Numerics - Cisco · aaa accounting dot1x command 2-1 aaa authentication dot1x command 2-3 AAA methods 2-3 access control entries See ACEs access control lists See ACLs access groups

OL-9645-08

I N D E X

Numerics

802.1Q tunnel ports

and QoS guidelines 2-277, 2-309

configuring 2-713

displaying 2-446

limitations 2-714

802.1x

and switchport modes 2-714

See also port-based authentication

violation error recovery 2-106

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

AAA methods 2-3

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-126

MAC, displaying 2-535

access list, IPv6 2-196

access lists

IP 2-126

on Layer 2 interfaces 2-126

access map configuration mode 2-264

access mode 2-713

access ports 2-713

ACEs 2-74, 2-342

ACLs

deny 2-72

displaying 2-424

for non-IP protocols 2-242

matching 2-264

permit 2-340

action command 2-5

address aliasing 2-322

aggregate-port learner 2-329

allowed VLANs 2-731

Any Transport over MPLS

See AToM

archive download-sw command 2-7

archive tar command 2-9

archive upload-sw command 2-12

arp access-list command 2-13

AToM, debug messages B-37

audience xix

authentication failed VLAN

See dot1x auth-fail vlan

auth-fail max-attempts

See dot1x auth-fail max-attempts

auth-fail vlan


authorization state of controlled port 2-87

autonegotiation of duplex mode 2-99

auto-QoS

See QoS

auto qos voip command 2-15

B

BackboneFast, for STP 2-647

backup interfaces

IN-1Catalyst 3750 Metro Switch Command Reference

Index

configuring 2-706

displaying 2-467

bandwidth command 2-20

boot (boot loader) command A-2

boot config-file command 2-23

boot enable-break command 2-24

boot helper command 2-25

boot helper-config file command 2-26

booting

displaying environment variables 2-433

interrupting 2-24

IOS image 2-29

manually 2-27

boot loader

accessing A-1

booting

helper image 2-25

IOS image A-2

directories

creating A-15

displaying a list of A-7

removing A-19

displaying

available commands A-12

memory heap utilization A-13

version A-26

environment variables

described A-20

displaying settings A-20

location of A-21

setting A-20

unsetting A-24

files

copying A-5

deleting A-6

displaying a list of A-7

displaying the contents of A-4, A-16, A-23

renaming A-17

file system

OL-9645-08

formatting A-10

initializing flash A-9

running a consistency check A-11

prompt A-1

resetting the system A-18

boot manual command 2-27

boot private-config-file command 2-28

boot system command 2-29

BPDU filtering, for spanning tree 2-648, 2-682

BPDU guard, for spanning tree 2-650, 2-682

broadcast storm control 2-699

bundling characteristics, UNI 2-111

C

cat (boot loader) command A-4

caution, description xx

CDP, enabling protocol tunneling for 2-221

CFM 2-328

CFM as OAM protocol 2-328

channel-group command 2-30

channel-protocol command 2-34

Cisco SoftPhone, auto-QoS configuration 2-15

class command 2-35

class-map command 2-39

class maps

creating 2-39

defining the match criteria 2-266

displaying 2-435

class of service

See CoS

clear ip arp inspection log command 2-41

clear ip arp inspection statistics command 2-42

clear ipv6 dhcp conflict command 2-45

clear l2protocol-tunnel counters command 2-46

clear lacp command 2-47

clear mac address-table command 2-48, 2-49

clear pagp command 2-50, 2-51

clear spanning-tree counters command 2-52


Index

clear spanning-tree detected-protocols command 2-53

clear vmps statistics command 2-54

clear vtp counters command 2-55

clusters

SNMP trap 2-636

command modes defined 1-1

configuration, initial

See hardware installation guide

configuration files

password recovery disable considerations A-1

specifying the name 2-23, 2-28

configuring multiple interfaces 2-122

config-vlan mode

commands 2-757

conventions

command xix

for examples xx

publication xix

text xix

copy (boot loader) command A-5

CoS

assigning default value to incoming packets 2-275

assigning to Layer 2 protocol packets 2-225

overriding the incoming value 2-275

CoS-to-DSCP map 2-281

CPU ASIC statistics, displaying 2-436

cpu traffic qos cos 2-56

cpu traffic qos dscp 2-58

cpu traffic qos precedence 2-60

D

debug autoqos command B-2

debug backup command B-4

debug dot1x command B-5

debug dtp command B-6

debug etherchannel command B-7

debug interface command B-10

debug ip dhcp snooping command B-11


debug ip igmp filter command B-12

debug ip igmp max-groups command B-13

debug ip igmp snooping command B-14

debug ip sla error twamp connection B-15

debug ip sla error twamp control reflector B-17

debug ip sla error twamp control server B-19

debug ip sla error twamp session B-21

debug ip sla trace twamp connection B-23

debug ip sla trace twamp control reflector B-25

debug ip sla trace twamp control server B-27

debug ip sla trace twamp session B-29

debug ip verify source packet command B-31

debug lacp command B-32

