Download  Print this page
   
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800

Advertisement

Catalyst 2960 Switch Command Reference
Cisco IOS Release 12.2(40)SE
August 2007
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Text Part Number: OL-8604-03

Advertisement

Table of Contents

   Related Manuals for Cisco Catalyst 2960

   Summary of Contents for Cisco Catalyst 2960

  • Page 1 Catalyst 2960 Switch Command Reference Cisco IOS Release 12.2(40)SE August 2007 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-8604-03...
  • Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.;...
  • Page 3: Table Of Contents

    Privileged EXEC Mode Global Configuration Mode Interface Configuration Mode config-vlan Mode VLAN Configuration Mode Line Configuration Mode Catalyst 2960 Switch Cisco IOS Commands C H A P T E R aaa accounting dot1x aaa authentication dot1x aaa authorization network archive download-sw...
  • Page 4 2-58 cluster run 2-59 cluster standby-group 2-60 cluster timer 2-62 define interface-range 2-64 delete 2-66 deny (MAC access-list configuration) 2-67 dot1x 2-70 dot1x auth-fail max-attempts 2-72 dot1x auth-fail vlan 2-74 dot1x control-direction 2-76 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 5 2-127 ip dhcp snooping database 2-129 ip dhcp snooping information option 2-131 ip dhcp snooping information option allow-untrusted 2-133 ip dhcp snooping limit rate 2-135 ip dhcp snooping trust 2-136 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 6 2-183 mac address-table notification 2-185 mac address-table static 2-187 mac address-table static drop 2-188 macro apply 2-190 macro description 2-193 macro global 2-194 macro global description 2-197 macro name 2-198 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 7 2-250 pagp learn-method 2-253 pagp port-priority 2-255 permit (MAC access-list configuration) 2-257 police 2-260 police aggregate 2-262 policy-map 2-264 port-channel load-balance 2-266 priority-queue 2-268 queue-set 2-270 radius-server dead-criteria 2-271 radius-server host 2-273 rcommand 2-275 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 8 2-439 show errdisable detect 2-440 show errdisable flap-values 2-442 show errdisable recovery 2-444 show etherchannel 2-446 show fallback profile 2-449 show flowcontrol 2-451 show interfaces 2-453 show interfaces counters 2-462 show inventory 2-465 Catalyst 2960 Switch Command Reference viii OL-8604-03...
  • Page 9 2-519 show mls qos maps 2-523 show mls qos queue-set 2-526 show mls qos vlan 2-528 show monitor 2-529 show mvr 2-531 show mvr interface 2-533 show mvr members 2-535 show pagp 2-537 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 10 2-656 spanning-tree mode 2-658 spanning-tree mst configuration 2-660 spanning-tree mst cost 2-662 spanning-tree mst forward-time 2-664 spanning-tree mst hello-time 2-665 spanning-tree mst max-age 2-666 spanning-tree mst max-hops 2-667 spanning-tree mst port-priority 2-669 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 11 2-722 switchport voice vlan 2-725 system mtu 2-727 test cable-diagnostics tdr 2-729 traceroute mac 2-730 traceroute mac ip 2-733 trust 2-735 udld 2-737 udld port 2-739 udld reset 2-741 vlan (global configuration) 2-742 Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 12 (global configuration) 2-758 vmps retry 2-759 vmps server 2-760 vtp (global configuration) 2-762 vtp (VLAN configuration) 2-766 Catalyst 2960 Switch Bootloader Commands A P P E N D I X boot copy delete flash_init format A-10 fsck A-11...
  • Page 13 B-43 debug platform pm B-45 debug platform port-asic B-47 debug platform port-security B-48 debug platform qos-acl-tcam B-49 debug platform resource-manager B-50 debug platform snmp B-51 debug platform span B-52 debug platform supervisor-asic B-53 Catalyst 2960 Switch Command Reference xiii OL-8604-03...
  • Page 14 B-79 debug udld B-81 debug vqpc B-83 Catalyst 2960 Switch Show Platform Commands A P P E N D I X show platform acl show platform backup interface show platform etherchannel show platform forward show platform ip igmp snooping...
  • Page 15 Contents show platform resource-manager C-22 show platform snmp counters C-24 show platform spanning-tree C-25 show platform stp-instance C-26 show platform tcam C-27 show platform vlan C-29 N D E X Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 16 Contents Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 17: Preface

    This guide is for the networking professional using the Cisco IOS command-line interface (CLI) to manage the Catalyst 2960 switch, hereafter referred to as the switch. Before using this guide, you should have experience working with the Cisco IOS commands and the switch software features. Before using this guide, you should have experience working with the concepts and terminology of Ethernet and local area networking.
  • Page 18: Related Publications

    • For upgrade information, see the “Downloading Software” section in the release notes. You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and from the telephone numbers listed in the URL referenced in Obtaining Documentation, Obtaining Support, and Security Guidelines, page xix.
  • Page 19: Obtaining Documentation, Obtaining Support, And Security Guidelines

    For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What’s New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html...
  • Page 20 Preface Obtaining Documentation, Obtaining Support, and Security Guidelines Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 21: Chapter 1 Using The Command-line Interface

    C H A P T E R Using the Command-Line Interface The Catalyst 2960 switch is supported by Cisco IOS software. This chapter describes how to use the switch command-line interface (CLI) to configure software features. For a complete description of the commands that support these features, see Chapter 2, “Catalyst...
  • Page 22 From global configuration mode, To exit to global configuration mode, Switch(config-line)# specify a line by entering the line enter the exit command. command. To return to privileged EXEC mode, enter the end command, or press Ctrl-Z. Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 23: User Exec Mode

    You can specify either the terminal or NVRAM as the source of configuration commands. This example shows you how to access global configuration mode: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 24: Interface Configuration Mode

    For extended-range VLANs, all characteristics except the MTU size must remain at the default setting. To return to global configuration mode, enter exit; to return to privileged EXEC mode, enter end. All the commands except shutdown take effect when you exit config-vlan mode. Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 25: Vlan Configuration Mode

    To exit line configuration mode and to return to global configuration mode, use the exit command. To exit line configuration mode and to return to privileged EXEC mode, enter the end command, or press Ctrl-Z. Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 26 Chapter 1 Using the Command-Line Interface CLI Command Modes Catalyst 2960 Switch Command Reference OL-8604-03...
  • Page 27: Chapter 2 Catalyst 2960 Switch Cisco Ios Commands

    C H A P T E R Catalyst 2960 Switch Cisco IOS Commands aaa accounting dot1x Use the aaa accounting dot1x global configuration command to enable authentication, authorization, and accounting (AAA) accounting and to create method lists defining specific accounting methods on a per-line or per-interface basis for IEEE 802.1x sessions.
  • Page 28: Chapter 2 Catalyst 2960 Switch Cisco Io Command

    IEEE 802.1x. aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. dot1x reauthentication Enables or disables periodic reauthentication. dot1x timeout Sets the number of seconds between re-authentication attempts.
  • Page 29: Aaa Authentication Dot1x

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands aaa authentication dot1x aaa authentication dot1x Use the aaa authentication dot1x global configuration command to specify the authentication, authorization, and accounting (AAA) method to use on ports complying with the IEEE 802.1x authentication.
  • Page 30 Description aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 31: Aaa Authorization Network

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands aaa authorization network aaa authorization network Use the aaa authorization network global configuration command to the configure the switch to use user-RADIUS authorization for all network-related service requests, such as IEEE 802.1x VLAN assignment.
  • Page 32: Archive Download-sw

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive download-sw archive download-sw Use the archive download-sw privileged EXEC command to download a new image from a TFTP server to the switch and to overwrite or keep the existing image. archive download-sw {/force-reload | /imageonly | /leave-old-sw | /no-set-boot | /overwrite |...
  • Page 33 The /imageonly option removes the HTML files for the existing image if the existing image is being removed or replaced. Only the Cisco IOS image (without the HTML files) is downloaded. Using the /safe or /leave-old-sw option can cause the new image download to fail if there is insufficient flash memory.
  • Page 34: Archive Tar

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar archive tar Use the archive tar privileged EXEC command to create a tar file, list files in a tar file, or extract the files from a tar file. archive tar {/create destination-url flash:/file-url} | {/table source-url} | {/xtract source-url flash:/file-url [dir/file...]}...
  • Page 35 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar /table source-url Display the contents of an existing tar file to the screen. For source-url, specify the source URL alias for the local or network file system. These options are supported: •...
  • Page 36 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive tar Command Modes Privileged EXEC Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines Filenames and directory names are case sensitive. Image names are case sensitive. Examples This example shows how to create a tar file. The command writes the contents of the new-configs directory on the local flash device to a file named saved.tar on the TFTP server at 172.20.10.30:...
  • Page 37: Archive Upload-sw

    Use the upload feature only if the HTML files associated with the embedded device manager have been installed with the existing image. The files are uploaded in this sequence: the Cisco IOS image, the HTML files, and info. After these files are uploaded, the software creates the tar file.
  • Page 38 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands archive upload-sw Examples This example shows how to upload the currently running image to a TFTP server at 172.20.140.2: Switch# archive upload-sw tftp://172.20.140.2/test-image.tar Related Commands Command Description archive download-sw Downloads a new image to the switch.
  • Page 39: Auto Qos Voip

    [cisco-phone | cisco-softphone | trust] Syntax Description cisco-phone Identify this port as connected to a Cisco IP Phone, and automatically configure QoS for VoIP. The QoS labels of incoming packets are trusted only when the telephone is detected.
  • Page 40 QoS. Auto-QoS configures the switch for VoIP with Cisco IP Phones on switch and routed ports and for VoIP with devices running the Cisco SoftPhone application. These releases support only Cisco IP SoftPhone Version 1.3(3) or later.
  • Page 41 DSCP value of 24, 26, or 46 or is out of profile, the switch changes the DSCP value to 0. When a Cisco IP Phone is absent, the ingress classification is set to not trust the QoS label in the packet. The...
  • Page 42 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands auto qos voip To display the QoS configuration that is automatically generated when auto-QoS is enabled, enable debugging before you enable auto-QoS. Use the debug auto qos privileged EXEC command to enable auto-QoS debugging.
  • Page 43 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands auto qos voip Command Description srr-queue bandwidth shape Assigns the shaped weights and enables bandwidth shaping on the four egress queues mapped to a port. srr-queue bandwidth share Assigns the shared weights and enables bandwidth sharing on the four egress queues mapped to a port.
  • Page 44: Boot Boothlpr

    Use the boot boothlpr global configuration command to load a special Cisco IOS image, which when loaded into memory, can load a second Cisco IOS image into memory and launch it. This variable is used only for internal development and testing. Use the no form of this command to return to the default setting.
  • Page 45: Boot Config-file

    Use the boot config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration. Use the no form of this command to return to the default setting.
  • Page 46: Boot Enable-break

    Despite the setting of this command, you can interrupt the automatic boot process at any time by pressing Note the MODE button on the switch front panel. This command changes the setting of the ENABLE_BREAK environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command Description show boot Displays the settings of the boot environment variables.
  • Page 47: Boot Helper

    This variable is used only for internal development and testing. Filenames and directory names are case sensitive. This command changes the setting of the HELPER environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command...
  • Page 48: Boot Helper-config-file

    Use the boot helper-config-file global configuration command to specify the name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded. Use the no form of this command to return to the default setting.
  • Page 49: Boot Manual

    To boot up the system, use the boot boot loader command, and specify the name of the bootable image. This command changes the setting of the MANUAL_BOOT environment variable. For more information, see Appendix A, “Catalyst 2960 Switch Bootloader Commands.” Related Commands Command Description show boot Displays the settings of the boot environment variables.
  • Page 50: Boot Private-config-file

    Use the boot private-config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration. Use the no form of this command to return to the default setting.
  • Page 51: Boot System

    Use the boot system global configuration command to specify the Cisco IOS image to load during the next boot cycle. Use the no form of this command to return to the default setting. boot system filesystem:/file-url ...
  • Page 52: Channel-group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group channel-group Use the channel-group interface configuration command to assign an Ethernet port to an EtherChannel group, to enable an EtherChannel mode, or both. Use the no form of this command to remove an Ethernet port from an EtherChannel group.
  • Page 53 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group Defaults No channel groups are assigned. No mode is configured. Command Modes Interface configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines For Layer 2 EtherChannels, you do not have to create a port-channel interface first by using the interface port-channel global configuration command before assigning a physical port to a channel group.
  • Page 54: Switch# Configure Terminal

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-group For a complete list of configuration guidelines, see the “Configuring EtherChannels” chapter in the software configuration guide for this release. Examples This example shows how to configure an EtherChannel. It assigns two static-access ports in VLAN 10...
  • Page 55: Channel-protocol

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-protocol channel-protocol Use the channel-protocol interface configuration command to restrict the protocol used on a port to manage channeling. Use the no form of this command to return to the default setting.
  • Page 56: Show Etherchannel

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands channel-protocol Related Commands Command Description channel-group Assigns an Ethernet port to an EtherChannel group. show etherchannel protocol Displays protocol information the EtherChannel. Catalyst 2960 Switch Command Reference 2-30 OL-8604-03...
  • Page 57: Class

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class class Use the class policy-map configuration command to define a traffic classification match criteria (through the police, set, and trust policy-map class configuration commands) for the specified class-map name. Use the no form of this command to delete an existing class map.
  • Page 58 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class Examples This example shows how to create a policy map called policy1. When attached to the ingress direction, it matches all the incoming traffic defined in class1, sets the IP Differentiated Services Code Point (DSCP) to 10, and polices the traffic at an average rate of 1 Mb/s and bursts at 20 KB.
  • Page 59: Class-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class-map class-map Use the class-map global configuration command to create a class map to be used for matching packets to the class name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and to return to global configuration mode.
  • Page 60 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands class-map To define packet classification on a physical-port basis, only one match command per class map is supported. In this situation, the match-all and match-any keywords are equivalent. Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs).
  • Page 61: Clear Dot1x

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear dot1x clear dot1x Use the clear dot1x privileged EXEC command to clear IEEE 802.1x information for the switch or for the specified port. clear dot1x {all | interface interface-id} Syntax Description Clear all IEEE 802.1x information for the switch.
  • Page 62: Clear Eap Sessions

