Editing Command Lines that Wrap Searching and Filtering Output of show and more Commands Accessing the CLI Accessing the CLI through a Console Connection or through Telnet Campus Fabric P A R T I Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 4
(interface configuration) logging event power-inline-status mdix auto mode (power-stack configuration) network-policy network-policy profile (global configuration) power efficient-ethernet auto Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 6
(authentication) show glbp show ip nhrp nhs show ip ports all show key chain show track Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 8
P A R T V I Layer 2/3 C H A P T E R 7 channel-group channel-protocol clear lacp clear pagp clear spanning-tree counters clear spanning-tree detected-protocols debug etherchannel debug lacp debug pagp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches) viii...
Page 10
Network Management P A R T V I I I Flexible NetFlow C H A P T E R 1 0 cache clear flow exporter clear flow monitor collect collect counter Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 14
P A R T X Auto-QoS C H A P T E R 1 3 auto qos classify auto qos trust auto qos video auto qos voip debug auto qos show auto qos Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 15
C H A P T E R 1 5 authentication (BFD) bfd all-interfaces bfd check-ctrl-plane-failure bfd echo bfd slow-timers bfd template bfd-template ip route static bfd ipv6 route static bfd Security P A R T X I I Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 16
(global configuration) dot1x pae dot1x supplicant controlled transient dot1x supplicant force-multicast dot1x test eapol-capable dot1x test timeout dot1x timeout epm access-control open ip access-list role-based ip admission ip admission name Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
A vertical line, called a pipe, indicates a choice within a set of keywords or arguments. [x | y] Optional alternative keywords are grouped in brackets and separated by vertical bars. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches) xxiii...
Page 24
Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONS Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches) xxiv...
Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html...
Using the Command-Line Interface, page 1 Using the Command-Line Interface This chapter describes the Cisco IOS command-line interface (CLI) and how to use it to configure your switch. Understanding Command Modes The Cisco IOS user interface is divided into many different modes. The commands available to you depend on which mode you are currently in.
(with a Ethernet ports. To return to specific interface). privileged EXEC mode, press Ctrl-Z or enter end. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Lists the associated keywords for a command. Switch> show ? command keyword ? Lists the associated arguments for a keyword. Device(config)# cdp holdtime ? <10-255> Length of time (in sec) that receiver must keep this packet Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The caret (^) marks the all the commands that are available point of the error. in this command mode. The possible keywords that you can enter with the command appear. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To recall commands from the history buffer, perform one of the actions listed in this table. These actions are optional. The arrow keys function only on ANSI-compatible terminals such as VT100s. Note Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To re-enable the enhanced editing mode for the current terminal session, enter this command in privileged EXEC mode: Device# terminal editing To reconfigure a specific line to have enhanced editing mode, enter this command in line configuration mode: Device(config-line)# editing Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Delete entries if you make a Press the Delete or Backspace key. Erases the character to the left of mistake or change your mind. the cursor. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Press the Space bar. Scrolls down one screen. Redisplay the current command Press Ctrl-L or Ctrl-R. Redisplays the current command line if the switch suddenly sends a line. message to your screen. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# show interfaces | include protocol Vlan1 is up, line protocol is up Vlan10 is up, line protocol is down GigabitEthernet1/0/1 is up, line protocol is down GigabitEthernet1/0/2 is up, line protocol is up Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
After you connect through the console port, through the Ethernet management port, through a Telnet session or through an SSH session, the user EXEC prompt appears on the management station. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 37
P A R T Campus Fabric • Campus Fabric, page 13...
The following configuration is auto-generated when this command is run on your device: Device(config-fabric-auto-domain)#border 198.51.100.4 ipv4 use-petr 198.51.100.4 priority 10 weight 10 For information about the ipv4 proxy etr command, see LISP Command Reference.. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following configuration is auto-generated when this command is run on your device: ip vrf guest for context example-context (source – fabric auto) description Auto-provisioned vrf router lisp eid-table vrf guest instance-id 10 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
We recommend that you use the default domain, unless your network requires you to create a new domain. This command allows you to enter fabric-auto domain configuration mode where you can configure edge, control-plane and border devices in the fabric domain. Device(config-fabric-auto)#domain default Examples Device(config-fabric-auto)#domain name exampledomain Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The no debug fabric auto level verbose command disables the display of all the messages encountered during fabric provisioning. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Additionally, this command enables the auto-generation LISP, VLAN, VRF configuration, to orchestrate the fabric overlay. The show-running configuration command shows the fabric domain configuration including the and auto-generated base line commands. Device(config)#fabric auto Examples Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This configuration is auto-generated when you configure a host-pool: ip dhcp relay information option vpn ip dhcp relay information option ip dhcp snooping vlan 10 ip dhcp snooping vlan 10 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the command to display a summary of the context configuration in your fabric domain. device#show fabric context Fabric-domain: default Number of context(s): 2 Name Host-pools ---------------------------------------------- default example-context * - Not Configured Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EXEC command. Then enter the debug command at the command-line prompt of the stack member. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EXEC command. Then enter the debug command at the command-line prompt of the stack member. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When you enable debugging on a switch stack, it is enabled only on the active switch. To enable debugging on a stack member, you can start a session from the active switch by using the session switch-number EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines The undebug platform poe command is the same as the no debug platform poe command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
However, you cannot configure these interfaces to operate in half-duplex mode. Certain ports can be configured to be either full duplex or half duplex. How this command is applied depends on the device to which the switch is attached. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your setting by entering the show interfaces privileged EXEC command. Examples This example shows how to configure an interface for full-duplex operation: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# duplex full Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command shows how to globally configure voice-aware 802.1x security for a per-VLAN error-disabled state: Device(config)# errdisable detect cause security-violation shutdown vlan You can verify your setting by entering the show errdisable detect privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables the timer to recover from the link-flap error-disabled state. loopback Enables the timer to recover from a loopback error-disabled state. mac-limit Enables the timer to recover from the mac limit error-disabled state. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If you enable the recovery for a cause, the interface is brought out of the error-disabled state and allowed to retry the operation again when all the causes have timed out. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your settings by entering the show errdisable recovery privileged EXEC command. Examples This example shows how to enable the recovery timer for the BPDU guard error-disabled cause: Device(config)# errdisable recovery cause bpduguard Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your settings by entering the show errdisable recovery privileged EXEC command. Examples This example shows how to set the timer to 500 seconds: Device(config)# errdisable recovery interval 500 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables you to configure a tunnel interface. The range is from 0 to 2147483647. Vlan interface number Enables you to configure a switch VLAN. The range is from 0 to 4098. Command Default None Command Modes Global configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines You can not use the "no" form of this command. Examples The following example shows how to configure a tunnel interface: Device# interface Tunnel 15 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Modes Global configuration Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Examples This example shows how you can configure interface range: Device(config)# interface range vlan 1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of partial output from the show ip interface interface-id command. It displays the current IP MTU setting for the interface. Device# show ip interface gigabitethernet4/0/1 GigabitEthernet4/0/1 is up, line protocol is up Internet address is 18.0.0.1/24 Broadcast address is 255.255.255.255 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Address determined by setup command MTU is 1500 bytes Helper address is not set <output truncated> Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of partial output from the show ipv6 interface interface-id command. It displays the current IPv6 MTU setting for the interface. Device# show ipv6 interface gigabitethernet4/0/1 GigabitEthernet4/0/1 is up, line protocol is up Internet address is 18.0.0.1/24 Broadcast address is 255.255.255.255 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Address determined by setup command MTU is 1500 bytes Helper address is not set <output truncated> Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines This command is supported on 802.1 media types. If the interface is configured as a tunnel port, LLDP is automatically disabled. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to disable LLDP transmission on an interface: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# no lldp transmit The following example shows how to enable LLDP transmission on an interface: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# lldp transmit Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The no form of this command does not disable PoE error events. Examples This example shows how to enable logging of PoE events on a port: Device(config-if)# interface gigabitethernet1/0/1 Device(config-if)# logging event power-inline-status Device(config-if)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(straight-through or crossover) is incorrect. Examples This example shows how to enable auto-MDIX on a port: Device# configure terminal Device(config)# interface gigabitethernet1/0/1 Device(config-if)# speed auto Device(config-if)# duplex auto Device(config-if)# mdix auto Device(config-if)# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The power budget includes all power from all supplies. No power is set aside for power supply failures. If a power supply fails, load shedding (shutting down of powered devices or switches) might occur. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The interface then has the voice or voice-signaling VLAN network-policy profile applied. Examples This example shows how to apply network-policy profile 60 to an interface: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# network-policy 60 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
These profile attributes are contained in the Link Layer Discovery Protocol for Media Endpoint Devices (LLDP-MED) network-policy time-length-value (TLV). Examples This example shows how to create network-policy profile 60: Device(config)# network-policy profile 60 Device(config-network-policy)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to enable EEE for an interface: Device(config-if)# power efficient-ethernet auto Device(config-if)# This example shows how to disable EEE for an interface: Device(config-if)# no power efficient-ethernet auto Device(config-if)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To configure Cisco StackPower power-priority values for a switch in a power stack and for its high-priority and low-priority PoE ports, use the power-priority command in switch stack-power configuration mode. To return to the default setting, use the no form of the command.
Pre-allocates (reserves) power for a port before the switch discovers the powered device. This action guarantees that the device connected to the interface receives enough power. Command Default The default is auto (enabled). Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(wires 1,2,3,6). Power on the spare pair is enabled when the switch port and end device mutually identify themselves as Cisco UPOE-capable using CDP or LLDP and the end device requests for power to be enabled on the spare pair. When the spare pair is powered, the end device can negotiate up to 60 W of power from the switch using CDP or LLDP.
If a port has a Cisco powered device connected to it, you should not use the power inline never command to configure the port. A false link-up can occur, placing the port in an error-disabled state.
1 The user-defined power level that limits the power allowed on the port when you enter the power inline auto max max-wattage or the power inline static max max-wattage interface configuration command Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to enable policing of the power consumption and configuring the device to generate a syslog message on the PoE port on a device: Device(config)# interface gigabitethernet1/0/2 Device(config-if)# power inline police action log Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
{A | B} off or on keywords. To return to the default setting, use the power supply stack-member-number on command. You can verify your settings by entering the show env power privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows the output of the show env power command: Device> show env power Serial# Status Sys Pwr PoE Pwr Watts ------------------ ---------- --------------- ------- ------- ----- PWR-1RUC2-640WAC DCB1705B05B OK Good Good 250/390 Not Present Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show eee capabilities command on an interface where EEE is enabled: Device# show eee capabilities interface gigabitethernet1/0/1 Gi1/0/1 EEE(efficient-ethernet): yes (100-Tx and 1000T auto) Link Partner yes (100-Tx and 1000T auto) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EEE: Device# show eee status interface gigabitethernet1/0/3 Gi1/0/3 is down EEE(efficient-ethernet): Disagreed Rx LPI Status None Tx LPI Status None Wake Error Count Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The number of PHY wake-up faults that have occurred. A wake-up fault can occur when EEE is enabled and the connection to the link partner is broken. This information is useful for PHY debugging. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Displays the switch internal temperature (not the external status temperature) and the threshold values. Command Default None Command Modes User EXEC Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show env power all command on the active switch: Device# show env power all Serial# Status Sys Pwr PoE Pwr Watts ------------------ ---------- --------------- ------- ------- ----- Not Present Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The temperature is in the warning range. You should check the external temperature around the switch. The temperature is in the critical range. The switch might not run properly if the temperature is in this range. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enabled port dhcp-rate-limit Enabled port dtp-flap Enabled port gbic-invalid Enabled port inline-power Enabled port invalid-policy Enabled port l2ptguard Enabled port link-flap Enabled port loopback Enabled port lsgroup Enabled port Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enabled port psecure-violation Enabled port/vlan security-violatio Enabled port sfp-config-mismat Enabled port storm-control Enabled port udld Enabled port vmps Enabled port Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Displays the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show interfaces status err-disabled command. It displays the status of interfaces in the error-disabled state: Device# show interfaces status err-disabled Port Name Status Reason Gi1/0/2 err-disabled gbic-invalid Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Port Vlans allowed on trunk Gi1/0/1 none Port Vlans allowed and active in management domain Gi1/0/1 none Port Vlans in spanning tree forwarding state and not pruned Gi1/0/1 none Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines If you do not enter any keywords, all counters for all interfaces are included. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show interfaces counters trunk command. It displays trunk counters for all interfaces. Device# show interfaces counters trunk Port TrunkFramesTx TrunkFramesRx WrongEncap Gi1/0/1 Gi1/0/2 Gi1/0/3 80678 Gi1/0/4 82320 Gi1/0/5 <output truncated> Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays whether or not unknown multicast and unknown unicast traffic is blocked on the interface. Unknown multicast blocked Voice VLAN Displays the VLAN ID on which voice VLAN is enabled. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Field Description Appliance trust Displays the class of service (CoS) setting of the data packets of the IP phone. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# show interfaces gigabitethernet1/1/1 transceiver properties Name : Gi1/1/1 Administrative Speed: auto Operational Speed: auto Administrative Duplex: auto Administrative Power Inline: enable Operational Duplex: auto Administrative Auto-MDIX: off Operational Auto-MDIX: off Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Prior to Cisco IOS XE Denali 16.3.1, the Free Memory displayed in the command output was obtained from the underlying Linux kernel. This value was not accurate because some memory chunks that was available for use was not considered as free memory.
Entering the show module command without the switch-num argument is the same as entering the show module all command. Examples This example shows how to display information for all the modules on a Cisco Catalyst 3850 Series switch: Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
[10/23/12 14:05:20.379 UTC 13 3] Slot #1: PoE initialization for board id 16387 [10/23/12 14:05:20.379 UTC 14 3] Set total inline power to 450 for slot 1 [10/23/12 14:05:20.379 UTC 15 3] Gi1/0/1 port config Initialized Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an output example from the show mgmt-infra trace messages ilpower-ha command: Device# show mgmt-infra trace messages ilpower-ha [10/23/12 14:04:48.087 UTC 1 3] NG3K_ILPOWER_HA: Created NGWC ILP CF client succ essfully. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
[10/23/12 14:04:06.431 UTC 16 5495] PoE Info: POE_SHUT sent for port 21 (e:8) [10/23/12 14:04:06.431 UTC 17 5495] PoE Info: POE_SHUT sent for port 22 (e:9) [10/23/12 14:04:06.431 UTC 18 5495] PoE Info: POE_SHUT sent for port 23 (e:10) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
GPN to be used. For example, destination index - 0xF04E corresponds to GPN - 78 (0x4e). ◦ Rewrite Index : Determines what needs to be done with the packets. For layer 2 switching, this is typically a bridging action Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Forwarding Decision: FPS 2A L2 Destination Replication Bitmap: Local CPU copy Local Data copy Remote CPU copy Remote Data copy Egress: Switch Outgoing Port : GigabitEthernet1/0/9 Global Port Number : 9 ASIC Number Vlan Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following is sample output from the show platform resources command: Switch# show platform resources **State Acronym: H - Healthy, W - Warning, C - Critical Resource Usage Warning Critical State ---------------------------------------------------------------------------------------------------- Control Processor 7.20% 100% DRAM 2701MB(69%) 3883MB Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Spare Pair Architecture: Signal Pair Power allocation in milli watts: 0 Spare Pair Power On: Powered Device power state: Timer: Power Good: Stopped Power Denied: Stopped Cisco Powered Device Detect: Stopped Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The command was introduced. Usage Guidelines Prior to Cisco IOS XE Denali 16.3.1, the Free Memory displayed in the command output was obtained from the underlying Linux kernel. This value was not accurate because some memory chunks that was available for use was not considered as free memory.
The output of the show platform software process slot switch and show processes cpu platform monitor location commands display the output of the Linux top command. The output of these commands display Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
0:58.04 rcuc/0 11 root 21:35.60 rcuc/1 12 root 0:01.33 migration/1 Related Commands Command Description show processes cpu platform monitor location Displays information about the CPU utilization of the IOS-XE processes. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Prior to Cisco IOS XE Denali 16.3.1, the Free Memory displayed in the command output was obtained from the underlying Linux kernel. This value was not accurate because some memory chunks that was available for use was not considered as free memory.
To display memory usage per Cisco IOS XE process, use the show processes memory platform command in privileged EXEC mode. show processes memory platform [detailed {name process-name | process-id process-ID} [location | maps...
The command was introduced. Usage Guidelines Prior to Cisco IOS XE Denali 16.3.1, the Free Memory displayed in the command output was obtained from the underlying Linux kernel. This value was not accurate because some memory chunks that was available for use was not considered as free memory.
