Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

Symbols

$ matches the end of a string 1-7

( ) in commands 1-11

* matches 0 or more sequences of a pattern 1-7

+ matches 1 or more sequences of a pattern 1-7

. matches any single character 1-7

? command 1-1

? matches 0 or 1 occurrence of a pattern 1-7

^ matches the beginning of a string 1-7

_ matches a comma (,), left brace ({), left parenthesis 1-7

" 1-10

Numerics

10-Gigabit Ethernet uplink

selecting 2-211

showing the mode 2-553, 2-554

802.1Q trunk ports and native VLANs 2-898

802.1Q tunnel ports

configuring 2-840

802.1S Multiple Spanning Tree

see MST

802.1X

configuring for multiple hosts 2-168

configuring for single host 2-168

configuring multiple domains 2-168

disabling port control 2-161

enabling port control 2-161

802.1X Critical Authentication

disabling on a port 2-162

disabling on a VLAN 2-165

EAPOL

disabling send success packets 2-163

enabling send success packets 2-163

enabling on a port 2-162

enabling on a VLAN 2-165

returning delay time to default setting 2-164

setting delay time on a port 2-164

802.1X critical authentication

configure parameters 2-25

802.1X critical recovery delay, configuring 2-25

802.1X Port Based Authentication

debugging 802.1X Port Based Authentication 2-111

displaying port based authentication 2-533

enabling accounting for authentication sessions 2-4

enabling authentication on the system 2-179

enabling guest VLAN 2-166

enabling guest VLAN supplicant 2-159, 2-167

enabling manual control of auth state 2-175

enabling periodic re-authentication of the client 2-178

initializing re-authentication of dot1x ports 2-177

initializing state machines 2-170

receive session termination message upon reboot 2-5

setting maximum number for EAP requests 2-173

setting the reauthentication timer 2-180

A

abbreviating commands

context-sensitive help 1-1

Access Gateway Module

connecting to a module 2-22

connecting to a remote module 2-463

connecting to a specific remote module 2-475

access-group

displaying mac interface 2-660

show mode interface 2-408, 2-495, 2-718

access groups

IP 2-6, 2-156

access lists

clearing an access template 2-74

defining ARP 2-21

displaying ARP information 2-499

See also ACLs, MAC ACLs, and VACLs

access maps

applying with VLAN filter 2-900

access-node-identifier, setting for the switch 2-411

access-policies, applying using host-mode 2-29

ACLs

access-group mode 2-6

balancing hardware regions 2-12

capturing control packets 2-8

determining ACL hardware programming 2-10

disabling hardware statistics 2-206

displaying mac access-group interface 2-660

enabling hardware statisctics 2-206

using ACL naming conventions for MAC ACLs 2-324

action clause

specifying drop or forward action in a VACL 2-13

addresses, configuring a maximum 2-396

adjacency

debugging the adjacency table 2-104

disabling the debug facility 2-104

displaying information about the adjacency table 2-496

displaying IPC table entries 2-104

aggregate policer

displaying information 2-719

aging time

displaying MAC address aging time 2-663

MAC address table 2-327

alarms

displaying operational status 2-541

alternation

description 1-10

anchoring

description 1-10

ancp, show multicast 2-498

ANCP client

port identifier 2-16

remote server 2-17

set router to become 2-18

ARP

access list, displaying detailed information 2-499

defining access-lists 2-21

ARP inspection

enforce certain types of checking 2-228

ARP packet

deny based on DHCP bindings 2-146

permit based on DHCP bindings 2-375

authentication 2-25, 2-31

changing the control-direction 2-23

configure actions for events

configuring the actions 2-26

configuring port-control 2-35

enabling reauthentication 2-34

enabling Webauth fallback 2-28

host-mode configuration 2-29

setting priority of methods 2-37

setting the timer 2-39

setting username 2-885

specifying the order of methods 2-32

using an MD5-type encryption method 2-885

verifying MD5 signaturemessage digest 5

See MD5

verifying the checksum for Flash memory 2-887

authentication control-direction command 2-23

authentication critical recovery delay command 2-25

authentication event command 2-26

authentication fallback command 2-28

authentication host-mode 2-29

authentication methods, setting priority 2-37

authentication methods, specifying the order of attempts 2-32

authentication open command 2-31

authentication order command 2-32

authentication periodic command 2-34

authentication port-control command 2-35

authentication priority command 2-37

authentication timer, setting 2-39

authentication timer command 2-39

authentication violation command 2-41

auth fail VLAN

enable on a port 2-160

set max number of attempts 2-159

Auth Manager

configuring

authentication timer 2-39

authorization state

enabling manual control 2-175

authorization state of a controlled port 2-175

automatic installation

displaying status 2-504

automatic medium-dependent interface crossover

See Auto-MDIX

Auto-MDIX

disabling 2-355

enabling 2-355

auto-negotiate interface speed

example 2-817

auto-QoS

configuring for VoIP 2-42

displaying configuration 2-505

B

baby giants

displaying the system MTU setting 2-751

