A - B - C - D - E - F - G - H - I - J - L - M - N - P - Q - R - S - T - U - V -

Index

A

aaa accounting dot1x command     2-1

aaa authentication dot1x command     2-3

AAA methods     2-3

abort command     2-626

access control entries

See ACEs

access control lists

See ACLs

access groups

IP     2-112

MAC, displaying     2-404

access map configuration mode     2-196

access mode     2-569

access ports     2-569

ACEs     2-73, 2-258

ACLs

deny     2-71

displaying     2-300

for non-IP protocols     2-178

IP     2-112

matching     2-196

on Layer 2 interfaces     2-112

permit     2-256

action command     2-5

address aliasing     2-245

aggregate-port learner     2-250

allowed VLANs     2-589

apply command     2-626

archive download-sw command     2-7

archive tar command     2-9

archive upload-sw command     2-12

arp access-list command     2-14

audience     xvii

authorization state of controlled port     2-87

autonegotiation of duplex mode     2-96

auto qos voip command     2-16

B

BackboneFast, for STP     2-504

backup interfaces

configuring     2-565

displaying     2-356

boot (boot loader) command     A-2

boot boothlpr command     2-21

boot config-file command     2-22

boot enable-break command     2-23

boot helper command     2-24

boot helper-config file command     2-25

booting

Cisco IOS image     2-28

displaying environment variables     2-309

interrupting     2-23

manually     2-26

boot loader

accessing     A-1

booting

Cisco IOS image     A-2

helper image     2-24

directories

creating     A-15

displaying a list of     A-7

removing     A-19

boot loader (continued)

