duplex:
|
Duplex state of connection between the current device and the neighbor device.
|
Related Commands
Command
|
Description
|
show cdp
|
Displays global CDP information.
|
show cdp entry
|
Displays information about a specific neighboring device discovered using CDP.
|
show cdp interface
|
Displays information about the interfaces on which CDP is enabled.
|
show cdp traffic
|
Displays information about traffic between devices gathered using CDP.
|
show cef interface policy-statistics
To display the per-interface traffic statistics, use the show cef interface policy-statistics command.
show cef interface policy-statistics
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Default
User EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the per-interface traffic statistics:
Router# show cef interface policy-statistics
POS7/0 is up (if_number 7)
show class-map
To display class-map information, use the show class-map command.
show class-map [class-name]
Syntax Description
class-name
|
(Optional) Name of the class map.
|
Command Default
This command has no default settings.
Command Default
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display class-map information for all class maps:
Class Map match-any class-default (id 0)
Class Map match-any class-simple (id 2)
Class Map match-all ipp5 (id 1)
Class Map match-all agg-2 (id 3)
This example shows how to display class-map information for a specific class map:
Router# show class-map ipp5
Class Map match-all ipp5 (id 1)
Related Commands
Command
|
Description
|
class-map
|
Accesses the QoS class map configuration mode to configure QoS class maps.
|
show policy-map
|
Displays information about the policy map.
|
show policy-map interface
|
Displays the statistics and the configurations of the input and output policies that are attached to an interface.
|
show counters interface
To display the information about the interface counter, use the show counters interface command.
show counters interface {type mod/port} [delta]
Syntax Description
type
|
Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, port-channel, pos, atm, null, tunnel, and ge-wan.
|
mod/port
|
Module and port number.
|
delta
|
(Optional) Displays the interface counters values since the last clear counters command.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The show counters interface command is not supported on SVIs.
The show counters interface delta command displays a detailed list of the last-saved counter values.
Examples
This example shows how to display the information about the interface counter:
Router# show counters interface fastethernet 5/2
10. rxTxHCPkts64Octets = 0
11. rxTxHCPkts65to127Octets = 2
12. rxTxHCPkts128to255Octets = 0
13. rxTxHCPkts256to511Octets = 0
14. rxTxHCpkts512to1023Octets = 0
15. rxTxHCpkts1024to1518Octets = 0
11. txDelayExceededDiscards = 0
30. Broadcast_suppression_discards = 0
31. Multicast_suppression_discards = 0
32. Unicast_suppression_discards = 0
33. rxTxHCPkts64Octets = 0
34. rxTxHCPkts65to127Octets = 2
35. rxTxHCPkts128to255Octets = 0
36. rxTxHCPkts256to511Octets = 0
37. rxTxHCpkts512to1023Octets = 0
38. rxTxHCpkts1024to1518Octets = 0
46. DelayExceededDiscards = 0
This example shows how to display the values for the interface counters since the last clear counters command:
Router# show counters interface gigabitethernet5/2 delta
0. rxHCTotalPkts = 508473
2. rxHCUnicastPkts = 411611
4. rxHCMulticastPkts = 81868
5. txHCMulticastPkts = 2155
6. rxHCBroadcastPkts = 14994
7. txHCBroadcastPkts = 18
Related Commands
show diagnostic
To view the test results of the online diagnostics and list the supported test suites, use the show diagnostic command.
show diagnostic bootup level
show diagnostic content [module num]
show diagnostic events [module num] [event-type event-type]
show diagnostic {ondemand settings}
show diagnostic {result [module num] [detail]}
show diagnostic schedule [module num]
Syntax Description
bootup level
|
Displays the coverage level for the configured boot-up diagnostics.
|
content
|
Displays test information including test ID, test attributes, and supported coverage test levels for each test and for all modules.
|
module num
|
(Optional) Specifies the module number.
|
events
|
Displays the event log for the diagnostic events.
|
event-type event-type
|
(Optional) Specifies the event type; valid values are error, info, and warning.
|
ondemand settings
|
Displays the settings for the ondemand diagnostics.
|
result
|
Displays the test results.
|
detail
|
(Optional) Displays the test statistics of each test.
|
schedule
|
Displays the current scheduled diagnostic tasks.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
If you do not enter a module num, information for all modules is displayed.
In the command output, the possible testing results are as follows:
•
Passed (.)
•
Failed (F)
•
Unknown (U)
Examples
This example shows how to display the test suite and the monitoring interval and test attributes:
Router# show diagnostic content module 1
Diagnostic Tests List for Module 1:
Diagnostics test suite attributes:
M/C/* - Minimal level test / Complete level test / Not applicable
B/* - Bypass bootup test / Not applicable
P/* - Per port test / Not applicable
D/N - Disruptive test / Non-disruptive test
S/* - Only applicable to standby unit / Not applicable
X/* - Not a health monitoring test / Not applicable
F/* - Fixed monitoring interval test / Not applicable
E/* - Always enabled monitoring test / Not applicable
A/I - Monitoring is active / Monitoring is inactive
ID Test Name Attributes (day hh:mm:ss.ms)
=== ================================== ========== =================
1) TestDummy1 ----------------------> M**D****A 000 00:01:00.000
2) TestDummy2 ----------------------> M**D**FEA 000 00:02:30.000
3) TestGBICIntegrity ---------------> *BPD****I not configured
4) TestActiveToStandbyLoopback -----> M*PDS***I not configured
5) TestLoopback --------------------> M*PD****I not configured
6) TestNewLearn --------------------> M**N****I not configured
7) TestIndexLearn ------------------> M**N****I not configured
8) TestConditionalLearn ------------> M**N****I not configured
9) TestBadBpdu ---------------------> M**D****I not configured
10) TestCapture ---------------------> M**D****I not configured
11) TestProtocolMatch ---------------> M**D****I not configured
12) TestChannel ---------------------> M**D****I not configured
13) TestDontShortcut ----------------> M**Nrefer*I not configured
14) TestL3Capture2 ------------------> M**N****I not configured
15) TestL3VlanMet -------------------> M**N****I not configured
16) TestIngressSpan -----------------> M**N****I not configured
17) TestEgressSpan ------------------> M**N****I not configured
18) TestAclPermit -------------------> M**N****I not configured
19) TestAclDeny ---------------------> M**D****I not configured
20) TestNetflowInlineRewrite --------> C*PD****I not configured
This example shows how to display the configured boot-up diagnostic level:
Router# show diagnostic bootup level
Current Bootup Diagnostic Level = Complete
This example shows how to display the event log for the diagnostics:
Router# show diagnostic events
Diagnostic events (storage for 500 events, 10 events recorded)
Event Type (ET):I - Info, W - Warning, E - Error
Time Stamp ET [Card] Event Message
------------------ -- --------------------------------------------------------
08/26 15:51:04.335 I [1] TestIndexLearn Passed
08/26 15:51:04.335 I [1] Diagnostics Passed
08/26 15:51:15.511 I [8] TestLoopback Passed
08/26 15:51:15.511 I [8] Diagnostics Passed
08/26 16:15:02.247 I [1] TestDontLearn Passed
08/26 16:15:02.247 I [1] Diagnostics Passed
08/26 16:15:12.683 I [8] TestNetflowInlineRewrite Passed
08/26 16:15:12.683 I [8] Diagnostics Passed
08/26 16:15:42.207 I [2] TestActiveToStandbyLoopback Passed
08/26 16:15:42.207 I [2] Diagnostics Passed
This example shows how to display the settings for the ondemand diagnostics:
Router# show diagnostic ondemand settings
Ondemand Run Iteration = 2
Ondemand Action-on-Error = CONTINUE
This example shows how to display the current scheduled diagnostic tasks for the specified slot:
Router# show diagnostic schedule module 1
Current Time = 07:55:30 UTC Fri August 2 2002
To be run on January 3 2003 23:32
Test ID(s) to be executed:1.
Test ID(s) to be executed:2.
To be run weekly Monday 3:33
Test ID(s) to be executed:all.
This example shows how to display the testing results for the specified slot:
Router# show diagnostic result module 3
Current bootup diagnostic level:complete
Overall Diagnostic Result for Module 8 :PASS
Diagnostic level at card bootup:complete
Test results:(. = Pass, F = Fail, U = Untested)
Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
----------------------------------------------------------------------------
. . . . . . . . . . . . . . . . . . . . . . . .
Port 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48
----------------------------------------------------------------------------
. . . . . . . . . . . . . . . . . . . . . . . .
2) TestNewLearn --------------------> .
3) TestIndexLearn ------------------> .
4) TestDontLearn -------------------> .
5) TestConditionalLearn ------------> .
6) TestDontLearn -------------------> .
7) TestConditionalLearn ------------> .
8) TestBadBpdu ---------------------> .
9) TestTrap ------------------------> .
10) TestMatch -----------------------> .
11) TestCapture ---------------------> .
12) TestProtocolMatch ---------------> .
13) TestChannel ---------------------> .
14) TestIPFibShortcut ---------------> .
15) TestDontShortcut ----------------> .
16) TestL3Capture2 ------------------> .
17) TestL3VlanMet -------------------> .
18) TestIngressSpan -----------------> .
19) TestEgressSpan ------------------> .
20) TestAclPermit -------------------> .
21) TestAclDeny ---------------------> .
22) TestNetflowInlineRewrite:
Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
----------------------------------------------------------------------------
. . . . . . . . . . . . . . . . . . . . . . . .
Port 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48
----------------------------------------------------------------------------
. . . . . . . . . . . . . . . . . . . . . . . .
This example shows how to display the detailed testing results for the specified slot:
Router# show diagnostic result module 1 detail
Current bootup diagnostic level:complete
Overall Diagnostic Result for Module 1 :PASS
Diagnostic level at card bootup:complete
Test results:(. = Pass, F = Fail, U = Untested)
___________________________________________________________________________
1) TestDummy -----------------------> .
Error code ------------------> 0 (DIAG_SUCCESS)
Total run count -------------> 90
Last test execution time ----> Dec 10 2002 12:34:30
First test failure time -----> Dec 10 2002 11:57:39
Last test failure time ------> Dec 10 2002 12:34:10
Last test pass time ---------> Dec 10 2002 11:34:30
Total failure count ---------> 65
Consecutive failure count ---> 0
___________________________________________________________________________
Error code ------------------> 0 (DIAG_SUCCESS)
Total run count -------------> 1
Last test execution time ----> Dec 10 2002 12:37:18
First test failure time -----> n/a
Last test failure time ------> n/a
Last test pass time ---------> Dec 10 2002 12:37:18
Total failure count ---------> 0
Consecutive failure count ---> 0
This example shows how to display the event logs for the diagnostics:
Router# show diagnostic events
Diagnostic events (storage for 500 events, 10 events recorded)
EventType:I - Info, W - Warning, E - Error
TimeStamp Type [Card] EventMessage
08/26 15:51:04.335 I [1] TestIndexLearn Passed
08/26 15:51:04.335 I [1] Diagnostics Passed
08/26 15:51:15.511 I [8] TestLoopback Passed
08/26 15:51:15.511 I [8] Diagnostics Passed
08/26 16:15:02.247 I [1] TestDontLearn Passed
08/26 16:15:02.247 I [1] Diagnostics Passed
08/26 16:15:12.683 I [8] TestNetflowInlineRewrite Passed
08/26 16:15:12.683 I [8] Diagnostics Passed
08/26 16:15:42.207 I [2] TestActiveToStandbyLoopback Passed
08/26 16:15:42.207 I [2] Diagnostics Passed
Related Commands
show diagnostic cns
To display the information about the CNS subject, use the show diagnostic cns command.
show diagnostic cns {publish | subscribe}
Syntax Description
publish
|
Displays the subject with which the diagnostic results is published.
|
subscribe
|
Displays the subscribed subjects.
|
Command Default
This command has no default settings.