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear eap sessions clear eap sessions Use the clear eap sessions privileged EXEC command to clear Extensible Authentication Protocol (EAP) session information for the switch or for the specified port. clear eap sessions [credentials name [interface interface-id] | interface interface-id | method name | transport name] [credentials name | interface interface-id | transport name] ...
  • Page 63: Clear Errdisable Interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear errdisable interface clear errdisable interface Use the clear errdisable interface privileged EXEC command to re-enable a VLAN that was error disabled. clear errdisable interface interface-id vlan [vlan-list] Syntax Description vlan list (Optional) Specify a list of VLANs to be re-enabled.
  • Page 64: Clear Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear ip dhcp snooping clear ip dhcp snooping Use the clear ip dhcp snooping privileged EXEC command to clear the DHCP snooping binding database, the DHCP snooping binding database agent statistics, or the DHCP snooping statistics counters.
  • Page 65 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear ip dhcp snooping Related Commands Command Description ip dhcp snooping Enables DHCP snooping on a VLAN. ip dhcp snooping database Configures the DHCP snooping binding database agent or the binding file.
  • Page 66: Clear Lacp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear lacp clear lacp Use the clear lacp privileged EXEC command to clear Link Aggregation Control Protocol (LACP) channel-group counters. clear lacp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 6.
  • Page 67: Clear Mac Address-table

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table clear mac address-table Use the clear mac address-table privileged EXEC command to delete from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 68 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table Related Commands Command Description mac address-table notification Enables the MAC address notification feature. show mac access-group Displays the MAC address table static and dynamic entries. show mac address-table notification Displays the MAC address notification settings for all interfaces or the specified interface.
  • Page 69: Clear Mac Address-table Move Update

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear mac address-table move update clear mac address-table move update Use the clear mac address-table move update privileged EXEC command to clear the mac address-table-move update-related counters. clear mac address-table move update Syntax Description This command has no arguments or keywords.
  • Page 70: Clear Pagp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear pagp clear pagp Use the clear pagp privileged EXEC command to clear Port Aggregation Protocol (PAgP) channel-group information. clear pagp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 6.
  • Page 71: Clear Port-security

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear port-security clear port-security Use the clear port-security privileged EXEC command to delete from the MAC address table all secure addresses or all secure addresses of a specific type (configured, dynamic, or sticky) on the switch or on an interface.
  • Page 72 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear port-security This example shows how to remove all the dynamic secure addresses learned on a specific interface: Switch# clear port-security dynamic interface gigabitethernet0/1 This example shows how to remove all the dynamic secure addresses from the address table:...
  • Page 73: Clear Spanning-tree Counters

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear spanning-tree counters clear spanning-tree counters Use the clear spanning-tree counters privileged EXEC command to clear the spanning-tree counters. clear spanning-tree counters [interface interface-id] Syntax Description interface interface-id (Optional) Clear all spanning-tree counters on the specified interface. Valid interfaces include physical ports, VLANs, and port channels.
  • Page 74: Clear Spanning-tree Detected-protocols

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear spanning-tree detected-protocols clear spanning-tree detected-protocols Use the clear spanning-tree detected-protocols privileged EXEC command to restart the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface.
  • Page 75: Clear Vmps Statistics

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear vmps statistics clear vmps statistics Use the clear vmps statistics privileged EXEC command to clear the statistics maintained by the VLAN Query Protocol (VQP) client. clear vmps statistics Syntax Description This command has no arguments or keywords.
  • Page 76: Clear Vtp Counters

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands clear vtp counters clear vtp counters Use the clear vtp counters privileged EXEC command to clear the VLAN Trunking Protocol (VTP) and pruning counters. clear vtp counters Syntax Description This command has no arguments or keywords.
  • Page 77: Cluster Commander-address

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster commander-address cluster commander-address You do not need to enter this commandfrom a standalone cluster member switch. The cluster command switch automatically provides its MAC address to cluster member switches when these switches join the cluster.
  • Page 78 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster commander-address Examples This is partial sample output from the running configuration of a cluster member. Switch(config)# show running-configuration <output truncated> cluster commander-address 00e0.9bc0.a500 member 4 name my_cluster <output truncated> This example shows how to remove a member from the cluster by using the cluster member console.
  • Page 79: Cluster Discovery Hop-count

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster discovery hop-count cluster discovery hop-count Use the cluster discovery hop-count global configuration command on the cluster command switch to set the hop-count limit for extended discovery of candidate switches. Use the no form of this command to return to the default setting.
  • Page 80: Cluster Enable

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster enable cluster enable Use the cluster enable global configuration command on a command-capable switch to enable it as the cluster command switch, assign a cluster name, and to optionally assign a member number to it. Use the no form of the command to remove all members and to make the cluster command switch a candidate switch.
  • Page 81: Cluster Holdtime

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster holdtime cluster holdtime Use the cluster holdtime global configuration command to set the duration in seconds before a switch (either the command or cluster member switch) declares the other switch down after not receiving heartbeat messages.
  • Page 82: Cluster Member

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster member cluster member Use the cluster member global configuration command on the cluster command switch to add candidates to a cluster. Use the no form of the command to remove members from the cluster.
  • Page 83 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster member Examples This example shows how to add a switch as member 2 with MAC address 00E0.1E00.2222 and the password key to a cluster. The cluster command switch adds the candidate to the cluster through VLAN 3.
  • Page 84: Cluster Outside-interface

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster outside-interface cluster outside-interface Use the cluster outside-interface global configuration command to configure the outside interface for cluster Network Address Translation (NAT) so that a member without an IP address can communicate with devices outside the cluster.
  • Page 85: Cluster Run

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster run cluster run Use the cluster run global configuration command to enable clustering on a switch. Use the no form of this command to disable clustering on a switch. cluster run...
  • Page 86: Cluster Standby-group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster standby-group cluster standby-group Use the cluster standby-group global configuration command to enable cluster command-switch redundancy by binding the cluster to an existing Hot Standby Router Protocol (HSRP). Entering the routing-redundancy keyword enables the same HSRP group to be used for cluster command-switch redundancy and routing redundancy.
  • Page 87 Related Commands Command Description standby ip Enables HSRP on the interface. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. show cluster Displays the cluster status and a summary of the cluster to which the switch belongs.
  • Page 88: Cluster Timer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster timer cluster timer Use the cluster timer global configuration command to set the interval in seconds between heartbeat messages. Use the no form of this command to set the interval to the default value.
  • Page 89 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands cluster timer Related Commands Command Description show cluster Displays the cluster status and a summary of the cluster to which the switch belongs. Catalyst 2960 Switch Command Reference 2-63 OL-8604-03...
  • Page 90: Define Interface-range

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands define interface-range define interface-range Use the define interface-range global configuration command to create an interface-range macro. Use the no form of this command to delete the defined macro. define interface-range macro-name interface-range...
  • Page 91 Executes a command on multiple ports at the same time. show running-config Displays the current operating configuration, including defined macros. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 92: Delete

    The prompting behavior depends on the setting of the file prompt global configuration command. By default, the switch prompts for confirmation on destructive file operations. For more information about this command, see the Cisco IOS Command Reference for Release 12.1. Examples...
  • Page 93: Deny (mac Access-list Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) deny (MAC access-list configuration) Use the deny MAC access-list configuration command to prevent non-IP traffic from being forwarded if the conditions are matched. Use the no form of this command to remove a deny condition from the named MAC access list.
  • Page 94 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) lsap lsap-number mask (Optional) Use the LSAP number (0 to 65535) of a packet with 802.2 encapsulation to identify the protocol of the packet. mask is a mask of don’t care bits applied to the LSAP number before testing for a match.
  • Page 95 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands deny (MAC access-list configuration) Usage Guidelines You enter MAC-access list configuration mode by using the mac access-list extended global configuration command. If you use the host keyword, you cannot enter an address mask; if you do not use the host keyword, you must enter an address mask.
  • Page 96: Dot1x

    IEEE 802.1x authentication and EtherChannel are configured. If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the device is running ACS Version 3.2.1 or later.
  • Page 97 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x Examples This example shows how to globally enable IEEE 802.1x authentication on a switch: Switch(config)# dot1x system-auth-control You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC command.
  • Page 98: Dot1x Auth-fail Max-attempts

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail max-attempts dot1x auth-fail max-attempts Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum allowable authentication attempts before a port is moved to the restricted VLAN. To return to the default setting, use the no form of this command.
  • Page 99 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail max-attempts Related Commands Command Description dot1x auth-fail vlan [vlan id] Enables the optional restricted VLAN feature. dot1x max-reauth-req [count] Sets the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state.
  • Page 100: Dot1x Auth-fail Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail vlan dot1x auth-fail vlan Use the dot1x auth-fail vlan interface configuration command to enable the restricted VLAN on a port. To return to the default setting, use the no form of this command.
  • Page 101 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x auth-fail vlan When a restricted VLAN port is moved to an unauthorized state, the authentication process restarts. If the supplicant fails the authentication process again, the authenticator waits in the held state. After the supplicant has correctly re-authenticated, all IEEE 802.1x ports are reinitialized and treated as normal...
  • Page 102: Dot1x Control-direction

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x control-direction dot1x control-direction Use the dot1x control-direction interface configuration command to enable the IEEE 802.1x authentication with the wake-on-LAN (WoL) feature and to configure the port control as unidirectional or bidirectional. Use the no form of this command to return to the default setting.
  • Page 103 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x control-direction If you enter the dot1x control-direction in interface configuration command to enable unidirectional control, this appears in the show dot1x all command output: ControlDirection = In If you enter the dot1x control-direction in interface configuration command and the port cannot support...
  • Page 104: Dot1x Critical (global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (global configuration) dot1x critical (global configuration) Use the dot1x critical global configuration command on a standalone switch to configure the parameters for the inaccessible authentication bypass feature, also referred to as critical authentication or the authentication, authorization, and accounting (AAA) fail policy.
  • Page 105 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (global configuration) Related Commands Command Description dot1x critical (interface Enables the inaccessible authentication bypass feature, and configuration) configures the access VLAN for the feature. show dot1x Displays IEEE 802.1x status for the specified port.
  • Page 106: Dot1x Critical (interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (interface configuration) dot1x critical (interface configuration) Use the dot1x critical interface configuration command on a standalone switch to enable the inaccessible-authentication-bypass feature, also referred to as critical authentication or the authentication, authorization, and accounting (AAA) fail policy.
  • Page 107 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x critical (interface configuration) You can configure the inaccessible authentication bypass feature and the restricted VLAN on an IEEE 802.1x port. If the switch tries to re-authenticate a critical port in a restricted VLAN and all the RADIUS servers are unavailable, the switch changes the port state to the critical authentication state, and it remains in the restricted VLAN.
  • Page 108: Dot1x Default

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x default dot1x default Use the dot1x default interface configuration command to reset the IEEE 802.1x parameters to their default values. dot1x default Syntax Description This command has no arguments or keywords.
  • Page 109: Dot1x Fallback

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x fallback dot1x fallback Use the dot1xfallback interface configuration command on the to configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. To return to the default setting, use the no form of this command.
  • Page 110: Dot1x Guest-vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x guest-vlan dot1x guest-vlan Use the dot1x guest-vlan interface configuration command to specify an active VLAN as an IEEE 802.1x guest VLAN. Use the no form of this command to return to the default setting.
  • Page 111 The amount to decrease the settings depends on the connected IEEE 802.1x client type. The switch supports MAC authentication bypass in Cisco IOS Release 12.2(25)SEE and later. When it is enabled on an IEEE 802.1x port, the switch can authorize clients based on the client MAC address when IEEE 802.1x authentication times out while waiting for an EAPOL message exchange.
  • Page 112: Dot1x Host-mode

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x host-mode dot1x host-mode Use the dot1x host-mode interface configuration command to allow a single host (client) or multiple hosts on an IEEE 802.1x-authorized port. Use the no form of this command to return to the default setting.
  • Page 113: Dot1x Initialize

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x initialize dot1x initialize Use the dot1x initialize privileged EXEC command to manually return the specified IEEE 802.1x-enabled port to an unauthorized state before initiating a new authentication session on the port.
  • Page 114: Dot1x Mac-auth-bypass

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x mac-auth-bypass dot1x mac-auth-bypass Use the dot1x mac-auth-bypass interface configuration command to enable the MAC authentication bypass feature. Use the no form of this command to disable MAC authentication bypass feature. dot1x mac-auth-bypass [eap]...
  • Page 115 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x mac-auth-bypass Examples This example shows how to enable MAC authentication bypass and to configure the switch to use EAP for authentication: Switch(config-if)# dot1x mac-auth-bypass eap You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC command.
  • Page 116: Dot1x Max-reauth-req

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x max-reauth-req dot1x max-reauth-req Use the dot1x max-reauth-req interface configuration command to set the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state. Use the no form of this command to return to the default setting.
  • Page 117: Dot1x Max-req

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x max-req dot1x max-req Use the dot1x max-req interface configuration command to set the maximum number of times that the switch sends an Extensible Authentication Protocol (EAP) frame from the authentication server (assuming that no response is received) to the client before restarting the authentication process.
  • Page 118: Dot1x Pae

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x pae dot1x pae Use the dot1x pae interface configuration command to configure the port as an IEEE 802.1x port access entity (PAE) authenticator. Use the no form of this command to disable IEEE 802.1x authentication on the port.
  • Page 119: Dot1x Port-control

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x port-control dot1x port-control Use the dot1x port-control interface configuration command to enable manual control of the authorization state of the port. Use the no form of this command to return to the default setting.
  • Page 120 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x port-control EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an • EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on an EtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.
  • Page 121: Dot1x Re-authenticate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x re-authenticate dot1x re-authenticate Use the dot1x re-authenticate privileged EXEC command to manually initiate a re-authentication of the specified IEEE 802.1x-enabled port. dot1x re-authenticate [interface interface-id] Syntax Description interface interface-id (Optional) Module and port number of the interface to re-authenticate.
  • Page 122: Dot1x Reauthentication

