Feedback
Table Of Contents
show mac-address-table aging-time
show mac-address-table dynamic
show mac-address-table learning
show mmls igmp explicit-tracking
show platform software status control-processor
set port flowcontrol
To set the receive flow-control value for a particular Gigabit Ethernet switching module port, use the set port flowcontrol command in privileged EXEC mode. To reset the receive flow-control value to the default, use the no form of this command.
set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
no set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
Syntax Description
Command Default
receive—off
send—desiredDefault on multiplexed ports is on. The exception to these defaults applies to the 18-port Gigabit Ethernet switching module. For this module, the defaults are shown below:
•
Ports 1-2—send is off and receive is desired
•
Command Modes
Privileged EXEC (#)
Command History
12.2(11)T
This command was introduced and implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
Usage Guidelines
This command is supported only on Gigabit Ethernet switching modules.
Examples
The following examples show how to use the set port flowcontrol command set.
The following example show how to set the port 5/1 flow-control receive administration status to on (port requires far end to send flow-control packets):
Router#set port flowcontrol receive 5/1 onThe following example show how to set the port 5/1 flow-control receive administration status to desired (port allows far end to send flow-control packets if far end supports it):
Router#set port flowcontrol receive 5/1 desiredThe following example show how to set the port 5/1 flow-control receive administration status to off (port does not allow far end to send flow-control packets):
Router#set port flowcontrol receive 5/1 offThe following example show how to set port 5/1 flow-control send administration status t o on (port sends flow-control packets to far end):
Router#set port flowcontrol send 5/1 onThe following example show how to set port 5/1 flow-control send administration status to desired (port sends flow-control packets to far end if far end supports it):
Router# set port flowcontrol send 5/1 desired
The following example show how to set port 5/1 flow-control send administration status to off (port does not send flow-control packets to far end):
Router#set port flowcontrol send 5/1 offRelated Commands
show port flowcontrol
Displays per-port status information and statistics related to flow control.
set vlan
To group ports into a virtual LAN (VLAN), use the set vlan vlan-number module/port command in privileged EXEC mode.
set vlan vlan-number module/port
To set advanced VLAN options for VLANs, use the advanced keywords.
set vlan vlan-number [name name] [type {ethernet | fddi | fddinet | trcrf | trbrf}]
[state {active | suspend}] [sa-id sa-id] [mtu mtu] [ring hex-ring-number]
[decring decimal-ring-number] [bridge bridge-number] [parent vlan-number] [mode {srt |
srb}] [stp {ieee | ibm | auto}] [translation vlan-number] [backupcrf {off | on}]
[aremaxhop hop-count] [stemaxhop hop-count]Syntax Description
Command Default
The default configuration has all switched Ethernet ports and Ethernet repeater ports in VLAN 1. Additional defaults are:
•
•
•
•
Defaults for TRBRFs and TRCRFs are:
•
•
•
•
•
•
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
You cannot use the set vlan command until the networking device is in Virtual Trunking Protocol (VTP) transparent mode (set vtp mode) or until a VTP domain name has been set (set vtp).
Valid MTU values for a Token Ring VLAN are 1500 or 4472. You can enter any value but it defaults to the next lowest valid value.
You cannot set multiple VLANs for Inter-Switch Link (ISL) ports using this command. The VLAN name can be from 1 to 32 characters in length. If you add a new VLAN, the VLAN number must be within the range of 2 to 1001. When you modify a VLAN, the valid range for the VLAN number is 2 to 1005.
On a new Token Ring VLAN, if you do not specify the parent parameter for a TRCRF, the default TRBRF (1005) is used.
Examples
The following example shows how to set VLAN 850 to include ports 4 through 7 on module 3. Because ports 4 through 7 were originally assigned to TRCRF 1003, the message reflects the modification of VLAN 1003.
Router# set vlan 850 3/4-7VLAN 850 modified.VLAN 1003 modified.VLAN Mod/Ports---- -----------------------850 3/4-7Related Commands
clear vlan
Deletes an existing VLAN from a management domain.
show vlans
Displays VLAN subinterfaces.
set vlan mapping
To map 802.1Q virtual LANs (VLANs) to Inter-Switch Link (ISL) VLANs, use the set vlan mapping command in privileged EXEC mode.
set vlan mapping dot1q 1q-vlan-number isl isl-vlan-number
Syntax Description
Command Default
No 802.1Q-to-ISL mappings are defined.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
IEEE 802.1Q VLAN trunks support VLANs 1 through 4095. ISL VLAN trunks support VLANs 1 through 1000. The switch automatically maps 802.1Q VLANs 1000 and lower to ISL VLANs with the same number.
The native VLAN of the 802.1Q trunk cannot be used in the mapping.
Use this feature to map 802.1Q VLANs above 1000 to ISL VLANs. If you map an 802.1Q VLAN over 1000 to an ISL VLAN, the corresponding 802.1Q VLAN will be blocked. For example, if you map 802.1Q VLAN 2000 to ISL VLAN 200, then 802.1Q VLAN 200 will be blocked.
You can map up to seven VLANs. Only one 802.1Q VLAN can be mapped to an ISL VLAN. For example, if 802.1Q VLAN 800 has been automatically mapped to ISL VLAN 800, do not manually map any other 802.1Q VLANs to ISL VLAN 800.
You cannot overwrite existing 802.1Q VLAN mapping. If the 802.1Q VLAN number is in the mapping table, the command is aborted. You must first clear that mapping.
If vlan-number does not exist, then either of the following occurs:
•
•
If the table is full, the command is aborted with an error message indicating the table is full.
Examples
The following example shows how to map VLAN 1022 to ISL VLAN 850:
Router# set vlan mapping dot1q 1022 isl 850Vlan 850 configuration successfulVlan mapping successfulThe following example shows the display if you enter a VLAN that does not exist:
Router# set vlan mapping dot1q 1017 isl 999Vlan mapping successfulWarning: vlan 999 non-existentVlan 999 configuration successfulThe following example shows the display if you enter an existing mapping:
Router# set vlan mapping dot1q 1033 isl 722722 exists in the mapping table. Please clear the mapping first.The following example shows the display if the mapping table is full:
Router# set vlan mapping dot1q 1099 isl 917Vlan Mapping Table Full.Related Commands
clear vlan mapping
Deletes existing 802.1Q VLAN to ISL VLAN-mapped pairs.
show vlans
Displays VLAN subinterfaces.
show
To verify the Multiple Spanning Tree (MST) configuration, use the show command in MST configuration mode.
show [current | pending]
Syntax Description
current
(Optional) Displays the current configuration that is used to run MST.
pending
(Optional) Displays the edited configuration that will replace the current configuration.
Command Default
This command has no default settings.
Command Modes
MST configuration (config-mst)
Command History
Usage Guidelines
The display output from the show pending command is the edited configuration that will replace the current configuration if you enter the exit command to exit MST configuration mode.
Entering the show command with no arguments displays the pending configurations.
Examples
This example shows how to display the edited configuration:
Router(config-mst)# show pendingPending MST configurationName [zorglub]Version 31415Instance Vlans Mapped-------- ---------------------------------------------------------------------0 4001-40962 1010, 1020, 1030, 1040, 1050, 1060, 1070, 1080, 1090, 1100, 111011203 1-1009, 1011-1019, 1021-1029, 1031-1039, 1041-1049, 1051-10591061-1069, 1071-1079, 1081-1089, 1091-1099, 1101-1109, 1111-11191121-4000------------------------------------------------------------------------------Router(config-mst)#This example shows how to display the current configuration:
Router(config-mst)# show currentCurrent MST configurationName []Revision 0Instance Vlans mapped-------- ---------------------------------------------------------------------0 1-4094-------------------------------------------------------------------------------Related Commands
show controllers fastethernet
To display information about initialization block, transmit ring, receive ring, Fast Ethernet interface information, applicable MAC destination address and VLAN filtering tables, and errors for the Fast Ethernet controller chip, use the show controllers fastethernet command in user EXEC or privileged EXEC mode.
Standard Syntax
show controllers fastethernet number
Cisco 7200 Series
show controllers fastethernet slot/port
Cisco 7500 Series
show controllers fastethernet slot/port-adapter/port
Shared Port Adapter
show controllers fastethernet slot/subslot/port [detail]
Syntax Description
Command Modes
User EXEC (>)
Privileged EXEC (#)Command History
Usage Guidelines
The output from this command is generally useful for diagnostic tasks performed by technical support.
Shared Port Adapter Usage Guidelines
The output from the show controllers fastethernet command for the 4-Port 10/100 Fast Ethernet SPA provides several different sections of information and statistics that are organized according to the internal hardware devices and the various paths in the flow of data on the SPA. The following sections are provided:
•
•
•
•
•
•
•
•
Several areas of the output are generally useful for diagnostic tasks performed by Cisco Systems technical support personnel only.
Examples
The following is a sample output from the show controllers fastethernet command on a Cisco 4500 series router:
Router# show controllers fastethernet 0DEC21140 Slot 0, Subunit 0dec21140_ds=0x60001234, registers=0x3c001000, ib=0x42301563, ring entries=256rxring=0x40235878, rxr shadow=0x64528745, rx_head=0, rx_tail=10txring=0x43562188, txr shadow=0x65438721, tx_head=17, tx_tail=34, tx_count=17DEC21140 RegistersCSR0=0x23457667, CSR3=0x12349878, CSR4=0x34528745, CSR5=0x76674565CSR6=0x76453676, CSR7=0x76456574, CSR8=0x25367648, CSR9=0x87253674CSR11=0x23456454, CSR12=0x76564787, CSR15=0x98273465DEC21140 PCI registersbus_no=0, device_no=0CFID=0x12341234, CFCS=0x76547654, CFRV=0x87658765, CFLT=0x98769876CBIO=0x12344321, CBMA=0x23454321, CFIT=0x34567654, CFDA=0x76544567MII registersRegister 0x00: 0x1234 0x1234 0x2345 0x3456 0x4567 0x5678 0x6789 0x7890Register 0x08: 0x9876 0x8765 0x7654 0x6543 0x5432 0x4321 0x3210 0x2109Register 0x10: 0x1234 0x2345 0x3456 0x4567 0x5678 0x6789 0x7890Register 0x18: 0x9876 0x8765 0x7654 0x6543 0x5432 0x4321DEC21140 statisticsfiltered_in_sw=1000, throttled=10, enabled=10rx_fifo_overflow=10, rx_no_enp=12, rx_late_collision=18rx_watchdog=15, rx_process_stopped=15, rx_buffer_unavailable=1500tx_jabber_timeout=10, tx_carrier_loss=2, tx_deffered=15tx_no_carrier=1, tx_late_collision=10, tx_excess_coll=10tx_process_stopped=1, fata_tx_err=0The following is a sample output from the show controllers fastethernet command on a Cisco AS5300 router:
Router# show controller fastethernet 0DEC21140Setup Frame(0 ) 00e0.1e3e.c179(1 ) 0100.0ccc.cccc(2 ) 0900.2b00.000f(3 ) 0900.2b02.0104(4 ) 0300.0000.0001dec21140_ds=0x60BD33B8, registers=0x3C210000, ib=0x4002F75C, ring entries=32rxring=0x4002F844, rxr shadow=0x60F14B58, rx_head=6, rx_tail=6txring=0x4002FA6C, txr shadow=0x60F14BF8, tx_head=10, tx_tail=10, tx_count=0tx_size=32, rx_size=32PHY link upDEC21140 Registers:CSR0=0xFE024480, CSR3=0x4002F844, CSR4=0x4002FA6C, CSR5=0xFC660000CSR6=0x322C2002, CSR7=0xFFFFA241, CSR8=0xE0000000, CSR9=0xFFFDC3FFCSR11=0xFFFE0000, CSR12=0xFFFFFF09, CSR15=0xFFFFFEC8DEC21140 PCI registers:bus_no=2, device_no=0CFID=0x00091011, CFCS=0x82800005, CFRV=0x02000021, CFLT=0x0000FF00CBIO=0x3C210001, CBMA=0x00000000, CFIT=0x28140100, CFDA=0x00000000MII registers:Register 0x00: 0000 784D 2000 5C01 0001 0000 0000 0000Register 0x08: 0000 0000 0000 0000 0000 0000 0000 0000Register 0x10: 0000 0000 0000 0000 0000 0001 8060Register 0x18: 8020 0840 0000 3000 A3B9throttled=7, enabled=7rx_fifo_overflow=0, rx_no_enp=0, late_collision=0rx_watchdog=0, rx_process_stopped=0, rx_buffer_unavailable=0tx_jabber_timeout=0, tx_carrier_loss=1, tx_deferred=0tx_no_carrier=1, tx_late_collision=0, tx_excess_coll=0tx_process_stopped=0, fatal_tx_err=0overflow_resets=00 missed datagrams, 0 overruns0 transmitter underruns, 0 excessive collisions0 single collisions, 0 multiple collisions0 dma memory errors, 0 CRC errors0 alignment errors, 0 runts, 0 giantsThe following is a sample output from the show controllers fastethernet command on a Cisco 7200 series router:
Router# show controllers fastethernet 0/0Interface Fast Ethernet0/0Hardware is DEC21140dec21140_ds=0x60895888, registers=0x3C018000, ib=0x4B019500rx ring entries=128, tx ring entries=128rxring=0x4B019640, rxr shadow=0x60895970, rx_head=0, rx_tail=0txring=0x4B019EC0, txr shadow=0x60895B98, tx_head=77, tx_tail=77, tx_count=0CSR0=0xFFFA4882, CSR3=0x4B019640, CSR4=0x4B019EC0, CSR5=0xFC660000CSR6=0xE20CA202, CSR7=0xFFFFA241, CSR8=0xFFFE0000, CSR9=0xFFFDD7FFCSR11=0xFFFE0000, CSR12=0xFFFFFF98, CSR15=0xFFFFFEC8DEC21140 PCI registers:bus_no=0, device_no=6CFID=0x00091011, CFCS=0x02800006, CFRV=0x02000012, CFLT=0x0000FF00CBIO=0x7C5AFF81, CBMA=0x48018000, CFIT=0x0000018F, CFDA=0x0000AF00MII registers:Register 0x00: 2000 780B 2000 5C00 01E1 0000 0000 0000Register 0x08: 0000 0000 0000 0000 0000 0000 0000 0000Register 0x10: 0000 0000 0000 0000 0000 0000 8040Register 0x18: 8000 0000 0000 3800 A3B9throttled=0, enabled=0, disabled=0rx_fifo_overflow=0, rx_no_enp=0, rx_discard=0tx_underrun_err=0, tx_jabber_timeout=0, tx_carrier_loss=1tx_no_carrier=1, tx_late_collision=0, tx_excess_coll=0tx_collision_cnt=0, tx_deferred=0, fatal_tx_err=0, mult_ovfl=0HW addr filter: 0x60895FC0, ISL EnabledEntry= 0: Addr=0100.0CCC.CCCCEntry= 1: Addr=0300.0000.0001Entry= 2: Addr=0100.0C00.0000Entry= 3: Addr=FFFF.FFFF.FFFFEntry= 4: Addr=FFFF.FFFF.FFFFEntry= 5: Addr=FFFF.FFFF.FFFFEntry= 6: Addr=FFFF.FFFF.FFFFEntry= 7: Addr=FFFF.FFFF.FFFFEntry= 8: Addr=FFFF.FFFF.FFFFEntry= 9: Addr=FFFF.FFFF.FFFFEntry=10: Addr=FFFF.FFFF.FFFFEntry=11: Addr=FFFF.FFFF.FFFFEntry=12: Addr=FFFF.FFFF.FFFFEntry=13: Addr=FFFF.FFFF.FFFFEntry=14: Addr=FFFF.FFFF.FFFFEntry=15: Addr=0060.3E28.6E00Shared Port Adapter Examples
The following is sample output from the show controllers fastethernet command for the first interface (port 0) on a 4-Port 10/100 Fast Ethernet SPA that is located in the top subslot (0), of the MSC that is installed in slot 4 on a Cisco 7304 router:
Router# show controllers fastethernet 4/0/0Interface FastEthernet4/0/0Hardware is SPA-4FE-7304Connection mode is auto-negotiationInterface state is up, link is upConfiguration is Auto Speed, Auto DuplexSelected media-type is RJ45Promiscuous mode is off, VLAN filtering is enabledMDI crossover status: MDIAuto-negotiation configuration and status:Auto-negotiation is enabled and is completedSpeed/duplex is resolved to 100 Mbps, full duplexAdvertised capabilities: 10M/HD 10M/FD 100M/HD 100M/FD Pause capable (Asymmetric)Partner capabilities: 10M/HD 10M/FD 100M/HD 100M/FD Pause capableMAC counters:Input: packets = 15, bytes = 1776FIFO full/reset removed = 0, error drop = 0Output: packets = 18, bytes = 2622FIFO full/reset removed = 0, error drop = 0Total pause frames: transmitted = 0, received = 0FPGA counters:Input: Total (good & bad) packets: 15, TCAM drops: 4Satisfy (host-backpressure) drops: 0, CRC drops: 0PL3 RERRs: 0Output: EOP (SPI4) errors: 0SPA carrier card counters:Input: packets = 11, bytes = 1476, drops = 0Output: packets = 18, bytes = 2550, drops = 0Egress flow control status: XONPer bay counters:General errors: input = 0, output = 0SPI4 errors: ingress dip4 = 0, egress dip2 = 0SPA Error counters:SPI4 TX out of frame error = 2 (00:02:31 ago)SPI4 TX Train valid error = 1 (00:02:11 ago)SPI4 TX DIP4 error = 1 (00:01:30 ago)SPI4 RX out of frame error = 1 (00:00:36 ago)SPI4 RX DIP2 error = 1 (00:00:13 ago)MAC destination address filtering table:Table entries: Total = 512, Used = 4, Available = 508Index MAC destination address Mask----- ----------------------- --------------1 0007.0ed3.ba80 ffff.ffff.ffff2 ffff.ffff.ffff ffff.ffff.ffff3 0100.0000.0000 0100.0000.00004 0100.0ccc.cccc ffff.ffff.ffffVLAN filtering table:Number of VLANs configured on this interface = 0Table entries: Total = 1024, Used = 2, Available = 1022Index VLAN identifier Enabled Tunnel----- --------------- ------- ------1 0 No No2 0 Yes NoPlatform details:PXF tif number: 0x10Table 6 describes the fields shown in the interface configuration section of the display. This section is useful for verifying the status of autonegotiation and configured parameters on the link, and the amount of traffic being handled by the interface.
