-
Catalyst 3750 Metro Switch Command Reference, Release 12.2(55)SE
-
Index
-
Preface
-
Using the Command-Line Interface
-
Catalyst 3750 Metro Switch Cisco IOS Commands - aaa through reserved-only
-
Catalyst 3750 Metro Switch Cisco IOS Commands - rmon collection stats through show
-
Catalyst 3750 Metro Switch Cisco IOS Commands - shutdown through xconnect
-
Catalyst 3750 Metro Switch Boot Loader Commands
-
Catalyst 3750 Metro Switch Cisco IOS Commands Debug Commands
-
Catalyst 3750 Metro Switch Cisco IOS Commands Show Platform Commands
-
Acknowledgments for Open-Source Software
-
Feedback
Table Of Contents
service-policy (interface configuration)
service-policy (policy-map class)
show controllers cpu-interface
show controllers ethernet-controller
show ethernet service instance
show ethernet service interface
show ip dhcp snooping database
show ip dhcp snooping statistics
show ipv6 mld snooping address
show ipv6 mld snooping mrouter
show ipv6 mld snooping querier
show mac address-table address
show mac address-table aging-time
show mac address-table dynamic
show mac address-table interface
show mac address-table learning
show mac address-table move update
show mac address-table multicast
show mac address-table notification
show mls qos aggregate-policer
rmon collection stats
Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include utilization statistics about broadcast and multicast packets, and error statistics about Cyclic Redundancy Check (CRC) alignment errors and collisions. Use the no form of this command to return to the default setting.
rmon collection stats index [owner name]
no rmon collection stats index [owner name]
Syntax Description
index
Remote Network Monitoring (RMON) collection control index. The range is 1 to 65535.
owner name
(Optional) Owner of the RMON collection.
Note
Though visible in the command-line help, the rmon native and rmon promiscuous commands are not supported.
Defaults
The RMON statistics collection is disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
The RMON statistics collection command is based on hardware counters.
Examples
This example shows how to collect RMON statistics for the owner root on a port:
Switch(config)# interface gigabitethernet1/0/1Switch(config-if)# rmon collection stats 2 owner rootYou can verify your setting by entering the show rmon statistics privileged EXEC command.
Related Commands
sdm prefer
Use the sdm prefer global configuration command to configure the template used in the Switch Database Management (SDM) resource allocation. You can use a template to allocate system resources to best support the features being used in your application. Use a template to provide maximum system utilization for routing or for VLAN configuration or to select the dual IPv4 and IPv6 template to support IPv6 forwarding. Use the no form of this command to return to the default template.
sdm prefer {default | dual-ipv4-and-ipv6 {default | routing | vlan} | routing | vlan}
no sdm prefer
Syntax Description
Defaults
The default template provides a balance to all features.
Command Modes
Global configuration
Command History
Usage Guidelines
You must reload the switch for the configuration to take effect.
Use the sdm prefer vlan global configuration command only on switches intended for Layer 2 switching with no routing. When you use the VLAN template, no system resources are reserved for routing entries, and any routing is done through software. This overloads the CPU and severely degrades routing performance.
Do not use the routing template if you do not have routing enabled on your switch. Entering the sdm prefer routing global configuration command prevents other features from using the memory allocated to unicast routing in the routing template.
Do not use the ipv4-and-ipv6 templates if you do not plan to enable IPv6 routing on the switch. Entering the sdm prefer ipv4-and-ipv6 {default | routing | vlan} global configuration command divides resources between IPv4 and IPv6, limiting those allocated to IPv4 forwarding.
Table 2-17 lists the approximate number of each resource supported in each of the three templates for a switch. The first eight rows in the tables (unicast MAC addresses through security access control entries [ACEs]) represent approximate hardware boundaries set when you select a template. If a section of a hardware resource is full, all processing overflow is sent to the CPU, seriously impacting switch performance. The last row is a guideline used to calculate hardware resource consumption related to the other resource parameters.
.
Table 2-18 lists the approximate number of each resource supported in each of the dual IPv4-and IPv6 templates for a switch.
Table 2-18 Approximate Feature Resources Allowed by Dual IPv4-IPv6 Templates
Unicast MAC addresses
2 K
1536
8 K
IPv4 IGMP groups and multicast routes
1 K
1K
1 K
Total IPv4 unicast routes:
3 K
2816
0
•
2 K
1536
0
•
1 K
1280
0
IPv6 multicast groups
1 K
1152
1 K
Total IPv6 unicast routes:
3 K
2816
0
•
2 K
1536
0
•
1 K
1280
0
IPv4 policy-based routing ACEs
0
256
0
IPv4 or MAC QoS ACEs (total)
512
512
512
IPv4 or MAC security ACEs (total)
1 K
512
1 K
IPv6 policy-based routing ACEs1
0
255
0
IPv6 QoS ACEs
510
510
510
IPv6 security ACEs
510
510
510
1 IPv6 policy-based routing is not supported in this release.
Examples
This example shows how to configure the routing template on a switch:
Switch(config)# sdm prefer routingSwitch(config)# exitSwitch# reloadThis example shows how to change a switch template to the default template.
Switch(config)# sdm prefer defaultSwitch(config)# exitSwitch# reloadThis example shows how to configure the dual IPv4-and-IPv6 default template on a switch:
Switch(config)# sdm prefer dual-ipv4-and-ipv6 defaultSwitch(config)# exitSwitch# reloadYou can verify your settings by entering the show sdm prefer privileged EXEC command.
Related Commands
Displays the current SDM template in use or displays the templates that can be used, with approximate resource allocation per feature.
service instance
Use the service instance interface configuration command to configure an Ethernet service instance on the interface and to enter Ethernet service configuration mode. Use the no form of this command to delete the service instance.
service instance id ethernet [evc-id]
no service instance id
Syntax Description
Defaults
No Ethernet service instances are defined.
Command Modes
Interface configuration
Command History
Usage Guidelines
After you enter the service instance id ethernet command, the switch enters Ethernet service configuration mode, and these configuration commands are available:
•
•
•
•
Examples
This example shows how to define an Ethernet service instance and to enter Ethernet service configuration mode for EVC test:
Switch(config-if)# service instance 333 ethernet testSwitch(config-if-srv)#Related Commands
service password-recovery
Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the boot process while the switch is powering up and to assign a new password. Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.
service password-recovery
no service password-recovery
Syntax Description
This command has no arguments or keywords.
Defaults
The password-recovery mechanism is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration.
To use the password-recovery procedure, a user with physical access to the switch holds down the Mode button while the unit powers up and for a second or two after the LED above port 1X goes off. When the button is released, the system continues with initialization. If the password-recovery mechanism is disabled, this message appears:
The password-recovery mechanism has been triggered, butis currently disabled. Access to the boot loader promptthrough the password-recovery mechanism is disallowed atthis point. However, if you agree to let the system bereset back to the default system configuration, accessto the boot loader prompt can still be allowed.Would you like to reset the system back to the default configuration (y/n)?If the user chooses not to reset the system back to the default configuration, the normal boot process continues, as if the Mode button had not been pressed. If you choose to reset the system back to the default configuration, the configuration file in flash memory is deleted, and the VLAN database file, flash:vlan.dat (if present), is deleted.
Note
If the switch is operating in VLAN Trunking Protocol (VTP) transparent mode, we recommend that you also save a copy of the vlan.dat file in a location away from the switch.You can verify if password recovery is enabled or disabled by entering the show version privileged EXEC command.
Examples
This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration:
Switch(config)# no service-password recoverySwitch(config)# exitRelated Commands
service-policy (interface configuration)
Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to a port or a switch virtual interface (SVI). Use the no form of this command to remove the policy map and port association.
service-policy {input | output} policy-map-name
no service-policy {input | output} policy-map-name
Syntax Description
Note
Defaults
No policy maps are attached to the port.
Command Modes
Interface configuration
Command History
Usage Guidelines
Only one policy map per port is supported. With standard QoS, you can attach one nonhierarchical service policy to the input of a standard physical port, to an SVI, or to an ES port. You can also attach one ingress hierarchical dual-level service policy per SVI. With hierarchical QoS, you can attach one ingress hierarchical service policy and one egress hierarchical service policy per ES port. You can also attach a hierarchical service policy to an EtherChannel with no ports or with one or both ES ports
Use the service-policy output policy-map-name command only in an egress policy map attached to an ES port. You cannot apply an egress policy to a standard port.
In software releases earlier than Cisco IOS Release 12.2(25)EY, policy maps can be configured only on physical ports. In Cisco IOS Release 12.2(25)EY or later, policy maps can be configured on physical ports or on SVIs. When VLAN-based quality of service (QoS) is disabled by using the no mls qos vlan-based interface configuration command on a physical port, you can configure a port-based policy map on the port. If VLAN-based QoS is enabled by using the mls qos vlan-based interface configuration command on a physical port, the switch removes the previously configured port-based policy map. After a dual-level policy map is configured and applied on an SVI, the interface-level policy map takes effect on the interface.
In software releases earlier than Cisco IOS Release 12.2(25)EY, you can apply a policy map only to the input of a physical port. In Cisco IOS Release 12.2(25)EY or later, you can apply a policy map to the input of a physical port or an SVI.
In Cisco IOS Release 12.2(35)SE or later, you can attach a hierarchical policy map to an EtherChannel made of ES ports.
When applying an ingress nonhierarchical policy map to a physical interface or an SVI or when applying an egress hierarchical policy map to a ES port, classification using a port trust state (for example, mls qos trust [cos | dscp | ip-precedence]) and a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last one configured overwrites the previous configuration. However, if you are applying an ingress hierarchical policy to an ES port that includes the set policy-map class configuration command or policing actions in a two-rate policer, the switch automatically applies a port trust state to the ES port. For example, if you configure the set cos new-cos command, the switch automatically configures the interface to trust CoS.
You can attach single-level policy maps as input policies on a standard ports or as input or output policies on ES ports. You cannot apply a single-level policy map to an egress standard port.
You can attach hierarchical policy maps as input or output policies on ES ports or ES EtherChannels. You cannot attach hierarchical policy maps to standard ports.
In releases earlier than Cisco IOS Release 12.2(35)SE, the switch does not support attaching a service policy to a logical interface (such as an EtherChannel). In these releases, you must configure quality of service (QoS) classification, policing, mapping, and queueing on the individual physical ports that comprise the EtherChannel. In Cisco IOS Release 12.2(35) or later, you can configure hierarchical policy maps on EtherChannels made of ES ports
Examples
This example shows how to apply a policy map to the input of a standard port:
Switch(config)# interface gigabitethernet1/0/1Switch(config-if)# service-policy input plcmap1This example shows how to apply a policy map to the output of an ES port:
Switch(config)# interface gigabitethernet1/1/1Switch(config-if)# service-policy output plcmap3You can verify your settings by entering the show running-config privileged EXEC command.
Related Commands
Creates or modifies a policy map that can be attached to multiple ports to specify a service policy.
Displays QoS policy maps.
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.
service-policy (policy-map class)
Use the service-policy policy-map class configuration command to create a service policy that is a quality of service (QoS) policy within a policy map (called a hierarchical service policy). Use the no form of this command to disable the service policy within a policy map.
service-policy policy-map-name
no service-policy policy-map-name
Syntax Description
Defaults
No service policies maps are defined.
Command Modes
Policy-map class configuration
Command History
12.1(14)AX
This command was introduced.
12.2(25)EY
Hierarchical service policies can be attached to inbound traffic received on an ES port or a switch virtual interface (SVI).
Usage Guidelines
Use the service-policy command only in a hierarchical policy map attached to an enhanced-services (ES) port. This command is valid in policy maps at any level of the hierarchy.
You can create a hierarchy by associating a class-level policy map with a VLAN-level policy map, by associating that VLAN-level policy map with a physical-level policy map, and by attaching the physical-level policy map to an ES port. You can omit hierarchical levels, but the order of the levels (class level, VLAN level, and then the physical level) must be preserved.
If you use the bandwidth policy-map class configuration command in a child policy, you also must use it in the parent policy.
If you enter this command in policy-map class configuration mode, you return to policy-map configuration mode by using the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to create a hierarchical service policy in the service policy called parent:
Switch(config)# policy-map childSwitch(config-pmap)# class voiceSwitch(config-pmap-c)# prioritySwitch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# policy-map parentSwitch(config-pmap)# class class1Switch(config-pmap-c)# shape average 10000000Switch(config-pmap-c)# service-policy childThis example shows how to create a hierarchical service policy in which all levels are present. This configuration associates a class-level policy map with a VLAN-level policy map, associates the VLAN-level policy map with a physical-level policy map, and attaches the physical-level policy map to a port.
Switch(config)# class-map my-classSwitch(config-cmap)# match ip precedence 1Switch(config-cmap)# exitSwitch(config)# class-map my-logical-classSwitch(config-cmap)# match vlan 5Switch(config-cmap)# exitSwitch(config)# policy-map my-class-policySwitch(config-pmap)# class my-classSwitch(config-pmap-c)# set precedence 2Switch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# policy-map my-logical-policySwitch(config-pmap)# class my-logical-classSwitch(config-pmap-c)# shape average 400000000Switch(config-pmap-c)# service-policy my-class-policySwitch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# policy-map my-physical-policySwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# shape average 500000000Switch(config-pmap-c)# service-policy my-logical-policySwitch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# interface gigabitethernet1/1/1Switch(config)# service-policy input my-physical-policyYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
set
Use the set policy-map class configuration command to classify IP traffic by setting a class of service (CoS), a Differentiated Services Code Point (DSCP), an IP-precedence, or the multiprotocol label switching (MPLS) experimental (EXP) bits in the packet. Use the no form of this command to remove the traffic classification.
set {cos new-cos | [ip] {dscp new-dscp | precedence new-precedence} | mpls experimental exp-number}
no set cos new-cos | ip {dscp new-dscp | precedence new-precedence} | mpls experimental exp-number}
Syntax Description
Defaults
No traffic classification is defined.
Command Modes
Policy-map class configuration
Command History
12.1(14)AX
This command was introduced.
12.2(25)EY
Hierarchical service policies can be attached to inbound traffic received on an ES port.
Usage Guidelines
You can use the set command only in class-level classes.
The set dscp new-dscp and the set precedence new-precedence commands are the same as the set ip dscp new-dscp and the set ip precedence new-precedence commands.
For the set dscp new-dscp or the set precedence new-precedence command, you can enter a mnemonic name for a commonly used value. For example, you can enter the set dscp af11 command, which is the as same entering the set dscp 10 command. You can enter the set precedence critical command, which is the same as entering the set precedence 5 command. For a list of supported mnemonics, enter the set dscp ? or the set precedence ? command to see the command-line help strings.
You can configure the set cos new-cos, set dscp new-dscp, set precedence new-precedence, or the set mpls experimental exp-number command in an ingress and an egress policy map attached to an enhanced-services (ES) port. You can configure only the set dscp new-dscp or the set precedence new-precedence command in an ingress nonhierarchical policy map attached to an standard SVI or an ES port.
If an ingress hierarchical policy map includes set cos new-cos, the set dscp new-dscp, or the set precedence new-precedence command, the switch automatically applies the port trust state to the ES port. The switch applies the port trust state to all inbound traffic on the ES port, including traffic that does not match the traffic class. For example, if you enter the set cos new-cos command, the switch automatically configures the interface to trust CoS.
In an ingress policy map, you cannot combine Layer 2 and Layer 3 set actions because the port can trust only one value in the inbound packet. For example, the switch does not support this policy map:
policy-map p1class cos1police cir per 10 conform-action set-cos-transmit 3set dscp af22To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to create a policy map called p1 with CoS values assigned to different traffic types. Class maps for voice and video-data have already been created.
Switch(config)# policy-map p1Switch(config-pmap)# class voiceSwitch(config-pmap-c)# set cos 1Switch(config-pmap)# exitSwitch(config-pmap)# class video-dataSwitch(config-pmap-c)# set cos 2Switch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
setup
Use the setup privileged EXEC command to configure the switch with its initial configuration.
setup
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
When you use the setup command, make sure that you have this information:
•
•
When you enter the setup command, an interactive dialog, called the System Configuration Dialog, appears. It guides you through the configuration process and prompts you for information. The values shown in brackets next to each prompt are the default values last set by using either the setup command facility or the configure privileged EXEC command.
Help text is provided for each prompt. To access help text, press the question mark (?) key at a prompt.
To return to the privileged EXEC prompt without making changes and without running through the entire System Configuration Dialog, press Ctrl-C.
When you complete your changes, the setup program shows you the configuration command script that was created during the setup session. You can save the configuration in NVRAM, return to the setup program without saving, or return to the command-line prompt without saving the configuration.
