Index
Symbols
$ matches the end of a string 1-7
( ) in commands 1-11
* matches 0 or more sequences of a pattern 1-7
+ matches 1 or more sequences of a pattern 1-7
. matches any single character 1-7
? command 1-1
? matches 0 or 1 occurrence of a pattern 1-7
^ matches the beginning of a string 1-7
_ matches a comma (,), left brace ({), left parenthesis 1-7
" 1-10
Numerics
10-Gigabit Ethernet uplink
selecting 2-198
802.1Q trunk ports and native VLANs 2-854
802.1Q tunnel ports
configuring 2-798
802.1S Multiple Spanning Tree
802.1X
configuring for multiple hosts 2-154
configuring for single host 2-154
configuring multiple domains 2-154
disabling port control 2-147
enabling port control 2-147
802.1X Critical Authentication
disabling on a port 2-148
disabling on a VLAN 2-151
EAPOL
disabling send success packets 2-149
enabling send success packets 2-149
enabling on a port 2-148
enabling on a VLAN 2-151
returning delay time to default setting 2-150
setting delay time on a port 2-150
802.1X critical authentication
configure parameters 2-21
802.1X critical recovery delay, configuring 2-21
802.1X Port Based Authentication
debugging 802.1X Port Based Authentication 2-105
displaying port based authentication 2-492
enabling accounting for authentication sessions 2-4
enabling authentication on the system 2-165
enabling guest VLAN 2-152
enabling guest VLAN supplicant 2-145, 2-153
enabling manual control of auth state 2-161
enabling periodic re-authentication of the client 2-164
initializing re-authentication of dot1x ports 2-163
initializing state machines 2-156
receive session termination message upon reboot 2-5
setting maximum number for EAP requests 2-159
setting the reauthentication timer 2-166
A
abbreviating commands
context-sensitive help 1-1
Access Gateway Module
connecting to a module 2-18
connecting to a remote module 2-423
connecting to a specific remote module 2-435
access-group
displaying mac interface 2-619
show mode interface 2-455, 2-672
access groups
IP 2-6
access lists
clearing an access template 2-70
defining ARP 2-17
displaying ARP information 2-458
See also ACLs, MAC ACLs, and VACLs
access maps
applying with VLAN filter 2-856
access-policies, applying using host-mode 2-26
ACLs
access-group mode 2-6
balancing hardware regions 2-12
capturing control packets 2-8
determining ACL hardware programming 2-10
disabling hardware statistics 2-192
displaying mac access-group interface 2-619
enabling hardware statisctics 2-192
using ACL naming conventions for MAC ACLs 2-313
action clause
specifying drop or forward action in a VACL 2-13
addresses, configuring a maximum 2-386
adjacency
debugging the adjacency table 2-98
disabling the debug facility 2-98
displaying information about the adjacency table 2-456
displaying IPC table entries 2-98
aggregate policer
displaying information 2-673
aging time
displaying MAC address aging time 2-622
alarms
displaying operational status 2-500
alternation
description 1-10
anchoring
description 1-10
ARP
access list, displaying detailed information 2-458
defining access-lists 2-17
ARP inspection
enforce certain types of checking 2-219
ARP packet
deny based on DHCP bindings 2-137
permit based on DHCP bindings 2-364
changing the control-direction 2-19
configure actions for events
configuring the actions 2-22
configuring port-control 2-32
enabling reauthentication 2-31
enabling Webauth fallback 2-25
host-mode configuration 2-26
setting priority of methods 2-34
setting the timer 2-36
setting username 2-841
specifying the order of methods 2-29
using an MD5-type encryption method 2-841
verifying MD5 signature 2-843
verifying the checksum for Flash memory 2-843
authentication control-direction command 2-19
authentication critical recovery delay command 2-21
authentication event command 2-22
authentication fallback command 2-25
authentication host-mode 2-26
authentication methods, setting priority 2-34
authentication methods, specifying the order of attempts 2-29
authentication open command 2-28
authentication order command 2-29
authentication periodic command 2-31
authentication port-control command 2-32
authentication priority command 2-34
authentication timer, setting 2-36
authentication timer command 2-36
auth fail VLAN
enable on a port 2-146
set max number of attempts 2-145
Auth Manager
configuring
authentication timer 2-36
authorization state
enabling manual control 2-161
authorization state of a controlled port 2-161
automatic installation
displaying status 2-463
automatic medium-dependent interface crossover
Auto-MDIX
disabling 2-346
enabling 2-346
auto-negotiate interface speed
example 2-775
auto-QoS
configuring for VoIP 2-38
displaying configuration 2-464
B
baby giants
