Cisco ME 3400 Switch Command Reference, Rel. 12.2(40)SE
Index

Table Of Contents

A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

AAA methods 2-3

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-104

MAC, displaying 2-417

matching for QoS classification 2-207

access mode 2-567

access ports 2-567

ACEs 2-64, 2-242

ACLs

as match criteria for QoS classes 2-207

deny 2-62

displaying 2-312

for non-IP protocols 2-185

IP 2-104

on Layer 2 interfaces 2-104

permit 2-240

action command 2-5

address aliasing 2-228

aggregate policers

applying 2-247

creating 2-249

displaying 2-452

QoS 2-250

aggregate-port learner 2-234

allowed VLANs 2-583

archive download-sw command 2-7

archive tar command 2-10

archive upload-sw command 2-13

arp access-list command 2-15

attaching policy maps to interfaces 2-294

audience xvii

authorization state of controlled port 2-70

autonegotiation of duplex mode 2-78

B

backup interfaces

configuring 2-560

displaying 2-362

bandwidth, configuring for QoS 2-17

bandwidth command 2-17

boot (boot loader) command A-2

boot boothlpr command 2-20

boot config-file command 2-21

boot enable-break command 2-22

boot helper command 2-23

boot helper-config file command 2-24

booting

Cisco IOS image 2-27

displaying environment variables 2-317

interrupting 2-22

manually 2-25

boot loader

accessing A-1

booting

Cisco IOS image A-2

helper image 2-23

directories

creating A-14

displaying a list of A-7

removing A-18

displaying

available commands A-12

memory heap utilization A-13

version A-25

environment variables

described A-19

displaying settings A-19

location of A-20

setting A-19

unsetting A-23

files

copying A-5

deleting A-6

displaying a list of A-7

displaying the contents of A-4, A-15, A-22

renaming A-16

file system

formatting A-10

initializing flash A-9

running a consistency check A-11

prompt A-1

resetting the system A-17

boot manual command 2-25

boot private-config-file command 2-26

boot system command 2-27

BPDU filtering, for spanning tree 2-506, 2-544

BPDU guard, for spanning tree 2-508, 2-544

broadcast storm control 2-553

bundling characteristics, UNI 2-86

burst bytes, in QoS policers 2-243, 2-249

C

cat (boot loader) command A-4

caution, description xviii

CBWFQ, configuring 2-17

CDP, enabling protocol tunneling for 2-165

CFM 2-233

CFM as OAM protocol 2-233

channel-group command 2-28

channel-protocol command 2-32

child policy maps 2-296

class-based traffic shaping 2-310

class-based weighted fair queuing

See CBWFQ

class command 2-34

class-map command 2-36

class-map configuration mode 2-37

class maps

creating 2-36

defining the match criteria 2-208

displaying 2-321

matching in 2-36

class of service

See CoS

clear ip arp inspection log command 2-38

clear ip arp inspection statistics command 2-39

clear ipc command 2-42

clear l2protocol-tunnel counters command 2-43

clear lacp command 2-44

clear mac address-table command 2-45, 2-46

clear pagp command 2-47

clear policer cpu uni counters command 2-48

clear port-security command 2-49

clear spanning-tree counters command 2-51

clear spanning-tree detected-protocols command 2-52

clear vmps statistics command 2-54

command modes defined 1-1

committed information rate in QoS policers 2-243, 2-249

configuration, initial

See also getting started guide and hardware installation guide

configuration files

password recovery disable considerations A-1

specifying the name 2-21, 2-26

configuring multiple interfaces 2-99

conform-action command 2-55

control-plane policer 2-48

control-plane policer information, displaying 2-453

control-plane security 2-252

control plane statistics, clearing 2-48

conventions

command xviii

for examples xviii

publication xviii

text xviii

copy (boot loader) command A-5

CoS

as match criteria for QoS groups 2-208

for QoS classification 2-299

setting value in policy maps 2-299

CoS value, assigning to Layer 2 protocol packets 2-168

CPU ASIC statistics, displaying 2-322

CPU protection policers, displaying C-21

D

debug backup command B-2

debug dot1x command B-3

debug etherchannel command B-4

debug interface command B-9

debug ip dhcp snooping command B-7

debug ip igmp filter command B-10

debug ip igmp max-groups command B-11

debug ip igmp snooping command B-12

debug ip verify source packet command B-8

debug lacp command B-13

debug mac-notification command B-14

debug matm command B-15

debug matm move update command B-16

debug monitor command B-17

debug mvrdbg command B-18

debug nvram command B-19

debug pagp command B-20

