A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V -

Index

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

aaa authorization network command 2-5, 2-28, 2-34, 2-36, 2-38, 2-40, 2-42, 2-131, 2-293, 2-493, B-8, B-35

AAA methods 2-3

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-181

MAC, displaying 2-606

access list, IPv6 2-249

access map configuration mode 2-319

access mode 2-794

access ports 2-794

ACEs 2-122, 2-395

ACLs

deny 2-120

displaying 2-469

for non-IP protocols 2-297

IP 2-181

matching 2-319

on Layer 2 interfaces 2-181

permit 2-393

action command 2-6

address aliasing 2-369

aggregate-port learner 2-381

alarm command 2-12

alarm facility fcs-hysteresis command 2-8

alarm facility power-supply command 2-9

alarm facility temperature command 2-10

alarm IDs 2-13, 2-472

alarm profile

attaching to a port 2-14

creating 2-12

displaying 2-473

alarm profile (global configuration) command 2-12

alarm profile (interface configuration) command 2-14

alarm profile configuration mode 2-12

allowed VLANs 2-814

archive download-sw command 2-16

archive tar command 2-19

archive upload-sw command 2-22

arp access-list command 2-24

authentication command bounce-port ignore 2-26

authentication command disable-port ignore 2-27

authentication control-direction command 2-28

authentication event command 2-30

authentication failed VLAN

See dot1x auth-fail vlan

authentication fallback command 2-34

authentication host-mode command 2-36

authentication mac-move permit command 2-38

authentication open command 2-40

authentication order command 2-42

authentication periodic command 2-44

authentication port-control command 2-46

authentication priority command 2-48

authentication timer command 2-50

authentication violation command 2-52

auth-fail max-attempts

See dot1x auth-fail max-attempts

auth-fail vlan

See dot1x auth-fail vlan

auth open command 2-40

auth order command 2-42

authorization state of controlled port 2-148

auth timer command 2-50

autonegotiation of duplex mode 2-159

auto qos voip command 2-54

B

BackboneFast, for STP 2-724

backup interfaces

configuring 2-787

displaying 2-540

boot (boot loader) command A-2

boot config-file command 2-58

boot enable-break command 2-59

boot fast command 2-60

boot helper command 2-61

boot helper-config file command 2-62

booting

Cisco IOS image 2-65

displaying environment variables 2-486

interrupting 2-59

manually 2-63

boot loader

accessing A-1

booting

Cisco IOS image A-2

helper image 2-61

directories

creating A-15

displaying a list of A-8

removing A-19

displaying

available commands A-13

memory heap utilization A-14

version A-27

environment variables

described A-20

displaying settings A-20

location of A-21

setting A-20

unsetting A-25

files

copying A-6

deleting A-7

displaying a list of A-8

displaying the contents of A-4, A-16, A-23

renaming A-17

file system

formatting A-11

initializing flash A-10

running a consistency check A-12

resetting the system A-18

boot manual command 2-63

boot private-config-file command 2-64

boot system command 2-65

BPDU filtering, for spanning tree 2-725, 2-760

BPDU guard, for spanning tree 2-727, 2-760

broadcast storm control 2-778

C

candidate switches

See clusters

cat (boot loader) command A-4

channel-group command 2-66

channel-protocol command 2-69

Cisco SoftPhone

auto-QoS configuration 2-54

trusting packets sent from 2-360

CISP

See Client Information Signalling Protocol

cisp

debug platform cisp command B-35

cisp enable command 2-72

class command 2-73

class-map command 2-75

class maps

creating 2-75

defining the match criteria 2-321

displaying 2-494

class of service

See CoS

clear dot1x command 2-77

clear eap sessions command 2-78

clear errdisable interface 2-79

clear ip arp inspection log command 2-80

clear ip arp inspection statistics command 2-81

clear ipc command 2-84

clear ip dhcp snooping database command 2-82

clear ipv6 dhcp conflict command 2-85

clear l2protocol-tunnel counters command 2-86

clear lacp command 2-87

clear mac address-table command 2-88, 2-89

clear nmsp statistics command 2-90

clear pagp command 2-91, 2-95

clear port-security command 2-92

clear psp counter 2-94

clear psp counter command 2-94

clear spanning-tree counters command 2-96

clear spanning-tree detected-protocols command 2-97

clear vmps statistics command 2-98

clear vtp counters command 2-99

Client Information Signalling Protocol 2-72, 2-131, 2-493, B-8, B-35

cluster commander-address command 2-100

cluster discovery hop-count command 2-102

cluster enable command 2-103

cluster holdtime command 2-104

cluster member command 2-105

cluster outside-interface command 2-107

cluster run command 2-108

clusters

adding candidates 2-105

binding to HSRP group 2-109

building manually 2-105

communicating with

devices outside the cluster 2-107

members by using Telnet 2-432

debug messages, display B-9

displaying

candidate switches 2-497

debug messages B-9

member switches 2-499

status 2-495

hop-count limit for extended discovery 2-102

HSRP standby groups 2-109

redundancy 2-109

SNMP trap 2-715

cluster standby-group command 2-109

cluster timer command 2-111

command modes defined 1-1

command switch

See clusters

configuration files

password recovery disable considerations A-1

specifying the name 2-58, 2-64

configuring multiple interfaces 2-177

config-vlan mode

commands 2-836

copy (boot loader) command A-6

CoS

assigning default value to incoming packets 2-330

