Table Of Contents

A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V -

Index

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

aaa authorization network command 2-5

AAA methods 2-3

abort command 2-533

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-97

MAC, displaying 2-332

access map configuration mode 2-169

access mode 2-486

access ports 2-486

ACEs 2-53, 2-228

ACLs

deny 2-51

displaying 2-258

for non-IP protocols 2-149

IP 2-97

matching 2-169

on Layer 2 interfaces 2-97

permit 2-226

action command 2-6

address aliasing 2-217

aggregate-port learner 2-222

allowed VLANs 2-500

apply command 2-533

archive download-sw command 2-8

archive tar command 2-11

archive upload-sw command 2-14

audience xv

authentication failed VLAN

See dot1x auth-fail vlan

auth-fail max-attempts

See dot1x auth-fail max-attempts

auth-fail vlan

See dot1x auth-fail vlan

authorization state of controlled port 2-76

autonegotiation of duplex mode 2-83

auto qos voip command 2-16

B

BackboneFast, for STP 2-424

backup interfaces

configuring 2-481

displaying 2-303

boot (boot loader) command A-2

boot boothlpr command 2-20

boot config-file command 2-21

boot enable-break command 2-22

boot helper command 2-23

boot helper-config file command 2-24

booting

Cisco IOS image 2-27

displaying environment variables 2-266

interrupting 2-22

manually 2-25

boot loader

accessing A-1

boot loader (continued)

booting

Cisco IOS image A-2

helper image 2-23

directories

creating A-15

displaying a list of A-7

removing A-19

displaying

available commands A-12

memory heap utilization A-14

version A-26

environment variables

described A-20

displaying settings A-20

location of A-21

setting A-20

unsetting A-24

files

copying A-5

deleting A-6

displaying a list of A-7

displaying the contents of A-4, A-16, A-23

renaming A-17

file system

formatting A-10

initializing flash A-9

running a consistency check A-11

loading helper images A-13

resetting the system A-18

boot manual command 2-25

boot private-config-file command 2-26

boot system command 2-27

BPDU filtering, for spanning tree 2-425, 2-458

BPDU guard, for spanning tree 2-427, 2-458

break key detection 2-248, A-1

broadcast storm control 2-476

C

cat (boot loader) command A-4

caution, description xvi

channel-group command 2-28

channel-protocol command 2-31

Cisco SoftPhone

auto-QoS configuration 2-16

trusting packets sent from 2-209

class command 2-32

class-map command 2-34

class maps

creating 2-34

defining the match criteria 2-171

displaying 2-268

class of service

See CoS

clear dot1x command 2-36

clear eap sessions command 2-37

clear lacp command 2-38

clear mac address-table command 2-39, 2-40

clear pagp command 2-41

clear port-security command 2-42

clear spanning-tree counters command 2-44

clear spanning-tree detected-protocols command 2-45

clear vmps statistics command 2-46

clear vtp counters command 2-47

clusters

SNMP trap 2-415

command modes defined 1-1

configuration, initial

See getting started guide and hardware installation guide

configuration files

password recovery disable considerations A-1

specifying the name 2-21, 2-26

configuring multiple interfaces 2-94

config-vlan mode

commands 2-520

description 1-4

config-vlan mode (continued)

