Page 1 Catalyst 3560 Switch Command Reference Cisco IOS Release 12.2(25)SED October 2005 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7816405= Text Part Number: 78-16405-05...
Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the...
Page 3: Table Of Contents
Product Documentation DVD xxii Ordering Documentation xxii Documentation Feedback xxii Cisco Product Security Overview xxiii Reporting Security Problems in Cisco Products xxiii Obtaining Technical Assistance xxiv Cisco Technical Support & Documentation Website xxiv Submitting a Service Request xxiv Definitions of Service Request Severity...
Page 4 Contents Catalyst 3560 Switch Cisco IOS Commands C H A P T E R aaa accounting dot1x aaa authentication dot1x action archive download-sw archive tar 2-10 archive upload-sw 2-13 arp access-list 2-15 auto qos voip 2-17 boot boothlpr 2-22 boot config-file...
Page 5 Contents cluster commander-address 2-54 cluster discovery hop-count 2-56 cluster enable 2-57 cluster holdtime 2-59 cluster member 2-60 cluster outside-interface 2-62 cluster run 2-63 cluster standby-group 2-64 cluster timer 2-66 define interface-range 2-67 delete 2-69 deny (ARP access-list configuration) 2-70 deny (IPv6 access-list configuration) 2-72 deny (MAC access-list configuration) 2-77...
Page 6 Contents flowcontrol 2-114 interface port-channel 2-116 interface range 2-118 interface vlan 2-120 ip access-group 2-122 ip address 2-125 ip arp inspection filter vlan 2-127 ip arp inspection limit 2-129 ip arp inspection log-buffer 2-131 ip arp inspection trust 2-133 ip arp inspection validate 2-135 ip arp inspection vlan 2-137...
Page 7 Contents ip ssh 2-177 ip verify source 2-179 ipv6 access-list 2-180 ipv6 mld snooping 2-183 ipv6 mld snooping last-listener-query-count 2-185 ipv6 mld snooping last-listener-query-interval 2-187 ipv6 mld snooping listener-message-suppression 2-189 ipv6 mld snooping robustness-variable 2-191 ipv6 mld snooping tcn 2-193 ipv6 mld snooping vlan 2-195 ipv6 traffic-filter...
Page 8 Contents mls qos dscp-mutation 2-244 mls qos map 2-246 mls qos queue-set output buffers 2-250 mls qos queue-set output threshold 2-252 mls qos rewrite ip dscp 2-254 mls qos srr-queue input bandwidth 2-256 mls qos srr-queue input buffers 2-258 mls qos srr-queue input cos-map 2-260 mls qos srr-queue input dscp-map 2-262...
Page 9 Contents renew ip dhcp snooping database 2-327 rmon collection stats 2-329 sdm prefer 2-330 service password-recovery 2-333 service-policy 2-335 2-338 setup 2-340 setup express 2-343 show access-lists 2-345 show archive status 2-348 show arp access-list 2-349 show auto qos 2-350 show boot 2-354 show cable-diagnostics tdr...
Page 10 Contents show ip arp inspection 2-414 show ip dhcp snooping 2-417 show ip dhcp snooping binding 2-418 show ip dhcp snooping database 2-420 show ip igmp profile 2-422 show ip igmp snooping 2-423 show ip igmp snooping groups 2-426 show ip igmp snooping mrouter 2-428 show ip igmp snooping querier 2-430...
Page 11 Contents show mls qos queue-set 2-490 show mls qos vlan 2-492 show monitor 2-493 show mvr 2-496 show mvr interface 2-498 show mvr members 2-500 show pagp 2-502 show parser macro 2-504 show policy-map 2-507 show port-security 2-509 show power inline 2-512 show sdm prefer 2-514...
Page 12 Contents spanning-tree link-type 2-574 spanning-tree loopguard default 2-576 spanning-tree mode 2-578 spanning-tree mst configuration 2-580 spanning-tree mst cost 2-582 spanning-tree mst forward-time 2-584 spanning-tree mst hello-time 2-585 spanning-tree mst max-age 2-586 spanning-tree mst max-hops 2-587 spanning-tree mst port-priority 2-589 spanning-tree mst pre-standard 2-591 spanning-tree mst priority 2-592...
Page 13 Contents switchport private-vlan 2-642 switchport protected 2-644 switchport trunk 2-646 switchport voice vlan 2-649 system env temperature threshold yellow 2-651 system mtu 2-653 test cable-diagnostics tdr 2-655 traceroute mac 2-656 traceroute mac ip 2-659 trust 2-661 udld 2-663 udld port 2-665 udld reset 2-667...
Page 14 Contents load_helper A-13 memory A-14 mkdir A-15 more A-16 rename A-17 reset A-18 rmdir A-19 A-20 type A-23 unset A-24 version A-26 Catalyst 3560 Switch Debug Commands A P P E N D I X debug auto qos debug backup debug cluster debug dot1x debug dtp...
Page 15 Contents debug platform cpu-queues B-31 debug platform device-manager B-33 debug platform dot1x B-34 debug platform etherchannel B-35 debug platform fallback-bridging B-36 debug platform forw-tcam B-37 debug platform frontend-controller B-38 debug platform ip arp inspection B-40 debug platform ip dhcp B-41 debug platform ip igmp snooping B-42 debug platform ip multicast...
Page 16 Contents debug spanning-tree bpdu-opt B-78 debug spanning-tree mstp B-79 debug spanning-tree switch B-81 debug spanning-tree uplinkfast B-83 debug sw-vlan B-84 debug sw-vlan ifs B-86 debug sw-vlan notification B-88 debug sw-vlan vtp B-90 debug udld B-92 debug vqpc B-94 Catalyst 3560 Switch Show Platform Commands A P P E N D I X show platform acl show platform backup interface...
Page 17 Contents show platform stp-instance C-35 show platform tcam C-36 show platform vlan C-39 N D E X Catalyst 3560 Switch Command Reference xvii 78-16405-05...
Page 18 Contents Catalyst 3560 Switch Command Reference xviii 78-16405-05...
Page 19: Preface
This guide provides the information that you need about the Layer 2 and Layer 3 commands that have been created or changed for use with the Catalyst 3560 switches. For information about the standard Cisco IOS Release 12.2 commands, see the Cisco IOS documentation set available from the Cisco.com home page by selecting Technical Support &...
Page 20: Conventions
Means reader be careful. In this situation, you might do something that could result in equipment Caution damage or loss of data. Related Publications These documents provide complete information about the switch and are available from this Cisco.com site: http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/index.htm Before installing, configuring, or upgrading the switch, see these documents: Note For initial configuration information, see the “Using Express Setup”...
Page 21: Obtaining Documentation
For upgrade information, see the “Downloading Software” section in the release notes. • You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and from the telephone numbers listed in the “Obtaining Documentation” section on page xxi.
Page 22: Product Documentation Dvd
Cisco products and to view technical documentation in HTML. With the DVD, you have access to the same documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .pdf versions of the documentation available.
Page 23: Cisco Product Security Overview
Register to receive security information from Cisco. • A current list of security advisories and notices for Cisco products is available at this URL: http://www.cisco.com/go/psirt If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL: http://www.cisco.com/en/US/products/products_psirt_rss_feed.html...
Page 24: Obtaining Technical Assistance
Cisco engineer. The TAC Service Request Tool is located at this URL: http://www.cisco.com/techsupport/servicerequest For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
Page 25: Definitions Of Service Request Severity
Definitions of Service Request Severity To ensure that all service requests are reported in a standard format, Cisco has established severity definitions. Severity 1 (S1)—Your network is “down,” or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Page 26 You can access the Internet Protocol Journal at this URL: http://www.cisco.com/ipj Networking products offered by Cisco Systems, as well as customer support services, can be • obtained at this URL: http://www.cisco.com/en/US/products/index.html...
Page 27: Chapter 1 Using The Command-Line Interface
C H A P T E R Using the Command-Line Interface The Catalyst 3560 switch is supported by Cisco IOS software. This chapter describes how to use the switch command-line interface (CLI) to configure software features. For a complete description of the commands that support these features, see Chapter 2, “Catalyst 3560...
Page 28 Chapter 1 Using the Command-Line Interface CLI Command Modes Table 1-1 lists the main command modes, how to access each mode, the prompt you see in that mode, and how to exit that mode. The prompts listed use the default name Switch. Table 1-1 Command Modes Summary Command Mode...
Page 29: User Exec Mode
Chapter 1 Using the Command-Line Interface CLI Command Modes User EXEC Mode After you access the device, you are automatically in user EXEC command mode. The EXEC commands available at the user level are a subset of those available at the privileged level. In general, use the user EXEC commands to temporarily change terminal settings, perform basic tests, and list system information.
Page 30: Interface Configuration Mode
Chapter 1 Using the Command-Line Interface CLI Command Modes The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt. Switch(config)# ? To exit global configuration command mode and to return to privileged EXEC mode, enter the end or exit command, or press Ctrl-Z.
Page 31: Vlan Configuration Mode
Chapter 1 Using the Command-Line Interface CLI Command Modes VLAN Configuration Mode You can use the VLAN configuration commands to create or modify VLAN parameters for VLAN IDs 1 to 1005. Enter the vlan database privileged EXEC command to access VLAN configuration mode: Switch# vlan database Switch(vlan)# The supported commands can vary depending on the version of software in use.
Page 32: Commands Changed In Cisco Ios 12.2(20)Se
Commands Changed in Cisco IOS 12.2(20)SE Commands Changed in Cisco IOS 12.2(20)SE Table 1-2 lists describes the commands that have the same function but different syntax than they did in software releases before Cisco IOS Release 12.2(20)SE. Table 1-2 Commands Changed Releases earlier than...
Page 33: Chapter 2 Catalyst 3560 Switch Cisco Ios Commands
C H A P T E R Catalyst 3560 Switch Cisco IOS Commands aaa accounting dot1x Use the aaa accounting dot1x global configuration command to enable authentication, authorization, and accounting (AAA) accounting and to create method lists defining specific accounting methods on a per-line or per-interface basis for IEEE 802.1x sessions.
Page 34: Chapter 2 Catalyst 3560 Switch Cisco Io Command
IEEE 802.1x. aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. dot1x reauthentication Enables or disables periodic reauthentication. dot1x timeout Sets the number of seconds between re-authentication attempts.
Page 35: Aaa Authentication Dot1X
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands aaa authentication dot1x aaa authentication dot1x Use the aaa authentication dot1x global configuration command to specify the authentication, authorization, and accounting (AAA) method to use on ports complying with IEEE 802.1x. Use the no form of this command to disable authentication.
Page 36 Description aaa new-model Enables the AAA access control model. For syntax information, see the Cisco IOS Security Command Reference, Release 12.2 > Authentication, Authorization, and Accounting > Authentication Commands. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
Page 37: Action
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands action action Use the action access-map configuration command to set the action for the VLAN access map entry. Use the no form of this command to return to the default setting. action {drop | forward}...
Page 38 Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. ip access-list Creates a named access list. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands.
Page 39: Archive Download-Sw
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive download-sw archive download-sw Use the archive download-sw privileged EXEC command to download a new image from a TFTP server to the switch and to overwrite or keep the existing image. archive download-sw {/force-reload | /imageonly | /leave-old-sw | /no-set-boot | /overwrite |...
Page 40 The /imageonly option removes the HTML files for the existing image if the existing image is being removed or replaced. Only the Cisco IOS image (without the HTML files) is downloaded. Using the /safe or /leave-old-sw option can cause the new image download to fail if there is insufficient flash memory.
Page 41 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive download-sw Related Commands Command Description archive tar Creates a tar file, lists the files in a tar file, or extracts the files from a tar file. archive upload-sw Uploads an existing image on the switch to a server.
Page 42: Archive Tar
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive tar archive tar Use the archive tar privileged EXEC command to create a tar file, list files in a tar file, or extract the files from a tar file. archive tar {/create destination-url flash:/file-url} | {/table source-url} | {/xtract source-url flash:/file-url [dir/file...]}...
Page 43: Archive Tar
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive tar /table source-url Display the contents of an existing tar file to the screen. For source-url, specify the source URL alias for the local or network file system. These options are supported: The syntax for the local flash file system: •...
Page 44 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive tar Command Modes Privileged EXEC Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines Filenames and directory names are case sensitive. Image names are case sensitive. Examples This example shows how to create a tar file. The command writes the contents of the new-configs directory on the local flash device to a file named saved.tar on the TFTP server at 172.20.10.30:...
Page 45: Archive Upload-Sw
Use the upload feature only if the HTML files associated with the embedded device manager have been installed with the existing image. The files are uploaded in this sequence: the Cisco IOS image, the HTML files, and info. After these files are uploaded, the software creates the tar file.
Page 46 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands archive upload-sw Examples This example shows how to upload the currently running image to a TFTP server at 172.20.140.2: Switch# archive upload-sw tftp://172.20.140.2/test-image.tar Related Commands Command Description archive download-sw Downloads a new image to the switch.
Page 47: Arp Access-List
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands arp access-list arp access-list Use the arp access-list global configuration command to define an Address Resolution Protocol (ARP) access control list (ACL) or to add clauses to the end of a previously defined list. Use the no form of this command to delete the specified ARP access list.
Page 48 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands arp access-list Examples This example shows how to define an ARP access list and to permit both ARP requests and ARP responses from a host with an IP address of 1.1.1.1 and a MAC address of 0000.0000.abcd: Switch(config)# arp access-list static-hosts Switch(config-arp-nacl)# permit ip host 1.1.1.1 mac host 00001.0000.abcd...
Page 49: Auto Qos Voip
[cisco-phone | cisco-softphone | trust] Syntax Description cisco-phone Identify this port as connected to a Cisco IP Phone, and automatically configure QoS for VoIP. The QoS labels of incoming packets are trusted only when the telephone is detected.
Page 50 Cisco IP Phones on switch ports. In Cisco IOS Release 12.2(20)SE or later, auto-QoS configures the switch for VoIP with Cisco IP Phones on switch and routed ports and for VoIP with devices running the Cisco SoftPhone application. These releases support only Cisco IP SoftPhone Version 1.3(3) or later.
Page 51 Table 2-3. You can enable auto-QoS on static, dynamic-access, and voice VLAN access, and trunk ports. When enabling auto-QoS with a Cisco IP Phone on a routed port, you must assign a static IP address to the IP phone. Note When a device running Cisco SoftPhone is connected to a switch or routed port, the switch supports only one Cisco SoftPhone application per port.
Page 52 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands auto qos voip To disable auto-QoS on a port, use the no auto qos voip interface configuration command. Only the auto-QoS-generated interface configuration commands for this port are removed. If this is the last port...
Page 53 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands auto qos voip Command Description srr-queue bandwidth shape Assigns the shaped weights and enables bandwidth shaping on the four egress queues mapped to a port. srr-queue bandwidth share Assigns the shared weights and enables bandwidth sharing on the four egress queues mapped to a port.
Page 54: Boot Boothlpr
Use the boot boothlpr global configuration command to load a special Cisco IOS image, which when loaded into memory, can load a second Cisco IOS image into memory and launch it. This variable is used only for internal development and testing. Use the no form of this command to return to the default setting.
Page 55: Boot Config-File
Use the boot config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the system configuration. Use the no form of this command to return to the default setting.
Page 56: Boot Enable-Break
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands boot enable-break boot enable-break Use the boot enable-break global configuration command to enable interrupting the automatic boot process. Use the no form of this command to return to the default setting. boot enable-break...
Page 57: Boot Helper
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands boot helper boot helper Use the boot helper global configuration command to dynamically load files during boot loader initialization to extend or patch the functionality of the boot loader. Use the no form of this command to return to the default.
Page 58: Boot Helper-Config-File
Use the boot helper-config-file global configuration command to specify the name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded. Use the no form of this command to return to the default setting.
Page 59: Boot Manual
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands boot manual boot manual Use the boot manual global configuration command to enable manually booting the switch during the next boot cycle. Use the no form of this command to return to the default setting.
Page 60: Boot Private-Config-File
Use the boot private-config-file global configuration command to specify the filename that Cisco IOS uses to read and write a nonvolatile copy of the private configuration. Use the no form of this command to return to the default setting.
Page 61: Boot System
Use the boot system global configuration command to specify the Cisco IOS image to load during the next boot cycle. Use the no form of this command to return to the default setting. boot system filesystem:/file-url ...
Page 62: Channel-Group
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands channel-group channel-group Use the channel-group interface configuration command to assign an Ethernet port to an EtherChannel group, to enable an EtherChannel mode, or both. Use the no form of this command to remove an Ethernet port from an EtherChannel group.
Page 63 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands channel-group Defaults No channel groups are assigned. No mode is configured. Command Modes Interface configuration Command History Release Modification 12.1(19)EA1 This command was introduced. 12.2(25)SE The channel-group-number range was changed from 1 to 12 to 1 to 48.
Page 64: Channel-Protocol
If IEEE 802.1x is enabled on a not-yet active port of an EtherChannel in software releases earlier than Note Cisco IOS Release 12.2(20)SE, the port does not join the EtherChannel. Do not configure a secure port as part of an EtherChannel or an EtherChannel port as a secure port.
Page 65: Channel-Protocol
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands channel-protocol channel-protocol Use the channel-protocol interface configuration command to restrict the protocol used on a port to manage channeling. Use the no form of this command to return to the default setting.
Page 66: Class
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands class class Use the class policy-map configuration command to define a traffic classification match criteria (through the police, set, and trust policy-map class configuration commands) for the specified class-map name. Use the no form of this command to delete an existing class map.
Page 67 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands class Examples This example shows how to create a policy map called policy1. When attached to the ingress direction, it matches all the incoming traffic defined in class1, sets the IP Differentiated Services Code Point (DSCP) to 10, and polices the traffic at an average rate of 1 Mbps and bursts at 20 KB.
Page 68: Class-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands class-map class-map Use the class-map global configuration command to create a class map to be used for matching packets to the class whose name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and to return to global configuration mode.
Page 69 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands class-map Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs). Examples This example shows how to configure the class map called class1 with one match criterion, which is an...
Page 70: Clear Ip Arp Inspection Log
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear ip arp inspection log clear ip arp inspection log Use the clear ip arp inspection log privileged EXEC command to clear the dynamic Address Resolution Protocol (ARP) inspection log buffer. clear ip arp inspection log Syntax Description This command has no arguments or keywords.
Page 71: Clear Ip Arp Inspection Statistics
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear ip arp inspection statistics clear ip arp inspection statistics Use the clear ip arp inspection statistics privileged EXEC command to clear the dynamic Address Resolution Protocol (ARP) inspection statistics. clear ip arp inspection statistics [vlan vlan-range]...
Page 72: Clear Ip Dhcp Snooping Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear ip dhcp snooping database clear ip dhcp snooping database Use the clear ip dhcp snooping database privileged EXEC command to clear the DHCP binding database agent statistics. clear ip dhcp snooping database statistics This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI).
Page 73: Clear Ipc
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear ipc clear ipc Use the clear ipc privileged EXEC command on the switch stack or on a standalone switch to clear Interprocess Communications Protocol (IPC) statistics. clear ipc {queue-statistics | statistics}...
Page 74: Clear L2Protocol-Tunnel Counters
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear l2protocol-tunnel counters clear l2protocol-tunnel counters Use the clear l2protocol-tunnel counters privileged EXEC command to clear the protocol counters in protocol tunnel ports. clear l2protocol-tunnel counters [interface-id] Syntax Description interface-id (Optional) Specify interface (physical interface or port channel) for which protocol counters are to be cleared.
Page 75: Clear Lacp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear lacp clear lacp Use the clear lacp privileged EXEC command to clear Link Aggregation Control Protocol (LACP) channel-group counters. clear lacp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 48.
Page 76: Clear Mac Address-Table
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear mac address-table clear mac address-table Use the clear mac address-table privileged EXEC command to delete from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Page 77 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear mac address-table Related Commands Command Description mac address-table notification Enables the MAC address notification feature. show mac address-table Displays the MAC address table static and dynamic entries. show mac address-table notification Displays the MAC address notification settings for all interfaces or the specified interface.
Page 78: Clear Mac Address-Table Move Update
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear mac address-table move update clear mac address-table move update Use the clear mac address-table move update privileged EXEC command to clear the mac address-table-move update-related counters. clear mac address-table move update Syntax Description This command has no arguments or keywords.
Page 79: Clear Pagp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear pagp clear pagp Use the clear pagp privileged EXEC command to clear Port Aggregation Protocol (PAgP) channel-group information. clear pagp {channel-group-number counters | counters} Syntax Description channel-group-number (Optional) Channel group number. The range is 1 to 48.
Page 80: Clear Port-Security
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear port-security clear port-security Use the clear port-security privileged EXEC command to delete from the MAC address table all secure addresses or all secure addresses of a specific type (configured, dynamic, or sticky) on the switch or on an interface.
Page 81 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear port-security This example shows how to remove all the dynamic secure addresses learned on a specific interface: Switch# clear port-security dynamic interface gigabitethernet0/1 This example shows how to remove all the dynamic secure addresses from the address table:...
Page 82: Clear Spanning-Tree Counters
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear spanning-tree counters clear spanning-tree counters Use the clear spanning-tree counters privileged EXEC command to clear the spanning-tree counters. clear spanning-tree counters [interface interface-id] Syntax Description interface interface-id (Optional) Clear all spanning-tree counters on the specified interface. Valid interfaces include physical ports, VLANs, and port channels.
Page 83: Clear Spanning-Tree Detected-Protocols
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear spanning-tree detected-protocols clear spanning-tree detected-protocols Use the clear spanning-tree detected-protocols privileged EXEC command to restart the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface.
Page 84: Clear Vmps Statistics
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear vmps statistics clear vmps statistics Use the clear vmps statistics privileged EXEC command to clear the statistics maintained by the VLAN Query Protocol (VQP) client. clear vmps statistics Syntax Description This command has no arguments or keywords.
Page 85: Clear Vtp Counters
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear vtp counters clear vtp counters Use the clear vtp counters privileged EXEC command to clear the VLAN Trunking Protocol (VTP) and pruning counters. clear vtp counters Syntax Description This command has no arguments or keywords.
Page 86: Cluster Commander-Address
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster commander-address cluster commander-address You do not need to enter this command. The cluster command switch automatically provides its MAC address to cluster member switches when these switches join the cluster. The cluster member switch adds this information and other cluster information to its running configuration file.
Page 87 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster commander-address Examples This is partial sample output from the running configuration of a cluster member. Switch(config)# show running-configuration <output truncated> cluster commander-address 00e0.9bc0.a500 member 4 name my_cluster <output truncated> This example shows how to remove a member from the cluster by using the cluster member console.
Page 88: Cluster Discovery Hop-Count
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster discovery hop-count cluster discovery hop-count Use the cluster discovery hop-count global configuration command on the cluster command switch to set the hop-count limit for extended discovery of candidate switches. Use the no form of this command to return to the default setting.
Page 89: Cluster Enable
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster enable cluster enable Use the cluster enable global configuration command on a command-capable switch to enable it as the cluster command switch, assign a cluster name, and to optionally assign a member number to it. Use the no form of the command to remove all members and to make the cluster command switch a candidate switch.
Page 90: Cluster Enable
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster enable Related Commands Command Description show cluster Displays the cluster status and a summary of the cluster to which the switch belongs. Catalyst 3560 Switch Command Reference 2-58 78-16405-05...
Page 91: Cluster Holdtime
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster holdtime cluster holdtime Use the cluster holdtime global configuration command to set the duration in seconds before a switch (either the command or cluster member switch) declares the other switch down after not receiving heartbeat messages.
Page 92: Cluster Member
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster member cluster member Use the cluster member global configuration command on the cluster command switch to add candidates to a cluster. Use the no form of the command to remove members from the cluster.
Page 93 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster member Examples This example shows how to add a switch as member 2 with MAC address 00E0.1E00.2222 and the password key to a cluster. The cluster command switch adds the candidate to the cluster through VLAN 3.
Page 94: Cluster Outside-Interface
Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select the Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference 2-62 78-16405-05...
Page 95: Cluster Run
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster run cluster run Use the cluster run global configuration command to enable clustering on a switch. Use the no form of this command to disable clustering on a switch. cluster run...
Page 96: Cluster Standby-Group
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster standby-group cluster standby-group Use the cluster standby-group global configuration command to enable cluster command-switch redundancy by binding the cluster to an existing Hot Standby Router Protocol (HSRP). Entering the routing-redundancy keyword enables the same HSRP group to be used for cluster command-switch redundancy and routing redundancy.
Page 97 Related Commands Command Description standby ip Enables HSRP on the interface. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. show cluster Displays the cluster status and a summary of the cluster to which the switch belongs.
Page 98: Cluster Timer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands cluster timer cluster timer Use the cluster timer global configuration command to set the interval in seconds between heartbeat messages. Use the no form of this command to set the interval to the default value.
Page 99: Define Interface-Range
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands define interface-range define interface-range Use the define interface-range global configuration command to create an interface-range macro. Use the no form of this command to delete the defined macro. define interface-range macro-name interface-range...
Page 100 Executes a command on multiple ports at the same time. show running-config Displays the current operating configuration, including defined macros. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 101: Delete
The prompting behavior depends on the setting of the file prompt global configuration command. By default, the switch prompts for confirmation on destructive file operations. For more information about this command, see the Cisco IOS Command Reference for Release 12.1. Examples...
Page 102: Deny (Arp Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (ARP access-list configuration) deny (ARP access-list configuration) Use the deny Address Resolution Protocol (ARP) access-list configuration command to deny an ARP packet based on matches against the DHCP bindings. Use the no form of this command to remove the specified access control entry (ACE) from the access list.
Page 103 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (ARP access-list configuration) Command History Release Modification 12.2(20)SE This command was introduced. Usage Guidelines You can add deny clauses to drop ARP packets based on matching criteria. Examples This example shows how to define an ARP access list and to deny both ARP requests and ARP responses from a host with an IP address of 1.1.1.1 and a MAC address of 0000.0000.abcd:...
Page 104: Deny (Ipv6 Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) deny (IPv6 access-list configuration) Use the deny command in IPv6 access list configuration mode to set deny conditions for an IPv6 access list. Use the no form of this command to remove the deny conditions.
Page 105 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) Syntax Description protocol Name or number of an Internet protocol. It can be one of the keywords ahp, esp, icmp, ipv6, pcp, sctp, tcp, or udp, or an integer in the range from 0 to 255 representing an IPv6 protocol number.
Page 106 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) fragments (Optional) Match non-initial fragmented packets where the fragment extension header contains a non-zero fragment offset. The fragments keyword is an option only if the protocol is ipv6 and the operator [port-number] arguments are not specified.
Page 107 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) Although visible in the command-line help strings, the flow-label, routing, and Note undetermined-transport keywords are not supported. Defaults No IPv6 access list is defined. Command Modes IPv6 access list configuration...
Page 108 Examples This example configures the IPv6 access list named CISCO and applies the access list to outbound traffic on a Layer 3 interface. The first deny entry in the list prevents all packets that have a destination TCP port number greater than 5000 from leaving the interface. The second deny entry in the list prevents all packets that have a source UDP port number less than 5000 from leaving the interface.
Page 109: Deny (Mac Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (MAC access-list configuration) deny (MAC access-list configuration) Use the deny MAC access-list configuration command to prevent non-IP traffic from being forwarded if the conditions are matched. Use the no form of this command to remove a deny condition from the named MAC access list.
Page 110 To filter IPX traffic, you use the type mask or lsap lsap mask keywords, depending on the type of IPX encapsulation being used. Filter criteria for IPX encapsulation types as specified in Novell terminology and Cisco IOS terminology are listed in Table 2-4.
Page 111 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (MAC access-list configuration) Usage Guidelines You enter MAC-access list configuration mode by using the mac access-list extended global configuration command. If you use the host keyword, you cannot enter an address mask; if you do not use the host keyword, you must enter an address mask.
Page 112: Dot1X
Before globally enabling IEEE 802.1x on a switch, remove the EtherChannel configuration from the interfaces on which IEEE 802.1x and EtherChannel are configured. If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the device is running ACS Version 3.2.1 or later.