assigning to Layer 2 protocol packets 2-277

overriding the incoming value 2-330

CoS-to-DSCP map 2-334

CPU ASIC statistics, displaying 2-501

crashinfo files 2-169

critical VLAN 2-31

D

debug authentication B-2

debug auto qos command B-4

debug backup command B-6, B-7

debug cip B-7

debug cisp command B-8

debug cluster command B-9

debug dot1x command B-11

debug dtp command B-12

debug eap command B-13, B-88

debug etherchannel command B-14

debug interface command B-15

debug ip dhcp snooping command B-16

debug ip igmp filter command B-18

debug ip igmp max-groups command B-19

debug ip igmp snooping command B-20

debug ip verify source packet command B-17

debug lacp command B-21

debug lldp packets command B-22

debug mac-notification command B-23

debug matm command B-24

debug matm move update command B-25

debug monitor command B-26

debug mvrdbg command B-28

debug nmsp command B-29

debug nvram command B-30

debug pagp command B-31

debug platform acl command B-32

debug platform backup interface command B-34

debug platform cisp command B-35

debug platform cpu-queues command B-36

debug platform dot1x command B-38

debug platform etherchannel command B-39

debug platform fallback-bridging command B-40

debug platform forw-tcam command B-41

debug platform ip arp inspection command B-42

debug platform ip dhcp command B-43

debug platform ip igmp snooping command B-44

debug platform ip multicast command B-46

debug platform ip source-guard command B-48

debug platform ip unicast command B-49

debug platform led command B-51

debug platform matm command B-52

debug platform messaging application command B-53

debug platform phy command B-54

debug platform pm command B-56

debug platform port-asic command B-58

debug platform port-security command B-59

debug platform qos-acl-tcam command B-60

debug platform resource-manager command B-61

debug platform snmp command B-62

debug platform span command B-63

debug platform supervisor-asic command B-64

debug platform sw-bridge command B-65

debug platform tcam command B-66

debug platform udld command B-69

debug platform vlan command B-70

debug pm command B-71

debug port-security command B-73

debug profinet alarm B-74

debug profinet cyclic B-76

debug profinet error B-78

debug profinet packet B-80

debug profinet platform B-82

debug profinet topology B-84

debug profinet trace B-86

debug qos-manager command B-89

debug spanning-tree backbonefast command B-92

debug spanning-tree bpdu command B-93

debug spanning-tree bpdu-opt command B-94

debug spanning-tree command B-90

debug spanning-tree mstp command B-95

debug spanning-tree switch command B-97

debug spanning-tree uplinkfast command B-99

debug sw-vlan command B-100

debug sw-vlan ifs command B-102

debug sw-vlan notification command B-103

debug sw-vlan vtp command B-105

debug udld command B-107

debug vqpc command B-109

defaultPort profile 2-13, 2-14

define interface-range command 2-112

delete (boot loader) command A-7

delete command 2-114

deny (ARP access-list configuration) command 2-115

deny (IPv6) command 2-117

deny command 2-120

detect mechanism, causes 2-160

DHCP snooping

accepting untrusted packets from edge switch 2-209

enabling

on a VLAN 2-216

option 82 2-207, 2-209

trust on an interface 2-214

error recovery timer 2-166

rate limiting 2-213

DHCP snooping binding database

binding file, configuring 2-205

bindings

adding 2-203

deleting 2-203

displaying 2-559

clearing database agent statistics 2-82

database agent, configuring 2-205

displaying

binding entries 2-559

database agent status 2-562, 2-564

renewing 2-436

dir (boot loader) command A-8

directories, deleting 2-114

domain name, VTP 2-851

dot1x auth-fail max-attempts 2-125

dot1x auth-fail vlan 2-127

dot1x command 2-123

dot1x control-direction command 2-129

dot1x credentials (global configuration) command 2-131

dot1x critical global configuration command 2-132

dot1x critical interface configuration command 2-134

dot1x default command 2-136

dot1x fallback command 2-137

dot1x guest-vlan command 2-138

dot1x host-mode command 2-140

dot1x initialize command 2-142

dot1x mac-auth-bypass command 2-143

dot1x max-reauth-req command 2-145

dot1x max-req command 2-146

dot1x pae command 2-147

dot1x port-control command 2-148

dot1x re-authenticate command 2-150

dot1x reauthentication command 2-151

dot1x supplicant force-multicast command 2-152

dot1x test eapol-capable command 2-153

dot1x test timeout command 2-154

dot1x timeout command 2-155

dot1x violation-mode command 2-157

dropping packets, with ACL matches 2-6

drop threshold, Layer 2 protocol tunneling 2-274

DSCP-to-CoS map 2-334

DSCP-to-DSCP-mutation map 2-334

DTP 2-795

DTP flap

error detection for 2-160

error recovery timer 2-166

DTP negotiation 2-799

dual-purpose uplink ports

selecting the type 2-324

duplex command 2-158

dynamic-access ports

configuring 2-783

restrictions 2-784

dynamic ARP inspection

ARP ACLs

apply to a VLAN 2-189

define 2-24

deny packets 2-115

display 2-477

permit packets 2-385

clear

log buffer 2-80

statistics 2-81

display

ARP ACLs 2-477

configuration and operating state 2-554

log buffer 2-554

statistics 2-554

trust state and rate limit 2-554

enable per VLAN 2-199

error detection for 2-160

log buffer

clear 2-80

configure 2-193

display 2-554

rate-limit incoming ARP packets 2-191

statistics

clear 2-81

display 2-554

trusted interface state 2-195

type of packet logged 2-200

validation checks 2-197