debug mac-notification command B-33

debug matm command B-34

debug matm move update command B-35

debug monitor command B-36

debug mpls atom command B-37

debug mpls l2transport vlan command B-38

debug mvrdbg command B-39

debug nvram command B-40

debug pagp command B-41

debug platform acl command B-42

debug platform backup interface command B-44

debug platform cfm command B-43

debug platform cpu-queues command B-45

debug platform dot1x command B-47

debug platform etherchannel command B-48

debug platform fallback-bridging command B-49

debug platform forw-tcam command B-50

debug platform ip arp inspection command B-51

debug platform ip igmp snooping command B-52

debug platform ip multicast command B-54

debug platform ip unicast command B-56

debug platform led command B-58

debug platform matm command B-59

debug platform messaging command B-60

debug platform mpls command B-61

debug platform phy command B-62

OL-9645-08

Index

debug platform pm command B-63

debug platform port-asic command B-65

debug platform port-security command B-66

debug platform qos-acl-tcam command B-67

debug platform remote-commands command B-68

debug platform rep command B-69

debug platform resource-manager command B-70

debug platform snmp command B-71

debug platform span command B-72

debug platform supervisor-asic command B-73

debug platform sw-bridge command B-74

debug platform tcam command B-75

debug platform udld command B-77

debug platform vlan command B-78

debug pm command B-79

debug port-security command B-81

debug qos-manager command B-83

debug rep command B-82

debug spanning-tree backbonefast command B-86

debug spanning-tree bpdu command B-87

debug spanning-tree bpdu-opt command B-88

debug spanning-tree command B-84

debug spanning-tree mstp command B-89

debug spanning-tree switch command B-91

debug spanning-tree uplinkfast command B-93

debug sw-vlan command B-94

debug sw-vlan ifs command B-96

debug sw-vlan notification command B-97

debug sw-vlan vtp command B-98

debug udld command B-100

debug vqpc command B-102

debug xconnect command B-103

default template 2-404

define interface-range command 2-62

delete (boot loader) command A-6

delete command 2-64

deny (ARP access-list configuration) command 2-65

deny (IPv6) command 2-67

deny command 2-72

OL-9645-08

detect mechanism, causes 2-101

DHCP snooping

accepting untrusted packets from edge switch 2-152

enabling

on a VLAN 2-158

option 82 2-150, 2-152

trust on an interface 2-156

rate limiting 2-155

DHCP snooping binding database

binding file, configuring 2-148

bindings

adding 2-146

deleting 2-146

clearing database agent statistics 2-43

database agent, configuring 2-148

displaying

database agent status 2-492, 2-494

renewing 2-386

Digital Optical Monitoring

see DoM

dir (boot loader) command A-7

directories, deleting 2-64

documentation, related xx

document conventions xix

DoM

displaying supported transceivers 2-480, 2-638

domain name, VTP 2-773

domains, CFM 2-328

dot1x auth-fail max-attempts 2-75

dot1x auth-fail vlan 2-77

dot1x default command 2-79

dot1x guest-vlan command 2-80

dot1x host-mode command 2-82

dot1x initialize command 2-84

dot1x max-req command 2-85, 2-86

dot1x port-control command 2-87

dot1x re-authenticate command 2-89

dot1x reauthentication command 2-90

dot1x supplicant force-multicast command 2-91


Index

dot1x system-auth-control command 2-92

dot1x test eapol-capable command 2-93

dot1x test timeout command 2-94

dot1x timeout command 2-95

dot1x violation-mode command 2-97

dropping packets, with ACL matches 2-5

drop threshold, Layer 2 protocol tunneling 2-221

DSCP-to-CoS map 2-281

DSCP-to-DSCP-mutation map 2-281

DTP 2-714

DTP flap

error detection for 2-101

error recovery timer 2-106

dual IPv4 and IPv6 templates 2-335

dual-level policy maps 2-355

duplex command 2-99

dynamic-access ports

configuring 2-704

restrictions 2-704

dynamic ARP inspection

ARP ACLs

apply to a VLAN 2-131

define 2-13

deny packets 2-65

display 2-428

permit packets 2-333

clear

log buffer 2-41

statistics 2-42

display

ARP ACLs 2-428

configuration and operating state 2-485

log buffer 2-485

statistics 2-485

trust state and rate limit 2-485

enable per VLAN 2-141


log buffer

clear 2-41


configure 2-135

display 2-485

rate-limit incoming ARP packets 2-133

statistics

clear 2-42

display 2-485

trusted interface state 2-137

type of packet logged 2-142

validation checks 2-139

dynamic auto VLAN membership mode 2-713

dynamic desirable VLAN membership mode 2-713

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

Dynamic Trunking Protocol

See DTP

E

EAP-request/identity frame

maximum number to send 2-86

response time before retransmitting 2-95

E-LMI

enabling 2-109

mapping 2-111

encapsulation methods 2-731

environment variables, displaying 2-433

EoMPLS

configuring 2-316, 2-778