displaying

available commands     A-12

memory heap utilization     A-14

version     A-26

environment variables

described     A-20

displaying settings     A-20

location of     A-21

setting     A-20

unsetting     A-24

files

copying     A-5

deleting     A-6

displaying a list of     A-7

displaying the contents of     A-4, A-16, A-23

renaming     A-17

file system

formatting     A-10

initializing flash     A-9

running a consistency check     A-11

loading helper images     A-13

prompt     A-1

resetting the system     A-18

boot manual command     2-26

boot private-config-file command     2-27

boot system command     2-28

BPDU filtering, for spanning tree     2-505, 2-540

BPDU guard, for spanning tree     2-507, 2-540

broadcast storm control     2-558

C

candidate switches

See clusters

cat (boot loader) command     A-4

caution, description     xviii

CDP, enabling protocol tunneling for     2-165

channel-group command     2-29

channel-protocol command     2-32

Cisco Network Assistant

See Network Assistant     xviii

Cisco SoftPhone

auto-QoS configuration     2-16

trusting packets sent from     2-236

class command     2-33

class-map command     2-35

class maps

creating     2-35

defining the match criteria     2-198

displaying     2-314

class of service

See CoS

clear ip arp inspection log command     2-37

clear ip arp inspection statistics command     2-38

clear ipc command     2-40

clear ip dhcp snooping database command     2-39

clear l2protocol-tunnel counters command     2-41

clear lacp command     2-42

clear mac address-table command     2-43

clear pagp command     2-45

clear port-security command     2-46

clear spanning-tree counters command     2-48

clear spanning-tree detected-protocols command     2-49

clear vmps statistics command     2-50

clear vtp counters command     2-51

cluster commander-address command     2-52

cluster discovery hop-count command     2-54

cluster enable command     2-55

cluster holdtime command     2-57

cluster member command     2-58

cluster outside-interface command     2-60

cluster requirements     xviii

cluster run command     2-61

clusters

adding candidates     2-58

binding to HSRP group     2-62

building manually     2-58

communicating with

devices outside the cluster     2-60

members by using Telnet     2-279

debug messages, display     B-4

displaying

candidate switches     2-317

debug messages     B-4

member switches     2-319

status     2-315

hop-count limit for extended discovery     2-54

HSRP standby groups     2-62

redundancy     2-62

SNMP trap     2-495

cluster standby-group command     2-62

cluster timer command     2-64

command modes defined     1-1

commands changed in Cisco IOS Release 12.2(20)SE     1-5

command switch

See clusters

configuration, initial

See getting started guide and hardware installation guide

configuration files

password recovery disable considerations     A-1

specifying the name     2-22, 2-27

configuring multiple interfaces     2-107

config-vlan mode

commands     2-612

description     1-4

entering     2-611

summary     1-2

conventions

command     xviii

for examples     xviii

publication     xviii

text     xviii

copy (boot loader) command     A-5

CoS

assigning default value to incoming packets     2-206

assigning to Layer 2 protocol packets     2-168

overriding the incoming value     2-206

CoS-to-DSCP map     2-210

CPU ASIC statistics, displaying     2-322

D

debug auto qos command     B-2

debug cluster command     B-4

debug dot1x command     B-6

debug dtp command     B-7

debug etherchannel command     B-8

debug ilpower command     B-9

debug interface command     B-12

debug ip dhcp snooping command     B-10

debug ip igmp filter command     B-13

debug ip igmp max-groups command     B-14

debug ip igmp snooping command     B-15

debug ip verify source packet command     B-11

debug lacp command     B-16

debug mac-notification command     B-17

debug matm command     B-18

debug monitor command     B-19

debug mvrdbg command     B-20

debug nvram command     B-21

debug pagp command     B-22

debug platform acl command     B-23

debug platform configuration command     B-31

debug platform cpu-queues command     B-24

debug platform device-manager command     B-26

debug platform dot1x command     B-27

debug platform etherchannel command     B-28

debug platform fallback-bridging command     B-29

debug platform forw-tcam command     B-30

debug platform ip arp inspection command     B-32

debug platform ip dhcp command     B-33

debug platform ip igmp snooping command     B-34

debug platform ip multicast command     B-36

debug platform ip unicast command     B-38

debug platform led command     B-40

debug platform matm command     B-41

debug platform messaging application command     B-42

debug platform phy command     B-43

debug platform pm command     B-45

debug platform port-asic command     B-47

debug platform port-security command     B-48

debug platform qos-acl-tcam command     B-49

debug platform remote-commands command     B-50

debug platform resource-manager command     B-51

debug platform snmp command     B-52

debug platform span command     B-53

debug platform supervisor-asic command     B-54

debug platform sw-bridge command     B-55

debug platform tcam command     B-56

debug platform udld command     B-59

debug platform vlan command     B-60

debug pm command     B-61

debug port-security command     B-63

debug qos-manager command     B-64

debug spanning-tree backbonefast command     B-67

debug spanning-tree bpdu command     B-68

debug spanning-tree bpdu-opt command     B-69

debug spanning-tree command     B-65

debug spanning-tree mstp command     B-70

debug spanning-tree switch command     B-72

debug spanning-tree uplinkfast command     B-74

debug sw-vlan command     B-75

debug sw-vlan ifs command     B-77

debug sw-vlan notification command     B-78

debug sw-vlan vtp command     B-80

debug udld command     B-82

debug vqpc command     B-84

define interface-range command     2-65

delete (boot loader) command     A-6

delete command     2-67

deny (ARP access-list configuration) command     2-69

deny command     2-71

detect mechanism, causes     2-97

device manager requirements     xviii

DHCP snooping

accepting untrusted packets from edge switch     2-138

enabling

on a VLAN     2-143

option 82     2-136, 2-138

trust on an interface     2-141

error recovery timer     2-99

rate limiting     2-140

DHCP snooping binding database

binding file, configuring     2-134

bindings

adding     2-132

deleting     2-132

displaying     2-374

clearing database agent statistics     2-39

database agent, configuring     2-134

displaying

binding entries     2-374

database agent status     2-377

renewing     2-283

dir (boot loader) command     A-7

directories, deleting     2-67

documentation, related     xviii

document conventions     xviii

domain name, VTP     2-637, 2-641

dot1x command     2-74

dot1x control-direction command     2-76

dot1x default command     2-78

dot1x guest-vlan command     2-79

dot1x host-mode command     2-81

dot1x initialize command     2-83

dot1x max-req command     2-84, 2-85

dot1x multiple-hosts command     2-86

dot1x port-control command     2-87

dot1x re-authenticate command     2-89

dot1x re-authentication command     2-90

dot1x reauthentication command     2-91

dot1x timeout command     2-93

dropping packets, with ACL matches     2-5

drop threshold, Layer 2 protocol tunneling     2-165

DSCP-to-CoS map     2-210

DSCP-to-DSCP-mutation map     2-210

DTP     2-570

DTP flap

error detection for     2-97

error recovery timer     2-99

DTP negotiation     2-574

duplex command     2-95

dynamic-access ports

configuring     2-563

restrictions     2-564

dynamic ARP inspection

ARP ACLs

apply to a VLAN     2-117

define     2-14

deny packets     2-69

display     2-304

permit packets     2-254

clear

log buffer     2-37

statistics     2-38

display

ARP ACLs     2-304

configuration and operating state     2-369

log buffer     2-369

statistics     2-369

trust state and rate limit     2-369

enable per VLAN     2-127

error detection for     2-97

error recovery timer     2-99

log buffer

clear     2-37

configure     2-121

display     2-369

dynamic ARP inspection (continued)

rate-limit incoming ARP packets     2-119

statistics

clear     2-38

display     2-369

trusted interface state     2-123

type of packet logged     2-129

validation checks     2-125

dynamic auto VLAN membership mode     2-569

dynamic desirable VLAN membership mode     2-569

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

Dynamic Trunking Protocol

See DTP

E

EAP-request/identity frame

maximum number to send     2-85

response time before retransmitting     2-93

encapsulation methods     2-589

environment variables, displaying     2-309

errdisable detect cause command     2-97

errdisable recovery command     2-99

error conditions, displaying     2-347

error disable detection     2-97

error-disabled interfaces, displaying     2-356

EtherChannel

assigning Ethernet interface to channel group     2-29

creating port-channel logical interface     2-105

debug EtherChannel/PAgP, display     B-8

debug platform-specific events, display     B-28

displaying     2-351

enabling Layer 2 protocol tunneling for

LACP     2-166

PAgP     2-166

UDLD     2-166

interface information, displaying     2-356

EtherChannel (continued)

