Cisco Catalyst 2960 Command Reference Manual

Cisco Catalyst 2960 Command Reference Manual

Hide thumbs Also See for Catalyst 2960:
Table of Contents

Advertisement

Catalyst 2960 Switch Command Reference
Cisco IOS Release 12.2(44)SE
January 2008
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-8604-04

Advertisement

Table of Contents
loading

Summary of Contents for Cisco Catalyst 2960

  • Page 1 Catalyst 2960 Switch Command Reference Cisco IOS Release 12.2(44)SE January 2008 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-8604-04...
  • Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.;...
  • Page 3: Table Of Contents

    Privileged EXEC Mode Global Configuration Mode Interface Configuration Mode config-vlan Mode VLAN Configuration Mode Line Configuration Mode Catalyst 2960 Switch Cisco IOS Commands C H A P T E R aaa accounting dot1x aaa authentication dot1x aaa authorization network archive download-sw...
  • Page 4 2-57 cluster run 2-58 cluster standby-group 2-59 cluster timer 2-61 define interface-range 2-62 delete 2-64 deny (MAC access-list configuration) 2-65 dot1x 2-68 dot1x auth-fail max-attempts 2-70 dot1x auth-fail vlan 2-72 dot1x control-direction 2-74 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 5 2-122 ip admission name proxy http 2-124 ip dhcp snooping 2-126 ip dhcp snooping binding 2-127 ip dhcp snooping database 2-129 ip dhcp snooping information option 2-131 ip dhcp snooping information option allow-untrusted 2-133 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 6 2-180 mac address-table aging-time 2-182 mac address-table move update 2-183 mac address-table notification 2-185 mac address-table static 2-187 mac address-table static drop 2-188 macro apply 2-190 macro description 2-193 macro global 2-194 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 7 (global configuration) 2-247 mvr (interface configuration) 2-250 pagp learn-method 2-253 pagp port-priority 2-255 permit (MAC access-list configuration) 2-257 police 2-260 police aggregate 2-262 policy-map 2-264 port-channel load-balance 2-266 priority-queue 2-268 queue-set 2-270 radius-server host 2-271 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 8 2-331 show eap 2-333 show env 2-336 show errdisable detect 2-337 show errdisable flap-values 2-339 show errdisable recovery 2-341 show etherchannel 2-343 show fallback profile 2-346 show flowcontrol 2-348 show interfaces 2-350 Catalyst 2960 Switch Command Reference viii OL-8604-04...
  • Page 9 2-414 show mls qos maps 2-418 show mls qos queue-set 2-421 show mls qos vlan 2-423 show monitor 2-424 show mvr 2-426 show mvr interface 2-428 show mvr members 2-430 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 10 2-493 spanning-tree guard 2-495 spanning-tree link-type 2-497 spanning-tree loopguard default 2-499 spanning-tree mode 2-501 spanning-tree mst configuration 2-503 spanning-tree mst cost 2-505 spanning-tree mst forward-time 2-507 spanning-tree mst hello-time 2-508 spanning-tree mst max-age 2-509 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 11 2-560 switchport protected 2-562 switchport trunk 2-564 switchport voice vlan 2-567 system mtu 2-569 test cable-diagnostics tdr 2-571 traceroute mac 2-572 traceroute mac ip 2-575 trust 2-577 udld 2-579 udld port 2-581 Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 12 (global configuration) 2-599 vmps retry 2-600 vmps server 2-601 vtp (global configuration) 2-603 vtp (VLAN configuration) 2-607 Catalyst 2960 Switch Bootloader Commands A P P E N D I X boot copy delete flash_init format A-10 fsck A-11...
  • Page 13 B-36 debug platform phy B-37 debug platform pm B-39 debug platform port-asic B-41 debug platform port-security B-42 debug platform qos-acl-tcam B-43 debug platform resource-manager B-44 debug platform snmp B-45 Catalyst 2960 Switch Command Reference xiii OL-8604-04...
  • Page 14 B-72 debug udld B-74 debug vqpc B-76 Catalyst 2960 Switch Show Platform Commands A P P E N D I X show platform acl show platform backup interface show platform etherchannel show platform forward show platform ip igmp snooping...
  • Page 15 C-20 show platform qos C-21 show platform resource-manager C-22 show platform snmp counters C-24 show platform spanning-tree C-25 show platform stp-instance C-26 show platform tcam C-27 show platform vlan C-29 N D E X Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 16 Contents Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 17: Preface

    This guide is for the networking professional using the Cisco IOS command-line interface (CLI) to manage the Catalyst 2960 switch, hereafter referred to as the switch. Before using this guide, you should have experience working with the Cisco IOS commands and the switch software features. Before using this guide, you should have experience working with the concepts and terminology of Ethernet and local area networking.
  • Page 18: Related Publications

    For upgrade information, see the “Downloading Software” section in the release notes. • You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and from the telephone numbers listed in the URL referenced in Obtaining Documentation, Obtaining Support, and Security Guidelines, page xix.
  • Page 19: Obtaining Documentation, Obtaining Support, And Security Guidelines

    Obtaining Documentation, Obtaining Support, and Security Guidelines For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed...
  • Page 20 Preface Obtaining Documentation, Obtaining Support, and Security Guidelines Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 21: Chapter 1 Using The Command-Line Interface

    C H A P T E R Using the Command-Line Interface The Catalyst 2960 switch is supported by Cisco IOS software. This chapter describes how to use the switch command-line interface (CLI) to configure software features. For a complete description of the commands that support these features, see Chapter 2, “Catalyst...
  • Page 22 From global configuration mode, To exit to global configuration mode, Switch(config-line)# specify a line by entering the line enter the exit command. command. To return to privileged EXEC mode, enter the end command, or press Ctrl-Z. Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 23: User Exec Mode

    You can specify either the terminal or NVRAM as the source of configuration commands. This example shows you how to access global configuration mode: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 24: Interface Configuration Mode

    For extended-range VLANs, all characteristics except the MTU size must remain at the default setting. To return to global configuration mode, enter exit; to return to privileged EXEC mode, enter end. All the commands except shutdown take effect when you exit config-vlan mode. Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 25: Vlan Configuration Mode

    To exit line configuration mode and to return to global configuration mode, use the exit command. To exit line configuration mode and to return to privileged EXEC mode, enter the end command, or press Ctrl-Z. Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 26 Chapter 1 Using the Command-Line Interface CLI Command Modes Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 27: Chapter 2 Catalyst 2960 Switch Cisco Ios Commands

    C H A P T E R Catalyst 2960 Switch Cisco IOS Commands aaa accounting dot1x Use the aaa accounting dot1x global configuration command to enable authentication, authorization, and accounting (AAA) accounting and to create method lists defining specific accounting methods on a per-line or per-interface basis for IEEE 802.1x sessions.
  • Page 28: Chapter 2 Catalyst 2960 Switch Cisco Io Command

    IEEE 802.1x. aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. dot1x reauthentication Enables or disables periodic reauthentication. dot1x timeout Sets the number of seconds between re-authentication attempts.
  • Page 29: Aaa Authentication Dot1X

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands aaa authentication dot1x aaa authentication dot1x Use the aaa authentication dot1x global configuration command to specify the authentication, authorization, and accounting (AAA) method to use on ports complying with the IEEE 802.1x authentication.
  • Page 30: Aaa Authentication Dot1X

    Description aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 31: Aaa Authorization Network

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands aaa authorization network aaa authorization network Use the aaa authorization network global configuration command to the configure the switch to use user-RADIUS authorization for all network-related service requests, such as IEEE 802.1x VLAN assignment.
  • Page 32: Archive Download-Sw

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive download-sw archive download-sw Use the archive download-sw privileged EXEC command to download a new image from a TFTP server to the switch and to overwrite or keep the existing image. archive download-sw {/force-reload | /imageonly | /leave-old-sw | /no-set-boot | /overwrite |...
  • Page 33 The /imageonly option removes the HTML files for the existing image if the existing image is being removed or replaced. Only the Cisco IOS image (without the HTML files) is downloaded. Using the /safe or /leave-old-sw option can cause the new image download to fail if there is insufficient flash memory.
  • Page 34: Archive Tar

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar archive tar Use the archive tar privileged EXEC command to create a tar file, list files in a tar file, or extract the files from a tar file. archive tar {/create destination-url flash:/file-url} | {/table source-url} | {/xtract source-url flash:/file-url [dir/file...]}...
  • Page 35 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar /table source-url Display the contents of an existing tar file to the screen. For source-url, specify the source URL alias for the local or network file system. These options are supported: The syntax for the local flash file system: •...
  • Page 36 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar Command Modes Privileged EXEC Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines Filenames and directory names are case sensitive. Image names are case sensitive. Examples This example shows how to create a tar file. The command writes the contents of the new-configs directory on the local flash device to a file named saved.tar on the TFTP server at 172.20.10.30:...
  • Page 37: Archive Upload-Sw

    Use the upload feature only if the HTML files associated with the embedded device manager have been installed with the existing image. The files are uploaded in this sequence: the Cisco IOS image, the HTML files, and info. After these files are uploaded, the software creates the tar file.
  • Page 38 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive upload-sw Examples This example shows how to upload the currently running image to a TFTP server at 172.20.140.2: Switch# archive upload-sw tftp://172.20.140.2/test-image.tar Related Commands Command Description archive download-sw Downloads a new image to the switch.
  • Page 39: Auto Qos Voip

    [cisco-phone | cisco-softphone | trust] Syntax Description cisco-phone Identify this port as connected to a Cisco IP Phone, and automatically configure QoS for VoIP. The QoS labels of incoming packets are trusted only when the telephone is detected.
  • Page 40: Auto Qos Voip

    QoS. Auto-QoS configures the switch for VoIP with Cisco IP Phones on switch and routed ports and for VoIP with devices running the Cisco SoftPhone application. These releases support only Cisco IP SoftPhone Version 1.3(3) or later.
  • Page 41 Table 2-3. You can enable auto-QoS on static, dynamic-access, and voice VLAN access, and trunk ports. When enabling auto-QoS with a Cisco IP Phone on a routed port, you must assign a static IP address to the IP phone. Note When a device running Cisco SoftPhone is connected to a switch or routed port, the switch supports only one Cisco SoftPhone application per port.
  • Page 42 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands auto qos voip Examples This example shows how to enable auto-QoS and to trust the QoS labels received in incoming packets when the switch or router connected to the port is a trusted device:...
  • Page 43: Boot Boothlpr

    Use the boot boothlpr global configuration command to load a special Cisco IOS image, which when loaded into memory, can load a second Cisco IOS image into memory and launch it. This variable is used only for internal development and testing. Use the no form of this command to return to the default setting.
  • Page 44: Boot Config-File

    Use the boot config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration. Use the no form of this command to return to the default setting.
  • Page 45: Boot Enable-Break

    Despite the setting of this command, you can interrupt the automatic boot process at any time by pressing the MODE button on the switch front panel. This command changes the setting of the ENABLE_BREAK environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command Description show boot Displays the settings of the boot environment variables.
  • Page 46: Boot Helper

    This variable is used only for internal development and testing. Filenames and directory names are case sensitive. This command changes the setting of the HELPER environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command...
  • Page 47: Boot Helper-Config-File

    Use the boot helper-config-file global configuration command to specify the name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded. Use the no form of this command to return to the default setting.
  • Page 48: Boot Manual

    To boot up the system, use the boot boot loader command, and specify the name of the bootable image. This command changes the setting of the MANUAL_BOOT environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command Description show boot Displays the settings of the boot environment variables.
  • Page 49: Boot Private-Config-File

    Use the boot private-config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration. Use the no form of this command to return to the default setting.
  • Page 50: Boot System

    Use the boot system global configuration command to specify the Cisco IOS image to load during the next boot cycle. Use the no form of this command to return to the default setting. boot system filesystem:/file-url ...
  • Page 51: Channel-Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group channel-group Use the channel-group interface configuration command to assign an Ethernet port to an EtherChannel group, to enable an EtherChannel mode, or both. Use the no form of this command to remove an Ethernet port from an EtherChannel group.
  • Page 52 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group Defaults No channel groups are assigned. No mode is configured. Command Modes Interface configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines For Layer 2 EtherChannels, you do not have to create a port-channel interface first by using the interface port-channel global configuration command before assigning a physical port to a channel group.
  • Page 53 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group For a complete list of configuration guidelines, see the “Configuring EtherChannels” chapter in the software configuration guide for this release. Examples This example shows how to configure an EtherChannel. It assigns two static-access ports in VLAN 10...
  • Page 54: Channel-Protocol

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-protocol channel-protocol Use the channel-protocol interface configuration command to restrict the protocol used on a port to manage channeling. Use the no form of this command to return to the default setting.
  • Page 55 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-protocol Related Commands Command Description channel-group Assigns an Ethernet port to an EtherChannel group. show etherchannel protocol Displays protocol information the EtherChannel. Catalyst 2960 Switch Command Reference 2-29 OL-8604-04...
  • Page 56: Class

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class class To use this command, the switch must be running the LAN Base image. Note Use the class policy-map configuration command to define a traffic classification match criteria (through the police, set, and trust policy-map class configuration commands) for the specified class-map name.
  • Page 57 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class The class command performs the same function as the class-map global configuration command. Use the class command when a new classification, which is not shared with any other ports, is needed. Use the class-map command when the map is shared among many ports.
  • Page 58: Class-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class-map class-map To use this command, the switch must be running the LAN Base image. Note Use the class-map global configuration command to create a class map to be used for matching packets to the class name you specify and to enter class-map configuration mode.
  • Page 59 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class-map rename: renames the current class map. If you rename a class map with a name that is already used, • the message appears. A class-map with this name already exists To define packet classification on a physical-port basis, only one match command per class map is supported.
  • Page 60: Clear Dot1X

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear dot1x clear dot1x Use the clear dot1x privileged EXEC command to clear IEEE 802.1x information for the switch or for the specified port. clear dot1x {all | interface interface-id} Syntax Description Clear all IEEE 802.1x information for the switch.
  • Page 61: Clear Eap Sessions

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear eap sessions clear eap sessions Use the clear eap sessions privileged EXEC command to clear Extensible Authentication Protocol (EAP) session information for the switch or for the specified port. clear eap sessions [credentials name [interface interface-id] | interface interface-id | method name | transport name] [credentials name | interface interface-id | transport name] ...
  • Page 62: Clear Errdisable Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear errdisable interface clear errdisable interface Use the clear errdisable interface privileged EXEC command to re-enable a VLAN that was error disabled. clear errdisable interface interface-id vlan [vlan-list] Syntax Description vlan list (Optional) Specify a list of VLANs to be re-enabled.
  • Page 63: Clear Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear ip dhcp snooping clear ip dhcp snooping To use this command, the switch must be running the LAN Base image. Note Use the clear ip dhcp snooping privileged EXEC command to clear the DHCP snooping binding database, the DHCP snooping binding database agent statistics, or the DHCP snooping statistics counters.
  • Page 64: Clear Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear ip dhcp snooping You can verify that the statistics were cleared by entering the show ip dhcp snooping statistics user EXEC command. Related Commands Command Description ip dhcp snooping Enables DHCP snooping on a VLAN.
  • Page 65: Clear Lacp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear lacp clear lacp Use the clear lacp privileged EXEC command to clear Link Aggregation Control Protocol (LACP) channel-group counters. clear lacp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 6.
  • Page 66: Clear Mac Address-Table

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table clear mac address-table To use this command, the switch must be running the LAN Base image. Note Use the clear mac address-table privileged EXEC command to delete from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 67 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table Related Commands Command Description mac address-table notification Enables the MAC address notification feature. show mac access-group Displays the MAC address table static and dynamic entries. show mac address-table notification Displays the MAC address notification settings for all interfaces or the specified interface.
  • Page 68: Clear Mac Address-Table Move Update

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table move update clear mac address-table move update Use the clear mac address-table move update privileged EXEC command to clear the mac address-table-move update-related counters. clear mac address-table move update Syntax Description This command has no arguments or keywords.
  • Page 69: Clear Pagp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear pagp clear pagp Use the clear pagp privileged EXEC command to clear Port Aggregation Protocol (PAgP) channel-group information. clear pagp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 6.
  • Page 70: Clear Port-Security

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear port-security clear port-security Use the clear port-security privileged EXEC command to delete from the MAC address table all secure addresses or all secure addresses of a specific type (configured, dynamic, or sticky) on the switch or on an interface.
  • Page 71 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear port-security This example shows how to remove all the dynamic secure addresses learned on a specific interface: Switch# clear port-security dynamic interface gigabitethernet0/1 This example shows how to remove all the dynamic secure addresses from the address table:...
  • Page 72: Clear Spanning-Tree Counters

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear spanning-tree counters clear spanning-tree counters Use the clear spanning-tree counters privileged EXEC command to clear the spanning-tree counters. clear spanning-tree counters [interface interface-id] Syntax Description interface interface-id (Optional) Clear all spanning-tree counters on the specified interface. Valid interfaces include physical ports, VLANs, and port channels.
  • Page 73: Clear Spanning-Tree Detected-Protocols

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear spanning-tree detected-protocols clear spanning-tree detected-protocols Use the clear spanning-tree detected-protocols privileged EXEC command to restart the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface.
  • Page 74: Clear Vmps Statistics

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear vmps statistics clear vmps statistics Use the clear vmps statistics privileged EXEC command to clear the statistics maintained by the VLAN Query Protocol (VQP) client. clear vmps statistics Syntax Description This command has no arguments or keywords.
  • Page 75: Clear Vtp Counters

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear vtp counters clear vtp counters Use the clear vtp counters privileged EXEC command to clear the VLAN Trunking Protocol (VTP) and pruning counters. clear vtp counters Syntax Description This command has no arguments or keywords.
  • Page 76: Cluster Commander-Address

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster commander-address cluster commander-address You do not need to enter this command from a standalone cluster member switch. The cluster command switch automatically provides its MAC address to cluster member switches when these switches join the cluster.
  • Page 77 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster commander-address Examples This is partial sample output from the running configuration of a cluster member. Switch(config)# show running-configuration <output truncated> cluster commander-address 00e0.9bc0.a500 member 4 name my_cluster <output truncated> This example shows how to remove a member from the cluster by using the cluster member console.
  • Page 78: Cluster Discovery Hop-Count

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster discovery hop-count cluster discovery hop-count Use the cluster discovery hop-count global configuration command on the cluster command switch to set the hop-count limit for extended discovery of candidate switches. Use the no form of this command to return to the default setting.
  • Page 79: Cluster Enable

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster enable cluster enable Use the cluster enable global configuration command on a command-capable switch to enable it as the cluster command switch, assign a cluster name, and to optionally assign a member number to it. Use the no form of the command to remove all members and to make the cluster command switch a candidate switch.
  • Page 80: Cluster Holdtime

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster holdtime cluster holdtime Use the cluster holdtime global configuration command to set the duration in seconds before a switch (either the command or cluster member switch) declares the other switch down after not receiving heartbeat messages.
  • Page 81: Cluster Member

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster member cluster member Use the cluster member global configuration command on the cluster command switch to add candidates to a cluster. Use the no form of the command to remove members from the cluster.
  • Page 82 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster member Examples This example shows how to add a switch as member 2 with MAC address 00E0.1E00.2222 and the password key to a cluster. The cluster command switch adds the candidate to the cluster through VLAN 3.
  • Page 83: Cluster Outside-Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster outside-interface cluster outside-interface Use the cluster outside-interface global configuration command to configure the outside interface for cluster Network Address Translation (NAT) so that a member without an IP address can communicate with devices outside the cluster.
  • Page 84: Cluster Run

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster run cluster run Use the cluster run global configuration command to enable clustering on a switch. Use the no form of this command to disable clustering on a switch. cluster run...
  • Page 85: Cluster Standby-Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster standby-group cluster standby-group Use the cluster standby-group global configuration command to enable cluster command-switch redundancy by binding the cluster to an existing Hot Standby Router Protocol (HSRP). Entering the routing-redundancy keyword enables the same HSRP group to be used for cluster command-switch redundancy and routing redundancy.
  • Page 86 Related Commands Command Description standby ip Enables HSRP on the interface. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. show cluster Displays the cluster status and a summary of the cluster to which the switch belongs.
  • Page 87: Cluster Timer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster timer cluster timer Use the cluster timer global configuration command to set the interval in seconds between heartbeat messages. Use the no form of this command to set the interval to the default value.
  • Page 88: Define Interface-Range

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands define interface-range define interface-range Use the define interface-range global configuration command to create an interface-range macro. Use the no form of this command to delete the defined macro. define interface-range macro-name interface-range...
  • Page 89 Executes a command on multiple ports at the same time. show running-config Displays the current operating configuration, including defined macros. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 90: Delete

    The prompting behavior depends on the setting of the file prompt global configuration command. By default, the switch prompts for confirmation on destructive file operations. For more information about this command, see the Cisco IOS Command Reference for Release 12.1. Examples...
  • Page 91: Deny (Mac Access-List Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) deny (MAC access-list configuration) To use this command, the switch must be running the LAN Base image. Note Use the deny MAC access-list configuration command to prevent non-IP traffic from being forwarded if the conditions are matched.
  • Page 92 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) lsap lsap-number mask (Optional) Use the LSAP number (0 to 65535) of a packet with 802.2 encapsulation to identify the protocol of the packet. mask is a mask of don’t care bits applied to the LSAP number before testing for a match.
  • Page 93 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) Usage Guidelines You enter MAC-access list configuration mode by using the mac access-list extended global configuration command. If you use the host keyword, you cannot enter an address mask; if you do not use the host keyword, you must enter an address mask.
  • Page 94: Dot1X

    IEEE 802.1x authentication and EtherChannel are configured. If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the device is running ACS Version 3.2.1 or later.
  • Page 95 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x Examples This example shows how to globally enable IEEE 802.1x authentication on a switch: Switch(config)# dot1x system-auth-control This example shows how to globally enable the optional guest VLAN behavior on a switch:...
  • Page 96: Dot1X Auth-Fail Max-Attempts

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail max-attempts dot1x auth-fail max-attempts To use this command, the switch must be running the LAN Base image. Note Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum allowable authentication attempts before a port is moved to the restricted VLAN.
  • Page 97 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail max-attempts Related Commands Command Description dot1x auth-fail vlan [vlan id] Enables the optional restricted VLAN feature. dot1x max-reauth-req [count] Sets the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state.
  • Page 98: Dot1X Auth-Fail Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail vlan dot1x auth-fail vlan To use this command, the switch must be running the LAN Base image. Note Use the dot1x auth-fail vlan interface configuration command to enable the restricted VLAN on a port.
  • Page 99 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail vlan Internal VLANs used for Layer 3 ports cannot be configured as restricted VLANs. You cannot configure a VLAN to be both a restricted VLAN and a voice VLAN. If you do this, a syslog message is generated.
  • Page 100: Dot1X Control-Direction

