Feedback
Table Of Contents
service-policy (interface configuration)
service-policy (policy-map class configuration)
show controllers cpu-interface
show controllers ethernet-controller
show ip dhcp snooping database
show ip dhcp snooping statistics
show mac address-table address
show mac address-table aging-time
show mac address-table dynamic
show mac address-table interface
show mac address-table notification
2]rmon collection stats
Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include usage statistics about broadcast and multicast packets, and error statistics about cyclic redundancy check (CRC) alignment errors and collisions. Use the no form of this command to return to the default setting.
rmon collection stats index [owner name]
no rmon collection stats index [owner name]
Syntax Description
index
Remote Network Monitoring (RMON) collection control index. The range is 1 to 65535.
owner name
(Optional) Owner of the RMON collection.
Defaults
The RMON statistics collection is disabled.
Command Modes
Interface configuration
Command History
Usage Guidelines
The RMON statistics collection command is based on hardware counters. If the port is a user network interface (UNI) or enhanced network interface (ENI), you must use the no shutdown interface configuration command to enable it before using the rmon collection stats command. UNIs and ENIs are disabled by default. Network node interfaces (NNIs) are enabled by default.
Examples
This example shows how to collect RMON statistics for the owner root:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# rmon collection stats 2 owner rootYou can verify your setting by entering the show rmon statistics privileged EXEC command.
Related Commands
service password-recovery
Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to press the break key on the console terminal to interrupt the boot process while the switch is powering up and to assign a new password.
Use the no form of this command to disable part of the password-recovery functionality. When the password-recovery mechanism is disabled, interrupting the boot process is allowed only if the user agrees to set the system back to the default configuration.
service password-recovery
no service password-recovery
Syntax Description
This command has no arguments or keywords.
Defaults
The password-recovery mechanism is enabled.
Command Modes
Global configuration
Command History
Usage Guidelines
As a system administrator, you can use the no service password-recovery command to disable some of the functionality of the password recovery feature by allowing an end user to reset a password only by agreeing to return to the default configuration. This provides configuration file security by ensuring that only authenticated and authorized users have access to the configuration file and prevents users from accessing the configuration file by using the password recovery process.
The password recovery procedure requires using a break key. After the switch performs power-on self test (POST), the switch begins the autoboot process. The boot loader prompts the user for a break key character during the boot-up sequence, as shown in this example:
***** The system will autoboot in 5 seconds *****Send a break key to prevent autobooting.You must enter the break key on the console terminal within 5 seconds of receiving the message that the system will autoboot. A user with physical access to the switch presses the break key on the console terminal within 5 seconds of receiving the message that flash memory is initializing. The System LED flashes green until the break key is accepted. After the break key is accepted, the System LED turns off until after the switch boots.
The password-recovery mechanism has been triggered, butis currently disabled. Access to the boot loader promptthrough the password-recovery mechanism is disallowed atthis point. However, if you agree to let the system bereset back to the default system configuration, accessto the boot loader prompt can still be allowed.Would you like to reset the system back to the default configuration (y/n)?If the user chooses not to reset the system to the default configuration, the normal boot process continues as if the break key had not been pressed. If you choose to reset the system to the default configuration, the configuration file in flash memory is deleted, and the VLAN database file, flash:vlan.dat (if present), is deleted.
Note
If you use the no service password-recovery command to control end user access to passwords, we recommend that you save a copy of the configuration file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values. Do not keep a backup copy of the configuration file on the switch.
You can enter the show version privileged EXEC command to determine if password recovery is enabled or disabled.
Examples
This example shows how to disable password recovery on a switch so that a user can only reset a password by agreeing to return to the default configuration.
Switch(config)# no service-password recoverySwitch(config)# exitRelated Commands
service-policy (interface configuration)
Use the service-policy interface configuration command to apply a policy map defined by the policy-map command to the incoming or outgoing traffic of a physical port. Use the no form of this command to remove the policy map and port association.
service-policy {input | output} policy-map-name
no service-policy {input | output} policy-map-name
Syntax Description
input
Apply the policy map to the input of a physical port.
output
Apply the policy map to the output of a physical port.
policy-map-name
The specified policy map to be applied.
Note
Defaults
No policy maps are attached to the port.
Command Modes
Interface configuration
Command History
Usage Guidelines
Only one input policy map and one output policy map can be attached to an interface.
Beginning with Cisco IOS Release 12.2(35)SE, you can attach an output policy map to each interface on the switch. However, the switch supports a limit of three unique queue-limit configurations across all output policy maps at any time. Multiple policy maps can share the same queue-limit configuration.If you try to attach an output policy map with a fourth unique queue-limit configuration, you see this error message:
QoS: Configuration failed. Maximum number of allowable unique queue-limit configurations exceeded.You can attach input or output policy maps to a Fast Ethernet or Gigabit Ethernet port. You cannot attach policy maps to switch virtual interfaces (SVIs) and EtherChannel interfaces.
Examples
This example shows how to apply plcmap1 as an output policy map:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# service-policy output plcmap1This example shows how to remove plcmap2 from the port:
Switch(config)# interface gigabitethernet0/2Switch(config-if)# no service-policy output plcmap2You can verify your settings by entering the show running-config privileged EXEC command.
Related Commands
Creates or modifies a policy map that can be attached to multiple ports to specify a service policy.
Displays quality of service (QoS) policy maps.
show policy-map interface [interface-id]
Displays policy maps configured on the specified interface or on all interfaces.
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.
service-policy (policy-map class configuration)
Use the service-policy policy-map class configuration command to configure a quality of service (Q0S) service policy for an output policy map. Use the no form of this command to disable a service policy as a QoS policy within a policy map.
service-policy policy-map-name
no service-policy policy-map-name
Syntax Description
policy-map-name
Name of the service policy map (created by using the policy-map global configuration command) to be used in a QoS hierarchical service policy.
Defaults
No service policies are defined.
Command Modes
Policy-map class configuration
Command History
Usage Guidelines
You attach a service policy created in policy-map class configuration to a parent output policy map. This creates hierarchical policy mapping. Use the service-policy policy-map-name policy-map class configuration command to enter a second-level (child) policy map.
For an output policy map, when shape average is also configured on the class class-default, you can configure hierarchical policy maps by attaching a single service-policy policy-map class command to the class class-default. This policy map specifies the service policy for the port-shaped traffic on the port and is the parent policy map. You can configure the child policy with class-based queuing actions by using the queue-limit policy map class command and with scheduling actions (by using the bandwidth, shape average, or priority command).
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to define the service policy and to attach it to a parent policy map to set the maximum bandwidth (shape) for an output queue at 90000000 bits per second:
Switch(config)# policy-map out-policy-parentSwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# shape average 90000000Switch(config-pmap-c)# service-policy out-policySwitch(config-pmap-c)# exitSwitch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
set cos
Use the set cos policy-map class configuration command to set a Layer 2 class of service (CoS) value in the packet. Use the no form of this command to remove traffic marking.
set cos {cos_value | from-field [table table-map-name]}
no set cos {cos_value | from-field [table table-map-name]}
Syntax Description
Defaults
No traffic marking is defined.
Command Modes
Policy-map class configuration
Command History
12.2(25)EX
This command was introduced.
12-2(25)SEG
Support was added to set multiple marking actions and to use table maps for enhanced packet marking. See "Usage Guidelines."
Usage Guidelines
Beginning with Cisco IOS Release 12.2(25)SEG, you can configure set cos with all other marking actions, specifically set dscp, set precedence, and set qos-group, for the same class. Support was also added for the ability to configure more than one marking action with enhanced packet marking by using table maps for the same class.
Use the set cos command if you want to mark a packet that is being sent to a switch. Switches can leverage Layer 2 header information including a CoS value marking.
You can use the match cos class-map configuration command and the set cos policy-map class configuration command together to allow switches to interoperate and provide quality of service (QoS) based on the CoS markings. You can also configure Layer 2 to Layer 3 mapping by matching on the CoS value because switches can already match and set CoS values.
If you are using this command to perform enhanced packet marking, you can use the from-field packet marking option for mapping and setting the CoS value. The supported from-field marking categories are: CoS, DSCP, and IP precedence.
If you specify a from-field category, but do not specify the table keyword and table-map-name, the default action is to copy the value associated with the from-field category as the CoS value. For example, if you enter the set cos precedence command, the precedence value is copied and used as the CoS value. If you enter the set cos dscp command, the DSCP value is copied and used as the CoS value.
Examples
This example shows how to set all FTP traffic to cos 3:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set cos 3Switch(config-pmap-c)# exitThis example shows how to assign a DSCP to CoS table map to a class:
Switch(config)# policy-map inpolicySwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# set cos dscp table dscp-cos-tablemapSwitch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
set dscp
Use the set [ip] dscp policy-map class configuration command to mark IPv4 traffic by setting a Differentiated Services Code Point (DSCP) value in the type of service (ToS) byte of the packet. Use the no form of this command to remove traffic marking.
set [ip] dscp {dscp_value |from-field [table table-map-name]}
no set [ip] dscp {dscp_value | from-field [table table-map-name]}
Note
Syntax Description
Defaults
No traffic marking is defined.
Command Modes
Policy-map class configuration
Command History
12.2(25)EX
This command was introduced.
12-2(25)SEG
Support was added to set multiple marking actions and to use table maps for enhanced packet marking. See "Usage Guidelines."
Usage Guidelines
Beginning with Cisco IOS Release 12.2(25)SEG, you can configure set dscp with other marking actions, specifically set cos and set qos-group, for the same class. Support was also added for the ability to configure more than one marking action with enhanced packet marking by using table maps for the same class.
You cannot use the set dscp command with the set precedence command to mark the same packet. DSCP values and IP precedence values are mutually exclusive. A packet can have one value of the other, but not both.
After DSCP bits are set, other quality of service (QoS) features can then operate on the bit settings.
The network gives priority (or some type of expedited handling) to marked traffic. Typically, you set the DSCP value at the edge of the network (or administrative domain) and data is then queued according to the precedence. Class-based weighted fair queuing (CBWFQ) can speed up handling for high-precedence traffic at congestion points. Weighted Tail Drop (WTD) ensures that high-precedence traffic has lower loss rates than other traffic during times of congestion.
Instead of using numeric values, you can also specify the dscp-value by using the reserved keywords EF, AF11, and AF12.
If you are using this command to perform enhanced packet marking, you can use the from-field packet marking option for mapping and setting the DSCP value. The supported from-field marking categories are: CoS, DSCP, and IP precedence.
If you specify a from-field category, but do not specify the table keyword and table-map-name, the default action is to copy the value associated with the from-field category as the DSCP value. For example, if you enter the set dscp cos command, the CoS value is copied and used as the DSCP value.
Examples
This example shows how to set all FTP traffic to DSCP 10:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set dscp 10Switch(config-pmap-c)# exitThis example shows how to assign a CoS to DSCP table map to a class:
Switch(config)# policy-map inpolicySwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# set dscp cos table cos-dscp-tablemapSwitch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
set precedence
Use the set [ip] precedence policy-map class configuration command to mark IPv4 traffic by setting an IP-precedence value in the packet. Use the no form of this command to remove traffic marking.
set [ip] precedence {precedence_value | from-field [table table-map-name]}
no set [ip] precedence {precedence_value | from-field [table table-map-name]}
Note
Syntax Description
Defaults
No traffic marking is defined.
Command Modes
Policy-map class configuration
Command History
12.2(25)EX
This command was introduced.
12-2(25)SEG
Support was added to set multiple marking actions and to use table maps for enhanced packet marking. See "Usage Guidelines."
Usage Guidelines
Beginning with Cisco IOS Release 12.2(25)SEG, you can configure set precedence with other marking actions, specifically set cos and set qos-group, for the same class. Support was also added for the ability to configure more than one marking action with enhanced packet marking by using table maps for the same class.
You cannot use the set precedence command with the set dscp command to mark the same packet. DSCP values and IP precedence values are mutually exclusive. A packet can have one value of the other, but not both.
After precedence bits are set, other quality of service (QoS) features can then operate on the bit settings.
The network gives priority (or some type of expedited handling) to marked traffic. Typically, you set the precedence value at the edge of the network (or administrative domain) and data is then queued according to the precedence. Class-based weighted fair queuing (CBWFQ) can speed up handling for high-precedence traffic at congestion points. Weighted Tail Drop (WTD) ensures that high-precedence traffic has lower loss rates than other traffic during times of congestion.
Instead of using numeric values, you can also specify the dscp-value by using the reserved keywords EF, AF11, and AF12.
If you are using this command to perform enhanced packet marking, you can use the from-field packet marking option for mapping and setting the precedence value. The supported from-field marking categories are: CoS, DSCP, and IP precedence.
If you specify a from-field category, but do not specify the table keyword and table-map-name, the default action is to copy the value associated with the from-field category as the precedence value. For example, if you enter the set precedence cos command, the CoS value is copied and used as the precedence value.
Examples
This example shows how to give all FTP traffic an IP precedence value of 5:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set precedence 5Switch(config-pmap-c)# exitThis example shows how to assign a CoS to precedence table map to a class:
Switch(config)# policy-map inpolicySwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# set precedence cos table cos-prec-tablemapSwitch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
set qos-group
Use the set qos-group policy-map class configuration command to set a a quality of service (QoS) group identifier that can be used later to classify packets. Use the no form of this command to remove the group identifier.
set qos-group value
no set qos-group value
Syntax Description
Defaults
No traffic marking is defined.
Command Modes
Policy-map class configuration
Command History
Usage Guidelines
Beginning with Cisco IOS Release 12.2(25)SEG, you can configure set qos-group with all other marking actions, specifically set cos, set dscp, and set precedence, for the same class. Support was also added for the ability to configure more than one marking action with enhanced packet marking by using table maps for the same class.
Use this command to associate a QoS group value with a traffic flow as it enters the switch, which can then be used in an output policy map to identify the flow.
A maximum of 100 QoS groups (0 through 99) is supported on the switch.
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to set all FTP traffic to QoS group 5:
Switch(config)# policy-map policy_ftpSwitch(config-pmap)# class ftp_classSwitch(config-pmap-c)# set qos-group 5Switch(config-pmap-c)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
setup
Use the setup privileged EXEC command to configure the switch with its initial configuration.
setup
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
When you use the setup command, make sure that you have this information:
•
•
When you enter the setup command, an interactive dialog, called the System Configuration Dialog, appears. It guides you through the configuration process and prompts you for information. The values shown in brackets next to each prompt are the default values last set by using either the setup command facility or the configure privileged EXEC command.
Help text is provided for each prompt. To access help text, press the question mark (?) key at a prompt.
To return to the privileged EXEC prompt without making changes and without running through the entire System Configuration Dialog, press Ctrl-C.
When you complete your changes, the setup program shows you the configuration command script that was created during the setup session. You can save the configuration in NVRAM or return to the setup program or the command-line prompt without saving it.
Examples
This is an example of output from the setup command:
Switch# setup--- System Configuration Dialog ---Continue with configuration dialog? [yes/no]: yesAt any point you may enter a question mark '?' for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets '[]'.Basic management setup configures only enough connectivityfor management of the system, extended setup will ask youto configure each interface on the system.Would you like to enter basic management setup? [yes/no]: yesConfiguring global parameters:Enter host name [Switch]:host-nameThe enable secret is a password used to protect access toprivileged EXEC and configuration modes. This password, afterentered, becomes encrypted in the configuration.Enter enable secret: enable-secret-passwordThe enable password is used when you do not specify anenable secret password, with some older software versions, andsome boot images.Enter enable password: enable-passwordThe virtual terminal password is used to protectaccess to the router over a network interface.Enter virtual terminal password: terminal-passwordConfigure SNMP Network Management? [no]: yesCommunity string [public]:Current interface summaryAny interface listed with OK? value "NO" does not have a valid configurationInterface IP-Address OK? Method Status ProtocolVlan1 172.20.135.202 YES NVRAM up upGigabitEthernet0/1 unassigned YES unset up upGigabitEthernet0/2 unassigned YES unset up down<output truncated>Port-channel1 unassigned YES unset up downEnter interface name used to connect to themanagement network from the above interface summary: vlan1Configuring interface vlan1:Configure IP on this interface? [yes]: yesIP address for this interface: ip_addressSubnet mask for this interface [255.0.0.0]: subnet_maskThe following configuration command script was created:hostname host-nameenable secret 5 $1$LiBw$0Xc1wyT.PXPkuhFwqyhVi0enable password enable-passwordline vty 0 15password terminal-passwordsnmp-server community public!no ip routing!interface GigabitEthernet0/1no ip address!interface GigabitEthernet0/2no ip address!endUse this configuration? [yes/no]: yes![0] Go to the IOS command prompt without saving this config.[1] Return back to the setup without saving this config.[2] Save this configuration to nvram and exit.Enter your selection [2]:Related Commands
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.Displays version information for the hardware and firmware.
shape average
Use the shape average policy-map class configuration command to configure class-based shaping by specifying the average traffic shaping rate. Use the command with the class class-default to set port shaping. Use the no form of this command to remove traffic shaping.
shape average target bps
no shape average target bps
Syntax Description
Defaults
No traffic shaping is defined.