displaying the system MTU setting 2-704
setting the maximum Layer 2 payload size 2-822
BackboneFast
displaying debugging messages 2-124
displaying spanning tree status 2-694
enabling debugging 2-124
bandwidth command 2-42
bindings
store for DHCP snooping 2-230
BOOT environment variable
displaying information 2-467
bootflash
displaying information 2-465
BPDUs
debugging spanning tree activities 2-122
bridge protocol data units
broadcast
counters 2-95
broadcast suppression level
C
cable diagnostics
TDR
displaying test results 2-468
testing conditions of copper cables 2-824
call home
displaying information 2-470
e-mailing output 2-50
entering configuration submode 2-45
executing 2-50
manually send test message 2-53
receiving information 2-48
sending alert group message 2-51
submitting information 2-48
call home destination profiles
displaying 2-472
Catalyst 4507R 2-384
CDP
configuring tunneling encapsulation rate 2-301
displaying
neighbor information 2-475
enabling protocol tunneling for 2-296
set drop threshold for 2-299
CEF
displaying next-hop information 2-549
displaying VLAN configuration information 2-549
cisco-desktop
macro apply 2-325
Cisco Express Forwarding
cisco-phone
macro apply 2-327
cisco-router
macro apply 2-329
cisco-switch
macro apply 2-331
class maps
creating 2-61
defining the match criteria 2-339
clear commands
clearing Gigabit Ethernet interfaces 2-68
clearing IGMP group cache entries 2-77
clearing interface counters 2-63
clearing IP access lists 2-70, 2-71
clearing IP ARP inspection statistics VLAN 2-72
clearing IP DHCP snooping database statistics 2-76
clearing MFIB counters and routes 2-80
clearing MFIB fastdrop entries 2-81
clearing PAgP channel information 2-86
clearing QoS aggregate counters 2-89
clearing VLAN interfaces 2-69
clear energywise neighbors command 2-65
CLI string search
anchoring 1-10
expressions 1-7
filtering 1-6
multiple-character patterns 1-8
multipliers 1-9
parentheses for recall 1-11
searching outputs 1-6
single-character patterns 1-7
using 1-6
command modes
accessing privileged EXEC mode 1-5
exiting 1-5
understanding user EXEC and configuration modes 1-5
condition interface
debugging interface-related activities 2-100
condition vlan
debugging VLAN output 2-103
configuration, saving 1-11
configuring
root as secondary 2-759
configuring a SPAN session to monitor
limit SPAN source traffic 2-351
configuring critical recovery 2-21
configuring forward delay 2-755
configuring root as primary 2-759
CoPP
attaching
policy map to control plane 2-433
displaying
policy-map class information 2-648
entering configuration mode 2-93
removing
service policy from control plane 2-433
CoS
assigning to Layer 2 protocol packets 2-298
counters
clearing interface counters 2-63
critical authentication, configure 802.1X parameters 2-21
critical recovery, configuring 802.1X parameter 2-21
D
DAI
clear statistics 2-72
DBL
displaying qos dbl 2-674
debug commands
debugging backup events 2-99
debugging DHCP snooping events 2-110
debugging DHCP snooping messages 2-111
debugging EtherChannel/PAgP/shim 2-106
debugging IPC activity 2-109
debugging IP DHCP snooping security messages 2-112
debugging NVRAM activities 2-115
debugging PAgP activities 2-116
debugging port manager activities 2-119
debugging spanning tree activities 2-122
debugging spanning tree backbonefast 2-124
debugging spanning tree UplinkFast 2-127
debugging supervisor redundancy 2-121
debugging VLAN manager activities 2-128
displaying monitor activity 2-114
displaying the adjacency table 2-98
enabling debug dot1x 2-105
enabling debugging messages for ISL VLAN IDs 2-131
enabling debugging messages for VTP 2-132
enabling debugging of UDLD activity 2-133
enabling switch shim debugging 2-125
enabling VLAN manager file system error tests 2-129
limiting debugging output for VLANs 2-103
limiting interface debugging output 2-100
limiting output for debugging standby state changes 2-101
shortcut to the debug condition interface 2-108
debugging
activity monitoring 2-114
DHCP snooping events 2-110
DHCP snooping packets 2-111
IPC activities 2-109
IP DHCP snooping security packets 2-112
NVRAM activities 2-115
PAgP activities 2-116
PAgP shim 2-106
PM activities 2-119
spanning tree BackboneFast events 2-124
spanning tree switch shim 2-125
spanning tree UplinkFast events 2-127
VLAN manager activities 2-128
VLAN manager IOS file system error tests 2-129
VTP protocol debug messages 2-132
debug spanning tree switch 2-125
debug sw-vlan vtp 2-132
default form of a command, using 1-6
DHCP
clearing database statistics 2-76
DHCP bindings
configuring bindings 2-228
deny ARP packet based on matches 2-137
permit ARP packet based on matches 2-364