Table 7 describes the fields shown in the MAC counters section of the display. This section is useful for verifying the status of packets processed by the MAC device for the interface. This information is useful for Cisco Systems technical support personnel.
Table 8 describes the fields shown in the FPGA counters section of the display. This section is useful for verifying the status of packets processed by the FPGA device for the interface. This information is useful for Cisco Systems technical support personnel.
Table 9 describes the fields shown in the SPA carrier card counters section of the display. This section is useful for verifying the status of packets processed by the MSC for the interface. This information is useful for Cisco Systems technical support personnel.
Table 10 describes the fields shown in the SPA error counters section of the display. This section appears only when one of the SPI4 transmit or receive errors occurs on the interface. This information is useful for Cisco Systems technical support personnel.
Note
All of the errors in the SPA error counters section are subject to the SPA automatic recovery process when certain thresholds are reached.
Table 11 describes the fields shown in the MAC destination address filtering table section of the display. This section is useful for verifying the multicast destination addresses that are in the TCAM table and permitted by the interface. This information is useful for Cisco Systems technical support personnel.
Table 12 describes the fields shown in the VLAN filtering table section of the display. This section is useful for verifying the VLANs that are in the TCAM table and are permitted by the interface. This information is useful for Cisco Systems technical support personnel.
Table 13 describes the fields shown in the Platform details section of the display.
Related Commands
show interfaces fastethernet
Displays information about the Fast Ethernet interfaces.
show cwan
To display the WAN statistics and information about the hidden VLAN-to-WAN interface, use the show cwan command in user EXEC mode.
show cwan {stats | vlans}
Syntax Description
stats
Displays information about the WAN statistics.
vlans
Displays the hidden VLAN-to-WAN interface mapping.
Command Default
This command has no default settings.
Command Modes
User EXEC (>)
Command History
12.2(17d)SXB
Support for this command was introduced on the Supervisor Engine 2.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 720.
The show vlan internal usage command displays the internal VLANs that are allocated to WAN interfaces as Layer 3 VLANs but does not display the associated subinterfaces. To display the associated subinterfaces, enter the show cwan vlans command. The show cwan vlans command displays the mapping between the WAN subinterface and the internal VLANs in use.
Examples
This example shows how to display the information about the WAN port statistics:
Router# show cwan stats0 unknown VLANs0 ATM packets with zero src_ltl or inactive VC0 unknown enctype0 output unknown enctype drops0 particle alloc failures0 pak alloc failuresRouter#This example shows how to display the hidden VLAN-to-WAN interface mappings:
Router# show cwan vlansHidden VLAN swidb->if_number Interface-----------------------------------------------1017 75 ATM2/0/01018 90 ATM2/0/0.541019 92 ATM2/0/0.561020 93 ATM2/0/0.571021 94 ATM2/0/0.1001022 95 ATM2/0/0.1011023 96 ATM2/0/0.1021024 97 ATM2/0/0.1031025 98 ATM2/0/0.1101026 99 ATM2/0/0.1111027 100 ATM2/0/0.1121028 101 ATM2/0/0.1131029 102 ATM2/0/0.1201030 103 ATM2/0/0.2001031 104 ATM2/0/0.2011032 105 ATM2/0/0.2021033 106 ATM2/0/0.2031067 76 POS4/11068 77 POS4/21071 79 GE-WAN5/21072 80 GE-WAN5/31073 81 GE-WAN5/4Recycled VLAN Interface-----------------------------Pending recycle holdtime(ms) Interface-------------------------------------------Router#Related Commands
ip access-list hardware permit fragments
Permits all noninitial fragments in the hardware.
show cwan qinq
To display the inner, outer, and trunk VLANs that are used in IEEE 802.1Q-in-802.1Q (QinQ) translation, use the show cwan qinq command in privileged EXEC mode.
show cwan qinq [configured | detail | list]
Syntax Description
Command Default
The inner, outer, and trunk VLANs that are used in IEEE 802.1Q-in-802.1Q (QinQ) translation are not displayed.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
This command is supported on the Gigabit Ethernet WAN interfaces on Cisco 7600 series routers that are configured with an Optical Services Module (OSM)-2+4GE-WAN+ OSM module only.
OSMs are not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 32.
The show cwan qinq command shows a summary of the QinQ translations being performed. See the other related commands for additional information:
•
•
•
Examples
This example shows the typical output from the show cwan qinq command:
Router# show cwan qinqBridge-domain Interface Egress-if Inner-start Total Active32 GE4/4 GE4/4 32 1 1Sub-Interface Trunk-vlan Inner-vlan Service StateGE4/4.1 101 32 dot1q up/downBridge-domain Interface Egress-if Inner-start Total Active888 Po1 GE4/1 32 1 1Sub-Interface Trunk-vlan Inner-vlan Service StatePo1.1 101 32 dot1q up/upRouter#Table 14 describes the fields shown in the display.
Related Commands
show cwan qinq bridge-domain
To display the provider-edge VLAN IDs that are used on a Gigabit Ethernet WAN interface for 802.1Q in 802.1Q (QinQ) translation or to show the customer-edge VLANs that are used for a specific provider-edge VLAN, use the show cwan qinq bridge-domain command in privileged EXEC mode.
show cwan qinq bridge-domain [pe-vlan-id]
Syntax Description
pe-vlan-id
(Optional) Information for the specified provider-edge VLAN ID; valid values are from 1 to 4094.
Command Default
If you do not specify a vlan-id, the provider-edge VLANs that are configured for each Gigabit Ethernet WAN interface displays.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
This command is supported on the GE-WAN interfaces on Cisco 7600 series routers that are configured with an Optical Services Module (OSM)-2+4GE-WAN+ OSM module only.
OSMs are not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 32.
Examples
This example shows typical output from the show cwan qinq bridge-domain command. This output displays the provider-edge VLANs (bridge VLANs) for all GE-WAN interfaces on the Catalyst 6500 series switch:
Router# show cwan qinq bridge-domainGE-WAN5/1, group 1, total_rate 22, 4062GE-WAN5/2, group 1, total_rate 1150GE-WAN5/3, group 1, total_rate 2100, 1000GE-WAN5/4, group 1, total_rate 163-5, 7-10,12-15,18-20,22, 4094Port-channel1, group 1, total_rate 21Router#This example shows typical output for a specific provider-edge VLAN:
Router# show cwan qinq bridge-domain 4094Bridge-domain Interface Egress-if Inner-start Service Count4093 GE5/4 GE2/3 192 31Sub-Interface Trunk-vlan Inner-vlan ServiceGE5/4.4000 4000 default dot1q-tunnel out-ranGE5/4.4062 4062 1 dot1q-tunnelGE5/4.4064 4064 3 dot1q-tunnelGE5/4.4067 4067 6 dot1q-tunnelGE5/4.4068 4068 7 dot1q-tunnel...Table 15 describes the fields shown in the display.
Related Commands
show cwan qinq interface
To display interface statistics for IEEE 802.1Q-in-802.1Q (QinQ) translation on one or all Gigabit Ethernet WAN interfaces and port-channel interfaces, use the show cwan qinq interface command in privileged EXEC mode.
show cwan qinq interface [gigabitethernet [slot/port[.subint]] | port-channel channel-number [.subint]]
Syntax Description
Command Default
If you enter this command without any arguments, it displays information for all the Gigabit Ethernet WAN interfaces in the Catalyst 6500 series switch.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
This command is supported on the Gigabit Ethernet WAN interfaces on Cisco 7600 series routers that are configured with an Optical Services Module (OSM)-2+4GE-WAN+ OSM module only.
OSMs are not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 32.
The valid range for user-created port-channel numbers is from 1 to 256. Channel numbers 257 to 282 are system-created channels that are used internally, and their statistics are typically useful only for help in troubleshooting and debugging.
The show cwan qinq interface command displays the same interface counters that are shown by the show interfaces command but displays them by subinterface with the associated QinQ provider-edge and customer-edge VLANs.
Examples
This example shows the output from the show cwan qinq interface command:
Router# show cwan qinq interfaceInterface Status Egress op PE CE TRNK Input packets/ Output packets/Input bytes Output bytes---------------- --------- ------ -- ---- ---- ---- -------------------- ----------------GE1/2.500 up GE3/3 1 50 3200 500 0 00 0GE1/2.501 up GE3/3 1 50 3201 501 3586 3498466294 412323GE1/2.502 up GE3/3 1 50 3202 502 3577 3481464844 410704...Router#This example shows the output for a specific interface:
Router# show cwan qinq interface GE-WAN 1/2Interface Status Egress op PE CE TRNK Input packets/ Output packets/Input bytes Output bytes---------------- --------- ------ -- ---- ---- ---- -------------------- ----------------GE1/2.500 up GE7/0 1 50 3200 500 626485 63571492579036 508305780GE1/2.501 up GE7/0 1 50 3201 501 626483 63571492579644 508305780GE1/2.502 up GE7/0 1 50 3202 502 626485 63571492701011 508305780...Router#This example shows the output for a specific subinterface:
Router# show cwan qinq interface GE-WAN 5/1.1000Interface Status Egress op PE CE TRNK Input packets/ Output packets/Input bytes Output bytes---------------- --------- ------ -- ---- ---- ---- -------------------- ----------------GE5/1.1000 up GE3/1 1 2 2496 1000 476790463 1210875347168162431 1110048768Router#This example shows an excerpt from the typical output for a specific subinterface:
Router# show cwan qinq interface GE-WAN 5/1.1000Interface Status Egress op PE CE TRNK Input packets/ Output packets/Input bytes Output bytes---------------- --------- ------ -- ---- ---- ---- -------------------- ----------------GE5/1.1000 up GE3/1 1 2 2496 1000 476790463 1210875347168162431 1110048768Router#This example shows an excerpt from the typical output for a specific port-channel virtual interface:
Router# show cwan qinq interface port 3Interface Status Egress op PE CE TRNK Input packets/ Output packets/Input bytes Output bytes---------------- --------- ------ -- ---- ---- ---- -------------------- ----------------Po3.101 up/up GE2/3 1 150 223 323 59759000 239713824576384 819613Po3.102 up/up GE2/3 1 150 222 324 59758987 239143824575552 818231...Router#Table 16 describes the fields shown in the displays.
Related Commands
show cwan qinq load-balance
To display load-balancing statistics for IEEE 802.1Q-in-802.1Q (QinQ) translation on one or all Gigabit Ethernet WAN interfaces and port-channel interfaces, use the show cwan qinq load-balance command in privileged EXEC mode.
show cwan qinq load-balance [channel-number | configured | detail | list]
Syntax Description
Command Default
If you enter this command without any options, it displays information for all Gigabit Ethernet WAN and port-channel interfaces in the router.