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x reauthentication dot1x reauthentication Use the dot1x reauthentication interface configuration command to enable periodic re-authentication of the client. Use the no form of this command to return to the default setting. dot1x reauthentication...
  • Page 123: Dot1x Timeout

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout dot1x timeout Use the dot1x timeout interface configuration command to set IEEE 802.1x timers. Use the no form of this command to return to the default setting. dot1x timeout {quiet-period seconds | ratelimit-period seconds | reauth-period {seconds |...
  • Page 124 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout Command History Release Modification 12.2(25)FX This command was introduced. 12.2(25)SED The range for tx-period keyword was changed, and the reauth-period server keywords were added. 12.2(25)SEE The ratelimit-period keyword was introduced.
  • Page 125 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands dot1x timeout Related Commands Command Description dot1x max-req Sets the maximum number of times that the switch sends an EAP-request/identity frame before restarting the authentication process. dot1x reauthentication Enables periodic re-authentication of the client.
  • Page 126: Duplex

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands duplex duplex Use the duplex interface configuration command to specify the duplex mode of operation for a port. Use the no form of this command to return the port to its default value.
  • Page 127 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands duplex If the speed is set to auto, the switch negotiates with the device at the other end of the link for the speed setting and then forces the speed setting to the negotiated value. The duplex setting remains as configured on each end of the link, which could result in a duplex setting mismatch.
  • Page 128: Errdisable Detect Cause

    Enable error detection for the Dynamic Trunking Protocol (DTP) flapping. gbic-invalid Enable error detection for an invalid Gigabit Interface Converter (GBIC) module. On the Catalyst 2960 switch, this error refers to an invalid small Note form-factor pluggable (SFP) module. inline-power Enable error detection for inline power.
  • Page 129 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable detect cause Command History Release Modification 12.2(25)FX This command was introduced. 12.2(37)SE The Per-VLAN error-detection feature was added. The inline-power and sfp-config-mismatch keywords were added. Usage Guidelines A cause (link-flap, dhcp-rate-limit, and so forth) is the reason why the error-disabled state occurred.
  • Page 130: Errdisable Recovery

    Enable the timer to recover from an invalid Gigabit Interface Converter (GBIC) module error-disabled state. On the Catalyst 2960 switch, this error refers to an invalid small Note form-factor pluggable (SFP) error-disabled state. inline-power Enable error detection for inline-power.
  • Page 131 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands errdisable recovery Defaults Recovery is disabled for all causes. The default recovery interval is 300 seconds. Command Modes Global configuration Command History Release Modification 12.2(25)FX This command was introduced. 12.2(37)SE The per-VLAN error-detection feature was added. The inline-power and sfp-mismatch keywords were added.
  • Page 132: Exception Crashinfo

    Use the exception crashinfo global configuration command to configure the switch to create the extended crashinfo file when the Cisco IOS image fails. Use the no form of this command to disable this feature. exception crashinfo...
  • Page 133: Fallback Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands fallback profile fallback profile Use the fallback profile global configuration command to create a fallback profile for web authentication. To return to the default setting, use the no form of this command.
  • Page 134 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands fallback profile Related Commands Command Description dot1x fallback Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. ip admission Enable web authentication on a switch port...
  • Page 135: Flowcontrol

    Use the receive off keywords to disable flow control. flowcontrol receive {desired | off | on} Note The Catalyst 2960 switch can receive, but not send, pause frames. Syntax Description receive Set whether the interface can receive flow-control packets from a remote device.
  • Page 136 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands flowcontrol Table 2-5 shows the flow control results on local and remote ports for a combination of settings. The table assumes that receive desired has the same results as using the receive on keywords.
  • Page 137: Interface Port-channel

    Only one port channel in a channel group is allowed. Follow these guidelines when you use the interface port-channel command: If you want to use the Cisco Discovery Protocol (CDP), you must configure it only on the physical • port and not on the port-channel interface.
  • Page 138 Displays EtherChannel information for a channel. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference...
  • Page 139: Interface Range

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range interface range Use the interface range global configuration command to enter interface range configuration mode and to execute a command on multiple ports at the same time. Use the no form of this command to remove an interface range.
  • Page 140 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range Valid values for port-range type and interface: vlan vlan-ID, where VLAN ID is from 1 to 4094 • Although the command-line interface (CLI) shows options to set multiple VLANs, these are Note not supported.
  • Page 141 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface range Related Commands Command Description define interface-range Creates an interface range macro. show running-config Displays the configuration information currently running on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 142: Interface Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface vlan interface vlan Use the interface vlan global configuration command to create or access a VLAN and to enter interface configuration mode. Use the no form of this command to delete a VLAN.
  • Page 143 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands interface vlan Examples This example shows how to create a new VLAN with VLAN ID 23 and to enter interface configuration mode: Switch(config)# interface vlan 23 Switch(config-if)# You can verify your setting by entering the...
  • Page 144: Ip Access-group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip access-group ip access-group Use the ip access-group interface configuration command to control access to a Layer 2 interface. Use the no form of this command to remove all access groups or the specified access group from the interface.
  • Page 145 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip access-group Examples This example shows how to apply IP access list 101 to inbound packets on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# ip access-group 101 in You can verify your settings by entering the show ip interface, show access-lists, or show ip access-lists privileged EXEC command.
  • Page 146 IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands ip access-list Configures a named ACL. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands.
  • Page 147: Ip Address

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip address ip address Use the ip address interface configuration command to set an IP address for the Layer 2 switch. Use the no form of this command to remove an IP address or to disable IP processing.
  • Page 148 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip address Examples This example shows how to configure the IP address for the Layer 2 switch on a subnetted network: Switch(config)# interface vlan 1 Switch(config-if)# ip address 172.20.128.2 255.255.255.0 You can verify your settings by entering the show running-config privileged EXEC command.
  • Page 149: Ip Admission

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission ip admission Use the ip admission interface configuration command to enable web authentication. You can also use this command in fallback-profile mode. Use the no form of this command to disable web authentication.
  • Page 150: Ip Admission Name Proxy Http

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission name proxy http ip admission name proxy http Use the ip admission name proxy http global configuration command to enable web authentication. Use the no form of this command to disable web authentication.
  • Page 151 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip admission name proxy http Related Commands Command Description dot1x fallback Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. fallback profile Create a web authentication fallback profile.
  • Page 152: Ip Dhcp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping ip dhcp snooping Use the ip dhcp snooping global configuration command to globally enable DHCP snooping. Use the no form of this command to return to the default setting.
  • Page 153: Ip Dhcp Snooping Binding

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping binding ip dhcp snooping binding Use the ip dhcp snooping binding privileged EXEC command to configure the DHCP snooping binding database and to add binding entries to the database. Use the no form of this command to delete entries from the binding database.
  • Page 154 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping binding Examples This example shows how to generate a DHCP binding configuration with an expiration time of 1000 seconds on a port in VLAN 1: Switch# ip dhcp snooping binding 0001.1234.1234 vlan 1 172.20.50.5 interface...
  • Page 155: Ip Dhcp Snooping Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping database ip dhcp snooping database Use the ip dhcp snooping database global configuration command to configure the DHCP snooping binding database agent. Use the no form of this command to disable the agent, to reset the timeout value, or to reset the write-delay value.
  • Page 156 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping database To ensure that the lease time in the database is accurate, we recommend that Network Time Protocol (NTP) is enabled and configured for these features: NTP authentication •...
  • Page 157: Ip Dhcp Snooping Information Option

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option ip dhcp snooping information option Use the ip dhcp snooping information option global configuration command to enable DHCP option-82 data insertion. Use the no form of this command to disable DHCP option-82 data insertion.
  • Page 158 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option Related Commands Command Description show ip dhcp snooping Displays the DHCP snooping configuration. show ip dhcp snooping binding Displays the DHCP snooping binding information. Catalyst 2960 Switch Command Reference...
  • Page 159: Ip Dhcp Snooping Information Option Allow-untrusted

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted ip dhcp snooping information option allow-untrusted Use the ip dhcp snooping information option allow-untrusted global configuration command on an aggregation switch to configure it to accept DHCP packets with option-82 information that are received on untrusted ports that might be connected to an edge switch.
  • Page 160 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted Examples This example shows how to configure an access switch to not check the option-82 information in untrusted packets from an edge switch and to accept the packets: Switch(config)# ip dhcp snooping information option allow-untrusted You can verify your settings by entering the show ip dhcp snooping user EXEC command.
  • Page 161: Ip Dhcp Snooping Limit Rate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping limit rate ip dhcp snooping limit rate Use the ip dhcp snooping limit rate interface configuration command to configure the number of DHCP messages an interface can receive per second. Use the no form of this command to return to the default setting.
  • Page 162: Ip Dhcp Snooping Trust

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping trust ip dhcp snooping trust Use the ip dhcp snooping trust interface configuration command to configure a port as trusted for DHCP snooping purposes. Use the no form of this command to return to the default setting.
  • Page 163: Ip Dhcp Snooping Verify

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping verify ip dhcp snooping verify Use the ip dhcp snooping verify global configuration command to configure the switch to verify on an untrusted port that the source MAC address in a DHCP packet matches the client hardware address. Use the no form of this command to configure the switch to not verify the MAC addresses.
  • Page 164: Ip Dhcp Snooping Vlan

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip dhcp snooping vlan ip dhcp snooping vlan Use the ip dhcp snooping vlan global configuration command to enable DHCP snooping on a VLAN. Use the no form of this command to return to the default setting.
  • Page 165: Ip Igmp Filter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp filter ip igmp filter Use the ip igmp filter interface configuration command to control whether or not all hosts on a Layer 2 interface can join one or more IP multicast groups by applying an Internet Group Management Protocol (IGMP) profile to the interface.
  • Page 166 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp filter Command Description show running-config interface Displays the running configuration on the switch interface, including interface-id the IGMP profile (if any) that is applied to an interface. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 167: Ip Igmp Max-groups

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp max-groups ip igmp max-groups Use the ip igmp max-groups interface configuration command to set the maximum number of Internet Group Management Protocol (IGMP) groups that a Layer 2 interface can join or to configure the IGMP throttling action when the maximum number of entries is in the forwarding table.
  • Page 168 Displays the running configuration on the switch interface, including interface-id the maximum number of IGMP groups that an interface can join and the throttling action. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 169: Ip Igmp Profile

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp profile ip igmp profile Use the ip igmp profile global configuration command to create an Internet Group Management Protocol (IGMP) profile and enter IGMP profile configuration mode. From this mode, you can specify the configuration of the IGMP profile to be used for filtering IGMP membership reports from a switchport.
  • Page 170 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp profile Related Commands Command Description ip igmp filter Applies the IGMP profile to the specified interface. show ip dhcp snooping Displays the characteristics of all IGMP profiles or the specified statistics IGMP profile number.
  • Page 171: Ip Igmp Snooping

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping ip igmp snooping Use the ip igmp snooping global configuration command to globally enable Internet Group Management Protocol (IGMP) snooping on the switch or to enable it on a per-VLAN basis. Use the no form of this command to return to the default setting.
  • Page 172 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip dhcp snooping statistics Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 173: Ip Igmp Snooping Last-member-query-interval

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval ip igmp snooping last-member-query-interval Use the ip igmp snooping last-member-query-interval global configuration command to enable the Internet Group Management Protocol (IGMP) configurable-leave timer globally or on a per-VLAN basis.
  • Page 174 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan immediate-leave Enables IGMP Immediate-Leave processing. ip igmp snooping vlan mrouter Configures a Layer 2 port as a multicast router port.
  • Page 175: Ip Igmp Snooping Querier

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping querier ip igmp snooping querier Use the ip igmp snooping querier global configuration command to globally enable the Internet Group Management Protocol (IGMP) querier function in Layer 2 networks. Use the command with keywords to enable and configure the IGMP querier feature on a VLAN interface.
  • Page 176 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping querier Usage Guidelines Use this command to enable IGMP snooping to detect the IGMP version and IP address of a device that sends IGMP query messages, which is also called a querier.
  • Page 177: Ip Igmp Snooping Report-suppression

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping report-suppression ip igmp snooping report-suppression Use the ip igmp snooping report-suppression global configuration command to enable Internet Group Management Protocol (IGMP) report suppression. Use the no form of this command to disable IGMP report suppression and to forward all IGMP reports to multicast routers.
  • Page 178 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping report-suppression Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. show ip igmp snooping Displays the IGMP snooping configuration of the switch or the VLAN.
  • Page 179: Ip Igmp Snooping Tcn

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn ip igmp snooping tcn Use the ip igmp snooping tcn global configuration command to configure the Internet Group Management Protocol (IGMP) Topology Change Notification (TCN) behavior. Use the no form of this command to return to the default settings.
  • Page 180 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping tcn flood Specifies flooding on an interface as the IGMP snooping spanning-tree TCN behavior.
  • Page 181: Ip Igmp Snooping Tcn Flood

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping tcn flood ip igmp snooping tcn flood Use the ip igmp snooping tcn flood interface configuration command to specify multicast flooding as the Internet Group Management Protocol (IGMP) snooping spanning-tree Topology Change Notification (TCN) behavior.
  • Page 182: Ip Igmp Snooping Vlan Immediate-leave

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan immediate-leave ip igmp snooping vlan immediate-leave Use the ip igmp snooping immediate-leave global configuration command to enable Internet Group Management Protocol (IGMP) snooping immediate-leave processing on a per-VLAN basis. Use the no form of this command to return to the default setting.
  • Page 183 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan immediate-leave Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 184: Ip Igmp Snooping Vlan Mrouter

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan mrouter ip igmp snooping vlan mrouter Use the ip igmp snooping mrouter global configuration command to add a multicast router port or to configure the multicast learning method. Use the no form of this command to return to the default settings.
  • Page 185 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan mrouter Examples This example shows how to configure a port as a multicast router port: Switch(config)# ip igmp snooping vlan 1 mrouter interface gigabitethernet0/22 This example shows how to specify the multicast router learning method as CGMP: Switch(config)# ip igmp snooping vlan 1 mrouter learn cgmp You can verify your settings by entering the show ip igmp snooping privileged EXEC command.
  • Page 186: Ip Igmp Snooping Vlan Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan static ip igmp snooping vlan static Use the ip igmp snooping static global configuration command to enable Internet Group Management Protocol (IGMP) snooping and to statically add a Layer 2 port as a member of a multicast group. Use the no form of this command to remove ports specified as members of a static multicast group.
  • Page 187 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip igmp snooping vlan static Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
  • Page 188: Ip Ssh

