Feedback
Table Of Contents
A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -
Index
A
aaa accounting dot1x command 1
aaa authentication dot1x command 3
AAA methods 3
access control entries
access control lists
access groups
IP 89
MAC, displaying 306
matching for QoS classification 159
access mode 448
access ports 448
ACLs
as match criteria for QoS classes 159
deny 52
displaying 235
for non-IP protocols 141
IP 89
on Layer 2 interfaces 89
permit 183
action command 5
address aliasing 174
aggregate policers
applying 190
creating 192
displaying 338
QoS 193
aggregate-port learner 179
allowed VLANs 463
archive download-sw command 7
archive tar command 10
archive upload-sw command 13
attaching policy maps to interfaces 218
authorization state of controlled port 61
autonegotiation of duplex mode 72
B
bandwidth, configuring for QoS 15
bandwidth command 15
boot (boot loader) command 2
boot config-file command 18
boot enable-break command 19
boot helper command 20
boot helper-config file command 21
booting
Cisco IOS image 24
displaying environment variables 239
interrupting 19
manually 22
boot loader
accessing 1
booting
Cisco IOS image 2
helper image 20
directories
creating 14
displaying a list of 7
removing 18
displaying
available commands 12
memory heap utilization 13
version 25
environment variables
described 19
displaying settings 19
location of 20
setting 19
unsetting 23
files
copying 5
deleting 6
displaying a list of 7
displaying the contents of 4, 15, 22
renaming 16
file system
formatting 10
initializing flash 9
running a consistency check 11
prompt 1
resetting the system 17
boot manual command 22
boot private-config-file command 23
boot system command 24
BPDU filtering, for spanning tree 390, 428
BPDU guard, for spanning tree 392, 428
broadcast storm control 438
burst bytes, in QoS policers 186, 192
C
cat (boot loader) command 4
CBWFQ, configuring 15
channel-group command 25
channel-protocol command 29
child policy maps 220
class-based traffic shaping 233
class-based weighted fair queuing
class command 31
class-map command 33
class-map configuration mode 33
class maps
creating 33
defining the match criteria 160
displaying 243
matching in 33
class of service
clear lacp command 37
clear mac address-table command 38
clear pagp command 39
clear policer cpu uni-eni counters command 40
clear port-security command 41
clear spanning-tree counters command 43
clear spanning-tree detected-protocols command 44
clear vmps statistics command 46
command modes defined 1
committed information rate in QoS policers 186, 192
configuration files
password recovery disable considerations 1
configuring multiple interfaces 86
conform-action command 47
control-plane policer 40
control-plane policer information, displaying 339
control-plane security 195
control plane statistics, clearing 40
copy (boot loader) command 5
CoS
as match criteria for QoS groups 160
for QoS classification 222
setting value in policy maps 222
CPU ASIC statistics, displaying 244
CPU protection policers, displaying 15
D
debug dot1x command 2
debug etherchannel command 3
debug interface command 4
debug ip igmp filter command 5
debug ip igmp max-groups command 6
debug ip igmp snooping command 7
debug lacp command 8
debug mac-notification command 9
debug matm command 10
debug monitor command 11
debug mvrdbg command 12
debug nvram command 13
debug pagp command 14
debug platform acl command 15
debug platform cpu-queues command 16
debug platform dot1x command 18
debug platform etherchannel command 19
debug platform forw-tcam command 20
debug platform ip dhcp command 21
debug platform ip igmp snooping command 22
debug platform led command 24
debug platform matm command 25
debug platform messaging application command 26
debug platform phy command 27
debug platform pm command 29
debug platform policer cpu uni-eni command 31
debug platform port-asic command 32
debug platform port-security command 33
debug platform qos-acl-tcam command 34
debug platform remote-commands command 35
debug platform resource-manager command 36
debug platform snmp command 37
debug platform span command 38
debug platform supervisor-asic command 39
debug platform sw-bridge command 40
debug platform tcam command 41
debug platform udld command 43
debug platform vlan command 44
debug pm command 45
debug port-security command 47
debug qos-manager command 48
debug spanning-tree bpdu command 51
debug spanning-tree bpdu-opt command 52
debug spanning-tree command 49
debug spanning-tree mstp command 53
debug spanning-tree switch command 55