entering 2-519

summary 1-2

conventions

command xv

for examples xvi

publication xv

text xv

copy (boot loader) command A-5

CoS

assigning default value to incoming packets 2-179

overriding the incoming value 2-179

CoS-to-DSCP map 2-183

CPU ASIC statistics, displaying 2-269

crashinfo files 2-89

D

debug auto qos command B-2

debug backup command B-4

debug dot1x command B-5

debug dtp command B-6

debug eap command B-7

debug etherchannel command B-8

debug interface command B-9

debug ip igmp filter command B-10

debug ip igmp max-groups command B-11

debug ip igmp snooping command B-12

debug lacp command B-13

debug mac-notification command B-14

debug matm command B-15

debug matm move update command B-16

debug monitor command B-17

debug mvrdbg command B-18

debug nvram command B-19

debug pagp command B-20

debug platform acl command B-21

debug platform backup interface command B-22

debug platform cpu-queues command B-23

debug platform dot1x command B-25

debug platform etherchannel command B-26

debug platform forw-tcam command B-27

debug platform ip dhcp command B-28

debug platform ip igmp snooping command B-29

debug platform led command B-31

debug platform matm command B-32

debug platform messaging application command B-33

debug platform phy command B-34

debug platform pm command B-36

debug platform port-asic command B-38

debug platform port-security command B-39

debug platform qos-acl-tcam command B-40

debug platform remote-commands command B-41

debug platform resource-manager command B-42

debug platform snmp command B-43

debug platform span command B-44

debug platform supervisor-asic command B-45

debug platform sw-bridge command B-46

debug platform tcam command B-47

debug platform udld command B-49

debug platform vlan command B-50

debug pm command B-51

debug port-security command B-53

debug qos-manager command B-54

debug spanning-tree backbonefast command B-57

debug spanning-tree bpdu command B-58

debug spanning-tree bpdu-opt command B-59

debug spanning-tree command B-55

debug spanning-tree mstp command B-60

debug spanning-tree switch command B-62

debug spanning-tree uplinkfast command B-64

debug sw-vlan command B-65

debug sw-vlan ifs command B-67

debug sw-vlan notification command B-68

debug sw-vlan vtp command B-70

debug udld command B-72

debug vqpc command B-74

define interface-range command 2-48

delete (boot loader) command A-6

delete command 2-50

deny command 2-51

detect mechanism, causes 2-85

device manager requirements xvi

DHCP snooping

accepting untrusted packets from edge switch 2-104

enabling

on a VLAN 2-111

option 82 2-102, 2-104

trust on an interface 2-109

error recovery timer 2-87

rate limiting 2-108

DHCP snooping binding database

bindings

displaying 2-314

displaying

binding entries 2-314

dir (boot loader) command A-7

directories, deleting 2-50

documentation, related xvi

document conventions xv

domain name, VTP 2-542, 2-546

dot1x auth-fail max-attempts 2-56

dot1x auth-fail vlan 2-58

dot1x command 2-54

dot1x control-direction command 2-60

dot1x critical global configuration command 2-62

dot1x critical interface configuration command 2-64

dot1x default command 2-66

dot1x guest-vlan command 2-67

dot1x host-mode command 2-69

dot1x initialize command 2-70

dot1x mac-auth-bypass command 2-71

dot1x max-reauth-req command 2-73

dot1x max-req command 2-74

dot1x pae command 2-75

dot1x port-control command 2-76

dot1x re-authenticate command 2-78

dot1x reauthentication command 2-79

dot1x timeout command 2-80

dropping packets, with ACL matches 2-6

DSCP-to-CoS map 2-183

DSCP-to-DSCP-mutation map 2-183

DTP 2-487

DTP flap

error detection for 2-85

error recovery timer 2-87

DTP negotiation 2-488

duplex command 2-83

dynamic-access ports

configuring 2-479

restrictions 2-479

dynamic auto VLAN membership mode 2-486

dynamic desirable VLAN membership mode 2-486

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

Dynamic Trunking Protocol

See DTP

E

EAP-request/identity frame

maximum number to send 2-74