Command Default
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The CNS subsystem communicates with remote network applications through the CNS-event agent and follows the publish and subscribe model. An application sets itself up to receive events by subscribing to the approprate event subject name.
Examples
This example shows how to display the subject with which the diagnostic results is published:
Router# show diagnostic cns publish
Subject: cisco.cns.device.diag_results
This example shows how to display the subscribed subject:
Router# show diagnostic cns subscribe
Subject: cisco.cns.device.diag_get_results
Related Commands
show diagnostic sanity
To display sanity check results, use the show diagnostic sanity command.
show diagnostic sanity
Syntax Description
This command has no arguments or keywords.
Command Default
If you enter this command without any arguments, it displays information for all the Gigabit Ethernet WAN interfaces in the Catalyst 6500 series switch.
Command Modes
Privileged EXEC (#)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The sanity check runs a set of predetermined checks on the configuration with a possible combination of certain system states to compile a list of warning conditions. The checks are designed to look for anything that seems out of place and are intended to serve as an aid to maintaining the system sanity.
The following is a list of the checks that are run and the action taken when the condition is found:
•
Checks whether the default gateways are reachable. If so, the system stops pinging.
•
If a port autonegotiates to half duplex, the system flags it.
Trunking Checks
•
If a trunk port has the mode set to on, the system flags it.
•
If a port is trunking and mode is auto, the system flags it.
•
If a trunk port is not trunking and the mode is desirable, the system flags it.
•
If a trunk port negotiates to half duplex, the system flags it.
Channeling Checks
•
If a port has channeling mode set to on, the system flags it.
•
If a port is not channeling and the mode is set to desirable, the system flags it.
•
If a VLAN has a spanning-tree root of 32K (root is not set), the system flags it.
Spanning-tree VLAN Checks
•
If a VLAN has a max age on the spanning-tree root that is different than the default, the system flags it.
•
If a VLAN has a fwd delay on the spanning-tree root that is different than the default, the system flags it.
•
If a VLAN has a fwd delay on the bridge that is different than the default, the system flags it.
•
If a VLAN has a fwd delay on the bridge that is different than the default, the system flags it.
•
If a VLAN has a hello time on the bridge that is different than the default, the system flags it.
Spanning-tree Port Checks
•
If a port has a port cost that is different than the default, the system flags it.
•
If a port has a port priority that is different than the default, the system flags it.
UDLD Checks
•
If a port has UDLD disabled, the system flags it.
•
If a port had UDLD shut down, the system flags it.
•
If a port had a UDLD undetermined state, the system flags it.
Assorted Port Checks
•
If a port had receive flow control disabled, the system flags it.
•
If a trunk port had PortFast enabled, the system flags it.
•
The system flags it if an inline power port has any of the following states:
–
denied
–
faulty
–
other
–
off
•
If a port has a native VLAN mismatch, the system flags it.
•
If a port has a duplex mismatch, the system flags it.
Bootstring and Config Register Checks
•
The config register on the primary supervisor engine (and on the secondary supervisor engine if present) must be one of the following values: 0x2 , 0x102, or 0x2102.
•
The system verifies the bootstring on the primary supervisor engine (and on the secondary supervisor engine if present). The system displays a message if the bootstring is empty.
•
The system verifies that every file is specified in the bootstring. The system displays a message if the file is absent or shows up with a wrong checksum.
If only device: is specified as a filename, then the system verifies that the first file is on the device.
Assorted Checks
•
The system displays a message if IGMP snooping is disabled.
•
The system displays a message if any of the values of the snmp community access strings {RO,RW,RW-ALL} is the same as the default.
•
The system displays a message if any of the modules are in states other than "Ok."
•
The system displays a message that lists all the tests that failed (displayed as an "F") in the show test all command.
•
The system displays a message if *fast is not configured on the switch anywhere.
•
The system displays a message if there is enough room for the crashinfo file on the bootflash:.
•
The system displays a message if multicast routing is enabled globally but is not applied to all interfaces.
•
The system displays a message if IGMP snooping is disabled and RGMP is enabled.
Examples
This example displays samples of the messages that could be displayed with the show diagnostic sanity command:
Router# show diagnostic sanity
Pinging default gateway 10.6.141.1 ....
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.6.141.1, timeout is 2 seconds:
Success rate is 0 percent (0/5)
IGMP snooping disabled please enable it for optimum config.
IGMP snooping disabled but RGMP enabled on the following interfaces,
please enable IGMP for proper config :
Vlan1, Vlan2, GigabitEthernet1/1
Multicast routing is enabled globally but not enabled on the following
GigabitEthernet1/1, GigabitEthernet1/2
A programming algorithm mismatch was found on the device bootflash:
Formatting the device is recommended.
The bootflash: does not have enough free space to accomodate the crashinfo file.
Please check your confreg value : 0x0.
Please check your confreg value on standby: 0x0.
The boot string is empty. Please enter a valid boot string .
Could not verify boot image "disk0:" specified in the boot string on the
Invalid boot image "bootflash:asdasd" specified in the boot string on the
Please check your boot string on the slave.
UDLD has been disabled globally - port-level UDLD sanity checks are
The following ports have UDLD disabled. Please enable UDLD for optimum
The following ports have an unknown UDLD link state. Please enable UDLD
on both sides of the link:
The following ports have portfast enabled:
The following ports have trunk mode set to on:
The following trunks have mode set to auto:
The following ports with mode set to desirable are not trunking:
The following trunk ports have negotiated to half-duplex:
The following ports are configured for channel mode on:
Fa4/1, Fa4/2, Fa4/3, Fa4/4
The following ports, not channeling are configured for channel mode
The following vlan(s) have a spanning tree root of 32768:
The following vlan(s) have max age on the spanning tree root different from
The following vlan(s) have forward delay on the spanning tree root different
The following vlan(s) have hello time on the spanning tree root different
The following vlan(s) have max age on the bridge different from the
The following vlan(s) have fwd delay on the bridge different from the
The following vlan(s) have hello time on the bridge different from the
The following vlan(s) have a different port priority than the default
on the port FastEthernet4/1
The following ports have recieve flow control disabled:
The following inline power ports have power-deny/faulty status:
The following ports have negotiated to half-duplex:
The following vlans have a duplex mismatch:
The following interafaces have a native vlan mismatch:
interface (native vlan - neighbor vlan)
The value for Community-Access on read-only operations for SNMP is the same
as default. Please verify that this is the best value from a security point
The value for Community-Access on write-only operations for SNMP is the same
as default. Please verify that this is the best value from a security point
The value for Community-Access on read-write operations for SNMP is the same
as default. Please verify that this is the best value from a security point
Please check the status of the following modules:
Module 2 had a MINOR_ERROR.
The Module 2 failed the following tests:
The following ports from Module2 failed test1:
show dot1q-tunnel
To display a list of 802.1Q tunnel-enabled ports, use the show dot1q-tunnel command.
show dot1q-tunnel [{interface interface interface-number}]
Syntax Description
interface interface
|
(Optional) Specifies the interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, and port-channel.
|
interface-number
|
Interface number; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Default
EXEC
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
If you do not enter any keywords, the 802.1Q tunnel ports for all interfaces are displayed.
The interface-number argument designates the module and port number for the ethernet, fastethernet, gigabitethernet, and tengigabitethernet keywords. Valid values depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
The interface-number argument designates the port-channel number for the port-channel keyword; valid values are from 1 to 282. The values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example indicates that the port is up and has one 802.1Q tunnel that is configured on it:
Router# show dot1q-tunnel interface port-channel 10
Related Commands
show dot1x
To display the 802.1X information, use the show dot1x command.
show dot1x {interface interface interface-number}
show dot1x {all | brief | summary | {statistics {interface interface interface-number}}}
Syntax Description
interface interface
|
Displays the 802.1X information for the interface type; possible valid values are ethernet, fastethernet, gigabitethernet, and tengigabitethernet.
|
interface-number
|
Interface number; see the "Usage Guidelines" section for valid values.
|
all
|
Displays the 802.1X information for all interfaces.
|
brief
|
Displays information about the 802.1X status for all interfaces.
|
summary
|
Displays information about the 802.1X summary for the whole system.
|
statistics
|
Displays information about the 802.1X port; see the "Usage Guidelines" section for information.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
When entering the show dot1x statistics command, you must enter interface interface interface-number for the command to perform correctly.
If you disable 802.1X globally, the output of the show dot1x brief command displays nothing and the show dot1x summary command output displays 0 in all fields.
The interface-number argument designates the module and port number for the ethernet, fastethernet, gigabitethernet, and tengigabitetherne keywords. Valid values depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display the 802.1X information for a specific interface:
Router# show dot1x interface fastethernet 5/1
Default Dot1x Configuration Exists for this interface FastEthernet5/1
AuthSM State = FORCE AUTHORIZED
PortControl = Force Authorized
Re-authentication = Disabled
ReAuthPeriod = 3600 Seconds
ServerTimeout = 30 Seconds
This example shows how to display the 802.1X information for all interfaces:
Dot1x Info for interface FastEthernet3/2
----------------------------------------------------
AuthSM State = FORCE UNAUTHORIZED
BendSM State = IDLE
PortStatus = UNAUTHORIZED
MaxReq = 2
MultiHosts = Disabled
Port Control = Force UnAuthorized
QuietPeriod = 60 Seconds
Re-authentication = Disabled
ReAuthPeriod = 3600 Seconds
ServerTimeout = 30 Seconds
SuppTimeout = 30 Seconds
TxPeriod = 30 Seconds
Dot1x Info for interface FastEthernet3/12
----------------------------------------------------
AuthSM State = Unknown State
BendSM State = Unknown State
PortStatus = UNKNOWN
MaxReq = 2
MultiHosts = Disabled
Port Control = Auto
QuietPeriod = 60 Seconds
Re-authentication = Disabled
ReAuthPeriod = 3600 Seconds
ServerTimeout = 30 Seconds
SuppTimeout = 30 Seconds
TxPeriod = 30 Seconds
This example shows how to display the 802.1X statistics for a port:
Router# show dot1x statistics interface fastethernet3/1
PortStatistics Parameters for Dot1x
--------------------------------------------
TxReqId = 0 TxReq = 0 TxTotal = 0
RxStart = 0 RxLogoff = 0 RxRespId = 0 RxResp = 0
RxInvalid = 0 RxLenErr = 0 RxTotal= 0
RxVersion = 0 LastRxSrcMac 0000.0000.0000
This example shows how to display a summary of 802.1X information for the whole system:
Router# show dot1x summary
Total number of dot1x enabled ports: 336
Total number of FORCE_UNAUTHORIZED dot1x ports: 0
Total number of authorized dot1x enabled ports: 254
Total number of dot1x ports in single host mode: 336
Total number of dot1x ports in multi host mode: 0
Total number of dot1x authenticated supplicants: 254
Total number of supplicants in AUTH_DISCONNECTED state: 0
Total number of supplicants in AUTH_CONNECTING state: 0
Total number of supplicants in AUTH_AUTHENTICATING state: 0
Total number of supplicants in AUTH_HELD state: 0
This example shows how to display the status of all 802.1X-enabled ports:
RV - Radius returned VLAN
Port Supplicant MAC AuthSM State BendSM State Port Status RV
---- -------------- ------------ ------------ ----------- ----
Fa4/1 0000.0000.0000 N/A N/A N/A -
Fa4/2 0000.0000.0000 N/A N/A N/A -
Fa4/3 0000.0000.0000 N/A N/A N/A -
Fa4/4 0000.0000.0000 N/A N/A N/A -
Fa4/5 0000.0000.0000 N/A N/A N/A -
Fa4/6 0000.0000.0000 N/A N/A N/A -
Fa4/7 0000.0000.0000 N/A N/A N/A -
Fa4/35 00fe.ed00.01ba AUTHENTICATED IDLE AUTHORIZED 101
Fa4/36 00fe.ed00.01b8 AUTHENTICATED IDLE AUTHORIZED 101
Fa4/37 00fe.ed00.01e6 AUTHENTICATED IDLE AUTHORIZED 101
Fa4/38 00fe.ed00.01e4 AUTHENTICATED IDLE AUTHORIZED 101
Fa4/39 00fe.ed00.01e2 AUTHENTICATED IDLE AUTHORIZED 101
Fa4/40 00fe.ed00.01e0 AUTHENTICATED IDLE AUTHORIZED 101
Fa4/41 00fe.ed00.01de AUTHENTICATED IDLE AUTHORIZED 101
Fa4/42 00fe.ed00.01dc AUTHENTICATED IDLE AUTHORIZED 101
show dss log
To display the invalidation routes for the DSS range on the NetFlow table, use the show dss log command.