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x control-direction dot1x control-direction To use this command, the switch must be running the LAN Base image. Note Use the dot1x control-direction interface configuration command to enable the IEEE 802.1x authentication with the wake-on-LAN (WoL) feature and to configure the port control as unidirectional or bidirectional.
  • Page 101 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x control-direction The show dot1x all privileged EXEC command output is the same for all switches except for the port names and the state of the port. If a host is attached to the port but is not yet authenticated, a display similar to this appears: Supplicant MAC 0002.b39a.9275...
  • Page 102: Dot1X Critical (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (global configuration) dot1x critical (global configuration) To use this command, the switch must be running the LAN Base image. Note Use the dot1x critical global configuration command on a standalone switch to configure the parameters for the inaccessible authentication bypass feature, also referred to as critical authentication or the authentication, authorization, and accounting (AAA) fail policy.
  • Page 103 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (global configuration) Related Commands Command Description dot1x critical (interface Enables the inaccessible authentication bypass feature, and configuration) configures the access VLAN for the feature. show dot1x Displays IEEE 802.1x status for the specified port.
  • Page 104: Dot1X Critical (Interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (interface configuration) dot1x critical (interface configuration) To use this command, the switch must be running the LAN Base image. Note Use the dot1x critical interface configuration command on a standalone switch to enable the inaccessible-authentication-bypass feature, also referred to as critical authentication or the authentication, authorization, and accounting (AAA) fail policy.
  • Page 105 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (interface configuration) You can configure the inaccessible authentication bypass feature and the restricted VLAN on an IEEE 802.1x port. If the switch tries to re-authenticate a critical port in a restricted VLAN and all the RADIUS servers are unavailable, the switch changes the port state to the critical authentication state, and it remains in the restricted VLAN.
  • Page 106: Dot1X Default

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x default dot1x default Use the dot1x default interface configuration command to reset the IEEE 802.1x parameters to their default values. dot1x default Syntax Description This command has no arguments or keywords.
  • Page 107: Dot1X Fallback

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x fallback dot1x fallback Use the dot1xfallback interface configuration command on the to configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. To return to the default setting, use the no form of this command.
  • Page 108: Dot1X Guest-Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x guest-vlan dot1x guest-vlan Use the dot1x guest-vlan interface configuration command to specify an active VLAN as an IEEE 802.1x guest VLAN. Use the no form of this command to return to the default setting.
  • Page 109 The amount to decrease the settings depends on the connected IEEE 802.1x client type. The switch supports MAC authentication bypass in Cisco IOS Release 12.2(25)SEE and later. When it is enabled on an IEEE 802.1x port, the switch can authorize clients based on the client MAC address when IEEE 802.1x authentication times out while waiting for an EAPOL message exchange.
  • Page 110: Dot1X Host-Mode

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x host-mode dot1x host-mode Use the dot1x host-mode interface configuration command to allow a single host (client) or multiple hosts on an IEEE 802.1x-authorized port. Use the no form of this command to return to the default setting.
  • Page 111: Dot1X Initialize

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x initialize dot1x initialize Use the dot1x initialize privileged EXEC command to manually return the specified IEEE 802.1x-enabled port to an unauthorized state before initiating a new authentication session on the port.
  • Page 112: Dot1X Mac-Auth-Bypass

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x mac-auth-bypass dot1x mac-auth-bypass Use the dot1x mac-auth-bypass interface configuration command to enable the MAC authentication bypass feature. Use the no form of this command to disable MAC authentication bypass feature. dot1x mac-auth-bypass [eap]...
  • Page 113 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x mac-auth-bypass Examples This example shows how to enable MAC authentication bypass and to configure the switch to use EAP for authentication: Switch(config-if)# dot1x mac-auth-bypass eap You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC command.
  • Page 114: Dot1X Max-Reauth-Req

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x max-reauth-req dot1x max-reauth-req Use the dot1x max-reauth-req interface configuration command to set the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state. Use the no form of this command to return to the default setting.
  • Page 115: Dot1X Max-Req

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x max-req dot1x max-req Use the dot1x max-req interface configuration command to set the maximum number of times that the switch sends an Extensible Authentication Protocol (EAP) frame from the authentication server (assuming that no response is received) to the client before restarting the authentication process.
  • Page 116: Dot1X Pae

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x pae dot1x pae Use the dot1x pae interface configuration command to configure the port as an IEEE 802.1x port access entity (PAE) authenticator. Use the no form of this command to disable IEEE 802.1x authentication on the port.
  • Page 117: Dot1X Port-Control

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x port-control dot1x port-control Use the dot1x port-control interface configuration command to enable manual control of the authorization state of the port. Use the no form of this command to return to the default setting.
  • Page 118 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x port-control EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an • EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on an EtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.
  • Page 119: Dot1X Re-Authenticate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x re-authenticate dot1x re-authenticate Use the dot1x re-authenticate privileged EXEC command to manually initiate a re-authentication of the specified IEEE 802.1x-enabled port. dot1x re-authenticate [interface interface-id] Syntax Description interface interface-id (Optional) Module and port number of the interface to re-authenticate.
  • Page 120: Dot1X Reauthentication

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x reauthentication dot1x reauthentication Use the dot1x reauthentication interface configuration command to enable periodic re-authentication of the client. Use the no form of this command to return to the default setting. dot1x reauthentication...
  • Page 121: Dot1X Timeout

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout dot1x timeout Use the dot1x timeout interface configuration command to set IEEE 802.1x timers. Use the no form of this command to return to the default setting. dot1x timeout {quiet-period seconds | ratelimit-period seconds | reauth-period {seconds |...
  • Page 122: Dot1X Timeout

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout Command History Release Modification 12.2(25)FX This command was introduced. 12.2(25)SED The range for tx-period keyword was changed, and the reauth-period server keywords were added. 12.2(25)SEE The ratelimit-period keyword was introduced.
  • Page 123 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout Related Commands Command Description dot1x max-req Sets the maximum number of times that the switch sends an EAP-request/identity frame before restarting the authentication process. dot1x reauthentication Enables periodic re-authentication of the client.
  • Page 124: Duplex

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands duplex duplex Use the duplex interface configuration command to specify the duplex mode of operation for a port. Use the no form of this command to return the port to its default value.
  • Page 125 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands duplex If the speed is set to auto, the switch negotiates with the device at the other end of the link for the speed setting and then forces the speed setting to the negotiated value. The duplex setting remains as configured on each end of the link, which could result in a duplex setting mismatch.
  • Page 126: Errdisable Detect Cause

    Enable error detection for the Dynamic Trunking Protocol (DTP) flapping. gbic-invalid Enable error detection for an invalid Gigabit Interface Converter (GBIC) module. On the Catalyst 2960 switch, this error refers to an invalid small Note form-factor pluggable (SFP) module. inline-power Enable error detection for inline power.
  • Page 127 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable detect cause Command History Release Modification 12.2(25)FX This command was introduced. 12.2(37)SE The Per-VLAN error-detection feature was added. The inline-power and sfp-config-mismatch keywords were added. Usage Guidelines A cause (link-flap, dhcp-rate-limit, and so forth) is the reason why the error-disabled state occurred.
  • Page 128: Errdisable Detect Cause Small-Frame

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable detect cause small-frame errdisable detect cause small-frame Use the errdisable detect cause small-frame global configuration command on the switch stack or on a standalone switch to allow any switch port to be error disabled if incoming VLAN-tagged packets are small frames (67 bytes or less) and arrive at the minimum configured rate (the threshold).
  • Page 129 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable detect cause small-frame Command Description show interfaces Displays the interface settings on the switch, including input and output flow control. small-frame violation rate Configures the rate (threshold) for incoming small frames to cause a port to be put into the error-disabled state.
  • Page 130: Errdisable Recovery Cause Small-Frame

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable recovery cause small-frame errdisable recovery cause small-frame Use the errdisable recovery cause small-frame global configuration command on the switch stack or on a standalone switch to enable the recovery timer for ports to be automatically re-enabled after they are error disabled by the arrival of small frames.
  • Page 131: Errdisable Recovery

    Enable the timer to recover from an invalid Gigabit Interface Converter (GBIC) module error-disabled state. On the Catalyst 2960 switch, this error refers to an invalid small Note form-factor pluggable (SFP) error-disabled state. inline-power Enable error detection for inline-power.
  • Page 132 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable recovery Defaults Recovery is disabled for all causes. The default recovery interval is 300 seconds. Command Modes Global configuration Command History Release Modification 12.2(25)FX This command was introduced. 12.2(37)SE The per-VLAN error-detection feature was added. The inline-power and sfp-mismatch keywords were added.
  • Page 133: Exception Crashinfo

    Use the exception crashinfo global configuration command to configure the switch to create the extended crashinfo file when the Cisco IOS image fails. Use the no form of this command to disable this feature. exception crashinfo...
  • Page 134: Fallback Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands fallback profile fallback profile Use the fallback profile global configuration command to create a fallback profile for web authentication. To return to the default setting, use the no form of this command.
  • Page 135 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands fallback profile Related Commands Command Description dot1x fallback Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. ip admission Enable web authentication on a switch port...
  • Page 136: Flowcontrol

    This prevents any loss of data packets during the congestion period. Use the receive off keywords to disable flow control. flowcontrol receive {desired | off | on} The Catalyst 2960 switch can receive, but not send, pause frames. Note Syntax Description receive Set whether the interface can receive flow-control packets from a remote device.
  • Page 137 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands flowcontrol Table 2-5 shows the flow control results on local and remote ports for a combination of settings. The table assumes that receive desired has the same results as using the receive on keywords.
  • Page 138: Interface Port-Channel

    Only one port channel in a channel group is allowed. Follow these guidelines when you use the interface port-channel command: If you want to use the Cisco Discovery Protocol (CDP), you must configure it only on the physical • port and not on the port-channel interface.
  • Page 139 Displays EtherChannel information for a channel. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference...
  • Page 140: Interface Range

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range interface range Use the interface range global configuration command to enter interface range configuration mode and to execute a command on multiple ports at the same time. Use the no form of this command to remove an interface range.
  • Page 141: Interface Range

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range Valid values for port-range type and interface: vlan vlan-ID, where VLAN ID is from 1 to 4094 • Although the command-line interface (CLI) shows options to set multiple VLANs, these are Note not supported.
  • Page 142 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range Related Commands Command Description define interface-range Creates an interface range macro. show running-config Displays the configuration information currently running on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 143: Interface Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface vlan interface vlan Use the interface vlan global configuration command to create or access a VLAN and to enter interface configuration mode. Use the no form of this command to delete a VLAN.
  • Page 144: Ip Access-Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip access-group ip access-group Use the ip access-group interface configuration command to control access to a Layer 2 interface. Use the no form of this command to remove all access groups or the specified access group from the interface.
  • Page 145 IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands ip access-list Configures a named ACL. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands.
  • Page 146: Ip Address

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip address ip address Use the ip address interface configuration command to set an IP address for the Layer 2 switch. Use the no form of this command to remove an IP address or to disable IP processing.
  • Page 147 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip address Examples This example shows how to configure the IP address for the Layer 2 switch on a subnetted network: Switch(config)# interface vlan 1 Switch(config-if)# ip address 172.20.128.2 255.255.255.0 You can verify your settings by entering the show running-config privileged EXEC command.
  • Page 148: Ip Admission

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission ip admission To use this command, the switch must be running the LAN Base image. Note Use the ip admission interface configuration command to enable web authentication. You can also use this command in fallback-profile mode.
  • Page 149 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission Command Description ip admission name Enable web authentication globally on a switch proxy http show ip admission Displays information about NAC cached entries or the NAC configuration. For more information, see the...
  • Page 150: Ip Admission Name Proxy Http

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission name proxy http ip admission name proxy http To use this command, the switch must be running the LAN Base image. Note Use the ip admission name proxy http global configuration command to enable web authentication.
  • Page 151: Ip Admission Name Proxy Http

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission name proxy http Related Commands Command Description dot1x fallback Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. fallback profile Create a web authentication fallback profile.
  • Page 152: Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping ip dhcp snooping To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping global configuration command to globally enable DHCP snooping. Use the no form of this command to return to the default setting.
  • Page 153: Ip Dhcp Snooping Binding

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping binding ip dhcp snooping binding To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping binding privileged EXEC command to configure the DHCP snooping binding database and to add binding entries to the database.
  • Page 154: Ip Dhcp Snooping Binding

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping binding Examples This example shows how to generate a DHCP binding configuration with an expiration time of 1000 seconds on a port in VLAN 1: Switch# ip dhcp snooping binding 0001.1234.1234 vlan 1 172.20.50.5 interface...
  • Page 155: Ip Dhcp Snooping Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping database ip dhcp snooping database To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping database global configuration command to configure the DHCP snooping binding database agent.
  • Page 156 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping database Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines The DHCP snooping binding database can have up to 8192 bindings. To ensure that the lease time in the database is accurate, we recommend that Network Time Protocol (NTP) is enabled and configured for these features: •...
  • Page 157: Ip Dhcp Snooping Information Option

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option ip dhcp snooping information option To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping information option global configuration command to enable DHCP option-82 data insertion.
  • Page 158: Ip Dhcp Snooping Information Option

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option Related Commands Command Description show ip dhcp snooping Displays the DHCP snooping configuration. show ip dhcp snooping binding Displays the DHCP snooping binding information. Catalyst 2960 Switch Command Reference...
  • Page 159: Ip Dhcp Snooping Information Option Allow-Untrusted

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted ip dhcp snooping information option allow-untrusted To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping information option allow-untrusted global configuration command on an aggregation switch to configure it to accept DHCP packets with option-82 information that are received on untrusted ports that might be connected to an edge switch.
  • Page 160 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted Examples This example shows how to configure an access switch to not check the option-82 information in untrusted packets from an edge switch and to accept the packets: Switch(config)# ip dhcp snooping information option allow-untrusted You can verify your settings by entering the show ip dhcp snooping user EXEC command.
  • Page 161: Ip Dhcp Snooping Limit Rate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping limit rate ip dhcp snooping limit rate To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping limit rate interface configuration command to configure the number of DHCP messages an interface can receive per second.
  • Page 162: Ip Dhcp Snooping Limit Rate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping limit rate Related Commands Command Description errdisable recovery Configures the recover mechanism. show ip dhcp snooping Displays the DHCP snooping configuration. show ip dhcp snooping binding Displays the DHCP snooping binding information.
  • Page 163: Ip Dhcp Snooping Trust

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping trust ip dhcp snooping trust To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping trust interface configuration command to configure a port as trusted for DHCP snooping purposes.
  • Page 164: Ip Dhcp Snooping Verify

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping verify ip dhcp snooping verify To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping verify global configuration command to configure the switch to verify on an untrusted port that the source MAC address in a DHCP packet matches the client hardware address.
  • Page 165: Ip Dhcp Snooping Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping vlan ip dhcp snooping vlan To use this command, the switch must be running the LAN Base image. Note Use the ip dhcp snooping vlan global configuration command to enable DHCP snooping on a VLAN.
  • Page 166: Ip Igmp Filter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp filter ip igmp filter Use the ip igmp filter interface configuration command to control whether or not all hosts on a Layer 2 interface can join one or more IP multicast groups by applying an Internet Group Management Protocol (IGMP) profile to the interface.
  • Page 167 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp filter Command Description show running-config interface Displays the running configuration on the switch interface, including interface-id the IGMP profile (if any) that is applied to an interface. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 168: Ip Igmp Max-Groups

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp max-groups ip igmp max-groups Use the ip igmp max-groups interface configuration command to set the maximum number of Internet Group Management Protocol (IGMP) groups that a Layer 2 interface can join or to configure the IGMP throttling action when the maximum number of entries is in the forwarding table.
  • Page 169 Displays the running configuration on the switch interface, including interface-id the maximum number of IGMP groups that an interface can join and the throttling action. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 170: Ip Igmp Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp profile ip igmp profile Use the ip igmp profile global configuration command to create an Internet Group Management Protocol (IGMP) profile and enter IGMP profile configuration mode. From this mode, you can specify the configuration of the IGMP profile to be used for filtering IGMP membership reports from a switchport.
  • Page 171: Ip Igmp Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp profile Related Commands Command Description ip igmp filter Applies the IGMP profile to the specified interface. show ip dhcp snooping Displays the characteristics of all IGMP profiles or the specified statistics IGMP profile number.
  • Page 172: Ip Igmp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping ip igmp snooping Use the ip igmp snooping global configuration command to globally enable Internet Group Management Protocol (IGMP) snooping on the switch or to enable it on a per-VLAN basis. Use the no form of this command to return to the default setting.
  • Page 173 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip dhcp snooping statistics Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 174: Ip Igmp Snooping Last-Member-Query-Interval

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval ip igmp snooping last-member-query-interval Use the ip igmp snooping last-member-query-interval global configuration command to enable the Internet Group Management Protocol (IGMP) configurable-leave timer globally or on a per-VLAN basis.
  • Page 175 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan immediate-leave Enables IGMP Immediate-Leave processing. ip igmp snooping vlan mrouter Configures a Layer 2 port as a multicast router port.
  • Page 176: Ip Igmp Snooping Querier

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping querier ip igmp snooping querier Use the ip igmp snooping querier global configuration command to globally enable the Internet Group Management Protocol (IGMP) querier function in Layer 2 networks. Use the command with keywords to enable and configure the IGMP querier feature on a VLAN interface.
  • Page 177: Ip Igmp Snooping Querier

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping querier Usage Guidelines Use this command to enable IGMP snooping to detect the IGMP version and IP address of a device that sends IGMP query messages, which is also called a querier.
  • Page 178: Ip Igmp Snooping Report-Suppression

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping report-suppression ip igmp snooping report-suppression Use the ip igmp snooping report-suppression global configuration command to enable Internet Group Management Protocol (IGMP) report suppression. Use the no form of this command to disable IGMP report suppression and to forward all IGMP reports to multicast routers.
  • Page 179 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping report-suppression Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. show ip igmp snooping Displays the IGMP snooping configuration of the switch or the VLAN.
  • Page 180: Ip Igmp Snooping Tcn

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn ip igmp snooping tcn Use the ip igmp snooping tcn global configuration command to configure the Internet Group Management Protocol (IGMP) Topology Change Notification (TCN) behavior. Use the no form of this command to return to the default settings.
  • Page 181 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping tcn flood Specifies flooding on an interface as the IGMP snooping spanning-tree TCN behavior.
  • Page 182: Ip Igmp Snooping Tcn Flood

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn flood ip igmp snooping tcn flood Use the ip igmp snooping tcn flood interface configuration command to specify multicast flooding as the Internet Group Management Protocol (IGMP) snooping spanning-tree Topology Change Notification (TCN) behavior.
  • Page 183: Ip Igmp Snooping Vlan Immediate-Leave

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan immediate-leave ip igmp snooping vlan immediate-leave Use the ip igmp snooping immediate-leave global configuration command to enable Internet Group Management Protocol (IGMP) snooping immediate-leave processing on a per-VLAN basis. Use the no form of this command to return to the default setting.
  • Page 184 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan immediate-leave Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 185: Ip Igmp Snooping Vlan Mrouter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan mrouter ip igmp snooping vlan mrouter Use the ip igmp snooping mrouter global configuration command to add a multicast router port or to configure the multicast learning method. Use the no form of this command to return to the default settings.
  • Page 186: Ip Igmp Snooping Vlan Mrouter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan mrouter Examples This example shows how to configure a port as a multicast router port: Switch(config)# ip igmp snooping vlan 1 mrouter interface gigabitethernet0/22 This example shows how to specify the multicast router learning method as CGMP: Switch(config)# ip igmp snooping vlan 1 mrouter learn cgmp You can verify your settings by entering the show ip igmp snooping privileged EXEC command.
  • Page 187: Ip Igmp Snooping Vlan Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan static ip igmp snooping vlan static Use the ip igmp snooping static global configuration command to enable Internet Group Management Protocol (IGMP) snooping and to statically add a Layer 2 port as a member of a multicast group. Use the no form of this command to remove ports specified as members of a static multicast group.
  • Page 188: Ip Igmp Snooping Vlan Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan static Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 189: Ip Ssh

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip ssh ip ssh Use the ip ssh global configuration command to configure the switch to run Secure Shell (SSH) Version 1 or SSH Version 2. This command is available only when your switch is running the cryptographic (encrypted) software image.
  • Page 190 Features > Secure Shell Commands. show ssh Displays the status of the SSH server. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Security Command Reference, Release 12.2 > Other Security Features >...
  • Page 191: Lacp Port-Priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp port-priority lacp port-priority Use the lacp port-priority interface configuration command to configure the port priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
  • Page 192 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp port-priority Examples This example shows how to configure the LACP port priority on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# lacp port-priority 1000 You can verify your settings by entering the show lacp [channel-group-number] internal privileged EXEC command.
  • Page 193: Lacp System-Priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp system-priority lacp system-priority Use the lacp system-priority global configuration command to configure the system priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
  • Page 194: Location (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (global configuration) location (global configuration) Command Description channel-group Assigns an Ethernet port to an EtherChannel group. lacp port-priority Configures the LACP port priority. show lacp sys-id Displays the system identifier that is being used by LACP.
  • Page 195 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (global configuration) Switch(config-civic)# room C6 Switch(config-civic)# county "Santa Clara" Switch(config-civic)# country US Switch(config-civic)# end You can verify your settings by entering the show location civic-location privileged EXEC command. This example shows how to configure the emergency location information on the switch: Switch (config)# location elin-location 14085553881 identifier 1 You can verify your settings by entering the show location elin privileged EXEC command.
  • Page 196: Location (Interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (interface configuration) location (interface configuration) Use the location interface command to enter location information for an interface. Use the no form of this command to remove the interface location information. location {additional-location-information word | civic-location-id id | elin-location-id id}...
  • Page 197 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (interface configuration) This example shows how to enter emergency location information for an interface: Switch(config)# int g2/0/2 Switch(config-if)# location elin-location-id 1 Switch(config-if)# end You can verify your settings by entering the show location elin interface privileged EXEC command.
  • Page 198: Link State Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands link state group link state group Use the link state group interface configuration command to configure a port as a member of a link-state group. Use the no form of this command to remove the port from the link-state group.
  • Page 199: Link State Group

