Catalyst 4500 Series Switch Cisco IOS Command Reference, IOS XE 3.1.0 SG

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Symbols

$ matches the end of a string 1-7

( ) in commands 1-11

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10

Numerics

10-Gigabit Ethernet uplink

selecting 2-197

showing the mode 2-502, 2-503

802.1Q trunk ports and native VLANs 2-842

802.1Q tunnel ports

configuring 2-786

802.1S Multiple Spanning Tree

see MST

802.1X

configuring for multiple hosts 2-154

configuring for single host 2-154

configuring multiple domains 2-154

disabling port control 2-147

enabling port control 2-147

802.1X Critical Authentication

disabling on a port 2-148

disabling on a VLAN 2-151

EAPOL

disabling send success packets 2-149

enabling send success packets 2-149

enabling on a port 2-148

enabling on a VLAN 2-151

returning delay time to default setting 2-150

setting delay time on a port 2-150

802.1X critical authentication

configure parameters 2-21

802.1X critical recovery delay, configuring 2-21

802.1X Port Based Authentication

debugging 802.1X Port Based Authentication 2-104

displaying port based authentication 2-482

enabling accounting for authentication sessions 2-4

enabling authentication on the system 2-165

enabling guest VLAN 2-152

enabling guest VLAN supplicant 2-146, 2-153

enabling manual control of auth state 2-161

enabling periodic re-authentication of the client 2-164

initializing re-authentication of dot1x ports 2-163

initializing state machines 2-156

receive session termination message upon reboot 2-5

setting maximum number for EAP requests 2-159

setting the reauthentication timer 2-166

abbreviating commands

context-sensitive help 1-1

Access Gateway Module

connecting to a module 2-18

connecting to a remote module 2-414

connecting to a specific remote module 2-426

access-group

displaying mac interface 2-609

show mode interface 2-445, 2-662

access groups

IP 2-6, 2-142

access-list hardware capture mode command 2-8

access lists

clearing an access template 2-69

defining ARP 2-17

displaying ARP information 2-448

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-844

access-policies, applying using host-mode 2-25

ACLs

access-group mode 2-6

balancing hardware regions 2-12

determining ACL hardware programming 2-10

disabling hardware statistics 2-192

displaying mac access-group interface 2-609

enabling hardware statisctics 2-192

using ACL naming conventions for MAC ACLs 2-308

action clause

specifying drop or forward action in a VACL 2-13

addresses, configuring a maximum 2-380

adjacency

debugging the adjacency table 2-97

disabling the debug facility 2-97

displaying information about the adjacency table 2-446

displaying IPC table entries 2-97

aggregate policer

displaying information 2-663

aging time

displaying MAC address aging time 2-612

alarms

displaying operational status 2-490

alternation

description 1-10

anchoring

description 1-10

ARP

access list, displaying detailed information 2-448

defining access-lists 2-17

ARP inspection

enforce certain types of checking 2-214

ARP packet

deny based on DHCP bindings 2-136

permit based on DHCP bindings 2-359

authentication 2-21, 2-27

changing the control-direction 2-19

configure actions for events

configuring the actions 2-22

configuring port-control 2-31

enabling reauthentication 2-30

enabling Webauth fallback 2-24

host-mode configuration 2-25

setting priority of methods 2-33

setting the timer 2-35

setting username 2-829

specifying the order of methods 2-28

using an MD5-type encryption method 2-829

verifying MD5 signature 2-831

verifying the checksum for Flash memory 2-831

authentication control-direction command 2-19

authentication critical recovery delay command 2-21

authentication event command 2-22

authentication fallback command 2-24

authentication host-mode 2-25

authentication methods, setting priority 2-33

authentication methods, specifying the order of attempts 2-28

authentication open command 2-27

authentication order command 2-28

authentication periodic command 2-30

authentication port-control command 2-31

authentication priority command 2-33

authentication timer, setting 2-35

authentication timer command 2-35

auth fail VLAN

enable on a port 2-146

set max number of attempts 2-145

Auth Manager

configuring

authentication timer 2-35

authorization state