show dss log {ip | ipv6}
Syntax Description
ip
|
Displays the range-invalidation profile for the DSS IP.
|
ipv6
|
Displays the range-invalidation profile for the DSS IPv6.
|
Command Default
This command has no default settings.
Command Default
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Whenever an IPv6 entry is deleted from the routing table, a message is sent to the switch processor to remove the entries that are associated to that network. Several IPv6 prefixes are collapsed to the less specific one if too many invalidations occur in a short period of time.
Examples
This example shows how to display the range-invalidation profile for the DSS IP:
22:50:18.551 prefix 172.20.52.18 mask 172.20.52.18
22:50:20.059 prefix 127.0.0.0 mask 255.0.0.0
22:51:48.767 prefix 172.20.52.18 mask 172.20.52.18
22:51:52.651 prefix 0.0.0.0 mask 0.0.0.0
22:53:02.651 prefix 0.0.0.0 mask 0.0.0.0
22:53:19.651 prefix 0.0.0.0 mask 0.0.0.0
show environment alarm
To display the information about the environmental alarm, use the show environment alarm command.
show environment alarm [{status | threshold} [frutype]]
Syntax Description
status
|
(Optional) Displays the operational FRU status.
|
threshold
|
(Optional) Displays the preprogrammed alarm thresholds.
|
frutype
|
(Optional) Alarm type; valid values are all, backplane, clock number, earl slot, fan-tray, module slot, rp slot, power-supply number, supervisor slot, and vtt number. See the "Usage Guidelines" section for a list of valid values for number and slot.
|
Command Default
If you do not enter a frutype, all the information about the environmental alarm status is displayed.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Valid values for the frutype are as follows:
•
clock number—1 and 2.
•
earl slot—See the "Usage Guidelines" section for valid values.
•
module slot—See the "Usage Guidelines" section for valid values.
•
rp slot—See the "Usage Guidelines" section for valid values.
•
power-supply number—1 and 2.
•
supervisor slot—See the "Usage Guidelines" section for valid values.
•
vtt number—1 to 3.
The slot argument designates the module and port number. Valid values for slot depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display all the information about the status of the environmental alarm:
Router> show environment alarm threshold
environmental alarm thresholds:
power-supply 1 fan-fail: OK
threshold #1 for power-supply 1 fan-fail:
(sensor value != 0) is system minor alarm
power-supply 1 power-output-fail: OK
threshold #1 for power-supply 1 power-output-fail:
(sensor value != 0) is system minor alarm
fantray fan operation sensor: OK
threshold #1 for fantray fan operation sensor:
(sensor value != 0) is system minor alarm
threshold #1 for operating clock count:
(sensor value < 2) is system minor alarm
threshold #2 for operating clock count:
(sensor value < 1) is system major alarm
threshold #1 for operating VTT count:
(sensor value < 3) is system minor alarm
threshold #2 for operating VTT count:
(sensor value < 2) is system major alarm
threshold #1 for VTT 1 OK:
(sensor value != 0) is system minor alarm
threshold #1 for VTT 2 OK:
(sensor value != 0) is system minor alarm
threshold #1 for VTT 3 OK:
(sensor value != 0) is system minor alarm
threshold #1 for clock 1 OK:
(sensor value != 0) is system minor alarm
threshold #1 for clock 2 OK:
(sensor value != 0) is system minor alarm
module 1 power-output-fail: OK
threshold #1 for module 1 power-output-fail:
(sensor value != 0) is system major alarm
module 1 outlet temperature: 21C
threshold #1 for module 1 outlet temperature:
(sensor value > 60) is system minor alarm
threshold #2 for module 1 outlet temperature:
(sensor value > 70) is system major alarm
module 1 inlet temperature: 25C
threshold #1 for module 1 inlet temperature:
(sensor value > 60) is system minor alarm
threshold #2 for module 1 inlet temperature:
(sensor value > 70) is system major alarm
module 1 device-1 temperature: 30C
threshold #1 for module 1 device-1 temperature:
(sensor value > 60) is system minor alarm
threshold #2 for module 1 device-1 temperature:
(sensor value > 70) is system major alarm
module 1 device-2 temperature: 29C
threshold #1 for module 1 device-2 temperature:
(sensor value > 60) is system minor alarm
threshold #2 for module 1 device-2 temperature:
(sensor value > 70) is system major alarm
module 5 power-output-fail: OK
threshold #1 for module 5 power-output-fail:
(sensor value != 0) is system major alarm
module 5 outlet temperature: 26C
threshold #1 for module 5 outlet temperature:
(sensor value > 60) is system minor alarm
threshold #2 for module 5 outlet temperature:
(sensor value > 75) is system major alarm
module 5 inlet temperature: 23C
threshold #1 for module 5 inlet temperature:
(sensor value > 50) is system minor alarm
threshold #2 for module 5 inlet temperature:
(sensor value > 65) is system major alarm
EARL 1 outlet temperature: N/O
threshold #1 for EARL 1 outlet temperature:
(sensor value > 60) is system minor alarm
threshold #2 for EARL 1 outlet temperature:
(sensor value > 75) is system major alarm
EARL 1 inlet temperature: N/O
threshold #1 for EARL 1 inlet temperature:
(sensor value > 50) is system minor alarm
threshold #2 for EARL 1 inlet temperature:
(sensor value > 65) is system major alarm
Related Commands
show environment cooling
To display the information about the cooling parameter, use the show environment cooling command.
show environment cooling
Syntax Description
This command has no arguments or keywords.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the cooling parameter:
Router# show environment cooling
fan-tray 1 fan-fail: failed
chassis cooling capacity: 690 cfm
chassis per slot cooling capacity: 75 cfm
module 1 cooling requirement: 70 cfm
module 2 cooling requirement: 70 cfm
module 5 cooling requirement: 30 cfm
module 6 cooling requirement: 70 cfm
module 8 cooling requirement: 70 cfm
module 9 cooling requirement: 30 cfm
Related Commands
show environment status
To display the information about the operational FRU status, use the show environment status command.
show environment status [frutype]
Syntax Description
frutype
|
(Optional) FRU type; see the "Usage Guidelines" section for a list of valid values.
|
Command Default
If you do not enter a frutype, all FRU status information is displayed.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Valid values for the frutype are as follows:
•
all—No arguments.
•
backplane—No arguments.
•
clock number—1 and 2.
•
earl slot—See the "Usage Guidelines" section for valid values.
•
fan-tray—No arguments.
•
module slot—See the "Usage Guidelines" section for valid values.
•
power-supply number—1 and 2.
•
rp slot—See the "Usage Guidelines" section for valid values.
•
supervisor slot—See the "Usage Guidelines" section for valid values.
•
vtt number—1 to 3.
The slot argument designates the module and port number. Valid values for slot depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display the information about the environmental status:
Router> show environment status
fantray fan operation sensor: OK
clock 1 OK: OK, clock 1 clock-inuse: not-in-use
clock 2 OK: OK, clock 2 clock-inuse: in-use
power-supply 1 fan-fail: OK
power-supply 1 power-output-fail: OK
module 1 power-output-fail: OK
module 1 outlet temperature: 21C
module 1 inlet temperature: 25C
module 1 device-1 temperature: 30C
module 1 device-2 temperature: 29C
EARL 1 outlet temperature: N/O
EARL 1 inlet temperature: N/O
module 5 power-output-fail: OK
module 5 outlet temperature: 26C
module 5 inlet temperature: 23C
module 5 device-1 temperature: 26C
module 5 device-2 temperature: 27C
This example shows how to display the information about the high-capacity power supplies:
Router# show environment status power-supply 2
power-supply 2 fan-fail: OK
power-supply 2 power-input 1: none
power-supply 2 power-input 2: AC low
power-supply 2 power-input 3: AC high
power-supply 2 power-output: low (mode 1)
power-supply 2 power-output-fail: OK
Table 2-35 describes the fields that are shown in the example.
Table 2-35 show environment status Command Output Fields
Field
|
Description
|
operating clock count
|
Physical clock count.
|
operating VTT count
|
Physical VTT count.
|
fan tray fan operation sensor
|
System fan tray failure status. The failure of the system fan tray is indicated as a minor alarm.
|
VTT 1, VTT2, and VTT3
|
Status of the chassis backplane power monitors that are located on the rear of the chassis under the rear cover. Operation of at least two VTTs is required for the system to function properly. A minor system alarm is signaled when one of the three VTTs fails. A major alarm is signaled when two or more VTTs fail and the supervisor engine is accessible through the console port.
|
clock # clock-inuse
|
Clock status. Failure of either clock is considered to be a minor alarm.
|
power-supply # fan-fail
|
Fan failure. Fan failures on either or both (if any) power supplies are considered minor alarms.
|
power-input-fail
|
Power input failure status (none, AC high, AC low).
|
power-output-fail
|
Power output failure status (high, low).
|
outlet temperature
|
Exhaust temperature value.
|
inlet temperature
|
Intake temperature value.
|
device-1 and device-2 temperature
|
Two devices that measure the internal temperature on each indicated module. The temperature shown indicates the temperature that the device is recording. The devices are not placed at an inlet or an exit but are additional reference points.
|
Related Commands
show environment temperature
To display the current temperature readings, use the show environment temperature command.
show environment temperature [frutype]
Syntax Description
frutype
|
(Optional) FRU type; see the "Usage Guidelines" section for a list of valid values.
|
Command Default
If you do not enter a frutype, the module and EARL temperature readings are displayed.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Valid values for the frutype are as follows:
•
earl slot—See the "Usage Guidelines" section for valid values.
•
module slot—See the "Usage Guidelines" section for valid values.
•
rp slot—See the "Usage Guidelines" section for valid values.
•
vtt number—1 to 3.
•
clock number—1 and 2.