    Displays the link-state group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-173...
  • Page 200: Link State Track

    Displays the link-state group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-174...
  • Page 201: Logging Event

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging event logging event Use the logging event interface configuration command to enable notification of interface link status changes. Use the no form of this command to disable notification. logging event {bundle-status | link-status | spanning-tree | status | trunk status}...
  • Page 202: Logging File

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging file logging file Use the logging file global configuration command to set logging file parameters. Use the no form of this command to return to the default setting. logging file filesystem:filename [max-file-size | nomax [min-file-size]] [severity-level-number |...
  • Page 203 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging file Usage Guidelines The log file is stored in ASCII text format in an internal buffer on the switch. You can access logged system messages by using the switch command-line interface (CLI) or by saving them to a properly configured syslog server.
  • Page 204: Mac Access-Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-group mac access-group To use this command, the switch must be running the LAN Base image. Note Use the mac access-group interface configuration command to apply a MAC access control list (ACL) to a Layer 2 interface.
  • Page 205 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-group Examples This example shows how to apply a MAC extended ACL named macacl2 to an interface: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mac access-group macacl2 in You can verify your settings by entering the show mac access-group privileged EXEC command. You can see configured ACLs on the switch by entering the show access-lists privileged EXEC command.
  • Page 206: Mac Access-List Extended

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-list extended mac access-list extended To use this command, the switch must be running the LAN Base image. Note Use the mac access-list extended global configuration command to create an access list based on MAC addresses for non-IP traffic.
  • Page 207 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-list extended Examples This example shows how to create a MAC named extended access list named mac1 and to enter extended MAC access-list configuration mode: Switch(config)# mac access-list extended mac1 Switch(config-ext-macl)#...
  • Page 208: Mac Address-Table Aging-Time

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table aging-time mac address-table aging-time Use the mac address-table aging-time global configuration command to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated. Use the no form of this command to return to the default setting.
  • Page 209: Mac Address-Table Move Update

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table move update mac address-table move update To use this command, the switch must be running the LAN Base image. Note Use the mac address-table move update global configuration command to enable the MAC address-table move update feature.
  • Page 210 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table move update You can verify your settings by entering the show mac address-table move update privileged EXEC command. Related Commands Command Description clear mac address-table move Clears the MAC address-table move update global counters.
  • Page 211: Mac Address-Table Notification

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table notification mac address-table notification Use the mac address-table notification global configuration command to enable the MAC address notification feature on the switch. Use the no form of this command to return to the default setting.
  • Page 212 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table notification Examples This example shows how to enable the MAC address-table notification feature, set the interval time to 60 seconds, and set the history-size to 100 entries: Switch(config)# mac address-table notification...
  • Page 213: Mac Address-Table Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static mac address-table static Use the mac address-table static global configuration command to add static addresses to the MAC address table. Use the no form of this command to remove static entries from the table.
  • Page 214: Mac Address-Table Static Drop

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static drop mac address-table static drop Use the mac address-table static drop global configuration command to enable unicast MAC address filtering and to configure the switch to drop traffic with a specific source or destination MAC address.
  • Page 215: Mac Address-Table Static Drop

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static drop Examples This example shows how to enable unicast MAC address filtering and to configure the switch to drop packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in VLAN 4 with this MAC address as its source or destination, the packet is dropped: Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 drop...
  • Page 216: Macro Apply

    There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
  • Page 217: Macro Apply

    Applying command...‘duplex auto’ %Error Unknown error. Applying command...‘speed nonegotiate’ This example shows how to display the Cisco-default cisco-desktop macro and how to apply the macro and set the access VLAN ID to 25 on an interface: Switch# show parser macro cisco-desktop...
  • Page 218 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro apply # Configure port as an edge network port spanning-tree portfast spanning-tree bpduguard enable -------------------------------------------------------------- Switch# Switch# configure terminal Switch(config)# interface gigabitethernet0/4 Switch(config-if)# macro apply cisco-desktop $AVID 25 Related Commands Command...
  • Page 219: Macro Description

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro description macro description Use the macro description interface configuration command to enter a description about which macros are applied to an interface. Use the no form of this command to remove the description.
  • Page 220: Macro Global

    There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
  • Page 221 Cisco-default macro with the required values by using the parameter value keywords. The Cisco-default macros use the $ character to help identify required keywords. There is no restriction on using the $ character to define keywords when you create a macro.
  • Page 222 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro global Related Commands Command Description macro apply Applies a macro on an interface or applies and traces a macro on an interface. macro description Adds a description about the macros that are applied to an interface.
  • Page 223: Macro Global Description

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro global description macro global description Use the macro global description global configuration command to enter a description about the macros that are applied to the switch. Use the no form of this command to remove the description.
  • Page 224: Macro Name

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro name macro name Use the macro name global configuration command to create a configuration macro. Use the no form of this command to delete the macro definition. macro name macro-name no macro name macro-name...
  • Page 225 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro name Examples This example shows how to create a macro that defines the duplex mode and speed: Switch(config)# macro name duplex Enter macro commands one per line. End with the character ‘@’.
  • Page 226: Match (Class-Map Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands match (class-map configuration) match (class-map configuration) To use this command, the switch must be running the LAN Base image. Note Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.
  • Page 227 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands match (class-map configuration) Examples This example shows how to create a class map called class2, which matches all the incoming traffic with DSCP values of 10, 11, and 12: Switch(config)# class-map class2...
  • Page 228: Mdix Auto

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mdix auto mdix auto Use the mdix auto interface configuration command to enable the automatic medium-dependent interface crossover (auto-MDIX) feature on the interface. When auto-MDIX is enabled, the interface automatically detects the required cable connection type (straight-through or crossover) and configures the connection appropriately.
  • Page 229 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mdix auto Related Commands Command Description show controllers Displays general information about internal registers of an interface, ethernet-controller including the operational state of auto-MDIX. interface-id phy Catalyst 2960 Switch Command Reference 2-203...
  • Page 230: Media-Type

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands media-type media-type Use the media-type interface configuration command to manually select the interface and type of a dual-purpose uplink port or to enable the switch to dynamically select the type that first links up. Use the no form of this command to return to the default setting.
  • Page 231 If you configure auto-select, you cannot configure the speed and duplex interface configuration commands. The Catalyst 2960 switch operates with 100BASE-X (where -X is -BX, -FX, -FE, -LX) SFP modules as follows: When the 100BASE -X SFP module is inserted into the module slot and there is no link on the RJ-45 •...
  • Page 232: Mls Qos

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos mls qos Use the mls qos global configuration command to enable quality of service (QoS) for the entire switch. When the mls qos command is entered, QoS is enabled with the default parameters on all ports in the system.
  • Page 233 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos Related Commands Command Description show mls qos Displays QoS information. Catalyst 2960 Switch Command Reference 2-207 OL-8604-04...
  • Page 234: Mls Qos Aggregate-Policer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos aggregate-policer mls qos aggregate-policer To use this command, the switch must be running the image. Note Use the mls qos aggregate-policer global configuration command to define policer parameters, which can be shared by multiple classes within the same policy map. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
  • Page 235 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos aggregate-policer You apply an aggregate policer to multiple classes in the same policy map; you cannot use an aggregate policer across different policy maps. You cannot delete an aggregate policer if it is being used in a policy map. You must first use the no police...
  • Page 236: Mls Qos Cos

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos cos mls qos cos Use the mls qos cos interface configuration command to define the default class of service (CoS) value of a port or to assign the default CoS to all incoming packets on the port. Use the no form of this command to return to the default setting.
  • Page 237 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos cos Examples This example shows how to configure the default port CoS to 4 on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mls qos trust cos Switch(config-if)# mls qos cos 4...
  • Page 238: Mls Qos Dscp-Mutation

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos dscp-mutation mls qos dscp-mutation To use this command, the switch must be running the LAN Base image. Note Use the mls qos dscp-mutation interface configuration command to apply a Differentiated Services Code Point (DSCP)-to-DSCP-mutation map to a DSCP-trusted port.
  • Page 239 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos dscp-mutation Switch(config-if)# mls qos dscp-mutation dscpmutation1 This example show how to remove the DSCP-to-DSCP-mutation map name dscpmutation1 from the port and to reset the map to the default: Switch(config-if)# no mls qos dscp-mutation dscpmutation1 You can verify your settings by entering the show mls qos maps privileged EXEC command.
  • Page 240: Mls Qos Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map mls qos map To use this command, the switch must be running the LAN Base image. Note Use the mls qos map global configuration command to define the class of service (CoS)-to-Differentiated Services Code Point (DSCP) map, DSCP-to-CoS map, the DSCP-to-DSCP-mutation map, the IP-precedence-to-DSCP map, and the policed-DSCP map.
  • Page 241 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map Defaults Table 2-6 shows the default CoS-to-DSCP map: Table 2-6 Default CoS-to-DSCP Map CoS Value DSCP Value Table 2-7 shows the default DSCP-to-CoS map: Table 2-7 Default DSCP-to-CoS Map...
  • Page 242 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map The default DSCP-to-DSCP-mutation map is a null map, which maps an incoming DSCP value to the same DSCP value. The default policed-DSCP map is a null map, which maps an incoming DSCP value to the same DSCP value.
  • Page 243 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map Related Commands Command Description mls qos dscp-mutation Applies a DSCP-to-DSCP-mutation map to a DSCP-trusted port. show mls qos maps Displays quality of service (QoS) mapping information. Catalyst 2960 Switch Command Reference...
  • Page 244: Mls Qos Queue-Set Output Buffers

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output buffers mls qos queue-set output buffers To use this command, the switch must be running the LAN Base image. Note Use the mls qos queue-set output buffers global configuration command to allocate buffers to a queue-set (four egress queues per port).
  • Page 245 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output buffers Switch(config-if)# queue-set 2 You can verify your settings by entering the show mls qos interface [interface-id] buffers or the show mls qos queue-set privileged EXEC command. Related Commands...
  • Page 246: Mls Qos Queue-Set Output Threshold

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output threshold mls qos queue-set output threshold To use this command, the switch must be running the LAN Base image. Note Use the mls qos queue-set output threshold global configuration command to configure the weighted tail-drop (WTD) thresholds, to guarantee the availability of buffers, and to configure the maximum memory allocation to a queue-set (four egress queues per port).
  • Page 247 400 percent, or 4 times the allocated number of buffers. One packet can use one 1 or more buffers. The range increased in Cisco IOS Release 12.2(25)SEE1 or later for the drop-threshold, drop-threshold2, and maximum-threshold parameters.
  • Page 248: Mls Qos Rewrite Ip Dscp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos rewrite ip dscp mls qos rewrite ip dscp Use the mls qos rewrite ip dscp global configuration command to configure the switch to change (rewrite) the Differentiated Services Code Point (DSCP) field of an incoming IP packet. Use the no form of this command to configure the switch to not modify (rewrite) the DSCP field of the packet and to enable DSCP transparency.
  • Page 249 | Displays the DSCP transparency setting. For syntax information, select include rewrite Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 250: Mls Qos Srr-Queue Input Bandwidth

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input bandwidth mls qos srr-queue input bandwidth To use this command, the switch must be running the LAN Base image. Note Use the mls qos srr-queue input bandwidth global configuration command to assign shaped round robin (SRR) weights to an ingress queue.
  • Page 251 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input bandwidth This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
  • Page 252: Mls Qos Srr-Queue Input Buffers

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input buffers mls qos srr-queue input buffers To use this command, the switch must be running the LAN Base image. Note Use the mls qos srr-queue input buffers global configuration command to allocate the buffers between the ingress queues.
  • Page 253 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input buffers Command Description mls qos srr-queue input priority-queue Configures the ingress priority queue and guarantees bandwidth. mls qos srr-queue input threshold Assigns weighted tail-drop (WTD) threshold percentages to an ingress queue.
  • Page 254: Mls Qos Srr-Queue Input Cos-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input cos-map mls qos srr-queue input cos-map Use the mls qos srr-queue input cos-map global configuration command to map class of service (CoS) values to an ingress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
  • Page 255 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input cos-map Usage Guidelines The CoS assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
  • Page 256: Mls Qos Srr-Queue Input Dscp-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input dscp-map mls qos srr-queue input dscp-map To use this command, the switch must be running the LAN Base image. Note Use the mls qos srr-queue input dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an ingress queue or to map DSCP values to a queue and to a threshold ID.
  • Page 257 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input dscp-map Usage Guidelines The DSCP assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
  • Page 258: Mls Qos Srr-Queue Input Priority-Queue

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input priority-queue mls qos srr-queue input priority-queue Use the mls qos srr-queue input priority-queue global configuration command to configure the ingress priority queue and to guarantee bandwidth on the internal ring if the ring is congested. Use the no form of this command to return to the default setting.
  • Page 259 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input priority-queue Examples This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
  • Page 260: Mls Qos Srr-Queue Input Threshold

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input threshold mls qos srr-queue input threshold To use this command, the switch must be running the LAN Base image. Note Use the mls qos srr-queue input threshold global configuration command to assign weighted tail-drop (WTD) threshold percentages to an ingress queue.
  • Page 261 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input threshold You can verify your settings by entering the show mls qos interface [interface-id] buffers or the show mls qos input-queue privileged EXEC command. Related Commands Command Description...
  • Page 262: Mls Qos Srr-Queue Output Cos-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output cos-map mls qos srr-queue output cos-map Use the mls qos srr-queue output cos-map global configuration command to map class of service (CoS) values to an egress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
  • Page 263 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output cos-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
  • Page 264: Mls Qos Srr-Queue Output Dscp-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output dscp-map mls qos srr-queue output dscp-map To use this command, the switch must be running the LAN Base image. Note Use the mls qos srr-queue output dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an egress or to map DSCP values to a queue and to a threshold ID.
  • Page 265 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output dscp-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
  • Page 266: Mls Qos Trust

    (Optional) Classify an ingress packet by trusting the CoS or DSCP value sent from the Cisco IP Phone (trusted boundary), depending on the trust setting. dscp (Optional) Classify an ingress packet by using the packet DSCP value (most significant 6 bits of 8-bit service-type field).
  • Page 267: Mls Qos Trust

    The trusted boundary feature prevents security problems if users disconnect their PCs from networked Cisco IP Phones and connect them to the switch port to take advantage of trusted CoS or DSCP settings. You must globally enable the Cisco Discovery Protocol (CDP) on the switch and on the port connected to the IP phone.
  • Page 268: Monitor Session

    Remote SPAN (RSPAN) source or destination session, to enable ingress traffic on the destination port for a network security device (such as a Cisco IDS Sensor Appliance), to add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, and to limit (filter) SPAN source traffic to specific VLANs.
  • Page 269 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session dot1q vlan vlan-id Accept incoming packets with IEEE 802.1Q encapsulation with the specified VLAN as the default VLAN. untagged vlan vlan-id Accept incoming packets with untagged encapsulation with the specified VLAN as the default VLAN.
  • Page 270 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session You can set a combined maximum of two local SPAN sessions and RSPAN source sessions. You can have a total of 66 SPAN and RSPAN sessions on a switch. You can have a maximum of 64 destination ports on a switch.
  • Page 271 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session When you enter monitor session session_number destination interface interface-id encapsulation • dot1q ingress, egress encapsulation uses the IEEE 802.1Q encapsulation method; ingress encapsulation depends on the keywords that follow—dot1q or untagged. (This applies to local SPAN only;...
  • Page 272 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session Related Commands Command Description remote-span Configures an RSPAN VLAN in vlan configuration mode. show monitor Displays SPAN and RSPAN session information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 273: Mvr (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) mvr (global configuration) To use this command, the switch must be running the LAN Base image. Note Use the mvr global configuration command without keywords to enable the multicast VLAN registration (MVR) feature on the switch.
  • Page 274 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) The default multicast VLAN for MVR is VLAN 1. Command Modes Global configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines A maximum of 256 MVR multicast groups can be configured on a switch.
  • Page 275 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) Related Commands Command Description mvr (interface configuration) Configures MVR ports. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces with their type, status, and Immediate Leave configuration.
  • Page 276: Mvr (Interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) mvr (interface configuration) To use this command, the switch must be running the LAN Base image. Note Use the mvr interface configuration command to configure a Layer 2 port as a multicast VLAN registration (MVR) receiver or source port, to set the Immediate Leave feature, and to statically assign a port to an IP multicast VLAN and IP address.
  • Page 277 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) Usage Guidelines Configure a port as a source port if that port should be able to both send and receive multicast data bound for the configured multicast groups. Multicast data is received on all ports configured as source ports.
  • Page 278 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces or displays the multicast groups to which a receiver port belongs.
  • Page 279: Pagp Learn-Method

    PAgP interoperability with devices that only support address learning by physical ports, such as the Catalyst 1900 switch. When the link partner to the Catalyst 2960 switch is a physical learner, we recommend that you configure the switch as a physical-port learner by using the pagp learn-method physical-port interface configuration command and to set the load-distribution method based on the source MAC address by using the port-channel load-balance src-mac global configuration command.
  • Page 280 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference 2-254...
  • Page 281: Pagp Port-Priority

    PAgP interoperability with devices that only support address learning by physical ports, such as the Catalyst 1900 switch. When the link partner to the Catalyst 2960 switch is a physical learner, we recommend that you configure the switch as a physical-port learner by using the pagp learn-method physical-port interface configuration command and to set the load-distribution method based on the source MAC address by using the port-channel load-balance src-mac global configuration command.
  • Page 282 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference 2-256...
  • Page 283: Permit (Mac Access-List Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) permit (MAC access-list configuration) To use this command, the switch must be running the LAN Base image. Note Use the permit MAC access-list configuration command to allow non-IP traffic to be forwarded if the conditions are matched.
  • Page 284 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) etype-8042 (Optional) Select EtherType 0x8042. (Optional) Select EtherType DEC-LAT. lavc-sca (Optional) Select EtherType DEC-LAVC-SCA. lsap lsap-number mask (Optional) Use the LSAP number (0 to 65535) of a packet with 802.2 encapsulation to identify the protocol of the packet.
  • Page 285 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) Usage Guidelines You enter MAC access-list configuration mode by using the mac access-list extended global configuration command. If you use the host keyword, you cannot enter an address mask; if you do not use the any or host keywords, you must enter an address mask.
  • Page 286: Police

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police police To use this command, the switch must be running the LAN Base image. Note Use the police policy-map class configuration command to define a policer for classified traffic. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
  • Page 287 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police Policing uses a token-bucket algorithm. You configure the bucket depth (the maximum burst that is tolerated before the bucket overflows) by using the burst-byte option of the police policy-map class configuration command or the mls qos aggregate-policer global configuration command. You configure...
  • Page 288: Police Aggregate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police aggregate police aggregate To use this command, the switch must be running the LAN Base image. Note Use the police aggregate policy-map class configuration command to apply an aggregate policer to multiple classes in the same policy map.
  • Page 289 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police aggregate Examples This example shows how to define the aggregate policer parameters and to apply the policer to multiple classes in a policy map: Switch(config)# mls qos aggregate-policer agg_policer1 1000000 8000 exceed-action drop...
  • Page 290: Policy-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands policy-map policy-map To use this command, the switch must be running the LAN Base image. Note Use the policy-map global configuration command to create or modify a policy map that can be attached to multiple physical ports and to enter policy-map configuration mode.
  • Page 291 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands policy-map You can configure class policies in a policy map only if the classes have match criteria defined for them. To configure the match criteria for a class, use the class-map global configuration and match class-map configuration commands.
  • Page 292: Port-Channel Load-Balance

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands port-channel load-balance port-channel load-balance Use the port-channel load-balance global configuration command to set the load-distribution method among the ports in the EtherChannel. Use the no form of this command to return to the default setting.
  • Page 293 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands port-channel load-balance Related Commands Command Description interface port-channel Accesses or creates the port channel. show etherchannel Displays EtherChannel information for a channel. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 294: Priority-Queue

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands priority-queue priority-queue Use the priority-queue interface configuration command to enable the egress expedite queue on a port. Use the no form of this command to return to the default setting. priority-queue out...
  • Page 295 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands priority-queue Switch(config-if)# srr-queue bandwidth share 30 20 25 25 Switch(config-if)# no priority-queue out You can verify your settings by entering the show mls qos interface interface-id queueing or the show running-config privileged EXEC command.
  • Page 296: Queue-Set

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands queue-set queue-set To use this command, the switch must be running the LAN Base image. Note Use the queue-set interface configuration command to map a port to a queue-set. Use the no form of this command to return to the default setting.
  • Page 297: Radius-Server Host

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands radius-server host radius-server host Use the radius-server host global configuration command to configure the RADIUS server parameters, including the RADIUS accounting and authentication. Use the no form of this command to return to the default settings.
  • Page 298 {0 string | 7 string | Sets the authentication and encryption key for all RADIUS string} communications between the router and the RADIUS daemon. For syntax information, select Cisco IOS Security Command Reference, Release 12.2 > Server Security Protocols > RADIUS Commands. show running-config Displays the running configuration on the switch.
  • Page 299: Radius-Server Dead-Criteria

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands radius-server dead-criteria radius-server dead-criteria Use the radius-server dead-criteria global configuration command to configure the conditions that determine when a RADIUS server is considered unavailable or dead. Use the no form of this command to return to the default settings.
  • Page 300 Specifies the number of times that the switch tries to reach the RADIUS servers before considering the servers to be unavailable. For syntax information, select Cisco IOS Security Command Reference, Release 12.2 > Server Security Protocols > RADIUS Commands.
  • Page 301: Rcommand

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands rcommand rcommand Use the rcommand user EXEC command to start a Telnet session and to execute commands on a cluster member switch from the cluster command switch. To end the session, enter the exit command.
  • Page 302 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands rcommand This command will not work if the vty lines of the cluster command switch have access-class configurations. You are not prompted for a password because the cluster member switches inherited the password of the cluster command switch when they joined the cluster.
  • Page 303: Remote-Span

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands remote-span remote-span To use this command, the switch must be running the LAN Base image. Note Use the remote-span VLAN configuration command to configure a VLAN as a Remote Switched Port Analyzer (RSPAN) VLAN. Use the no form of this command to remove the RSPAN designation from the VLAN.
  • Page 304 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands remote-span Examples This example shows how to configure a VLAN as an RSPAN VLAN. Switch(config)# vlan 901 Switch(config-vlan)# remote-span This example shows how to remove the RSPAN feature from a VLAN. Switch(config)# vlan 901 Switch(config-vlan)# no remote-span You can verify your settings by entering the show vlan remote-span user EXEC command.
  • Page 305: Renew Ip Dhcp Snooping Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands renew ip dhcp snooping database renew ip dhcp snooping database To use this command, the switch must be running the LAN Base image. Note Use the renew ip dhcp snooping database privileged EXEC command to renew the DHCP snooping binding database.
  • Page 306 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands renew ip dhcp snooping database Related Commands Command Description ip dhcp snooping Enables DHCP snooping on a VLAN. ip dhcp snooping binding Configures the DHCP snooping binding database. show ip dhcp snooping database Displays the status of the DHCP snooping database agent.
  • Page 307 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands renew ip dhcp snooping database Catalyst 2960 Switch Command Reference 2-281 OL-8604-04...
  • Page 308: Rmon Collection Stats