debug platform acl command B-21

debug platform backup interface command B-23

debug platform cfm command B-22

debug platform cpu-queues command B-24

debug platform dot1x command B-26

debug platform etherchannel command B-27

debug platform forw-tcam command B-28

debug platform ip arp inspection command B-29

debug platform ipc command B-37

debug platform ip dhcp command B-30

debug platform ip igmp snooping command B-31

debug platform ip multicast command B-33

debug platform led command B-38

debug platform matm command B-39

debug platform messaging application command B-40

debug platform phy command B-41

debug platform pm command B-43

debug platform policer cpu uni command B-45

debug platform port-asic command B-46

debug platform port-security command B-47

debug platform qos-acl-tcam command B-48

debug platform remote-commands command B-49

debug platform resource-manager command B-50

debug platform snmp command B-51

debug platform span command B-52

debug platform supervisor-asic command B-53

debug platform sw-bridge command B-54

debug platform tcam command B-55

debug platform udld command B-57

debug platform vlan command B-58

debug pm command B-59

debug port-security command B-61

debug qos-manager command B-62

debug spanning-tree bpdu command B-65

debug spanning-tree bpdu-opt command B-66

debug spanning-tree command B-63

debug spanning-tree mstp command B-67

debug spanning-tree switch command B-69

debug sw-vlan command B-71

debug sw-vlan ifs command B-73

debug sw-vlan notification command B-74

debug udld command B-76

debug vqpc command B-78

default

policer configuration

NNIs C-23

UNIs C-22

define interface-range command 2-57

delete (boot loader) command A-6

delete command 2-59

deny (ARP access-list configuration) command 2-60

deny command 2-62

detect mechanism, causes 2-79

DHCP snooping

accepting untrusted packets from edge switch 2-129

enabling

on a VLAN 2-135

option 82 2-127, 2-129

trust on an interface 2-133

error recovery timer 2-81

rate limiting 2-132

DHCP snooping binding database

binding file, configuring 2-125

bindings

adding 2-123

deleting 2-123

displaying 2-382

clearing database agent statistics 2-40

database agent, configuring 2-125

displaying

binding entries 2-382

database agent status 2-384, 2-386

renewing 2-275

differentiated service code point

See DSCP

dir (boot loader) command A-7

directories, deleting 2-59

documentation, related xviii

document conventions xviii

domains, CFM 2-233

dot1x default command 2-65

dot1x host-mode command 2-66

dot1x initialize command 2-67

dot1x max-req command 2-68, 2-69

dot1x port-control command 2-70

dot1x re-authenticate command 2-72

dot1x reauthentication command 2-73

dot1x system-auth-control command 2-74

dot1x timeout command 2-75

dropping packets, with ACL matches 2-5

drop threshold, Layer 2 protocol tunneling 2-165

DSCP

as match criteria for QoS groups 2-209, 2-215

for QoS traffic marking 2-301

setting in policy maps 2-301

dual-purpose uplink ports, selecting the type 2-220

duplex command 2-77

dynamic-access ports

configuring 2-558

restrictions 2-559

dynamic ARP inspection

ARP ACLs

apply to a VLAN 2-109

define 2-15

deny packets 2-60

display 2-316

permit packets 2-238

clear

log buffer 2-38

statistics 2-39

display

ARP ACLs 2-316

configuration and operating state 2-377

log buffer 2-377

statistics 2-377

trust state and rate limit 2-377

enable per VLAN 2-119

error detection for 2-79

error recovery timer 2-81

log buffer

clear 2-38

configure 2-113

display 2-377

rate-limit incoming ARP packets 2-111

statistics

clear 2-39

display 2-377

trusted interface state 2-115

type of packet logged 2-120

validation checks 2-117

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

E

EAP-request/identity frame

maximum number to send 2-69

response time before retransmitting 2-75

E-LMI

enabling 2-84

E-LMI mapping 2-86

environment variables, displaying 2-317

errdisable detect cause command 2-79

errdisable recovery command 2-81

error conditions, displaying 2-345

error disable detection 2-79

error-disabled interfaces, displaying 2-362

EtherChannel

assigning Ethernet interface to channel group 2-28

creating port-channel logical interface 2-97

debug EtherChannel/PAgP, display B-4

debug platform-specific events, display B-27

displaying 2-349

enabling Layer 2 protocol tunneling for

LACP 2-166

PAgP 2-166

UDLD 2-166

interface information, displaying 2-362

LACP

clearing channel-group information 2-44

debug messages, display B-13

displaying 2-408

modes 2-28

