- Quick Links to Catalyst 4500 Series Switch Cisco IOS Commands
- Index
- Preface
- Command-Line Interface
- aaa accounting dot1x default start-stop group radius through instance
- interface port-channel through shape
- show access-group mode interface through show vtp
- snmp ifindex clear through vtp v2-mode
- Acronyms and Abbreviations
Index
Symbols
$ matches the end of a string 1-7
( ) in commands 1-11
* matches 0 or more sequences of a pattern 1-7
+ matches 1 or more sequences of a pattern 1-7
. matches any single character 1-7
? command 1-1
? matches 0 or 1 occurrence of a pattern 1-7
^ matches the beginning of a string 1-7
_ matches a comma (,), left brace ({), left parenthesis 1-7
" 1-10
Numerics
10-Gigabit Ethernet uplink
selecting 2-151
802.1Q trunk ports and native VLANs 2-778
802.1Q tunnel ports
configuring 2-720
802.1S Multiple Spanning Tree
802.1X
configuring for multiple hosts 2-119
configuring for single host 2-119
configuring multiple domains 2-119
disabling port control 2-112
enabling port control 2-112
802.1X Critical Authentication
disabling on a port 2-113
disabling on a VLAN 2-116
EAPOL
disabling send success packets 2-114
enabling send success packets 2-114
enabling on a port 2-113
enabling on a VLAN 2-116
returning delay time to default setting 2-115
setting delay time on a port 2-115
802.1X Port Based Authentication
debugging 802.1X Port Based Authentication 2-74
displaying port based authentication 2-439
enabling accounting for authentication sessions 2-4
enabling authentication on the system 2-130
enabling guest VLAN 2-117
enabling guest VLAN supplicant 2-110, 2-118
enabling manual control of auth state 2-126
enabling periodic re-authentication of the client 2-129
initializing re-authentication of dot1x ports 2-128
initializing state machines 2-121
receive session termination message upon reboot 2-5
setting maximum number for EAP requests 2-124
setting the reauthentication timer 2-131
A
abbreviating commands
context-sensitive help 1-1
Access Gateway Module
connecting to a module 2-17
connecting to a remote module 2-380
connecting to a specific remote module 2-392
access-group
displaying mac interface 2-560
show mode interface 2-411
access groups
IP 2-6
access lists
clearing an access template 2-39
defining ARP 2-16
displaying ARP information 2-414
See also ACLs, MAC ACLs, and VACLs
access maps
applying with VLAN filter 2-780
ACLs
access-group mode 2-6
balancing hardware regions 2-12
capturing control packets 2-8
determining ACL hardware programming 2-10
disabling hardware statistics 2-146
displaying mac access-group interface 2-560
enabling hardware statisctics 2-146
using ACL naming conventions for MAC ACLs 2-258
action clause
specifying drop or forward action in a VACL 2-13
addresses, configuring a maximum 2-335
adjacency
debugging the adjacency table 2-67
disabling the debug facility 2-67
displaying information about the adjacency table 2-412
displaying IPC table entries 2-67
aggregate policer
displaying information 2-612
aging time
displaying MAC address aging time 2-563
MAC address table 2-261
alarms
displaying operational status 2-443
alternation
description 1-10
anchoring
description 1-10
ARP
access list, displaying detailed information 2-414
defining access-lists 2-16
ARP inspection
enforce certain types of checking 2-168
ARP packet
deny based on DHCP bindings 2-106
permit based on DHCP bindings 2-308
authentication
setting username 2-765
using an MD5-type encryption method 2-765
verifying MD5 signature 2-767
verifying the checksum for Flash memory 2-767
auth fail VLAN
enable on a port 2-111
set max number of attempts 2-110
authorization state
enabling manual control 2-126
authorization state of a controlled port 2-126
automatic installation
displaying status 2-415
automatic medium-dependent interface crossover
Auto-MDIX
disabling 2-290
enabling 2-290
auto-negotiate interface speed
example 2-709
auto-QoS
configuring for VoIP 2-18
displaying configuration 2-416
B
baby giants
displaying the system MTU setting 2-643
setting the maximum Layer 2 payload size 2-745
BackboneFast
displaying debugging messages 2-93
displaying spanning tree status 2-633
enabling debugging 2-93
bandwidth command 2-22
bindings
store for DHCP snooping 2-180
BOOT environment variable
displaying information 2-419
bootflash
displaying information 2-417
BPDUs
debugging spanning tree activities 2-91