Examples
This is an example of output from the setup command:
Switch# setup--- System Configuration Dialog ---Continue with configuration dialog? [yes/no]: yesAt any point you may enter a question mark '?' for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets '[]'.Basic management setup configures only enough connectivityfor management of the system, extended setup will ask youto configure each interface on the systemWould you like to enter basic management setup? [yes/no]: yesConfiguring global parameters:Enter host name [switch]: host-nameThe enable secret is a password used to protect access toprivileged EXEC and configuration modes. This password, afterentered, becomes encrypted in the configuration.Enter enable secret [<Use current secret>]: enable-secret-passwordThe enable password is used when you do not specify anenable secret password, with some older software versions, andsome boot images.Enter enable password: enable-passwordThe virtual terminal password is used to protectaccess to the router over a network interface.Enter virtual terminal password: terminal-passwordConfigure SNMP Network Management? [yes]: yesCommunity string [public]:Current interface summaryInterface IP-Address OK? Method Status ProlVlan1 10.1.2.3 YES NVRAM up upVlan100 unassigned YES NVRAM down downVlan150 unassigned YES NVRAM down downVlan901 unassigned YES NVRAM down downFastEthernet1/0/1 unassigned YES unset up upFastEthernet1/0/2 111.1.1.1 YES NVRAM up up<output truncated>Enter interface name used to connect to themanagement network from the above interface summary: vlan1Configuring interface Vlan1:Configure IP on this interface? [yes]: yesIP address for this interface: ip-addressSubnet mask for this interface [255.0.0.0] : subnet-maskClass A network is 10.0.0.0, 8 subnet bits; mask is /8Would you like to enable as a cluster command switch? [yes/no]: yesEnter cluster name: cluster-nameThe following configuration command script was created:hostname host-nameenable secret 5 $1$ZzDa$X8ic4TpKggQ5wOgQ/xqdz1enable password enable-passwordline vty 0 15password terminal-passwordsnmp-server community public!no ip routing!interface Vlan1no shutdownip address 10.1.2.3 255.0.0.0!interface Vlan100shutdownno ip address!interface Vlan150shutdownno ip address!interface Vlan901shutdownno ip address!interface FastEthernet1/0/1!interface FastEthernet1/0/2shutdownno ip address!<output truncated>cluster enable cluster-name!end[0] Go to the IOS command prompt without saving this config.[1] Return back to the setup without saving this config.[2] Save this configuration to nvram and exit.Enter your selection [2]:Related Commands
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.Displays version information for the hardware and firmware.
setup express
Use the setup express global configuration command to enable Express Setup mode. Use the no form of this command to disable Express Setup mode.
setup express
no setup express
Syntax Description
This command has no arguments or keywords.
Defaults
Express Setup is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
When Express Setup is enabled on a new (unconfigured) switch, pressing the Mode button for 2 seconds activates Express Setup. You can access the switch through an Ethernet port by using the IP address 10.0.0.1 and then can configure the switch with the web-based Express Setup program or with the CLI-based setup program.
When you press the Mode button for 2 seconds on a configured switch, the LEDs next to the Mode button start blinking. If you press the Mode button for a total of 10 seconds, the switch configuration is deleted, and the switch reboots. The switch can then be configured like a new switch, either through the web-based Express Setup program or the CLI-based setup program.
Note
If Express Setup is active on the switch, entering the write memory or copy running-configuration startup-configuration privileged EXEC commands deactivates Express Setup. The IP address 10.0.0.1 is no longer valid on the switch, and your connection using this IP address ends.
The primary purpose of the no setup express command is to prevent someone from deleting the switch configuration by pressing the Mode button for 10 seconds.
Examples
This example shows how to enable Express Setup mode:
Switch(config)# setup expressYou can verify that Express Setup mode is enabled by pressing the Mode button:
•
•
Caution
This example shows how to disable Express Setup mode:
Switch(config)# no setup expressYou can verify that Express Setup mode is disabled by pressing the Mode button. The mode LEDs do not turn solid green or begin blinking if Express Setup mode is not enabled on the switch.
Related Commands
shape
Use the shape policy-map class configuration command to enable traffic shaping in a hierarchical policy map attached to an enhanced-services (ES) port. Traffic shaping limits the data transmission rate. Use the no form of this command to return to the default setting.
shape average cir-bps
no shape average
Syntax Description
Defaults
Average-rate traffic shaping is disabled.
Command Modes
Policy-map class configuration
Command History
12.1(14)AX
This command was introduced.
12.2(25)EY
Hierarchical service policies can be attached to inbound traffic received on an ES port.
Usage Guidelines
Use the shape command only in a hierarchical policy map attached to an ES port. This command is valid in policy maps at any level of the hierarchy.
Shaping is the process of delaying out-of-profile packets in queues so that they conform to a specified profile. Shaping is distinct from policing. Policing drops packets that exceed a configured threshold, but shaping buffers packets so that traffic remains within the threshold. Shaping offers greater smoothness in handling traffic than policing.
You must configure the bandwidth or the shape policy-map class configuration command before you configure either the queue-limit or the random-detect policy-map class configuration command in a class policy.
You cannot use the bandwidth, queue-limit, random-detect, and the shape policy-map class configuration commands with the priority policy-map class configuration command in the same class within the same policy map. However, you can use these commands in the same policy map.
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
The switch follows these rules when allocating bandwidth for VLAN-level and class-level classes:
•
•
•
•
•
•
Examples
This example shows how to limit the specified traffic class to a data transmission rate of 256 kbps:
Switch(config)# policy-map policy1Switch(config-pmap)# class class1Switch(config-pmap-c)# shape average 256000Switch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# interface gigabitethernet1/1/1Switch(config-if)# service-policy output policy1You can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
show access-lists
Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.
show access-lists [name | number | hardware counters | ipc] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The switch supports only IP standard and extended access lists. Therefore, the allowed numbers are only 1 to 199 and 1300 to 2699.
This command also displays the MAC ACLs that are configured.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show access-lists command:
Switch# show access-listsStandard IP access list 110 permit 1.1.1.120 permit 2.2.2.230 permit any40 permit 0.255.255.255, wildcard bits 12.0.0.0Standard IP access list videowizard_1-1-1-110 permit 1.1.1.1Standard IP access list videowizard_10-10-10-1010 permit 10.10.10.10Extended IP access list 12110 permit ahp host 10.10.10.10 host 20.20.10.10 precedence routineExtended IP access list CMP-NAT-ACLDynamic Cluster-HSRP deny ip any any10 deny ip any host 19.19.11.1120 deny ip any host 10.11.12.13Dynamic Cluster-NAT permit ip any any10 permit ip host 10.99.100.128 any20 permit ip host 10.46.22.128 any30 permit ip host 10.45.101.64 any40 permit ip host 10.45.20.64 any50 permit ip host 10.213.43.128 any60 permit ip host 10.91.28.64 any70 permit ip host 10.99.75.128 any80 permit ip host 10.38.49.0 anyThis is an example of output from the show access-lists hardware counters command:
Switch# show access-lists hardware countersL2 ACL INPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0L3 ACL INPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 0Forwarded: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L2 ACL OUTPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Bridge Only: All frame count: 61Bridge Only: All bytes count: 3904Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0<output truncated>This is an example of output from the show access-lists ipc command:
Switch# show access-lists ipcLC Access List Config Updates RcvdStandard Access Lists rcvd : 0Simple Named Access Lists rcvd : 0Extended Access Lists rcvd : 0Extended Named Access Lists rcvd : 0Rate-Limit Access Lists rcvd : 0Delete one Access List rcvd : 0Related Commands
show archive status
Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or TFTP protocol.
show archive status [ {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you use the archive download-sw privileged EXEC command to download an image to a TFTP server, the output of the archive download-sw command shows the status of the download.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of output from the show archive status command:
Switch# show archive statusIDLE: No upgrade in progressSwitch# show archive statusLOADING: Upgrade in progressSwitch# show archive statusEXTRACT: Extracting the imageSwitch# show archive statusVERIFY: Verifying softwareSwitch# show archive statusRELOAD: Upgrade completed. Reload pendingRelated Commands
show arp access-list
Use the show arp access-list user EXEC command to display detailed information about Address Resolution Protocol (ARP) access control lists (ACLs).
show arp access-list [acl-name] [ | {begin | exclude | include} expression]
This command is available only if your switch is running the enhanced multilayer image (EMI).
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show arp access-list command:
Switch> show arp access-listARP access list rosepermit ip 10.101.1.1 0.0.0.255 mac anypermit ip 20.3.1.0 0.0.0.255 mac anyRelated Commands
show auto qos
Use the show auto qos user EXEC command to display the initial configuration that is generated by the automatic quality of service (auto-QoS) feature.
show auto qos [interface [interface-id]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
In releases earlier than Cisco IOS Release 12.2(25)EY, the show auto qos [interface [interface-id]] command output shows the initial generated auto-QoS configuration.
In Cisco IOS Release 12.2(25)EY or later, the show auto qos command output shows only the auto-QoS command entered on each interface. The show auto qos interface interface-id command output shows the auto-QoS command entered on a specific interface.
Use the show running-config privileged EXEC command to display the auto-QoS configuration and the user modifications.
On an enhanced-services (ES) port, the srr-queue bandwidth shape interface configuration command is not part of the generated auto qos voip command list.
To display information about the QoS configuration that might be affected by auto-QoS, use one of these commands:
•
•
•
•
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered:
Switch> show auto qosGigabitEthernet1/0/1auto qos voip cisco-softphoneGigabitEthernet1/0/2auto qos voip cisco-phoneThis is an example of output from the show auto qos interface interface-id command when the auto qos voip cisco-phone interface configuration command is entered:
Switch> show auto qos interface gigabitethernet 1/0/1GigabitEthernet1/0/1auto qos voip cisco-phoneThis is an example of output from the show running-config privileged EXEC command when the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered:
Switch# show running-configBuilding configuration......mls qos map policed-dscp 24 26 46 to 0mls qos map cos-dscp 0 8 16 26 32 46 48 56mls qos srr-queue input bandwidth 90 10mls qos srr-queue input threshold 1 8 16mls qos srr-queue input threshold 2 34 66mls qos srr-queue input buffers 67 33mls qos srr-queue input cos-map queue 1 threshold 2 1mls qos srr-queue input cos-map queue 1 threshold 3 0mls qos srr-queue input cos-map queue 2 threshold 1 2mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7mls qos srr-queue input cos-map queue 2 threshold 3 3 5mls qos srr-queue input dscp-map queue 1 threshold 2 9 10 11 12 13 14 15mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 4 5 6 7mls qos srr-queue input dscp-map queue 1 threshold 3 32mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23mls qos srr-queue input dscp-map queue 2 threshold 2 33 34 35 36 37 38 39 48mls qos srr-queue input dscp-map queue 2 threshold 2 49 50 51 52 53 54 55 56mls qos srr-queue input dscp-map queue 2 threshold 2 57 58 59 60 61 62 63mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31mls qos srr-queue input dscp-map queue 2 threshold 3 40 41 42 43 44 45 46 47mls qos srr-queue output cos-map queue 1 threshold 3 5mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7mls qos srr-queue output cos-map queue 3 threshold 3 2 4mls qos srr-queue output cos-map queue 4 threshold 2 1mls qos srr-queue output cos-map queue 4 threshold 3 0mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 42 43 44 45 46 47mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 18 19 20 21 22 23mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 34 35 36 37 38 39mls qos srr-queue output dscp-map queue 4 threshold 1 8mls qos srr-queue output dscp-map queue 4 threshold 2 9 10 11 12 13 14 15mls qos srr-queue output dscp-map queue 4 threshold 3 0 1 2 3 4 5 6 7mls qos queue-set output 1 threshold 1 100 100 100 100mls qos queue-set output 1 threshold 2 75 75 75 250mls qos queue-set output 1 threshold 3 75 150 100 300mls qos queue-set output 1 threshold 4 50 100 75 400mls qos queue-set output 2 threshold 1 100 100 100 100mls qos queue-set output 2 threshold 2 35 35 35 35mls qos queue-set output 2 threshold 3 55 82 100 182mls qos queue-set output 2 threshold 4 90 250 100 400mls qos queue-set output 1 buffers 15 20 20 45mls qos queue-set output 2 buffers 24 20 26 30mls qos...!class-map match-all AutoQoS-VoIP-RTP-Trustmatch ip dscp efclass-map match-all AutoQoS-VoIP-Control-Trustmatch ip dscp cs3 af31!policy-map AutoQoS-Police-SoftPhoneclass AutoQoS-VoIP-RTP-Trustset dscp efpolice 320000 8000 exceed-action policed-dscp-transmitclass AutoQoS-VoIP-Control-Trustset dscp cs3police 32000 8000 exceed-action policed-dscp-transmit!...!interface GigabitEthernet1/0/1switchport mode accessswitchport port-security maximum 400service-policy input AutoQoS-Police-SoftPhonespeed 100duplex halfsrr-queue bandwidth share 10 10 60 20srr-queue bandwidth shape 10 0 0 0auto qos voip cisco-softphone!interface GigabitEthernet1/0/2switchport mode accessswitchport port-security maximum 1999speed 100duplex fullsrr-queue bandwidth share 10 10 60 20srr-queue bandwidth shape 10 0 0 0mls qos trust device cisco-phonemls qos trust cosauto qos voip cisco-phone!<output truncated>This is an example of output from the show auto qos interface interface-id command when the auto qos voip cisco-phone interface configuration command is entered:
Switch> show auto qos interface fastethernet1/0/2FastEthernet1/0/2auto qos voip cisco-phoneThese are examples of output from the show auto qos command when auto-QoS is disabled on the switch:
Switch> show auto qosAutoQoS not enabled on any interfaceThese are examples of output from the show auto qos interface interface-id command when auto-QoS is disabled on an interface:
Switch> show auto qos interface gigabitethernet1/0/1AutoQoS is disabledRelated Commands
Automatically configures QoS for VoIP within a QoS domain.
Enables debugging of the auto-QoS feature.
show boot
Use the show boot privileged EXEC command to display the settings of the boot environment variables.
show boot [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show boot command. Table 2-19 describes each field in the display.
Switch# show bootBOOT path-list : flash:c3750-i9-mzConfig file : flash:/config.textPrivate Config file : flash:/private-config.textEnable Break : noManual Boot : yesHELPER path-list :
Note
Related Commands
show class-map
Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.
show class-map [class-map-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show class-map command:
Switch> show class-mapClass Map match-all videowizard_10-10-10-10 (id 2)Match access-group name videowizard_10-10-10-10Class Map match-any class-default (id 0)Match anyClass Map match-all dscp5 (id 3)Match ip dscp 5Related Commands
Creates a class map to be used for matching packets to the class whose name you specify.
Defines the match criteria for a class map.
show controllers cpu-interface
Use the show controllers cpu-interface privileged EXEC command to display the state of the CPU network interface application-specific integrated circuit (ASIC) and the send and receive statistics for packets reaching the CPU.
show controllers cpu-interface [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is a partial output example from the show controllers cpu-interface command:
Switch# show controllers cpu-interfacecpu-queue-frames retrieved dropped invalid hol-block----------------- ---------- ---------- ---------- ----------rpc 4523063 0 0 0stp 1545035 0 0 0ipc 1903047 0 0 0routing protocol 96145 0 0 0L2 protocol 79596 0 0 0remote console 0 0 0 0sw forwarding 5756 0 0 0host 225646 0 0 0broadcast 46472 0 0 0cbt-to-spt 0 0 0 0igmp snooping 68411 0 0 0icmp 0 0 0 0logging 0 0 0 0rpf-fail 0 0 0 0queue14 0 0 0 0cpu heartbeat 1710501 0 0 0Supervisor ASIC receive-queue parameters----------------------------------------queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFCqueue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8<output truncated>Supervisor ASIC Mic Registers------------------------------MicDirectPollInfo 80000800MicIndicationsReceived 00000000MicInterruptsReceived 00000000MicPcsInfo 0001001FMicPlbMasterConfiguration 00000000MicRxFifosAvailable 00000000MicRxFifosReady 0000BFFFMicTimeOutPeriod: FrameTOPeriod: 00000EA6 DirectTOPeriod: 00004000<output truncated>MicTransmitFifoInfo:Fifo0: StartPtrs: 038C2800 ReadPtr: 038C2C38WritePtrs: 038C2C38 Fifo_Flag: 8A800800Weights: 001E001EFifo1: StartPtr: 03A9BC00 ReadPtr: 03A9BC60WritePtrs: 03A9BC60 Fifo_Flag: 89800400writeHeaderPtr: 03A9BC60Fifo2: StartPtr: 038C8800 ReadPtr: 038C88E0WritePtrs: 038C88E0 Fifo_Flag: 88800200writeHeaderPtr: 038C88E0Fifo3: StartPtr: 03C30400 ReadPtr: 03C30638WritePtrs: 03C30638 Fifo_Flag: 89800400writeHeaderPtr: 03C30638Fifo4: StartPtr: 03AD5000 ReadPtr: 03AD50A0WritePtrs: 03AD50A0 Fifo_Flag: 89800400writeHeaderPtr: 03AD50A0Fifo5: StartPtr: 03A7A600 ReadPtr: 03A7A600WritePtrs: 03A7A600 Fifo_Flag: 88800200writeHeaderPtr: 03A7A600Fifo6: StartPtr: 03BF8400 ReadPtr: 03BF87F0WritePtrs: 03BF87F0 Fifo_Flag: 89800400<output truncated>Related Commands
show controllers ethernet-controller
Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-port send and receive statistics read from the hardware. Use with the phy keyword to display the port internal registers or the port-asic keyword to display information about the port application-specific integrated circuit (ASIC).
show controllers ethernet-controller [[interface-id] [phy [detail] | port-asic {configuration | statistics}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC (supported with only the interface-id keywords in user EXEC mode)
Command History
Usage Guidelines
This display without keywords provides traffic statistics, basically the Remote Network Monitoring (RMON) statistics for all ports or for the specified port.