response time before retransmitting 2-80

encapsulation methods 2-500

environment variables, displaying 2-266

errdisable detect cause command 2-85

errdisable recovery command 2-87

error conditions, displaying 2-294

error disable detection 2-85

error-disabled interfaces, displaying 2-303

EtherChannel

assigning Ethernet interface to channel group 2-28

creating port-channel logical interface 2-92

debug EtherChannel/PAgP, display B-8

debug platform-specific events, display B-26

displaying 2-298

EtherChannel (continued

interface information, displaying 2-303

LACP

clearing channel-group information 2-38

debug messages, display B-13

displaying 2-326

modes 2-28

port priority for hot-standby ports 2-137

restricting a protocol 2-31

system priority 2-139

load-distribution methods 2-236

PAgP

aggregate-port learner 2-222

clearing channel-group information 2-41

debug messages, display B-20

displaying 2-376

error detection for 2-85

error recovery timer 2-87

learn method 2-222

modes 2-28

physical-port learner 2-222

priority of interface for transmitted traffic 2-224

Ethernet controller, internal register display 2-271

Ethernet statistics, collecting 2-247

examples, conventions for xvi

exception crashinfo command 2-89

exit command 2-533

extended-range VLANs

and allowed VLAN list 2-500

and pruning-eligible list 2-500

configuring 2-519

extended system ID for STP 2-433

F

file name, VTP 2-542

files, deleting 2-50

flash_init (boot loader) command A-9

Flex Links

configuring 2-481

displaying 2-303

flowcontrol command 2-90

format (boot loader) command A-10

forwarding packets, with ACL matches 2-6

forwarding results, display C-6

frame forwarding information, displaying C-6

fsck (boot loader) command A-11

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-258

help (boot loader) command A-12

hierarchical policy maps 2-234

host connection, port configuration 2-485

I

IEEE 802.1x

and switchport modes 2-487

violation error recovery 2-87

See also port-based authentication

IEEE 802.1X Port Based Authentication

enabling guest VLAN supplicant 2-57

IGMP filters

applying 2-114

debug messages, display B-10

IGMP groups, setting maximum 2-115

IGMP maximum groups, debugging B-11

IGMP profiles

creating 2-117

displaying 2-316

IGMP snooping

adding ports as a static member of a group 2-133

displaying 2-317, 2-322, 2-324

enabling 2-119

enabling the configurable-leave timer 2-121

enabling the Immediate-Leave feature 2-130

flooding query count 2-127

interface topology change notification behavior 2-129

multicast table 2-320

querier 2-123

query solicitation 2-127

report suppression 2-125

switch topology change notification behavior 2-127

images

See software images

Immediate-Leave feature, MVR 2-219

immediate-leave processing 2-130

initial configuration

See getting started guide and hardware installation guide

interface configuration mode 1-2, 1-4

interface port-channel command 2-92

interface range command 2-94

interface-range macros 2-48

interfaces

assigning Ethernet interface to channel group 2-28

configuring 2-83

configuring multiple 2-94

creating port-channel logical 2-92

debug messages, display B-9

disabling 2-413

displaying the MAC address table 2-344

restarting 2-413

interface speed, configuring 2-468

interface vlan command 2-96

internal registers, displaying 2-271, 2-278

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for 2-85

error recovery timer 2-87

ip access-group command 2-97

ip address command 2-99

IP addresses, setting 2-99

IP address matching 2-169

IP DHCP snooping

See DHCP snooping

ip dhcp snooping command 2-101

ip dhcp snooping information option allow-untrusted command 2-104

ip dhcp snooping information option command 2-102

ip dhcp snooping information option format remote-id command 2-106

ip dhcp snooping limit rate command 2-108

ip dhcp snooping trust command 2-109

ip dhcp snooping verify command 2-110

ip dhcp snooping vlan command 2-111

ip dhcp snooping vlan information option format-type circuit-id string command 2-112