The slot argument designates the module and port number. Valid values for slot depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
The show environment temperature module command output includes the updated information after an SCP response is received.
In the output display, the following applies:
•
N/O means not operational—The sensor is broken, returning impossible values.
•
N/A means not available—The sensor value is presently not available; try again later.
•
VTT 1, 2, and 3 refer to the power monitors that are located on the chassis backplane under the rear cover.
Examples
This example shows how to display the temperature information for a specific module:
Router> show environment temperature module 5
module 5 outlet temperature: 34C
module 5 inlet temperature: 27C
module 5 device-1 temperature: 42C
module 5 device-2 temperature: 41C
module 5 asic-1 (SSO-1) temp: 29C
module 5 asic-2 (SSO-2) temp: 29C
module 5 asic-3 (SSO-3) temp: 29C
module 5 asic-4 (SSO-4) temp: 28C
module 5 asic-5 (SSA-1) temp: 29C
module 5 asic-6 (HYPERION-1) temp: 29C
This example shows how to display the temperature readings for all modules:
Router> show environment temperature
VTT 1 outlet temperature: 25C
VTT 2 outlet temperature: 24C
VTT 3 outlet temperature: 28C
module 1 outlet temperature: 24C
module 1 device-2 temperature: 29C
RP 1 outlet temperature: 25C
RP 1 inlet temperature: 29C
EARL 1 outlet temperature: 25C
EARL 1 inlet temperature: 22C
module 5 outlet temperature: 27C
module 5 inlet temperature: 22C
Table 2-36 describes the fields that are shown in the example.
Table 2-36 show environment temperature Command Output Fields
Field
|
Description
|
outlet temperature
|
Exhaust temperature value.
|
inlet temperature
|
Intake temperature value.
|
device-1 and device-2 temperature
|
Two devices that measure the internal temperature on the indicated module. The temperature shown indicates the temperature that the device is recording. The devices are not placed at an inlet or an exit but are additional reference points.
|
Related Commands
show eobc
To display the information about the EOBC interface, use the show eobc command.
show eobc
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the EOBC interface:
EOBC0/0 is up, line protocol is up
Hardware is DEC21143, address is 0000.2100.0000 (bia 0000.2100.0000)
MTU 0 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Unknown duplex, Unknown Speed, MII
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Output queue 0/40, 0 drops; input queue 25/2147483647, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
172196 packets input, 11912131 bytes
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
172144 packets output, 11363476 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
dec21140_ds=0x618FB938, registers=0x3C018000, ib=0x38A9180
rx ring entries=128, tx ring entries=256, af setup failed=0
rxring=0x38A9280, rxr shadow=0x618FBB20, rx_head=28, rx_tail=0
txring=0x38A9AC0, txr shadow=0x618FBD4C, tx_head=72, tx_tail=72, tx_count=0
CSR0=0xF8024882, CSR1=0xFFFFFFFF, CSR2=0xFFFFFFFF, CSR3=0x38A9280
CSR4=0x38A9AC0, CSR5=0xF0660000, CSR6=0x320CA002, CSR7=0xF3FFA261
CSR8=0xE0000000, CSR9=0xFFFDC3FF, CSR10=0xFFFFFFFF, CSR11=0x0
CSR12=0xC6, CSR13=0xFFFF0000, CSR14=0xFFFFFFFF, CSR15=0x8FF80000
CFID=0x00191011, CFCS=0x02800006, CFRV=0x02000041, CFLT=0x0000FF00
CBIO=0x20000801, CBMA=0x48018000, CFIT=0x28140120, CFDD=0x00000400
Register 0x00: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x08: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x10: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x18: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
throttled=0, enabled=0, disabled=0
rx_fifo_overflow=0, rx_no_enp=0, rx_discard=0
tx_underrun_err=0, tx_jabber_timeout=0, tx_carrier_loss=0
tx_no_carrier=0, tx_late_collision=0, tx_excess_coll=0
tx_collision_cnt=0, tx_deferred=0, fatal_tx_err=0, tbl_overflow=0
HW addr filter: 0x38D2EE0, ISL Disabled
Entry= 0: Addr=0000.0000.0000
Entry= 1: Addr=0000.0000.0000
Entry= 2: Addr=0000.0000.0000
Entry= 3: Addr=0000.0000.0000
Entry= 4: Addr=0000.0000.0000
Entry= 5: Addr=0000.0000.0000
Entry= 6: Addr=0000.0000.0000
Entry= 7: Addr=0000.0000.0000
Entry= 8: Addr=0000.0000.0000
Entry= 9: Addr=0000.0000.0000
Entry=10: Addr=0000.0000.0000
Entry=11: Addr=0000.0000.0000
Entry=12: Addr=0000.0000.0000
Entry=13: Addr=0000.0000.0000
Entry=14: Addr=0000.0000.0000
Entry=15: Addr=0000.2100.0000
This example shows how to display the information about the EOBC interface but excludes lines that contain the word output:
Router> show eobc | exclude output
EOBC0/0 is up, line protocol is up
Hardware is DEC21143, address is 0000.2100.0000 (bia 0000.2100.0000)
MTU 0 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Unknown duplex, Unknown Speed, MII
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters never
Output queue 0/40, 0 drops; input queue 25/2147483647, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
175919 packets input, 12196443 bytes
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
dec21140_ds=0x618FB938, registers=0x3C018000, ib=0x38A9180
rx ring entries=128, tx ring entries=256, af setup failed=0
rxring=0x38A9280, rxr shadow=0x618FBB20, rx_head=7, rx_tail=0
txring=0x38A9AC0, txr shadow=0x618FBD4C, tx_head=209, tx_tail=209, tx_count=0
CSR0=0xF8024882, CSR1=0xFFFFFFFF, CSR2=0xFFFFFFFF, CSR3=0x38A9280
CSR4=0x38A9AC0, CSR5=0xF0660000, CSR6=0x320CA002, CSR7=0xF3FFA261
CSR8=0xE0000000, CSR9=0xFFFDC3FF, CSR10=0xFFFFFFFF, CSR11=0x0
CSR12=0xC6, CSR13=0xFFFF0000, CSR14=0xFFFFFFFF, CSR15=0x8FF80000
CFID=0x00191011, CFCS=0x02800006, CFRV=0x02000041, CFLT=0x0000FF00
CBIO=0x20000801, CBMA=0x48018000, CFIT=0x28140120, CFDD=0x00000400
Register 0x00: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x08: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x10: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
Register 0x18: FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
throttled=0, enabled=0, disabled=0
rx_fifo_overflow=0, rx_no_enp=0, rx_discard=0
tx_underrun_err=0, tx_jabber_timeout=0, tx_carrier_loss=0
tx_no_carrier=0, tx_late_collision=0, tx_excess_coll=0
tx_collision_cnt=0, tx_deferred=0, fatal_tx_err=0, tbl_overflow=0
HW addr filter: 0x38D2EE0, ISL Disabled
Entry= 0: Addr=0000.0000.0000
Entry= 1: Addr=0000.0000.0000
Entry= 2: Addr=0000.0000.0000
Entry= 3: Addr=0000.0000.0000
Entry= 4: Addr=0000.0000.0000
Entry= 5: Addr=0000.0000.0000
Entry= 6: Addr=0000.0000.0000
Entry= 7: Addr=0000.0000.0000
Entry= 8: Addr=0000.0000.0000
Entry= 9: Addr=0000.0000.0000
Entry=10: Addr=0000.0000.0000
Entry=11: Addr=0000.0000.0000
Entry=12: Addr=0000.0000.0000
Entry=13: Addr=0000.0000.0000
Entry=14: Addr=0000.0000.0000
Entry=15: Addr=0000.2100.0000
show erm statistics
To display the FIB TCAM exception status for IPv4, IPv6, and MPLS protocols, use the show erm statistics command.
show erm statistics
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The IPv4, IPv6, and MPLS exception state displays FALSE when the protocol is not under the exception or displays TRUE when the protocol is under the exception.
Examples
This example shows how to display the FIB TCAM exception status for IPv4, IPv6, and MPLS protocols:
Router> show erm statistics
Current IPv4 excep state = FALSE
Current IPv6 excep state = FALSE
Current MPLS excep state = FALSE
Related Commands
Command
|
Description
|
mls erm priority
|
Assigns the priorities to define an order in which protocols attempt to recover from the exception status.
|
show errdisable detect
To display the error-disable detection status, use the show errdisable detect command.
show errdisable detect
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the error-disable detection status:
Router# show errdisable detect
ErrDisable Reason Detection status
----------------- ----------------
packet-buffer-err Enabled
Related Commands
show errdisable flap-value
To display the flap values for error-disable detection, use the show errdisable flap-value command.
show errdisable flap-value
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the flap values for error-disable detection:
Router# show errdisable flap-value
ErrDisable Reason Flaps Time (sec)
----------------- ------ ----------
Related Commands
show errdisable recovery
To display the information about the error-disable recovery timer, use the show errdisable recovery command.
show errdisable recovery
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the error-disable recovery timer:
Router# show errdisable recovery
ErrDisable Reason Timer Status
----------------- --------------
Timer interval:300 seconds
Interfaces that will be enabled at the next timeout:
Interface Errdisable reason Time left(sec)
--------- ----------------- --------------
Related Commands
Command
|
Description
|
errdisable recovery
|
Configures the recovery mechanism variables.
|
show interfaces status
|
Displays the interface status or a list of interfaces in an error-disabled state on LAN ports only.
|
show etherchannel
To display the EtherChannel information for a channel, use the show etherchannel command.
show etherchannel [channel-group] {port-channel | brief | detail | summary | port |
load-balance | protocol}
Syntax Description
channel-group
|
(Optional) Number of the channel group; valid values are a maximum of 64 values from 1 to 282.
|
port-channel
|
Displays the port-channel information.
|
brief
|
Displays a summary of EtherChannel information.
|
detail
|
Displays the detailed EtherChannel information.
|
summary
|
Displays a one-line summary per channel group.
|
port
|
Displays the EtherChannel port information.
|
load-balance
|
Displays load-balance information.
|
protocol
|
Displays the enabled protocol.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
If you do not specify a channel-group, all channel groups are displayed.
The channel-group values that are from 257 to 282 are supported on the CSM and the FWSM only.
In the output, the Passive port list field is displayed for Layer 3 port channels only. This field means that the physical interface, which is still not up, is configured to be in the channel group (and indirectly is the only port channel in the channel group).
In the show etherchannel protocol output, if the interface is configured as part of the channel in mode ON, the command displays Protocol: - (Mode ON).
In the output of the show etherchannel summary command, the following guidelines apply:
•
In the column that displays the protocol that is used for the channel, if the channel mode is ON, a hyphen (-) is displayed.
•
Multiple aggregators are supported for LACP. For example, if two different bundles are created, Po1 indicates the primary aggregator, and Po1A and Po1B indicate the secondary aggregators.
In the output of the show etherchannel load-balance command, the following guidelines apply:
•
For EtherChannel load balancing of IPv6 traffic, if the traffic is bridged onto an EtherChannel (for example, it is a Layer 2 channel and traffic in the same VLAN is bridged across it), the traffic is always load balanced by the IPv6 addresses or either src, dest, or src-dest, depending on the configuration. For this reason, the switch ignores the MAC/IP/ports for bridged IPv6 traffic. If you configure src-dst-mac, the src-dst-ip(v6) address is used. If you configure src-mac, the src-ip(v6) address is used.