Command Modes
Policy-map class configuration
Command History
12.2(25)EX
This command was introduced.
12.2(25)SEG
Support was added to configure traffic shaping in the class-default of an output policy map.
Usage Guidelines
You use the shape average policy-map class command to control output traffic. Shaping is not supported in input policy maps.
Traffic shaping limits the rate of transmission of data. Configuring traffic shaping for a user-defined class or class-default for class-based shaping sets the peak information rate (PIR) for that class. Configuring traffic shaping for the class class-default when it is the only class in the policy map that is attached to an interface sets the PIR for the interface (port shaping).
You cannot configure shape average in a class that includes priority queueing (configured with the priority policy-map class configuration command).
The shape average command uses a default queue limit for the class. You can change the queue limit by using the queue-limit policy-map class command, overriding the default that is set by the shape average command.
You cannot use the bandwidth policy-map class configuration command to configure class-based weighted fair queuing (CBWFQ) and the shape average command to configure traffic shaping for the same class.
You can configure hierarchical policy maps by attaching the service-policy policy-map class command to the class class-default only when shape average is also configured on the class class-default.
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
This example shows how to configure traffic shaping for outgoing traffic on a Fast Ethernet port so that outclass1, outclass2, and outclass3 get a maximum of 50, 20, and 10 Mbps of the buffer size. The class class-default gets the remaining bandwidth.
Switch(config)# policy-map out-policySwitch(config-pmap)# class classout1Switch(config-pmap-c)# shape average 50000000Switch(config-pmap-c)# exitSwitch(config-pmap)# class classout2Switch(config-pmap-c)# shape average 20000000Switch(config-pmap-c)# exitSwitch(config-pmap)# class classout3Switch(config-pmap-c)# shape average 10000000Switch(config-pmap-c)# exitSwitch(config-pmap)# exitSwitch(config)# interface fastethernet 0/1Switch(config-if)# service-policy out out-policyThis example shows how to configure port shaping by configuring a hierarchical policy map that shapes a port to 90 Mbps, allocated according to the out-policy policy map configured in the previous example.
Switch(config)# policy-map out-policy-parentSwitch(config-pmap)# class class-defaultSwitch(config-pmap-c)# shape average 90000000Switch(config-pmap-c)# service-policy out-policySwitch(config-pmap-c)# exitSwitch(config-pmap)# exitYou can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands
Defines a traffic classification match criteria for the specified class-map name.
Creates or modifies a policy map that can be attached to multiple ports to specify a service policy.
Displays QoS policy maps.
show policy-map interface [interface-id]
Displays policy maps configured on the specified interface or on all interfaces.
show access-lists
Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.
show access-lists [name | number | hardware counters | ipc] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The switch supports only IP standard and extended access lists. Therefore, the allowed numbers are only 1 to 199 and 1300 to 2699.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show access-lists command:
Switch# show access-listsStandard IP access list 110 permit 1.1.1.120 permit 2.2.2.230 permit any40 permit 0.255.255.255, wildcard bits 12.0.0.0Standard IP access list videowizard_1-1-1-110 permit 1.1.1.1Standard IP access list videowizard_10-10-10-1010 permit 10.10.10.10Extended IP access list 12110 permit ahp host 10.10.10.10 host 20.20.10.10 precedence routineThis is an example of output from the show access-lists hardware counters command:
Switch# show access-lists hardware countersL2 ACL INPUT StatisticsDrop: All frame count: 855Drop: All bytes count: 94143Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 2121Forwarded: All bytes count: 180762Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L3 ACL INPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 13586Forwarded: All bytes count: 1236182Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L2 ACL OUTPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 232983Forwarded: All bytes count: 16825661Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0L3 ACL OUTPUT StatisticsDrop: All frame count: 0Drop: All bytes count: 0Drop And Log: All frame count: 0Drop And Log: All bytes count: 0Bridge Only: All frame count: 0Bridge Only: All bytes count: 0Bridge Only And Log: All frame count: 0Bridge Only And Log: All bytes count: 0Forwarding To CPU: All frame count: 0Forwarding To CPU: All bytes count: 0Forwarded: All frame count: 514434Forwarded: All bytes count: 39048748Forwarded And Log: All frame count: 0Forwarded And Log: All bytes count: 0Related Commands
show archive status
Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or the TFTP protocol.
show archive status [ |{begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you use the archive download-sw privileged EXEC command to download an image to a TFTP server, the output of the archive download-sw command shows the status of the download.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of output from the show archive status command:
Switch# show archive statusIDLE: No upgrade in progressSwitch# show archive statusLOADING: Upgrade in progressSwitch# show archive statusEXTRACT: Extracting the imageSwitch# show archive statusVERIFY: Verifying softwareSwitch# show archive statusRELOAD: Upgrade completed. Reload pendingRelated Commands
show boot
Use the show boot privileged EXEC command to display the settings of the boot environment variables.
show boot [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show boot command. Table 2-4 describes each field in the display.
Switch# show boot5d05h: %SYS-5-CONFIG_I: Configured from console by consoleBOOT path-list :Config file : flash:/config.textPrivate Config file : flash:/private-config.textEnable Break : noManual Boot : yesHELPER path-list :Auto upgrade : yes
Related Commands
show cable-diagnostics tdr
Use the show cable-diagnostics tdr privileged EXEC command to display the Time Domain Reflector (TDR) results.
show cable-diagnostics tdr interface interface-id [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
TDR is supported only on copper Ethernet 10/100 ports on the Cisco ME switch. It is not supported on small form-factor pluggable (SFP)-module ports. For more information about TDR, see the software configuration guide for this release.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show cable-diagnostics tdr interface interface-id command on a Cisco ME switch:
Switch# show cable-diagnostics tdr interface fastethernet0/1TDR test last run on: March 01 18:14:44Interface Speed Local pair Pair length Remote pair Pair status--------- ----- ---------- ------------------ ----------- --------------------Fa0/1 100M Pair A 4 +/- 5 meters Pair A NormalPair B 4 +/- 5 meters Pair B NormalPair C N/A Pair C N/APair D N/A Pair D N/ATable 2-5 lists the descriptions of the fields in the show cable-diagnostics tdr command output.
This is an example of output from the show interface interface-id command when TDR is running:
Switch# show interface fastethernet0/1fastethernet0/1 is up, line protocol is up (connected: TDR in Progress)This is an example of output from the show cable-diagnostics tdr interface interface-id command when TDR is not running:
Switch# show cable-diagnostics tdr interface fastethernet0/1% TDR test was never issued on fa0/1If an interface does not support TDR, this message appears:
% TDR test is not supported on switch 1Related Commands
show class-map
Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.
show class-map [class-map-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show class-map command:
Switch> show class-mapClass Map match-all videowizard_10-10-10-10 (id 2)Match access-group name videowizard_10-10-10-10Class Map match-any class-default (id 0)Match anyClass Map match-all dscp5 (id 3)Match ip dscp 5Related Commands
Creates a class map to be used for matching packets to the class whose name you specify.
Defines the match criteria to classify traffic.
show controllers cpu-interface
Use the show controllers cpu-interface privileged EXEC command to display the state of the CPU network interface ASIC and the send and receive statistics for packets reaching the CPU.
show controllers cpu-interface [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is a partial output example from the show controllers cpu-interface command:
Switch# show controllers cpu-interfacecpu-queue-frames retrieved dropped invalid hol-block----------------- ---------- ---------- ---------- ----------rpc 4523063 0 0 0stp 1545035 0 0 0ipc 1903047 0 0 0routing protocol 96145 0 0 0L2 protocol 79596 0 0 0remote console 0 0 0 0sw forwarding 5756 0 0 0host 225646 0 0 0broadcast 46472 0 0 0cbt-to-spt 0 0 0 0igmp snooping 68411 0 0 0icmp 0 0 0 0logging 0 0 0 0rpf-fail 0 0 0 0queue14 0 0 0 0cpu heartbeat 1710501 0 0 0Supervisor ASIC receive-queue parameters----------------------------------------queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFCqueue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8<output truncated>Supervisor ASIC Mic Registers------------------------------MicDirectPollInfo 80000800MicIndicationsReceived 00000000MicInterruptsReceived 00000000MicPcsInfo 0001001FMicPlbMasterConfiguration 00000000MicRxFifosAvailable 00000000MicRxFifosReady 0000BFFFMicTimeOutPeriod: FrameTOPeriod: 00000EA6 DirectTOPeriod: 00004000<output truncated>MicTransmitFifoInfo:Fifo0: StartPtrs: 038C2800 ReadPtr: 038C2C38WritePtrs: 038C2C38 Fifo_Flag: 8A800800Weights: 001E001EFifo1: StartPtr: 03A9BC00 ReadPtr: 03A9BC60WritePtrs: 03A9BC60 Fifo_Flag: 89800400writeHeaderPtr: 03A9BC60Fifo2: StartPtr: 038C8800 ReadPtr: 038C88E0WritePtrs: 038C88E0 Fifo_Flag: 88800200writeHeaderPtr: 038C88E0Fifo3: StartPtr: 03C30400 ReadPtr: 03C30638WritePtrs: 03C30638 Fifo_Flag: 89800400writeHeaderPtr: 03C30638Fifo4: StartPtr: 03AD5000 ReadPtr: 03AD50A0WritePtrs: 03AD50A0 Fifo_Flag: 89800400writeHeaderPtr: 03AD50A0Fifo5: StartPtr: 03A7A600 ReadPtr: 03A7A600WritePtrs: 03A7A600 Fifo_Flag: 88800200writeHeaderPtr: 03A7A600Fifo6: StartPtr: 03BF8400 ReadPtr: 03BF87F0WritePtrs: 03BF87F0 Fifo_Flag: 89800400<output truncated>Related Commands
show controllers ethernet-controller
Use the show controllers ethernet-controller privileged EXEC command without keywords to display per-interface send and receive statistics read from the hardware. Use with the phy keyword to display the interface internal registers or the port-asic keyword to display information about the port ASIC.
show controllers ethernet-controller [interface-id] [phy [detail]] [port-asic {configuration | statistics}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC (only supported with the interface-id keywords in user EXEC mode)
Command History
Usage Guidelines
This display without keywords provides traffic statistics, basically the RMON statistics for all interfaces or for the specified interface.
When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show controllers ethernet-controller command for an interface. Table 2-6 describes the Transmit fields, and Table 2-7 describes the Receive fields.
Switch# show controllers ethernet-controller gigabitethernet0/1Transmit GigabitEthernet0/1 Receive0 Bytes 0 Bytes0 Unicast frames 0 Unicast frames0 Multicast frames 0 Multicast frames0 Broadcast frames 0 Broadcast frames0 Too old frames 0 Unicast bytes0 Deferred frames 0 Multicast bytes0 MTU exceeded frames 0 Broadcast bytes0 1 collision frames 0 Alignment errors0 2 collision frames 0 FCS errors0 3 collision frames 0 Oversize frames0 4 collision frames 0 Undersize frames0 5 collision frames 0 Collision fragments0 6 collision frames0 7 collision frames 0 Minimum size frames0 8 collision frames 0 65 to 127 byte frames0 9 collision frames 0 128 to 255 byte frames0 10 collision frames 0 256 to 511 byte frames0 11 collision frames 0 512 to 1023 byte frames0 12 collision frames 0 1024 to 1518 byte frames0 13 collision frames 0 Overrun frames0 14 collision frames 0 Pause frames0 15 collision frames 0 Symbol error frames0 Excessive collisions0 Late collisions 0 Invalid frames, too large0 VLAN discard frames 0 Valid frames, too large0 Excess defer frames 0 Invalid frames, too small0 64 byte frames 0 Valid frames, too small0 127 byte frames0 255 byte frames 0 Too old frames0 511 byte frames 0 Valid oversize frames0 1023 byte frames 0 System FCS error frames0 1518 byte frames 0 RxPortFifoFull drop frame0 Too large frames0 Good (1 coll) frames
Table 2-6 Transmit Field Descriptions
Bytes
The total number of bytes sent on an interface.
Unicast Frames
The total number of frames sent to unicast addresses.
Multicast frames
The total number of frames sent to multicast addresses.
Broadcast frames
The total number of frames sent to broadcast addresses.
Too old frames
The number of frames dropped on the egress port because the packet aged out.
Deferred frames
The number of frames that are not sent after the time exceeds 2*maximum-packet time.
MTU exceeded frames
The number of frames that are larger than the maximum allowed frame size.
1 collision frames
The number of frames that are successfully sent on an interface after one collision occurs.
2 collision frames
The number of frames that are successfully sent on an interface after two collisions occur.
3 collision frames
The number of frames that are successfully sent on an interface after three collisions occur.
4 collision frames
The number of frames that are successfully sent on an interface after four collisions occur.
5 collision frames
The number of frames that are successfully sent on an interface after five collisions occur.
6 collision frames
The number of frames that are successfully sent on an interface after six collisions occur.
7 collision frames
The number of frames that are successfully sent on an interface after seven collisions occur.
8 collision frames
The number of frames that are successfully sent on an interface after eight collisions occur.
9 collision frames
The number of frames that are successfully sent on an interface after nine collisions occur.
10 collision frames
The number of frames that are successfully sent on an interface after ten collisions occur.
11 collision frames
The number of frames that are successfully sent on an interface after 11 collisions occur.
12 collision frames
The number of frames that are successfully sent on an interface after 12 collisions occur.
13 collision frames
The number of frames that are successfully sent on an interface after 13 collisions occur.
14 collision frames
The number of frames that are successfully sent on an interface after 14 collisions occur.
15 collision frames
The number of frames that are successfully sent on an interface after 15 collisions occur.
Excessive collisions
The number of frames that could not be sent on an interface after 16 collisions occur.
Late collisions
After a frame is sent, the number of frames dropped because late collisions were detected while the frame was sent.
VLAN discard frames
The number of frames dropped on an interface because the CFI1 bit is set.
Excess defer frames
The number of frames that are not sent after the time exceeds the maximum-packet time.
64 byte frames
The total number of frames sent on an interface that are 64 bytes.
127 byte frames
The total number of frames sent on an interface that are from 65 to 127 bytes.
255 byte frames
The total number of frames sent on an interface that are from 128 to 255 bytes.
511 byte frames
The total number of frames sent on an interface that are from 256 to 511 bytes.
1023 byte frames
The total number of frames sent on an interface that are from 512 to 1023 bytes.
1518 byte frames
The total number of frames sent on an interface that are from 1024 to 1518 bytes.
Too large frames
The number of frames sent on an interface that are larger than the maximum allowed frame size.
Good (1 coll) frames
The number of frames that are successfully sent on an interface after one collision occurs. This value does not include the number of frames that are not successfully sent after one collision occurs.
1 CFI = Canonical Format Indicator
Table 2-7 Receive Field Descriptions
Bytes
The total amount of memory (in bytes) used by frames received on an interface, including the FCS1 value and the incorrectly formed frames. This value excludes the frame header bits.