bridge protocol data units
broadcast
counters 2-64
broadcast suppression level
C
cable diagnostics
TDR
displaying test results 2-420
testing conditions of copper cables 2-747
Catalyst 4507R 2-331
CDP
configuring tunneling encapsulation rate 2-248
displaying
neighbor information 2-422
enabling protocol tunneling for 2-243
set drop threshold for 2-246
CEF
displaying next-hop information 2-492
displaying VLAN configuration information 2-492
cisco-desktop
macro apply 2-268
Cisco Express Forwarding
cisco-phone
macro apply 2-270
cisco-router
macro apply 2-272
cisco-switch
macro apply 2-274
class maps
creating 2-32
defining the match criteria 2-283
clear commands
clearing Gigabit Ethernet interfaces 2-37
clearing IGMP group cache entries 2-46
clearing interface counters 2-34
clearing IP access lists 2-39, 2-40
clearing IP ARP inspection statistics VLAN 2-41
clearing IP DHCP snooping database statistics 2-45
clearing MFIB counters and routes 2-49
clearing MFIB fastdrop entries 2-50
clearing PAgP channel information 2-55
clearing QoS aggregate counters 2-58
clearing VLAN interfaces 2-38
CLI string search
anchoring 1-10
expressions 1-7
filtering 1-6
multiple-character patterns 1-8
multipliers 1-9
parentheses for recall 1-11
searching outputs 1-6
single-character patterns 1-7
using 1-6
command modes
accessing privileged EXEC mode 1-5
exiting 1-5
understanding user EXEC and configuration modes 1-5
condition interface
debugging interface-related activities 2-69
condition vlan
debugging VLAN output 2-72
configuration, saving 1-11
configuring
root as secondary 2-693
configuring a SPAN session to monitor
limit SPAN source traffic 2-295
configuring forward delay 2-689
configuring root as primary 2-693
CoPP
attaching
policy map to control plane 2-390
displaying
policy-map class information 2-589
entering configuration mode 2-62
removing
service policy from control plane 2-390
CoS
assigning to Layer 2 protocol packets 2-245
CoS QoS default
defining value on an interface 2-356
Cost of Service
counters
clearing interface counters 2-34
D
DAI
clear statistics 2-41
DBL
displaying qos dbl 2-613
enabling DBL globally on the switch 2-357
debug commands
debugging backup events 2-68
debugging DHCP snooping events 2-79
debugging DHCP snooping messages 2-80
debugging EtherChannel/PAgP/shim 2-75
debugging IPC activity 2-78
debugging IP DHCP snooping security messages 2-81
debugging NVRAM activities 2-84
debugging PAgP activities 2-85
debugging port manager activities 2-88
debugging spanning tree activities 2-91
debugging spanning tree backbonefast 2-93
debugging spanning tree UplinkFast 2-96
debugging supervisor redundancy 2-90
debugging VLAN manager activities 2-97
displaying monitor activity 2-83
displaying the adjacency table 2-67
enabling debug dot1x 2-74
enabling debugging messages for ISL VLAN IDs 2-100
enabling debugging messages for VTP 2-101
enabling debugging of UDLD activity 2-102
enabling switch shim debugging 2-94
enabling VLAN manager file system error tests 2-98
limiting debugging output for VLANs 2-72
limiting interface debugging output 2-69
limiting output for debugging standby state changes 2-70
shortcut to the debug condition interface 2-77
debugging
activity monitoring 2-83
DHCP snooping events 2-79
DHCP snooping packets 2-80
IPC activities 2-78
IP DHCP snooping security packets 2-81
NVRAM activities 2-84
PAgP activities 2-85
PAgP shim 2-75
PM activities 2-88
spanning tree BackboneFast events 2-93
spanning tree switch shim 2-94
spanning tree UplinkFast events 2-96
VLAN manager activities 2-97
VLAN manager IOS file system error tests 2-98
VTP protocol debug messages 2-101
debug spanning tree switch 2-94
debug sw-vlan vtp 2-101
default CoS value 2-356
default form of a command, using 1-6
defining egress DSCP-to-CoS mapping 2-363
DHCP
clearing database statistics 2-45
DHCP bindings
configuring bindings 2-178
deny ARP packet based on matches 2-106
permit ARP packet based on matches 2-308
DHCP snooping
clearing binding entries 2-42
clearing database 2-44
displaying binding table 2-495
displaying configuration information 2-493
displaying status of DHCP database 2-498
displaying status of error detection 2-446
enabling DHCP globally 2-177
enabling IP source guard 2-217
enabling on a VLAN 2-187
enabling option 82 2-182, 2-184
enabling option-82 2-189
enabling rate limiting on an interface 2-185