port priority for hot-standby ports 2-169

restricting a protocol 2-32

system priority 2-171

load-distribution methods 2-256

PAgP

aggregate-port learner 2-234

clearing channel-group information 2-47

debug messages, display B-20

displaying 2-448

error detection for 2-79

error recovery timer 2-81

learn method 2-234

modes 2-28

physical-port learner 2-234

priority of interface for transmitted traffic 2-236

ethermet lmi ce command 2-84

Ethernet controller, internal register display 2-324

ethernet evc command 2-83

ethernet lim global command 2-84

ethernet lmi ce-vlan map command 2-86, 2-88

ethernet lmi command 2-84

Ethernet Local Management Interface

See E-LMI

Ethernet service

debugging B-5

displaying 2-352

Ethernet service instance 2-290

Ethernet service interfaces 2-356

Ethernet statistics, collecting 2-287

Ethernet UNI configuration 2-90

ethernet uni id command 2-92

Ethernet virtual connections

See EVCs

EVC configuration mode 2-83

EVCs 2-83

and VLANs 2-90

service instances 2-290

UNI counts 2-604

EVC service

point-to-multipoint 2-604

point-to-point 2-604

examples, conventions for xviii

exceed-action command 2-93

extended-range VLANs

and allowed VLAN list 2-583

configuring 2-608

extended system ID for STP 2-514

F

fan information, displaying 2-340

files, deleting 2-59

flash_init (boot loader) command A-9

Flex Links

configuring 2-560

configuring preferred VLAN 2-562

displaying 2-362

flowcontrol command 2-95

format (boot loader) command A-10

forwarding packets, with ACL matches 2-5

forwarding results, display C-6

frame forwarding information, displaying C-6

fsck (boot loader) command A-11

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-312

help (boot loader) command A-12

host connection, port configuration 2-566

host ports, private VLANs 2-570

I

IEEE 802.1ag Connectivity Fault Management

See CFM

IEEE 802.1Q trunk ports and native VLANs 2-613

IEEE 802.1Q tunnel ports

configuring 2-567

displaying 2-335

limitations 2-568

IEEE 802.1x

and switchport modes 2-568

violation error recovery 2-81

See also port-based authentication

IGMP filters

applying 2-138

debug messages, display B-10

IGMP groups, setting maximum 2-140

IGMP maximum groups, debugging B-11

IGMP profiles

creating 2-142

displaying 2-389

IGMP snooping

adding ports as a static member of a group 2-157

displaying 2-390, 2-394, 2-396

enabling 2-144

enabling the configurable-leave timer 2-146

enabling the Immediate-Leave feature 2-154

flooding query count 2-152

interface topology change notification behavior 2-153

multicast table 2-392

querier 2-148

query solicitation 2-152

report suppression 2-150

switch topology change notification behavior 2-152

images

See software images

Immediate-Leave feature, MVR 2-230

immediate-leave processing 2-154

initial configuration

See also getting started guide and hardware installation guide

input policy maps

and ACL classification 2-207

and aggregate policers 2-250

commands not supported in 2-254

configuration guidelines 2-254

interface command 2-102

interface configuration mode 1-2, 1-4

interface port-channel command 2-97

interface range command 2-99

interface-range macros 2-57

interfaces

assigning Ethernet interface to channel group 2-28

configuring 2-77

configuring multiple 2-99

creating port-channel logical 2-97

debug messages, display B-9

disabling 2-493

displaying the MAC address table 2-429

restarting 2-493

interface speed, configuring 2-551

internal registers, displaying 2-324, 2-331

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for 2-79

error recovery timer 2-81

ip address command 2-107

IP addresses, setting 2-107

IP address matching 2-205

ip arp inspection filter vlan command 2-109

ip arp inspection limit command 2-111

ip arp inspection log-buffer command 2-113

ip arp inspection trust command 2-115

ip arp inspection validate command 2-117

ip arp inspection vlan command 2-119

ip arp inspection vlan logging command 2-120

IP DHCP snooping

See DHCP snooping

ip dhcp snooping binding command 2-123

ip dhcp snooping command 2-122

ip dhcp snooping database command 2-125

ip dhcp snooping information option allow-untrusted command 2-129

ip dhcp snooping information option command 2-127

ip dhcp snooping information option format remote-id command 2-131

ip dhcp snooping limit rate command 2-132

ip dhcp snooping trust command 2-133

ip dhcp snooping verify command 2-134

ip dhcp snooping vlan command 2-135

ip dhcp snooping vlan information option format-type circuit-id string command 2-136