displaying 2-575

errdisable detect cause command 2-101

errdisable detect cause small-frame command 2-103

errdisable recovery cause small-frame 2-105

errdisable recovery command 2-106

error conditions, displaying 2-455

error disable detection 2-101

error-disabled interfaces, displaying 2-467

EtherChannel

assigning Ethernet interface to channel group 2-30

creating port-channel logical interface 2-120

OL-9645-08

Index

debug EtherChannel/PAgP, display B-7

debug platform-specific events, display B-48

displaying 2-459

enabling Layer 2 protocol tunneling for

LACP 2-222

PAgP 2-222

UDLD 2-222

interface information, displaying 2-467

LACP

clearing channel-group information 2-47

debug messages, display B-32

displaying 2-527

modes 2-30

port priority for hot-standby ports 2-226

restricting a protocol 2-34

system priority 2-228

load-distribution methods 2-357

PAgP

aggregate-port learner 2-329

clearing channel-group information 2-50


displaying 2-585



learn method 2-329

modes 2-30

physical-port learner 2-329

priority of interface for transmitted traffic 2-331

ethermet lmi ce command 2-109

Ethernet controller, internal register display 2-438

ethernet evc command 2-108

ethernet lim global command 2-109

ethernet lmi ce-vlan map command 2-111, 2-113

ethernet lmi command 2-109

Ethernet Local Management Interface

See E-LMI

Ethernet over MPLS

See EoMPLS

Ethernet over multiprotocol label switching

OL-9645-08

See EoMPLS

Ethernet service

debugging B-8

displaying 2-462

Ethernet service instance 2-407

Ethernet service interfaces 2-465

Ethernet statistics, collecting 2-403

Ethernet UNI configuration 2-115

ethernet uni id command 2-117

Ethernet virtual connections

See EVCs

EVC configuration mode 2-108

EVCs 2-108

and VLANs 2-115

service instances 2-407

UNI counts 2-754

EVC service

point-to-multipoint 2-754

point-to-point 2-754

examples, conventions for xx

extended-range VLANs

and allowed VLAN list 2-732

and pruning-eligible list 2-732

configuring 2-756

extended system ID for STP 2-656

F

fan information, displaying 2-452

file name, VTP 2-773

files, deleting 2-64

flash_init (boot loader) command A-9

Flex Links

configuring 2-706

configuring preferred VLAN 2-708

displaying 2-467

flowcontrol command 2-118

format (boot loader) command A-10

forwarding packets, with ACL matches 2-5


Index

forwarding results, display C-6

frame forwarding information, displaying C-6

fsck (boot loader) command A-11

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-424

help (boot loader) command A-12

host connection, port configuration 2-712

host ports, private VLANs 2-716

I

IEEE 802.1ag Connectivity Fault Management

See CFM

IEEE 802.1X Port Based Authentication

enabling guest VLAN supplicant 2-76

IGMP filters

applying 2-161


IGMP groups, setting maximum 2-163

IGMP maximum groups, debugging B-13

IGMP profiles

creating 2-165

displaying 2-497

IGMP snooping

adding ports as a static member of a group 2-176

displaying 2-498, 2-502, 2-504

enabling the Immediate-Leave feature 2-173

multicast table 2-500

querier 2-169

report suppression 2-171

images

See software images


Immediate-Leave feature, MVR 2-324

immediate-leave processing 2-173

Immediate-Leave processing, IPv6 2-217

import map command 2-193

initial configuration

See hardware installation guide

interface configuration mode 1-2, 1-3

interface port-channel command 2-120

interface range command 2-122

interface-range macros 2-62

interfaces

assigning Ethernet interface to channel group 2-30

configuring 2-99

configuring multiple 2-122

creating port-channel logical 2-120


disabling 2-631

displaying the MAC address table 2-547

restarting 2-631

interface speed, configuring 2-691

interface vlan command 2-124

internal registers, displaying 2-438, 2-442

Internet Group Management Protocol

See IGMP

invalid GBIC



ip access-group command 2-126

ip address command 2-129

IP addresses, setting 2-129

IP address matching 2-264

ip arp inspection filter vlan command 2-131

ip arp inspection limit command 2-133

ip arp inspection log-buffer command 2-135

ip arp inspection trust command 2-137

ip arp inspection validate command 2-139

ip arp inspection vlan command 2-141

ip arp inspection vlan logging command 2-142

IP DHCP snooping

OL-9645-08

Index

See DHCP snooping

ip dhcp snooping binding command 2-146

ip dhcp snooping command 2-145

ip dhcp snooping database command 2-148

ip dhcp snooping information option allow-untrusted command 2-152

ip dhcp snooping information option command 2-150

ip dhcp snooping information option format remote-id command 2-154

ip dhcp snooping limit rate command 2-155

ip dhcp snooping trust command 2-156

ip dhcp snooping verify command 2-157

ip dhcp snooping vlan command 2-158

ip dhcp snooping vlan information option format-type circuit-id string command 2-159