Power Device Class Max (Watts) --------- ------ ---------- ------- ------------------- ----- ---- Gi3/0/1 auto 30.0 Gi3/0/2 auto 30.0 Gi3/0/3 auto 30.0 Gi3/0/4 auto 30.0 Gi3/0/5 auto 30.0 Gi3/0/6 auto 30.0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
PoE ports in watts. Remaining The amount of configured power in watts that is not allocated to ports in the system. (Available – Used = Remaining) Admin Administration mode: auto, off, static. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The table that follows describes the output fields. Device> show power inline police gigabitethernet1/0/1 Interface Admin Oper Admin Oper Cutoff Oper State State Police Police Power Power --------- ------ ---------- ---------- ---------- ------ ----- Gi1/0/1 auto none Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• log—Policing is enabled, and the switch generates a syslog message when the real-time power consumption exceeds the maximum power allocation. • none—Policing is disabled. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device> show power inline priority Interface Admin Oper Priority State State ---------- ------ ---------- -------- Gi1/0/1 auto Gi1/0/2 auto Gi1/0/3 auto Gi1/0/4 auto Gi1/0/5 auto Gi1/0/6 auto Gi1/0/7 auto Gi1/0/8 auto Gi1/0/9 auto Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE Denali 16.1.1 This command was reintroduced. Usage Guidelines This command is available only on switch stacks running the IP Base or IP Services image. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For information about the MTU values and the stack configurations that affect the MTU values, see the system mtu command. Examples This is an example of output from the show system mtu command: Device# show system mtu Global Ethernet MTU is 1500 bytes. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(for example, show tech-support > filename ) in the local writable storage file system or the remote file system. Redirecting the output to a file also makes sending the output to your Cisco Technical Assistance Center (TAC) representative easier.
This command was introduced. Cisco IOS XE Denali 16.3.1 This command was modified. The following keywords were added: 2500 and 5000. These keywords are visible only on multi-Gigabit Ethernet port supporting devices. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# interface gigabitethernet1/0/1 Device(config-if)# speed auto 10 The following example shows how to set a port to autonegotiate at only 10 or 100 Mbps: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# speed auto 10 100 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When you enter the stack-power switch switch-number command with the number of a switch participating in StackPower, you enter switch stack power configuration mode, and these commands are available: • default—Returns a command to its default setting. • exit—Exits switch stack power configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example removes switch 2, which is connected to the power stack, from the power pool and shutting down both power ports: Device(config)# stack-power switch 2 Device(config-switch-stackpower)# standalone Device(config-switch-stackpower)# exit Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to block unknown unicast traffic on an interface: Device(config-if)# switchport block unicast You can verify your setting by entering the show interfaces interface-id switchport privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Global Ethernet MTU is set to 6000 bytes. Note: this is the Ethernet payload size, not the total Ethernet frame size, which includes the Ethernet header/trailer and possibly other tags, such as ISL or 802.1q tags. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
VLAN 0 (the native VLAN). none (Optional) Does not instruct the Cisco IP phone about the voice VLAN. The phone uses the configuration from the phone key pad. (Optional) Configures the phone to send untagged voice traffic. This is the default untagged for the phone.
Device(config)# network-policy profile 1 Device(config-network-policy)# voice-signaling vlan 400 dscp 45 This example shows how to configure voice-signaling for the native VLAN with priority tagging: Device(config-network-policy)# voice-signaling vlan dot1p cos 4 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Configures the phone to use IEEE 802.1p priority tagging and to use VLAN 0 (the native VLAN). none (Optional) Does not instruct the Cisco IP phone about the voice VLAN. The phone uses the configuration from the phone key pad. untagged (Optional) Configures the phone to send untagged voice traffic.
Device(config)# network-policy profile 1 Device(config-network-policy)# voice vlan 100 dscp 34 This example shows how to configure the voice application type for the native VLAN with priority tagging: Device(config-network-policy)# voice vlan dot1p cos 4 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Clears all IPv4 statistic information for all interfaces. Command Modes User EXEC (>) Privileged EXEC (#) Command History Release Modification Cisco IOS XE Denali 16.3.1 This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to clear all dynamic entries from the NHRP cache for an interface: Switch# clear ip nhrp Related Commands Command Description show ip nhrp Displays NHRP mapping information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Note In Cisco IOS XE Denali 16.3.1, this command supports only IPv4; the IPv6-nbma-address argument although available on the switch, will not work if configured. Use the debug nhrp detail command to view the NHRP attribute logs.
This example shows how to specify the delay period for the initialization of FHRP clients: Device(config-if)# fhrp delay minimum 90 Related Commands Command Description Displays First Hop Redundancy Protocol (FHRP) show fhrp information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
GLBP group, to ensure interoperation. A device will ignore all GLBP messages that contain the wrong authentication information. If password encryption is configured with the service password-encryption command, the software saves the key string in the configuration as encrypted text. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If the device preempts the current AVF, it waits 60 seconds before taking over the role of the AVF. Device(config-if)# glbp 10 forwarder preempt delay minimum 60 Related Commands Command Description glbp ip Enables GLBP. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If a forwarder in the GLBP group is active, proxy ARP requests are answered using the MAC address of the first active forwarder in the group. If no forwarder is active, proxy ARP responses are suppressed. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
GLBP group is set to 10.21.8.10. Device(config)# interface GigabitEthernet 1/0/1 Device(config-if)# ip address 10.21.8.32 255.255.255.0 Device(config-if)# glbp 10 ip 10.21.8.10 Related Commands Command Description show glbp Displays GLBP information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the host-dependent method of GLBP load balancing when you need each host to always use the same device. Use the weighted method of GLBP load balancing when you need unequal load balancing because devices in the GLBP group have different forwarding capacities. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows the host-dependent load-balancing method being configured for the AVG of the GLBP group 10: Device(config)# interface GigabitEthernet 1/0/1 Device(config-if)# glbp 10 ip 10.21.8.10 Device(config-if)# glbp 10 load-balancing host-dependent Related Commands Command Description show glbp Displays GLBP information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures an authentication string for the GLBP. glbp forwarder preempt Configures a device to take over as AVF for a GLBP group if it has higher priority than the current AVF. glbp ip Activates GLBP. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays GLBP information. track Configures an interface to be tracked where the GLBP weighting changes based on the state of the interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description glbp ip Enables GLBP. glbp preempt Configures a device to take over as the AVG for a GLBP group if it has higher priority than the current AVG. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If the redirect timer does not expire, then when a device fails, new hosts continue to be assigned to the failed device instead of being redirected to the backup. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the glbp weighting track and track commands to configure parameters for an interface to be tracked. If an interface on a device goes down, the weighting for the device can be reduced by a specified value. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-if)# glbp 10 weighting 110 lower 95 upper 105 Related Commands Command Description glbp weighting track Specifies an object to be tracked that affects the weighting of a GLBP gateway. track Configures an interface to be tracked. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When the tracked interface comes back up, the weighting is incremented by the same amount. When multiple tracked interfaces are down, the configured weighting decrements are cumulative. Use the track command to configure each interface to be tracked. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-if)# glbp 10 weighting track 2 decrement 5 Related Commands Command Description glbp weighting Specifies the initial weighting value of a GLBP gateway. Configures an interface to be tracked. track Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was modified. The client-idkeyword and interface-type numberargument were added. 12.2(3) This command was modified. The hostnamekeyword and hostnameargument were added. The behavior of the client-id interface-type numberoption changed. See the “Usage Guidelines” section for details. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
MAC address of the named interface as the client identifier. If a Cisco device is configured to obtain its IP address from a DHCP server, it sends a DHCPDISCOVER message to provide information about itself to the DHCP server on the network.
In the examples that follow, the command ip address dhcp is entered for Ethernet interface 1. The DISCOVER message sent by a device configured as shown in the following example would contain “cisco- mac-address -Eth1” in the client-ID field, and the value abc in the option 12 field.
GigabitEthernet 1/0/1 hostname def Related Commands Command Description ip dhcp pool Configures a DHCP address pool on a Cisco IOS DHCP server and enters DHCP pool configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
GigabitEthernet 1/0/1 ip address pool abc Related Commands Command Description Displays the usability status of interfaces configured show ip interface for IP. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
An interface can have one primary IP address and multiple secondary IP addresses. Packets generated by the Cisco IOS software always use the primary IP address. Therefore, all devices and access servers on a segment should share the same primary network number.
192.31.7.17 255.255.255.0 secondary Related Commands Command Description match ip route-source Specifies a source IP address to match to required route maps that have been set up based on VRF connected routes. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays the ARP cache, in which SLIP addresses appear as permanent ARP table entries. show ip interface Displays the usability status of interfaces configured for IP. show route-map Displays static and dynamic route maps. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
In Cisco IOS XE Denali 16.3.1, this command supports only IPv4; the ipv6-nbma-address argument Note although available on the switch, will not work if configured. Configure at least one static mapping to reach the next-hop server. To statistically configure multiple IP-to-NBMA address mappings, configure this command multiple times.
Cisco IOS XE Denali 16.3.1 This command was introduced. Usage Guidelines In Cisco IOS XE Denali 16.3.1, this command supports only IPv4; the ipv6-nbma-address argument Note although available on the switch, will not work if configured. This command applies only to tunnel interfaces. This command is useful for supporting broadcasts over a tunnel network when the underlying network does not support IP multicast.
Configures the spoke to learn the NHS protocol address dynamically. fallback seconds Specifies the duration, in seconds, for which the spoke must wait before falling back to an NHS of higher priority upon recovery. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Switch(config-if)# ip nhrp nhs 192.0.2.1 priority 1 cluster 2 Related Commands Command Description ip nhrp map Statically configures the IP-to-NBMA address mapping of IP destinations connected to an NBMA network. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Specifies the authentication string for a key. key-string (authentication) send-lifetime Sets the time period during which an authentication key on a key chain is valid to be sent. show key chain Displays authentication key information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Sets the time period during which an authentication send-lifetime key on a key chain is valid to be sent. show key chain Displays authentication key information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
12.2(33)SRB This command was integrated into Cisco IOS Release 12.2(33)SRB. 12.2SX This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Specifies the authentication string for a key. key-string (authentication) send-lifetime Sets the time period during which an authentication key on a key chain is valid to be sent. show key chain Displays authentication key information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Hello time 3 sec, hold time 10 sec Next hello sent in 0.608 secs Redirect time 600 sec, forwarder time-out 14400 sec Preemption disabled Active is local Standby is unknown Priority 100 (default) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• Speak--The virtual gateway is attempting to become the active or standby virtual gateway. • Standby--The gateway is next in line to be the AVG. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
AVG). Weighting The initial weighting value with lower and upper threshold values. Track object The list of objects that are being tracked and their corresponding states. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures the time between hello messages and the time before other devices declare the active GLBP device to be down. glbp weighting track Specifies an object to be tracked that affects the weighting of a GLBP gateway. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The table below lists the valid types, number ranges, and descriptions for the optional interfaceargument. The valid types can vary according to the platform and interfaces on the platform. Note Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Interface through which the target network is reached. Related Commands Command Description ip nhrp map Statically configures the IP-to-NBMA address mapping of IP destinations connected to an NBMA network. show ip nhrp Displays NHRP mapping information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE Everest 16.5.1a This command was introduced. Usage Guidelines This command provides a list of all open TCP/IP ports on the system including the ports opened using Cisco networking stack. Examples The following is sample output from the show ip ports all command:...
State of the connection. It can be listen, established or connected. PID/Program Name Process ID or name Related Commands Command Description show tcp brief all Displays information about TCP connection endpoints. show ip sockets Displays IP sockets information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description key-string Specifies the authentication string for a key. send-lifetime Sets the time period during which an authentication key on a key chain is valid to be sent. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command History Release Modification Cisco IOS XE Release 2.1 This command was integrated into Cisco IOS XE Release 2.1. XE 3.10S This command was modified. The output was enhanced to display IPv6 route information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays the resolution of tracked parameters. track interface Configures an interface to be tracked and enters tracking configuration mode. Tracks the state of an IP route and enters tracking track ip route configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
In the following example, TenGigabitEthernet interface 0/0/1 tracks whether GigabitEthernet interfaces 1/0/1 and 1/0/3 are up. If either of the GigabitEthernet interface goes down, the GLBP weighting is reduced by the Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description Specifies the initial weighting value of a GLBP glbp weighting gateway. glbp weighting track Specifies an object to be tracked that affects the weighting of a GLBP gateway. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to create a VRRPv3 group and enter VRRP configuration mode: Device(config-if)# vrrp 3 address-family ipv4 Related Commands Command Description timers advertise Sets the advertisement timer in milliseconds. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example enables VRRP. VRRP group 1 is described as Building A – Marketing and Administration. Device(config-if-vrrp)# description Building A - Marketing and Administration Related Commands Command Description vrrp Creates a VRRPv3 group and enters VRRPv3 group configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
200 is higher than that of the current master virtual router. If the device preempts the current master virtual router, it waits 15 seconds before issuing an advertisement claiming it is the master virtual router. Device(config-if-vrrp)#preempt delay minimum 15 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description vrrp Creates a VRRPv3 group and enters VRRPv3 group configuration mode. priority Sets the priority level of the device within a VRRP group. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures the device to take over as master virtual router for a VRRP group if it has higher priority than the current master virtual router. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
All routers in a VRRP group must use the same timer values. If the same timer values are not set, the devices in the VRRP group will not communicate with each other and any misconfigured device will change its state to master. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures the device, when it is acting as backup virtual router for a VRRP group, to learn the advertisement interval used by the master virtual router. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
VRRP configuration (config-if-vrrp) Command History Release Modification Cisco IOS XE Release 2.1 This command was integrated into Cisco IOS XE Release 2.1. Examples The following example specifies a leader's name to be registered with VRRS: Device(config-if-vrrp)# vrrs leader leader-1 Related Commands...
When you try to add new records, and the cache is full, the records in the cache that are close to expiring are deleted to provide space for the new records. Examples This example sets 20 percent of the system memory for cache: Device(config-mdns)# cache-memory-max 20 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# clear ip mfib global counters The following example shows how to clear the IP multicast forwarding information base cache for the all VPN routing and forwarding instances: Device# clear ip mfib vrf * counters Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
A source does not need to be a member of the group. Examples The following example shows how to delete all entries from the IP multicast routing table: Device# clear ip mroute * Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to delete all sources on the 228.3.0.0 subnet that are sending to the multicast group 224.2.205.42 from the IP multicast routing table. This example shows how to delete all sources on network 228.3, not individual sources: Device# clear ip mroute 224.2.205.42 228.3.0.0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
An IGMP profile can be applied to one or more device port interfaces, but one port can have only one profile applied to it. Examples You can verify your setting by using the show running-config privileged EXEC command and by specifying an interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
After these entries are aged out, when the maximum number of entries is in the forwarding table, the device drops the next IGMP report received on the interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
IGMP report was received when the maximum number of entries is in the forwarding table: Device(config)# interface gigabitethernet2/0/1 Device(config-if)# ip igmp max-groups action replace You can verify your setting by using the show running-config privileged EXEC command and by specifying an interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When entering a range, enter the low IP multicast address, a space, and the high IP multicast address. You can apply an IGMP profile to one or more Layer 2 interfaces, but each interface can have only one profile applied to it. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure IGMP profile 40 that permits the specified range of IP multicast addresses: Device(config)# ip igmp profile 40 Device(config-igmp-profile)# permit Device(config-igmp-profile)# range 233.1.1.1 233.255.255.255 You can verify your settings by using the show ip igmp profile privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to enable IGMP snooping on VLAN 1: Device(config)# ip igmp snooping vlan 1 You can verify your settings by entering the show ip igmp snooping privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
1 minute (with the default query interval). The leave latency in Cisco IOS software may increase by up to one last-member-query-interval (LMQI) value when the device is processing more than one leave within an LMQI. In this case, the average leave latency is...
150 milliseconds. This is done to limit the impact of higher rates of IGMP leave messages. Examples The following example sets the last member query count to 5: Device(config)# ip igmp snooping last-member-query-count 5 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The IGMP snooping querier feature is globally disabled on the device. When enabled, the IGMP snooping querier disables itself if it detects IGMP traffic from a multicast router. Command Modes Global configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to set the IGMP snooping querier feature to version 2: Device(config)# ip igmp snooping querier version 2 You can verify your settings by entering the show ip igmp snooping privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This example shows how to disable report suppression: Device(config)# no ip igmp snooping report-suppression You can verify your settings by entering the show ip igmp snooping privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure a port as a multicast router port: Device(config)# ip igmp snooping vlan 1 mrouter interface gigabitethernet1/0/2 You can verify your settings by entering the show ip igmp snooping privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines VLAN IDs 1002 to 1005 are reserved for Token Ring and FDDI VLANs and cannot be used in IGMP snooping. The configuration is saved in NVRAM. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# ip igmp snooping vlan 1 static 224.2.4.12 interface gigabitEthernet1/0/1 Configuring port gigabitethernet1/0/1 on group 224.2.4.12 You can verify your settings by entering the show ip igmp snooping privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
None This command is unavailable when using the LAN Base image. Examples This example shows how to enable authentication, authorization, and accounting (AAA) on IP multicast: Device(config)# ip multicast auto-enable Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
PIM registers from first hop routers or switches. Device(config)# ip pim accept-register list ssm-range Device(config)# ip access-list extended ssm-range Device(config-ext-nacl)# deny ip any 232.0.0.0 0.255.255.255 Device(config-ext-nacl)# permit ip any any Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command configures the switch to send BSR messages to all of its PIM neighbors, with the address of the designated interface as the BSR address. This command should be configured on backbone switches that have good connectivity to all parts of the PIM domain. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(unlike AutoRP); instead, each switch that receives BSR messages will elect RPs for group ranges based on the information in the BSR messages. Cisco switches always accept and process BSR messages. There is no command to disable this function. Cisco switches perform the following steps to determine which C-RP is used for a group: •...