dynamic auto VLAN membership mode 2-794

dynamic desirable VLAN membership mode 2-794

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

Dynamic Trunking Protocol

See DTP

E

EAP-request/identity frame

maximum number to send 2-146

response time before retransmitting 2-155

environmental alarms, displaying 2-475

environment variables, displaying 2-486

errdisable detect cause command 2-160

errdisable detect cause small-frame comand 2-163

errdisable recovery cause small-frame 2-165

errdisable recovery command 2-166

error conditions, displaying 2-528

error disable detection 2-160

error-disabled interfaces, displaying 2-540

EtherChannel

assigning Ethernet interface to channel group 2-66

creating port-channel logical interface 2-175

debug EtherChannel/PAgP, display B-14

debug platform-specific events, display B-39

displaying 2-531

enabling Layer 2 protocol tunneling for

LACP 2-275

PAgP 2-275

UDLD 2-275

interface information, displaying 2-540

LACP

clearing channel-group information 2-87

debug messages, display B-21

displaying 2-598

modes 2-66

port priority for hot-standby ports 2-278

restricting a protocol 2-69

system priority 2-280

load-distribution methods 2-403

PAgP

aggregate-port learner 2-381

clearing channel-group information 2-91

debug messages, display B-31

displaying 2-655

error detection for 2-160

error recovery timer 2-166

learn method 2-381

modes 2-66

physical-port learner 2-381

priority of interface for transmitted traffic 2-383

Ethernet controller, internal register display 2-503

Ethernet statistics, collecting 2-453

exception crashinfo command 2-169

extended discovery of candidate switches 2-102

extended-range VLANs

and allowed VLAN list 2-814

and pruning-eligible list 2-814

configuring 2-835

extended system ID for STP 2-733

F

facility alarm relays, displaying 2-534

facility alarm status, displaying 2-535

fallback profile command 2-170

fallback profiles, displaying 2-536

FCS bit error rate

displaying 2-537

fluctuation threshold 2-8

setting 2-172

FCS hysteresis threshold 2-8

fcs-threshold command 2-172

file name, VTP 2-851

files, deleting 2-114

flash_init (boot loader) command A-10

flexible authentication ordering 2-42

Flex Links

configuring 2-787

configuring preferred VLAN 2-789

displaying 2-540

flowcontrol command 2-173

format (boot loader) command A-11

forwarding packets, with ACL matches 2-6

forwarding results, display C-6

frame check sequence

See FCS

frame forwarding information, displaying C-6

fsck (boot loader) command A-12

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-469

help (boot loader) command A-13

hierarchical policy maps 2-400

hop-count limit for clusters 2-102

host connection, port configuration 2-793

host ports, private VLANs 2-797

Hot Standby Router Protocol

See HSRP

HSRP

binding HSRP group to cluster 2-109

standby group 2-109

I

IEEE 802.1Q trunk ports and native VLANs 2-842

IEEE 802.1Q tunnel ports

displaying 2-517

limitations 2-795

IEEE 802.1x

and switchport modes 2-795

violation error recovery 2-166

See also port-based authentication

IEEE 802.1X Port Based Authentication

enabling guest VLAN supplicant 2-126, 2-137, 2-171

IGMP filters

applying 2-219

debug messages, display B-18

IGMP groups, setting maximum 2-221

IGMP maximum groups, debugging B-19

IGMP profiles

creating 2-223

displaying 2-567

IGMP snooping

adding ports as a static member of a group 2-238

displaying 2-568

enabling 2-225

enabling the configurable-leave timer 2-227

enabling the Immediate-Leave feature 2-235

flooding query count 2-232

interface topology change notification behavior 2-234

querier 2-229

query solicitation 2-232

report suppression 2-231

switch topology change notification behavior 2-232

images

See software images

Immediate-Leave feature, MVR 2-371

immediate-leave processing 2-235

Immediate-Leave processing, IPv6 2-270

interface configuration mode 1-2, 1-4

interface port-channel command 2-175

interface range command 2-177

interface-range macros 2-112

interfaces

assigning Ethernet interface to channel group 2-66

configuring 2-158

configuring multiple 2-177

creating port-channel logical 2-175

debug messages, display B-15

disabling 2-711

displaying the MAC address table 2-617

restarting 2-711

interface speed, configuring 2-770

interface vlan command 2-179

internal registers, displaying 2-503, 2-513

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for 2-160

error recovery timer 2-166

ip access-group command 2-181

ip address command 2-184

IP addresses, setting 2-184

IP address matching 2-319

ip admission command 2-186

ip admission name proxy http command 2-187

ip arp inspection filter vlan command 2-189

ip arp inspection limit command 2-191

ip arp inspection log-buffer command 2-193

ip arp inspection trust command 2-195

ip arp inspection validate command 2-197

ip arp inspection vlan command 2-199

ip arp inspection vlan logging command 2-200

IP DHCP snooping

See DHCP snooping

ip dhcp snooping binding command 2-203

ip dhcp snooping command 2-202

ip dhcp snooping database command 2-205

ip dhcp snooping information option allow-untrusted command 2-209

ip dhcp snooping information option command 2-207

ip dhcp snooping information option format remote-id command 2-211

ip dhcp snooping limit rate command 2-213

ip dhcp snooping trust command 2-214

ip dhcp snooping verify command 2-215

ip dhcp snooping vlan command 2-216

ip dhcp snooping vlan information option format-type circuit-id string command 2-217