When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers ethernet-controller command for a port:
Switch# show controllers ethernet-controller gigabitethernet1/0/1Transmit GigabitEthernet1/0/1 Receive0 Bytes 0 Bytes0 Unicast frames 0 Unicast frames0 Multicast frames 0 Multicast frames0 Broadcast frames 0 Broadcast frames0 Too old frames 0 Unicast bytes0 Deferred frames 0 Multicast bytes0 MTU exceeded frames 0 Broadcast bytes0 1 collision frames 0 Alignment errors0 2 collision frames 0 FCS errors0 3 collision frames 0 Oversize frames0 4 collision frames 0 Undersize frames0 5 collision frames 0 Collision fragments0 6 collision frames0 7 collision frames 0 Minimum size frames0 8 collision frames 0 65 to 127 byte frames0 9 collision frames 0 128 to 255 byte frames0 10 collision frames 0 256 to 511 byte frames0 11 collision frames 0 512 to 1023 byte frames0 12 collision frames 0 1024 to 1518 byte frames0 13 collision frames 0 Overrun frames0 14 collision frames 0 Pause frames0 15 collision frames 0 Symbol error frames0 Excessive collisions0 Late collisions 0 Invalid frames, too large0 VLAN discard frames 0 Valid frames, too large0 Excess defer frames 0 Invalid frames, too small0 64 byte frames 0 Valid frames, too small0 127 byte frames0 255 byte frames 0 Too old frames0 511 byte frames 0 Valid oversize frames0 1023 byte frames 0 System FCS error frames0 1518 byte frames 0 RxPortFifoFull drop frame0 Too large frames0 Good (1 coll) framesThis is an example of output from the show controllers ethernet-controller phy command for a specific port. Note that the last line of the display shows the Auto-MDIX setting for the port.
Switch# show controllers ethernet-controller fastethernet1/0/3 phyControl Register : 0011 0001 0000 0000Control STATUS : 0111 1000 0000 1001Phy ID 1 : 0000 0000 0001 0011Phy ID 2 : 0111 1000 1111 1011Auto-Negotiation Advertisement : 0000 0011 1110 0001Auto-Negotiation Link Partner : 0000 0000 0000 0000Auto-Negotiation Expansion Reg : 0000 0000 0000 0100Next Page Transmit Register : 0010 0000 0000 0001Link Partner Next page Rx Regi : 0000 0000 0000 0000Port Configuration Register : 0000 0001 1010 0100Port Status Register : 0000 0001 0000 0000Interrupt Enable Register : 1010 0000 0000 0000Interrupt Status Register : 0000 0000 0101 0100LED Configuration Register : 1001 1001 1001 0000Trim Enable Register : 0000 1101 0000 0000Auto-MDIX : Off [AdminState=0 Flags=0x00002248This is an example of output from the show controllers ethernet-controller port-asic configuration command:
Switch# show controllers ethernet-controller port-asic configuration========================================================================Switch 1, PortASIC 0 Registers------------------------------------------------------------------------DeviceType : 000101BCReset : 00000000PmadMicConfig : 00000001PmadMicDiag : 00000003SupervisorReceiveFifoSramInfo : 000007D0 000007D0 40000000SupervisorTransmitFifoSramInfo : 000001D0 000001D0 40000000GlobalStatus : 00000800IndicationStatus : 00000000IndicationStatusMask : FFFFFFFFInterruptStatus : 00000000InterruptStatusMask : 01FFE800SupervisorDiag : 00000000SupervisorFrameSizeLimit : 000007C8SupervisorBroadcast : 000A0F01GeneralIO : 000003F9 00000000 00000004StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFFFF0FFF00 86020000 5555FFFF 00000000StackRacInfo : 73001630 00000003 7F001644 0000000324140003 FD632B00 18E418E0 FFFFFFFFStackControlStatus : 18E418E0stackControlStatusMask : FFFFFFFFTransmitBufferFreeListInfo : 00000854 00000800 00000FF8 000000000000088A 0000085D 00000FF8 00000000TransmitRingFifoInfo : 00000016 00000016 40000000 000000000000000C 0000000C 40000000 00000000TransmitBufferInfo : 00012000 00000FFF 00000000 00000030TransmitBufferCommonCount : 00000F7ATransmitBufferCommonCountPeak : 0000001ETransmitBufferCommonCommonEmpty : 000000FFNetworkActivity : 00000000 00000000 00000000 02400000DroppedStatistics : 00000000FrameLengthDeltaSelect : 00000001SneakPortFifoInfo : 00000000MacInfo : 0EC0801C 00000001 0EC0801B 0000000100C0001D 00000001 00C0001E 00000001<output truncated>This is an example of output from the show controllers ethernet-controller port-asic statistics command:
Switch# show controllers ethernet-controller port-asic statistics===========================================================================Switch 1, PortASIC 0 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames4118966 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames0 RxQ-1, wt-0 enqueue frames 0 RxQ-1, wt-0 drop frames296 RxQ-1, wt-1 enqueue frames 0 RxQ-1, wt-1 drop frames2836036 RxQ-1, wt-2 enqueue frames 0 RxQ-1, wt-2 drop frames0 RxQ-2, wt-0 enqueue frames 0 RxQ-2, wt-0 drop frames0 RxQ-2, wt-1 enqueue frames 0 RxQ-2, wt-1 drop frames158377 RxQ-2, wt-2 enqueue frames 0 RxQ-2, wt-2 drop frames0 RxQ-3, wt-0 enqueue frames 0 RxQ-3, wt-0 drop frames0 RxQ-3, wt-1 enqueue frames 0 RxQ-3, wt-1 drop frames0 RxQ-3, wt-2 enqueue frames 0 RxQ-3, wt-2 drop frames15 TxBufferFull Drop Count 0 Rx Fcs Error Frames0 TxBufferFrameDesc BadCrc16 0 Rx Invalid Oversize Frames0 TxBuffer Bandwidth Drop Cou 0 Rx Invalid Too Large Frames0 TxQueue Bandwidth Drop Coun 0 Rx Invalid Too Large Frames0 TxQueue Missed Drop Statist 0 Rx Invalid Too Small Frames74 RxBuffer Drop DestIndex Cou 0 Rx Too Old Frames0 SneakQueue Drop Count 0 Tx Too Old Frames0 Learning Queue Overflow Fra 0 System Fcs Error Frames0 Learning Cam Skip Count15 Sup Queue 0 Drop Frames 0 Sup Queue 8 Drop Frames0 Sup Queue 1 Drop Frames 0 Sup Queue 9 Drop Frames0 Sup Queue 2 Drop Frames 0 Sup Queue 10 Drop Frames0 Sup Queue 3 Drop Frames 0 Sup Queue 11 Drop Frames0 Sup Queue 4 Drop Frames 0 Sup Queue 12 Drop Frames0 Sup Queue 5 Drop Frames 0 Sup Queue 13 Drop Frames0 Sup Queue 6 Drop Frames 0 Sup Queue 14 Drop Frames0 Sup Queue 7 Drop Frames 0 Sup Queue 15 Drop Frames===========================================================================Switch 1, PortASIC 1 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames52 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames<output truncated>Related Commands
show controllers tcam
Use the show controllers tcam privileged EXEC command to display the state of the registers for all ternary content addressable memory (TCAM) in the system and for all TCAM port application-specific integrated circuits (ASICs) that are CAM controllers.
show controllers tcam [asic [number]] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers tcam command:
Switch# show controllers tcam------------------------------------------------------------------------TCAM-0 Registers------------------------------------------------------------------------REV: 00B30103SIZE: 00080040ID: 00000000CCR: 00000000_F0000020RPID0: 00000000_00000000RPID1: 00000000_00000000RPID2: 00000000_00000000RPID3: 00000000_00000000HRR0: 00000000_E000CAFCHRR1: 00000000_00000000HRR2: 00000000_00000000HRR3: 00000000_00000000HRR4: 00000000_00000000HRR5: 00000000_00000000HRR6: 00000000_00000000HRR7: 00000000_00000000<output truncated>GMR31: FF_FFFFFFFF_FFFFFFFFGMR32: FF_FFFFFFFF_FFFFFFFFGMR33: FF_FFFFFFFF_FFFFFFFF=============================================================================TCAM related PortASIC 1 registers=============================================================================LookupType: 89A1C67D_24E35F00LastCamIndex: 0000FFE0LocalNoMatch: 000069E0ForwardingRamBaseAddress:00022A00 0002FE00 00040600 0002FE00 0000D40000000000 003FBA00 00009000 00009000 0004060000000000 00012800 00012900Related Commands
show cpu traffic qos
Use the show cpu traffic qos command in user EXEC mode to display the QoS marking values for CPU-generated traffic.
show cpu traffic qos [ | begin | exclude | include expression]
Syntax Description
Defaults
Displays the QoS marking values for all CPU-generated traffic.
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
The following is sample output from the show cpu traffic qos command:
CPU QoS configuration:
Switch(config)# cpu traffic qos cos 2Switch(config)# cpu traffic qos dscp 40Show command:
Switch> show cpu traffic qosQOS - CPU Generated Traffic---------------------------Set parameter-type----------------------------------------------Cos trustDSCP dscp-mutation map1Precedence DefaultRelated Commands
show dot1q-tunnel
Use the show dot1q-tunnel user EXEC command to display information about 802.1Q tunnel ports.
show dot1q-tunnel [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show dot1q-tunnel command:
Switch> show dot1q-tunnelPort-----Gi1/1/1Gi1/1/2Po2Related Commands
show vlan dot1q tag native
Displays 802.1Q native VLAN tagging status.
switchport mode dot1q-tunnel
Configures an interface as an 802.1Q tunnel port.
show dot1x
Use the show dot1x privileged EXEC command to display 802.1x statistics, administrative status, and operational status for the switch or for the specified port.
show dot1x [all | interface interface-id | statistics interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not specify a port, global parameters and a summary are displayed. If you specify a port, details for that port are displayed.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show dot1x and the show dot1x all commands:
Switch# show dot1xSysauthcontrol = EnabledDot1x Protocol Version = 1Dot1x Oper Controlled Directions = BothDot1x Admin Controlled Directions = BothSwitch# show dot1x allDot1x Info for interface FastEthernet1/0/3----------------------------------------------------Supplicant MAC 00d0.b71b.35deAuthSM State = CONNECTINGBendSM State = IDLEPortStatus = UNAUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0Dot1x Info for interface FastEthernet1/0/7----------------------------------------------------PortStatus = UNAUTHORIZEDMaxReq = 2HostMode = MultiPort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x interface interface-id command:
Switch# show dot1x interface fastethernet1/0/3Supplicant MAC 00d0.b71b.35deAuthSM State = AUTHENTICATEDBendSM State = IDLEPortStatus = AUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x statistics interface interface-id command. Table 2-20 describes the fields in the display.
Switch# show dot1x statistics interface fastethernet1/0/3PortStatistics Parameters for Dot1x--------------------------------------------TxReqId = 15 TxReq = 0 TxTotal = 15RxStart = 4 RxLogoff = 0 RxRespId = 1 RxResp = 1RxInvalid = 0 RxLenErr = 0 RxTotal= 6RxVersion = 1 LastRxSrcMac 00d0.b71b.35de
Related Commands
show dtp
Use the show dtp privileged EXEC command to display Dynamic Trunking Protocol (DTP) information for the switch or for a specified interface.
show dtp [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show dtp command:
Switch# show dtpGlobal DTP informationSending DTP Hello packets every 30 secondsDynamic Trunk timeout is 300 seconds21 interfaces using DTPThis is an example of output from the show dtp interface interface-id command:
Switch# show dtp interface fastethernet1/0/1DTP information for FastEthernet1/0/1:TOS/TAS/TNS: ACCESS/AUTO/ACCESSTOT/TAT/TNT: NATIVE/NEGOTIATE/NATIVENeighbor address 1: 000943A7D081Neighbor address 2: 000000000000Hello timer expiration (sec/state): 1/RUNNINGAccess timer expiration (sec/state): never/STOPPEDNegotiation timer expiration (sec/state): never/STOPPEDMultidrop timer expiration (sec/state): never/STOPPEDFSM state: S2:ACCESS# times multi & trunk 0Enabled: yesIn STP: noStatistics----------3160 packets received (3160 good)0 packets dropped0 nonegotiate, 0 bad version, 0 domain mismatches, 0 bad TLVs, 0 other6320 packets output (6320 good)3160 native, 3160 software encap isl, 0 isl hardware native0 output errors0 trunk timeouts1 link ups, last link up on Mon Mar 01 1993, 01:02:290 link downsRelated Commands
show interfaces trunk
Displays interface trunking information.
show env
Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch.
show env {all | fan | power | rps | temperature} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show env all command:
Switch> show env allFAN is OKTEMPERATURE is OKPOWER is OKRPS is NOT PRESENTThis is an example of output from the show env fan command:
Switch> show env fanFAN is OKshow errdisable detect
Use the show errdisable detect user EXEC command to display error-disabled detection status.
show errdisable detect [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.1(14)AX
This command was introduced.
12.2(37)SE
The Mode column was added to the output display.
Usage Guidelines
The Mode column shows the shutdown mode that was configured for the error-disabled reason:
•
•
•
A displayed gbic-invalid error in the Reason column refers to an invalid small form-factor pluggable (SFP) interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show errdisable detect command:
Switch> show errdisable detectErrDisable Reason Detection Mode----------------- --------- ----arp-inspection Enabled portbpduguard Enabled portchannel-misconfig Enabled portcommunity-limit Enabled portdhcp-rate-limit Enabled portdtp-flap Enabled portgbic-invalid Enabled portinvalid-policy Enabled portl2ptguard Enabled portlink-flap Enabled portlink-monitor-fail Enabled portloopback Enabled portlsgroup Enabled portoam-remote-failur Enabled portpagp-flap Enabled portpsecure-violation Enabled port/vlansecurity-violatio Enabled portsfp-config-mismat Enabled portstorm-control Enabled portudld Enabled portvmps Enabled port
Note
Related Commands
Enables error-disabled detection for a specific cause or all causes.
Displays error condition recognition information.
Displays error-disabled recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in an error-disabled state.
show errdisable flap-values
Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause.
show errdisable flap-values [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.
ErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show errdisable flap-values command:
Switch> show errdisable flap-valuesErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10Related Commands
Enables error-disable detection for a specific cause or all causes.
Displays error-disable detection status.
Displays error-disable recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show errdisable recovery
Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.
show errdisable recovery [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
A gbic-invalid error-disable reason refers to an invalid small form-factor pluggable (SFP) interface.
Examples
This is an example of output from the show errdisable recovery command:
Note
Switch> show errdisable recoveryErrDisable Reason Timer Status----------------- --------------udld Disabledbpduguard Disabledsecurity-violatio Disabledchannel-misconfig Disabledvmps Disabledpagp-flap Disableddtp-flap Disabledlink-flap Disabledgbic-invalid Disabledpsecure-violation Disabledgbic-invalid Disableddhcp-rate-limit Disabledunicast-flood Disabledloopback DisabledTimer interval:300 secondsInterfaces that will be enabled at the next timeout:Interface Errdisable reason Time left(sec)--------- ----------------- --------------Fa1/0/4 link-flap 279
Note
Related Commands
Configures the recover mechanism variables.
Displays error disable detection status.
Displays error condition recognition information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show etherchannel
Use the show etherchannel user EXEC command to display EtherChannel information for a channel.
show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not specify a channel-group, all channel groups are displayed.
In the output, the Passive port list field appears only for Layer 3 port channels. The appearance of this field means that the physical port, which is still not up, is configured to be in the channel group (and indirectly is in the only port channel in the channel group).
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show etherchannel 1 detail command:
Switch> show etherchannel 1 detailGroup state = L2Ports: 2 Maxports = 16Port-channels: 1 Max Port-channels = 16Protocol: LACPPorts in the group:-------------------Port: Gi1/0/1------------Port state = Up Mstr In-BndlChannel group = 1 Mode = Active Gcchange = -Port-channel = Po1 GC = - Pseudo port-channel = Po1Port index = 0 Load = 0x00 Protocol = LACPFlags: S - Device is sending Slow LACPDUs F - Device is sending fast LACPDUA - Device is in active mode. P - Device is in passive mode.Local information:LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateFa1/0/1 SA bndl 32768 0x1 0x1 0x101 0x3DFa1/0/2 SA bndl 32768 0x0 0x1 0x0 0x3DAge of the port in the current state: 01d:20h:06m:04sPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:20m:26sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi1/0/1 Active 00 00 Gi1/0/2 Active 0Time since last port bundled: 01d:20h:20m:20s Gi1/0/2This is an example of output from the show etherchannel 1 summary command:
Switch> show etherchannel 1 summaryFlags: D - down P - in port-channelI - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3 S - Layer2u - unsuitable for bundlingU - in use f - failed to allocate aggregatord - default portNumber of channel-groups in use: 1Number of aggregators: 1Group Port-channel Protocol Ports------+-------------+-----------+----------------------------------------1 Po1(SU) LACP Gi1/0/1(P) Gi1/0/2(P)This is an example of output from the show etherchannel 1 port-channel command:
Switch> show etherchannel 1 port-channelPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:24m:50sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi1/0/1 Active 00 00 Gi1/0/2 Active 0Time since last port bundled: 01d:20h:24m:44s Gi1/0/2This is an example of output from show etherchannel protocol command:
Switch# show etherchannel protocolChannel-group listing:-----------------------Group: 1----------Protocol: LACPGroup: 2----------Protocol: PAgPRelated Commands
Assigns an Ethernet port to an EtherChannel group.
Restricts the protocol used on an interface to manage channeling.