If the optional group-list keyword and access-list-number argument are configured, the group prefixes defined by the standard IP access list will also be advertised in association with the RP address. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The standard access list number 4 specifies the group prefix associated with the RP that has the address identified by Gigabit Ethernet interface 1/0/1. Device(config)# ip pim rp-candidate GigabitEthernet1/0/1 group-list 4 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enter this command on the switch that you want to be an RP. When you are using Auto-RP to distribute group-to-RP mappings, this command causes the router to send an Auto-RP announcement message to the Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
CISCO-RP-ANNOUNCE (224.0.1.39). This message announces the router as a candidate RP for the groups in the range described by the access list. Examples The following example shows how to configure the switch to send RP announcements out all Protocol Independent Multicast (PIM)-enabled interfaces for a maximum of 31 hops.
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Usage Guidelines None Examples The following example makes all sources for access list 16 use the shared tree: Device(config)# ip pim spt-threshold infinity group-list 16 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The match command can be used only for the permit or deny option. Examples This example shows how to set the announcement message type to be matched: Device(config-mdns-sd-sl)# match message-type announcement Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The match command can be used only for the permit or deny option. Examples This example shows how to set the value of the mDNS service type string to match: Device(config-mdns-sd-sl)# match service-type _ipp._tcp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The match command can be used only for the permit or deny option. Examples This example shows how to set the service instance to match: Device(config-mdns-sd-sl)# match service-instance servInst 1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The mrinfo command is the original tool of the multicast backbone (MBONE) to determine which neighboring multicast routers or switches are peering with multicast routers or switches. Cisco routers have supported responding to mrinfo requests since Cisco IOS Release 10.2.
This example shows how to redistribute services or service announcements across subnets: Device(config-mdns)# redistribute mdns-sd Note If redistribution is enabled globally, global configuration is given higher priority than interface configuration. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
In this mode you can: • Create a service list and apply a filter on the service list according to the permit or deny option applied to the sequence number. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to create a service list and apply a filter on the service list according to the permit or deny option applied to the sequence number: Device(config)# service-list mdns-sd sl1 permit 3 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This example shows how to configure service list query periodicity: Device(config-mdns)# service-policy-query sl-query1 100 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Any interface specific configuration overrides the global configuration. Examples This example shows how to enable mDNS gateway functionality for a device and enter multicast DNS configuration mode: Device(config)# service-routing mdns-sd Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Examples This example applies a filter on incoming service discovery information on a service list: Device(config-mdns)# service-policy serv-pol1 IN Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The show ip igmp filter command displays information about all filters defined on the device. Examples The following is sample output from the show ip igmp filter command: Device# show ip igmp filter IGMP filter enabled Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows the output of the show ip igmp profile privileged EXEC command for all profiles configured on the device: Device# show ip igmp profile IGMP Profile 3 range 230.9.9.0 230.9.9.0 IGMP Profile 4 permit range 229.9.9.0 229.255.255.255 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show ip igmp snooping groups count command. It displays the total number of multicast groups on the device: Device# show ip igmp snooping groups count Total number of multicast groups: 2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
It shows the entries for the group with the specified IP address: Device# show ip igmp snooping groups vlan 104 224.1.4.2 Vlan Group Type Version Port List ------------------------------------------------------------- 224.1.4.2 igmp Gi2/0/1, Gi1/0/15 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show ip igmp snooping mrouter command. It shows how to display multicast router ports on the device: Device# show ip igmp snooping mrouter Vlan ports ---- ----- Gi2/0/1(dynamic) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
VLAN Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# show ip pim autorp AutoRP Information: AutoRP is enabled. RP Discovery packet MTU is 0. 224.0.1.40 is joined on GigabitEthernet1/0/1. PIM AutoRP Statistics: Sent/Received RP Announce: 0/0, RP Discovery: 0/0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This system is the Bootstrap Router (BSR) BSR address: 172.16.143.28 Uptime: 04:37:59, BSR Priority: 4, Hash mask length: 30 Next bootstrap message in 00:00:03 seconds Next Cand_RP_advertisement in 00:00:03 seconds. RP: 172.16.143.28(Ethernet0), Group acl: 6 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This system is the Bootstrap Router (BSR) BSR address: 172.16.143.28 Uptime: 04:37:59, BSR Priority: 4, Hash mask length: 30 Next bootstrap message in 00:00:03 seconds Next Cand_RP_advertisement in 00:00:03 seconds. RP: 172.16.143.28(Ethernet0), Group acl: 6 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
RP whenever a group-to-RP mapping is learned. The PIM Decap Tunnel interface is used by the RP to decapsulate PIM register messages. Note PIM tunnels will not appear in the running configuration. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
: PIM Decap : 70.70.70.1* Source: -R2# The asterisk (*) indicates that the router is the RP. The RP will always have a PIM Encap and Decap Note Tunnel interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show mdns requests command without any keywords: Device# show mdns requests MDNS Outstanding Requests ====================================================== Request name _airplay._tcp.local Request type Request class : -------------------------------------------------- Request name Request type Request class : Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show mdns statistics all command: Device# show mdns statistics all mDNS Statistics mDNS packets sent mDNS packets received mDNS packets dropped mDNS cache memory in use: 64224(bytes) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to apply a flow monitor to an interface: Device(config)# interface gigabitethernet 1/1/2 Device(config-if)# ip flow monitor FLOW-MONITOR-1 input Device(config-if)# ip flow monitor FLOW-MONITOR-2 output Device(config-if)# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Unconditionally enables PAgP. Enables the on mode. Enables LACP only if a LACP passive device is detected. Command Default No channel groups are assigned. No mode is configured. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
LACP can coexist on the same device or on different devices in the stack (but not in a cross-stack configuration). Individual EtherChannel groups can run either PAgP or LACP, but they cannot interoperate. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your settings by entering the show running-config privileged EXEC command. Related Commands Command Description Restricts the protocol used on a port to manage channeling. channel-protocol Accesses or creates a port channel. interface port-channel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description Displays EtherChannel information for a channel. show etherchannel Displays LACP channel-group information. show lacp Displays Port Aggregation Protocol (PAgP) channel-group show pagp information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to specify LACP as the protocol that manages the EtherChannel: Device(config-if)# channel-protocol lacp You can verify your settings by entering the show etherchannel [channel-group-number] protocol privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description Assigns an Ethernet port to an EtherChannel group, or enables an channel-group EtherChannel mode, or both. Displays EtherChannel information for a channel. show etherchannel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify that the information was deleted by entering the show lacp counters or the show lacp channel-group-number counters privileged EXEC command. Related Commands Command Description Displays LACP channel-group information. show lacp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify that the information was deleted by entering the show pagp privileged EXEC command. Related Commands Command Description Enables debugging of PAgP. debug pagp Displays Port Aggregation Protocol (PAgP) channel-group information. show pagp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to clear spanning-tree counters for all interfaces: Device# clear spanning-tree counters Related Commands Command Description Restarts the protocol migration process on the interface. clear spanning-tree detected-protocols Enables debugging of spanning-tree activities. debug spanning-tree Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the clear spanning-tree detected-protocols command in this situation. Examples This example shows how to restart the protocol migration process on a port: Device# clear spanning-tree detected-protocols interface gigabitethernet2/0/1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable debugging on the standby switch without first starting a session on the active switch, use the remote command switch-number LINE command in privileged EXEC mode. Examples This example shows how to display all EtherChannel debug messages: Device# debug etherchannel all Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display debug messages related to EtherChannel events: Device# debug etherchannel event Related Commands Command Description Displays EtherChannel information for a channel. show etherchannel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display all LACP debug messages: Device# debug LACP all This example shows how to display debug messages related to LACP events: Device# debug LACP event Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable debugging on the standby switch without first starting a session on the active switch, use the remote command switch-number LINE command in privileged EXEC mode. Examples This example shows how to display all PAgP debug messages: Device# debug pagp all Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display debug messages related to PAgP events: Device# debug pagp event Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
LINE command in privileged EXEC mode. Examples This example shows how to display debug messages related to the creation and deletion of VLANs: Device# debug platform pm vlans Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EXEC command. Then enter the debug command at the command-line prompt of the stack member. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display all spanning-tree debug messages: Device# debug spanning-tree all Related Commands Command Description Clears spanning-tree counters. clear spanning-tree counters Restarts the protocol migration process on the interface. clear spanning-tree detected-protocols Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Only one port channel in a channel group is allowed. Follow these guidelines when you use the interface port-channel command: • If you want to use the Cisco Discovery Protocol (CDP), you must configure it on the physical port and not on the port channel interface.
EXEC command. Related Commands Command Description Assigns an Ethernet port to an EtherChannel group, or enables an channel-group EtherChannel mode, or both. Displays EtherChannel information for a channel. show etherchannel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Specifies the minimum number of LACP ports that must be in the link-up port-channel min-links state and bundled in the EtherChannel in order for the port channel to become active. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the show lacp internal privileged EXEC command to display LACP port priorities and internal port number values. For information about configuring LACP on physical ports, see the configuration guide for this release. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Description Assigns an Ethernet port to an EtherChannel group, or enables an channel-group EtherChannel mode, or both. Configures the LACP system priority. lacp system-priority Displays LACP channel-group information. show lacp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Use this command to modify the duration of LACP timeout. The LACP timeout value on Cisco switch is three times the LACP rate configured on the interface. Using the lacp ratecommand, you can select the LACP timeout value for a switch to be either 90 seconds or 3 seconds.
(denoted with an H port-state flag in the output display). Examples This example shows how to set the LACP system priority: Device(config)# lacp system-priority 20000 You can verify your settings by entering the show lacp sys-id privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Assigns an Ethernet port to an EtherChannel group, or enables an channel-group EtherChannel mode, or both. Configures the port priority for the Link Aggregation Control Protocol lacp port-priority (LACP). Displays LACP channel-group information. show lacp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
MAC address by using the port-channel load-balance src-mac global configuration command. Use the pagp learn-method interface configuration command only in this situation. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EXEC command. Related Commands Command Description Selects a port over which all traffic through the EtherChannel is sent. pagp port-priority Displays Port Aggregation Protocol (PAgP) channel-group information. show pagp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to set the port priority to 200: Device(config-if)# pagp port-priority 200 You can verify your setting by entering the show running-config privileged EXEC command or the show pagp channel-group-number internal privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Provides the ability to learn the source address of incoming packets. pagp learn-method Sets the load-distribution method among the ports in the EtherChannel. port-channel load-balance Displays Port Aggregation Protocol (PAgP) channel-group information. show pagp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can use the show etherchannel summary privileged EXEC command to display the EtherChannel information. Examples This example shows how to convert the auto created EtherChannel into a manual channel: Device# port-channel 1 persistent Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can use the show etherchannel auto privileged EXEC command to verify if the EtherChannel was created automatically. Examples This example shows how to enable the auto-LAG feature on the switch: Device(config)# port-channel auto Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Specifies load distribution based on the source host IP address and TCP/UDP (Layer 4) port number. src-port Specifies load distribution based on the TCP/UDP (Layer 4) port number. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your setting by entering the show running-config privileged EXEC command or the show etherchannel load-balance privileged EXEC command. Examples This example shows how to set the load-distribution method to dst-mac: Device(config)# port-channel load-balance dst-mac Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Specifies load distribution based on the TCP/UDP (Layer 4) port number. Command Default The default is src-mac. Command Modes Global configuration Command History Release Modification Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your setting by entering the show running-config privileged EXEC command or the show etherchannel load-balance privileged EXEC command. Examples This example shows how to set the extended load-distribution method: Device(config)# port-channel load-balance extended dst-ip dst-mac src-ip Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(denoted with an H port-state flag in the output display). Examples This example shows how to specify a minimum of three active LACP ports before port channel 2 becomes active: Device(config)# interface port-channel 2 Device(config-if)# port-channel min-links 3 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description Specifies the maximum number of LACP ports allowed in a port lacp max-bundle channel. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your settings by entering the show interfaces rep detail privileged EXEC command. Examples The following example shows how to configure VLAN 100 as the REP administrative VLAN: Device(config)# rep admin vlan 100 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Modes Interface configuration (config-if) Command History Release Modification Cisco IOS XE Denali 16.2.2 This command was introduced Usage Guidelines You must enter this command on the REP primary edge port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example shows how to configure a REP preemption time delay of 100 seconds on the primary edge port. Device(config)# interface TenGigabitEthernet 4/1 rep preempt delay 100 Device(config-if)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
REP primary edge port before you manually start preemption. Examples The following example shows how to manually trigger REP preemption on segment 100. rep preempt segment 100 Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• If only one port on a router is configured in a segment, the port should be an edge port. • If two ports on a router belong to the same segment, both ports must be regular segment ports. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EXEC command. Examples The following example shows how to configure a REP edge port to send STCNs to segments 25 to 50. Device(config)# interface TenGigabitEthernet 4/1 rep stcn segment 25-50 Device(config-if)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show etherchannel auto command: device# show etherchannel auto Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
R - Layer3 S - Layer2 u - unsuitable for bundling U - in use f - failed to allocate aggregator d - default port Number of channel-groups in use: 1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Assigns an Ethernet port to an EtherChannel group, or enables an channel-group EtherChannel mode, or both. Restricts the protocol used on a port to manage channeling. channel-protocol Accesses or creates a port channel. interface port-channel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show lacp counters user EXEC command. The table that follows describes the fields in the display. Device> show lacp counters LACPDUs Marker Marker Response LACPDUs Port Sent Recv Sent Recv Sent Recv Pkts --------------------------------------------------------------------- Channel group:1 Gi2/0/1 Gi2/0/2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Channel group 1 LACP port Admin Oper Port Port Port Flags State Priority Number State Gi2/0/1 bndl 32768 0x3D Gi2/0/2 bndl 32768 0x3D The following table describes the fields in the display: Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Oper Key Runtime operational key that is being used by this port. LACP automatically generates this value as a hexadecimal number. Port Number Port number. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The system identification is made up of the system priority and the system MAC address. The first two bytes are the system priority, and the last six bytes are the globally administered individual MAC address associated to the system. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description Clears the LACP channel-group information. clear lacp Configures the port priority for the Link Aggregation Control Protocol lacp port-priority (LACP). Configures the LACP system priority. lacp system-priority Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Channel group: 1 Gi1/0/1 Gi1/0/2 This is an example of output from the show pagp dual-active command: Device> show pagp dual-active PAgP dual-active detection enabled: Yes PAgP dual-active version: 1.1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use this command only when you are working directly with a technical support representative while troubleshooting a problem. Do not use this command unless a technical support representative asks you to do so. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use this command only when you are working directly with your technical support representative while troubleshooting a problem. Do not use this command unless your technical support representative asks you to do so. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The range is from 1 to 4095. interface-id (Optional) ID of the interface and port number. Valid interfaces include physical ports, VLANs, and port channels. neighbors (Optional) Displays neighbor information only. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Otherwise, the enable operational setting depends on the global enable setting. Port enable operational state Operational state that shows whether UDLD is actually running on this port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Neighbor echo 1 port The port number ID of the neighbor from which the echo originated. Message interval The rate, in seconds, at which the neighbor is sending advertisement messages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables UDLD on an individual interface or prevents a fiber-optic interface from udld port being enabled by the udld global configuration command. Resets all interfaces shut down by UDLD and permits traffic to pass through again. udld reset Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Layer 2 port. Then you can enter the switchport access vlan and switchport mode commands. The switchport command is not used on platforms that do not support Cisco-routed ports. All physical ports on such platforms are assumed to be Layer 2-switched interfaces.
Examples This example shows how to cause an interface to cease operating as a Layer 2 port and become a Cisco-routed port: Device(config-if)# no switchport This example shows how to cause the port interface to cease operating as a Cisco-routed port and convert to...
VLAN (using the name) on an interface, in the access mode: You can also verify your configuration by entering the show interfaces interface-id switchport in privileged EXEC command and examining information in the Access Mode VLAN: row. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
A configuration that uses the access,or trunk keywords takes effect only when you configure the port in the appropriate mode by using the switchport mode command. The static-access and trunk configuration are saved, but only one configuration is active at a time. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how set the port to dynamic desirable mode: Device(config)# interface gigabitethernet2/0/1 Device(config-if)# switchport mode dynamic desirable This example shows how to configure a port for trunk mode: Device(config)# interface gigabitethernet2/0/1 Device(config-if)# switchport mode trunk Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description Configures a port as a static-access port. switchport access vlan Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to cause a port to refrain from negotiating trunking mode and to act as a trunk or access port (depending on the mode set): Device(config)# interface gigabitethernet2/0/1 Device(config-if)# switchport nonegotiate Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your setting by entering the show interfaces interface-id switchport privileged EXEC command. Related Commands Command Description Configures the VLAN membership mode of a port. switchport mode Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You should configure voice VLAN on Layer 2 access ports. You must enable Cisco Discovery Protocol (CDP) on the switch port connected to the Cisco IP phone for the device to send configuration information to the phone. CDP is enabled by default globally and on the interface.