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands ip ssh ip ssh Use the ip ssh global configuration command to configure the switch to run Secure Shell (SSH) Version 1 or SSH Version 2. This command is available only when your switch is running the cryptographic (encrypted) software image.
  • Page 189 Features > Secure Shell Commands. show ssh Displays the status of the SSH server. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Security Command Reference, Release 12.2 > Other Security Features >...
  • Page 190: Lacp Port-priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp port-priority lacp port-priority Use the lacp port-priority interface configuration command to configure the port priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
  • Page 191 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp port-priority Examples This example shows how to configure the LACP port priority on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# lacp port-priority 1000 You can verify your settings by entering the show lacp [channel-group-number] internal privileged EXEC command.
  • Page 192: Lacp System-priority

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp system-priority lacp system-priority Use the lacp system-priority global configuration command to configure the system priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
  • Page 193 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands lacp system-priority Related Commands Command Description channel-group Assigns an Ethernet port to an EtherChannel group. lacp port-priority Configures the LACP port priority. show lacp sys-id Displays the system identifier that is being used by LACP.
  • Page 194: Location (global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (global configuration) location (global configuration) Use the location global configuration command to configure location information for an endpoint. Use the no form of this command to remove the location information. location {admin-tag string | civic-location identifier id | elin-location string identifier id}...
  • Page 195 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (global configuration) This example shows how to configure the emergency location information on the switch: Switch (config)# location elin-location 14085553881 identifier 1 You can verify your settings by entering the show location elin privileged EXEC command.
  • Page 196: Location (interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (interface configuration) location (interface configuration) Use the location interface command to enter location information for an interface. Use the no form of this command to remove the interface location information. location {additional-location-information word | civic-location-id id | elin-location-id id}...
  • Page 197 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands location (interface configuration) This example shows how to enter emergency location information for an interface: Switch(config)# int g2/0/2 Switch(config-if)# location elin-location-id 1 Switch(config-if)# end You can verify your settings by entering the show location elin interface privileged EXEC command.
  • Page 198: Link State Group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands link state group link state group Use the link state group interface configuration command to configure a port as a member of a link-state group. Use the no form of this command to remove the port from the link-state group.
  • Page 199 Displays the link-state group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-173...
  • Page 200: Link State Track

    Displays the link-state group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-174...
  • Page 201: Logging Event

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging event logging event Use the logging event interface configuration command to enable notification of interface link status changes. Use the no form of this command to disable notification. logging event {bundle-status | link-status | spanning-tree | status | trunk status}...
  • Page 202: Logging File

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging file logging file Use the logging file global configuration command to set logging file parameters. Use the no form of this command to return to the default setting. logging file filesystem:filename [max-file-size | nomax [min-file-size]] [severity-level-number |...
  • Page 203 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands logging file Usage Guidelines The log file is stored in ASCII text format in an internal buffer on the switch. You can access logged system messages by using the switch command-line interface (CLI) or by saving them to a properly configured syslog server.
  • Page 204: Mac Access-group

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-group mac access-group Use the mac access-group interface configuration command to apply a MAC access control list (ACL) to a Layer 2 interface. Use the no form of this command to remove all MAC ACLs or the specified MAC ACL from the interface.
  • Page 205 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-group Examples This example shows how to apply a MAC extended ACL named macacl2 to an interface: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mac access-group macacl2 in You can verify your settings by entering the show mac access-group privileged EXEC command. You can see configured ACLs on the switch by entering the show access-lists privileged EXEC command.
  • Page 206: Mac Access-list Extended

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-list extended mac access-list extended Use the mac access-list extended global configuration command to create an access list based on MAC addresses for non-IP traffic. Using this command puts you in the extended MAC access-list configuration mode.
  • Page 207 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac access-list extended Examples This example shows how to create a MAC named extended access list named mac1 and to enter extended MAC access-list configuration mode: Switch(config)# mac access-list extended mac1 Switch(config-ext-macl)#...
  • Page 208: Mac Address-table Aging-time

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table aging-time mac address-table aging-time Use the mac address-table aging-time global configuration command to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated. Use the no form of this command to return to the default setting.
  • Page 209: Mac Address-table Move Update

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table move update mac address-table move update Use the mac address-table move update global configuration command to enable the MAC address-table move update feature. Use the no form of this command to return to the default setting.
  • Page 210 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table move update Related Commands Command Description clear mac address-table move Clears the MAC address-table move update global counters. update debug matm move update Debugs the MAC address-table move update message processing.
  • Page 211: Mac Address-table Notification

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table notification mac address-table notification Use the mac address-table notification global configuration command to enable the MAC address notification feature on the switch. Use the no form of this command to return to the default setting.
  • Page 212 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table notification Examples This example shows how to enable the MAC address-table notification feature, set the interval time to 60 seconds, and set the history-size to 100 entries: Switch(config)# mac address-table notification...
  • Page 213: Mac Address-table Static

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static mac address-table static Use the mac address-table static global configuration command to add static addresses to the MAC address table. Use the no form of this command to remove static entries from the table.
  • Page 214: Mac Address-table Static Drop

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static drop mac address-table static drop Use the mac address-table static drop global configuration command to enable unicast MAC address filtering and to configure the switch to drop traffic with a specific source or destination MAC address.
  • Page 215 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mac address-table static drop Examples This example shows how to enable unicast MAC address filtering and to configure the switch to drop packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in VLAN 4 with this MAC address as its source or destination, the packet is dropped: Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 drop...
  • Page 216: Macro Apply

    There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
  • Page 217 Applying command...‘duplex auto’ %Error Unknown error. Applying command...‘speed nonegotiate’ This example shows how to display the Cisco-default cisco-desktop macro and how to apply the macro and set the access VLAN ID to 25 on an interface: Switch# show parser macro cisco-desktop...
  • Page 218 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro apply # Configure port as an edge network port spanning-tree portfast spanning-tree bpduguard enable -------------------------------------------------------------- Switch# Switch# configure terminal Switch(config)# interface gigabitethernet0/4 Switch(config-if)# macro apply cisco-desktop $AVID 25 Related Commands Command...
  • Page 219: Macro Description

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro description macro description Use the macro description interface configuration command to enter a description about which macros are applied to an interface. Use the no form of this command to remove the description.
  • Page 220: Macro Global

    There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
  • Page 221 Cisco-default macro with the required values by using the parameter value keywords. The Cisco-default macros use the $ character to help identify required keywords. There is no restriction on using the $ character to define keywords when you create a macro.
  • Page 222 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro global Related Commands Command Description macro apply Applies a macro on an interface or applies and traces a macro on an interface. macro description Adds a description about the macros that are applied to an interface.
  • Page 223: Macro Global Description

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro global description macro global description Use the macro global description global configuration command to enter a description about the macros that are applied to the switch. Use the no form of this command to remove the description.
  • Page 224: Macro Name

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro name macro name Use the macro name global configuration command to create a configuration macro. Use the no form of this command to delete the macro definition. macro name macro-name no macro name macro-name...
  • Page 225 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands macro name Examples This example shows how to create a macro that defines the duplex mode and speed: Switch(config)# macro name duplex Enter macro commands one per line. End with the character ‘@’.
  • Page 226: Match (class-map Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands match (class-map configuration) match (class-map configuration) Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.
  • Page 227 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands match (class-map configuration) Examples This example shows how to create a class map called class2, which matches all the incoming traffic with DSCP values of 10, 11, and 12: Switch(config)# class-map class2...
  • Page 228: Mdix Auto

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mdix auto mdix auto Use the mdix auto interface configuration command to enable the automatic medium-dependent interface crossover (auto-MDIX) feature on the interface. When auto-MDIX is enabled, the interface automatically detects the required cable connection type (straight-through or crossover) and configures the connection appropriately.
  • Page 229 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mdix auto Related Commands Command Description show controllers Displays general information about internal registers of an interface, ethernet-controller including the operational state of auto-MDIX. interface-id phy Catalyst 2960 Switch Command Reference 2-203...
  • Page 230: Media-type

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands media-type media-type Use the media-type interface configuration command to manually select the interface and type of a dual-purpose uplink port or to enable the switch to dynamically select the type that first links up. Use the no form of this command to return to the default setting.
  • Page 231 If you configure auto-select, you cannot configure the speed and duplex interface configuration commands. The Catalyst 2960 switch operates with 100BASE-X (where -X is -BX, -FX, -FE, -LX) SFP modules as follows: When the 100BASE -X SFP module is inserted into the module slot and there is no link on the RJ-45 •...
  • Page 232: Mls Qos

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos mls qos Use the mls qos global configuration command to enable quality of service (QoS) for the entire switch. When the mls qos command is entered, QoS is enabled with the default parameters on all ports in the system.
  • Page 233 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos Related Commands Command Description show mls qos Displays QoS information. Catalyst 2960 Switch Command Reference 2-207 OL-8604-03...
  • Page 234: Mls Qos Aggregate-policer

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos aggregate-policer mls qos aggregate-policer Use the mls qos aggregate-policer global configuration command to define policer parameters, which can be shared by multiple classes within the same policy map. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
  • Page 235 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos aggregate-policer You cannot delete an aggregate policer if it is being used in a policy map. You must first use the no police aggregate aggregate-policer-name policy-map class configuration command to delete the aggregate policer from all policy maps before using the no mls qos aggregate-policer aggregate-policer-name command.
  • Page 236: Mls Qos Cos

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos cos mls qos cos Use the mls qos cos interface configuration command to define the default class of service (CoS) value of a port or to assign the default CoS to all incoming packets on the port. Use the no form of this command to return to the default setting.
  • Page 237 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos cos Examples This example shows how to configure the default port CoS to 4 on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mls qos trust cos Switch(config-if)# mls qos cos 4...
  • Page 238: Mls Qos Dscp-mutation

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos dscp-mutation mls qos dscp-mutation Use the mls qos dscp-mutation interface configuration command to apply a Differentiated Services Code Point (DSCP)-to-DSCP-mutation map to a DSCP-trusted port. Use the no form of this command to return the map to the default settings (no DSCP mutation).
  • Page 239 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos dscp-mutation This example show how to remove the DSCP-to-DSCP-mutation map name dscpmutation1 from the port and to reset the map to the default: Switch(config-if)# no mls qos dscp-mutation dscpmutation1 You can verify your settings by entering the show mls qos maps privileged EXEC command.
  • Page 240: Mls Qos Map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map mls qos map Use the mls qos map global configuration command to define the class of service (CoS)-to-Differentiated Services Code Point (DSCP) map, DSCP-to-CoS map, the DSCP-to-DSCP-mutation map, the IP-precedence-to-DSCP map, and the policed-DSCP map. Use the no form of this command to return to the default map.
  • Page 241 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map Defaults Table 2-6 shows the default CoS-to-DSCP map: Table 2-6 Default CoS-to-DSCP Map CoS Value DSCP Value Table 2-7 shows the default DSCP-to-CoS map: Table 2-7 Default DSCP-to-CoS Map...
  • Page 242 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map The default DSCP-to-DSCP-mutation map is a null map, which maps an incoming DSCP value to the same DSCP value. The default policed-DSCP map is a null map, which maps an incoming DSCP value to the same DSCP value.
  • Page 243 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos map Related Commands Command Description mls qos dscp-mutation Applies a DSCP-to-DSCP-mutation map to a DSCP-trusted port. show mls qos maps Displays quality of service (QoS) mapping information. Catalyst 2960 Switch Command Reference...
  • Page 244: Mls Qos Queue-set Output Buffers

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output buffers mls qos queue-set output buffers Use the mls qos queue-set output buffers global configuration command to allocate buffers to a queue-set (four egress queues per port). Use the no form of this command to return to the default setting.
  • Page 245 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output buffers Examples This example shows how to map a port to queue-set 2. It allocates 40 percent of the buffer space to egress queue 1 and 20 percent to egress queues 2, 3, and 4:...
  • Page 246: Mls Qos Queue-set Output Threshold

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos queue-set output threshold mls qos queue-set output threshold Use the mls qos queue-set output threshold global configuration command to configure the weighted tail-drop (WTD) thresholds, to guarantee the availability of buffers, and to configure the maximum memory allocation to a queue-set (four egress queues per port).
  • Page 247 400 percent, or 4 times the allocated number of buffers. One packet can use one 1 or more buffers. The range increased in Cisco IOS Release 12.2(25)SEE1 or later for the drop-threshold, drop-threshold2, and maximum-threshold parameters.
  • Page 248: Mls Qos Rewrite Ip Dscp

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos rewrite ip dscp mls qos rewrite ip dscp Use the mls qos rewrite ip dscp global configuration command to configure the switch to change (rewrite) the Differentiated Services Code Point (DSCP) field of an incoming IP packet. Use the no form of this command to configure the switch to not modify (rewrite) the DSCP field of the packet and to enable DSCP transparency.
  • Page 249 | Displays the DSCP transparency setting. For syntax information, select include rewrite Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 250: Mls Qos Srr-queue Input Bandwidth

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input bandwidth mls qos srr-queue input bandwidth Use the mls qos srr-queue input bandwidth global configuration command to assign shaped round robin (SRR) weights to an ingress queue. The ratio of the weights is the ratio of the frequency in which the SRR scheduler dequeues packets from each queue.
  • Page 251 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input bandwidth This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
  • Page 252: Mls Qos Srr-queue Input Buffers