Command Modes
Privileged EXEC (#)
Command History
12.2(18)SXE
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Examples
This example shows an excerpt from the typical output from the default form of the show cwan qinq load-balance command:
Router# show cwan qinq load-balancePort-channel10 total 505 bridge-domain vlan(s) activePo10 - GE-WAN3/1 has 167 bridge-domain vlan(s) activePo10 - GE-WAN3/2 has 169 bridge-domain vlan(s) activePo10 - GE-WAN9/1 has 169 bridge-domain vlan(s) activePort-channel20 total 4 bridge-domain vlan(s) activePo20 - GE-WAN3/3 has 1 bridge-domain vlan(s) activePo20 - GE-WAN3/4 has 1 bridge-domain vlan(s) activePo20 - GE-WAN9/2 has 1 bridge-domain vlan(s) activePo20 - GE-WAN9/3 has 1 bridge-domain vlan(s) activeRouter#This example shows typical output when using the configured keyword:
Router# show cwan qinq load-balance configuredPort-channel1 total 1 bridge-domain vlan(s) activePo1 - GE-WAN4/1 has 1 bridge-domain vlan(s) activeGE-WAN4/1 has 1 bridge-domain vlan(s) configured: 888Po1 - GE-WAN8/1 has 0 bridge-domain vlan(s) activeGE-WAN8/1 has 1 bridge-domain vlan(s) configured: 889Router#This example shows typical output when using the list keyword:
Router# show cwan qinq load-balance listPort-channel1 total 1 bridge-domain vlan(s) activePo1 - GE-WAN4/1 has 1 bridge-domain vlan(s) activePo1 - GE-WAN4/1 active vlan(s): 888Po1 - GE-WAN8/1 has 0 bridge-domain vlan(s) activePo1 - GE-WAN8/1 active vlan(s): 889Router#This example shows typical output when using the detail keyword:
Router# show cwan qinq load-balance detailPort-channel1 total 1 bridge-domain vlan(s) activePo1 - GE-WAN4/1 has 1 bridge-domain vlan(s) activeBridge-domain Inner Configured Active------------- ------ ---------- ------888 active 3 2Po1 - GE-WAN8/1 has 0 bridge-domain vlan(s) activeBridge-domain Inner Configured Active------------- ------ ---------- ------889 - 1 0Router#Table 17 describes the fields shown in this display.
Related Commands
show cwan qinq port-channel
To display IEEE 802.1Q-in-802.1Q (QinQ) statistics for one or all configured QinQ link bundles (port channels), use the show cwan qinq port-channel command in privileged EXEC mode.
show cwan qinq port-channel [detail channel-number]
Syntax Description
detail channel-number
(Optional) Displays statistics for a specific port-channel group; valid values are from 1 to 256.
Command Default
If you use this command without the detail keyword, it displays statistics for all configured QinQ link bundles.
Command Modes
Privileged EXEC (#)
Command History
12.2(18)SXE
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command displays the QinQ-related information for one or all port-channel groups that are being used for QinQ link bundles.
Note
Examples
This example shows an excerpt from the typical output from the default form of the show cwan qinq port-channel command:
Router# show cwan qinq port-channelGroup : WAN if_num idb pagp if_num idb port--------- ------------ d----- x------- ------------ d----- x------- d--Group 1 : GE-WAN9/1 67 43CABB20 GE-WAN 9/1 88 4529B710 5Router#Table 18 describes the fields shown in the display.
show cwtlc qinq
To display the information that is related to IEEE 802.1Q-in-802.1Q (QinQ) translation and is contained in the XCM onboard the supervisor engine, use the show cwtlc qinq command in privileged EXEC mode.
show cwtlc qinq port [outer-vlan vlan-id [inner-vlan-id] | trunk-vlan vlan-id]
show cwtlc qinq qos
Syntax Description
Command Default
If you do not specify a specific VLAN ID, the command displays information for all VLANs.
Command Modes
Privileged EXEC (#)
Command History
12.2(18)SXD
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is supported on the Gigabit Ethernet WAN interfaces on Cisco 7600 series routers that are configured with an Optical Services Module (OSM)-2+4GE-WAN+ OSM module only.
OSMs are not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 32.
Examples
This example shows the output for a specific combination of provider-edge and customer-edge VLAN IDs:
Router# show cwtlc qinq 0 outer-vlan 20 21TX VLAN FUNC TABLEfunc 4, ce vlan base 0, value 4TX VLAN TABLEtx vlan status 1TX ADJ TABLEce_vlan_offset trunk_vlan op_code src_ltl def_fn pbit intfid15 2 1 120 2 1 2Router#This example shows the output for the trunk-vlan keyword:
Router# show cwtlc qinq 0 trunk-vlan 2RX VLAN FUNC TABLErx_vlan_func 2RX TVC TABLErx_tvc_func src_ltl pe_vlan ce_vlan Q intfid1 E0 1 20 0 2Router#Table 19 describes the fields shown in the display.
Related Commands
show dot1q-tunnel
To display a list of 802.1Q tunnel-enabled ports, use the show dot1q-tunnel command in user EXEC mode.
show dot1q-tunnel [interface interface interface-number]
Syntax Description
Command Modes
User EXEC (>)
Command History
Usage Guidelines
If you do not enter any keywords, the 802.1Q tunnel ports for all interfaces are displayed.
The ge-wan keyword is not supported in Cisco 7600 series routers that are configured with a Supervisor Engine 720.
The interface-number argument designates the module and port number for the ethernet, fastethernet, gigabitethernet, tengigabitethernet, and ge-wan keywords. Valid values depend on the chassis and module that are used. For example, if you have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the slot number are from 1 to 13 and valid values for the port number are from 1 to 48.
The interface-number argument designates the port-channel number for the port-channel keyword; valid values are from 1 to 282. The values from 257 to 282 are supported on the Content Switching Module (CSM) and the Firewall Services Module (FWSM) only.
Examples
This example indicates that the port is up and has one 802.1Q tunnel that is configured on it. The fields shown in the display are self-explanatory.
Router# show dot1q-tunnel interface port-channel 10Interface---------Po10Related Commands
switchport mode
Sets the interface type.
vlan dot1q tag native
Enables dot1q tagging for all VLANs in a trunk.
show errdisable flap-values
To display conditions that cause a flap error to be recognized as a result of a specific cause, use the show errdisable flap-values command in user EXEC or privileged EXEC mode.
show errdisable flap-values
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC (>)
Privileged EXEC (#)Command History
15.0(1)
This command was introduced in a release earlier than Cisco IOS Release 15.0(1) on the Cisco 3845 series routers.
Usage Guidelines
The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display in the "Examples" section shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.
Examples
The following is sample output from the show errdisable flap-values command:
Router# show errdisable flap-valuesErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 20 10Table 20 describes the significant fields shown in the display.
Related Commands
errdisable detect cause
Enables the error-disabled detection for a specific cause or all causes.
errdisable recovery
Configures the recovery mechanism variables.
show gvrp interface
To display Generic VLAN Registration (GVRP) interface states, use the show gvrp interface command in privileged EXEC mode.
show gvrp interface
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use this command to obtain GVRP interface detals of the administrative and operational GVRP states of all or one particular .1Q trunk port in the device.
Examples
The following example shows sample summary output:
Router# show gvrp interfacePort Status Mode Registrar StateFa3/1 on slow compact normalGi6/13 on fast compact normalGi6/14 on fast compact normalPort Transmit Timeout Leave Timeout Leaveall TimeoutFa3/1 200 600 10000Gi6/13 200 600 10000Gi6/14 200 600 10000Port Vlans DeclaredFa3/1 1,1200,4000,4094Gi6/13 2-40,100,200,1200,4000,4094Gi6/14 1200,4000,4094Port Vlans RegisteredFa3/1 1-40,100,200Gi6/13 1,10Gi6/14 1-40,100,200Port Vlans Registered and in Spanning Tree Forwarding StateFa3/1 1Gi6/13 10Gi6/14 noneRelated Commands
show gvrp summary
To display the Generic VLAN Registration Protocol (GVRP) configuration, use the show gvrp summary command in privileged EXEC mode.
show gvrp summary
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use this command to obtain GVRP VLAN configuration details.
Examples
The following example shows sample summary output. The fields shown in the display are self-explanatory.
Router# show gvrp summaryGVRP global state : enabledGVRP VLAN creation : disabledVLANs created via GVRP : 41-99, 1201-4094Related Commands
show gvrp interface
Displays details of the adminstrative and operational GVRP states of all or one particular .1Q trunk port in the device.
show mac-address-table
To display the MAC address table, use the show mac-address-table command in privileged EXEC mode.
Cisco 2600, 3600, and 3700 Series Routers
show mac-address-table [secure | self | count] [address mac-addr] [interface type/number] [fa | gi slot/port] [atm slot/port] [vlan vlan-id]
Catalyst 4500 Series Switches
show mac-address-table {assigned | ip | ipx | other}
Catalyst 6000/6500 Series Switches and 7600 Series Routers
show mac-address-table [address mac-addr [all | interface type/number | module number | vlan vlan-id] | [count [module number | vlan vlan-id]] | [duplicate [module number | only]] | [interface type/number] | [limit [vlan vlan-id | module number | interface interface-type]] | [module number] | [multicast [count | {igmp-snooping | mld-snooping [count] | user [count] | vlan vlan-id}]] | [notification {mac-move [counter [vlan] | threshold | change} [interface [interface-number]]] | [synchronize statistics] | [unicast-flood] | vlan vlan-id [all | module number]]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Cisco 2600, 3600, and 3700 Series Routers
This command displays the MAC address table for the switch. Specific views can be defined by using the optional keywords and arguments. If more than one optional keyword is used, then all the conditions must be true for that entry to be displayed.
Catalyst 4500 Series Switches
For the MAC address table entries that are used by the routed ports, the routed port name, rather than the internal VLAN number, is displayed in the "vlan" column.
Catalyst 6500 and 6000 Series Switches and 7600 Series Routers
If you do not specify a module number, the output of the show mac-address-table command displays information about the supervisor engine. To display information about the MAC address table of the DFCs, you must enter the module number or the all keyword.
The mac-addr value is a 48-bit MAC address. The valid format is H.H.H.
The interface-number argument designates the module and port number. Valid values depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.
The optional module number keyword and argument are supported only on DFC modules. The module number keyword and argument designate the module number.
Valid values for the mac-group-address argument are from 1 to 9.
The optional count keyword displays the number of multicast entries.
The optional multicast keyword displays the multicast MAC addresses (groups) in a VLAN or displays all statically installed or IGMP snooping-learned entries in the Layer 2 table.
The information that is displayed in the show mac-address-table unicast-flood command output is as follows:
•
•
–
–
Note
–
The dynamic entries that are displayed in the Learn field are always set to Yes.
The show mac-address-table limit command output displays the following information:
•
•
•
The show mac-address-table synchronize statistics command output displays the following information:
•
•
•
Examples
Cisco 2600, 3600, and 3700 Series Routers
The following is sample output from the show mac-address-table command:
Router# show mac-address-tableDynamic Addresses Count: 9Secure Addresses (User-defined) Count: 0Static Addresses (User-defined) Count: 0System Self Addresses Count: 41Total MAC addresses: 50Non-static Address Table:Destination Address Address Type VLAN Destination Port------------------- ------------ ---- --------------------0010.0de0.e289 Dynamic 1 FastEthernet0/10010.7b00.1540 Dynamic 2 FastEthernet0/50010.7b00.1545 Dynamic 2 FastEthernet0/50060.5cf4.0076 Dynamic 1 FastEthernet0/10060.5cf4.0077 Dynamic 1 FastEthernet0/10060.5cf4.1315 Dynamic 1 FastEthernet0/10060.70cb.f301 Dynamic 1 FastEthernet0/100e0.1e42.9978 Dynamic 1 FastEthernet0/100e0.1e9f.3900 Dynamic 1 FastEthernet0/1Catalyst 4500 Series Switches
This example shows how to display the MAC address table entries that have a specific protocol type (in this case, "assigned"):
Switch# show mac-address-table protocol assignedvlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------200 0050.3e8d.6400 static assigned -- Switch100 0050.3e8d.6400 static assigned -- Switch5 0050.3e8d.6400 static assigned -- Switch4092 0000.0000.0000 dynamic assigned -- Switch1 0050.3e8d.6400 static assigned -- Switch4 0050.3e8d.6400 static assigned -- Switch4092 0050.f0ac.3058 static assigned -- Switch4092 0050.f0ac.3059 dynamic assigned -- Switch1 0010.7b3b.0978 dynamic assigned -- Fa5/9Switch#This example shows the "other" output for the previous example:
Switch# show mac-address-table protocol otherUnicast Entriesvlan mac address type protocols port-------+---------------+--------+---------------------+--------------------1 0000.0000.0201 dynamic other FastEthernet6/151 0000.0000.0202 dynamic other FastEthernet6/151 0000.0000.0203 dynamic other FastEthernet6/151 0000.0000.0204 dynamic other FastEthernet6/151 0030.94fc.0dff static ip,ipx,assigned,other Switch2 0000.0000.0101 dynamic other FastEthernet6/162 0000.0000.0102 dynamic other FastEthernet6/162 0000.0000.0103 dynamic other FastEthernet6/162 0000.0000.0104 dynamic other FastEthernet6/16Fa6/1 0030.94fc.0dff static ip,ipx,assigned,other SwitchFa6/2 0030.94fc.0dff static ip,ipx,assigned,other SwitchMulticast Entriesvlan mac address type ports-------+---------------+-------+-------------------------------------------1 ffff.ffff.ffff system Switch,Fa6/152 ffff.ffff.ffff system Fa6/161002 ffff.ffff.ffff system1003 ffff.ffff.ffff system1004 ffff.ffff.ffff system1005 ffff.ffff.ffff systemFa6/1 ffff.ffff.ffff system Switch,Fa6/1Fa6/2 ffff.ffff.ffff system Switch,Fa6/2Switch#Catalyst 6500 and 6000 Series Switches and Cisco 7600 Series Routers
The following is sample output from the show mac-address-table command:
Switch# show mac-address-tableDynamic Addresses Count: 9Secure Addresses (User-defined) Count: 0Static Addresses (User-defined) Count: 0System Self Addresses Count: 41Total MAC addresses: 50Non-static Address Table:Destination Address Address Type VLAN Destination Port------------------- ------------ ---- --------------------0010.0de0.e289 Dynamic 1 FastEthernet0/10010.7b00.1540 Dynamic 2 FastEthernet0/50010.7b00.1545 Dynamic 2 FastEthernet0/50060.5cf4.0076 Dynamic 1 FastEthernet0/10060.5cf4.0077 Dynamic 1 FastEthernet0/10060.5cf4.1315 Dynamic 1 FastEthernet0/10060.70cb.f301 Dynamic 1 FastEthernet0/100e0.1e42.9978 Dynamic 1 FastEthernet0/100e0.1e9f.3900 Dynamic 1 FastEthernet0/1
Note
This example shows how to display the information about the MAC address table for a specific MAC address with a Supervisor Engine 720:
Router# show mac-address-table address 001.6441.60caCodes: * - primary entryvlan mac address type learn qos ports------+----------------+--------+-----+---+--------------------------Supervisor:* --- 0001.6441.60ca static No -- RouterThis example shows how to display MAC address table information for a specific MAC address with a Supervisor Engine 720:
Router# show mac-address-table address 0100.5e00.0128Legend: * - primary entryage - seconds since last seenn/a - not availablevlan mac address type learn age ports------+----------------+--------+-----+----------+--------------------------Supervisor:* 44 0100.5e00.0128 static Yes - Fa6/44,Router* 1 0100.5e00.0128 static Yes - RouterModule 9:* 44 0100.5e00.0128 static Yes - Fa6/44,Router* 1 0100.5e00.0128 static Yes - RouterThis example shows how to display the currently configured aging time for all VLANs:
Router#show mac-address-table aging-timeVlan Aging Time---- ----------*100 300200 1000This example shows how to display the entry count for a specific slot:
Router# show mac-address-table count module 1MAC Entries on slot 1 :Dynamic Address Count: 4Static Address (User-defined) Count: 25Total MAC Addresses In Use: 29Total MAC Addresses Available: 131072This example shows how to display the information about the MAC address table for a specific interface with a Supervisor Engine 720:
Router# show mac-address-table interface fastethernet 6/45Legend: * - primary entryage - seconds since last seenn/a - not availablevlan mac address type learn age ports------+----------------+--------+-----+----------+--------------------------* 45 00e0.f74c.842d dynamic Yes 5 Fa6/45
Note
This example shows how to display the limit information for a specific slot:
Router# show mac-address-table limit vlan 1 module 1vlan switch module action maximum Total entries flooding -------+--------+---------+-----------+--------+--------------+------------1 1 7 warning 500 0 enabled1 1 11 warning 500 0 enabled1 1 12 warning 500 0 enabledRouter#show mac-address-table limit vlan 1 module 2vlan switch module action maximum Total entries flooding -------+--------+---------+-----------+--------+--------------+------------1 2 7 warning 500 0 enabled1 2 9 warning 500 0 enabledThe following example shows how to display the MAC-move notification status:
Router# show mac-address-table notification mac-moveMAC Move Notification: EnabledRouter#The following example shows how to display the MAC move statistics:
Router> show mac-address-table notification mac-move counter-----------------------------------------------------------------------------------Vlan Mac Address From Mod/Port To Mod/Port Count---- ----------------- ----------------------- ----------------------- ------------1 00-01-02-03-04-01 2/3 3/1 1020 00-01-05-03-02-01 5/3 5/1 20This example shows how to display the CAM-table utilization-notification status:
Router# show mac-address-table notification thresholdStatus limit Interval-------------+-----------+-------------enabled 1 120This example shows how to display the MAC notification parameters and history table:
Router# show mac-address-table notification changeMAC Notification Feature is Disabled on the switchMAC Notification Flags For All Ethernet Interfaces :----------------------------------------------------Interface MAC Added Trap MAC Removed Trap-------------------- -------------- ----------------This example shows how to display the MAC notification parameters and history table for a specific interface:
Router# show mac-address-table notification change interface gigabitethernet5/2MAC Notification Feature is Disabled on the switchInterface MAC Added Trap MAC Removed Trap-------------------- -------------- ----------------GigabitEthernet5/2 Disabled DisabledThis example shows how to display unicast-flood information:
Router# show mac-address-table unicast-flood> > Unicast Flood Protection status: enabled> >> > Configuration:> > vlan Kfps action timeout> > ------+----------+-----------------+----------> > 2 2 alert none> >> > Mac filters:> > No. vlan source mac addr. installed> > on time left (mm:ss)> >> >-----+------+-----------------+------------------------------+------------------> >> > Flood details:> > Vlan source mac addr. destination mac addr.> >> >------+----------------+-------------------------------------------------> > 2 0000.0000.cafe 0000.0000.bad0, 0000.0000.babe,> > 0000.0000.bac0> > 0000.0000.bac2, 0000.0000.bac4,> > 0000.0000.bac6> > 0000.0000.bac8> > 2 0000.0000.caff 0000.0000.bad1, 0000.0000.babf,> > 0000.0000.bac1> > 0000.0000.bac3, 0000.0000.bac5,> > 0000.0000.bac7> > 0000.0000.bac9This example shows how to display the information about the MAC-address table for a specific VLAN:
Router#show mac-address-table vlan 100vlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------100 0050.3e8d.6400 static assigned -- Router100 0050.7312.0cff dynamic ip -- Fa5/9100 0080.1c93.8040 dynamic ip -- Fa5/9100 0050.3e8d.6400 static ipx -- Router100 0050.3e8d.6400 static other -- Router100 0100.0cdd.dddd static other -- Fa5/9,Router,Switch100 00d0.5870.a4ff dynamic ip -- Fa5/9100 00e0.4fac.b400 dynamic ip -- Fa5/9100 0100.5e00.0001 static ip -- Fa5/9,Switch100 0050.3e8d.6400 static ip -- RouterThis example shows how to display the information about the MAC address table for MLDv2 snooping:
Router# show mac-address-table multicast mld-snoopingvlan mac address type learn qos ports-----+---------------+--------+-----+---+----------------------------------- 3333.0000.0001 static Yes - Switch,Stby-Switch--- 3333.0000.000d static Yes - Fa2/1,Fa4/1,Router,Switch--- 3333.0000.0016 static Yes - Switch,Stby-SwitchRelated Commands
show mac-address-table aging-time
To display the MAC address aging time, use the show mac-address-table aging-time command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table aging-time
Catalyst Switches
show mac-address-table aging-time [vlan vlan-id] [[begin | exclude | include] expression]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
The following example shows how to display the current configured aging time for all VLANs. The fields shown in the display are self-explanatory.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Router# show mac-address-table aging-timeMac address aging time 300Catalyst Switches
Router# show mac-address-table aging-timeVlan Aging Time---- ----------100 300200 1000The following example shows how to display the current configured aging time for a specific VLAN. The fields shown in the display are self-explanatory.
Router# show mac-address-table aging-time vlan 100Vlan Aging Time---- ----------100 300Related Commands
show mac-address-table dynamic
To display dynamic MAC address table entries only, use the show mac-address-table dynamic command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table dynamic [address mac-address | interface type slot/port | vlan vlan]
Catalyst Switches
show mac-address-table dynamic [address mac-address | detail | interface type number | protocol protocol | | module number | vlan vlan] [[begin |exclude | include] expression]
Catalyst 6500 Series Switches
show mac-address-table dynamic [{address mac-addr} | {interface interface interface-number [all | module number]} | {module num} | {vlan vlan-id [all | module number]}]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
The show mac-address-table dynamic command output for an EtherChannel interface changes the port-number designation (for example, 5/7) to a port-group number.
Catalyst Switches
The keyword definitions for the protocol argument are:
•
•
•
•
The show mac-address-table dynamic command output for an EtherChannel interface changes the port-number designation (for example, 5/7) to a port-group number.
Catalyst 6500 Series Switches
The mac-address is a 48-bit MAC address and the valid format is H.H.H.
The optional module num keyword and argument are supported only on DFC modules. The module num keyword and argument designate the module number.
Examples
The following examples show how to display all dynamic MAC address entries. The fields shown in the various displays are self-explanatory.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Router# show mac-address-table dynamicNon-static Address Table:Destination Address Address Type VLAN Destination Port------------------- ------------ ---- --------------------000a.000a.000a Dynamic 1 FastEthernet4/0002a.2021.4567 Dynamic 2 FastEthernet4/0Catalyst Switches
Router# show mac-address-table dynamicvlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------200 0010.0d40.37ff dynamic ip -- 5/81 0060.704c.73ff dynamic ip -- 5/94095 0000.0000.0000 dynamic ip -- 15/11 0060.704c.73fb dynamic other -- 5/91 0080.1c93.8040 dynamic ip -- 5/94092 0050.f0ac.3058 dynamic ip -- 15/11 00e0.4fac.b3ff dynamic other -- 5/9The following example shows how to display dynamic MAC address entries with a specific protocol type (in this case, assigned).
Router# show mac-address-table dynamic protocol assignedvlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------4092 0000.0000.0000 dynamic assigned -- Router4092 0050.f0ac.3059 dynamic assigned -- Router1 0010.7b3b.0978 dynamic assigned -- Fa5/9Router#The following example shows the detailed output for the previous example.
Router# show mac-address-table dynamic protocol assigned detailMAC Table shown in details========================================Type Always Learn Trap Modified Notify Capture Protocol Flood-------+------------+----+--------+------+-------+--------+-----+QoS bit L3 Spare Mac Address Age Byte Pvlan Xtag SWbits Index-----------------+--------+--------------+--------+-----+----+------+-----DYNAMIC NO NO YES NO NO assigned NOBit Not On 0 0000.0000.0000 255 4092 0 0 0x3DYNAMIC NO NO YES NO NO assigned NOBit Not On 0 0050.f0ac.3059 254 4092 0 0 0x3DYNAMIC NO NO YES NO NO assigned NOBit Not On 0 0010.7b3b.0978 254 1 0 0 0x108Router#Catalyst 6500 Series Switches
This example shows how to display all the dynamic MAC-address entries for a specific VLAN.
Router# show mac-address-table dynamic vlan 200 allLegend: * - primary entryage - seconds since last seenn/a - not aevailablevlan mac address type learn age ports------+----------------+--------+-----+----------+--------------------------200 0010.0d40.37ff dynamic NO 23 Gi5/8Router#This example shows how to display all the dynamic MAC-address entries.
Router# show mac-address-table dynamicLegend: * - primary entryage - seconds since last seenn/a - not applicablevlan mac address type learn age ports------+----------------+--------+-----+----------+--------------------------* 10 0010.0000.0000 dynamic Yes n/a Gi4/1* 3 0010.0000.0000 dynamic Yes 0 Gi4/2* 1 0002.fcbc.ac64 dynamic Yes 265 Gi8/1* 1 0009.12e9.adc0 static No - RouterRouter#Related Commands
show mac-address-table learning
To display the MAC-address learning state, use the show mac-address-table learning command in user EXEC mode.
show mac-address-table learning [vlan vlan-id | interface interface slot/port] [module num]
Syntax Description
Defaults
This command has no default settings.
Command Modes
User EXEC (>)
Command History
12.2(18)SXE
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
The module num keyword and argument can be used to specify supervisor engines or Distributed Forwarding Cards (DFCs) only.
The interface interface slot/port keyword and arguments can be used on routed interfaces only. The interface interface slot/port keyword and arguments cannot be used to configure learning on switch-port interfaces.
If you specify the vlan vlan-id, the state of the MAC-address learning of the specified VLAN, including router interfaces, on all modules, is displayed.
If you specify the vlan vlan-id and the module num, the state of the MAC-address learning of a specified VLAN on a specified module is displayed.
If you specify the interface interface slot/port keyword and arguments, the state of the MAC-address learning of the specified interface on all modules is displayed.
If you specify the interface interface slot/port keyword and arguments, the state of the MAC-address learning of the specified interface on the specified module is displayed.
If you enter the show mac-address-table learning command with no arguments or keywords, the status of MAC learning on all the existing VLANs on all the supervisor engines or DFCs configured on a Catalyst 6500 series switch is displayed.
Examples
This example shows how to display the MAC-address learning status on all the existing VLANs on all the supervisor engines or DFCs configured on a Catalyst 6500 series switch:
Router# show mac-address-table learningVLAN/Interface Mod1 Mod4 Mod7-------------------- ---------------------1 yes yes yes100 yes yes yes150 yes yes yes200 yes yes yes250 yes yes yes1006 no no no1007 no no no1008 no no no1009 no no no1010 no no no1011 no no no1012 no no no1013 no no no1014 no no noGigabitEthernet6/1 no no noGigabitEthernet6/2 no no noGigabitEthernet6/4 no no noFastEthernet3/4 no no noFastEthernet3/5 no no noGigabitEthernet4/1 no no noGigabitEthernet4/2 no no noGigabitEthernet7/1 no no noGigabitEthernet7/2 no no noRouter#Table 21 describes the fields that are shown in the example.
Table 21 show mac-address-table learning Field Descriptions
VLAN/Interface1
VLAN ID or interface type, module, and port number.
Mod#
Module number of a supervisor engine or DFC.
yes
MAC-address learning is enabled.
no
MAC-address learning is disabled.
1 The interfaces displayed are routed interfaces that have internal VLANs assigned to them.
This example shows how to display the status of MAC-address learning on all the existing VLANs on a single supervisor engine or a DFC:
Router# show mac-address-table learning module 4VLAN/Interface Mod4-------------------- -----1 yes100 yes150 yes200 yes250 yes1006 no1007 no1008 no1009 no1010 no1011 no1012 no1013 no1014 noGigabitEthernet6/1 noGigabitEthernet6/2 noGigabitEthernet6/4 noFastEthernet3/4 noFastEthernet3/5 noGigabitEthernet4/1 noGigabitEthernet4/2 noGigabitEthernet7/1 noGigabitEthernet7/2 noRouter#This example shows how to display the status of MAC-address learning for a specific VLAN on all the supervisor engines and DFCs:
Router# show mac-address-table learning vlan 100VLAN Mod1 Mod4 Mod7---- ---------------------100 no no yesRouterThis example shows how to display the status of MAC-address learning for a specific VLAN on a specific supervisor engine or DFC:
Router# show mac-address-table learning vlan 100 module 7VLAN Mod7---- -----100 yesRouterThis example shows how to display the status of MAC-address learning for a specific supervisor engine or DFC:
Router# show mac-address-table learning interface FastEthernet 3/4Interface Mod1 Mod4 Mod7--------- ---------------------Fa3/4 no yes noRouterThis example shows how to display the status of MAC-address learning for a specific interface on a specific supervisor engine or DFC:
Router# show mac-address-table learning interface FastEthernet 3/4 module 1Interface Mod1--------- -----Fa3/4 noRouterRelated Commands
show mac-address-table static
To display static MAC address table entries only, use the show mac-address-table static command in privileged EXEC mode.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
show mac-address-table static [address mac-address | interface type slot/port | vlan vlan]
Catalyst Switches
show mac-address-table static [address mac-address | detail | interface type number | protocol protocol | vlan vlan-id] [[begin | exclude | include] expression]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Catalyst Switches
The keyword definitions for the protocol argument are:
•
•
•
•
Examples
The following examples show how to display all static MAC address entries. The fields shown in the various displays are self-explanatory.
Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700 Series Routers
Router# show mac-address-table staticStatic Address Table:Destination Address Address Type VLAN Destination Port------------------- ------------ ---- --------------------2323.3214.5432 Static 4 FastEthernet4/12323.3214.5431 Static 5 FastEthernet4/12323.3214.5432 Static 6 FastEthernet4/12323.3214.5434 Static 7 FastEthernet4/12323.3214.5435 Static 8 FastEthernet4/1Catalyst Switches
Router# show mac-address-table static*Oct 22 12:15:35: %SYS-5-CONFIG_I: Configured from console by consolevlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------200 0050.3e8d.6400 static assigned -- Router100 0050.3e8d.6400 static assigned -- Router4092 0050.f0ac.3058 static other -- Router917 0100.0cdd.dddd static other -- Fa5/9,Router,Switch5 0050.3e8d.6400 static assigned -- Router303 0100.0cdd.dddd static other -- Fa5/9,Router,Switch850 0100.0cdd.dddd static other -- Fa5/9,Router,Switch1002 0100.0cdd.dddd static other -- Fa5/9,Router,Switch802 0100.0cdd.dddd static other -- Fa5/9,Router,Switch2 0100.0cdd.dddd static other -- Fa5/9,Router,Switch304 0100.5e00.0001 static ip -- Fa5/9,Switch...The following example shows how to display static MAC address entries with a specific protocol type (in this case, assigned).
Router# show mac-address-table static protocol assignedvlan mac address type protocol qos ports-----+---------------+--------+---------+---+--------------------------------200 0050.3e8d.6400 static assigned -- Router100 0050.3e8d.6400 static assigned -- Router5 0050.3e8d.6400 static assigned -- RouterThe following example shows the detailed output for the previous example.
Router# show mac-address-table static protocol assigned detailMAC Table shown in details========================================Type Always Learn Trap Modified Notify Capture Protocol Flood-------+------------+----+--------+------+-------+--------+-----+QoS bit L3 Spare Mac Address Age Byte Pvlan Xtag SWbits Index-----------------+--------+--------------+--------+-----+----+------+-----STATIC NO NO NO NO NO assigned NOBit Not On 0 0050.3e8d.6400 254 200 1 0 0x3STATIC NO NO NO NO NO assigned NOBit Not On 0 0050.3e8d.6400 254 100 1 0 0x3STATIC NO NO NO NO NO assigned NOBit Not On 0 0050.3e8d.6400 254 5 1 0 0x3S Bit Not On 0 0050.f0ac.3058 254 4092 1 0 0x3...Cisco 7600 Series Routers
This example shows how to display all the static MAC address entries; this Catalyst 6500 series switch is configured with a Supervisor Engine 720.
Router# show mac-address-table staticCodes: * - primary entryvlan mac address type learn qos ports------+----------------+--------+-----+---+--------------------------* --- 0001.6441.60ca static No -- RouterRelated Commands
show mls df-table
To display information about the multilayer switching (MLS) Don't Fragment (DF) table, use the show mls df-table command in privileged EXEC mode.
show mls df-table start-vlan end-vlan
Syntax Description
start-vlan
Start of a range of VLAN IDs; valid values are from 1 to 4094.
end-vlan
End of a range of VLAN IDs; valid values are from 1 to 4094.
Command Modes
Privileged EXEC (#)
Command History
12.2(14)SX
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
You must identify the active Supervisor Engine by using the show module command; and start a command-line interface sesssion with the active Supervisor Engine by using the attach command in privileged EXEC mode, before you can use the show mls df-table command.
In the output display, the following applies:
•
•
Examples
This example shows how to display the DF-table contents on the Supervisor Engine for a range of VLANs. The fields shown in the display are self-explanatory.
Router# remote login switchTrying Switch ...Entering CONSOLE for SwitchType "^C^C^C" to end this sessionRouter-sp#Router-sp# show mls df-table 201 212TYCHO FIB DF Tablevlan df_index3 2 1 0-----+----------201 0 0 0 0202 0 0 0 0203 0 0 0 0204 0 0 0 0205 0 0 0 0206 0 0 0 0207 0 0 0 0208 0 0 0 0209 0 0 0 0210 0 0 0 0211 0 0 0 0212 0 0 0 0Router-sp#Related Commands
show mls masks
To display the details of the access control parameters (ACPs) that are used for multilayer switching (MLS) quality of service (QoS) and security access control lists (ACLs), use the show mls masks command in privileged EXEC mode.
show mls masks [qos | security]
Syntax Description
qos
(Optional) Displays details of ACPs used for QoS ACLs.
security
(Optional) Displays details of ACPs used for security ACLs.
Note
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use the show mls mask command without keywords to display all ACPs configured on the switch.
Use this command with the qos keyword to display the ACPs used for QoS ACLs.
Use this command with the security keyword to display the ACPs used for security ACLs.
Note
Examples
The following is sample output from the show mls masks command. In this example, Mask 1 is a QoS ACP consisting of an IP source address (with wildcard bits 0.0.0.255), an IP destination address, and Layer 4 destination port fields. This ACP is used by the QoS policy maps pmap1 and pmap2.
The fields shown in the display are self-explanatory.
Router# show mls masksMask1Type : qosFields : ip-sa(0.0.0.255), ip-da(host), dest-portPolicymap: pmap1Interfaces: Fa0/9, Gi0/1Policymap: pmap2Interfaces: Fa0/1, Fa0/5, Fa0/13Related Commands
ip access-group
Applies an IP ACL to an interface.
policy-map
Creates or modifies a policy map that can be attached to one or more interfaces to specify a service policy.
show mls rp
To display multilayer switching (MLS) details, including specifics for the Multilayer Switching Protocol (MLSP), use the show mls rp command in user EXEC mode or privileged EXEC mode.
show mls rp [interface]
Syntax Description
interface
(Optional) Displays information for one interface. Without this argument, detailed views of all interfaces are displayed.
Command Modes
User EXEC (>)
Privileged EXEC (#)Command History
Examples
The following is sample output from the show mls rp command. The fields shown in the display are self-explanatory.
Router# show mls rpmultilayer switching is globally enabledmls id is 00e0.fefc.6000mls ip address 10.20.26.64mls flow mask is ip-flowvlan domain name: WBUcurrent flow mask: ip-flowcurrent sequence number: 80709115current/maximum retry count: 0/10current domain state: no-changecurrent/next global purge: false/falsecurrent/next purge count: 0/0domain uptime: 13:03:19keepalive timer expires in 9 secondsretry timer not runningchange timer not runningfcp subblock count = 71 management interface(s) currently defined:vlan 1 on Vlan17 mac-vlan(s) configured for multi-layer switching:mac 00e0.fefc.6000vlan id(s)1 10 91 92 93 95 100router currently aware of following 1 switch(es):switch id 0010.1192.b5ffThe following is sample output from the show mls rp command for a specific interface:
Router# show mls rp int vlan 10mls active on Vlan10, domain WBURelated Commands
show mls rp interface
To display Internetwork Packet Exchange (IPX) multilayer switching (MLS) details for the route processor (RP), including specific information about the Multilayer Switching Protocol (MLSP), use the show mls rp interface command in user EXEC mode or privileged EXEC mode.
show mls rp interface type number
Syntax Description
Command Modes
User EXEC (>)
Privileged EXEC (#)Command History
Examples
The following displays sample output from the show mls rp interface command. The interface type is VLAN, and its number is 10. The fields shown in the display are self-explanatory.
Router# show mls rp interface vlan 10IPX MLS active on Vlan 10, domain WBURelated Commands
show mls rp ip multicast
To display hardware-switched multicast flow information about IP multicast multilayer switching (MLS), use the show mls rp ip multicast command in user EXEC mode or privileged EXEC mode.
show mls rp ip multicast [locate] [group [source] [vlan-id]] [statistics] [summary]
Syntax Description
Command Modes
User EXEC
Privileged EXECCommand History
Examples
The following is sample output of the show mls rp ip multicast command using the locate keyword:
Router# show mls rp ip multicast locateSource Group Vlan SwitchIP SwitchMAC------ ----- ---- -------- ---------192.168.10.6 239.255.158.197 10 192.168.10.199 0010.a60b.b4ffThe following is sample output of the show mls rp ip multicast command for a specific IP multicast group:
Router# show mls rp ip multicast 224.1.1.1Multicast hardware switched flows:(10.1.13.1, 224.1.1.1) Incoming interface: Vlan13, Packets switched: 61590Hardware switched outgoing interfaces: Vlan20 Vlan9MFD installed: Vlan13(10.1.9.3, 224.1.1.1) Incoming interface: Vlan9, Packets switched: 0Hardware switched outgoing interfaces: Vlan20MFD installed: Vlan9(10.1.12.1, 224.1.1.1) Incoming interface: Vlan12, Packets switched: 62010Hardware switched outgoing interfaces: Vlan20 Vlan9MFD installed: Vlan12(10.1.12.3, 224.1.1.1) Incoming interface: Vlan12, Packets switched: 61980Hardware switched outgoing interfaces: Vlan20 Vlan9MFD installed: Vlan12(10.1.11.1, 224.1.1.1) Incoming interface: Vlan11, Packets switched: 62430Hardware switched outgoing interfaces: Vlan20 Vlan9MFD installed: Vlan11(10.1.11.3, 224.1.1.1) Incoming interface: Vlan11, Packets switched: 62430Hardware switched outgoing interfaces: Vlan20 Vlan9MFD installed: Vlan11Total shortcut installed: 6The following is sample output of the show mls rp ip multicast command using the statistics keyword:
Router# show mls rp ip multicast statisticsMLS Multicast Operation Status:MLS Multicast configuration and state:Router Mac: 0010.298f.0009Switch Mac: 0010.0d70.a3ff Switch IP: 10.2.10.195MLS Multicast Operating state: ACTIVEActive management vlan: Vlan1, 192.1.4.1User configured management vlan: None, 0.0.0.0Include-List: IP1 = 192.168.28.2, IP2 = 10.0.0.0Router IP used in MLS Multicast messages: 192.168.28.2MLS Multicast statistics:Keepalive sent: 90Keepalive ACK received: 90Open request sent: 3Open request ACK received: 3Delete notifications received: 3Flow statistics messages received: 181Flow message sent: 14Flow message Ack received: 14Flow message Nack received: 0Flow install Ack: 2Flow install Nack: 0Flow update Ack: 7Flow update Nack: 0Flow delete Ack: 0Complete flow install Ack: 3Complete flow install Nack: 0Complete flow delete Ack: 1Input vlan delete Ack: 0Output vlan delete Ack: 0Global delete sent: 1L2 entry not found error: 0LTL entry not found error: 0MET entry not found error: 0L3 entry not found error: 0L3 entry exists error : 0Hash collision error : 0Sequence number error : 0None-supported error : 0Generic error : 0The following is sample output of the show mls rp ip multicast command using the summary keyword:
Router# show mls rp ip multicast summarySwitch IP:10.0.0.0 Switch MAC:0000.0000.0000Number of complete flows: 0Total hardware-switched flows: 0Switch IP:10.2.10.199 Switch MAC:0010.a60b.b4ffNumber of complete flows: 1Total hardware-switched flows: 1Related Commands
mls rp ip multicast
Enables IP multicast MLS (hardware switching) on an external or internal router in conjunction with Layer 3 switching hardware for the Catalyst 5000 switch.
show mls rp ipx
To display details for all Internetwork Packet Exchange (IPX) multilayer switching (MLS) interfaces on the IPX MLS router, use the show mls rp ipx command in privileged EXEC mode.
show mls rp ipx
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
This command gives you details about the following:
•
•
•
•
•
Examples
The following example shows sample output from the show mls rp ipx command for all IPX MLS interfaces on an MLS route processor (RP). The fields shown in the display are self-explanatory.
Router# show mls rp ipxipx multilayer switching is globally enabledipx mls inbound acl override is globally disabledmls id is 0050.73ff.b580mls ip address 5.5.5.155IPX MLS flow mask is source-destinationnumber of domains configured for mls 1vlan domain name:Engineeringcurrent ipx flow mask:source-destinationipx current/next global purge:false/falseipx current/next purge count:0/0current sequence number:4086390283current/maximum retry count:0/10current domain state:no-changedomain uptime:03:13:09keepalive timer expires in 3 secondsretry timer not runningchange timer not running1 management interface(s) currently defined:vlan 21 on Vlan212 mac-vlan(s) enabled for ipx multi-layer switching:mac 0010.0738.2917vlan id(s)22mac 0050.73ff.b5b8vlan id(s)21router currently aware of following 1 switch(es):switch id 00e0.fe4a.aeffRelated Commands
show mls rp vtp-domain
To display Internetwork Packet Exchange (IPX) multilayer switching (MLS) interfaces for a specific Virtual Trunking Protocol (VTP) domain on a Route Processor (RP), use the show mls rp vtp-domain command in privileged EXEC mode.
show mls rp vtp-domain domain-name
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
This example shows details about IPX MLS interfaces in a VTP domain named WBU. The fields shown in the display are self-explanatory.
Router# show mls rp vtp-domain WBUvlan domain name: WBUcurrent ipx flow mask: destinationipx current/next global purge: false/falseipx current/next purge count: 0/0current ipx flow mask: destinationipx current/next global purge: false/falseipx current/next purge count: 0/0current sequence number: 590678296current/maximum retry count: 0/10current domain state: no-changedomain uptime: 1d14hkeepalive timer expires in 3 secondsretry timer not runningchange timer not runningfcp subblock count = 201 management interface(s) currently defined:vlan 2 on Vlan220 mac-vlan(s) configured for multi-layer switching17 mac-vlan(s) enabled for ipx multi-layer switching:mac 0010.0738.2917vlan id(s)2 3 4 5 6 7 8 9 10 12 1314 15 88 99mac 0090.6dfc.5800vlan id(s)20 2118 mac-vlan(s) enabled for ipx multi-layer switching:mac 0010.0738.2917vlan id(s)2 3 4 5 6 7 8 9 10 11 1213 14 15 66 77 88 99router currently aware of following 1 switch(es):switch id 0010.141f.6fffRelated Commands
show mmls igmp explicit-tracking
To display information about the host-tracking database, use the show mmls igmp explicit-tracking command in privileged EXEC mode.
show mmls igmp explicit-tracking [vlan-id]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
12.2(14)SX
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
Examples
This example shows how to display information about the host-tracking database for a specific VLAN. The fields shown in the display are self-explanatory.
Switch-sp# show mmls igmp explicit-tracking 27Source/Group Interface Reporter Filter_mode------------------------------------------------------------------------10.1.1.1/224.1.1.1 Vl27:3/25 10.27.2.3 INCLUDE10.2.2.2/224.1.1.1 Vl27:3/25 10.27.2.3 INCLUDERouter#show mmls msc
To display information about Multicast Multilayer Switching (MMLS), use the show mmls msc command in privileged EXEC mode.
show mmls msc [cache | entry | icroif-cache | rpdf-cache | statistics | vpn]
Syntax Description
Command Default
MMLS information is not displayed.
Command Modes
Privileged EXEC (#)
Command History
12.2(14)SX
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
Examples
This example shows how to display information about MMLS. The fields are self-explanatory.