When you enable port security on an interface that is also configured with a voice VLAN, set the maximum allowed secure addresses on the port to 2. When the port is connected to a Cisco IP phone, the IP phone requires one MAC address.
Sets a port priority for the incoming untagged frames or the priority of switchport priority extend frames received by the IP phone connected to the specified port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
UDLD on other interface types. You can use these commands to reset an interface shut down by UDLD: • The udld reset privileged EXEC command to reset all interfaces shut down by UDLD. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables UDLD on an individual interface or prevents a fiber-optic interface from udld port being enabled by the udld global configuration command. Resets all interfaces shut down by UDLD and permits traffic to pass through udld reset again. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
UDLD enabling to the udld global configuration command or to disable UDLD on nonfiber-optic ports. You can use these commands to reset an interface shut down by UDLD: • The udld reset privileged EXEC command resets all interfaces shut down by UDLD. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables aggressive or normal mode in UDLD or sets the configurable message udld timer time. Resets all interfaces shut down by UDLD and permits traffic to pass through udld reset again. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables aggressive or normal mode in UDLD or sets the configurable message udld timer time. Enables UDLD on an individual interface or prevents a fiber-optic interface from udld port being enabled by the udld global configuration command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables MPLS forwarding of IPv4 packets along normally routed paths for the platform. mpls ip (interface configuration) Enables MPLS forwarding of IPv4 packets along normally routed paths for a particular interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Switch(config)# no mpls ip Related Commands Command Description mpls ip (interface configuration) Enables MPLS forwarding of IPv4 and IPv6 packets along normally routed paths for the associated interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable label switching on the specified Ethernet interface: Switch(config)# configure terminal Switch(config-if)# interface TenGigabitEthernet1/0/3 Switch(config-if)# mpls ip The following example shows that label switching is enabled on the specified vlan interface (SVI) on a Cisco Catalyst switch: Switch(config)# configure terminal Switch(config-if)# interface vlan 1 Switch(config-if)# mpls ip Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If neither the global mpls label protocol ldp command nor the interface mpls label protocol ldp command is used, all label distribution sessions use LDP. Examples The following command establishes LDP as the label distribution protocol for the platform: Switch(config)# mpls label protocol ldp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
LSRs, all of the link interfaces connecting the two LSRs must be configured to use the same protocol. Examples The following example shows how to establish LDP as the label distribution protocol for the interface: Switch(config-if)# mpls label protocol ldp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If you enter a 0 in the command, you will get a message that indicates that the command is an unrecognized command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Range for static labels: Min/Max/Number: 16/99 The following example shows how to restore the label range to its default value: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Switch(config)# no mpls label range Switch(config)# end Related Commands Command Description show mpls label range Displays the range of the MPLS local label space. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Switch(config)# exit Switch# show mpls label range Downstream label pool: Min/Max label: 101/4000 Related Commands Command Description Configures a range of values for use as local labels. mpls label range Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE Denali 16.3.2 This command was introduced. Usage Guidelines When IP multicast routing is disabled, the Cisco IOS software does not forward any multicast packets. Note For IP multicast, after enabling IP multicast routing, PIM must be configured on all interfaces. Disabling IP multicast routing does not remove PIM;...
The following example shows how to enable MDS in Cisco IOS XE Release 3.3S a specific VRF: Switch(config)# ip multicast-routing vrf vrf1 Related Commands Command Description Enables PIM on an interface. ip pim Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to filter mrinfo request packets from all hosts on network 192.168.1.1 while allowing requests from any other hosts: ip multicast mrinfo-filter 51 access-list 51 deny 192.168.1.1 access list 51 permit any Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description Queries a multicast device about which neighboring mrinfo multicast devices are peering with it. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
500 kb/s has been set, which means that if a multicast stream exceeds 1 kb/s, then a data MDT is created. ip vrf vrf1 rd 1000:1 route-target export 10:27 route-target import 10:27 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
MDT groups are configured within the SSM range of IP addresses. Inside the VPN, PIM sparse mode (PIM-SM) is configured and only Auto-RP announcements are accepted. ip vrf vrf1 rd 1000:1 mdt default 236.1.1.1 mdt data 228.0.0.0 0.0.0.127 threshold 50 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
50 route-target export 1000:1 route-target import 1000:1 Related Commands Command Description mdt data Configures the multicast group address range for data MDT groups. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable MDT log reuse: mdt log-reuse Related Commands Command Description mdt data Configures the multicast group address range for data MDT groups. Configures a default MDT group for a VPN VRF. mdt default Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The MDT default groups that have been advertised to this router. rid:10.1.1.1 The BGP router ID of the advertising router. next_hop:10.1.1.1 The BGP next hop address that was contained in the advertisement. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The table below describes the significant fields shown in the display. Table 20: show ip pim mdt history Field Descriptions Field Description MDT-data group The MDT data group for which information is being shown. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Field Description Number of reuse The number of data MDTs that have been reused in this group. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Table 21: show ip pim mdt receive Field Descriptions Field Description group:172.16.8.0 Group that caused the data MDT to be built. source:10.0.0.100 VRF source that caused the data MDT to be built. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• s--Source Specific Multicast (SSM) group • T--SPT bit set • X--proxy join timer running • U--URL Rendezvous Directory (URD) • Y--joined MDT data group • y--sending to MDT data group • Z--multicast tunnel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Table 22: show ip pim mdt send Field Descriptions Field Description source, group Source and group addresses that this router has switched over to data MDTs. MDT-data group Multicast address over which these data MDTs are being sent. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Field Description ref_count Number of (S, G) pairs that are reusing this data MDT. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# cache timeout active 4800 The following example shows how to configure the inactive timer for the flow monitor cache: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# cache timeout inactive 30 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to configure the permanent cache update timeout: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# cache timeout update 5000 The following example shows how to configure a normal cache: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# cache type normal Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example clears the statistics for all of the flow exporters configured on the device: Device# clear flow exporter statistics The following example clears the statistics for the flow exporter named FLOW-EXPORTER-1: Device# clear flow exporter FLOW-EXPORTER-1 statistics Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can view the flow monitor statistics by using the show flow monitor statistics privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example clears the cache for the flow monitor named FLOW-MONITOR-1 and forces an export: Device# clear flow monitor name FLOW-MONITOR-1 cache force-export The following example clears the statistics for the flow monitor named FLOW-MONITOR-1: Device# clear flow monitor name FLOW-MONITOR-1 statistics Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
In most cases the values for non-key fields are taken from only the first packet in the flow. Note Although it is visible in the command-line help string, the flow username keyword is not supported. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the total number of bytes in the flows as a non-key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect counter bytes long Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)#collect counter bytes long The following example configures the total number of packets from the flows as a non-key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect counter packets long Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the output interface as a non-key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect interface output The following example configures the input interface as a non-key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect interface input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures time stamps based on the absolute time of the last seen packet in a flow as a non-key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect timestamp absolute last Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no collect collect transport tcp flags or default collect collect transport tcp flags flow record configuration command. Examples The following example collects the TCP flags from a flow: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# collect transport tcp flags Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To monitor IPv6 traffic, use the ipv6 flow monitor command. Examples This example shows how to enable Flexible NetFlow datalink monitoring on an interface: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# datalink flow monitor FLOW-MONITOR-1 sampler FLOW-SAMPLER-1 input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example indicates that a flow exporter packet has been queued for process send: Device# debug flow exporter May 21 21:29:12.603: FLOW EXP: Packet queued for process send Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Examples The following example shows that the cache for FLOW-MONITOR-1 was deleted: Device# debug flow monitor FLOW-MONITOR-1 cache May 21 21:53:02.839: FLOW MON: 'FLOW-MONITOR-1' deleted cache Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Modes Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Examples The following example enables debugging for the flow record: Device# debug flow record FLOW-record-1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following sample output shows that the debug process has obtained the ID for the sampler named SAMPLER-1: Device# debug sampler detailed *May 28 04:14:30.883: Sampler: Sampler(SAMPLER-1: flow monitor FLOW-MONITOR-1 (ip,Et1/0,O) get ID succeeded:1 *May 28 04:14:30.971: Sampler: Sampler(SAMPLER-1: flow monitor FLOW-MONITOR-1 (ip,Et0/0,I) get ID succeeded:1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default setting, use the no description or default description command in the appropriate configuration mode. Examples The following example configures a description for a flow monitor: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# description Monitors traffic to 172.16.0.1 255.255.0.0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example shows how to configure the networking device to export the Flexible NetFlow cache entry to a destination system: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# destination 10.0.0.4 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to configure the networking device to export the Flexible NetFlow cache entry to a destination system using a VRF named VRF-1: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# destination 172.16.0.2 vrf VRF-1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default setting, use the no dscp or default dscp flow exporter configuration command. Examples The following example sets 22 as the value of the DSCP field in exported datagrams: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# dscp 22 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The device does not support NetFlow v5 export format, only NetFlow v9 export format is supported. Examples The following example configures NetFlow Version 9 export as the export protocol for a NetFlow exporter: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# export-protocol netflow-v9 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no exporter or default exporter flow monitor configuration command. Examples The following example configures an exporter for a flow monitor: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# exporter EXPORTER-1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can create one flow exporter and apply it to several flow monitors. Examples The following example creates a flow exporter named FLOW-EXPORTER-1 and enters Flexible NetFlow flow exporter configuration mode: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can configure 64-bit packet or byte counters. Examples The following example creates a flow record named FLOW-RECORD-1, and enters Flexible NetFlow flow record configuration mode: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The statistics for each flow must be scaled to give the expected true usage. For example, with a 1 in 100 Note sampler it is expected that the packet and byte counters will have to be multiplied by 100. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to remove a flow monitor from an interface so that it can be enabled with the sampler: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# no ip flow monitor FLOW-MONITOR-1 input Device(config-if)# ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-2 input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The statistics for each flow must be scaled to give the expected true usage. For example, with a 1 in 100 Note sampler it is expected that the packet and byte counters will have to be multiplied by 100. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to remove a flow monitor from an interface so that it can be enabled with the sampler: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# no ipv6 flow monitor FLOW-MONITOR-1 input Device(config-if)# ipv6 flow monitor FLOW-MONITOR-1 sampler SAMPLER-2 input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the 802.1Q priority as a key field for a flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match datalink dot1q priority Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the 802.1Q VLAN ID of traffic being received by the as a key field for a flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match datalink dot1q vlan input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the EtherType of the packet as a key field for a Flexible NetFlow flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match datalink ethertype Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When a datalink flow monitor is assigned to an interface or VLAN record, it creates flows only for non-IPv6 Note or non-IPv4 traffic. To return this command to its default settings, use the no match datalink mac or default match datalink mac flow record configuration command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the use of the destination MAC address of packets that are received by the device as a key field for a flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match datalink mac destination address input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the VLAN ID of traffic being received by the device as a key field for a flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match datalink vlan input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The key fields are defined using the match command. Examples The following example configures the source group-tag as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match flow cts source group-tag Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the direction the flow was monitored in as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match flow direction Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the input interface as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match interface input The following example configures the output interface as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match interface output Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The key fields are defined using the match command. Examples The following example configures the IPv4 protocol as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv4 protocol Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the IPv4 destination address as a key field for a flow record: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv4 destination address Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no match ipv4 source address or default match ipv4 source address flow record configuration command. Examples The following example configures the IPv4 source address as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv4 source address Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The key fields are defined using the match ipv4 ttl command. Examples The following example configures IPv4 TTL as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv4 ttl Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The key fields are defined using the match command. Examples The following example configures the IPv6 protocol field as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv6 protocol Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no match ipv6 destination address or default match ipv6 destination address flow record configuration command. Examples The following example configures the IPv6 destination address as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv6 destination address Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The key fields are defined using the match command. Examples The following example configures the hop limit of the packets in the flow as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv6 hop-limit Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no match ipv6 source address or default match ipv6 source address flow record configuration command. Examples The following example configures a IPv6 source address as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match ipv6 source address Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example configures the destination port as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport destination-port The following example configures the source port as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport source-port Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport icmp ipv4 code The following example configures the IPv4 ICMP type field as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport icmp ipv4 type Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport icmp ipv6 code The following example configures the IPv6 ICMP type field as a key field: Device(config)# flow record FLOW-RECORD-1 Device(config-flow-record)# match transport icmp ipv6 type Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The deterministic keyword is not supported, even though it is visible in the command-line help string. Note Examples The following example enables random sampling with a window size of 1000: Device(config)# sampler SAMPLER-1 Device(config-sampler)# mode random 1 out-of 1000 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The optional timeout can alter the frequency at which the reports are sent. To return this command to its default settings, use the no option or default option flow exporter configuration command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable the periodic sending of an options table, which allows the collector to map the interface SNMP indexes provided in the flow records to interface names: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# option interface-table Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example configures the flow monitor to use FLOW-RECORD-1: Device(config)# flow monitor FLOW-MONITOR-1 Device(config-flow-monitor)# record FLOW-RECORD-1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example creates a flow sampler name SAMPLER-1: Device(config)# sampler SAMPLER-1 Device(config-sampler)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example displays the status and statistics for all of the flow exporters configured on a device: Device# show flow exporter Flow Exporter FLOW-EXPORTER-1: Description: Exports to the datacenter Export protocol: NetFlow Version 9 Transport Configuration: Destination IP address: 192.168.0.1 Source IP address: 192.168.0.2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example displays the status and statistics for all of the flow exporters configured on a device: Device# show flow exporter name FLOW-EXPORTER-1 statistics Flow Exporter FLOW-EXPORTER-1: Packet send statistics (last cleared 2w6d ago): Successfully sent: (0 bytes) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Table 24: show flow interface Field Descriptions Field Description Interface The interface to which the information applies. monitor The name of the flow monitor that is configured on the interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The possible values are: • on—The flow monitor is in normal mode. • sampler—The flow monitor is in sampler mode (the name of the sampler will be included in the display). Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Displays the statistics for the flow monitor. Command Modes Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines The cache keyword uses the record format by default. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Status Status of the flow monitor cache. The possible values are: • allocated—The cache is allocated. • being deleted—The cache is being deleted. • not allocated—The cache is not allocated. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Flows expired from the cache since the cache was created. Active timeout Current value for the active timeout in seconds. Inactive timeout Current value for the inactive timeout in seconds. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example displays the status, statistics, and data for the flow monitor named FLOW-MONITOR-IPv6 (the cache contains IPv6 data) in record format: Device# show flow monitor name FLOW-MONITOR-IPv6 cache format record Cache type: Normal (Platform cache) Cache size: Unknown Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example displays the status and statistics for a flow monitor: Device# show flow monitor FLOW-MONITOR-1 statistics Cache type: Normal (Platform cache) Cache size: Unknown Current entries: Flows added: Flows aged: - Active timeout 300 secs) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# show flow record FLOW-RECORD-1 flow record FLOW-RECORD-1: Description: User defined No. of users: Total field space: 24 bytes Fields: match ipv6 destination address match transport source-port collect interface input Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Requests field in this table. Requests Number of times the flow sampler was queried to determine if the traffic needed to be sampled. Users Interfaces on which the flow sampler is configured. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• If your device has multiple interfaces that can be used to transmit datagrams to the destination system, and you do not configure the source command, you will have to add an entry for the IP address of each Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example shows how to configure Flexible NetFlow to use a loopback interface as the source interface for NetFlow traffic: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# source loopback 0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no template data timeout or default template data timeout flow record exporter command. Examples The following example configures resending templates based on a timeout of 1000 seconds: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# template data timeout 1000 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no transport or default transport flow exporter configuration command. Examples The following example configures UDP as the transport protocol and a UDP port number of 250: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# transport udp 250 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To return this command to its default settings, use the no ttl or default ttl flow exporter configuration command. Examples The following example specifies a TTL of 15: Device(config)# flow exporter FLOW-EXPORTER-1 Device(config-flow-exporter)# ttl 15 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to describe an ERSPAN source session: Switch(config)# monitor session 2 type erspan-source Switch(config-mon-erspan-src)# description source1 Related Commands Command Description monitor session type erspan-source Configures a local ERSPAN source session. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following sample output from the show monitor session all displays different IP addresses for source session destinations: Switch# show monitor session all Session 1 --------- Type : ERSPAN Source Session Status : Admin Disabled Description : session1 Destination IP Address : 10.1.1.1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures TTL values for packets in the ERSPAN traffic. Configures a local ERSPAN source session. monitor session type erspan-source origin Configures an IP address used as the source of the ERSPAN traffic. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
ERSPAN monitor source session configuration mode (config-mon-erspan-src) Command History Release Modification Cisco IOS XE Denali 16.3.1 This command was introduced. Usage Guidelines You cannot include source VLANs and filter VLANs in the same session. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to configure source VLAN filtering: Switch(config)# monitor session 2 type erspan-source Switch(config-mon-erspan-src)# filter vlan 3 Related Commands Command Description monitor session type erspan-source Configures a local ERSPAN source session. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Default WCCP services are not enabled on the device. Command Modes Global configuration Command History Release Modification Cisco IOS XE 3.3SECisco IOS XE This command was introduced. 3.3SE Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To work around this situation, configure WCCP transparent caching in the outgoing direction, enable Cisco Express Forwarding switching on the content engine interface, and specify the ip wccp web-cache redirect out command. Configure WCCP in the incoming direction on the inside interface by specifying the ip wccp redirect exclude in command on the router interface facing the cache.