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input buffers mls qos srr-queue input buffers Use the mls qos srr-queue input buffers global configuration command to allocate the buffers between the ingress queues. Use the no form of this command to return to the default setting.
  • Page 253 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input buffers Command Description show mls qos input-queue Displays ingress queue settings. show mls qos interface buffers Displays quality of service (QoS) information. Catalyst 2960 Switch Command Reference 2-227...
  • Page 254: Mls Qos Srr-queue Input Cos-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input cos-map mls qos srr-queue input cos-map Use the mls qos srr-queue input cos-map global configuration command to map class of service (CoS) values to an ingress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
  • Page 255 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input cos-map Usage Guidelines The CoS assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
  • Page 256: Mls Qos Srr-queue Input Dscp-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input dscp-map mls qos srr-queue input dscp-map Use the mls qos srr-queue input dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an ingress queue or to map DSCP values to a queue and to a threshold ID.
  • Page 257 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input dscp-map Usage Guidelines The DSCP assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
  • Page 258: Mls Qos Srr-queue Input Priority-queue

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input priority-queue mls qos srr-queue input priority-queue Use the mls qos srr-queue input priority-queue global configuration command to configure the ingress priority queue and to guarantee bandwidth on the internal ring if the ring is congested. Use the no form of this command to return to the default setting.
  • Page 259 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input priority-queue Examples This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
  • Page 260: Mls Qos Srr-queue Input Threshold

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input threshold mls qos srr-queue input threshold Use the mls qos srr-queue input threshold global configuration command to assign weighted tail-drop (WTD) threshold percentages to an ingress queue. Use the no form of this command to return to the default setting.
  • Page 261 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue input threshold Related Commands Command Description mls qos srr-queue input bandwidth Assigns shaped round robin (SRR) weights to an ingress queue. mls qos srr-queue input buffers Allocates the buffers between the ingress queues.
  • Page 262: Mls Qos Srr-queue Output Cos-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output cos-map mls qos srr-queue output cos-map Use the mls qos srr-queue output cos-map global configuration command to map class of service (CoS) values to an egress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
  • Page 263 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output cos-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
  • Page 264: Mls Qos Srr-queue Output Dscp-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output dscp-map mls qos srr-queue output dscp-map Use the mls qos srr-queue output dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an egress or to map DSCP values to a queue and to a threshold ID.
  • Page 265 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mls qos srr-queue output dscp-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
  • Page 266: Mls Qos Trust

    (Optional) Classify an ingress packet by trusting the CoS or DSCP value sent from the Cisco IP Phone (trusted boundary), depending on the trust setting. dscp (Optional) Classify an ingress packet by using the packet DSCP value (most significant 6 bits of 8-bit service-type field).
  • Page 267 The trusted boundary feature prevents security problems if users disconnect their PCs from networked Cisco IP Phones and connect them to the switch port to take advantage of trusted CoS or DSCP settings. You must globally enable the Cisco Discovery Protocol (CDP) on the switch and on the port connected to the IP phone.
  • Page 268: Monitor Session

    Remote SPAN (RSPAN) source or destination session, to enable ingress traffic on the destination port for a network security device (such as a Cisco IDS Sensor Appliance), to add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, and to limit (filter) SPAN source traffic to specific VLANs.
  • Page 269 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session dot1q vlan vlan-id Accept incoming packets with IEEE 802.1Q encapsulation with the specified VLAN as the default VLAN. untagged vlan vlan-id Accept incoming packets with untagged encapsulation with the specified VLAN as the default VLAN.
  • Page 270 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session Usage Guidelines Traffic that enters or leaves source ports or source VLANs can be monitored by using SPAN or RSPAN. Traffic routed to source ports or source VLANs cannot be monitored.
  • Page 271 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session When you enter monitor session session_number destination interface interface-id encapsulation • dot1q ingress, egress encapsulation uses the IEEE 802.1Q encapsulation method; ingress encapsulation depends on the keywords that follow—dot1q or untagged. (This applies to local SPAN only;...
  • Page 272 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands monitor session Related Commands Command Description remote-span Configures an RSPAN VLAN in vlan configuration mode. show monitor Displays SPAN and RSPAN session information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 273: Mvr (global Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) mvr (global configuration) Use the mvr global configuration command without keywords to enable the multicast VLAN registration (MVR) feature on the switch. Use the command with keywords to set the MVR mode for a switch, configure the MVR IP multicast address, set the maximum time to wait for a query reply before removing a port from group membership, and to specify the MVR multicast VLAN.
  • Page 274 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) Command Modes Global configuration Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines A maximum of 256 MVR multicast groups can be configured on a switch. Use the mvr group command to statically set up all the IP multicast addresses that will take part in MVR.
  • Page 275 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (global configuration) Related Commands Command Description mvr (interface configuration) Configures MVR ports. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces with their type, status, and Immediate Leave configuration.
  • Page 276: Mvr (interface Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) mvr (interface configuration) Use the mvr interface configuration command to configure a Layer 2 port as a multicast VLAN registration (MVR) receiver or source port, to set the Immediate Leave feature, and to statically assign a port to an IP multicast VLAN and IP address.
  • Page 277 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) Usage Guidelines Configure a port as a source port if that port should be able to both send and receive multicast data bound for the configured multicast groups. Multicast data is received on all ports configured as source ports.
  • Page 278 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands mvr (interface configuration) Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces or displays the multicast groups to which a receiver port belongs.
  • Page 279: Pagp Learn-method

    PAgP interoperability with devices that only support address learning by physical ports, such as the Catalyst 1900 switch. When the link partner to the Catalyst 2960 switch is a physical learner, we recommend that you configure the switch as a physical-port learner by using the pagp learn-method physical-port interface configuration command and to set the load-distribution method based on the source MAC address by using the port-channel load-balance src-mac global configuration command.
  • Page 280 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference 2-254...
  • Page 281: Pagp Port-priority

    PAgP interoperability with devices that only support address learning by physical ports, such as the Catalyst 1900 switch. When the link partner to the Catalyst 2960 switch is a physical learner, we recommend that you configure the switch as a physical-port learner by using the pagp learn-method physical-port interface configuration command and to set the load-distribution method based on the source MAC address by using the port-channel load-balance src-mac global configuration command.
  • Page 282 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 2960 Switch Command Reference 2-256...
  • Page 283: Permit (mac Access-list Configuration)

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) permit (MAC access-list configuration) Use the permit MAC access-list configuration command to allow non-IP traffic to be forwarded if the conditions are matched. Use the no form of this command to remove a permit condition from the extended MAC access list.
  • Page 284 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) lsap lsap-number mask (Optional) Use the LSAP number (0 to 65535) of a packet with 802.2 encapsulation to identify the protocol of the packet. The mask is a mask of don’t care bits applied to the LSAP number before testing for a match.
  • Page 285 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands permit (MAC access-list configuration) After an access control entry (ACE) is added to an access control list, an implied deny-any-any condition exists at the end of the list. That is, if there are no matches, the packets are denied. However, before the first ACE is added, the list permits all packets.
  • Page 286: Police

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police police Use the police policy-map class configuration command to define a policer for classified traffic. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded. Use the no form of this command to remove an existing policer.
  • Page 287 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police Policing uses a token-bucket algorithm. You configure the bucket depth (the maximum burst that is tolerated before the bucket overflows) by using the burst-byte option of the police policy-map class configuration command or the mls qos aggregate-policer global configuration command. You configure...
  • Page 288: Police Aggregate

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police aggregate police aggregate Use the police aggregate policy-map class configuration command to apply an aggregate policer to multiple classes in the same policy map. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
  • Page 289 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands police aggregate Examples This example shows how to define the aggregate policer parameters and to apply the policer to multiple classes in a policy map: Switch(config)# mls qos aggregate-policer agg_policer1 1000000 8000 exceed-action drop...
  • Page 290: Policy-map

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands policy-map policy-map Use the policy-map global configuration command to create or modify a policy map that can be attached to multiple physical ports and to enter policy-map configuration mode. Use the no form of this command to delete an existing policy map and to return to global configuration mode.
  • Page 291 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands policy-map Examples This example shows how to create a policy map called policy1. When attached to the ingress port, it matches all the incoming traffic defined in class1, sets the IP DSCP to 10, and polices the traffic at an average rate of 1 Mb/s and bursts at 20 KB.
  • Page 292: Port-channel Load-balance

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands port-channel load-balance port-channel load-balance Use the port-channel load-balance global configuration command to set the load-distribution method among the ports in the EtherChannel. Use the no form of this command to return to the default setting.
  • Page 293 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands port-channel load-balance Related Commands Command Description interface port-channel Accesses or creates the port channel. show etherchannel Displays EtherChannel information for a channel. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 294: Priority-queue

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands priority-queue priority-queue Use the priority-queue interface configuration command to enable the egress expedite queue on a port. Use the no form of this command to return to the default setting. priority-queue out...
  • Page 295 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands priority-queue Switch(config-if)# srr-queue bandwidth share 30 20 25 25 Switch(config-if)# no priority-queue out You can verify your settings by entering the show mls qos interface interface-id queueing or the show running-config privileged EXEC command.
  • Page 296: Queue-set

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands queue-set queue-set Use the queue-set interface configuration command to map a port to a queue-set. Use the no form of this command to return to the default setting. queue-set qset-id no queue-set qset-id...
  • Page 297: Radius-server Dead-criteria

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands radius-server dead-criteria radius-server dead-criteria Use the radius-server dead-criteria global configuration command to configure the conditions that determine when a RADIUS server is considered unavailable or dead. Use the no form of this command to return to the default settings.
  • Page 298 Specifies the number of times that the switch tries to reach the RADIUS servers before considering the servers to be unavailable. For syntax information, select Cisco IOS Security Command Reference, Release 12.2 > Server Security Protocols > RADIUS Commands.
  • Page 299: Radius-server Host

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands radius-server host radius-server host Use the radius-server host global configuration command to configure the RADIUS server parameters, including the RADIUS accounting and authentication. Use the no form of this command to return to the default settings.
  • Page 300 {0 string | 7 string | Sets the authentication and encryption key for all RADIUS string} communications between the router and the RADIUS daemon. For syntax information, select Cisco IOS Security Command Reference, Release 12.2 > Server Security Protocols > RADIUS Commands. show running-config Displays the running configuration on the switch.
  • Page 301: Rcommand

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands rcommand rcommand Use the rcommand user EXEC command to start a Telnet session and to execute commands on a cluster member switch from the cluster command switch. To end the session, enter the exit command.
  • Page 302 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands rcommand This command will not work if the vty lines of the cluster command switch have access-class configurations. You are not prompted for a password because the cluster member switches inherited the password of the cluster command switch when they joined the cluster.
  • Page 303: Remote-span

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands remote-span remote-span Use the remote-span VLAN configuration command to configure a VLAN as a Remote Switched Port Analyzer (RSPAN) VLAN. Use the no form of this command to remove the RSPAN designation from the VLAN.
  • Page 304 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands remote-span Examples This example shows how to configure a VLAN as an RSPAN VLAN. Switch(config)# vlan 901 Switch(config-vlan)# remote-span This example shows how to remove the RSPAN feature from a VLAN. Switch(config)# vlan 901 Switch(config-vlan)# no remote-span You can verify your settings by entering the show vlan remote-span user EXEC command.
  • Page 305: Renew Ip Dhcp Snooping Database

    Chapter 2 Catalyst 2960 Switch Cisco IOS Commands renew ip dhcp snooping database renew ip dhcp snooping database Use the renew ip dhcp snooping database privileged EXEC command to renew the DHCP snooping binding database. renew ip dhcp snooping database [{flash:/filename | ftp://user:password@host/filename |...
  • Page 306 Chapter 2 Catalyst 2960 Switch Cisco IOS Commands renew ip dhcp snooping database Command Description ip dhcp snooping binding Configures the DHCP snooping binding database. show ip dhcp snooping database Displays the status of the DHCP snooping database agent. Catalyst 2960 Switch Command Reference...
  • Page 307: Rmon Collection Stats

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands rmon collection stats rmon collection stats Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include usage statistics about broadcast and multicast packets, and error statistics about cyclic redundancy check (CRC) alignment errors and collisions.
  • Page 308 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands rmon collection stats Related Commands Command Description show rmon statistics Displays RMON statistics. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > System Management Commands > RMON Commands.
  • Page 309: Sdm Prefer

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands sdm prefer sdm prefer Use the sdm prefer global configuration command to configure the template used in Switch Database Management (SDM) resource allocation. You can use a template to allocate system resources to best support the features being used in your application.
  • Page 310 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands sdm prefer Switch# reload You can verify your settings by entering the show sdm prefer privileged EXEC command. Related Commands Command Description show sdm prefer Displays the current SDM template in use or displays the templates that can be used, with approximate resource allocation per feature.
  • Page 311: Service Password-recovery

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands service password-recovery service password-recovery Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the bootup process while the switch is powering up and to assign a new password.
  • Page 312 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands service password-recovery If you use the no service password-recovery command to control end user access to passwords, we Note recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values.
  • Page 313: Service-policy

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands service-policy service-policy Use the service-policy interface configuration command on the switch to apply a policy map defined by the policy-map command to the input of a physical port. Use the no form of this command to remove the policy map and port association.
  • Page 314 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands service-policy Command Description policy-map Creates or modifies a policy map that can be attached to multiple ports to specify a service policy. show policy-map Displays QoS policy maps. show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
  • Page 315: Set

    In Cisco IOS Release 12.2(25)SED or later, you can use the set ip precedence policy-map class configuration command or the set precedence policy-map class configuration command. This setting appears as set ip precedence in the switch configuration.
  • Page 316 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands Examples This example shows how to assign DSCP 10 to all FTP traffic without any policers: Switch(config)# policy-map policy_ftp Switch(config-pmap)# class ftp_class Switch(config-pmap-c)# set dscp 10 Switch(config-pmap)# exit You can verify your settings by entering the show policy-map privileged EXEC command.
  • Page 317: Setup

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands setup setup Use the setup privileged EXEC command to configure the switch with its initial configuration. setup Syntax Description This command has no arguments or keywords. Command Modes Privileged EXEC Command History...
  • Page 318 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands setup Enter host name [Switch]:host-name The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: enable-secret-password...
  • Page 319 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands setup cluster enable cluster-name Use this configuration? [yes/no]: yes [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit.
  • Page 320: Setup Express