DHCP snooping
clearing binding entries 2-73
clearing database 2-75
displaying binding table 2-552
displaying configuration information 2-550
displaying status of DHCP database 2-555
displaying status of error detection 2-503
enabling DHCP globally 2-227
enabling IP source guard 2-267
enabling on a VLAN 2-237
enabling option 82 2-232, 2-234
enabling option-82 2-239
enabling rate limiting on an interface 2-235
enabling trust on an interface 2-236
establishing binding configuration 2-228
renew binding database 2-425
store generated bindings 2-230
diagnostic test
bootup packet memory 2-486
displaying attributes 2-480
display module-based results 2-482
running 2-144
show results for TDR 2-468
testing conditions of copper cables 2-824
displaying error disable recovery 2-504
displaying inline power status 2-663
displaying monitoring activity 2-114
displaying PoE policing and monitoring status 2-671
displaying SEEPROM information
GBIC 2-514
displaying SPAN session information 2-703, 2-778
DoS
CoPP
attaching policy map to control plane 2-433
displaying policy-map class information 2-648
entering configuration mode 2-93
removing service policy from control plane 2-433
entering
CoPP configuration mode 2-93
DOS attack
protecting system's resources 2-214
drop threshold, Layer 2 protocol tunneling 2-299
dual-capable port
selecting a connector 2-348
duplex mode
configuring autonegotiation on an interface 2-168
configuring full duplex on an interface 2-168
configuring half duplex on an interface 2-168
dynamic ARP inspection
preventing 2-214
Dynamic Host Configuration Protocol
E
EAP
restarting authentication process 2-159
EIGRP (Enhanced IGRP)
filters
routing updates, preventing 2-361
enabling
debugging for UDLD 2-133
voice VLANs 2-791
enabling open access 2-28
EnergyWise
display power information through queries 2-177
display setting, status of entity and PoE ports 2-496
on an entity
enable, assign to domain, and set password 2-175
on an entity, enable and configure 2-170
on a PoE port
configuring on PoE port 2-172
energywise (global configuration) command 2-170, 2-172
energywise domain command 2-175
EnergyWise neighbor table, deleting 2-65
energywise query command 2-177
environmental
alarms 2-500
displaying information 2-500
status 2-500
temperature 2-500
erase a file 2-181
error disable detection
clearing error disable on an interface 2-66
enabling error disable detection 2-66, 2-184
enabling per-VLAN on BPDU guard 2-184
error-disabled state
displaying 2-533
error disable recovery
configuring recovery mechanism variables 2-186
displaying recovery timer information 2-504
enabling ARP inspection timeout 2-186
specifying recovery cause 2-186
EtherChannel
assigning interfaces to EtherChannel groups 2-54
debugging EtherChannel 2-106
debugging PAgP shim 2-106
debugging spanning tree activities 2-122
displaying information for a channel 2-506
removing interfaces from EtherChannel groups 2-54
EtherChannel guard
detecting STP misconfiguration 2-745
Explicit Host Tracking
clearing the database 2-79
enabling per-VLAN 2-251
expressions
matching multiple expression occurrences 1-9
multiple-character patterns 1-8
multiplying pattern occurrence 1-11
single-character patterns 1-7
Extensible Authentication Protocol
F
fallback profile, specifying 2-25
field replaceable unit (FRU)
displaying status information 2-500
filters
EIGRP
routing updates, preventing 2-361
Flash memory file system
displaying file system information 2-465
verifying checksum 2-843
flow control
configuring a gigabit interface for pause frames 2-189
displaying per-interface statistics for flow control 2-510
G
GBIC
displaying SEEPROM information 2-514
Gigabit Ethernet interface
clearing the hardware logic 2-68
Gigabit Ethernet uplink
selecting 2-198
global configuration mode
using 1-5
H
hardware module
resetting a module by toggling the power 2-194
hardware statistics
disabling 2-192
enabling 2-192
hardware uplink
selecting the mode 2-198
helper addresses, IP 2-570
hot standby protocol
debugging 2-101
disabling debugging 2-101
limiting output 2-101
hw-module uplink mode shared-backplane command 2-196
I
IDPROMs
displaying SEEPROM information
chassis 2-514
clock module 2-514
fan trays 2-514
module 2-514
mux buffer 2-514
power supplies 2-514
supervisor engine 2-514
ifIndex persistence
clearing SNMP ifIndex commands 2-727
compress SNMP ifIndex table format 2-736
disabling globally 2-735
disabling on an interface 2-729
enabling globally 2-735
enabling on an interface 2-729
IGMP
applying filters for host joining on Layer 2 interfaces 2-241
clearing IGMP group cache entries 2-77
configuring frequency for IGMP host-query messages 2-244
creating an IGMP profile 2-243