ip igmp filter command 2-219

ip igmp max-groups command 2-221, 2-244, 2-246

ip igmp profile command 2-223

ip igmp snooping command 2-225

ip igmp snooping last-member-query-interval command 2-227

ip igmp snooping querier command 2-229

ip igmp snooping report-suppression command 2-231

ip igmp snooping tcn command 2-232

ip igmp snooping tcn flood command 2-234

ip igmp snooping vlan immediate-leave command 2-235

ip igmp snooping vlan mrouter command 2-236

ip igmp snooping vlan static command 2-238

IP multicast addresses 2-368

IP phones

auto-QoS configuration 2-54

trusting packets sent from 2-360

IP-precedence-to-DSCP map 2-334

ip source binding command 2-240

IP source guard

disabling 2-248

displaying

binding entries 2-575

configuration 2-576

dynamic binding entries only 2-559

enabling 2-248

static IP source bindings 2-240

ip ssh command 2-242

IPv6 access list, deny conditions 2-117

ipv6 access-list command 2-249

ipv6 address dhcp command 2-252

ipv6 dhcp client request vendor command 2-253

ipv6 dhcp ping packets command 2-254

ipv6 dhcp pool command 2-256

ipv6 dhcp server command 2-258

ipv6 mld snooping command 2-260

ipv6 mld snooping last-listener-query count command 2-262

ipv6 mld snooping last-listener-query-count command 2-262

ipv6 mld snooping last-listener-query-interval command 2-264

ipv6 mld snooping listener-message-suppression command 2-266

ipv6 mld snooping robustness-variable command 2-267

ipv6 mld snooping tcn command 2-269

ipv6 mld snooping vlan command 2-270

IPv6 SDM template 2-454

ipv6 traffic-filter command 2-272

ip verify source command 2-248

J

jumbo frames

See MTU

L

l2protocol-tunnel command 2-274

l2protocol-tunnel cos command 2-277

LACP

See EtherChannel

lacp port-priority command 2-278

lacp system-priority command 2-280

Layer 2 mode, enabling 2-781

Layer 2 protocol ports, displaying 2-595

Layer 2 protocol tunnel counters 2-86

Layer 2 protocol tunneling error recovery 2-275

Layer 2 traceroute

IP addresses 2-826

MAC addresses 2-823

Layer 3 mode, enabling 2-781

line configuration mode 1-2, 1-4

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for 2-160

error recovery timer 2-166

link state group command 2-286

link state track command 2-288

load-distribution methods for EtherChannel 2-403

location (global configuration) command 2-282

location (interface configuration) command 2-284

logging event command 2-289

logging event power-inline-status command 2-290

logging file command 2-291

logical interface 2-175

loopback error

detection for 2-160

recovery timer 2-166

loop guard, for spanning tree 2-735, 2-739

M

mab request format attribute 32 command 2-293

mac access-group command 2-295

MAC access list configuration mode 2-297

mac access-list extended command 2-297

MAC access lists 2-120

MAC addresses

disabling MAC address learning per VLAN 2-300

displaying

aging time 2-611

all 2-609

dynamic 2-615

MAC address-table move updates 2-620

notification settings 2-619, 2-622

number of addresses in a VLAN 2-613

per interface 2-617

per VLAN 2-626

static 2-624

static and dynamic entries 2-607

dynamic

aging time 2-299

deleting 2-88

displaying 2-615

enabling MAC address notification 2-304

enabling MAC address-table move update 2-302

matching 2-319

static

adding and removing 2-306

displaying 2-624

dropping on an interface 2-307

tables 2-609

MAC address notification, debugging B-23

mac address-table aging-time 2-295

mac address-table aging-time command 2-299

mac address-table learning command 2-300

mac address-table move update command 2-302

mac address-table notification command 2-304

mac address-table static command 2-306

mac address-table static drop command 2-307

macro apply command 2-309

macro description command 2-312

macro global command 2-313

macro global description command 2-316

macro name command 2-317

macros

adding a description 2-312

adding a global description 2-316

applying 2-313

creating 2-317

displaying 2-657

interface range 2-112, 2-177

specifying parameter values 2-313

tracing 2-313

maps

QoS

defining 2-334

displaying 2-636

VLAN

creating 2-840

defining 2-319

displaying 2-700

match (access-map configuration) command 2-319

match (class-map configuration) command 2-321

maximum transmission unit

See MTU

mdix auto command 2-323

media-type command 2-324

member switches

See clusters

memory (boot loader) command A-14

mkdir (boot loader) command A-15

MLD snooping

configuring 2-266, 2-267

configuring queries 2-262, 2-264

configuring topology change notification 2-269

displaying 2-585, 2-587, 2-591

enabling 2-260

MLD snooping on a VLAN, enabling 2-270

mls qos aggregate-policer command 2-328

mls qos command 2-326

mls qos cos command 2-330

mls qos dscp-mutation command 2-332

mls qos map command 2-334

mls qos queue-set output buffers command 2-338

mls qos queue-set output threshold command 2-340

mls qos rewrite ip dscp command 2-342

mls qos srr-queue input bandwidth command 2-344

mls qos srr-queue input buffers command 2-346

mls qos-srr-queue input cos-map command 2-348

mls qos srr-queue input dscp-map command 2-350

mls qos srr-queue input priority-queue command 2-352

mls qos srr-queue input threshold command 2-354

mls qos-srr-queue output cos-map command 2-356

mls qos srr-queue output dscp-map command 2-358

mls qos trust command 2-360

mls qos vlan-based command 2-362

mode, MVR 2-368

modes, commands 1-1

monitor session command 2-363

more (boot loader) command A-16

MSTP

displaying 2-682

interoperability 2-97

link type 2-737

MST region

aborting changes 2-743

applying changes 2-743

configuration name 2-743