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands rmon collection stats rmon collection stats Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include usage statistics about broadcast and multicast packets, and error statistics about cyclic redundancy check (CRC) alignment errors and collisions.
  • Page 309: Sdm Prefer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands sdm prefer sdm prefer Use the sdm prefer global configuration command to configure the template used in Switch Database Management (SDM) resource allocation. You can use a template to allocate system resources to best support the features being used in your application.
  • Page 310 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands sdm prefer Examples This example shows how to use the QoS template: Switch(config)# sdm prefer qos Switch(config)# exit Switch# reload You can verify your settings by entering the show sdm prefer privileged EXEC command.
  • Page 311: Service Password-Recovery

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands service password-recovery service password-recovery Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the bootup process while the switch is powering up and to assign a new password.
  • Page 312 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands service password-recovery If you use the no service password-recovery command to control end user access to passwords, we Note recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values.
  • Page 313: Service-Policy

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands service-policy service-policy To use this command, the switch must be running the LAN Base image. Note Use the service-policy interface configuration command on the switch to apply a policy map defined by the policy-map command to the input of a physical port.
  • Page 314 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands service-policy Related Commands Command Description policy-map Creates or modifies a policy map that can be attached to multiple ports to specify a service policy. show policy-map Displays QoS policy maps. show running-config Displays the running configuration on the switch.
  • Page 315: Set

    In Cisco IOS Release 12.2(25)SED or later, you can use the set ip precedence policy-map class configuration command or the set precedence policy-map class configuration command. This setting appears as set ip precedence in the switch configuration.
  • Page 316 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands Examples This example shows how to assign DSCP 10 to all FTP traffic without any policers: Switch(config)# policy-map policy_ftp Switch(config-pmap)# class ftp_class Switch(config-pmap-c)# set dscp 10 Switch(config-pmap)# exit You can verify your settings by entering the show policy-map privileged EXEC command.
  • Page 317: Setup

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands setup setup Use the setup privileged EXEC command to configure the switch with its initial configuration. setup Syntax Description This command has no arguments or keywords. Command Modes Privileged EXEC Command History...
  • Page 318 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands setup Enter host name [Switch]: host-name The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: enable-secret-password...
  • Page 319 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands setup cluster enable cluster-name Use this configuration? [yes/no]: yes [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit.
  • Page 320: Setup Express

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands setup express setup express Use the setup express global configuration command to enable Express Setup mode. Use the no form of this command to disable Express Setup mode. setup express no setup express Syntax Description This command has no arguments or keywords.
  • Page 321 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands setup express Examples This example shows how to enable Express Setup mode: Switch(config)# setup express You can verify that Express Setup mode is enabled by pressing the Mode button: On an unconfigured switch, the LEDs above the Mode button turn solid green after 3 seconds.
  • Page 322: Show Access-Lists

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show access-lists show access-lists To use this command, the switch must be running the LAN Base image. Note Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch.
  • Page 323 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show access-lists Examples This is an example of output from the show access-lists command: Switch# show access-lists Standard IP access list 1 10 permit 1.1.1.1 20 permit 2.2.2.2 30 permit any 40 permit 0.255.255.255, wildcard bits 12.0.0.0 Standard IP access list videowizard_1-1-1-1 10 permit 1.1.1.1...
  • Page 324 Commands. ip access list Configures a named IP access list on the switch. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. mac access-list extended Configures a named or numbered MAC access list on the switch.
  • Page 325: Show Archive Status

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show archive status show archive status Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or the TFTP protocol.
  • Page 326: Show Auto Qos

    • show running-config • Examples This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Switch> show auto qos GigabitEthernet0/4 Catalyst 2960 Switch Command Reference...
  • Page 327 GigabitEthernet0/5 auto qos voip cisco-phone This is an example of output from the show running-config privileged EXEC command when the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Switch# show running-config Building configuration...
  • Page 328 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show auto qos mls qos queue-set output 2 threshold 4 90 250 100 400 mls qos queue-set output 1 buffers 15 20 20 45 mls qos queue-set output 2 buffers 24 20 26 30...
  • Page 329 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show auto qos mls qos trust device cisco-phone service-policy input AutoQoS-Police-CiscoPhone <output truncated> This is an example of output from the show auto qos interface interface-id command when the auto qos voip cisco-phone interface configuration command is entered: Switch>...
  • Page 330: Show Boot

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show boot show boot Use the show boot privileged EXEC command to display the settings of the boot environment variables. show boot [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 331 Helper files extend or patch the functionality of the bootloader. NVRAM/Config file buffer size Displays the buffer size that Cisco IOS uses to hold a copy of the configuration file in memory. The configuration file cannot be larger than the buffer size allocation. Related Commands...
  • Page 332: Show Cable-Diagnostics Tdr

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cable-diagnostics tdr show cable-diagnostics tdr Use the show cable-diagnostics tdr privileged EXEC command to display the Time Domain Reflector (TDR) results. show cable-diagnostics tdr interface interface-id [ | {begin | exclude | include} expression]...
  • Page 333 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cable-diagnostics tdr Table 2-17 Fields Descriptions for the show cable-diagnostics tdr Command Output (continued) Field Description Pair length Location on the cable where the problem is, with respect to your switch. TDR can only find the location in one of these cases: •...
  • Page 334: Show Class-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show class-map show class-map To use this command, the switch must be running the LAN Base image. Note Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic.
  • Page 335: Show Cluster

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster show cluster Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on the cluster command switch and cluster member switches.
  • Page 336 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster This is an example of output when the show cluster command is entered on a cluster member switch: Switch1> show cluster Member switch for cluster “hapuna” Member number: Management IP address: 192.192.192.192...
  • Page 337: Show Cluster Candidates

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster candidates show cluster candidates Use the show cluster candidates privileged EXEC command to display a list of candidate switches. show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]...
  • Page 338 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster candidates This is an example of output from the show cluster candidates command that uses the MAC address of a cluster member switch directly connected to the cluster command switch: Switch>...
  • Page 339: Show Cluster Members

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster members show cluster members Use the show cluster members privileged EXEC command to display information about the cluster members. show cluster members [n | detail] [ | {begin | exclude | include} expression] Syntax Description (Optional) Number that identifies a cluster member.
  • Page 340 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show cluster members This is an example of output from the show cluster members detail command: Switch# show cluster members detail Device 'StLouis1' with member number 0 (Command Switch) Device type: cisco WS-C2960 MAC address: 0002.4b29.2e00...
  • Page 341: Show Controllers Cpu-Interface

    12.2(25)FX This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
  • Page 342 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers cpu-interface Supervisor ASIC receive-queue parameters ---------------------------------------- queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4 queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFC queue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4 queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8 <output truncated>...
  • Page 343: Show Controllers Ethernet-Controller

    This display without keywords provides traffic statistics, basically the RMON statistics for all interfaces or for the specified interface. When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
  • Page 344 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller Examples This is an example of output from the show controllers ethernet-controller command for an interface. Table 2-18 describes the Transmit fields, and Table 2-19 describes the Receive fields.
  • Page 345 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-18 Transmit Field Descriptions (continued) Field Description 5 collision frames The number of frames that are successfully sent on an interface after five collisions occur. 6 collision frames The number of frames that are successfully sent on an interface after six collisions occur.
  • Page 346 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-19 Receive Field Descriptions (continued) Field Description Unicast bytes The total amount of memory (in bytes) used by unicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
  • Page 347 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-19 Receive Field Descriptions (continued) Field Description System FCS error frames The total number of frames received on an interface that have a valid length (in bytes) but that do not have the correct FCS values.
  • Page 348 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFF FF0FFF00 86020000 5555FFFF 00000000 StackRacInfo : 73001630 00000003 7F001644 00000003 24140003 FD632B00 18E418E0 FFFFFFFF StackControlStatus : 18E418E0 stackControlStatusMask : FFFFFFFF TransmitBufferFreeListInfo : 00000854 00000800 00000FF8 00000000...
  • Page 349 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers ethernet-controller =========================================================================== Switch 1, PortASIC 1 Statistics --------------------------------------------------------------------------- 0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames 52 RxQ-0, wt-1 enqueue frames 0 RxQ-0, wt-1 drop frames 0 RxQ-0, wt-2 enqueue frames 0 RxQ-0, wt-2 drop frames <output truncated>...
  • Page 350: Show Controllers Tcam

    12.2(25)FX This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
  • Page 351 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers tcam HRR0: 00000000_E000CAFC HRR1: 00000000_00000000 HRR2: 00000000_00000000 HRR3: 00000000_00000000 HRR4: 00000000_00000000 HRR5: 00000000_00000000 HRR6: 00000000_00000000 HRR7: 00000000_00000000 <output truncated> GMR31: FF_FFFFFFFF_FFFFFFFF GMR32: FF_FFFFFFFF_FFFFFFFF GMR33: FF_FFFFFFFF_FFFFFFFF ============================================================================= TCAM related PortASIC 1 registers...
  • Page 352: Show Controllers Utilization

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers utilization show controllers utilization Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports. show controllers [interface-id] utilization [ | {begin | exclude | include} expression]...
  • Page 353 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show controllers utilization Table 2-20 show controllers utilization Field Descriptions Field Description Receive Bandwidth Percentage Displays the received bandwidth usage of the switch, which is the Utilization sum of the received traffic on all the ports divided by the switch receive capacity.
  • Page 354: Show Dot1X

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dot1x show dot1x Use the show dot1x user EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified port. show dot1x [{all [summary] | interface interface-id} [details | statistics]] [ | {begin | exclude |...
  • Page 355 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dot1x Examples This is an example of output from the show dot1x user EXEC command: Switch> show dot1x Sysauthcontrol Enabled Dot1x Protocol Version Critical Recovery Delay Critical EAPOL Disabled This is an example of output from the show dot1x all user EXEC command: Switch>...
  • Page 356 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dot1x This is an example of output from the show dot1x interface interface-id details user EXEC command: Switch# show dot1x interface gigabitethernet0/2 details Dot1x Info for GigabitEthernet0/2 ----------------------------------- = AUTHENTICATOR PortControl...
  • Page 357 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dot1x Table 2-21 show dot1x statistics Field Descriptions Field Description RxStart Number of valid EAPOL-start frames that have been received. RxLogoff Number of EAPOL-logoff frames that have been received. RxResp Number of valid EAP-response frames (other than response/identity frames) that have been received.
  • Page 358: Show Dtp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dtp show dtp Use the show dtp privileged EXEC command to display Dynamic Trunking Protocol (DTP) information for the switch or for a specified interface. show dtp [interface interface-id] [ | {begin | exclude | include} expression]...
  • Page 359 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show dtp Statistics ---------- 3160 packets received (3160 good) 0 packets dropped 0 nonegotiate, 0 bad version, 0 domain mismatches, 0 bad TLVs, 0 other 6320 packets output (6320 good) 3160 native...
  • Page 360: Show Eap

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show eap show eap Use the show eap privileged EXEC command to display Extensible Authentication Protocol (EAP) registration and session information for the switch or for the specified port. show eap {{registrations [method [name] | transport [name]]} | {sessions [credentials name...
  • Page 361 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show eap Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output appear. Examples This is an example of output from the show eap registrations privileged EXEC command: Switch>...
  • Page 362 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show eap This is an example of output from the show eap sessions interface interface-id privileged EXEC command: Switch# show eap sessions gigabitethernet0/1 Role: Authenticator Decision: Fail Lower layer: Dot1x-AuthenticaInterface: Gi0/1 Current method:...
  • Page 363: Show Env

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show env show env Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch. show env {all | fan | power | rps| temperature} [ | {begin | exclude | include} expression] Syntax Description Display both fan and temperature environmental status.
  • Page 364: Show Errdisable Detect

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable detect show errdisable detect Use the show errdisable detect user EXEC command to display error-disabled detection status. show errdisable detect [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 365 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable detect Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable flap-values Displays error condition recognition information. show errdisable recovery Displays error-disabled recovery timer information.
  • Page 366: Show Errdisable Flap-Values

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable flap-values show errdisable flap-values Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause. show errdisable flap-values [ | {begin | exclude | include} expression]...
  • Page 367 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable flap-values Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable detect Displays error-disabled detection status. show errdisable recovery Displays error-disabled recovery timer information.
  • Page 368: Show Errdisable Recovery

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable recovery show errdisable recovery Use the show errdisable recovery user EXEC command to display the error-disabled recovery timer information. show errdisable recovery [ | {begin | exclude | include} expression]...
  • Page 369 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show errdisable recovery Timer interval:300 seconds Interfaces that will be enabled at the next timeout: Interface Errdisable reason Time left(sec) --------- ----------------- -------------- Gi0/2 link-flap Though visible in the output, the unicast-flood field is not valid.
  • Page 370: Show Etherchannel

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show etherchannel show etherchannel Use the show etherchannel user EXEC command to display EtherChannel information for a channel. show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude |...
  • Page 371 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show etherchannel Examples This is an example of output from the show etherchannel 1 detail command: Switch> show etherchannel 1 detail Group state = L2 Ports: 2 Maxports = 16 Port-channels: 1 Max Port-channels = 16...
  • Page 372 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show etherchannel This is an example of output from the show etherchannel 1 summary command: Switch> show etherchannel 1 summary Flags: D - down P - in port-channel I - stand-alone s - suspended...
  • Page 373: Show Fallback Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show fallback profile show fallback profile Use the show fallback profile privileged EXEC command to display the fallback profiles that are configured on a switch. show fallback profile [append | begin | exclude | include | { [redirect | tee] url} expression]...
  • Page 374 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show fallback profile Related Commands Command Description dot1x fallback profile Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. fallback profile profile Create a web authentication fallback profile.
  • Page 375: Show Flowcontrol

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show flowcontrol show flowcontrol Use the show flowcontrol user EXEC command to display the flow control status and statistics. show flowcontrol [interface interface-id | module number] [ | {begin | exclude | include}...
  • Page 376 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show flowcontrol This is an example of output from the show flowcontrol interface interface-id command: Switch> show flowcontrol gigabitethernet0/2 Port Send FlowControl Receive FlowControl RxPause TxPause admin oper admin oper --------- -------- -------- -------- --------...
  • Page 377: Show Interfaces

    (Optional) Display the input and output packets by switching path for the interface. status (Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot. err-disabled (Optional) Display interfaces in error-disabled state.
  • Page 378 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces trunk Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears. | begin (Optional) Display begins with the line that matches the expression.
  • Page 379 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue :0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec...
  • Page 380 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces interface description command when the interface has been described as Connects to Marketing by using the description interface configuration command.
  • Page 381 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in the error-disabled state. Switch# show interfaces status err-disabled Port Name...
  • Page 382 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces Table 2-22 show interfaces switchport Field Descriptions (continued) Field Description Access Mode VLAN Displays the VLAN ID to which the port is configured. Trunking Native Mode VLAN Lists the VLAN ID of the trunk that is in native mode. Lists the allowed VLANs on the trunk.
  • Page 383 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces GigabitEthernet2/0/6 GigabitEthernet2/0/8 Active Up/Backup Up Vlans on Interface Gi 2/0/6: 1-50 Vlans on Interface Gi 2/0/8: 60, 100-120 When a Flex Link interface goes down (LINK_DOWN), VLANs preferred on this interface are moved to the peer interface of the Flex Link pair.
  • Page 384 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces Operational Auto-MDIX: off Configured Media: sfp Active Media: sfp Attached: 10/100/1000BaseTX SFP-10/100/1000BaseTX This is an example of output from the show interfaces interface-id transceiver detail command: Switch# show interfaces gigabitethernet0/3 transceiver detail ITU Channel not available (Wavelength not available), Transceiver is externally calibrated.
  • Page 385: Show Interfaces Counters

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces counters show interfaces counters Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface. show interfaces [interface-id | vlan vlan-id] counters [errors | etherchannel | protocol status |...
  • Page 386 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show interfaces counters This is an example of partial output from the show interfaces counters protocol status command for all interfaces. Switch# show interfaces counters protocol status Protocols allocated: Vlan1: Other, IP...
  • Page 387: Show Inventory

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show inventory show inventory Use the show inventory user EXEC command to display product identification (PID) information for the hardware. show inventory [entity-name | raw] [ | {begin | exclude | include} expression]...
  • Page 388: Show Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping show ip dhcp snooping To use this command, the switch must be running the LAN Base image. Note Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration.
  • Page 389: Show Ip Dhcp Snooping Binding

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping binding show ip dhcp snooping binding To use this command, the switch must be running the LAN Base image. Note Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch.
  • Page 390 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping binding This example shows how to display the DHCP snooping binding entries for a specific IP address: Switch> show ip dhcp snooping binding 10.1.2.150 MacAddress IpAddress Lease(sec) Type...
  • Page 391: Show Ip Dhcp Snooping Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping database show ip dhcp snooping database To use this command, the switch must be running the LAN Base image. Note Use the show ip dhcp snooping database user EXEC command to display the status of the DHCP snooping binding database agent.
  • Page 392 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping database This is an example of output from the show ip dhcp snooping database detail command: Switch# show ip dhcp snooping database detail Agent URL : tftp://10.1.1.1/directory/file Write delay Timer : 300 seconds...
  • Page 393: Show Ip Dhcp Snooping Statistics

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping statistics show ip dhcp snooping statistics To use this command, the switch must be running the LAN Base image. Note Use the show ip dhcp snooping statistics user EXEC command to display DHCP snooping statistics in summary or detail form.
  • Page 394 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping statistics Insertion of opt82 fail Interface Down Unknown output interface Reply output port equal to input port Packet denied by platform Table 2-24 shows the DHCP snooping statistics and their descriptions:...
  • Page 395 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip dhcp snooping statistics Table 2-24 DHCP Snooping Statistics DHCP Snooping Statistic Description Binding mismatch Number of times a RELEASE or DECLINE packet was received on a port that is different than the port in the binding for that MAC address-VLAN pair.
  • Page 396: Show Ip Igmp Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp profile show ip igmp profile Use the show ip igmp profile privileged EXEC command to display all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
  • Page 397: Show Ip Igmp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping show ip igmp snooping Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
  • Page 398 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping Vlan 1: -------- IGMP snooping :Enabled Immediate leave :Disabled Multicast router learning mode :pim-dvmrp Source only learning age timer CGMP interoperability mode :IGMP_ONLY Last member query interval : 100 This is an example of output from the show ip igmp snooping command.
  • Page 399 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping Command Description ip igmp snooping vlan static Statically adds a Layer 2 port as a member of a multicast group. show ip igmp snooping groups Displays the IGMP snooping multicast table for the switch.
  • Page 400: Show Ip Igmp Snooping Groups

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping groups show ip igmp snooping groups Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.
  • Page 401 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping groups Examples This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch. Switch# show ip igmp snooping groups...
  • Page 402: Show Ip Igmp Snooping Mrouter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping mrouter show ip igmp snooping mrouter Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
  • Page 403 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping mrouter Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan mrouter Adds a multicast router port.
  • Page 404: Show Ip Igmp Snooping Querier

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping querier show ip igmp snooping querier Use the show ip igmp snooping querier detail user EXEC command to display the configuration and operation information for the IGMP querier configured on a switch.
  • Page 405 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show ip igmp snooping querier Examples This is an example of output from the show ip igmp snooping querier command: Switch> show ip igmp snooping querier Vlan IP Address IGMP Version Port --------------------------------------------------- 172.20.50.11...
  • Page 406: Show Lacp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp show lacp Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information. show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude |...
  • Page 407 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp Examples This is an example of output from the show lacp counters user EXEC command. Table 2-25 describes the fields in the display. Switch> show lacp counters LACPDUs Marker Marker Response...
  • Page 408 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp Table 2-26 describes the fields in the display: Table 2-26 show lacp internal Field Descriptions Field Description State State of the specific port. These are the allowed values: – —Port is in an unknown state.
  • Page 409 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp This is an example of output from the show lacp neighbor command: Switch> show lacp neighbor Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs...
  • Page 410 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp Syntax Description admin-tag Display administrative tag or site information. civic-location Display civic location information. elin-location Display emergency location information (ELIN). identifier id Specify the ID for the civic location or the elin location. The id range is 1 to 4095.
  • Page 411 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show lacp This is an example of output from the show location civic-location command that displays all the civic location information: Switch> show location civic-location static Civic location information -------------------------- Identifier County...
  • Page 412: Show Link State Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show link state group show link state group Command Description location (global configuration) Configures the global location information for an endpoint. location (interface configuration) Configures the location information for an interface. To use this command, the switch must be running the LAN Base image.
  • Page 413 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show link state group Examples This is an example of output from the show link state group 1 command: Switch> show link state group 1 Link State Group: 1 Status: Enabled, Down...
  • Page 414 Enables a link-state group. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-387...
  • Page 415: Show Mac Access-Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac access-group show mac access-group To use this command, the switch must be running the LAN Base image. Note Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch.
  • Page 416 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac access-group Related Commands Command Description mac access-group Applies a MAC access group to an interface. Catalyst 2960 Switch Command Reference 2-389 OL-8604-04...
  • Page 417: Show Mac Address-Table

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table show mac address-table Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
  • Page 418 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 419: Show Mac Address-Table Address

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table address show mac address-table address Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address. show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin |...
  • Page 420 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table address Related Commands Command Description show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN. show mac address-table count Displays the number of addresses present in all VLANs or the specified VLAN.
  • Page 421: Show Mac Address-Table Aging-Time

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table aging-time show mac address-table aging-time Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
  • Page 422 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table aging-time Related Commands Command Description mac address-table aging-time Sets the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.
  • Page 423: Show Mac Address-Table Count

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table count show mac address-table count Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN. show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]...
  • Page 424 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table count Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 425: Show Mac Address-Table Dynamic

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table dynamic show mac address-table dynamic Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries. show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]...
  • Page 426 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table dynamic Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 427: Show Mac Address-Table Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table interface show mac address-table interface Use the show mac address-table interface user command to display the MAC address table information for the specified interface in the specified VLAN. show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include}...
  • Page 428 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table interface Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 429: Show Mac Address-Table Move Update