Packets captured in the output direction of an interface might not reflect the changes made by switch rewrite (includes TTL, VLAN tag, CoS, checksum, MAC addresses, DSCP, precedent, UP, etc.). Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If you have more than one capture that is storing packets in a buffer, clear the buffer before starting a new capture to avoid memory loss. Examples To clear the buffer contents for capture mycap: Device# monitor capture mycap clear Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Attempts to store packet captures on unsupported devices or devices not connected to the active switch will probably result in errors. Examples To export the capture buffer contents to mycap.pcap on a flash drive: Device# monitor capture mycap export flash:mycap.pcap Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Example: flash1 is connected to the active switch. flash2 is connected to the secondary switch. Only flash1 can be used to store packet captures. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Examples To configure a session limit of 60 seconds and a packet segment length of 400 bytes: Device# monitor capture mycap limit duration 60 packet-len 400 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To define a capture point and the core filter for the capture point that matches to any IP version 4 packets on the source or destination: Device# monitor capture mycap interface GigabitEthernet1/0/1 in Device# monitor capture mycap match ipv4 any any Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To stop the capture of packet data, use the monitor capture stop command. Ensure that system resources such as CPU and memory are available before starting a capture. Examples To start capturing buffer contents: Device# monitor capture mycap start Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When the circular buffer is full, data capture starts from the beginning and the data is overwritten. Examples To stop capturing buffer contents: monitor capture mycap stop Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures a FSPAN or FRSPAN session filter. monitor session filter Configures a FSPAN or FRSPAN source session. monitor session source Displays information about all SPAN and RSPAN sessions. show monitor Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To start a new Switched Port Analyzer (SPAN) session or Remote SPAN (RSPAN) destination session, to enable ingress traffic on the destination port for a network security device (such as a Cisco IDS Sensor Appliance), and to add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, use the monitor session destination global configuration command.
VLANs become source ports for the SPAN or RSPAN session. Trunk ports are included as source ports for VSPAN, and only packets with the monitored VLAN ID are sent to the destination port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# monitor session 1 destination interface gigabitethernet1/0/2 This example shows how to delete a destination port from an existing local SPAN session: Device(config)# no monitor session 2 destination interface gigabitethernet1/0/2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures a FSPAN or FRSPAN session filter. monitor session filter Configures a FSPAN or FRSPAN source session. monitor session source Displays information about all SPAN and RSPAN sessions. show monitor Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
VLAN monitoring and VLAN filtering are mutually exclusive. If a VLAN is a source, VLAN filtering cannot be enabled. If VLAN filtering is configured, a VLAN cannot become a source. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures a FSPAN or FRSPAN destination session. monitor session destination Configures a FSPAN or FRSPAN source session. monitor session source Displays information about all SPAN and RSPAN sessions. show monitor Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
On a source interface, the default is to monitor both received and transmitted traffic. On a trunk interface used as a source port, all VLANs are monitored. Command Modes Global configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures a FSPAN or FRSPAN destination session. monitor session destination Configures a FSPAN or FRSPAN session filter. monitor session filter Displays information about all SPAN and RSPAN sessions. show monitor Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
ERSPAN source sessions. The maximum local ERSPAN source session limit is 8. Examples The following example shows how to configure an ERSPAN source session number: Switch(config)# monitor session 55 type erspan-source Switch(config-mon-erspan-src)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Creates an ERSPAN source session number or enters the ERSPAN session configuration mode for the session. show capability feature monitor Displays information about monitor features. show monitor session Displays information about the ERSPAN, SPAN, and RSPAN sessions. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To display current or aggregated operational status and statistics of all Cisco IOS IP Service Level Agreement (SLA) operations or a specified operation, use the show ip sla statistics command in user EXEC or privileged EXEC mode.
Switch# show capability feature monitor erspan-destination ERSPAN Destination Session Supported: false Related Commands Command Description monitor session type erspan-source Creates an ERSPAN source session number or enters the ERSPAN session configuration mode for the session. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS This command was introduced. XE 3.3SE Usage Guidelines The output is the same for the show monitor command and the show monitor session all command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To display the capture for a capture called mycap: Device# show monitor capture mycap Status Information for Capture mycap Target Type: Interface: CAPWAP, Ingress: Egress: Status : Active Filter Details: Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
* Service group id:0 type: Well-known token:126 vrf:0 (ref count:1) Open service prot: PROT_TCP l4_type: Dest ports priority: 240 port[0]: 80 Related Commands Command Description enables web cache service ip wccp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Release Modification Cisco IOS XE Denali 16.1.1 This command was introduced in a release prior to Cisco IOS XE Denali 16.1.1. Usage Guidelines If the session number does not exist or if the SPAN session is a remote destination session, the command output will display the following message "% Error: No Information Available."...
The following is sample output from the show platform software swspan RP active destination command: Switch# show platform software swspan RP active destination Showing SPAN destination table summary info Sess-id IF-type IF-id Sess-type -------------------------------------- 1 PORT 19 Remote Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to send bridge new root traps to the NMS: Device(config)# snmp-server enable traps bridge newroot Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate data-collection-MIB collection traps: Device(config)# snmp-server enable traps bulkstat collection Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable SNMP CISCO-CALLHOME-MIB traps, use the snmp-server enable traps call-home command in global configuration mode. Use the no form of this command to return to the default setting. snmp-server enable traps call-home [message-send-fail | server-fail]...
To enable SNMP Cisco Express Forwarding (CEF) traps, use the snmp-server enable traps cef command in global configuration mode. Use the no form of this command to return to the default setting.
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate CPU threshold notifications: Device(config)# snmp-server enable traps cpu threshold Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate fan traps: Device(config)# snmp-server enable traps envmon fan Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to set the number SNMP notifications of error-disabling to 2: Device(config)# snmp-server enable traps errdisable notification-rate 2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate SNMP flash insertion notifications: Device(config)# snmp-server enable traps flash insertion Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate IS-IS error traps: Device(config)# snmp-server enable traps isis errors Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate license deployment traps: Device(config)# snmp-server enable traps license deploy Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate SNMP MAC notification change traps: Device(config)# snmp-server enable traps mac-notification change Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to enable LSA traps: Device(config)# snmp-server enable traps ospf lsa Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to enable invalid PIM message traps: Device(config)# snmp-server enable traps pim invalid-pim-message Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to enable port-security traps at a rate of 200 per second: Device(config)# snmp-server enable traps port-security trap-rate 200 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to enable power-over-Ethernet traps for group 1: Device(config)# snmp-server enable traps poower-over-ethernet group 1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to enable a warmstart SNMP trap: Device(config)# snmp-server enable traps snmp warmstart Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate StackWise stack power GLS traps: Device(config)# snmp-server enable traps stackwise GLS Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to set the SNMP storm-control trap rate to 10 traps per minute: Device(config)# snmp-server enable traps storm-control trap-rate 10 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate SNMP STPX MIB inconsistency update traps: Device(config)# snmp-server enable traps stpx inconsistency Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to set all SNMP transceiver traps: Device(config)# snmp-server enable traps transceiver all Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate vrfmib trunk down traps: Device(config)# snmp-server enable traps vrfmib vnet-trunk-down Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To enable more than one type of trap, you must enter a separate snmp-server enable traps command for each trap type. Examples This example shows how to generate SNMP Smart Install client-added traps: Device(config)# snmp-server enable traps vstack addition Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Usage Guidelines None Examples The following example configures a local engine ID of 123400000000000000000000: Device(config)# snmp-server engineID local 1234 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The @ symbol is used for delimiting the context information. Avoid using the @ Note symbol as part of the SNMP community string when configuring this command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If no version keyword is present, the default is Version 1. If Version 3 is selected and no authentication keyword is entered, the default is the noauth (noAuthNoPriv) security level. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure a unique SNMP community string named comaccess for traps and prevent SNMP polling access with this string through access-list 10: Device(config)# snmp-server community comaccess ro 10 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# snmp-server enable traps Device(config)# snmp-server host myhost.cisco.com comaccess snmp This example shows how to enable the device to send all traps to the host myhost.cisco.com by using the community string public: Device(config)# snmp-server enable traps Device(config)# snmp-server host myhost.cisco.com public...
You cannot include source VLANs and filter VLANs in the same session. Examples The following example shows how to configure ERSPAN source session properties: Switch(config)# monitor session 2 type erspan-source Switch(config-mon-erspan-src)# source interface fastethernet 0/1 rx Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Modes Template configuration Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Examples This example shows how to set a single-VLAN interface Device(config-template)# switchport mode access Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Modification Cisco IOS XE 3.3SE This command was introduced. Examples This example shows how to specify to forward all voice traffic through the specified VLAN. Device(config-template)# switchport voice vlan 20 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to configure an iPXE boot timeout for switch 2: Device(config)# boot ipxe timeout 240 switch 2 Command Description Modifies the default boot system parameters. default boot Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
ROMMON variable. Examples The following example shows how to configure manual boot for switch 2: Device(config)# boot manual switch 2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to boot an image file from an IPv4 HTTP server: Device(config)# boot system switch 1 http://192.0.2.42/image-filename Examples The following example shows how to boot an image file from an IPv6 HTTP server: Device(config)# boot system switch 1 http://[2001:db8::1]/image-filename Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If the forever keyword is configured, the switch sends Dynamic Host Configuration Protocol (DHCP) requests forever. If the timeout keyword is configured, DHCP requests are sent for the specified amount of time, and when the timeout expires, the switch reverts to device boot. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example shows how to enable the default boot mode: Device(config)# default boot ipxe Related Commands Command Description boot ipxe Configures iPXE boot. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
It also adds an entry in the package file, so that the status can be monitored and maintained. {http: | https: | rcp: | scp: | tftp:} Specifies the package to be added. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This package contain a minimal set of files for patching the release along with some metadata that describes the contents of the package. Packages msut be added prior to activating the SMU. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The running configuration has been synchronized to the NETCONF running data store. Related Commands Command Description show install Displays information about install packages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the show commands to view the status of the install package. Examples The following is sample output from the show install package command: Device# show install package bootflash:isr4300-universalk9.16.05.01.CSCxxxxxxx.dmp.bin Name: isr4300-universalk9.16.05.01.CSCxxxxxxx.dmp.bin Version: 16.5.1.0.199.1484082952..Everest Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
[4|install_add]: START Sun Feb 26 05:57:04 UTC 2017 [4|install_add]: END SUCCESS /bootflash/isr4300-universalk9.16.05.01.CSCxxxxxxx.dmp.bin Sun Feb 26 05:57:22 UTC 2017 [5|install_activate]: START Sun Feb 26 05:58:41 UTC 2017 Device# Related Commands Command Description install Installs SMU packages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device: dig example.org v4 10.29.27.5 DNS lookup using 10.29.27.5 addr = 172.16.0.1 The following is sample output from the dig hostname v6 command: Device: dig example.org v6 DNS lookup using 2001:DB::1 addr = 2001:DB8:0000:0000:0000:0000:0000:0001 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following example shows how to direct log messages to the memory buffer: Device: mlog show Related Commands Command Description Displays or changes the network debug values. net-debug Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Related Commands Command Description mlog Directs log messages to a memory buffer instead of the serial port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable the net-dhcp command: Device: net-dhcp Related Commands Command Description net-debug Displays or changes the network debug values. net-show Displays network parameters. Initiates an IPv6 DHCP request for remote net6-dhcp configuration. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable the net6-dhcp command: Device: net6-dhcp Related Commands Command Description net-debug Displays or changes the network debug values. net-dhcp Initiates an IPv4 DHCP request and processes the reply. net-show Displays network parameters. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can set the MSS of TCP buffers using the mss argument. Examples The following is sample output from the net-tcp-bufs command: Device: net tcp-bufs tcp_num_buffs 4 Related Commands Command Description net-tcp-mss View or set the TCP MSS. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Ping 10.29.27.5 with 32 bytes of data ... reply received in 0 ms Ping 10.29.27.5 with 32 bytes of data ... reply received in 0 ms Related Commands Command Description ping4 Diagnoses basic network connectivity. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Ping 10.29.27.5 with 32 bytes of data ... Host 10.29.27.5 is alive. Related Commands Command Description ping Diagnoses basic network connectivity. ping6 Determines the network connectivity to another device using IPv6 addressing. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following policy maps and class maps are created and applied when running the auto qos trust cos command. Policy maps: • AutoQos-4.0-Trust-Cos-Input-Policy • AutoQos-4.0-Output-Policy Class maps: • class-default (match-any) • AutoQos-4.0-Output-Priority-Queue (match-any) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For more information, see the queue tables at the end of this section. Auto-QoS configures the device for video connectivity to a Cisco TelePresence system, a Cisco IP camera, or a Cisco digital media player.
The following policy maps and class maps are created and applied when running the auto qos video ip-camera command: Policy maps: • AutoQos-4.0-Trust-Dscp-Input-Policy • AutoQos-4.0-Output-Policy Class maps: • class-default (match-any) • AutoQos-4.0-Output-Priority-Queue (match-any) • AutoQos-4.0-Output-Control-Mgmt-Queue (match-any) • AutoQos-4.0-Output-Multimedia-Conf-Queue (match-any) • AutoQos-4.0-Output-Trans-Data-Queue (match-any) • AutoQos-4.0-Output-Bulk-Data-Queue (match-any) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Queueing (total drops) 0 (bytes output) 0 bandwidth remaining 25% queue-buffers ratio 25 You can verify your settings by entering the show auto qos video interface interface-id privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
QoS. Auto-QoS configures the device for VoIP with Cisco IP phones on device and routed ports and for devices running the Cisco SoftPhone application. These releases support only Cisco IP SoftPhone Version 1.3(3) or later.
If the packet does not have a DSCP value of 24, 26, or 46 or is out of profile, the device changes the DSCP value to 0. When a Cisco IP phone is absent, the ingress classification is set to not trust the QoS label in the packet.
• AutoQos-4.0-Output-Multimedia-Strm-Queue (match-any) The following policy maps and class maps are created and applied when running the auto qos voip cisco-phone command: Policy maps: • service-policy input AutoQos-4.0-CiscoPhone-Input-Policy • service-policy output AutoQos-4.0-Output-Policy Class maps: • class AutoQos-4.0-Voip-Data-CiscoPhone-Class •...
(total drops) 0 (bytes output) 0 bandwidth remaining 25% queue-buffers ratio 25 The following is an example of the auto qos voip cisco-phone command and the applied policies and class maps: Device(config)# interface gigabitEthernet1/0/5 Device(config-if)# auto qos voip cisco-phone Device(config-if)# end...
(total drops) 0 (bytes output) 0 bandwidth remaining 25% queue-buffers ratio 25 The following is an example of the auto qos voip cisco-softphone command and the applied policies and class maps: Device(config)# interface gigabitEthernet1/0/20 Device(config-if)# auto qos voip cisco-softphone Device(config-if)# end...
This example shows how to display the QoS configuration that is automatically generated when auto-QoS is enabled: Device# debug auto qos AutoQoS debugging is on Device# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Device(config)# interface gigabitethernet2/0/1 Device(config-if)# auto qos voip cisco-phone Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IP phone. Examples This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Device# show auto qos...
These are examples of output from the show auto qos interface interface-id command when auto-QoS is disabled on an interface: Device# show auto qos interface gigabitethernet3/0/1 AutoQoS is disabled Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For more information about this command, see Cisco IOS Quality of Service Solutions Command Reference available on Cisco.com. • priority—Assigns scheduling priority to a class of traffic belonging to a policy map.