Page 113 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x Related Commands Command Description dot1x guest-vlan Enables and specifies an active VLAN as an IEEE 802.1x guest VLAN. dot1x port-control Enables manual control of the authorization state of the port. show dot1x [interface Displays IEEE 802.1x status for the specified port.
Page 114: Dot1X Auth-Fail Max-Attempts
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail max-attempts dot1x auth-fail max-attempts Use the dot1x auth-fail max-attempts interface configuration command to configure the maximum allowable authentication attempts before a port is moved to the restricted VLAN. To return to the default setting, use the no form of this command.
Page 115 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail max-attempts Related Commands Command Description dot1x auth-fail vlan [vlan id] Enables the optional restricted VLAN feature. dot1x max-reauth-req [count] Sets the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state.
Page 116: Dot1X Auth-Fail Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail vlan dot1x auth-fail vlan Use the dot1x auth-fail vlan interface configuration command to enable the restricted VLAN on a port. To return to the default setting, use the no form of this command.
Page 117 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail vlan When a restricted VLAN port is moved to an unauthorized state, the authentication process restarts. If the supplicant fails the authentication process again, the authenticator waits in the held state. After the supplicant has correctly re-authenticated, all IEEE 802.1x ports are reinitialized and treated as normal...
Page 118: Dot1X Control-Direction
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x control-direction dot1x control-direction Use the dot1x control-direction interface configuration command to change the port control to unidirectional or bidirectional control. Use the no form of this command to return to the default setting.
Page 119 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x control-direction If you enter the dot1x control-direction in interface configuration command and the port cannot support this mode due to a configuration conflict, this appears in the show dot1x all command output:...
Page 120: Dot1X Critical
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x critical dot1x critical Use the dot1x critical interface configuration command to enable the inaccessible authentication bypass feature. To disable the feature, use the no form of this command. dot1x critical no dot1x critical Syntax Description This command has no arguments or keywords.
Page 121: Dot1X Critical
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x critical Examples This example shows how to enable the inaccessible authentication bypass feature on port 1: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# interface gigabitethernet0/1...
Page 122: Dot1X Default
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x default dot1x default Use the dot1x default interface configuration command to reset the IEEE 802.1x parameters to their default values. dot1x default Syntax Description This command has no arguments or keywords.
Page 123: Dot1X Guest-Vlan
EAPOL packets are not sent by the client. Before Cisco IOS Release 12.2(25)SE, the switch did not maintain the EAPOL packet history and allowed clients that failed authentication access to the guest VLAN, regardless of whether EAPOL packets had been detected on the interface.
Page 124 Catalyst 3560 Switch Cisco IOS Commands dot1x guest-vlan With Cisco IOS Release 12.2(25)SE and later, the switch maintains the EAPOL packet history. If another EAPOL packet is detected on the interface during the lifetime of the link, the guest VLAN feature is disabled.
Page 125: Dot1X Host-Mode
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x host-mode dot1x host-mode Use the dot1x host-mode interface configuration command to allow a single host (client) or multiple hosts on an IEEE 802.1x-authorized port that has the dot1x port-control interface configuration command set to auto.
Page 126 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x host-mode Related Commands Command Description show dot1x [interface interface-id] Displays IEEE 802.1x status for the specified port. Catalyst 3560 Switch Command Reference 2-94 78-16405-05...
Page 127: Dot1X Initialize
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x initialize dot1x initialize Use the dot1x initialize privileged EXEC command to manually return the specified IEEE 802.1x-enabled port to an unauthorized state before initiating a new authentication session on the port.
Page 128: Dot1X Max-Reauth-Req
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x max-reauth-req dot1x max-reauth-req Use the dot1x max-reauth-req interface configuration command to set the maximum number of times that the switch restarts the authentication process before a port changes to the unauthorized state. Use the no form of this command to return to the default setting.
Page 129: Dot1X Max-Req
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x max-req dot1x max-req Use the dot1x max-req interface configuration command to set the maximum number of times that the switch sends an Extensible Authentication Protocol (EAP) frame from the authentication server (assuming that no response is received) to the client before restarting the authentication process.
Page 130: Dot1X Multiple-Hosts
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x multiple-hosts dot1x multiple-hosts This is an obsolete command. In past releases, the dot1x multiple-hosts interface configuration command was used to allow multiple hosts (clients) on an IEEE 802.1x-authorized port. Command History...
Page 131: Dot1X Port-Control
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x port-control dot1x port-control Use the dot1x port-control interface configuration command to enable manual control of the authorization state of the port. Use the no form of this command to return to the default setting.
Page 132 EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x on an EtherChannel port, an error message appears, and IEEE 802.1x is not enabled. In software releases earlier than Cisco IOS Release 12.2(20)SE, if IEEE 802.1x is enabled Note on a not-yet active port of an EtherChannel, the port does not join the EtherChannel.
Page 133: Dot1X Re-Authenticate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x re-authenticate dot1x re-authenticate Use the dot1x re-authenticate privileged EXEC command to manually initiate a re-authentication of the specified IEEE 802.1x-enabled port. dot1x re-authenticate interface interface-id Syntax Description interface interface-id Module and port number of the interface to re-authenticate.
Page 134: Dot1X Re-Authentication
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x re-authentication dot1x re-authentication This is an obsolete command. In past releases, the dot1x re-authentication global configuration command was used to set the amount of time between periodic re-authentication attempts. Command History...
Page 135: Dot1X Reauthentication
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x reauthentication dot1x reauthentication Use the dot1x reauthentication interface configuration command to enable periodic re-authentication of the client. Use the no form of this command to return to the default setting. dot1x reauthentication...
Page 136: Dot1X Timeout
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x timeout dot1x timeout Use the dot1x timeout interface configuration command to set IEEE 802.1x timers. Use the no form of this command to return to the default setting. dot1x timeout {quiet-period seconds | reauth-period {seconds | server} | server-timeout seconds...
Page 137: Dot1X Timeout
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x timeout Usage Guidelines You should change the default value of this command only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers.
Page 138: Duplex
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands duplex duplex Use the duplex interface configuration command to specify the duplex mode of operation for a port. Use the no form of this command to return the port to its default value.
Page 139 The duplex setting remains as configured on each end of the link, which could result in a duplex setting mismatch. Beginning with Cisco IOS Release 12.2(20)SE1, you can configure the duplex setting when the speed is set to auto.
Page 140: Errdisable Detect Cause
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable detect cause errdisable detect cause Use the errdisable detect cause global configuration command to enable error-disabled detection for a specific cause or all causes. Use the no form of this command to disable the error-disabled detection feature.
Page 141 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable detect cause Usage Guidelines A cause (all, dhcp-rate-limit, and so forth) is the reason why the error-disabled state occurred. When a cause is detected on an interface, the interface is placed in an error-disabled state, an operational state that is similar to a link-down state.
Page 142: Errdisable Recovery
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable recovery errdisable recovery Use the errdisable recovery global configuration command to configure the recover mechanism variables. Use the no form of this command to return to the default setting. errdisable recovery {cause {all | arp-inspection | bpduguard | channel-misconfig |...
Page 143 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable recovery vmps Enable the timer to recover from the VLAN Membership Policy Server (VMPS) error-disabled state. interval interval Specify the time to recover from the specified error-disabled state. The range is 30 to 86400 seconds. The same interval is applied to all causes. The default interval is 300 seconds.
Page 144 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable recovery Related Commands Command Description show errdisable recovery Displays error-disabled recovery timer information. show interfaces status Displays interface status or a list of interfaces in error-disabled err-disabled state. Catalyst 3560 Switch Command Reference...
Page 145: Exception Crashinfo
Use the exception crashinfo global configuration command to configure the switch to create the extended crashinfo file when the Cisco IOS image fails. Use the no form of this command to disable this feature. exception crashinfo...
Page 146: Flowcontrol
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands flowcontrol flowcontrol Use the flowcontrol interface configuration command to set the receive flow-control state for an interface. When flow control send is operable and on for a device and it detects any congestion at its end, it notifies the link partner or the remote device of the congestion by sending a pause frame.
Page 147 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands flowcontrol Table 2-5 shows the flow control results on local and remote ports for a combination of settings. The table assumes that receive desired has the same results as using the receive on keywords.
Page 148: Interface Port-Channel
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface port-channel interface port-channel Use the interface port-channel global configuration command to access or create the port-channel logical interface. Use the no form of this command to remove the port-channel. interface port-channel port-channel-number...
Page 149 Catalyst 3560 Switch Cisco IOS Commands interface port-channel Follow these guidelines when you use the interface port-channel command: If you want to use the Cisco Discovery Protocol (CDP), you must configure it only on the physical • port and not on the port-channel interface.
Page 150: Interface Range
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface range interface range Use the interface range global configuration command to enter interface range configuration mode and to execute a command on multiple ports at the same time. Use the no form of this command to remove an interface range.
Page 151: Interface Range
Creates an interface range macro. show running-config Displays the configuration information currently running on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference...
Page 152: Interface Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface vlan interface vlan Use the interface vlan global configuration command to create or access a dynamic switch virtual interface (SVI) and to enter interface configuration mode. Use the no form of this command to delete an SVI.
Page 153 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface vlan Examples This example shows how to create a new SVI with VLAN ID 23 and to enter interface configuration mode: Switch(config)# interface vlan 23 Switch(config-if)# You can verify your setting by entering the...
Page 154: Ip Access-Group
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group ip access-group Use the ip access-group interface configuration command to control access to a Layer 2 or Layer 3 interface. Use the no form of this command to remove all access groups or the specified access group from the interface.
Page 155 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group You can use router ACLs, input port ACLs, and VLAN maps on the same switch. However, a port ACL takes precedence over a router ACL or VLAN map: When an input port ACL is applied to an interface and a VLAN map is applied to a VLAN that the •...
Page 156 IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands ip access-list Configures a named ACL. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands.
Page 157: Ip Address
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip address ip address Use the ip address interface configuration command to set an IP address for the Layer 2 switch or an IP address for each switch virtual interface (SVI) or routed port on the Layer 3 switch. Use the no form of this command to remove an IP address or to disable IP processing.
Page 158 Related Commands Command Description show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference 2-126...
Page 159: Ip Arp Inspection Filter Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection filter vlan ip arp inspection filter vlan Use the ip arp inspection filter vlan global configuration command to permit or deny Address Resolution Protocol (ARP) requests and responses from a host configured with a static IP address when dynamic ARP inspection is enabled.
Page 160: Ip Arp Inspection Filter Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection filter vlan Examples This example shows how to apply the ARP ACL static-hosts to VLAN 1 for dynamic ARP inspection: Switch(config)# ip arp inspection filter static-hosts vlan 1 You can verify your settings by entering the show ip arp inspection vlan 1 privileged EXEC command.
Page 161: Ip Arp Inspection Limit
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection limit ip arp inspection limit Use the ip arp inspection limit interface configuration command to limit the rate of incoming Address Resolution Protocol (ARP) requests and responses on an interface. It prevents dynamic ARP inspection from using all of the switch resources if a denial-of-service attack occurs.
Page 162: Ip Arp Inspection Limit
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection limit The rate of incoming ARP packets on EtherChannel ports equals the sum of the incoming rate of ARP packets from all the channel members. Configure the rate limit for EtherChannel ports only after examining the rate of incoming ARP packets on all the channel members.
Page 163: Ip Arp Inspection Log-Buffer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection log-buffer ip arp inspection log-buffer Use the ip arp inspection log-buffer global configuration command to configure the dynamic Address Resolution Protocol (ARP) inspection logging buffer. Use the no form of this command to return to the default settings.
Page 164 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection log-buffer Examples This example shows how to configure the logging buffer to hold up to 45 entries: Switch(config)# ip arp inspection log-buffer entries 45 This example shows how to configure the logging rate to 20 log entries per 4 seconds. With this configuration, the switch generates system messages for five entries every second while there are entries in the log buffer.
Page 165: Ip Arp Inspection Trust
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection trust ip arp inspection trust Use the ip arp inspection trust interface configuration command to configure an interface trust state that determines which incoming Address Resolution Protocol (ARP) packets are inspected. Use the no form of this command to return to the default setting.
Page 166 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection trust Related Commands Command Description ip arp inspection Configures the dynamic ARP inspection logging buffer. log-buffer show inventory Displays the trust state and the rate limit of ARP packets for the specified interfaces interface or all interfaces.
Page 167: Ip Arp Inspection Validate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection validate ip arp inspection validate Use the ip arp inspection validate global configuration command to perform specific checks for dynamic Address Resolution Protocol (ARP) inspection. Use the no form of this command to return to the default settings.
Page 168 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection validate Examples This example show how to enable source MAC validation: Switch(config)# ip arp inspection validate src-mac You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC command.
Page 169: Ip Arp Inspection Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan ip arp inspection vlan Use the ip arp inspection vlan global configuration command to enable dynamic Address Resolution Protocol (ARP) inspection on a per-VLAN basis. Use the no form of this command to return to the default setting.
Page 170: Ip Arp Inspection Vlan Logging
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan logging ip arp inspection vlan logging Use the ip arp inspection vlan logging global configuration command to control the type of packets that are logged per VLAN. Use the no form of this command to disable this logging control.
Page 171 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan logging Usage Guidelines The term logged means that the entry is placed into the log buffer and that a system message is generated. The acl-match and dhcp-bindings keywords merge with each other; that is, when you configure an ACL match, the DHCP bindings configuration is not disabled.
Page 172: Ip Dhcp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping ip dhcp snooping Use the ip dhcp snooping global configuration command to globally enable DHCP snooping. Use the no form of this command to return to the default setting.
Page 173: Ip Dhcp Snooping Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping binding ip dhcp snooping binding Use the ip dhcp snooping binding privileged EXEC command to configure the DHCP snooping binding database and to add binding entries to the database. Use the no form of this command to delete entries from the binding database.
Page 174: Ip Dhcp Snooping Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping binding Examples This example shows how to generate a DHCP binding configuration with an expiration time of 1000 seconds on a port in VLAN 1: Switch# ip dhcp snooping binding 0001.1234.1234 vlan 1 172.20.50.5 interface...
Page 175: Ip Dhcp Snooping Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping database ip dhcp snooping database Use the ip dhcp snooping database global configuration command to configure the DHCP snooping binding database agent. Use the no form of this command to disable the agent, to reset the timeout value, or to reset the write-delay value.
Page 176 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping database Usage Guidelines The DHCP snooping binding database can have up to 8192 bindings. To ensure that the lease time in the database is accurate, we recommend that Network Time Protocol...
Page 177: Ip Dhcp Snooping Information Option
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping information option ip dhcp snooping information option Use the ip dhcp snooping information option global configuration command to enable DHCP option-82 data insertion. Use the no form of this command to disable DHCP option-82 data insertion.
Page 178 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping information option Related Commands Command Description show ip dhcp snooping Displays the DHCP snooping configuration. show ip dhcp snooping binding Displays the DHCP snooping binding information. Catalyst 3560 Switch Command Reference...
Page 179: Ip Dhcp Snooping Information Option Allow-Untrusted
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted ip dhcp snooping information option allow-untrusted Use the ip dhcp snooping information option allow-untrusted global configuration command on an aggregation switch to configure it to accept DHCP packets with option-82 information that are received on untrusted ports that might be connected to an edge switch.
Page 180 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping information option allow-untrusted Examples This example shows how to configure an access switch to not check the option-82 information in untrusted packets from an edge switch and to accept the packets: Switch(config)# ip dhcp snooping information option allow-untrusted You can verify your settings by entering the show ip dhcp snooping privileged EXEC command.
Page 181: Ip Dhcp Snooping Limit Rate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping limit rate ip dhcp snooping limit rate Use the ip dhcp snooping limit rate interface configuration command to configure the number of DHCP messages an interface can receive per second. Use the no form of this command to return to the default setting.
Page 182: Ip Dhcp Snooping Limit Rate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping limit rate Related Commands Command Description errdisable recovery Configures the recover mechanism. show ip dhcp snooping Displays the DHCP snooping configuration. show ip dhcp snooping binding Displays the DHCP snooping binding information.
Page 183: Ip Dhcp Snooping Trust
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping trust ip dhcp snooping trust Use the ip dhcp snooping trust interface configuration command to configure a port as trusted for DHCP snooping purposes. Use the no form of this command to return to the default setting.
Page 184: Ip Dhcp Snooping Verify
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping verify ip dhcp snooping verify Use the ip dhcp snooping verify global configuration command to configure the switch to verify on an untrusted port that the source MAC address in a DHCP packet matches the client hardware address. Use the no form of this command to configure the switch to not verify the MAC addresses.
Page 185: Ip Dhcp Snooping Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip dhcp snooping vlan ip dhcp snooping vlan Use the ip dhcp snooping vlan global configuration command to enable DHCP snooping on a VLAN. Use the no form of this command to return to the default setting.
Page 186: Ip Igmp Filter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp filter ip igmp filter Use the ip igmp filter interface configuration command to control whether or not all hosts on a Layer 2 interface can join one or more IP multicast groups by applying an Internet Group Management Protocol (IGMP) profile to the interface.
Page 187: Ip Igmp Max-Groups
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp max-groups ip igmp max-groups Use the ip igmp max-groups interface configuration command to set the maximum number of Internet Group Management Protocol (IGMP) groups that a Layer 2 interface can join or to configure the IGMP throttling action when the maximum number of entries is in the forwarding table.
Page 188 Displays the running configuration on the switch interface, including interface-id the maximum number of IGMP groups that an interface can join and the throttling action. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 189: Ip Igmp Profile
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp profile ip igmp profile Use the ip igmp profile global configuration command to create an Internet Group Management Protocol (IGMP) profile and enter IGMP profile configuration mode. From this mode, you can specify the configuration of the IGMP profile to be used for filtering IGMP membership reports from a switchport.
Page 190: Ip Igmp Profile
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp profile Related Commands Command Description ip igmp filter Applies the IGMP profile to the specified interface. show ip igmp profile Displays the characteristics of all IGMP profiles or the specified IGMP profile number.
Page 191: Ip Igmp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping ip igmp snooping Use the ip igmp snooping global configuration command to globally enable Internet Group Management Protocol (IGMP) snooping on the switch or to enable it on a per-VLAN basis. Use the no form of this command to return to the default setting.
Page 192: Ip Igmp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
Page 193: Ip Igmp Snooping Last-Member-Query-Interval
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval ip igmp snooping last-member-query-interval Use the ip igmp snooping last-member-query-interval global configuration command to enable the Internet Group Management Protocol (IGMP) configurable-leave timer globally or on a per-VLAN basis.
Page 194 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping last-member-query-interval Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan immediate-leave Enables IGMP Immediate-Leave processing. ip igmp snooping vlan mrouter Configures a Layer 2 port as a multicast router port.
Page 195: Ip Igmp Snooping Querier
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping querier ip igmp snooping querier Use the ip igmp snooping querier global configuration command to globally enable the Internet Group Management Protocol (IGMP) querier function in Layer 2 networks. Use the command with keywords to enable and configure the IGMP querier feature on a VLAN interface.
Page 196: Ip Igmp Snooping Querier
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping querier Usage Guidelines Use this command to enable IGMP snooping to detect the IGMP version and IP address of a device that sends IGMP query messages, which is also called a querier.
Page 197: Ip Igmp Snooping Report-Suppression
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping report-suppression ip igmp snooping report-suppression Use the ip igmp snooping report-suppression global configuration command to enable Internet Group Management Protocol (IGMP) report suppression. Use the no form of this command to disable IGMP report suppression and to forward all IGMP reports to multicast routers.
Page 198 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping report-suppression Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. show ip igmp snooping Displays the IGMP snooping configuration of the switch or the VLAN.
Page 199: Ip Igmp Snooping Tcn
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping tcn ip igmp snooping tcn Use the ip igmp snooping tcn global configuration command to configure the Internet Group Management Protocol (IGMP) Topology Change Notification (TCN) behavior. Use the no form of this command to return to the default settings.
Page 200 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping tcn Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping tcn flood Specifies flooding on an interface as the IGMP snooping spanning-tree TCN behavior.
Page 201: Ip Igmp Snooping Tcn Flood
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping tcn flood ip igmp snooping tcn flood Use the ip igmp snooping tcn flood interface configuration command to specify multicast flooding as the Internet Group Management Protocol (IGMP) snooping spanning-tree Topology Change Notification (TCN) behavior.
Page 202: Ip Igmp Snooping Vlan Immediate-Leave
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping vlan immediate-leave ip igmp snooping vlan immediate-leave Use the ip igmp snooping immediate-leave global configuration command to enable Internet Group Management Protocol (IGMP) snooping immediate-leave processing on a per-VLAN basis. Use the no form of this command to return to the default setting.
Page 203: Ip Igmp Snooping Vlan Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping vlan mrouter ip igmp snooping vlan mrouter Use the ip igmp snooping mrouter global configuration command to add a multicast router port or to configure the multicast learning method. Use the no form of this command to return to the default settings.
Page 204: Ip Igmp Snooping Vlan Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping vlan mrouter Examples This example shows how to configure a port as a multicast router port: Switch(config)# ip igmp snooping vlan 1 mrouter interface gigabitethernet0/2 This example shows how to specify the multicast router learning method as CGMP: Switch(config)# ip igmp snooping vlan 1 mrouter learn cgmp You can verify your settings by entering the show ip igmp snooping privileged EXEC command.
Page 205: Ip Igmp Snooping Vlan Static
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping vlan static ip igmp snooping vlan static Use the ip igmp snooping static global configuration command to enable Internet Group Management Protocol (IGMP) snooping and to statically add a Layer 2 port as a member of a multicast group. Use the no form of this command to remove ports specified as members of a static multicast group.
Page 206 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping vlan static Related Commands Command Description ip igmp snooping report-suppression Enables IGMP report suppression. show ip igmp snooping Displays the snooping configuration. show ip igmp snooping groups Displays IGMP snooping multicast information.
Page 207: Ip Source Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip source binding ip source binding Use the ip source binding global configuration command to configure static IP source bindings on the switch. Use the no form of this command to delete static bindings.
Page 208 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip source binding Related Commands Command Description ip verify source Enables IP source guard on an interface. show ip source binding Displays the IP source bindings on the switch. show ip verify source Displays the IP source guard configuration on the switch or on a specific interface.
Page 209: Ip Ssh
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip ssh ip ssh Use the ip ssh global configuration command to configure the switch to run Secure Shell (SSH) Version 1 or SSH Version 2. This command is available only when your switch is running the cryptographic (encrypted) software image.
Page 210 Features > Secure Shell Commands. show ssh Displays the status of the SSH server. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Security Command Reference, Release 12.2 > Other Security Features >...
Page 211: Ip Verify Source
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip verify source ip verify source Use the ip verify source interface configuration command to enable IP source guard on an interface. Use the no form of this command to disable IP source guard.
Page 212: Ipv6 Access-List
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 access-list ipv6 access-list Use the ipv6 access-list global configuration command to define an IPv6 access list and to place the switch in IPv6 access list configuration mode. To remove the access list, use the no form of this command.
Page 213 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 access-list Every IPv6 ACL has implicit permit icmp any any nd-na, permit icmp any any nd-ns, and deny ipv6 Note any any statements as its last match conditions. The two permit conditions allow ICMPv6 neighbor discovery.
Page 214 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 access-list Related Commands Command Description deny (IPv6 access-list Sets deny conditions for an IPv6 access list. configuration) ipv6 traffic-filter Filters incoming or outgoing IPv6 traffic on an interface. permit (IPv6 Sets permit conditions for an IPv6 access list.
Page 215: Ipv6 Mld Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping ipv6 mld snooping Use the ipv6 mld snooping global configuration command without keywords to enable IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping globally or on the specified VLAN. Use the no form of this command to disable MLD snooping on the switch or the VLAN.
Page 216 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping Examples This example shows how to globally enable MLD snooping: Switch(config)# ipv6 mld snooping This example shows how to disable MLD snooping on a VLAN: Switch(config)# no ipv6 mld snooping vlan 11 You can verify your settings by entering the show ipv6 mld snooping user EXEC command.
Page 217: Ipv6 Mld Snooping Last-Listener-Query-Count
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping last-listener-query-count ipv6 mld snooping last-listener-query-count Use the ipv6 mld snooping last-listener-query-count global configuration command to configure IP version 6 (IPv6) Multicast Listener Discovery Mulitcast Address Specific Queries (MASQs) or that will be sent before aging out a client.
Page 218 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping last-listener-query-count Examples This example shows how to globally set the last-listener query count: Switch(config)# ipv6 mld snooping last-listener-query-count 1 This example shows how to set the last-listener query count for VLAN 10:...
Page 219: Ipv6 Mld Snooping Last-Listener-Query-Interval
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping last-listener-query-interval ipv6 mld snooping last-listener-query-interval Use the ipv6 mld snooping last-listener-query-interval global configuration command to configure IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping last-listener query interval on the switch or on a VLAN.
Page 220 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping last-listener-query-interval Examples This example shows how to globally set the last-listener query interval to 2 seconds: Switch(config)# ipv6 mld snooping last-listener-query-interval 2000 This example shows how to set the last-listener query interval for VLAN 1 to 5.5 seconds:...
Page 221: Ipv6 Mld Snooping Listener-Message-Suppression
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping listener-message-suppression ipv6 mld snooping listener-message-suppression Use the ipv6 mld snooping listener-message-suppression global configuration command to enable IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping listener message suppression. Use the no form of this command to disable MLD snooping listener message suppression.
Page 222 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping listener-message-suppression Related Commands Command Description ipv6 mld snooping Enables IPv6 MLD snooping. sdm prefer Configures an SDM template to optimize system resources based on how the switch is being used.