enabling trust on an interface 2-186
establishing binding configuration 2-178
renew binding database 2-382
store generated bindings 2-180
diagnostic test
bootup packet memory 2-433
displaying attributes 2-427
display module-based results 2-429
running 2-109
show results for TDR 2-420
testing conditions of copper cables 2-747
displaying error disable recovery 2-447
displaying inline power status 2-604
displaying monitoring activity 2-83
displaying SEEPROM information
GBIC 2-457
displaying SPAN session information 2-642, 2-711
document conventions 1-xviii
document organization 1-xvii
DoS
CoPP
attaching policy map to control plane 2-390
displaying policy-map class information 2-589
entering configuration mode 2-62
removing service policy from control plane 2-390
entering
CoPP configuration mode 2-62
DOS attack
protecting system's resources 2-163
drop threshold, Layer 2 protocol tunneling 2-246
DSCP rewrite for IP packets
enable 2-367
dual-capable port
selecting a connector 2-292
duplex mode
configuring autonegotiation on an interface 2-133
configuring full duplex on an interface 2-133
configuring half duplex on an interface 2-133
dynamic ARP inspection
preventing 2-163
Dynamic Buffer Limiting
Dynamic Host Configuration Protocol
E
EAP
restarting authentication process 2-124
EIGRP (Enhanced IGRP)
filters
routing updates, preventing 2-305
enabling
debugging for UDLD 2-102
voice VLANs 2-713
environmental
alarms 2-443
displaying information 2-443
status 2-443
temperature 2-443
erase a file 2-135
error disable detection
enabling error disable detection 2-138
error-disabled state
displaying 2-476
error disable recovery
configuring recovery mechanism variables 2-140
displaying recovery timer information 2-447
enabling ARP inspection timeout 2-140
specifying recovery cause 2-140
EtherChannel
assigning interfaces to EtherChannel groups 2-25
debugging EtherChannel 2-75
debugging PAgP shim 2-75
debugging spanning tree activities 2-91
displaying information for a channel 2-449
removing interfaces from EtherChannel groups 2-25
EtherChannel guard
detecting STP misconfiguration 2-679
Explicit Host Tracking
clearing the database 2-48
enabling per-VLAN 2-201
expressions
matching multiple expression occurrences 1-9
multiple-character patterns 1-8
multiplying pattern occurrence 1-11
single-character patterns 1-7
Extensible Authentication Protocol
F
field replaceable unit (FRU)
displaying status information 2-443
filters
EIGRP
routing updates, preventing 2-305
Flash memory file system
displaying file system information 2-417
verifying checksum 2-767
flow control
configuring a gigabit interface for pause frames 2-143
displaying per-interface statistics for flow control 2-453
G
GBIC
displaying SEEPROM information 2-457
Gigabit Ethernet interface
clearing the hardware logic 2-37
Gigabit Ethernet uplink
selecting 2-151
global configuration mode
using 1-5
H
hardware module
resetting a module by toggling the power 2-148
hardware statistics
disabling 2-146
enabling 2-146
hardware uplink
changing the mode 2-149
selecting the mode 2-151
helper addresses, IP 2-513
hot standby protocol
debugging 2-70
disabling debugging 2-70
limiting output 2-70
I
IDPROMs
displaying SEEPROM information
chassis 2-457
clock module 2-457
fan trays 2-457
module 2-457
mux buffer 2-457
power supplies 2-457
supervisor engine 2-457
ifIndex persistence
clearing SNMP ifIndex commands 2-665
compress SNMP ifIndex table format 2-672
disabling globally 2-671
disabling on an interface 2-667
enabling globally 2-671
enabling on an interface 2-667
IGMP
applying filters for host joining on Layer 2 interfaces 2-191
clearing IGMP group cache entries 2-46
configuring frequency for IGMP host-query messages 2-194
creating an IGMP profile 2-193
displaying IGMP interface configuration information 2-500
displaying profiles 2-502
setting maximum group numbers 2-192
IGMP profiles
displaying 2-502
IGMP snooping
clearing the EHT database 2-48
configuring a Layer 2 interface as a group member 2-207
configuring a Layer 2 interface as a multicast router 2-205
configuring a static VLAN interface 2-207
displaying multicast information 2-509
displaying VLAN information 2-503, 2-507, 2-510
enabling 2-196
enabling immediate-leave processing 2-203
enabling on a VLAN 2-200
enabling per-VLAN Explicit Host Tracking 2-201
informs
enabling 2-669
inline power