ip igmp filter command 2-114

ip igmp max-groups command 2-115

ip igmp profile command 2-117

ip igmp snooping command 2-119

ip igmp snooping last-member-query-interval command 2-121

ip igmp snooping querier command 2-123

ip igmp snooping report-suppression command 2-125

ip igmp snooping tcn command 2-127

ip igmp snooping tcn flood command 2-129

ip igmp snooping vlan immediate-leave command 2-130

ip igmp snooping vlan mrouter command 2-131

ip igmp snooping vlan static command 2-133

IP multicast addresses 2-216

IP phones

auto-QoS configuration 2-16

trusting packets sent from 2-209

IP-precedence-to-DSCP map 2-183

IP source guard

displaying

dynamic binding entries only 2-314

ip ssh command 2-135

J

jumbo frames

See MTU

L

LACP

See EtherChannel

lacp port-priority command 2-137

lacp system-priority command 2-139

Layer 2 traceroute

IP addresses 2-510

MAC addresses 2-507

line configuration mode 1-2, 1-5

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for 2-85

error recovery timer 2-87

link state group command 2-141

link state track command 2-143

load_helper (boot loader) command A-13

load-distribution methods for EtherChannel 2-236

logging event command 2-144

logging file command 2-145

logical interface 2-92

loopback error

detection for 2-85

recovery timer 2-87

loop guard, for spanning tree 2-434, 2-438

M

mac access-group command 2-147

MAC access-groups, displaying 2-332

MAC access list configuration mode 2-149

mac access-list extended command 2-149

MAC access lists 2-51

MAC addresses

displaying

aging time 2-338

all 2-336

dynamic 2-342

MAC address-table move updates 2-346

notification settings 2-348

number of addresses in a VLAN 2-340

per interface 2-344

per VLAN 2-352

static 2-350

static and dynamic entries 2-334

dynamic

aging time 2-151

deleting 2-39

displaying 2-342

enabling MAC address notification 2-154

enabling MAC address-table move update 2-152

matching 2-169

static

adding and removing 2-156

displaying 2-350

dropping on an interface 2-157

tables 2-336

MAC address notification, debugging B-14

mac address-table aging-time 2-147, 2-169

mac address-table aging-time command 2-151

mac address-table move update command 2-152

mac address-table notification command 2-154

mac address-table static command 2-156

mac address-table static drop command 2-157

macro apply command 2-159

macro description command 2-162

macro global command 2-163

macro global description command 2-166

macro name command 2-167

macros

adding a description 2-162

adding a global description 2-166

applying 2-163

creating 2-167

displaying 2-378

interface range 2-48, 2-94

specifying parameter values 2-163

tracing 2-163

manual

audience xv

purpose of xv

maps

QoS

defining 2-183

displaying 2-362

VLAN

creating 2-530

defining 2-169

displaying 2-404

match (access-map configuration) command 2-169

match (class-map configuration) command 2-171

maximum transmission unit

See MTU

mdix auto command 2-173

memory (boot loader) command A-14

mkdir (boot loader) command A-15

mls qos aggregate-policer command 2-177

mls qos command 2-175

mls qos cos command 2-179

mls qos dscp-mutation command 2-181

mls qos map command 2-183

mls qos queue-set output buffers command 2-187

mls qos queue-set output threshold command 2-189

mls qos rewrite ip dscp command 2-191

mls qos srr-queue input bandwidth command 2-193

mls qos srr-queue input buffers command 2-195

mls qos-srr-queue input cos-map command 2-197

mls qos srr-queue input dscp-map command 2-199

mls qos srr-queue input priority-queue command 2-201

mls qos srr-queue input threshold command 2-203

mls qos-srr-queue output cos-map command 2-205

mls qos srr-queue output dscp-map command 2-207

mls qos trust command 2-209

mls qos vlan-based command 2-211

mode, MVR 2-216

modes, commands 1-1

monitor session command 2-212

more (boot loader) command A-16

MSTP

displaying 2-387

interoperability 2-45

link type 2-436

MST region

aborting changes 2-442

applying changes 2-442

configuration name 2-442

configuration revision number 2-442

current or pending display 2-442

displaying 2-387

MST configuration mode 2-442

VLANs-to-instance mapping 2-442

path cost 2-444

protocol mode 2-440

restart protocol migration process 2-45

root port

loop guard 2-434

preventing from becoming designated 2-434

restricting which can be root 2-434

root guard 2-434

root switch

affects of extended system ID 2-433

hello-time 2-447, 2-454

interval between BDPU messages 2-448

MSTP (continued)

root switch (continued)

interval between hello BPDU messages 2-447, 2-454

max-age 2-448

maximum hop count before discarding BPDU 2-449

port priority for selection of 2-450

primary or secondary 2-454

switch priority 2-453

state changes

blocking to forwarding state 2-460

enabling BPDU filtering 2-425, 2-458

enabling BPDU guard 2-427, 2-458

enabling Port Fast 2-458, 2-460

forward-delay time 2-446

length of listening and learning states 2-446

rapid transition to forwarding 2-436

shutting down Port Fast-enabled ports 2-458

state information display 2-386

MTU

configuring size 2-505

displaying global setting 2-394

multicast group address, MVR 2-219

multicast groups, MVR 2-217

multicast router learning method 2-131

multicast router ports, configuring 2-131

multicast storm control 2-476

multicast VLAN, MVR 2-216

multicast VLAN registration

See MVR

multiple hosts on authorized port 2-69

Multiple Spanning Tree Protocol

See MSTP

MVR

and address aliasing 2-217

configuring 2-216

configuring interfaces 2-219

debug messages, display B-18

displaying 2-370

displaying interface information 2-372

MVR (continued)