debug sw-vlan command 57
debug sw-vlan ifs command 58
debug sw-vlan notification command 59
debug udld command 61
debug vqpc command 63
default policer configuration
NNIs 17
UNIs 16
define interface-range command 49
delete (boot loader) command 6
delete command 51
deny command 52
detect mechanism, causes 73
DHCP snooping
accepting untrusted packets from edge switch 100
enabling
on a VLAN 106
trust on an interface 104
error recovery timer 77
rate limiting 103
DHCP snooping binding database
binding file, configuring 96
bindings
adding 94
deleting 94
displaying 286
clearing database agent statistics 35
database agent, configuring 96
displaying
binding entries 286
database agent status 288, 290
renewing 214
differentiated service code point
dir (boot loader) command 7
directories, deleting 51
dot1x default command 55
dot1x host-mode command 56
dot1x initialize command 58
dot1x port-control command 61
dot1x re-authenticate command 63
dot1x reauthentication command 64
dot1x system-auth-control command 65
dot1x test eapol-capable command 66
dot1x test timeout command 67
dot1x timeout command 68
dot1x violation-mode command 70
dropping packets, with ACL matches 5
DSCP
as match criteria for QoS groups 161
for QoS traffic marking 224
setting in policy maps 224
duplex command 71
dynamic-access ports
configuring 443
restrictions 444
Dynamic Host Configuration Protocol (DHCP)
E
EAP-request/identity frame
maximum number to send 60
response time before retransmitting 68
environment variables, displaying 239
errdisable detect cause command 73
errdisable detect cause small-frame comand 75
errdisable recovery cause small-frame 79
errdisable recovery command 77
error conditions, displaying 263
error disable detection 73
error-disabled interfaces, displaying 274
EtherChannel
assigning Ethernet interface to channel group 25
creating port-channel logical interface 84
debug EtherChannel/PAgP, display 3
debug platform-specific events, display 19
displaying 267
interface information, displaying 274
LACP
clearing channel-group information 37
debug messages, display 8
displaying 302
modes 25
port priority for hot-standby ports 132
restricting a protocol 29
system priority 134
load-distribution methods 199
PAgP
aggregate-port learner 179
clearing channel-group information 39
debug messages, display 14
displaying 334
error detection for 73
error recovery timer 77
learn method 179
modes 25
physical-port learner 179
priority of interface for transmitted traffic 181
Ethernet controller, internal register display 246
Ethernet statistics, collecting 215
exceed-action command 80
extended-range VLANs
and allowed VLAN list 463
configuring 482
extended system ID for STP 398
F
fan information, displaying 260
files, deleting 51
flash_init (boot loader) command 9
flowcontrol command 82
format (boot loader) command 10
forwarding packets, with ACL matches 5
forwarding results, display 5
frame forwarding information, displaying 5
fsck (boot loader) command 11
G
global configuration mode 2, 3
H
hardware ACL statistics 235
help (boot loader) command 12
host connection, port configuration 447
host ports, private VLANs 450
I
IEEE 802.1x
and switchport modes 448
violation error recovery 77
See also port-based authentication
IGMP filters
applying 109
debug messages, display 5
IGMP groups, setting maximum 111
IGMP maximum groups, debugging 6
IGMP profiles
creating 113
displaying 293
IGMP snooping
adding ports as a static member of a group 128
enabling 115
enabling the configurable-leave timer 117
enabling the Immediate-Leave feature 125
flooding query count 123
interface topology change notification behavior 124
multicast table 296
querier 119
query solicitation 123
report suppression 121
switch topology change notification behavior 123
images
Immediate-Leave feature, MVR 176
immediate-leave processing 125
input policy maps
and ACL classification 159
and aggregate policers 193
commands not supported in 197
configuration guidelines 197
interface command 88
interface configuration mode 2, 4
interface port-channel command 84
interface range command 86
interface-range macros 49
interfaces
assigning Ethernet interface to channel group 25
configuring 71
configuring multiple 86
creating port-channel logical 84
debug messages, display 4
disabling 375
displaying the MAC address table 318
restarting 375
interface speed, configuring 436
internal registers, displaying 246, 253
Internet Group Management Protocol
invalid GBIC
error detection for 73
error recovery timer 77
ip address command 91