displaying inline power status 2-604
In Service Software Upgrade
inspection log
clearing log buffer 2-40
interface
displaying suppressed multicast bytes 2-470
interface capabilities
displaying 2-466
interface configuration mode
summary 1-5
interface link
display cable disconnect time 2-473
interfaces
configuring dot1q tunnel ports 2-720
creating an interface-range macro 2-105
debugging output of interface related activities 2-69
displaying description 2-472
displaying error-disabled state 2-476
displaying information when tunneling is enabled 2-554
displaying status 2-472
displaying traffic for a specific interface 2-463
entering interface configuration mode 2-155
executing a command on multiple ports in a range 2-158
selecting an interface to configure 2-155
setting a CoS value for Layer 2 packets 2-245
setting drop threshold for Layer 2 packets 2-246
setting the interface type 2-720
interface speed
configuring interface speed 2-707
interface transceiver
displaying diagnostic data 2-480
internal VLAN allocation
configuring 2-781
default setting 2-781
displaying allocation information 2-655
Internet Group Management Protocol
IP ARP
applying ARP ACL to VLAN 2-161
clearing inspection statistics 2-41
clearing status of log buffer 2-40
controlling packet logging 2-172
enabling dynamic inspection 2-170
limit rate of incoming requests 2-163
set per-port config trust state 2-167
showing status of dynamic ARP inspection 2-487
showing status of log buffer 2-490
IPC
debugging IPC activities 2-78
IP DHCP Snooping
IP header validation
disabling 2-216
enabling 2-216
IP interfaces
displaying usability status 2-512
IP multicast
displaying multicast routing table information 2-518
IP packets
enable DSCP rewrite 2-367
IP phone and standard desktop
enabling Cisco-recommended features 2-270
IP Port Security
enabling 2-217
IP source binding
adding or deleting 2-213
displaying bindingstagging 2-523
IP source guard
debugging messages 2-81
displaying configuration and filters 2-525
enabling on DHCP snooping 2-217
IPv6 MLD
configuring queries 2-223, 2-225
configuring snooping last-listener-query-intervals 2-225
configuring snooping listener-message-suppression 2-227
configuring snooping robustness-variables 2-228
configuring tcn topology change notifications 2-230
counting snooping last-listener-queries 2-223
displaying information 2-530
displaying ports for a switch or VLAN 2-532
displaying querier information 2-533
enabling snooping 2-221
enabling snooping on a VLAN 2-231
ISSU
canceling process 2-233
configuring rollback timer 2-242
displaying capability 2-535
displaying client information 2-537
displaying compatibility matrix 2-539
displaying endpoint information 2-544
displaying entities 2-545
displaying FSM session 2-546
displaying messages 2-547
displaying negotiated 2-549
displaying rollback-timer 2-550
displaying session information 2-551
displaying software version 2-552
displaying state 2-552
forcing switchover to standby supervisor engine 2-241
loading new image 2-237
starting process 2-239
stopping rollback timer 2-235
J
Jumbo frames
enabling jumbo frames 2-301
L
LACP
deselecting channeling protocol 2-27
enabling LACP on an interface 2-27
setting channeling protocol 2-27
Layer 2
displaying ACL configuration 2-560
Layer 2 interface type
specifying a nontrunking, nontagged single VLAN interface 2-720
specifying a trunking VLAN interface 2-720
Layer 2 protocol ports
displaying 2-554
Layer 2 protocol tunneling error recovery 2-248
Layer 2 switching
enabling voice VLANs 2-713
modifying switching characteristics 2-713
Layer 2 traceroute
IP addresses 2-752
Layer 3 switching
displaying information about an adjacency table 2-412
displaying port status 2-478
displaying status of native VLAN tagging 2-478
link-status event messages
disabling
enabling
log buffer
show status 2-490
logging
controlling IP ARP packets 2-172
M
MAC Access Control Lists
MAC ACLs
defining extended MAC access list 2-258
displaying MAC ACL information 2-652
naming an ACL 2-258
MAC address filtering
configuring 2-267
disabling 2-267
enabling 2-267
MAC address table
adding static entries 2-279
clearing dynamic entries 2-52, 2-54
configuring aging time 2-261
displaying dynamic table entry information 2-567
displaying entry count 2-565
displaying information 2-561
displaying interface-based information 2-569
displaying multicast information 2-571