displaying IGMP interface configuration information 2-557
displaying profiles 2-559
setting maximum group numbers 2-242
IGMP profiles
displaying 2-559
IGMP snooping
clearing the EHT database 2-79
configuring a Layer 2 interface as a group member 2-257
configuring a Layer 2 interface as a multicast router 2-255
configuring a static VLAN interface 2-257
displaying multicast information 2-566
displaying VLAN information 2-560, 2-564, 2-567
enabling 2-246
enabling immediate-leave processing 2-253
enabling on a VLAN 2-250
enabling per-VLAN Explicit Host Tracking 2-251
inline power
displaying inline power status 2-663
In Service Software Upgrade
inspection log
clearing log buffer 2-71
interface
displaying suppressed multicast bytes 2-527
interface capabilities
displaying 2-523
interface configuration mode
summary 1-5
interface link
display cable disconnect time 2-530
interfaces
configuring dot1q tunnel ports 2-798
creating an interface-range macro 2-136
debugging output of interface related activities 2-100
displaying description 2-529
displaying error-disabled state 2-533
displaying information when tunneling is enabled 2-610
displaying status 2-529
displaying traffic for a specific interface 2-520
entering interface configuration mode 2-205
executing a command on multiple ports in a range 2-208
selecting an interface to configure 2-205
setting a CoS value for Layer 2 packets 2-298
setting drop threshold for Layer 2 packets 2-299
setting the interface type 2-798
interface speed
configuring interface speed 2-773
interface transceiver
displaying diagnostic data 2-537
internal VLAN allocation
configuring 2-857
default setting 2-857
displaying allocation information 2-716
Internet Group Management Protocol
IP ARP
applying ARP ACL to VLAN 2-212
clearing inspection statistics 2-72
clearing status of log buffer 2-71
controlling packet logging 2-223
enabling dynamic inspection 2-221
limit rate of incoming requests 2-214
set per-port config trust state 2-218
showing status of dynamic ARP inspection 2-544
showing status of log buffer 2-547
IPC
debugging IPC activities 2-109
IP DHCP Snooping
IP header validation
disabling 2-266
enabling 2-266
IP interfaces
displaying usability status 2-569
IP multicast
displaying multicast routing table information 2-575
IP phone and standard desktop
enabling Cisco-recommended features 2-327
IP Port Security
enabling 2-267
IP source binding
adding or deleting 2-263
displaying bindingstagging 2-580
IP source guard
debugging messages 2-112
displaying configuration and filters 2-581
enabling on DHCP snooping 2-267
IPv6 MLD
configuring queries 2-273, 2-275
configuring snooping last-listener-query-intervals 2-275
configuring snooping listener-message-suppression 2-277
configuring snooping robustness-variables 2-278
configuring tcn topology change notifications 2-280
counting snooping last-listener-queries 2-273
displaying information 2-586
displaying ports for a switch or VLAN 2-588
displaying querier information 2-589
enabling snooping 2-271
enabling snooping on a VLAN 2-281
ISSU
canceling process 2-283
configuring rollback timer 2-295
displaying capability 2-591
displaying client information 2-593
displaying compatibility matrix 2-595
displaying endpoint information 2-600
displaying entities 2-601
displaying FSM session 2-602
displaying messages 2-603
displaying negotiated 2-605
displaying rollback-timer 2-606
displaying session information 2-607
displaying software version 2-608
displaying state 2-608
forcing switchover to standby supervisor engine 2-293
initiating an automatic ISSU upgrade procedure 2-287
loading new image 2-289
starting process 2-291
stopping rollback timer 2-285
J
Jumbo frames
enabling jumbo frames 2-357
L
LACP
deselecting channeling protocol 2-56
enabling LACP on an interface 2-56
setting channeling protocol 2-56
lacp port-priority command 2-303
lacp system-priority command 2-304
Layer 2
displaying ACL configuration 2-619
Layer 2 interface type
specifying a nontrunking, nontagged single VLAN interface 2-798
specifying a trunking VLAN interface 2-798
Layer 2 protocol ports
displaying 2-610
Layer 2 protocol tunneling error recovery 2-301
Layer 2 switching
enabling voice VLANs 2-791
modifying switching characteristics 2-791
Layer 2 traceroute
IP addresses 2-829
Layer 3 switching
displaying information about an adjacency table 2-456
displaying port status 2-535
displaying status of native VLAN tagging 2-535
link-status event messages
disabling
enabling
log buffer
show status 2-547
logging
controlling IP ARP packets 2-223
M
MAB, display information 2-616
MAB, enable and configure 2-311
mab command 2-311
MAC Access Control Lists
MAC ACLs