Accesses or creates the port channel.
show ethernet service evc
Use the show ethernet service evc privileged EXEC command to display information about Ethernet virtual connection (EVC) customer-service instances.
show ethernet service evc [id evc-id | interface interface-id] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ethernet service evc command:
Switch# show ethernet service evcIdentifier Type Act-UNI-cnt StatusBLUE P-P 2 ActivePINK MP-MP 2 PartiallyActivePURPLE P-P 2 ActiveBROWN MP-MP 2 ActiveGREEN P-P 3 ActiveYELLOW MP-MP 2 PartiallyActiveBANANAS P-P 0 InActiveTEST2 P-P 0 NotDefinedORANGE P-P 2 ActiveTEAL P-P 0 InActiveRelated Commands
ethernet evc evc-id
Defines an EVC and enters EVC configuration mode.
show ethernet service instance
Use the show ethernet service instance privileged EXEC command to display information about Ethernet customer-service instances.
show ethernet service instance [id id] [interface interface-id] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ethernet service instance command:
Switch# show ethernet service instanceIdentifier Interface CE-Vlans222 FastEthernet0/1 untagged,1-409410 FastEthernet0/2222 FastEthernet0/2 200333 FastEthernet0/2 default10 FastEthernet0/3 30011 FastEthernet0/310 FastEthernet0/4 30010 FastEthernet0/6 untagged,1-409410 FastEthernet0/7 untagged,1-409410 FastEthernet0/8 untagged,1-409410 FastEthernet0/9 untagged20 FastEthernet0/9222 FastEthernet0/11 300-350,900-999333 FastEthernet0/11 100-200,1000,1999-4094222 FastEthernet0/12 20333 FastEthernet0/12 1010 FastEthernet0/13 1020 FastEthernet0/13 2030 FastEthernet0/13 30200 FastEthernet0/13 222200 FastEthernet0/14 200,222300 FastEthernet0/14 333555 FastEthernet0/14 555Related Commands
service instance id ethernet
Defines an Ethernet service instance and enters Ethernet service configuration mode.
show ethernet service interface
Use the show ethernet service interface privileged EXEC command to display interface-based information about Ethernet customer-service instances for all interfaces or a specified interface.
show ethernet service interface [interface-id] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of outputs from the show ethernet service interface commands:
Switch# show ethernet service interface gigabitethernet0/1Interface IdentifierGigabitEthernet0/1 PE2-G101Switch# show ethernet service interface detailInterface: FastEthernet0/1ID:CE-VLANS:EVC Map Type: Bundling-MultiplexingInterface: FastEthernet0/2ID:CE-VLANS:EVC Map Type: Bundling-MultiplexingInterface: FastEthernet0/3ID:CE-VLANS:EVC Map Type: Bundling-Multiplexing<output truncated>Interface: GigabitEthernet0/1ID: PE2-G101CE-VLANS: 10,20,30EVC Map Type: Bundling-MultiplexingAssociated EVCs:EVC-ID CE-VLANWHITE 30RED 20BLUE 10Associated Service Instances:Service-Instance-ID CE-VLAN10 1020 2030 30Related Commands
service instance id ethernet
Defines an Ethernet service instance and enters Ethernet service configuration mode from interface configuration mode.
show interfaces
Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.
show interfaces [interface-id [mtu] | vlan vlan-id] [accounting | capabilities [module number] | counters | description | etherchannel | flowcontrol | pruning | rep | stats | status [err-disabled] | switchport [backup | module number] | [module number] | transceivers | trunk] [ | {begin | exclude | include} expression]
Syntax Description
interface-id
(Optional) Valid interfaces include physical ports (including type, module, and port number) and port channels. The port-channel range is 1 to 48.
mtu
(Optional) Display the system maximum transmission unit (MTU) size set on the interface.
vlan vlan-id
(Optional) VLAN identification. The range is 1 to 4094.
accounting
(Optional) Display accounting information on the interface, including active protocols and input and output packets and octets.
Note
capabilities
(Optional) Display the capabilities of all interfaces or the specified interface, including the features and options that you can configure on the interface. Though visible in the command line help, this option is not available for VLAN IDs.
module number
(Optional) Display capabilities or switchport configuration characteristics (depending on preceding keyword) of all interfaces on the switch. The range is 1 to 9. This option is not available if you entered a specific interface ID.
counters
(Optional) See the show interfaces counters command.
description
(Optional) Display the administrative status and description set for an interface.
etherchannel
(Optional) Display interface EtherChannel information.
flowcontrol
(Optional) Display interface flowcontrol information
pruning
(Optional) Display interface trunk VTP pruning information.
rep
(Optional) See the show interfaces rep command.
stats
(Optional) Display the input and output packets by switching path for the interface.
status
(Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot.
err-disabled
(Optional) Display interfaces in error-disabled state.
switchport
(Optional) Display the administrative and operational status of a switching (nonrouting) port, including port blocking and port protection settings.
backup
(Optional) Display Flex Link backup interface configuration and status for the specified interface.
transceivers
(Optional) See the show interfaces transceiver command.
trunk
Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears.
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The show interfaces capabilities command with different keywords has these results:
•
•
•
The vlan mapping option is available only when you have entered any interface-ID or vlan vlan-id; however, the display shows VLAN mapping information only for ES ports.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show interfaces command for an interface:
Switch# show interfaces gigabitethernet0/2GigabitEthernet0/2 is up, line protocol is up (connected) (vlan-err-dis)Hardware is Gigabit Ethernet, address is 0018.1902.cd02 (bia 0018.1902.cd02)MTU 1548 bytes, BW 1000000 Kbit, DLY 10 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive not setFull-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000BaseTXinput flow-control is off, output flow-control is unsupportedARP type: ARPA, ARP Timeout 04:00:00Last input 00:00:00, output 00:00:00, output hang neverLast clearing of "show interface" counters neverInput queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0Queueing strategy: fifoOutput queue: 0/40 (size/max)5 minute input rate 0 bits/sec, 0 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec12112813 packets input, 801716512 bytes, 0 no bufferReceived 2001806 broadcasts (0 multicasts)0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 2001806 multicast, 0 pause input0 input packets with dribble condition detected11935759 packets output, 783067011 bytes, 0 underruns0 output errors, 0 collisions, 2 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped outThis is an example of output from the show interfaces accounting command.
Switch# show interfaces accountingVlan1Protocol Pkts In Chars In Pkts Out Chars OutIP 1094395 131900022 559555 84077157Spanning Tree 283896 17033760 42 2520ARP 63738 3825680 231 13860Interface Vlan2 is disabledVlan7Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.Vlan31Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet1/0/1Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet1/0/2Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.<output truncated>This is an example of output from the show interfaces capabilities command for an interface.
Switch# show interfaces gigabitethernet1/0/2 capabilitiesGigabitEthernet1/0/2Model: WS-C3750G-24TSType: 10/100/1000BaseTXSpeed: 10,100,1000,autoDuplex: full,autoTrunk encap. type: 802.1Q,ISLTrunk mode: on,off,desirable,nonegotiateChannel: yesBroadcast suppression: percentage(0-100)Flowcontrol: rx-(off,on,desired),tx-(none)Fast Start: yesQoS scheduling: rx-(not configurable on per port basis),tx-(4q2t)CoS rewrite: yesToS rewrite: yesUDLD: yesInline power: noSPAN: source/destinationPortSecure: yesDot1x: yesThis is an example of output from the show interfaces interface description command when the interface has been described as Connects to Marketing by using the description interface configuration command.
Switch# show interfaces gigabitethernet1/0/2 descriptionInterface Status Protocol DescriptionGi1/0/2 up down Connects to MarketingThis is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:
Switch# show interfaces etherchannel----Port-channel1:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/1 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel2:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/2 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel3:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/3 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InuseThis is an example of output from the show interfaces interface-id pruning command when pruning is enabled in the VTP domain:
Switch# show interfaces gigibitethernet1/0/2 pruningPort Vlans pruned for lack of request by neighborGi1/0/2 3,4Port Vlans traffic requested of neighborGi1/0/2 1-3This is an example of output from the show interfaces stats command for a specified VLAN interface.
Switch# show interfaces vlan 1 statsSwitching path Pkts In Chars In Pkts Out Chars OutProcessor 1165354 136205310 570800 91731594Route cache 0 0 0 0Total 1165354 136205310 570800 91731594This is an example of partial output from the show interfaces status command. It displays the status of all interfaces.
Switch# show interfaces statusPort Name Status Vlan Duplex Speed TypeFa1/0/1 connected routed a-half a-100 10/100BaseTXFa1/0/2 notconnect 121,40 auto auto 10/100BaseTXFa1/0/3 notconnect 1 auto auto 10/100BaseTXFa1/0/4 notconnect 18 auto auto Not PresentFa1/0/5 connected 121 a-full a-1000 10/100BaseTXFa1/0/6 connected 122,11 a-full a-1000 10/100BaseTX<output truncated>Gi1/0/1 notconnect 1 auto auto 10/100/1000BaseTXGi1/0/2 connected vl-err-dis a-full a-1000 10/100/1000BaseTXThis is an example of output from the show interfaces status err-disabled command for an interface:
Switch# show interfaces gigabitethernet1/0/2 status err-disabledPort Name Status Reason Err-disabled VlansGi1/0/2 connected elmi evc down 1,200This is an example of output from the show interfaces switchport command for a port. Table 2-21 describes the fields in the display.
Note
Switch# show interfaces gigabitethernet1/0/1 switchportName: Gi1/0/1Switchport: EnabledAdministrative Mode: dynamic autoOperational Mode: static accessAdministrative Trunking Encapsulation: negotiateOperational Trunking Encapsulation: nativeNegotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Voice VLAN: noneTrunking VLANs Enabled: ALLPruning VLANs Enabled: 2-1001Capture Mode DisabledCapture VLANs Allowed: ALLProtected: falseUnknown unicast blocked: disabledUnknown multicast blocked: disabledVoice VLAN: none (Inactive)Appliance trust: none
This is an example of output from the show interfaces switchport backup command:
Switch# show interfaces switchport backupSwitch Backup Interface Pairs:Active Interface Backup Interface State--------------------------------------------------------------Fa1/0/1 Fa1/0/2 Active Up/Backup StandbyFa3/0/3 Fa4/0/5 Active Down/Backup UpPo1 Po2 Active Standby/Backup UpThis is an example of output from the show interfaces interface-id pruning command:
Switch# show interfaces gigibitethernet1/0/2 pruningPort Vlans pruned for lack of request by neighborThis is an example of out put from the show interfaces switchport backup command when a Flex Link interface goes down (LINK_DOWN), and VLANs preferred on this interface are moved to the peer interface of the Flex Link pair. In this example, if interface Gi1/0/6 goes down, Gi1/0/8 carries all VLANs of the Flex Link pair.
Switch# show interfaces switchport backupSwitch Backup Interface Pairs:Active Interface Backup Interface State------------------------------------------------------------------------GigabitEthernet1/0/6 GigabitEthernet1/0/8 Active Down/Backup UpVlans Preferred on Active Interface: 1-50Vlans Preferred on Backup Interface: 60, 100-120This is an example of output from the show interfaces switchport backup command. In this example, VLANs 1 to 50, 60, and 100 to 120 are configured on the switch:
Switch(config)# interface gigabitEthernet 1/0/6Switch(config-if)# switchport backup interface gigabitEthernet 1/0/8 prefer vlan 60,100-120When both interfaces are up, Gi1/0/8 forwards traffic for VLANs 60, 100 to 120, and Gi1/0/6 will forward traffic for VLANs 1 to 50.
Switch# show interfaces switchport backupSwitch Backup Interface Pairs:Active Interface Backup Interface State------------------------------------------------------------------------GigabitEthernet1/0/6 GigabitEthernet1/0/8 Active Up/Backup UpVlans on Interface Gi 1/0/6: 1-50Vlans on Interface Gi 1/0/8: 60, 100-120When a Flex Link interface goes down (LINK_DOWN), VLANs preferred on this interface are moved to the peer interface of the Flex Link pair. In this example, if interface Gi1/0/6 goes down, Gi1/0/8 carries all VLANs of the Flex Link pair.
Switch# show interfaces switchport backupSwitch Backup Interface Pairs:Active Interface Backup Interface State------------------------------------------------------------------------GigabitEthernet1/0/6 GigabitEthernet1/0/8 Active Down/Backup UpVlans on Interface Gi 1/0/6:Vlans on Interface Gi 1/0/8: 1-50, 60, 100-120When a Flex Link interface comes up, VLANs preferred on this interface are blocked on the peer interface and moved to the forwarding state on the interface that has just come up. In this example, if interface Gi1/0/6 comes up, then VLANs preferred on this interface are blocked on the peer interface Gi1/0/8 and forwarded on Gi1/0/6.
Switch# show interfaces switchport backupSwitch Backup Interface Pairs:Active Interface Backup Interface State------------------------------------------------------------------------GigabitEthernet1/0/6 GigabitEthernet1/0/8 Active Up/Backup UpVlans on Interface Gi 1/0/6: 1-50Vlans on Interface Gi 1/0/8: 60, 100-120This is an example of output from the show interfaces interface-id trunk command. It displays trunking information for the port.
Switch# show interfaces gigabitethernet1/0/1 trunkPort Mode Encapsulation Status Native vlanGi1/0/1 auto negotiate trunking 1Port Vlans allowed on trunkGi1/0/1 1-4094Port Vlans allowed and active in management domainGi1/0/1 1-4Port Vlans in spanning tree forwarding state and not prunedGi1/0/1 1-4Related Commands
Configures a port as a static-access or a dynamic-access port.
Blocks unknown unicast or multicast traffic on an interface.
Configures Flex Links, a pair of Layer 2 interfaces that provide mutual backup.
Configures the VLAN membership mode of a port.
Isolates unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch.
switchport trunk pruning
Configures the VLAN pruning-eligible list for ports in trunking mode.
show interfaces counters
Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface.
show interfaces [interface-id | vlan vlan-id] counters [errors | etherchannel | module switch- number | protocol status | trunk] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
12.1(14)AX
This command was introduced.
12.2(25)EY
The etherchannel and protocol status keywords were added. The broadcast, multicast, and unicast keywords were removed.
Usage Guidelines
If you do not enter any keywords, all counters for all interfaces are included.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of partial output from the show interfaces counters command. It displays all counters for the switch.
Switch# show interfaces countersPort InOctets InUcastPkts InMcastPkts InBcastPktsGi1/0/1 0 0 0 0Gi1/0/2 0 0 0 0<output truncated>This is an example of partial output from the show interfaces counters module command.
Switch# show interfaces counters module 1Port InOctets InUcastPkts InMcastPkts InBcastPktsFa1/0/1 475256 105 4335 593Fa1/0/2 0 0 0 0Fa1/0/3 0 0 0 0Fa1/0/4 0 0 0 0Fa1/0/5 0 0 0 0Fa1/0/6 0 0 0 0Fa1/0/7 0 0 0 0Fa1/0/8 0 0 0 0Fa1/0/9 0 0 0 0Fa1/0/10 0 0 0 0Fa1/0/11 0 0 0 0Fa1/0/12 0 0 0 0Fa1/0/13 5689160 11548 63746 0Fa1/0/14 1998856 11547 6092 0Fa1/0/15 1999304 11548 6095 0Fa1/0/16 1999752 11547 6099 0Fa1/0/17 1999496 11547 6097 0<output truncated>This is an example of partial output from the show interfaces counters protocol status command for all interfaces.
Switch# show interfaces counters protocol statusProtocols allocated:Vlan1: Other, IPVlan20: Other, IP, ARPVlan30: Other, IP, ARPVlan40: Other, IP, ARPVlan50: Other, IP, ARPVlan60: Other, IP, ARPVlan70: Other, IP, ARPVlan80: Other, IP, ARPVlan90: Other, IP, ARPVlan900: Other, IP, ARPVlan3000: Other, IPVlan3500: Other, IPFastEthernet1/0/1: Other, IP, ARP, CDPFastEthernet1/0/2: Other, IPFastEthernet1/0/3: Other, IPFastEthernet1/0/4: Other, IPFastEthernet1/0/5: Other, IPFastEthernet1/0/6: Other, IPFastEthernet1/0/7: Other, IPFastEthernet1/0/8: Other, IPFastEthernet1/0/9: Other, IPFastEthernet1/0/10: Other, IP, CDP<output truncated>This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces.
Switch# show interfaces counters trunkPort TrunkFramesTx TrunkFramesRx WrongEncapFa1/0/1 0 0 0Fa1/0/2 0 0 0Fa1/0/3 80678 4155 0Fa1/0/4 82320 126 0Fa1/0/5 0 0 0<output truncated>Related Commands
show interfaces rep
Use the show interfaces rep User EXEC command to display Resilient Ethernet Protocol (REP) configuration and status for a specified interface or for all interfaces.
show interfaces [interface-id] rep [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
In the output for the show interface rep [detail] command, in addition to an Open, Fail, or AP (alternate port) state, the Port Role might show as Fail Logical Open (FailLogOpen) or Fail No Ext Neighbor (FailNoNbr). These states indicate that the port is physically up, but REP is not configured on the neighboring port. In this case, one port goes into a forwarding state for the data path to help maintain connectivity during configuration. The Port Role for this port shows as Fail Logical Open; the port forwards all data traffic on all VLANs. The other failed Port Role shows as Fail No Ext Neighbor; this port blocks traffic for all VLANs.