IP addresses, setting 91
IP address matching 157
IP DHCP snooping
ip dhcp snooping binding command 94
ip dhcp snooping command 93
ip dhcp snooping database command 96
ip dhcp snooping information option allow-untrusted command 100
ip dhcp snooping information option command 98
ip dhcp snooping information option format remote-id command 102
ip dhcp snooping limit rate command 103
ip dhcp snooping trust command 104
ip dhcp snooping verify command 105
ip dhcp snooping vlan command 106
ip dhcp snooping vlan information option format-type circuit-id string command 107
ip igmp filter command 109
ip igmp max-groups command 111
ip igmp profile command 113
ip igmp snooping command 115
ip igmp snooping last-member-query-interval command 117
ip igmp snooping querier command 119
ip igmp snooping report-suppression command 121
ip igmp snooping tcn command 123
ip igmp snooping tcn flood command 124
ip igmp snooping vlan immediate-leave command 125
ip igmp snooping vlan mrouter command 126
ip igmp snooping vlan static command 128
IP multicast addresses 173
IP precedence, as match criteria for QoS groups 163
IP source guard, displaying dynamic binding entries 286
ip ssh command 130
J
jumbo frames
L
LACP
lacp port-priority command 132
lacp system-priority command 134
Layer 2 traceroute
IP addresses 473
MAC addresses 470
Link Aggregation Control Protocol
link flap
error detection for 73
error recovery timer 77
load-distribution methods for EtherChannel 199
logging event command 136
logging file command 137
logical interface 84
loopback error
detection for 73
recovery timer 77
loop guard, for spanning tree 400, 404
M
mac access-group command 139
MAC access-groups, displaying 306
MAC access list configuration mode 141
mac access-list extended command 141
MAC access lists 52
MAC addresses
displaying
aging time 312
all 310
dynamic 316
notification settings 320
number of addresses in a VLAN 314
per interface 318
per VLAN 324
static 322
static and dynamic entries 308
dynamic
aging time 143
deleting 38
displaying 316
enabling MAC address notification 144
matching 157
static
adding and removing 146
displaying 322
dropping on an interface 147
tables 310
MAC address notification, debugging 9
mac address-table aging-time 139, 157
mac address-table aging-time command 143
mac address-table notification command 144
mac address-table static command 146
mac address-table static drop command 147
macro description command 151
macro global command 152
macro global description command 154
macro name command 155
macros
adding a description 151
adding a global description 154
applying 152
creating 155
displaying 336
specifying parameter values 152
tracing 152
mapping tables, QoS 467
maps
class
creating 33
VLAN
creating 485
defining 157
displaying 371
match access-group command 159
match cos command 160
match ip dscp command 161
match ip precedence command 163
match qos-group command 165
maximum transmission unit
mdix auto command 167
memory (boot loader) command 13
mkdir (boot loader) command 14
mode, MVR 173
modes, commands 1
monitor session command 169
more (boot loader) command 15
MSTP
displaying 353
interoperability 44
link type 402
MST region
aborting changes 408
applying changes 408
configuration name 408
configuration revision number 409
current or pending display 409
displaying 353
MST configuration mode 408
VLANs-to-instance mapping 408
path cost 410
protocol mode 406
restart protocol migration process 44
root port
loop guard 400
preventing from becoming designated 400
restricting which can be root 400
root guard 400
root switch
affects of extended system ID 398
interval between BDPU messages 415
interval between hello BPDU messages 413, 424
max-age 415
maximum hop count before discarding BPDU 417
port priority for selection of 419
primary or secondary 424
switch priority 422
state changes
blocking to forwarding state 431
enabling BPDU filtering 390, 428
forward-delay time 412
length of listening and learning states 412
rapid transition to forwarding 402
shutting down Port Fast-enabled ports 428
state information display 352
MTU
configuring size 465
displaying global setting 360
multicast group address, MVR 176
multicast groups, MVR 174
multicast router learning method 126
multicast router ports, configuring 126
multicast storm control 438
multicast VLAN, MVR 173
multicast VLAN registration
multiple hosts on authorized port 56
Multiple Spanning Tree Protocol
MVR
and address aliasing 174
configuring 173
configuring interfaces 176
debug messages, display 12
displaying 328