Router# remote login switchTrying Switch ...Entering CONSOLE for SwitchType "^C^C^C" to end this sessionRouter#Router# show mmls mscGeneral Info---------------------------------------------------+------+Number shortcuts in software database 1890Number of MFD in software database 1890Router MAC 0001.64f8.1b00Internal Vlan 4093Aggregation Vlan 0Aggregation Indexes 0Current Size of inputQ 0Maximum Size of inputQ 2flow statistics timeout [sec] 25non-rpf MFDs purge timeout [sec] 20non-rpf MFDs aging timeout [sec] 2.0Router#This example shows how to display information about the MMLS shortcut-process cache:
Router# show mmls msc cache-------------macg cache buckets for vpn 0-----------------Bucket 90 #g: 1Group mac address: 0100.5e01.0105$$$ (S,G,C): (10.0.0.4, 224.1.1.5, 100) mfd_flag: 1 type: Sparse$$$ (S,G,C): (0.0.0.0, 224.1.1.5, 1) mfd_flag: 1 type: Sparse### vlan: 100 sc_count: 0 rpf_count: 1### vlan: 1 sc_count: 0 rpf_count: 1Bucket 91 #g: 1Group mac address: 0100.5e01.0104$$$ (S,G,C): (10.0.0.4, 224.1.1.4, 100) mfd_flag: 1 type: Sparse$$$ (S,G,C): (0.0.0.0, 224.1.1.4, 1) mfd_flag: 1 type: Sparse### vlan: 100 sc_count: 0 rpf_count: 1### vlan: 1 sc_count: 0 rpf_count: 1Bucket 92 #g: 1Group mac address: 0100.5e01.0103$$$ (S,G,C): (10.0.0.4, 224.1.1.3, 100) mfd_flag: 1 type: Sparse$$$ (S,G,C): (0.0.0.0, 224.1.1.3, 1) mfd_flag: 1 type: Sparse### vlan: 100 sc_count: 0 rpf_count: 1### vlan: 1 sc_count: 0 rpf_count: 1Bucket 93 #g: 1Group mac address: 0100.5e01.0102$$$ (S,G,C): (10.0.0.4, 224.1.1.2, 100) mfd_flag: 1 type: Sparse$$$ (S,G,C): (0.0.0.0, 224.1.1.2, 1) mfd_flag: 1 type: Sparse### vlan: 100 sc_count: 0 rpf_count: 1### vlan: 1 sc_count: 0 rpf_count: 1Bucket 94 #g: 1Group mac address: 0100.5e01.0101$$$ (S,G,C): (10.0.0.4, 224.1.1.1, 100) mfd_flag: 1 type: Sparse$$$ (S,G,C): (0.0.0.0, 224.1.1.1, 1) mfd_flag: 1 type: Sparse### vlan: 100 sc_count: 0 rpf_count: 1### vlan: 1 sc_count: 0 rpf_count: 1Router#This example shows how to display dump ICROIF-cache information:
Router# show mmls msc icroif-cachemsc_local_icroif_index: 0x493msc_global_icroif_index: 0x494ICROIF CACHE:-------------Module mask: 0x8 Icroif_index: 0x495Router#This example shows how to display a dump list of DF interfaces for the PIM-RPs:
Router# show mmls msc rpdf-cache--------------- RP-CACHE [VPN-0] --------------Bucket# :0RP-addr: 10.1.0.1, Rpf: 0 Vpn: 0DF-index: 0DF-list: 201 202 203 204 205 206 207 208 209 210211 212Group-list:(224.1.0.0/24, H)G/m-count: 1, G/32-count: 1Bucket# :2RP-addr: 10.3.0.1, Rpf: 0 Vpn: 0DF-index: 2DF-list: 201 202 203 204 205 206 207 208 209 210211 212Group-list:(224.1.2.0/24, H)G/m-count: 1, G/32-count: 0Bucket# :3RP-addr: 10.2.0.1, Rpf: 0 Vpn: 0DF-index: 1DF-list: 201 202 203 204 205 206 207 208 209 210211 212Group-list:(224.1.1.0/24, H)G/m-count: 1, G/32-count: 1Bucket# :5RP-addr: 10.4.0.1, Rpf: 0 Vpn: 0DF-index: 3DF-list: 201 202 203 204 205 206 207 208 209 210211 212Group-list:(224.1.3.0/24, H)G/m-count: 1, G/32-count: 0Router#This example shows how to display the statistics for the multicast-shortcut process:
Router# show mmls msc statisticsCommunication Statistics--------------------------------------------------+------+Number MSM PDU Received 1Number MSM PDU Sent 1Unsolicited Feature Notification Sent 1Feature Notification Received 2Feature Notification Sent 2Stop retry Sent 0Stop download Sent 0Error Statistics--------------------------------------------------+------+L2 entry not found 0LTL full error 0MET full error 0Debug Statistics--------------------------------------------------+------+HW Met failure 0HW Dist failure 0HW L3 Install failure 0HW L3 Update failure 0TLV Statistics--------------------------------------------------+------+INSTALL TLV Received 0SELECTIVE DELETE TLV Received 0GROUP DELETE TLV Received 0UPDATE TLV Received 0INPUT VLAN DELETE TLV Received 0OUTPUT VLAN DELETE TLV Received 0GLOBAL DELETE TLV Received 0MFD INSTALL TLV Received 0MFD DELETE TLV Received 0MFD GLOBAL DELETE Received 0NRPF MFD INSTALL TLV Received 0NRPF MFD DELETE TLV Received 0SUBNET INSTALL TLV Received 15SUBNET DELETE TLV Received 0MVPN INSTALL TLV Received 0MVPN SELECTIVE DELETE TLV Received 0MVPN UPDATE TLV Received 0MVPN GROUP DELETE TLV Received 0MVPN MFD INSTALL TLV Received 0MVPN MFD DELETE TLV Received 0MVPN BIDIR RPDF UPDATE TLV Received 0MVPN BIDIR RP UPDATE TLV Received 0MVPN BIDIR CLEAR ALL GRP TLV Received 0MVPN BIDIR CLEAR RP GRP TLV Received 0MVPN BIDIR CLEAR ALL DF TLV Received 0MVPN BIDIR CLEAR RP DF TLV Received 0MVPN BIDIR CLEAR ALL RP TLV Received 0MVPN BIDIR NONDF INSTALL TLV Received 0INSTALL TLV Ack Sent 0SELECTIVE DELETE TLV Ack Sent 0GROUP DELETE TLV Ack Sent 0UPDATE TLV Ack Sent 0INPUT VLAN DELETE TLV Ack Sent 0OUTPUT VLAN DELETE TLV Ack Sent 0GLOBAL DELETE TLV Ack Sent 0MFD INSTALL TLV Ack Sent 0MFD DELETE TLV Ack Sent 0MFD GLOBAL DELETE Ack Sent 0NRPF MFD INSTALL TLV Ack Sent 0NRPF MFD DELETE TLV Ack Sent 0SUBNET INSTALL TLV Ack Sent 15SUBNET DELETE TLV Ack Sent 0MVPN INSTALL TLV Ack Sent 0MVPN SELECTIVE DELETE TLV Ack Sent 0MVPN UPDATE TLV Ack Sent 0MVPN GROUP DELETE TLV Ack Sent 0MVPN MFD INSTALL TLV Ack Sent 0MVPN MFD DELETE TLV Ack Sent 0MVPN BIDIR RPDF UPDATE TLV Ack Sent 0MVPN BIDIR RP UPDATE TLV Ack Sent 0MVPN BIDIR CLEAR ALL GRP TLV Ack Sent 1MVPN BIDIR CLEAR RP GRP TLV Ack Sent 0MVPN BIDIR CLEAR ALL DF TLV Ack Sent 0MVPN BIDIR CLEAR RP DF TLV Ack Sent 0MVPN BIDIR CLEAR ALL RP TLV Ack Sent 0MVPN BIDIR NONDF INSTALL TLV Ack Sent 0TLV Error Statistics--------------------------------------------------+------+Generic error 0L3 entry exist error 0Hash collision error 0L3 entry not found 0MFD exist error 0MFD not found error 0Invalid subnet error 0Bidir-RP not found error 0Bidir-DF partial fail error 0Bidir-DF Table full error 0TLV Debug Statistics--------------------------------------------------+------+Non RPF L3 failure 0Bidir DF install 0Bidir DF failure 0Bidir NDF install 0Bidir NDF failure 0Bidir DF err-tlv sent 0Bidir GRP err-tlv sent 0Router#Related Commands
show mvrp interface
To display Multiple VLAN Registration Protocol (MVRP) interface states, use the show mvrp interface command in privileged EXEC mode.
show mvrp interface [type slot/port ] [statistics]
Syntax Description
type slot/port
(Optional) The interface for which information is displayed.
statistics
(Optional) Displays MVRP statistics information for the MVRP port.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use this command to display MVRP interface details of the administrative and operational MVRP states of all or one particular IEEE 802.1q trunk port in the device.
Examples
The following example shows sample output. The fields are self-explanatory.
Router# show mvrp interfacePort Status Registrar StateFa3/1 off normalPort Join Timeout Leave Timeout Leaveall TimeoutFa3/1 201 600 700 1000Port Vlans DeclaredFa3/1 nonePort Vlans RegisteredFa3/1 nonePort Vlans Registered and in Spanning Tree Forwarding StateFa3/1 noneRelated Commands
show mvrp module
To display Multiple VLAN Registration Protocol (MVRP)-related information for a specific module, use the show mvrp module command in privileged EXEC mode.
show mvrp module module-number
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use this command to display MVRP module details of the administrative and operational MVRP states of all or one particular IEEE 802.1q trunk port in the device.
Examples
The following example shows sample summary output. The fields are self-explanatory.
Router# show mvrp module 3Port Status Registrar StateFa3/1 off normalPort Join Timeout Leave Timeout Leaveall TimeoutFa3/1 201 700 1000Fa3/5 201 700 1000Port Vlans DeclaredFa3/1 noneFa3/5 3,100Port Vlans RegisteredFa3/1 noneFa3/5 3,100Port Vlans Registered and in Spanning Tree Forwarding StateFa3/1 noneFa3/5 3Related Commands
show mvrp summary
To display the Multiple VLAN Registration Protocol (MVRP) configuration at the device level, use the show mvrp summary command in privileged EXEC mode.
show mvrp summary
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
Use this command to display MVRP configuration details.
Examples
The following example shows sample summary output for a device with MVRP configured. The fields are self-explanatory.
Router# show mvrp summaryMVRP global state : enabledMVRP VLAN creation : disabledVLANs created via MVRP : 20-45, 3001-3050Learning disabled on VLANs : noneRelated Commands
show mvrp interface
Displays details of the administrative and operational MVRP states of all or one particular IEEE 802.1q trunk port in the device.
show platform software status control-processor
To display status information about the control processors, use the show platform software status control-processor command in privileged EXEC or diagnostic mode.
show platform software status control-processor [brief]
Syntax Description
Command Modes
Privileged EXEC (#)
Diagnostic (diag)Command History
Usage Guidelines
Control processors consist of Embedded Services Processors (ESPs), Route Processors (RPs), and SPA Interface Processors (SIPs).
Use the show platform software status control-processor command to provide a quick view of the health of the system concerning memory and CPU usage on each processor.
The CPU usage output reflects the relative percentage of CPU usage during the latest two seconds instead of the cumulative percent usage over the entire uptime.
All control processors should show a status of Healthy. Other possible status values are Warning and Critical. Warning indicates that the router is operational but that the operating level should be reviewed. Critical implies that the router is near failure.
If you see a status of Warning or Critical, take the following actions:
•
•
Examples
The following example displays status information about the control processors:
Router# show platform software status control-processorRP0: online, statistics updated 7 seconds agoLoad Average: healthy1-Min: 0.16, status: healthy, under 5.005-Min: 0.16, status: healthy, under 5.0015-Min: 0.12, status: healthy, under 5.00Memory (kb): healthyTotal: 3733016Used: 1320804 (31%)Free: 2412212 (58%)Committed: 1889524 (45%), status: healthy, under 90%ESP0: online, statistics updated 7 seconds agoLoad Average: healthy1-Min: 0.00, status: healthy, under 5.005-Min: 0.00, status: healthy, under 5.0015-Min: 0.00, status: healthy, under 5.00Memory (kb): healthyTotal: 984996Used: 532492 (50%)Free: 452504 (43%)Committed: 1724096 (164%), status: healthy, under 300%SIP0: online, statistics updated 10 seconds agoLoad Average: healthy1-Min: 0.00, status: healthy, under 5.005-Min: 0.00, status: healthy, under 5.0015-Min: 0.00, status: healthy, under 5.00Memory (kb): warningTotal: 479884Used: 434476 (82%)Free: 45408 (8%)Committed: 202508 (38%), status: healthy, under 90%SIP1: online, statistics updated 10 seconds agoLoad Average: healthy1-Min: 0.00, status: healthy, under 5.005-Min: 0.00, status: healthy, under 5.0015-Min: 0.00, status: healthy, under 5.00Memory (kb): warningTotal: 479884Used: 430384 (82%)Free: 49500 (9%)Committed: 202512 (38%), status: healthy, under 90%The following example displays summary status information about the control processors with brief keyword:
Router# show platform software status control-processor briefLoad AverageSlot Status 1-Min 5-Min 15-MinRP0 Healthy 0.25 0.30 0.44RP1 Healthy 0.31 0.19 0.12ESP0 Healthy 0.01 0.05 0.02ESP1 Healthy 0.03 0.05 0.01SIP1 Healthy 0.15 0.07 0.01SIP2 Healthy 0.03 0.03 0.00Memory (kB)Slot Status Total Used (Pct) Free (Pct) Committed (Pct)RP0 Healthy 3722408 2514836 (60%) 1207572 (29%) 1891176 (45%)RP1 Healthy 3722408 2547488 (61%) 1174920 (28%) 1889976 (45%)ESP0 Healthy 2025468 1432088 (68%) 593380 (28%) 3136912 (149%)ESP1 Healthy 2025468 1377980 (65%) 647488 (30%) 3084412 (147%)SIP1 Healthy 480388 293084 (55%) 187304 (35%) 148532 (28%)SIP2 Healthy 480388 273992 (52%) 206396 (39%) 93188 (17%)CPU UtilizationSlot CPU User System Nice Idle IRQ SIRQ IOwaitRP0 0 30.12 1.69 0.00 67.63 0.13 0.41 0.00RP1 0 21.98 1.13 0.00 76.54 0.04 0.12 0.16ESP0 0 13.37 4.77 0.00 81.58 0.07 0.19 0.00ESP1 0 5.76 3.56 0.00 90.58 0.03 0.05 0.00SIP1 0 3.79 0.13 0.00 96.04 0.00 0.02 0.00SIP2 0 3.50 0.12 0.00 96.34 0.00 0.02 0.00Table 22 describes the significant fields shown in the display.