ip igmp filter command 2-138

ip igmp max-groups command 2-140

ip igmp profile command 2-142

ip igmp snooping command 2-144

ip igmp snooping last-member-query-interval command 2-146

ip igmp snooping querier command 2-148

ip igmp snooping report-suppression command 2-150

ip igmp snooping tcn command 2-152

ip igmp snooping tcn flood command 2-153

ip igmp snooping vlan immediate-leave command 2-154

ip igmp snooping vlan mrouter command 2-155

ip igmp snooping vlan static command 2-157

IP multicast addresses 2-227

IP precedence, as match criteria for QoS groups 2-211

ip source binding command 2-159

IP source guard

disabling 2-163

displaying

binding entries 2-398

configuration 2-400

enabling 2-163

static IP source bindings 2-159

IP source guard, displaying dynamic binding entries 2-382

ip ssh command 2-161

ip verify source command 2-163

J

jumbo frames

See MTU

L

l2protocol-tunnel command 2-165

l2protocol-tunnel cos command 2-168

LACP

See EtherChannel

lacp port-priority command 2-169

lacp system-priority command 2-171

Layer 2 mode, enabling 2-556

Layer 2 protocol ports, displaying 2-406

Layer 2 protocol-tunnel

error detection for 2-79

error recovery timer 2-81

Layer 2 protocol tunnel counters 2-43

Layer 2 protocol tunneling error recovery 2-166

Layer 2 traceroute

IP addresses 2-597

MAC addresses 2-594

Layer 3 mode, enabling 2-556

line configuration mode 1-2, 1-4

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for 2-79

error recovery timer 2-81

link state group command 2-173

link state track command 2-175

load-distribution methods for EtherChannel 2-256

location (global configuration) command 2-176

location (interface configuration) command 2-178

logging event command 2-180

logging file command 2-181

logical interface 2-97

loopback error

detection for 2-79

recovery timer 2-81

loop guard, for spanning tree 2-516, 2-520

M

mac access-group command 2-183

MAC access-groups, displaying 2-417

MAC access list configuration mode 2-185

mac access-list extended command 2-185

MAC access lists 2-62

MAC addresses

disabling MAC address learning per VLAN 2-188

displaying

aging time 2-423

all 2-421

dynamic 2-427

MAC address-table move updates 2-432

notification settings 2-431, 2-434

number of addresses in a VLAN 2-425

per interface 2-429

per VLAN 2-438

static 2-436

static and dynamic entries 2-419

dynamic

aging time 2-187

deleting 2-45

displaying 2-427

enabling MAC address notification 2-192

enabling MAC address-table move update 2-190

matching 2-205

static

adding and removing 2-194

displaying 2-436

dropping on an interface 2-195

tables 2-421

MAC address notification, debugging B-14

mac address-table aging-time 2-183, 2-205

mac address-table aging-time command 2-187

mac address-table learning command 2-188

mac address-table move update command 2-190

mac address-table notification command 2-192

mac address-table static command 2-194

mac address-table static drop command 2-195

macro description command 2-199

macro global command 2-200

macro global description command 2-202

macro name command 2-203

macros

adding a description 2-199

adding a global description 2-202

applying 2-200

creating 2-203

displaying 2-450

interface range 2-57, 2-99

specifying parameter values 2-200

tracing 2-200

maintenance end points 2-604

manual

audience xvii

purpose of xvii

mapping tables, QoS 2-590

maps

class

creating 2-36

VLAN

creating 2-611

defining 2-205

displaying 2-489

match access-group command 2-207

match cos command 2-208

match ip dscp command 2-209

match ip precedence command 2-211

match qos-group command 2-213

match vlan command 2-215

maximum transmission unit

See MTU

mdix auto command 2-218

media-type command 2-220

memory (boot loader) command A-13

mkdir (boot loader) command A-14

mode, MVR 2-227

modes, commands 1-1

monitor session command 2-222

more (boot loader) command A-15

MSTP

displaying 2-469, 2-470

interoperability 2-52

link type 2-518

MST region

aborting changes 2-524

applying changes 2-524

configuration name 2-524

configuration revision number 2-524

current or pending display 2-524

displaying 2-469, 2-470

MST configuration mode 2-524

VLANs-to-instance mapping 2-524

path cost 2-526

protocol mode 2-522

restart protocol migration process 2-52

root port

loop guard 2-516

preventing from becoming designated 2-516

restricting which can be root 2-516

root guard 2-516

root switch

affects of extended system ID 2-514

hello-time 2-529, 2-540

interval between BDPU messages 2-531