Page 223: Ipv6 Mld Snooping Robustness-Variable
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping robustness-variable ipv6 mld snooping robustness-variable Use the ipv6 mld snooping robustness-variable global configuration command to configure the number of IP version 6 (IPv6) Multicast Listener Discovery (MLD) queries that the switch sends before deleting a listener that does not respond, or enter a VLAN ID to configure on a per-VLAN basis.
Page 224 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping robustness-variable Examples This example shows how to configure the global robustness variable so that the switch sends out three queries before it deletes a listener port that does not respond: Switch(config)# ipv6 mld snooping robustness-variable 3 This example shows how to configure the robustness variable for VLAN 1.
Page 225: Ipv6 Mld Snooping Tcn
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping tcn ipv6 mld snooping tcn Use the ipv6 mld snooping tcn global configuration commands to configure IP version 6 (IPv6) Multicast Listener Discovery (MLD) Topology Change Notifications (TCNs). Use the no form of the commands to reset the default settings.
Page 226 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping tcn Related Commands Command Description sdm prefer Configures an SDM template to optimize system resources based on how the switch is being used. show ipv6 mld snooping Displays MLD snooping configuration.
Page 227: Ipv6 Mld Snooping Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping vlan ipv6 mld snooping vlan Use the ipv6 mld snooping vlan global configuration command to configure IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping parameters on the VLAN interface. Use the no form of this command to reset the parameters to the default settings.
Page 228: Ipv6 Mld Snooping Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 mld snooping vlan The configuration and the static ports and groups are saved in NVRAM. When the IPv6 multicast router is a Catalyst 6500 switch and you are using extended VLANs (in the range 1006 to 4094), IPv6 MLD snooping must be enabled on the extended VLAN on the Catalyst 6500 switch in order for the Catalyst 3750 or Catalyst 3560 switch to receive queries on the VLAN.
Page 229: Ipv6 Traffic-Filter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 traffic-filter ipv6 traffic-filter Use the ipv6 traffic-filter interface configuration command to filter IPv6 traffic on an interface. You can filter both incoming or outgoing IPv6 traffic on Layer 3 interfaces (router ACLs), but only incoming traffic on Layer 2 interfaces (port ACLs).
Page 230 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 traffic-filter Examples This example filters inbound IPv6 traffic on an IPv6-configured interface as defined by the access list named cisco: Switch (config)# interface gigabitethernet0/1 Switch(config-if)# no switchport Switch(config-if)# ipv6 address 2001::/64 eui-64...
Page 231: L2Protocol-Tunnel
Use the l2protocol-tunnel interface configuration command to enable tunneling of Layer 2 protocols on an access port, IEEE 802.1Q tunnel port, or a port channel. You can enable tunneling for Cisco Discovery Protocol (CDP), Spanning Tree Protocol (STP), or VLAN Trunking Protocol (VTP) packets. You can also enable point-to-point tunneling for Port Aggregation Protocol (PAgP), Link Aggregation Control Protocol (LACP), or UniDirectional Link Detection (UDLD) packets.
Page 232 When protocol tunneling is enabled, protocol packets are encapsulated with a well-known Cisco multicast address for transmission across the network. When the packets reach their destination, the well-known MAC address is replaced by the Layer 2 protocol MAC address.
Page 233 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands l2protocol-tunnel Examples This example shows how to enable protocol tunneling for CDP packets and to configure the shutdown threshold as 50 packets per second: Switch(config-if)# l2protocol-tunnel cdp Switch(config-if)# l2protocol-tunnel shutdown-threshold cdp 50...
Page 234: L2Protocol-Tunnel Cos
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands l2protocol-tunnel cos l2protocol-tunnel cos Use the l2protocol-tunnel cos global configuration command to configure class of service (CoS) value for all tunneled Layer 2 protocol packets. Use the no form of this command to return to the default setting.
Page 235: Lacp Port-Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands lacp port-priority lacp port-priority Use the lacp port-priority interface configuration command to configure the port priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
Page 236 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands lacp port-priority Examples This example shows how to configure the LACP port priority on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# lacp port-priority 1000 You can verify your settings by entering the show lacp [channel-group-number] internal privileged EXEC command.
Page 237: Lacp System-Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands lacp system-priority lacp system-priority Use the lacp system-priority global configuration command to configure the system priority for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
Page 238 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands lacp system-priority Related Commands Command Description channel-group Assigns an Ethernet port to an EtherChannel group. lacp port-priority Configures the LACP port priority. show lacp sys-id Displays the system identifier that is being used by LACP.
Page 239: Logging Event Power-Inline-Status
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands logging event power-inline-status logging event power-inline-status Use the logging event power-inline-status interface configuration command to enable the logging of Power over Ethernet (PoE) events. Use the no form of this command to disable the logging of PoE status events;...
Page 240: Logging File
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands logging file logging file Use the logging file global configuration command to set logging file parameters. Use the no form of this command to return to the default setting. logging file filesystem:filename [max-file-size | nomax [min-file-size]] [severity-level-number |...
Page 241: Logging File
Related Commands Command Description show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference 2-209...
Page 242: Mac Access-Group
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac access-group mac access-group Use the mac access-group interface configuration command to apply a MAC access control list (ACL) to a Layer 2 interface. Use the no form of this command to remove all MAC ACLs or the specified MAC ACL from the interface.
Page 243 Displays the MAC ACLs configured on the switch. show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference...
Page 244: Mac Access-List Extended
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac access-list extended mac access-list extended Use the mac access-list extended global configuration command to create an access list based on MAC addresses for non-IP traffic. Using this command puts you in the extended MAC access-list configuration mode.
Page 245 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac access-list extended Examples This example shows how to create a MAC named extended access list named mac1 and to enter extended MAC access-list configuration mode: Switch(config)# mac access-list extended mac1 Switch(config-ext-macl)#...
Page 246: Mac Address-Table Aging-Time
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table aging-time mac address-table aging-time Use the mac address-table aging-time global configuration command to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated. Use the no form of this command to return to the default setting.
Page 247: Mac Address-Table Move Update
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table move update mac address-table move update Use the mac address-table move update global configuration command to enable the MAC address-table move update feature. Use the no form of this command to return to the default setting.
Page 248 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table move update Related Commands Command Description clear mac address-table move Clears the MAC address-table move update global counters. update debug matm move update Debugs the MAC address-table move update message processing.
Page 249: Mac Address-Table Notification
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table notification mac address-table notification Use the mac address-table notification global configuration command to enable the MAC address notification feature on the switch. Use the no form of this command to return to the default setting.
Page 250 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table notification Examples This example shows how to enable the MAC address-table notification feature, set the interval time to 60 seconds, and set the history-size to 100 entries: Switch(config)# mac address-table notification...
Page 251: Mac Address-Table Static
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table static mac address-table static Use the mac address-table static global configuration command to add static addresses to the MAC address table. Use the no form of this command to remove static entries from the table.
Page 252: Mac Address-Table Static Drop
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table static drop mac address-table static drop Use the mac address-table static drop global configuration command to enable unicast MAC address filtering and to configure the switch to drop traffic with a specific source or destination MAC address.
Page 253: Mac Address-Table Static Drop
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac address-table static drop Examples This example shows how to enable unicast MAC address filtering and to configure the switch to drop packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in VLAN 4 with this MAC address as its source or destination, the packet is dropped: Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 drop...
Page 254: Macro Apply
There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
Page 255: Macro Apply
Applying command...‘duplex auto’ %Error Unknown error. Applying command...‘speed nonegotiate’ This example shows how to display the Cisco-default cisco-desktop macro and how to apply the macro and set the access VLAN ID to 25 on an interface: Switch# show parser macro cisco-desktop...
Page 256 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro apply # Configure port as an edge network port spanning-tree portfast spanning-tree bpduguard enable -------------------------------------------------------------- Switch# Switch# configure terminal Switch(config)# interface gigabitethernet0/4 Switch(config-if)# macro apply cisco-desktop $AVID 25 Related Commands Command...
Page 257: Macro Description
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro description macro description Use the macro description interface configuration command to enter a description about which macros are applied to an interface. Use the no form of this command to remove the description.
Page 258: Macro Global
There are Cisco-default Smartports macros embedded in the switch software. You can display these macros and the commands they contain by using the show parser macro user EXEC command.
Page 259: Macro Global
Cisco-default macro with the required values by using the parameter value keywords. The Cisco-default macros use the $ character to help identify required keywords. There is no restriction on using the $ character to define keywords when you create a macro.
Page 260: Macro Global Description
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro global Related Commands Command Description macro apply Applies a macro on an interface or applies and traces a macro on an interface. macro description Adds a description about the macros that are applied to an interface.
Page 261: Macro Global Description
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro global description macro global description Use the macro global description global configuration command to enter a description about the macros that are applied to the switch. Use the no form of this command to remove the description.
Page 262: Macro Name
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro name macro name Use the macro name global configuration command to create a configuration macro. Use the no form of this command to delete the macro definition. macro name macro-name no macro name macro-name...
Page 263 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands macro name Examples This example shows how to create a macro that defines the duplex mode and speed: Switch(config)# macro name duplex Enter macro commands one per line. End with the character ‘@’.
Page 264: Match (Access-Map Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands match (access-map configuration) match (access-map configuration) Use the match access-map configuration command to set the VLAN map to match packets against one or more access lists. Use the no form of this command to remove the match parameters.
Page 265 Specifies the action to be taken if the packet matches an entry in an access control list (ACL). ip access list Creates a named access list. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands.
Page 266: Match (Class-Map Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands match (class-map configuration) match (class-map configuration) Use the match class-map configuration command to define the match criteria to classify traffic. Use the no form of this command to remove the match criteria.
Page 267 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands match (class-map configuration) For the match ip dscp dscp-list or the match ip precedence ip-precedence-list command, you can enter a mnemonic name for a commonly used value. For example, you can enter the match ip dscp af11 command, which is the same as entering the match ip dscp 10 command.
Page 268: Mdix Auto
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mdix auto mdix auto Use the mdix auto interface configuration command to enable the automatic medium-dependent interface crossover (auto-MDIX) feature on the interface. When auto-MDIX is enabled, the interface automatically detects the required cable connection type (straight-through or crossover) and configures the connection appropriately.
Page 269 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mdix auto Related Commands Command Description show controllers Displays general information about internal registers of an interface, ethernet-controller including the operational state of auto-MDIX. interface-id phy Catalyst 3560 Switch Command Reference 2-237...
Page 270: Mls Qos
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos mls qos Use the mls qos global configuration command to enable quality of service (QoS) for the entire switch. When the mls qos command is entered, QoS is enabled with the default parameters on all ports in the system.
Page 271 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos Related Commands Command Description show mls qos Displays QoS information. Catalyst 3560 Switch Command Reference 2-239 78-16405-05...
Page 272: Mls Qos Aggregate-Policer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos aggregate-policer mls qos aggregate-policer Use the mls qos aggregate-policer global configuration command to define policer parameters, which can be shared by multiple classes within the same policy map. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
Page 273 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos aggregate-policer You cannot delete an aggregate policer if it is being used in a policy map. You must first use the no police aggregate aggregate-policer-name policy-map class configuration command to delete the aggregate policer from all policy maps before using the no mls qos aggregate-policer aggregate-policer-name command.
Page 274: Mls Qos Cos
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos cos mls qos cos Use the mls qos cos interface configuration command to define the default class of service (CoS) value of a port or to assign the default CoS to all incoming packets on the port. Use the no form of this command to return to the default setting.
Page 275 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos cos Examples This example shows how to configure the default port CoS to 4 on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mls qos trust cos Switch(config-if)# mls qos cos 4...
Page 276: Mls Qos Dscp-Mutation
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos dscp-mutation mls qos dscp-mutation Use the mls qos dscp-mutation interface configuration command to apply a Differentiated Services Code Point (DSCP)-to-DSCP-mutation map to a DSCP-trusted port. Use the no form of this command to return the map to the default settings (no DSCP mutation).
Page 277 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos dscp-mutation This example show how to remove the DSCP-to-DSCP-mutation map name dscpmutation1 from the port and to reset the map to the default: Switch(config-if)# no mls qos dscp-mutation dscpmutation1 You can verify your settings by entering the show mls qos maps privileged EXEC command.
Page 278: Mls Qos Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos map mls qos map Use the mls qos map global configuration command to define the class of service (CoS)-to-Differentiated Services Code Point (DSCP) map, DSCP-to-CoS map, the DSCP-to-DSCP-mutation map, the IP-precedence-to-DSCP map, and the policed-DSCP map. Use the no form of this command to return to the default map.
Page 279 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos map Defaults Table 2-6 shows the default CoS-to-DSCP map: Table 2-6 Default CoS-to-DSCP Map CoS Value DSCP Value Table 2-7 shows the default DSCP-to-CoS map: Table 2-7 Default DSCP-to-CoS Map...
Page 280 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos map The default DSCP-to-DSCP-mutation map is a null map, which maps an incoming DSCP value to the same DSCP value. The default policed-DSCP map is a null map, which maps an incoming DSCP value to the same DSCP value.
Page 281 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos map Related Commands Command Description mls qos dscp-mutation Applies a DSCP-to-DSCP-mutation map to a DSCP-trusted port. show mls qos maps Displays quality of service (QoS) mapping information. Catalyst 3560 Switch Command Reference...
Page 282: Mls Qos Queue-Set Output Buffers
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos queue-set output buffers mls qos queue-set output buffers Use the mls qos queue-set output buffers global configuration command to allocate buffers to a queue-set (four egress queues per port). Use the no form of this command to return to the default setting.
Page 283 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos queue-set output buffers Examples This example shows how to map a port to queue-set 2. It allocates 40 percent of the buffer space to egress queue 1 and 20 percent to egress queues 2, 3, and 4:...
Page 284: Mls Qos Queue-Set Output Threshold
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos queue-set output threshold mls qos queue-set output threshold Use the mls qos queue-set output threshold global configuration command to configure the weighted tail-drop (WTD) thresholds, to guarantee the availability of buffers, and to configure the maximum memory allocation to a queue-set (four egress queues per port).
Page 285 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos queue-set output threshold Usage Guidelines Use the mls qos queue-set output qset-id buffers global configuration command to allocate a fixed number of buffers to the four queues in a queue-set.
Page 286: Mls Qos Rewrite Ip Dscp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos rewrite ip dscp mls qos rewrite ip dscp Use the mls qos rewrite ip dscp global configuration command to configure the switch to change (rewrite) the Differentiated Services Code Point (DSCP) field of an incoming IP packet. Use the no form of this command to configure the switch to not modify (rewrite) the DSCP field of the packet and to enable DSCP transparency.
Page 287 | Displays the DSCP transparency setting. For syntax information, select include rewrite Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 288: Mls Qos Srr-Queue Input Bandwidth
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input bandwidth mls qos srr-queue input bandwidth Use the mls qos srr-queue input bandwidth global configuration command to assign shaped round robin (SRR) weights to an ingress queue. The ratio of the weights is the ratio of the frequency in which the SRR scheduler dequeues packets from each queue.
Page 289 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input bandwidth This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
Page 290: Mls Qos Srr-Queue Input Buffers
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input buffers mls qos srr-queue input buffers Use the mls qos srr-queue input buffers global configuration command to allocate the buffers between the ingress queues. Use the no form of this command to return to the default setting.
Page 291 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input buffers Command Description show mls qos input-queue Displays ingress queue settings. show mls qos interface buffers Displays quality of service (QoS) information. Catalyst 3560 Switch Command Reference 2-259...
Page 292: Mls Qos Srr-Queue Input Cos-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input cos-map mls qos srr-queue input cos-map Use the mls qos srr-queue input cos-map global configuration command to map class of service (CoS) values to an ingress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
Page 293 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input cos-map Usage Guidelines The CoS assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
Page 294: Mls Qos Srr-Queue Input Dscp-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input dscp-map mls qos srr-queue input dscp-map Use the mls qos srr-queue input dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an ingress queue or to map DSCP values to a queue and to a threshold ID.
Page 295 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input dscp-map Usage Guidelines The DSCP assigned at the ingress port selects an ingress or egress queue and threshold. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. You can assign two weighted tail-drop (WTD) threshold percentages to an ingress queue by using the mls qos srr-queue input threshold global configuration command.
Page 296: Mls Qos Srr-Queue Input Priority-Queue
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input priority-queue mls qos srr-queue input priority-queue Use the mls qos srr-queue input priority-queue global configuration command to configure the ingress priority queue and to guarantee bandwidth on the internal ring if the ring is congested. Use the no form of this command to return to the default setting.
Page 297 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input priority-queue Examples This example shows how to assign the ingress bandwidths for the queues. Queue 1 is the priority queue with 10 percent of the bandwidth allocated to it. The bandwidth ratio allocated to queues 1 and 2 is 4/(4+4).
Page 298: Mls Qos Srr-Queue Input Threshold
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input threshold mls qos srr-queue input threshold Use the mls qos srr-queue input threshold global configuration command to assign weighted tail-drop (WTD) threshold percentages to an ingress queue. Use the no form of this command to return to the default setting.
Page 299 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue input threshold Related Commands Command Description mls qos srr-queue input bandwidth Assigns shaped round robin (SRR) weights to an ingress queue. mls qos srr-queue input buffers Allocates the buffers between the ingress queues.
Page 300: Mls Qos Srr-Queue Output Cos-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue output cos-map mls qos srr-queue output cos-map Use the mls qos srr-queue output cos-map global configuration command to map class of service (CoS) values to an egress queue or to map CoS values to a queue and to a threshold ID. Use the no form of this command to return to the default setting.
Page 301 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue output cos-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
Page 302: Mls Qos Srr-Queue Output Dscp-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue output dscp-map mls qos srr-queue output dscp-map Use the mls qos srr-queue output dscp-map global configuration command to map Differentiated Services Code Point (DSCP) values to an egress or to map DSCP values to a queue and to a threshold ID.
Page 303 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos srr-queue output dscp-map Usage Guidelines The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state. The egress queue default settings are suitable for most situations. You should change them only when...
Page 304: Mls Qos Trust
12.2(20)SE The usage guidelines were revised to describe how the switch sets the trust state when a Cisco IP Phone is connected to a switch or routed port. Usage Guidelines Packets entering a quality of service (QoS) domain are classified at the edge of the domain. When the packets are classified at the edge, the switch port within the QoS domain can be configured to one of the trusted states because there is no need to classify the packets at every switch within the domain.
Page 305: Mls Qos Trust
The trusted boundary feature prevents security problems if users disconnect their PCs from networked Cisco IP Phones and connect them to the switch port to take advantage of trusted CoS or DSCP settings. You must globally enable the Cisco Discovery Protocol (CDP) on the switch and on the port connected to the IP phone.
Page 306: Mls Qos Vlan-Based
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos vlan-based mls qos vlan-based Use the mls qos vlan-based interface configuration command to enable VLAN-based quality of service (QoS) on the physical port. Use the no form of this command to disable this feature.
Page 307: Monitor Session
Remote SPAN (RSPAN) source or destination session, to enable ingress traffic on the destination port for a network security device (such as a Cisco IDS Sensor Appliance), to add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, and to limit (filter) SPAN source traffic to specific VLANs.
Page 308 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands monitor session untagged vlan vlan-id Accept incoming packets with untagged encapsulation with the specified VLAN as the default VLAN. vlan vlan-id When used with only the ingress keyword, set default VLAN for ingress traffic.
Page 309 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands monitor session Usage Guidelines Traffic that enters or leaves source ports or source VLANs can be monitored by using SPAN or RSPAN. Traffic routed to source ports or source VLANs cannot be monitored.
Page 310 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands monitor session When you enter monitor session session_number destination interface interface-id • encapsulation replicate with no other keywords, egress encapsulation replicates the source interface encapsulation; ingress forwarding is not enabled. (This applies to local SPAN only;...
Page 311 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands monitor session Related Commands Command Description remote-span Configures an RSPAN VLAN in vlan configuration mode. show monitor Displays SPAN and RSPAN session information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 >...
Page 312: Mvr (Global Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (global configuration) mvr (global configuration) Use the mvr global configuration command without keywords to enable the multicast VLAN registration (MVR) feature on the switch. Use the command with keywords to set the MVR mode for a switch, configure the MVR IP multicast address, set the maximum time to wait for a query reply before removing a port from group membership, and to specify the MVR multicast VLAN.
Page 313 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (global configuration) Command Modes Global configuration Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines A maximum of 256 MVR multicast groups can be configured on a switch. Use the mvr group command to statically set up all the IP multicast addresses that will take part in MVR.
Page 314 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (global configuration) Related Commands Command Description mvr (interface configuration) Configures MVR ports. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces with their type, status, and Immediate Leave configuration.
Page 315: Mvr (Interface Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (interface configuration) mvr (interface configuration) Use the mvr interface configuration command to configure a Layer 2 port as a multicast VLAN registration (MVR) receiver or source port, to set the Immediate Leave feature, and to statically assign a port to an IP multicast VLAN and IP address.
Page 316 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (interface configuration) Usage Guidelines Configure a port as a source port if that port should be able to both send and receive multicast data bound for the configured multicast groups. Multicast data is received on all ports configured as source ports.
Page 317 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mvr (interface configuration) Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. show mvr Displays MVR global parameters or port parameters. show mvr interface Displays the configured MVR interfaces or displays the multicast groups to which a receiver port belongs.
Page 318: Pagp Learn-Method
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands pagp learn-method pagp learn-method Use the pagp learn-method interface configuration command to learn the source address of incoming packets received from an EtherChannel port. Use the no form of this command to return to the default setting.
Page 319 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference 2-287...
Page 320: Pagp Port-Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands pagp port-priority pagp port-priority Use the pagp port-priority interface configuration command to select a port over which all Port Aggregation Protocol (PAgP) traffic through the EtherChannel is sent. If all unused ports in the EtherChannel are in hot-standby mode, they can be placed into operation if the currently selected port and link fails.
Page 321 Displays PAgP channel-group information. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference 2-289...
Page 322: Permit (Arp Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP access-list configuration) permit (ARP access-list configuration) Use the permit Address Resolution Protocol (ARP) access-list configuration command to permit an ARP packet based on matches against the Dynamic Host Configuration Protocol (DHCP) bindings. Use the no form of this command to remove the specified access control entry (ACE) from the access control list.
Page 323 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP access-list configuration) Command Modes ARP access-list configuration Command History Release Modification 12.2(20)SE This command was introduced. Usage Guidelines You can add permit clauses to forward ARP packets based on some matching criteria.
Page 324: Permit (Ipv6 Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) permit (IPv6 access-list configuration) Use the permit IPv6 access list configuration command to set permit conditions for an IPv6 access list. Use the no form of this command to remove the permit conditions.
Page 325 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) Syntax Description protocol Name or number of an Internet protocol. It can be one of the keywords ahp, esp, icmp, ipv6, pcp, sctp, tcp, or udp, or an integer in the range from 0 to 255 representing an IPv6 protocol number.
Page 326 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) fragments (Optional) Match noninitial fragmented packets where the fragment extension header contains a nonzero fragment offset. The fragments keyword is an option only if the protocol is ipv6 and the operator [port-number] arguments are not specified.
Page 327 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) Defaults No IPv6 access list is defined. Command Modes IPv6 access-list configuration Command History Release Modification 12.2(25)SED This command was introduced. Usage Guidelines The permit (IPv6 access-list configuration mode) command is similar to the permit (IPv4 access-list configuration mode) command, except that it is IPv6-specific.
Page 328 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) This is a list of ICMP message names: beyond-scope destination-unreachable echo-reply echo-request header hop-limit mld-query mld-reduction mld-report nd-na nd-ns next-header no-admin no-route packet-too-big parameter-option parameter-problem port-unreachable reassembly-timeout renum-command...
Page 329 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (IPv6 access-list configuration) Related Commands Command Description ipv6 access-list Defines an IPv6 access list and enters IPv6 access list configuration mode. ipv6 traffic-filter Filters incoming or outgoing IPv6 traffic on an interface.
Page 330: Permit (Mac Access-List Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (MAC access-list configuration) permit (MAC access-list configuration) Use the permit MAC access-list configuration command to allow non-IP traffic to be forwarded if the conditions are matched. Use the no form of this command to remove a permit condition from the extended MAC access list.
Page 331 To filter IPX traffic, you use the type mask or lsap lsap mask keywords, depending on the type of IPX encapsulation being used. Filter criteria for IPX encapsulation types as specified in Novell terminology and Cisco IOS terminology are listed in Table 2-14.
Page 332 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (MAC access-list configuration) Usage Guidelines You enter MAC access-list configuration mode by using the mac access-list extended global configuration command. If you use the host keyword, you cannot enter an address mask; if you do not use the any or host keywords, you must enter an address mask.
Page 333: Police
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands police police Use the police policy-map class configuration command to define a policer for classified traffic. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded. Use the no form of this command to remove an existing policer.
Page 334 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands police Examples This example shows how to configure a policer that drops packets if traffic exceeds 1 Mbps average rate with a burst size of 20 KB. The DSCPs of incoming packets are trusted, and there is no packet modification.
Page 335: Police Aggregate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands police aggregate police aggregate Use the police aggregate policy-map class configuration command to apply an aggregate policer to multiple classes in the same policy map. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