LACP

clearing channel-group information     2-42

debug messages, display     B-16

displaying     2-400

modes     2-29

port priority for hot-standby ports     2-169

restricting a protocol     2-32

system priority     2-171

load-distribution methods     2-266

PAgP

aggregate-port learner     2-250

clearing channel-group information     2-45

debug messages, display     B-22

displaying     2-447

error detection for     2-97

error recovery timer     2-99

learn method     2-250

modes     2-29

physical-port learner     2-250

priority of interface for transmitted traffic     2-252

Ethernet controller, internal register display     2-324

Ethernet statistics, collecting     2-285

examples, conventions for     xviii

exit command     2-626

extended discovery of candidate switches     2-54

extended-range VLANs

and allowed VLAN list     2-589

and pruning-eligible list     2-589

configuring     2-611

extended system ID for STP     2-513

F

fan information, displaying     2-343

file name, VTP     2-637

files, deleting     2-67

flash_init (boot loader) command     A-9

Flex Links

configuring     2-565

displaying     2-356

flowcontrol command     2-102

format (boot loader) command     A-10

forwarding packets, with ACL matches     2-5

forwarding results, display     C-6

frame forwarding information, displaying     C-6

front-end controller

counter and status information     C-8

fsck (boot loader) command     A-11

G

global configuration mode     1-2, 1-3

H

hardware ACL statistics     2-300

help (boot loader) command     A-12

hierarchical policy maps     2-264

hop-count limit for clusters     2-54

host connection, port configuration     2-568

host ports, private VLANs     2-572

Hot Standby Router Protocol

See HSRP

HSRP

binding HSRP group to cluster     2-62

standby group     2-62

I

IEEE 802.1Q trunk ports and native VLANs     2-628

IEEE 802.1Q tunnel ports

configuring     2-569

displaying     2-337

limitations     2-570

IEEE 802.1x

and switchport modes     2-570

violation error recovery     2-99

See also port-based authentication

IGMP filters

applying     2-144

debug messages, display     B-13

IGMP groups, setting maximum     2-145

IGMP maximum groups, debugging     B-14

IGMP profiles

creating     2-147

displaying     2-379

IGMP snooping

displaying     2-380, 2-383, 2-387

enabling     2-149

enabling the configurable-leave timer     2-152

multicast table     1-5, 2-385

querier     2-154

report suppression     2-156

images

See software images

Immediate-Leave feature, MVR     2-247

Immediate-Leave processing     2-149

initial configuration

See getting started guide and hardware installation guide

interface configuration mode     1-2, 1-4

interface port-channel command     2-105

interface range command     2-107

interface-range macros     2-65

interfaces

assigning Ethernet interface to channel group     2-29

configuring     2-95

configuring multiple     2-107

creating port-channel logical     2-105

debug messages, display     B-12

disabling     2-493

displaying the MAC address table     2-416

restarting     2-493

interface speed, configuring     2-550

interface vlan command     2-110

internal registers, displaying     2-324, 2-333

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for     2-97

error recovery timer     2-99

ip access-group command     2-112

ip address command     2-115

IP addresses, setting     2-115

IP address matching     2-196

ip arp inspection filter vlan command     2-117

ip arp inspection limit command     2-119

ip arp inspection log-buffer command     2-121

ip arp inspection trust command     2-123

ip arp inspection validate command     2-125

ip arp inspection vlan command     2-127

ip arp inspection vlan logging command     2-129

IP DHCP snooping

See DHCP snooping

ip dhcp snooping binding command     2-132

ip dhcp snooping command     2-131

ip dhcp snooping database command     2-134

ip dhcp snooping information option allow-untrusted command     2-138

ip dhcp snooping information option command     2-136

ip dhcp snooping limit rate command     2-140

ip dhcp snooping trust command     2-141

ip dhcp snooping verify command     2-142

ip dhcp snooping vlan command     2-143

ip igmp filter command     2-144

ip igmp max-groups command     2-145

ip igmp profile command     2-147

ip igmp snooping command     2-149

ip igmp snooping querier command     2-154

ip igmp snooping report-suppression command     2-156

ip igmp snooping vlan last-member-query-interval command     2-152

IP multicast addresses     2-244

IP phones

auto-QoS configuration     2-16

trusting packets sent from     2-236

IP-precedence-to-DSCP map     2-210

ip snap forwarding command     2-158

ip source binding command     2-159

IP source guard

disabling     2-163

displaying

binding entries     2-389

configuration     2-391

dynamic binding entries only     2-374

enabling     2-163