Unicast frames
The total number of frames successfully received on the interface that are directed to unicast addresses.
Multicast frames
The total number of frames successfully received on the interface that are directed to multicast addresses.
Broadcast frames
The total number of frames successfully received on an interface that are directed to broadcast addresses.
Unicast bytes
The total amount of memory (in bytes) used by unicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Multicast bytes
The total amount of memory (in bytes) used by multicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Broadcast bytes
The total amount of memory (in bytes) used by broadcast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Alignment errors
The total number of frames received on an interface that have alignment errors.
FCS errors
The total number of frames received on an interface that have a valid length (in bytes) but do not have the correct FCS values.
Oversize frames
The number of frames received on an interface that are larger than the maximum allowed frame size.
Undersize frames
The number of frames received on an interface that are smaller than 64 bytes.
Collision fragments
The number of collision fragments received on an interface.
Minimum size frames
The total number of frames that are the minimum frame size.
65 to 127 byte frames
The total number of frames that are from 65 to 127 bytes.
128 to 255 byte frames
The total number of frames that are from 128 to 255 bytes.
256 to 511 byte frames
The total number of frames that are from 256 to 511 bytes.
512 to 1023 byte frames
The total number of frames that are from 512 to 1023 bytes.
1024 to 1518 byte frames
The total number of frames that are from 1024 to 1518 bytes.
Overrun frames
The total number of overrun frames received on an interface.
Pause frames
The number of pause frames received on an interface.
Symbol error frames
The number of frames received on an interface that have symbol errors.
Invalid frames, too large
The number of frames received that were larger than maximum allowed MTU2 size (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too large
The number of frames received on an interface that are larger than the maximum allowed frame size.
Invalid frames, too small
The number of frames received that are smaller than 64 bytes (including the FCS bits and excluding the frame header) and that have either an FCS error or an alignment error.
Valid frames, too small
The number of frames received on an interface that are smaller than 64 bytes (or 68 bytes for VLAN-tagged frames) and that have valid FCS values. The frame size includes the FCS bits but excludes the frame header bits.
Too old frames
The number of frames dropped on the ingress port because the packet aged out.
Valid oversize frames
The number of frames received on an interface that are larger than the maximum allowed frame size and have valid FCS values. The frame size includes the FCS value but does not include the VLAN tag.
System FCS error frames
The total number of frames received on an interface that have a valid length (in bytes) but that do not have the correct FCS values.
RxPortFifoFull drop frames
The total number of frames received on an interface that are dropped because the ingress queue is full.
1 FCS = frame check sequence
2 MTU = maximum transmission unit
This is an example of output from the show controllers ethernet-controller phy command for a specific interface. Note that the last line of the display is the setting for Auto-MDIX for the interface.
Switch# show controllers ethernet-controller gigabitethernet0/2 phyControl Register : 0001 0001 0100 0000Control STATUS : 0111 1001 0100 1001Phy ID 1 : 0000 0001 0100 0001Phy ID 2 : 0000 1100 0010 0100Auto-Negotiation Advertisement : 0000 0011 1110 0001Auto-Negotiation Link Partner : 0000 0000 0000 0000Auto-Negotiation Expansion Reg : 0000 0000 0000 0100Next Page Transmit Register : 0010 0000 0000 0001Link Partner Next page Registe : 0000 0000 0000 00001000BASE-T Control Register : 0000 1111 0000 00001000BASE-T Status Register : 0100 0000 0000 0000Extended Status Register : 0011 0000 0000 0000PHY Specific Control Register : 0000 0000 0111 1000PHY Specific Status Register : 1000 0001 0100 0000Interrupt Enable : 0000 0000 0000 0000Interrupt Status : 0000 0000 0100 0000Extended PHY Specific Control : 0000 1100 0110 1000Receive Error Counter : 0000 0000 0000 0000Reserved Register 1 : 0000 0000 0000 0000Global Status : 0000 0000 0000 0000LED Control : 0100 0001 0000 0000Manual LED Override : 0000 1000 0010 1010Extended PHY Specific Control : 0000 0000 0001 1010Disable Receiver 1 : 0000 0000 0000 1011Disable Receiver 2 : 1000 0000 0000 0100Extended PHY Specific Status : 1000 0100 1000 0000Auto-MDIX : On [AdminState=1 Flags=0x00052248]This is an example of output from the show controllers ethernet-controller port-asic configuration command:
Switch# show controllers ethernet-controller port-asic configuration========================================================================PortASIC 0 Registers------------------------------------------------------------------------DeviceType : 000101BCReset : 00000000PmadMicConfig : 00000001PmadMicDiag : 00000003SupervisorReceiveFifoSramInfo : 000007D0 000007D0 40000000SupervisorTransmitFifoSramInfo : 000001D0 000001D0 40000000GlobalStatus : 00000800IndicationStatus : 00000000IndicationStatusMask : FFFFFFFFInterruptStatus : 00000000InterruptStatusMask : 01FFE800SupervisorDiag : 00000000SupervisorFrameSizeLimit : 000007C8SupervisorBroadcast : 000A0F01GeneralIO : 000003F9 00000000 00000004StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFFFF0FFF00 86020000 5555FFFF 00000000StackRacInfo : 73001630 00000003 7F001644 0000000324140003 FD632B00 18E418E0 FFFFFFFFStackControlStatus : 18E418E0stackControlStatusMask : FFFFFFFFTransmitBufferFreeListInfo : 00000854 00000800 00000FF8 000000000000088A 0000085D 00000FF8 00000000TransmitRingFifoInfo : 00000016 00000016 40000000 000000000000000C 0000000C 40000000 00000000TransmitBufferInfo : 00012000 00000FFF 00000000 00000030TransmitBufferCommonCount : 00000F7ATransmitBufferCommonCountPeak : 0000001ETransmitBufferCommonCommonEmpty : 000000FFNetworkActivity : 00000000 00000000 00000000 02400000DroppedStatistics : 00000000FrameLengthDeltaSelect : 00000001SneakPortFifoInfo : 00000000MacInfo : 0EC0801C 00000001 0EC0801B 0000000100C0001D 00000001 00C0001E 00000001<output truncated>This is an example of output from the show controllers ethernet-controller port-asic statistics command:
Switch# show controllers ethernet-controller port-asic statistics===========================================================================PortASIC 0 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames4118966 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames0 RxQ-1, wt-0 enqueue frames 0 RxQ-1, wt-0 drop frames296 RxQ-1, wt-1 enqueue frames 0 RxQ-1, wt-1 drop frames2836036 RxQ-1, wt-2 enqueue frames 0 RxQ-1, wt-2 drop frames0 RxQ-2, wt-0 enqueue frames 0 RxQ-2, wt-0 drop frames0 RxQ-2, wt-1 enqueue frames 0 RxQ-2, wt-1 drop frames158377 RxQ-2, wt-2 enqueue frames 0 RxQ-2, wt-2 drop frames0 RxQ-3, wt-0 enqueue frames 0 RxQ-3, wt-0 drop frames0 RxQ-3, wt-1 enqueue frames 0 RxQ-3, wt-1 drop frames0 RxQ-3, wt-2 enqueue frames 0 RxQ-3, wt-2 drop frames15 TxBufferFull Drop Count 0 Rx Fcs Error Frames0 TxBufferFrameDesc BadCrc16 0 Rx Invalid Oversize Frames0 TxBuffer Bandwidth Drop Cou 0 Rx Invalid Too Large Frames0 TxQueue Bandwidth Drop Coun 0 Rx Invalid Too Large Frames0 TxQueue Missed Drop Statist 0 Rx Invalid Too Small Frames74 RxBuffer Drop DestIndex Cou 0 Rx Too Old Frames0 SneakQueue Drop Count 0 Tx Too Old Frames0 Learning Queue Overflow Fra 0 System Fcs Error Frames0 Learning Cam Skip Count15 Sup Queue 0 Drop Frames 0 Sup Queue 8 Drop Frames0 Sup Queue 1 Drop Frames 0 Sup Queue 9 Drop Frames0 Sup Queue 2 Drop Frames 0 Sup Queue 10 Drop Frames0 Sup Queue 3 Drop Frames 0 Sup Queue 11 Drop Frames0 Sup Queue 4 Drop Frames 0 Sup Queue 12 Drop Frames0 Sup Queue 5 Drop Frames 0 Sup Queue 13 Drop Frames0 Sup Queue 6 Drop Frames 0 Sup Queue 14 Drop Frames0 Sup Queue 7 Drop Frames 0 Sup Queue 15 Drop Frames===========================================================================PortASIC 1 Statistics---------------------------------------------------------------------------0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames52 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames<output truncated>Related Commands
show controllers tcam
Use the show controllers tcam privileged EXEC command to display the state of the registers for all ternary content addressable memory (TCAM) in the system and for all TCAM interface ASICs that are CAM controllers.
show controllers tcam [asic [number]] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers tcam command:
Switch# show controllers tcam------------------------------------------------------------------------TCAM-0 Registers------------------------------------------------------------------------REV: 00B30103SIZE: 00080040ID: 00000000CCR: 00000000_F0000020RPID0: 00000000_00000000RPID1: 00000000_00000000RPID2: 00000000_00000000RPID3: 00000000_00000000HRR0: 00000000_E000CAFCHRR1: 00000000_00000000HRR2: 00000000_00000000HRR3: 00000000_00000000HRR4: 00000000_00000000HRR5: 00000000_00000000HRR6: 00000000_00000000HRR7: 00000000_00000000<output truncated>GMR31: FF_FFFFFFFF_FFFFFFFFGMR32: FF_FFFFFFFF_FFFFFFFFGMR33: FF_FFFFFFFF_FFFFFFFF=============================================================================TCAM related PortASIC 1 registers=============================================================================LookupType: 89A1C67D_24E35F00LastCamIndex: 0000FFE0LocalNoMatch: 000069E0ForwardingRamBaseAddress:00022A00 0002FE00 00040600 0002FE00 0000D40000000000 003FBA00 00009000 00009000 0004060000000000 00012800 00012900Related Commands
show controllers utilization
Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports.
show controllers [interface-id] utilization [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show controllers utilization command.
Switch> show controllers utilizationPort Receive Utilization Transmit UtilizationFa0/1 0 0Fa0/2 0 0Fa0/3 0 0Fa0/4 0 0Fa0/5 0 0Fa0/6 0 0Fa0/7 0 0<output truncated>Switch Receive Bandwidth Percentage Utilization : 0Switch Transmit Bandwidth Percentage Utilization : 0Switch Fabric Percentage Utilization : 0This is an example of output from the show controllers utilization command on a specific port:
Switch> show controllers gigabitethernet0/1 utilizationReceive Bandwidth Percentage Utilization : 0Transmit Bandwidth Percentage Utilization : 0
Related Commands
show dot1x
Use the show dot1x privileged EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified port.
show dot1x [all | interface interface-id | statistics interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not specify a port, global parameters and a summary appear. If you specify a port, details for that port appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output appear.
Examples
This is an example of output from the show dot1x and the show dot1x all privileged EXEC commands:
Switch# show dot1xSysauthcontrol = EnabledDot1x Protocol Version = 1Dot1x Oper Controlled Directions = BothDot1x Admin Controlled Directions = BothSwitch# show dot1x allDot1x Info for interface GigabitEthernet0/1----------------------------------------------------Supplicant MAC 00d0.b71b.35deAuthSM State = CONNECTINGBendSM State = IDLEPortStatus = UNAUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0Dot1x Info for interface GigabitEthernet0/2----------------------------------------------------PortStatus = UNAUTHORIZEDMaxReq = 2HostMode = MultiPort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x interface interface-id privileged EXEC command:
Switch# show dot1x interface gigabitethernet0/1Supplicant MAC 00d0.b71b.35deAuthSM State = AUTHENTICATEDBendSM State = IDLEPortStatus = AUTHORIZEDMaxReq = 2HostMode = SinglePort Control = AutoQuietPeriod = 60 SecondsRe-authentication = DisabledReAuthPeriod = 3600 SecondsServerTimeout = 30 SecondsSuppTimeout = 30 SecondsTxPeriod = 30 SecondsGuest-Vlan = 0This is an example of output from the show dot1x statistics interface interface-id command. Table 2-9 describes the fields in the display.
Switch# show dot1x statistics interface gigabitethernet0/1PortStatistics Parameters for Dot1x--------------------------------------------TxReqId = 15 TxReq = 0 TxTotal = 15RxStart = 4 RxLogoff = 0 RxRespId = 1 RxResp = 1RxInvalid = 0 RxLenErr = 0 RxTotal= 6RxVersion = 1 LastRxSrcMac 00d0.b71b.35de
Related Commands
show env
Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch.
show env {all | fan | power | rps | temperature [status]} [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show env all command:
Switch# show env allFAN is OKTEMPERATURE is OKPOWER is OKRPS is NOT PRESENTThis is an example of output from the show env fan command:
Switch> show env fanFAN is OKshow errdisable detect
Use the show errdisable detect user EXEC command to display error-disable detection status.
show errdisable detect [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.2(25)EX
This command was introduced.
12.2(37)SE
The Mode column was added to the output display.
Usage Guidelines
The Mode column shows the shutdown mode that was configured for the error-disabled reason:
•
•
•
A displayed gbic-invalid error in the Reason column refers to an invalid small form-factor pluggable (SFP) interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show errdisable detect command:
Switch> show errdisable detectErrDisable Reason Detection Mode----------------- --------- ----arp-inspection Enabled portbpduguard Enabled portchannel-misconfig Enabled portcommunity-limit Enabled portdhcp-rate-limit Enabled portdtp-flap Enabled portgbic-invalid Enabled portinvalid-policy Enabled portl2ptguard Enabled portlink-flap Enabled portlink-monitor-fail Enabled portloopback Enabled portlsgroup Enabled portoam-remote-failur Enabled portpagp-flap Enabled portpsecure-violation Enabled port/vlansecurity-violatio Enabled portsfp-config-mismat Enabled portstorm-control Enabled portudld Enabled portvmps Enabled port
Note
Related Commands
Enables error-disable detection for a specific cause or all causes.
Displays error condition recognition information.
Displays error-disable recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in an error-disabled state.
show errdisable flap-values
Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause.
show errdisable flap-values [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The Flaps column in the display shows how many changes to the state within the specified time interval will cause an error to be detected and a port to be disabled. For example, the display shows that an error will be assumed and the port shut down if three Dynamic Trunking Protocol (DTP)-state (port mode access/trunk) or Port Aggregation Protocol (PAgP) flap changes occur during a 30-second interval, or if 5 link-state (link up/down) changes occur during a 10-second interval.
ErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10
Note
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show errdisable flap-values command:
Switch> show errdisable flap-valuesErrDisable Reason Flaps Time (sec)----------------- ------ ----------pagp-flap 3 30dtp-flap 3 30link-flap 5 10Related Commands
Enables error-disable detection for a specific cause or all causes.
Displays error-disable detection status.
Displays error-disable recovery timer information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show errdisable recovery
Use the show errdisable recovery user EXEC command to display the error-disable recovery timer information.
show errdisable recovery [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
A gbic-invalid error-disable reason refers to an invalid small form-factor pluggable (SFP) module interface.
Examples
This is an example of output from the show errdisable recovery command:
Switch> show errdisable recoveryErrDisable Reason Timer Status----------------- --------------udld Disabledbpduguard Disabledsecurity-violatio Disabledchannel-misconfig Disabledvmps Disabledpagp-flap Disableddtp-flap Disabledlink-flap Enabledpsecure-violation Disabledgbic-invalid Disableddhcp-rate-limit Disabledunicast-flood Disabledstorm-control Disabledarp-inspection Disabledloopback DisabledTimer interval:300 secondsInterfaces that will be enabled at the next timeout:Interface Errdisable reason Time left(sec)--------- ----------------- --------------Gi0/2 link-flap 279
Note
Related Commands
Configures the recover mechanism variables.
Displays error-disabled detection status.