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table move update show mac address-table move update To use this command, the switch must be running the LAN Base image. Note Use the show mac address-table move update user EXEC command to display the MAC address-table move update information on the switch.
  • Page 430 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table move update Related Commands Command Description clear mac address-table move Clears the MAC address-table move update counters. update mac address-table move update Configures MAC address-table move update on the switch.
  • Page 431: Show Mac Address-Table Notification

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table notification show mac address-table notification Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface. show mac address-table notification [interface [interface-id]] [ | {begin | exclude | include}...
  • Page 432 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table notification Examples This is an example of output from the show mac address-table notification command: Switch> show mac address-table notification MAC Notification Feature is Enabled on the switch Interval between Notification Traps : 60 secs...
  • Page 433: Show Mac Address-Table Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table static show mac address-table static Use the show mac address-table static user EXEC command to display only static MAC address table entries. show mac address-table static [address mac-address] [interface interface-id] [vlan vlan-id]...
  • Page 434 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table static Related Commands Command Description mac address-table static Adds static addresses to the MAC address table. mac address-table static drop Enables unicast MAC address filtering and configures the switch to drop traffic with a specific source or destination MAC address.
  • Page 435: Show Mac Address-Table Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table vlan show mac address-table vlan Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN. show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]...
  • Page 436 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mac address-table vlan Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 437: Show Mls Qos

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos show mls qos Use the show mls qos user EXEC command to display global quality of service (QoS) configuration information. show mls qos [ | {begin | exclude | include} expression]...
  • Page 438: Show Mls Qos Aggregate-Policer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos aggregate-policer show mls qos aggregate-policer To use this command, the switch must be running the LAN Base image. Note Use the show mls qos aggregate-policer user EXEC command to display the quality of service (QoS) aggregate policer configuration.
  • Page 439: Show Mls Qos Input-Queue

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos input-queue show mls qos input-queue Use the show mls qos input-queue user EXEC command to display quality of service (QoS) settings for the ingress queues. show mls qos input-queue [ | {begin | exclude | include} expression]...
  • Page 440 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos input-queue Related Commands Command Description mls qos srr-queue input bandwidth Assigns shaped round robin (SRR) weights to an ingress queue. mls qos srr-queue input buffers Allocates the buffers between the ingress queues.
  • Page 441: Show Mls Qos Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos interface show mls qos interface To use this command, the switch must be running the LAN Base image. Note Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the port level.
  • Page 442 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos interface trust mode:not trusted trust enabled flag:ena COS override:dis default COS:0 DSCP Mutation Map:Default DSCP Mutation Map Trust device:none qos mode:vlan-based This is an example of output from the show mls qos interface interface-id command when VLAN-based QoS is disabled: Switch>...
  • Page 443 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos interface 363949 10 - 14 : 15 - 19 : 20 - 24 : 25 - 29 : 30 - 34 : 35 - 39 : 40 - 44 :...
  • Page 444 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos interface Command Description mls qos srr-queue output cos-map Maps CoS values to an egress queue or maps CoS values to a queue and to a threshold ID. mls qos srr-queue output dscp-map Maps DSCP values to an egress queue or maps DSCP values to a queue and to a threshold ID.
  • Page 445: Show Mls Qos Maps

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos maps show mls qos maps Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. During classification, QoS uses the mapping tables to represent the priority of the traffic and to derive a corresponding class of service (CoS) or Differentiated Services Code Point (DSCP) value from the received CoS, DSCP, or IP precedence value.
  • Page 446 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos maps The DSCP input queue threshold and the DSCP output queue threshold maps appear as a matrix. The d1 column specifies the most-significant digit of the DSCP number. The d2 row specifies the least-significant digit in the DSCP number.
  • Page 447 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos maps Dscp-inputq-threshold map: d1 :d2 -------------------------------------------------------------------- 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01...
  • Page 448: Show Mls Qos Queue-Set

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos queue-set show mls qos queue-set To use this command, the switch must be running the LAN Base image. Note Use the show mls qos queue-set user EXEC command to display quality of service (QoS) settings for the egress queues.
  • Page 449 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos queue-set Related Commands Command Description mls qos queue-set output buffers Allocates buffers to the queue-set. mls qos queue-set output threshold Configures the weighted tail-drop (WTD) thresholds, guarantees the availability of buffers, and configures the maximum memory allocation of the queue-set.
  • Page 450: Show Mls Qos Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mls qos vlan show mls qos vlan Use the show mls qos vlan user EXEC command to display the policy maps attached to a switch virtual interface (SVI). show mls qos vlan vlan-id [ | {begin | exclude | include} expression]...
  • Page 451: Show Monitor

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show monitor show monitor Use the show monitor user EXEC command to display information about all Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) sessions on the switch. Use the command with keywords to show a specific session, all sessions, all local sessions, or all remote sessions.
  • Page 452 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show monitor Examples This is an example of output for the show monitor user EXEC command: Switch# show monitor Session 1 --------- Type : Local Session Source Ports : RX Only : Gi0/1...
  • Page 453: Show Mvr

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr show mvr To use this command, the switch must be running the LAN Base image. Note Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN...
  • Page 454 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. mvr (interface configuration) Configures MVR ports. show mvr interface Displays the configured MVR interfaces, status of the specified interface, or all multicast groups to which the interface belongs when the interface and members keywords are appended to the command.
  • Page 455: Show Mvr Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr interface show mvr interface To use this command, the switch must be running the LAN Base image. Note Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports.
  • Page 456 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr interface Gi0/2 RECEIVER ACTIVE/DOWN DISABLED In the preceding display, Status is defined as follows: • Active means the port is part of a VLAN. • Up/Down means that the port is forwarding/nonforwarding.
  • Page 457: Show Mvr Members

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr members show mvr members To use this command, the switch must be running the LAN Base image. Note Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group.
  • Page 458 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show mvr members <output truncated> This is an example of output from the show mvr members ip-address command. It displays the members of the IP multicast group with that address: Switch# show mvr members 239.255.0.2 239.255.003.--22...
  • Page 459: Show Pagp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show pagp show pagp Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information. show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude |...
  • Page 460 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show pagp This is an example of output from the show pagp 1 internal command: Switch> show pagp 1 internal Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
  • Page 461: Show Parser Macro

    Output appear. Examples This is a partial output example from the show parser macro command. The output for the Cisco-default macros varies depending on the switch platform and the software image running on the switch:...
  • Page 462 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show parser macro # Recommended value for access vlan (AVID) should not be 1 switchport access vlan $AVID switchport mode access <output truncated> -------------------------------------------------------------- Macro name : cisco-phone Macro type : default interface...
  • Page 463 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show parser macro This is an example of output from the show parser macro name command: Switch# show parser macro name standard-switch10 Macro name : standard-switch10 Macro type : customizable macro description standard-switch10...
  • Page 464: Show Policy-Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show policy-map show policy-map To use this command, the switch must be running the LAN Base image. Note Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming traffic.
  • Page 465 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show policy-map Related Commands Command Description policy-map Creates or modifies a policy map that can be attached to multiple ports to specify a service policy. Catalyst 2960 Switch Command Reference 2-438 OL-8604-04...
  • Page 466: Show Port-Security

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show port-security show port-security Use the show port-security privileged EXEC command to display port-security settings for an interface or for the switch. show port-security [interface interface-id] [address | vlan] [ | {begin | exclude | include}...
  • Page 467 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show port-security (Count) (Count) (Count) ------------------------------------------------------------------------------- Gi0/1 Shutdown ------------------------------------------------------------------------------- Total Addresses in System (excluding one mac per port) Max Addresses limit in System (excluding one mac per port) : 6272 This is an example of output from the show port-security interface interface-id command:...
  • Page 468 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show port-security Related Commands Command Description clear port-security Deletes from the MAC address table a specific type of secure address or all the secure addresses on the switch or an interface. switchport port-security...
  • Page 469: Show Sdm Prefer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show sdm prefer show sdm prefer Use the show sdm prefer privileged EXEC command to display information about the Switch Database Management (SDM) templates that can be used to maximize used for allocating system resources for a particular feature.
  • Page 470 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show sdm prefer This is an example of output from the show sdm prefer qos command: Switch# show sdm prefer qos "qos" template: The selected template optimizes the resources in the switch to support this level of features for 0 routed interfaces and 255 VLANs.
  • Page 471: Show Setup Express

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show setup express show setup express Use the show setup express privileged EXEC command to display if Express Setup mode is active on the switch. show setup express [ | {begin | exclude | include} expression]...
  • Page 472: Show Spanning-Tree

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree show spanning-tree Use the show spanning-tree user EXEC command to display spanning-tree state information. show spanning-tree [bridge-group | active [detail] | backbonefast | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary...
  • Page 473 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree mst [configuration (Optional) Display the multiple spanning-tree (MST) region [digest]] [instance-id configuration and status (available only in privileged EXEC mode). [detail | interface The keywords have these meanings: interface-id [detail]] digest—(Optional) Display the MD5 digest included in the current...
  • Page 474 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree | begin (Optional) Display begins with the line that matches the expression. | exclude (Optional) Display excludes lines that match the expression. | include (Optional) Display includes lines that match the specified expression.
  • Page 475 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree Number of topology changes 0 last change occurred 1d16h ago Times: hold 1, topology change 35, notification 2 hello 2, max age 20, forward delay 15 Timers: hello 0, topology change 0, notification 0, aging 300...
  • Page 476 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree This is an example of output from the show spanning-tree mst configuration command: Switch# show spanning-tree mst configuration Name [region1] Revision Instance Vlans Mapped -------- ------------------ 1-9,21-4094 10-20 ---------------------------- This is an example of output from the show spanning-tree mst interface interface-id command:...
  • Page 477 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show spanning-tree Command Description spanning-tree loopguard default Prevents alternate or root ports from becoming the designated port because of a failure that leads to a unidirectional link. spanning-tree mst configuration Enters multiple spanning-tree (MST) configuration mode through which the MST region configuration occurs.
  • Page 478: Show Storm-Control

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show storm-control show storm-control Use the show storm-control user EXEC command to display broadcast, multicast, or unicast storm control settings on the switch or on the specified interface or to display storm-control history.
  • Page 479 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show storm-control This is an example of output from the show storm-control command for a specified interface. Because no traffic-type keyword was entered, the broadcast storm control settings appear. Switch> show storm-control gigabitethernet 0/1...
  • Page 480: Show System Mtu

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show system mtu show system mtu Use the show system mtu privileged EXEC command to display the global maximum transmission unit (MTU) or maximum packet size set for the switch. show system mtu [ | {begin | exclude | include} expression]...
  • Page 481: Show Udld

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show udld show udld Use the show udld user EXEC command to display UniDirectional Link Detection (UDLD) administrative and operational status for all ports or the specified port. show udld [interface-id] [ | {begin | exclude | include} expression]...
  • Page 482 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show udld Table 2-29 show udld Field Descriptions Field Description Interface The interface on the local device configured for UDLD. Port enable administrative How UDLD is configured on the port. If UDLD is enabled or...
  • Page 483 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show udld Related Commands Command Description udld Enables aggressive or normal mode in UDLD or sets the configurable message timer time. udld port Enables UDLD on an individual interface or prevents a fiber-optic interface from being enabled by the udld global configuration command.
  • Page 484: Show Version

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show version show version Use the show version user EXEC command to display version information for the hardware and firmware. show version [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 485 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show version 64K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address : 00:0B:FC:FF:E8:80 Motherboard assembly number : 73-9832-02 Motherboard serial number : FHH0916001J Motherboard revision number : 01 System serial number...
  • Page 486: Show Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vlan show vlan Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
  • Page 487 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vlan Examples This is an example of output from the show vlan command. Table 2-30 describes the fields in the display. Switch> show vlan VLAN Name Status Ports ---- -------------------------------- --------- -------------------------------...
  • Page 488 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vlan Table 2-30 show vlan Command Output Fields (continued) Field Description BrdgNo Bridge number for the VLAN, if applicable. Spanning Tree Protocol type used on the VLAN. BrdgMode Bridging mode for this VLAN—possible values are source-route bridging (SRB) and source-route transparent (SRT);...
  • Page 489: Show Vmps

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vmps show vmps Use the show vmps user EXEC command without keywords to display the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VLAN Membership Policy Server (VMPS) IP addresses, and the current and primary servers, or use the statistics keyword to display client-side statistics.
  • Page 490 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vmps This is an example of output from the show vmps statistics command. Table 2-31 describes each field in the display. Switch> show vmps statistics VMPS Client Statistics ---------------------- Queries: Responses:...
  • Page 491 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vmps Related Commands Command Description clear vmps statistics Clears the statistics maintained by the VQP client. vmps reconfirm Sends VQP queries to reconfirm all dynamic VLAN assignments with the (privileged EXEC) VMPS.
  • Page 492: Show Vtp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vtp show vtp Use the show vtp user EXEC command to display general information about the VLAN Trunking Protocol (VTP) management domain, status, and counters. show vtp {counters | password | status} [ | {begin | exclude | include} expression]...
  • Page 493 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vtp Trunk Join Transmitted Join Received Summary advts received from non-pruning-capable device ---------------- ---------------- ---------------- --------------------------- Fa0/47 Fa0/48 Gi0/1 Gi0/2 Table 2-32 show vtp counters Field Descriptions Field Description Summary advertisements...
  • Page 494 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vtp Table 2-32 show vtp counters Field Descriptions (continued) Field Description Number of configuration Number of MD5 digest errors. digest errors Digest errors increment whenever the MD5 digest in the summary packet and the MD5 digest of the received advertisement calculated by the switch do not match.
  • Page 495 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vtp Table 2-33 show vtp status Field Descriptions Field Description VTP Version Displays the VTP version operating on the switch. By default, the switch implements Version 1 but can be set to Version 2.
  • Page 496 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands show vtp Related Commands Command Description clear vtp counters Clears the VTP and pruning counters. vtp (global configuration) Configures the VTP filename, interface name, domain name, and mode. vtp (VLAN configuration) Configures the VTP domain name, password, pruning, and mode.
  • Page 497: Shutdown

    2 V ] Chapter 2 Catalyst 2960 Switch Cisco IOS Commands shutdown shutdown Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface. shutdown no shutdown Syntax Description This command has no arguments or keywords.
  • Page 498: Shutdown Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands shutdown vlan shutdown vlan Use the shutdown vlan global configuration command to shut down (suspend) local traffic on the specified VLAN. Use the no form of this command to restart local traffic on the VLAN.
  • Page 499: Small-Frame Violation Rate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands small-frame violation rate small-frame violation rate Use the small-frame violation rate pps interface configuration command on the switch stack or on a standalone switch to configure the rate (threshold) for an interface to be error disabled when it receives VLAN-tagged packets that are small frames (67 bytes or less) at the specified rate.
  • Page 500 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands small-frame violation rate Related Commands Command Description errdisable detect cause small-frame Allows any switch port to be put into the error-disabled state if an incoming frame is smaller than the minimum size and arrives at the specified rate (threshold).
  • Page 501: Snmp-Server Enable Traps

    | entity | envmon [fan | shutdown | status | supply | temperature] | errdisable [notification-rate] | flash | hsrp | ipmulticast | mac-notification | msdp | ospf [cisco-specific | errors | lsa | rate-limit | retransmit | state-change] | pim [invalid-pim-message |...
  • Page 502 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server enable traps ipmulticast (Optional) Enable IP multicast routing traps. mac-notification (Optional) Enable MAC address notification traps. msdp (Optional) Enable Multicast Source Discovery Protocol (MSDP) traps. ospf [cisco-specific | (Optional) Enable Open Shortest Path First (OSPF) traps. The keywords have...
  • Page 503 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server enable traps vlancreate (Optional) Enable SNMP VLAN-created traps. vlandelete (Optional) Enable SNMP VLAN-deleted traps. (Optional) Enable VLAN Trunking Protocol (VTP) traps. Though visible in the command-line help strings, the cpu [threshold], insertion, removal, and rtr Note keywords are not supported.
  • Page 504 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server enable traps Related Commands Command Description show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 505: Snmp-Server Host

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server host snmp-server host Use the snmp-server host global configuration command to specify the recipient (host) of a Simple Network Management Protocol (SNMP) notification operation. Use the no form of this command to remove the specified host.
  • Page 506 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server host community-string Password-like community string sent with the notification operation. Though you can set this string by using the snmp-server host command, we recommend that you define this string by using the snmp-server community global configuration command before using the snmp-server host command.
  • Page 507 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp-server host Defaults This command is disabled by default. No notifications are sent. If you enter this command with no keywords, the default is to send all trap types to the host. No informs are sent to this host.
  • Page 508 The community string is defined as comaccess: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com comaccess snmp This example shows how to enable the switch to send all traps to the host myhost.cisco.com by using the community string public: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com public...
  • Page 509: Snmp Trap Mac-Notification

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp trap mac-notification snmp trap mac-notification Use the snmp trap mac-notification interface configuration command to enable the Simple Network Management Protocol (SNMP) MAC address notification trap on a specific Layer 2 interface. Use the no form of this command to return to the default setting.
  • Page 510 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands snmp trap mac-notification Related Commands Command Description clear mac address-table notification Clears the MAC address notification global counters. mac address-table notification Enables the MAC address notification feature. show mac address-table notification Displays the MAC address notification settings for all interfaces or on the specified interface when the interface keyword is appended.
  • Page 511: Spanning-Tree Backbonefast

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree backbonefast spanning-tree backbonefast Use the spanning-tree backbonefast global configuration command to enable the BackboneFast feature. Use the no form of the command to return to the default setting. spanning-tree backbonefast no spanning-tree backbonefast Syntax Description This command has no arguments or keywords.
  • Page 512: Spanning-Tree Bpdufilter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree bpdufilter spanning-tree bpdufilter Use the spanning-tree bpdufilter interface configuration command to prevent an interface from sending or receiving bridge protocol data units (BPDUs). Use the no form of this command to return to the default setting.
  • Page 513 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree bpdufilter Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 514: Spanning-Tree Bpduguard

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree bpduguard spanning-tree bpduguard Use the spanning-tree bpduguard interface configuration command to put an interface in the error-disabled state when it receives a bridge protocol data unit (BPDU). Use the no form of this command to return to the default setting.
  • Page 515 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree bpduguard Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 516: Spanning-Tree Cost

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree cost spanning-tree cost Use the spanning-tree cost interface configuration command to set the path cost for spanning-tree calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to place in the forwarding state.
  • Page 517 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree cost Related Commands Command Description show spanning-tree interface Displays spanning-tree information for the specified interface. interface-id spanning-tree port-priority Configures an interface priority. spanning-tree vlan priority Sets the switch priority for the specified spanning-tree instance.
  • Page 518: Spanning-Tree Etherchannel Guard Misconfig

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig spanning-tree etherchannel guard misconfig Use the spanning-tree etherchannel guard misconfig global configuration command to display an error message when the switch detects an EtherChannel misconfiguration. Use the no form of this command to disable the feature.
  • Page 519 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig Related Commands Command Description errdisable recovery cause Enables the timer to recover from the EtherChannel channel-misconfig misconfiguration error-disabled state. show etherchannel summary Displays EtherChannel information for a channel as a one-line summary per channel-group.
  • Page 520: Spanning-Tree Extend System-Id

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree extend system-id spanning-tree extend system-id Use the spanning-tree extend system-id global configuration command to enable the extended system ID feature. spanning-tree extend system-id Though visible in the command-line help strings, the no version of this command is not supported. You Note cannot disable the extended system ID feature.
  • Page 521 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree extend system-id Related Commands Command Description show spanning-tree summary Displays a summary of spanning-tree interface states. spanning-tree mst root Configures the MST root switch priority and timers based on the network diameter.
  • Page 522: Spanning-Tree Guard

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree guard spanning-tree guard Use the spanning-tree guard interface configuration command to enable root guard or loop guard on all the VLANs associated with the selected interface. Root guard restricts which interface is allowed to be the spanning-tree root port or the path-to-the root for the switch.
  • Page 523 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree guard ports. When the switch is operating in MST mode, BPDUs are not sent on nonboundary interfaces if the interface is blocked by loop guard in all MST instances. On a boundary interface, loop guard blocks the interface in all MST instances.
  • Page 524: Spanning-Tree Link-Type

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree link-type spanning-tree link-type Use the spanning-tree link-type interface configuration command to override the default link-type setting, which is determined by the duplex mode of the interface, and to enable rapid spanning-tree transitions to the forwarding state.
  • Page 525 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree link-type Related Commands Command Description clear spanning-tree detected-protocols Restarts the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface. show spanning-tree interface Displays spanning-tree state information for the specified interface-id interface.
  • Page 526: Spanning-Tree Loopguard Default

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree loopguard default spanning-tree loopguard default Use the spanning-tree loopguard default global configuration command to prevent alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link. Use the no form of this command to return to the default setting.
  • Page 527 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree loopguard default Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 528: Spanning-Tree Mode

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mode spanning-tree mode Use the spanning-tree mode global configuration command to enable per-VLAN spanning-tree plus (PVST+), rapid PVST+, or multiple spanning tree (MST) on your switch. Use the no form of this command to return to the default setting.
  • Page 529 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mode Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 530: Spanning-Tree Mst Configuration

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst configuration spanning-tree mst configuration Use the spanning-tree mst configuration global configuration command to enter multiple spanning-tree (MST) configuration mode through which you configure the MST region. Use the no form of this command to return to the default settings.
  • Page 531 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst configuration When you map VLANs to an MST instance, the mapping is incremental, and VLANs specified in the command are added to or removed from the VLANs that were previously mapped. To specify a range, use a hyphen;...
  • Page 532: Spanning-Tree Mst Cost

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst cost spanning-tree mst cost Use the spanning-tree mst cost interface configuration command to set the path cost for multiple spanning-tree (MST) calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to put in the forwarding state.
  • Page 533 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst cost Related Commands Command Description show spanning-tree Displays MST information for the specified interface. interface interface-id spanning-tree mst Configures an interface priority. port-priority spanning-tree mst priority Configures the switch priority for the specified spanning-tree instance.
  • Page 534: Spanning-Tree Mst Forward-Time

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst forward-time spanning-tree mst forward-time Use the spanning-tree mst forward-time global configuration command to set the forward-delay time for all multiple spanning-tree (MST) instances. The forwarding time specifies how long each of the listening and learning states last before the interface begins forwarding.
  • Page 535: Spanning-Tree Mst Hello-Time