static IP source bindings     2-159

ip ssh command     2-161

IPv6 SDM template     2-286

ip verify source command     2-163

J

jumbo frames

See MTU

L

l2protocol-tunnel command     2-165

l2protocol-tunnel cos command     2-168

LACP

See EtherChannel

lacp port-priority command     2-169

lacp system-priority command     2-171

Layer 2 mode, enabling     2-561

Layer 2 protocol ports, displaying     2-397

Layer 2 protocol-tunnel

error detection for     2-97

error recovery timer     2-99

Layer 2 protocol tunnel counters     2-41

Layer 2 protocol tunneling error recovery     2-166

Layer 2 traceroute

IP addresses     2-602

MAC addresses     2-599

Layer 3 mode, enabling     2-561

line configuration mode     1-2, 1-5

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for     2-97

error recovery timer     2-99

load_helper (boot loader) command     A-13

load-distribution methods for EtherChannel     2-266

logging event power-inline-status command     2-173

logging file command     2-174

logical interface     2-105

loopback error

detection for     2-97

recovery timer     2-99

loop guard, for spanning tree     2-515, 2-519

M

mac access-group command     2-176

MAC access-groups, displaying     2-404

MAC access list configuration mode     2-178

mac access-list extended command     2-178

MAC access lists     2-71

MAC addresses

displaying

aging time     2-410

all     2-408

dynamic     2-414

notification settings     2-418

number of addresses in a VLAN     2-412

per interface     2-416

per VLAN     2-422

static     2-420

static and dynamic entries     2-406

MAC addresses (continued)

dynamic

aging time     2-180

deleting     2-43

displaying     2-414

enabling MAC address notification     2-181

matching     2-196

static

adding and removing     2-183

displaying     2-420

dropping on an interface     2-184

tables     2-408

MAC address notification, debugging     B-17

mac address-table aging-time     2-176, 2-196

mac address-table aging-time command     2-180

mac address-table notification command     2-181

mac address-table static command     2-183

mac address-table static drop command     2-184

macro apply command     2-186

macro description command     2-189

macro global command     2-190

macro global description command     2-193

macro name command     2-194

macros

adding a description     2-189

adding a global description     2-193

applying     2-190

creating     2-194

displaying     2-449

interface range     2-65, 2-107

specifying parameter values     2-190

tracing     2-190

manual

audience     xvii

purpose of     xvii

maps

QoS

defining     2-210

displaying     2-432

maps (continued)

VLAN

creating     2-623

defining     2-196

displaying     2-483

match (access-map configuration) command     2-196

match (class-map configuration) command     2-198

maximum transmission unit

See MTU

mdix auto command     2-200

member switches

See clusters

memory (boot loader) command     A-14

mkdir (boot loader) command     A-15

mls qos aggregate-policer command     2-204

mls qos command     2-202

mls qos cos command     2-206

mls qos dscp-mutation command     2-208

mls qos map command     2-210

mls qos queue-set output buffers command     2-214

mls qos queue-set output threshold command     2-216

mls qos rewrite ip dscp command     2-218

mls qos srr-queue input bandwidth command     2-220

mls qos srr-queue input buffers command     2-222

mls qos-srr-queue input cos-map command     2-224

mls qos srr-queue input dscp-map command     2-226

mls qos srr-queue input priority-queue command     2-228

mls qos srr-queue input threshold command     2-230

mls qos-srr-queue output cos-map command     2-232

mls qos srr-queue output dscp-map command     2-234

mls qos trust command     2-236

mls qos vlan-based command     2-238

mode, MVR     2-244

Mode button, and password recovery     2-289

modes, commands     1-1

monitor session command     2-239

more (boot loader) command     A-16

MSTP

displaying     2-464

interoperability     2-49

link type     2-517

MST region

aborting changes     2-523

applying changes     2-523

configuration name     2-523

configuration revision number     2-523

current or pending display     2-523

displaying     2-464

MST configuration mode     2-523

VLANs-to-instance mapping     2-523

path cost     2-525

protocol mode     2-521

restart protocol migration process     2-49

root port

loop guard     2-515

preventing from becoming designated     2-515

restricting which can be root     2-515

root guard     2-515

root switch

affects of extended system ID     2-513

hello-time     2-528, 2-536

interval between BDPU messages     2-529

interval between hello BPDU messages     2-528, 2-536

max-age     2-529

maximum hop count before discarding BPDU     2-530

port priority for selection of     2-532

primary or secondary     2-536

switch priority     2-535

MSTP (continued)