displaying interface information 330
members, displaying 332
mvr (global configuration) command 173
mvr (interface configuration) command 176
mvr vlan group command 177
N
native VLANs 463
network node interface 201
non-IP protocols
denying 52
forwarding 183
non-IP traffic access lists 141
non-IP traffic forwarding
denying 52
permitting 183
normal-range VLANs 482
no vlan command 482
O
output policy maps
and QoS group classification 165
and traffic shaping 233
commands not supported in 197
configuration guidelines 197
priority in 204
queue limit in 209
P
PAgP
pagp learn-method command 179
pagp port-priority command 181
parent policy maps 220
password-recovery mechanism, enabling and disabling 216
permit command 183
per-VLAN spanning-tree plus
physical-port learner 179
PID, displaying 284
PIM-DVMRP, as multicast router learning method 126
police
multiple conform actions for a class 47
multiple exceed actions for a class 80
with priority 186
police aggregate command 190
police command 186
policer aggregate command 192
policer configuration
default for NNIs 17
default for UNIs 16
policer cpu uni command 195
policers
for CPU protection 195
individual 186
policy-map class, configuring multiple actions 47, 80
policy-map class configuration mode 31
policy-map class police configuration mode 47, 188
policy-map command 196
policy-map configuration mode 196
policy maps
and CoS classification 160
and DSCP classification 161
and IP precedence classification 163
and policing 188
applying 218
applying to an interface 197, 218, 230
child 220
creating 196
displaying 342
hierarchical 220
parent 220
policers
for a single class 186
for multiple classes 190, 192, 195, 220
setting priority 203
setting QoS group identifier 228
traffic classification, defining 31
traffic marking
setting CoS values 222
setting DSCP values 224
setting IP precedence values 226
Port Aggregation Protocol
port-based authentication
AAA method list 3
configuring violation modes 70
debug messages, display 2
enabling 802.1x
globally 65
per interface 61
host modes 56
IEEE 802.1x AAA accounting methods 1
initialize an interface 58, 67
manual control of authorization state 61
multiple hosts on authorized port 56
periodic re-authentication
enabling 64
time between attempts 68
quiet period between failed authentication exchanges 68
re-authenticating 802.1x-enabled ports 63
resetting configurable 802.1x parameters 55
switch-to-authentication server retransmission time 68
switch-to-client frame-retransmission number59to 60
switch-to-client retransmission time 68
test for IEEE 802.1x readiness 66
port-channel load-balance command 199
Port Fast, for spanning tree 431
port ranges, defining 49
ports, debugging 45
ports, protected 461
port security
aging 457
debug messages, display 47
enabling 453
violation error recovery 77
port shaping 234
port-type command 201
port types, MVR 176
power information, displaying 260
precedence
for QoS traffic marking 226
setting in policy maps 226
priority command 203
priority queuing, QoS 203
priority with police, QoS 203
private-vlan command 206
private VLANs
association 459
configuring 206
configuring ports 450
displaying 367
host ports 450
mapping
configuring 459
promiscuous ports 450
product identification information, displaying 284
promiscuous ports, private VLANs 450
PVST+
Q
QoS
aggregate policers
applying 190
creating 192
displaying 338
class maps
creating 33
defining the match criteria 160
displaying 243
displaying statistics for 342, 23
policy maps
applying an aggregate policer 190, 192, 195, 220
applying to an interface 218, 230
creating 196
defining policers 186
displaying policy maps 342
setting CoS values 222
setting DSCP values 224
setting IP precedence values 226
setting QoS group identifier 228
traffic classifications 31
table maps
configuring 467
displaying 361
QoS groups
as match criteria 165
for QoS traffic classification 228
setting in policy maps 228
QoS match criteria
ACLs 159
CoS value 160
DSCP value 161
precedence value 163
QoS group number 165
quality of service
querytime, MVR 173
queue-limit command 209
R
rapid per-VLAN spanning-tree plus
rapid PVST+
re-authenticating 802.1x-enabled ports 63
re-authentication
periodic 64
time between attempts 68
receiver ports, MVR 176
receiving flow-control packets 82
recovery mechanism
causes 77
timer interval 77
remote-span command 212
Remote Switched Port Analyzer
rename (boot loader) command 16
renew ip dhcp snooping database command 214
reset (boot loader) command 17
rmdir (boot loader) command 18