•
IPv6 traffic that is routed over a Layer 2 or a Layer 3 channel is load balanced based on MAC addresses or IPv6 addresses, depending on the configuration. The MAC/IP and the src/dst/src-dst are supported, but load balancing that is based on Layer 4 ports is not supported. If you use the port keyword, the IPv6 addresses, src, dst, or src-dst are used.
Examples
This example shows how to display the port-channel information for a specific group:
Router# show etherchannel 12 port-channel
Port-channels in the group:
Age of the Port-channel = 143h:01m:12s
Logical slot/port = 14/1 Number of ports = 2
GC = - HotStandBy port = null
Port state = Port-channel Ag-Inuse
Ports in the Port-channel:
------+------+------+------------
Time since last port bundled: 16h:28m:58s Fa4/1
Time since last port Un-bundled: 16h:29m:00s Fa4/4
This example shows how to display the load-balancing information:
Router# show etherchannel load-balance
EtherChannel Load-Balancing Configuration:
EtherChannel Load-Balancing Addresses Used Per-Protocol:
Non-IP: Destination MAC address
IPv4: Destination MAC address
IPv6: Destination MAC address (routed packets)
Destination IP address (bridged packets)
This example shows how to display a summary of information for a specific group:
Router# show etherchannel 1 brief
Port-channels: 1 Max Port-channels = 1
This example shows how to display the detailed information for a specific group:
Router# show etherchannel 12 detail
Port-channels: 1 Max Port-channels = 1
Port state = Down Not-in-Bndl
Channel group = 12 Mode = Desirable-Sl Gcchange = 0
Port-channel = null GC = 0x00000000 Pseudo port-channel = Po1
Port index = 0 Load = 0x00 Protocol = PAgP
Flags: S - Device is sending Slow LACPDUs F - Device is sending fast LACPDUs
A - Device is in active mode P - Device is in passive mode
LACP Port Admin Oper Port Port
Port Flags State Priority Key Key Number State
Fa4/1 SA bndl 32768 100 100 0xc1 0x75
Port System ID Port Number Age Flags
Fa4/1 8000,00b0.c23e.d861 0x81 14s SP
LACP Partner Partner Partner
Port Priority Oper Key Port State
Age of the port in the current state: 16h:27m:42s
Port-channels in the group:
Age of the Port-channel = 04d:02h:52m:26s
Logical slot/port = 14/1 Number of ports = 0
GC = 0x00000000 HotStandBy port = null
Port state = Port-channel Ag-Not-Inuse
This example shows how to display a one-line summary per channel group:
Router# show etherchannel summary
Flags: D - down P - in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
U - in use f - failed to allocate aggregator
Number of channel-groups in use: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
12 Po12(SD) PAgP Fa5/2(D)
This example shows how to display the information about the EtherChannel port for a specific group:
Router# show etherchannel 1 port
Port state = EC-Enbld Down Not-in-Bndl Usr-Config
Channel group = 1 Mode = Desirable Gcchange = 0
Port-channel = null GC = 0x00000000 Psudo-agport = Po1
Port index = 0 Load = 0x00 Protocol = LACP
Flags: S - Device is sending Slow LACPDUs F - Device is sending fast LACPDUs
A - Device is in active mode P - Device is in passive mode
LACP Port Admin Oper Port Port
Port Flags State Priority Key Key Number State
Fa5/4 SA bndl 32768 100 100 0xc1 0x75
Port System ID Port Number Age Flags
Fa5/4 8000,00b0.c23e.d861 0x81 14s SP
LACP Partner Partner Partner
Port Priority Oper Key Port State
Age of the port in the current state: 04d:02h:57m:38s
This example shows how to display the protocol that was enabled:
Router# show etherchannel protocol
Related Commands
Command
|
Description
|
channel-group
|
Assigns and configures an EtherChannel interface to an EtherChannel group.
|
channel-protocol
|
Sets the protocol that is used on an interface to manage channeling.
|
interface port-channel
|
Creates a port-channel virtual interface and enters interface configuration mode.
|
show fm features
To display the information about the feature manager, use the show fm features command.
show fm features
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the feature manager:
Designated PISA:1 Non-designated PISA:1
Redundancy Status:designated
Interface:FastEthernet2/10 IP is enabled
hw[EGRESS] = 1, hw[INGRESS] = 1
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 0
Interface:FastEthernet2/26 IP is enabled
hw[EGRESS] = 1, hw[INGRESS] = 0
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 1
Interface:Vlan55 IP is enabled
hw[EGRESS] = 1, hw[INGRESS] = 1
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 0
Interface:Vlan101 IP is enabled
hw[EGRESS] = 1, hw[INGRESS] = 1
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 0
This example shows how to display the lines of feature manager information starting with the line that begins with Redundancy:
Router> show fm features | begin Redundancy
Redundancy Status: designated
show fm inband-counters
To display the number of inband packets that are sent by the PISA for SLB and WCCP, use the show fm inband-counters command.
show fm inband-counters
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The output display for the show fm inband-counters command includes the number of SLB inband packets that are sent by the PISA and the number of WCCP inband packets that are sent by the PISA.
If CBAC is configured, the command output displays the number of packets that are sent for CBAC by the PISA.
Examples
This example shows how to display the number of SLB and WCCP inband packets that are sent by the PISA:
Router# show fm inband-counters
show fm insp
To display the list and status of the ACLs and ports on which CBAC is configured, use the show fm insp command.
show fm insp [detail]
Syntax Description
detail
|
(Optional) Displays all of the flow information.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
If you can configure a VACL on the port before you configure CBAC, the status displayed is INACTIVE; otherwise, it is ACTIVE. If PFC resources are exhausted, the command displays BRIDGE and is followed by the number of failed currently active NetFlow requests that have been sent to the PISA for processing.
The show fm insp command output includes this information:
•
interface:—Interface on which the IP inspect feature is enabled
•
(direction)—Direction in which the IP inspect feature is enabled (IN or OUT)
•
acl name:—Name that is used to identify packets that are being inspected
•
status:—(ACTIVE or INACTIVE) displays if HW-assist is provided for this interface+direction (ACTIVE=hardware assisted or INACTIVE)
The optional detail keyword displays the ACEs that are part of the ACL that is used for IP inspect on the given interface direction.
Examples
This example shows how to display the list and status of CBAC-configured ACLs and ports:
interface:Vlan305(in) status :ACTIVE
Vlan305(out):status ACTIVE
show fm interface
To display the detailed information about the feature manager on a per-interface basis, use the show fm interface command.
show fm interface {{interface interface-number} | {null interface-number} | {port-channel
number} | {vlan vlan-id}}
Syntax Description
interface
|
Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
null interface-number
|
Specifies the null interface; the valid value is 0.
|
port-channel number
|
Specifies the channel interface; valid values are a maximum of 64 values ranging from 1 to 282.
|
vlan vlan-id
|
Specifies the VLAN; valid values are from 1 to 4094.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
The port-channel number values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display the detailed information about the feature manager on a specified interface:
Router# show fm interface fastethernet 2/26
Interface:FastEthernet2/26 IP is enabled
hw[EGRESS] = 1, hw[INGRESS] = 0
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 1
vmr IP value #1:0, 0, 0, 0, 0, 0, 0, 6 - 1
vmr IP mask #1:0, 0, FFFF, FFFF, 0, 0, 0, FF
vmr IP value #2:642D4122, 0, 0, 0, 1, 0, 0, 6 - 1
vmr IP mask #2:FFFFFFFF, 0, 0, 0, 1, 0, 0, FF
vmr IP value #3:0, 64020302, 0, 0, 6, 0, 0, 6 - 1
vmr IP mask #3:0, FFFFFFFF, 0, 0, 6, 0, 0, FF
vmr IP value #4:0, 64020302, 0, 0, A, 0, 0, 6 - 1
vmr IP mask #4:0, FFFFFFFF, 0, 0, A, 0, 0, FF
vmr IP value #5:0, 64020302, 0, 0, 12, 0, 0, 6 - 1
vmr IP mask #5:0, FFFFFFFF, 0, 0, 12, 0, 0, FF
vmr IP value #6:0, 0, 0, 0, 0, 0, 0, 0 - 2
vmr IP mask #6:0, 0, 0, 0, 0, 0, 0, 0
This example shows how to display the detailed information about the feature manager on a specific VLAN:
Router# show fm interface vlan 21
Interface: Vlan21 IP is disabled
hw_state[INGRESS] = not reduced, hw_state[EGRESS] = not reduced
-----------------------------------------------------------------------------
FM_FEATURE_IP_VACL_INGRESS i/f: Vl21 map name: test
=============================================================================
------------------------------------------------------------
IP Seq. No: 10 Seq. Result : VACL_ACTION_FORWARD_CAPTURE
------------------------------------------------------------
DPort - Destination Port SPort - Source Port Pro - Protocol
X - XTAG TOS - TOS Value Res - VMR Result
RFM - R-Recirc. Flag MRTNP - M-Multicast Flag R - Reflexive flag
- F-Fragment flag - T-Tcp Control N - Non-cachable
- M-More Fragments - P-Mask Priority(H-High, L-Low)
Adj. - Adj. Index T - M(Mask)/V(Value) FM - Flow Mask
NULL - Null FM SAO - Source Only FM DAO - Dest. Only FM
SADA - Sour.& Dest. Only VSADA - Vlan SADA Only FF - Full Flow
VFF - Vlan Full Flow F-VFF - Either FF or VFF A-VSD - Atleast VSADA
A-FF - Atleast FF A-VFF - Atleast VFF A-SON - Atleast SAO
A-DON - Atleast DAO A-SD - Atleast SADA SHORT - Shortest
A-SFF - Any short than FF A-EFF - Any except FF A-EVFF- Any except VFF
A-LVFF- Any less than VFF ERR - Flowmask Error
+----+-+---------------+---------------+-----+-----+---+---+-+---+-----+----+------+
|Indx|T| Dest Ip Addr | Source Ip Addr|DPort|SPort|Pro|RFM|X|ToS|MRTNP|Adj.| FM |
+----+-+---------------+---------------+-----+-----+---+---+-+---+-----+----+------+
1 V 22.2.2.2 21.1.1.1 0 0 0 --- 0 0 ----L ---- SHORT
M 255.255.255.255 255.255.255.255 0 0 0 000 0 0
2 V 32.2.2.2 31.1.1.1 0 0 0 --- 0 0 ----L ---- SHORT
M 255.255.255.255 255.255.255.255 0 0 0 000 0 0
3 V 0.0.0.0 0.0.0.0 0 0 0 --- 0 0 ----L ---- SHORT
M 0.0.0.0 0.0.0.0 0 0 0 000 0 0
------------------------------------------------------------
IP Seq. No: 65536 Seq. Result : VACL_ACTION_DROP
------------------------------------------------------------
+----+-+---------------+---------------+-----+-----+---+---+-+---+-----+----+------+
|Indx|T| Dest Ip Addr | Source Ip Addr|DPort|SPort|Pro|RFM|X|ToS|MRTNP|Adj.| FM |
+----+-+---------------+---------------+-----+-----+---+---+-+---+-----+----+------+
1 V 0.0.0.0 0.0.0.0 0 0 0 --- 0 0 ----L ---- SHORT
M 0.0.0.0 0.0.0.0 0 0 0 000 0 0
show fm ipv6 traffic-filter
To display the IPv6 information, use the show fm ipv6 traffic-filter command.