interval between hello BPDU messages 2-529, 2-540

max-age 2-531

maximum hop count before discarding BPDU 2-533

port priority for selection of 2-535

primary or secondary 2-540

switch priority 2-538

state changes

blocking to forwarding state 2-546

enabling BPDU filtering 2-506, 2-544

enabling BPDU guard 2-508, 2-544

enabling Port Fast 2-544, 2-546

forward-delay time 2-528

length of listening and learning states 2-528

rapid transition to forwarding 2-518

shutting down Port Fast-enabled ports 2-544

state information display 2-468

MTU

configuring size 2-587

displaying global setting 2-477

multicast group address, MVR 2-230

multicast groups, MVR 2-228

multicast router learning method 2-155

multicast router ports, configuring 2-155

multicast storm control 2-553

multicast VLAN, MVR 2-227

multicast VLAN registration

See MVR

multiple hosts on authorized port 2-66

Multiple Spanning Tree Protocol

See MSTP

multiplexing, UNI 2-90

MVR

and address aliasing 2-228

configuring 2-227

configuring interfaces 2-230

debug messages, display B-18

displaying 2-442

displaying interface information 2-444

members, displaying 2-446

mvr (global configuration) command 2-227

mvr (interface configuration) command 2-230

mvr vlan group command 2-231

N

native VLANs 2-583

native VLAN tagging 2-613

network node interface 2-258

nonegotiate, speed 2-551, 2-552

non-IP protocols

denying 2-62

forwarding 2-240

non-IP traffic access lists 2-185

non-IP traffic forwarding

denying 2-62

permitting 2-240

normal-range VLANs 2-608

note, description xviii

no vlan command 2-608

O

OAM PDUs 2-88

OAM protocol 2-233

oam protocol cfm svlan command 2-233

operation, administration, and maintenance protocol

See OAM

output policy maps

and QoS group classification 2-213

and traffic shaping 2-310

commands not supported in 2-254

configuration guidelines 2-254

priority in 2-263

queue limit in 2-270

P

PAgP

See EtherChannel

pagp learn-method command 2-234

pagp port-priority command 2-236

parent policy maps 2-297

password-recovery mechanism, enabling and disabling 2-292

permit (ARP access-list configuration) command 2-238

permit command 2-240

per-VLAN spanning-tree plus

See STP

physical-port learner 2-234

PID, displaying 2-375

PIM-DVMRP, as multicast router learning method 2-155

police

multiple conform actions for a class 2-55

multiple exceed actions for a class 2-93

with priority 2-243

police aggregate command 2-247

police command 2-243

policer aggregate command 2-249

policer configuration

default for NNIs C-23

default for UNIs C-22

policer cpu uni command 2-252

policers

aggregate 2-247, 2-249

for CPU protection 2-252

individual 2-243

policy-map class, configuring multiple actions 2-55, 2-93

policy-map class configuration mode 2-34

policy-map class police configuration mode 2-55, 2-245

policy-map command 2-253

policy-map configuration mode 2-253

policy maps

and CoS classification 2-208

and DSCP classification 2-209

and IP precedence classification 2-211

and policing 2-245

applying 2-294

applying to an interface 2-254, 2-294, 2-307

child 2-296

creating 2-253

displaying 2-455

hierarchical 2-296

parent 2-297

policers

for a single class 2-243

for multiple classes 2-247, 2-249, 2-252, 2-296

setting priority 2-262

setting QoS group identifier 2-305

traffic classification, defining 2-34

traffic marking

setting CoS values 2-299

setting DSCP values 2-301

setting IP precedence values 2-303

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list 2-3

debug messages, display B-3

enabling 802.1x

globally 2-74

per interface 2-70

host modes 2-66

IEEE 802.1x AAA accounting methods 2-1

initialize an interface 2-67

manual control of authorization state 2-70

multiple hosts on authorized port 2-66

periodic re-authentication

enabling 2-73

time between attempts 2-75

quiet period between failed authentication exchanges 2-75

re-authenticating 802.1x-enabled ports 2-72

resetting configurable 802.1x parameters 2-65

switch-to-authentication server retransmission time 2-75

switch-to-client frame-retransmission number2-68to 2-69

switch-to-client retransmission time 2-75

port-channel load-balance command 2-256

Port Fast, for spanning tree 2-546

port ranges, defining 2-57

ports, debugging B-59

ports, protected 2-581

port security

aging 2-577

debug messages, display B-61

enabling 2-573

violation error recovery 2-81

port shaping 2-311

port-type command 2-258

port types, MVR 2-230

power information, displaying 2-340

power-supply dual command 2-260

precedence