ip igmp filter command 2-161

ip igmp max-groups command 2-163, 2-186, 2-188

ip igmp profile command 2-165

ip igmp snooping command 2-167

ip igmp snooping querier command 2-169

ip igmp snooping report-suppression command 2-171

ip igmp snooping vlan immediate-leave command 2-173

ip igmp snooping vlan mrouter command 2-174

ip igmp snooping vlan static command 2-176

IP multicast addresses 2-321

IP phones

auto-QoS configuration 2-15

trusting packets sent from 2-308

IP-precedence-to-DSCP map 2-281

ip sla responder twamp 2-178

ip sla server twamp 2-180

ip source binding command 2-182

IP source guard

disabling 2-190

displaying

binding entries 2-511

configuration 2-512

enabling 2-190

static IP source bindings 2-182

ip ssh command 2-184

OL-9645-08

IPv6 access list, deny conditions 2-67

ipv6 access-list command 2-196

ipv6 address dhcp command 2-198

ipv6 dhcp client request vendor command 2-199

ipv6 dhcp ping packets command 2-200

ipv6 dhcp pool command 2-201

ipv6 dhcp server command 2-203

ipv6 mld snooping command 2-205

ipv6 mld snooping last-listener-query count command 2-207

ipv6 mld snooping last-listener-query-interval command 2-209

ipv6 mld snooping listener-message-suppression command 2-211

ipv6 mld snooping robustness-variable command 2-213

ipv6 mld snooping tcn command 2-215

ipv6 mld snooping vlan command 2-217

ipv6 traffic-filter command 2-219

ip verify source command 2-190

ip vrf (global configuration) command 2-192

ip vrf (interface configuration) command 2-194

J

jumbo frames

See MTU

L

l2protocol-tunnel command 2-221

l2protocol-tunnel cos command 2-225

label distribution protocol

See LDP

LACP

See EtherChannel

lacp port-priority command 2-226

lacp system-priority command 2-228

Layer 2 mode, enabling 2-702

Layer 2 protocol ports, displaying 2-525


Index

Layer 2 protocol tunnel

and EtherChannels 2-222

CoS 2-225

counters, clearing 2-46


error recovery 2-223


setting thresholds for 2-223

Layer 2 traceroute

IP addresses 2-745

MAC addresses 2-742

Layer 3 mode, enabling 2-702

LDP

destination 2-316

holdtime 2-318

line configuration mode 1-2, 1-4

Link Aggregation Control Protocol

See EtherChannel

link flap



link state group command 2-230

link state track command 2-232

load-distribution methods for EtherChannel 2-357

location (global configuration) command 2-233

location (interface configuration) command 2-235

logging event command 2-237

logging file command 2-238

logical interface 2-120

loopback error

detection for 2-101

recovery timer 2-106

loop guard, for spanning tree 2-657, 2-661

M

mac access-group command 2-240

MAC access-groups, displaying 2-535

MAC access list configuration mode 2-242


mac access-list extended command 2-242

MAC access lists 2-72

MAC addresses

disabling MAC address learning per VLAN 2-245

displaying

aging time 2-541

all 2-539

dynamic 2-545

Layer 2 multicast entries 2-552

MAC address-table move updates 2-550

notification settings 2-549, 2-554

number of addresses in a VLAN 2-543

per interface 2-547

per VLAN 2-558

static 2-556

static and dynamic entries 2-537

dynamic

aging time 2-244

deleting 2-48

displaying 2-545

enabling MAC address notification 2-249

enabling MAC address-table move update 2-247

matching 2-264

static

adding and removing 2-251

displaying 2-556

dropping on an interface 2-252

tables 2-539

MAC address notification, debugging B-33

mac address-table aging-time 2-240, 2-264

mac address-table aging-time command 2-244

mac address-table learning command 2-245

mac address-table move update 2-247

mac address-table move update command 2-247

mac address-table notification command 2-249

mac address-table static command 2-251

mac address-table static drop command 2-252

macro description command 2-257

macro global command 2-258

OL-9645-08

Index

macro global description command 2-261

macro name command 2-262

macros

adding a description 2-257

adding a global description 2-261

applying 2-258

creating 2-262

displaying 2-587

specifying parameter values 2-258

tracing 2-258

macros, interface range 2-62, 2-122

maintenance end points 2-754

manual

audience xix

purpose of xix

maps

QoS

defining 2-281

displaying 2-567

VLAN

creating 2-763

defining 2-264

displaying 2-621

match (access-map configuration) command 2-264

match (class-map configuration) command 2-266

maximum transmission unit

See MTU

mdix auto command 2-269

memory (boot loader) command A-13

mkdir (boot loader) command A-15

MLD snooping

configuring 2-211, 2-213

configuring queries 2-207, 2-209

configuring topology change notification 2-215

displaying 2-515, 2-517, 2-519, 2-521

enabling 2-205

MLD snooping on a VLAN, enabling 2-217

mls qos aggregate-policer command 2-273

mls qos command 2-271

OL-9645-08

mls qos cos command 2-275

mls qos dscp-mutation command 2-277

mls qos enhanced command 2-279

mls qos map command 2-281

mls qos queue-set output buffers command 2-284

mls qos queue-set output threshold command 2-286

mls qos srr-queue input bandwidth command 2-290

mls qos srr-queue input buffers command 2-292

mls qos-srr-queue input cos-map command 2-294

mls qos srr-queue input dscp-map command 2-296

mls qos srr-queue input priority-queue command 2-298

mls qos srr-queue input threshold command 2-300

mls qos-srr-queue output cos-map command 2-302

mls qos srr-queue output dscp-map command 2-304, 2-306

mls qos trust command 2-308

mls qos vlan-based command 2-311

mode, MVR 2-321

Mode button, and password recovery 2-408

modes, commands 1-1

monitor session command 2-312

more (boot loader) command A-16

MPLS

MTU 2-319

VCs 2-316, 2-778

mpls l2transport route command 2-316, 2-575