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands setup express setup express Use the setup express global configuration command to enable Express Setup mode. Use the no form of this command to disable Express Setup mode. setup express no setup express Syntax Description This command has no arguments or keywords.
  • Page 321 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands setup express Examples This example shows how to enable Express Setup mode: Switch(config)# setup express You can verify that Express Setup mode is enabled by pressing the Mode button: On an unconfigured switch, the LEDs above the Mode button turn solid green after 3 seconds.
  • Page 322: Show Access-lists

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show access-lists show access-lists Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch. show access-lists [name | number | hardware counters | ipc] [ | {begin | exclude | include}...
  • Page 323 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show access-lists Examples This is an example of output from the show access-lists command: Switch# show access-lists Standard IP access list 1 10 permit 1.1.1.1 20 permit 2.2.2.2 30 permit any 40 permit 0.255.255.255, wildcard bits 12.0.0.0 Standard IP access list videowizard_1-1-1-1 10 permit 1.1.1.1...
  • Page 324 Commands. ip access list Configures a named IP access list on the switch. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. mac access-list extended Configures a named or numbered MAC access list on the switch.
  • Page 325: Show Archive Status

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show archive status show archive status Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or the TFTP protocol.
  • Page 326: Show Auto Qos

    • show running-config Examples This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Switch> show auto qos GigabitEthernet0/4...
  • Page 327 GigabitEthernet0/5 auto qos voip cisco-phone This is an example of output from the show running-config privileged EXEC command when the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Switch# show running-config Building configuration...
  • Page 328 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show auto qos class-map match-all AutoQoS-VoIP-RTP-Trust match ip dscp ef class-map match-all AutoQoS-VoIP-Control-Trust match ip dscp cs3 af31 policy-map AutoQoS-Police-SoftPhone class AutoQoS-VoIP-RTP-Trust set dscp ef police 320000 8000 exceed-action policed-dscp-transmit class AutoQoS-VoIP-Control-Trust...
  • Page 329 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show auto qos <output truncated> This is an example of output from the show auto qos interface interface-id command when the auto qos voip cisco-phone interface configuration command is entered: Switch> show auto qos interface fastethernet0/2...
  • Page 330: Show Boot

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show boot show boot Use the show boot privileged EXEC command to display the settings of the boot environment variables. show boot [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 331 Helper files extend or patch the functionality of the bootloader. NVRAM/Config file buffer size Displays the buffer size that Cisco IOS uses to hold a copy of the configuration file in memory. The configuration file cannot be larger than the buffer size allocation. Related Commands...
  • Page 332: Show Cable-diagnostics Tdr

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cable-diagnostics tdr show cable-diagnostics tdr Use the show cable-diagnostics tdr privileged EXEC command to display the Time Domain Reflector (TDR) results. show cable-diagnostics tdr interface interface-id [ | {begin | exclude | include} expression]...
  • Page 333 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cable-diagnostics tdr Table 2-17 Fields Descriptions for the show cable-diagnostics tdr Command Output (continued) Field Description Pair length Location on the cable where the problem is, with respect to your switch. TDR can...
  • Page 334: Show Class-map

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show class-map show class-map Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic. show class-map [class-map-name] [ | {begin | exclude | include} expression]...
  • Page 335: Show Cluster

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster show cluster Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on the cluster command switch and cluster member switches.
  • Page 336 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster This is an example of output when the show cluster command is entered on a cluster member switch: Switch1> show cluster Member switch for cluster “hapuna” Member number: Management IP address: 192.192.192.192...
  • Page 337: Show Cluster Candidates

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster candidates show cluster candidates Use the show cluster candidates privileged EXEC command to display a list of candidate switches. show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]...
  • Page 338 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster candidates This is an example of output from the show cluster candidates command that uses the MAC address of a cluster member switch directly connected to the cluster command switch: Switch>...
  • Page 339: Show Cluster Members

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster members show cluster members Use the show cluster members privileged EXEC command to display information about the cluster members. show cluster members [n | detail] [ | {begin | exclude | include} expression] Syntax Description (Optional) Number that identifies a cluster member.
  • Page 340 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show cluster members This is an example of output from the show cluster members detail command: Switch# show cluster members detail Device 'StLouis1' with member number 0 (Command Switch) Device type: cisco WS-C2960 MAC address: 0002.4b29.2e00...
  • Page 341: Show Controllers Cpu-interface

    12.2(25)FX This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
  • Page 342 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers cpu-interface Supervisor ASIC receive-queue parameters ---------------------------------------- queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4 queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFC queue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4 queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8 <output truncated>...
  • Page 343: Show Controllers Ethernet-controller

    This display without keywords provides traffic statistics, basically the RMON statistics for all interfaces or for the specified interface. When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
  • Page 344 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller Examples This is an example of output from the show controllers ethernet-controller command for an interface. Table 2-18 describes the Transmit fields, and Table 2-19 describes the Receive fields.
  • Page 345 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-18 Transmit Field Descriptions (continued) Field Description 5 collision frames The number of frames that are successfully sent on an interface after five collisions occur. 6 collision frames The number of frames that are successfully sent on an interface after six collisions occur.
  • Page 346 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-19 Receive Field Descriptions (continued) Field Description Unicast bytes The total amount of memory (in bytes) used by unicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
  • Page 347 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-19 Receive Field Descriptions (continued) Field Description System FCS error frames The total number of frames received on an interface that have a valid length (in bytes) but that do not have the correct FCS values.
  • Page 348 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFF FF0FFF00 86020000 5555FFFF 00000000 StackRacInfo : 73001630 00000003 7F001644 00000003 24140003 FD632B00 18E418E0 FFFFFFFF StackControlStatus : 18E418E0 stackControlStatusMask : FFFFFFFF TransmitBufferFreeListInfo : 00000854 00000800 00000FF8 00000000...
  • Page 349 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers ethernet-controller 0 Sup Queue 7 Drop Frames 0 Sup Queue 15 Drop Frames =========================================================================== Switch 1, PortASIC 1 Statistics --------------------------------------------------------------------------- 0 RxQ-0, wt-0 enqueue frames 0 RxQ-0, wt-0 drop frames...
  • Page 350: Show Controllers Tcam

    12.2(25)FX This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
  • Page 351 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers tcam HRR0: 00000000_E000CAFC HRR1: 00000000_00000000 HRR2: 00000000_00000000 HRR3: 00000000_00000000 HRR4: 00000000_00000000 HRR5: 00000000_00000000 HRR6: 00000000_00000000 HRR7: 00000000_00000000 <output truncated> GMR31: FF_FFFFFFFF_FFFFFFFF GMR32: FF_FFFFFFFF_FFFFFFFF GMR33: FF_FFFFFFFF_FFFFFFFF ============================================================================= TCAM related PortASIC 1 registers...
  • Page 352: Show Controllers Utilization

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers utilization show controllers utilization Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports. show controllers [interface-id] utilization [ | {begin | exclude | include} expression]...
  • Page 353 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show controllers utilization Table 2-20 show controllers utilization Field Descriptions Field Description Receive Bandwidth Percentage Displays the received bandwidth usage of the switch, which is the Utilization sum of the received traffic on all the ports divided by the switch receive capacity.
  • Page 354: Show Dot1x

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dot1x show dot1x Use the show dot1x user EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified port. show dot1x [{all [summary] | interface interface-id} [details | statistics]] [ | {begin | exclude |...
  • Page 355 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dot1x Examples This is an example of output from the show dot1x user EXEC command: Switch> show dot1x Sysauthcontrol Enabled Dot1x Protocol Version Critical Recovery Delay Critical EAPOL Disabled This is an example of output from the show dot1x all user EXEC command: Switch>...
  • Page 356 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dot1x This is an example of output from the show dot1x interface interface-id details user EXEC command: Switch# show dot1x interface gigabitethernet0/2 details Dot1x Info for GigabitEthernet0/2 ----------------------------------- = AUTHENTICATOR PortControl...
  • Page 357 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dot1x Table 2-21 show dot1x statistics Field Descriptions Field Description RxStart Number of valid EAPOL-start frames that have been received. RxLogoff Number of EAPOL-logoff frames that have been received. RxResp Number of valid EAP-response frames (other than response/identity frames) that have been received.
  • Page 358: Show Dtp

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dtp show dtp Use the show dtp privileged EXEC command to display Dynamic Trunking Protocol (DTP) information for the switch or for a specified interface. show dtp [interface interface-id] [ | {begin | exclude | include} expression]...
  • Page 359 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show dtp Statistics ---------- 3160 packets received (3160 good) 0 packets dropped 0 nonegotiate, 0 bad version, 0 domain mismatches, 0 bad TLVs, 0 other 6320 packets output (6320 good) 3160 native...
  • Page 360: Show Eap

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show eap show eap Use the show eap privileged EXEC command to display Extensible Authentication Protocol (EAP) registration and session information for the switch or for the specified port. show eap {{registrations [method [name] | transport [name]]} | {sessions [credentials name...
  • Page 361 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show eap Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output appear. Examples This is an example of output from the show eap registrations privileged EXEC command: Switch>...
  • Page 362 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show eap This is an example of output from the show eap sessions interface interface-id privileged EXEC command: Switch# show eap sessions gigabitethernet0/1 Role: Authenticator Decision: Fail Lower layer: Dot1x-AuthenticaInterface: Gi0/1 Current method:...
  • Page 363: Show Env

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show env show env Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch. show env {all | fan | power | rps| temperature} [ | {begin | exclude | include} expression] Syntax Description Display both fan and temperature environmental status.
  • Page 364: Show Errdisable Detect

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable detect show errdisable detect Use the show errdisable detect user EXEC command to display error-disabled detection status. show errdisable detect [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
  • Page 365 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable detect Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable flap-values Displays error condition recognition information. show errdisable recovery Displays error-disabled recovery timer information.
  • Page 366: Show Errdisable Flap-values

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable flap-values show errdisable flap-values Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause. show errdisable flap-values [ | {begin | exclude | include} expression]...
  • Page 367 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable flap-values Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable detect Displays error-disabled detection status. show errdisable recovery Displays error-disabled recovery timer information.
  • Page 368: Show Errdisable Recovery

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable recovery show errdisable recovery Use the show errdisable recovery user EXEC command to display the error-disabled recovery timer information. show errdisable recovery [ | {begin | exclude | include} expression]...
  • Page 369 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show errdisable recovery Timer interval:300 seconds Interfaces that will be enabled at the next timeout: Interface Errdisable reason Time left(sec) --------- ----------------- -------------- Gi0/2 link-flap Though visible in the output, the unicast-flood field is not valid.
  • Page 370: Show Etherchannel

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show etherchannel show etherchannel Use the show etherchannel user EXEC command to display EtherChannel information for a channel. show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude |...
  • Page 371 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show etherchannel Examples This is an example of output from the show etherchannel 1 detail command: Switch> show etherchannel 1 detail Group state = L2 Ports: 2 Maxports = 16 Port-channels: 1 Max Port-channels = 16...
  • Page 372 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show etherchannel This is an example of output from the show etherchannel 1 summary command: Switch> show etherchannel 1 summary Flags: D - down P - in port-channel I - stand-alone s - suspended...
  • Page 373: Show Fallback Profile

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show fallback profile show fallback profile Use the show fallback profile privileged EXEC command to display the fallback profiles that are configured on a switch. show fallback profile [append | begin | exclude | include | { [redirect | tee] url} expression]...
  • Page 374 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show fallback profile Related Commands Command Description dot1x fallback profile Configure a port to use web authentication as a fallback method for clients that do not support IEEE 802.1x authentication. fallback profile profile Create a web authentication fallback profile.
  • Page 375: Show Flowcontrol

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show flowcontrol show flowcontrol Use the show flowcontrol user EXEC command to display the flow control status and statistics. show flowcontrol [interface interface-id | module number] [ | {begin | exclude | include}...
  • Page 376 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show flowcontrol This is an example of output from the show flowcontrol interface interface-id command: Switch> show flowcontrol gigabitethernet0/2 Port Send FlowControl Receive FlowControl RxPause TxPause admin oper admin oper --------- -------- -------- -------- --------...
  • Page 377: Show Interfaces

    (Optional) Display the input and output packets by switching path for the interface. status (Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot. err-disabled (Optional) Display interfaces in error-disabled state.
  • Page 378 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces trunk Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears. | begin (Optional) Display begins with the line that matches the expression.
  • Page 379 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue :0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec...
  • Page 380 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces capabilities command for an interface. Switch# show interfaces gigabitethernet0/2 capabilities GigabitEthernet0/2 Model: WS-C2960G-24TC-L Type: 10/100/1000BaseTX Speed: 10,100,1000,auto Duplex: full,auto Trunk encap. type: 802.1Q...
  • Page 381 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces stats command for a specified VLAN interface. Switch# show interfaces vlan 1 stats Switching path Pkts In Chars In Pkts Out...
  • Page 382 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces Appliance trust: none Table 2-22 show interfaces switchport Field Descriptions Field Description Name Displays the port name. Switchport Displays the administrative and operational status of the port. In this display, the port is in switchport mode.
  • Page 383 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces Vlans Preferred on Active Interface: 1-50 Vlans Preferred on Backup Interface: 60, 100-120 This is an example of output from the show interfaces switchport backup command. In this example, VLANs 1 to 50, 60, and 100 to 120 are configured on the switch:...
  • Page 384 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces Port Vlans allowed and active in management domain Gi0/1 Port Vlans in spanning tree forwarding state and not pruned Gi0/1 This is an example of output from the show interfaces interface-id transceiver properties command:...
  • Page 385 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces Port (dBm) (dBm) (dBm) (dBm) (dBm) ------- ----------------- ---------- --------- --------- --------- Gi0/3 -0.0 ( -0.0) -0.0 -0.0 -0.0 -0.0 Optical High Alarm High Warn Low Warn Low Alarm Receive Power...
  • Page 386: Show Interfaces Counters

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces counters show interfaces counters Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface. show interfaces [interface-id | vlan vlan-id] counters [errors | etherchannel | protocol status |...
  • Page 387 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces counters This is an example of partial output from the show interfaces counters protocol status command for all interfaces. Switch# show interfaces counters protocol status Protocols allocated: Vlan1: Other, IP...
  • Page 388 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show interfaces counters This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces. Switch# show interfaces counters trunk Port TrunkFramesTx TrunkFramesRx WrongEncap...
  • Page 389: Show Inventory