members, displaying 2-374

mvr (global configuration) command 2-216

mvr (interface configuration) command 2-219

mvr vlan group command 2-220

N

native VLANs 2-500

nonegotiate

DTP messaging 2-488

nonegotiate, speed 2-468

non-IP protocols

denying 2-51

forwarding 2-226

non-IP traffic access lists 2-149

non-IP traffic forwarding

denying 2-51

permitting 2-226

normal-range VLANs 2-519, 2-524

note, description xvi

no vlan command 2-519, 2-528

P

PAgP

See EtherChannel

pagp learn-method command 2-222

pagp port-priority command 2-224

password, VTP 2-542, 2-546

password-recovery mechanism, enabling and disabling 2-248

permit (MAC access-list configuration) command 2-226

per-VLAN spanning-tree plus

See STP

physical-port learner 2-222

PID, displaying 2-311

PIM-DVMRP, as multicast router learning method 2-131

police aggregate command 2-231

police command 2-229

policed-DSCP map 2-183

policy-map command 2-233

policy maps

applying to an interface 2-250, 2-255

creating 2-233

displaying 2-381

hierarchical 2-234

policers

displaying 2-355

for a single class 2-229

for multiple classes 2-177, 2-231

policed-DSCP map 2-183

traffic classification

defining the class 2-32

defining trust states 2-512

setting DSCP or IP precedence values 2-253

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list 2-3

debug messages, display B-5

enabling IEEE 802.1x

globally 2-54

per interface 2-76

guest VLAN 2-67

host modes 2-69

IEEE 802.1x AAA accounting methods 2-1

initialize an interface 2-70

MAC authentication bypass 2-71

manual control of authorization state 2-76

multiple hosts on authorized port 2-69

PAE as authenticator 2-75

periodic re-authentication

enabling 2-79

time between attempts 2-80

quiet period between failed authentication exchanges 2-80

re-authenticating IEEE 802.1x-enabled ports 2-78

port-based authentication (continued)

resetting configurable IEEE 802.1x parameters 2-66

switch-to-authentication server retransmission time 2-80

switch-to-client frame-retransmission number2-73to 2-74

switch-to-client retransmission time 2-80

port-channel load-balance command 2-236

Port Fast, for spanning tree 2-460

port ranges, defining 2-48

ports, debugging B-51

ports, protected 2-499

port security

aging 2-495

debug messages, display B-53

enabling 2-490

violation error recovery 2-87

port trust states for QoS 2-209

port types, MVR 2-219

priority-queue command 2-238

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-311

protected ports, displaying 2-307

pruning

VLANs 2-500

VTP

displaying interface information 2-303

enabling 2-542, 2-546

pruning-eligible VLAN list 2-502

PVST+

See STP

Q

QoS

auto-QoS

configuring 2-16

debug messages, display B-2

displaying 2-262

QoS (continued)

class maps

creating 2-34

defining the match criteria 2-171

displaying 2-268

defining the CoS value for an incoming packet 2-179

displaying configuration information 2-262, 2-354

DSCP transparency 2-191

DSCP trusted ports

applying DSCP-to-DSCP-mutation map to 2-181

defining DSCP-to-DSCP-mutation map 2-183

egress queues

allocating buffers 2-187

defining the CoS output queue threshold map 2-205

defining the DSCP output queue threshold map 2-207

displaying buffer allocations 2-358

displaying CoS output queue threshold map 2-362

displaying DSCP output queue threshold map 2-362

displaying queueing strategy 2-358

displaying queue-set settings 2-365

enabling bandwidth shaping and scheduling 2-472

enabling bandwidth sharing and scheduling 2-474

limiting the maximum output on a port 2-470

mapping a port to a queue-set 2-240

mapping CoS values to a queue and threshold 2-205

mapping DSCP values to a queue and threshold 2-207

setting maximum and reserved memory allocations 2-189

setting WTD thresholds 2-189

enabling 2-175

ingress queues

allocating buffers 2-195

assigning SRR scheduling weights 2-193

defining the CoS input queue threshold map 2-197

defining the DSCP input queue threshold map 2-199

displaying buffer allocations 2-358

displaying CoS input queue threshold map 2-362

displaying DSCP input queue threshold map 2-362

displaying queueing strategy 2-358

QoS (continued)