Displays error condition recognition information.
show interfaces status
Displays interface status or a list of interfaces in error-disabled state.
show etherchannel
Use the show etherchannel user EXEC command to display EtherChannel information for a channel.
show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not specify a channel-group, all channel groups are displayed.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show etherchannel 1 detail command:
Switch> show etherchannel 1 detailGroup state = L2Ports: 2 Maxports = 16Port-channels: 1 Max Port-channels = 16Protocol: LACPPorts in the group:-------------------Port: Gi0/1------------Port state = Up Mstr In-BndlChannel group = 1 Mode = Active Gcchange = -Port-channel = Po1 GC = - Pseudo port-channel = Po1Port index = 0 Load = 0x00 Protocol = LACPFlags: S - Device is sending Slow LACPDUs F - Device is sending fast LACPDUA - Device is in active mode. P - Device is in passive mode.Local information:LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateGi0/1 SA bndl 32768 0x0 0x1 0x0 0x3DAge of the port in the current state: 01d:20h:06m:04sPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:20m:26sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi0/1 Active 00 00 Gi0/2 Active 0Time since last port bundled: 01d:20h:20m:20s Gi0/2This is an example of output from the show etherchannel 1 summary command:
Switch> show etherchannel 1 summaryFlags: D - down P - in port-channelI - stand-alone s - suspendedH - Hot-standby (LACP only)R - Layer3 S - Layer2u - unsuitable for bundlingU - in use f - failed to allocate aggregatord - default portNumber of channel-groups in use: 1Number of aggregators: 1Group Port-channel Protocol Ports------+-------------+-----------+----------------------------------------1 Po1(SU) LACP Gi0/1(P) Gi0/2(P)This is an example of output from the show etherchannel 1 port-channel command:
Switch> show etherchannel 1 port-channelPort-channels in the group:----------------------Port-channel: Po1 (Primary Aggregator)------------Age of the Port-channel = 01d:20h:24m:50sLogical slot/port = 10/1 Number of ports = 2HotStandBy port = nullPort state = Port-channel Ag-InuseProtocol = LACPPorts in the Port-channel:Index Load Port EC state No of bits------+------+------+------------------+-----------0 00 Gi0/1 Active 00 00 Gi0/2 Active 0Time since last port bundled: 01d:20h:24m:44s Gi0/2This is an example of output from show etherchannel protocol command:
Switch# show etherchannel protocolChannel-group listing:-----------------------Group: 1----------Protocol: LACPGroup: 2----------Protocol: PAgPRelated Commands
Assigns an Ethernet port to an EtherChannel group.
Restricts the protocol used on a port to manage channeling.
Accesses or creates the port channel.
show flowcontrol
Use the show flowcontrol user EXEC command to display the flow control status and statistics.
show flowcontrol [interface interface-id | module number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use this command to display the flow control status and statistics on the switch or for a specific interface.
Use the show flowcontrol command to display information about all the switch interfaces. The output from the show flowcontrol command is the same as the output from the show flowcontrol module number command.
Use the show flowcontrol interface interface-id command to display information about a specific interface.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show flowcontrol command.
Switch> show flowcontrolPort Send FlowControl Receive FlowControl RxPause TxPauseadmin oper admin oper--------- -------- -------- -------- -------- ------- -------Gi0/1 Unsupp. Unsupp. off off 0 0Gi0/2 desired off off off 0 0Gi0/3 desired off off off 0 0<output truncated>This is an example of output from the show flowcontrol interface interface-id command:
Switch> show flowcontrol interface gigabitethernet0/2Port Send FlowControl Receive FlowControl RxPause TxPauseadmin oper admin oper--------- -------- -------- -------- -------- ------- -------Gi0/2 desired off off off 0 0Related Commands
show idprom
Use the show idprom user EXEC command to display the IDPROM information for a Gigabit Ethernet interface.
show idprom {interface interface-id} [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
This command applies only to Gigabit Ethernet interfaces and displays information about SFPs inserted in the SFP module slot.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show idprom interface command for a Gigabit Ethernet interface:
Switch# show idprom interface gigabitethernet0/1
General SFP Information-----------------------------------------------Identifier : 0x03Connector : 0x07Transceiver : 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00Encoding : 0x02BR_Nominal : 0x01Vendor Name : CISCO-NECVendor Part Number : OD-BP1511-23SL2Vendor Revision : 0x30 0x30 0x30 0x31Vendor Serial Number : NEC08440067-----------------------------------------------Other Information-------------------------------------------------------Port asic num : 0Port asic port num : 0XCVR init completed : 1Embedded PHY : not presentSFP presence index : 0SFP iter cnt : 697918SFP failed oper flag : 0x0IIC error cnt : 0IIC error dsb cnt : 0IIC max sts cnt : 4Chk for link status : 1Link Status : 1Link Status Media : 1Preferred media : 0Resolved Media : 1Config Media : 1Access Count : 0Access Count Max : 2Port Rx Loss : noPort Tx Fault : noPort Tx Disable : noSfp selection asic reg map--------------------------------stbi : 0x00sfpControl : 0x4CRegs Loc : 0xF0000000-------------------------------------------------------Page 0 Registers------------------------------------------------------------------------0000: 1140 Control Register : 0001 0001 0100 00000001: 6149 Control STATUS : 0110 0001 0100 10010002: 0141 Phy ID 1 : 0000 0001 0100 00010003: 0C92 Phy ID 2 : 0000 1100 1001 00100004: 01E1 Auto-Negotiation Advertisement : 0000 0001 1110 00010005: 0000 Auto-Negotiation Link Partner : 0000 0000 0000 00000006: 0004 Auto-Negotiation Expansion Reg : 0000 0000 0000 01000007: 2001 Next Page Transmit Register : 0010 0000 0000 00010008: 0000 Link Partner Next page Registe : 0000 0000 0000 00000009: 0F00 1000BASE-T Control Register : 0000 1111 0000 0000000A: 0000 1000BASE-T Status Register : 0000 0000 0000 0000000F: 0000 Extended Status Register : 0000 0000 0000 00000010: 6028 PHY Specific Control Register : 0110 0000 0010 10000011: 6CC8 PHY Specific Status Register : 0110 1100 1100 10000012: 0000 Interrupt Enable Register : 0000 0000 0000 00000013: 0700 PHY Specific Status Register2 : 0000 0111 0000 00000015: 01C0 Receive Error Counter : 0000 0001 1100 00000016: 0000 Page Address Register : 0000 0000 0000 0000001A: 8040 PHY Specific Control Register2 : 1000 0000 0100 0000<output truncated>Related CommandsPage 1 Registers
Related Commands-----------------------------------------------------------------------
Related Commands0000: 2100 Control Register : 0010 0001 0000 0000
Related Commands0001: 6141 Control STATUS : 0110 0001 0100 0001
Related Commands0002: 0141 Phy ID 1 : 0000 0001 0100 0001
Related Commands0003: 0C92 Phy ID 2 : 0000 1100 1001 0010
Related Commands0004: 0060 Auto-Negotiation Advertisement : 0000 0000 0110 0000
Related Commands0005: 0000 Auto-Negotiation Link Partner : 0000 0000 0000 0000
Related Commands0006: 0004 Auto-Negotiation Expansion Reg : 0000 0000 0000 0100
Related Commands0007: 2001 Next Page Transmit Register : 0010 0000 0000 0001
Related Commands0008: 0000 Link Partner Next page Registe : 0000 0000 0000 0000
Related Commands0009: 0000 1000BASE-T Control Register : 0000 0000 0000 0000
Related Commands000A: 0000 1000BASE-T Status Register : 0000 0000 0000 0000
Related Commands000F: 0000 Extended Status Register : 0000 0000 0000 0000
Related Commands0010: 0200 PHY Specific Control Register : 0000 0010 0000 0000
Related Commands0011: 0098 PHY Specific Status Register : 0000 0000 1001 1000
Related Commands0012: 0000 Interrupt Enable Register : 0000 0000 0000 0000
Related Commands0013: 0000 PHY Specific Status Register2 : 0000 0000 0000 0000
Related Commands0015: 0000 Receive Error Counter : 0000 0000 0000 0000
Displays per-interface send and receive statistics read from the hardware, interface internal registers, or port ASIC information.
show interfaces
Use the show interfaces privileged EXEC command to display the administrative and operational status of all interfaces or a specified interface.
show interfaces [interface-id | vlan vlan-id] [accounting | capabilities [module number] | counters | description | etherchannel | flowcontrol | stats | status [err-disabled] | switchport [ module number] | transceiver [properties | detail] [module number] | trunk] [ | {begin | exclude | include} expression]
Syntax Description
interface-id
(Optional) Valid interfaces include physical ports (including type, module, and port number) and port channels. The port-channel range is 1 to 48.
vlan vlan-id
(Optional) VLAN identification. The range is 1 to 4094.
accounting
(Optional) Display accounting information on the interface, including active protocols and input and output packets and octets.
capabilities
(Optional) Display the capabilities of all interfaces or the specified interface, including the features and options that you can configure on the interface. Though visible in the command line help, this option is not available for VLAN IDs.
module number
(Optional) Display capabilities, switchport configuration, or transceiver characteristics (depending on preceding keyword) of all interfaces on the switch. The only valid module number is 1. This option is not available if you have entered a specific interface ID.
counters
(Optional) See the show interfaces counters command.
description
(Optional) Display the administrative status and description set for an interface.
etherchannel
(Optional) Display interface EtherChannel information.
flowcontrol
(Optional) Display interface flowcontrol information
stats
(Optional) Display the input and output packets by switching path for the interface.
status
(Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot.
err-disabled
(Optional) Display interfaces in error-disabled state.
switchport
(Optional) Display the administrative and operational status of a switching port, including port blocking and port protection settings.
transceiver [detail | properties]
(Optional) Display the physical properties of a small form-factor (SFP) module interface. The keywords have these meanings:
•
•
trunk
Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears.
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The show interfaces capabilities command with different keywords has these results:
•
•
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show interfaces command for an interface:
Switch# show interfaces gigabitethernet0/2GigabitEthernet0/2 is down, line protocol is downHardware is Gigabit Ethernet, address is 0009.43a7.d085 (bia 0009.43a7.d085)MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,reliability 255/255, txload 1/255, rxload 1/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Auto-duplex, Auto-speedinput flow-control is off, output flow-control is offARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang neverLast clearing of "show interface" counters neverInput queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0Queueing strategy: fifoOutput queue :0/40 (size/max)5 minute input rate 0 bits/sec, 0 packets/sec5 minute output rate 0 bits/sec, 0 packets/sec2 packets input, 1040 bytes, 0 no bufferReceived 0 broadcasts, 0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast, 0 pause input0 input packets with dribble condition detected4 packets output, 1040 bytes, 0 underruns0 output errors, 0 collisions, 3 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped outThis is an example of output from the show interfaces accounting command.
Switch# show interfaces accountingVlan1Protocol Pkts In Chars In Pkts Out Chars OutIP 1094395 131900022 559555 84077157Spanning Tree 283896 17033760 42 2520ARP 63738 3825680 231 13860Interface Vlan2 is disabledVlan7Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.Vlan31Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet0/1Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.GigabitEthernet0/2Protocol Pkts In Chars In Pkts Out Chars OutNo traffic sent or received on this interface.<output truncated>This is an example of output from the show interfaces capabilities command for an interface.
Switch# show interfaces gigabitethernet0/2 capabilitiesGigabitEthernet0/2Model: ME-2400-24T-FAType: 10/100/1000BaseTX SFPSpeed: 10,100,1000,autoDuplex: half,full,autoTrunk encap. type: 802.1QTrunk mode: on,off,desirable,nonegotiateChannel: yesBroadcast suppression: percentage(0-100)Flowcontrol: rx-(off,on,desired),tx-(none)Fast Start: yesQoS scheduling: rx-(not configurable on per port basis),tx-(4q2t)CoS rewrite: yesToS rewrite: yesUDLD: yesSPAN: source/destinationPortSecure: yesDot1x: yesThis is an example of output from the show interfaces interface description command when the interface has been described as Connects to Marketing by using the description interface configuration command.
Switch# show interfaces gigabitethernet0/2 descriptionInterface Status Protocol DescriptionGi0/2 up down Connects to MarketingThis is an example of output from the show interfaces etherchannel command when port channels are configured on the switch:
Switch# show interfaces etherchannel----Port-channel1:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/1 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel2:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/2 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InusePort-channel3:Age of the Port-channel = 03d:20h:17m:29sLogical slot/port = 10/3 Number of ports = 0GC = 0x00000000 HotStandBy port = nullPort state = Port-channel Ag-Not-InuseThis is an example of output from the show interfaces stats command for a specified VLAN interface.
Switch# show interfaces vlan 1 statsSwitching path Pkts In Chars In Pkts Out Chars OutProcessor 1165354 136205310 570800 91731594Route cache 0 0 0 0Total 1165354 136205310 570800 91731594This is an example of partial output from the show interfaces status command. It displays the status of all interfaces.
Switch# show interfaces statusPort Name Status Vlan Duplex Speed TypeFa0/1 connected 1 a-full a-100 10/100BaseTXFa0/2 connected 1 a-full a-100 10/100BaseTXFa0/3 notconnect 1 auto auto 10/100BaseTXFa0/4 disabled 1 auto auto 10/100BaseTXFa0/5 disabled 1 auto auto 10/100BaseTXFa0/6 disabled 1 auto auto 10/100BaseTXFa0/7 disabled 1 auto auto 10/100BaseTXFa0/8 disabled 1 auto auto 10/100BaseTXFa0/9 disabled 1 auto auto 10/100BaseTXFa0/10 disabled 1 auto auto 10/100BaseTXFa0/11 disabled 1 auto auto 10/100BaseTXFa0/12 disabled 1 auto auto 10/100BaseTXFa0/13 disabled 1 auto auto 10/100BaseTXFa0/14 disabled 1 auto auto 10/100BaseTXFa0/15 disabled 1 auto auto 10/100BaseTXFa0/16 disabled 1 auto auto 10/100BaseTXFa0/17 disabled 1 auto auto 10/100BaseTXFa0/18 disabled 1 auto auto 10/100BaseTXFa0/19 disabled 1 auto auto 10/100BaseTXFa0/20 disabled 1 auto auto 10/100BaseTXFa0/21 disabled 1 auto auto 10/100BaseTXFa0/22 disabled 1 auto auto 10/100BaseTXFa0/23 disabled 1 auto auto 10/100BaseTXFa0/24 disabled 1 auto auto 10/100BaseTXGi0/1 notconnect 1 auto auto 10/100/1000BaseTX SFPGi0/2 connected vl-err-dis a-full a-1000 10/100/1000BaseTXThese are examples of output from the show interfaces status command for a specific interface when private VLANs are configured. Port 22 is configured as a private-VLAN host port. It is associated with primary VLAN 20 and secondary VLAN 25.
Switch# show interfaces fastethernet0/22 statusPort Name Status Vlan Duplex Speed TypeFa0/22 connected 20,25 a-full a-100 10/100BaseTXIn this example, port 2 is configured as a private-VLAN promiscuous port. The display shows only the primary VLAN 20.
Switch# show interfaces gigabitethernet0/2 statusPort Name Status Vlan Duplex Speed TypeGi0/2 connected 20 a-full a-100 10/100/1000BaseTXThis is an example of output from the show interfaces status err-disabled command for an interface:
Switch# show interfaces gigabitethernet0/2 status err-disabledPort Name Status Reason Err-disabled VlansGi0/2 connected elmi evc down 1,200This is an example of output from the show interfaces switchport command for a single port. Table 2-10 describes the fields in the display.