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst hello-time spanning-tree mst hello-time Use the spanning-tree mst hello-time global configuration command to set the interval between hello bridge protocol data units (BPDUs) sent by root switch configuration messages. Use the no form of this command to return to the default setting.
  • Page 536: Spanning-Tree Mst Max-Age

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst max-age spanning-tree mst max-age Use the spanning-tree mst max-age global configuration command to set the interval between messages that the spanning tree receives from the root switch. If a switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it recomputes the spanning-tree topology.
  • Page 537: Spanning-Tree Mst Max-Hops

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst max-hops spanning-tree mst max-hops Use the spanning-tree mst max-hops global configuration command to set the number of hops in a region before the bridge protocol data unit (BPDU) is discarded and the information held for an interface is aged.
  • Page 538 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst max-hops Related Commands Command Description show spanning-tree Displays MST information. spanning-tree mst forward-time Sets the forward-delay time for all MST instances. spanning-tree mst hello-time Sets the interval between hello BPDUs sent by root switch configuration messages.
  • Page 539: Spanning-Tree Mst Port-Priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst port-priority spanning-tree mst port-priority Use the spanning-tree mst port-priority interface configuration command to configure an interface priority. If a loop occurs, the Multiple Spanning Tree Protocol (MSTP) can find the interface to put in the forwarding state.
  • Page 540 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst port-priority Related Commands Command Description show spanning-tree mst interface Displays MST information for the specified interface. interface-id spanning-tree mst cost Sets the path cost for MST calculations. spanning-tree mst priority Sets the switch priority for the specified spanning-tree instance.
  • Page 541: Spanning-Tree Mst Pre-Standard

    (CIST) runs on this interface. Note If a switch port is connected to a switch running prestandard Cisco IOS software, you must use the spanning-tree mst pre-standard interface configuration command on the port. If you do not configure the port to send only prestandard BPDUs, the Multiple STP (MSTP) performance might diminish.
  • Page 542: Spanning-Tree Mst Priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst priority spanning-tree mst priority Use the spanning-tree mst priority global configuration command to set the switch priority for the specified spanning-tree instance. Use the no form of this command to return to the default setting.
  • Page 543: Spanning-Tree Mst Root

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst root spanning-tree mst root Use the spanning-tree mst root global configuration command to configure the multiple spanning-tree (MST) root switch priority and timers based on the network diameter. Use the no form of this command to return to the default settings.
  • Page 544 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree mst root When you enter the spanning-tree mst instance-id root secondary command, because of support for the extended system ID, the software changes the switch priority from the default value (32768) to 28672.
  • Page 545: Spanning-Tree Port-Priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree port-priority spanning-tree port-priority Use the spanning-tree port-priority interface configuration command to configure an interface priority. If a loop occurs, spanning tree can find the interface to put in the forwarding state. Use the no form of this command to return to the default setting.
  • Page 546 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree port-priority Examples This example shows how to increase the likelihood that a port will be put in the forwarding state if a loop occurs: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# spanning-tree vlan 20 port-priority 0...
  • Page 547: Spanning-Tree Portfast (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree portfast (global configuration) spanning-tree portfast (global configuration) Use the spanning-tree portfast global configuration command to globally enable bridge protocol data unit (BPDU) filtering on Port Fast-enabled interfaces, the BPDU guard feature on Port Fast-enabled interfaces, or the Port Fast feature on all nontrunking interfaces.
  • Page 548 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree portfast (global configuration) Enabling BPDU filtering on an interface is the same as disabling spanning tree on it and can result in Caution spanning-tree loops. Use the spanning-tree portfast bpduguard default global configuration command to globally enable BPDU guard on interfaces that are in a Port Fast-operational state.
  • Page 549: Spanning-Tree Portfast (Interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree portfast (interface configuration) spanning-tree portfast (interface configuration) Use the spanning-tree portfast interface configuration command to enable the Port Fast feature on an interface in all its associated VLANs. When the Port Fast feature is enabled, the interface changes directly from a blocking state to a forwarding state without making the intermediate spanning-tree state changes.
  • Page 550 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree portfast (interface configuration) Examples This example shows how to enable the Port Fast feature on a port: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# spanning-tree portfast You can verify your settings by entering the show running-config privileged EXEC command.
  • Page 551: Spanning-Tree Transmit Hold-Count

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree transmit hold-count spanning-tree transmit hold-count Use the spanning-tree transmit hold-count global configuration command to configure the number of bridge protocol data units (BPDUs) sent every second. Use the no form of this command to return to the default setting.
  • Page 552: Spanning-Tree Uplinkfast

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree uplinkfast spanning-tree uplinkfast Use the spanning-tree uplinkfast global configuration command to accelerate the choice of a new root port when a link or switch fails or when the spanning tree reconfigures itself. Use the no form of this command to return to the default setting.
  • Page 553 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree uplinkfast Do not enable the root guard on interfaces that will be used by the UplinkFast feature. With UplinkFast, the backup interfaces (in the blocked state) replace the root port in the case of a failure. However, if root guard is also enabled, all the backup interfaces used by the UplinkFast feature are placed in the root-inconsistent state (blocked) and prevented from reaching the forwarding state.
  • Page 554: Spanning-Tree Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree vlan spanning-tree vlan Use the spanning-tree vlan global configuration command to configure spanning tree on a per-VLAN basis. Use the no form of this command to return to the default setting.
  • Page 555 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree vlan Command Modes Global configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines Disabling the STP causes the VLAN to stop participating in the spanning-tree topology. Interfaces that are administratively down remain down.
  • Page 556 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands spanning-tree vlan This example shows how to set spanning-tree max-age to 30 seconds for VLAN 20: Switch(config)# spanning-tree vlan 20 max-age 30 This example shows how to reset the max-age parameter to the default value for spanning-tree...
  • Page 557: Speed

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands speed speed Use the speed interface configuration command to specify the speed of a 10/100 Mb/s or 10/100/1000 Mb/s port. Use the no or default form of this command to return the port to its default value.
  • Page 558 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands speed Examples This example shows how to set the speed on a port to 100 Mb/s: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# speed 100 This example shows how to set a port to autonegotiate at only 10 Mb/s:...
  • Page 559: Srr-Queue Bandwidth Limit

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth limit srr-queue bandwidth limit To use this command, the switch must be running the LAN Base image. Note Use the srr-queue bandwidth limit interface configuration command to limit the maximum output on a port.
  • Page 560 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth limit Related Commands Command Description mls qos queue-set output buffers Allocates buffers to the queue-set. mls qos srr-queue output cos-map Maps class of service (CoS) values to egress queue or maps CoS values to a queue and to a threshold ID.
  • Page 561: Srr-Queue Bandwidth Shape

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth shape srr-queue bandwidth shape To use this command, the switch must be running the LAN Base image. Note Use the srr-queue bandwidth shape interface configuration command to assign the shaped weights and to enable bandwidth shaping on the four egress queues mapped to a port.
  • Page 562 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth shape Examples This example shows how to configure the queues for the same port for both shaping and sharing. Because the weight ratios for queues 2, 3, and 4 are set to 0, these queues operate in shared mode. The bandwidth weight for queue 1 is 1/8, which is 12.5 percent.
  • Page 563: Srr-Queue Bandwidth Share

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth share srr-queue bandwidth share To use this command, the switch must be running the LAN Base image. Note Use the srr-queue bandwidth share interface configuration command switch to assign the shared weights and to enable bandwidth sharing on the four egress queues mapped to a port.
  • Page 564 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands srr-queue bandwidth share Examples This example shows how to configure the weight ratio of the SRR scheduler running on an egress port. Four queues are used. The bandwidth ratio allocated for each queue in shared mode is 1/(1+2+3+4), 2/(1+2+3+4), 3/(1+2+3+4), and 4/(1+2+3+4), which is 10 percent, 20 percent, 30 percent, and 40 percent for queues 1, 2, 3, and 4.
  • Page 565: Storm-Control

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands storm-control storm-control (Optional) Enter to continue using the MAC address of the current stack master after a new stack master takes over. Use the storm-control interface configuration command to enable broadcast, multicast, or unicast storm control and to set threshold levels on an interface.
  • Page 566 When the storm control threshold for multicast traffic is reached, all multicast traffic except control Note traffic, such as bridge protocol data unit (BDPU) and Cisco Discovery Protocol (CDP) frames, are blocked. The trap and shutdown options are independent of each other.
  • Page 567 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands storm-control If you configure the action to be taken as shutdown (the port is error-disabled during a storm) when a packet storm is detected, you must use the no shutdown interface configuration command to bring the interface out of this state.
  • Page 568: Switchport Access

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport access switchport access Use the switchport access interface configuration command to configure a port as a static-access or dynamic-access port. If the switchport mode is set to access, the port operates as a member of the specified VLAN.
  • Page 569 The software implements the VLAN Query Protocol (VQP) client, which can query a VMPS such • as a Catalyst 6000 series switch. The Catalyst 2960 switches are not VMPS servers. The VMPS server must be configured before a port is configured as dynamic.
  • Page 570: Switchport Backup Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport backup interface switchport backup interface To use this command, the switch must be running the LAN Base image. Note Use the switchport backup interface interface configuration command on a Layer 2 interface to configure Flex Links, a pair of interfaces that provide backup to each other.
  • Page 571 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport backup interface Command History Release Modification 12.2(25)FX This command was introduced. 12.2(25)SEE Added preemption, mode, forced, bandwidth, off, and delay keywords. 12.2(37)SE Added prefer vlan keyword. 12.2(44)SE The multicast, fast-convergence, delay, mode, prefer, and vlan keywords were added.
  • Page 572 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport backup interface This example shows how to configure the Fast Ethernet interface as the MMU primary VLAN: Switch# configure terminal Switch(conf)# interface fastethernet0/1 Switch(conf-if)# switchport backup interface fastethernet0/2 mmu primary vlan 1021...
  • Page 573 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport backup interface The following example shows how to configure multicast fast-convergence on interface Gi1/0/11: Switch# configure terminal Switch(config)# interface gigabitEthernet 1/0/11 Switch(config-if)# switchport backup interface gigabitEthernet 1/0/12 multicast fast-convergence Switch(config-if)# end You can verify your setting by entering the show interfaces switchport backup detail privileged EXEC command.
  • Page 574: Switchport Block

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport block switchport block Use the switchport block interface configuration command to prevent unknown multicast or unicast packets from being forwarded. Use the no form of this command to allow forwarding unknown multicast or unicast packets.
  • Page 575: Switchport Host

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport host switchport host Use the switchport host interface configuration command to optimize a port for a host connection. The no form of this command has no affect on the system. switchport host Syntax Description This command has no arguments or keywords.
  • Page 576: Switchport Mode

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport mode switchport mode Use the switchport mode interface configuration command to configure the VLAN membership mode of a port. Use the no form of this command to reset the mode to the appropriate default for the device.
  • Page 577 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport mode To autonegotiate trunking, the interfaces must be in the same VLAN Trunking Protocol (VTP) domain. Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP), which is a point-to-point protocol. However, some internetworking devices might forward DTP frames improperly, which could cause misconfigurations.
  • Page 578: Switchport Nonegotiate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport nonegotiate switchport nonegotiate Use the switchport nonegotiate interface configuration command to specify that Dynamic Trunking Protocol (DTP) negotiation packets are not sent on the Layer 2 interface. The switch does not engage in DTP negotiation on this interface.
  • Page 579 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport nonegotiate Examples This example shows how to cause a port to refrain from negotiating trunking mode and to act as a trunk or access port (depending on the mode set): Switch(config)# interface gigabitethernet0/1...
  • Page 580: Switchport Port-Security

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security switchport port-security Use the switchport port-security interface configuration command without keywords to enable port security on the interface. Use the keywords to configure secure MAC addresses, sticky MAC address learning, a maximum number of secure MAC addresses, or the violation mode. Use the no form of this command to disable port security or to set the parameters to their default states.
  • Page 581 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security vlan [vlan-list] (Optional) For trunk ports, you can set the maximum number of secure MAC addresses on a VLAN. If the vlan keyword is not entered, the default value is used.
  • Page 582 IP phone requires one MAC address. The Cisco IP phone address is learned on the voice VLAN, but is not learned on the access VLAN. If you connect a single PC to the Cisco IP phone, no additional MAC addresses are required. If you connect more than one PC to the Cisco IP phone, you must configure enough secure addresses to allow one for each PC and one for the Cisco IP phone.
  • Page 583 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security Sticky secure MAC addresses have these characteristics: When you enable sticky learning on an interface by using the switchport port-security • mac-address sticky interface configuration command, the interface converts all the dynamic secure...
  • Page 584 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security Related Commands Command Description clear port-security Deletes from the MAC address table a specific type of secure address or all the secure addresses on the switch or an interface. show port-security address Displays all the secure addresses configured on the switch.
  • Page 585: Switchport Port-Security Aging

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security aging switchport port-security aging Use the switchport port-security aging interface configuration command to set the aging time and type for secure address entries or to change the aging behavior for secure addresses on a particular port. Use the no form of this command to disable port security aging or to set the parameters to their default states.
  • Page 586 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport port-security aging Examples This example sets the aging time as 2 hours for absolute aging for all the secure addresses on the port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# switchport port-security aging time 120...
  • Page 587: Switchport Priority Extend

    IP phone how to send data packets from the device attached to the access port on the Cisco IP Phone. You must enable CDP on the switch port connected to the Cisco IP Phone to send the configuration to the Cisco IP Phone.
  • Page 588 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport priority extend You can verify your settings by entering the show interfaces interface-id switchport privileged EXEC command. Related Commands Command Description show interfaces Displays the administrative and operational status of a switching port.
  • Page 589: Switchport Protected

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport protected switchport protected Use the switchport protected interface configuration command to isolate unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch. Use the no form of this command to disable protection on the port.
  • Page 590 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport protected Command Description show interfaces Displays the administrative and operational status of a switching port, including switchport port blocking and port protection settings. switchport block Prevents unknown multicast or unicast traffic on the interface.
  • Page 591: Switchport Trunk

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport trunk switchport trunk Use the switchport trunk interface configuration command to set the trunk characteristics when the interface is in trunking mode. Use the no form of this command to reset a trunking characteristic to the default.
  • Page 592 VLAN trunk port by removing VLAN 1 from the allowed list. When you remove VLAN 1 from a trunk port, the interface continues to send and receive management traffic, for example, Cisco Discovery Protocol (CDP), Port Aggregation Protocol (PAgP), Link Aggregation Control Protocol (LACP), Dynamic Trunking Protocol (DTP), and VLAN Trunking Protocol (VTP) in VLAN 1.
  • Page 593 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands switchport trunk You can verify your settings by entering the show interfaces interface-id switchport privileged EXEC command. Related Commands Command Description show interfaces switchport Displays the administrative and operational status of a switching port, including port blocking and port protection settings.
  • Page 594: Switchport Voice Vlan

    You should configure voice VLAN on Layer 2 access ports. You must enable Cisco Discovery Protocol (CDP) on the switchport connected to the Cisco IP phone for the switch to send configuration information to the phone. CDP is enabled by default globally and on the interface.
  • Page 595 IP phone requires one MAC address. The Cisco IP phone address is learned on the voice VLAN, but is not learned on the access VLAN. If you connect a single PC to the Cisco IP phone, no additional MAC addresses are required.
  • Page 596: System Mtu

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands system mtu system mtu Use the system mtu global configuration command to set the maximum packet size or maximum transmission unit (MTU) size for Gigabit Ethernet ports or for Fast Ethernet (10/100) ports. Use the no form of this command to restore the global MTU value to its default value.
  • Page 597 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands system mtu For example, if the system mtu value is 1998 bytes and the system mtu jumbo value is 5000 bytes, packets up to 5000 bytes can be received on interfaces operating at 1000 Mb/s. However, although a packet larger than 1998 bytes can be received on an interface operating at 1000 Mb/s, if its destination interface is operating at 10 or 100 Mb/s, the packet is dropped.
  • Page 598: Test Cable-Diagnostics Tdr

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands test cable-diagnostics tdr test cable-diagnostics tdr Use the test cable-diagnostics tdr privileged EXEC command to run the Time Domain Reflector (TDR) feature on an interface. test cable-diagnostics tdr interface interface-id Syntax Description interface-id Specify the interface on which to run TDR.
  • Page 599: Traceroute Mac

    This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on all the switches in the network. Do not disable CDP. When the switch detects a device in the Layer 2 path that does not support Layer 2 traceroute, the switch continues to send Layer 2 trace queries and lets them time out.
  • Page 600 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands traceroute mac Examples This example shows how to display the Layer 2 path by specifying the source and destination MAC addresses: Switch# traceroute mac 0000.0201.0601 0000.0201.0201 Source 0000.0201.0601 found on con6[WS-C2960-12T] (2.2.6.6) con6 (2.2.6.6) :Gi0/1 =>...
  • Page 601 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands traceroute mac Error:Source and destination macs are on different vlans. Layer2 trace aborted. This example shows the Layer 2 path when the destination MAC address is a multicast address: Switch# traceroute mac 0000.0201.0601 0100.0201.0201...
  • Page 602: Traceroute Mac Ip

    This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on all the switches in the network. Do not disable CDP. When the switch detects an device in the Layer 2 path that does not support Layer 2 traceroute, the switch continues to send Layer 2 trace queries and lets them time out.
  • Page 603 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands traceroute mac ip The Layer 2 traceroute feature is not supported when multiple devices are attached to one port through hubs (for example, multiple CDP neighbors are detected on a port). When more than one CDP neighbor is detected on a port, the Layer 2 path is not identified, and an error message appears.
  • Page 604: Trust

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands trust trust Use the trust policy-map class configuration command to define a trust state for traffic classified through the class policy-map configuration or the class-map global configuration command. Use the no form of this command to return to the default setting.
  • Page 605 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands trust If you specify trust ip-precedence, QoS uses the IP precedence value from the ingress packet and the IP-precedence-to-DSCP map. For non-IP packets that are tagged, QoS uses the received CoS value; for non-IP packets that are untagged, QoS uses the default port CoS value.
  • Page 606: Udld

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands udld udld Use the udld global configuration command to enable aggressive or normal mode in the UniDirectional Link Detection (UDLD) and to set the configurable message timer time. Use the no form of the command to disable aggressive or normal mode UDLD on all fiber-optic ports.
  • Page 607 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands udld The no udld port interface configuration command followed by the udld port or udld port • aggressive interface configuration command to re-enable UDLD on the specified interface The errdisable recovery cause udld and errdisable recovery interval interval global •...
  • Page 608: Udld Port

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands udld port udld port Use the udld port interface configuration command to enable the UniDirectional Link Detection (UDLD) on an individual interface or prevent a fiber-optic interface from being enabled by the udld global configuration command.
  • Page 609 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands udld port You can use these commands to reset an interface shut down by UDLD: The udld reset privileged EXEC command to reset all interfaces shut down by UDLD • • The shutdown and no shutdown interface configuration commands •...
  • Page 610: Udld Reset

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands udld reset udld reset Use the udld reset privileged EXEC command to reset all interfaces disabled by the UniDirectional Link Detection (UDLD) and permit traffic to begin passing through them again (though other features, such as spanning tree, Port Aggregation Protocol (PAgP), and Dynamic Trunking Protocol (DTP) still have their normal effects, if enabled).
  • Page 611: Vlan (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (global configuration) vlan (global configuration) Use the vlan global configuration command to add a VLAN and to enter the config-vlan mode. Use the no form of this command to delete the VLAN. Configuration information for normal-range VLANs (VLAN IDs 1 to 1005) is always saved in the VLAN database.
  • Page 612 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (global configuration) If you enter an invalid VLAN ID, you receive an error message and do not enter config-vlan mode. Entering the vlan command with a VLAN ID enables config-vlan mode. When you enter the VLAN ID of an existing VLAN, you do not create a new VLAN, but you can modify VLAN parameters for that VLAN.
  • Page 613 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (global configuration) name vlan-name: names the VLAN with an ASCII string from 1 to 32 characters that must be unique • within the administrative domain. The default is VLANxxxx where xxxx represents four numeric digits (including leading zeros) equal to the VLAN ID number.
  • Page 614 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (global configuration) Table 2-34 Valid Commands and Syntax for Different Media Types (continued) Media Type Valid Syntax FDDI-NET name vlan-name, media fd-net, state {suspend | active}, said said-value, mtu mtu-size, bridge bridge-number, stp type {ieee | ibm | auto}, tb-vlan1 tb-vlan1-id, tb-vlan2 tb-vlan2-id If VTP v2 mode is disabled, do not set the stp type to auto.
  • Page 615 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (global configuration) Table 2-35 VLAN Configuration Rules (continued) Configuration Rule VTP v1 mode is enabled. No VLAN can have an STP type set to auto. This rule applies to Ethernet, FDDI, FDDI-NET, Token Ring, and Token Ring-NET VLANs.
  • Page 616: Vlan (Vlan Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) vlan (VLAN configuration) Use the vlan VLAN configuration command to configure VLAN characteristics for a normal-range VLAN (VLAN IDs 1 to 1005) in the VLAN database. You access VLAN configuration mode by entering vlan database privileged EXEC command.
  • Page 617 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) media {ethernet | fddi | (Optional) Specify the VLAN media type. Table 2-36 lists the valid fd-net | tokenring | tr-net} syntax for each media type. ethernet is Ethernet media type (the default).
  • Page 618 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) Table 2-36 shows the valid syntax options for different media types. Table 2-36 Valid Syntax for Different Media Types Media Type Valid Syntax Ethernet vlan vlan-id [name vlan-name] media ethernet [state {suspend | active}]...
  • Page 619 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) Table 2-37 VLAN Configuration Rules (continued) Configuration Rule VTP v2 mode is enabled, and you Specify a bridge number. Do not leave this field blank. are configuring a TrBRF VLAN media type.
  • Page 620 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines You can only use this command mode for configuring normal-range VLANs, that is, VLAN IDs 1 to 1005.
  • Page 621 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan (VLAN configuration) When the no vlan vlan-id state form is used, the VLAN state returns to the default (active). • When the no vlan vlan-id stp type form is used, the VLAN spanning-tree type returns to the default •...
  • Page 622: Vlan Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan database vlan database Use the vlan database privileged EXEC command to enter VLAN configuration mode. From this mode, you can add, delete, and modify VLAN configurations for normal-range VLANs and globally propagate these changes by using the VLAN Trunking Protocol (VTP).
  • Page 623 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan database When you have modified VLAN or VTP parameters, you can use these editing buffer manipulation commands: abort: exits the mode without applying the changes. The VLAN configuration that was running •...
  • Page 624 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vlan database VLAN ISL Id: 1002 Name: fddi-default Media Type: FDDI VLAN 802.10 Id: 101002 State: Operational MTU: 1500 Bridge Type: SRB Ring Number: 0 Translational Bridged VLAN: 1 Translational Bridged VLAN: 1003 <output truncated>...
  • Page 625: Vmps Reconfirm (Privileged Exec)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vmps reconfirm (privileged EXEC) vmps reconfirm (privileged EXEC) Use the vmps reconfirm privileged EXEC command to immediately send VLAN Query Protocol (VQP) queries to reconfirm all dynamic VLAN assignments with the VLAN Membership Policy Server (VMPS).
  • Page 626: Vmps Reconfirm (Global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vmps reconfirm (global configuration) vmps reconfirm (global configuration) Use the vmps reconfirm global configuration command to change the reconfirmation interval for the VLAN Query Protocol (VQP) client. Use the no form of this command to return to the default setting.
  • Page 627: Vmps Retry