ingress queues (continued)

displaying settings for 2-356

enabling the priority queue 2-201

mapping CoS values to a queue and threshold 2-197

mapping DSCP values to a queue and threshold 2-199

setting WTD thresholds 2-203

maps

defining 2-183, 2-197, 2-199, 2-205, 2-207

displaying 2-362

policy maps

applying an aggregate policer 2-231

applying to an interface 2-250, 2-255

creating 2-233

defining policers 2-177, 2-229

displaying policers 2-355

displaying policy maps 2-381

hierarchical 2-234

policed-DSCP map 2-183

setting DSCP or IP precedence values 2-253

traffic classifications 2-32

trust states 2-512

port trust states 2-209

queues, enabling the expedite 2-238

statistics

in-profile and out-of-profile packets 2-358

packets enqueued or dropped 2-358

sent and received CoS values 2-358

sent and received DSCP values 2-358

trusted boundary for IP phones 2-209

VLAN-based 2-211

quality of service

See QoS

querytime, MVR 2-216

queue-set command 2-240

R

radius-server dead-criteria command 2-241

radius-server host command 2-243

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

re-authenticating IEEE 802.1x-enabled ports 2-78

re-authentication

periodic 2-79

time between attempts 2-80

receiver ports, MVR 2-219

receiving flow-control packets 2-90

recovery mechanism

causes 2-87

display 2-292, 2-296

timer interval 2-87

remote-span command 2-245

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-17

requirements

device manager xvi

reset (boot loader) command A-18

reset command 2-533

restricted VLAN

See dot1x auth-fail vlan

rmdir (boot loader) command A-19

rmon collection stats command 2-247

root guard, for spanning tree 2-434

RSPAN

configuring 2-212

displaying 2-368

filter RSPAN traffic 2-212

remote-span command 2-245

sessions

add interfaces to 2-212

displaying 2-368

start new 2-212

S

secure ports, limitations 2-492

sending flow-control packets 2-90

service password-recovery command 2-248

service-policy command 2-250

set (boot loader) command A-20

set command 2-253

setup command 2-255

show access-lists command 2-258

show archive status command 2-261

show auto qos command 2-262

show boot command 2-266

show changes command 2-533

show class-map command 2-268

show controllers cpu-interface command 2-269

show controllers ethernet-controller command 2-271

show controllers tcam command 2-278

show controller utilization command 2-280

show current command 2-533

show dot1x command 2-282

show dtp 2-286

show eap command 2-288

show env command 2-291

show errdisable detect command 2-292

show errdisable flap-values command 2-294

show errdisable recovery command 2-296

show etherchannel command 2-298

show flowcontrol command 2-301

show interfaces command 2-303

show interfaces counters command 2-309

show inventory command 2-311

show ip dhcp snooping binding command 2-314

show ip dhcp snooping command 2-313

show ip igmp profile command 2-316

show ip igmp snooping command 2-317

show ip igmp snooping groups command 2-320

show ip igmp snooping mrouter command 2-322

show ip igmp snooping querier command 2-324

show lacp command 2-326

show link state group command 2-330

show mac access-group command 2-332

show mac address-table address command 2-336

show mac address-table aging time command 2-338

show mac address-table command 2-334

show mac address-table count command 2-340

show mac address-table dynamic command 2-342

show mac address-table interface command 2-344

show mac address-table move update command 2-346

show mac address-table notification command 2-40, 2-348, B-16

show mac address-table static command 2-350

show mac address-table vlan command 2-352

show mls qos aggregate-policer command 2-355

show mls qos command 2-354

show mls qos input-queue command 2-356

show mls qos interface command 2-358

show mls qos maps command 2-362

show mls qos queue-set command 2-365

show mls qos vlan command 2-367

show monitor command 2-368

show mvr command 2-370

show mvr interface command 2-372

show mvr members command 2-374