Page 336: Police Aggregate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands police aggregate Examples This example shows how to define the aggregate policer parameters and to apply the policer to multiple classes in a policy map: Switch(config)# mls qos aggregate-policer agg_policer1 10000 1000000 exceed-action drop...
Page 337: Policy-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands policy-map policy-map Use the policy-map global configuration command to create or modify a policy map that can be attached to multiple physical ports or switch virtual interfaces (SVIs) and to enter policy-map configuration mode.
Page 338 “Policing on Physical Ports” section in the “Configuring QoS” chapter of the software configuration guide for this release. In Cisco IOS Release 12.2(25)SE or later, you can apply a nonhierarchical policy maps to physical ports or to SVIs. A nonhierarchical policy map is the same as a port-based policy maps in software releases earlier than Cisco IOS Release 12.2(25)SE.
Page 339 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands policy-map This example shows how to create a hierarchical policy map and attach it to an SVI: Switch(config)# class-map cm-non-int Switch(config-cmap)# match access-group 101 Switch(config-cmap)# exit Switch(config)# class-map cm-non-int-2 Switch(config-cmap)# match access-group 102...
Page 340: Port-Channel Load-Balance
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands port-channel load-balance port-channel load-balance Use the port-channel load-balance global configuration command to set the load-distribution method among the ports in the EtherChannel. Use the no form of this command to return to the default setting.
Page 341 Displays EtherChannel information for a channel. show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. Catalyst 3560 Switch Command Reference...
Page 342: Power Inline
Use the max max-wattage option to disallow higher-power powered devices. With this configuration, when the powered device sends Cisco Discovery Protocol (CDP) messages requesting more power than the maximum wattage, the switch removes power from the port. If the powered-device IEEE class maximum is greater than the maximum wattage, the switch does not power the device.
Page 343 If a port has a Cisco powered device connected to it, you should not use the power inline never command to configure the port. A false link-up can occur on the port, placing it into an error-disabled state.
Page 344 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands power inline Related Commands Command Description logging event Enables the logging of PoE events. power-inline-status show controllers Displays the values in the registers of the specified PoE controller. power inline show power inline Displays the PoE status for the specified PoE port or for all PoE ports.
Page 345: Power Inline Consumption
This command was introduced. Usage Guidelines When Cisco powered devices are connected to PoE ports, the switch uses Cisco Discovery Protocol (CDP) to determine the actual power consumption of the devices, and the switch adjusts the power budget accordingly. This does not apply to IEEE third-party powered devices. For these devices, when the switch grants a power request, the switch adjusts the power budget according to the powered-device IEEE classification.
Page 346: Power Inline Consumption
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands power inline consumption When you enter the power inline consumption default wattage or the no power inline consumption default command, this caution message appears: %CAUTION: Interface interface-id : Misconfiguring the 'power inline consumption/allocation' command may cause damage to the switch and void your warranty.
Page 347: Priority-Queue
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands priority-queue priority-queue Use the priority-queue interface configuration command to enable the egress expedite queue on a port. Use the no form of this command to return to the default setting. priority-queue out...
Page 348 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands priority-queue This example shows how to disable the egress expedite queue after the SRR shaped and shared weights are configured. The shaped mode overrides the shared mode. Switch(config)# interface gigabitethernet0/2 Switch(config-if)# srr-queue bandwidth shape 25 0 0 0...
Page 349: Private-Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands private-vlan private-vlan Use the private-vlan VLAN configuration command to configure private VLANs and to configure the association between private-VLAN primary and secondary VLANs. Use the no form of this command to return the VLAN to normal VLAN configuration.
Page 350 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands private-vlan You can associate a secondary (isolated or community) VLAN with only one primary VLAN. A primary VLAN can have one isolated VLAN and multiple community VLANs associated with it. A secondary VLAN cannot be configured as a primary VLAN.
Page 351 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands private-vlan Examples This example shows how to configure VLAN 20 as a primary VLAN, VLAN 501 as an isolated VLAN, and VLANs 502 and 503 as community VLANs, and to associate them in a private VLAN:...
Page 352: Private-Vlan Mapping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands private-vlan mapping private-vlan mapping Use the private-vlan mapping interface configuration command on a switch virtual interface (SVI) to create a mapping between a private-VLAN primary and secondary VLANs so that both VLANs share the same primary VLAN SVI.
Page 353 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands private-vlan mapping Examples This example shows how to map the interface of VLAN 20 to the SVI of VLAN 18: Switch# configure terminal Switch# interface vlan 18 Switch(config-if)# private-vlan mapping 20 Switch(config-vlan)# end...
Page 354: Queue-Set
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands queue-set queue-set Use the queue-set interface configuration command to map a port to a queue-set. Use the no form of this command to return to the default setting. queue-set qset-id no queue-set qset-id...
Page 355: Rcommand
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands rcommand rcommand Use the rcommand user EXEC command to start a Telnet session and to execute commands on a cluster member switch from the cluster command switch. To end the session, enter the exit command.
Page 356 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands rcommand This command will not work if the vty lines of the cluster command switch have access-class configurations. You are not prompted for a password because the cluster member switches inherited the password of the cluster command switch when they joined the cluster.
Page 357: Remote-Span
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands remote-span remote-span Use the remote-span VLAN configuration command to configure a VLAN as a Remote Switched Port Analyzer (RSPAN) VLAN. Use the no form of this command to remove the RSPAN designation from the VLAN.
Page 358 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands remote-span Examples This example shows how to configure a VLAN as an RSPAN VLAN. Switch(config)# vlan 901 Switch(config-vlan)# remote-span This example shows how to remove the RSPAN feature from a VLAN. Switch(config)# vlan 901 Switch(config-vlan)# no remote-span You can verify your settings by entering the show vlan remote-span user EXEC command.
Page 359: Renew Ip Dhcp Snooping Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands renew ip dhcp snooping database renew ip dhcp snooping database Use the renew ip dhcp snooping database privileged EXEC command to renew the DHCP snooping binding database. renew ip dhcp snooping database [{flash:/filename | ftp://user:password@host/filename |...
Page 360 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands renew ip dhcp snooping database Related Commands Command Description ip dhcp snooping Enables DHCP snooping on a VLAN. ip dhcp snooping binding Configures the DHCP snooping binding database. show ip dhcp snooping database Displays the status of the DHCP snooping database agent.
Page 361: Rmon Collection Stats
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands rmon collection stats rmon collection stats Use the rmon collection stats interface configuration command to collect Ethernet group statistics, which include usage statistics about broadcast and multicast packets, and error statistics about cyclic redundancy check (CRC) alignment errors and collisions.
Page 362: Sdm Prefer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands sdm prefer sdm prefer Use the sdm prefer global configuration command on the switch to configure the template used in Switch Database Management (SDM) resource allocation. You can use a template to allocate system resources to best support the features being used in your application.
Page 363: Sdm Prefer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands sdm prefer The access template maximizes system resources for access control lists (ACLs) as required to accommodate a large number of ACLs. The default template balances the use of system resources. Use the sdm prefer vlan global configuration command only on switches intended for Layer 2 switching with no routing.
Page 364 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands sdm prefer Table 2-16 Approximate Feature Resources Allowed by Dual IPv4-IPv6 Templates (continued) Resource Default VLAN Total IPv6 unicast routes: Directly connected IPv6 addresses • Indirect IPv6 unicast routes • IPv4 policy-based routing ACEs...
Page 365: Service Password-Recovery
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands service password-recovery service password-recovery Use the service password-recovery global configuration command to enable the password-recovery mechanism (the default). This mechanism allows an end user with physical access to the switch to hold down the Mode button and interrupt the boot process while the switch is powering up and to assign a new password.
Page 366 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands service password-recovery If you use the no service password-recovery command to control end user access to passwords, we Note recommend that you save a copy of the config file in a location away from the switch in case the end user uses the password recovery procedure and sets the system back to default values.
Page 367: Service-Policy
In Cisco IOS Release 12.2(25)SE or later, you can apply a policy map to incoming traffic on a physical port or on an SVI. In Cisco IOS Release 12.2(25)SED or later, you can configure different interface-level policy maps for each class defined in the VLAN-level policy map.
Page 368 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands service-policy Classification using a port trust state (for example, mls qos trust [cos | dscp | ip-precedence] and a policy map (for example, service-policy input policy-map-name) are mutually exclusive. The last one configured overwrites the previous configuration.
Page 369 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands service-policy This example shows how to create a hierarchical policy map and attach it to an SVI: Switch>enable Switch#config t Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#access-list 101 permit ip any any...
Page 370: Set
Usage Guidelines In Cisco IOS Release 12.2(25)SE or later, if you have used the set ip dscp command, the switch changes this command to set dscp in the switch configuration. If you enter the set ip dscp command, this setting appears as set dscp in the switch configuration.
Page 371 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command. Examples This example shows how to assign DSCP 10 to all FTP traffic without any policers:...
Page 372: Setup
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands setup setup Use the setup privileged EXEC command to configure the switch with its initial configuration. setup Syntax Description This command has no arguments or keywords. Command Modes Privileged EXEC Command History...
Page 373 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands setup Would you like to enter basic management setup? [yes/no]: yes Configuring global parameters: Enter host name [Switch]: host-name The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration.
Page 374 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands setup cluster enable cluster-name Use this configuration? [yes/no]: yes [0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit.
Page 375: Setup Express
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands setup express setup express Use the setup express global configuration command to enable Express Setup mode. Use the no form of this command to disable Express Setup mode. setup express no setup express Syntax Description This command has no arguments or keywords.
Page 376 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands setup express Examples This example shows how to enable Express Setup mode: Switch(config)# setup express You can verify that Express Setup mode is enabled by pressing the Mode button: On an unconfigured switch, the LEDs above the Mode button turn solid green after 3 seconds.
Page 377: Show Access-Lists
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show access-lists show access-lists Use the show access-lists privileged EXEC command to display access control lists (ACLs) configured on the switch. show access-lists [name | number | hardware counters | ipc] [ | {begin | exclude | include}...
Page 378 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show access-lists Examples This is an example of output from the show access-lists command: Switch# show access-lists Standard IP access list 1 10 permit 1.1.1.1 20 permit 2.2.2.2 30 permit any 40 permit 0.255.255.255, wildcard bits 12.0.0.0 Standard IP access list videowizard_1-1-1-1 10 permit 1.1.1.1...
Page 379 Commands. ip access list Configures a named IP access list on the switch. For syntax information, select Cisco IOS IP Command Reference, Volume 1 of 3:Addressing and Services, Release 12.2 > IP Services Commands. mac access-list extended Configures a named or numbered MAC access list on the switch.
Page 380: Show Archive Status
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show archive status show archive status Use the show archive status privileged EXEC command to display the status of a new image being downloaded to a switch with the HTTP or the TFTP protocol.
Page 381: Show Arp Access-List
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show arp access-list show arp access-list Use the show arp access-list user EXEC command to display detailed information about Address Resolution Protocol (ARP) access control (lists). show arp access-list [acl-name] [ | {begin | exclude | include} expression] This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI).
Page 382: Show Auto Qos
In releases earlier than Cisco IOS Release 12.2(20)SE, the show auto qos [interface [interface-id]] command output shows the initial generated auto-QoS configuration. In Cisco IOS Release 12.2(20)SE or later, the show auto qos command output shows only the auto-QoS command entered on each interface. The show auto qos interface interface-id command output shows the auto-QoS command entered on a specific interface.
Page 383: Show Auto Qos
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show auto qos Examples This is an example of output from the show auto qos command after the auto qos voip cisco-phone and the auto qos voip cisco-softphone interface configuration commands are entered: Switch> show auto qos...
Page 384 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show auto qos mls qos queue-set output 1 threshold 3 75 150 100 300 mls qos queue-set output 1 threshold 4 50 100 75 400 mls qos queue-set output 2 threshold 1 100 100 100 100...
Page 385 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show auto qos This is an example of output from the show auto qos interface interface-id command when the auto qos voip cisco-phone interface configuration command is entered: Switch> show auto qos interface fastethernet0/2...
Page 386: Show Boot
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show boot show boot Use the show boot privileged EXEC command to display the settings of the boot environment variables. show boot [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 387: Show Boot
Helper files extend or patch the functionality of the boot loader. NVRAM/Config file buffer size Displays the buffer size that Cisco IOS uses to hold a copy of the configuration file in memory. The configuration file cannot be larger than the buffer size allocation.
Page 388: Show Cable-Diagnostics Tdr
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cable-diagnostics tdr show cable-diagnostics tdr Use the show cable-diagnostics tdr privileged EXEC command to display the Time Domain Reflector (TDR) results. show cable-diagnostics tdr interface interface-id [ | {begin | exclude | include} expression]...
Page 389 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cable-diagnostics tdr This is an example of output from the show cable-diagnostics tdr interface interface-id command on a Catalyst 3560G-24PS or 3560G-48PS switch: Switch# show cable-diagnostics tdr interface gigabitethernet0/2 TDR test last run on: March 01 20:15:40...
Page 390 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cable-diagnostics tdr Related Commands Command Description test cable-diagnostics tdr Enables and runs TDR on an interface. Catalyst 3560 Switch Command Reference 2-358 78-16405-05...
Page 391: Show Class-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show class-map show class-map Use the show class-map user EXEC command to display quality of service (QoS) class maps, which define the match criteria to classify traffic. show class-map [class-map-name] [ | {begin | exclude | include} expression]...
Page 392: Show Cluster
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster show cluster Use the show cluster user EXEC command to display the cluster status and a summary of the cluster to which the switch belongs. This command can be entered on the cluster command switch and cluster member switches.
Page 393 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster This is an example of output when the show cluster command is entered on a cluster member switch: Switch1> show cluster Member switch for cluster “hapuna” Member number: Management IP address: 192.192.192.192...
Page 394: Show Cluster Candidates
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster candidates show cluster candidates Use the show cluster candidates privileged EXEC command to display a list of candidate switches. show cluster candidates [detail | mac-address H.H.H.] [ | {begin | exclude | include} expression]...
Page 395: Show Cluster Candidates
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster candidates This is an example of output from the show cluster candidates command that uses the MAC address of a cluster member switch directly connected to the cluster command switch: Switch>...
Page 396: Show Cluster Members
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster members show cluster members Use the show cluster members privileged EXEC command to display information about the cluster members. show cluster members [n | detail] [ | {begin | exclude | include} expression] Syntax Description (Optional) Number that identifies a cluster member.
Page 397: Show Cluster Members
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show cluster members This is an example of output from the show cluster members detail command: Switch# show cluster members detail Device 'StLouis1' with member number 0 (Command Switch) Device type: cisco WS-C3560 MAC address: 0002.4b29.2e00...
Page 398: Show Controllers Cpu-Interface
12.1(19)EA1 This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Page 399 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers cpu-interface Supervisor ASIC receive-queue parameters ---------------------------------------- queue 0 maxrecevsize 5EE pakhead 1419A20 paktail 13EAED4 queue 1 maxrecevsize 5EE pakhead 15828E0 paktail 157FBFC queue 2 maxrecevsize 5EE pakhead 1470D40 paktail 1470FE4 queue 3 maxrecevsize 5EE pakhead 19CDDD0 paktail 19D02C8 <output truncated>...
Page 400: Show Controllers Ethernet-Controller
This display without keywords provides traffic statistics, basically the RMON statistics for all interfaces or for the specified interface. When you enter the phy or port-asic keywords, the displayed information is useful primarily for Cisco technical support representatives troubleshooting the switch.
Page 401 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller Examples This is an example of output from the show controllers ethernet-controller command for an interface. Table 2-19 describes the Transmit fields, and Table 2-20 describes the Receive fields.
Page 402 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-19 Transmit Field Descriptions (continued) Field Description 5 collision frames The number of frames that are successfully sent on an interface after five collisions occur. 6 collision frames The number of frames that are successfully sent on an interface after six collisions occur.
Page 403 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-20 Receive Field Descriptions (continued) Field Description Unicast bytes The total amount of memory (in bytes) used by unicast frames received on an interface, including the FCS value and the incorrectly formed frames. This value excludes the frame header bits.
Page 404 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller Table 2-20 Receive Field Descriptions (continued) Field Description System FCS error frames The total number of frames received on an interface that have a valid length (in bytes) but that do not have the correct FCS values.
Page 405 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller SupervisorDiag : 00000000 SupervisorFrameSizeLimit : 000007C8 SupervisorBroadcast : 000A0F01 GeneralIO : 000003F9 00000000 00000004 StackPcsInfo : FFFF1000 860329BD 5555FFFF FFFFFFFF FF0FFF00 86020000 5555FFFF 00000000 StackRacInfo : 73001630 00000003 7F001644 00000003...
Page 406 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers ethernet-controller This is an example of output from the show controllers ethernet-controller port-asic statistics command: Switch# show controllers ethernet-controller port-asic statistics =========================================================================== Switch 1, PortASIC 0 Statistics --------------------------------------------------------------------------- 0 RxQ-0, wt-0 enqueue frames...
Page 407: Show Controllers Power Inline
Though visible on all switches, this command is valid only for PoE switches. It provides no information for switches that do not support PoE. The output provides information that might be useful for Cisco technical support representatives troubleshooting the switch.
Page 408 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers power inline Examples This is an example of output from the show controllers power inline command on a switch other than a Catalyst 3560G-48PS or 3560G-24PS switch: Switch> show controllers power inline...
Page 409: Show Controllers Tcam
12.1(19)EA1 This command was introduced. Usage Guidelines This display provides information that might be useful for Cisco technical support representatives troubleshooting the switch. Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Page 410: Show Controllers Tcam
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers tcam HRR0: 00000000_E000CAFC HRR1: 00000000_00000000 HRR2: 00000000_00000000 HRR3: 00000000_00000000 HRR4: 00000000_00000000 HRR5: 00000000_00000000 HRR6: 00000000_00000000 HRR7: 00000000_00000000 <output truncated> GMR31: FF_FFFFFFFF_FFFFFFFF GMR32: FF_FFFFFFFF_FFFFFFFF GMR33: FF_FFFFFFFF_FFFFFFFF ============================================================================= TCAM related PortASIC 1 registers...
Page 411: Show Controllers Utilization
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers utilization show controllers utilization Use the show controllers utilization user EXEC command to display bandwidth utilization on the switch or specific ports. show controllers [interface-id] utilization [ | {begin | exclude | include} expression]...
Page 412 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show controllers utilization Table 2-21 show controllers utilization Field Descriptions Field Description Receive Bandwidth Percentage Displays the received bandwidth usage of the switch, which is the Utilization sum of the received traffic on all the ports divided by the switch receive capacity.
Page 413: Show Dot1Q-Tunnel
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dot1q-tunnel show dot1q-tunnel Use the show dot1q-tunnel user EXEC command to display information about IEEE 802.1Q tunnel ports. show dot1q-tunnel [interface interface-id] [ | {begin | exclude | include} expression] Syntax Description interface interface-id (Optional) Specify the interface for which to display IEEE 802.1Q tunneling...
Page 414: Show Dot1X
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dot1x show dot1x Use the show dot1x privileged EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified port. show dot1x [all | interface interface-id | statistics interface interface-id] [ | {begin | exclude |...
Page 415: Show Dot1X
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dot1x Switch# show dot1x all Dot1x Info for interface GigabitEthernet0/1 ---------------------------------------------------- Supplicant MAC 00d0.b71b.35de AuthSM State = CONNECTING BendSM State = IDLE PortStatus = UNAUTHORIZED MaxReq HostMode = Single Port Control...
Page 416 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dot1x ReAuthPeriod = 3600 Seconds ServerTimeout = 30 Seconds SuppTimeout = 30 Seconds TxPeriod = 30 Seconds Guest-Vlan AuthFail-Vlan = 1001 AuthFail-Max-Attempts = 3 Critical Port = Disabled This is an example of output from the show dot1x interface interface-id privileged EXEC command when a restricted VLAN is configured, the inaccessible authentication feature is enabled, but the port is not in the critical-authentation state.
Page 417 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dot1x AuthFail-Vlan = 1001 AuthFail-Max-Attempts = 3 Critical Port = Enabled This is an example of output from the show dot1x statistics interface interface-id command. Table 2-22 describes the fields in the display.
Page 418: Show Dtp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dtp show dtp Use the show dtp privileged EXEC command to display Dynamic Trunking Protocol (DTP) information for the switch or for a specified interface. show dtp [interface interface-id] [ | {begin | exclude | include} expression]...
Page 419 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show dtp Statistics ---------- 3160 packets received (3160 good) 0 packets dropped 0 nonegotiate, 0 bad version, 0 domain mismatches, 0 bad TLVs, 0 other 6320 packets output (6320 good) 3160 native, 3160 software encap isl, 0 isl hardware native...
Page 420: Show Env
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show env show env Use the show env user EXEC command to display fan, temperature, redundant power system (RPS) availability, and power information for the switch. show env {all | fan | power | rps| temperature [status]} [ | {begin | exclude | include} expression] Syntax Description Display both fan and temperature environmental status.
Page 421 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show env Examples This is an example of output from the show env all command: Switch> show env all FAN is OK TEMPERATURE is OK POWER is OK RPS is AVAILABLE This is an example of output from the show env fan command: Switch>...
Page 422: Show Errdisable Detect
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable detect show errdisable detect Use the show errdisable detect user EXEC command to display error-disabled detection status. show errdisable detect [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 423: Show Errdisable Detect
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable detect Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable flap-values Displays error condition recognition information. show errdisable recovery Displays error-disabled recovery timer information.
Page 424: Show Errdisable Flap-Values
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable flap-values show errdisable flap-values Use the show errdisable flap-values user EXEC command to display conditions that cause an error to be recognized for a cause. show errdisable flap-values [ | {begin | exclude | include} expression]...
Page 425 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable flap-values Related Commands Command Description errdisable detect cause Enables error-disabled detection for a specific cause or all causes. show errdisable detect Displays error-disabled detection status. show errdisable recovery Displays error-disabled recovery timer information.
Page 426: Show Errdisable Recovery
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable recovery show errdisable recovery Use the show errdisable recovery user EXEC command to display the error-disabled recovery timer information. show errdisable recovery [ | {begin | exclude | include} expression]...
Page 427: Show Errdisable Recovery
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show errdisable recovery Timer interval:300 seconds Interfaces that will be enabled at the next timeout: Interface Errdisable reason Time left(sec) --------- ----------------- -------------- Gi0/2 link-flap Though visible in the output, the unicast-flood field is not valid.
Page 428: Show Etherchannel
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show etherchannel show etherchannel Use the show etherchannel user EXEC command to display EtherChannel information for a channel. show etherchannel [channel-group-number {detail | port | port-channel | protocol | summary}] {detail | load-balance | port | port-channel | protocol | summary} [ | {begin | exclude |...
Page 429 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show etherchannel Examples This is an example of output from the show etherchannel 1 detail command: Switch> show etherchannel 1 detail Group state = L2 Ports: 2 Maxports = 16 Port-channels: 1 Max Port-channels = 16...
Page 430 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show etherchannel This is an example of output from the show etherchannel 1 summary command: Switch> show etherchannel 1 summary Flags: D - down P - in port-channel I - stand-alone s - suspended...
Page 431: Show Flowcontrol
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show flowcontrol show flowcontrol Use the show flowcontrol user EXEC command to display the flow control status and statistics. show flowcontrol [interface interface-id | module number] [ | {begin | exclude | include}...
Page 432 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show flowcontrol This is an example of output from the show flowcontrol interface interface-id command: Switch> show flowcontrol gigabitethernet0/2 Port Send FlowControl Receive FlowControl RxPause TxPause admin oper admin oper --------- -------- -------- -------- --------...
Page 433: Show Interfaces
(Optional) Display the input and output packets by switching path for the interface. status (Optional) Display the status of the interface. A status of unsupported in the Type field means that a non-Cisco small form-factor pluggable (SFP) module is inserted in the module slot. err-disabled (Optional) Display interfaces in error-disabled state.
Page 434: Show Interfaces
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces trunk Display interface trunk information. If you do not specify an interface, only information for active trunking ports appears. | begin (Optional) Display begins with the line that matches the expression.
Page 435 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces Examples This is an example of output from the show interfaces command for an interface: Switch# show interfaces gigabitethernet0/2 GigabitEthernet0/2 is down, line protocol is down Hardware is Gigabit Ethernet, address is 0009.43a7.d085 (bia 0009.43a7.d085)
Page 436 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces capabilities command for an interface. Switch# show interfaces gigabitethernet0/2 capabilities GigabitEthernet0/2 Model: WS-C3560-24PS Type: 10/100/1000BaseTX Speed: 10,100,1000,auto Duplex: full,auto Trunk encap. type: 802.1Q,ISL...
Page 437 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces private-vlan mapping command when the private-VLAN primary VLAN is VLAN 10 and the secondary VLANs are VLANs 501 and 502:...
Page 438 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces switchport command for a port. Table 2-24 describes the fields in the display. Private VLAN trunks are not supported in this release, so those fields are not applicable.
Page 439 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces Table 2-24 show interfaces switchport Field Descriptions (continued) Field Description Pruning VLANs Enabled Lists the VLANs that are pruning-eligible. Protected Displays whether or not protected port is enabled (True) or disabled (False) on the interface.
Page 440 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces interface-id pruning command: Switch# show interfaces gigibitethernet0/2 pruning Port Vlans pruned for lack of request by neighbor This is an example of output from the show interfaces interface-id trunk command. It displays trunking information for the port.
Page 441 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces This is an example of output from the show interfaces interface-id transceiver detail command: Switch# show interfaces gigabitethernet0/3 transceiver detail ITU Channel not available (Wavelength not available), Transceiver is externally calibrated.
Page 442 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces Related Commands Command Description switchport access Configures a port as a static-access or a dynamic-access port. switchport block Blocks unknown unicast or multicast traffic on an interface. switchport backup interface Configures Flex Links, a pair of Layer 2 interfaces that provide mutual backup.
Page 443: Show Interfaces Counters
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces counters show interfaces counters Use the show interfaces counters privileged EXEC command to display various counters for the switch or for a specific interface. show interfaces [interface-id | vlan vlan-id] counters [errors | etherchannel | protocol status |...
Page 444 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show interfaces counters Examples This is an example of partial output from the show interfaces counters command. It displays all counters for the switch. Switch# show interfaces counters Port InOctets InUcastPkts InMcastPkts...
Page 445: Show Inventory
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show inventory show inventory Use the show inventory user EXEC command to display product identification (PID) information for the hardware. show inventory [entity-name | raw] [ | {begin | exclude | include} expression]...
Page 446: Show Ip Arp Inspection
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip arp inspection show ip arp inspection Use the show ip arp inspection privileged EXEC command to display the configuration and the operating state of dynamic Address Resolution Protocol (ARP) inspection or the status of this feature for all VLANs or for the specified interface or VLAN.