rmon collection stats command 215
root guard, for spanning tree 400
RSPAN
configuring 169
displaying 326
filter RSPAN traffic 169
remote-span command 212
sessions
add interfaces to 169
displaying 326
start new 169
S
SDM templates
displaying 351
secure ports, limitations 455
sending flow-control packets 82
service password-recovery command 216
service policy (policy-map class configuration) command 220
service-policy interface configuration command 218
service-policy policy-map class configuration command 220
set (boot loader) command 19
set cos command 222
set dscp command 224
set precedence command 226
set qos-group command 228
setup command 230
SFPs, displaying information about 284
shape average command 233
show access-lists command 235
show aggregate-policer command 361
show archive status command 238
show boot command 239
show class-map command 243
show controllers cpu-interface command 244
show controllers ethernet-controller command 246
show controllers tcam command 253
show controllers utilization command 255
show controller utilization command 255
show dot1x command 257
show env command 260
show errdisable detect command 261
show errdisable flap-values command 263
show errdisable recovery command 265
show etherchannel command 267
show flowcontrol command 270
show idprom command 272
show interfaces command 274
show interfaces counters command 282
show inventory command 284
show ip dhcp snooping binding command 286
show ip dhcp snooping command 285
show ip dhcp snooping database command 288, 290
show ip igmp profile command 293
show ip igmp snooping command 294
show ip igmp snooping command querier detail 300
show ip igmp snooping groups command 296
show ip igmp snooping mrouter command 298
show ip igmp snooping querier command 300
show ip igmp snooping querier detail command 300
show lacp command 302
show mac access-group command 306
show mac address-table address command 310
show mac address-table aging time command 312
show mac address-table command 308
show mac address-table count command 314
show mac address-table dynamic command 316
show mac address-table interface command 318
show mac address-table notification command 320
show mac address-table static command 322
show mac address-table vlan command 324
show monitor command 326
show mvr command 328
show mvr interface command 330
show mvr members command 332
show pagp command 334
show parser macro command 336
show platform acl command 2
show platform configuration command 3
show platform etherchannel command 4
show platform forward command 5
show platform igmp snooping command 7
show platform layer4op command 9
show platform mac-address-table command 10
show platform messaging command 11
show platform monitor command 12
show platform mvr table command 13
show platform pm command 14
show platform policer cpu command 15
show platform port-asic command 18
show platform port-security command 22
show platform qos command 23
show platform resource-manager command 26
show platform snmp counters command 28
show platform spanning-tree synchronization command 29
show platform stp-instance command 30
show platform tcam command 31
show platform vlan command 33
show policer aggregate command 338
show policer cpu uni-eni command 339
show policy-map command 342
show policy-map interface output fields 345
show port security command 346
show port-type command 349
show sdm prefer command 351
show spanning-tree command 352
show storm-control command 358
show system mtu command 360
show udld command 363
show version command 365
show vlan access-map command 371
show vlan command 367
show vlan command, fields 369
show vlan filter command 372
show vmps command 373
shutdown command 375
shutdown vlan command 376
small violation-rate command 377
SNMP host, specifying 382
SNMP informs, enabling the sending of 379
snmp-server enable traps command 379
snmp-server host command 382
snmp trap mac-notification command 386
SNMP traps
enabling MAC address notification trap 386
enabling the MAC address notification feature 144
enabling the sending of 379
software images
deleting 51
downloading 7
upgrading 7
uploading 13
software version, displaying 365
source ports, MVR 176
SPAN
configuring 169
debug messages, display 11
displaying 326
filter SPAN traffic 169
sessions
add interfaces to 169
displaying 326
start new 169
spanning-tree bpdufilter command 388, 390
spanning-tree bpduguard command 392
spanning-tree cost command 394
spanning-tree etherchannel command 396
spanning-tree extend system-id command 398