displaying notification information 2-573
displaying protocol-based information 2-575
displaying static table entry information 2-577
displaying the MAC address aging time 2-563
displaying VLAN-based information 2-580
enabling authentication bypass 2-122
enabling notifications 2-265
learning in the protocol buckets 2-262
removing static entries 2-279
MAC address tables
adding static entries 2-267
deleting secure or specific addresses 2-56
disabling IGMP snooping on static MAC addresses 2-267
removing static entries 2-267
mac-address-table static 2-267
MAC address unicast filtering
dropping unicast traffic 2-267
macro
displaying descriptions 2-278
macro keywords
help strings 2-2
macros
adding a global description 2-278
cisco global 2-276
system-cpp 2-277
mapping secondary VLANs to MST instance 2-346
mapping VLAN(s) to an MST instance 2-153
match (class-map configuration) command 2-283
maximum transmission unit (MTU)
displaying the system MTU setting 2-643
setting the maximum Layer 2 payload size 2-745
MD5
verifying MD5 signature 2-767
message digest 5
MFIB
clearing ip mfib counters 2-49
clearing ip mfib fastdrop 2-50
displaying all active MFIB routes 2-515
displaying MFIB fastdrop table entries 2-517
enabling IP MFIB fastdrops 2-210
MLD
configuring snooping last-listener-query-intervals 2-225
configuring snooping listener-message-suppression 2-227
configuring snooping robustness-variables 2-228
configuring topology change notifications 2-230
counting snooping last-listener-queries 2-223
enabling snooping 2-221
enabling snooping on a VLAN 2-231
MLD snooping
displaying 2-533
modes
access-group 2-6
show access-group interface 2-411
switching between PVST+, MST, and Rapid PVST 2-684
module password clearing 2-36
module reset
resetting a module by toggling the power 2-148
--More-- prompt
filter 1-6
search 1-7
MST
designating the primary and secondary root 2-693
displaying MST protocol information 2-638
displaying region configuration information 2-638
displaying spanning tree information 2-638
entering MST configuration submode 2-687
setting configuration revision number 2-384
setting path cost and port priority for instances 2-685
setting the forward delay timer for all instances 2-689
setting the hello-time delay timer for all instances 2-690
setting the max-age timer for all instances 2-691
setting the MST region name 2-302
specifying the maximum number of hops 2-692
switching between PVST+ and Rapid PVST 2-684
using the MST configuration submode revision command 2-384
using the submode name command 2-302
MTU
displaying global MTU settings 2-643
Multicase Listener Discovery
multicast
counters 2-64
enabling storm control 2-712
multicast/unicast packets
prevent forwarding 2-719
Multicast Forwarding Information Base
multiple-character patterns 1-8
Multiple Spanning Tree
N
native VLAN
controlling tagging of traffic 2-740
displaying ports eligible for native tagging 2-654
displaying ports eligible for tagging 2-654
enabling tagging on 802.1Q trunk ports 2-778
specifing the tagging of traffic 2-741
NetFlow
enabling NetFlow statistics 2-211
including infer fields in routing statistics 2-211
next-hop
displaying CEF VLAN information 2-492
no form of a command, using 1-6
NVRAM
debugging NVRAM activities 2-84
O
output
pattern searches 1-7
P
packet forwarding
prevent unknown packets 2-719
packet memory failure
direct switch action upon detection 2-108
packet memory test
bootup, displaying results 2-433, 2-435
ongoing, displaying results 2-437
PACL
access-group mode 2-6
paging prompt
PAgP
clearing port channel information 2-55
debugging PAgP activity 2-85
deselecting channeling protocol 2-27
displaying port channel information 2-586
hot standby mode
returning to defaults 2-304
selecting ports 2-304
input interface of incoming packets
learning 2-303
returning to defaults 2-303
setting channeling protocol 2-27
parentheses 1-11
password
clearing on an intelligent line module 2-36
establishing enhanced password security 2-765
setting username 2-765
PBR
redistributing route maps 1-xviii
PM activities
debugging 2-88
disabling debugging 2-88
police (percent) command 2-315
police (two rates) command 2-317, 2-319
police command 2-310
Policy Based Routing
policy maps
creating 2-323
marking 2-394
See also QoS, hierarchical policies
traffic classification
defining trust states 2-755
port, dual-capable