state changes

blocking to forwarding state     2-542

enabling BPDU filtering     2-505, 2-540

enabling BPDU guard     2-507, 2-540

enabling Port Fast     2-540, 2-542

forward-delay time     2-527

length of listening and learning states     2-527

rapid transition to forwarding     2-517

shutting down Port Fast-enabled ports     2-540

state information display     2-463

MTU

configuring size     2-596

displaying global setting     2-472

multicast group address, MVR     2-247

multicast groups, MVR     2-245

multicast router learning method     2-149

multicast router ports, configuring     2-149

multicast storm control     2-558

multicast VLAN, MVR     2-244

multicast VLAN registration

See MVR

multiple hosts on authorized port     2-81

Multiple Spanning Tree Protocol

See MSTP

MVR

and address aliasing     2-245

configuring     2-244

configuring interfaces     2-247

debug messages, display     B-20

displaying     2-441

displaying interface information     2-443

members, displaying     2-445

mvr (global configuration) command     2-244

mvr (interface configuration) command     2-247

mvr vlan group command     2-248

N

native VLANs     2-589

native VLAN tagging     2-628

Network Assistant requirements     xviii

nonegotiate

DTP messaging     2-574

speed     2-550

nonegotiate, speed     2-550

non-IP protocols

denying     2-71

forwarding     2-256

non-IP traffic access lists     2-178

non-IP traffic forwarding

denying     2-71

permitting     2-256

normal-range VLANs     2-611, 2-617

note, description     xviii

no vlan command     2-611, 2-621

P

PAgP

See EtherChannel

pagp learn-method command     2-250

pagp port-priority command     2-252

password, VTP     2-637, 2-641

password-recovery mechanism, enabling and disabling     2-289

permit (ARP access-list configuration) command     2-254

permit (MAC access-list configuration) command     2-256

per-VLAN spanning-tree plus

See STP

physical-port learner     2-250

PID, displaying     2-368

PIM-DVMRP, as multicast router learning method     2-149

PoE

configuring the power management mode     2-268

displaying controller register values     2-331

displaying power management information     2-457

logging of status     2-173

police aggregate command     2-261

police command     2-259

policed-DSCP map     2-210

policy-map command     2-263

policy maps

applying to an interface     2-291, 2-295

creating     2-263

displaying     2-452

hierarchical     2-264

policers

displaying     2-425

for a single class     2-259

for multiple classes     2-204, 2-261

policed-DSCP map     2-210

traffic classification

defining the class     2-33

defining trust states     2-604

setting DSCP or IP precedence values     2-293

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list     2-3

debug messages, display     B-6

enabling IEEE 802.1x

globally     2-74

per interface     2-87

guest VLAN     2-79

host modes     2-81

IEEE 802.1x AAA accounting methods     2-1

initialize an interface     2-83

manual control of authorization state     2-87

multiple hosts on authorized port     2-81

port-based authentication (continued)

periodic re-authentication

enabling     2-91

time between attempts     2-93

quiet period between failed authentication exchanges     2-93

re-authenticating IEEE 802.1x-enabled ports     2-89

resetting configurable IEEE 802.1x parameters     2-78

switch-to-authentication server retransmission time     2-93

switch-to-client frame-retransmission number     2-84 to  2-85

switch-to-client retransmission time     2-93

port-channel load-balance command     2-266

Port Fast, for spanning tree     2-542

port ranges, defining     2-65

ports, debugging     B-61

ports, protected     2-587

port security

aging     2-581

debug messages, display     B-63

enabling     2-576

violation error recovery     2-99

port trust states for QoS     2-236

port types, MVR     2-247

power information, displaying     2-343

power inline command     2-268

Power over Ethernet

See PoE

priority-queue command     2-271

private-vlan command     2-273

private-vlan mapping command     2-276

private VLANs

association     2-585

configuring     2-273

configuring ports     2-572

displaying     2-478

host ports     2-572

private VLANs (continued)

mapping

configuring     2-585

displaying     2-356

promiscuous ports     2-572

privileged EXEC mode     1-2, 1-3

product identification information, displaying     2-368

promiscuous ports, private VLANs     2-572

protected ports, displaying     2-362

pruning

VLANs     2-589

VTP

displaying interface information     2-356

enabling     2-637, 2-641

pruning-eligible VLAN list     2-591

PVST+

See STP

Q

QoS

auto-QoS

configuring     2-16

debug messages, display     1-5, B-2

displaying     2-305

class maps

creating     2-35

defining the match criteria     2-198

displaying     2-314

defining the CoS value for an incoming packet     2-206

displaying configuration information     2-305, 2-424

DSCP transparency     2-218

DSCP trusted ports

applying DSCP-to-DSCP-mutation map to     2-208

defining DSCP-to-DSCP-mutation map     2-210

QoS (continued)