Page 447 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip arp inspection Usage Guidelines Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.
Page 448 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip arp inspection Vlan DHCP Permits ACL Permits Source MAC Failures ---- ------------ ----------- ------------------- 2000 Vlan Dest MAC Failures IP Validation Failures ---- ----------------- ---------------------- 2000 For the show ip arp inspection statistics command, the switch increments the number of forwarded packets for each ARP request and response packet on a trusted dynamic ARP inspection port.
Page 449: Show Ip Dhcp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip dhcp snooping show ip dhcp snooping Use the show ip dhcp snooping user EXEC command to display the DHCP snooping configuration. show ip dhcp snooping [ | {begin | exclude | include} expression]...
Page 450: Show Ip Dhcp Snooping Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip dhcp snooping binding show ip dhcp snooping binding Use the show ip dhcp snooping binding user EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch.
Page 451: Show Ip Dhcp Snooping Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip dhcp snooping binding This example shows how to display the DHCP snooping binding entries for a specific IP address: Switch> show ip dhcp snooping binding 10.1.2.150 MacAddress IpAddress Lease(sec) Type...
Page 452: Show Ip Dhcp Snooping Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip dhcp snooping database show ip dhcp snooping database Use the show ip dhcp snooping database user EXEC command to display the status of the DHCP snooping binding database agent. show ip dhcp snooping database [detail] [ | {begin | exclude | include} expression] This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI).
Page 453: Show Ip Dhcp Snooping Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip dhcp snooping database This is an example of output from the show ip dhcp snooping database detail command: Switch# show ip dhcp snooping database detail Agent URL : tftp://10.1.1.1/directory/file Write delay Timer : 300 seconds...
Page 454: Show Ip Igmp Profile
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp profile show ip igmp profile Use the show ip igmp profile privileged EXEC command to display all configured Internet Group Management Protocol (IGMP) profiles or a specified IGMP profile.
Page 455: Show Ip Igmp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping show ip igmp snooping Use the show ip igmp snooping user EXEC command to display the Internet Group Management Protocol (IGMP) snooping configuration of the switch or the VLAN.
Page 456: Show Ip Igmp Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping Examples This is an example of output from the show ip igmp snooping vlan 1 command. It shows snooping characteristics for a specific VLAN. Switch# show ip igmp snooping vlan 1...
Page 457 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping Enables the IGMP snooping configurable-leave timer. last-member-query-interval ip igmp snooping querier Enables the IGMP querier function in Layer 2 networks.
Page 458: Show Ip Igmp Snooping Groups
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping groups show ip igmp snooping groups Use the show ip igmp snooping groups privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping multicast table for the switch or the multicast information. Use with the vlan keyword to display the multicast table for a specified multicast VLAN or specific multicast information.
Page 459 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping groups Examples This is an example of output from the show ip igmp snooping groups command without any keywords. It displays the multicast table for the switch. Switch# show ip igmp snooping groups...
Page 460: Show Ip Igmp Snooping Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping mrouter show ip igmp snooping mrouter Use the show ip igmp snooping mrouter privileged EXEC command to display the Internet Group Management Protocol (IGMP) snooping dynamically learned and manually configured multicast router ports for the switch or for the specified multicast VLAN.
Page 461: Show Ip Igmp Snooping Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping mrouter Related Commands Command Description ip igmp snooping Enables IGMP snooping on the switch or on a VLAN. ip igmp snooping vlan mrouter Adds a multicast router port.
Page 462: Show Ip Igmp Snooping Querier
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping querier show ip igmp snooping querier Use the show ip igmp snooping querier detail user EXEC command to display the configuration and operation information for the IGMP querier configured on a switch.
Page 463 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip igmp snooping querier Examples This is an example of output from the show ip igmp snooping querier command: Switch> show ip igmp snooping querier Vlan IP Address IGMP Version Port --------------------------------------------------- 172.20.50.11...
Page 464: Show Ip Source Binding
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip source binding show ip source binding Use the show ip source binding user EXEC command to display the IP source bindings on the switch. show ip source binding [ip-address] [mac-address] [dhcp-snooping | static] [interface...
Page 465 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip source binding Related Commands Command Description ip dhcp snooping binding Configures the DHCP snooping binding database. ip source binding Configures static IP source bindings on the switch. Catalyst 3560 Switch Command Reference...
Page 466: Show Ip Verify Source
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip verify source show ip verify source Use the show ip verify source user EXEC command to display the IP source guard configuration on the switch or on a specific interface.
Page 467: Show Ip Verify Source
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ip verify source On the Gigabit Ethernet 0/4 interface, IP source guard with source IP and MAC address filtering is • enabled, and static IP source bindings are configured on VLANs 10 and 11. For VLANs 12 to 20, the default port ACL is applied on the interface for the VLANs on which IP source guard is not configured.
Page 468: Show Ipc
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipc show ipc Use the show ipc user EXEC command to display Interprocess Communications Protocol (IPC) configuration, status, and statistics. show ipc {mcast {appclass | groups | status} | nodes | ports [open] | queue | rpc | session {all |...
Page 469 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipc Usage Guidelines Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear. Examples This example shows how to display the IPC routing status: Switch>...
Page 470 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipc This example shows how to display the contents of the IPC retransmission queue: Switch> show ipc queue There are 0 IPC messages waiting for acknowledgement in the transmit queue. There are 0 IPC messages waiting for a response.
Page 471 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipc This example shows how to display the status of the local IPC server: Switch> show ipc status cumulative IPC System Status Time last IPC stat cleared :never This processor is the IPC master server.
Page 472: Show Ipv6 Access-List
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 access-list show ipv6 access-list Use the show ipv6 access-list user EXEC command to display the contents of all current IPv6 access lists. show ipv6 access-list [access-list-name] This command is available only if the switch is running the advanced IP services image and you have Note configured a dual IPv4 and IPv6 Switch Database Management (SDM) template on the switch.
Page 473 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 access-list Table 2-26 show ipv6 access-list Field Descriptions (continued) Field Description An equal operand that compares the source or destination ports of TCP or UDP packets. bgp (matches) Border Gateway Protocol. The protocol type that the packet is equal to and the number of matches.
Page 474: Show Ipv6 Mld Snooping
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping show ipv6 mld snooping Use the show ipv6 mld snooping user EXEC command to display IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping configuration of the switch or the VLAN.
Page 475 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping Vlan 100: -------- MLD snooping : Disabled MLDv1 immediate leave : Disabled Explicit host tracking : Enabled Multicast router learning mode : pim-dvmrp Robustness variable Last listener query count...
Page 476: Show Ipv6 Mld Snooping Address
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping address show ipv6 mld snooping address Use the show ipv6 mld snooping address user EXEC command to display all or specified IP version 6 (IPv6) multicast address information maintained by Multicast Listener Discovery (MLD) snooping.
Page 477: Show Ipv6 Mld Snooping Address
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping address Examples This is an example of output from the show snooping address user EXEC command: Switch> show ipv6 mld snooping address Vlan Group Type Version Port List...
Page 478: Show Ipv6 Mld Snooping Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping mrouter show ipv6 mld snooping mrouter Use the show ipv6 mld snooping mrouter user EXEC command to display dynamically learned and manually configured IP version 6 (IPv6) Multicast Listener Discovery (MLD) router ports for the switch or a VLAN.
Page 479: Show Ipv6 Mld Snooping Mrouter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping mrouter This is an example of output from the show ipv6 mld snooping mrouter vlan command. It shows multicast router ports for a specific VLAN. Switch> show ipv6 mld snooping mrouter vlan 100...
Page 480: Show Ipv6 Mld Snooping Querier
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping querier show ipv6 mld snooping querier Use the show ipv6 mld snooping querier user EXEC command to display IP version 6 (IPv6) Multicast Listener Discovery (MLD) snooping querier-related information most recently received by the switch or the VLAN.
Page 481 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show ipv6 mld snooping querier Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output do not appear, but the lines that contain Output appear.
Page 482: Show L2Protocol-Tunnel
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show l2protocol-tunnel show l2protocol-tunnel Use the show l2protocol-tunnel user EXEC command to display information about Layer 2 protocol tunnel ports. Displays information for interfaces with protocol tunneling enabled. show l2protocol-tunnel [interface interface-id] [summary] [ | {begin | exclude | include}...
Page 483 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show l2protocol-tunnel Examples This is an example of output from the show l2protocol-tunnel command: Switch> show l2protocol-tunnel COS for Encapsulated Packets: 5 Drop Threshold for Encapsulated Packets: 0 Port Protocol Shutdown Drop...
Page 484 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show l2protocol-tunnel Related Commands Command Description clear l2protocol-tunnel counters Clears counters for protocol tunneling ports. l2protocol-tunnel Enables Layer 2 protocol tunneling for CDP, STP, or VTP packets on an interface. l2protocol-tunnel cos Configures a class of service (CoS) value for tunneled Layer 2 protocol packets.
Page 485: Show Lacp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show lacp show lacp Use the show lacp user EXEC command to display Link Aggregation Control Protocol (LACP) channel-group information. show lacp [channel-group-number] {counters | internal | neighbor | sys-id} [ | {begin | exclude |...
Page 486: Show Lacp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show lacp Examples This is an example of output from the show lacp counters user EXEC command. Table 2-27 describes the fields in the display. Switch> show lacp counters LACPDUs Marker Marker Response...
Page 487 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show lacp Table 2-28 describes the fields in the display: Table 2-28 show lacp internal Field Descriptions Field Description State State of the specific port. These are the allowed values: – —Port is in an unknown state.
Page 488 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show lacp This is an example of output from the show lacp neighbor command: Switch> show lacp neighbor Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs...
Page 489: Show Mac Access-Group
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac access-group show mac access-group Use the show mac access-group user EXEC command to display the MAC access control lists (ACLs) configured for an interface or a switch. show mac access-group [interface interface-id] [ | {begin | exclude | include} expression]...
Page 490 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac access-group Related Commands Command Description mac access-group Applies a MAC access group to an interface. Catalyst 3560 Switch Command Reference 2-458 78-16405-05...
Page 491: Show Mac Address-Table
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table show mac address-table Use the show mac address-table user EXEC command to display a specific MAC address table static and dynamic entry or the MAC address table static and dynamic entries on a specific interface or VLAN.
Page 492 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Page 493: Show Mac Address-Table Address
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table address show mac address-table address Use the show mac address-table address user EXEC command to display MAC address table information for the specified MAC address. show mac address-table address mac-address [interface interface-id] [vlan vlan-id] [ | {begin |...
Page 494 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table address Related Commands Command Description show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN. show mac address-table count Displays the number of addresses present in all VLANs or the specified VLAN.
Page 495: Show Mac Address-Table Aging-Time
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table aging-time show mac address-table aging-time Use the show mac address-table aging-time user EXEC command to display the aging time of a specific address table instance, all address table instances on a specified VLAN or, if a specific VLAN is not specified, on all VLANs.
Page 496 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table aging-time Related Commands Command Description mac address-table aging-time Sets the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.
Page 497: Show Mac Address-Table Count
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table count show mac address-table count Use the show mac address-table count user EXEC command to display the number of addresses present in all VLANs or the specified VLAN. show mac address-table count [vlan vlan-id] [ | {begin | exclude | include} expression]...
Page 498 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table count Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
Page 499: Show Mac Address-Table Dynamic
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table dynamic show mac address-table dynamic Use the show mac address-table dynamic user EXEC command to display only dynamic MAC address table entries. show mac address-table dynamic [address mac-address] [interface interface-id] [vlan vlan-id]...
Page 500 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table dynamic Related Commands Command Description clear mac address-table dynamic Deletes from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
Page 501: Show Mac Address-Table Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table interface show mac address-table interface Use the show mac address-table interface user command to display the MAC address table information for the specified interface in the specified VLAN. show mac address-table interface interface-id [vlan vlan-id] [ | {begin | exclude | include}...
Page 502 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table interface Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
Page 503: Show Mac Address-Table Move Update
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table move update show mac address-table move update Use the show mac address-table move update user EXEC command to display the MAC address-table move update information on the switch. show mac address-table move update [ | {begin | exclude | include} expression]...
Page 504 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table move update Related Commands Command Description clear mac address-table move Clears the MAC address-table move update counters. update mac address-table move update Configures MAC address-table move update on the switch.
Page 505: Show Mac Address-Table Notification
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table notification show mac address-table notification Use the show mac address-table notification user EXEC command to display the MAC address notification settings for all interfaces or the specified interface. show mac address-table notification [interface [interface-id]] [ | {begin | exclude | include}...
Page 506 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table notification Examples This is an example of output from the show mac address-table notification command: Switch> show mac address-table notification MAC Notification Feature is Enabled on the switch Interval between Notification Traps : 60 secs...
Page 507: Show Mac Address-Table Static
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table static show mac address-table static Use the show mac address-table static user EXEC command to display only static MAC address table entries. show mac address-table static [address mac-address] [interface interface-id] [vlan vlan-id]...
Page 508 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table static Examples This is an example of output from the show mac address-table static command: Switch> show mac address-table static Mac Address Table ------------------------------------------ Vlan Mac Address Type Ports...
Page 509: Show Mac Address-Table Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table vlan show mac address-table vlan Use the show mac address-table vlan user EXEC command to display the MAC address table information for the specified VLAN. show mac address-table vlan vlan-id [ | {begin | exclude | include} expression]...
Page 510 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mac address-table vlan Related Commands Command Description show mac address-table address Displays MAC address table information for the specified MAC address. show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
Page 511: Show Mls Qos
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos show mls qos Use the show mls qos user EXEC command to display global quality of service (QoS) configuration information. show mls qos [ | {begin | exclude | include} expression]...
Page 512: Show Mls Qos Aggregate-Policer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos aggregate-policer show mls qos aggregate-policer Use the show mls qos aggregate-policer user EXEC command to display the quality of service (QoS) aggregate policer configuration. A policer defines a maximum permissible rate of transmission, a maximum burst size for transmissions, and an action to take if either maximum is exceeded.
Page 513: Show Mls Qos Input-Queue
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos input-queue show mls qos input-queue Use the show mls qos input-queue user EXEC command to display quality of service (QoS) settings for the ingress queues. show mls qos input-queue [ | {begin | exclude | include} expression]...
Page 514 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos input-queue Related Commands Command Description mls qos srr-queue input bandwidth Assigns shaped round robin (SRR) weights to an ingress queue. mls qos srr-queue input buffers Allocates the buffers between the ingress queues.
Page 515: Show Mls Qos Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos interface show mls qos interface Use the show mls qos interface user EXEC command to display quality of service (QoS) information at the port level. show mls qos interface [interface-id] [buffers | queueing | statistics]...
Page 516: Show Mls Qos Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos interface Examples This is an example of output from the show mls qos interface interface-id command when VLAN-based QoS is enabled: Switch> show mls qos interface gigabitethernet0/1 GigabitEthernet0/1 trust state:not trusted...
Page 517 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos interface This is an example of output from the show mls qos interface interface-id statistics command. Table 2-29 describes the fields in this display. Switch> show mls qos interface gigabitethernet0/2 statistics...
Page 518 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos interface Table 2-29 show mls qos interface statistics Field Descriptions Field Description DSCP incoming Number of packets received for each DSCP value. outgoing Number of packets sent for each DSCP value.
Page 519: Show Mls Qos Maps
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos maps show mls qos maps Use the show mls qos maps user EXEC command to display quality of service (QoS) mapping information. During classification, QoS uses the mapping tables to represent the priority of the traffic and to derive a corresponding class of service (CoS) or Differentiated Services Code Point (DSCP) value from the received CoS, DSCP, or IP precedence value.
Page 520 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos maps The DSCP input queue threshold and the DSCP output queue threshold maps appear as a matrix. The d1 column specifies the most-significant digit of the DSCP number. The d2 row specifies the least-significant digit in the DSCP number.
Page 521 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos maps Dscp-inputq-threshold map: d1 :d2 -------------------------------------------------------------------- 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01...
Page 522: Show Mls Qos Queue-Set
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos queue-set show mls qos queue-set Use the show mls qos queue-set user EXEC command to display quality of service (QoS) settings for the egress queues. show mls qos queue-set [qset-id] [ | {begin | exclude | include} expression]...
Page 523 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos queue-set Related Commands Command Description mls qos queue-set output buffers Allocates buffers to the queue-set. mls qos queue-set output threshold Configures the weighted tail-drop (WTD) thresholds, guarantees the availability of buffers, and configures the maximum memory allocation of the queue-set.
Page 524: Show Mls Qos Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mls qos vlan show mls qos vlan Use the show mls qos vlan user EXEC command to display the policy maps attached to a switch virtual interface (SVI). show mls qos vlan vlan-id [ | {begin | exclude | include} expression]...
Page 525: Show Monitor
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show monitor show monitor Use the show monitor user EXEC command to display information about all Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) sessions on the switch. Use the command with keywords to show a specific session, all sessions, all local sessions, or all remote sessions.
Page 526: Show Monitor
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show monitor Examples This is an example of output for the show monitor user EXEC command: Switch# show monitor Session 1 --------- Type : Local Session Source Ports : RX Only : Fa0/1...
Page 527 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show monitor Related Commands Command Description monitor session Starts or modifies a SPAN or RSPAN session. Catalyst 3560 Switch Command Reference 2-495 78-16405-05...
Page 528: Show Mvr
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr show mvr Use the show mvr privileged EXEC command without keywords to display the current Multicast VLAN Registration (MVR) global parameter values, including whether or not MVR is enabled, the MVR multicast VLAN, the maximum query response time, the number of multicast groups, and the MVR mode (dynamic or compatible).
Page 529 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr Related Commands Command Description mvr (global configuration) Enables and configures multicast VLAN registration on the switch. mvr (interface configuration) Configures MVR ports. show mvr interface Displays the configured MVR interfaces, status of the specified interface, or all multicast groups to which the interface belongs when the interface and members keywords are appended to the command.
Page 530: Show Mvr Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr interface show mvr interface Use the show mvr interface privileged EXEC command without keywords to display the Multicast VLAN Registration (MVR) receiver and source ports. Use the command with keywords to display MVR parameters for a specific receiver port.
Page 531: Show Mvr Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr interface In the preceding display, Status is defined as follows: Active means the port is part of a VLAN. • • Up/Down means that the port is forwarding/nonforwarding. • Inactive means that the port is not yet part of any VLAN.
Page 532: Show Mvr Members
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr members show mvr members Use the show mvr members privileged EXEC command to display all receiver and source ports that are currently members of an IP multicast group. show mvr members [ip-address] [ | {begin | exclude | include} expression]...
Page 533: Show Mvr Members
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show mvr members This is an example of output from the show mvr members ip-address command. It displays the members of the IP multicast group with that address: Switch# show mvr members 239.255.0.2 239.255.003.--22...
Page 534: Show Pagp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show pagp show pagp Use the show pagp user EXEC command to display Port Aggregation Protocol (PAgP) channel-group information. show pagp [channel-group-number] {counters | internal | neighbor} [ | {begin | exclude |...
Page 535: Show Pagp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show pagp This is an example of output from the show pagp 1 internal command: Switch> show pagp 1 internal Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
Page 536: Show Parser Macro
Output appear. Examples This is a partial output example from the show parser macro command. The output for the Cisco-default macros varies depending on the switch platform and the software image running on the switch:...
Page 537 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show parser macro -------------------------------------------------------------- Macro name : cisco-desktop Macro type : default interface # macro keywords $AVID # Basic interface - Enable data VLAN only # Recommended value for access vlan (AVID) should not be 1...
Page 538 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show parser macro This is an example of output from the show parser macro name command: Switch# show parser macro name standard-switch10 Macro name : standard-switch10 Macro type : customizable macro description standard-switch10...
Page 539: Show Policy-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show policy-map show policy-map Use the show policy-map user EXEC command to display quality of service (QoS) policy maps, which define classification criteria for incoming traffic. Policy maps can include policers that specify the bandwidth limitations and the action to take if the limits are exceeded.
Page 540 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show policy-map Related Commands Command Description policy-map Creates or modifies a policy map that can be attached to multiple ports to specify a service policy. Catalyst 3560 Switch Command Reference 2-508 78-16405-05...
Page 541: Show Port-Security
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show port-security show port-security Use the show port-security privileged EXEC command to display port-security settings for an interface or for the switch. show port-security [interface interface-id] [address | vlan] [ | {begin | exclude | include}...
Page 542 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show port-security Examples This is an example of the output from the show port-security command: Switch# show port-security Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) ------------------------------------------------------------------------------- Gi0/1 Shutdown -------------------------------------------------------------------------------...
Page 543 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show port-security Related Commands Command Description clear port-security Deletes from the MAC address table a specific type of secure address or all the secure addresses on the switch or an interface. switchport port-security...
Page 544: Show Power Inline
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show power inline show power inline Use the show power inline user EXEC command to display the Power over Ethernet (PoE) status for the specified PoE port or for all PoE ports.
Page 545: Show Power Inline
• maximum wattage exceeds the detected powered-device maximum. Power The supplied PoE in watts Device The device type detected: n/a, unknown, Cisco powered-device, IEEE powered-device, <name from CDP> Class The IEEE classification: n/a, Class <0–4> Available The total amount of PoE in the system...
Page 546: Show Sdm Prefer
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show sdm prefer show sdm prefer Use the show sdm prefer privileged EXEC command to display information about the Switch Database Management (SDM) templates that can be used to maximize used for allocating system resources for a particular feature, or use the command without a keyword to display the template in use.
Page 547 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show sdm prefer Examples This is an example of output from the show sdm prefer command: Switch# show sdm prefer "default" template: The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs.
Page 548 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show sdm prefer This is an example of output from the show sdm prefer routing command entered on a switch: Switch# show sdm prefer routing "desktop routing" template: The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs.
Page 549 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show sdm prefer Related Commands Command Description sdm prefer Sets the SDM template to maximize resources for routing or VLANs or to the default template, or to select a dual IPv4 and IPv6 template.
Page 550: Show Setup Express
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show setup express show setup express Use the show setup express privileged EXEC command to display if Express Setup mode is active on the switch. show setup express [ | {begin | exclude | include} expression]...
Page 551: Show Spanning-Tree
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree show spanning-tree Use the show spanning-tree user EXEC command to display spanning-tree state information. show spanning-tree [bridge-group | active [detail] | backbonefast | blockedports | bridge | detail [active] | inconsistentports | interface interface-id | mst | pathcost method | root | summary...
Page 552 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree mst [configuration (Optional) Display the multiple spanning-tree (MST) region [digest]] [instance-id configuration and status (available only in privileged EXEC mode). [detail | interface The keywords have these meanings: interface-id [detail]] digest—(Optional) Display the MD5 digest included in the current...
Page 553 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree | begin (Optional) Display begins with the line that matches the expression. | exclude (Optional) Display excludes lines that match the expression. | include (Optional) Display includes lines that match the specified expression.
Page 554 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree This is an example of output from the show spanning-tree detail command: Switch# show spanning-tree detail VLAN0001 is executing the ieee compatible Spanning Tree protocol Bridge Identifier has priority 49152, sysid 1, address 0003.fd63.9580 Configured hello time 2, max age 20, forward delay 15 Current root has priority 32768, address 0001.42e2.cdd0...
Page 555 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree BackboneFast statistics ----------------------- Number of transition via backboneFast (all VLANs) Number of inferior BPDUs received (all VLANs) Number of RLQ request PDUs received (all VLANs) Number of RLQ response PDUs received (all VLANs)
Page 556 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show spanning-tree Related Commands Command Description clear spanning-tree counters Clears the spanning-tree counters. clear spanning-tree detected-protocols Restarts the protocol migration process. spanning-tree backbonefast Enables the BackboneFast feature. spanning-tree bpdufilter Prevents an interface from sending or receiving bridge protocol data units (BPDUs).
Page 557: Show Storm-Control
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show storm-control show storm-control Use the show storm-control user EXEC command to display broadcast, multicast, or unicast storm control settings on the switch or on the specified interface or to display storm-control history.
Page 558 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show storm-control This is an example of output from the show storm-control command for a specified interface. Because no traffic-type keyword was entered, the broadcast storm control settings appear. Switch> show storm-control gigabitethernet 0/1...
Page 559: Show System Mtu
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show system mtu show system mtu Use the show system mtu privileged EXEC command to display the global maximum transmission unit (MTU) or maximum packet size set for the switch. show system mtu [ | {begin | exclude | include} expression]...
Page 560: Show Udld
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show udld show udld Use the show udld user EXEC command to display UniDirectional Link Detection (UDLD) administrative and operational status for all ports or the specified port. show udld [interface-id] [ | {begin | exclude | include} expression]...
Page 561 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show udld Table 2-32 show udld Field Descriptions Field Description Interface The interface on the local device configured for UDLD. Port enable administrative How UDLD is configured on the port. If UDLD is enabled or...
Page 562 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show udld Related Commands Command Description udld Enables aggressive or normal mode in UDLD or sets the configurable message timer time. udld port Enables UDLD on an individual interface or prevents a fiber-optic interface from being enabled by the udld global configuration command.