show fm ipv6 traffic-filter {all | {interface interface interface-number}}
Syntax Description
all
|
Displays IPv6 traffic filter information for all interfaces.
|
interface interface
|
Displays IPv6 traffic filter information for the specifed interface; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display the IPv6 information for a specific interface:
Router# show fm ipv6 traffic-filter interface vlan 50
-----------------------------------------------------------------------------
FM_FEATURE_IPV6_ACG_INGRESS Name:testipv6 i/f: Vlan50
=============================================================================
DPort - Destination Port SPort - Source Port Pro - Protocol
X - XTAG TOS - TOS Value Res - VMR Result
RFM - R-Recirc. Flag MRTNP - M-Multicast Flag R - Reflexive flag
- F-Fragment flag - T-Tcp Control N - Non-cachable
- M-More Fragments - P-Mask Priority(H-High, L-Low)
Adj. - Adj. Index T - M(Mask)/V(Value) FM - Flow Mask
NULL - Null FM SAO - Source Only FM DAO - Dest. Only FM
SADA - Sour.& Dest. Only VSADA - Vlan SADA Only FF - Full Flow
VFF - Vlan Full Flow F-VFF - Either FF or VFF A-VSD - Atleast VSADA
A-FF - Atleast FF A-VFF - Atleast VFF A-SON - Atleast SAO
A-DON - Atleast DAO A-SD - Atleast SADA SHORT - Shortest
A-SFF - Any short than FF A-EFF - Any except FF A-EVFF- Any except VFF
A-LVFF- Any less than VFF ERR - Flowmask Error
+----+-+----------------------------------------+----------------------------------------+
---+---+-+-----+----+------+
|Indx|T| Dest IPv6 Addr | Source IPv6
Addr |Pro|RFM|X|MRTNP|Adj.| FM |
+----+-+----------------------------------------+----------------------------------------+
---+---+-+-----+----+------+
200D::1 0 -F- - ----L ---- Shorte
M 0:FFFF:FFFF:FFFF:FFFF::
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 0 1
200D::1 17 --- - ----L ---- Shorte
M 0:FFFF:FFFF:FFFF:FFFF::
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 255 0
200D::1 0 -F- - ----L ---- Shorte
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 0 1
200D::1 17 --- - ----L ---- Shorte
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 255 0
:: :: 0 -F- - ----L ---- Shorte
:: :: 0 -F- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 0 --- - ----L ---- Shorte
This example shows how to display the IPv6 information for all interfaces:
Router# show fm ipv6 traffic-filter all
-----------------------------------------------------------------------------
FM_FEATURE_IPV6_ACG_INGRESS Name:testipv6 i/f: Vlan50
=============================================================================
DPort - Destination Port SPort - Source Port Pro - Protocol
X - XTAG TOS - TOS Value Res - VMR Result
RFM - R-Recirc. Flag MRTNP - M-Multicast Flag R - Reflexive flag
- F-Fragment flag - T-Tcp Control N - Non-cachable
- M-More Fragments - P-Mask Priority(H-High, L-Low)
Adj. - Adj. Index T - M(Mask)/V(Value) FM - Flow Mask
NULL - Null FM SAO - Source Only FM DAO - Dest. Only FM
SADA - Sour.& Dest. Only VSADA - Vlan SADA Only FF - Full Flow
VFF - Vlan Full Flow F-VFF - Either FF or VFF A-VSD - Atleast VSADA
A-FF - Atleast FF A-VFF - Atleast VFF A-SON - Atleast SAO
A-DON - Atleast DAO A-SD - Atleast SADA SHORT - Shortest
A-SFF - Any short than FF A-EFF - Any except FF A-EVFF- Any except VFF
A-LVFF- Any less than VFF ERR - Flowmask Error
+----+-+----------------------------------------+----------------------------------------+
---+---+-+-----+----+------+
|Indx|T| Dest IPv6 Addr | Source IPv6
Addr |Pro|RFM|X|MRTNP|Adj.| FM |
+----+-+----------------------------------------+----------------------------------------+
---+---+-+-----+----+------+
200D::1 0 -F- - ----L ---- Shorte
M 0:FFFF:FFFF:FFFF:FFFF::
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 0 1
200D::1 17 --- - ----L ---- Shorte
M 0:FFFF:FFFF:FFFF:FFFF::
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 255 0
200D::1 0 -F- - ----L ---- Shorte
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 0 1
200D::1 17 --- - ----L ---- Shorte
FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 255 0
:: :: 0 -F- - ----L ---- Shorte
:: :: 0 -F- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
:: :: 58 --- - ----L ---- Shorte
Interface(s) using this IPv6 Ingress Traffic Filter:
show fm nat netflow data
To display the information about the NAT-related NetFlow data, use the show fm nat netflow data command.
show fm nat netflow data
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the NAT-related NetFlow data:
Router> show fm nat netflow data
FM Pattern with stat push disabled: 1
Default/TCP/UDP Timeouts:
Def s/w timeout: 86400 h/w timeout: 300 Pattern(ingress): 4
Pattern(egress): 4 Push interval: 1333
TCP s/w timeout: 86400 h/w timeout: 300 Pattern(ingress): 4
Pattern(egress): 4 Push interval: 1333
UDP s/w timeout: 300 h/w timeout: 300 Pattern(ingress): 3
Pattern(egress): 3 Push interval: 100
Fin/Rst Inband packets sent per timeout :10000
Netflow mode to Zero-out Layer4 information for fragment packet lookup :
show fm reflexive
To display the information about the reflexive entry for the dynamic feature manager, use the show fm reflexive command.
show fm reflexive
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the reflexive entry for the dynamic feature manager:
Router# show fm reflexive
Vlan613:refacl, OUT-REF, 64060E0A, 64060D0A, 0, 0, 7, 783, 6
show fm summary
To display a summary of feature manager information, use the show fm summary command.
show fm summary
Syntax Description
This command has no keywords or arguments.
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display a summary of feature manager information:
Current global ACL merge algorithm:BDD
Interface:FastEthernet2/10
ACL merge algorithm used:
TCAM screening for features is ACTIVE outbound
TCAM screening for features is ACTIVE inbound
Interface:FastEthernet2/26
ACL merge algorithm used:
TCAM screening for features is ACTIVE outbound
TCAM screening for features is INACTIVE inbound
show fm vlan
To display the information about the per-VLAN feature manager, use the show fm vlan command.
show fm vlan vlan-id
Syntax Description
vlan-id
|
VLAN ID; valid values are from 1 to 4094.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the per-VLAN feature manager:
hw[EGRESS] = 1, hw[INGRESS] = 1
hw_force_default[EGRESS] = 0, hw_force_default[INGRESS] = 0
(only for IP_PROT) DestAddr SrcAddr Dpt Spt L4OP TOS Est prot Rslt
vmr IP value # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 6 permit
vmr IP mask # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 FF
vmr IP value # 2: 0.0.0.0 0.0.0.0 0 0 0 0 0 11 permit
vmr IP mask # 2: 0.0.0.0 0.0.0.0 0 0 0 0 0 FF
vmr IP value # 3: 0.0.0.0 0.0.0.0 0 0 0 0 0 0 deny
vmr IP mask # 3: 0.0.0.0 0.0.0.0 0 0 0 0 0 0
(only for IP_PROT) DestAddr SrcAddr Dpt Spt L4OP TOS Est prot Rslt
vmr IP value # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 0 permit
vmr IP mask # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 0
(only for IP_PROT) DestAddr SrcAddr Dpt Spt L4OP TOS Est prot Rslt
vmr IP value # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 6 permit
vmr IP mask # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 FF
vmr IP value # 2: 0.0.0.0 0.0.0.0 0 0 0 0 0 11 permit
vmr IP mask # 2: 0.0.0.0 0.0.0.0 0 0 0 0 0 FF
vmr IP value # 3: 0.0.0.0 0.0.0.0 0 0 0 0 0 0 deny
vmr IP mask # 3: 0.0.0.0 0.0.0.0 0 0 0 0 0 0
(only for IP_PROT) DestAddr SrcAddr Dpt Spt L4OP TOS Est prot Rslt
vmr IP value # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 0 permit
vmr IP mask # 1: 0.0.0.0 0.0.0.0 0 0 0 0 0 0
show icc
To display the information about the ICC counter and status, use the show icc command.
show icc {counters | status}
Syntax Description
counters
|
Specifies the counter information.
|
status
|
Specifies the status information.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Examples
This example shows how to display the information about the ICC counter:
Router# show icc counters
total tx RPC packets to slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
total rx RPC packets from slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
total tx MCAST-SP packets to slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
total rx MCAST-SP packets from slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
total tx L3-MGR packets to slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
total rx L3-MGR packets from slot 1 LCP = 0
detail by request id: (<request-id>=<number-of-packets>)
This example shows how to display the information about the ICC status:
Class Name Msgs Pending Max Pending Total Sent
----- ---------------- ------------ ----------- ----------
show idprom
To display the IDPROMs for FRUs, use the show idprom command.
show idprom {all | frutype | interface interface slot} [detail]
Syntax Description
all
|
Displays the information for all FRU types.
|
frutype
|
Type of FRU to display information; see the "Usage Guidelines" section for valid values.
|
interface interface slot
|
Specifies the interface to display information; valid values are as follows:
• interface—GigabitEthernet
• slot—1 to 13
See the "Usage Guidelines" section for additional information.
|
detail
|
(Optional) Displays the details of the IDPROM data (verbose).
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Valid frutypes are as follows:
•
backplane—No arguments.
•
clock number—1 and 2.
•
earl slot—See the following paragraph for valid values.
•
module slot—See the following paragraph for valid values.
•
rp slot—See the following paragraph for valid values.
•
power-supply—1 and 2.
•
supervisor slot—See the following paragraph for valid values.
•
vtt number—1 to 3.
The slot argument designates the module and port number. Valid values for slot depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
Use the show idprom backplane command to display the chassis serial number.
The optional interface interface slot keyword and arguments are supported on GBIC security-enabled interfaces only.
Examples
This example shows how to display IDPROM information for clock 1:
Router> show idprom clock 1
OEM String = 'Cisco Systems'
Product Number = 'WS-C6000-CL'
Serial Number = 'SMT03073115'
Manufacturing Assembly Number = '73-3047-04'
Manufacturing Assembly Revision = 'A0'
Current supplied (+) or consumed (-) = 0.000A
This example shows how to display IDPROM information for power supply 1:
Router> show idprom power-supply 1
IDPROM for power-supply #1
(FRU is '110/220v AC power supply, 1360 watt')
OEM String = 'Cisco Systems, Inc.'
Product Number = 'WS-CAC-1300W'
Serial Number = 'ACP03020001'
Manufacturing Assembly Number = '34-0918-01'
Manufacturing Assembly Revision = 'A0'
Current supplied (+) or consumed (-) = 27.460A
This example shows how to display detailed IDPROM information for power supply 1:
Router# show idprom power-supply 1 detail
IDPROM for power-supply #1
(FRU is '110/220v AC power supply, 1360 watt')
hexadecimal contents of block:
00: AB AB 01 90 11 BE 01 00 00 02 AB 01 00 01 43 69 ..............Ci
10: 73 63 6F 20 53 79 73 74 65 6D 73 2C 20 49 6E 63 sco Systems, Inc
20: 2E 00 57 53 2D 43 41 43 2D 31 33 30 30 57 00 00 ..WS-CAC-1300W..