Related Commands
show platform software process list
Displays a list of the processes running in a given slot.
show port flowcontrol
To display per-port status information and statistics related to flow control, use the show port flowcontrol command in privileged EXEC mode.
show port flowcontrol [module-number[/port-number]]
Syntax Description
module-number
(Optional) Number of the module.
/port-number
(Optional) Number of the port on the module. If you do not specify a number, filters configured on all the ports on the module are shown.
Command Modes
Privileged EXEC (#)
Command History
12.2(11)T
This command was introduced and implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers.
Usage Guidelines
The Catalyst 2948G is a fixed configuration switch. All ports are located on module 2; for this reason, if you enter module-number/port-number 1/N, an error message is displayed.
Examples
The following example shows how to display the flow-control port status and statistics:
Router#show port flowcontrolPort Send-Flowcontrol Receive-Flowcntl RxPause TxPauseAdmin Oper Admin Oper----- ---------------- ---------------- ------- ------3/1 on disagree on disagree 0 03/2 off off off off 0 03/3 desired on desired off 10 10Table 23 describes the fields shown in the display.
Related Commands
set port flowcontrol
Sets the receive flow-control value for a particular Gigabit Ethernet switching module port.
show rep topology
To display Resilient Ethernet Protocol (REP) topology information for a segment or for all segments, including the primary and secondary edge ports in the segment, use the show rep topology command in privileged EXEC mode.
show rep topology [segment segment-id] [archive] [detail]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Examples
The following is sample output from the show rep topology segment command for segment 1. The fields show in the display are self-explanatory.
Router# show rep topology segment 1REP Segment 1BridgeName PortName Edge Role---------------- ---------- ---- ----sw1_multseg_3750 Gi1/1/1 Pri Altsw3_multseg_3400 Gi0/13 Opensw3_multseg_3400 Gi0/14 Altsw4_multseg_3400 Gi0/13 Opensw4_multseg_3400 Gi0/14 Opensw5_multseg_3400 Gi0/13 Opensw5_multseg_3400 Gi0/14 Opensw2_multseg_3750 Gi1/1/2 Opensw2_multseg_3750 Gi1/1/1 Opensw1_multseg_3750 Gi1/1/2 Sec OpenThis example shows output from the show rep topology detail command:
Router# show rep topology detailREP Segment 2repc_2_24ts, Fa0/2 (Primary Edge)Alternate Port, some vlans blockedBridge MAC: 0019.e714.5380Port Number: 004Port Priority: 080Neighbor Number: 1 / [-10]repc_3_12cs, Gi0/1 (Intermediate)Open Port, all vlans forwardingBridge MAC: 001a.a292.3580Port Number: 001Port Priority: 000Neighbor Number: 2 / [-9]repc_3_12cs, Po10 (Intermediate)Open Port, all vlans forwardingBridge MAC: 001a.a292.3580Port Number: 080Port Priority: 000Neighbor Number: 3 / [-8]repc_4_12cs, Po10 (Intermediate)Open Port, all vlans forwardingBridge MAC: 001a.a19d.7c80Port Number: 080Port Priority: 000Neighbor Number: 4 / [-7]repc_4_12cs, Gi0/2 (Intermediate)Alternate Port, some vlans blockedBridge MAC: 001a.a19d.7c80Port Number: 002Port Priority: 040Neighbor Number: 5 / [-6]<output truncated>This example shows output from the show rep topology segment archive command:
Router# show rep topology segment 1 archiveREP Segment 1BridgeName PortName Edge Role---------------- ---------- ---- ----sw1_multseg_3750 Gi1/1/1 Pri Opensw3_multseg_3400 Gi0/13 Opensw3_multseg_3400 Gi0/14 Opensw4_multseg_3400 Gi0/13 Opensw4_multseg_3400 Gi0/14 Opensw5_multseg_3400 Gi0/13 Opensw5_multseg_3400 Gi0/14 Opensw2_multseg_3750 Gi1/1/2 Altsw2_multseg_3750 Gi1/1/1 Opensw1_multseg_3750 Gi1/1/2 Sec OpenRelated Commands
show spanning-tree
To display spanning-tree information for the specified spanning-tree instances, use the show spanning-tree command in privileged EXEC mode.
Cisco 2600, 3660, and 3845 Series Switches
show spanning-tree [bridge-group] [active | backbonefast | blockedports | bridge | brief | inconsistentports | interface interface-type interface-number| root | summary [totals] | uplinkfast | vlan vlan-id]
Cisco 6500/6000 Catalyst Series Switches and Cisco 7600 Series Routers
show spanning-tree [bridge-group | active | backbonefast | bridge [id] | detail | inconsistentports | interface interface-type interface-number [portfast [edge]] | mst [list | configuration [digest]] | root | summary [totals] | uplinkfast | vlan vlan-id | port-channel number | pathcost method]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
The keywords and arguments that are available with the show spanning-tree command vary depending on the platform you are using and the network modules that are installed and operational.
Cisco 2600, 3660, and 3845 Series Switches
The valid values for interface interface-type are:
•
•
Cisco 6500/6000 Catalyst Switches and 7600 Series Routers
The port-channel number values from 257 to 282 are supported on the Content Switching Module (CSM) and the Firewal Services Module (FWSM) only.
The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 2 to 13 and valid values for the port number are from 1 to 48.
When checking spanning tree-active states and you have a large number of VLANs, you can enter the show spanning-tree summary total command. You can display the total number of VLANs without having to scroll through the list of VLANs.
The valid values for interface interface-type are:
•
•
•
•
•
•
•
The valid values for keyword pathcoast method are:
•
•
•
•
•
•
When you run the show spanning-tree command for a VLAN or an interface the switch router will display the different port states for the VLAN or interface. The valid spanning-tree port states are listening, learning, forwarding, blocking, disabled, and loopback. See Table 24 for definitions of the port states:
Examples
Cisco 2600, 3660, and 3845 Series Switches
The following example shows that bridge group 1 is running the VLAN Bridge Spanning Tree Protocol:
Router# show spanning-tree 1Bridge group 1 is executing the VLAN Bridge compatible Spanning Tree ProtocolBridge Identifier has priority 32768, address 0000.0c37.b055Configured hello time 2, max age 30, forward delay 20We are the root of the spanning treePort Number size is 10 bitsTopology change flag not set, detected flag not setTimes: hold 1, topology change 35, notification 2hello 2, max age 30, forward delay 20Timers: hello 0, topology change 0, notification 0bridge aging time 300Port 8 (Ethernet1) of Bridge group 1 is forwardingPort path cost 100, Port priority 128Designated root has priority 32768, address 0000.0c37.b055Designated bridge has priority 32768, address 0000.0c37.b055Designated port is 8, path cost 0Timers: message age 0, forward delay 0, hold 0BPDU: sent 184, received 0The following is sample output from the show spanning-tree summary command:
Router# show spanning-tree summaryUplinkFast is disabledName Blocking Listening Learning Forwarding STP Active-------------------- -------- --------- -------- ---------- ----------VLAN1 23 0 0 1 24-------------------- -------- --------- -------- ---------- ----------1 VLAN 23 0 0 1 24Table 25 describes the significant fields shown in the display.
The following is sample output from the show spanning-tree brief command:
Router# show spanning-tree briefVLAN1Spanning tree enabled protocol IEEEROOT ID Priority 32768Address 0030.7172.66c4Hello Time 2 sec Max Age 20 sec Forward Delay 15 secVLAN1Spanning tree enabled protocol IEEEROOT ID Priority 32768Address 0030.7172.66c4Port DesignatedName Port ID Prio Cost Sts Cost Bridge ID Port ID------- ------- ---- ---- --- ---- -------------- -------Fa0/11 128.17 128 100 BLK 38 0404.0400.0001 128.17Fa0/12 128.18 128 100 BLK 38 0404.0400.0001 128.18Fa0/13 128.19 128 100 BLK 38 0404.0400.0001 128.19Fa0/14 128.20 128 100 BLK 38 0404.0400.0001 128.20Fa0/15 128.21 128 100 BLK 38 0404.0400.0001 128.21Fa0/16 128.22 128 100 BLK 38 0404.0400.0001 128.22Fa0/17 128.23 128 100 BLK 38 0404.0400.0001 128.23Fa0/18 128.24 128 100 BLK 38 0404.0400.0001 128.24Fa0/19 128.25 128 100 BLK 38 0404.0400.0001 128.25Fa0/20 128.26 128 100 BLK 38 0404.0400.0001 128.26Fa0/21 128.27 128 100 BLK 38 0404.0400.0001 128.27Port DesignatedName Port ID Prio Cost Sts Cost Bridge ID Port ID------- ------- ---- ---- --- ---- -------------- -------Fa0/22 128.28 128 100 BLK 38 0404.0400.0001 128.28Fa0/23 128.29 128 100 BLK 38 0404.0400.0001 128.29Fa0/24 128.30 128 100 BLK 38 0404.0400.0001 128.30 Hello Time 2 sec Max Age 20 sec Forward Delay 15 secTable 26 describes the significant fields shown in the display.
The following is sample output from the show spanning-tree vlan 1 command:
Router# show spanning-tree vlan 1Spanning tree 1 is executing the IEEE compatible Spanning Tree protocolBridge Identifier has priority 32768, address 00e0.1eb2.ddc0Configured hello time 2, max age 20, forward delay 15Current root has priority 32768, address 0010.0b3f.ac80Root port is 5, cost of root path is 10Topology change flag not set, detected flag not set, changes 1Times: hold 1, topology change 35, notification 2hello 2, max age 20, forward delay 15Timers: hello 0, topology change 0, notification 0Interface Fa0/1 in Spanning tree 1 is downPort path cost 100, Port priority 128Designated root has priority 32768, address 0010.0b3f.ac80Designated bridge has priority 32768, address 00e0.1eb2.ddc0Designated port is 1, path cost 10Timers: message age 0, forward delay 0, hold 0BPDU: sent 0, received 0Table 27 describes the significant fields shown in the display.
The following is sample output from the show spanning-tree interface fastethernet0/3 command:
Router# show spanning-tree interface fastethernet0/3Interface Fa0/3 (port 3) in Spanning tree 1 is downPort path cost 100, Port priority 128Designated root has priority 6000, address 0090.2bba.7a40Designated bridge has priority 32768, address 00e0.1e9f.4abfDesignated port is 3, path cost 410Timers: message age 0, forward delay 0, hold 0BPDU: sent 0, received 0Cisco 6500/6000 Series Catalyst Switches and 7600 Series Routers
This example shows how to display a summary of interface information:
Router#show spanning-treeVLAN0001Spanning tree enabled protocol ieeeRoot ID Priority 4097Address 0004.9b78.0800This bridge is the rootHello Time 2 sec Max Age 20 sec Forward Delay 15 secBridge ID Priority 4097 (priority 4096 sys-id-ext 1)Address 0004.9b78.0800Hello Time 2 sec Max Age 20 sec Forward Delay 15 secAging Time 15Interface Port ID Designated Port IDName Prio.Nbr Cost Sts Cost Bridge ID Prio.Nbr---------------- -------- --------- --- --------- -------------------- --------Gi2/1 128.65 4 LIS 0 4097 0004.9b78.0800 128.65Gi2/2 128.66 4 LIS 0 4097 0004.9b78.0800 128.66Fa4/3 128.195 19 LIS 0 4097 0004.9b78.0800 128.195Fa4/4 128.196 19 BLK 0 4097 0004.9b78.0800 128.195Router#Table 28 describes the fields that are shown in the example.
Table 28 show spanning-tree Command Output Fields
Port ID Prio.Nbr
Port ID and priority number.
Cost
Port cost.
Sts
Status information.
This example shows how to display information about the spanning tree on active interfaces only:
Router#show spanning-tree activeUplinkFast is disabledBackboneFast is disabledVLAN1 is executing the ieee compatible Spanning Tree protocolBridge Identifier has priority 32768, address 0050.3e8d.6401Configured hello time 2, max age 20, forward delay 15Current root has priority 16384, address 0060.704c.7000Root port is 265 (FastEthernet5/9), cost of root path is 38Topology change flag not set, detected flag not setNumber of topology changes 0 last change occurred 18:13:54 agoTimes: hold 1, topology change 24, notification 2hello 2, max age 14, forward delay 10Timers: hello 0, topology change 0, notification 0Router#This example shows how to display the status of spanning-tree BackboneFast:
Router# show spanning-tree backbonefastBackboneFast is enabledBackboneFast statistics-----------------------Number of transition via backboneFast (all VLANs) : 0Number of inferior BPDUs received (all VLANs) : 0Number of RLQ request PDUs received (all VLANs) : 0Number of RLQ response PDUs received (all VLANs) : 0Number of RLQ request PDUs sent (all VLANs) : 0Number of RLQ response PDUs sent (all VLANs) : 0Router#This example shows how to display information about the spanning tree for this bridge only:
Router# show spanning-tree bridgeVLAN1Bridge ID Priority 32768Address 0050.3e8d.6401Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec.Router#This example shows how to display detailed information about the interface:
Router#show spanning-tree detailVLAN1 is executing the ieee compatible Spanning Tree protocolBridge Identifier has priority 4096, address 00d0.00b8.1401Configured hello time 2, max age 20, forward delay 15We are the root of the spanning treeTopology change flag not set, detected flag not setNumber of topology changes 9 last change occurred 02:41:34 agofrom FastEthernet4/21Times: hold 1, topology change 35, notification 2hello 2, max age 20, forward delay 15Timers: hello 1, topology change 0, notification 0, aging 300Port 213 (FastEthernet4/21) of VLAN1 is forwardingPort path cost 19, Port priority 128, Port Identifier 128.213.Designated root has priority 4096, address 00d0.00b8.1401Designated bridge has priority 4096, address 00d0.00b8.1401Designated port id is 128.213, designated path cost 0Timers: message age 0, forward delay 0, hold 0Number of transitions to forwarding state: 1BPDU: sent 4845, received 1Router#This example shows how to display information about the spanning tree for a specific interface:
Router# show spanning-tree interface fastethernet 5/9Interface Fa0/10 (port 23) in Spanning tree 1 is ROOT-INCONSISTENT Port path cost 100, Port priority 128 Designated root has priority 8192, address 0090.0c71.a400 Designated bridge has priority 32768, address 00e0.1e9f.8940This example shows how to display information about the spanning tree for a specific bridge group:
Router#show spanning-tree 1UplinkFast is disabledBackboneFast is disabledBridge group 1 is executing the ieee compatible Spanning Tree protocolBridge Identifier has priority 32768, address 00d0.d39c.004dConfigured hello time 2, max age 20, forward delay 15Current root has priority 32768, address 00d0.d39b.fdddRoot port is 7 (FastEthernet2/2), cost of root path is 19Topology change flag set, detected flag not setNumber of topology changes 3 last change occurred 00:00:01 agofrom FastEthernet2/2Times: hold 1, topology change 35, notification 2hello 2, max age 20, forward delay 15Timers: hello 0, topology change 0, notification 0 bridge aging time 15Port 2 (Ethernet0/1/0) of Bridge group 1 is downPort path cost 100, Port priority 128Designated root has priority 32768, address 0050.0bab.1808Designated bridge has priority 32768, address 0050.0bab.1808Designated port is 2, path cost 0Timers: message age 0, forward delay 0, hold 0BPDU: sent 0, received 0Router#This example shows how to display a summary of port states:
Router#show spanning-tree summaryRoot bridge for: Bridge group 1, VLAN0001, VLAN0004-VLAN1005VLAN1013-VLAN1499, VLAN2001-VLAN4094EtherChannel misconfiguration guard is enabledExtended system ID is enabledPortfast is enabled by defaultPortFast BPDU Guard is disabled by defaultPortfast BPDU Filter is disabled by defaultLoopguard is disabled by defaultUplinkFast is disabledBackboneFast is disabledPlatform PVST Simulation is enabledPathcost method used is longName Blocking Listening Learning Forwarding STP Active---------------------- -------- --------- -------- ---------- ----------1 bridge 0 0 0 1 13584 vlans 3584 0 0 7168 10752Blocking Listening Learning Forwarding STP Active---------------------- -------- --------- -------- ---------- ----------Total 3584 0 0 7169 10753Router#This example shows how to display the total lines of the spanning-tree state section:
Router#show spanning-tree summary totalRoot bridge for:Bridge group 10, VLAN1, VLAN6, VLAN1000.Extended system ID is enabled.PortFast BPDU Guard is disabledEtherChannel misconfiguration guard is enabledUplinkFast is disabledBackboneFast is disabledDefault pathcost method used is longName Blocking Listening Learning Forwarding STP Active-------------------- -------- --------- -------- ---------- ----------105 VLANs 3433 0 0 105 3538BackboneFast statistics-----------------------Number of transition via backboneFast (all VLANs) :0Number of inferior BPDUs received (all VLANs) :0Number of RLQ request PDUs received (all VLANs) :0Number of RLQ response PDUs received (all VLANs) :0Number of RLQ request PDUs sent (all VLANs) :0Number of RLQ response PDUs sent (all VLANs) :0Router#This example shows how to display information about the spanning tree for a specific VLAN:
Router#show spanning-tree vlan 200VLAN0200Spanning tree enabled protocol ieeeRoot ID Priority 32768Address 00d0.00b8.14c8This bridge is the rootHello Time 2 sec Max Age 20 sec Forward Delay 15 secBridge ID Priority 32768Address 00d0.00b8.14c8Hello Time 2 sec Max Age 20 sec Forward Delay 15 secAging Time 300Interface Role Sts Cost Prio.Nbr Status---------------- ---- --- --------- -------- --------------------------------Fa4/4 Desg FWD 200000 128.196 P2pFa4/5 Back BLK 200000 128.197 P2pRouter#Table 29 describes the fields that are shown in the example.