defining extended MAC access list 2-313
displaying MAC ACL information 2-713
naming an ACL 2-313
MAC addresses
disabling MAC address learning per VLAN 2-320
MAC address filtering
configuring 2-324
disabling 2-324
enabling 2-324
MAC address learning on a VLAN, enabling 2-320
MAC address table
adding static entries 2-336
clearing dynamic entries 2-83, 2-85
displaying dynamic table entry information 2-626
displaying entry count 2-624
displaying information 2-620
displaying interface-based information 2-628
displaying multicast information 2-630
displaying notification information 2-632
displaying protocol-based information 2-634
displaying static table entry information 2-636
displaying the MAC address aging time 2-622
displaying VLAN-based information 2-639
enabling authentication bypass 2-157
enabling notifications 2-322
learning in the protocol buckets 2-317
removing static entries 2-336
mac-address-table aging-time command 2-316
mac address-table learning vlan command 2-320
MAC address tables
adding static entries 2-324
deleting secure or specific addresses 2-87
disabling IGMP snooping on static MAC addresses 2-324
removing static entries 2-324
mac-address-table static 2-324
MAC address unicast filtering
dropping unicast traffic 2-324
MAC authentication bypass (MAB), display information 2-616
MAC authorization bypass(MAB), enable and configure 2-311
macro
displaying descriptions 2-335
macro keywords
help strings 2-2
macros
adding a global description 2-335
cisco global 2-333
system-cpp 2-334
mapping secondary VLANs to MST instance 2-409
mapping VLAN(s) to an MST instance 2-202
match (class-map configuration) command 2-14, 2-139, 2-140, 2-141, 2-142, 2-339, 2-779, 2-781, 2-783, 2-785, 2-789
maximum transmission unit (MTU)
displaying the system MTU setting 2-704
setting the maximum Layer 2 payload size 2-822
MD5
verifying MD5 signature 2-843
message digest 5
MFIB
clearing ip mfib counters 2-80
clearing ip mfib fastdrop 2-81
displaying all active MFIB routes 2-572
displaying MFIB fastdrop table entries 2-574
enabling IP MFIB fastdrops 2-260
MLD
configuring snooping last-listener-query-intervals 2-275
configuring snooping listener-message-suppression 2-277
configuring snooping robustness-variables 2-278
configuring topology change notifications 2-280
counting snooping last-listener-queries 2-273
enabling snooping 2-271
enabling snooping on a VLAN 2-281
MLD snooping
displaying 2-589
modes
access-group 2-6
show access-group interface 2-455, 2-672
switching between PVST+, MST, and Rapid PVST 2-750
module password clearing 2-67
module reset
resetting a module by toggling the power 2-194
--More-- prompt
filter 1-6
search 1-7
MST
designating the primary and secondary root 2-759
displaying MST protocol information 2-699
displaying region configuration information 2-699
displaying spanning tree information 2-699
entering MST configuration submode 2-753
setting configuration revision number 2-427
setting path cost and port priority for instances 2-751
setting the forward delay timer for all instances 2-755
setting the hello-time delay timer for all instances 2-756
setting the max-age timer for all instances 2-757
setting the MST region name 2-358
specifying the maximum number of hops 2-758
switching between PVST+ and Rapid PVST 2-750
using the MST configuration submode revision command 2-427
using the submode name command 2-358
MTU
displaying global MTU settings 2-704
multi-auth, setting 2-26
Multicase Listener Discovery
multicast
counters 2-95
enabling storm control 2-778
multicast/unicast packets
prevent forwarding 2-797
Multicast Forwarding Information Base
multi-domain, setting 2-26
multiple-character patterns 1-8
Multiple Spanning Tree
N
native VLAN
controlling tagging of traffic 2-818
displaying ports eligible for native tagging 2-715
displaying ports eligible for tagging 2-715
enabling tagging on 802.1Q trunk ports 2-854
specifing the tagging of traffic 2-819
NetFlow
enabling NetFlow statistics 2-261
including infer fields in routing statistics 2-261
next-hop
displaying CEF VLAN information 2-549
no form of a command, using 1-6
NVRAM
debugging NVRAM activities 2-115
O
open access on a port, enabling 2-28
output
pattern searches 1-7
P
packet forwarding
prevent unknown packets 2-797
packet memory failure
direct switch action upon detection 2-143
packet memory test
bootup, displaying results 2-486, 2-488
ongoing, displaying results 2-490
PACL
access-group mode 2-6
paging prompt
PAgP
clearing port channel information 2-86
debugging PAgP activity 2-116
deselecting channeling protocol 2-56
displaying port channel information 2-645
hot standby mode
returning to defaults 2-360
selecting ports 2-360