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vmps retry vmps retry Use the vmps retry global configuration command to configure the per-server retry count for the VLAN Query Protocol (VQP) client. Use the no form of this command to return to the default setting.
  • Page 628: Vmps Server

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vmps server vmps server Use the vmps server global configuration command to configure the primary VLAN Membership Policy Server (VMPS) and up to three secondary servers. Use the no form of this command to remove a VMPS server.
  • Page 629 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vmps server You can verify your setting by entering the show vmps privileged EXEC command and examining information in the VMPS Domain Server row. Related Commands Command Description show vmps Displays VQP and VMPS information.
  • Page 630: Vtp (Global Configuration)

    VTP administrative domain for the switch. The domain name is case sensitive. file filename Specify the Cisco IOS file system file where the VTP VLAN configuration is stored. interface name Specify the name of the interface providing the VTP ID updated for this device.
  • Page 631 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (global configuration) Defaults The default filename is flash:vlan.dat. The default mode is server mode. No domain name or password is defined. No password is configured. Pruning is disabled. The default version is Version 1.
  • Page 632 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (global configuration) If the receiving switch is in client mode, the client switch changes its configuration to duplicate the • configuration of the server. If you have switches in client mode, be sure to make all VTP or VLAN configuration changes on a switch in server mode.
  • Page 633 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (global configuration) Examples This example shows how to rename the filename for VTP configuration storage to vtpfilename: Switch(config)# vtp file vtpfilename This example shows how to clear the device storage filename: Switch(config)# no vtp file vtpconfig Clearing device storage filename.
  • Page 634: Vtp (Vlan Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (VLAN configuration) vtp (VLAN configuration) Use the vtp VLAN configuration command to configure VLAN Trunking Protocol (VTP) characteristics. You access VLAN configuration mode by entering the vlan database privileged EXEC command. Use the no form of this command to return to the default settings, disable the characteristic, or remove the password.
  • Page 635 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (VLAN configuration) Command Modes VLAN configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines If the VTP mode is transparent, the mode and domain name are saved in the switch running configuration file, and you can save the configuration in the switch startup configuration file by using the copy running-config startup-config privileged EXEC command.
  • Page 636 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (VLAN configuration) Follow these guidelines when configuring a VTP domain name: The switch is in the no-management-domain state until you configure a domain name. While in the • no-management-domain state, the switch does not send any VTP advertisements even if changes occur to the local VLAN configuration.
  • Page 637 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (VLAN configuration) Examples This example shows how to place the switch in VTP transparent mode: Switch(vlan)# vtp transparent Setting device to VTP TRANSPARENT mode. This example shows how to set the administrative domain for the switch:...
  • Page 638 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands vtp (VLAN configuration) Catalyst 2960 Switch Command Reference 2-611 OL-8604-04...
  • Page 639: Appendix

    You gain access to the bootloader command line if the switch is set to manually boot up, if an error occurs during power-on self test (POST) DRAM testing, or if an error occurs while loading the operating system (a corrupted Cisco IOS image). You can also access the bootloader if you have lost or forgotten the switch password.
  • Page 640: Boot

    (Optional) Run the loaded image with an extended or comprehensive power-on self-test (POST). Using this keyword causes POST to take longer to complete. (Optional) Pause for the Cisco IOS debugger immediately after launching. (Optional) Pause for the JTAG debugger right after loading the image.
  • Page 641 Appendix A Catalyst 2960 Switch Bootloader Commands boot Related Commands Command Description Sets the BOOT environment variable to boot a specific image when the BOOT keyword is appended to the command. Catalyst 2960 Switch Command Reference OL-8604-04...
  • Page 642: Cat

    Appendix A Catalyst 2960 Switch Bootloader Commands Use the cat bootloader command to display the contents of one or more files. cat filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 643: Copy

    Appendix A Catalyst 2960 Switch Bootloader Commands copy copy Use the copy bootloader command to copy a file from a source to a destination. copy [-b block-size] filesystem:/source-file-url filesystem:/destination-file-url Syntax Description -b block-size (Optional) This option is used only for internal development and testing.
  • Page 644 Appendix A Catalyst 2960 Switch Bootloader Commands delete delete Use the delete bootloader command to delete one or more files from the specified file system. delete filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 645: Dir

    Appendix A Catalyst 2960 Switch Bootloader Commands Use the dir bootloader command to display a list of files and directories on the specified file system. dir filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 646 Appendix A Catalyst 2960 Switch Bootloader Commands Table A-1 dir Field Descriptions (continued) Field Description 1644045 Size of the file. <date> Last modification date. env_vars Filename. Related Commands Command Description mkdir Creates one or more directories. rmdir Removes one or more directories.
  • Page 647: Flash_Init

    Appendix A Catalyst 2960 Switch Bootloader Commands flash_init flash_init Use the flash_init bootloader command to initialize the flash file system. flash_init Syntax Description This command has no arguments or keywords. Defaults The flash file system is automatically initialized during normal system operation.
  • Page 648: Format

    Appendix A Catalyst 2960 Switch Bootloader Commands format format Use the format bootloader command to format the specified file system and destroy all data in that file system. format filesystem: Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 649: Fsck

    Appendix A Catalyst 2960 Switch Bootloader Commands fsck fsck Use the fsck bootloader command to check the file system for consistency. fsck [-test | -f] filesystem: Syntax Description -test (Optional) Initialize the file system code and perform extra POST on flash memory.
  • Page 650: Help

    Appendix A Catalyst 2960 Switch Bootloader Commands help help Use the help bootloader command to display the available commands. help Syntax Description This command has no arguments or keywords. Command Modes Bootloader Command History Release Modification 12.2(25)FX This command was introduced.
  • Page 651: Memory

    Appendix A Catalyst 2960 Switch Bootloader Commands memory memory Use the memory bootloader command to display memory heap utilization information. memory Syntax Description This command has no arguments or keywords. Command Modes Bootloader Command History Release Modification 12.2(25)FX This command was introduced.
  • Page 652: Mkdir

    Appendix A Catalyst 2960 Switch Bootloader Commands mkdir mkdir Use the mkdir bootloader command to create one or more new directories on the specified file system. mkdir filesystem:/directory-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 653: More

    Appendix A Catalyst 2960 Switch Bootloader Commands more more Use the more bootloader command to display the contents of one or more files. more filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 654: Rename

    Appendix A Catalyst 2960 Switch Bootloader Commands rename rename Use the rename bootloader command to rename a file. rename filesystem:/source-file-url filesystem:/destination-file-url Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /source-file-url Original path (directory) and filename.
  • Page 655: Reset

    Appendix A Catalyst 2960 Switch Bootloader Commands reset reset Use the reset bootloader command to perform a hard reset on the system. A hard reset is similar to power-cycling the switch, clearing the processor, registers, and memory. reset Syntax Description This command has no arguments or keywords.
  • Page 656: Rmdir

    Appendix A Catalyst 2960 Switch Bootloader Commands rmdir rmdir Use the rmdir bootloader command to remove one or more empty directories from the specified file system. rmdir filesystem:/directory-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 657: Set

    115200. HELPER_CONFIG_FILE filesystem:/file-url—The name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded, including the helper image.
  • Page 658 Appendix A Catalyst 2960 Switch Bootloader Commands Defaults The environment variables have these default values: MANUAL_BOOT: No (0) BOOT: Null string ENABLE_BREAK: No (Off or 0) (the automatic bootup process cannot be interrupted by pressing the Break key on the console).
  • Page 659: Unset

    Appendix A Catalyst 2960 Switch Bootloader Commands The HELPER_CONFIG_FILE environment variable can also be set by using the boot helper-config-file filesystem:/file-url global configuration command. The bootloader prompt string (PS1) can be up to 120 printable characters except the equal sign (=).
  • Page 660 Appendix A Catalyst 2960 Switch Bootloader Commands type type Use the type bootloader command to display the contents of one or more files. type filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device.
  • Page 661 HELPER_CONFIG_FILE—Resets the name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded, including the helper image. This variable is used only for internal development and testing.
  • Page 662 Appendix A Catalyst 2960 Switch Bootloader Commands unset The BOOT environment variable can also be reset by using the no boot system global configuration command. The ENABLE_BREAK environment variable can also be reset by using the no boot enable-break global configuration command.
  • Page 663: Version

    Appendix A Catalyst 2960 Switch Bootloader Commands version version Use the version boot loader command to display the bootloader version. version Syntax Description This command has no arguments or keywords. Command Modes Bootloader Command History Release Modification 12.2(25)FX This command was introduced.
  • Page 664 Appendix A Catalyst 2960 Switch Bootloader Commands version Catalyst 2960 Switch Command Reference A-26 OL-8604-04...
  • Page 665: Appendix

    For this reason, use the debug commands only to troubleshoot specific problems or during troubleshooting sessions with Cisco technical support staff. It is best to use the debug commands during periods of lower network traffic and fewer users. Debugging during these periods decreases the likelihood that increased debug command processing overhead will affect system use.
  • Page 666: Debug Auto Qos

    Appendix B Catalyst 2960 Switch Debug Commands debug auto qos debug auto qos To use this command, the switch must be running the LAN Base image. Note Use the debug auto qos privileged EXEC command to enable debugging of the automatic quality of service (auto-QoS) feature.
  • Page 667 Appendix B Catalyst 2960 Switch Debug Commands debug auto qos 21:29:43: mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7 21:29:44: mls qos srr-queue output cos-map queue 3 threshold 3 2 4 21:29:44: mls qos srr-queue output cos-map queue 4 threshold 2 1...
  • Page 668: Debug Backup

    Appendix B Catalyst 2960 Switch Debug Commands debug backup debug backup Use the debug backup privileged EXEC command to enable debugging of the Flex Links backup interface. Use the no form of this command to disable debugging. debug backup {all | errors | events | vlan-load-balancing}...
  • Page 669: Debug Cluster

    Appendix B Catalyst 2960 Switch Debug Commands debug cluster debug cluster Use the debug cluster privileged EXEC command to enable debugging of cluster-specific events. Use the no form of this command to disable debugging. debug cluster {discovery | events | extended | hsrp | http | ip [packet] | members | nat | neighbors...
  • Page 670 Appendix B Catalyst 2960 Switch Debug Commands debug cluster Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. show cluster Displays the cluster status and a summary of the cluster to which the switch belongs.
  • Page 671: Debug Dot1X

    Appendix B Catalyst 2960 Switch Debug Commands debug dot1x debug dot1x Use the debug dot1x privileged EXEC command to enable debugging of the IEEE 802.1x authentication feature. Use the no form of this command to disable debugging. debug dot1x {all | errors | events | feature | packets | registry | state-machine}...
  • Page 672: Debug Dtp

    Appendix B Catalyst 2960 Switch Debug Commands debug dtp debug dtp Use the debug dtp privileged EXEC command to enable debugging of the Dynamic Trunking Protocol (DTP) activity. Use the no form of this command to disable debugging. debug dtp {aggregation | all | decision | events | oserrs | packets | queue | states | timers}...
  • Page 673: Debug Eap

    Appendix B Catalyst 2960 Switch Debug Commands debug eap debug eap Use the debug eap privileged EXEC command to enable debugging of the Extensible Authentication Protocol (EAP) activity. Use the no form of this command to disable debugging. debug dot1x {all | authenticator | errors | events | md5 | packets | peer | sm}...
  • Page 674: Debug Etherchannel

    Appendix B Catalyst 2960 Switch Debug Commands debug etherchannel debug etherchannel Use the debug etherchannel privileged EXEC command to enable debugging of the EtherChannel/PAgP shim. This shim is the software module that is the interface between the Port Aggregation Protocol (PAgP) software module and the port manager software module. Use the no form of this command to disable debugging.
  • Page 675: Debug Interface

    Appendix B Catalyst 2960 Switch Debug Commands debug interface debug interface Use the debug interface privileged EXEC command to enable debugging of interface-related activities. Use the no form of this command to disable debugging. debug interface {interface-id | null interface-number | port-channel port-channel-number |...
  • Page 676: Debug Ip Dhcp Snooping

    Appendix B Catalyst 2960 Switch Debug Commands debug ip dhcp snooping debug ip dhcp snooping To use this command, the switch must be running the LAN Base image. Note Use the debug ip dhcp snooping privileged EXEC command to enable debugging of DHCP snooping.
  • Page 677: Debug Ip Igmp Filter

    Appendix B Catalyst 2960 Switch Debug Commands debug ip igmp filter debug ip igmp filter Use the debug ip igmp filter privileged EXEC command to enable debugging of Internet Group Management Protocol (IGMP) filter events. Use the no form of this command to disable debugging.
  • Page 678: Debug Ip Igmp Max-Groups

    Appendix B Catalyst 2960 Switch Debug Commands debug ip igmp max-groups debug ip igmp max-groups Use the debug ip igmp max-groups privileged EXEC command to enable debugging of Internet Group Management Protocol (IGMP) maximum groups events. Use the no form of this command to disable debugging.
  • Page 679: Debug Ip Igmp Snooping

    Appendix B Catalyst 2960 Switch Debug Commands debug ip igmp snooping debug ip igmp snooping Use the debug igmp snooping privileged EXEC command to enable debugging of Internet Group Management Protocol (IGMP) snooping activity. Use the no form of this command to disable debugging.
  • Page 680: Debug Lacp

    Appendix B Catalyst 2960 Switch Debug Commands debug lacp debug lacp Use the debug lacp privileged EXEC command to enable debugging of Link Aggregation Control Protocol (LACP) activity. Use the no form of this command to disable debugging. debug lacp [all | event | fsm | misc | packet]...
  • Page 681: Debug Mac-Notification

    Appendix B Catalyst 2960 Switch Debug Commands debug mac-notification debug mac-notification Use the debug mac-notification privileged EXEC command to enable debugging of MAC notification events. Use the no form of this command to disable debugging. debug mac-notification no debug mac-notification Syntax Description This command has no arguments or keywords.
  • Page 682: Debug Matm

    Appendix B Catalyst 2960 Switch Debug Commands debug matm debug matm Use the debug matm privileged EXEC command to enable debugging of platform-independent MAC address management. Use the no form of this command to disable debugging. debug matm no debug matm Syntax Description This command has no arguments or keywords.
  • Page 683: Debug Matm Move Update

    Appendix B Catalyst 2960 Switch Debug Commands debug matm move update debug matm move update To use this command, the switch must be running the LAN Base image. Note Use the debug matm move update privileged EXEC command to enable debugging of MAC address-table move update message processing.
  • Page 684: Debug Monitor

    Appendix B Catalyst 2960 Switch Debug Commands debug monitor debug monitor Use the debug monitor privileged EXEC command to enable debugging of the Switched Port Analyzer (SPAN) feature. Use the no form of this command to disable debugging. debug monitor {all | errors | idb-update | info | list | notifications | platform | requests | snmp}...
  • Page 685: Debug Mvrdbg

    Appendix B Catalyst 2960 Switch Debug Commands debug mvrdbg debug mvrdbg To use this command, the switch must be running the LAN Base image. Note Use the debug mvrdbg privileged EXEC command to enable debugging of Multicast VLAN Registration (MVR). Use the no form of this command to disable debugging.
  • Page 686: Debug Nvram

    Appendix B Catalyst 2960 Switch Debug Commands debug nvram debug nvram Use the debug nvram privileged EXEC command to enable debugging of NVRAM activity. Use the no form of this command to disable debugging. debug nvram no debug nvram Syntax Description This command has no arguments or keywords.
  • Page 687: Debug Pagp

    Appendix B Catalyst 2960 Switch Debug Commands debug pagp debug pagp Use the debug pagp privileged EXEC command to enable debugging of Port Aggregation Protocol (PAgP) activity. Use the no form of this command to disable debugging. debug pagp [all | event | fsm | misc | packet]...
  • Page 688: Debug Platform Acl

    Appendix B Catalyst 2960 Switch Debug Commands debug platform acl debug platform acl Use the debug platform acl privileged EXEC command to enable debugging of the access control list (ACL) manager. Use the no form of this command to disable debugging.
  • Page 689: Debug Platform Backup Interface

    Appendix B Catalyst 2960 Switch Debug Commands debug platform backup interface debug platform backup interface To use this command, the switch must be running the LAN Base image. Note Use the debug platform backup interface privileged EXEC command to enable debugging of the Flex Links platform backup interface.
  • Page 690: Debug Platform Cpu-Queues

    Appendix B Catalyst 2960 Switch Debug Commands debug platform cpu-queues debug platform cpu-queues Use the debug platform cpu-queues privileged EXEC command to enable debugging of platform central processing unit (CPU) receive queues. Use the no form of this command to disable debugging.
  • Page 691 Appendix B Catalyst 2960 Switch Debug Commands debug platform cpu-queues Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. Catalyst 2960 Switch Command Reference B-27 OL-8604-04...
  • Page 692: Debug Platform Dot1X

    Appendix B Catalyst 2960 Switch Debug Commands debug platform dot1x debug platform dot1x Use the debug platform dot1x privileged EXEC command to enable debugging of IEEE 802.1x events. Use the no form of this command to disable debugging. debug platform dot1x {initialization | interface-configuration | rpc}...
  • Page 693: Debug Platform Etherchannel

    Appendix B Catalyst 2960 Switch Debug Commands debug platform etherchannel debug platform etherchannel Use the debug platform etherchannel privileged EXEC command to enable debugging of platform-dependent EtherChannel events. Use the no form of this command to disable debugging. debug platform etherchannel {init | link-up | rpc | warnings}...
  • Page 694: Debug Platform Forw-Tcam

    Appendix B Catalyst 2960 Switch Debug Commands debug platform forw-tcam debug platform forw-tcam Use the debug platform forw-tcam privileged EXEC command to enable debugging of the forwarding ternary content addressable memory (TCAM) manager. Use the no form of this command to disable debugging.
  • Page 695: Debug Platform Ip Dhcp

    Appendix B Catalyst 2960 Switch Debug Commands debug platform ip dhcp debug platform ip dhcp Use the debug platform ip dhcp privileged EXEC command to debug DHCP events. Use the no form of this command to disable debugging. debug platform ip dhcp [all | error | event | packet | rpc]...
  • Page 696: Debug Platform Ip Igmp Snooping

    Appendix B Catalyst 2960 Switch Debug Commands debug platform ip igmp snooping debug platform ip igmp snooping Use the debug platform ip igmp snooping privileged EXEC command to enable debugging of platform-dependent Internet Group Management Protocol (IGMP) snooping. Use the no form of this command to disable debugging.
  • Page 697 Appendix B Catalyst 2960 Switch Debug Commands debug platform ip igmp snooping Though visible in the command-line help strings, the rpc l3mm keyword is not supported. Note Defaults Debugging is disabled. Command Modes Privileged EXEC Command History Release Modification 12.2(25)FX This command was introduced.
  • Page 698: Debug Platform Led

    Appendix B Catalyst 2960 Switch Debug Commands debug platform led debug platform led Use the debug platform led privileged EXEC command to enable debugging of light-emitting diode (LED) actions. Use the no form of this command to disable debugging. debug platform led {generic | signal}...
  • Page 699: Debug Platform Matm

    Appendix B Catalyst 2960 Switch Debug Commands debug platform matm debug platform matm Use the debug platform matm privileged EXEC command to enable debugging of platform-dependent MAC address management. Use the no form of this command to disable debugging. debug platform matm {aging | all | ec-aging | errors | learning | rpc | secure-address | warnings}...
  • Page 700: Debug Platform Messaging Application

    Appendix B Catalyst 2960 Switch Debug Commands debug platform messaging application debug platform messaging application Use the debug platform messaging application privileged EXEC command to enable debugging of application messaging activity. Use the no form of this command to disable debugging.
  • Page 701: Debug Platform Phy

    Appendix B Catalyst 2960 Switch Debug Commands debug platform phy debug platform phy Use the debug platform phy privileged EXEC command to enable debugging of PHY driver information. Use the no form of this command to disable debugging. debug platform phy {automdix | cablediag | dual-purpose | flcd {configure | ipc | iter | trace} |...
  • Page 702 Appendix B Catalyst 2960 Switch Debug Commands debug platform phy Usage Guidelines The undebug platform phy command is the same as the no debug platform phy command. Related Commands Command Description show debugging Displays information about the types of debugging that are enabled.
  • Page 703: Debug Platform Pm

    Appendix B Catalyst 2960 Switch Debug Commands debug platform pm debug platform pm Use the debug platform pm privileged EXEC command to enable debugging of the platform-dependent port manager software module. Use the no form of this command to disable debugging.
  • Page 704 Appendix B Catalyst 2960 Switch Debug Commands debug platform pm sync Display operational synchronization and VLAN line-state event debug messages. vlans Display VLAN creation and deletion event debug messages. Note Though visible in the command-line help strings, the stack-manager keyword is not supported.
  • Page 705: Debug Platform Port-Asic

    Appendix B Catalyst 2960 Switch Debug Commands debug platform port-asic debug platform port-asic Use the debug platform port-asic privileged EXEC command to enable debugging of the port application-specific integrated circuit (ASIC) driver. Use the no form of this command to disable debugging.
  • Page 706: Debug Platform Port-Security

    Appendix B Catalyst 2960 Switch Debug Commands debug platform port-security debug platform port-security Use the debug platform port-security privileged EXEC command to enable debugging of platform-dependent port-security information. Use the no form of this command to disable debugging. debug platform port-security {add | aging | all | delete | errors | rpc | warnings}...
  • Page 707: Debug Platform Qos-Acl-Tcam

    {all | ctcam | errors | labels | mask | rpc | tcam} Syntax Description Display all QoS and ACL TCAM (QATM) manager debug messages. ctcam Display Cisco TCAM (CTCAM) related-events debug messages. errors Display QATM error-related-events debug messages. labels Display QATM label-related-events debug messages.
  • Page 708: Debug Platform Resource-Manager