selecting the connector 2-292
Port Aggregation Protocol
port-based authentication
displaying debug messages 2-74
displaying statistics and status 2-439
enabling 802.1X 2-126
host modes 2-119
manual control of authorization state 2-126
periodic re-authentication
enabling 2-129
re-authenticating 802.1X-enabled ports 2-128
switch-to-client frame-retransmission number 2-124
port channel
accessing 2-157
creating 2-157
displaying information 2-586
load distribution method
resetting to defaults 2-325
setting 2-325
port range
executing 2-158
port security
debugging ports security 2-89
deleting secure or specific addresses 2-56
displaying settings for an interface or switch 2-597
enabling 2-725
filter source IP and MAC addresses 2-217
setting action upon security violation 2-725
setting the rate limit for bad packets 2-725
sticky port 2-725
Port Trust Device
displaying 2-614
power status
displaying inline power 2-604
displaying power status 2-604
power supply
configuring combined and redundant power on the Catalyst 4507R 2-331
configuring inline power 2-328
configuring power consumption 2-330
displaying the SEEPROM 2-457
setting inline power state 2-327
priority command 2-337
priority-queue command 2-65
Private VLAN
privileged EXEC mode, summary 1-5
prompts
system 1-5
protocol tunneling
configuring encapsulation rate 2-248
disabling 2-243
displaying port information 2-554
enabling 2-243
setting a CoS value for Layer 2 packets 2-245
setting a drop threshold for Layer 2 packets 2-246
PVLANs
configuring isolated, primary, and community PVLANs 2-339
controlling tagging of native VLAN traffic 2-740
disabling sticky-ARP 2-214
displaying map information for VLAN SVIs 2-475
displaying PVLAN information 2-657
enabling interface configuration mode 2-720
enabling sticky-ARP 2-214
mapping VLANs to the same SVI 2-343
specifying host ports 2-720
specifying promiscuous ports 2-720
PVST+
switching between PVST and MST 2-684
Q
QoS
account Layer 2 encapsulation 2-349
attaching a policy-map to an interface 2-385
automatic configuration 2-18
class maps
creating 2-32
defining the match criteria 2-283
clearing aggregate counters 2-58
configuring auto 2-18
defining a named aggregate policer 2-351
defining default CoS value 2-356
defining ingress CoS-to-DSCP mapping 2-361
displaying aggregate policer information 2-612
displaying auto configuration 2-416
displaying class maps information 2-425
displaying configuration information 2-416
displaying configurations of policies 2-592
displaying policy map information 2-588, 2-595
displaying QoS information 2-611
displaying QoS map information 2-616
egress queue-sets
enabling the priority queue 2-65
enabling global configuration mode 2-347
enabling on control packets 2-354
enabling per-VLAN QoS for a Layer 2 interface 2-370
enabling QoS on an interface 2-348
hierarchical policies
average-rate traffic shaping on a class 2-407
bandwidth allocation for a class 2-22, 2-31
creating a service policy 2-388
marking 2-394
strict priority queueing (LLQ) 2-337
mapping DSCP values to transmit queues 2-363
mapping egress DSCP-to-CoS 2-363
mapping the DSCP-to-CoS value 2-363
policy maps
creating 2-323
marking 2-394
trust states 2-755
setting the mapping of policed DSCP values 2-365
setting the trust state 2-368
specifying flow-based match criteria 2-286
Supervisor Engine 6-E
setting CoS 2-396
setting DSCP 2-399
setting precedence values 2-402
setting QoS group identifiers 2-405
QoS CoS
configuring for tunneled Layer 2 protocol packets 2-245
defining default CoS value 2-356
qos dbl 2-357
quality of service
question command 1-1
queueing information
displaying 2-614
queue limiting
configuring packet limits 2-372
R
Rapid PVST
switching between PVST and MST 2-684
re-authenticating 802.1X-enabled ports 2-128
re-authentication
periodic 2-129
set the time 2-131
reboots
restoring bindings across 2-178
redundancy
accessing the main CPU 2-374
changing from active to standby supervisor engine 2-378
displaying information 2-618
displaying ISSU config-sync failure information 2-622
displaying redundancy facility information 2-618
displaying RF client list 2-618
displaying RF operational counters 2-618
displaying RF states 2-618
enabling automatic synchronization 2-21
forcing switchover to standby supervisor engine 2-378
mismatched command listing 2-376
set the mode 2-293