Note
Switch# show interfaces gigabitethernet0/1 switchportName: Gi0/1Switchport: EnabledAdministrative Mode: static accessOperational Mode: static accessAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: nativeNegotiation of Trunking: OffAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Administrative Native VLAN tagging: enabledAdministrative private-vlan host-association: noneAdministrative private-vlan mapping: noneAdministrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk Native VLAN tagging: enabledAdministrative private-vlan trunk encapsulation: dot1qAdministrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk private VLANs: noneOperational private-vlan: noneTrunking VLANs Enabled: ALLCapture Mode DisabledCapture VLANs Allowed: ALLUnknown unicast blocked: disabledUnknown multicast blocked: disabledAppliance trust: noneAdministrative Native VLAN tagging: enabledAdministrative private-vlan host-association: noneAdministrative private-vlan mapping: noneAdministrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk Native VLAN tagging: enabledAdministrative private-vlan trunk encapsulation: dot1qAdministrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk private VLANs: noneOperational private-vlan: noneTrunking VLANs Enabled: ALLCapture Mode DisabledCapture VLANs Allowed: ALLUnknown unicast blocked: disabledUnknown multicast blocked: disabledAppliance trust: none
This is an example of output from the show interfaces switchport command for a port configured as a private VLAN promiscuous port. The primary VLAN 20 is mapped to secondary VLANs 25, 30 and 35:
Switch# show interface gigabitethernet0/2 switchportName: Gi0/2Switchport: EnabledAdministrative Mode: private-vlan promiscuousOperational Mode: private-vlan promiscuousAdministrative Trunking Encapsulation: negotiateOperational Trunking Encapsulation: nativeNegotiation of Trunking: OffAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Administrative Native VLAN tagging: enabledAdministrative private-vlan host-association: noneAdministrative private-vlan mapping: 20 (VLAN0020) 25 (VLAN0025) 30 (VLAN0030) 35 (VLAN0035)Administrative private-vlan trunk native VLAN: noneAdministrative private-vlan trunk Native VLAN tagging: enabledAdministrative private-vlan trunk encapsulation: dot1qAdministrative private-vlan trunk normal VLANs: noneAdministrative private-vlan trunk private VLANs: noneOperational private-vlan:20 (VLAN0020) 25 (VLAN0025)30 (VLAN0030)35 (VLAN0035)<output truncated>This is an example of output from the show interfaces interface-id trunk command. It displays trunking information for the port.
Switch# show interfaces gigabitethernet0/1 trunkPort Mode Encapsulation Status Native vlanGi0/1 auto negotiate trunking 1Port Vlans allowed on trunkGi0/1 1-4094Port Vlans allowed and active in management domainGi0/1 1-4Port Vlans in spanning tree forwarding state and not prunedGi0/1 1-4This is an example of output from the show interfaces transceiver properties command. If you do not specify an interface, the output of the command shows the status on all switch ports:
Switch# show interfaces transceiver propertiesName : Fa0/1Administrative Speed: autoAdministrative Duplex: autoAdministrative Auto-MDIX: onAdministrative Power Inline: N/AOperational Speed: 100Operational Duplex: fullOperational Auto-MDIX: onName : Fa0/2Administrative Speed: autoAdministrative Duplex: autoAdministrative Auto-MDIX: onAdministrative Power Inline: N/AOperational Speed: 100Operational Duplex: fullOperational Auto-MDIX: on<output truncated>Related Commands
show interfaces counters
Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface.
show interfaces [interface-id | vlan vlan-id] counters [errors | trunk] [module switch- number] | etherchannel | protocol status] [ | {begin | exclude | include} expression]
Syntax Description
Note
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you do not enter any keywords, all counters for all interfaces are included.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of partial output from the show interfaces counters command. It displays all counters for the switch.
Switch# show interfaces countersPort InOctets InUcastPkts InMcastPkts InBcastPktsFa0/1 0 0 0 0Fa0/2 0 0 0 0<output truncated>This is an example of partial output from the show interfaces counters protocol status command for all interfaces.
Switch# show interfaces counters protocol statusProtocols allocated:Vlan1: Other, IPVlan20: Other, IP, ARPVlan30: Other, IP, ARPVlan40: Other, IP, ARPVlan50: Other, IP, ARPVlan60: Other, IP, ARPVlan70: Other, IP, ARPVlan80: Other, IP, ARPVlan90: Other, IP, ARPVlan900: Other, IP, ARPVlan3000: Other, IPVlan3500: Other, IPFastEthernet0/1: Other, IP, ARP, CDPFastEthernet0/2: Other, IPFastEthernet0/3: Other, IPFastEthernet0/4: Other, IPFastEthernet0/5: Other, IPFastEthernet0/6: Other, IPFastEthernet0/7: Other, IPFastEthernet0/8: Other, IPFastEthernet0/9: Other, IPFastEthernet0/10: Other, IP, CDP<output truncated>This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces.
Switch# show interfaces counters trunkPort TrunkFramesTx TrunkFramesRx WrongEncapGi0/1 0 0 0Gi0/2 0 0 0Gi0/3 80678 4155 0Gi0/4 82320 126 0Gi0/5 0 0 0<output truncated>Related Commands
show inventory
Use the show inventory user EXEC command to display product identification (PID) information for the hardware.
show inventory [entity-name | raw] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.2(25)EX
This command was introduced.
12.2(25)SEG1
Support for the entity-name keyword was added.
Usage Guidelines
The command is case sensitive. With no arguments, the show inventory command produces a compact display of all identifiable entities that have a product identifier. The display shows the entity location (slot identity), entity description, and the unique device identifier (UDI), including PID, version identifier (VID), and serial number (SN) of that entity.
Many legacy SFPs are not programmed with PIDs and VID.s
Note
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is example output from the show inventory command:
Switch> show inventoryNAME: "1", DESCR: "ME-2400-24TS-A"PID: ME-2400-24TS-A , VID:Vo1 , SN: FHH0914002GNAME: "GigabitEthernet0/1", DESCR: "100BaseBX-10U SFP"PID: , VID: , SN: NEC08440067NAME: "GigabitEthernet0/2", DESCR: "10/100/1000BaseTX SFP"PID: , VID: , SN: 00000MTC0839048Gshow ip dhcp snooping
Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration.
show ip dhcp snooping [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip dhcp snooping command.
Switch> show ip dhcp snoopingSwitch DHCP snooping is enabledDHCP snooping is configured on following VLANs:40-42Insertion of option 82 is enabledOption 82 on untrusted port is allowedVerification of hwaddr field is enabledInterface Trusted Rate limit (pps)------------------------ ------- ----------------GigabitEthernet0/1 yes unlimitedGigabitEthernet0/2 yes unlimitedRelated Commands
show ip dhcp snooping binding
Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch.
show ip dhcp snooping binding [ip-address] [mac-address] [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
The show ip dhcp snooping binding command output shows the dynamically configured bindings.
If DHCP snooping is enabled and an interface changes to the down state, the switch does not delete the statically configured bindings.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This example shows how to display the DHCP snooping binding entries for a switch:
Switch> show ip dhcp snooping bindingMacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9837 dhcp-snooping 20 GigabitEthernet0/100:D0:B7:1B:35:DE 10.1.2.151 237 dhcp-snooping 20 GigabitEthernet0/2Total number of bindings: 2This example shows how to display the DHCP snooping binding entries for a specific IP address:
Switch> show ip dhcp snooping binding 10.1.2.150MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9810 dhcp-snooping 20 GigabitEthernet0/1Total number of bindings: 1This example shows how to display the DHCP snooping binding entries for a specific MAC address:
Switch> show ip dhcp snooping binding 0102.0304.0506MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9788 dhcp-snooping 20 GigabitEthernet0/2Total number of bindings: 1This example shows how to display the DHCP snooping binding entries on a port:
Switch> show ip dhcp snooping binding interface gigabitethernet0/2MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------00:30:94:C2:EF:35 10.1.2.151 290 dhcp-snooping 20 GigabitEthernet0/2Total number of bindings: 1This example shows how to display the DHCP snooping binding entries on VLAN 20:
Switch> show ip dhcp snooping binding vlan 20MacAddress IpAddress Lease(sec) Type VLAN Interface------------------ --------------- ---------- ------------- ---- --------------------01:02:03:04:05:06 10.1.2.150 9747 dhcp-snooping 20 GigabitEthernet0/100:00:00:00:00:02 10.1.2.151 65 dhcp-snooping 20 GigabitEthernet0/2Total number of bindings: 2Table 2-11 describes the fields in the show ip dhcp snooping binding command output:
Related Commands
Configures the DHCP snooping binding database
Displays the DHCP snooping configuration.
show ip dhcp snooping database
Use the show ip dhcp snooping database user EXEC command to display the status of the DHCP snooping binding database agent.
show ip dhcp snooping database [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Examples
This is an example of output from the show ip dhcp snooping database command:
Switch> show ip dhcp snooping databaseAgent URL :Write delay Timer : 300 secondsAbort Timer : 300 secondsAgent Running : NoDelay Timer Expiry : Not RunningAbort Timer Expiry : Not RunningLast Succeded Time : NoneLast Failed Time : NoneLast Failed Reason : No failure recorded.Total Attempts : 0 Startup Failures : 0Successful Transfers : 0 Failed Transfers : 0Successful Reads : 0 Failed Reads : 0Successful Writes : 0 Failed Writes : 0Media Failures : 0This is an example of output from the show ip dhcp snooping database detail command:
Switch# show ip dhcp snooping database detailAgent URL : tftp://10.1.1.1/directory/fileWrite delay Timer : 300 secondsAbort Timer : 300 secondsAgent Running : NoDelay Timer Expiry : 7 (00:00:07)Abort Timer Expiry : Not RunningLast Succeded Time : NoneLast Failed Time : 17:14:25 UTC Sat Jul 7 2001Last Failed Reason : Unable to access URL.Total Attempts : 21 Startup Failures : 0Successful Transfers : 0 Failed Transfers : 21Successful Reads : 0 Failed Reads : 0Successful Writes : 0 Failed Writes : 21Media Failures : 0First successful access: ReadLast ignored bindings counters :Binding Collisions : 0 Expired leases : 0Invalid interfaces : 0 Unsupported vlans : 0Parse failures : 0Last Ignored Time : NoneTotal ignored bindings counters:Binding Collisions : 0 Expired leases : 0Invalid interfaces : 0 Unsupported vlans : 0Parse failures : 0Related Commands
Enables DHCP snooping on a VLAN.
Configures the DHCP snooping binding database agent or the binding file.
Displays DHCP snooping information.
show ip dhcp snooping statistics
Use the show ip dhcp snooping statistics user EXEC command to display DHCP snooping statistics in summary or detail form.
show ip dhcp snooping statistics [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
In a switch stack, all statistics are generated on the stack master. If a new stack master is elected, the statistics counters reset.
Examples
This is an example of output from the show ip dhcp snooping statistics command:
Switch> show ip dhcp snooping statisticsPackets Forwarded = 0Packets Dropped = 0Packets Dropped From untrusted ports = 0This is an example of output from the show ip dhcp snooping statistics detail command:
Switch> show ip dhcp snooping statistics detailPackets Processed by DHCP Snooping = 0Packets Dropped BecauseIDB not known = 0Queue full = 0Interface is in errdisabled = 0Rate limit exceeded = 0Received on untrusted ports = 0Nonzero giaddr = 0Source mac not equal to chaddr = 0Binding mismatch = 0Insertion of opt82 fail = 0Interface Down = 0Unknown output interface = 0Reply output port equal to input port = 0Packet denied by platform = 0
Table 2-12 shows the DHCP snooping statistics and their descriptions:
Related Commands
Clears the DHCP snooping binding database, the DHCP snooping binding database agent statistics, or the DHCP snooping statistics counters.
show ip igmp profile
Use the show ip igmp profile privileged EXEC command to display all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
show ip igmp profile [profile number] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
These are examples of output from the show ip igmp profile privileged EXEC command, with and without specifying a profile number. If no profile number is entered, the display includes all profiles configured on the switch.
Switch# show ip igmp profile 40IGMP Profile 40permitrange 233.1.1.1 233.255.255.255Switch# show ip igmp profileIGMP Profile 3range 230.9.9.0 230.9.9.0IGMP Profile 4permitrange 229.9.9.0 229.255.255.255Related Commands
show ip igmp snooping
Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
show ip igmp snooping [groups | mrouter | querier [vlan vlan-id] [detail] ] [vlan vlan-id] [detail] [ | {begin | exclude | include} expression]
Syntax Description
groups
(Optional) See the show ip igmp snooping groups command.
mrouter
(Optional) See the show ip igmp snooping mrouter command.
querier
(Optional) See the show ip igmp snooping querier command.
vlan vlan-id
(Optional) Specify a VLAN; the range is 1 to 1001 and 1006 to 4094 (available only in privileged EXEC mode).
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Command Modes
User EXEC
Command History
Usage Guidelines
Use this command to display snooping configuration for the switch or for a specific VLAN.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping.
Although visible in the output display, output lines for source-only learning are not valid.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping vlan 1 command. It shows snooping characteristics for a specific VLAN.
Switch# show ip igmp snooping vlan 1Global IGMP Snooping configuration:-----------------------------------IGMP snooping :EnabledIGMPv3 snooping (minimal) :EnabledReport suppression :EnabledTCN solicit query :DisabledTCN flood query count :2Last member query interval : 100Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYLast member query interval : 100
Note
This is an example of output from the show ip igmp snooping command. It displays snooping characteristics for all VLANs on the switch.
Switch> show ip igmp snoopingGlobal IGMP Snooping configuration:-----------------------------------IGMP snooping : EnabledIGMPv3 snooping (minimal) : EnabledReport suppression : EnabledTCN solicit query : DisabledTCN flood query count : 2Last member query interval : 100Vlan 1:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYLast member query interval : 100Vlan 2:--------IGMP snooping :EnabledImmediate leave :DisabledMulticast router learning mode :pim-dvmrpSource only learning age timer :10CGMP interoperability mode :IGMP_ONLYLast member query interval : 333<output truncated>Related Commands
show ip igmp snooping groups
Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.
show ip igmp snooping groups [count | dynamic [count] | user [count]] [ | {begin | exclude | include} expression]
show ip igmp snooping groups vlan vlan-id [ip_address | count | dynamic [count] | user [count]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use this command to display multicast information or the multicast table.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch.
Switch# show ip igmp snooping groupsVlan Group Type Version Port List-------------------------------------------------------------104 224.1.4.2 igmp v2 Gi0/1, Gi0/2104 224.1.4.3 igmp v2 Gi0/1, Gi0/2This is an example of output from the show ip igmp snooping groups count command. It displays the total number of multicast groups on the switch.
Switch# show ip igmp snooping groups countTotal number of multicast groups: 2This is an example of output from the show ip igmp snooping groups dynamic command. It shows only the entries learned by IGMP snooping.
Switch# show ip igmp snooping groups vlan 1 dynamicVlan Group Type Version Port List-------------------------------------------------------------104 224.1.4.2 igmp v2 Gi0/1, Fa0/15104 224.1.4.3 igmp v2 Gi0/1, Fa0/15This is an example of output from the show ip igmp snooping groups vlan vlan-id ip-address command. It shows the entries for the group with the specified IP address.
Switch# show ip igmp snooping groups vlan 104 224.1.4.2Vlan Group Type Version Port List-------------------------------------------------------------104 224.1.4.2 igmp v2 Gi0/1, Fa0/15Related Commands
show ip igmp snooping mrouter
Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
show ip igmp snooping mrouter [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use this command to display multicast router ports on the switch or for a specific VLAN.
VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping.
When multicast VLAN registration (MVR) is enabled, the show ip igmp snooping mrouter command displays MVR multicast router information and IGMP snooping information.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping mrouter command. It shows how to display multicast router ports on the switch.
Switch# show ip igmp snooping mrouterVlan ports---- -----1 Gi0/1(dynamic)Related Commands
show ip igmp snooping querier
Use the show ip igmp snooping querier user EXEC command to display the IP address and incoming port for the Internet Group Management Protocol (IGMP) query most recently received by the switch.
show ip igmp snooping querier [vlan vlan-id] [detail] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show ip igmp snooping querier command to display the IGMP version and IP address of a detected device (also called a querier) that sends IGMP query message. A subnet can have multiple multicast routers but has only one IGMP querier. In a subnet running IGMPv2, one of the multicast routers is elected as the querier. The querier can be a Layer 3 switch.