    Appendix B Catalyst 2960 Switch Debug Commands debug platform resource-manager debug platform resource-manager Use the debug platform resource-manager privileged EXEC command to enable debugging of the resource manager software. Use the no form of this command to disable debugging. debug platform resource-manager {all | dm | erd | errors | madmed | sd | stats | vld}...
  • Page 709: Debug Platform Snmp

    Appendix B Catalyst 2960 Switch Debug Commands debug platform snmp debug platform snmp Use the debug platform snmp privileged EXEC command to enable debugging of the platform-dependent Simple Network Management Protocol (SNMP) software. Use the no form of this command to disable debugging.
  • Page 710: Debug Platform Span

    Appendix B Catalyst 2960 Switch Debug Commands debug platform span debug platform span Use the debug platform span privileged EXEC command to enable debugging of the platform-dependent Switched Port Analyzer (SPAN) software. Use the no form of this command to disable debugging.
  • Page 711: Debug Platform Supervisor-Asic

    Appendix B Catalyst 2960 Switch Debug Commands debug platform supervisor-asic debug platform supervisor-asic Use the debug platform supervisor-asic privileged EXEC command to enable debugging of the supervisor application-specific integrated circuit (ASIC). Use the no form of this command to disable debugging.
  • Page 712: Debug Platform Sw-Bridge

    Appendix B Catalyst 2960 Switch Debug Commands debug platform sw-bridge debug platform sw-bridge Use the debug platform sw-bridge privileged EXEC command to enable debugging of the software bridging function. Use the no form of this command to disable debugging. debug platform sw-bridge {broadcast | control | multicast | packet | unicast}...
  • Page 713: Debug Platform Tcam

    Appendix B Catalyst 2960 Switch Debug Commands debug platform tcam debug platform tcam Use the debug platform tcam privileged EXEC command to enable debugging of ternary content addressable memory (TCAM) access and lookups. Use the no form of this command to disable debugging.
  • Page 714 Appendix B Catalyst 2960 Switch Debug Commands debug platform tcam search Display supervisor-initiated TCAM-search results debug messages. write {forw-ram | reg | Display TCAM-write debug messages. The keywords have these tcam} meanings: forw-ram—Display forwarding-RAM write debug messages. reg—Display TCAM-register write debug messages.
  • Page 715: Debug Platform Udld

    Appendix B Catalyst 2960 Switch Debug Commands debug platform udld debug platform udld Use the debug platform udld privileged EXEC command to enable debugging of the platform-dependent UniDirectional Link Detection (UDLD) software. Use the no form of this command to disable debugging.
  • Page 716: Debug Platform Vlan

    Appendix B Catalyst 2960 Switch Debug Commands debug platform vlan debug platform vlan Use the debug platform vlan privileged EXEC command to enable debugging of the VLAN manager software. Use the no form of this command to disable debugging. debug platform vlan {errors | mvid | rpc}...
  • Page 717: Debug Pm

    Appendix B Catalyst 2960 Switch Debug Commands debug pm debug pm Use the debug pm privileged EXEC command to enable debugging of port manager (PM) activity. The port manager is a state machine that controls all the logical and physical interfaces. All features, such as VLANs, UniDirectional Link Detection (UDLD), and so forth, work with the port manager to provide switch functions.
  • Page 718 Appendix B Catalyst 2960 Switch Debug Commands debug pm Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. Catalyst 2960 Switch Command Reference B-54 OL-8604-04...
  • Page 719: Debug Port-Security

    Appendix B Catalyst 2960 Switch Debug Commands debug port-security debug port-security Use the debug port-security privileged EXEC command to enable debugging of the allocation and states of the port security subsystem. Use the no form of this command to disable debugging.
  • Page 720: Debug Qos-Manager

    Appendix B Catalyst 2960 Switch Debug Commands debug qos-manager debug qos-manager Use the debug qos-manager privileged EXEC command to enable debugging of the quality of service (QoS) manager software. Use the no form of this command to disable debugging. debug qos-manager {all | event | verbose}...
  • Page 721: Debug Spanning-Tree

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree debug spanning-tree Use the debug spanning-tree privileged EXEC command to enable debugging of spanning-tree activities. Use the no form of this command to disable debugging. debug spanning-tree {all | backbonefast | bpdu | bpdu-opt | config | etherchannel | events |...
  • Page 722 Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree Usage Guidelines The undebug spanning-tree command is the same as the no debug spanning-tree command. Related Commands Command Description show debugging Displays information about the types of debugging that are enabled.
  • Page 723: Debug Spanning-Tree Backbonefast

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree backbonefast debug spanning-tree backbonefast Use the debug spanning-tree backbonefast privileged EXEC command to enable debugging of spanning-tree BackboneFast events. Use the no form of this command to disable debugging. debug spanning-tree backbonefast [detail | exceptions]...
  • Page 724: Debug Spanning-Tree Bpdu

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree bpdu debug spanning-tree bpdu Use the debug spanning-tree bpdu privileged EXEC command to enable debugging of sent and received spanning-tree bridge protocol data units (BPDUs). Use the no form of this command to disable debugging.
  • Page 725: Debug Spanning-Tree Bpdu-Opt

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree bpdu-opt debug spanning-tree bpdu-opt Use the debug spanning-tree bpdu-opt privileged EXEC command to enable debugging of optimized spanning-tree bridge protocol data units (BPDUs) handling. Use the no form of this command to disable debugging.
  • Page 726: Debug Spanning-Tree Mstp

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree mstp debug spanning-tree mstp Use the debug spanning-tree mstp privileged EXEC command to enable debugging of the Multiple Spanning Tree Protocol (MSTP) software. Use the no form of this command to disable debugging.
  • Page 727 Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree mstp Usage Guidelines The undebug spanning-tree mstp command is the same as the no debug spanning-tree mstp command. Related Commands Command Description show debugging Displays information about the types of debugging that are enabled.
  • Page 728: Debug Spanning-Tree Switch

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree switch debug spanning-tree switch Use the debug spanning-tree switch privileged EXEC command to enable debugging of the software interface between the Spanning Tree Protocol (STP) software module and the port manager software module.
  • Page 729 Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree switch Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. show spanning-tree Displays spanning-tree state information. Catalyst 2960 Switch Command Reference B-65 OL-8604-04...
  • Page 730: Debug Spanning-Tree Uplinkfast

    Appendix B Catalyst 2960 Switch Debug Commands debug spanning-tree uplinkfast debug spanning-tree uplinkfast Use the debug spanning-tree uplinkfast privileged EXEC command to enable debugging of spanning-tree UplinkFast events. Use the no form of this command to disable debugging. debug spanning-tree uplinkfast [exceptions]...
  • Page 731: Debug Sw-Vlan

    Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan debug sw-vlan Use the debug sw-vlan privileged EXEC command to enable debugging of VLAN manager activities. Use the no form of this command to disable debugging. debug sw-vlan {badpmcookies | cfg-vlan {bootup | cli} | events | ifs | management | mapping |...
  • Page 732 Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. show vlan Displays the parameters for all configured VLANs or one VLAN (if the VLAN name or ID is specified) in the administrative domain.
  • Page 733: Debug Sw-Vlan Ifs

    Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan ifs debug sw-vlan ifs Use the debug sw-vlan ifs privileged EXEC command to enable debugging of the VLAN manager IOS file system (IFS) error tests. Use the no form of this command to disable debugging.
  • Page 734 Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan ifs Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. show vlan Displays the parameters for all configured VLANs or one VLAN (if the VLAN name or ID is specified) in the administrative domain.
  • Page 735: Debug Sw-Vlan Notification

    Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan notification debug sw-vlan notification Use the debug sw-vlan notification privileged EXEC command to enable debugging of the activation and deactivation of Inter-Link Switch (ISL) VLAN IDs. Use the no form of this command to disable debugging.
  • Page 736: Debug Sw-Vlan Vtp

    Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan vtp debug sw-vlan vtp Use the debug sw-vlan vtp privileged EXEC command to enable debugging of the VLAN Trunking Protocol (VTP) code. Use the no form of this command to disable debugging.
  • Page 737 Appendix B Catalyst 2960 Switch Debug Commands debug sw-vlan vtp Related Commands Command Description show debugging Displays information about the types of debugging that are enabled. show vtp Displays general information about VTP management domain, status, and counters. Catalyst 2960 Switch Command Reference...
  • Page 738: Debug Udld

    Appendix B Catalyst 2960 Switch Debug Commands debug udld debug udld Use the debug udld privileged EXEC command to enable debugging of the UniDirectional Link Detection (UDLD) feature. Use the no form of this command to disable UDLD debugging. debug udld {events | packets | registries}...
  • Page 739 Appendix B Catalyst 2960 Switch Debug Commands debug udld For debug udld registries, these categories of debugging messages appear: Sub-block creation • • Fiber-port status changes • State change indications from the port manager software MAC address registry calls •...
  • Page 740: Debug Vqpc

    Appendix B Catalyst 2960 Switch Debug Commands debug vqpc debug vqpc Use the debug vqpc privileged EXEC command to enable debugging of the VLAN Query Protocol (VQP) client. Use the no form of this command to disable debugging. debug vqpc [all | cli | events | learn | packet]...
  • Page 741: Appendix

    This appendix describes the show platform privileged EXEC commands that have been created or changed for use with the Catalyst 2960 switch. These commands display information helpful in diagnosing and resolving internetworking problems and should be used only under the guidance of Cisco technical support staff.
  • Page 742: A P P E N D I X C Catalyst 2960 Switch Show Platform Commands

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform acl show platform acl Use the show platform acl privileged EXEC command to display platform-dependent access control list (ACL) manager information. show platform acl {interface interface-id | label label-number [detail] | statistics asic-number |...
  • Page 743: Show Platform Backup Interface

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform backup interface show platform backup interface Use the show platform backup interface privileged EXEC command to display platform-dependent backup information used in a Flex Links configuration. show platform backup interface [interface-id | dummyQ] [ | {begin | exclude | include}...
  • Page 744: Show Platform Etherchannel

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform etherchannel show platform etherchannel Use the show platform etherchannel privileged EXEC command to display platform-dependent EtherChannel information. show platform etherchannel {flags | time-stamps} [ | {begin | exclude | include} expression]...
  • Page 745: Show Platform Forward

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform forward show platform forward Use the show platform forward privileged EXEC command for an interface to specify how the hardware would forward a frame that matches the specified parameters. show platform forward interface-id [vlan vlan-id] src-mac dst-mac [l3protocol-id] [sap | snap]...
  • Page 746 Appendix C Catalyst 2960 Switch Show Platform Commands show platform forward | include (Optional) Display includes lines that match the specified expression. expression Expression in the output to use as a reference point. Command Modes Privileged EXEC Command History Release Modification 12.2(25)FX...
  • Page 747: Show Platform Ip Igmp Snooping

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform ip igmp snooping show platform ip igmp snooping Use the show platform ip igmp snooping privileged EXEC command to display platform-dependent Internet Group Management Protocol (IGMP) snooping information. show platform ip igmp snooping {all | control [di] | counters | flood [vlan vlan-id] | group...
  • Page 748 Appendix C Catalyst 2960 Switch Show Platform Commands show platform ip igmp snooping Usage Guidelines You should use this command only when you are working directly with a technical support representative while troubleshooting a problem. Do not use this command unless a technical support representative asks you to do so.
  • Page 749: Show Platform Layer4Op

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform layer4op show platform layer4op Use the show platform layer4op privileged EXEC command to display platform-dependent Layer 4 operator information. show platform layer4op {acl | pacl [port-asic] | qos [port-asic]} {and-or | map | or-and | vcu} [...
  • Page 750: Show Platform Mac-Address-Table

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform mac-address-table show platform mac-address-table Use the show platform mac-address-table privileged EXEC command to display platform-dependent MAC address table information. show platform mac-address-table [aging-array | hash-table | mac-address mac-address] [vlan vlan-id]] [ | {begin | exclude | include} expression]...
  • Page 751: Show Platform Messaging

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform messaging show platform messaging Use the show platform messaging privileged EXEC command to display platform-dependent application and performance message information. show platform messaging {application [incoming | outgoing | summary] | hiperf...
  • Page 752: Show Platform Monitor

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform monitor show platform monitor Use the show platform monitor privileged EXEC command to display platform-dependent Switched Port Analyzer (SPAN) information. show platform monitor [session session-number] [ | {begin | exclude | include} expression]...
  • Page 753: Show Platform Mvr Table

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform mvr table show platform mvr table Use the show platform mvr table privileged EXEC command to display the platform-dependent Multicast VLAN Registration (MVR) multi-expansion descriptor (MED) group mapping table. show platform mvr table [ | {begin | exclude | include} expression]...
  • Page 754: Show Platform Pm

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform pm show platform pm Use the show platform pm privileged EXEC command to display platform-dependent port-manager information. show platform pm {counters | group-masks | idbs {active-idbs | deleted-idbs} | if-numbers |...
  • Page 755: Show Platform Port-Asic

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-asic show platform port-asic Use the show platform port-asic privileged EXEC command to display platform-dependent port ASIC register information. show platform port-asic {cpu-queue-map-table [asic number | port number [asic number]] |...
  • Page 756 Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-asic exception [asic number | port Display the exception-index register information. The keywords number [asic number]] have these meanings: asic number—(Optional) Display information for the • specified ASIC. The range is 0 to 1.
  • Page 757 Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-asic port-info [asic number | port Display port information register values. The keywords have these number [asic number]] meanings: asic number—(Optional) Display information for the • specified ASIC. The range is 0 to 1.
  • Page 758 Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-asic transmit {port-fifo | queue | Display transmit information. The keywords have these meanings: supervisor-sram} [asic number | port-fifo—Display the contents of the port-FIFO information • port number [asic number]] register.
  • Page 759 Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-asic Usage Guidelines You should use this command only when you are working directly with your technical support representative while troubleshooting a problem. Do not use this command unless your technical support representative asks you to do so.
  • Page 760: Show Platform Port-Security

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform port-security show platform port-security Use the show platform port-security privileged EXEC command to display platform-dependent port-security information. show platform port-security [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 761: Show Platform Qos

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform qos show platform qos Use the show platform qos privileged EXEC command to display platform-dependent quality of service (QoS) information. show platform qos {label asic number | policer {parameters asic number |...
  • Page 762: Show Platform Resource-Manager

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform resource-manager show platform resource-manager Use the show platform resource-manager privileged EXEC command to display platform-dependent resource-manager information. show platform resource-manager {dm [index number] | erd [index number] | mad [index number] | med [index number] | mod | msm {hash-table [vlan vlan-id] |...
  • Page 763 Appendix C Catalyst 2960 Switch Show Platform Commands show platform resource-manager | include (Optional) Display includes lines that match the specified expression. expression Expression in the output to use as a reference point. Command Modes Privileged EXEC Command History Release Modification 12.2(25)FX...
  • Page 764: Show Platform Snmp Counters

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform snmp counters show platform snmp counters Use the show platform snmp counters privileged EXEC command to display platform-dependent Simple Network Management Protocol (SNMP) counter information. show platform snmp counters [ | {begin | exclude | include} expression]...
  • Page 765: Show Platform Spanning-Tree

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform spanning-tree show platform spanning-tree Use the show platform spanning-tree privileged EXEC command to display platform-dependent spanning-tree information. show platform spanning-tree synchronization [detail | vlan vlan-id] [ | {begin | exclude |...
  • Page 766: Show Platform Stp-Instance

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform stp-instance show platform stp-instance Use the show platform stp-instance privileged EXEC command to display platform-dependent spanning-tree instance information. show platform stp-instance vlan-id [ | {begin | exclude | include} expression]...
  • Page 767: Show Platform Tcam

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform tcam show platform tcam Use the show platform tcam privileged EXEC command to display platform-dependent ternary content addressable memory (TCAM) driver information. show platform tcam {handle number | log-results | table {acl | all | local | mac-address | qos |...
  • Page 768 Appendix C Catalyst 2960 Switch Show Platform Commands show platform tcam table {acl | all | local | Display lookup and forwarding table information. The keywords mac-address | qos | station | have these meanings: vlan-list} acl—Display the access-control list (ACL) table.
  • Page 769: Show Platform Vlan

    Appendix C Catalyst 2960 Switch Show Platform Commands show platform vlan show platform vlan Use the show platform vlan privileged EXEC command to display platform-dependent VLAN information. show platform vlan {misc | mvid | prune | refcount | rpc {receive | transmit}} [ | {begin | exclude...
  • Page 770 Appendix C Catalyst 2960 Switch Show Platform Commands show platform vlan Catalyst 2960 Switch Command Reference C-30 OL-8604-04...
  • Page 771: I N D E X

    2-253 interrupting 2-19 allowed VLANs 2-564 manually 2-22 apply command 2-596 boot loader archive download-sw command accessing archive tar command booting archive upload-sw command 2-11 Cisco IOS image audience xvii helper image 2-20 Catalyst 2960 Switch Command Reference IN-1 OL-8604-04...
  • Page 772 2-487, 2-520 2-54 broadcast storm control 2-538 cluster member command 2-55 cluster outside-interface command 2-57 cluster requirements xviii cluster run command 2-58 candidate switches See clusters cat (boot loader) command Catalyst 2960 Switch Command Reference IN-2 OL-8604-04...
  • Page 773 B-29 command xvii debug platform forw-tcam command B-30 for examples xviii debug platform ip dhcp command B-31 publication xvii debug platform ip igmp snooping command B-32 text xvii debug platform led command B-34 Catalyst 2960 Switch Command Reference IN-3 OL-8604-04...
  • Page 774 2-64 2-82 deny command dot1x host-mode command 2-65 2-84 detect mechanism, causes 2-100 dot1x initialize command 2-85 device manager requirements dot1x mac-auth-bypass command xviii 2-86 dot1x max-reauth-req command 2-88 dot1x max-req command 2-89 Catalyst 2960 Switch Command Reference IN-4 OL-8604-04...
  • Page 775 VLAN list 2-564 errdisable recovery cause small-frame 2-104 and pruning-eligible list 2-564 errdisable recovery command 2-105 configuring 2-584 error conditions, displaying 2-339 extended system ID for STP 2-493 error disable detection 2-100 Catalyst 2960 Switch Command Reference IN-5 OL-8604-04...
  • Page 776 2-157 binding HSRP group to cluster 2-59 initial configuration standby group 2-59 See getting started guide and hardware installation guide interface configuration mode 1-2, 1-4 interface port-channel command 2-112 interface range command 2-114 Catalyst 2960 Switch Command Reference IN-6 OL-8604-04...
  • Page 777 Link Aggregation Control Protocol ip igmp filter command 2-140 See EtherChannel ip igmp max-groups command 2-142 link flap ip igmp profile command 2-144 error detection for 2-100 ip igmp snooping command 2-146 error recovery timer 2-105 Catalyst 2960 Switch Command Reference IN-7 OL-8604-04...
  • Page 778 2-182 match (class-map configuration) command 2-200 deleting 2-40 maximum transmission unit displaying 2-398 See MTU enabling MAC address notification 2-185 mdix auto command 2-202 enabling MAC address-table move update 2-183 media-type command 2-204 Catalyst 2960 Switch Command Reference IN-8 OL-8604-04...
  • Page 779 2-503 multicast groups, MVR 2-248 current or pending display 2-503 multicast router learning method 2-159 displaying 2-446 multicast router ports, configuring 2-159 MST configuration mode 2-503 multicast storm control 2-538 VLANs-to-instance mapping 2-503 Catalyst 2960 Switch Command Reference IN-9 OL-8604-04...
  • Page 780 2-30 denying 2-65 defining trust states 2-577 permitting 2-257 setting DSCP or IP precedence values 2-288 normal-range VLANs 2-584, 2-589 Port Aggregation Protocol note, description xviii See EtherChannel no vlan command 2-584, 2-593 Catalyst 2960 Switch Command Reference IN-10 OL-8604-04...
  • Page 781 2-240 displaying CoS output queue threshold port types, MVR 2-250 2-418 power information, displaying 2-336 displaying DSCP output queue threshold 2-418 priority-queue command 2-268 displaying queueing strategy 2-414 privileged EXEC mode 1-2, 1-3 Catalyst 2960 Switch Command Reference IN-11 OL-8604-04...
  • Page 782 See STP setting WTD thresholds 2-234 rapid PVST+ maps See STP defining 2-214, 2-228, 2-230, 2-236, 2-238 rcommand command 2-275 displaying 2-418 re-authenticating IEEE 802.1x-enabled ports 2-93 re-authentication periodic 2-94 time between attempts 2-95 Catalyst 2960 Switch Command Reference IN-12 OL-8604-04...
  • Page 783 2-361 SDM templates show ip dhcp snooping database command 2-364, 2-366 displaying 2-442 show ip igmp profile command 2-369 secure ports, limitations 2-555 show ip igmp snooping command 2-370 sending flow-control packets 2-110 Catalyst 2960 Switch Command Reference IN-13 OL-8604-04...
  • Page 784 2-478 show platform layer4op command snmp trap mac-notification command 2-482 show platform mac-address-table command C-10 show platform messaging command C-11 show platform monitor command C-12 Catalyst 2960 Switch Command Reference IN-14 OL-8604-04...
  • Page 785 ID 2-493 spanning-tree mst forward-time command 2-507 path cost 2-489 spanning-tree mst hello-time command 2-508 protocol modes 2-501 spanning-tree mst max-age command 2-509 spanning-tree mst max-hops command 2-510 spanning-tree mst port-priority command 2-512 Catalyst 2960 Switch Command Reference IN-15 OL-8604-04...
  • Page 786 2-549 error recovery timer 2-105 switchport nonegotiate command 2-551 message timer 2-579 switchport port-security aging command 2-558 normal mode 2-579, 2-581 switchport port-security command 2-553 switchport priority extend command 2-560 Catalyst 2960 Switch Command Reference IN-16 OL-8604-04...
  • Page 787 (privileged EXEC) command 2-598 2-607 vmps retry command 2-600 description vmps server command 2-601 entering 2-595 voice VLAN summary configuring 2-567 vlan database command 2-595 setting port priority 2-560 VLAN ID range 2-584, 2-589 Catalyst 2960 Switch Command Reference IN-17 OL-8604-04...
  • Page 788 Version 2 2-603, 2-607 mode 2-603, 2-607 pruning 2-603, 2-607 saving the configuration 2-584, 2-593 statistics 2-465 status 2-465 status display fields 2-468 vtp (global configuration) command 2-603 vtp (VLAN configuration) command 2-607 Catalyst 2960 Switch Command Reference IN-18 OL-8604-04...

Table of Contents