enabling manual control 2-161

authorization state of a controlled port 2-161

automatic installation

displaying status 2-453

automatic medium-dependent interface crossover

See Auto-MDIX

Auto-MDIX

disabling 2-341

enabling 2-341

auto-negotiate interface speed

example 2-763

auto-QoS

configuring for VoIP 2-37

displaying configuration 2-454

baby giants

displaying the system MTU setting 2-694

setting the maximum Layer 2 payload size 2-810

BackboneFast

displaying debugging messages 2-123

displaying spanning tree status 2-684

enabling debugging 2-123

bandwidth command 2-41

bindings

store for DHCP snooping 2-225

BOOT environment variable

displaying information 2-457

bootflash

displaying information 2-455

BPDUs

debugging spanning tree activities 2-121

bridge protocol data units

See BPDUs

broadcast

counters 2-94

broadcast suppression level

configuring 2-764, 2-766

enabling 2-764, 2-766

cable diagnostics

TDR

displaying test results 2-458

testing conditions of copper cables 2-812

call home

displaying information 2-460

e-mailing output 2-49

entering configuration submode 2-44

executing 2-49

manually send test message 2-52

receiving information 2-47

sending alert group message 2-50

submitting information 2-47

call home destination profiles

displaying 2-462

Catalyst 4507R 2-378

CDP

configuring tunneling encapsulation rate 2-296

displaying

neighbor information 2-465

enabling protocol tunneling for 2-291

set drop threshold for 2-294

CEF

displaying next-hop information 2-539

displaying VLAN configuration information 2-539

chassis

displaying

chassis MAC address ranges 2-606

current and peak traffic meter readings 2-606

percentage of backplane utilization 2-606

switching clock failure recovery mode 2-606

cisco-desktop

macro apply 2-320

Cisco Express Forwarding

See CEF

cisco-phone

macro apply 2-322

cisco-router

macro apply 2-324

cisco-switch

macro apply 2-326

class-map command 2-60

class maps

defining the match criteria 2-334

clear commands

clearing Gigabit Ethernet interfaces 2-67

clearing IGMP group cache entries 2-76

clearing interface counters 2-62

clearing IP access lists 2-69, 2-70

clearing IP ARP inspection statistics VLAN 2-71

clearing IP DHCP snooping database statistics 2-75

clearing MFIB counters and routes 2-79

clearing MFIB fastdrop entries 2-80

clearing PAgP channel information 2-85

clearing QoS aggregate counters 2-88

clearing VLAN interfaces 2-68

clear energywise neighbors command 2-64

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-11

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-5

exiting 1-5

understanding user EXEC and configuration modes 1-5

condition interface

debugging interface-related activities 2-99

condition vlan

debugging VLAN output 2-102

configuration, saving 1-11

configuring

root as secondary 2-747

configuring a SPAN session to monitor

limit SPAN source traffic 2-346

configuring critical recovery 2-21

configuring forward delay 2-743

configuring root as primary 2-747

CoPP

attaching

policy map to control plane 2-424

displaying

policy-map class information 2-638

entering configuration mode 2-92

removing

service policy from control plane 2-424

CoS

assigning to Layer 2 protocol packets 2-293

counters

clearing interface counters 2-62

critical authentication, configure 802.1X parameters 2-21

critical recovery, configuring 802.1X parameter 2-21

DAI

clear statistics 2-71

DBL

displaying qos dbl 2-664

debug commands

debugging backup events 2-98

debugging DHCP snooping events 2-109

debugging DHCP snooping messages 2-110

debugging EtherChannel/PAgP/shim 2-105

debugging IPC activity 2-108

debugging IP DHCP snooping security messages 2-111

debugging NVRAM activities 2-114

debugging PAgP activities 2-115

debugging port manager activities 2-118

debugging spanning tree activities 2-121

debugging spanning tree backbonefast 2-123

debugging spanning tree UplinkFast 2-126

debugging supervisor redundancy 2-120

debugging VLAN manager activities 2-127

displaying monitor activity 2-113

displaying the adjacency table 2-97

enabling debug dot1x 2-104

enabling debugging messages for ISL VLAN IDs 2-130

enabling debugging messages for VTP 2-131

enabling debugging of UDLD activity 2-132

enabling switch shim debugging 2-124

enabling VLAN manager file system error tests 2-128

limiting debugging output for VLANs 2-102