spanning-tree guard command 400
spanning-tree link-type command 402
spanning-tree loopguard default command 404
spanning-tree mode command 406
spanning-tree mst configuration command 408
spanning-tree mst cost command 410
spanning-tree mst forward-time command 412
spanning-tree mst hello-time command 413
spanning-tree mst max-age command 415
spanning-tree mst max-hops command 417
spanning-tree mst port-priority command 419
spanning-tree mst pre-standard command 421
spanning-tree mst priority command 422
spanning-tree mst root command 424
spanning-tree portfast (global configuration) command 428
spanning-tree portfast (interface configuration) command 431
spanning-tree port-priority command 426
Spanning Tree Protocol
spanning-tree vlan command 433
speed command 436
SSH, configuring version 130
static-access ports, configuring 443
statistics, Ethernet group 215
sticky learning, enabling 453
storm-control command 438
STP
counters, clearing 43
debug messages, display
MSTP 53
optimized BPDUs handling 52
spanning-tree activity 49
switch shim 55
transmitted and received BPDUs 51
enabling on ENIs 388
EtherChannel misconfiguration 396
extended system ID 398
path cost 394
protocol modes 406
root port
loop guard 400
preventing from becoming designated 400
restricting which can be root 400
root guard 400
root switch
affects of extended system ID 398, 434
hello-time 433
interval between BDPU messages 433
interval between hello BPDU messages 433
max-age 433
port priority for selection of 426
primary or secondary 433
switch priority 433
state changes
blocking to forwarding state 431
enabling BPDU filtering 390, 428
enabling timer to recover from error state 77
forward-delay time 433
length of listening and learning states 433
shutting down Port Fast-enabled ports 428
state information display 352
Switched Port Analyzer
switching characteristics
modifying 441
returning to interfaces 441
switchport access command 443
switchport block command 445
switchport command 441
switchport host command 447
switchport mode command 448
switchport mode private-vlan command 450
switchport port-security aging command 457
switchport port-security command 453
switchport private-vlan command 459
switchport protected command 461
switchports, displaying 274
switchport trunk command 463
system message logging, save message to flash 137
system mtu command 465
T
table-map command 467
table-map configuration mode 467
table maps
configuring 467
displaying 361
QoS 467
tar files, creating, listing, and extracting 10
TDR, running 469
temperature information, displaying 260
test cable-diagnostics tdr command 469
traceroute mac command 470
traceroute mac ip command 473
traffic shaping, QoS 233
trunking, VLAN mode 448
trunk mode 448
trunk ports 448
type (boot loader) command 22
U
UDLD
debug messages, display 61
enable globally 475
enable per interface 477
error recovery timer 77
message timer 475
reset a shutdown interface 479
status 363
udld command 475
udld port command 477
udld reset command 479
unicast storm control 438
UniDirectional Link Detection
uni-vlan command 480
unknown multicast traffic, preventing 445
unknown unicast traffic, preventing 445
unset (boot loader) command 23
upgrading
software images 7
monitoring status of 238
user EXEC mode 2
user network interface 201
V
version (boot loader) command 25
vlan access-map command 485
VLAN access map configuration mode 485
VLAN access maps
actions 5
displaying 371
vlan command 482
VLAN configuration mode
commands 482
description 4
entering 482
summary 2
vlan filter command 487
VLAN filters, displaying 372
VLAN ID range 482
VLAN maps
applying 487
creating 485
defining 157
displaying 371
VLAN Query Protocol
VLANs
adding 482
configuring 482
debug messages, display
activation of 59
VLAN IOS file system error tests 58
VLAN manager activity 57
displaying configurations 367
extended-range 482
MAC addresses
displaying 324
number of 314
normal-range 482
private 450
configuring 206
displaying 367
restarting 376
saving the configuration 482
shutting down 376
suspending 376
VMPS
configuring servers 492
displaying 373
error recovery timer 77
reconfirming dynamic VLAN assignments 489
vmps reconfirm (global configuration) command 490
vmps reconfirm (privileged EXEC) command 489
vmps retry command 491
vmps server command 492
VQP
and dynamic-access ports 444
clearing client statistics 46
displaying information 373
per-server retry count 491
reconfirmation interval 490
reconfirming dynamic VLAN assignments 489
W
Weighted Tail Drop
WTD, queue-limit command 209