for QoS traffic marking 2-303

setting in policy maps 2-303

priority command 2-262

priority queuing, QoS 2-262

priority with police, QoS 2-262

private-vlan command 2-265

private-vlan mapping command 2-268

private VLANs

association 2-579

configuring 2-265

configuring ports 2-570

displaying 2-484

host ports 2-570

mapping

configuring 2-579

displaying 2-362

promiscuous ports 2-570

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-375

promiscuous ports, private VLANs 2-570

PVST+

See STP

Q

QoS

aggregate policers

applying 2-247

creating 2-249

displaying 2-452

class maps

creating 2-36

defining the match criteria 2-208

displaying 2-321

displaying statistics for 2-455, C-29

policy maps

applying an aggregate policer 2-247, 2-249, 2-252, 2-296

applying to an interface 2-294, 2-307

creating 2-253

defining policers 2-243

displaying policy maps 2-455

setting CoS values 2-299

setting DSCP values 2-301

setting IP precedence values 2-303

setting QoS group identifier 2-305

traffic classifications 2-34

table maps

configuring 2-590

displaying 2-478

QoS groups

as match criteria 2-213

for QoS traffic classification 2-305

setting in policy maps 2-305

QoS match criteria

ACLs 2-207

CoS value 2-208

DSCP value 2-209, 2-215

precedence value 2-211

QoS group number 2-213

quality of service

See QoS

querytime, MVR 2-227

queue-limit command 2-270

R

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

re-authenticating 802.1x-enabled ports 2-72

re-authentication

periodic 2-73

time between attempts 2-75

receiver ports, MVR 2-230

receiving flow-control packets 2-95

recovery mechanism

causes 2-81

display 2-319, 2-343, 2-347

timer interval 2-81

remote-span command 2-273

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-16

renew ip dhcp snooping database command 2-275

rep admin vlan command 2-277

rep block port command 2-278

rep preempt delay command 2-281

rep preempt segment command 2-283

rep segment command 2-284

rep stcn command 2-286

reset (boot loader) command A-17

resource templates, displaying 2-466

rmdir (boot loader) command A-18

rmon collection stats command 2-287

root guard, for spanning tree 2-516

routed ports

IP addresses on 2-108

number supported 2-108

RSPAN

configuring 2-222

displaying 2-440

filter RSPAN traffic 2-222

remote-span command 2-273

sessions

add interfaces to 2-222

displaying 2-440

start new 2-222

S

sdm prefer command 2-288

SDM templates

allowed resources 2-289

displaying 2-466

secure ports, limitations 2-575

sending flow-control packets 2-95

service instance command 2-290

service instances, displaying 2-354

service password-recovery command 2-292

service policy (policy-map class configuration) command 2-296

service-policy interface configuration command 2-294

service-policy policy-map class configuration command 2-296

set (boot loader) command A-19

set cos command 2-299

set dscp command 2-301

set precedence command 2-303

set qos-group command 2-305

setup command 2-307

SFPs, displaying information about 2-375

shape average command 2-310

show access-lists command 2-312

show aggregate-policer command 2-478

show archive status command 2-315

show arp access-list command 2-316

show boot command 2-317

show class-map command 2-321

show controllers cpu-interface command 2-322

show controllers ethernet-controller command 2-324

show controllers tcam command 2-331

show controllers utilization command 2-333

show controller utilization command 2-333

show dot1q-tunnel command 2-335

show dot1x command 2-337

show env command 2-340

show errdisable detect command 2-343

show errdisable flap-values command 2-345

show errdisable recovery command 2-347

show etherchannel command 2-349

show ethernet service evc command 2-352

show ethernet service instance command 2-354

show ethernet service interface command 2-356

show flowcontrol command 2-358

show idprom command 2-360

show interface rep command 2-373

show interfaces command 2-362

show interfaces counters command 2-371

show inventory command 2-375

show ip arp inspection command 2-377

show ipc command 2-402

show ip dhcp snooping binding command 2-382

show ip dhcp snooping command 2-381

show ip dhcp snooping database command 2-384, 2-386

show ip igmp profile command 2-389

show ip igmp snooping command 2-390

show ip igmp snooping command querier detail 2-396

show ip igmp snooping groups command 2-392

show ip igmp snooping mrouter command 2-394

show ip igmp snooping querier command 2-396

show ip igmp snooping querier detail command 2-396