The show ip igmp snooping querier command output also shows the VLAN and interface on which the querier was detected. If the querier is the switch, the output shows the Port field as Router. If the querier is a router, the output shows the port number on which the querier is learned in the Port field.
The show ip igmp snooping querier detail user EXEC command is similar to the show ip igmp snooping querier command. However, the show ip igmp snooping querier detail command displays the IP address of the most recent device detected by the switch querier along with this additional information:
•
•
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show ip igmp snooping querier command:
Switch> show ip igmp snooping querierVlan IP Address IGMP Version Port---------------------------------------------------1 172.20.50.11 v3 Gi0/12 172.20.40.20 v2 RouterThis is an example of output from the show ip igmp snooping querier detail command:
Switch> show ip igmp snooping querier detailVlan IP Address IGMP Version Port-------------------------------------------------------------1 1.1.1.1 v2 Fa0/1Global IGMP switch querier status--------------------------------------------------------admin state : Enabledadmin version : 2source IP address : 0.0.0.0query-interval (sec) : 60max-response-time (sec) : 10querier-timeout (sec) : 120tcn query count : 2tcn query interval (sec) : 10Vlan 1: IGMP switch querier status--------------------------------------------------------elected querier is 1.1.1.1 on port Fa0/1--------------------------------------------------------admin state : Enabledadmin version : 2source IP address : 10.1.1.65query-interval (sec) : 60max-response-time (sec) : 10querier-timeout (sec) : 120tcn query count : 2tcn query interval (sec) : 10operational state : Non-Querieroperational version : 2tcn query pending count : 0Related Commands
Enables and configures the IGMP snooping querier on the switch or on a VLAN.
Displays IGMP snooping multicast router ports for the switch or for the specified multicast VLAN.
show lacp
Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information.
show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude | include} expression]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show lacp command to display the active channel-group information. To display specific channel information, enter the show lacp command with a channel-group number.
If you do not specify a channel group, information for all channel groups appears.
You can enter the channel-group-number option to specify a channel group for all keywords except sys-id.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show lacp counters user EXEC command. Table 2-13 describes the fields in the display.
Switch> show lacp countersLACPDUs Marker Marker Response LACPDUsPort Sent Recv Sent Recv Sent Recv Pkts Err---------------------------------------------------------------------Channel group:1Gi0/1 19 10 0 0 0 0 0Gi0/2 14 6 0 0 0 0 0
This is an example of output from the show lacp internal command:
Switch> show lacp 1 internalFlags: S - Device is requesting Slow LACPDUsF - Device is requesting Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 1LACP port Admin Oper Port PortPort Flags State Priority Key Key Number StateGi0/1 SA bndl 32768 0x3 0x3 0x4 0x3DGi0/2 SA bndl 32768 0x3 0x3 0x5 0x3DTable 2-14 describes the fields in the display.
This is an example of output from the show lacp neighbor command:
Switch> show lacp neighborFlags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUsA - Device is in Active mode P - Device is in Passive modeChannel group 3 neighborsPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsGi0/1 32768,0007.eb49.5e80 0xC 19s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CPartner's information:Partner Partner PartnerPort System ID Port Number Age FlagsGi0/2 32768,0007.eb49.5e80 0xD 15s SPLACP Partner Partner PartnerPort Priority Oper Key Port State32768 0x3 0x3CThis is an example of output from the show lacp sys-id command:
Switch> show lacp sys-id32765,0002.4b29.3a00The system identification is made up of the system priority and the system MAC address. The first two bytes are the system priority, and the last six bytes are the globally administered individual MAC address associated to the system.
Related Commands
Clears the LACP channel-group information.
Configures the LACP port priority.
Configures the LACP system priority.
show mac access-group
Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.
show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac-access group user EXEC command. In this display, Fast Ethernet interface 0/2 has the MAC access list macl_e1 applied to inbound traffic; no MAC ACLs are applied to other interfaces.
Switch> show mac access-groupInterface FastEthernet0/1:Inbound access-list is macl_e1Outbound access-list is not setInterface FastEthernet0/2:Inbound access-list is not setOutbound access-list is not setInterface FastEthernet0/3:Inbound access-list is not setOutbound access-list is not setInterface FastEthernet0/4:Inbound access-list is not setOutbound access-list is not setInterface FastEthernetv0/5:Inbound access-list is not setOutbound access-list is not set<output truncated>This is an example of output from the show mac access-group interface fastethernet0/1 command:
Switch# show mac access-group interface fastethernet0/1Interface FastEthernet0/1:Inbound access-list is macl_e1Related Commands
show mac address-table
Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
show mac address-table [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table command:
Switch> show mac address-tableMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0000.0000.0001 STATIC CPUAll 0000.0000.0002 STATIC CPUAll 0000.0000.0003 STATIC CPUAll 0000.0000.0009 STATIC CPUAll 0000.0000.0012 STATIC CPUAll 0180.c200.000b STATIC CPUAll 0180.c200.000c STATIC CPUAll 0180.c200.000d STATIC CPUAll 0180.c200.000e STATIC CPUAll 0180.c200.000f STATIC CPUAll 0180.c200.0010 STATIC CPU1 0030.9441.6327 DYNAMIC Gi0/4Total Mac Addresses for this criterion: 12Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays dynamic MAC address table entries only.
Displays the MAC address table information for the specified interface.
Displays the MAC address notification settings for all interfaces or the specified interface.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table address
Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address.
show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table address command:
Switch# show mac address-table address 0002.4b28.c482Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0002.4b28.c482 STATIC CPUTotal Mac Addresses for this criterion: 1Related Commands
show mac address-table aging-time
Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
show mac address-table aging-time [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the aging time for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table aging-time command:
Switch> show mac address-table aging-timeVlan Aging Time---- ----------1 300This is an example of output from the show mac address-table aging-time vlan 10 command:
Switch> show mac address-table aging-time vlan 10Vlan Aging Time---- ----------10 300Related Commands
show mac address-table count
Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN.
show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If no VLAN number is specified, the address count for all VLANs appears.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table count command:
Switch# show mac address-table countMac Entries for Vlan : 1---------------------------Dynamic Address Count : 2Static Address Count : 0Total Mac Addresses : 2Related Commands
show mac address-table dynamic
Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries.
show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table dynamic command:
Switch> show mac address-table dynamicMac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0030.b635.7862 DYNAMIC Gi0/21 00b0.6496.2741 DYNAMIC Gi0/2Total Mac Addresses for this criterion: 2Related Commands
clear mac address-table dynamic
Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Displays MAC address table information for the specified MAC address.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays the MAC address table information for the specified interface.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table interface
Use the show mac address-table interface user command to display the MAC address table information for the specified interface in the specified VLAN.
show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table interface command:
Switch> show mac address-table interface gigabitethernet0/2Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0030.b635.7862 DYNAMIC Gi0/21 00b0.6496.2741 DYNAMIC Gi0/2Total Mac Addresses for this criterion: 2Related Commands
show mac address-table notification
Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface.
show mac address-table notification [interface [interface-id]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Use the show mac address-table notification command without any keywords to display whether the feature is enabled or disabled, the MAC notification interval, the maximum number of entries allowed in the history table, and the history table contents.
Use the interface keyword to display the flags for all interfaces. If the interface-id is included, only the flags for that interface appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table notification command:
Switch> show mac address-table notificationMAC Notification Feature is Enabled on the switchInterval between Notification Traps : 60 secsNumber of MAC Addresses Added : 4Number of MAC Addresses Removed : 4Number of Notifications sent to NMS : 3Maximum Number of entries configured in History Table : 100Current History Table Length : 3MAC Notification Traps are EnabledHistory Table contents----------------------History Index 0, Entry Timestamp 1032254, Despatch Timestamp 1032254MAC Changed Message :Operation: Added Vlan: 2 MAC Addr: 0000.0000.0001 Module: 0 Port: 1History Index 1, Entry Timestamp 1038254, Despatch Timestamp 1038254MAC Changed Message :Operation: Added Vlan: 2 MAC Addr: 0000.0000.0000 Module: 0 Port: 1Operation: Added Vlan: 2 MAC Addr: 0000.0000.0002 Module: 0 Port: 1Operation: Added Vlan: 2 MAC Addr: 0000.0000.0003 Module: 0 Port: 1History Index 2, Entry Timestamp 1074254, Despatch Timestamp 1074254MAC Changed Message :Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0000 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0001 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0002 Module: 0 Port: 1Operation: Deleted Vlan: 2 MAC Addr: 0000.0000.0003 Module: 0 Port: 1Related Commands
clear mac address-table notification
Clears the MAC address notification global counters.
Displays MAC address table information for the specified MAC address.
Displays the aging time in all VLANs or the specified VLAN.
Displays the number of addresses present in all VLANs or the specified VLAN.
Displays dynamic MAC address table entries only.
Displays the MAC address table information for the specified interface.
Displays static MAC address table entries only.
Displays the MAC address table information for the specified VLAN.
show mac address-table static
Use the show mac address-table static user EXEC command to display only static MAC address table entries.
show mac address-table static [address mac-address] [interface interface-id] [vlan vlan-id]
[ | {begin | exclude | include} expression]Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table static command:
Switch> show mac address-table static
Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----All 0100.0ccc.cccc STATIC CPUAll 0180.c200.0000 STATIC CPUAll 0100.0ccc.cccd STATIC CPUAll 0180.c200.0001 STATIC CPUAll 0180.c200.0004 STATIC CPUAll 0180.c200.0005 STATIC CPU4 0001.0002.0004 STATIC Drop6 0001.0002.0007 STATIC DropTotal Mac Addresses for this criterion: 8Related Commands
show mac address-table vlan
Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN.
show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mac address-table vlan 1 command:
Switch> show mac address-table vlan 1Mac Address Table------------------------------------------Vlan Mac Address Type Ports---- ----------- ---- -----1 0100.0ccc.cccc STATIC CPU1 0180.c200.0000 STATIC CPU1 0100.0ccc.cccd STATIC CPU1 0180.c200.0001 STATIC CPU1 0180.c200.0002 STATIC CPU1 0180.c200.0003 STATIC CPU1 0180.c200.0005 STATIC CPU1 0180.c200.0006 STATIC CPU1 0180.c200.0007 STATIC CPUTotal Mac Addresses for this criterion: 9Related Commands
show monitor
Use the show monitor user EXEC command to display information about all Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) sessions on the switch. Use the command with keywords to show a specific session, all sessions, all local sessions, or all remote sessions.
show monitor [session {session_number | all | local | range list | remote} [detail]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
The output is the same for the show monitor command and the show monitor session all command.
Examples
This is an example of output for the show monitor user EXEC command:
Switch# show monitorSession 1---------Type :Local SessionSource Ports:RX Only: Fa0/24TX Only: NoneBoth: Fa0/1-2,Fa0/1-5Destination Ports:Fa0/18Encapsulation:ReplicateSession 2---------Type :Remote Source SessionSource Ports:Source VLANs:TX Only: 10Both: 1-9Dest RSPAN VLAN: 105This is an example of output for the show monitor user EXEC command for RSPAN source session 1:
Switch# show monitor session 1Session 1---------Type :Local SessionSource Ports:RX Only: Fa0/24TX Only: NoneBoth: Fa0/1-2,Fa0/1-5Destination Ports:Fa0/18Encapsulation:ReplicateThis is an example of output for the show monitor session all user EXEC command when ingress traffic forwarding is enabled:
Switch# show monitor session allSession 1---------Type :Local SessionSource Ports :Both :Fa0/2Destination Ports :Fa0/3Encapsulation :ReplicateIngress:Enabled, default VLAN = 5Ingress encapsulation:DOT1QSession 2---------Type :Local SessionSource Ports :Both :Fa0/1Destination Ports :Fa0/4Encapsulation :ReplicateIngress:EnabledIngress encapsulation:DOT1QRelated Commands
show mvr
Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).
show mvr [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr command:
Switch# show mvrMVR Running: TRUEMVR multicast VLAN: 1MVR Max Multicast Groups: 256MVR Current multicast groups: 0MVR Global query response time: 5 (tenths of sec)MVR Mode: compatibleIn the preceding display, the maximum number of multicast groups is fixed at 256. The MVR mode is either compatible (for interoperability with Catalyst 2900 XL and Catalyst 3500 XL switches) or dynamic (where operation is consistent with IGMP snooping operation and dynamic MVR membership on source ports is supported).
Related Commands
show mvr interface
Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports. Use the command with keywords to display MVR parameters for a specific receiver port.
show mvr interface [interface-id [members [vlan vlan-id]]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(25)EX
This command was introduced.
12.2(35)SE
The Mode and VLAN fields were added to the output display.
Usage Guidelines
If the entered port identification is a non-MVR port or a source port, the command returns an error message. For receiver ports, it displays the port type, per port status, and Immediate-Leave setting.
If you enter the show mvr interface interface-id command and the specified port is a non-MVR port, the output displays NON MVR in the Type field. For active MVR ports, it displays the port type (RECEIVER or SOURCE), mode (access or trunk), VLAN, status, and Immediate-Leave setting.
If you enter the members keyword, all MVR group members on the interface appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr interface command:
Switch# show mvr interfacePort Type Mode VLAN Status Immediate Leave---- ---- ---- ---- ------- ---------------Fa0/1 Receiver Trunk 1 ACTIVE/UP DISABLED Fa0/1 Receiver Trunk 2000 ACTIVE/DOWN DISABLED Fa0/2 Receiver Trunk 2 ACTIVE/UP DISABLED Fa0/2 Receiver Trunk 3000 ACTIVE/UP DISABLED Fa0/3 Receiver Trunk 2 ACTIVE/UP DISABLED Fa0/3 Receiver Trunk 3000 ACTIVE/UP DISABLED Fa0/10 Source Access 10 ACTIVE/UP DISABLEDIn the preceding display, Status is defined as follows:
•
•
•
This is an example of output from the show mvr interface fastethernet0/10 command:
switch# show mvr interface fa0/10Port Type Mode VLAN Status Immediate Leave---- ---- ---- ---- ------- ---------------Fa0/10 RECEIVER Trunk 201 ACTIVE/DOWN DISABLEDThis is an example of output from the show mvr interface fastethernet0/1 command. In this example, the port is not an MVR member:
switch# show mvr interface fa0/1Port Type Mode VLAN Status Immediate Leave---- ---- ---- ---- ------- ---------------Fa0/1 NON MVR Access 0 INACTIVE DISABLEDThis is an example of output from the show mvr interface gigabitethernet0/1 members command:
Switch# show mvr interface gigabitethernet0/1 members239.255.0.0 vlan 202 DYNAMIC ACTIVE239.255.0.1 vlan 202 DYNAMIC ACTIVE239.255.0.2 vlan 202 DYNAMIC ACTIVE239.255.0.3 vlan 203 DYNAMIC ACTIVE239.255.0.4 vlan 203 DYNAMIC ACTIVE239.255.0.5 vlan 203 DYNAMIC ACTIVERelated Commands
show mvr members
Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group.
show mvr members [ip-address] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.2(25)EX
This command was introduced.
12.2(35)SE
The VLAN and Membership fields were added to the output display.
Usage Guidelines
The show mvr members command applies to receiver and source ports. For MVR-compatible mode, all source ports are members of all multicast groups.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show mvr members command:
Switch# show mvr membersMVR Group Status Members VLAN Membership------------ ------ ------- ---- ----------239.1.1.1 ACTIVE Fa0/1 1 Static239.1.1.1 ACTIVE Fa0/1 2000 Static239.1.1.1 ACTIVE Fa0/2 2 Static239.1.1.1 ACTIVE Fa0/2 3000 Static239.1.1.2 ACTIVE Fa0/1 1 Static239.1.1.2 ACTIVE Fa0/2 2 Static<output truncated>This is an example of output from the show mvr members 239.255.0.2 command. It shows how to view the members of the IP multicast group 239.255.0.2:
Switch# show mvr members 239.255.0.2239.255.0.2 ACTIVE Gi0/1(d), Gi0/2(d), Gi0/3(d),Gi0/4(d), Gi0/5(s)
Related Commands
show pagp
Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information.
show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude | include} expression]]
Note
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
You can enter any show pagp command to display the active channel-group information. To display the nonactive information, enter the show pagp command with a channel-group number.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output are appear.