• shape—Specifies average or peak rate traffic shaping. For more information about this command, see Cisco IOS Quality of Service Solutions Command Reference available on Cisco.com. To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Creates or modifies a policy map that can be attached to multiple physical ports policy-map or SVIs and enters policy-map configuration mode. Displays QoS policy maps. show policy-map Classifies IP traffic by setting a DSCP or an IP-precedence value in the packet. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• exit—Exits from QoS class-map configuration mode. • match—Configures classification criteria. • no—Removes a match statement from a class map. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-cmap)# match access-group 103 Device(config-cmap)# exit This example shows how to delete the class map class1: Device(config)# no class-map class1 You can verify your settings by entering the show class-map privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Specifies a list of up to eight IP-precedence values to match against incoming packets. Separate each value with a space. The range is 0 to 7. You also can enter a mnemonic name for a commonly used value. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
10 command. You can enter the match ip precedence critical command, which is the same as entering the match ip precedence 5 command. For a list of supported Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to specify a range of physical ports to which an interface-level class map in a hierarchical policy map applies: Device(config)# class-map match-any class4 Device(config-cmap)# match cos 4 Device(config-cmap)# exit You can verify your settings by entering the show class-map privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines None Examples This example show how you can configure non-client NRT: Device(config)# class-map test_1000 Device(config-cmap)# match non-client-nrt Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can configure class policies in a policy map only if the classes have match criteria defined for them. To configure the match criteria for a class, use the class-map global configuration and match class-map configuration commands. You define packet classification on a physical-port basis. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-pmap)# exit Device(config)# policy-map parent Device(config-pmap)# class class-default Device(config-pmap-c)# shape average 1000000 Device(config-pmap-c)# service-policy child Deviceconfig-pmap-c)# end This example shows how to delete a policy map: Device(config)# no policy-map policymap2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Creates a class map to be used for matching packets to the class whose class-map name you specify and enters class-map configuration mode. Applies a policy map to a physical port or an SVI. service-policy (Wired) Displays QoS policy maps. show policy-map Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Usage Guidelines Either the bandwidth, shape, or priority command must be used before using this command. For more information about these commands, see Cisco IOS Quality of Service Solutions Command Reference available on Cisco.com The allows you to allocate buffers to queues. If buffers are not allocated, then they are divided equally amongst all queues.
You can verify your settings by entering the show policy-map privileged EXEC command. Related Commands Command Description Displays QoS policy maps. show policy-map Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Although visible in the command line help-strings, the packets unit of measure is not supported; use the percent unit of measure. Note This command is supported only on wired ports in the egress direction. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The policy for this class is set so that the queue reserved for it has a maximum packet limit of 20 percent: Device(config)# policy-map policy11 Device(config-pmap)# class dscp-1 Device(config-pmap-c)# bandwidth percent 20 Device(config-pmap-c)# queue-limit dscp 1 percent 20 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Though visible in the command-line help strings, the history keyword is not supported, and you should Note ignore the statistics that it gathers. Examples This example shows how to apply plcmap1 to an physical ingress port: Device(config)# interface gigabitethernet2/0/1 Device(config-if)# service-policy input plcmap1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description Creates or modifies a policy map that can be attached to multiple physical policy-map ports or SVIs and enters policy-map configuration mode. Displays QoS policy maps. show policy-map Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
CoS value. For example, if you enter the set cos precedence command, the precedence (packet-marking category) value is copied and used as the CoS value. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• dscp—Specify an IP DSCP value from 0 to 63 or a packet marking category. • precedence—Specify a precedence-bit value in the IP header; valid values are from 0 to 7 or specify a packet marking category. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For example, if you enter the set precedence cos command, the CoS value (packet-marking category) is copied and used as the precedence value. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
5 command. For a list of supported mnemonics, enter the set dscp ? or the set ip precedence ? command to see the command-line help strings. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Defines a traffic classification match criteria for the specified class-map name. class Creates or modifies a policy map that can be attached to multiple physical policy-map ports or SVIs and enters policy-map configuration mode. Displays QoS policy maps. show policy-map Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Match ip dscp 5 Related Commands Command Description Creates a class map to be used for matching packets to the class whose name class-map you specify and enters class-map configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays configuration information related to policers in hardware. You must choose from the following options: • iif_id id—The target interface ID. Valid range is from 1 to 4294967295. • interface type number—Target interface type and ID. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
LOGGING 1000 1000 Punt Webauth 1000 1000 Crypto Control Exception General Punt NFL SAMPLED DATA SGT Cache Full 1800 1800 EGR Exception Show frwd 1000 1000 MCAST Data Gold Pkt Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• switch_num—Enter the ID of the switch. Displays information for the specified active | standby } switch. • active—Displays information for the active switch. • standby—Displays information for the standby switch, if available. Displays QoS sub-block software information. qos qsb Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This is an example of the output for the show policy-map interface command. Device# show policy-map interface gigabitethernet1/0/48GigabitEthernet1/0/48 Service-policy output: port_shape_parent Class-map: class-default (match-any) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
0000 bps, exceeded 0000 bps >>>>>counters not supported Related Commands Command Description Creates or modifies a policy map that can be attached to multiple physical ports policy-map or SVIs and enters policy-map configuration mode. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the no form of this command to disable trust for the connected device. trust device {cisco-phone | cts | ip-camera | media-player} no trust device {cisco-phone | cts | ip-camera | media-player} Syntax Description Configures a Cisco IP phone...
• Vlan—Catalyst VLANs • range—interface range command Examples The following example configures trust for a Cisco IP phone in Interface GigabitEthernet 1/0/1: Device(config)# interface GigabitEthernet1/0/1 Device(config-if)# trust device cisco-phone You can verify your settings by entering the show interface status privileged EXEC command.
• an IPv6 address is removed from an interface • IPv6 is disabled from an interface • an interface is shutdown • IPv4 CEF is disabled globally or locally on an interface Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-router)# end The following example shows how to enable BFD for all Intermediate System-to-Intermediate System (IS-IS) neighbors: Device> enable Device# configuration terminal Device(config)# router isis tag1 Device(config-router)# bfd all-interfaces Device(config-router)# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
0 (3 ) Fa0/1 Session state is UP and using echo function with 100 ms interval. Local Diag: 0, Demand mode: 0, Poll bit: 0 MinTxInt: 1000000, MinRxInt: 1000000, Multiplier: 3 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
BFD interval. If echo is not enabled, then BFD control packets will be sent in negotiated configured interval. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You do not have to reconfigure the template name again. It becomes valid automatically. Device> enable Examples Device# configuration terminal Device(config)# interface Gigabitethernet 1/3/0 Device(config-if)# bfd template template1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
All static routes that specify the same values for the interface-type, interface-number, and ip-address arguments will automatically use BFD to determine gateway reachability and take advantage of fast failure detection. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to configure BFD for all static routes in an unassociated mode without the group and passive keywords: Device# configuration terminal Device(config)# ip route static bfd GigabitEthernet 1/0/1 10.2.2.2 unassociate Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
All static routes that specify the same values for vrf vrf-name, interface-type interface-number , and ipv6-address will automatically use BFDv6 to determine gateway reachability and take advantage of fast failure detection. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
At least one of the keywords described in Table 35: AAA accounting Methods, on page 705 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the aaa group server radius and aaa group server tacacs+ commands to create a named group of servers. Cisco IOS software supports the following two methods of accounting: • RADIUS—The network access server reports user activity to the RADIUS security server in the form of accounting records.
For a list of supported RADIUS accounting attributes, refer to the appendix RADIUS Attributes in the Cisco IOS Security Configuration Guide. For a list of supported TACACS+ accounting AV pairs, refer to the appendix TACACS+ Attribute-Value Pairs in the Cisco IOS Security Configuration Guide.
The group keyword is optional when you enter it after the broadcast group and group keywords. You can enter more than optional group keyword. radius (Optional) Enables RADIUS accounting. tacacs+ (Optional) Enables TACACS+ accounting. Command Default AAA accounting is disabled. Command Modes Global configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
We recommend that you enter the dot1x reauthentication interface configuration command before configuring IEEE 802.1x RADIUS accounting on an interface. Examples This example shows how to configure IEEE 802.1x accounting: Device(config)# aaa new-model Device(config)# aaa accounting dot1x default start-stop group radius Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The group keyword is optional when you enter it after the broadcast group and group keywords. You can enter more than optional group keyword. radius (Optional) Enables RADIUS authorization. (Optional) Enables TACACS+ accounting. tacacs+ Command Default AAA accounting is disabled. Command Modes Global configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This authentication first tries to contact a RADIUS server. If this action returns an error, the user is not allowed access to the network. Device(config)# aaa new-model Device(config)# aaa authentication dot1x default group radius Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the show running-config privileged EXEC command to display the configured lists of authorization methods. Examples This example shows how to configure the switch for user RADIUS authorization for all network-related service requests: Device(config)# aaa authorization network default group radius Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Switch(config)# no aaa new-model Switch(config)# exit Switch# show running-config | b line vty line vty 0 4 login local !<=== Login local instead of "login" line vty 5 15 login local Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Sets AAA authentication at login. aaa authentication ppp Specifies one or more AAA authentication method for use on serial interfaces running PPP. aaa authorization Sets parameters that restrict user access to a network. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Only one voice device can be authenticated in this mode if a voice VLAN is configured. Multi-host mode also offers port access for multiple hosts behind a hub, but multi-host mode gives unrestricted port access to the devices after the first user gets authenticated. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to enable single-host mode on a port: Device(config-if)# authentication host-mode single-host You can verify your settings by entering the show authentication sessions interface interface details privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If MAC move is disabled, and an authenticated host moves to another port, it is not reauthenticated, and a violation error occurs. Examples This example shows how to enable MAC move on a device: Device(config)# authentication mac-move permit Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The default priority of an authentication method is equivalent to its position in execution-list order: 802.1x authentication, MAC authentication bypass (MAB), and web authentication. Use the dot1x, mab, and webauth keywords to change this default order. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures the time after which an inactive Auth Manager session is terminated. Specifies the period of time between which the Auth Manager attempts to authentication timer reauthenticate reauthenticate authorized ports. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays information about the authentication methods that are registered registrations with the Auth Manager. Displays information about current Auth Manager sessions. show authentication sessions show authentication sessions Displays information about the Auth Manager for a given interface. interface Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure an 802.1x-enabled port to generate a system error message and to change the port to restricted mode when a new device connects to it: Device(config-if)# authentication violation restrict Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure an 802.1x-enabled port to remove the current session and initiate authentication with a new device when it connects to the port: Device(config-if)# authentication violation replace You can verify your settings by entering the show authentication privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• Both switches have different configuration revision numbers. Examples This example shows how to enable CISP: Device(config)# cisp enable Related Commands Command Description dot1x credentialsprofile Configures a profile on a supplicant switch. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enables error-disabled detection for a specific cause or all causes. errdisable recovery Configures the recovery mechanism variables. show errdisable detect Displays error-disabled detection status. Displays error-disabled recovery timer information. show errdisable recovery Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description show interfaces status err-disabled Displays interface status of a list of interfaces in error-disabled state. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify that the information was deleted by entering the show mac address-table privileged EXEC command. Examples This example shows how to remove a specific MAC address from the dynamic address table: Device# clear mac address-table dynamic address 0008.0070.0007 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays the MAC address notification settings for all interfaces or on the specified interface when the interface keyword is appended. snmp trap mac-notification change Enables the SNMP MAC address notification trap on a specific interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To manually enable an interface for Cisco TrustSec Security (CTS), use the cts manual command in interface configuration mode. cts manual Syntax Description This command has no arguments or keywords. Command Default Disabled Command Modes Interface configuration (config-if)
(cts manual) Manually specifies the PMK and the SAP authentication and encryption modes to negotiate MACsec link encryption between two interfaces. show cts interface Displays Cisco TrustSec interface configuration statistics. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
TrustSec-enabled interfaces in the system. The default interval after which log for a given flow is printed is 300 seconds. Use the logging-interval keyword to change the default interval. Logging is only triggered when the Cisco ACE Application Control Engine has the logging keyword.
Switched Virtual Interface (SVI) becomes active for a VLAN, the VRF-to-VLAN assignment becomes inactive and all bindings learned on the VLAN are moved to the FIB table associated with the VRF of the SVI. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures a VLAN interface. vrf forwarding Associates a VRF instance or a virtual network with an interface or subinterface. show cts role-based permissions Displays the SGACL permission list. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples The following examples shows how to configure SGACL monitor from a source tag to a destination tag: Switch(config)# cts role-based monitor permissions from 10 to 11 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The cts role-based permissions default command defines, replaces, or deletes the list of SGACLs of the default policy as long as there is no dynamic policy for the same DGT. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example shows how to enable permissions for a destination group: Switch(config)# cts role-based permissions from 6 to 6 mon_2 Related Commands Command Description Displays the SGACL permission list. show cts role-based permissions Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
A warning message reminds the user if the cos option is configured. Command Default This command has no defaults. However, the default action for a MAC-named ACL is to deny. Command Modes Mac-access list configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config-ext-macl)# no deny any 00c0.00a0.03fa 0000.0000.0000 netbios. This example denies all packets with EtherType 0x4321: Device(config-ext-macl)# deny any any 0x4321 0 You can verify your settings by entering the show access-lists privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Creates an access list based on MAC addresses for non-IP traffic. permit Permits from the MAC access-list configuration. Permits non-IP traffic to be forwarded if conditions are matched. show access-lists Displays access control lists configured on a switch. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to define an IPv6 snooping policy name as policy1, place the device in IPv6 snooping configuration mode, and configure the device as the node: Device(config)# ipv6 snooping policy policy1 Device(config-ipv6-snooping)# device-role node Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following example defines a Neighbor Discovery Protocol (NDP) policy name as policy1, places the device in ND inspection policy configuration mode, and configures the device as the host: ipv6 nd inspection policy policy1 Device(config)# Device(config-nd-inspection)# device-role host Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
In addition, it rejects RA and DHCP server messages. This is the default option. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This example shows how to configure an a device-tracking policy: Device(config)# device-tracking policy policy1 Device(config-device-tracking)# trusted-port Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Examples This example shows how to specify that the switch sends an EAPOL-Success message when the switch successfully authenticates the critical port: Device(config)# dot1x critical eapol Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Authenticator PAE operation is disabled. Examples The following example shows that the interface has been set to act as a supplicant: Device(config)# interface g1/0/3 Device(config-if)# dot1x pae supplicant Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Spanning Tree Protocol (STP) bridge protocol data unit (BPDU) packets before the supplicant switch has authenticated. Beginning with Cisco IOS Release 15.0(1)SE, you can control traffic exiting the supplicant port during the authentication period. Entering...
Enable Client Information Signalling Protocol (CISP) on a switch so that it acts as an authenticator to a supplicant switch. dot1x credentials Configure the 802.1x supplicant credentials on the port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description dot1x pae supplicant Configure an interface to act only as a supplicant. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
DOT1X_PORT_EAPOL_CAPABLE:DOT1X: MAC 00-01-02-4b-f1-a3 on gigabitethernet1/0/13 is EAPOL capable Related Commands Command Description dot1x test timeout timeout Configures the timeout used to wait for EAPOL response to an IEEE 802.1x readiness query. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify the timeout configuration status by entering the show run privileged EXEC command. Related Commands Command Description dot1x test eapol-capable [interface Checks for IEEE 802.1x readiness on devices connected to all interface-id] or to specified IEEE 802.1x-capable ports. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• The range is from 1 to 65535. The default is 30. If the server does not send a response to an 802.1X packet within the specified period, the packet is sent again. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
EAPOL-Start frames when they are being retransmitted. The range is from 1 to 65535. The default is 30. In Cisco IOS Release 15.2(5)E, this command is only available in the supplicant mode. If the command is applied in any other mode, the command misses from the configuration.
You can verify your settings by entering the show running-config privileged EXEC command. Examples This example shows how to configure an open directive. Device(config)# epm access-control open Related Commands Command Description show running-config Displays the contents of the current running configuration file. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Usage Guidelines For SGACL logging, you must configure the permit ip log command. Also, this command must be configured in Cisco IIdentity Services Engine (ISE) to enable logging for dynamic SGACLs. Examples The following example shows how to define an SGACL that can be applied to IPv4 traffic and enter role-based...
This example shows how to apply a web authentication rule to a fallback profile for use on an IEEE 802.1x enabled switch port. Device# configure terminal Device(config)# fallback profile profile1 Device(config-fallback-profile)# ip admission rule1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This policy map is used to apply the actions on the host when a tag is received. Command Default Web authentication is disabled. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Creates a web authentication fallback profile fallback profile. ip admission Enables web authentication on a port. show authentication sessions interface interface detail Displays information about the web authentication session status. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Command Description show ip admission Displays information about NAC cached entries or the NAC configuration. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
IP address 0.0.0.0 for switch ports is used and the ARP probes drop. Examples This example shows how to set SVI as the source for ARP probes: Device(config)# ip device tracking probe use-svi Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
DHCP-snooping database; valid values are from 15 to 86400 seconds. Command Default The DHCP-snooping database is not configured. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to specify the amount of time before writing DHCP snooping entries to an external server: Device(config)# ip dhcp snooping database write-delay 15 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If the hostname exceeds 63 characters, it will be truncated to 63 characters in the remote-ID configuration. Note Examples This example shows how to configure the option- 82 remote-ID suboption: Device(config)# ip dhcp snooping information option format remote-id hostname Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the no ip dhcp snooping verify no-relay-agent-address to reenable verification. Examples This example shows how to enable verification of the giaddr in a DHCP client message: Device(config)# no ip dhcp snooping verify no-relay-agent-address Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Global configuration (config) Command History Release Modification Cisco IOS XE Denali 16.3.1 This command was modified. The ipv4 and ipv6 keyword were added. Cisco IOS XE Release 3.3SE This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Assigns an ID to an access list and enters access list configuration mode. Enables the HTTP 1.1 server, including the Cisco ip http server web browser user interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to enable IP source guard with MAC address verification: Device(config)# interface gigabitethernet1/0/1 Device(config-if)# ip verify source mac-check You can verify your settings by entering the show ip verify source privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE Denali 16.3.1 This command was reintroduced. This command was not supported in Cisco IOS XE Denali 16.1.x and Cisco IOS XE Denali 16.2.x Usage Guidelines IPv6 ACLs are defined by using the ipv6 access-listcommand in global configuration mode and their permit and deny conditions are set by using the deny and permitcommands in IPv6 access list configuration mode.