Page 563: Show Version
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show version show version Use the show version user EXEC command to display version information for the hardware and firmware. show version [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 564 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show version cisco WS-C3560-24PS (PowerPC405) processor (revision 01) with 118776K/12288K bytes of memory. Processor board ID CSJ0737U00J Last reset from power-on Bridging software. 1 Virtual Ethernet/IEEE 802.3 interface(s) 24 FastEthernet/IEEE 802.3 interface(s) 2 Gigabit Ethernet/IEEE 802.3 interface(s)
Page 565: Show Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan show vlan Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) on the switch.
Page 566 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan Command History Release Modification 12.1(19)EA1 This command was introduced. 12.2(20)SE The mtu and private-vlan keywords were added. 12.2(25)SE The dot1q tag native keywords were added. Usage Guidelines In the show vlan mtu command output, the MTU_Mismatch column shows whether all the ports in the VLAN have the same MTU.
Page 567 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan <output truncated> 1005 trnet 101005 1500 Remote SPAN VLANs ------------------------------------------------------------------------------ Primary Secondary Type Ports ------ --------- ----------------- ------------------------------------------ Primary Secondary Type Ports ------- --------- ----------------- ------------------------------------------ isolated Fa0/13, Fa0/20, Fa0/22, Gi0/1,...
Page 568 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan This is an example of output from the show vlan private-vlan command: Switch> show vlan private-vlan Primary Secondary Type Ports ------- --------- ----------------- ------------------------------------------ isolated Gi0/3 community Fa0/11 non-operational3 isolated...
Page 569 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan Related Commands Command Description private-vlan Configures a VLAN as a community, isolated, or primary VLAN or associates a primary VLAN with secondary VLANs. switchport mode Configures the VLAN membership mode of a port.
Page 570: Show Vlan Access-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan access-map show vlan access-map Use the show vlan access-map privileged EXEC command to display information about a particular VLAN access map or for all VLAN access maps. show vlan access-map [mapname] [ | {begin | exclude | include} expression]...
Page 571: Show Vlan Filter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vlan filter show vlan filter Use the show vlan filter privileged EXEC command to display information about all VLAN filters or about a particular VLAN or VLAN access map. show vlan filter [access-map name | vlan vlan-id] [ | {begin | exclude | include} expression]...
Page 572: Show Vmps
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vmps show vmps Use the show vmps user EXEC command without keywords to display the VLAN Query Protocol (VQP) version, reconfirmation interval, retry count, VLAN Membership Policy Server (VMPS) IP addresses, and the current and primary servers, or use the statistics keyword to display client-side statistics.
Page 573 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vmps This is an example of output from the show vmps statistics command. Table 2-34 describes each field in the display. Switch> show vmps statistics VMPS Client Statistics ---------------------- Queries: Responses:...
Page 574 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vmps Related Commands Command Description clear vmps statistics Clears the statistics maintained by the VQP client. vmps reconfirm Sends VQP queries to reconfirm all dynamic VLAN assignments with the (privileged EXEC) VMPS.
Page 575: Show Vtp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp show vtp Use the show vtp user EXEC command to display general information about the VLAN Trunking Protocol (VTP) management domain, status, and counters. show vtp {counters | password | status} [ | {begin | exclude | include} expression]...
Page 576 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp VTP pruning statistics: Trunk Join Transmitted Join Received Summary advts received from non-pruning-capable device ---------------- ---------------- ---------------- --------------------------- Fa0/47 Fa0/48 Gi0/1 Gi0/2 Table 2-35 show vtp counters Field Descriptions Field...
Page 577: Show Vtp
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp Table 2-35 show vtp counters Field Descriptions (continued) Field Description Number of configuration Number of MD5 digest errors. digest errors Digest errors increment whenever the MD5 digest in the summary packet and the MD5 digest of the received advertisement calculated by the switch do not match.
Page 578 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp Table 2-36 show vtp status Field Descriptions Field Description VTP Version Displays the VTP version operating on the switch. By default, the switch implements Version 1 but can be set to Version 2.
Page 579 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp Related Commands Command Description clear vtp counters Clears the VTP and pruning counters. vtp (global configuration) Configures the VTP filename, interface name, domain name, and mode. vtp (VLAN configuration) Configures the VTP domain name, password, pruning, and mode.
Page 580 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands show vtp Catalyst 3560 Switch Command Reference 2-548 78-16405-05...
Page 581: Shutdown
2 V ] Chapter 2 Catalyst 3560 Switch Cisco IOS Commands shutdown shutdown Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface. shutdown no shutdown Syntax Description This command has no arguments or keywords.
Page 582: Shutdown Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands shutdown vlan shutdown vlan Use the shutdown vlan global configuration command to shut down (suspend) local traffic on the specified VLAN. Use the no form of this command to restart local traffic on the VLAN.
Page 583: Snmp-Server Enable Traps
| entity | envmon [fan | shutdown | status | supply | temperature] | flash | hsrp | ipmulticast | mac-notification | msdp | ospf [cisco-specific | errors | lsa | rate-limit | retransmit | state-change] | pim [invalid-pim-message | neighbor-change |...
Page 584 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp-server enable traps hsrp (Optional) Enable Hot Standby Router Protocol (HSRP) traps. ipmulticast (Optional) Enable IP multicast routing traps. mac-notification (Optional) Enable MAC address notification traps. msdp (Optional) Enable Multicast Source Discovery Protocol (MSDP) traps.
Page 585 Modification 12.1(19)EA1 This command was introduced. 12.2(20)SE The ipmulticast, msdp, ospf [cisco-specific | errors | lsa | rate-limit | retransmit | state-change], pim [invalid-pim-message | neighbor-change | rp-mapping-change], and tty keywords were added. 12.2(25)SE The storm-control trap-rate value keywords were added.
Page 586 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp-server enable traps Related Commands Command Description show running-config Displays the running configuration on the switch. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 587: Snmp-Server Host
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp-server host snmp-server host Use the snmp-server host global configuration command to specify the recipient (host) of a Simple Network Management Protocol (SNMP) notification operation. Use the no form of this command to remove the specified host.
Page 588 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp-server host community-string Password-like community string sent with the notification operation. Though you can set this string by using the snmp-server host command, we recommend that you define this string by using the snmp-server community global configuration command before using the snmp-server host command.
Page 589 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp-server host Defaults This command is disabled by default. No notifications are sent. If you enter this command with no keywords, the default is to send all trap types to the host. No informs are sent to this host.
Page 590 The community string is defined as comaccess: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com comaccess snmp This example shows how to enable the switch to send all traps to the host myhost.cisco.com by using the community string public: Switch(config)# snmp-server enable traps Switch(config)# snmp-server host myhost.cisco.com public...
Page 591: Snmp Trap Mac-Notification
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp trap mac-notification snmp trap mac-notification Use the snmp trap mac-notification interface configuration command to enable the Simple Network Management Protocol (SNMP) MAC address notification trap on a specific Layer 2 interface. Use the no form of this command to return to the default setting.
Page 592 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands snmp trap mac-notification Related Commands Command Description clear mac address-table notification Clears the MAC address notification global counters. mac address-table notification Enables the MAC address notification feature. show mac address-table notification Displays the MAC address notification settings for all interfaces or on the specified interface when the interface keyword is appended.
Page 593: Spanning-Tree Backbonefast
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree backbonefast spanning-tree backbonefast Use the spanning-tree backbonefast global configuration command to enable the BackboneFast feature. Use the no form of the command to return to the default setting. spanning-tree backbonefast no spanning-tree backbonefast Syntax Description This command has no arguments or keywords.
Page 594: Spanning-Tree Bpdufilter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree bpdufilter spanning-tree bpdufilter Use the spanning-tree bpdufilter interface configuration command to prevent an interface from sending or receiving bridge protocol data units (BPDUs). Use the no form of this command to return to the default setting.
Page 595 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree bpdufilter Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 596: Spanning-Tree Bpduguard
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree bpduguard spanning-tree bpduguard Use the spanning-tree bpduguard interface configuration command to put an interface in the error-disabled state when it receives a bridge protocol data unit (BPDU). Use the no form of this command to return to the default setting.
Page 597 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree bpduguard Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 598: Spanning-Tree Cost
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree cost spanning-tree cost Use the spanning-tree cost interface configuration command to set the path cost for spanning-tree calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to place in the forwarding state.
Page 599 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree cost Related Commands Command Description show spanning-tree interface Displays spanning-tree information for the specified interface. interface-id spanning-tree port-priority Configures an interface priority. spanning-tree vlan priority Sets the switch priority for the specified spanning-tree instance.
Page 600: Spanning-Tree Etherchannel Guard Misconfig
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig spanning-tree etherchannel guard misconfig Use the spanning-tree etherchannel guard misconfig global configuration command to display an error message when the switch detects an EtherChannel misconfiguration. Use the no form of this command to disable the feature.
Page 601 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree etherchannel guard misconfig Related Commands Command Description errdisable recovery cause Enables the timer to recover from the EtherChannel channel-misconfig misconfiguration error-disabled state. show etherchannel summary Displays EtherChannel information for a channel as a one-line summary per channel-group.
Page 602: Spanning-Tree Extend System-Id
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree extend system-id spanning-tree extend system-id Use the spanning-tree extend system-id global configuration command to enable the extended system ID feature. spanning-tree extend system-id Though visible in the command-line help strings, the no version of this command is not supported. You Note cannot disable the extended system ID feature.
Page 603 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree extend system-id Related Commands Command Description show spanning-tree summary Displays a summary of spanning-tree interface states. spanning-tree mst root Configures the MST root switch priority and timers based on the network diameter.
Page 604: Spanning-Tree Guard
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree guard spanning-tree guard Use the spanning-tree guard interface configuration command to enable root guard or loop guard on all the VLANs associated with the selected interface. Root guard restricts which interface is allowed to be the spanning-tree root port or the path-to-the root for the switch.
Page 605 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree guard Loop guard is most effective when it is configured on the entire switched network. When the switch is operating in PVST+ or rapid-PVST+ mode, loop guard prevents alternate and root ports from becoming designated ports, and spanning tree does not send bridge protocol data units (BPDUs) on root or alternate ports.
Page 606: Spanning-Tree Link-Type
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree link-type spanning-tree link-type Use the spanning-tree link-type interface configuration command to override the default link-type setting, which is determined by the duplex mode of the interface, and to enable rapid spanning-tree transitions to the forwarding state.
Page 607 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree link-type Related Commands Command Description clear spanning-tree detected-protocols Restarts the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on the specified interface. show spanning-tree interface Displays spanning-tree state information for the specified interface-id interface.
Page 608: Spanning-Tree Loopguard Default
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree loopguard default spanning-tree loopguard default Use the spanning-tree loopguard default global configuration command to prevent alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link. Use the no form of this command to return to the default setting.
Page 609 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree loopguard default Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 610: Spanning-Tree Mode
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mode spanning-tree mode Use the spanning-tree mode global configuration command to enable per-VLAN spanning-tree plus (PVST+), rapid PVST+, or multiple spanning tree (MST) on your switch. Use the no form of this command to return to the default setting.
Page 611 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mode Related Commands Command Description show running-config Displays the current operating configuration. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands.
Page 612: Spanning-Tree Mst Configuration
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst configuration spanning-tree mst configuration Use the spanning-tree mst configuration global configuration command to enter multiple spanning-tree (MST) configuration mode through which you configure the MST region. Use the no form of this command to return to the default settings.
Page 613 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst configuration When you map VLANs to an MST instance, the mapping is incremental, and VLANs specified in the command are added to or removed from the VLANs that were previously mapped. To specify a range, use a hyphen;...
Page 614: Spanning-Tree Mst Cost
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst cost spanning-tree mst cost Use the spanning-tree mst cost interface configuration command to set the path cost for multiple spanning-tree (MST) calculations. If a loop occurs, spanning tree considers the path cost when selecting an interface to put in the forwarding state.
Page 615 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst cost Related Commands Command Description show spanning-tree Displays MST information for the specified interface. interface interface-id spanning-tree mst Configures an interface priority. port-priority spanning-tree mst priority Configures the switch priority for the specified spanning-tree instance.
Page 616: Spanning-Tree Mst Forward-Time
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst forward-time spanning-tree mst forward-time Use the spanning-tree mst forward-time global configuration command to set the forward-delay time for all multiple spanning-tree (MST) instances. The forwarding time specifies how long each of the listening and learning states last before the interface begins forwarding.
Page 617: Spanning-Tree Mst Hello-Time
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst hello-time spanning-tree mst hello-time Use the spanning-tree mst hello-time global configuration command to set the interval between hello bridge protocol data units (BPDUs) sent by root switch configuration messages. Use the no form of this command to return to the default setting.
Page 618: Spanning-Tree Mst Hello-Time
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst max-age spanning-tree mst max-age Use the spanning-tree mst max-age global configuration command to set the interval between messages that the spanning tree receives from the root switch. If a switch does not receive a bridge protocol data unit (BPDU) message from the root switch within this interval, it recomputes the spanning-tree topology.
Page 619: Spanning-Tree Mst Max-Hops
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst max-hops spanning-tree mst max-hops Use the spanning-tree mst max-hops global configuration command to set the number of hops in a region before the bridge protocol data unit (BPDU) is discarded and the information held for an interface is aged.
Page 620 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst max-hops Related Commands Command Description show spanning-tree Displays MST information. spanning-tree mst forward-time Sets the forward-delay time for all MST instances. spanning-tree mst hello-time Sets the interval between hello BPDUs sent by root switch configuration messages.
Page 621: Spanning-Tree Mst Port-Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst port-priority spanning-tree mst port-priority Use the spanning-tree mst port-priority interface configuration command to configure an interface priority. If a loop occurs, the Multiple Spanning Tree Protocol (MSTP) can find the interface to put in the forwarding state.
Page 622 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst port-priority Examples This example shows how to increase the likelihood that the interface associated with spanning-tree instances 20 and 22 is placed into the forwarding state if a loop occurs:...
Page 623: Spanning-Tree Mst Pre-Standard
(CIST) runs on this interface. Note If a switch port is connected to a switch running prestandard Cisco IOS software, you must use the spanning-tree mst pre-standard interface configuration command on the port. If you do not configure the port to send only prestandard BPDUs, the Multiple STP (MSTP) performance might diminish.
Page 624: Spanning-Tree Mst Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst priority spanning-tree mst priority Use the spanning-tree mst priority global configuration command to set the switch priority for the specified spanning-tree instance. Use the no form of this command to return to the default setting.
Page 625: Spanning-Tree Mst Root
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst root spanning-tree mst root Use the spanning-tree mst root global configuration command to configure the multiple spanning-tree (MST) root switch priority and timers based on the network diameter. Use the no form of this command to return to the default settings.
Page 626 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree mst root When you enter the spanning-tree mst instance-id root secondary command, because of support for the extended system ID, the software changes the switch priority from the default value (32768) to 28672.
Page 627: Spanning-Tree Port-Priority
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree port-priority spanning-tree port-priority Use the spanning-tree port-priority interface configuration command to configure an interface priority. If a loop occurs, spanning tree can find the interface to put in the forwarding state. Use the no form of this command to return to the default setting.
Page 628 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree port-priority Examples This example shows how to increase the likelihood that a port will be put in the forwarding state if a loop occurs: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# spanning-tree vlan 20 port-priority 0...
Page 629: Spanning-Tree Portfast (Global Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree portfast (global configuration) spanning-tree portfast (global configuration) Use the spanning-tree portfast global configuration command to globally enable bridge protocol data unit (BPDU) filtering on Port Fast-enabled interfaces, the BPDU guard feature on Port Fast-enabled interfaces, or the Port Fast feature on all nontrunking interfaces.
Page 630 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree portfast (global configuration) Enabling BPDU filtering on an interface is the same as disabling spanning tree on it and can result in Caution spanning-tree loops. Use the spanning-tree portfast bpduguard default global configuration command to globally enable BPDU guard on interfaces that are in a Port Fast-operational state.
Page 631: Spanning-Tree Portfast (Interface Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree portfast (interface configuration) spanning-tree portfast (interface configuration) Use the spanning-tree portfast interface configuration command to enable the Port Fast feature on an interface in all its associated VLANs. When the Port Fast feature is enabled, the interface changes directly from a blocking state to a forwarding state without making the intermediate spanning-tree state changes.
Page 632 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree portfast (interface configuration) Examples This example shows how to enable the Port Fast feature on a port: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# spanning-tree portfast You can verify your settings by entering the show running-config privileged EXEC command.
Page 633: Spanning-Tree Transmit Hold-Count
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree transmit hold-count spanning-tree transmit hold-count Use the spanning-tree transmit hold-count global configuration command to configure the number of bridge protocol data units (BPDUs) sent every second. Use the no form of this command to return to the default setting.
Page 634: Spanning-Tree Uplinkfast
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree uplinkfast spanning-tree uplinkfast Use the spanning-tree uplinkfast global configuration command to accelerate the choice of a new root port when a link or switch fails or when the spanning tree reconfigures itself. Use the no form of this command to return to the default setting.
Page 635 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree uplinkfast Do not enable the root guard on interfaces that will be used by the UplinkFast feature. With UplinkFast, the backup interfaces (in the blocked state) replace the root port in the case of a failure. However, if root guard is also enabled, all the backup interfaces used by the UplinkFast feature are placed in the root-inconsistent state (blocked) and prevented from reaching the forwarding state.
Page 636: Spanning-Tree Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree vlan spanning-tree vlan Use the spanning-tree vlan global configuration command to configure spanning tree on a per-VLAN basis. Use the no form of this command to return to the default setting.
Page 637 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree vlan Command Modes Global configuration Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines Disabling the STP causes the VLAN to stop participating in the spanning-tree topology. Interfaces that are administratively down remain down.
Page 638 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands spanning-tree vlan This example shows how to set spanning-tree max-age to 30 seconds for VLAN 20: Switch(config)# spanning-tree vlan 20 max-age 30 This example shows how to reset the max-age parameter to the default value for spanning-tree...
Page 639: Speed
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands speed speed Use the speed interface configuration command to specify the speed of a 10/100 Mbps or 10/100/1000 Mbps port. Use the no or default form of this command to return the port to its default value.
Page 640 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands speed Examples This example shows how to set speed on a port to 100 Mbps: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# speed 100 This example shows how to set a port to autonegotiate at only 10 Mbps:...
Page 641: Srr-Queue Bandwidth Limit
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth limit srr-queue bandwidth limit Use the srr-queue bandwidth limit interface configuration command to limit the maximum output on a port. Use the no form of this command to return to the default setting.
Page 642 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth limit Related Commands Command Description mls qos queue-set output buffers Allocates buffers to the queue-set. mls qos srr-queue output cos-map Maps class of service (CoS) values to egress queue or maps CoS values to a queue and to a threshold ID.
Page 643: Srr-Queue Bandwidth Shape
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth shape srr-queue bandwidth shape Use the srr-queue bandwidth shape interface configuration command to assign the shaped weights and to enable bandwidth shaping on the four egress queues mapped to a port. Use the no form of this command to return to the default setting.
Page 644 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth shape Examples This example shows how to configure the queues for the same port for both shaping and sharing. Because the weight ratios for queues 2, 3, and 4 are set to 0, these queues operate in shared mode. The bandwidth weight for queue 1 is 1/8, which is 12.5 percent.
Page 645: Srr-Queue Bandwidth Share
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth share srr-queue bandwidth share Use the srr-queue bandwidth share interface configuration command switch to assign the shared weights and to enable bandwidth sharing on the four egress queues mapped to a port. The ratio of the weights is the ratio of frequency in which the shaped round robin (SRR) scheduler dequeues packets from each queue.
Page 646 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands srr-queue bandwidth share Examples This example shows how to configure the weight ratio of the SRR scheduler running on an egress port. Four queues are used. The bandwidth ratio allocated for each queue in shared mode is 1/(1+2+3+4), 2/(1+2+3+4), 3/(1+2+3+4), and 4/(1+2+3+4), which is 10 percent, 20 percent, 30 percent, and 40 percent for queues 1, 2, 3, and 4.
Page 647: Storm-Control
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands storm-control storm-control Use the storm-control interface configuration command to enable broadcast, multicast, or unicast storm control and to set threshold levels on an interface. Use the no form of this command to return to the default setting.
Page 648 When the storm control threshold for multicast traffic is reached, all multicast traffic except control traffic, such as bridge protocol data unit (BDPU) and Cisco Discovery Protocol (CDP) frames, are blocked. However, the switch does not differentiate between routing updates, such as Open Shortest Path First (OSPF) and regular multicast data traffic, so both types of traffic are blocked.
Page 649 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands storm-control The trap and shutdown options are independent of each other. If you configure the action to be taken as shutdown (the port is error-disabled during a storm) when a packet storm is detected, you must use the no shutdown interface configuration command to bring the interface out of this state.
Page 650: Switchport
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport switchport Use the switchport interface configuration command with no keywords to put an interface that is in Layer 3 mode into Layer 2 mode for Layer 2 configuration. Use the no form of this command to put an interface in Layer 3 mode.
Page 651 This example shows how to cause an interface to cease operating as a Layer 2 port and become a Cisco-routed port: Switch(config-if)# no switchport This example shows how to cause the port interface to cease operating as a Cisco-routed port and convert to a Layer 2 switched interface: Switch(config-if)# switchport...
Page 652: Switchport Access
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport access switchport access Use the switchport access interface configuration command to configure a port as a static-access or dynamic-access port. If the switchport mode is set to access, the port operates as a member of the specified VLAN.
Page 653 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport access These restrictions apply to dynamic-access ports: The software implements the VLAN Query Protocol (VQP) client, which can query a VMPS such • as a Catalyst 6000 series switch. The Catalyst 3560 switches are not VMPS servers. The VMPS server must be configured before a port is configured as dynamic.
Page 654: Switchport Backup Interface
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport backup interface switchport backup interface Use the switchport backup interface interface configuration command on a Layer 2 interface to configure Flex Links, a pair of interfaces that provide backup to each other. Use the no form of this command to remove the Flex Links configuration.
Page 655 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport backup interface Neither of the links can be a port that belongs to an EtherChannel. However, you can configure two • port channels (EtherChannel logical interfaces) as Flex Links, and you can configure a port channel and a physical interface as Flex Links, with either the port channel or the physical interface as the primary link.
Page 656: Switchport Block
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport block switchport block Use the switchport block interface configuration command to prevent unknown multicast or unicast packets from being forwarded. Use the no form of this command to allow forwarding unknown multicast or unicast packets.
Page 657: Switchport Host
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport host switchport host Use the switchport host interface configuration command to optimize a Layer 2 port for a host connection. The no form of this command has no affect on the system.
Page 658: Switchport Mode
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport mode switchport mode Use the switchport mode interface configuration command to configure the VLAN membership mode of a port. Use the no form of this command to reset the mode to the appropriate default for the device.
Page 659 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport mode When you enter dynamic auto mode, the interface converts the link to a trunk link if the neighboring interface is set to trunk or desirable mode. When you enter dynamic desirable mode, the interface becomes a trunk interface if the neighboring interface is set to trunk, desirable, or auto mode.
Page 660 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport mode Examples This example shows how to configure a port for access mode: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# switchport mode access This example shows how set the port to dynamic desirable mode:...
Page 661: Switchport Mode Private-Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport mode private-vlan switchport mode private-vlan Use the switchport mode private-vlan interface configuration command to configure a port as a promiscuous or host private VLAN port. Use the no form of this command to reset the mode to the appropriate default for the device.
Page 662 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport mode private-vlan We strongly recommend that you enable spanning tree Port Fast and bridge-protocol-data-unit (BPDU) guard on isolated and community host ports to prevent STP loops due to misconfigurations and to speed up STP convergence.
Page 663: Switchport Nonegotiate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport nonegotiate switchport nonegotiate Use the switchport nonegotiate interface configuration command to specify that Dynamic Trunking Protocol (DTP) negotiation packets are not sent on the Layer 2 interface. The switch does not engage in DTP negotiation on this interface.
Page 664: Switchport Nonegotiate
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport nonegotiate Examples This example shows how to cause a port to refrain from negotiating trunking mode and to act as a trunk or access port (depending on the mode set): Switch(config)# interface gigabitethernet0/1...
Page 665: Switchport Port-Security
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security switchport port-security Use the switchport port-security interface configuration command without keywords to enable port security on the interface. Use the keywords to configure secure MAC addresses, sticky MAC address learning, a maximum number of secure MAC addresses, or the violation mode. Use the no form of this command to disable port security or to set the parameters to their default states.
Page 666 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security vlan [vlan-list] (Optional) For trunk ports, you can set the maximum number of secure MAC addresses on a VLAN. If the vlan keyword is not entered, the default value is used.
Page 667 VLAN. When the port is connected to a Cisco IP Phone, the Cisco IP Phone requires up to two MAC addresses. The Cisco IP Phone address is learned on the voice VLAN and might also be learned on the access VLAN.
Page 668 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security Sticky secure MAC addresses have these characteristics: When you enable sticky learning on an interface by using the switchport port-security • mac-address sticky interface configuration command, the interface converts all the dynamic secure...
Page 669 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security Related Commands Command Description clear port-security Deletes from the MAC address table a specific type of secure address or all the secure addresses on the switch or an interface. show port-security address Displays all the secure addresses configured on the switch.