limiting interface debugging output 2-99

limiting output for debugging standby state changes 2-100

shortcut to the debug condition interface 2-107

debugging

activity monitoring 2-113

DHCP snooping events 2-109

DHCP snooping packets 2-110

IPC activities 2-108

IP DHCP snooping security packets 2-111

NVRAM activities 2-114

PAgP activities 2-115

PAgP shim 2-105

PM activities 2-118

spanning tree BackboneFast events 2-123

spanning tree switch shim 2-124

spanning tree UplinkFast events 2-126

VLAN manager activities 2-127

VLAN manager IOS file system error tests 2-128

VTP protocol debug messages 2-131

debug spanning tree switch 2-124

debug sw-vlan vtp 2-131

default form of a command, using 1-6

DHCP

clearing database statistics 2-75

DHCP bindings

configuring bindings 2-223

deny ARP packet based on matches 2-136

permit ARP packet based on matches 2-359

DHCP snooping

clearing binding entries 2-72

clearing database 2-74

displaying binding table 2-542

displaying configuration information 2-540

displaying status of DHCP database 2-545

displaying status of error detection 2-493

enabling DHCP globally 2-222

enabling IP source guard 2-262

enabling on a VLAN 2-232

enabling option 82 2-227, 2-229

enabling option-82 2-234

enabling rate limiting on an interface 2-230

enabling trust on an interface 2-231

establishing binding configuration 2-223

renew binding database 2-416

store generated bindings 2-225

diagnostic fpga soft-error recover aggressive command 2-142

diagnostic test

bootup packet memory 2-476

displaying attributes 2-470

display module-based results 2-472

running 2-144

show results for TDR 2-458

testing conditions of copper cables 2-812

displaying error disable recovery 2-494

displaying inline power status 2-653

displaying monitoring activity 2-113

displaying PoE policing and monitoring status 2-661

displaying SEEPROM information

GBIC 2-504

displaying SPAN session information 2-694, 2-766

document conventions 1-xx

document organization 1-xix

DoS

CoPP

attaching policy map to control plane 2-424

displaying policy-map class information 2-638

entering configuration mode 2-92

removing service policy from control plane 2-424

entering

CoPP configuration mode 2-92

DOS attack

protecting system's resources 2-209

drop threshold, Layer 2 protocol tunneling 2-294

dual-capable port

selecting a connector 2-343

duplex mode

configuring autonegotiation on an interface 2-168

configuring full duplex on an interface 2-168

configuring half duplex on an interface 2-168

dynamic ARP inspection

preventing 2-209

Dynamic Host Configuration Protocol

See DHCP

EAP

restarting authentication process 2-159

EDCS-587028 2-449, 2-606

EIGRP (Enhanced IGRP)

filters

routing updates, preventing 2-356

enabling

debugging for UDLD 2-132

voice VLANs 2-779

enabling open access 2-27

EnergyWise

display power information through queries 2-177

display setting, status of entity and PoE ports 2-486

on an entity

enable, assign to domain, and set password 2-175

on an entity, enable and configure 2-170

on a PoE port

configuring on PoE port 2-172

energywise (global configuration) command 2-170, 2-172

energywise domain command 2-175

EnergyWise neighbor table, deleting 2-64

energywise query command 2-177

environmental

alarms 2-490

displaying information 2-490

status 2-490

temperature 2-490

erase a file 2-181

error disable detection

clearing error disable on an interface 2-65

enabling error disable detection 2-65, 2-184

enabling per-VLAN on BPDU guard 2-184

error-disabled state

displaying 2-523

error disable recovery

configuring recovery mechanism variables 2-186

displaying recovery timer information 2-494

enabling ARP inspection timeout 2-186

specifying recovery cause 2-186

EtherChannel

assigning interfaces to EtherChannel groups 2-53

debugging EtherChannel 2-105

debugging PAgP shim 2-105

debugging spanning tree activities 2-121

displaying information for a channel 2-496

removing interfaces from EtherChannel groups 2-53

EtherChannel guard

detecting STP misconfiguration 2-733

Explicit Host Tracking

clearing the database 2-78

enabling per-VLAN 2-246

expressions

matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-11

single-character patterns 1-7

Extensible Authentication Protocol

See EAP

fallback profile, specifying 2-24

field replaceable unit (FRU)