0. The second entry is necessary because an implicit deny all condition is at the end of each IPv6 ACL. Device(config)# ipv6 access-list list2 deny FEC0:0:0:2::/64 any Device(config)# ipv6 access-list list2 permit any any Device(config)# interface ethernet 0 Device(config-if)# ipv6 traffic-filter list2 out Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Note All existing IPv6 Snooping commands (prior to Cisco IOS XE Denali 16.1.1) now have corresponding SISF-based device-tracking commands that allow you to apply your configuration to both IPv4 and IPv6 address families. For more information,...
This example shows how to define an IPv6 snooping policy name as policy1, place the switch in IPv6 snooping policy configuration mode, and limit the number of IPv6 addresses allowed on the port to 25: Device(config)# ipv6 snooping policy policy1 Device(config-ipv6-snooping)# limit address-count 25 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use this command to allow a RADIUS server to authenticate a new user based on the host MAC address and VLAN. Use this feature on networks with the Microsoft IAS RADIUS server. The Cisco ACS ignores this command. Examples This example shows how to enable VLAN-ID based MAC authentication on a switch:...
Enables MAC-based authentication on a port. Configures a port to use the Extensible Authentication Protocol (EAP). mab eap show authentication Displays information about authentication manager events on the switch. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Usage Guidelines Examples This example shows how to configure MACsec MKA on an interface using the EAP-TLS authentication protocol: Switch#configure terminal Switch(config)# int G1/0/20 Switch(config-if)# macsec network-link Switch(config-if)# end Switch# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
IPv6 packets are matched against IPv6 access lists, and all other packets are matched against MAC access lists. IP, IPv6, and MAC addresses can be specified for the same map entry. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Displays the VLAN access maps created on the switch. show vlan access-map Defines a VLAN map and enters access-map configuration mode where vlan access-map you can specify a MAC ACL to match and the action to be taken. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Examples This example shows how to configure MKA MACsec on an interface using a PSK: Switch# Switch(config)# int G1/0/20 Switch(config-if)# mka pre-shared-key key-chain kc1 Switch(config-if)# end Switch# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Filters details from authentication system messages. no dot1x logging verbose Filters details from 802.1x system messages. no mab logging verbose Filters details from MAC authentication bypass (MAB) system messages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Filters details from authentication system messages. Filters details from 802.1x system messages. no dot1x logging verbose no mab logging verbose Filters details from MAC authentication bypass (MAB) system messages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Filters details from authentication system messages. logging verbose no dot1x logging Filters details from 802.1x system messages. verbose no mab logging verbose Filters details from MAC authentication bypass (MAB) system messages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command has no defaults. However, the default action for a MAC-named ACL is to deny. Command Modes Mac-access list configuration Command History Release Modification Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify your settings by entering the show access-lists privileged EXEC command. Related Commands Command Description deny Denies from the MAC access-list configuration. Denies non-IP traffic to be forwarded if conditions are matched. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(MAC access-list configuration) Command Description mac access-list extended Creates an access list based on MAC addresses for non-IP traffic. show access-lists Displays access control lists configured on a switch. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(cts manual) propagate sgt (cts manual) To enable Security Group Tag (SGT) propagation at Layer 2 on Cisco TrustSec Security (CTS) interfaces, use the propagate sgt command in interface configuration mode. To disable SGT propagation, use the no form of this command.
(cts manual) Related Commands Command Description cts manual Enables an interface for CTS. show cts interface Displays Cisco TrustSec states and statistics per interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to define an IPv6 snooping policy name as policy1, place the switch in IPv6 snooping policy configuration mode, and configure the port to use DHCP to glean addresses: Device(config)# ipv6 snooping policy policy1 Device(config-ipv6-snooping)# protocol dhcp Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
When using 802.1X authentication, both sides (supplicant and authenticator) receive the PMK and the MAC address of the peer's port from the Cisco Secure Access Control Server. If a device is running CTS-aware software but the hardware is not CTS-capable, disallow encapsulation with the sap mode-list no-encap command.
This example shows how to define an IPv6 snooping policy name as policy1, place the device in IPv6 snooping configuration mode, and configure the security level as inspect: Device(config)# ipv6 snooping policy policy1 Device(config-ipv6-snooping)# security-level inspect Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Examples This is an example of output from the show aaa clients command: Device# show aaa clients Dropped request packets: 0 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the show authentication sessions command to display information about all current Auth Manager sessions. To display information about specific Auth Manager sessions, use one or more of the keywords. This table shows the possible operating states for the reported authentication sessions. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To display Cisco TrustSec (CTS) configuration statistics for an interface, use the show cts interface command in EXEC or privileged EXEC mode. show cts interface [type slot/port| brief| summary] Syntax Description type slot/port (Optional) Specifies an interface type and slot or port number.
Command Description sap mode-list (cts manual) Manually specifies the PMK and the SAP authentication and encryption modes to negotiate MACsec link encryption between two interfaces. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The details keyword is provided when a single cell is selected by specifying both from and to keywords. When the details keyword is specified the access control entries of SGACLs of a single cell are displayed. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
RBACL Monitor All for Configured Policies : FALSE Related Commands Command Description cts role-based permissions Enables permissions from a source group to a destination group. Enables role-based access list monitoring. cts role-based monitor Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
------------------------------- Authorized Clients UnAuthorized Clients Total No of Client This is an example of output from the show dot1x all statistics command: Device# show dot1x statistics Dot1x Global Statistics for Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This is an example of output from the show eap pac peers privileged EXEC command: Device> show eap pac peers No PACs stored Related Commands Command Description clear eap sessions Clears EAP session information for the switch or for the specified port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Insertion of opt82 fail Interface Down Unknown output interface Reply output port equal to input port Packet denied by platform This table shows the DHCP snooping statistics and their descriptions: Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 845
Number of times the option-82 insertion into a packet failed. The insertion might fail if the packet with the option-82 data exceeds the size of a single physical packet on the internet. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 846
Indicates a possible network misconfiguration or misuse of trust settings on ports. Packet denied by platform Number of times the packet has been denied by a platform-specific registry. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For example, if one method list uses a particular server group, the sharecount would be 1. If two method lists use the same server group, the sharecount would be 2. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 848
The number represents how many internal data structure packets or transactions are holding references to this server group. Memlocks is used internally for memory management purposes. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Interface Filter State Upper Lower Current --------- ------------- ---------- --------- --------- Gi1/0/1 Forwarding 20 pps 10 pps 5 pps The following table describes the fields in the show storm-control display: Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 850
Displays the bandwidth usage of broadcast traffic or the specified traffic type (broadcast, multicast, or unicast) as a percentage of total available bandwidth. This field is only valid when storm control is enabled. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Defines a VLAN map and enters access-map configuration mode where you vlan access-map can specify a MAC ACL to match and the action to be taken. Applies a VLAN map to one or more VLANs. vlan filter Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Defines a VLAN map and enters access-map configuration mode where vlan access-map you can specify a MAC ACL to match and the action to be taken. Applies a VLAN map to one or more VLANs. vlan filter Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display number of users in each of the VLANs in a group: Device# show vlan group group-name group2 user_count VLAN : Count ------------------- : 12 Related Commands Command Description Creates or modifies a VLAN group. vlan group Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can use metric suffixes such as k, m, and g for large number thresholds. level pps Specifies the rising and falling suppression levels as a rate in packets per second at which traffic is received on the port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 855
When the storm control threshold for multicast traffic is reached, all multicast traffic except control traffic, Note such as bridge protocol data unit (BDPU) and Cisco Discovery Protocol (CDP) frames, are blocked. However, the switch does not differentiate between routing updates, such as Open Shortest Path First (OSPF) and regular multicast data traffic, so both types of traffic are blocked.
Page 856
Device(config-if)# storm-control multicast level pps 2k 1k This example shows how to enable the shutdown action on a port: Device(config-if)# storm-control action shutdown You can verify your settings by entering the show storm-control privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To allow continuous access to a limited number of secure addresses, set the aging type as inactivity. This removes the secure address when it become inactive, and other addresses can become secure. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 858
Device(config-if)# switchport port-security aging type inactivity Device(config-if)# switchport port-security aging static This example shows how to disable aging for configured secure addresses: Device(config)# interface gigabitethernet1/0/2 Device(config-if)# no switchport port-security aging static Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines A secure port has the following limitations: • A secure port can be an access port or a trunk port; it cannot be a dynamic access port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 860
IP phone requires one MAC address. The Cisco IP phone address is learned on the voice VLAN, but is not learned on the access VLAN. If you connect a single PC to the Cisco IP phone, no additional MAC addresses are required. If you connect more than one PC to the Cisco IP phone, you must configure enough secure addresses to allow one for each PC and one for the Cisco IP phone.
MAC addresses configured on interfaces. A secure port has the following limitations: • A secure port can be an access port or a trunk port; it cannot be a dynamic access port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 863
IP phone requires one MAC address. The Cisco IP phone address is learned on the voice VLAN, but is not learned on the access VLAN. If you connect a single PC to the Cisco IP phone, no additional MAC addresses are required. If you connect more than one PC to the Cisco IP phone, you must configure enough secure addresses to allow one for each PC and one for the Cisco IP phone.
In the security violation shutdown mode, the interface is error-disabled when a violation occurs and the port LED turns off. An SNMP trap is sent, a syslog message is logged, and the violation counter increments. When Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 865
Examples This example show how to configure a port to shut down only the VLAN if a MAC security violation occurs: Device(config)# interface gigabitethernet2/0/2 Device(config)# switchport port-security violation shutdown vlan Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• Use of the stale-lifetime keyword overrides the global stale lifetime configured by the ipv6 neighbor binding stale-lifetime command. Command Default The time entry is kept in a reachable state. Command Modes IPv6 snooping configuration Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to define an IPv6 snooping policy name as policy1, place the switch in IPv6 snooping policy configuration mode, and configure the port to be trusted: Device(config)# ipv6 snooping policy policy1 Device(config-ipv6-snooping)# trusted-port Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• action—Sets the action to be taken (forward or drop). • default—Sets a command to its defaults. • exit—Exits from VLAN access-map configuration mode. • match—Sets the values to match (IP address or MAC address). Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 870
Sets the VLAN map to match packets against one or more access match (access-map configuration) lists. Displays the VLAN access maps created on the switch. show vlan access-map Applies a VLAN map to one or more VLANs. vlan filter Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example applies VLAN map entry map1 to VLANs 20 and 30: Device(config)# vlan filter map1 vlan-list 20, 30 This example shows how to delete VLAN map entry mac1 from VLAN 20: Device(config)# no vlan filter map1 vlan-list 20 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 872
VLAN access map. Defines a VLAN map and enters access-map configuration mode where vlan access-map you can specify a MAC ACL to match and the action to be taken. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to map VLANs 7 through 9 and 11 to a VLAN group: Device(config)# vlan group group1 vlan-list 7-9,11 This example shows how to remove VLAN 7 from the VLAN group: Device(config)# no vlan group group1 vlan-list 7 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 874
Related Commands Command Description Displays the VLANs mapped to VLAN groups. show vlan group Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Enter the debug command at the command-line prompt of the stack member. You also can use the remote command stack-member-number LINE EXEC command on the stack master switch to enable debugging on a member switch without first starting a session. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
From the redundancy main configuration submode, use the standby console enable command to enable the standby switch. Examples This example shows how to enter the redundancy main configuration submode and enable the standby switch: Device(config)# redundancy Device(config-red)# main-cpu Device(config-r-mc)# standby console enable Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Follow these guidelines when configuring your system to SSO mode: • You must use identical Cisco IOS images on the switches in the stack to support SSO mode. Redundancy may not work due to differences between the Cisco IOS releases.
This example shows how to specify that the standby switch is not reloaded if a parser return code (PRC) failure occurs during configuration synchronization: Device(config-red)# no policy config-sync bulk prc reload Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the exit command to exit redundancy configuration mode. Examples This example shows how to enter redundancy configuration mode: Device(config)# redundancy Device(config-red)# This example shows how to enter the main CPU submode: Device(config)# redundancy Device(config-red)# main-cpu Device(config-r-mc)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
1 Remove all mismatched commands from the running configuration of the active switch. 2 Revalidate the MCL with a modified running configuration by using the redundancy config-sync validate mismatched-commands command. 3 Reload the standby switch. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 884
(SSO) state when it reloads. Examples This example shows how to revalidate the mismatched command list with the modified configuration: Device# redundancy config-sync validate mismatched-commands Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Usage Guidelines Use the redundancy force-switchover command to manually switch over to the redundant switch. The redundant switch becomes the new active switch that runs the Cisco IOS image, and the modules are reset to their default settings. The old active switch reboots with the new image and joins the stack.
Use the redundancy reload shelf command to reboot all the switches in the stack. Examples This example shows how to manually reload all switches in the stack: Device# redundancy reload shelf Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If there is more than one switch in the switch stack, and you enter the reload slot stack-member-number command, you are not prompted to save the configuration. Examples This example shows how to reload the switch stack: Device# reload System configuration has been modified. Save? [yes/no]: yes Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 888
This example shows how to reload a single-switch switch stack (there is only one member switch): Device# reload slot 3 System configuration has been modified. Save? [yes/no]: y Proceed to reload the whole Stack? [confirm] y Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use the session command with processor 1 from the master or a standalone switch to access the internal controller. A standalone Device is always member 1. Examples This example shows how to access stack member 3: Device# session 3 Device-3# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Use this command only when you are working directly with your technical support representative while troubleshooting a problem. Do not use this command unless your technical support representative asks you to do so. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Displays information about the redundancy facility switchover history. domain default (Optional) Displays the default domain as the domain to display switchover history for. Command Default None Command Modes Privileged EXEC (#) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 892
Current Software state = ACTIVE Uptime in current state = 6 days, 9 hours, 23 minutes Image Version = Cisco IOS Software, IOS-XE Software, Catalyst 3 850 L3 Switch Software (CAT3850-UNIVERSALK9-M), Version 03.08.59.EMD EARLY DEPLO YMENT ENGINEERING NOVA_WEEKLY BUILD, synced to DSGS_PI2_POSTPC_FLO_DSBU7_NG3K_11 Copyright (c) 1986-2012 by Cisco Systems, Inc.
Page 893
00:00:22 RF_STATUS_REDUNDANCY_MODE_CHANGE(405) IfIndex(139) op=0 rc=0 <output truncated> This example shows how to display information about the redundancy facility slaves: Device# show redundancy slaves Group ID = Slave/Process ID = 6107 Slave Name = [installer] Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines When two versions of Cisco IOS images are involved, the command sets supported by two images might differ. If any of those mismatched commands are executed on the active switch, the standby switch might not recognize those commands, which causes a configuration mismatch condition.