egress queues

allocating buffers     2-214

defining the CoS output queue threshold map     2-232

defining the DSCP output queue threshold map     2-234

displaying buffer allocations     2-428

displaying CoS output queue threshold map     2-432

displaying DSCP output queue threshold map     2-432

displaying queueing strategy     2-428

displaying queue-set settings     2-435

enabling bandwidth shaping and scheduling     2-554

enabling bandwidth sharing and scheduling     2-556

limiting the maximum output on a port     2-552

mapping a port to a queue-set     2-278

mapping CoS values to a queue and threshold     2-232

mapping DSCP values to a queue and threshold     2-234

setting maximum and reserved memory allocations     2-216

setting WTD thresholds     2-216

enabling     2-202

ingress queues

allocating buffers     2-222

assigning SRR scheduling weights     2-220

defining the CoS input queue threshold map     2-224

defining the DSCP input queue threshold map     2-226

displaying buffer allocations     2-428

displaying CoS input queue threshold map     2-432

displaying DSCP input queue threshold map     2-432

displaying queueing strategy     2-428

displaying settings for     2-426

enabling the priority queue     2-228

mapping CoS values to a queue and threshold     2-224

mapping DSCP values to a queue and threshold     2-226

setting WTD thresholds     2-230

maps

defining     2-210, 2-224, 2-226, 2-232, 2-234

displaying     2-432

QoS (continued)

policy maps

applying an aggregate policer     2-261

applying to an interface     2-291, 2-295

creating     2-263

defining policers     2-204, 2-259

displaying policers     2-425

displaying policy maps     2-452

hierarchical     2-264

policed-DSCP map     2-210

setting DSCP or IP precedence values     2-293

traffic classifications     2-33

trust states     2-604

port trust states     2-236

queues, enabling the expedite     2-271

statistics

in-profile and out-of-profile packets     2-428

packets enqueued or dropped     2-428

sent and received CoS values     2-428

sent and received DSCP values     2-428

trusted boundary for IP phones     2-236

VLAN-based     2-238

quality of service

See QoS

querytime, MVR     2-244

queue-set command     2-278

R

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

rcommand command     2-279

re-authenticating IEEE 802.1x-enabled ports     2-89

re-authentication

periodic     2-91

time between attempts     2-93

receiver ports, MVR     2-247

receiving flow-control packets     2-102

recovery mechanism

causes     2-99

display     2-311, 2-345, 2-349

timer interval     2-100

redundancy for cluster switches     2-62

remote-span command     2-281

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command     A-17

renew ip dhcp snooping database command     2-283

requirements

cluster     xviii

device manager     xviii

Network Assistant     xviii

reset (boot loader) command     A-18

reset command     2-626

resource templates, displaying     2-459

rmdir (boot loader) command     A-19

rmon collection stats command     2-285

root guard, for spanning tree     2-515

routed ports

IP addresses on     2-116

number supported     2-116

RSPAN

configuring     2-239

displaying     2-438

filter RSPAN traffic     2-239

remote-span command     2-281

sessions

add interfaces to     2-239

displaying     2-438

start new     2-239

S

sdm prefer command     2-286

SDM templates

allowed resources     2-287

RSPAN (continued)