Examples
This is an example of output from the show pagp 1 counters command:
Switch> show pagp 1 countersInformation FlushPort Sent Recv Sent Recv--------------------------------------Channel group: 1Gi0/1 45 42 0 0Gi0/2 45 41 0 0This is an example of output from the show pagp 1 internal command:
Switch> show pagp 1 internalFlags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode.Timers: H - Hello timer is running. Q - Quit timer is running.S - Switching timer is running. I - Interface timer is running.Channel group 1Hello Partner PAgP Learning GroupPort Flags State Timers Interval Count Priority Method IfindexGi0/1 SC U6/S7 H 30s 1 128 Any 16Gi0/2 SC U6/S7 H 30s 1 128 Any 16This is an example of output from the show pagp 1 neighbor command:
Switch> show pagp 1 neighborFlags: S - Device is sending Slow hello. C - Device is in Consistent state.A - Device is in Auto mode. P - Device learns on physical port.Channel group 1 neighborsPartner Partner Partner Partner GroupPort Name Device ID Port Age Flags Cap.Gi0/1 switch-p2 0002.4b29.4600 Gi0/1 9s SC 10001Gi0/2 switch-p2 0002.4b29.4600 Gi0/2 24s SC 10001Related Commands
show parser macro
Use the show parser macro user EXEC command to display the parameters for all configured macros or for one macro on the switch.
show parser macro [{brief | description [interface interface-id] | name macro-name}] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is a partial output example from the show parser macro command:
Switch# show parser macroTotal number of macros = 2--------------------------------------------------------------Macro name : sample-macro1Macro type : customizableduplex fullspeed automdix auto--------------------------------------------------------------Macro name : test1Macro type : customizableno shutdownflowcontrol receive onspeed 100--------------------------------------------------------------This is an example of output from the show parser macro name command:
Switch# show parser macro name sample-macro1Macro name : sample-macro1Macro type : customizableduplex fullspeed automdix autoThis is an example of output from the show parser macro brief command:
Switch# show parser macro briefcustomizable : sample-macro1customizable : test1Related Commands
Applies a macro on an interface or applies and traces a macro on an interface.
Adds a description about the macros that are applied to an interface.
Applies a macro on a switch or applies and traces a macro on a switch.
Adds a description about the macros that are applied to the switch.
Creates a macro.
show running-config
Displays the operating configuration. For syntax information, use this link to the Cisco IOS Release 12.2 Command Reference listing page: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/prod_command_reference_list.html
Select the Cisco IOS Commands Master List, Release 12.2 to navigate to the command.
show policer aggregate
Use the show policer aggregate user EXEC command to display quality of service (QoS) aggregate policer information for all aggregate policers or a specific policer.
show policer aggregate [aggregate-policer-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show policer aggregate command:
Switch> show policer aggregate my-policeraggregate-policer: my-policerpolice cir 12000000 bc 5000conform-action transmitexceed-action set-cos-transmit cos table 67577In use by policymap: pinRelated Commands
Applies an aggregate policer to multiple classes in the same policy map.
Creates an aggregate policer to police all traffic received on an interface.
show policer cpu uni-eni
Use the show policer cpu uni-eni user EXEC command to display control-plane policer information for the user network interfaces (UNIs) and enhanced network interfaces (ENIs) on the switch, including frames dropped or the configured threshold rate for the control-plane security feature on the switch.
show policer cpu uni-eni [drop [policer-number] | rate] [interface interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
This command displays policer information that applies to UNIs and ENIs on the switch. Rate-limiting and policers are the same on both port types, except on ENIs on which a Layer 2 control protocol (CDP, STP, LLDP, LACP, or PAgP) has been enabled.
The show policer cpu uni-eni drop privileged EXEC command displays the number of accepted and dropped frames for all policers on the switch or for the specified policer number.
The show policer cpu uni-eni rate command displays the CPU protection rate-limit threshold on the switch that was configured by entering the policer cpu uni rate global configuration command or the default rate of 16000 bits per second (bps).
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show policer cpu uni-eni drop command. Note that CPU protection only uses policers 0 to 26.
Switch# show policer cpu uni-eni drop=========================================Port In DroppedName Frames FramesFa0/1 300 0Fa0/2 0 0Fa0/3 0 0Fa0/4 0 0Fa0/5 200 0Fa0/6 0 0Fa0/7 0 0Fa0/8 0 0Fa0/9 508055 325086Fa0/10 0 0Fa0/11 0 0Fa0/12 0 0Fa0/13 0 0Fa0/14 0 0Fa0/15 0 0Fa0/16 0 0Fa0/17 0 0Fa0/18 0 0Fa0/19 0 0Fa0/20 0 0Fa0/21 0 0Fa0/22 0 0Fa0/23 0 0Fa0/24 0 0Gi0/1 0 0Gi0/2 0 0drop-all 0 1849645This is an example of the new output format for the show policer cpu uni-eni drop interface command:
Switch# show policer cpu uni-eni drop interface gigabitethernet 0/1 ============================ Policer assigned for Gi0/2 ============================Protocols using this policer: "VTP" "CISCO_L2" "KEEPALIVE" "SWITCH_IGMP" "SWITCH_L2PT" Policer rate: 160000 bps In frames: 48014 Drop frames: 28630This is an example of output from the show policer cpu uni-eni rate command when the default rate is used.
Switch> show policer cpu uni-eni rateCPU UNI/ENI port police rate = 160000 bpsRelated Commands\
Configures a CPU policer threshold rate for the switch.
Displays allocated policer indexes and the corresponding features for all ports or the specified port.
show policy-map
Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming and outgoing traffic and the actions to be performed on the classified traffic.
show policy-map [policy-map-name | interface [interface-id] [input | output] [class class-name]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show policy-map command:
Switch> show policy-mapPolicy Map videowizard_policy2class videowizard_10-10-10-10police 100000000 2000000 exceed-action dropPolicy Map mypolicyclass dscp5This is an example of output from the show policy-map command for a specific policy map:
Switch> show policy-map top2Policy Map top2Class class-defaultshape average 11111124service-policy poutThis is an example of output from the show policy-map command for an output policy map:
Switch> show policy-map poutPolicy Map poutClass ip1prioritypolice cir percent 10conform-action transmitexceed-action dropqueue-limit 250queue-limit precedence 1 100Class ip2Average Rate Traffic Shapingcir 5%Class ip3bandwidth percent 10queue-limit 200queue-limit precedence 3 100This is an example of output from the show policy-map command for an input policy map:
Switch> show policy-map pin-policePolicy Map pin-policeClass ip1police cir 20000000 bc 625000conform-action transmitexceed-action dropThis is an example of output from the show policy-map interface command for an interface with a two-level output policy map applied:
Switch> show policy-map interface fastethernet0/3FastEthernet0/3Service-policy output: top2Class-map: class-default (match-any)209871 packetsMatch: any56 packetsTraffic ShapingAverage Rate Traffic ShapingCIR 11111124 (bps)Output Queue:Tail Packets Drop: 195421Service-policy : poutClass-map: ip1 (match-all)9309 packetsMatch: ip precedence 1Prioritypolice cir 20000000 bc 625000conform-action transmitexceed-action dropconform: 4916 (packets) exceed: 4393 (packets)Queue Limitqueue-limit 250 (packets)queue-limit precedence 1 100 (packets)Output Queue:Max Tail Drop Threshold: 250Tail Packets Drop: 4393Class-map: ip2 (match-all)0 packetsMatch: ip precedence 2Traffic ShapingAverage Rate Traffic ShapingCIR 5% 555555 (bps)Output Queue:Max Tail Drop Threshold: 48Tail Packets Drop: 0Class-map: ip3 (match-all)0 packetsMatch: ip precedence 3Bandwidth percent 10 1111110 (bps)Queue Limitqueue-limit 200 (packets)queue-limit precedence 3 100 (packets)Output Queue:Max Tail Drop Threshold: 200Tail Packets Drop: 0Class-map: class-default (match-any)200562 packetsMatch: any56 packetsOutput Queue:Tail Packets Drop: 191028This is an example of output from the show policy-map interface command for an interface with an input policy applied:
Switch> show policy-map interface gigabitethernet0/1GigabitEthernet0/1Service-policy input: pin-policeClass-map: ip1 (match-all)0 packets5 minute offered rate 0 bps, drop rate 0 bpsMatch: ip precedence 1police cir 20000000 bc 625000conform-action transmitexceed-action dropconform: 27927 (packets) exceed: 272073 (packets)Class-map: class-default (match-any)0 packets, 0 bytes5 minute offered rate 0 bps, drop rate 0 bpsMatch: any0 packets5 minute rate 0 bpsTable 2-15 describes the fields in the show policy-map interface display. The fields in the table are grouped according to the relevant QoS feature.
Related Commands
Creates or modifies a policy map that can be attached to multiple ports to specify a service policy.
show port-security
Use the show port-security privileged EXEC command to display port-security settings for an interface or for the switch.
show port-security [interface interface-id] [address | vlan] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you enter the command without keywords, the output includes the administrative and operational status of all secure ports on the switch.
If you enter an interface-id, the command displays port security settings for the interface.
If you enter the address keyword, the command displays the secure MAC addresses for all interfaces and the aging information for each secure address.
If you enter an interface-id and the address keyword, the command displays all the MAC addresses for the interface with aging information for each secure address. You can also use this command to display all the MAC addresses for an interface even if you have not enabled port security on it.
If you enter the vlan keyword, the command displays the configured maximum and the current number of secure MAC addresses for all VLANs on the interface. This option is visible only on interfaces that have the switchport mode set to trunk.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of the output from the show port-security command:
Switch# show port-securitySecure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action(Count) (Count) (Count)-------------------------------------------------------------------------------Gi0/1 1 0 0 Shutdown-------------------------------------------------------------------------------Total Addresses in System (excluding one mac per port) : 1Max Addresses limit in System (excluding one mac per port) : 6272This is an example of output from the show port-security interface interface-id command:
Switch# show port-security interface gigabitethernet0/1Port Security : EnabledPort status : SecureUpViolation mode : ShutdownMaximum MAC Addresses : 1Total MAC Addresses : 0Configured MAC Addresses : 0Aging time : 0 minsAging type : AbsoluteSecureStatic address aging : DisabledSecurity Violation count : 0This is an example of output from the show port-security address command:
Switch# show port-security address
Secure Mac Address Table-------------------------------------------------------------------Vlan Mac Address Type Ports Remaining Age(mins)---- ----------- ---- ----- -------------1 0006.0700.0800 SecureConfigured Gi0/2 1-------------------------------------------------------------------Total Addresses in System (excluding one mac per port) : 1Max Addresses limit in System (excluding one mac per port) : 6272This is an example of output from the show port-security interface gigabitethernet0/2 address command:
Switch# show port-security interface gigabitethernet0/2 addressSecure Mac Address Table-------------------------------------------------------------------Vlan Mac Address Type Ports Remaining Age(mins)---- ----------- ---- ----- -------------1 0006.0700.0800 SecureConfigured Gi0/2 1-------------------------------------------------------------------Total Addresses: 1This is an example of output from the show port-security interface interface-id vlan command:
Switch# show port-security interface gigabitethernet0/2 vlanDefault maximum:not set, using 5120VLAN Maximum Current5 default 110 default 5411 default 10112 default 10113 default 20114 default 501Related Commands
show port-type
Use the show port-type privileged EXEC command to display interface type information for the Cisco ME switch.
show port-type [eni | nni | uni] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you enter the command without keywords, the output includes the interface type information for all ports on the switch. If you specify the port type (eni, nni, or uni), the output includes information for the specified port type.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show port-type command with no keywords:
Switch# show port-typePort Name Vlan Port Type--------- ------------------ ---------- ----------------------------Fa0/1 1 User Network Interface (uni)Fa0/2 1 User Network Interface (uni)Fa0/3 1 User Network Interface (uni)Fa0/4 1 User Network Interface (uni)Fa0/5 1 User Network Interface (uni)Fa0/6 1 User Network Interface (uni)Fa0/7 1 User Network Interface (uni)Fa0/8 1 User Network Interface (uni)Fa0/9 1 User Network Interface (uni)Fa0/10 1 User Network Interface (uni)Fa0/11 1 User Network Interface (uni)Fa0/12 1 User Network Interface (uni)Fa0/13 1 User Network Interface (uni)Fa0/14 1 User Network Interface (uni)Fa0/15 1 User Network Interface (uni)Fa0/16 1 User Network Interface (uni)Fa0/17 routed User Network Interface (uni)Fa0/18 1 User Network Interface (uni)Fa0/19 1 User Network Interface (uni)Fa0/20 1 User Network Interface (uni)Fa0/21 1 User Network Interface (uni)Fa0/22 1 User Network Interface (uni)Fa0/23 10 User Network Interface (uni)Fa0/24 10 User Network Interface (uni)Gi0/1 1 Network Node Interface (nni)Gi0/2 1 Network Node Interface (nni)This is an example of output from the show port-type command using keywords:
Switch# show port-type nni | exclude Gigabitethernet0/1Port Name Vlan Port Type--------- ------------------ ---------- ----------------------------Gi0/2 1 Network Node Interface (nni)Related Commands
show sdm prefer
Use the show sdm prefer privileged EXEC command to display the Switch Database Management (SDM) template used to allocate system resources.
show sdm prefer [layer-2] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The numbers displayed represent an approximate maximum number for each feature resource. The actual number might vary, depending on the actual number of other features configured.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show sdm prefer command, displaying the template in use:
Switch# show sdm preferThe current template is ''layer-2'' template. The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs.number of unicast mac addresses: 2Knumber of IPv4 IGMP groups: 1Knumber of IPv4 multicast routes: 0number of unicast IPv4 routes: 0number of IPv4 policy based routing aces: 0number of IPv4/MAC qos aces: 512number of IPv4/MAC security aces: 1K
show spanning-tree
Use the show spanning-tree user EXEC command to display spanning-tree state information.
show spanning-tree [bridge-group | active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary [totals] | vlan vlan-id] [ | {begin | exclude | include} expression]
show spanning-tree bridge-group [active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | root | summary] [| {begin | exclude | include} expression]
show spanning-tree vlan vlan-id [active [detail] | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | root | summary] [ | {begin | exclude | include} expression]
show spanning-tree {vlan vlan-id | bridge-group} bridge [address | detail | forward-time | hello-time | id | max-age | priority [system-id] | protocol] [ | {begin | exclude | include} expression]
show spanning-tree {vlan vlan-id | bridge-group} root [address | cost | detail | forward-time | hello-time | id | max-age | port | priority [system-id] [ | {begin | exclude | include} expression]
show spanning-tree interface interface-id [active [detail] | cost | detail [active] | inconsistency | portfast | priority | rootcost | state] [ | {begin | exclude | include} expression]
show spanning-tree mst [configuration [digest]] | [instance-id [detail | interface interface-id [detail]] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
12.2(25)EX
This command was introduced.
12.2(25)SEG
The digest keyword was added, and new digest and transmit hold count fields appear.
Usage Guidelines
STP is not supported on UNIs. Valid spanning-tree information is available only for NNIs or ENIs.