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show inventory show inventory Use the show inventory user EXEC command to display product identification (PID) information for the hardware. show inventory [entity-name | raw] [ | {begin | exclude | include} expression]...
  • Page 390: Show Ip Dhcp Snooping

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping show ip dhcp snooping Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration. show ip dhcp snooping [ | {begin | exclude | include} expression]...
  • Page 391: Show Ip Dhcp Snooping Binding

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping binding show ip dhcp snooping binding Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch.
  • Page 392 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping binding This example shows how to display the DHCP snooping binding entries for a specific IP address: Switch> show ip dhcp snooping binding 10.1.2.150 MacAddress IpAddress Lease(sec) Type...
  • Page 393: Show Ip Dhcp Snooping Database

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping database show ip dhcp snooping database Use the show ip dhcp snooping database user EXEC command to display the status of the DHCP snooping binding database agent. show ip dhcp snooping database [detail] [ | {begin | exclude | include} expression]...
  • Page 394 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping database This is an example of output from the show ip dhcp snooping database detail command: Switch# show ip dhcp snooping database detail Agent URL : tftp://10.1.1.1/directory/file Write delay Timer : 300 seconds...
  • Page 395: Show Ip Dhcp Snooping Statistics

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping statistics show ip dhcp snooping statistics Use the show ip dhcp snooping statistics user EXEC command to display DHCP snooping statistics in summary or detail form. show ip dhcp snooping statistics [detail] [ | {begin | exclude | include} expression]...
  • Page 396 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping statistics Table 2-24 shows the DHCP snooping statistics and their descriptions: Table 2-24 DHCP Snooping Statistics DHCP Snooping Statistic Description Packets Processed by DHCP Snooping Total number of packets handled by DHCP snooping, including forwarded and dropped packets.
  • Page 397 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip dhcp snooping statistics Table 2-24 DHCP Snooping Statistics DHCP Snooping Statistic Description Insertion of opt82 fail Number of times the option-82 insertion into a packet failed. The insertion might fail if the packet with the option-82 data exceeds the size of a single physical packet on the internet.
  • Page 398: Show Ip Igmp Profile

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp profile show ip igmp profile Use the show ip igmp profile privileged EXEC command to display all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
  • Page 399: Show Ip Igmp Snooping

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping show ip igmp snooping Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
  • Page 400 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping IGMP snooping :Enabled Immediate leave :Disabled Multicast router learning mode :pim-dvmrp Source only learning age timer CGMP interoperability mode :IGMP_ONLY Last member query interval : 100 This is an example of output from the show ip igmp snooping command. It displays snooping characteristics for all VLANs on the switch.
  • Page 401 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping Command Description ip igmp snooping vlan static Statically adds a Layer 2 port as a member of a multicast group. show ip igmp snooping groups Displays the IGMP snooping multicast table for the switch.
  • Page 402: Show Ip Igmp Snooping Groups

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping groups show ip igmp snooping groups Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.
  • Page 403 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping groups Examples This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch. Switch# show ip igmp snooping groups...
  • Page 404: Show Ip Igmp Snooping Mrouter

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping mrouter show ip igmp snooping mrouter Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
  • Page 405 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping mrouter Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan mrouter Adds a multicast router port.
  • Page 406: Show Ip Igmp Snooping Querier

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping querier show ip igmp snooping querier Use the show ip igmp snooping querier detail user EXEC command to display the configuration and operation information for the IGMP querier configured on a switch.
  • Page 407 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show ip igmp snooping querier Examples This is an example of output from the show ip igmp snooping querier command: Switch> show ip igmp snooping querier Vlan IP Address IGMP Version Port --------------------------------------------------- 172.20.50.11...
  • Page 408: Show Lacp

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show lacp show lacp Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information. show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude |...
  • Page 409 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show lacp Examples This is an example of output from the show lacp counters user EXEC command. Table 2-25 describes the fields in the display. Switch> show lacp counters LACPDUs Marker Marker Response...
  • Page 410 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show lacp Table 2-26 describes the fields in the display: Table 2-26 show lacp internal Field Descriptions Field Description State State of the specific port. These are the allowed values: – —Port is in an unknown state.
  • Page 411 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show lacp This is an example of output from the show lacp neighbor command: Switch> show lacp neighbor Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs...
  • Page 412: Show Location

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show location show location Use the show location user EXEC command to display location information for an endpoint. show location admin-tag | [ | {begin | exclude | include} expression] show location civic-location {identifier id number | interface interface-id | static } | {begin |...
  • Page 413 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show location Street number : 3550 Building : 19 Room : C6 Primary road name : Cisco Way City : San Jose State : CA Country : US This is an example of output from the show location civic-location command that displays all the civic location information: Switch>...
  • Page 414 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show location Related Commands Command Description location (global configuration) Configures the global location information for an endpoint. location (interface configuration) Configures the location information for an interface. Catalyst 2960 Switch Command Reference...
  • Page 415: Show Link State Group

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show link state group show link state group Use the show link state group global configuration command to display the link-state group information. show link state group [number] [detail] [ | {begin | exclude | include} expression]...
  • Page 416 Enables a link-state group. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference for Release 12.2 > Cisco IOS File Management Commands > Configuration File Commands. Catalyst 2960 Switch Command Reference 2-492...
  • Page 417: Show Mac Access-group

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac access-group show mac access-group Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch. show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]...
  • Page 418 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac access-group Related Commands Command Description mac access-group Applies a MAC access group to an interface. Catalyst 2960 Switch Command Reference 2-494 OL-8604-03...
  • Page 419: Show Mac Address-table

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table show mac address-table Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
  • Page 420 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 421: Show Mac Address-table Address

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table address show mac address-table address Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address. show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin |...
  • Page 422 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table address Related Commands Command Description show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN. show mac address-table count Displays the number of addresses present in all VLANs or the specified VLAN.
  • Page 423: Show Mac Address-table Aging-time

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table aging-time show mac address-table aging-time Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
  • Page 424 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table aging-time Related Commands Command Description mac address-table aging-time Sets the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.
  • Page 425: Show Mac Address-table Count

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table count show mac address-table count Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN. show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]...
  • Page 426 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table count Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 427: Show Mac Address-table Dynamic

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table dynamic show mac address-table dynamic Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries. show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]...
  • Page 428 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table dynamic Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
  • Page 429: Show Mac Address-table Interface

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table interface show mac address-table interface Use the show mac address-table interface user command to display the MAC address table information for the specified interface in the specified VLAN. show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include}...
  • Page 430 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table interface Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 431: Show Mac Address-table Move Update

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table move update show mac address-table move update Use the show mac address-table move update user EXEC command to display the MAC address-table move update information on the switch. show mac address-table move update [ | {begin | exclude | include} expression]...
  • Page 432 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table move update Related Commands Command Description clear mac address-table move Clears the MAC address-table move update counters. update mac address-table move update Configures MAC address-table move update on the switch.
  • Page 433: Show Mac Address-table Notification

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table notification show mac address-table notification Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface. show mac address-table notification [interface [interface-id]] [ | {begin | exclude | include}...
  • Page 434 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table notification Examples This is an example of output from the show mac address-table notification command: Switch> show mac address-table notification MAC Notification Feature is Enabled on the switch Interval between Notification Traps : 60 secs...
  • Page 435: Show Mac Address-table Static

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table static show mac address-table static Use the show mac address-table static user EXEC command to display only static MAC address table entries. show mac address-table static [address mac-address] [interface interface-id] [vlan vlan-id]...
  • Page 436 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table static Examples This is an example of output from the show mac address-table static command: Switch> show mac address-table static Mac Address Table ------------------------------------------ Vlan Mac Address Type Ports...
  • Page 437: Show Mac Address-table Vlan

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table vlan show mac address-table vlan Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN. show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]...
  • Page 438 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mac address-table vlan Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
  • Page 439: Show Mls Qos

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos show mls qos Use the show mls qos user EXEC command to display global quality of service (QoS) configuration information. show mls qos [ | {begin | exclude | include} expression]...
  • Page 440: Show Mls Qos Aggregate-policer

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos aggregate-policer show mls qos aggregate-policer Use the show mls qos aggregate-policer user EXEC command to display the quality of service (QoS) aggregate policer configuration. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
  • Page 441: Show Mls Qos Input-queue

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos input-queue show mls qos input-queue Use the show mls qos input-queue user EXEC command to display quality of service (QoS) settings for the ingress queues. show mls qos input-queue [ | {begin | exclude | include} expression]...
  • Page 442 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos input-queue Related Commands Command Description mls qos srr-queue input bandwidth Assigns shaped round robin (SRR) weights to an ingress queue. mls qos srr-queue input buffers Allocates the buffers between the ingress queues.
  • Page 443: Show Mls Qos Interface

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos interface show mls qos interface Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the port level. show mls qos interface [interface-id] [buffers | queueing | statistics]...
  • Page 444 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos interface DSCP Mutation Map:Default DSCP Mutation Map Trust device:none qos mode:vlan-based This is an example of output from the show mls qos interface interface-id command when VLAN-based QoS is disabled: Switch>...
  • Page 445 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos interface 15 - 19 : 20 - 24 : 25 - 29 : 30 - 34 : 35 - 39 : 40 - 44 : 45 - 49 :...
  • Page 446 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos interface Command Description mls qos srr-queue output dscp-map Maps DSCP values to an egress queue or maps DSCP values to a queue and to a threshold ID. policy-map Creates or modifies a policy map.
  • Page 447: Show Mls Qos Maps

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos maps show mls qos maps Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. During classification, QoS uses the mapping tables to represent the priority of the traffic and to derive a corresponding class of service (CoS) or Differentiated Services Code Point (DSCP) value from the received CoS, DSCP, or IP precedence value.
  • Page 448 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos maps The DSCP input queue threshold and the DSCP output queue threshold maps appear as a matrix. The d1 column specifies the most-significant digit of the DSCP number. The d2 row specifies the least-significant digit in the DSCP number.
  • Page 449 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos maps Dscp-inputq-threshold map: d1 :d2 -------------------------------------------------------------------- 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01...
  • Page 450: Show Mls Qos Queue-set

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos queue-set show mls qos queue-set Use the show mls qos queue-set user EXEC command to display quality of service (QoS) settings for the egress queues. show mls qos queue-set [qset-id] [ | {begin | exclude | include} expression]...
  • Page 451 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos queue-set Related Commands Command Description mls qos queue-set output buffers Allocates buffers to the queue-set. mls qos queue-set output threshold Configures the weighted tail-drop (WTD) thresholds, guarantees the availability of buffers, and configures the maximum memory allocation of the queue-set.
  • Page 452: Show Mls Qos Vlan

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mls qos vlan show mls qos vlan Use the show mls qos vlan user EXEC command to display the policy maps attached to a switch virtual interface (SVI). show mls qos vlan vlan-id [ | {begin | exclude | include} expression]...
  • Page 453: Show Monitor

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show monitor show monitor Use the show monitor user EXEC command to display information about all Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) sessions on the switch. Use the command with keywords to show a specific session, all sessions, all local sessions, or all remote sessions.
  • Page 454 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show monitor Examples This is an example of output for the show monitor user EXEC command: Switch# show monitor Session 1 --------- Type : Local Session Source Ports : RX Only : Gi0/1...
  • Page 455: Show Mvr

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr show mvr Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).
  • Page 456 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. mvr (interface configuration) Configures MVR ports. show mvr interface Displays the configured MVR interfaces, status of the specified interface, or all multicast groups to which the interface belongs when the interface and members keywords are appended to the command.
  • Page 457: Show Mvr Interface

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr interface show mvr interface Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports. Use the command with keywords to display MVR parameters for a specific receiver port.
  • Page 458 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr interface In the preceding display, Status is defined as follows: Active means the port is part of a VLAN. • Up/Down means that the port is forwarding/nonforwarding. • Inactive means that the port is not yet part of any VLAN.
  • Page 459: Show Mvr Members

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr members show mvr members Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group. show mvr members [ip-address] [ | {begin | exclude | include} expression]...
  • Page 460 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show mvr members This is an example of output from the show mvr members ip-address command. It displays the members of the IP multicast group with that address: Switch# show mvr members 239.255.0.2 239.255.003.--22...
  • Page 461: Show Pagp

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show pagp show pagp Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information. show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude |...
  • Page 462 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show pagp This is an example of output from the show pagp 1 internal command: Switch> show pagp 1 internal Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
  • Page 463: Show Parser Macro

    Output appear. Examples This is a partial output example from the show parser macro command. The output for the Cisco-default macros varies depending on the switch platform and the software image running on the switch:...
  • Page 464 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show parser macro # Recommended value for access vlan (AVID) should not be 1 switchport access vlan $AVID switchport mode access <output truncated> -------------------------------------------------------------- Macro name : cisco-phone Macro type : default interface...
  • Page 465 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show parser macro This is an example of output from the show parser macro name command: Switch# show parser macro name standard-switch10 Macro name : standard-switch10 Macro type : customizable macro description standard-switch10...
  • Page 466: Show Policy-map

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show policy-map show policy-map Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming traffic. Policy maps can include policers that specify the bandwidth limitations and the action to take if the limits are exceeded.
  • Page 467 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show policy-map Related Commands Command Description policy-map Creates or modifies a policy map that can be attached to multiple ports to specify a service policy. Catalyst 2960 Switch Command Reference 2-543 OL-8604-03...
  • Page 468: Show Port-security

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show port-security show port-security Use the show port-security privileged EXEC command to display port-security settings for an interface or for the switch. show port-security [interface interface-id] [address | vlan] [ | {begin | exclude | include}...
  • Page 469 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show port-security (Count) (Count) (Count) ------------------------------------------------------------------------------- Gi0/1 Shutdown ------------------------------------------------------------------------------- Total Addresses in System (excluding one mac per port) Max Addresses limit in System (excluding one mac per port) : 6272 This is an example of output from the show port-security interface interface-id command:...
  • Page 470 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show port-security Related Commands Command Description clear port-security Deletes from the MAC address table a specific type of secure address or all the secure addresses on the switch or an interface. switchport port-security...
  • Page 471: Show Sdm Prefer