show pagp command 2-376

show parser macro command 2-378

show platform acl command C-2

show platform backup interface command C-3

show platform configuration command C-4

show platform etherchannel command C-5

show platform forward command C-6

show platform igmp snooping command C-8

show platform layer4op command C-10

show platform mac-address-table command C-11

show platform messaging command C-12

show platform monitor command C-13

show platform mvr table command C-14

show platform pm command C-15

show platform port-asic command C-16

show platform port-security command C-21

show platform qos command C-22

show platform resource-manager command C-23

show platform snmp counters command C-25

show platform spanning-tree command C-26

show platform stp-instance command C-27

show platform tcam command C-28

show platform vlan command C-30

show policy-map command 2-381

show port security command 2-383

show proposed command 2-533

show spanning-tree command 2-386

show storm-control command 2-392

show system mtu command 2-394

show trust command 2-512

show udld command 2-395

show version command 2-398

show vlan access-map command 2-404

show vlan command 2-400

show vlan command, fields 2-402

show vlan filter command 2-405

show vmps command 2-406

show vtp command 2-409

shutdown command 2-413

shutdown vlan command 2-414

Smartports macros

See macros

SNMP host, specifying 2-418

SNMP informs, enabling the sending of 2-415

snmp-server enable traps command 2-415

snmp-server host command 2-418

snmp trap mac-notification command 2-422

SNMP traps

enabling MAC address notification trap 2-422

enabling the MAC address notification feature 2-154

enabling the sending of 2-415

SoftPhone

See Cisco SoftPhone

software images

deleting 2-50

downloading 2-8

upgrading 2-8

uploading 2-14

software version, displaying 2-398

source ports, MVR 2-219

SPAN

configuring 2-212

debug messages, display B-17

displaying 2-368

filter SPAN traffic 2-212

sessions

add interfaces to 2-212

displaying 2-368

start new 2-212

spanning 2-462

spanning-tree backbonefast command 2-424

spanning-tree bpdufilter command 2-425

spanning-tree bpduguard command 2-427

spanning-tree cost command 2-429

spanning-tree etherchannel command 2-431

spanning-tree extend system-id command 2-433

spanning-tree guard command 2-434

spanning-tree link-type command 2-436

spanning-tree loopguard default command 2-438

spanning-tree mode command 2-440

spanning-tree mst configuration command 2-442

spanning-tree mst cost command 2-444

spanning-tree mst forward-time command 2-446

spanning-tree mst hello-time command 2-447

spanning-tree mst max-age command 2-448

spanning-tree mst max-hops command 2-449

spanning-tree mst port-priority command 2-450

spanning-tree mst pre-standard command 2-452

spanning-tree mst priority command 2-453

spanning-tree mst root command 2-454

spanning-tree portfast (global configuration) command 2-458

spanning-tree portfast (interface configuration) command 2-460

spanning-tree port-priority command 2-456

Spanning Tree Protocol

See STP

spanning-tree transmit hold-count command 2-462

spanning-tree uplinkfast command 2-463

spanning-tree vlan command 2-465

speed command 2-468

srr-queue bandwidth limit command 2-470

srr-queue bandwidth shape command 2-472

srr-queue bandwidth share command 2-474

SSH, configuring version 2-135

static-access ports, configuring 2-479

statistics, Ethernet group 2-247

sticky learning, enabling 2-490

storm-control command 2-476

STP

BackboneFast 2-424

counters, clearing 2-44

debug messages, display

BackboneFast events B-57

MSTP B-60

optimized BPDUs handling B-59

spanning-tree activity B-55

switch shim B-62

transmitted and received BPDUs B-58

UplinkFast B-64

detection of indirect link failures 2-424

EtherChannel misconfiguration 2-431

extended system ID 2-433

path cost 2-429

protocol modes 2-440

root port

accelerating choice of new 2-463

loop guard 2-434

preventing from becoming designated 2-434

STP (continued)

root port (continued)