configuration revision number 2-743

current or pending display 2-743

displaying 2-682

MST configuration mode 2-743

VLANs-to-instance mapping 2-743

path cost 2-745

protocol mode 2-741

restart protocol migration process 2-97

root port

loop guard 2-735

preventing from becoming designated 2-735

restricting which can be root 2-735

root guard 2-735

root switch

affects of extended system ID 2-733

hello-time 2-748, 2-756

interval between BDPU messages 2-749

interval between hello BPDU messages 2-748, 2-756

max-age 2-749

maximum hop count before discarding BPDU 2-750

port priority for selection of 2-752

primary or secondary 2-756

switch priority 2-755

state changes

blocking to forwarding state 2-762

enabling BPDU filtering 2-725, 2-760

enabling BPDU guard 2-727, 2-760

enabling Port Fast 2-760, 2-762

forward-delay time 2-747

length of listening and learning states 2-747

rapid transition to forwarding 2-737

shutting down Port Fast-enabled ports 2-760

state information display 2-681

MTU

configuring size 2-819

displaying global setting 2-689

Multicase Listener Discovery

See MLD

multicast group address, MVR 2-371

multicast groups, MVR 2-369

Multicast Listener Discovery

See MLD

multicast router learning method 2-236

multicast router ports, configuring 2-236

multicast router ports, IPv6 2-270

multicast storm control 2-778

multicast VLAN, MVR 2-368

multicast VLAN registration

See MVR

Multiple Spanning Tree Protocol

See MSTP

MVR

and address aliasing 2-369

configuring 2-368

configuring interfaces 2-371

debug messages, display B-28

displaying 2-644

displaying interface information 2-646

members, displaying 2-648

mvr (global configuration) command 2-368

mvr (interface configuration) command 2-371

mvr vlan group command 2-372

N

native VLANs 2-814

native VLAN tagging 2-842

network-policy (global configuration) command 2-375

network-policy command 2-374

network-policy profile (network-policy configuration) command 2-377

nmsp attachment suppress command 2-380

nmsp command 2-379

nonegotiate, speed 2-770

nonegotiating DTP messaging 2-799

non-IP protocols

denying 2-120

forwarding 2-393

non-IP traffic access lists 2-297

non-IP traffic forwarding

denying 2-120

permitting 2-393

normal-range VLANs 2-835

notifies command 2-12

no vlan command 2-835

O

online diagnostics

displaying

configured boot-up coverage level 2-517

current scheduled tasks 2-517

event logs 2-517

supported test suites 2-517

test ID 2-517

test results 2-517

test statistics 2-517

global configuration mode

clearing health monitoring diagnostic test schedule 2-80

setting health monitoring diagnostic testing 2-80

setting up health monitoring diagnostic test schedule 2-80

P

PAgP

See EtherChannel

pagp learn-method command 2-381

pagp port-priority command 2-383

password, VTP 2-852

permit (ARP access-list configuration) command 2-385

permit (IPv6) command 2-387

permit (MAC access-list configuration) command 2-393

per-VLAN spanning-tree plus

See STP

physical-port learner 2-381

PID, displaying 2-553

PIM-DVMRP, as multicast router learning method 2-236

PoE

configuring the power budget 2-408

configuring the power management mode 2-405

displaying controller register values 2-510

displaying power management information 2-665

logging of status 2-290

police aggregate command 2-398

police command 2-396

policed-DSCP map 2-334

policy-map command 2-400

policy maps

applying to an interface 2-459, 2-464

creating 2-400

displaying 2-660

hierarchical 2-400

policers

displaying 2-629

for a single class 2-396

for multiple classes 2-328, 2-398

policed-DSCP map 2-334

traffic classification

defining the class 2-73

defining trust states 2-828

setting DSCP or IP precedence values 2-462

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list 2-3

configuring violation modes 2-157

debug messages, display B-11

enabling IEEE 802.1x

globally 2-123

per interface 2-148

guest VLAN 2-138

host modes 2-140

IEEE 802.1x AAA accounting methods 2-1

initialize an interface 2-142, 2-154

MAC authentication bypass 2-143

manual control of authorization state 2-148

PAE as authenticator 2-147

periodic re-authentication

enabling 2-151

time between attempts 2-155

quiet period between failed authentication exchanges 2-155

re-authenticating IEEE 802.1x-enabled ports 2-150

resetting configurable IEEE 802.1x parameters 2-136

switch-to-authentication server retransmission time 2-155

switch-to-client frame-retransmission number2-145to 2-146

switch-to-client retransmission time 2-155

test for IEEE 802.1x readiness 2-153

port-channel load-balance command 2-403

Port Fast, for spanning tree 2-762

port ranges, defining 2-112

ports, debugging B-71

ports, protected 2-812

port security

aging 2-806

debug messages, display B-73

enabling 2-801

violation error recovery 2-166

port trust states for QoS 2-360

port types, MVR 2-371

power inline consumption command 2-408

Power over Ethernet

See PoE

power supply alarms, setting 2-9

power-supply dual command 2-412

power-supply mode 2-412

Precision Time Protocol

primary temperature alarm 2-10

priority-queue command 2-413

private-vlan command 2-415

private-vlan mapping command 2-418

private VLANs

association 2-810

configuring 2-415

configuring ports 2-797

host ports 2-797

mapping

configuring 2-810

promiscuous ports 2-797

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-553

profinet 2-420

promiscuous ports, private VLANs 2-797

protected ports, displaying 2-545

pruning

VLANs 2-814

VTP

displaying interface information 2-540

enabling 2-852

pruning-eligible VLAN list 2-815