synchronizing the route processor configurations 2-279
related documentation 1-xvii
remote SPAN
renew commands
ip dhcp snooping database 2-382
resetting PVLAN trunk
setting switchport to trunk 2-720
rj45 connector, selecting the connector 2-292
ROM monitor mode
summary 1-6
Route Processor Redundancy
RPF
disabling IPv4 exists-only checks 2-219
enabling IPv4 exists-only checks 2-219
RPR
set the redundancy mode 2-293
RSPAN
converting VLAN to RSPAN VLAN 2-381
displaying list 2-659
S
saving configuration changes 1-11
secure address, configuring 2-333
secure ports, limitations 2-726
service-policy command (policy-map class) 2-388
set the redundancy mode 2-293
sfp connector, selecting the connector 2-292
shape command 2-407
show commands
filtering parameters 1-7
searching and filtering 1-6
show platform commands 1-11
Simple Network Management Protocol
single-character patterns
special characters 1-7
slaveslot0
displaying information on the standby supervisor 2-629
slot0
displaying information about the system 2-631
SNMP
debugging spanning tree activities 2-91
ifIndex persistence
clearing SNMP ifIndex commands 2-665
compress SNMP ifIndex table format 2-672
disabling globally 2-671
disabling on an interface 2-667
enabling globally 2-671
enabling on an interface 2-667
informs
disabling 2-669
enabling 2-669
traps
configuring to send when storm occurs 2-710
disabling 2-669
enabling 2-669
mac-notification
adding 1
removing 1
SPAN commands
configuring a SPAN session to monitor 2-295
displaying SPAN session information 2-642, 2-711
SPAN enhancements
displaying status 2-584
Spanning Tree Protocol
SPAN session
displaying session information 2-584
filter ACLs 2-295
specify encap type 2-295
turn off host learning based on ingress packets 2-295
special characters
anchoring, table 1-10
SSO 2-293
standard desktop
enabling Cisco-recommended features 2-268
standard desktop and Cisco IP phone
enabling Cisco-recommended features 2-270
sticky address, configuring 2-334
sticky-ARP
disabling on PVLANs 2-214
enabling on PVLANs 2-214
sticky port
deleting 2-56
enabling security 2-725
storm control
configuring for action when storm occurs 2-710
disabling suppression mode 2-446
displaying settings 2-641
enabling 2-710
enabling broadcast 2-710, 2-712
enabling multicast 2-710, 2-712
enabling suppression mode 2-446
enabling timer to recover from error disable 2-140
multicast, enabling 2-712
setting high and low levels 2-710
setting suppression level 2-446
STP
configuring link type for a port 2-682
configuring tunneling encapsulation rate 2-248
debugging all activities 2-91
debugging spanning tree activities 2-91
debugging spanning tree BackboneFast events 2-93
debugging spanning tree UplinkFast 2-96
detecting misconfiguration 2-679
displaying active interfaces only 2-633
displaying BackboneFast status 2-633
displaying bridge status and configuration 2-633
displaying spanning tree debug messages 2-91
displaying summary of interface information 2-633
enabling BPDU filtering by default on all PortFast ports 2-698
enabling BPDU filtering on an interface 2-675
enabling BPDU guard by default on all PortFast ports 2-700
enabling BPDU guard on an interface 2-677
enabling extended system ID 2-680
enabling loop guard as a default on all ports 2-683
enabling PortFast by default on all access ports 2-701
enabling PortFast mode 2-696
enabling protocol tunneling for 2-243
enabling root guard 2-681
enabling spanning tree BackboneFast 2-674
enabling spanning tree on a per VLAN basis 2-705
enabling spanning tree UplinkFast 2-703
setting an interface priority 2-702
setting drop threshold for 2-246
setting pathcost 2-678
setting the default pathcost calculation method 2-695
subinterface configuration mode, summary 1-6
SVI
creating a Layer 3 interface on a VLAN 2-160
switching characteristics
excluding from link-up calculation 2-717
modifying 2-717
returning to interfaces
capture function 2-717
switchport 2-741
switchport interfaces
displaying status of Layer 3 port 2-478
displaying status of native VLAN tagging 2-478
switch shim
debugging 2-94
disabling debugging 2-94
switch to router connection
enabling Cisco-recommended features 2-272
switch to switch connection
enabling Cisco-recommended features 2-274
switch virtual interface
sw-vlan 2-97
system prompts 1-5
T
Tab key
command completion 1-1
tables
characters with special meaning 1-7
mac access-list extended subcommands 2-258