mpls ldp holdtime command 2-318

mpls mtu command 2-319

MSTP

displaying 2-603

interoperability 2-53

link type 2-659

MST region

aborting changes 2-665

applying changes 2-665

configuration name 2-665

configuration revision number 2-665

current or pending display 2-665

displaying 2-603

MST configuration mode 2-665


Index

VLANs-to-instance mapping 2-665

path cost 2-667

protocol mode 2-663

restart protocol migration process 2-53

root port

loop guard 2-657

preventing from becoming designated 2-657

restricting which can be root 2-657

root guard 2-657

root switch

affects of extended system ID 2-656

hello-time 2-670, 2-678

interval between BDPU messages 2-671

interval between hello BPDU messages 2-670, 2-678

max-age 2-671

maximum hop count before discarding BPDU 2-672

port priority for selection of 2-675

primary or secondary 2-678

switch priority 2-677

state changes

blocking to forwarding state 2-684

enabling BPDU filtering 2-648, 2-682

enabling BPDU guard 2-650, 2-682

enabling Port Fast 2-682, 2-684

forward-delay time 2-669

length of listening and learning states 2-669

rapid transition to forwarding 2-659

shutting down Port Fast-enabled ports 2-682

state information display 2-602

MTU

configuring size 2-740

displaying global setting 2-610

for MPLS 2-319

Multicase Listener Discovery

See MLD

multicast group address, MVR 2-324

multicast groups, MVR 2-322


Multicast Listener Discovery

See MLD

multicast router learning method 2-174

multicast router ports, configuring 2-174

multicast router ports, IPv6 2-217

multicast storm control 2-699

multicast VLAN, MVR 2-322

multicast VLAN registration

See MVR

multiple hosts on authorized port 2-82

Multiple Spanning Tree Protocol

See MSTP

multiplexing, UNI 2-115

multi VPN routing/forwarding instances in customer edge devices

See multi-VRF CE

multi-VRF CE 2-192, 2-194

MVR

and address aliasing 2-322

configuring 2-321

configuring interfaces 2-324


displaying 2-579

displaying interface information 2-581

members, displaying 2-583

mvr (global configuration) command 2-321

mvr (interface configuration) command 2-324

mvr vlan group command 2-325

N

native VLANs 2-731

nonegotiate, DTP messaging 2-718

nonhierarchical single-level policy maps 2-355

non-IP protocols

denying 2-72

forwarding 2-340

non-IP traffic

access lists 2-242

OL-9645-08

Index

denying 2-72

permitting 2-340

normal-range VLANs 2-756

note, description xx

no vlan command 2-756

O

OAM PDUs 2-113

OAM protocol 2-328

oam protocol cfm svlan command 2-328

operation, administration, and maintenance protocol

See OAM

P

PAgP

See EtherChannel

pagp learn-method command 2-329

pagp port-priority command 2-331

password, VTP 2-773

password-recovery mechanism, enabling and disabling 2-408

permit (ARP access-list configuration) command 2-333

permit (IPv6) command 2-335

permit command 2-340

per-VLAN spanning-tree plus

See STP

physical-port learner 2-329

PID, displaying 2-484

PIM-DVMRP, as multicast router learning method 2-174

police aggregate command 2-345

police cir command 2-347

police cir percent command 2-350

police command 2-343

policed-DSCP map 2-281

policers

aggregate 2-273, 2-345

displaying 2-561

OL-9645-08


single-rate ingress 2-343

two-rate hierarchical 2-347, 2-350

policy-map command 2-354

policy maps

applying to an interface 2-410

creating 2-354

displaying 2-590

dual-level 2-355

marking 2-415

nonhierarchical and single-level 2-355

See also policers

See also QoS, hierarchical policies

traffic classification

defining the class 2-35

defining trust states 2-747

Port Aggregation Protocol

See EtherChannel

port-based authentication

802.1x AAA accounting methods 2-1

AAA method list 2-3

configuring violation modes 2-97


enabling 802.1x

globally 2-92

per interface 2-87

guest VLAN 2-80

host modes 2-82

initialize an interface 2-84, 2-94

manual control of authorization state 2-87

multiple hosts on authorized port 2-82

periodic re-authentication

enabling 2-90

time between attempts 2-95

quiet period between failed authentication exchanges 2-95

re-authenticating 802.1x-enabled ports 2-89

resetting configurable 802.1x parameters 2-79

statistics and status display 2-447


Index

switch-to-authentication server retransmission time 2-95

switch-to-client frame-retransmission number 2-85, 2-86

switch-to-client retransmission time 2-95

test for IEEE 802.1x readiness 2-93

port-channel load-balance command 2-357

Port Fast, for spanning tree 2-684

port ranges, defining 2-62

ports, debugging B-79

ports, protected 2-730

port security

aging 2-724


enabling 2-720

violation error recovery 2-106

port trust states for QoS 2-308

port types, MVR 2-324

power information, displaying 2-452

priority command 2-359

priority-queue command 2-361

private-vlan command 2-363

private-vlan mapping command 2-366

private VLANs

association 2-728

configuring 2-363

configuring ports 2-716

displaying 2-616

host ports 2-716

mapping

configuring 2-728

promiscuous ports 2-716

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-484

promiscuous ports, private VLANs 2-716

protected ports, displaying 2-472

pruning

VLANs 2-731

VTP


displaying interface information 2-467

enabling 2-773

pruning-eligible VLAN list 2-733

PVST+

See STP

Q

QoS

and 802.1Q tunneling guidelines 2-267, 2-277, 2-309

applying bandwidth to only one ES port 2-279

auto-QoS

configuring 2-15

debug messages, display 1-5, B-2

displaying 2-429

class maps

creating 2-39

defining the match criteria 2-266

displaying 2-435

defining the CoS value for an incoming packet 2-275

displaying configuration information 2-429, 2-560

DSCP trusted ports

applying DSCP-to-DSCP-mutation map to 2-277