input interface of incoming packets
learning 2-359
returning to defaults 2-359
setting channeling protocol 2-56
parentheses 1-11
password
clearing on an intelligent line module 2-67
establishing enhanced password security 2-841
setting username 2-841
PM activities
debugging 2-119
disabling debugging 2-119
PoE policing
configure on an interface 2-396
PoE policing and monitoring
displaying status 2-671
police (percent) command 2-371
police (two rates) command 2-373, 2-375
police command 2-366
policing, configure PoE 2-396
policing and monitoring status
displaying PoE 2-671
policy maps
creating 2-379
marking 2-437
See also QoS, hierarchical policies
traffic classification
defining trust states 2-832
port, dual-capable
selecting the connector 2-348
Port Aggregation Protocol
port-based authentication
displaying debug messages 2-105
displaying statistics and status 2-492
enabling 802.1X 2-161
host modes 2-154
manual control of authorization state 2-161
periodic re-authentication
enabling 2-164
re-authenticating 802.1X-enabled ports 2-163
switch-to-client frame-retransmission number 2-159
port channel
accessing 2-207
creating 2-207
displaying information 2-645
load distribution method
resetting to defaults 2-381
setting 2-381
port-channel standalone-disable command 2-383
port control, changing from unidirectional or bidirectional 2-19
port-control value, configuring 2-32
port range
executing 2-208
port security
debugging ports security 2-120
deleting secure or specific addresses 2-87
displaying settings for an interface or switch 2-656
enabling 2-803
filter source IP and MAC addresses 2-267
setting action upon security violation 2-803
setting the rate limit for bad packets 2-803
sticky port 2-803
Port Trust Device
displaying 2-675
power efficient-ethernet auto command 2-389
power inline four-pair forced command 2-393
power inline logging global command 2-395
power status
displaying inline power 2-663
displaying power status 2-663
power supply
configuring combined and redundant power on the Catalyst 4507R 2-384
configuring inline power 2-390
configuring power consumption 2-384
displaying the SEEPROM 2-514
setting inline power state 2-388
priority command 2-400
priority-queue command 2-96
Private VLAN
privileged EXEC mode, summary 1-5
prompts
system 1-5
protocol tunneling
configuring encapsulation rate 2-301
disabling 2-296
displaying port information 2-610
enabling 2-296
setting a CoS value for Layer 2 packets 2-298
setting a drop threshold for Layer 2 packets 2-299
PVLANs
configuring isolated, primary, and community PVLANs 2-402
controlling tagging of native VLAN traffic 2-818
disabling sticky-ARP 2-264
displaying map information for VLAN SVIs 2-532
displaying PVLAN information 2-718
enabling interface configuration mode 2-798
enabling sticky-ARP 2-264
mapping VLANs to the same SVI 2-406
specifying host ports 2-798
specifying promiscuous ports 2-798
PVST+
switching between PVST and MST 2-750
Q
QoS
attaching a policy-map to an interface 2-428
automatic configuration 2-38
class maps
creating 2-61
defining the match criteria 2-339
clearing aggregate counters 2-89
configuring auto 2-38
defining a named aggregate policer 2-413
displaying aggregate policer information 2-673
displaying auto configuration 2-464
displaying class maps information 2-478
displaying configuration information 2-464
displaying configurations of policies 2-651
displaying policy map information 2-647, 2-654
displaying QoS information 2-672
displaying QoS map information 2-677
egress queue-sets
enabling the priority queue 2-96
hierarchical policies
average-rate traffic shaping on a class 2-450
bandwidth allocation for a class 2-42, 2-60
creating a service policy 2-431
marking 2-437
strict priority queueing (LLQ) 2-400
policy maps
creating 2-379
marking 2-437
trust states 2-832
setting the trust state 2-413
specifying flow-based match criteria 2-342
Supervisor Engine 6-E
setting CoS 2-439
setting DSCP 2-442
setting precedence values 2-445
setting QoS group identifiers 2-448
QoS CoS
configuring for tunneled Layer 2 protocol packets 2-298
quality of service
question command 1-1
queueing information
displaying 2-675
queue limiting
configuring packet limits 2-415
R
Rapid PVST
switching between PVST and MST 2-750
re-authenticating 802.1X-enabled ports 2-163
re-authentication
periodic 2-164
set the time 2-166
reauthentication, enabling 2-31
reboots
restoring bindings across 2-228
redundancy
accessing the main CPU 2-417
changing from active to standby supervisor engine 2-421
displaying information 2-679
displaying ISSU config-sync failure information 2-683
displaying redundancy facility information 2-679
displaying RF client list 2-679