Page 670: Switchport Port-Security Aging
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security aging switchport port-security aging Use the switchport port-security aging interface configuration command to set the aging time and type for secure address entries or to change the aging behavior for secure addresses on a particular port. Use the no form of this command to disable port security aging or to set the parameters to their default states.
Page 671 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport port-security aging Examples This example sets the aging time as 2 hours for absolute aging for all the secure addresses on the port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# switchport port-security aging time 120...
Page 672: Switchport Priority Extend
IP phone how to send data packets from the device attached to the access port on the Cisco IP Phone. You must enable CDP on the switch port connected to the Cisco IP Phone to send the configuration to the Cisco IP Phone.
Page 673: Switchport Priority Extend
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport priority extend Related Commands Command Description show interfaces Displays the administrative and operational status of a switching (nonrouting) port. switchport voice vlan Configures the voice VLAN on the port. Catalyst 3560 Switch Command Reference...
Page 674: Switchport Private-Vlan
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport private-vlan switchport private-vlan Use the switchport private-vlan interface configuration command to define a private-VLAN association for an isolated or community port or a mapping for a promiscuous port. Use the no form of this command to remove the private-VLAN association or mapping from the port.
Page 675 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport private-vlan The secondary_vlan_list parameter cannot contain spaces. It can contain multiple comma-separated items. Each item can be a single private-VLAN ID or a hyphenated range of private-VLAN IDs. The list can contain one isolated VLAN and multiple community VLANs.
Page 676: Switchport Protected
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport protected switchport protected Use the switchport protected interface configuration command to isolate unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the same switch. Use the no form of this command to disable protection on the port.
Page 677 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport protected Related Commands Command Description show interfaces Displays the administrative and operational status of a switching (nonrouting) switchport port, including port blocking and port protection settings. switchport block Prevents unknown multicast or unicast traffic on the interface.
Page 678: Switchport Trunk
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport trunk switchport trunk Use the switchport trunk interface configuration command to set the trunk characteristics when the interface is in trunking mode. Use the no form of this command to reset a trunking characteristic to the default.
Page 679: Switchport Trunk
VLAN trunk port by removing VLAN 1 from the allowed list. When you remove VLAN 1 from a trunk port, the interface continues to send and receive management traffic, for example, Cisco Discovery Protocol (CDP), Port Aggregation Protocol (PAgP), Link Aggregation Control Protocol (LACP), Dynamic Trunking Protocol (DTP), and VLAN Trunking Protocol (VTP) in VLAN 1.
Page 680 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands switchport trunk Trunk pruning: The pruning-eligible list applies only to trunk ports. • • Each trunk port has its own eligibility list. • If you do not want a VLAN to be pruned, remove it from the pruning-eligible list. VLANs that are pruning-ineligible receive flooded traffic.
Page 681: Switchport Voice Vlan
You should configure voice VLAN on Layer 2 access ports. You must enable Cisco Discovery Protocol (CDP) on the switchport connected to the Cisco IP phone for the switch to send configuration information to the phone. CDP is enabled by default globally and on the interface.
Page 682: Switchport Voice Vlan
When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to at least two. When the port is connected to a Cisco IP phone, the IP phone requires two MAC addresses: one for the access VLAN and the other for the voice VLAN.
Page 683: System Env Temperature Threshold Yellow
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands system env temperature threshold yellow system env temperature threshold yellow Use the system env temperature threshold yellow global configuration command to configure the difference between the yellow and red temperature thresholds which determines the value of yellow threshold.
Page 684: System Env Temperature Threshold Yellow
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands system env temperature threshold yellow You cannot configure the green and red thresholds but can configure the yellow threshold. Use the system env temperature threshold yellow value global configuration command to specify the difference between the yellow and red thresholds and to configure the yellow threshold.
Page 685: System Mtu
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands system mtu system mtu Use the system mtu global configuration command to set the maximum packet size or maximum transmission unit (MTU) size for Gigabit Ethernet ports, for routed ports, or for Fast Ethernet (10/100) ports.
Page 686 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands system mtu You cannot configure a routing MTU size that exceeds the system MTU size. If you change the system Note MTU size to a value smaller than the currently configured routing MTU size, the configuration change is accepted, but not applied until the next switch reset.
Page 687: Test Cable-Diagnostics Tdr
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands test cable-diagnostics tdr test cable-diagnostics tdr Use the test cable-diagnostics tdr privileged EXEC command to run the Time Domain Reflector (TDR) feature on an interface. test cable-diagnostics tdr interface interface-id Syntax Description interface-id Specify the interface on which to run TDR.
Page 688: Traceroute Mac
This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on all the switches in the network. Do not disable CDP. When the switch detects a device in the Layer 2 path that does not support Layer 2 traceroute, the switch continues to send Layer 2 trace queries and lets them time out.
Page 689 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands traceroute mac The Layer 2 traceroute feature is not supported when multiple devices are attached to one port through hubs (for example, multiple CDP neighbors are detected on a port). When more than one CDP neighbor is detected on a port, the Layer 2 path is not identified, and an error message appears.
Page 690 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands traceroute mac This example shows the Layer 2 path when the switch cannot find the destination port for the source MAC address: Switch# traceroute mac 0000.0011.1111 0000.0201.0201 Error:Source Mac address not found.
Page 691: Traceroute Mac Ip
This command was introduced. Usage Guidelines For Layer 2 traceroute to function properly, Cisco Discovery Protocol (CDP) must be enabled on all the switches in the network. Do not disable CDP. When the switch detects an device in the Layer 2 path that does not support Layer 2 traceroute, the switch continues to send Layer 2 trace queries and lets them time out.
Page 692: Traceroute Mac Ip
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands traceroute mac ip The Layer 2 traceroute feature is not supported when multiple devices are attached to one port through hubs (for example, multiple CDP neighbors are detected on a port). When more than one CDP neighbor is detected on a port, the Layer 2 path is not identified, and an error message appears.
Page 693: Trust
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands trust trust Use the trust policy-map class configuration command to define a trust state for traffic classified through the class policy-map configuration or the class-map global configuration command. Use the no form of this command to return to the default setting.
Page 694 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands trust If you specify trust ip-precedence, QoS uses the IP precedence value from the ingress packet and the IP-precedence-to-DSCP map. For non-IP packets that are tagged, QoS uses the received CoS value; for non-IP packets that are untagged, QoS uses the default port CoS value.
Page 695: Udld
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands udld udld Use the udld global configuration command to enable aggressive or normal mode in the UniDirectional Link Detection (UDLD) and to set the configurable message timer time. Use the no form of the command to disable aggressive or normal mode UDLD on all fiber-optic ports.
Page 696 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands udld The no udld port interface configuration command followed by the udld port or udld port • aggressive interface configuration command to re-enable UDLD on the specified interface The errdisable recovery cause udld and errdisable recovery interval interval global •...
Page 697: Udld Port
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands udld port udld port Use the udld port interface configuration command to enable the UniDirectional Link Detection (UDLD) on an individual interface or prevent a fiber-optic interface from being enabled by the udld global configuration command.
Page 698 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands udld port You can use these commands to reset an interface shut down by UDLD: The udld reset privileged EXEC command to reset all interfaces shut down by UDLD • • The shutdown and no shutdown interface configuration commands •...
Page 699: Udld Reset
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands udld reset udld reset Use the udld reset privileged EXEC command to reset all interfaces disabled by the UniDirectional Link Detection (UDLD) and permit traffic to begin passing through them again (though other features, such as spanning tree, Port Aggregation Protocol (PAgP), and Dynamic Trunking Protocol (DTP) still have their normal effects, if enabled).
Page 700: Vlan (Global Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) vlan (global configuration) Use the vlan global configuration command to add a VLAN and to enter the config-vlan mode. Use the no form of this command to delete the VLAN. Configuration information for normal-range VLANs (VLAN IDs 1 to 1005) is always saved in the VLAN database.
Page 701 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) If you enter an invalid VLAN ID, you receive an error message and do not enter config-vlan mode. Entering the vlan command with a VLAN ID enables config-vlan mode. When you enter the VLAN ID of an existing VLAN, you do not create a new VLAN, but you can modify VLAN parameters for that VLAN.
Page 702 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) name vlan-name: names the VLAN with an ASCII string from 1 to 32 characters that must be unique • within the administrative domain. The default is VLANxxxx where xxxx represents four numeric digits (including leading zeros) equal to the VLAN ID number.
Page 703 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) Table 2-38 Valid Commands and Syntax for Different Media Types Media Type Valid Syntax Ethernet name vlan-name, media ethernet, state {suspend | active}, said said-value, mtu mtu-size, remote-span, tb-vlan1 tb-vlan1-id, tb-vlan2 tb-vlan2-id...
Page 704 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) Table 2-39 VLAN Configuration Rules (continued) Configuration Rule VTP v2 mode is enabled, and you Specify a bridge number. Do not leave this field blank. are configuring a TrBRF VLAN media type.
Page 705 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (global configuration) Related Commands Command Description show vlan Displays the parameters for all configured VLANs or one VLAN (if the VLAN ID or name is specified) in the administrative domain. vlan (VLAN Configures normal-range VLANs in the VLAN database.
Page 706: Vlan (Vlan Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) vlan (VLAN configuration) Use the vlan VLAN configuration command to configure VLAN characteristics for a normal-range VLAN (VLAN IDs 1 to 1005) in the VLAN database. You access VLAN configuration mode by entering vlan database privileged EXEC command.
Page 707 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) media {ethernet | fddi | (Optional) Specify the VLAN media type. Table 2-40 lists the valid fd-net | tokenring | tr-net} syntax for each media type. ethernet is Ethernet media type (the default).
Page 708 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) Table 2-40 shows the valid syntax options for different media types. Table 2-40 Valid Syntax for Different Media Types Media Type Valid Syntax Ethernet vlan vlan-id [name vlan-name] media ethernet [state {suspend | active}]...
Page 709 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) Table 2-41 VLAN Configuration Rules (continued) Configuration Rule VTP v2 mode is enabled, and you Specify a bridge number. Do not leave this field blank. are configuring a TrBRF VLAN media type.
Page 710 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines You can only use this command mode for configuring normal-range VLANs, that is, VLAN IDs 1 to 1005.
Page 711 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan (VLAN configuration) When the no vlan vlan-id state form is used, the VLAN state returns to the default (active). • When the no vlan vlan-id stp type form is used, the VLAN spanning-tree type returns to the default •...
Page 712: Vlan Access-Map
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan access-map vlan access-map Use the vlan access-map global configuration command to create or modify a VLAN map entry for VLAN packet filtering. This entry changes the mode to the VLAN access-map configuration. Use the no form of this command to delete a VLAN map entry.
Page 713 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan access-map In global configuration mode, use the vlan filter interface configuration command to apply the map to one or more VLANs. For more information about VLAN map entries, see the software configuration guide for this release.
Page 714: Vlan Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan database vlan database Use the vlan database privileged EXEC command to enter VLAN configuration mode. From this mode, you can add, delete, and modify VLAN configurations for normal-range VLANs and globally propagate these changes by using the VLAN Trunking Protocol (VTP).
Page 715: Vlan Database
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan database When you have modified VLAN or VTP parameters, you can use these editing buffer manipulation commands: abort: exits the mode without applying the changes. The VLAN configuration that was running •...
Page 716 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan database VLAN ISL Id: 1002 Name: fddi-default Media Type: FDDI VLAN 802.10 Id: 101002 State: Operational MTU: 1500 Bridge Type: SRB Ring Number: 0 Translational Bridged VLAN: 1 Translational Bridged VLAN: 1003 <output truncated>...
Page 717: Vlan Dot1Q Tag Native
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan dot1q tag native vlan dot1q tag native Use the vlan dot1q tag native global configuration command to enable tagging of native VLAN frames on all IEEE 802.1Q trunk ports. Use the no form of this command to return to the default setting.
Page 718 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan dot1q tag native Related Commands Command Description show vlan dot1q tag native Displays IEEE 802.1Q native VLAN tagging status. Catalyst 3560 Switch Command Reference 2-686 78-16405-05...
Page 719: Vlan Filter
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan filter vlan filter Use the vlan filter global configuration command to apply a VLAN map to one or more VLANs. Use the no form of this command to remove the map.
Page 720 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vlan filter Related Commands Command Description show vlan access-map Displays information about a particular VLAN access map or all VLAN access maps. show vlan filter Displays information about all VLAN filters or about a particular VLAN or VLAN access map.
Page 721: Vmps Reconfirm (Privileged Exec)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vmps reconfirm (privileged EXEC) vmps reconfirm (privileged EXEC) Use the vmps reconfirm privileged EXEC command to immediately send VLAN Query Protocol (VQP) queries to reconfirm all dynamic VLAN assignments with the VLAN Membership Policy Server (VMPS).
Page 722: Vmps Reconfirm (Global Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vmps reconfirm (global configuration) vmps reconfirm (global configuration) Use the vmps reconfirm global configuration command to change the reconfirmation interval for the VLAN Query Protocol (VQP) client. Use the no form of this command to return to the default setting.
Page 723: Vmps Retry
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vmps retry vmps retry Use the vmps retry global configuration command to configure the per-server retry count for the VLAN Query Protocol (VQP) client. Use the no form of this command to return to the default setting.
Page 724: Vmps Server
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vmps server vmps server Use the vmps server global configuration command to configure the primary VLAN Membership Policy Server (VMPS) and up to three secondary servers. Use the no form of this command to remove a VMPS server.
Page 725: Vmps Server
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vmps server This example shows how to delete the server with IP address 191.10.49.21: Switch(config)# no vmps server 191.10.49.21 You can verify your setting by entering the show vmps privileged EXEC command and examining information in the VMPS Domain Server row.
Page 726: Vtp (Global Configuration)
VTP administrative domain for the switch. The domain name is case sensitive. file filename Specify the Cisco IOS file system file where the VTP VLAN configuration is stored. interface name Specify the name of the interface providing the VTP ID updated for this device.
Page 727 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (global configuration) Defaults The default filename is flash:vlan.dat. The default mode is server mode. No domain name or password is defined. No password is configured. Pruning is disabled. The default version is Version 1.
Page 728 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (global configuration) Follow these guidelines when setting VTP mode: The no vtp mode command returns the switch to VTP server mode. • • The vtp mode server command is the same as no vtp mode except that it does not return an error if the switch is not in client or transparent mode.
Page 729 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (global configuration) If you are configuring a Token Ring bridge relay function (TrBRF) or Token Ring concentrator relay • function (TrCRF) VLAN media type, you must use Version 2. If you are configuring a Token Ring or Token Ring-NET VLAN media type, you must use Version 1.
Page 730: Vtp (Vlan Configuration)
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (VLAN configuration) vtp (VLAN configuration) Use the vtp VLAN configuration command to configure VLAN Trunking Protocol (VTP) characteristics. You access VLAN configuration mode by entering the vlan database privileged EXEC command. Use the no form of this command to return to the default settings, disable the characteristic, or remove the password.
Page 731 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (VLAN configuration) Command Modes VLAN configuration Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines If the VTP mode is transparent, the mode and domain name are saved in the switch running configuration file, and you can save the configuration in the switch startup configuration file by using the copy running-config startup-config privileged EXEC command.
Page 732 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (VLAN configuration) Follow these guidelines when configuring a VTP domain name: The switch is in the no-management-domain state until you configure a domain name. While in the • no-management-domain state, the switch does not send any VTP advertisements even if changes occur to the local VLAN configuration.
Page 733 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (VLAN configuration) Examples This example shows how to place the switch in VTP transparent mode: Switch(vlan)# vtp transparent Setting device to VTP TRANSPARENT mode. This example shows how to set the administrative domain for the switch:...
Page 734 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands vtp (VLAN configuration) Catalyst 3560 Switch Command Reference 2-702 78-16405-05...
Page 735: Appendix
You gain access to the boot loader command line if the switch is set to manually boot, if an error occurs during power-on self test (POST) DRAM testing, or if an error occurs while loading the operating system (a corrupted Cisco IOS image). You can also access the boot loader if you have lost or forgotten the switch password.
Page 736: Boot
(Optional) Run the loaded image with an extended or comprehensive power-on self-test (POST). Using this keyword causes POST to take longer to complete. (Optional) Pause for the Cisco IOS debugger immediately after launching. (Optional) Pause for the JTAG debugger right after loading the image.
Page 737 Appendix A Catalyst 3560 Switch Boot Loader Commands boot Related Commands Command Description Sets the BOOT environment variable to boot a specific image when the BOOT keyword is appended to the command. Catalyst 3560 Switch Command Reference 78-16405-05...
Page 738: Cat
Appendix A Catalyst 3560 Switch Boot Loader Commands Use the cat boot loader command to display the contents of one or more files. cat filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /file-url Path (directory) and name of the files to display.
Page 739: Copy
Appendix A Catalyst 3560 Switch Boot Loader Commands copy copy Use the copy boot loader command to copy a file from a source to a destination. copy [-b block-size] filesystem:/source-file-url filesystem:/destination-file-url Syntax Description -b block-size (Optional) This option is used only for internal development and testing. filesystem: Alias for a flash file system.
Page 740 Appendix A Catalyst 3560 Switch Boot Loader Commands delete delete Use the delete boot loader command to delete one or more files from the specified file system. delete filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /file-url Path (directory) and filename to delete.
Page 741: Dir
Appendix A Catalyst 3560 Switch Boot Loader Commands Use the dir boot loader command to display a list of files and directories on the specified file system. dir filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /file-url (Optional) Path (directory) and directory name whose contents you want to display.
Page 742 Appendix A Catalyst 3560 Switch Boot Loader Commands Table A-1 dir Field Descriptions (continued) Field Description 1644045 Size of the file. <date> Last modification date. env_vars Filename. Related Commands Command Description mkdir Creates one or more directories. rmdir Removes one or more directories. Catalyst 3560 Switch Command Reference 78-16405-05...
Page 743: Flash_Init
Appendix A Catalyst 3560 Switch Boot Loader Commands flash_init flash_init Use the flash_init boot loader command to initialize the flash file system. flash_init Syntax Description This command has no arguments or keywords. Defaults The flash file system is automatically initialized during normal system operation. Command Modes Boot loader Command History...
Page 744: Format
Appendix A Catalyst 3560 Switch Boot Loader Commands format format Use the format boot loader command to format the specified file system and destroy all data in that file system. format filesystem: Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. Command Modes Boot loader Command History...
Page 745: Fsck
Appendix A Catalyst 3560 Switch Boot Loader Commands fsck fsck Use the fsck boot loader command to check the file system for consistency. fsck [-test | -f] filesystem: Syntax Description -test (Optional) Initialize the file system code and perform extra POST on flash memory. An extensive, nondestructive memory test is performed on every byte that makes up the file system.
Page 746: Help
Appendix A Catalyst 3560 Switch Boot Loader Commands help help Use the help boot loader command to display the available commands. help Syntax Description This command has no arguments or keywords. Command Modes Boot loader Command History Release Modification 12.1(19)EA1 This command was introduced.
Page 747: Load_Helper
Appendix A Catalyst 3560 Switch Boot Loader Commands load_helper load_helper Use the load_helper boot loader command to load and initialize one or more helper images, which extend or patch the functionality of the boot loader. load_helper filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system.
Page 748: Memory
Appendix A Catalyst 3560 Switch Boot Loader Commands memory memory Use the memory boot loader command to display memory heap utilization information. memory Syntax Description This command has no arguments or keywords. Command Modes Boot loader Command History Release Modification 12.1(19)EA1 This command was introduced.
Page 749: Mkdir
Appendix A Catalyst 3560 Switch Boot Loader Commands mkdir mkdir Use the mkdir boot loader command to create one or more new directories on the specified file system. mkdir filesystem:/directory-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /directory-url Name of the directories to create.
Page 750: More
Appendix A Catalyst 3560 Switch Boot Loader Commands more more Use the more boot loader command to display the contents of one or more files. more filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /file-url Path (directory) and name of the files to display.
Page 751: Rename
Appendix A Catalyst 3560 Switch Boot Loader Commands rename rename Use the rename boot loader command to rename a file. rename filesystem:/source-file-url filesystem:/destination-file-url Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /source-file-url Original path (directory) and filename.
Page 752: Reset
Appendix A Catalyst 3560 Switch Boot Loader Commands reset reset Use the reset boot loader command to perform a hard reset on the system. A hard reset is similar to power-cycling the switch, clearing the processor, registers, and memory. reset Syntax Description This command has no arguments or keywords.
Page 753: Rmdir
Appendix A Catalyst 3560 Switch Boot Loader Commands rmdir rmdir Use the rmdir boot loader command to remove one or more empty directories from the specified file system. rmdir filesystem:/directory-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /directory-url Path (directory) and name of the empty directories to remove.
Page 754: Set
This variable is used only for internal development and testing. HELPER_CONFIG_FILE filesystem:/file-url—The name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded, including the helper image.
Page 755 Appendix A Catalyst 3560 Switch Boot Loader Commands Defaults The environment variables have these default values: MANUAL_BOOT: No (0) BOOT: Null string ENABLE_BREAK: No (Off or 0) (the automatic boot process cannot be interrupted by pressing the Break key on the console). HELPER: No default value (helper files are not automatically loaded).
Page 756: Unset
Appendix A Catalyst 3560 Switch Boot Loader Commands The BOOTHLPR environment variable can also be set by using the boot boothlpr filesystem:/file-url global configuration command. The HELPER_CONFIG_FILE environment variable can also be set by using the boot helper-config-file filesystem:/file-url global configuration command. The HELPER_CONFIG_FILE environment variable can also be set by using the boot helper-config-file filesystem:/file-url global configuration command.
Page 757 Appendix A Catalyst 3560 Switch Boot Loader Commands type type Use the type boot loader command to display the contents of one or more files. type filesystem:/file-url ... Syntax Description filesystem: Alias for a flash file system. Use flash: for the system board flash device. /file-url Path (directory) and name of the files to display.
Page 758 HELPER_CONFIG_FILE—Resets the name of the configuration file to be used by the Cisco IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all versions of Cisco IOS that are loaded, including the helper image. This variable is used only for internal development and testing.
Page 759 Appendix A Catalyst 3560 Switch Boot Loader Commands unset Usage Guidelines Under normal circumstances, it is not necessary to alter the setting of the environment variables. The MANUAL_BOOT environment variable can also be reset by using the no boot manual global configuration command.
Page 760: Version
Appendix A Catalyst 3560 Switch Boot Loader Commands version version Use the version boot loader command to display the boot loader version. version Syntax Description This command has no arguments or keywords. Command Modes Boot loader Command History Release Modification 12.1(19)EA1 This command was introduced.
Page 761: Appendix
For this reason, use the debug commands only to troubleshoot specific problems or during troubleshooting sessions with Cisco technical support staff. It is best to use the debug commands during periods of lower network traffic and fewer users. Debugging during these periods decreases the likelihood that increased debug command processing overhead will affect system use.
Page 762: Appendix B Catalyst 3560 Switch Debug Command
Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# interface gigabitethernet0/1 Switch(config-if)# auto qos voip cisco-phone 21:29:41: mls qos map cos-dscp 0 8 16 26 32 46 48 56 21:29:41: mls qos 21:29:42: no mls qos srr-queue input cos-map...
Page 763 Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 764: Debug Backup
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 765: Debug Cluster
Appendix B Catalyst 3560 Switch Debug Commands debug cluster debug cluster Use the debug cluster privileged EXEC command to enable debugging of cluster-specific events. Use the no form of this command to disable debugging. debug cluster {discovery | events | extended | hsrp | http | ip [packet] | members | nat | neighbors | platform | snmp | vqpxy} no debug cluster {discovery | events | extended | hsrp | http | ip [packet] | members | nat | neighbors | platform | snmp | vqpxy}...
Page 766 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 767: Debug Dot1X
Appendix B Catalyst 3560 Switch Debug Commands debug dot1x debug dot1x Use the debug dot1x privileged EXEC command to enable debugging of the 802.1x feature. Use the no form of this command to disable debugging. debug dot1x {all | errors | events | packets | registry | state-machine} no debug dot1x {all | errors | events | packets | registry | state-machine} Syntax Description Display all 802.1x debug messages.
Page 768 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 769: Debug Dtp
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 770: Debug Etherchannel
Appendix B Catalyst 3560 Switch Debug Commands debug etherchannel debug etherchannel Use the debug etherchannel privileged EXEC command to enable debugging of the EtherChannel/PAgP shim. This shim is the software module that is the interface between the Port Aggregation Protocol (PAgP) software module and the port manager software module. Use the no form of this command to disable debugging.
Page 771 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 772: Debug Ilpower
{cdp | controller | event | ha | port | powerman | registries} no debug ilpower {cdp | controller | event | ha | port | powerman | registries} Syntax Description Display PoE Cisco Discovery Protocol (CDP) debug messages. controller Display PoE controller debug messages.
Page 773: Debug Ip Dhcp Snooping
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 774: Debug Ip Verify Source Packet
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 775: Debug Interface
Appendix B Catalyst 3560 Switch Debug Commands debug interface debug interface Use the debug interface privileged EXEC command to enable debugging of interface-related activities. Use the no form of this command to disable debugging. debug interface {interface-id | null interface-number | port-channel port-channel-number | vlan vlan-id} no debug interface {interface-id | null interface-number | port-channel port-channel-number | vlan vlan-id}...
Page 776 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 777: Debug Ip Igmp Filter
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 778: Debug Ip Igmp Max-Groups
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 779: Debug Ip Igmp Snooping
Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 780: Debug Lacp
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 781: Debug Mac-Notification
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 782: Debug Matm
Displays information about platform-dependent MAC address management. show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 783: Debug Matm Move Update
Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 784: Debug Monitor
Appendix B Catalyst 3560 Switch Debug Commands debug monitor debug monitor Use the debug monitor privileged EXEC command to enable debugging of the Switched Port Analyzer (SPAN) feature. Use the no form of this command to disable debugging. debug monitor {all | errors | idb-update | info | list | notifications | platform | requests | snmp} no debug monitor {all | errors | idb-update | info | list | notifications | platform | requests | snmp} Syntax Description Display all SPAN debug messages.
Page 785 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 786: Debug Mvrdbg
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 787: Debug Nvram
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 788: Debug Pagp
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 789: Debug Platform Acl
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 790: Debug Platform Backup Interface
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 791: Debug Platform Cpu-Queues
Appendix B Catalyst 3560 Switch Debug Commands debug platform cpu-queues debug platform cpu-queues Use the debug platform cpu-queues privileged EXEC command to enable debugging of platform central processing unit (CPU) receive queues. Use the no form of this command to disable debugging. debug platform cpu-queues {broadcast-q | cbt-to-spt-q | cpuhub-q | host-q | icmp-q | igmp-snooping-q | layer2-protocol-q | logging-q | remote-console-q | routing-protocol-q | rpffail-q | software-fwd-q | stp-q}...
Page 792 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 793: Debug Platform Device-Manager
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 794: Debug Platform Dot1X
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 795: Debug Platform Etherchannel
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 796: Debug Platform Fallback-Bridging
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 797: Debug Platform Forw-Tcam
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 798: Debug Platform Frontend-Controller