30: 00 00 00 00 00 00 41 43 50 30 33 30 32 30 30 30 ......ACP0302000
40: 31 00 00 00 00 00 00 00 00 00 33 34 2D 30 39 31 1.........34-091
50: 38 2D 30 31 00 00 00 00 00 00 41 30 00 00 00 00 8-01......A0....
60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
70: 00 00 00 01 00 00 00 00 00 00 00 09 00 0C 00 03 ................
80: 00 01 00 06 00 01 00 00 00 00 0A BA 00 00 00 00 ................
block-signature = 0xABAB, block-version = 1,
block-length = 144, block-checksum = 4542
IDPROM capacity (bytes) = 256 IDPROM block-count = 2
OEM String = 'Cisco Systems, Inc.'
Product Number = 'WS-CAC-1300W'
Serial Number = 'ACP03020001'
Manufacturing Assembly Number = '34-0918-01'
Manufacturing Assembly Revision = 'A0'
Manufacturing bits = 0x0 Engineering bits = 0x0
SNMP OID = 9.12.3.1.6.1.0
Power Consumption = 2746 centiamperes RMA failure code = 0-0-0-0
*** end of common block ***
hexadecimal contents of block:
00: AB 01 01 14 02 5F 00 00 00 00 00 00 00 00 0A BA ....._..........
block-signature = 0xAB01, block-version = 1,
block-length = 20, block-checksum = 607
*** power supply block ***
feature-bits: 00000000 00000000
rated current at 110v: 2746 rated current at 220v: 2746 (centiamperes)
CISCO-STACK-MIB SNMP OID = 22 *** end of power supply block ***
This example shows how to display IDPROM information for the backplane:
Router# show idprom backplane
(FRU is 'Catalyst 6000 9-slot backplane')
OEM String = 'Cisco Systems'
Product Number = 'WS-C6009'
Serial Number = 'SCA030900JA'
Manufacturing Assembly Number = '73-3046-04'
Manufacturing Assembly Revision = 'A0'
Current supplied (+) or consumed (-) = 0.000A
This example shows how to display IDPROM information from a GBIC security-enabled interface:
Router# show idprom interface g5/1
GBIC Serial EEPROM Contents:
Length(9u) : GBIC does not support single mode fibre,
or the length information must be determined from
the transceiver technology.
Length(50u) : GBIC does not support 50 micron multi-mode fibre,
or the length information must be determined from
the transceiver technology.
Length(62.5u) : GBIC does not support 62.5 micron multi-mode fibre,
or the length information must be determined from
the transceiver technology.
Length(Copper) : GBIC does not support copper cables,
or the length information must be determined from
the transceiver technology.
Vendor OUI : 0x8 0x0 0x5A
Options : Loss of Signal implemented TX_FAULT signal implemented
ISABLE is implemented and disables the serial output
Vendor SN : 21P70420005D6
Vendor Specific ID Fields:
0x00: 00 00 00 70 2E DF C4 69 50 E6 54 F9 05 D4 83 A2
0x10: 4B 0E 8B 00 00 00 00 00 00 00 00 00 7D 3F D9 1E
show interfaces
To display traffic that is seen by a specific interface, use the show interfaces command.
show interfaces [{interface interface-number} | {null interface-number} | {vlan vlan-id}]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, and port-channel, atm, and ge-wan.
|
interface-number
|
(Optional) Module and port number; see the "Usage Guidelines" section for valid values.
|
null interface-number
|
(Optional) Specifies the null interface; the valid value is 0.
|
vlan vlan-id
|
(Optional) Specifies the VLAN ID; valid values are from 1 to 4094.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
The valid values for port-channel are from 1 to 308. The port-channel values that are from 257 to 282 are internally allocated, and are supported on the CSM and the FWSM only.
Statistics are collected on a per-VLAN basis for Layer 2-switched packets and Layer 3-switched packets. Statistics are available for both unicast and multicast traffic. The Layer 3-switched packet counts are available for both ingress and egress directions. The per-VLAN statistics are updated every 5 seconds.
In some cases, you might see a difference in the duplex mode that is displayed between the show interfaces command and the show running-config commands. In this case, the duplex mode that is displayed in the show interfaces command is the actual duplex mode that the interface is running. The show interfaces command shows the operating mode for an interface, while the show running-config command shows the configured mode for an interface.
If you do not enter any keywords, all counters for all modules are displayed.
The output of the show interfaces GigabitEthernet command displays an extra 4 bytes for every packet that is sent or received. This display occurs on the LAN ports on the GE-WAN module and other Catalyst 6500 series switch Gigabit Ethernet LAN modules. The extra 4 bytes are the Ethernet frame CRC in the input and output byte statistics.
Examples
This example shows how to display traffic for a specific interface:
Router# show interfaces GigabitEthernet3/3
GigabitEthernet3/3 is up, line protocol is up (connected)
Hardware is C6k 1000Mb 802.3, address is 000f.2305.49c0 (bia 000f.2305.49c0)
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Full-duplex, 1000Mb/s, media type is LH
input flow-control is off, output flow-control is on
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:19, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
L2 Switched: ucast: 360 pkt, 23040 bytes - mcast: 0 pkt, 0 bytes
L3 in Switched: ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes mcast
L3 out Switched: ucast: 0 pkt, 0 bytes mcast: 0 pkt, 0 bytes
437 packets input, 48503 bytes, 0 no buffer
Received 76 broadcasts (0 IP multicast)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
86 packets output, 25910 bytes, 0 underruns <===========
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
This example shows how to display traffic for a FlexWAN module:
Router# show interfaces pos 6/1/0.1
POS6/1/0.1 is up, line protocol is up
Hardware is Packet over Sonet
Internet address is 1.1.2.2/24
MTU 4470 bytes, BW 155000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation FRAME-RELAY <<<+++ no packets info after this line
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
6 0 2 port adapter FlexWAN WS-X6182-2PA SAD04340JY3
Mod MAC addresses Hw Fw Sw Status
--- ---------------------------------- ------ ------------ ------------ -------
6 0001.6412.a234 to 0001.6412.a273 1.3 12.2(2004022 12.2(2004022 Ok
show interfaces accounting
To display the number of packets of each protocol type that have been sent through all configured interfaces, use the show interfaces accounting command.
show interfaces [{interface interface-number} | {null interface-number} | {vlan vlan-id}]
accounting
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, and port-channel, atm, and ge-wan.
|
interface-number
|
(Optional) Module and port number; see the "Usage Guidelines" section for valid values.
|
null interface-number
|
(Optional) Specifies the null interface; the valid value is 0.
|
vlan vlan-id
|
(Optional) Specifies the VLAN ID; valid values are from 1 to 4094.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Note
The Pkts Out and Chars Out fields display IPv6 packet counts only. The Pkts In and Chars In fields display both IPv4 and IPv6 packet counts, except for tunnel interfaces. For tunnel interfaces, the IPv6 input packets are counted as IPv6 packets only.
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
The port channels from 257 to 282 are internally allocated and are supported on the CSM and the FWSM only.
If you do not enter any keywords, all counters for all modules are displayed.
Examples
This example shows how to display the number of packets of each protocol type that have been sent through all configured interfaces:
Router# show interfaces gigabitethernet5/2 accounting
Protocol Pkts In Chars In Pkts Out Chars Out
Table 2-37 describes the fields that are shown in the example.
Table 2-37 show interfaces accounting Command Output Fields
Field
|
Description
|
Protocol
|
Protocol that is operating on the interface.
|
Pkts In
|
Number of IPv4 packets received for the specified protocol.
|
Chars In
|
Number of IPv4 characters received for the specified protocol.
|
Pkts Out
|
Number of hardware-switched IPv6 packets transmitted for the specified protocol.
|
Chars Out
|
Number of IPv6 characters transmitted for the specified protocol.
|
show interfaces capabilities
To display the interface capabilities for a module, an interface, or all interfaces, use the show interfaces capabilities command.
show interfaces [interface interface-number] capabilities [{module number}]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and port-channel, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
module number
|
(Optional) Specifies the module number; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number argument designates the module and port number. Valid values for interface-number depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 2 to 13 and valid values for the port number are from 1 to 48.
The port-channel values are from 0 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display the interface capabilities for a module:
Router# show interfaces capabilities module 6
Trunk encap. type: 802.1Q,ISL
Trunk mode: on,off,desirable,nonegotiate
Broadcast suppression: percentage(0-100)
Flowcontrol: rx-(off,on),tx-(none)
QOS scheduling: rx-(1q4t), tx-(2q2t)
This example shows how to display the interface capabilities for an interface:
Router# show interfaces fastethernet 4/1 capabilities
Trunk encap. type: 802.1Q,ISL
Trunk mode: on,off,desirable,nonegotiate
Broadcast suppression: percentage(0-100)
Flowcontrol: rx-(off,on),tx-(none)
QOS scheduling: rx-(1q4t), tx-(2q2t)
This example shows how to display the port-channel interface capabilities:
Router# show interfaces port-channel 12 capabilities
Trunk encap. type: 802.1Q,ISL
Trunk mode: on,off,desirable,nonegotiate
Broadcast suppression: percentage(0-100)
Flowcontrol: rx-(off,on),tx-(none)
QOS scheduling: rx-(1q4t), tx-(1q4t)
Router#
show interfaces counters
To display the traffic that the physical interface sees, use the show interfaces counters command.
show interfaces [interface] counters [errors | etherchannel | {module number} | {protocol
status} | {trunk [module number]}]
Syntax Description
interface
|
(Optional) Interface type; for a list of valid values, see the "Usage Guidelines" section.
|
errors
|
(Optional) Displays the interface-error counters.
|
etherchannel
|
(Optional) Displays information about the EtherChannel interface.
|
module number
|
(Optional) Displays the module number; see the "Usage Guidelines" section for valid values.
|
protocol status
|
(Optional) Displays the current status of the enabled protocols.
|
trunk
|
(Optional) Displays the interface-trunk counters.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The show interfaces [interface] counters command displays the number of all of the packets arriving and includes the number of packets that may be dropped by the interface due to the storm-control settings. To display the total number of dropped packets, you can enter the show interfaces [interface] counters storm-control command.
If you do not enter any keywords, all counters for all modules are displayed.
When you enter the interface, these formats can be used:
•
card-type {slot}/{first-port} - {last-port}
•
card-type {slot}/{first-port} - {last-port}
You can define a single port range per command entry. If you specify a range of ports, the range must consist of the same slot and port type.
When you define a range, you must enter a white space between the first port and the hyphen (-) as follows:
show interfaces gigabitethernet7/1 -7 counters
The module number keyword and argument designate the module number and limit the display to interfaces on the module. Valid values depend on the chassis that is used. For example, if you have a 13-slot chassis, valid values for the module number are from 1 to 13.
Valid values for card-type are as follows:
•
ethernet
•
fastethernet
•
gigabitethernet
•
tengigabitethernet
•
port-channel interface-number—Valid values are from 1 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
When you enter the show interfaces interface counters etherchannel command, follow these guidelines:
•
If interface specifies a physical port, the command displays this message, "Etherchnl not enabled on this interface."
•
If interface is omitted, the command displays the counters for all port channels (in the system) and for their associated physical ports.
•
If interface specifies a port channel, the command displays the counters for the port channel and all of the physical ports that are associated with it. In addition, when you enter the command specifying the primary aggregator in a LACP port channel with multiple aggregators, the output includes the statistics for all of the aggregators in the port channels and for the ports that are associated with them.