When the external neighbors for the failed ports are configured, the failed ports go through the alternate port state transitions and eventually go to an Open state or remain as the alternate port, based on the alternate port election mechanism.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is sample output from the show interface rep command:
Switch # show interface repInterface Seg-id Type LinkOp Role---------------------- ------ ------------ ----------- ----GigabitEthernet1/0/1 1 Primary Edge TWO_WAY OpenGigabitEthernet1/0/2 1 Edge TWO_WAY OpenFastEthernet1/0/4 2 INIT_DOWN FailThis is sample output from the show interface rep command when external neighbors are not configured:
Switch # show interface repInterface Seg-id Type LinkOp Role---------------------- ------ ------------ ----------- ----GigabitEthernet1/0/1 1 NO_NEIGHBOR FailNoNbrGigabitEthernet1/0/2 2 NO_NEIGHBOR FailLogOpenThis is sample output from the show interface rep detail command for a specified interface:
Switch # show interface gigabitethernet1/0/2 rep detailGigabitEthernet1/0/2 REP enabledSegment-id: 1 (Segment)PortID: 00030019E85BDD00Preferred flag: NoOperational Link Status: INIT_DOWNCurrent Key: 00000000000000000000Port Role: FailBlocked VLAN: 1-4094Admin-vlan: 1Preempt Delay Timer: disabledLSL Ageout Timer: 5000 msConfigured Load-balancing Block Port: 1234567890123456Configured Load-balancing Block VLAN: 1-4094STCN Propagate to: noneLSL PDU rx: 0, tx: 0HFL PDU rx: 0, tx: 0BPA TLV rx: 0, tx: 0BPA (STCN, LSL) TLV rx: 0, tx: 0BPA (STCN, HFL) TLV rx: 0, tx: 0EPA-ELECTION TLV rx: 0, tx: 0EPA-COMMAND TLV rx: 0, tx: 0EPA-INFO TLV rx: 0, tx: 0Related Commands
Enables REP on an interface and assigns a segment ID. This command is also used to configure a port as an edge port, a primary edge port, or a preferred port.
show rep topology [detail]
Displays information about all ports in the segment, including which one was configured and selected as the primary edge port.
show interfaces transceiver
Use the show interfaces transceiver privileged EXEC command to display the physical properties of a small form-factor pluggable (SFP) module interface.
show interfaces [interface-id] transceiver [detail | module number | properties | supported-list | threshold-table] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.2(25)EY
This command was introduced.
12.2(44)SE
The supported-list and threshold-table keywords were added.
Usage Guidelines
The threshold values shown in the outputs from the show interfaces transceiver threshold-table and the show interfaces transceiver detail are not the same. The thresholds shown in the output from the show interfaces transceiver threshold-table command are hard coded in Cisco IOS, but are not supported. The thresholds shown in the output from the show interfaces transceiver detail command are read from the SFP EEPROM and are supported. You should always use the show interfaces transceiver detail command to view transceiver thresholds.
The DOM threshold provides a mechanism to send traps when parameters from the EEPROM exceed the thresholds. The firmware reads real-time values, including temperature, voltage, transmitted power and received power, from the SFP EEPROM and compares them against product alarm and warning thresholds. When transceiver traps are enabled, a trap is sent every 10 minutes when thresholds are exceeded.
The reading of entSensorThresholdTable and SNMP notification upon threshold violations in CISCO-ENTITY-SENSOR-MIB is supported only in Cisco IOS Release 12.2(52)SE and later.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show interfaces interface-id transceiver properties command:
Switch# show interfaces gigabitethernet1/0/1 transceiver propertiesName : Gi1/0/1Administrative Speed: autoOperational Speed: autoAdministrative Duplex: autoAdministrative Power Inline: enableOperational Duplex: autoAdministrative Auto-MDIX: offOperational Auto-MDIX: offThis is an example of output from the show interfaces interface-id transceiver detail command:
Switch# show interfaces gigabitethernet1/0/3 transceiver detailITU Channel not available (Wavelength not available),Transceiver is externally calibrated.mA:milliamperes, dBm:decibels (milliwatts), N/A:not applicable.++:high alarm, +:high warning, -:low warning, -- :low alarm.A2D readouts (if they differ), are reported in parentheses.The threshold values are uncalibrated.High Alarm High Warn Low Warn Low AlarmTemperature Threshold Threshold Threshold ThresholdPort (Celsius) (Celsius) (Celsius) (Celsius) (Celsius)------- ------------------ ---------- --------- --------- ---------Gi1/0/3 41.5 110.0 103.0 -8.0 -12.0High Alarm High Warn Low Warn Low AlarmVoltage Threshold Threshold Threshold ThresholdPort (Volts) (Volts) (Volts) (Volts) (Volts)------- --------------- ---------- --------- --------- ---------Gi1/0/3 3.20 4.00 3.70 3.00 2.95High Alarm High Warn Low Warn Low AlarmCurrent Threshold Threshold Threshold ThresholdPort (milliamperes) (mA) (mA) (mA) (mA)------- ----------------- ---------- --------- --------- ---------Gi1/0/3 31.0 84.0 70.0 4.0 2.0<output truncated>This is an example of output from the show interfaces transceiver supported-list command:
Switch# show interfaces transceiver supported-listTransceiver Type Cisco p/n min versionsupporting DOM------------------ -------------------------DWDM GBIC ALLDWDM SFP ALLRX only WDM GBIC ALLDWDM XENPAK ALLDWDM X2 ALLDWDM XFP ALLCWDM GBIC NONECWDM X2 ALLCWDM XFP ALLXENPAK ZR ALLX2 ZR ALLXFP ZR ALLRx_only_WDM_XENPAK ALLXENPAK_ER 10-1888-03X2_ER ALLXFP_ER ALLXENPAK_LR 10-1838-04X2_LR ALL<output truncated>This is an example of output from the show interfaces transceiver threshold-table command. Note that these are thresholds programmed into IOS software, and are NOT used to determine alarms.
Optical Tx Optical Rx Temp Laser Bias Voltagecurrent------------- ------------- ------ ------------ ---------DWDM GBICMin1 -0.50 -28.50 0 N/A 4.50Min2 -0.30 -28.29 5 N/A 4.75Max2 3.29 -6.69 60 N/A 5.25Max1 3.50 6.00 70 N/A 5.50DWDM SFPMin1 -0.50 -28.50 0 N/A 3.00Min2 -0.30 -28.29 5 N/A 3.09Max2 4.30 -9.50 60 N/A 3.59Max1 4.50 9.30 70 N/A 3.70RX only WDM GBICMin1 N/A -28.50 0 N/A 4.50Min2 N/A -28.29 5 N/A 4.75Max2 N/A -6.69 60 N/A 5.25Max1 N/A 6.00 70 N/A 5.50DWDM XENPAKMin1 -1.50 -24.50 0 N/A N/AMin2 -1.29 -24.29 5 N/A N/AMax2 3.29 -6.69 60 N/A N/AMax1 3.50 4.00 70 N/A N/ADWDM X2Min1 -1.50 -24.50 0 N/A N/AMin2 -1.29 -24.29 5 N/A N/AMax2 3.29 -6.69 60 N/A N/AMax1 3.50 4.00 70 N/A N/ADWDM XFPMin1 -1.50 -24.50 0 N/A N/AMin2 -1.29 -24.29 5 N/A N/AMax2 3.29 -6.69 60 N/A N/AMax1 3.50 4.00 70 N/A N/ACWDM X2Min1 N/A N/A 0 N/A N/AMin2 N/A N/A 0 N/A N/AMax2 N/A N/A 0 N/A N/AMax1 N/A N/A 0 N/A N/ARelated Commands
show inventory
Use the show inventory user EXEC command to display product identification (PID) information for the hardware.
show inventory [entity-name | raw] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The command is case sensitive. With no arguments, the show inventory command produces a compact display of all identifiable entities that have a product identifier. The compact display shows the entity location (slot identity), entity description, and the unique device identifier (UDI), including PID, Version Identifier (VID), and Serial Number (SN) of that entity.
If there is no PID, no output appears when you enter the show inventory command.
For the product identifier (PID) and version identifier (VID) of SFP modules, the output of the show inventory user EXEC command displays either the correct information or displays Unspecified for the PID and nothing for the VID if the SFP module does not have PID and VID information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is example output from the show inventory command:
Switch> show inventoryNAME: "1", DESCR: "ME-C3750-24TE"PID: , VID: , SN:NAME: "GigabitEthernet1/1/2", DESCR: "1000BaseSX SFP"PID: , VID: , SN: A50015093show ip arp inspection
Use the show ip arp inspection privileged EXEC command to display the configuration and the operating state of dynamic Address Resolution Protocol (ARP) inspection or the status of this feature for all VLANs or for the specified interface or VLAN.
show ip arp inspection [interfaces [interface-id] | log | statistics [vlan vlan-range] | vlan vlan-range] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(25)EY
This command was introduced.
12.2(37)SE
The output changed to include Probe Logging information.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ip arp inspection command
Switch# show ip arp inspectionSource Mac Validation : DisabledDestination Mac Validation : DisabledIP Address Validation : EnabledVlan Configuration Operation ACL Match Static ACL---- ------------- --------- --------- ----------1 Enabled Active deny-all NoVlan ACL Logging DHCP Logging Probe Logging---- ----------- ------------ -------------1 Acl-Match All PermitVlan Forwarded Dropped DHCP Drops ACL Drops---- --------- ------- ---------- ---------1 0 0 0 0Vlan DHCP Permits ACL Permits Probe Permits Source MAC Failures---- ------------ ----------- ------------- -------------------1 0 0 0 0Vlan Dest MAC Failures IP Validation Failures Invalid Protocol Data---- ----------------- ---------------------- ---------------------1 0 0 0This is an example of output from the show ip arp inspection interfaces command:
Switch# show ip arp inspection interfacesInterface Trust State Rate (pps) Burst Interval--------------- ----------- ---------- --------------Gi1/0/1 Untrusted 15 1Gi1/0/2 Untrusted 15 1Gi1/0/3 Untrusted 15 1This is an example of output from the show ip arp inspection interfaces interface-id command:
Switch# show ip arp inspection interfaces gigabitethernet1/0/1Interface Trust State Rate (pps) Burst Interval--------------- ----------- ---------- --------------Gi1/0/1 Untrusted 15 1This is an example of output from the show ip arp inspection log command. It shows the contents of the log buffer before the buffers are cleared:
Switch# show ip arp inspection logTotal Log Buffer Size : 32Syslog rate : 10 entries per 300 seconds.Interface Vlan Sender MAC Sender IP Num Pkts Reason Time---------- ---- -------------- --------------- --------- ----------- ----Gi1/0/1 5 0003.0000.d673 192.2.10.4 5 DHCP Deny 19:39:01 UTC Mon Mar 1 1993Gi1/0/1 5 0001.0000.d774 128.1.9.25 6 DHCP Deny 19:39:02 UTC Mon Mar 1 1993Gi1/0/1 5 0001.c940.1111 10.10.10.1 7 DHCP Deny 19:39:03 UTC Mon Mar 1 1993Gi1/0/1 5 0001.c940.1112 10.10.10.2 8 DHCP Deny 19:39:04 UTC Mon Mar 1 1993Gi1/0/1 5 0001.c940.1114 173.1.1.1 10 DHCP Deny 19:39:06 UTC Mon Mar 1 1993Gi1/0/1 5 0001.c940.1115 173.1.1.2 11 DHCP Deny 19:39:07 UTC Mon Mar 1 1993Gi1/0/1 5 0001.c940.1116 173.1.1.3 12 DHCP Deny 19:39:08 UTC Mon Mar 1 1993If the log buffer overflows, it means that a log event does not fit into the log buffer, and the display for the show ip arp inspection log privileged EXEC command is affected. A -- in the display appears in place of all data except the packet count and the time. No other statistics are provided for the entry. If you see this entry in the display, increase the number of entries in the log buffer, or increase the logging rate in the ip arp inspection log-buffer global configuration command.
This is an example of output from the show ip arp inspection statistics command. It shows the statistics for packets that have been processed by dynamic ARP inspection for all active VLANs.
Switch# show ip arp inspection statisticsVlan Forwarded Dropped DHCP Drops ACL Drops---- --------- ------- ---------- ---------5 3 4618 4605 42000 0 0 0 0Vlan DHCP Permits ACL Permits Source MAC Failures---- ------------ ----------- -------------------5 0 12 02000 0 0 0Vlan Dest MAC Failures IP Validation Failures---- ----------------- ----------------------5 0 92000 0 0For the show ip arp inspection statistics command, the switch increments the number of forwarded packets for each ARP request and response packet on a trusted dynamic ARP inspection port. The switch increments the number of ACL- or DHCP-permitted packets for each packet that is denied by source MAC, destination MAC, or IP validation checks, and the switch increments the appropriate failure count.
This is an example of output from the show ip arp inspection statistics vlan 5 command. It shows statistics for packets that have been processed by dynamic ARP for VLAN 5.
Switch# show ip arp inspection statistics vlan 5Vlan Forwarded Dropped DHCP Drops ACL Drops---- --------- ------- ---------- ---------5 3 4618 4605 4Vlan DHCP Permits ACL Permits Source MAC Failures---- ------------ ----------- -------------------5 0 12 0Vlan Dest MAC Failures IP Validation Failures Invalid Protocol Data---- ----------------- ---------------------- ---------------------5 0 9 3This is an example of output from the show ip arp inspection vlan 5 command. It shows the configuration and the operating state of dynamic ARP inspection for VLAN 5.
Switch# show ip arp inspection vlan 5Source Mac Validation :EnabledDestination Mac Validation :EnabledIP Address Validation :EnabledVlan Configuration Operation ACL Match Static ACL---- ------------- --------- --------- ----------5 Enabled Active second NoVlan ACL Logging DHCP Logging---- ----------- ------------5 Acl-Match AllRelated Commands
show ip dhcp snooping
Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration.
show ip dhcp snooping
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Command History
12.2(25)EY
This command was introduced.
12.2(25)SEE
The command output was updated to show the global suboption configuration.
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
This command displays only the results of global configuration. Therefore, in this example, the circuit ID suboption appears in its default format of vlan-mod-port, even if a string is configured for the circuit ID.
Examples
This is an example of output from the show ip dhcp snooping command.
Switch> show ip dhcp snoopingSwitch DHCP snooping is enabledDHCP snooping is configured on following VLANs:40-42Insertion of option 82 is enabledcircuit-id format: vlan-mod-portremote-id format: stringVerification of hwaddr field is enabledInterface Trusted Rate limit (pps)------------------------ ------- ----------------FastEthernet1/0/1 yes unlimitedFastEthernet1/0/2 yes unlimitedFastEthernet1/0/3 no 2000FastEthernet1/0/4 yes unlimitedRelated Commands
show ip dhcp snooping binding
Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch.
show ip dhcp snooping binding [ip-address] [mac-address] [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The show ip dhcp snooping binding command output shows only the dynamically configured bindings. Use the show ip source binding privileged EXEC command to display the dynamically and statically configured bindings in the DHCP snooping binding database.
If DHCP snooping is enabled and an interface changes to the down state, the switch does not delete the statically configured bindings.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This example shows how to display the DHCP snooping binding entries for a switch:
Switch> show ip dhcp snooping bindingMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9837 dhcp-snooping 20 GigabitEthernet1/0/100:D0:B7:1B:35:DE 10.1.2.151 237 dhcp-snooping 20 GigabitEthernet1/0/2Total number of bindings: 2This example shows how to display the DHCP snooping binding entries for a specific IP address:
Switch> show ip dhcp snooping binding 10.1.2.150MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9810 dhcp-snooping 20 GigabitEthernet1/0/1Total number of bindings: 1This example shows how to display the DHCP snooping binding entries for a specific MAC address:
Switch> show ip dhcp snooping binding 0102.0304.0506MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9788 dhcp-snooping 20 GigabitEthernet1/0/2Total number of bindings: 1This example shows how to display the DHCP snooping binding entries on a port:
Switch> show ip dhcp snooping binding interface gigabitethernet1/0/2MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------00:30:94:C2:EF:35 10.1.2.151 290 dhcp-snooping 20 GigabitEthernet1/0/2Total number of bindings: 1This example shows how to display the DHCP snooping binding entries on VLAN 20:
Switch> show ip dhcp snooping binding vlan 20MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9747 dhcp-snooping 20 GigabitEthernet1/0/100:00:00:00:00:02 10.1.2.151 65 dhcp-snooping 20 GigabitEthernet1/0/2Total number of bindings: 2Table 2-22 describes the fields in the show ip dhcp snooping binding command output:
Related Commands
Configures the DHCP snooping binding database
Displays the DHCP snooping configuration.
show ip dhcp snooping database
Use the show ip dhcp snooping database user EXEC command to display the status of the DHCP snooping binding database agent.
show ip dhcp snooping database [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Examples
This is an example of output from the show ip dhcp snooping database command:
Switch> show ip dhcp snooping databaseAgent URL :Write delay Timer : 300 secondsAbort Timer : 300 secondsAgent Running : NoDelay Timer Expiry : Not RunningAbort Timer Expiry : Not RunningLast Succeed Time : NoneLast Failed Time : NoneLast Failed Reason : No failure recorded.Total Attempts : 0 Startup Failures : 0Successful Transfers : 0 Failed Transfers : 0Successful Reads : 0 Failed Reads : 0Successful Writes : 0 Failed Writes : 0Media Failures : 0This is an example of output from the show ip dhcp snooping database detail command:
Switch# show ip dhcp snooping database detailAgent URL : tftp://10.1.1.1/directory/fileWrite delay Timer : 300 secondsAbort Timer : 300 secondsAgent Running : NoDelay Timer Expiry : 7 (00:00:07)Abort Timer Expiry : Not RunningLast Succeed Time : NoneLast Failed Time : 17:14:25 UTC Sat Jul 7 2001Last Failed Reason : Unable to access URL.Total Attempts : 21 Startup Failures : 0Successful Transfers : 0 Failed Transfers : 21Successful Reads : 0 Failed Reads : 0Successful Writes : 0 Failed Writes : 21Media Failures : 0First successful access: ReadLast ignored bindings counters :Binding Collisions : 0 Expired leases : 0Invalid interfaces : 0 Unsupported vlans : 0Parse failures : 0Last Ignored Time : NoneTotal ignored bindings counters:Binding Collisions : 0 Expired leases : 0Invalid interfaces : 0 Unsupported vlans : 0Parse failures : 0Related Commands
Enables DHCP snooping on a VLAN.