defining DSCP-to-DSCP-mutation map 2-281

egress queues

displaying queue-set settings 2-572

egress queue-sets

allocating buffers 2-284

defining the CoS output queue threshold map 2-302

defining the DSCP output queue threshold map 2-306

displaying buffer allocations 2-564

displaying CoS output queue threshold map 2-567

displaying DSCP output queue threshold map 2-567

displaying queueing strategy 2-564

displaying queue-set settings 2-570

OL-9645-08

Index

enabling bandwidth shaping and scheduling 2-695

enabling bandwidth sharing and scheduling 2-697

enabling the priority queue 2-361

limiting the maximum output on a port 2-693

mapping a port to a queue-set 2-370

mapping CoS values to a queue and threshold 2-302

mapping DSCP values to a queue and threshold 2-306

setting maximum and reserved memory allocations 2-286

setting WTD thresholds 2-286

SRR and priority queue interaction 2-361

enabling 2-271

hierarchical policies


average-rate traffic shaping on a class 2-422

bandwidth allocation for a class 2-20

class-based weighted fair queueing 2-20, 2-36

creating a service policy 2-413

displaying 2-590

DSCP-based WRED 2-374

IP precedence-based WRED 2-381

marking 2-415

strict priority queueing (LLQ) 2-359

tail drop 2-368

two-rate policers 2-347, 2-350

WRED 2-371

WRED average queue size calculation 2-378

ingress queues

allocating buffers 2-292

assigning SRR scheduling weights 2-290

defining the CoS input queue threshold map 2-294

defining the DSCP input queue threshold map 2-296

displaying buffer allocations 2-564

displaying CoS input queue threshold map 2-567

OL-9645-08

displaying DSCP input queue threshold map 2-567

displaying queueing strategy 2-564

displaying settings for 2-562

enabling the priority queue 2-298

mapping CoS values to a queue and threshold 2-294

mapping DSCP values to a queue and threshold 2-296

setting WTD thresholds 2-300

maps

defining 2-281, 2-294, 2-296, 2-302, 2-306

displaying 2-567

policy maps

applying an aggregate policer 2-345


creating 2-354

defining aggregate policers 2-273

defining single-rate ingress policers 2-343

displaying policers 2-561

displaying policy maps 2-590

dual-level 2-355

hierarchical on non-ES ports 2-355

marking 2-415


traffic classifications 2-35

trust states 2-747

port trust states 2-308

statistics

in-profile and out-of-profile packets 2-564

packets enqueued or dropped 2-564

sent and received CoS values 2-564

sent and received DSCP values 2-564

trusted boundary for IP phones 2-308

VLAN-based 2-311

quality of service

See QoS

querytime, MVR 2-321

queue-limit command 2-368

queue-set command 2-370


Index

R

random-detect command 2-371

random-detect dscp command 2-374

random-detect exponential-weighting-constant command 2-378

random-detect precedence command 2-381

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

re-authenticating 802.1x-enabled ports 2-89

re-authentication

periodic 2-90

time between attempts 2-95

receiver ports, MVR 2-324

receiving flow-control packets 2-118

recovery mechanism

causes 2-106

display 2-453, 2-457

timer interval 2-106

remote-span command 2-384

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-17

renew ip dhcp snooping database command 2-386

rep admin vlan command 2-387

rep block port command 2-388

rep lsl-age-timer command 2-391

rep preempt delay command 2-393

rep preempt segment command 2-395

rep segment command 2-396

rep stcn command 2-399

reset (boot loader) command A-18

resource templates, displaying 2-598

restricted VLAN


rmdir (boot loader) command A-19

rmon collection stats command 2-403


root guard, for spanning tree 2-657

route distinguisher 2-193

routed ports

IP addresses on 2-130

number supported 2-130

route-target command 2-193

routing template 2-404

RSPAN

configuring 2-312

displaying 2-573

filter RSPAN traffic 2-312

sessions

add interfaces to 2-312

displaying 2-573

start new 2-312

VLAN 2-384

S

sdm prefer command 2-404

secure ports, limitations 2-721

sending flow-control packets 2-118

service instance command 2-407

service instances, displaying 2-463

service password-recovery command 2-408

service-policy command (interface configuration) 2-410

service-policy command (policy-map class) 2-413

set (boot loader) command A-20

set command 2-415

setup command 2-417

setup express command 2-420

shape command 2-422

show access-lists command 2-424

show archive status command 2-427

show arp access-list command 2-428

show auto qos command 2-429

show boot command 2-433

show class-map command 2-435

show controllers cpu-interface command 2-436

OL-9645-08

Index

show controllers ethernet-controller command 2-438

show controllers tcam command 2-442

show dot1q-tunnel command 2-446

show dot1x command 2-447

show dtp command 2-450

show env command 2-452

show errdisable detect command 2-453

show errdisable flap-values command 2-455

show errdisable recovery command 2-457

show etherchannel command 2-459

show ethernet service evc command 2-462

show ethernet service instance command 2-463

show ethernet service interface command 2-465

show interface rep command 2-478

show interfaces command 2-467

show interfaces counters command 2-475

show interface transceivers command 2-480

show inventory command 2-484

show ip arp inspection command 2-485

show ip dhcp snooping binding command 2-490

show ip dhcp snooping command 2-489

show ip dhcp snooping database command 2-492, 2-494

show ip igmp profile command 2-497

show ip igmp snooping address command 2-517

show ip igmp snooping command 2-498, 2-515

show ip igmp snooping groups command 2-500

show ip igmp snooping mrouter command 2-502, 2-519