If the vlan-id variable is omitted, the command applies to the spanning-tree instance for all VLANs.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show spanning-tree active command:
Switch# show spanning-tree activeVLAN0001Spanning tree enabled protocol ieeeRoot ID Priority 32768Address 0001.42e2.cdd0Cost 3038Port 24 (GigabitEthernet0/1)Hello Time 2 sec Max Age 20 sec Forward Delay 15 secBridge ID Priority 49153 (priority 49152 sys-id-ext 1)Address 0003.fd63.9580Hello Time 2 sec Max Age 20 sec Forward Delay 15 secAging Time 300Uplinkfast enabledInterface Role Sts Cost Prio.Nbr Type---------------- ---- --- --------- -------- --------------------------------Gi0/1 Root FWD 3019 128.24 P2p<output truncated>This is an example of output from the show spanning-tree detail command:
Switch# show spanning-tree detailVLAN0001 is executing the ieee compatible Spanning Tree protocolBridge Identifier has priority 49152, sysid 1, address 0003.fd63.9580Configured hello time 2, max age 20, forward delay 15Current root has priority 32768, address 0001.42e2.cdd0Root port is 24 (GigabitEthernet0/1), cost of root path is 3038Topology change flag not set, detected flag not setNumber of topology changes 0 last change occurred 1d16h agoTimes: hold 1, topology change 35, notification 2hello 2, max age 20, forward delay 15Timers: hello 0, topology change 0, notification 0, aging 300Uplinkfast enabledPort 1 (GigabitEthernet0/1) of VLAN0001 is forwardingPort path cost 3019, Port priority 128, Port Identifier 128.24.Designated root has priority 32768, address 0001.42e2.cdd0Designated bridge has priority 32768, address 00d0.bbf5.c680Designated port id is 128.25, designated path cost 19Timers: message age 2, forward delay 0, hold 0Number of transitions to forwarding state: 1Link type is point-to-point by defaultBPDU: sent 0, received 72364<output truncated>This is an example of output from the show spanning-tree interface interface-id command:
Switch# show spanning-tree interface gigabitethernet0/1Vlan Role Sts Cost Prio.Nbr Type---------------- ---- --- --------- -------- --------------------------------VLAN0001 Root FWD 3019 128.24 P2pThis is an example of output from the show spanning-tree summary command:
Switch# show spanning-tree summarySwitch is in pvst modeRoot bridge for: noneEtherChannel misconfiguration guard is enabledExtended system ID is enabledPortfast is disabled by defaultPortFast BPDU Guard is disabled by defaultPortfast BPDU Filter is disabled by defaultLoopguard is disabled by defaultPathcost method used is shortName Blocking Listening Learning Forwarding STP Active---------------------- -------- --------- -------- ---------- ----------VLAN0001 1 0 0 11 12VLAN0002 3 0 0 1 4VLAN0004 3 0 0 1 4VLAN0006 3 0 0 1 4VLAN0031 3 0 0 1 4VLAN0032 3 0 0 1 4<output truncated>---------------------- -------- --------- -------- ---------- ----------37 vlans 109 0 0 47 156Station update rate set to 150 packets/sec.This is an example of output from the show spanning-tree mst configuration command:
Switch# show spanning-tree mst configurationName [region1]Revision 1Instance Vlans Mapped-------- ------------------0 1-9,21-40941 10-20----------------------------This is an example of output from the show spanning-tree mst configuration digest command:
Switch# show spanning-tree mst configuration% Switch is not in mst modeName []Revision 0 Instances configured 1Digest 0xAC36177F50283CD4B83821D8AB26DE62Pre-std Digest 0xBB3B6C15EF8D089BB55ED10D24DF44DEThis is an example of output from the show spanning-tree mst interface interface-id command:
Switch# show spanning-tree mst interface gigabitethernet0/1GigabitEthernet0/1 of MST00 is root forwardingEdge port: no (default) port guard : none (default)Link type: point-to-point (auto) bpdu filter: disable (default)Boundary : boundary (STP) bpdu guard : disable (default)Bpdus sent 5, received 74Instance role state cost prio vlans mapped0 root FWD 200000 128 1,12,14-4094This is an example of output from the show spanning-tree mst 0 command:
Switch# show spanning-tree mst 0###### MST00 vlans mapped: 1-9,21-4094Bridge address 0002.4b29.7a00 priority 32768 (32768 sysid 0)Root address 0001.4297.e000 priority 32768 (32768 sysid 0)port Gi0/1 path cost 200038IST master *this switchOperational hello time 2, forward delay 15, max age 20, max hops 20Configured hello time 2, forward delay 15, max age 20, max hops 20Interface role state cost prio type-------------------- ---- ----- --------- ---- --------------------------------GigabitEthernet0/1 root FWD 200000 128 P2P bound(STP)GigabitEthernet0/2 desg FWD 200000 128 P2P bound(STP)Port-channel1 desg FWD 200000 128 P2P bound(STP)Related Commands
show storm-control
Use the show storm-control user EXEC command to display broadcast, multicast, or unicast storm control settings on the switch or on the specified interface or to display storm-control history.
show storm-control [interface-id] [broadcast | multicast | unicast] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
When you enter an interface-id, the storm control thresholds appear for the specified interface.
If you do not enter an interface-id, settings appear for one traffic type for all ports on the switch.
If you do not enter a traffic type, settings appear for broadcast storm control.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of a partial output from the show storm-control command when no keywords are entered. Because no traffic-type keyword was entered, the broadcast storm control settings appear.
Switch> show storm-controlInterface Filter State Upper Lower Current--------- ------------- ---------- --------- ---------Gi0/1 Forwarding 20 pps 10 pps 5 ppsGi0/2 Forwarding 50.00% 40.00% 0.00%<output truncated>This is an example of output from the show storm-control command for a specified interface. Because no traffic-type keyword was entered, the broadcast storm control settings appear.
Switch> show storm-control gigabitethernet 0/1Interface Filter State Upper Lower Current--------- ------------- ---------- --------- ---------Gi0/1 Forwarding 20 pps 10 pps 5 ppsTable 2-16 describes the fields in the show storm-control display.
Related Commands
show system mtu
Use the show system mtu privileged EXEC command to display the global maximum transmission unit (MTU) or maximum packet size set for the switch.
show system mtu [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
If you have used the system mtu or system mtu jumbo global configuration command to change the MTU setting, the new setting does not take effect until you reset the switch.
The system MTU refers to ports operating at 10/100 Mbps; the system jumbo MTU refers to Gigabit ports.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show system mtu command:
Switch# show system mtuSystem MTU size is 1500 bytesSystem Jumbo MTU size is 1500 bytesRelated Commands
show table-map
Use the show table-map user EXEC command to display quality of service (QoS) table-map information about all configured table maps or the specified table map.
show table-map [table-map-name] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Examples
This is an example of output from the show table-map command:
Switch> show table-maptandoori_1>show table-mapTable Map abcdefault copyTable Map cos2dscpfrom 2 to 16default copyTable Map cos2cosfrom 2 to 5from 3 to 6default 7Table Map cos2cos10default copyTable Map cos=cosdefault copyThis is an example of output from the show table-map command for a specific table map name:
Switch> show table-map tmTable Map tmfrom 1 to 62from 2 to 63default ignoreRelated Commands
Creates quality of service (QoS) mapping tables, such as CoS to DSCP, and so on.
show udld
Use the show udld user EXEC command to display UniDirectional Link Detection (UDLD) administrative and operational status for all ports or the specified port.
show udld [interface-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
If you do not enter an interface-id, administrative and operational UDLD status for all interfaces appear.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show udld interface-id command. For this display, UDLD is enabled on both ends of the link, and UDLD detects that the link is bidirectional. Table 2-17 describes the fields in this display.
Switch> show udld gigabitethernet0/1Interface gi0/1---Port enable administrative configuration setting: Follows device defaultPort enable operational state: EnabledCurrent bidirectional state: BidirectionalCurrent operational state: Advertisement - Single Neighbor detectedMessage interval: 60Time out interval: 5Entry 1Expiration time: 146Device ID: 1Current neighbor state: BidirectionalDevice name: Switch-APort ID: Gi0/1Neighbor echo 1 device: Switch-BNeighbor echo 1 port: Gi0/2Message interval: 5CDP Device name: Switch-ARelated Commands
show version
Use the show version user EXEC command to display version information for the hardware and firmware.
show version [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show version command:
Note
Switch> show versionCisco IOS Software, MEAP Software (MEAP-IPSERVICES-M), Experimental Version 12.2(20050712:084347) [teresang-meap-bug-fix 109]Copyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Sun 17-Jul-05 13:19 by teresangROM: Bootstrap program is C3750 boot loaderBOOTLDR: ME3400 Boot Loader (me3400-HBOOT-M), Version 12.2 [mbutts-meap2 103]tandoori_1 uptime is 1 day, 2 hours, 49 minutesSystem returned to ROM by power-onSystem image file is "flash:image"cisco ME-3440-24T-FA (PowerPC405) processor with 118784K/12280K bytes of memory.Processor board ID FSJC0407862Last reset from power-onTarget IOS Version 12.2(25)SE3 Virtual Ethernet interfaces24 FastEthernet interfaces2 Gigabit Ethernet interfacesThe password-recovery mechanism is enabled.512K bytes of flash-simulated non-volatile configuration memory.Base ethernet MAC Address : 00:0B:FC:FF:32:80Power supply part number : 341-0149-01Motherboard serial number : FHH0848001RPower supply serial number : DTH0450000TSystem serial number : FSJC0407862Top Assembly Part Number : 800-26552-01Top Assembly Revision Number : 05Hardware Board Revision Number : 0x01Switch Ports Model SW Version SW Image------ ----- ----- ---------- ----------* 1 26 ME-3440-24T-FA 12.2(20050712:084347) MEAP-IPSERVICES-MConfiguration register is 0xFshow vlan
Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
show vlan [access-map | brief | filter | id vlan-id | mtu | name vlan-name | private-vlan [type] | remote-span | summary | uni-vlan [type]] [ | {begin | exclude | include} expression]
Syntax Description
access-map
See the show vlan access-map command.
brief
(Optional) Display one line for each VLAN with the VLAN name, status, and its ports.
filter
See the show vlan filter command.
id vlan-id
(Optional) Display information about a single VLAN identified by VLAN ID number. For vlan-id, the range is 1 to 4094.
mtu
(Optional) Display a list of VLANs and the minimum and maximum transmission unit (MTU) sizes configured on ports in the VLAN.
name vlan-name
(Optional) Display information about a single VLAN identified by VLAN name. The VLAN name is an ASCII string from 1 to 32 characters.
private-vlan [type]
(Optional) Display information about configured private VLANs, including primary and secondary VLAN IDs, type (community, isolated, or primary) and ports belonging to the private VLAN. Enter type (optional) to see only the VLAN ID and the type of private VLAN.
remote-span
(Optional) Display information about Remote SPAN (RSPAN) VLANs.
summary
(Optional) Display VLAN summary information.
uni-vlan [type]
(Optional) Display user network interface-enhanced network interface (UNI-ENI) VLAN information. Enter type (optional) to see only the VLAN ID and type of UNI-ENI VLAN.
| begin
(Optional) Display begins with the line that matches the expression.
| exclude
(Optional) Display excludes lines that match the expression.
| include
(Optional) Display includes lines that match the specified expression.
expression
Expression in the output to use as a reference point.
Note
Command Modes
User EXEC
Command History
Usage Guidelines
In the show vlan mtu command output, the MTU_Mismatch column shows whether all the ports in the VLAN have the same MTU. When yes appears in this column, it means that the VLAN has ports with different MTUs. Packets that are switched from a port with a larger MTU to a port with a smaller MTU might be dropped. If the VLAN does not have a switch virtual interface (SVI), the hyphen (-) symbol appears in the SVI_MTU column. If the MTU-Mismatch column displays yes, the names of the port with the MinMTU and the port with the MaxMTU appear.
If you try to associate a private VLAN secondary VLAN with a primary VLAN before you define the secondary VLAN, the secondary VLAN is not included in the show vlan private-vlan command output.
In the show vlan private-vlan type command output, a normal type means a VLAN has a private VLAN association but is not part of the private VLAN. For example, if you define and associate two VLANs as primary and secondary VLANs and then delete the secondary VLAN configuration but do not remove the association from the primary VLAN, the VLAN that was the secondary VLAN is shown as normal in the display. In the show vlan private-vlan output, the primary and secondary VLAN pair is shown as non-operational.
In the show vlan uni-vlan type command output, type is either community or isolated. User network interfaces (UNIs) or enhanced network interfaced (ENIs) in a UNI-ENI community VLAN can communicate with each other; UNIs or ENIs in a UNI-ENI isolated VLAN cannot communicate. Network node interfaces (NNIs) can communicate with each other and with UNIs or ENIs in UNI-ENI isolated and community VLANs.
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vlan command. Table 2-18 describes the fields in the display.
Note
Switch> show vlanSwitch#show vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/12Fa0/13, Fa0/14, Fa0/15, Fa0/16Fa0/17, Fa0/18, Fa0/19, Fa0/20Fa0/21, Fa0/22, Fa0/23, Fa0/24Gi0/1, Gi0/21002 fddi-default act/unsup1003 token-ring-default act/unsup1004 fddinet-default act/unsup1005 trnet-default act/unsupVLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------1 enet 100001 1500 - - - - - 0 01002 fddi 101002 1500 - - - - - 0 01003 tr 101003 1500 - - - - - 0 01004 fdnet 101004 1500 - - - ieee - 0 01005 trnet 101005 1500 - - - ibm - 0 0VLAN NameRemote SPAN VLANs------------------------------------------------------------------------------Primary Secondary Type Ports------- --------- ----------------- ------------------------------------------VLAN Type Ports--------- ----------------- ------------------------------------------
This is an example of output from the show vlan private-vlan command:
Switch> show vlan private-vlanPrimary Secondary Type Ports------- --------- ----------------- ------------------------------------------10 501 isolated Gi0/310 502 community Fa0/1110 503 non-operational3 -20 25 isolated Fa0/13, Fa0/20, Fa0/22, Gi0/1,20 30 community Fa0/13, Fa0/20, Fa0/21, Gi0/1,20 35 community Fa0/13, Fa0/20, Fa0/23, Fa0/33. Gi0/1,20 55 non-operational2000 2500 isolated Fa0/5, Fa0/10, Fa0/15This is an example of output from the show vlan private-vlan type command:
Switch> show vlan private-vlan typeVlan Type---- -----------------10 primary501 isolated502 community503 normalThis is an example of output from the show vlan uni-vlan type command:
Switch> show vlan uni-vlan typeVlan Type---- -----------------1 UNI isolated20 UNI community201 UNI isolatedThis is an example of output from the show vlan summary command:
Switch> show vlan summaryNumber of existing VLANs : 45Number of existing VTP VLANs : 0Number of existing extended VLANs : 0This is an example of output from the show vlan id command.
Switch# show vlan id 2VLAN Name Status Ports---- -------------------------------- --------- -------------------------------2 VLAN0200 active Gi0/1, Gi0/2VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------2 enet 100002 1500 - - - - - 0 0Remote SPAN VLAN----------------DisabledRelated Commands
show vlan access-map
Use the show vlan access-map privileged EXEC command to display information about a particular VLAN access map or for all VLAN access maps.
show vlan access-map [mapname] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vlan access-map command:
Switch# show vlan access-mapVlan access-map "SecWiz" 10Match clauses:ip address: SecWiz_Fa1_0_3_in_ipAction:forwardRelated Commands
show vlan filter
Use the show vlan filter privileged EXEC command to display information about all VLAN filters or about a particular VLAN or VLAN access map.
show vlan filter [access-map name | vlan vlan-id] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vlan filter command:
Switch# show vlan filterVLAN Map map_1 is filtering VLANs:20-22Related Commands
Displays information about a particular VLAN access map or for all VLAN access maps.
Creates a VLAN map entry for VLAN packet filtering.
Applies a VLAN map to one or more VLANs.
show vmps
Use the show vmps user EXEC command without keywords to display the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VLAN Membership Policy Server (VMPS) IP addresses, and the current and primary servers, or use the statistics keyword to display client-side statistics.
show vmps [statistics] [ | {begin | exclude | include} expression]
Syntax Description
Command Modes
User EXEC
Command History
Usage Guidelines
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Examples
This is an example of output from the show vmps statistics command.
Switch> show vmps statisticsVMPS Client Statistics----------------------VQP Queries: 0VQP Responses: 0VMPS Changes: 0VQP Shutdowns: 0VQP Denied: 0VQP Wrong Domain: 0VQP Wrong Version: 0VQP Insufficient Resource: 0Table 2-19 describes each field in the display.
Related Commands