Configures the DHCP snooping binding database agent or the binding file.
Displays DHCP snooping information.
show ip dhcp snooping statistics
Use the show ip dhcp snooping statistics user EXEC command to display DHCP snooping statistics in summary or detail form.
show ip dhcp snooping statistics [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
In a switch stack, all statistics are generated on the stack master. If a new stack master is elected, the statistics counters reset.
Examples
This is an example of output from the show ip dhcp snooping statistics command:
Switch> show ip dhcp snooping statisticsPackets Forwarded = 0Packets Dropped = 0Packets Dropped From untrusted ports = 0This is an example of output from the show ip dhcp snooping statistics detail command:
Switch> show ip dhcp snooping statistics detailPackets Processed by DHCP Snooping = 0Packets Dropped BecauseIDB not known = 0Queue full = 0Interface is in errdisabled = 0Rate limit exceeded = 0Received on untrusted ports = 0Nonzero giaddr = 0Source mac not equal to chaddr = 0Binding mismatch = 0Insertion of opt82 fail = 0Interface Down = 0Unknown output interface = 0Reply output port equal to input port = 0Packet denied by platform = 0
Table 2-23 shows the DHCP snooping statistics and their descriptions:
Related Commands
Clears the DHCP snooping binding database, the DHCP snooping binding database agent statistics, or the DHCP snooping statistics counters.
show ip igmp profile
Use the show ip igmp profile privileged EXEC command to view all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
show ip igmp profile [profile number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of output from the show ip igmp profile command, with and without specifying a profile number. If no profile number is entered, the display includes all profiles configured on the switch.
Switch# show ip igmp profile 40IGMP Profile 40permitrange 233.1.1.1 233.255.255.255Switch# show ip igmp profileIGMP Profile 3range 230.9.9.0 230.9.9.0IGMP Profile 4permitrange 229.9.9.0 229.255.255.255Related Commands
show ip igmp snooping
Use the show ip igmp snooping privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
show ip igmp snooping [groups | mrouter | querier] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
groups
(Optional) See the show ip igmp snooping groups command.
mrouter
(Optional) See the show ip igmp snooping mrouter command.
querier
(Optional) See the show ip igmp snooping querier command.
vlan vlan-id
(Optional) Specify a VLAN; the range is 1 to 1001 and 1006 to 4094.
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Command Modes
Privileged EXEC
Command History
12.1(14)AX
This command was introduced.
12.2(25)EY
The groups keyword was added. The show ip igmp snooping groups command replaced the show ip igmp snooping multicast command.
Usage Guidelines
Use this command to display snooping configuration for the switch or for a specific VLAN.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used for IGMP snooping.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ip igmp snooping command. It shows how to display snooping characteristics for all VLANs on the switch.
Switch# show ip igmp snoopingvlan 1----------IGMP snooping is globally enabledIGMP snooping TCN solicit query is globally disabledIGMP snooping global TCN flood query count is 2IGMP snooping is enabled on this VlanIGMP snooping immediate-leave is disabled on this VlanIGMP snooping mrouter learn mode is pim-dvmrp on this VlanIGMP snooping source only learning age timer is 10IGMP snooping is running in IGMP_ONLY mode on this VlanIGMP snooping report suppression is enabled on this Vlanvlan 2----------IGMP snooping is globally enabledIGMP snooping TCN solicit query is globally disabledIGMP snooping global TCN flood query count is 2<output truncated>This is an example of output from the show ip igmp snooping vlan 1 command. It shows how to display snooping characteristics for a specific VLAN.
Switch# show ip igmp snooping vlan 1vlan 1----------IGMP snooping is globally enabledIGMP snooping TCN solicit query is globally disabledIGMP snooping global TCN flood query count is 2IGMP snooping is enabled on this VlanIGMP snooping immediate-leave is disabled on this VlanIGMP snooping mrouter learn mode is pim-dvmrp on this VlanIGMP snooping source only learning age timer is 10IGMP snooping is running in IGMP_ONLY mode on this VlanIGMP snooping report suppression is enabled on this VlanRelated Commands
show ip igmp snooping groups
Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.
show ip igmp snooping groups [count | dynamic [count] | user [count]] [ | {begin | exclude | include} expression]
show ip igmp snooping groups vlan vlan-id [ip_address | count | dynamic [count] | user [count]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(25)EY
This command was introduced. It replaced the show ip igmp snooping multicast command.
Usage Guidelines
Use this command to display multicast information or the multicast table.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch.
Switch# show ip igmp snooping groupsVlan Group Type Version Port List-------------------------------------------------------------1 224.1.4.4 igmp Fa1/0/111 224.1.4.5 igmp Fa1/0/112 224.0.1.40 igmp v2 Fa1/0/15This is an example of output from the show ip igmp snooping groups count command. It displays the total number of multicast groups on the switch.
Switch# show ip igmp snooping groups countTotal number of multicast groups: 2This is an example of output from the show ip igmp snooping groups dynamic command. It shows only the entries learned by IGMP snooping.
Switch# show ip igmp snooping groups vlan 1 dynamicVlan Group Type Version Port List-------------------------------------------------------------104 224.1.4.2 igmp v2 Gi2/0/1, Fa1/0/15104 224.1.4.3 igmp v2 Gi2/0/1, Fa1/0/15This is an example of output from the show ip igmp snooping groups vlan vlan-id ip-address command. It shows the entries for the group with the specified IP address.
Switch# show ip igmp snooping groups vlan 104 224.1.4.2Vlan Group Type Version Port List-------------------------------------------------------------104 224.1.4.2 igmp v2 Gi2/0/1, Fa1/0/15Related Commands
show ip igmp snooping mrouter
Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
show ip igmp snooping mrouter [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use this command to display multicast router ports on the switch or for a specific VLAN.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping.
When multicast VLAN registration (MVR) is enabled, the show ip igmp snooping mrouter command displays MVR multicast router information and IGMP snooping information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show ip igmp snooping mrouter command. It shows how to display multicast router ports on the switch.
Switch# show ip igmp snooping mrouterVlan ports---- -----200 Fa1/0/13(static), Fa1/0/14(static)Related Commands
show ip igmp snooping querier
Use the show ip igmp snooping querier detail user EXEC command to display the configuration and operation information for the IGMP querier configured on a switch.
show ip igmp snooping querier [detail | vlan vlan-id [detail]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show ip igmp snooping querier command to display the IGMP version and the IP address of a detected device, also called a querier, that sends IGMP query messages. A subnet can have multiple multicast routers but has only one IGMP querier. In a subnet running IGMPv2, one of the multicast routers is elected as the querier. The querier can be a Layer 3 switch.
The show ip igmp snooping querier command output also shows the VLAN and the interface on which the querier was detected. If the querier is the switch, the output shows the Port field as Router. If the querier is a router, the output shows the port number on which the querier is learned in the Port field.
The show ip igmp snooping querier detail user EXEC command is similar to the show ip igmp snooping querier command. However, the show ip igmp snooping querier command displays only the device IP address most recently detected by the switch querier.
The show ip igmp snooping querier detail command displays the device IP address most recently detected by the switch querier with this additional information:
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping querier command:
Switch> show ip igmp snooping querierVlan IP Address IGMP Version Port---------------------------------------------------1 172.20.50.11 v3 Gi1/0/12 172.20.40.20 v2 RouterThis is an example of output from the show ip igmp snooping querier detail command:
Switch> show ip igmp snooping querier detailVlan IP Address IGMP Version Port-------------------------------------------------------------1 1.1.1.1 v2 Fa1/0/1Global IGMP switch querier status--------------------------------------------------------admin state : Enabledadmin version : 2source IP address : 0.0.0.0query-interval (sec) : 60max-response-time (sec) : 10querier-timeout (sec) : 120tcn query count : 2tcn query interval (sec) : 10Vlan 1: IGMP switch querier status--------------------------------------------------------elected querier is 1.1.1.1 on port Fa1/0/1--------------------------------------------------------admin state : Enabledadmin version : 2source IP address : 10.1.1.65query-interval (sec) : 60max-response-time (sec) : 10querier-timeout (sec) : 120tcn query count : 2tcn query interval (sec) : 10operational state : Non-Querieroperational version : 2tcn query pending count : 0Related Commands
show ip sla standards
Use the show ip sla standards command in user EXEC or privileged EXEC mode to display the Cisco IOS IP Service Level Agreements (SLAs) and Two-Way Active Measurement Protocol (TWAMP) standards implemented on the switch.
show ip sla standards
Syntax Description
This command has no arguments or keywords.
Defaults
Displays the IP SLAs and TWAMP standards implemented on the switch.
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show ip sla standards command to display the IP SLAs TWAMP standards implemented on the switch.
Examples
The following is sample output from the show ip sla standards command:
Switch> show ip sla standardsFeature Organization StandardTWAMP Server IETF draft-ietf-ippm-twamp-06TWAMP Reflector IETF draft-ietf-ippm-twamp-06Related Commands
show ip sla twamp connection {detail | requests}
Displays IP SLAs TWAMP connections.
Displays IP SLAs TWAMP sessions.
show ip sla twamp connection
Use the show ip sla twamp connection command in user EXEC mode to display the current Cisco IOS IP Service Level Agreements (SLAs) Two-Way Active Measurement Protocol (TWAMP) connections.
show ip sla twamp connection {detail [source-ip ip-address] | requests} [ | {begin | exclude | include} expression]
Syntax Description
Defaults
Displays output for all running IP SLAs TWAMP sessions.
Command Modes
User EXEC
Command History
Usage Guidelines
Use the detail keyword to display detailed information for a single IP SLAs TWAMP connection.
Use the requests keyword to display the current IP SLAs TWAMP connection requests.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
The following is sample output from the show ip sla twamp connection detail command:
Switch> show ip sla twamp connection detailConnection Id: 91Client IP Address: 172.27.111.225Client Port: 43026Mode: UnauthenticatedConnection State: ConnectedControl State: NoneNumber of Test Requests - 0:1The following is sample output from the show ip sla twamp connection requests command:
Switch> show ip sla twamp connection requestsConnection-Id Client Address Client Port91 172.27.111.225 43026Total number of current connections: 1Related Commands
Displays the TWAMP server and reflector standards implemented on the switch.
Displays IP SLAs TWAMP sessions.
show ip sla twamp session
Use the show ip sla twamp session command in user EXEC mode to display Cisco IOS IP Service Level Agreements (SLAs) Two-Way Active Measurement Protocol (TWAMP) test sessions.
show ip sla twamp session [source-ip ip address | source-port port-number] [ | {begin | exclude | include} expression]
Syntax Description
Defaults
Displays the IP SLAs TWAMP test sessions and results.
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show ip sla twamp session command to display information about IP SLAs TWAMP test sessions.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
The following is sample output from the show ip sla twamp session command:
Switch> show ip sla twamp sessionIP SLAs Responder TWAMP is: EnabledRecvr Addr: 172.27.117.116Recvr Port: 3619Sender Addr: 172.27.111.225Sender Port: 32910Session Id: 172.27.117.116:533112:9C41EC42Connection Id: 95Related Commands
Displays the TWAMP server and reflector standards implemented on the switch.
show ip sla twamp connection {detail | requests}
Displays IP SLAs TWAMP connections.
show ip source binding
Use the show ip source binding user EXEC command to display the IP source bindings on the switch.
show ip source binding [ip-address] [mac-address] [dhcp-snooping | static] [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The show ip source binding command output shows the dynamically and statically configured bindings in the DHCP snooping binding database. Use the show ip dhcp snooping binding privileged EXEC command to display only the dynamically configured bindings.
Examples
This is an example of output from the show ip source binding command:
Switch> show ip source bindingMacAddress IpAddress Lease(sec) Type VLAN Interface-------------- --------------- ---------- ------------- ---- --------------------00:00:00:0A:00:0B 11.0.0.1 infinite static 10 GigabitEthernet1/0/100:00:00:0A:00:0A 11.0.0.2 10000 dhcp-snooping 10 GigabitEthernet1/0/1Related Commands
Configures the DHCP snooping binding database.
Configures static IP source bindings on the switch.
show ip verify source
Use the show ip verify source user EXEC command to display the IP source guard configuration on the switch or on a specific interface.
show ip verify source [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Examples
This is an example of output from the show ip verify source command:
Switch> show ip verify sourceInterface Filter-type Filter-mode IP-address Mac-address Vlan--------- ----------- ----------- --------------- -------------- ---------Fa1/0/1 ip active 10.0.0.1 10Fa1/0/1 ip active deny-all 11-20Fa1/0/2 ip inactive-trust-portFa1/0/3 ip inactive-no-snooping-vlanFa1/0/4 ip-mac active 10.0.0.2 aaaa.bbbb.cccc 10Fa1/0/4 ip-mac active 11.0.0.1 aaaa.bbbb.cccd 11Fa1/0/4 ip-mac active deny-all deny-all 12-20Fa1/0/5 ip-mac active 10.0.0.3 permit-all 10Fa1/0/5 ip-mac active deny-all permit-all 11-20In the previous example, this is the IP source guard configuration:
•
•
•
•
•
This is an example of output on an interface on which IP source guard is disabled:
Switch> show ip verify source fastethernet1/0/6IP source guard is not configured on the interface fa1/0/6.Related Commands
show ipv6 dhcp conflict
Use the show ipv6 dhcp conflict privileged EXEC commandto display address conflicts found by a Dynamic Host Configuration Protocol for IPv6 (DHCPv6) server when addresses are offered to the client.
show ipv6 dhcp conflict
Note
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 global configuration command, and reload the switch.
When you configure the DHCPv6 server to detect conflicts, it uses ping. The client uses neighbor discovery to detect clients and reports to the server through a DECLINE message. If an address conflict is detected, the address is removed from the pool, and the address is not assigned until the administrator removes the address from the conflict list.
Examples
This is an example of the output from the show ipv6 dhcp conflict command:
Switch# show ipv6 dhcp conflictPool 350, prefix 2001:1005::/482001:1005::10Related Commands
Configures a DHCPv6 pool and enters DHCPv6 pool configuration mode.
Clears an address conflict from the DHCPv6 server database.
show ipv6 mld snooping
Use the show ipv6 mld snooping user EXEC command to display IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping configuration of the switch or the VLAN.
show ipv6 mld snooping [vlan vlan-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use this command to display MLD snooping configuration for the switch or for a specific VLAN.
VLAN numbers 1002 through 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in MLD snooping.
To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 global configuration command and reload the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ipv6 mld snooping vlan command. It shows snooping characteristics for a specific VLAN.
Switch> show ipv6 mld snooping vlan 100Global MLD Snooping configuration:-------------------------------------------MLD snooping : EnabledMLDv2 snooping (minimal) : EnabledListener message suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Robustness variable : 3Last listener query count : 2Last listener query interval : 1000Vlan 100:--------MLD snooping : DisabledMLDv1 immediate leave : DisabledExplicit host tracking : EnabledMulticast router learning mode : pim-dvmrpRobustness variable : 3Last listener query count : 2Last listener query interval : 1000This is an example of output from the show ipv6 mld snooping command. It displays snooping characteristics for all VLANs on the switch.
Switch> show ipv6 mld snoopingGlobal MLD Snooping configuration:-------------------------------------------MLD snooping : EnabledMLDv2 snooping (minimal) : EnabledListener message suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Robustness variable : 3Last listener query count : 2Last listener query interval : 1000Vlan 1:--------MLD snooping : DisabledMLDv1 immediate leave : DisabledExplicit host tracking : EnabledMulticast router learning mode : pim-dvmrpRobustness variable : 1Last listener query count : 2Last listener query interval : 1000<output truncated>Vlan 951:--------MLD snooping : DisabledMLDv1 immediate leave : DisabledExplicit host tracking : EnabledMulticast router learning mode : pim-dvmrpRobustness variable : 3Last listener query count : 2Last listener query interval : 1000Related Commands
Enables and configures MLD snooping on the switch or on a VLAN.
Configures an SDM template to optimize system resources based on how the switch is being used.
show ipv6 mld snooping address
Use the show ipv6 mld snooping address user EXEC command to display all or specified IP version 6 (IPv6) multicast address information maintained by Multicast Listener Discovery (MLD) snooping.
show ipv6 mld snooping address [[vlan vlan-id] [ipv6 address]] [vlan vlan-id] [count | dynamic | user] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use this command to display IPv6 multicast address information.
You can enter an IPv6 multicast address only after you enter a VLAN ID.
VLAN numbers 1002 through 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in MLD snooping.
Use the dynamic keyword to display information only about groups that are learned. Use the user keyword to display information only about groups that have been configured.
To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 global configuration command and reload the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show snooping address user EXEC command:
Switch> show ipv6 mld snooping address
Vlan Group Type Version Port List-------------------------------------------------------------2 FF12::3 user Gi1/0/2, Gi1/0/, Gi1/1/1This is an example of output from the show snooping address count user EXEC command:
Switch> show ipv6 mld snooping address countTotal number of multicast groups: 2This is an example of output from the show snooping address user user EXEC command:
Switch> show ipv6 mld snooping address userVlan Group Type Version Port List-------------------------------------------------------------2 FF12::3 user v2 Gi1/0/2, Gi1/0/, Gi1/1/1Related Commands
Configures IPv6 MLD snooping on a VLAN.