displaying     2-459

dual IPv4 and IPv6     2-286

secure ports, limitations     2-578

sending flow-control packets     2-102

service password-recovery command     2-289

service-policy command     2-291

set (boot loader) command     A-20

set command     2-293

setup command     2-295

setup express command     2-298

show access-lists command     2-300

show archive status command     2-303

show arp access-list command     2-304

show auto qos command     2-305

show boot command     2-309

show cable-diagnostics tdr command     2-311

show changes command     2-626

show class-map command     2-314

show cluster candidates command     2-317

show cluster command     2-315

show cluster members command     2-319

show controllers cpu-interface command     2-322

show controllers ethernet-controller command     2-324

show controllers power inline command     2-331

show controllers tcam command     2-333

show controller utilization command     2-335

show current command     2-626

show dot1q-tunnel command     2-337

show dot1x command     2-338

show dtp     2-341

show env command     2-343

show errdisable detect command     2-345

show errdisable flap-values command     2-347

show errdisable recovery command     2-349

show etherchannel command     2-351

show flowcontrol command     2-354

show interfaces command     2-356

show interfaces counters command     2-365

show inventory command     2-368

show ip arp inspection command     2-369

show ipc command     2-393

show ip dhcp snooping binding command     2-374

show ip dhcp snooping command     2-373

show ip dhcp snooping database command     2-377

show ip igmp profile command     2-379

show ip igmp snooping command     2-380

show ip igmp snooping groups command     2-385

show ip igmp snooping mrouter command     2-387

show ip igmp snooping querier detail command     2-383

show ip source binding command     2-389

show ip verify source command     2-391

show l2protocol-tunnel command     2-397

show lacp command     2-400

show mac access-group command     2-404

show mac address-table address command     2-408

show mac address-table aging time command     2-410

show mac address-table command     2-406

show mac address-table count command     2-412

show mac address-table dynamic command     2-414

show mac address-table interface command     2-416

show mac address-table notification command     2-418

show mac address-table static command     2-420

show mac address-table vlan command     2-422

show mls qos aggregate-policer command     2-425

show mls qos command     2-424

show mls qos input-queue command     2-426

show mls qos interface command     2-428

show mls qos maps command     2-432

show mls qos queue-set command     2-435

show mls qos vlan command     2-437

show monitor command     2-438

show mvr command     2-441

show mvr interface command     2-443

show mvr members command     2-445

show pagp command     2-447

show parser macro command     2-449

show platform acl command     C-2

show platform backup interface command     C-3

show platform configuration command     C-4

show platform etherchannel command     C-5

show platform forward command     C-6

show platform frontend-controller command     C-8

show platform igmp snooping command     C-9

show platform ip multicast command     C-11

show platform ip unicast command     C-12

show platform ipv6 unicast command     C-16

show platform layer4op command     C-18

show platform mac-address-table command     C-19

show platform messaging command     C-20

show platform monitor command     C-21

show platform mvr table command     C-22

show platform pm command     C-23

show platform port-asic command     C-24

show platform port-security command     C-28

show platform qos command     C-29

show platform resource-manager command     C-30

show platform snmp counters command     C-32

show platform spanning-tree command     C-33

show platform stp-instance command     C-34

show platform tcam command     C-35

show platform vlan command     C-38

show policy-map command     2-452

show port security command     2-454

show power inline command     2-457

show proposed command     2-626

show sdm prefer command     2-459

show setup express command     2-462

show spanning-tree command     2-463

show storm-control command     2-470

show system mtu command     2-472

show trust command     2-604

show udld command     2-473

show version command     2-476

show vlan access-map command     2-483

show vlan command     2-478

show vlan command, fields     2-480

show vlan filter command     2-484

show vmps command     2-485

show vtp command     2-488

shutdown command     2-493

shutdown threshold, Layer 2 protocol tunneling     2-165

shutdown vlan command     2-494

Smartports macros

See macros

SNMP host, specifying     2-498

SNMP informs, enabling the sending of     2-495

snmp-server enable traps command     2-495

snmp-server host command     2-498

snmp trap mac-notification command     2-502

SNMP traps

enabling MAC address notification trap     2-502

enabling the MAC address notification feature     2-181

enabling the sending of     2-495

SoftPhone

See Cisco SoftPhone

software images

deleting     2-67

downloading     2-7

upgrading     2-7

uploading     2-12

software version, displaying     2-476

source ports, MVR     2-247

SPAN

configuring     2-239

debug messages, display     B-19

displaying     2-438

filter SPAN traffic     2-239

sessions

add interfaces to     2-239

displaying     2-438

start new     2-239

spanning     2-544

spanning-tree backbonefast command     2-504

spanning-tree bpdufilter command     2-505

spanning-tree bpduguard command     2-507

spanning-tree cost command     2-509

spanning-tree etherchannel command     2-511

spanning-tree extend system-id command     2-513

spanning-tree guard command     2-515

spanning-tree link-type command     2-517

spanning-tree loopguard default command     2-519

spanning-tree mode command     2-521

spanning-tree mst configuration command     2-523

spanning-tree mst cost command     2-525

spanning-tree mst forward-time command     2-527

spanning-tree mst hello-time command     2-528

spanning-tree mst max-age command     2-529

spanning-tree mst max-hops command     2-530

spanning-tree mst port-priority command     2-532

spanning-tree mst pre-standard command     2-534

spanning-tree mst priority command     2-535

spanning-tree mst root command     2-536

spanning-tree portfast (global configuration) command     2-540

spanning-tree portfast (interface configuration) command     2-542

spanning-tree port-priority command     2-538

Spanning Tree Protocol

See STP

spanning-tree transmit hold-count command     2-544

spanning-tree uplinkfast command     2-545

spanning-tree vlan command     2-547

speed command     2-550

srr-queue bandwidth limit command     2-552

srr-queue bandwidth shape command     2-554

srr-queue bandwidth share command     2-556

SSH, configuring version     2-161

static-access ports, configuring     2-563

statistics, Ethernet group     2-285

sticky learning, enabling     2-576

storm-control command     2-558

STP

BackboneFast     2-504

counters, clearing     2-48

debug messages, display

BackboneFast events     B-67

MSTP     B-70

optimized BPDUs handling     B-69

spanning-tree activity     B-65

switch shim     B-72

transmitted and received BPDUs     B-68

UplinkFast     B-74

detection of indirect link failures     2-504

enabling protocol tunneling for     2-165

EtherChannel misconfiguration     2-511

extended system ID     2-513

path cost     2-509

protocol modes     2-521

root port

accelerating choice of new     2-545

loop guard     2-515

preventing from becoming designated     2-515

restricting which can be root     2-515

root guard     2-515

UplinkFast     2-545

root switch

affects of extended system ID     2-513, 2-548

hello-time     2-547

interval between BDPU messages     2-547

interval between hello BPDU messages     2-547

max-age     2-547

port priority for selection of     2-538

primary or secondary     2-547

switch priority     2-547

STP (continued)