restricting which can be root 2-434

root guard 2-434

UplinkFast 2-463

root switch

affects of extended system ID 2-433, 2-466

hello-time 2-465

interval between BDPU messages 2-465

interval between hello BPDU messages 2-465

max-age 2-465

port priority for selection of 2-456

primary or secondary 2-465

switch priority 2-465

state changes

blocking to forwarding state 2-460

enabling BPDU filtering 2-425, 2-458

enabling BPDU guard 2-427, 2-458

enabling Port Fast 2-458, 2-460

enabling timer to recover from error state 2-87

forward-delay time 2-465

length of listening and learning states 2-465

shutting down Port Fast-enabled ports 2-458

state information display 2-386

VLAN options 2-453, 2-465

Switched Port Analyzer

See SPAN

switchport access command 2-479

switchport backup interface command 2-481

switchport block command 2-484

switchport host command 2-485

switchport mode command 2-486

switchport nonegotiate command 2-488

switchport port-security aging command 2-495

switchport port-security command 2-490

switchport priority extend command 2-497

switchport protected command 2-499

switchports, displaying 2-303

switchport trunk command 2-500

switchport voice vlan command 2-503

system message logging, save message to flash 2-145

system mtu command 2-505

T

tar files, creating, listing, and extracting 2-11

traceroute mac command 2-507

traceroute mac ip command 2-510

trunking, VLAN mode 2-486

trunk mode 2-486

trunk ports 2-486

trunks, to non-DTP device 2-487

trusted boundary for QoS 2-209

trusted port states for QoS 2-209

type (boot loader) command A-23

U

UDLD

aggressive mode 2-514, 2-516

debug messages, display B-72

enable globally 2-514

enable per interface 2-516

error recovery timer 2-87

message timer 2-514

normal mode 2-514, 2-516

reset a shutdown interface 2-518

status 2-395

udld command 2-514

udld port command 2-516

udld reset command 2-518

unicast storm control 2-476

UniDirectional Link Detection

See UDLD

unknown multicast traffic, preventing 2-484

unknown unicast traffic, preventing 2-484

unset (boot loader) command A-24

upgrading

software images 2-8

monitoring status of 2-261

upgrading information

See release notes

UplinkFast, for STP 2-463

user EXEC mode 1-2, 1-3

V

version (boot loader) command A-26

VLAN

enabling guest VLAN supplicant 2-57

vlan (global configuration) command 2-519

vlan (VLAN configuration) command 2-524

vlan access-map command 2-530

VLAN access map configuration mode 2-530

VLAN access maps

actions 2-6

displaying 2-404

VLAN-based QoS 2-211

VLAN configuration

rules 2-522, 2-526

saving 2-519, 2-528

VLAN configuration mode

commands

VLAN 2-524

VTP 2-546

description 1-5

entering 2-532

summary 1-2

vlan database command 2-532

vlan filter command 2-535

VLAN filters, displaying 2-405

VLAN ID range 2-519, 2-524

VLAN maps

applying 2-535

creating 2-530

VLAN maps

VLAN maps

defining 2-169

displaying 2-404

VLAN Query Protocol

See VQP

VLANs

adding 2-519

configuring 2-519, 2-524

debug messages, display

ISL B-68

VLAN IOS file system error tests B-67

VLAN manager activity B-65

VTP B-70

displaying configurations 2-400

extended-range 2-519

MAC addresses

displaying 2-352

number of 2-340

media types 2-521, 2-526

normal-range 2-519, 2-524

restarting 2-414

saving the configuration 2-519

shutting down 2-414

SNMP traps for VTP 2-416, 2-419

suspending 2-414

variables 2-524

VLAN Trunking Protocol

See VTP

VMPS

configuring servers 2-540

displaying 2-406

error recovery timer 2-87

reconfirming dynamic VLAN assignments 2-537

vmps reconfirm (global configuration) command 2-538

vmps reconfirm (privileged EXEC) command 2-537

vmps retry command 2-539

vmps server command 2-540

voice VLAN

configuring 2-503

setting port priority 2-497

VQP

and dynamic-access ports 2-479

clearing client statistics 2-46

displaying information 2-406

per-server retry count 2-539

reconfirmation interval 2-538

reconfirming dynamic VLAN assignments 2-537

VTP

changing characteristics 2-542

clearing pruning counters 2-47

configuring

domain name 2-542, 2-546

file name 2-542

mode 2-542, 2-546

password 2-542, 2-546

counters display fields 2-410

displaying information 2-409

enabling

pruning 2-542, 2-546

Version 2 2-542, 2-546

mode 2-542, 2-546

pruning 2-542, 2-546

saving the configuration 2-519, 2-528

statistics 2-409

status 2-409

status display fields 2-411

vtp (global configuration) command 2-542

vtp (VLAN configuration) command 2-546