Examples
This example shows how to display the error counters for a specific module:
Router# show interfaces counters errors module 1
Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize
Port Single-Col Multi-Col Late-Col Excess-Col Carri-Sen Runts Giant
This example shows how to display traffic that is seen by a specific module:
Router# show interfaces counters module 1
Port InOctets InUcastPkts InMcastPkts InBcastPkts
Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts
This example shows how to display the trunk counters for a specific module:
Router# show interfaces counters trunk module 1
Port TrunkFramesTx TrunkFramesRx WrongEncap
This example shows how to display the counters for all port channels (in the system) and their associated physical ports:
Router# show interfaces counters etherchannel
Port InOctets InUcastPkts InMcastPkts InBcastPkts
Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts
This example shows how to display the counters for a specific port channel and the counters for the associated physical ports:
Router# show interfaces port-channel2 counters etherchannel
Port InOctets InUcastPkts InMcastPkts InBcastPkts
Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts
This example shows how to display the discard count and the level settings for each mode:
Router# show interfaces counters storm-control
Port UcastSupp % McastSupp % BcastSupp % TotalSuppDiscards
Fa5/1 100.0 100.0 100.0 0
Fa5/2 100.0 100.0 100.0 0
Fa5/3 100.0 100.0 100.0 0
Related Commands
show interfaces debounce
To display the status and configuration for the debounce timer, use the show interfaces debounce command.
show interfaces [{interface interface-number} | {null interface-number} | {vlan vlan-id}]
debounce [module num]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, port-channel, pos, atm, and ge-wan.
|
interface-number
|
(Optional) Module and port number; see the "Usage Guidelines" section for valid values.
|
null interface-number
|
(Optional) Specifies the null interface; the valid value is 0.
|
vlan vlan-id
|
(Optional) Specifies the VLAN; valid values are from 1 to 4094.
|
module num
|
(Optional) Limits the display to interfaces on the specified module.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The debounce timer is not supported on the 10-Gigabit Ethernet module (WSX-6502-10GE).
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
The port-channel values are from 0 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display the debounce configuration of an interface:
Router# show interfaces GigabitEthernet1/1 debounce
Related Commands
Command
|
Description
|
link debounce
|
Enables the debounce timer on an interface.
|
show interfaces description
To display a description and a status of an interface, use the show interfaces description command.
show interfaces [interface] description
Syntax Description
interface
|
(Optional) Interface type; for a list of valid values, see the "Usage Guidelines" section.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
When you enter the interface value, these formats can be used:
•
card-type {slot}/{first-port} - {last-port}
•
card-type {slot}/{first-port} - {last-port}
You can define a single port range per command entry. If you specify a range of ports, the range must consist of the same slot and port type. When you define a range, you must enter a space before and after the hyphen (-) as follows:
show interfaces gigabitethernet7/1 - 7 counters broadcast
Possible valid values for card-type are ethernet, fastethernet, gigabitethernet, tengigabitethernet, port-channel, pos, atm, and ge-wan.
The port-channel values are from 0 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display the information for all interfaces:
Router# show interfaces description
Interface Status Protocol Description
PO0/0 admin down down First POS interface
Gi1/0 up up GigE to server farm
Related Commands
Command
|
Description
|
description
|
Includes a specific description about the DSP interface.
|
show interfaces flowcontrol
To display flow-control information, use the show interfaces flowcontrol command.
show interfaces [interface [mod]] flowcontrol [module number]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, port-channel, pos, atm, and ge-wan.
|
mod
|
(Optional) Module and port number.
|
module number
|
(Optional) Specifies the module number; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The mod argument designates the module and port number. Valid values for mod depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
The module number keyword and argument designate the module number and limit the display to interfaces on the module. Valid values depend on the chassis that is used. For example, if you have a 13-slot chassis, valid values for the module number are from 1 to 13.
The port-channel values are from 0 to 282; values from 257 to 282 are supported on the CSM and the FWSM only.
Examples
This example shows how to display flow-control information for all interfaces:
Router# show interfaces flowcontrol
Port Send FlowControl Receive FlowControl RxPause TxPause
----- -------- -------- -------- -------- ------- -------
Gi1/1 desired off off off 0 0
Gi1/2 desired off off off 0 0
Gi8/2 desired off off off 0 0
Gi8/3 desired off off off 0 0
Gi8/4 desired off off off 0 0
This example shows how to display flow-control information for a specific interface:
Router# show interfaces gigabitethernet 8/2 flowcontrol
Port Send FlowControl Receive FlowControl RxPause TxPause
----- -------- -------- -------- -------- ------- -------
Gi8/2 desired off off off 0 0
Table 2-38 describes the fields that are shown in the example.
Table 2-38 show port flowcontrol Command Output Fields
Field
|
Description
|
Port
|
Interface type and module and port number.
|
Send admin
|
Flow-control operation for admin state. On indicates that the local port is allowed to send pause frames to remote ports, off indicates that the local port is prevented from sending pause frames to remote ports, and desired indicates predictable results whether a remote port is set to receive on, receive off, or receive desired.
|
Send oper
|
Current flow-control operation. On indicates that the local port is allowed to send pause frames to remote ports, off indicates that the local port is prevented from sending pause frames to remote ports, and desired indicates predictable results whether a remote port is set to receive on, receive off, or receive desired.
|
Receive admin
|
Flow-control operation for admin state. On indicates that the local port is allowed to send pause frames to remote ports, off indicates that the local port is prevented from sending pause frames to remote ports, and desired indicates predictable results whether a remote port is set to send on, send off, or send desired.
|
Receive oper
|
Current flow-control operation. On indicates that the local port is allowed to send pause frames to remote ports, off indicates that the local port is prevented from sending pause frames to remote ports, and desired indicates predictable results whether a remote port is set to send on, send off, or send desired.
|
RxPause
|
Number of pause frames that are received.
|
TxPause
|
Number of pause frames that are transmitted.
|
Related Commands
Command
|
Description
|
flowcontrol
|
Configures a port to send or receive pause frames.
|
show interfaces private-vlan mapping
To display the information about the PVLAN mapping for VLAN SVIs, use the show interfaces private-vlan mapping command.
show interfaces [interface interface-number] private-vlan mapping [active]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
active
|
(Optional) Displays the active interfaces only.
|
Command Default
This command has no default settings.
Command Default
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
This command displays SVI information only.
The interface-number argument designates the module and port number. Valid values for interface-number depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display the information about the PVLAN mapping:
Router# show interfaces private-vlan mapping
Interface Secondary VLAN Type
--------- -------------- -----------------
Related Commands
Command
|
Description
|
private-vlan
|
Configures PVLANs and the association between a PVLAN and a secondary VLAN.
|
private-vlan mapping
|
Creates a mapping between the primary and the secondary VLANs so that both VLANs share the same primary VLAN SVI.
|
show interfaces status
To display the interface status or a list of interfaces in an error-disabled state on LAN ports only, use the show interfaces status command.
show interfaces [interface interface-number] status [err-disabled | module number]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
err-disabled
|
(Optional) Displays the LAN ports in an error-disabled state.
|
module number
|
(Optional) Specifies the module number; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number argument designates the module and port number. Valid values for interface-number depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
This command is supported on LAN ports only.
The module number keyword and argument designate the module number and limit the display to the interfaces on the module. Valid values depend on the chassis that is used. For example, if you have a 13-slot chassis, valid values for the module number are from 1 to 13.
To find out if an interface is inactive, enter the show interfaces status command. If the interface is inactive, the Status field displays "inactive." If the port is not inactive, the Status field displays "none."
To find the packet and byte count, you can enter the show interfaces counters command or the show interfaces interface interface-number status command. The show interfaces counters command is the preferred command to use. In some cases, the packet and byte count of the show interfaces interface interface-number status command is incorrect.
Examples
This example shows how to display the status of all LAN ports:
Router# show interfaces status
Port Name Status Vlan Duplex Speed Type
Gi1/1 disabled routed full 1000 missing
Gi1/2 notconnect 1 full 1000 unknown (4)
Fa5/1 disabled routed auto auto 10/100BaseTX
Port Name Status Vlan Duplex Speed Type
Fa5/18 disabled 1 auto auto 10/100BaseTX
Fa5/19 disabled 1 auto auto 10/100BaseTX
Gi7/1 disabled 1 full 1000 WDM-RXONLY
Gi7/2 disabled 1 full 1000 No Transceiver
This example shows how to display the packet and byte count of a specific LAN port:
Router# show interfaces fastethernet5/2 status
Switching path Pkts In Chars In Pkts Out Chars Out
Processor 17 1220 20 2020
Distributed cache 17 1220 206712817 2411846570
Total 34 2440 206712837 2411848590
This example shows how to display the status of LAN ports in an error-disabled state:
Router# show interfaces status err-disabled
Fa9/4 notconnect link-flap
informational error message when the timer expires on a cause
--------------------------------------------------------------
5d04h:%PM-SP-4-ERR_RECOVER:Attempting to recover from link-flap err-disable state on Fa9/4
Related Commands
show interfaces summary
To display a summary of statistics for all interfaces that are configured on a networking device, use the show interfaces summary command.
show interfaces [interface interface-number] summary [vlan]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
vlan
|
(Optional) Displays the total number of VLAN interfaces.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
Separate counters for subinterfaces are not maintained and are not displayed in the show interfaces summary output.
Examples
This example shows how to display a summary of statistics for all interfaces that are configured on a networking device:
Router# show interfaces summary
IHQ: pkts in input hold queue IQD: pkts dropped from input queue
OHQ: pkts in output hold queue OQD: pkts dropped from output queue
RXBS: rx rate (bits/sec) RXPS: rx rate (pkts/sec)
TXBS: tx rate (bits/sec) TXPS: tx rate (pkts/sec)
Interface IHQ IQD OHQ OQD RXBS RXPS TXBS TXPS TRTL
----------------------------------------------------------------------
* FastEthernet0/0 0 0 0 0 0 0 0 0 0
Serial0/0 0 0 0 0 0 0 0 0 0
FastEthernet0/1 0 0 0 0 0 0 0 0 0
Serial0/1 0 0 0 0 0 0 0 0 0
This example shows how to display the total number of VLAN interfaces:
Router# show interfaces summary vlan
Total number of Vlan interfaces: 7
Vlan interfaces configured:
1,5,20,2000,3000-3001,4000
show interfaces switchport
To display the administrative and operational status of a switching (nonrouting) port, use the show interfaces switchport command.
show interfaces [interface interface-number] switchport [brief] [module number]
Syntax Description
interface
|
(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.
|
interface-number
|
Module and port number; see the "Usage Guidelines" section for valid values.
|
brief
|
(Optional) Displays a brief summary of information.
|
module number
|
(Optional) Limits the display to interfaces on a specified module; see the "Usage Guidelines" section for valid values.
|
Command Default
This command has no default settings.
Command Modes
EXEC (>)
Command History
Release
|
Modification
|
12.2(18)ZY
|
Support for this command was introduced.
|
Usage Guidelines
The interface-number designates the module and port number. Valid values depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
Examples
This example shows how to display switch-port information using the include output modifier:
Router# show interfaces switchport | include VLAN
Access Mode VLAN: 200 (VLAN0200)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: ALL
This example shows how to display the configurations of two multiple VLAN access ports:
Router# show interfaces switchport
Administrative Mode: access
Operational Trunking Encapsulation