Appendix B Catalyst 3560 Switch Debug Commands debug platform frontend-controller debug platform frontend-controller Use the debug platform frontend-controller privileged EXEC command to enable debugging of front-end controller activity. Use the no form of this command to disable debugging. debug platform frontend-controller {all | image | led | manager | poe | register | thermal} no debug platform frontend-controller {all | image | led | manager | poe | register | thermal} Syntax Description Display all the debug messages for front-end controller.
Page 799 Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 800: Debug Platform Ip Arp Inspection
Displays the dynamic ARP inspection configuration and operating state. show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 801: Debug Platform Ip Dhcp
Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 802: Debug Platform Ip Igmp Snooping
Appendix B Catalyst 3560 Switch Debug Commands debug platform ip igmp snooping debug platform ip igmp snooping Use the debug platform ip igmp snooping privileged EXEC command to enable debugging of platform-dependent Internet Group Management Protocol (IGMP) snooping. Use the no form of this command to disable debugging.
Page 803 Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 804: Debug Platform Ip Multicast
Appendix B Catalyst 3560 Switch Debug Commands debug platform ip multicast debug platform ip multicast Use the debug platform ip multicast privileged EXEC command to enable debugging of IP multicast routing. Use the no form of this command to disable debugging. debug platform ip multicast {all | mdb | mdfs-rp-retry | midb | mroute-rp | resources | retry | rpf-throttle | snoop-events | software-forward | swidb-events | vlan-locks} no debug platform ip multicast {all | mdb | mdfs-rp-retry | midb | mroute-rp | resources | retry...
Page 805 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 806: Debug Platform Ip Unicast
Appendix B Catalyst 3560 Switch Debug Commands debug platform ip unicast debug platform ip unicast Use the debug platform ip unicast privileged EXEC command to enable debugging of platform-dependent IP unicast routing. Use the no form of this command to disable debugging. debug platform ip unicast {adjacency | all | arp | dhcp | errors | events | interface | mpath | registries | retry | route | rpc | standby | statistics} no debug platform ip unicast {adjacency | all | arp | dhcp | errors | events | interface | mpath |...
Page 807 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 808: Debug Platform Led
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 809: Debug Platform Matm
Appendix B Catalyst 3560 Switch Debug Commands debug platform matm debug platform matm Use the debug platform matm privileged EXEC command to enable debugging of platform-dependent MAC address management. Use the no form of this command to disable debugging. debug platform matm {aging | all | ec-aging | errors | learning | rpc | secure-address | warnings} no debug platform matm {aging | all | ec-aging | errors | learning | rpc | secure-address | warnings} Syntax Description...
Page 810 Displays information about platform-independent MAC address management. show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 811: Debug Platform Messaging Application
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 812: Debug Platform Phy
Appendix B Catalyst 3560 Switch Debug Commands debug platform phy debug platform phy Use the debug platform phy privileged EXEC command to enable debugging of PHY driver information. Use the no form of this command to disable debugging. debug platform phy {automdix | cablediag | dual-purpose | flcd {configure | ipc | iter | trace} | flowcontrol | forced | init-seq | link-status | read | sfp | show-controller | speed | write | xenpak} no debug platform phy {automdix | cablediag | dual-purpose | flcd {configure | ipc | iter | trace}...
Page 813 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 814: Debug Platform Pm
Display platform port-manager event debug messages. idb-events Display interface descriptor block (IDB) related-events debug messages. if-numbers Display interface-number translation-event debug messages. ios-events Display Cisco IOS event debug messages. link-status Display interface link-detection event debug messages. platform Display port-manager function-event debug messages. pm-events Display port manager event debug messages.
Page 815 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 816: Debug Platform Port-Asic
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 817: Debug Platform Port-Security
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 818: Debug Platform Qos-Acl-Tcam
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 819: Debug Platform Remote-Commands
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 820: Debug Platform Resource-Manager
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 821: Debug Platform Snmp
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 822: Debug Platform Span
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 823: Debug Platform Supervisor-Asic
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 824: Debug Platform Sw-Bridge
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 825: Debug Platform Tcam
Appendix B Catalyst 3560 Switch Debug Commands debug platform tcam debug platform tcam Use the debug platform tcam privileged EXEC command to enable debugging of ternary content addressable memory (TCAM) access and lookups. Use the no form of this command to disable debugging.
Page 826 Appendix B Catalyst 3560 Switch Debug Commands debug platform tcam Syntax Description log l2 {acl {input | output} | Display Layer 2 field-based CAM look-up type debug messages. The local | qos} keywords have these meanings: acl {input | output}—Display input or output ACL look-up debug •...
Page 827 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 828: Debug Platform Udld
Related Commands Command Description show debugging Displays information about the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management. Catalyst 3560 Switch Command Reference...
Page 829: Debug Platform Vlan
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 830: Debug Pm
Appendix B Catalyst 3560 Switch Debug Commands debug pm debug pm Use the debug pm privileged EXEC command to enable debugging of port manager (PM) activity. The port manager is a state machine that controls all the logical and physical interfaces. All features, such as VLANs, UniDirectional Link Detection (UDLD), and so forth, work with the port manager to provide switch functions.
Page 831 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 832: Debug Port-Security
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 833: Debug Qos-Manager
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, see the Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management >...
Page 834: Debug Spanning-Tree
Appendix B Catalyst 3560 Switch Debug Commands debug spanning-tree debug spanning-tree Use the debug spanning-tree privileged EXEC command to enable debugging of spanning-tree activities. Use the no form of this command to disable debugging. debug spanning-tree {all | backbonefast | bpdu | bpdu-opt | config | etherchannel | events | exceptions | general | mstp | pvst+ | root | snmp | switch | synchronization | uplinkfast} no debug spanning-tree {all | backbonefast | bpdu | bpdu-opt | config | etherchannel | events | exceptions | general | mstp | pvst+ | root | snmp | switch | synchronization | uplinkfast}...
Page 835 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 836: Debug Spanning-Tree Backbonefast
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 837: Debug Spanning-Tree Bpdu
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 838: Debug Spanning-Tree Bpdu-Opt
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 839: Debug Spanning-Tree Mstp
Appendix B Catalyst 3560 Switch Debug Commands debug spanning-tree mstp debug spanning-tree mstp Use the debug spanning-tree mstp privileged EXEC command to enable debugging of the Multiple Spanning Tree Protocol (MSTP) software. Use the no form of this command to disable debugging. debug spanning-tree mstp {all | boundary | bpdu-rx | bpdu-tx | errors | flush | init | migration | pm | proposals | region | roles | sanity_check | sync | tc | timers} no debug spanning-tree mstp {all | boundary | bpdu-rx | bpdu-tx | errors | flush | init | migration...
Page 840 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 841: Debug Spanning-Tree Switch
Appendix B Catalyst 3560 Switch Debug Commands debug spanning-tree switch debug spanning-tree switch Use the debug spanning-tree switch privileged EXEC command to enable debugging of the software interface between the Spanning Tree Protocol (STP) software module and the port manager software module.
Page 842 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 843: Debug Spanning-Tree Uplinkfast
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 844: Debug Sw-Vlan
Appendix B Catalyst 3560 Switch Debug Commands debug sw-vlan debug sw-vlan Use the debug sw-vlan privileged EXEC command to enable debugging of VLAN manager activities. Use the no form of this command to disable debugging. debug sw-vlan {badpmcookies | cfg-vlan {bootup | cli} | events | ifs | management | mapping | notification | packets | redundancy | registries | vtp} no debug sw-vlan {badpmcookies | cfg-vlan {bootup | cli} | events | ifs | management | mapping | notification | packets | redundancy | registries | vtp}...
Page 845 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 846: Debug Sw-Vlan Ifs
Appendix B Catalyst 3560 Switch Debug Commands debug sw-vlan ifs debug sw-vlan ifs Use the debug sw-vlan ifs privileged EXEC command to enable debugging of the VLAN manager IOS file system (IFS) error tests. Use the no form of this command to disable debugging. debug sw-vlan ifs {open {read | write} | read {1 | 2 | 3 | 4} | write} no debug sw-vlan ifs {open {read | write} | read {1 | 2 | 3 | 4} | write} Syntax Description...
Page 847 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 848: Debug Sw-Vlan Notification
Appendix B Catalyst 3560 Switch Debug Commands debug sw-vlan notification debug sw-vlan notification Use the debug sw-vlan notification privileged EXEC command to enable debugging of the activation and deactivation of Inter-Link Switch (ISL) VLAN IDs. Use the no form of this command to disable debugging.
Page 849 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 850: Debug Sw-Vlan Vtp
Appendix B Catalyst 3560 Switch Debug Commands debug sw-vlan vtp debug sw-vlan vtp Use the debug sw-vlan vtp privileged EXEC command to enable debugging of the VLAN Trunking Protocol (VTP) code. Use the no form of this command to disable debugging. debug sw-vlan vtp {events | packets | pruning [packets | xmit] | redundancy | xmit} no debug sw-vlan vtp {events | packets | pruning | redundancy | xmit} Syntax Description...
Page 851 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 852: Debug Udld
Appendix B Catalyst 3560 Switch Debug Commands debug udld debug udld Use the debug udld privileged EXEC command to enable debugging of the UniDirectional Link Detection (UDLD) feature. Use the no form of this command to disable UDLD debugging. debug udld {events | packets | registries} no debug udld {events | packets | registries} Syntax Description events...
Page 853 Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 854: Debug Vqpc
Description show debugging Displays information about the types of debugging that are enabled. For syntax information, select Cisco IOS Release 12.2 Configuration Guides and Command References > Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.2 > System Management > Troubleshooting and Fault Management.
Page 855: Appendix
This appendix describes the show platform privileged EXEC commands that have been created or changed for use with the Catalyst 3560 switch. These commands display information helpful in diagnosing and resolving internetworking problems and should be used only under the guidance of Cisco technical support staff.
Page 856: A P P E N D I X C Catalyst 3560 Switch Show Platform Commands
Appendix C Catalyst 3560 Switch Show Platform Commands show platform acl show platform acl Use the show platform acl privileged EXEC command to display platform-dependent access control list (ACL) manager information. show platform acl {interface interface-id | label label-number [detail] | statistics asic-number | usage asic-number [summary] | vlan vlan-id} [ | {begin | exclude | include} expression] Syntax Description interface interface-id...
Page 857: Show Platform Backup Interface
Appendix C Catalyst 3560 Switch Show Platform Commands show platform backup interface show platform backup interface Use the show platform backup interface privileged EXEC command to display platform-dependent backup information used in a Flex Links configuration. show platform backup interface [interface-id | dummyQ] [ | {begin | exclude | include} expression] Syntax Description interface-id...
Page 858: Show Platform Configuration
Appendix C Catalyst 3560 Switch Show Platform Commands show platform configuration show platform configuration Use the show platform configuration privileged EXEC command to display platform-dependent configuration-manager related information. show platform configuration {config-output | default | running | startup} [ | {begin | exclude | include} expression] Syntax Description config-output...
Page 859: Show Platform Etherchannel
Appendix C Catalyst 3560 Switch Show Platform Commands show platform etherchannel show platform etherchannel Use the show platform etherchannel privileged EXEC command to display platform-dependent EtherChannel information. show platform etherchannel {flags | time-stamps} [ | {begin | exclude | include} expression] Syntax Description flags Display EtherChannel port flags.
Page 860: Show Platform Forward
Appendix C Catalyst 3560 Switch Show Platform Commands show platform forward show platform forward Use the show platform forward privileged EXEC command for an interface to specify how the hardware would forward a frame that matches the specified parameters. show platform forward interface-id [vlan vlan-id] src-mac dst-mac [l3protocol-id] [ipv6 | sap | snap] [cos cos] [ip src-ip dst-ip [frag field] [dscp dscp] {l4protocol-id | icmp icmp-type icmp-code | igmp igmp-version igmp-type | sctp src-port dst-port | tcp src-port dst-port flags | udp src-port dst-port]} [ | {begin | exclude | include} expression]...
Page 861 Appendix C Catalyst 3560 Switch Show Platform Commands show platform forward | exclude (Optional) Display excludes lines that match the expression. | include (Optional) Display includes lines that match the specified expression. expression Expression in the output to use as a reference point. Command Modes Privileged EXEC Command History...
Page 862: Show Platform Frontend-Controller
Appendix C Catalyst 3560 Switch Show Platform Commands show platform frontend-controller show platform frontend-controller Use the show platform frontend-controller privileged EXEC command to display counter and status information for the front-end controller manager and subordinate applications and to display the hardware and software information for the front-end controller.
Page 863: Show Platform Ip Igmp Snooping
Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip igmp snooping show platform ip igmp snooping Use the show platform ip igmp snooping privileged EXEC command to display platform-dependent Internet Group Management Protocol (IGMP) snooping information. show platform ip igmp snooping {all | control [di] | counters | flood [vlan vlan-id] | group ip-address | hardware | retry [count | local [count] | remote [count]]} [ | {begin | exclude | include} expression] Syntax Description...
Page 864 Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip igmp snooping Usage Guidelines You should use this command only when you are working directly with a technical support representative while troubleshooting a problem. Do not use this command unless a technical support representative asks you to do so.
Page 865: Show Platform Ip Multicast
Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip multicast show platform ip multicast Use the show platform ip multicast privileged EXEC command to display platform-dependent IP multicast tables and other information. show platform ip multicast {acl-full-info| counters | groups | hardware [detail] | interfaces | locks | mdfs-routes | mroute-retry | retry | trace} [ | {begin | exclude | include} expression] Syntax Description acl-full-info...
Page 866: Show Platform Ip Unicast
| exclude | include} expression] Syntax Description adjacency Display the platform adjacency database. cef-idb Display platform information corresponding to Cisco Express Forwarding (CEF) interface descriptor block. counts Display the current counts for the Layer 3 unicast databases. dhcp Display the DHCP system dynamic addresses.
Page 867 Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip unicast Usage Guidelines You should use this command only when you are working directly with a technical support representative while troubleshooting a problem. Do not use this command unless a technical support representative asks you to do so.
Page 868: Show Platform Ip Unicast Vrf Compaction
Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip unicast vrf compaction show platform ip unicast vrf compaction Use the show platform ip unicast vrf compaction privileged EXEC command to display the compaction request queues and compaction status. show platform ip unicast vrf compaction [ | {begin | exclude | include} expression] Syntax Description | begin...
Page 869: Show Platform Ip Unicast Vrf Tcam-Label
Appendix C Catalyst 3560 Switch Show Platform Commands show platform ip unicast vrf tcam-label show platform ip unicast vrf tcam-label Use the show platform ip unicast vrf tcam-label privileged EXEC command to display PBR and VRF-Lite labels and the number of labels in use by PBR. show platform ip unicast vrf tcam-label [ | {begin | exclude | include} expression] Syntax Description | begin...
Page 870: Show Platform Ipv6 Unicast
Appendix C Catalyst 3560 Switch Show Platform Commands show platform ipv6 unicast show platform ipv6 unicast Use the show platform ipv6 unicast privileged EXEC command to display platform-dependent IPv6 unicast routing information. This command is available only if the switch is running the advanced IP services image.
Page 871 Appendix C Catalyst 3560 Switch Show Platform Commands show platform ipv6 unicast Command Modes Privileged EXEC Command History Release Modification 12.2(25)SEA This command was introduced. Usage Guidelines You should use this command only when you are working directly with a technical support representative while troubleshooting a problem.
Page 872: Show Platform Layer4Op
Appendix C Catalyst 3560 Switch Show Platform Commands show platform layer4op show platform layer4op Use the show platform layer4op privileged EXEC command to display platform-dependent Layer 4 operator information. show platform layer4op {acl | pacl [port-asic] | qos [port-asic]} {and-or | map | or-and | vcu} [ | {begin | exclude | include} expression] Syntax Description Display access control list (ACL) Layer 4 operators information.
Page 873: Show Platform Mac-Address-Table
Appendix C Catalyst 3560 Switch Show Platform Commands show platform mac-address-table show platform mac-address-table Use the show platform mac-address-table privileged EXEC command to display platform-dependent MAC address table information. show platform mac-address-table [aging-array | hash-table | mac-address mac-address] [vlan vlan-id]] [ | {begin | exclude | include} expression] Syntax Description aging-array (Optional) Display the MAC address table aging array.
Page 874: Show Platform Messaging
Appendix C Catalyst 3560 Switch Show Platform Commands show platform messaging show platform messaging Use the show platform messaging privileged EXEC command to display platform-dependent application and performance message information. show platform messaging {application [incoming | outgoing | summary] | hiperf [class-number]} [ | {begin | exclude | include} expression] Syntax Description application [incoming |...
Page 875: Show Platform Monitor
Appendix C Catalyst 3560 Switch Show Platform Commands show platform monitor show platform monitor Use the show platform monitor privileged EXEC command to display platform-dependent Switched Port Analyzer (SPAN) information. show platform monitor [session session-number] [ | {begin | exclude | include} expression] Syntax Description session (Optional) Display SPAN information for the specified SPAN session.
Page 876: Show Platform Mvr Table
Appendix C Catalyst 3560 Switch Show Platform Commands show platform mvr table show platform mvr table Use the show platform mvr table privileged EXEC command to display the platform-dependent Multicast VLAN Registration (MVR) multi-expansion descriptor (MED) group mapping table. show platform mvr table [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 877: Show Platform Pm
Appendix C Catalyst 3560 Switch Show Platform Commands show platform pm show platform pm Use the show platform pm privileged EXEC command to display platform-dependent port-manager information. show platform pm {counters | group-masks | idbs {active-idbs | deleted-idbs} | if-numbers | link-status | platform-block | port-info interface-id | vlan {info | line-state} [ | {begin | exclude | include} expression] Syntax Description...
Page 878: Show Platform Port-Asic
Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-asic show platform port-asic Use the show platform port-asic privileged EXEC command to display platform-dependent port ASIC register information. show platform port-asic {cpu-queue-map-table [asic number | port number [asic number]] | dest-map index number | etherchannel-info [asic number | port number [asic number]] | exception [asic number | port number [asic number]] |...
Page 879 Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-asic exception [asic number | port Display the exception-index register information. The keywords number [asic number]] have these meanings: asic number—(Optional) Display information for the • specified ASIC. The range is 0 to 1. port number—(Optional) Display information for the •...
Page 880 Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-asic port-info [asic number | port Display port information register values. The keywords have these number [asic number]] meanings: asic number—(Optional) Display information for the • specified ASIC. The range is 0 to 1. port number—(Optional) Display information for the •...
Page 881 Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-asic transmit {port-fifo | queue | Display transmit information. The keywords have these meanings: supervisor-sram} [asic number | port-fifo—Display the contents of the port-FIFO information • port number [asic number]] register.
Page 882 Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-asic Usage Guidelines You should use this command only when you are working directly with your technical support representative while troubleshooting a problem. Do not use this command unless your technical support representative asks you to do so.
Page 883: Show Platform Port-Security
Appendix C Catalyst 3560 Switch Show Platform Commands show platform port-security show platform port-security Use the show platform port-security privileged EXEC command to display platform-dependent port-security information. show platform port-security [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 884: Show Platform Qos
Appendix C Catalyst 3560 Switch Show Platform Commands show platform qos show platform qos Use the show platform qos privileged EXEC command to display platform-dependent quality of service (QoS) information. show platform qos {label asic number | policer {parameters asic number | port alloc number asic number}} [ | {begin | exclude | include} expression] Syntax Description label asic number...
Page 885: Show Platform Resource-Manager
Appendix C Catalyst 3560 Switch Show Platform Commands show platform resource-manager show platform resource-manager Use the show platform resource-manager privileged EXEC command to display platform-dependent resource-manager information. show platform resource-manager {dm [index number] | erd [index number] | mad [index number] | med [index number] | mod | msm {hash-table [vlan vlan-id] | mac-address mac-address [vlan vlan-id]} | sd [index number] | vld [index number]} [ | {begin | exclude | include} expression] Syntax Description...
Page 886 Appendix C Catalyst 3560 Switch Show Platform Commands show platform resource-manager | include (Optional) Display includes lines that match the specified expression. expression Expression in the output to use as a reference point. Command Modes Privileged EXEC Command History Release Modification 12.1(19)EA1 This command was introduced.
Page 887: Show Platform Snmp Counters
Appendix C Catalyst 3560 Switch Show Platform Commands show platform snmp counters show platform snmp counters Use the show platform snmp counters privileged EXEC command to display platform-dependent Simple Network Management Protocol (SNMP) counter information. show platform snmp counters [ | {begin | exclude | include} expression] Syntax Description | begin (Optional) Display begins with the line that matches the expression.
Page 888: Show Platform Spanning-Tree
Appendix C Catalyst 3560 Switch Show Platform Commands show platform spanning-tree show platform spanning-tree Use the show platform spanning-tree privileged EXEC command to display platform-dependent spanning-tree information. show platform spanning-tree synchronization [detail | vlan vlan-id] [ | {begin | exclude | include} expression] Syntax Description synchronization...
Page 889 Appendix C Catalyst 3560 Switch Show Platform Commands show platform stp-instance show platform stp-instance Use the show platform stp-instance privileged EXEC command to display platform-dependent spanning-tree instance information. show platform stp-instance vlan-id [ | {begin | exclude | include} expression] Syntax Description vlan-id Display spanning-tree instance information for the specified VLAN.
Page 890: Show Platform Tcam
Appendix C Catalyst 3560 Switch Show Platform Commands show platform tcam show platform tcam Use the show platform tcam privileged EXEC command to display platform-dependent ternary content addressable memory (TCAM) driver information. show platform tcam {handle number | log-results | table {acl | all | equal-cost-route | ipv6 {acl | qos | secondary} local | mac-address | multicast-expansion | qos | secondary | station | vlan-list} | usage} [asic number [detail [invalid]] | [index number [detail [invalid]] | invalid | num number [detail [invalid]] | invalid] | [invalid] | [num number [detail [invalid]] |...
Page 891: Show Platform Tcam C
Appendix C Catalyst 3560 Switch Show Platform Commands show platform tcam Syntax Description handle number Display the TCAM handle. The range is 0 to 4294967295. log-results Display the TCAM log results. table {acl | all | equal-cost-route Display lookup and forwarding table information. The keywords | ipv6 {acl | qos | secondary} have these meanings: local | mac-address |...
Page 892 Appendix C Catalyst 3560 Switch Show Platform Commands show platform tcam Command History Release Modification 12.1(19)EA1 This command was introduced. Usage Guidelines You should use this command only when you are working directly with your technical support representative while troubleshooting a problem. Do not use this command unless your technical support representative asks you to do so.
Page 893: Show Platform Vlan
Appendix C Catalyst 3560 Switch Show Platform Commands show platform vlan show platform vlan Use the show platform vlan privileged EXEC command to display platform-dependent VLAN information. show platform vlan {misc | mvid | prune | refcount | rpc {receive | transmit}} [ | {begin | exclude | include} expression] Syntax Description misc...
Page 894: Show Platform Vlan C
Appendix C Catalyst 3560 Switch Show Platform Commands show platform vlan Catalyst 3560 Switch Command Reference C-40 78-16405-05...
Page 895 2-232 boot helper command 2-25 on Layer 2 interfaces 2-122 boot helper-config file command 2-26 permit 2-298 booting action command Cisco IOS image 2-29 address aliasing 2-281 displaying environment variables 2-354 aggregate-port learner 2-286 interrupting 2-24 allowed VLANs 2-646...
Page 896 Index boot loader accessing candidate switches booting See clusters Cisco IOS image cat (boot loader) command helper image 2-25 caution, description directories CDP, enabling protocol tunneling for 2-199 creating A-15 channel-group command 2-30 displaying a list of channel-protocol command 2-33...
Page 897 2-66 debug ilpower command B-12 command modes defined debug interface command B-15 commands changed in Cisco IOS Release 12.2(20)SE debug ip dhcp snooping command B-13 command switch debug ip igmp filter command B-17 See clusters debug ip igmp max-groups command...
Page 898 Index debug platform configuration command debug sw-vlan command B-38 B-84 debug platform cpu-queues command B-31 debug sw-vlan ifs command B-86 debug platform device-manager command debug sw-vlan notification command B-33 B-88 debug platform dot1x command debug sw-vlan vtp command B-34 B-90 debug platform etherchannel command debug udld command B-35...
Page 899 Index dot1x auth-fail max-attempts dynamic ARP inspection (continued) 2-82 dot1x auth-fail vlan 2-84 clear dot1x command log buffer 2-80 2-38 dot1x control-direction command statistics 2-86 2-39 dot1x critical command display 2-88 dot1x default command ARP ACLs 2-90 2-349 dot1x guest-vlan command configuration and operating state 2-91 2-414...
Page 900 Index errdisable recovery command exit command 2-110 2-683 error conditions, displaying 2-392 extended discovery of candidate switches 2-56 error disable detection extended-range VLANs 2-108 error-disabled interfaces, displaying and allowed VLAN list 2-401 2-646 EtherChannel and pruning-eligible list 2-646 assigning Ethernet interface to channel group configuring 2-30 2-668...
Page 901 Index Hot Standby Router Protocol IGMP snooping (continued) See HSRP report suppression 2-165 HSRP switch topology change notification behavior 2-167 binding HSRP group to cluster images 2-64 standby group See software images 2-64 Immediate-Leave feature, MVR 2-283 Immediate-Leave processing IPv6 2-195 immediate-leave processing 2-170...
Page 902 Index ip arp inspection trust command IP source guard 2-133 ip arp inspection validate command 2-135 disabling 2-179 ip arp inspection vlan command displaying 2-137 ip arp inspection vlan logging command binding entries 2-138 2-432 IP DHCP snooping configuration 2-434 See DHCP snooping dynamic binding entries only 2-418...
Page 903 Index Layer 2 mode, enabling MAC addresses 2-618 Layer 2 protocol ports, displaying 2-450 displaying Layer 2 protocol-tunnel aging time 2-463 error detection for 2-108 2-461 error recovery timer dynamic 2-110 2-467 Layer 2 protocol tunnel counters MAC address-table move updates 2-42 2-471 Layer 2 protocol tunneling error recovery...
Page 904 Index macros mls qos aggregate-policer command 2-240 adding a description 2-225 mls qos command 2-238 adding a global description mls qos cos command 2-229 2-242 applying mls qos dscp-mutation command 2-226 2-244 creating mls qos map command 2-230 2-246 displaying mls qos queue-set output buffers command 2-504 2-250...
Page 905 Index MST (continued)P multicast storm control 2-615 root port multicast VLAN, MVR 2-280 loop guard multicast VLAN registration 2-572 preventing from becoming designated See MVR 2-572 restricting which can be root multiple hosts on authorized port 2-572 2-93 root guard Multiple Spanning Tree Protocol 2-572 root switch...
Page 906 Index policy maps (continued) traffic classification PAgP defining the class 2-34 See EtherChannel defining trust states 2-661 pagp learn-method command 2-286 setting DSCP or IP precedence values 2-338 pagp port-priority command 2-288 Port Aggregation Protocol password, VTP 2-694, 2-698 See EtherChannel password-recovery mechanism, enabling and port-based authentication disabling...
Page 907 Index port security aging 2-638 debug messages, display B-72 auto-QoS enabling 2-633 configuring 2-17 violation error recovery 2-110 debug messages, display 1-6, B-2 port trust states for QoS 2-272 displaying 2-350 port types, MVR 2-283 class maps power information, displaying 2-388 creating 2-36...
Page 908 Index QoS (continued) quality of service ingress queues See QoS allocating buffers querytime, MVR 2-258 2-280 assigning SRR scheduling weights queue-set command 2-256 2-322 defining the CoS input queue threshold map 2-260 defining the DSCP input queue threshold map 2-262 displaying buffer allocations 2-483 displaying CoS input queue threshold map...
Page 909 Index root guard, for spanning tree show cluster members command 2-572 2-364 routed ports show controllers cpu-interface command 2-366 IP addresses on show controllers ethernet-controller command 2-126 2-368 number supported show controllers power inline command 2-126 2-375 RSPAN show controllers tcam command 2-377 configuring show controller utilization command...
Page 910 Index show mac address-table count command show platform qos command 2-465 C-30 show mac address-table dynamic command 2-467 show platform resource-manager command C-31 show mac address-table interface command show platform snmp counters command 2-469 C-33 show mac address-table move update command show platform spanning-tree command 2-471 C-34...
Page 911 Index SoftPhone spanning-tree portfast (global configuration) command 2-597 See Cisco SoftPhone spanning-tree portfast (interface configuration) software images command 2-599 deleting 2-69 spanning-tree port-priority command 2-595 downloading Spanning Tree Protocol upgrading See STP uploading 2-13 spanning-tree transmit hold-count command 2-601 software version, displaying...
Page 912 Index STP (continued) switchport mode command 2-626 root port switchport mode private-vlan command 2-629 accelerating choice of new switchport nonegotiate command 2-602 2-631 loop guard switchport port-security aging command 2-572 2-638 preventing from becoming designated switchport port-security command 2-572 2-633 restricting which can be root switchport priority extend command 2-572...
Page 913 Index VLAN access maps actions UDLD displaying 2-539 aggressive mode 2-663, 2-665 VLAN-based QoS 2-274 debug messages, display B-92 VLAN configuration enable globally 2-663 rules 2-671, 2-676 enable per interface 2-665 saving 2-668, 2-678 error recovery timer 2-110 VLAN configuration mode message timer 2-663 commands...
Page 914 Index VLANs (continued) media types 2-671, 2-676 changing characteristics 2-694 normal-range clearing pruning counters 2-668, 2-674 2-53 private configuring 2-629 configuring domain name 2-317 2-694, 2-698 displaying file name 2-534 2-694 See also private VLANs mode 2-694, 2-698 restarting password 2-550 2-694, 2-698 saving the configuration...

This manual is also suitable for:

Ws-c3560e-24pd-s Ws-c3560e-48pd-sf Ws-c3560v2-24ts-e Ws-c3560x-24p-l Ws-c3560x-24t-l Ws-c3560x-48t-l ... Show all

Cisco WS-C3560E-24PD-E Command Reference Manual

Preface

Chapter 1 Using the Command-Line Interface

Chapter 2 Catalyst 3560 Switch Cisco IOS Commands

Class

Delete

Dot1X

Duplex

Ip Ssh

MDIX Auto

Mls Qos

Police

Queue-Set

Rcommand

Set

Setup

Show Boot

Show Dtp

Show Env

Show Ipc

Show Lacp

Quick Links

Related Manuals for Cisco WS-C3560E-24PD-E

Summary of Contents for Cisco WS-C3560E-24PD-E