show ip source binding command 2-398

show ip verify source command 2-400

show l2protocol-tunnel command 2-406

show lacp command 2-408

show link state group command 2-412

show location 2-414

show location command 2-414

show mac access-group command 2-417

show mac address-table address command 2-421

show mac address-table aging time command 2-423

show mac address-table command 2-419

show mac address-table count command 2-425

show mac address-table dynamic command 2-427

show mac address-table interface command 2-429

show mac address-table learning command 2-431

show mac address-table move update command 2-432

show mac address-table notification command 2-46, 2-434, B-16

show mac address-table static command 2-436

show mac address-table vlan command 2-438

show monitor command 2-440

show mvr command 2-442

show mvr interface command 2-444

show mvr members command 2-446

show pagp command 2-448

show parser macro command 2-450

show platform acl command C-2

show platform cfm command C-3

show platform configuration command C-4

show platform etherchannel command C-5

show platform forward command C-6

show platform igmp snooping command C-8

show platform ipc trace command C-13

show platform ip multicast command C-10

show platform ip unicast command C-11

show platform layer4op command C-14

show platform mac-address-table command C-15

show platform messaging command C-16

show platform monitor command C-17

show platform mvr table command C-18

show platform pm command C-19

show platform policer cpu command C-21

show platform port-asic command C-24

show platform port-security command C-28

show platform qos command C-29

show platform resource-manager command C-32

show platform snmp counters command C-34

show platform spanning-tree synchronization command C-35

show platform stp-instance command C-36

show platform tcam command C-37

show platform vlan command C-40

show policer aggregate command 2-452

show policer cpu uni command 2-453

show policy-map command 2-455

show policy-map interface output fields 2-458

show port security command 2-459

show port-type command 2-462

show rep topology command 2-464

show sdm prefer command 2-466

show spanning-tree command 2-468

show storm-control command 2-475

show system mtu command 2-477

show udld command 2-480

show version command 2-482

show vlan access-map command 2-489

show vlan command 2-484

show vlan command, fields 2-486

show vlan filter command 2-490

show vmps command 2-491

shutdown command 2-493

shutdown threshold, Layer 2 protocol tunneling 2-165

shutdown vlan command 2-494

SNMP host, specifying 2-500

SNMP informs, enabling the sending of 2-496

snmp mib rep trap-rate command 2-495

snmp-server enable traps command 2-496

snmp-server host command 2-500

snmp trap mac-notification command 2-504

SNMP traps

enabling MAC address notification trap 2-504

enabling the MAC address notification feature 2-192

enabling the sending of 2-496

software images

deleting 2-59

downloading 2-7

upgrading 2-7

uploading 2-13

software version, displaying 2-482

source ports, MVR 2-230

SPAN

configuring 2-222

debug messages, display B-17

displaying 2-440

filter SPAN traffic 2-222

sessions

add interfaces to 2-222

displaying 2-440

start new 2-222

spanning-tree bpdufilter command 2-506

spanning-tree bpduguard command 2-508

spanning-tree cost command 2-510

spanning-tree etherchannel command 2-512

spanning-tree extend system-id command 2-514

spanning-tree guard command 2-516

spanning-tree link-type command 2-518

spanning-tree loopguard default command 2-520

spanning-tree mode command 2-522

spanning-tree mst configuration command 2-524

spanning-tree mst cost command 2-526

spanning-tree mst forward-time command 2-528

spanning-tree mst hello-time command 2-529

spanning-tree mst max-age command 2-531

spanning-tree mst max-hops command 2-533

spanning-tree mst port-priority command 2-535

spanning-tree mst pre-standard command 2-537

spanning-tree mst priority command 2-538

spanning-tree mst root command 2-540

spanning-tree portfast (global configuration) command 2-544

spanning-tree portfast (interface configuration) command 2-546

spanning-tree port-priority command 2-542

Spanning Tree Protocol

See STP

spanning-tree vlan command 2-548

speed command 2-551

SSH, configuring version 2-161

static-access ports, configuring 2-558

statistics, Ethernet group 2-287

sticky learning, enabling 2-573

storm-control command 2-553

STP

counters, clearing 2-51

debug messages, display

MSTP B-67

optimized BPDUs handling B-66