psp 2-422

psp command 2-422

ptp (global configuration) command 2-423

ptp interface configuration command 2-425

PTP settings 2-425

PVST+

See STP

Q

QoS

auto-QoS

configuring 2-54

debug messages, display B-4

displaying 2-482

class maps

creating 2-75

defining the match criteria 2-321

displaying 2-494

defining the CoS value for an incoming packet 2-330

displaying configuration information 2-482, 2-628

DSCP transparency 2-342

DSCP trusted ports

applying DSCP-to-DSCP-mutation map to 2-332

defining DSCP-to-DSCP-mutation map 2-334

egress queues

allocating buffers 2-338

defining the CoS output queue threshold map 2-356

defining the DSCP output queue threshold map 2-358

displaying buffer allocations 2-632

displaying CoS output queue threshold map 2-636

displaying DSCP output queue threshold map 2-636

displaying queueing strategy 2-632

displaying queue-set settings 2-639

enabling bandwidth shaping and scheduling 2-774

enabling bandwidth sharing and scheduling 2-776

limiting the maximum output on a port 2-772

mapping a port to a queue-set 2-410, 2-427

mapping CoS values to a queue and threshold 2-356

mapping DSCP values to a queue and threshold 2-358

setting maximum and reserved memory allocations 2-340

setting WTD thresholds 2-340

enabling 2-326

ingress queues

allocating buffers 2-346

assigning SRR scheduling weights 2-344

defining the CoS input queue threshold map 2-348

defining the DSCP input queue threshold map 2-350

displaying buffer allocations 2-632

displaying CoS input queue threshold map 2-636

displaying DSCP input queue threshold map 2-636

displaying queueing strategy 2-632

displaying settings for 2-630

enabling the priority queue 2-352

mapping CoS values to a queue and threshold 2-348

mapping DSCP values to a queue and threshold 2-350

setting WTD thresholds 2-354

maps

defining 2-334, 2-348, 2-350, 2-356, 2-358

displaying 2-636

policy maps

applying an aggregate policer 2-398

applying to an interface 2-459, 2-464

creating 2-400

defining policers 2-328, 2-396

displaying policers 2-629

displaying policy maps 2-660

hierarchical 2-400

policed-DSCP map 2-334

setting DSCP or IP precedence values 2-462

traffic classifications 2-73

trust states 2-828

port trust states 2-360

queues, enabling the expedite 2-413

statistics

in-profile and out-of-profile packets 2-632

packets enqueued or dropped 2-632

sent and received CoS values 2-632

sent and received DSCP values 2-632

trusted boundary for IP phones 2-360

VLAN-based 2-362

quality of service

See QoS

querytime, MVR 2-368

queue-set command 2-410, 2-427

R

radius-server dead-criteria command 2-428

radius-server host command 2-430

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

rcommand command 2-432

re-authenticating IEEE 802.1x-enabled ports 2-150

re-authentication

periodic 2-151

time between attempts 2-155

receiver ports, MVR 2-371

receiving flow-control packets 2-173

recovery mechanism

causes 2-166

display 2-79, 2-488, 2-527, 2-529

timer interval 2-167

redundancy for cluster switches 2-109

relay-major command 2-12

relay-minor command 2-12

remote-span command 2-434

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-17

renew ip dhcp snooping database command 2-436

rep admin vlan command 2-438

rep block port command 2-439

rep lsl-age-timer command 2-442

rep preempt delay command 2-444

rep preempt segment command 2-446

rep segment command 2-447

rep stcn command 2-450

reset (boot loader) command A-18

resource templates, displaying 2-677

restricted VLAN

See dot1x auth-fail vlan

rmdir (boot loader) command A-19

rmon collection stats command 2-453

root guard, for spanning tree 2-735

routed ports

IP addresses on 2-185

number supported 2-185

RSPAN

configuring 2-363

displaying 2-642

filter RSPAN traffic 2-363

remote-span command 2-434

sessions

displaying 2-642

S

sdm prefer command 2-454

SDM templates

displaying 2-677

dual IPv4 and IPv6 2-454

secondary temperature alarm 2-10

secure ports, limitations 2-803

see PTP

sending flow-control packets 2-173

service password-recovery command 2-457

service-policy command 2-459

set (boot loader) command A-20

set command 2-462

setup command 2-464

setup express command 2-467

show access-lists command 2-469

show alarm description port 2-472

show alarm description port command 2-472

show alarm profile command 2-473

show alarm settings command 2-475

show archive status command 2-476

show arp access-list command 2-477

show authentication command 2-478

show auto qos command 2-482

show boot command 2-486

show cable-diagnostics tdr command 2-488

show cisp command 2-493

show class-map command 2-494

show cluster candidates command 2-497

show cluster command 2-495

show cluster members command 2-499

show controllers cpu-interface command 2-501

show controllers ethernet-controller command 2-503

show controllers power inline command 2-510

show controllers tcam command 2-513

show controller utilization command 2-515

show dot1q-tunnel command 2-517

show dot1x command 2-518

show dtp 2-522

show eap command 2-524

show env command 2-526

show errdisable detect command 2-527

show errdisable flap-values command 2-528

show errdisable recovery command 2-529

show etherchannel command 2-531

show facility-alarm relay command 2-534

show facility-alarm status 2-534

show facility-alarm status command 2-535

show fallback profile command 2-536

show fcs threshold command 2-537

show flowcontrol command 2-539

show interface rep command 2-551

show interfaces command 2-540

show interfaces counters command 2-549

show interfaces rep command 2-551