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show sdm prefer show sdm prefer Use the show sdm prefer privileged EXEC command to display information about the Switch Database Management (SDM) templates that can be used to maximize used for allocating system resources for a particular feature.
  • Page 472 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show sdm prefer This is an example of output from the show sdm prefer qos command: Switch# show sdm prefer qos "qos" template: The selected template optimizes the resources in the switch to support this level of features for 0 routed interfaces and 255 VLANs.
  • Page 473: Show Setup Express

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show setup express show setup express Use the show setup express privileged EXEC command to display if Express Setup mode is active on the switch. show setup express [ | {begin | exclude | include} expression]...
  • Page 474: Show Spanning-tree

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree show spanning-tree Use the show spanning-tree user EXEC command to display spanning-tree state information. show spanning-tree [bridge-group | active [detail] | backbonefast | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary...
  • Page 475 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree mst [configuration (Optional) Display the multiple spanning-tree (MST) region [digest]] [instance-id configuration and status (available only in privileged EXEC mode). [detail | interface The keywords have these meanings: interface-id [detail]] •...
  • Page 476 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree | begin (Optional) Display begins with the line that matches the expression. | exclude (Optional) Display excludes lines that match the expression. | include (Optional) Display includes lines that match the specified expression.
  • Page 477 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree Number of topology changes 0 last change occurred 1d16h ago Times: hold 1, topology change 35, notification 2 hello 2, max age 20, forward delay 15 Timers: hello 0, topology change 0, notification 0, aging 300...
  • Page 478 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree This is an example of output from the show spanning-tree mst configuration command: Switch# show spanning-tree mst configuration Name [region1] Revision Instance Vlans Mapped -------- ------------------ 1-9,21-4094 10-20 ---------------------------- This is an example of output from the show spanning-tree mst interface interface-id command:...
  • Page 479 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show spanning-tree Command Description spanning-tree loopguard default Prevents alternate or root ports from becoming the designated port because of a failure that leads to a unidirectional link. spanning-tree mst configuration Enters multiple spanning-tree (MST) configuration mode through which the MST region configuration occurs.
  • Page 480: Show Storm-control

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show storm-control show storm-control Use the show storm-control user EXEC command to display broadcast, multicast, or unicast storm control settings on the switch or on the specified interface or to display storm-control history.
  • Page 481 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show storm-control This is an example of output from the show storm-control command for a specified interface. Because no traffic-type keyword was entered, the broadcast storm control settings appear. Switch> show storm-control gigabitethernet 0/1...
  • Page 482: Show System Mtu

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show system mtu show system mtu Use the show system mtu privileged EXEC command to display the global maximum transmission unit (MTU) or maximum packet size set for the switch. show system mtu [ | {begin | exclude | include} expression]...
  • Page 483 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show system mtu Related Commands Command Description system mtu Sets the MTU size for the Fast Ethernet, Gigabit Ethernet, or routed ports. Catalyst 2960 Switch Command Reference 2-559 OL-8604-03...
  • Page 484: Show Udld

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show udld show udld Use the show udld user EXEC command to display UniDirectional Link Detection (UDLD) administrative and operational status for all ports or the specified port. show udld [interface-id] [ | {begin | exclude | include} expression]...
  • Page 485 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show udld Table 2-29 show udld Field Descriptions Field Description Interface The interface on the local device configured for UDLD. Port enable administrative How UDLD is configured on the port. If UDLD is enabled or...
  • Page 486 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show udld Related Commands Command Description udld Enables aggressive or normal mode in UDLD or sets the configurable message timer time. udld port Enables UDLD on an individual interface or prevents a fiber-optic interface from being enabled by the udld global configuration command.
  • Page 487: Show Version

    Though visible in the show version output, the configuration register information is not supported on the switch. Switch> show version Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(0.0.16)FX, CISCO DEVELOPMENT TEST VERSION Copyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Tue 17-May-05 01:43 by yenanh ROM: Bootstrap program is C2960 boot loader BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M), Version 12.2 [lqian-flo_pilsner 100]...
  • Page 488 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show version 64K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address : 00:0B:FC:FF:E8:80 Motherboard assembly number : 73-9832-02 Motherboard serial number : FHH0916001J Motherboard revision number : 01 System serial number...
  • Page 489: Show Vlan

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vlan show vlan Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
  • Page 490 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vlan Command History Release Modification 12.2(25)FX This command was introduced. Usage Guidelines In the show vlan mtu command output, the MTU_Mismatch column shows whether all the ports in the VLAN have the same MTU. When yes appears in this column, it means that the VLAN has ports with different MTUs, and packets that are switched from a port with a larger MTU to a port with a smaller MTU might be dropped.
  • Page 491 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vlan Table 2-30 show vlan Command Output Fields Field Description VLAN VLAN number. Name Name, if configured, of the VLAN. Status Status of the VLAN (active or suspend). Ports Ports that belong to the VLAN.
  • Page 492 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vlan Related Commands Command Description switchport mode Configures the VLAN membership mode of a port. vlan (global Enables VLAN configuration mode where you can configure VLANs 1 to configuration) 4094. vlan (VLAN Configures VLAN characteristics in the VLAN database.
  • Page 493: Show Vmps

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vmps show vmps Use the show vmps user EXEC command without keywords to display the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VLAN Membership Policy Server (VMPS) IP addresses, and the current and primary servers, or use the statistics keyword to display client-side statistics.
  • Page 494 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vmps This is an example of output from the show vmps statistics command. Table 2-31 describes each field in the display. Switch> show vmps statistics VMPS Client Statistics ---------------------- Queries: Responses:...
  • Page 495 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vmps Related Commands Command Description clear vmps statistics Clears the statistics maintained by the VQP client. vmps reconfirm Sends VQP queries to reconfirm all dynamic VLAN assignments with the (privileged EXEC) VMPS.
  • Page 496: Show Vtp

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vtp show vtp Use the show vtp user EXEC command to display general information about the VLAN Trunking Protocol (VTP) management domain, status, and counters. show vtp {counters | password | status} [ | {begin | exclude | include} expression]...
  • Page 497 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vtp Trunk Join Transmitted Join Received Summary advts received from non-pruning-capable device ---------------- ---------------- ---------------- --------------------------- Fa0/47 Fa0/48 Gi0/1 Gi0/2 Table 2-32 show vtp counters Field Descriptions Field Description Summary advertisements...
  • Page 498 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vtp Table 2-32 show vtp counters Field Descriptions (continued) Field Description Number of configuration Number of MD5 digest errors. digest errors Digest errors increment whenever the MD5 digest in the summary packet and the MD5 digest of the received advertisement calculated by the switch do not match.
  • Page 499 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vtp Table 2-33 show vtp status Field Descriptions Field Description VTP Version Displays the VTP version operating on the switch. By default, the switch implements Version 1 but can be set to Version 2.
  • Page 500 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands show vtp Related Commands Command Description clear vtp counters Clears the VTP and pruning counters. vtp (global configuration) Configures the VTP filename, interface name, domain name, and mode. vtp (VLAN configuration) Configures the VTP domain name, password, pruning, and mode.
  • Page 501: Shutdown

    2 V ] Chapter 2 Catalyst 3750 Switch Cisco IOS Commands shutdown shutdown Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface. shutdown no shutdown Syntax Description This command has no arguments or keywords.
  • Page 502: Shutdown Vlan

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands shutdown vlan shutdown vlan Use the shutdown vlan global configuration command to shut down (suspend) local traffic on the specified VLAN. Use the no form of this command to restart local traffic on the VLAN.
  • Page 503: Snmp-server Enable Traps

    | entity | envmon [fan | shutdown | status | supply | temperature] | errdisable [notification-rate] | flash | hsrp | ipmulticast | mac-notification | msdp | ospf [cisco-specific | errors | lsa | rate-limit | retransmit | state-change] | pim [invalid-pim-message |...
  • Page 504 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server enable traps ipmulticast (Optional) Enable IP multicast routing traps. mac-notification (Optional) Enable MAC address notification traps. msdp (Optional) Enable Multicast Source Discovery Protocol (MSDP) traps. ospf [cisco-specific | (Optional) Enable Open Shortest Path First (OSPF) traps. The keywords...
  • Page 505 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server enable traps vlancreate (Optional) Enable SNMP VLAN-created traps. vlandelete (Optional) Enable SNMP VLAN-deleted traps. (Optional) Enable VLAN Trunking Protocol (VTP) traps. Note Though visible in the command-line help strings, the cpu [threshold], insertion, removal, and rtr keywords are not supported.
  • Page 506 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server enable traps Usage Guidelines Specify the host (NMS) that receives the traps by using the snmp-server host global configuration command. If no trap types are specified, all trap types are sent.
  • Page 507: Snmp-server Host

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server host snmp-server host Use the snmp-server host global configuration command to specify the recipient (host) of a Simple Network Management Protocol (SNMP) notification operation. Use the no form of this command to remove the specified host.
  • Page 508 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server host community-string Password-like community string sent with the notification operation. Though you can set this string by using the snmp-server host command, we recommend that you define this string by using the snmp-server community global configuration command before using the snmp-server host command.
  • Page 509 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp-server host Defaults This command is disabled by default. No notifications are sent. If you enter this command with no keywords, the default is to send all trap types to the host. No informs are sent to this host.
  • Page 510 The community string is defined as comaccess: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com comaccess snmp This example shows how to enable the switch to send all traps to the host myhost.cisco.com by using the community string public: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com public...
  • Page 511: Snmp Trap Mac-notification

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp trap mac-notification snmp trap mac-notification Use the snmp trap mac-notification interface configuration command to enable the Simple Network Management Protocol (SNMP) MAC address notification trap on a specific Layer 2 interface. Use the no form of this command to return to the default setting.
  • Page 512 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands snmp trap mac-notification Related Commands Command Description clear mac address-table notification Clears the MAC address notification global counters. mac address-table notification Enables the MAC address notification feature. show mac address-table notification Displays the MAC address notification settings for all interfaces or on the specified interface when the interface keyword is appended.
  • Page 513: Spanning-tree Backbonefast

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree backbonefast spanning-tree backbonefast Use the spanning-tree backbonefast global configuration command to enable the BackboneFast feature. Use the no form of the command to return to the default setting. spanning-tree backbonefast no spanning-tree backbonefast Syntax Description This command has no arguments or keywords.
  • Page 514: Spanning-tree Bpdufilter

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree bpdufilter spanning-tree bpdufilter Use the spanning-tree bpdufilter interface configuration command to prevent an interface from sending or receiving bridge protocol data units (BPDUs). Use the no form of this command to return to the default setting.
  • Page 515 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree bpdufilter Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 516: Spanning-tree Bpduguard

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree bpduguard spanning-tree bpduguard Use the spanning-tree bpduguard interface configuration command to put an interface in the error-disabled state when it receives a bridge protocol data unit (BPDU). Use the no form of this command to return to the default setting.
  • Page 517 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree bpduguard Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 518: Spanning-tree Cost

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree cost spanning-tree cost Use the spanning-tree cost interface configuration command to set the path cost for spanning-tree calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to place in the forwarding state.
  • Page 519 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree cost Related Commands Command Description show spanning-tree interface Displays spanning-tree information for the specified interface. interface-id spanning-tree port-priority Configures an interface priority. spanning-tree vlan priority Sets the switch priority for the specified spanning-tree instance.
  • Page 520: Spanning-tree Etherchannel Guard Misconfig

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig spanning-tree etherchannel guard misconfig Use the spanning-tree etherchannel guard misconfig global configuration command to display an error message when the switch detects an EtherChannel misconfiguration. Use the no form of this command to disable the feature.
  • Page 521 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig Related Commands Command Description errdisable recovery cause Enables the timer to recover from the EtherChannel channel-misconfig misconfiguration error-disabled state. show etherchannel summary Displays EtherChannel information for a channel as a one-line summary per channel-group.
  • Page 522: Spanning-tree Extend System-id

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree extend system-id spanning-tree extend system-id Use the spanning-tree extend system-id global configuration command to enable the extended system ID feature. spanning-tree extend system-id Though visible in the command-line help strings, the no version of this command is not supported. You Note cannot disable the extended system ID feature.
  • Page 523 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree extend system-id Related Commands Command Description show spanning-tree summary Displays a summary of spanning-tree interface states. spanning-tree mst root Configures the MST root switch priority and timers based on the network diameter.
  • Page 524: Spanning-tree Guard

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree guard spanning-tree guard Use the spanning-tree guard interface configuration command to enable root guard or loop guard on all the VLANs associated with the selected interface. Root guard restricts which interface is allowed to be the spanning-tree root port or the path-to-the root for the switch.
  • Page 525 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree guard ports. When the switch is operating in MST mode, BPDUs are not sent on nonboundary interfaces if the interface is blocked by loop guard in all MST instances. On a boundary interface, loop guard blocks the interface in all MST instances.
  • Page 526: Spanning-tree Link-type

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree link-type spanning-tree link-type Use the spanning-tree link-type interface configuration command to override the default link-type setting, which is determined by the duplex mode of the interface, and to enable rapid spanning-tree transitions to the forwarding state.
  • Page 527 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree link-type Related Commands Command Description clear spanning-tree detected-protocols Restarts the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface. show spanning-tree interface Displays spanning-tree state information for the specified interface-id interface.
  • Page 528: Spanning-tree Loopguard Default

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree loopguard default spanning-tree loopguard default Use the spanning-tree loopguard default global configuration command to prevent alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link. Use the no form of this command to return to the default setting.
  • Page 529 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree loopguard default Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
  • Page 530: Spanning-tree Mode

    Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree mode spanning-tree mode Use the spanning-tree mode global configuration command to enable per-VLAN spanning-tree plus (PVST+), rapid PVST+, or multiple spanning tree (MST) on your switch. Use the no form of this command to return to the default setting.
  • Page 531 Chapter 2 Catalyst 3750 Switch Cisco IOS Commands spanning-tree mode Related Commands Command Description show r