Table 29 show spanning-tree vlan Command Output Fields
Role
Current 802.1w role; valid values are Boun (boundary), Desg (designated), Root, Altn (alternate), and Back (backup).
Sts
Spanning-tree states; valid values are BKN* (broken)1 , BLK (blocking), DWN (down), LTN (listening), LBK (loopback), LRN (learning), and FWD (forwarding).
Cost
Port cost.
Prio.Nbr
Port ID that consists of the port priority and the port number.
Status
Status information; valid values are as follows:
•
•
•
•
•
1 For information on the *, see the definition for the Status field.
This example shows how to determine if any ports are in the root-inconsistent state:
Router#show spanning-tree inconsistentportsName Interface Inconsistency-------------------- -------------------- ------------------VLAN1 FastEthernet3/1 Root InconsistentNumber of inconsistent ports (segments) in the system :1Router#Related Commands
show spanning-tree mst
To display the information about the Multiple Spanning Tree (MST) protocol, use the show spanning-tree mst command in privileged EXEC mode.
show spanning-tree mst [instance-id-number [detail] [interface] | configuration [digest] | detail | interface interface [detail]]
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
The valid values for interface depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 2 to 13 and valid values for the port number are from 1 to 48.
The number of valid values for port-channel number are a maximum of 64 values ranging from 1 to 282. The port-channel number values from 257 to 282 are supported on the Content Switching Module (CSM) and the Firewall Serices Module (FWSM) only.
The number of valid values for vlan are from 1 to 4094.
In the output display of the show spanning-tree mst configuration command, a warning message may display. This message appears if you do not map secondary VLANs to the same instance as the associated primary VLAN. The display includes a list of the secondary VLANs that are not mapped to the same instance as the associated primary VLAN. The warning message is as follows:
These secondary vlans are not mapped to the same instance as their primary:-> 3In the output display of the show spanning-tree mst configuration digest command, if the output applies to both standard and prestandard bridges at the same time on a per-port basis, two different digests are displayed.
If you configure a port to transmit prestandard PortFast Bridge Protocol Data Units (BPDUs) only, the prestandard flag displays in the show spanning-tree commands. The variations of the prestandard flag are as follows:
•
•
•
If the configuration is not prestandard compliant, for example, a single MST instance has an ID that is greater than or equal to 16, the prestandard digest is not computed and the following output is displayed:
Router# show spanning-tree mst configuration digestName [region1]Revision 2 Instances configured 3Digest 0x3C60DBF24B03EBF09C5922F456D18A03Pre-std Digest N/A, configuration not pre-standard compatibleRouter#MST BPDUs include an MSTCI that consists of the region name, region revision, and an MD5 digest of the VLAN-to-instance mapping of the MST configuration.
See the show spanning-tree command for output definitions.
Examples
This example shows how to display information about the region configuration:
Router#show spanning-tree mst configurationName [leo]Revision 2702Instance Vlans mapped-------- ---------------------------------------------------------------------0 1-9,11-19,21-29,31-39,41-40941 10,20,30,40-------------------------------------------------------------------------------This example shows how to display additional MST-protocol values:
Router# show spanning-tree mst 3 detail###### MST03 vlans mapped: 3,3000-3999Bridge address 0002.172c.f400 priority 32771 (32768 sysid 3)Root this switch for MST03GigabitEthernet1/1 of MST03 is boundary forwardingPort info port id 128.1 priority 128cost 20000Designated root address 0002.172c.f400 priority 32771cost 0Designated bridge address 0002.172c.f400 priority 32771 portid 128.1Timers: message expires in 0 sec, forward delay 0, forward transitions 1Bpdus (MRecords) sent 4, received 0FastEthernet4/1 of MST03 is designated forwardingPort info port id 128.193 priority 128 cost200000Designated root address 0002.172c.f400 priority 32771cost 0Designated bridge address 0002.172c.f400 priority 32771 port id128.193Timers: message expires in 0 sec, forward delay 0, forward transitions 1Bpdus (MRecords) sent 254, received 1FastEthernet4/2 of MST03 is backup blockingPort info port id 128.194 priority 128 cost200000Designated root address 0002.172c.f400 priority 32771cost 0Designated bridge address 0002.172c.f400 priority 32771 port id128.193Timers: message expires in 2 sec, forward delay 0, forward transitions 1Bpdus (MRecords) sent 3, received 252Router#This example shows how to display MST information for a specific interface:
Router# show spanning-tree mst 0 interface fastethernet 4/1 detailEdge port: no (trunk) port guard : none(default)Link type: point-to-point (point-to-point) bpdu filter: disable(default)Boundary : internal bpdu guard : disable(default)FastEthernet4/1 of MST00 is designated forwardingVlans mapped to MST00 1-2,4-2999,4000-4094Port info port id 128.193 priority 128 cost200000Designated root address 0050.3e66.d000 priority 8193cost 20004Designated ist master address 0002.172c.f400 priority 49152cost 0Designated bridge address 0002.172c.f400 priority 49152 port id128.193Timers: message expires in 0 sec, forward delay 0, forward transitions 1Bpdus sent 492, received 3Router#This example shows how to display the MD5 digest included in the current MSTCI:
Router# show spanning-tree mst configuration digestName [mst-config]Revision 10 Instances configured 25Digest 0x40D5ECA178C657835C83BBCB16723192Pre-std Digest 0x27BF112A75B72781ED928D9EC5BB4251Router#This example displays the new master role for all MST instances at the boundary of the region on the port that is a CIST root port:
Router# show spanning-tree mst interface fastethernet4/9FastEthernet4/9 of MST00 is root forwardingEdge port: no (default) port guard : none (default)Link type: point-to-point (auto) bpdu filter: disable (default)Boundary : boundary (RSTP) bpdu guard : disable (default)Bpdus sent 3428, received 6771Instance Role Sts Cost Prio.Nbr Vlans mapped-------- ---- --- --------- -------- -------------------------------0 Root FWD 200000 128.201 2-7,10,12-99,101-999,2001-3999,4001-40948 Mstr FWD 200000 128.201 8,40009 Mstr FWD 200000 128.201 1,9,10011 Mstr FWD 200000 128.201 11,1000-2000Router#Related Commands
show spantree
To display spanning-tree information for a virtual LAN (VLAN) or port, use the show spantree command in privileged EXEC mode.
show spantree [vlan] [active]
show spantree mod/port
Syntax Description
Command Modes
Privileged EXEC (#)
Command History
Usage Guidelines
If you do not specify the VLAN number, VLAN 1 is displayed.
If you are in Multiple Instances of Spanning Tree (MISTP) mode, instance information is not displayed.
The maximum length of the channel port list is 47. The space in the Port(s) column might not be enough to display the entire list in one line. If this is the case, the port list is split into multiple lines. For example, in the following display, ports 6/5-8, 6/13, 6/15, 6/17, 6/19 are channeling:
...Port(s) Vlan Port-State Cost Prio Portfast Channel_id------------------------ ---- ------------- --------- ---- -------- ----------6/5-8,6/13,6/15,6/17,6/1 1 not-connected 2684354 32 disabled 09...The Link Aggregation Control Protocol (LACP) for channels does not support half-duplex links. If a port is in active/passive mode and becomes half duplex, the port is suspended (and a syslog message is generated).
The port is shown as "connected" if you use the show port command and as "not connected" if you use the show spantree command. This discrepancy occurs because the port is physically connected but never joined the active spanning-tree topology. To get the port to join the active spanning- tree topology, either set the duplex to full or set the channel mode to off for that port.
Examples
The following example shows how to display the active spanning tree port configuration for VLAN 1 while in Per VLAN Spanning Tree (PVST+ mode):
Router# (enable) show spantree 1 activeVLAN 1Spanning tree mode PVST+Spanning tree type ieeeSpanning tree enabledDesignated Root 00-60-70-4c-70-00Designated Root Priority 16384Designated Root Cost 19Designated Root Port 2/3Root Max Age 14 sec Hello Time 2 sec Forward Delay 10 secBridge ID MAC ADDR 00-d0-00-4c-18-00Bridge ID Priority 32768Bridge Max Age 20 sec Hello Time 2 sec Forward Delay 15 secPort Vlan Port-State Cost Prio Portfast Channel_id------------------------ ---- ------------- --------- ---- -------- ----------2/3 1 forwarding 19 32 disabled 02/12 1 forwarding 19 32 disabled 0The following example shows how to display the active spanning-tree port configuration for VLAN 1 (while in MISTP mode):
Router# (enable) show spantree 1 activeVLAN 1Spanning tree mode MISTPSpanning tree type ieeeSpanning tree enabledVLAN mapped to MISTP Instance: 1Port Vlan Port-State Cost Prio Portfast Channel_id------------------------ ---- ------------- --------- ---- -------- ----------2/3 1 forwarding 200000 32 disabled 02/12 1 forwarding 200000 32 disabled 0Table 30 describes the significant fields shown in the displays.
Related Commands
show ssl-proxy module state
To display the spanning-tree state for the specified VLAN, enter the show ssl-proxy module state command in user EXEC mode.
show ssl-proxy module mod state
Syntax Description
Command Modes
User EXEC (>)
Command History
12.2(18)SXD
Support for this command was introduced on the Supervisor Engine 720.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
Usage Guidelines
This command is supported on Cisco 7600 series routers that are configured with a Secure Sockets Layer (SSL) Services Module only.
Examples
This example shows how to verify that the VLAN information displayed matches the VLAN configuration. The fields shown in the display are self-explanatory.
Router# show ssl-proxy module 6 stateSSL-services module 6 data-port:Switchport:EnabledAdministrative Mode:trunkOperational Mode:trunkAdministrative Trunking Encapsulation:dot1qOperational Trunking Encapsulation:dot1qNegotiation of Trunking:OffAccess Mode VLAN:1 (default)Trunking Native Mode VLAN:1 (default)Trunking VLANs Enabled:100Pruning VLANs Enabled:2-1001Vlans allowed on trunk:100Vlans allowed and active in management domain:100Vlans in spanning tree forwarding state and not pruned:100Allowed-vlan :100Router#Related Commands
ssl-proxy module allowed-vlan
Adds the VLANs allowed over the trunk to the SSL Services Module.
show udld
To display the administrative and operational Unidirectional Link Detection Protocol (UDLD) status, use the show udld command in user EXEC mode.
show udld [interface-id | neighbors]
Syntax Description
interface-id
(Optional) Interface name and number.
neighbors
(Optional) Displays neighbor information only.
Command Modes
User EXEC (>)
Command History
Usage Guidelines
If you do not enter an interface-id value, the administrative and operational UDLD status for all interfaces are displayed.
Examples
This example shows how to display the UDLD state for a single interface. The fields shown in the display are self-explanatory.
Router#show udld gigabitethernet2/2Interface Gi2/2---Port enable administrative configuration setting: Follows device defaultPort enable operational state: EnabledCurrent bidirectional state: BidirectionalCurrent operational state: AdvertisementMessage interval: 60Time out interval: 5No multiple neighbors detectedEntry 1---Expiration time: 146Device ID: 1Current neighbor state: BidirectionalDevice name: 0050e2826000Port ID: 2/1Neighbor echo 1 device: SAD03160954Neighbor echo 1 port: Gi1/1Message interval: 5CDP Device name: 066527791Router#This example shows how to display neighbor information only. The fields shown in the display are self-explanatory.
Router#show udld neighborsPort Device Name Device ID Port-ID OperState-------- ------------------------------ ------------ ------- --------------Gi3/1 SAL0734K5R2 1 Gi4/1 BidirectionalGi4/1 SAL0734K5R2 1 Gi3/1 BidirectionalRouter#Related Commands
udld
Enables aggressive or normal mode in UDLD and sets the configurable message time.
udld port
Enables UDLD on the interface or enables UDLD in aggressive mode on the interface.