Page 896
Mismatched Command List ----------------------- The list is Empty This example shows how to display the PRC failures: Device# show redundancy config-sync failures prc PRC Failed Command List ----------------------- The list is Empty Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
• Syncing—A switch that is added to an already existing stack remains in this state until the switch add sequence is complete. • Ready—The member has completed loading the system- and interface-level configurations and can forward traffic. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 898
-------------------------------------------------------- Down None Down None This example shows how to display the member 6 summary information: Device# show switch 6 Switch# Role Mac Address Priority State -------------------------------------------------------- Member 0003.e31a.1e00 Ready Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 899
The link partner is a stack port on a neighbor switch. • No—There is no stack cable connected to this port or the stack cable is not functional. • Yes—There is a functional stack cable connected to this port. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 900
• No— At least one stack port on the member has an attached stack cable. • Yes—None of the stack ports on the member has an attached stack cable. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
MAC address. If the switch with this foreign MAC address joins another stack as the active switch, two stacks will have the same stack MAC address. You must use the stack-mac update force command to resolve the conflict. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 902
This example shows how to enable a persistent MAC address: Device(config)# stack-mac persistent timer You can verify your settings by entering the show running-config privileged EXEC command. If enabled, stack-mac persistent timer is shown in the output. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device> stack-mac update force Device> You can verify your settings by entering the show switch privileged EXEC command. The stack MAC address includes whether the MAC address is local or foreign. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco technical support representatives troubleshooting the switch. Examples This example shows how to enter the redundancy main configuration submode and enable access to the standby console switch: Device(config)# redundancy Device(config-red)# main-cpu Device(config-r-mc)# standby console enable Device(config-r-mc)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
If you enter the switch stack-member-number stack port port-number disable privileged EXEC command and the stack is in the full-ring state, you can disable only one stack port. This message appears: Enabling/disabling a stack port may cause undesired stack changes. Continue?[confirm] Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 906
This message appears: Disabling stack port not allowed with current stack configuration. Examples This example shows how to disable stack port 2 on member 4: Device# switch 4 stack port 2 disable Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to change the priority value of stack member 6 to 8: Device# switch 6 priority 8 Changing the Switch Priority of Switch Number 6 to 8 Do you want to continue?[confirm] Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Provisioned information appears in the running configuration of the switch stack. When you enter the copy running-config startup-config privileged EXEC command, the provisioned configuration is saved in the startup configuration file of the switch stack. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 909
Device(config)# no switch 5 provision You can verify that the provisioned switch is added to or removed from the running configuration by entering the show running-config privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
WARNING:Changing the switch number may result in a configuration change for that switch. The interface configuration associated with the old switch number will remain as a provisioned configuration. Do you want to continue?[confirm] Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Addr FD08:2EEF:C2EE:0:E865:493B:ACFB:7) to Neighbor (Addr FD08:2EEF:C2EE:0:E865:493B:ACFB:5) connected on interface GigabitEthernet1/0/3 Jul 15 05:55:54.015: %SYS-5-CONFIG_I: Configured from console by console Jul 15 05:55:54.016: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback100000, changed state to down Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 917
Jul 15 05:57:11.959: %SYS-5-CONFIG_I: Configured from console by console Jul 15 05:57:11.960: %PKI-4-NOCONFIGAUTOSAVE: Configuration was modified. Issue "write memory" to save new IOS PKI configuration Jul 15 05:57:11.963: %SYS-5-CONFIG_I: Configured from console by console Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Provides information about autonomic packets. Command Modes Privileged EXEC (#) Command History Release Modification Cisco IOS XE Denali 16.3.1 This command was introduced. Usage Guidelines Use this command to debug the autonomic networking information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Tunnel Source Interface ANI1 Tunnel Source FE80::5AAC:78FF:FE09:F383 Tunnel Destination FE80::3A20:56FF:FEF3:7158 Supported ACP Security: IPSec, DIKE Negotiated ACP Security: DIKE The following table describes the significant fields shown in the display. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 920
Unique Device Identifier (UDI) of the neighbor. Tunnel Name Tunnel name. Tunnel Source Interface IP address of the source tunnel interface. Tunnel Source IP address of the tunnel source. Tunnel Destination IP address of the destination. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
None L2 untagged If TenGigabitEthernet1/1/3 None L2 untagged If TenGigabitEthernet1/1/4 None L2 untagged If Vlan1 None Virtual If ANI1 None Virtual If Loopback100000 None Virtual If Tunnel100002 None Virtual If Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 923
The following table describes the significant fields shown in the display. Table 45: show autonomic interface Field Descriptions Field Description Interface Interface name. Channel Disc Channel discovery. AD Enabled Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To display information about the configured intent range: Device# show autonomic intent Intent File : Available Version Num : 1443520505 (Parsed) Version Time: 2015-09-29 09:55:05 UTC Outer Vlans : 30-35,40,45 Outer Vlans count : 8 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device# show autonomic service Service IP-Addr Syslog 5000::100 5000::100 AAA Accounting Port 1813 AAA Authorization Port 1812 Autonomic registrar FD08:2EEF:C2EE:0:E865:493B:ACFB:1 ANR type IOS CA Config Server Address 5000::100 Auto IP Server UNKNOWN Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Remote Interface: ANI2 IP Address: FE80::3A20:56FF:FEF3:7158 Uptime(Discovered Time): 00:14:21 ( 2016-07-15 05:38:05 UTC) Last Refreshed time: 0 seconds ago The following table describes the significant fields shown in the display. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 928
Number of Links connected Number of neighbors detected. Local Interface Interface from which the neighbor is connected. Remote Interface Interface to which the neighbor is connected. IP Address IPv6 address of the neighbor, Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display the ARP table: Device: arp 172.20.136.8 arp'ing 172.20.136.8... 172.20.136.8 is at 00:1b:78:d1:25:ae, via port 0 Related Commands Command Description Sets or displays environment variables. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Run the loaded image with an extended or comprehensive power-on self-test (POST). Using this keyword causes POST to take longer to complete. (Optional) Pause for the Cisco IOS Debugger immediately after launching. (Optional) Pause for the JTAG Debugger right after loading the image.
Page 933
After entering this command, you are prompted to start the setup program. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Examples This example shows how to clear information about all of the RFID tags in the database: Device> clear location rfid Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Examples The following is sample output from the clear location rfid command and shows how to clear RFID statistics: Device> clear location statistics Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to copy a file at the root: Device: copy usbflash0:test1.text usbflash0:test4.text File "usbflash0:test1.text" successfully copied to "usbflash0:test4.text" You can verify that the file was copied by entering the dir filesystem: boot loader command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The configurations are now copied onto the other switch. Examples This example shows how to copy the configuration settings onto a TFTP server: Device: copy startup-config tftp: Address or name of remote host []? Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This example shows how to copy the configuration settings from the TFTP server onto a switch: Device: copy tftp: startup-config Address or name of remote host []? Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following is sample output from the debug voice diagnostics mac-address command and shows how to enable debugging of voice diagnostics for voice client with MAC address of 00:1f:ca:cf:b6:60: Device# debug voice diagnostics mac-address 00:1f:ca:cf:b6:60 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
File "usbflash0:test2.text" deleted Are you sure you want to delete "usbflash0:test5.text" (y/n)?y File "usbflash0:test2.text" deleted You can verify that the files were deleted by entering the dir usbflash0: boot loader command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Mar 01 2013 01:14:05 config.text 648 -rwx Mar 01 2013 00:01:39 private-config.text 96453632 bytes available (25732096 bytes used) Table 47: dir Field Descriptions Field Description Index number of the file. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 943
Last modification date. env_vars Filename. Related Commands Command Description Creates one or more directories on the specified file system. mkdir Removes one or more empty directories from the specified file system. rmdir Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
File "sda9:c3850-recovery.bin" uncompressed and installed, entry point: 0x811060f0 Loading Linux kernel with entry point 0x811060f0 ... Bootloader: Done loading app on core_mask: 0xf ### Launching Linux Kernel (flags = 0x5) Initiating Emergency Installation of bundle tftp:<url> Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 945
Bytes available: 6782976 flashfs[7]: flashfs fsck took 1 seconds..done Initializing Flash. The system is not configured to boot automatically. The following command will finish loading the operating system software: boot Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Global configuration Command History Release Modification Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Examples This example shows how to exit the configuration mode: Device(config)# exit Device# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
During the normal boot process, the flash: file system is automatically initialized. Use this command to manually initialize the flash: file system. For example, you use this command during the recovery procedure for a lost or forgotten password. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
-- Copy a file delete -- Delete file(s) dir -- List files in directories emergency-install -- Initiate Disaster Recovery unset -- Unset one or more environment variables version -- Display boot loader version Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE 3.3SECisco IOS XE 3.3SE This command was introduced. Examples This example shows how to activate an ap-count evaluation license: Device# license right-to-use activate apcount evaluation Device# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 950
This example shows how to activate an ap-count permanent license: Device# license right-to-use deactivate apcount evaluation Device# end This example shows how to add a new ap-count license: Device# license right-to-use activate apcount 500 slot 1 Device# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Configures geo-spatial location information. prefer Sets location information source priority. Command Default No default behavior or values. Command Modes Global configuration Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 952
• postal-code—Sets the postal code. • postal-community-name—Sets the postal community name. • primary-road-name—Sets the primary road name. • road-section—Sets the road section. • room—Sets room information. • seat—Sets seat information. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 953
You can verify your settings by entering the show location civic-location privileged EXEC command. This example shows how to configure the emergency location information on the switch: Device(config)# location elin-location 14085553881 identifier 1 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 954
Device(config)# location geo-location identifier host Device(config-geo)# latitude 12.34 Device(config-geo)# longitude 37.23 Device(config-geo)# altitude 5 floor Device(config-geo)# resolution 12.34 You can use the show location geo-location identifier command to display the configured geo-spatial location details. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Examples This example shows how to configure the path loss measurement request for calibrating clients on the associated 802.11a/b/g radio: Device# configure terminal Device(config)# location plm calibrating uniband Device(config)# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Device(config)# end This example shows how to configure an uplink switch to get and process MAC address-table move update messages: Device# configure terminal Device(config)# mac address-table move update receive Device(config)# end Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 957
You can verify your setting by entering the show mac address-table move update privileged EXEC command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines Use the mgmt_init command only during debugging of the Ethernet management port. Examples This example shows how to initialize the Ethernet management port: Device: mgmt_init Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Directory "usbflash0:Saved_Configs" created Related Commands Command Description Displays the list of files and directories on the specified file system. Removes one or more empty directories from the specified file system. rmdir Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Cisco IOS XE Release 16.1 This command was introduced. Examples This example shows how to disable debugging on a switch. Device: no debug all All possible debugging has been turned off. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows a file named config.text being renamed to config1.text: Device: rename usbflash0:config.text usbflash0:config1.text You can verify that the file was renamed by entering the dir filesystem: boot loader command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Description Performs a hard reset on the system. reset Performs a hard reset on the system. reset Runs the Time Domain Reflector (TDR) feature on an interface. test cable-diagnostics tdr Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
You can verify that the directory was deleted by entering the dir filesystem: boot loader command. Related Commands Command Description Displays the list of files and directories on the specified file system. Displays the list of files and directories on the specified file system. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to configure the advanced template: Device(config)# sdm prefer advanced Device(config)# exit Device# reload Related Commands Command Description Displays the SDM template in use. show sdm prefer Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
BAUD rate—Specifies the number of bits per second (b/s) that is used for the baud rate for the console. The Cisco IOS software inherits the baud rate setting from the boot loader and continues to use this value unless the configuration file specifies another setting. The range is from 0 to 128000 b/s.
Page 967
The ENABLE_BREAK environment variable can also be set by using the boot enable-break global configuration command. The HELPER environment variable can also be set by using the boot helper filesystem: / file-url global configuration command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 968
You can verify your setting by using the set boot loader command. Related Commands Command Description Performs a hard reset on the system. reset Resets one or more environment variables. unset Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Interface The interface on which TDR is run. Speed The speed of connection. Local pair The name of the pair of wires that TDR is testing on the local interface. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 971
This example shows the output from the show cable-diagnostics tdr interface interface-id command when TDR is not running: Device# show cable-diagnostics tdr interface gigabitethernet1/0/2 % TDR test was never issued on gigabitethernet1/0/2 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 972
If an interface does not support TDR, this message appears: % TDR test is not supported on device 1 Related Commands Command Description Runs the Time Domain Reflector (TDR) feature on an interface. test cable-diagnostics tdr Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
For this reason, use debug commands only to troubleshoot specific problems or during troubleshooting sessions with Cisco technical support staff. Moreover, it is best to use debug commands during periods of lower network traffic and fewer users. Debugging during these periods decreases the likelihood that increased debug command processing overhead will affect system use.
Use the show env stack [switch-number] command to display information about any switch in the stack from any member switch. Use the show env temperature status command to display the switch temperature states and threshold levels. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 975
The temperature is in the warning range. You should check the external temperature around the switch. The temperature is in the critical range. The switch might not run properly if the temperature is in this range. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
To display budgeting, configuration, power, and system power information for the Cisco eXpandable Power System (XPS) 2200, use the show env xps command in privileged EXEC mode. show env xps { budgeting | configuration | port [ all | number ] | power | system | thermal | upgrade |...
Page 977
This is an example of output from the show env xps power command: ============================================================================= XPS 0101.0100.0000 : ============================================================================= Port-Supply SW PID Serial# Status Mode Watts ----------- -- ------------------ ----------- -------------- ---- ----- XPS-A Not present XPS-B NG3K-PWR-1100WAC LIT13320NTV OK 1100 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 978
Switch# show env xps upgrade XPS Upgrade Xfer SW Status Prog -- ----------- ---- 1 Reloading 100% Switch# *Mar 22 03:16:01.733: %PLATFORM_XPS-6-UPGRADE_DONE: XPS 0022.bdd7.9b14 upgrade has completed and the XPS is reloading. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 979
Bootloader Version: 7 Software Version: 18 Table 50: Related Commands Command Description power xps(global configuration command) Configures XPS and XPS port names. power xps(privileged EXEC command) Configures the XPS ports and system. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
(Optional) Displays the statistics for the flow monitor. Command Modes Privileged EXEC Command History Release Modification Cisco IOS XE 3.3SE This command was introduced. Usage Guidelines The cache keyword uses the record format by default. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 981
Status Status of the flow monitor cache. The possible values are: • allocated—The cache is allocated. • being deleted—The cache is being deleted. • not allocated—The cache is not allocated. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 982
Flows expired from the cache since the cache was created. Active timeout Current value for the active timeout in seconds. Inactive timeout Current value for the inactive timeout in seconds. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 983
The following example displays the status, statistics, and data for the flow monitor named FLOW-MONITOR-IPv6 (the cache contains IPv6 data) in record format: Device# show flow monitor name FLOW-MONITOR-IPv6 cache format record Cache type: Normal (Platform cache) Cache size: Unknown Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 984
The following example displays the status and statistics for a flow monitor: Device# show flow monitor FLOW-MONITOR-1 statistics Cache type: Normal (Platform cache) Cache size: Unknown Current entries: Flows added: Flows aged: - Active timeout 300 secs) Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following is sample output from the show location plm command: Device# show location plm Location Path Loss Configuration Calbration client : Disabled, Radio: Multiband Normal clients : Disabled Burst interval : 60 Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The following is sample output from the show location ap-detect client command: Device# show location ap-detect client AP02 Clients MAC Address Status Slot Antenna RSSI ---------------------------------------------------------- 2477.0389.96ac Associated 2477.0389.96ac Associated 2477.0389.96ac Associated 2477.0389.96ac Associated RFID Tags Rogue AP's Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 995
Some features such as IPv6, use up double the entry size; so only half as many entries can be created. Device# Related Commands Command Description Specifies the SDM template to be used on the switch. sdm prefer Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
60 degrees C and you want to configure the yellow threshold as 51 degrees C, set the difference between the thresholds as 15 by using the system env temperature threshold yellow 9 command. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 997
The internal temperature sensor in the device measures the internal system temperature and might vary Note ±5 degrees C. Examples This example sets 15 as the difference between the yellow and red thresholds: Device(config)# system env temperature threshold yellow 15 Device(config)# Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
A TDR test can take a few seconds to run on an interface Use 'show cable-diagnostics tdr' to read the TDR results. Related Commands Command Description Displays the TDR results. show cable-diagnostics tdr Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on all of the devicees in the network. Do not disable CDP. When the device detects a device in the Layer 2 path that does not support Layer 2 traceroute, the device continues to send Layer 2 trace queries and lets them time out.
Page 1001
Command Description Displays the Layer 2 path taken by the packets from the specified source IP traceroute mac ip address or hostname to the specified destination IP address or hostname. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on each device in the network. Do not disable CDP. When the device detects a device in the Layer 2 path that does not support Layer 2 traceroute, the device continues to send Layer 2 trace queries and lets them time out.
Page 1003
This example shows the Layer 2 path when ARP cannot associate the source IP address with the corresponding MAC address: Device# traceroute mac ip 2.2.66.66 2.2.77.77 Arp failed for destination 2.2.77.77. Layer2 trace aborted. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 1004
Related Commands Command Description Displays the Layer 2 path taken by the packets from the specified source traceroute mac MAC address to the specified destination MAC address. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
CONFIG_FILE—Resets the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration. BAUD—Resets the rate in bits per second (b/s) used for the console. The Cisco IOS software inherits the baud rate setting from the boot loader and continues to use this value unless the configuration file specifies another setting.
Page 1007
This example shows how to unset the SWITCH_PRIORITY environment variable: Device: unset SWITCH_PRIORITY Related Commands Command Description Sets or displays environment variables. Performs a hard reset on the system. reset Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
This example shows how to display the boot loader version on a device: version Device: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) Version 1.2, RELEASE SOFTWARE (P) Compiled Sun Jul 14 20:22:00 PDT 2013 by rel Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Trace levels can be set for each process using the all-modules keyword in the set platform software trace command, or per module within a process. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
4-second interval for the process in the staging directory, the process is throttled. The files do not rotate for the process from /tmp/<FRU>/trace into /tmp/<FRU>/trace/stage, however the files are deleted when they reach the maximum size. Throttling is re-enabled, when the count goes below 8. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
The noise level is always equal to the highest possible tracing level. Even if a future enhancement to tracing introduces a higher tracing level, the noise level will become equal to the level of that new enhancement. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 1013
• switch <number> —The switch with its number specified. • switch active—The active switch. • switch standby—The standby switch. module Module within the process for which the tracing level is set. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
Page 1014
The module options vary by process and by hardware-module. Use the ? option when entering this command to see which module options are available with each keyword sequence. Use the show platform software trace message command to view trace messages. Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)