multipliers 1-9
relationship between duplex and speed commands 2-708
show cable-diagnostics tdr command output fields 2-421
show cdp neighbors detail field descriptions 2-424
show cdp neighbors field descriptions 2-423
show ip interface field descriptions 2-513
show policy-map control-plane field descriptions 2-591
show vlan command output fields 2-658
show vtp command output fields 2-663
special characters 1-9
special characters used for anchoring 1-10
speed command options 2-286, 2-708
valid interface types 2-155
TAC
displaying information useful to TAC 2-644
TCAM
debugging spanning tree activities 2-91
TDR
displaying cable diagnostic test results 2-420
test condition of copper cables 2-747
temperature readings
displaying information 2-443
Ten-Gigabit Ethernet uplink
blocking ports on redundant Supervisor Engine 6-E 2-149
timer information 2-447
traffic shaping
enable on an interface 2-409
traps, enabling 2-669
trunk encapsulation
setting format 2-741
trunk interfaces
displaying trunk interfaces information 2-485
trust state
setting 2-167
tunnel ports
displaying information about Layer 2 protocol 2-554
TX queues
allocating bandwidth 2-757
returning to default values 2-757
setting priority to high 2-757
specifying burst size 2-757
specifying traffic rate 2-757
U
UDLD
displaying administrative and operational status 2-646
enabling by default on all fiber interfaces 2-759
enabling on an individual interface 2-761
preventing a fiber interface from being enabled 2-761
resetting all shutdown ports 2-763
setting the message timer 2-759
unicast
counters 2-64
Unidirectional Link Detection
unknown multicast traffic, preventing 2-719
unknown unicast traffic, preventing 2-719
user EXEC mode, summary 1-5
username
setting password and privilege level 2-765
V
VACLs
access-group mode 2-6
applying VLAN access maps 2-780
displaying VLAN access map information 2-652
specifying an action in a VLAN access map 2-13
specifying the match clause for a VLAN access-map sequence 2-281
using a VLAN filter 2-780
VLAN
applying an ARP ACL 2-161
configuring 2-769
configuring service policies 2-774
converting to RSPAN VLAN 2-381
displaying CEF information 2-492
displaying CEF next-hop information 2-492
displaying information on switch interfaces 2-503, 2-507
displaying information on VLAN switch interfaces 2-510
displaying information sorted by group IP address 2-503, 2-507
displaying IP address and version information 2-503, 2-507
displaying Layer 2 VLAN information 2-648
displaying statistical information 2-582
displaying VLAN information 2-650
enabling dynamic ARP inspection 2-170
enabling Explicit Host Tracking 2-201
enabling guest per-port 2-117
enabling guest VLAN supplicant 2-110, 2-118
entering VLAN configuration mode 2-774, 2-776
native frames
enabling tagging on all 802.1Q trunk ports 2-778
pruning the list for VTP 2-741
setting the list of allowed 2-741
VLAN Access Control Lists
VLAN access map
VLAN database
resetting 2-383
VLAN debugging
limiting output 2-72
VLAN link-up calculation
excluding a switch port 2-717
including a switch port 2-717
VLAN manager
debugging 2-97
disabling debugging 2-97
IOS file system error tests
debugging 2-98
disabling debugging 2-98
VLAN Query Protocol
VLAN query protocol (VQPC)
debugging 2-104
VLANs
clearing
counters 2-60
clearing hardware logic 2-38
configuring
internal allocation scheme 2-781
displaying
internal VLAN allocation information 2-655
RSPAN VLANs 2-659
entering VLAN configuration mode 2-776
VMPS
configuring servers 2-785
reconfirming dynamic VLAN assignments 2-104, 2-783
voice VLANs
enabling 2-713
VoIP
configuring auto-QoS 2-18
VQP
per-server retry count 2-784
reconfirming dynamic VLAN assignments 2-104, 2-783
VTP
configuring the administrative domain name 2-789
configuring the device in VTP client mode 2-788
configuring the device in VTP server mode 2-792
configuring the device in VTP transparent mode 2-793
configuring tunnel encapsulation rate 2-248
creating a VTP domain password 2-790
displaying domain information 2-662
displaying statistics information 2-662
enabling protocol tunneling for 2-243
enabling pruning in the VLAN database 2-791
enabling VTP version 2 mode 2-794
modifying the VTP configuration storage file name 2-787
set drop threshold for 2-246
VTP protocol code
activating debug messages 2-101
deactivating debug messages 2-101