spanning-tree activity B-63

switch shim B-69

transmitted and received BPDUs B-65

enabling protocol tunneling for 2-165

EtherChannel misconfiguration 2-512

extended system ID 2-514

path cost 2-510

protocol modes 2-522

root port

loop guard 2-516

preventing from becoming designated 2-516

restricting which can be root 2-516

root guard 2-516

root switch

affects of extended system ID 2-514, 2-549

hello-time 2-548

interval between BDPU messages 2-548

interval between hello BPDU messages 2-548

max-age 2-548

port priority for selection of 2-542

primary or secondary 2-548

switch priority 2-548

STP

state changes

blocking to forwarding state 2-546

enabling BPDU filtering 2-506, 2-544

enabling BPDU guard 2-508, 2-544

enabling Port Fast 2-544, 2-546

enabling timer to recover from error state 2-81

forward-delay time 2-548

length of listening and learning states 2-548

shutting down Port Fast-enabled ports 2-544

state information display 2-468

VLAN options 2-538, 2-548

SVIs, creating 2-102

Switched Port Analyzer

See SPAN

switching characteristics

modifying 2-556

returning to interfaces 2-556

switchport access command 2-558

switchport backup interface command 2-560

switchport block command 2-564

switchport command 2-556

switchport host command 2-566

switchport mode command 2-567

switchport mode private-vlan command 2-570

switchport port-security aging command 2-577

switchport port-security command 2-573

switchport private-vlan command 2-579

switchport protected command 2-581

switchports, displaying 2-362

switchport trunk command 2-583

system env temperature threshold yellow command 2-585

system message logging, save message to flash 2-181

system mtu command 2-587

system resource templates 2-288

T

table-map command 2-590

table-map configuration mode 2-590

table maps

configuring 2-590

displaying 2-478

QoS 2-590

tar files, creating, listing, and extracting 2-10

TDR, running 2-592

temperature information, displaying 2-340

templates, system resources 2-288

test cable-diagnostics tdr command 2-592

traceroute mac command 2-594

traceroute mac ip command 2-597

traffic shaping, QoS 2-310

trunking, VLAN mode 2-567

trunk mode 2-567

trunk ports 2-567

tunnel ports, Layer 2 protocol, displaying 2-406

type (boot loader) command A-22

U

UDLD

aggressive mode 2-599, 2-601

debug messages, display B-76

enable globally 2-599

enable per interface 2-601

error recovery timer 2-81

message timer 2-599

normal mode 2-599, 2-601

reset a shutdown interface 2-603

status 2-480

udld command 2-599

udld port command 2-601

udld reset command 2-603

UNI

bundling and multiplexing 2-90

Ethernet 2-90

unicast storm control 2-553

uni count command 2-604

UniDirectional Link Detection

See UDLD

UNI ID, Ethernet 2-92

uni-vlan command 2-606

unknown multicast traffic, preventing 2-564

unknown unicast traffic, preventing 2-564

unset (boot loader) command A-23

upgrading

software images 2-7

monitoring status of 2-315

upgrading information

See release notes

user EXEC mode 1-2

user network interface 2-258

V

version (boot loader) command A-25

vlan access-map command 2-611

VLAN access map configuration mode 2-611

VLAN access maps

actions 2-5

displaying 2-489

vlan command 2-608

VLAN configuration mode

commands 2-608

description 1-4

entering 2-608

summary 1-2

vlan dot1q tag native command 2-613

vlan filter command 2-615

VLAN filters, displaying 2-490

VLAN ID range 2-608

VLAN maps

applying 2-615

creating 2-611

defining 2-205

displaying 2-489

VLAN Query Protocol

See VQP

VLANs

adding 2-608

configuring 2-608

debug messages, display

activation of B-74

VLAN IOS file system error tests B-73

VLAN manager activity B-71

displaying configurations 2-484

extended-range 2-608

MAC addresses

displaying 2-438

number of 2-425

normal-range 2-608

private 2-570

configuring 2-265

displaying 2-484

See also private VLANs

restarting 2-494

saving the configuration 2-608

shutting down 2-494

suspending 2-494

VMPS

configuring servers 2-620

displaying 2-491

error recovery timer 2-81

reconfirming dynamic VLAN assignments 2-617

vmps reconfirm (global configuration) command 2-618

vmps reconfirm (privileged EXEC) command 2-617

vmps retry command 2-619

vmps server command 2-620

VQP

and dynamic-access ports 2-559

clearing client statistics 2-54

displaying information 2-491

per-server retry count 2-619

reconfirmation interval 2-618

reconfirming dynamic VLAN assignments 2-617

VTP, enabling tunneling for 2-165

W

Weighted Tail Drop

See WTD

WTD, queue-limit command 2-270