displaying status information 2-490

filters

EIGRP

routing updates, preventing 2-356

Flash memory file system

displaying file system information 2-455

verifying checksum 2-831

flow control

configuring a gigabit interface for pause frames 2-189

displaying per-interface statistics for flow control 2-500

GBIC

displaying SEEPROM information 2-504

Gigabit Ethernet interface

clearing the hardware logic 2-67

Gigabit Ethernet uplink

selecting 2-197

showing the mode 2-502, 2-503

global configuration mode

using 1-5

hardware module

resetting a module by toggling the power 2-194

hardware statistics

disabling 2-192

enabling 2-192

hardware uplink

selecting the mode 2-197

showing the mode 2-502, 2-503

helper addresses, IP 2-560

hot standby protocol

debugging 2-100

disabling debugging 2-100

limiting output 2-100

hw-module uplink mode shared-backplane command 2-195

IDPROMs

displaying SEEPROM information

chassis 2-504

clock module 2-504

fan trays 2-504

module 2-504

mux buffer 2-504

power supplies 2-504

supervisor engine 2-504

ifIndex persistence

clearing SNMP ifIndex commands 2-717

compress SNMP ifIndex table format 2-726

disabling globally 2-725

disabling on an interface 2-719

enabling globally 2-725

enabling on an interface 2-719

IGMP

applying filters for host joining on Layer 2 interfaces 2-236

clearing IGMP group cache entries 2-76

configuring frequency for IGMP host-query messages 2-239

creating an IGMP profile 2-238

displaying IGMP interface configuration information 2-547

displaying profiles 2-549

setting maximum group numbers 2-237

IGMP profiles

displaying 2-549

IGMP snooping

clearing the EHT database 2-78

configuring a Layer 2 interface as a group member 2-252

configuring a Layer 2 interface as a multicast router 2-250

configuring a static VLAN interface 2-252

displaying multicast information 2-556

displaying VLAN information 2-550, 2-554, 2-557

enabling 2-241

enabling immediate-leave processing 2-248

enabling on a VLAN 2-245

enabling per-VLAN Explicit Host Tracking 2-246

informs

enabling 2-721

inline power

displaying inline power status 2-653

In Service Software Upgrade

See ISSU

inspection log

clearing log buffer 2-70

interface

displaying suppressed multicast bytes 2-517

interface capabilities

displaying 2-513

interface configuration mode

summary 1-5

interface link

display cable disconnect time 2-520

interfaces

configuring dot1q tunnel ports 2-786

creating an interface-range macro 2-135

debugging output of interface related activities 2-99

displaying description 2-519

displaying error-disabled state 2-523

displaying information when tunneling is enabled 2-600

displaying status 2-519

displaying traffic for a specific interface 2-510

entering interface configuration mode 2-201

executing a command on multiple ports in a range 2-204

selecting an interface to configure 2-201

setting a CoS value for Layer 2 packets 2-293

setting drop threshold for Layer 2 packets 2-294

setting the interface type 2-786

interface speed

configuring interface speed 2-761

interface transceiver

displaying diagnostic data 2-527

internal VLAN allocation

configuring 2-845

default setting 2-845

displaying allocation information 2-706

Internet Group Management Protocol

See IGMP

IP ARP

applying ARP ACL to VLAN 2-207

clearing inspection statistics 2-71

clearing status of log buffer 2-70

controlling packet logging 2-218

enabling dynamic inspection 2-216

limit rate of incoming requests 2-209

set per-port config trust state 2-213

showing status of dynamic ARP inspection 2-534

showing status of log buffer 2-537

IPC

debugging IPC activities 2-108

IP DHCP Snooping

See DHCP snooping

IP header validation

disabling 2-261

enabling 2-261

IP interfaces

displaying usability status 2-559

IP multicast

displaying multicast routing table information 2-565

IP phone and standard desktop

enabling Cisco-recommended features 2-322

IP Port Security

enabling 2-262

IP source binding

adding or deleting 2-258

displaying bindingstagging 2-570

IP source guard

debugging messages 2-111

displaying configuration and filters 2-571

enabling on DHCP snooping 2-262

IPv6 MLD

configuring queries 2-268, 2-270

configuring snooping last-listener-query-intervals 2-270

configuring snooping listener-message-suppression 2-272

configuring snooping robustness-variables 2-273

configuring tcn topology change notifications 2-275

counting snooping last-listener-queries 2-268

displaying information 2-576

displaying ports for a switch or VLAN 2-578

displaying querier information 2-579