displaying RF operational counters 2-679
displaying RF states 2-679
enabling automatic synchronization 2-41
forcing switchover to standby supervisor engine 2-421
mismatched command listing 2-419
set the mode 2-349
synchronizing the route processor configurations 2-336
remote SPAN
renew commands
ip dhcp snooping database 2-425
resetting PVLAN trunk
setting switchport to trunk 2-798
retry failed authentiation, configuring 2-22
rj45 connector, selecting the connector 2-348
ROM monitor mode
summary 1-6
Route Processor Redundancy
RPF
disabling IPv4 exists-only checks 2-269
enabling IPv4 exists-only checks 2-269
RPR
set the redundancy mode 2-349
RSPAN
converting VLAN to RSPAN VLAN 2-424
displaying list 2-720
S
saving configuration changes 1-11
secure address, configuring 2-384
secure ports, limitations 2-804
server (AAA) alive actions, configuring 2-22
server (AAA) dead actions, configuring 2-22
service-policy command (policy-map class) 2-431
session classification, defining 2-26
set the redundancy mode 2-349
sfp connector, selecting the connector 2-348
shape command 2-450
show authentication interface command 2-459
show authentication registration command 2-459
show authentication sessions command 2-459
show commands
filtering parameters 1-7
searching and filtering 1-6
show platform commands 1-11
show energywise command 2-496
show lacp command 2-613
show mab command 2-616
Simple Network Management Protocol
single-character patterns
special characters 1-7
single-host, setting 2-26
slaveslot0
displaying information on the standby supervisor 2-690
slot0
displaying information about the system 2-692
SNMP
debugging spanning tree activities 2-122
ifIndex persistence
clearing SNMP ifIndex commands 2-727
compress SNMP ifIndex table format 2-736
disabling globally 2-735
disabling on an interface 2-729
enabling globally 2-735
enabling on an interface 2-729
traps
configuring to send when storm occurs 2-776
mac-notification 2-737
adding 1
snmp-server enable traps command 2-731
SPAN commands
configuring a SPAN session to monitor 2-351
displaying SPAN session information 2-703, 2-778
SPAN enhancements
displaying status 2-643
Spanning Tree Protocol
SPAN session
displaying session information 2-643
filter ACLs 2-351
specify encap type 2-351
turn off host learning based on ingress packets 2-351
special characters
anchoring, table 1-10
SSO 2-349
standard desktop
enabling Cisco-recommended features 2-325
standard desktop and Cisco IP phone
enabling Cisco-recommended features 2-327
sticky address, configuring 2-385
sticky-ARP
disabling on PVLANs 2-264
enabling on PVLANs 2-264
sticky port
deleting 2-87
enabling security 2-803
storm control
configuring for action when storm occurs 2-776
disabling suppression mode 2-503
displaying settings 2-702
enabling 2-776
enabling broadcast 2-776, 2-778
enabling multicast 2-776, 2-778
enabling suppression mode 2-503
enabling timer to recover from error disable 2-186
multicast, enabling 2-778
setting high and low levels 2-776
setting suppression level 2-503
STP
configuring link type for a port 2-748
configuring tunneling encapsulation rate 2-301
debugging all activities 2-122
debugging spanning tree activities 2-122
debugging spanning tree BackboneFast events 2-124
debugging spanning tree UplinkFast 2-127
detecting misconfiguration 2-745
displaying active interfaces only 2-694
displaying BackboneFast status 2-694
displaying bridge status and configuration 2-694
displaying spanning tree debug messages 2-122
displaying summary of interface information 2-694
enabling BPDU filtering by default on all PortFast ports 2-764
enabling BPDU filtering on an interface 2-741
enabling BPDU guard by default on all PortFast ports 2-766
enabling BPDU guard on an interface 2-743
enabling extended system ID 2-746
enabling loop guard as a default on all ports 2-749
enabling PortFast by default on all access ports 2-767
enabling PortFast mode 2-762
enabling protocol tunneling for 2-296
enabling root guard 2-747
enabling spanning tree BackboneFast 2-740
enabling spanning tree on a per VLAN basis 2-771
enabling spanning tree UplinkFast 2-769
setting an interface priority 2-768
setting drop threshold for 2-299
setting pathcost 2-744
setting the default pathcost calculation method 2-761
subinterface configuration mode, summary 1-6
SVI
creating a Layer 3 interface on a VLAN 2-210
switching characteristics
excluding from link-up calculation 2-795
modifying 2-795
returning to interfaces
capture function 2-795
switchport 2-819
switchport interfaces
displaying status of Layer 3 port 2-535
displaying status of native VLAN tagging 2-535
switch shim
debugging 2-125
disabling debugging 2-125
switch to router connection