show inventory command 2-553

show ip arp inspection command 2-554

show ipc command 2-578

show ip dhcp snooping binding command 2-559

show ip dhcp snooping command 2-558

show ip dhcp snooping database command 2-562, 2-564

show ip igmp profile command 2-567

show ip igmp snooping address command 2-587

show ip igmp snooping command 2-568, 2-585

show ip igmp snooping groups command 2-570

show ip igmp snooping mrouter command 2-572, 2-589

show ip igmp snooping querier command 2-573, 2-591

show ip source binding command 2-575

show ipv6 access-list command 2-582

show ipv6 dhcp conflict command 2-584

show ipv6 route updated 2-593

show ip verify source command 2-576

show l2protocol-tunnel command 2-595

show lacp command 2-598

show link state group command 2-604

show location 2-602

show mac access-group command 2-606

show mac address-table address command 2-609

show mac address-table aging time command 2-611

show mac address-table command 2-607

show mac address-table count command 2-613

show mac address-table dynamic command 2-615

show mac address-table interface command 2-617

show mac address-table learning command 2-619

show mac address-table move update command 2-620

show mac address-table notification command 2-89, 2-622, B-25

show mac address-table static command 2-624

show mac address-table vlan command 2-626

show mls qos aggregate-policer command 2-629

show mls qos command 2-628

show mls qos input-queue command 2-630

show mls qos interface command 2-632

show mls qos maps command 2-636

show mls qos queue-set command 2-639

show mls qos vlan command 2-641

show monitor command 2-642

show mvr command 2-644

show mvr interface command 2-646

show mvr members command 2-648

show network-policy profile command 2-650

show nmsp command 2-652

show pagp command 2-655

show parser macro command 2-657

show platform acl command C-2

show platform backup interface command C-3

show platform configuration command C-4

show platform etherchannel command C-5

show platform forward command C-6

show platform igmp snooping command C-8

show platform ip multicast command C-9

show platform ip unicast command C-10

show platform ipv6 unicast command C-14

show platform ip wccp command C-13

show platform layer4op command C-16

show platform mac-address-table command C-17

show platform messaging command C-18

show platform monitor command C-19

show platform mvr table command C-20

show platform pm command C-21

show platform port-asic command C-22

show platform port-security command C-26

show platform qos command C-27

show platform resource-manager command C-28

show platform snmp counters command C-30

show platform spanning-tree command C-31

show platform stp-instance command C-32

show platform tcam command C-33

show platform vlan command C-36

show policy-map command 2-660

show port security command 2-662

show power inline command 2-665

show profinet 2-665

show psp config 2-669

show psp config command 2-669

show psp statistics 2-670

show psp statistics command 2-670

show ptp command 2-671

show rep topology command 2-674

show sdm prefer command 2-677

show setup express command 2-680

show spanning-tree command 2-681

show storm-control command 2-687

show system mtu command 2-689

show trust command 2-828

show udld command 2-690

show version command 2-693

show vlan access-map command 2-700

show vlan command 2-695

show vlan command, fields 2-697

show vlan filter command 2-701

show vmps command 2-702

show vtp command 2-704

shutdown command 2-711

shutdown threshold, Layer 2 protocol tunneling 2-274

shutdown vlan command 2-712

small violation-rate command 2-713

Smartports macros

See macros

SNMP host, specifying 2-719

SNMP informs, enabling the sending of 2-715

snmp-server enable traps command 2-715

snmp-server host command 2-719

snmp trap mac-notification change command 2-722

SNMP traps

enabling MAC address notification trap 2-722

enabling the MAC address notification feature 2-304

enabling the sending of 2-715

SoftPhone

See Cisco SoftPhone

software images

deleting 2-114

downloading 2-16

upgrading 2-16

uploading 2-22

software version, displaying 2-693

source ports, MVR 2-371

SPAN

configuring 2-363

debug messages, display B-26

displaying 2-642

filter SPAN traffic 2-363

sessions

add interfaces to 2-363

displaying 2-642

start new 2-363

spanning-tree backbonefast command 2-724

spanning-tree bpdufilter command 2-725

spanning-tree bpduguard command 2-727

spanning-tree cost command 2-729

spanning-tree etherchannel command 2-731

spanning-tree extend system-id command 2-733

spanning-tree guard command 2-735

spanning-tree link-type command 2-737

spanning-tree loopguard default command 2-739

spanning-tree mode command 2-741

spanning-tree mst configuration command 2-743

spanning-tree mst cost command 2-745

spanning-tree mst forward-time command 2-747

spanning-tree mst hello-time command 2-748

spanning-tree mst max-age command 2-749

spanning-tree mst max-hops command 2-750

spanning-tree mst port-priority command 2-752

spanning-tree mst pre-standard command 2-754

spanning-tree mst priority command 2-755

spanning-tree mst root command 2-756

spanning-tree portfast (global configuration) command 2-760

spanning-tree portfast (interface configuration) command 2-762

spanning-tree port-priority command 2-758

Spanning Tree Protocol

See STP

spanning-tree transmit hold-count command 2-764

spanning-tree uplinkfast command 2-765

spanning-tree vlan command 2-767

speed command 2-770

srr-queue bandwidth limit command 2-772

srr-queue bandwidth share command 2-776

SSH, configuring version 2-242