show ip igmp snooping querier command 2-504, 2-521

show ip sla standards 2-506

show ip sla twamp connection 2-444, 2-507

show ip sla twamp session 2-509

show ip source binding command 2-511

show ipv6 dhcp conflict command 2-514

show ipv6 route updated 2-523

show ip verify source command 2-512

show l2protocol-tunnel command 2-525

show lacp command 2-527

show link state group command 2-531

show location 2-533

OL-9645-08

show location command 2-533

show mac access-group command 2-535

show mac address-table address command 2-539

show mac address-table aging time command 2-541

show mac address-table command 2-537

show mac address-table count command 2-543

show mac address-table dynamic command 2-545

show mac address-table interface command 2-547

show mac address-table learning command 2-549

show mac address-table move update 2-550

show mac address-table move update command 2-550

show mac address-table multicast command 2-552

show mac address-table notification command 2-49, 2-554, B-35

show mac address-table static command 2-556

show mac address-table vlan command 2-558

show mls qos aggregate-policer command 2-561

show mls qos command 2-560

show mls qos input-queue command 2-562

show mls qos interface command 2-564

show mls qos maps command 2-567

show mls qos queue-set command 2-570

show monitor command 2-573

show mvr command 2-579

show mvr interface command 2-581

show mvr members command 2-583

show pagp command 2-585

show parser macro command 2-587

show platform acl command C-2

show platform cfm command C-3

show platform configuration command C-4

show platform etherchannel command C-5

show platform forward command C-6

show platform igmp snooping command C-8

show platform ipc trace command C-14

show platform ip multicast command C-10

show platform ip policy command C-11

show platform ip unicast command C-12

show platform layer4op command C-15


Index

show platform mac-address-table command C-16

show platform messaging command C-17

show platform monitor command C-18

show platform mvr table command C-19

show platform pm command C-20

show platform port-asic command C-22

show platform port-security command C-26

show platform qos command C-27

show platform resource-manager command C-28

show platform snmp counters command C-30

show platform spanning-tree command C-31

show platform stp-instance command C-32

show platform tb command C-33

show platform tcam command C-34

show platform vlan command C-37

show policy-map command 2-590

show port security command 2-593

show rep topology command 2-596

show sdm prefer command 2-598

show setup express command 2-601

show spanning-tree command 2-602

show storm-control command 2-608

show system mtu command 2-610

show trust command 2-747

show udld command 2-611

show version command 2-614

show vlan access-map command 2-621

show vlan command 2-616

show vlan command, fields 2-618

show vlan filter command 2-622

show vmps command 2-623

show vtp command 2-626

shutdown command 2-631

shutdown threshold, Layer 2 protocol tunneling 2-221

shutdown vlan command 2-632

small violation-rate command 2-633

Smartports macros

See macros

SNMP host, specifying 2-640


SNMP informs, enabling the sending of 2-636

snmp mib rep trap-rate command 2-635

snmp-server enable traps command 2-636

snmp-server host command 2-640

snmp trap mac-notification change command 2-645

SNMP traps

enabling MAC address notification trap 2-645

enabling the MAC address notification feature 2-249

enabling the sending of 2-636

SoftPhone

See Cisco SoftPhone

software images

deleting 2-64

downloading 2-7

monitoring status of 2-427

upgrading 2-7

uploading 2-12

software version, displaying 2-614

source ports, MVR 2-324

SPAN

configuring 2-312


displaying 2-573

filter SPAN traffic 2-312

sessions

add interfaces to 2-312

displaying 2-573

start new 2-312

spanning-tree backbonefast command 2-647

spanning-tree bpdufilter command 2-648

spanning-tree bpduguard command 2-650

spanning-tree cost command 2-652

spanning-tree etherchannel command 2-654

spanning-tree extend system-id command 2-656

spanning-tree guard command 2-657

spanning-tree link-type command 2-659

spanning-tree loopguard default command 2-661

spanning-tree mode command 2-663

spanning-tree mst configuration command 2-665

OL-9645-08

Index

spanning-tree mst cost command 2-667

spanning-tree mst forward-time command 2-669

spanning-tree mst hello-time command 2-670

spanning-tree mst max-age command 2-671

spanning-tree mst max-hops command 2-672

spanning-tree mst port-priority command 2-675

spanning-tree mst pre-standard command 2-674

spanning-tree mst priority command 2-677

spanning-tree mst root command 2-678

spanning-tree portfast (global configuration) command 2-682

spanning-tree portfast (interface configuration) command 2-684

spanning-tree port-priority command 2-680

Spanning Tree Protocol

See STP

spanning-tree uplinkfast command 2-686

spanning-tree vlan command 2-688

speed command 2-691

srr-queue bandwidth limit command 2-693

srr-queue bandwidth shape command 2-695

srr-queue bandwidth share command 2-697

SSH, configuring version 2-184

static-access ports, configuring 2-704

statistics, Ethernet group 2-403

sticky learning, enabling 2-720

storm-control command 2-699

STP

BackboneFast 2-647

counters, clearing 2-52

debug messages, display

BackboneFast events B-86

MSTP B-89

optimized BPDUs handling B-88

spanning-tree activity B-84

switch shim B-91

transmitted and received BPDUs B-87

UplinkFast B-93

detection of indirect link failures 2-647

OL-9645-08

enabling protocol tunneling for 2-221

EtherChannel misconfiguration 2-654

extended system ID 2-656