Configures an SDM template to optimize system resources based on how the switch is being used.
show ipv6 mld snooping mrouter
Use the show ipv6 mld snooping mrouter user EXEC command to display dynamically learned and manually configured IP version 6 (IPv6) Multicast Listener Discovery (MLD) router ports for the switch or a VLAN.
show ipv6 mld snooping mrouter [vlan vlan-id] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use this command to display MLD snooping router ports for the switch or for a specific VLAN.
VLAN numbers 1002 through 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in MLD snooping.
To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 global configuration command and reload the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ipv6 mld snooping mrouter command. It displays snooping characteristics for all VLANs on the switch that are participating in MLD snooping.
Switch> show ipv6 mld snooping mrouterVlan ports---- -----2 Gi1/0/11(dynamic)72 Gi1/0/11(dynamic)200 Gi1/0/11(dynamic)This is an example of output from the show ipv6 mld snooping mrouter vlan command. It shows multicast router ports for a specific VLAN.
Switch> show ipv6 mld snooping mrouter vlan 100Vlan ports---- -----2 Gi1/0/11(dynamic)Related Commands
Enables and configures MLD snooping on the switch or on a VLAN.
ipv6 mld snooping vlan mrouter interface interface-id | static ipv6-multicast-address interface interface-id]
Configures multicast router ports for a VLAN.
Configures an SDM template to optimize system resources based on how the switch is being used.
show ipv6 mld snooping querier
Use the show ipv6 mld snooping querier user EXEC command to display IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping querier-related information most recently received by the switch or the VLAN.
show ipv6 mld snooping querier [vlan vlan-id] [detail] [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show ipv6 mld snooping querier command to display the MLD version and IPv6 address of a detected device that sends MLD query messages, which is also called a querier. A subnet can have multiple multicast routers but has only one MLD querier. The querier can be a Layer 3 switch.
The show ipv6 mld snooping querier command output also shows the VLAN and interface on which the querier was detected. If the querier is the switch, the output shows the Port field as Router. If the querier is a router, the output shows the port number on which the querier is learned in the Port field.
The output of the show ipv6 mld snoop querier vlan command displays the information received in response to a query message from an external or internal querier. It does not display user-configured VLAN values, such as the snooping robustness variable on the particular VLAN. This querier information is used only on the MASQ message that is sent by the switch. It does not override the user-configured robustness variable that is used for aging out a member that does not respond to query messages.
VLAN numbers 1002 through 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in MLD snooping.
To configure the dual IPv4 and IPv6 template, enter the sdm prefer dual-ipv4-and-ipv6 global configuration command and reload the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ipv6 mld snooping querier command:
Switch> show ipv6 mld snooping querierVlan IP Address MLD Version Port-------------------------------------------------------------2 FE80::201:C9FF:FE40:6000 v1 Gi1/0/1This is an example of output from the show ipv6 mld snooping querier detail command:
Switch> show ipv6 mld snooping querier detailVlan IP Address MLD Version Port-------------------------------------------------------------2 FE80::201:C9FF:FE40:6000 v1 Gi1/0/12This is an example of output from the show ipv6 mld snooping querier vlan command:
Switch> show ipv6 mld snooping querier vlan 2IP address : FE80::201:C9FF:FE40:6000MLD version : v1Port : Gi1/0/1Max response time : 1000sRelated Commands
show ipv6 route updated
Use the show ipv6 route updated command in user EXEC command to display the current contents of the IPv6 routing table.
show ipv6 route [protocol] updated [boot-up]{hh:mm | day{month [hh:mm]} [{hh:mm | day{month [hh:mm]}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show ipv6 route privileged EXEC command to display the current contents of the IPv6 routing table.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ipv6 route updated rip command.
Switch> show ipv6 route rip updatedIPv6 Routing Table - 12 entriesCodes: C - Connected, L - Local, S - Static, U - Per-user Static routeB - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2IA - ISIS interarea, IS - ISIS summaryO - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2R 2001::/64 [120/2]via FE80::A8BB:CCFF:FE00:8D01, GigabitEthernet1/0/1Last updated 10:31:10 27 February 2007R 2004::/64 [120/2]via FE80::A8BB:CCFF:FE00:9001, GigabitEthernet1/0/2Last updated 17:23:05 22 February 2007R 4000::/64 [120/2]via FE80::A8BB:CCFF:FE00:9001, GigabitEthernet1/0/3Last updated 17:23:05 22 February 2007R 5000::/64 [120/2]via FE80::A8BB:CCFF:FE00:9001, GigabitEthernet1/0/4Last updated 17:23:05 22 February 2007R 5001::/64 [120/2]via FE80::A8BB:CCFF:FE00:9001, GigabitEthernet1/0/5Last updated 17:23:05 22 February 2007Related Commands
show l2protocol-tunnel
Use the show l2protocol-tunnel user EXEC command to display information about Layer 2 protocol tunnel ports. The output displays information for the specified interface or all interfaces with protocol tunneling enabled.
show l2protocol-tunnel [interface interface-id] [summary] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show l2protocol-tunnel command:
Switch> show l2protocol-tunnelCOS for Encapsulated Packets: 5Drop Threshold for Encapsulated Packets: 0Port Protocol Shutdown Drop Encapsulation Decapsulation DropThreshold Threshold Counter Counter Counter---------- -------- --------- --------- ------------- ------------- -------------Fa1/0/1 --- ---- ---- ---- ---- ------- ---- ---- ---- ---- ------- ---- ---- ---- ---- ----pagp ---- ---- 0 242500lacp ---- ---- 24268 242640udld ---- ---- 0 897960Fa1/0/2 --- ---- ---- ---- ---- ------- ---- ---- ---- ---- ------- ---- ---- ---- ---- ----pagp 1000 ---- 24249 242700lacp ---- ---- 24256 242660udld ---- ---- 0 897960Fa1/0/3 cdp ---- ---- 134482 1344820--- ---- ---- ---- ---- ------- ---- ---- ---- ---- ----pagp 1000 ---- 0 242500lacp 500 ---- 0 485320udld 300 ---- 44899 448980Fa1/0/4 cdp ---- ---- 134482 1344820--- ---- ---- ---- ---- ------- ---- ---- ---- ---- ----pagp ---- 1000 0 242700lacp ---- ---- 0 485220udld 300 ---- 44899 448980<output truncated>This is an example of output from the show l2protocol-tunnel summary command:
Switch> show l2protocol-tunnel summaryCOS for Encapsulated Packets: 5Drop Threshold for Encapsulated Packets: 0Port Protocol Shutdown Drop StatusThreshold Threshold(cdp/stp/vtp) (cdp/stp/vtp)(pagp/lacp/udld) (pagp/lacp/udld)------- ----------- ---------------- ---------------- ----------Fa1/0/2 --- --- --- ----/----/---- ----/----/---- uppagp lacp udld ----/----/---- ----/----/----Fa1/0/3 --- --- --- ----/----/---- ----/----/---- uppagp lacp udld 1000/----/---- ----/----/----Fa1/0/4 --- --- --- ----/----/---- ----/----/---- uppagp lacp udld 1000/ 500/---- ----/----/----Fa1/0/5 cdp stp vtp ----/----/---- ----/----/---- down---- ---- ---- ----/----/---- ----/----/----Fa1/0/6 --- --- --- ----/----/---- ----/----/---- downpagp ---- ---- ----/----/---- 1000/----/----Fa1/0/7 --- --- --- ----/----/---- ----/----/---- downpagp ---- ---- ----/----/---- 1000/----/----Related Commands
show lacp
Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information.
show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show lacp command to display the active channel-group information. To display specific channel information, enter the show lacp command with a channel-group number.
If you do not specify a channel group, information for all channel groups appears.
You can enter the channel-group-number option to specify a channel group for all keywords except sys-id.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show lacp counters command user EXEC command. Table 2-24 describes the fields in the display.
Switch> show lacp countersLACPDUs Marker Marker Response LACPDUsPort Sent Recv Sent Recv Sent Recv Pkts Err---------------------------------------------------------------------Channel group:1Fa1/0/5 19 10 0 0 0 0 0Fa1/0/6 14 6 0 0 0 0 0Fa1/0/7 8 7 0 0 0 0 0
This is an example of output from the show lacp internal command:
Switch> show lacp 1 internalFlags: S - Device is requesting Slow LACPDUsF - Device is requesting Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 1LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateFa1/0/5 SA bndl 32768 0x3 0x3 0x4 0x3DFa1/0/6 SA bndl 32768 0x3 0x3 0x5 0x3DFa1/0/7 SA bndl 32768 0x3 0x3 0x6 0x3DTable 2-25 describes the fields in the display:
This is an example of output from the show lacp neighbor command:
Switch> show lacp neighborFlags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 3 neighborsPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsFa1/0/3 32768,0007.eb49.5e80 0xC 19s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsFa1/0/4 32768,0007.eb49.5e80 0xD 15s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CThis is an example of output from the show lacp sys-id command:
Switch> show lacp sys-id32765,0002.4b29.3a00The system identification is made up of the system priority and the system MAC address. The first two bytes are the system priority, and the last six bytes are the globally administered individual MAC address associated to the system.
Related Commands
Clears LACP channel-group information.
Configures the LACP port priority.
Configures the LACP system priority.
show link state group
Use the show link state group global configuration command to display the link-state group information.
show link state group [number] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Defaults
There is no default.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the show link state group command to display the link-state group information. Enter this command without keywords to display information about all link-state groups. Enter the group number to display information specific to the group.
Enter the detail keyword to display detailed information about the group. The output for the show link state group detail command displays only those link-state groups that have link-state tracking enabled or that have upstream or downstream interfaces (or both) configured. If there is no link-state group configuration for a group, it is not shown as enabled or disabled.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show link state group 1 command:
Switch> show link state group 1Link State Group: 1 Status: Enabled, DownThis is an example of output from the show link state group detail command:
Switch> show link state group detailLink State Group: 1 Status: Enabled, Down Upstream Interfaces : Fa1/0/15(Dwn) Fa1/0/16(Dwn) Downstream Interfaces : Fa1/0/11(Dis) Fa1/0/12(Dis) Fa1/0/13(Dis) Fa1/0/14(Dis)Link State Group: 2 Status: Enabled, Down Upstream Interfaces : Fa1/0/15(Dwn) Fa1/0/16(Dwn) Fa1/0/17(Dwn) Downstream Interfaces : Fa1/0/11(Dis) Fa1/0/12(Dis) Fa1/0/13(Dis) Fa1/0/14(Dis)(Up):Interface up (Dwn):Interface Down (Dis):Interface disabledRelated Commands
Configures an interface as a member of a link-state group.
Enables a link-state group.
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.
show lldp
The show lldp command is documented at http://www.cisco.com/en/US/docs/ios/cether/command/reference/ce_04.html#wp1095571.
show location
Use the show location user EXEC command to display location information for an endpoint.
show location admin-tag | [ | {begin | exclude | include} expression]
show location civic-location {identifier id number | interface interface-id | static } | {begin | exclude | include} expression]
show location elin-location {identifier id number | interface interface-id | static} | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show location command to display location information for an endpoint.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show location civic-location command that displays location information for an interface:
Switch> show location civic interface g2/0/1Civic location information--------------------------Identifier : 1County : Santa ClaraStreet number : 3550Building : 19Room : C6Primary road name : Cisco WayCity : San JoseState : CACountry : USThis is an example of output from the show location civic-location command that displays all the civic location information:
Switch> show location civic-location staticCivic location information--------------------------Identifier : 1County : Santa ClaraStreet number : 3550Building : 19Room : C6Primary road name : Cisco WayCity : San JoseState : CACountry : USPorts : Gi2/0/1--------------------------Identifier : 2Street number : 24568Street number suffix : WestLandmark : Golden Gate BridgePrimary road name : 19th AveCity : San FranciscoCountry : US--------------------------This is an example of output from the show location elin-location command that displays the emergency location information:Switch> show location elin-location identifier 1Elin location information--------------------------Identifier : 1Elin : 14085553881Ports : Gi2/0/2This is an example of output from the show location elin static command that displays all emergency location information:Switch> show location elin staticElin location information--------------------------Identifier : 1Elin : 14085553881Ports : Gi2/0/2--------------------------Identifier : 2Elin : 18002228999--------------------------Related Commands
Configures the global location information for an endpoint.
Configures the location information for an interface.
show mac access-group
Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.
show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC; the interface keyword is available only in privileged EXEC mode.
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac-access group command. In this display, Fast Ethernet interface 1/0/12 has the MAC access list macl_e1 applied; no MAC ACLs are applied to other interfaces.
Switch> show mac access-groupInterface FastEthernet1/0/1:Inbound access-list is not setInterface FastEthernet1/0/2:Inbound access-list is macl_e1Interface FastEthernet1/0/3:Inbound access-list is not setInterface FastEthernet1/0/4:Inbound access-list is not set<output truncated>Interface FastEthernet1/0/10:Inbound access-list is not setInterface FastEthernet1/0/11:Inbound access-list is not setInterface FastEthernet1/0/12:Inbound access-list is macl_e1<output truncated>This is an example of output from the show mac access-group interface interface-id command:
Switch# show mac access-group interface gigabitethernet1/0/2Interface GigabitEthernet1/0/2:Inbound access-list is macl_e1Related Commands
show mac address-table
Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
show mac address-table [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table command:
Switch> show mac address-tableMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0000.0000.0001 STATIC CPUAll 0000.0000.0002 STATIC CPUAll 0000.0000.0003 STATIC CPUAll 0000.0000.0009 STATIC CPUAll 0000.0000.0012 STATIC CPUAll 0180.c200.000b STATIC CPUAll 0180.c200.000c STATIC CPUAll 0180.c200.000d STATIC CPUAll 0180.c200.000e STATIC CPUAll 0180.c200.000f STATIC CPUAll 0180.c200.0010 STATIC CPU1 0030.9441.6327 DYNAMIC Fa1/0/23Total Mac Addresses for this criterion: 12Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays dynamic MAC address table entries only.
Displays the MAC address table information for the specified interface.
Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
Displays the MAC address notification settings for all interfaces or the specified interface.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table address
Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address.
show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table address command:
Switch# show mac address-table address 0002.4b28.c482Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0002.4b28.c482 STATIC CPUTotal Mac Addresses for this criterion: 1Related Commands
show mac address-table aging-time
Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
show mac address-table aging-time [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the aging time for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table aging-time command:
Switch> show mac address-table aging-timeVlan Aging Time---- ----------1 300This is an example of output from the show mac address-table aging-time vlan 10 command:
Switch> show mac address-table aging-time vlan 10Vlan Aging Time---- ----------10 300Related Commands
show mac address-table count
Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN.
show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the address count for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table count command:
Switch# show mac address-table countMac Entries for Vlan 10:---------------------------Dynamic Address Count : 0Static Address Count : 0Total Mac Addresses : 0Mac Entries for Vlan 1:---------------------------Dynamic Address Count : 10Static Address Count : 0Total Mac Addresses : 10Total Mac Address Space Available: 6120Related Commands
show mac address-table dynamic
Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries.
show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC; address keyword available only in privileged EXEC mode.
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table dynamic command:
Switch> show mac address-table dynamicMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- -------- -----1 0000.0c07.ac00 DYNAMIC Fa1/0/11 0000.0c07.ac81 DYNAMIC Fa1/0/11 0004.5a5e.f635 DYNAMIC Fa1/0/11 0006.d713.8dd0 DYNAMIC Fa1/0/11 0006.d78b.5d80 DYNAMIC Fa1/0/11 0008.217a.ea00 DYNAMIC Fa1/0/11 000a.b7d1.6f5b DYNAMIC Fa1/0/11 0010.7b3a.e967 DYNAMIC Fa1/0/11 0010.a4e6.6e58 DYNAMIC Fa1/0/11 0090.92cf.1400 DYNAMIC Fa1/0/1Total Mac Addresses for this criterion: 10Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays MAC address table information for the specified MAC address.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays the MAC address table information for the specified interface.
Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table interface
Use the show mac address-table interface user command to display the MAC address table information for the specified interface in the specified VLAN.
show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table interface interface-id command:
Switch> show mac address-table interface fastethernet1/0/2Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0030.b635.7862 DYNAMIC Fa1/0/21 00b0.6496.2741 DYNAMIC Fa1/0/2Total Mac Addresses for this criterion: 2Related Commands
show mac address-table learning
Use the show mac address-table learning user EXEC command to display the status of MAC address learning for all VLANs or the specified VLAN.
show mac address-table learning [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show mac address-table learning command without any keywords to display configured VLANs and whether MAC address learning is enabled or disabled on them. The default is that MAC address learning is enabled on all VLANs. Use the command with a specific VLAN ID to display the learning status on an individual VLAN.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table learning user EXEC command showing that MAC address learning is disabled on VLAN 200:
Switch> show mac address-table learningVLAN Learning Status---- ---------------1 yes100 yes200 noRelated Commands
show mac address-table move update
Use the show mac address-table move update user EXEC command to display the MAC address-table move update information on the switch.
show mac address-table move update [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table move update command:
Switch> show mac address-table move updateSwitch-ID : 010b.4630.1780Dst mac-address : 0180.c200.0010Vlans/Macs supported : 1023/8320Default/Current settings: Rcv Off/On, Xmt Off/OnMax packets per min : Rcv 40, Xmt 60Rcv packet count : 10Rcv conforming packet count : 5Rcv invalid packet count : 0Rcv packet count this min : 0Rcv threshold exceed count : 0Rcv last sequence# this min : 0Rcv last interface : Po2Rcv last src-mac-address : 0003.fd6a.8701Rcv last switch-ID : 0303.fd63.7600Xmt packet count : 0Xmt packet count this min : 0Xmt threshold exceed count : 0Xmt pak buf unavail cnt : 0Xmt last interface : Noneswitch#Related Commands
Clears the MAC address-table move update counters.