enabling snooping 2-266

enabling snooping on a VLAN 2-276

ISSU

canceling process 2-278

configuring rollback timer 2-290

displaying capability 2-581

displaying client information 2-583

displaying compatibility matrix 2-585

displaying endpoint information 2-590

displaying entities 2-591

displaying FSM session 2-592

displaying messages 2-593

displaying negotiated 2-595

displaying rollback-timer 2-596

displaying session information 2-597

displaying software version 2-598

displaying state 2-598

forcing switchover to standby supervisor engine 2-288

initiating an automatic ISSU upgrade procedure 2-282

loading new image 2-284

starting process 2-286

stopping rollback timer 2-280

Jumbo frames

enabling jumbo frames 2-352

LACP

deselecting channeling protocol 2-55

enabling LACP on an interface 2-55

setting channeling protocol 2-55

lacp port-priority command 2-298

lacp system-priority command 2-299

Layer 2

displaying ACL configuration 2-609

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN interface 2-786

specifying a trunking VLAN interface 2-786

Layer 2 protocol ports

displaying 2-600

Layer 2 protocol tunneling error recovery 2-296

Layer 2 switching

enabling voice VLANs 2-779

modifying switching characteristics 2-779

Layer 2 traceroute

IP addresses 2-817

Layer 3 switching

displaying information about an adjacency table 2-446

displaying port status 2-525

displaying status of native VLAN tagging 2-525

link-status event messages

disabling

globally 2-300, 2-303

on an interface 2-301, 2-304

enabling

globally 2-300, 2-303

on an interface 2-301, 2-304

log buffer

show status 2-537

logging

controlling IP ARP packets 2-218

MAB, display information 2-606

MAB, enable and configure 2-306

mab command 2-306

MAC Access Control Lists

See MAC ACLs

MAC ACLs

defining extended MAC access list 2-308

displaying MAC ACL information 2-703

naming an ACL 2-308

MAC addresses

disabling MAC address learning per VLAN 2-315

MAC address filtering

configuring 2-319

disabling 2-319

enabling 2-319

MAC address learning on a VLAN, enabling 2-315

MAC address table

adding static entries 2-331

clearing dynamic entries 2-82, 2-84

displaying dynamic table entry information 2-616

displaying entry count 2-614

displaying information 2-610

displaying interface-based information 2-618

displaying multicast information 2-620

displaying notification information 2-622

displaying protocol-based information 2-624

displaying static table entry information 2-626

displaying the MAC address aging time 2-612

displaying VLAN-based information 2-629

enabling authentication bypass 2-157

enabling notifications 2-317

learning in the protocol buckets 2-312

removing static entries 2-331

mac address-table learning vlan command 2-315

MAC address tables

adding static entries 2-319

deleting secure or specific addresses 2-86

disabling IGMP snooping on static MAC addresses 2-319

removing static entries 2-319

mac-address-table static 2-319

MAC address unicast filtering

dropping unicast traffic 2-319

MAC authentication bypass (MAB), display information 2-606

MAC authorization bypass(MAB), enable and configure 2-306

macro

displaying descriptions 2-330

macro keywords

help strings 2-2

macros

adding a global description 2-330

cisco global 2-328

system-cpp 2-329

mapping secondary VLANs to MST instance 2-399

mapping VLAN(s) to an MST instance 2-199

match (class-map configuration) command 2-14, 2-138, 2-139, 2-140, 2-141, 2-334, 2-767, 2-769, 2-771, 2-773, 2-777

maximum transmission unit (MTU)

displaying the system MTU setting 2-694

setting the maximum Layer 2 payload size 2-810

MD5

verifying MD5 signature 2-831

message digest 5

See MD5

MFIB

clearing ip mfib counters 2-79

clearing ip mfib fastdrop 2-80

displaying all active MFIB routes 2-562

displaying MFIB fastdrop table entries 2-564

enabling IP MFIB fastdrops 2-255

MLD

configuring snooping last-listener-query-intervals 2-270

configuring snooping listener-message-suppression 2-272

configuring snooping robustness-variables 2-273

configuring topology change notifications 2-275

counting snooping last-listener-queries 2-268

enabling snooping 2-266

enabling snooping on a VLAN 2-276

MLD snooping

displaying 2-579

modes

access-group 2-6

show access-group interface 2-445, 2-662

switching between PVST+, MST, and Rapid PVST 2-738

Bias-Free Language

Book Title

Catalyst 4500 Series Switch Cisco IOS Command Reference, IOS XE 3.1.0 SG

Chapter Title

Index

Results

Chapter: Index

Index

Was this Document Helpful?

Contact Cisco