static-access ports, configuring 2-783

statistics, Ethernet group 2-453

sticky learning, enabling 2-801

storm-control command 2-778

STP

BackboneFast 2-724

counters, clearing 2-96

debug messages, display

BackboneFast events B-92

MSTP B-95

optimized BPDUs handling B-94

spanning-tree activity B-90

switch shim B-97

transmitted and received BPDUs B-93

UplinkFast B-99

detection of indirect link failures 2-724

EtherChannel misconfiguration 2-731

extended system ID 2-733

path cost 2-729

protocol modes 2-741

root port

accelerating choice of new 2-765

loop guard 2-735

preventing from becoming designated 2-735

restricting which can be root 2-735

root guard 2-735

UplinkFast 2-765

root switch

affects of extended system ID 2-733, 2-768

hello-time 2-767

interval between BDPU messages 2-767

interval between hello BPDU messages 2-767

max-age 2-767

port priority for selection of 2-758

primary or secondary 2-767

switch priority 2-767

state changes

blocking to forwarding state 2-762

enabling BPDU filtering 2-725, 2-760

enabling BPDU guard 2-727, 2-760

enabling Port Fast 2-760, 2-762

enabling timer to recover from error state 2-166

forward-delay time 2-767

length of listening and learning states 2-767

shutting down Port Fast-enabled ports 2-760

state information display 2-681

VLAN options 2-755, 2-767

SVIs, creating 2-179

SVI status calculation 2-785

Switched Port Analyzer

See SPAN

switching characteristics

modifying 2-781

returning to interfaces 2-781

switchport access command 2-783

switchport autostate exclude command 2-785

switchport backup interface command 2-787

switchport block command 2-791

switchport command 2-781

switchport host command 2-793

switchport mode command 2-794

switchport mode private-vlan command 2-797

switchport nonegotiate command 2-799

switchport port-security aging command 2-806

switchport port-security command 2-801

switchport priority extend command 2-808

switchport private-vlan command 2-810

switchport protected command 2-812

switchports, displaying 2-540

switchport trunk command 2-814

switchport voice vlan command 2-817

syslog command 2-12

system message logging 2-290

system message logging, save message to flash 2-291

system mtu command 2-819

system resource templates 2-454

T

tar files, creating, listing, and extracting 2-19

TDR, running 2-821

Telnet, using to communicate to cluster switches 2-432

temperature alarms, setting 2-10

templates, system resources 2-454

test cable-diagnostics tdr command 2-821

test relay 2-822

test relay command 2-822

traceroute mac command 2-823

traceroute mac ip command 2-826

trunking, VLAN mode 2-794

trunk mode 2-794

trunk ports 2-794

trunks, to non-DTP device 2-795

trusted boundary for QoS 2-360

trusted port states for QoS 2-360

tunnel ports, Layer 2 protocol, displaying 2-595

type (boot loader) command A-23

U

UDLD

aggressive mode 2-830, 2-832

debug messages, display B-107

enable globally 2-830

enable per interface 2-832

error recovery timer 2-166

message timer 2-830

normal mode 2-830, 2-832

reset a shutdown interface 2-834

status 2-690

udld command 2-830

udld port command 2-832

udld reset command 2-834

unicast storm control 2-778

UniDirectional Link Detection

See UDLD

unknown multicast traffic, preventing 2-791

unknown unicast traffic, preventing 2-791

unset (boot loader) command A-25

upgrading

software images

downloading 2-16

monitoring status of 2-476

UplinkFast, for STP 2-765

user EXEC mode 1-2

V

version (boot loader) command A-27

vlan (global configuration) command 2-835

vlan access-map command 2-840

VLAN access map configuration mode 2-840

VLAN access maps

actions 2-6

displaying 2-700

VLAN-based QoS 2-362

VLAN configuration

rules 2-838

saving 2-835

VLAN configuration mode

description 1-4

entering 2-835

summary 1-2

vlan dot1q tag native command 2-842

vlan filter command 2-844

VLAN filters, displaying 2-701

VLAN ID range 2-835

VLAN maps

applying 2-844

creating 2-840

defining 2-319

displaying 2-700

VLAN Query Protocol

See VQP

VLANs

adding 2-835

configuring 2-835

debug messages, display

ISL B-103

VLAN IOS file system error tests B-102

VLAN manager activity B-100

VTP B-105

displaying configurations 2-695

enabling guest VLAN supplicant 2-126, 2-137, 2-171

extended-range 2-835

MAC addresses

displaying 2-626

number of 2-613

media types 2-838

normal-range 2-835

private 2-797

configuring 2-415

See also private VLANs

restarting 2-712

saving the configuration 2-835

shutting down 2-712

SNMP traps for VTP 2-717

suspending 2-712

VLAN Trunking Protocol

See VTP

VMPS

configuring servers 2-849

displaying 2-702

error recovery timer 2-167

reconfirming dynamic VLAN assignments 2-846

vmps reconfirm (global configuration) command 2-847

vmps reconfirm (privileged EXEC) command 2-846

vmps retry command 2-848

vmps server command 2-849

voice VLAN

configuring 2-817

setting port priority 2-808

VQP

and dynamic-access ports 2-784

clearing client statistics 2-98

displaying information 2-702

per-server retry count 2-848

reconfirmation interval 2-847

reconfirming dynamic VLAN assignments 2-846

VTP

changing characteristics 2-851

clearing pruning counters 2-99

configuring

domain name 2-851

file name 2-851

mode 2-851

password 2-852

counters display fields 2-705

displaying information 2-704

enabling

pruning 2-852

Version 2 2-852

enabling per port 2-856

mode 2-851

pruning 2-852

saving the configuration 2-835

statistics 2-704

status 2-704

status display fields 2-708

vtp (global configuration) command 2-851

vtp interface configuration) command 2-856

vtp primary command 2-857