state changes

blocking to forwarding state     2-542

enabling BPDU filtering     2-505, 2-540

enabling BPDU guard     2-507, 2-540

enabling Port Fast     2-540, 2-542

enabling timer to recover from error state     2-99

forward-delay time     2-547

length of listening and learning states     2-547

shutting down Port Fast-enabled ports     2-540

state information display     2-463

VLAN options     2-535, 2-547

SVIs, creating     2-110

Switched Port Analyzer

See SPAN

switching characteristics

modifying     2-561

returning to interfaces     2-561

switchport access command     2-563

switchport backup interface command     2-565

switchport block command     2-567

switchport command     2-561

switchport host command     2-568

switchport mode command     2-569

switchport mode private-vlan command     2-572

switchport nonegotiate command     2-574

switchport port-security aging command     2-581

switchport port-security command     2-576

switchport priority extend command     2-583

switchport private-vlan command     2-585

switchport protected command     2-587

switchports, displaying     2-356

switchport trunk command     2-589

switchport voice vlan command     2-592

system env temperature threshold yellow command     2-594

system message logging     2-173

system message logging, save message to flash     2-174

system mtu command     2-596

system resource templates     2-286

T

tar files, creating, listing, and extracting     2-9

TDR, running     2-598

Telnet, using to communicate to cluster switches     2-279

temperature information, displaying     2-343

templates, system resources     2-286

test cable-diagnostics tdr command     2-598

traceroute mac command     2-599

traceroute mac ip command     2-602

trunking, VLAN mode     2-569

trunk mode     2-569

trunk ports     2-569

trunks, to non-DTP device     2-570

trusted boundary for QoS     2-236

trusted port states for QoS     2-236

tunnel ports, Layer 2 protocol, displaying     2-397

type (boot loader) command     A-23

U

UDLD

aggressive mode     2-606, 2-608

debug messages, display     B-82

enable globally     2-606

enable per interface     2-608

error recovery timer     2-99

message timer     2-606

normal mode     2-606, 2-608

reset a shutdown interface     2-610

status     2-473

udld command     2-606

udld port command     2-608

udld reset command     2-610

unicast storm control     2-558

UniDirectional Link Detection

See UDLD

unknown multicast traffic, preventing     2-567

unknown unicast traffic, preventing     2-567

unset (boot loader) command     A-24

upgrading

software images     2-7

monitoring status of     2-303

upgrading information

See release notes

UplinkFast, for STP     2-545

user EXEC mode     1-2

V

version (boot loader) command     A-26

vlan (global configuration) command     2-611

vlan (VLAN configuration) command     2-617

vlan access-map command     2-623

VLAN access map configuration mode     2-623

VLAN access maps

actions     2-5

displaying     2-483

VLAN-based QoS     2-238

VLAN configuration

rules     2-614, 2-619

saving     2-611, 2-621

VLAN configuration mode

commands

VLAN     2-617

VTP     2-641

description     1-4

entering     2-625

summary     1-2

vlan database command     2-625

vlan dot1q tag native command     2-628

vlan filter command     2-630

VLAN filters, displaying     2-484

VLAN ID range     2-611, 2-617

VLAN maps

applying     2-630

creating     2-623

defining     2-196

displaying     2-483

VLAN Query Protocol

See VQP

VLANs

adding     2-611

configuring     2-611, 2-617

debug messages, display

ISL     B-78

VLAN IOS file system error tests     B-77

VLAN manager activity     B-75

VTP     B-80

displaying configurations     2-478

extended-range     2-611

MAC addresses

displaying     2-422

number of     2-412

media types     2-614, 2-619

normal-range     2-611, 2-617

private     2-572

configuring     2-273

displaying     2-478

See also private VLANs

restarting     2-494

saving the configuration     2-611

shutting down     2-494

SNMP traps for VTP     2-496, 2-499

suspending     2-494

variables     2-617

VLAN Trunking Protocol

See VTP

VMPS

configuring servers     2-635

displaying     2-485

error recovery timer     2-100

reconfirming dynamic VLAN assignments     2-632

vmps reconfirm (global configuration) command     2-633

vmps reconfirm (privileged EXEC) command     2-632

vmps retry command     2-634

vmps server command     2-635

voice VLAN

configuring     2-592

setting port priority     2-583

VQP

and dynamic-access ports     2-564

clearing client statistics     2-50

displaying information     2-485

per-server retry count     2-634

reconfirmation interval     2-633

reconfirming dynamic VLAN assignments     2-632

VTP

changing characteristics     2-637

clearing pruning counters     2-51

configuring

domain name     2-637, 2-641

file name     2-637

mode     2-637, 2-641

password     2-637, 2-641

counters display fields     2-489

displaying information     2-488

enabling

pruning     2-637, 2-641

tunneling for     2-165

Version 2     2-637, 2-641

mode     2-637, 2-641

pruning     2-637, 2-641

saving the configuration     2-611, 2-621

statistics     2-488

status     2-488

status display fields     2-490

vtp (global configuration) command     2-637

vtp (VLAN configuration) command     2-641