Configures MAC address-table move update on the switch.
show mac address-table multicast
Use the show mac address-table multicast user EXEC command to display the Layer 2 multicast entries for all VLANs. Use the command in privileged EXEC mode to display specific multicast entries.
show mac address-table multicast [vlan-id] [count | user [count]] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table multicast command. It shows how to display all multicast entries for the switch.
Switch> show mac address-table multicastVlan Mac Address Type Ports---- ----------- ---- -----1 0100.5e00.0128 IGMP Gi1/0/1This is an example of output from the show mac address-table multicast count command. It shows how to display a total count of MAC address entries for the switch.
Switch> show mac address-table multicast countMulticast MAC Entries for all vlans: 10This is an example of output from the show mac address-table multicast vlan 1 count command. It shows how to display a total count of MAC address entries for a VLAN.
Switch> show mac address-table multicast vlan 1 countMulticast MAC Entries for vlan 1: 4Related Commands
show mac address-table notification
Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface.
show mac address-table notification {change [interface [interface-id] | mac-move | threshold} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.1(14)AX
This command was introduced.
12.2(40)SE
The change, mac-move, and threshold keywords were added.
Usage Guidelines
Use the show mac address-table notification change command without keywords to see if the MAC address change notification feature is enabled or disabled, the MAC notification interval, the maximum number of entries allowed in the history table, and the history table contents.
Use the interface keyword to display the notifications for all interfaces. If the interface-id is included, only the flags for that interface appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table notification change command:
Switch> show mac address-table notification changeMAC Notification Feature is Enabled on the switchInterval between Notification Traps : 60 secsNumber of MAC Addresses Added : 4Number of MAC Addresses Removed : 4Number of Notifications sent to NMS : 3Maximum Number of entries configured in History Table : 100Current History Table Length : 3MAC Notification Traps are EnabledHistory Table contents----------------------History Index 0, Entry Timestamp 1032254, Despatch Timestamp 1032254MAC Changed Message :Operation: Added Vlan: 2 MAC Addr: 0000.0000.0001 Module: 0 Port: 1History Index 1, Entry Timestamp 1038254, Despatch Timestamp 1038254MAC Changed Message :Operation: Added Vlan: 2 MAC Addr: 0000.0000.0000 Module: 0 Port: 1Operation: Added Vlan: 2 MAC Addr: 0000.0000.0002 Module: 0 Port: 1Operation: Added Vlan: 2 MAC Addr: 0000.0000.0003 Module: 0 Port: 1History Index 2, Entry Timestamp 1074254, Despatch Timestamp 1074254MAC Changed Message :Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0000 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0001 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0002 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0003 Module: 0 Port: 1Related Commands
clear mac address-table notification
Clears the MAC address notification global counters.
Displays MAC address table information for the specified MAC address.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays dynamic MAC address table entries only.
Displays the MAC address table information for the specified interface.
Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table static
Use the show mac address-table static user EXEC command to display only static MAC address table entries.
show mac address-table static [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC; address keyword available only in privileged EXEC mode.
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table static command:
Switch> show mac address-table static
Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0100.0ccc.cccc STATIC CPUAll 0180.c200.0000 STATIC CPUAll 0100.0ccc.cccd STATIC CPUAll 0180.c200.0001 STATIC CPUAll 0180.c200.0004 STATIC CPUAll 0180.c200.0005 STATIC CPU4 0001.0002.0004 STATIC Drop6 0001.0002.0007 STATIC DropTotal Mac Addresses for this criterion: 8Related Commands
show mac address-table vlan
Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN.
show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mac address-table vlan 1 command:
Switch> show mac address-table vlan 1Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0100.0ccc.cccc STATIC CPU1 0180.c200.0000 STATIC CPU1 0100.0ccc.cccd STATIC CPU1 0180.c200.0001 STATIC CPU1 0180.c200.0002 STATIC CPU1 0180.c200.0003 STATIC CPU1 0180.c200.0004 STATIC CPU1 0180.c200.0005 STATIC CPU1 0180.c200.0006 STATIC CPU1 0180.c200.0007 STATIC CPUTotal Mac Addresses for this criterion: 10Related Commands
show mls qos
Use the show mls qos user EXEC command to display global quality of service (QoS) configuration information.
show mls qos [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mls qos command when QoS is enabled and Differentiated Services Code Point (DSCP) transparency is disabled:
Switch> show mls qosQoS is enabledQoS ip packet dscp rewrite disabledThis is an example of output from the show mls qos command when QoS is enabled and DSCP transparency is enabled:
Switch> show mls qosQoS is enabledQoS ip packet dscp rewrite enabledRelated Commands
show mls qos aggregate-policer
Use the show mls qos aggregate-policer user EXEC command to display the quality of service (QoS) aggregate policer configuration. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
show mls qos aggregate-policer [aggregate-policer-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mls qos aggregate-policer command:
Switch> show mls qos aggregate-policer policer1aggregate-policer policer1 88000 2000000 exceed-action dropNot used by any policy mapRelated Commands
Defines policer parameters that can be shared by multiple classes within the same policy map.
show mls qos input-queue
Use the show mls qos input-queue user EXEC command to display quality of service (QoS) settings for the ingress queues.
show mls qos input-queue [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mls qos input-queue command:
Switch> show mls qos input-queueQueue : 1 2----------------------------------------------buffers : 90 10bandwidth : 4 4priority : 0 10threshold1: 100 100threshold2: 100 100Related Commands
show mls qos interface
Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the port level.
show mls qos interface [interface-id] [buffers | queueing | statistics]
[ | {begin | exclude | include} expression]Syntax Description
Note
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mls qos interface interface-id command:
Switch# show mls qos interface fastethernet1/0/7FastEthernet1/0/7Attached policy-map for Ingress: videowizard_policytrust state: not trustedCOS override: disdefault COS: 0DSCP Mutation Map: Default DSCP Mutation MapThis is an example of output from the show mls qos interface interface-id buffers command:
Switch> show mls qos interface fastethernet1/0/7 buffersFastEthernet1/0/7The port is mapped to qset : 1The allocations between the queues are : 25 25 25 25This is an example of output from the show mls qos interface interface-id queueing command:
Switch> show mls qos interface fastethernet1/0/7 queueingGigabitEthernet1/0/7Egress Priority Queue :enabledShaped queue weights (absolute) : 25 0 0 0Shared queue weights : 25 25 25 25The port bandwidth limit : 100 (Operational Bandwidth:100.0)The port is mapped to qset : 1This is an example of output from the show mls qos interface interface-id statistics command. Table 2-26 describes the fields in this display.
Switch> show mls qos interface fastethernet1/0/7 statisticsFastEthernet1/0/7dscp: incoming-------------------------------0 - 4 : 4213 0 0 0 05 - 9 : 0 0 0 0 010 - 14 : 0 0 0 0 015 - 19 : 0 0 0 0 020 - 24 : 0 0 0 0 025 - 29 : 0 0 0 0 030 - 34 : 0 0 0 0 035 - 39 : 0 0 0 0 040 - 44 : 0 0 0 0 045 - 49 : 0 0 0 6 050 - 54 : 0 0 0 0 055 - 59 : 0 0 0 0 060 - 64 : 0 0 0 0dscp: outgoing-------------------------------0 - 4 : 363949 0 0 0 05 - 9 : 0 0 0 0 010 - 14 : 0 0 0 0 015 - 19 : 0 0 0 0 020 - 24 : 0 0 0 0 025 - 29 : 0 0 0 0 030 - 34 : 0 0 0 0 035 - 39 : 0 0 0 0 040 - 44 : 0 0 0 0 045 - 49 : 0 0 0 0 050 - 54 : 0 0 0 0 055 - 59 : 0 0 0 0 060 - 64 : 0 0 0 0cos: incoming-------------------------------0 - 4 : 132067 0 0 0 05 - 9 : 0 0 0cos: outgoing-------------------------------0 - 4 : 739155 0 0 0 05 - 9 : 90 0 0Policer: Inprofile: 0 OutofProfile: 0
Note
Related Commands
show mls qos maps
Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. During classification, QoS uses the mapping tables to represent the priority of the traffic and to derive a corresponding class of service (CoS) or Differentiated Services Code Point (DSCP) value from the received CoS, DSCP, or IP precedence value.
show mls qos maps [cos-dscp | cos-input-q | cos-output-q | dscp-cos | dscp-input-q | dscp-mutation dscp-mutation-name | dscp-output-q | ip-prec-dscp | policed-dscp] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
The policed-DSCP, DSCP-to-CoS, and the DSCP-to-DSCP-mutation maps are displayed as a matrix. The d1 column specifies the most-significant digit in the DSCP. The d2 row specifies the least-significant digit in the DSCP. The intersection of the d1 and d2 values provides the policed-DSCP, the CoS, or the mutated-DSCP value. For example, in the DSCP-to-CoS map, a DSCP value of 43 corresponds to a CoS value of 5.
The DSCP input queue threshold and the DSCP output queue threshold maps are displayed as a matrix. The d1 column specifies the most-significant digit of the DSCP number. The d2 row specifies the least-significant digit in the DSCP number. The intersection of the d1 and the d2 values provides the queue ID and threshold ID. For example, in the DSCP input queue threshold map, a DSCP value of 43 corresponds to queue 2 and threshold 1 (02-01).
The CoS input queue threshold and the CoS output queue threshold maps show the CoS value in the top row and the corresponding queue ID and threshold ID in the second row. For example, in the CoS input queue threshold map, a CoS value of 5 corresponds to queue 2 and threshold 1 (2-1).
Examples
This is an example of output from the show mls qos maps command:
Switch> show mls qos mapsPoliced-dscp map:d1 : d2 0 1 2 3 4 5 6 7 8 9---------------------------------------0 : 00 01 02 03 04 05 06 07 08 091 : 10 11 12 13 14 15 16 17 18 192 : 20 21 22 23 24 25 26 27 28 293 : 30 31 32 33 34 35 36 37 38 394 : 40 41 42 43 44 45 46 47 48 495 : 50 51 52 53 54 55 56 57 58 596 : 60 61 62 63Dscp-cos map:d1 : d2 0 1 2 3 4 5 6 7 8 9---------------------------------------0 : 00 00 00 00 00 00 00 00 01 011 : 01 01 01 01 01 01 02 02 02 022 : 02 02 02 02 03 03 03 03 03 033 : 03 03 04 04 04 04 04 04 04 044 : 05 05 05 05 05 05 05 05 06 065 : 06 06 06 06 06 06 07 07 07 076 : 07 07 07 07Cos-dscp map:cos: 0 1 2 3 4 5 6 7--------------------------------dscp: 0 8 16 24 32 40 48 56IpPrecedence-dscp map:ipprec: 0 1 2 3 4 5 6 7--------------------------------dscp: 0 8 16 24 32 40 48 56Dscp-outputq-threshold map:d1 :d2 0 1 2 3 4 5 6 7 8 9--------------------------------------------------------------------0 : 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-011 : 02-01 02-01 02-01 02-01 02-01 02-01 03-01 03-01 03-01 03-012 : 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-013 : 03-01 03-01 04-01 04-01 04-01 04-01 04-01 04-01 04-01 04-014 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 04-01 04-015 : 04-01 04-01 04-01 04-01 04-01 04-01 04-01 04-01 04-01 04-016 : 04-01 04-01 04-01 04-01Dscp-inputq-threshold map:d1 :d2 0 1 2 3 4 5 6 7 8 9--------------------------------------------------------------------0 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-011 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-012 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-013 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-014 : 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-01 01-01 01-015 : 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-016 : 01-01 01-01 01-01 01-01Cos-outputq-threshold map:cos: 0 1 2 3 4 5 6 7------------------------------------queue-threshold: 2-1 2-1 3-1 3-1 4-1 1-1 4-1 4-1Cos-inputq-threshold map:cos: 0 1 2 3 4 5 6 7------------------------------------queue-threshold: 1-1 1-1 1-1 1-1 1-1 2-1 1-1 1-1Dscp-dscp mutation map:Default DSCP Mutation Map:d1 : d2 0 1 2 3 4 5 6 7 8 9---------------------------------------0 : 00 01 02 03 04 05 06 07 08 091 : 10 11 12 13 14 15 16 17 18 192 : 20 21 22 23 24 25 26 27 28 293 : 30 31 32 33 34 35 36 37 38 394 : 40 41 42 43 44 45 46 47 48 495 : 50 51 52 53 54 55 56 57 58 596 : 60 61 62 63Related Commands
show mls qos queue-set
Use the show mls qos queue-set user EXEC command to display quality of service (QoS) settings for an egress queue-set.
show mls qos queue-set [qset-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mls qos queue-set command:
Switch> show mls qos queue-setQueueset: 1Queue : 1 2 3 4----------------------------------------------buffers : 25 25 25 25threshold1: 100 200 100 100threshold2: 100 200 100 100reserved : 50 50 50 50maximum : 400 400 400 400Queueset: 2Queue : 1 2 3 4----------------------------------------------buffers : 25 25 25 25threshold1: 100 200 100 100threshold2: 100 200 100 100reserved : 50 50 50 50maximum : 400 400 400 400Related Commands
show mls qos vlan
Use the show mls qos vlan user EXEC command to display the policy maps attached to a switch virtual interface (SVI).
show mls qos vlan vlan-id [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mls qos queue-set command:
Switch> show mls qos vlan 10Vlan10Attached policy-map for Ingress:pm-test-pm-2Related Commands
Creates or modifies a policy map that can be attached to multiple ports and enters policy-map configuration mode.
show monitor
Use the show monitor user EXEC command to display information about all Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) sessions on the switch. Use the command with keywords to show a specific session, all sessions, all local sessions, or all remote sessions.
show monitor [session {session_number | all | local | range list | remote} [detail]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
The output is the same for the show monitor command and the show monitor session all command.
Examples
This is an example of output for the show monitor command:
Switch# show monitorSession 1---------Type : Local SessionSource Ports :RX Only : Fa1/0/1Both : Fa1/0/2-3,Fa1/0/5-6Destination Ports : Fa1/0/20Encapsulation : ReplicateIngress : DisabledSession 2---------Type : Remote Source SessionSource VLANs :TX Only : 10Both : 1-9Dest RSPAN VLAN : 105This is an example of output for the show monitor command for RSPAN source session 1:
Switch# show monitor session 1Session 1---------Type : Local SessionSource Ports :RX Only : Fa1/0/1Both : Fa1/0/2-3,Fa1/0/5-6Destination Ports : Fa1/0/20Encapsulation : ReplicateIngress : DisabledThis is an example of output for the show monitor session all command when ingress traffic forwarding is enabled:
Switch# show monitor session allSession 1---------Type : Local SessionSource Ports :Both : Fa1/0/2Destination Ports : Fa1/0/3Encapsulation : NativeIngress : Enabled, default VLAN = 5Ingress encap : DOT1QSession 2---------Type : Local SessionSource Ports :Both : Fa1/0/8Destination Ports : Fa1/0/12Encapsulation : ReplicateIngress : Enabled, default VLAN = 4Ingress encap : UntaggedRelated Commands
show mpls l2transport vc
Use the show mpl2 l2transport vc user EXEC command to provide information about the Ethernet over multiprotocol label switching (EoMPLS) virtual circuits (VCs) that have been enabled to route Layer 2 packets on a provider-edge device.
show mpls l2transport vc [detail] [summary] [vc-id] [vc-id-min - vc-id-max] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show mpls l2transport vc command:
Switch> show mpls l2transport vcTransport Client VC Trans Local Remote TunnelVC ID Intf State Type VC Label VC Label Label49 Vl60 UP vlan 18 18 implc-null50 Vl80 DOWN vlan unassigned unassigned not ready52 Fa1/0/2 UP ether 17 17 implc-nullTable 2-27 describes the fields in the display.
This is an example of the output from the show mpls l2transport vc summary command:
Switch> show mpls l2transport vc summaryMPLS interface VC summary (active vc(s) only):VC summary (active/non-active) by destination:destination: 172.22.255.255, Number of locally configured vc(s): 2This is an example of the output from the show mpls l2transport vc detail command:
Switch> show mpls l2transport vc detailvcid: 49, type: vlan , local groupid: 32, remote groupid: 36 (vc is up)client: Vl60 is up, destination: 192.168.255.255, Peer LDP Ident: 192.168.255.255:0local label: 18, remote label: 18, tunnel label: implc-nulloutgoing interface: Gi1/1/1, next hop: 10.2.0.2Local MTU: 1500, Remote MTU: 1500Remote interface description: Vlan60Packet totals(in/out): 0/0byte totals(in/out): 0/0vcid: 50, type: vlan , local groupid: 33, remote groupid: -1 (vc is down)client: Vl80 is not up, destination: 192.168.255.255, Peer LDP Ident: 192.168.255.255:0local label: unassigned, remote label: unassigned, tunnel label: not readyLocal MTU: 1500, Remote MTU: 0Remote interface description:Packet totals(in/out): 0/0byte totals(in/out): 0/0vcid: 52, type: ether , local groupid: 3, remote groupid: 3 (vc is up)client: Fa1/0/2 is up, destination: 192.168.255.255, Peer LDP Ident: 192.168.255.255:0local label: 17, remote label: 17, tunnel label: implc-nulloutgoing interface: Gi1/1/1, next hop: 10.2.0.2Local MTU: 1500, Remote MTU: 1500Remote interface description: FastEthernet1/0/2Packet totals(in/out): 606955/0byte totals(in/out): 47342490/0Table 2-28 describes the fields in the display.
Related Commands
Enables routing Layer 2 packets over a specified point-to-point VC by using EoMPLS.
show mvr
Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).