path cost 2-652

protocol modes 2-663

root port

accelerating choice of new 2-686

loop guard 2-657

preventing from becoming designated 2-657

restricting which can be root 2-657

root guard 2-657

UplinkFast 2-686

root switch

affects of extended system ID 2-656, 2-689

hello-time 2-688

interval between BDPU messages 2-688

interval between hello BPDU messages 2-688

max-age 2-688

port priority for selection of 2-680

primary or secondary 2-688

switch priority 2-688

state changes

blocking to forwarding state 2-684

enabling BPDU filtering 2-648, 2-682

enabling BPDU guard 2-650, 2-682

enabling Port Fast 2-682, 2-684

enabling timer to recover from error state 2-106

forward-delay time 2-688

length of listening and learning states 2-688

shutting down Port Fast-enabled ports 2-682

state information display 2-602

VLAN options 2-677, 2-688

SVIs, creating 2-124

Switched Port Analyzer

See SPAN

switching characteristics

modifying 2-702, 2-718

returning to interfaces 2-702, 2-718

switchport access command 2-704


Index

switchport backup interface command 2-706

switchport block command 2-710

switchport command 2-702

switchport host command 2-712

switchport mode command 2-713

switchport mode private-vlan command 2-716

switchport nonegotiate command 2-718

switchport port-security aging command 2-724

switchport port-security command 2-720

switchport priority extend command 2-726

switchport private-vlan command 2-728

switchport protected command 2-730

switchports, displaying 2-467

switchport trunk command 2-731

switchport vlan mapping command 2-735

switchport voice vlan command 2-738

system message logging, save message to flash 2-238

system mtu command 2-740

system resource templates 2-404

T

tar files, creating, listing, and extracting 2-9

temperature information, displaying 2-452

templates, system resources 2-404

traceroute mac command 2-742

traceroute mac ip command 2-745

trunking, VLAN mode 2-713

trunk mode 2-713

trunk ports 2-713

trunks, to non-DTP device 2-714

trusted boundary for QoS 2-308

trusted port states for QoS 2-308

tunneling

drop threshold 2-223

PAgP, LACP, and UDLD packets 2-222

shutdown threshold 2-223

tunnel ports, Layer 2 protocol, displaying 2-525

type (boot loader) command A-23


U

UDLD

aggressive mode 2-749, 2-751


enable globally 2-749

enable per interface 2-751


message timer 2-749

normal mode 2-749, 2-751

reset a shutdown interface 2-753

status 2-611

udld (global configuration) command 2-749

udld (interface configuration) command 2-751

udld reset command 2-753

UNI

bundling and multiplexing 2-115

Ethernet 2-115

unicast storm control 2-699

uni count command 2-754

UniDirectional Link Detection

See UDLD

UNI ID, Ethernet 2-117

unknown multicast traffic, preventing 2-710

unknown unicast traffic, preventing 2-710

unset (boot loader) command A-24

upgrading, software images 2-7

upgrading information

See release notes xx

UplinkFast, for STP 2-686

user EXEC mode 1-2

V

VCs

assigning interfaces to 1-5, 2-778

configuring 2-316

MPLS, displaying 2-575

version (boot loader) command A-26

OL-9645-08

Index

virtual circuits

See VCs

VLAN

enabling guest VLAN supplicant 2-76

vlan (global configuration) command 2-756

vlan (VLAN configuration) command 2-762

vlan access-map command 2-763

VLAN access map configuration mode 2-763

VLAN access maps

actions 2-5

displaying 2-621

VLAN-based QoS 2-311

VLAN configuration

rules 2-759

saving 2-756

VLAN configuration mode

commands

VTP 2-777

description 1-4

entering 2-756, 2-765

summary 1-2

vlan database command 2-765

vlan filter command 2-766

VLAN filters, displaying 2-622

VLAN ID range 2-756

VLAN mapping, command 2-736

VLAN maps

applying 2-766

creating 2-763

defining 2-264

displaying 2-621

VLAN Query Protocol

See VQP

VLANs

adding 2-756

configuring 2-756

debug messages, display

ISL B-97

VLAN IOS file system error tests B-96

OL-9645-08

VLAN manager activity B-94

VTP B-98

displaying configurations 2-616

extended-range 2-756

MAC addresses

displaying 2-558

number of 2-543

media types 2-758

normal-range 2-756

private 2-716

configuring 2-363

displaying 2-616

See also private VLANs

restarting 2-632

saving the configuration 2-756

shutting down 2-632

SNMP traps for VTP 2-638, 2-642

suspending 2-632

VLAN template 2-404

VLAN Trunking Protocol

See VTP

VMPS

configuring servers 2-771

displaying 2-623


reconfirming dynamic VLAN assignments 2-768

vmps reconfirm (global configuration) command 2-769

vmps reconfirm (privileged EXEC) command 2-768

vmps retry command 2-770

vmps server command 2-771

voice VLAN

configuring 2-738

setting port priority 2-726

VPN routing/forwarding table

See VRF

VQP

and dynamic-access ports 2-704

clearing client statistics 2-54

displaying information 2-623


Index

per-server retry count 2-770

reconfirmation interval 2-769

reconfirming dynamic VLAN assignments 2-768

VRF

associating to an interface 2-194

configuring 2-192

VTP

changing characteristics 2-773

clearing pruning counters 2-55

configuring

domain name 2-773

file name 2-773

mode 2-773

password 2-773

counters display fields 2-627

displaying information 2-626

enabling

pruning 2-773

tunneling for 2-221

version 2 2-773

mode 2-773

pruning 2-773

saving the configuration 2-756

statistics 2-626

status 2-626

status display fields 2-628

vtp (global configuration) command 2-773

vtp (VLAN configuration) command 2-777

X

xconnect command 2-778


OL-9645-08

Index

OL-9645-08

Numerics - Cisco · aaa accounting dot1x command 2-1 aaa authentication dot1x command 2-3 AAA methods 2-3 access control entries See ACEs access control lists See ACLs access groups

Documents