enabling Cisco-recommended features 2-329
switch to switch connection
enabling Cisco-recommended features 2-331
switch virtual interface
sw-vlan 2-128
system prompts 1-5
T
Tab key
command completion 1-1
tables
characters with special meaning 1-7
mac access-list extended subcommands 2-313
multipliers 1-9
relationship between duplex and speed commands 2-774
show cable-diagnostics tdr command output fields 2-469
show cdp neighbors detail field descriptions 2-477
show cdp neighbors field descriptions 2-476
show ip dhcp snooping command output 2-460, 2-616
show ip interface field descriptions 2-570
show policy-map control-plane field descriptions 2-650
show vlan command output fields 2-719
show vtp command output fields 2-724
special characters 1-9
special characters used for anchoring 1-10
speed command options 2-342, 2-774
valid interface types 2-205
TAC
displaying information useful to TAC 2-705
TCAM
debugging spanning tree activities 2-122
TDR
displaying cable diagnostic test results 2-468
test condition of copper cables 2-824
temperature readings
displaying information 2-500
timer information 2-504
traffic shaping
enable on an interface 2-452
trunk encapsulation
setting format 2-819
trunk interfaces
displaying trunk interfaces information 2-542
trust state
setting 2-218
tunnel ports
displaying information about Layer 2 protocol 2-610
TX queues
allocating bandwidth 2-834
returning to default values 2-834
setting priority to high 2-834
specifying burst size 2-834
specifying traffic rate 2-834
U
UDLD
displaying administrative and operational status 2-707
enabling by default on all fiber interfaces 2-836
enabling on an individual interface 2-838
preventing a fiber interface from being enabled 2-838
resetting all shutdown ports 2-840
setting the message timer 2-836
unicast
counters 2-95
Unidirectional Link Detection
unidirection port control, changing from bidirectional 2-19
unknown multicast traffic, preventing 2-797
unknown unicast traffic, preventing 2-797
user EXEC mode, summary 1-5
username
setting password and privilege level 2-841
V
VACLs
access-group mode 2-6
applying VLAN access maps 2-856
displaying VLAN access map information 2-713
specifying an action in a VLAN access map 2-13
specifying the match clause for a VLAN access-map sequence 2-337
using a VLAN filter 2-856
VLAN
applying an ARP ACL 2-212
configuring 2-845
configuring service policies 2-850
converting to RSPAN VLAN 2-424
displaying CEF information 2-549
displaying CEF next-hop information 2-549
displaying information on switch interfaces 2-560, 2-564
displaying information on VLAN switch interfaces 2-567
displaying information sorted by group IP address 2-560, 2-564
displaying IP address and version information 2-560, 2-564
displaying Layer 2 VLAN information 2-709
displaying statistical information 2-641
displaying VLAN information 2-711
enabling dynamic ARP inspection 2-221
enabling Explicit Host Tracking 2-251
enabling guest per-port 2-152
enabling guest VLAN supplicant 2-145, 2-153
entering VLAN configuration mode 2-850, 2-852
native frames
enabling tagging on all 802.1Q trunk ports 2-854
pruning the list for VTP 2-819
setting the list of allowed 2-819
VLAN Access Control Lists
VLAN access map
VLAN database
resetting 2-426
VLAN debugging
limiting output 2-103
VLAN link-up calculation
excluding a switch port 2-795
including a switch port 2-795
VLAN manager
debugging 2-128
disabling debugging 2-128
IOS file system error tests
debugging 2-129
disabling debugging 2-129
VLAN Query Protocol
VLAN query protocol (VQPC)
debugging 2-135
VLANs
clearing
counters 2-91
clearing hardware logic 2-69
configuring
internal allocation scheme 2-857
displaying
internal VLAN allocation information 2-716
RSPAN VLANs 2-720
entering VLAN configuration mode 2-852
VMPS
configuring servers 2-861
reconfirming dynamic VLAN assignments 2-135, 2-859
voice VLANs
enabling 2-791
VoIP
configuring auto-QoS 2-38
VQP
per-server retry count 2-860
reconfirming dynamic VLAN assignments 2-135, 2-859
VTP
configuring the administrative domain name 2-865
configuring the device in VTP client mode 2-864
configuring the device in VTP server mode 2-868
configuring the device in VTP transparent mode 2-869
configuring tunnel encapsulation rate 2-301
creating a VTP domain password 2-866
displaying domain information 2-723
displaying statistics information 2-723
enabling protocol tunneling for 2-296
enabling pruning in the VLAN database 2-867
enabling VTP version 2 mode 2-870
modifying the VTP configuration storage file name 2-863
set drop threshold for 2-299
VTP protocol code
activating debug messages 2-132
deactivating debug messages 2-132
W
Webauth fallback, enabling 2-25
Feedback