setting the maximum Layer 2 payload size 2-865

BackboneFast

displaying debugging messages 2-133

displaying spanning tree status 2-740

enabling debugging 2-133

bandwidth command 2-46

bindings

store for DHCP snooping 2-240

BOOT environment variable

displaying information 2-508

bootflash

displaying information 2-506

BPDUs

debugging spanning tree activities 2-131

bridge protocol data units

See BPDUs

broadcast

counters 2-101

broadcast suppression level

configuring 2-818, 2-820

enabling 2-818, 2-820

C

cable diagnostics

TDR

displaying test results 2-509

testing conditions of copper cables 2-867

call home

displaying information 2-511

e-mailing output 2-54

entering configuration submode 2-49

executing 2-54

manually send test message 2-57

receiving information 2-52

sending alert group message 2-55

submitting information 2-52

call home destination profiles

displaying 2-513

Catalyst 4507R 2-394

CDP

configuring tunneling encapsulation rate 2-311

displaying

neighbor information 2-516

enabling protocol tunneling for 2-306

set drop threshold for 2-309

CEF

displaying next-hop information 2-590

displaying VLAN configuration information 2-590

chassis

displaying

chassis MAC address ranges 2-657

current and peak traffic meter readings 2-657

percentage of backplane utilization 2-657

switching clock failure recovery mode 2-657

circuit-id

setting for an interface 2-413

circuit-id, setting for an interface VLAN range 2-414

cisco-desktop

macro apply 2-334

Cisco Express Forwarding

See CEF

cisco-phone

macro apply 2-336

cisco-router

macro apply 2-338

cisco-switch

macro apply 2-340

class maps

creating 2-65

defining the match criteria 2-348

clear commands

clearing Gigabit Ethernet interfaces 2-72

clearing IGMP group cache entries 2-81

clearing interface counters 2-67

clearing IP access lists 2-74, 2-75

clearing IP ARP inspection statistics VLAN 2-76

clearing IP DHCP snooping database statistics 2-80

clearing MFIB counters and routes 2-84

clearing MFIB fastdrop entries 2-85

clearing PAgP channel information 2-91

clearing QoS aggregate counters 2-95

clearing VLAN interfaces 2-73

clear energywise neighbors command 2-69

clear nmsp statistics command 2-90

CLI string search

anchoring 1-10

expressions 1-7

filtering 1-6

multiple-character patterns 1-8

multipliers 1-9

parentheses for recall 1-11

searching outputs 1-6

single-character patterns 1-7

using 1-6

command modes

accessing privileged EXEC mode 1-5

exiting 1-5

understanding user EXEC and configuration modes 1-5

condition interface

debugging interface-related activities 2-106

condition vlan

debugging VLAN output 2-109

configuration, saving 1-11

configuring

root as secondary 2-801

configuring a SPAN session to monitor

limit SPAN source traffic 2-360

configuring critical recovery 2-25

configuring forward delay 2-797

configuring root as primary 2-801

CoPP

attaching

policy map to control plane 2-473

displaying

policy-map class information 2-692

entering configuration mode 2-99

removing

service policy from control plane 2-473

CoS

assigning to Layer 2 protocol packets 2-308

CoS QoS default

defining value on an interface 2-439

Cost of Service

See QoS CoS

counters

clearing interface counters 2-67

critical authentication, configure 802.1X parameters 2-25

critical recovery, configuring 802.1X parameter 2-25

D

DAI

clear statistics 2-76

DBL

displaying qos dbl 2-720

enabling DBL globally on the switch 2-440

debug commands

debugging backup events 2-105

debugging DHCP snooping events 2-116

debugging DHCP snooping messages 2-117

debugging EtherChannel/PAgP/shim 2-112

debugging IPC activity 2-115

debugging IP DHCP snooping security messages 2-118

debugging NVRAM activities 2-122

debugging PAgP activities 2-123

debugging port manager activities 2-126

debugging spanning tree activities 2-131

debugging spanning tree backbonefast 2-133

debugging spanning tree UplinkFast 2-136

debugging supervisor redundancy 2-130

debugging VLAN manager activities 2-137

displaying monitor activity 2-120

displaying the adjacency table 2-104

enabling debug dot1x 2-111

enabling debugging messages for ISL VLAN IDs 2-140

enabling debugging messages for VTP 2-141

enabling debugging of UDLD activity 2-142

enabling switch shim debugging 2-134

enabling VLAN manager file system error tests 2-138

limiting debugging output for VLANs 2-109

limiting interface debugging output 2-106

limiting output for debugging standby state changes 2-107

shortcut to the debug condition interface 2-114

debugging

activity monitoring 2-120

DHCP snooping events 2-116

DHCP snooping packets 2-117

IPC activities 2-115

IP DHCP snooping security packets 2-118

NVRAM activities 2-122

PAgP activities 2-123

PAgP shim 2-112

PM activities 2-126

PPPoE Intermediate Agent 2-128

spanning tree BackboneFast events 2-133

spanning tree switch shim 2-134

spanning tree UplinkFast events 2-136

VLAN manager activities 2-137

VLAN manager IOS file system error tests 2-138

VTP protocol debug messages 2-141

debug nmsp command 2-121

debug spanning tree switch 2-134

debug sw-vlan vtp 2-141

default CoS value 2-439

default form of a command, using 1-6

defining egress DSCP-to-CoS mapping 2-446

DHCP

clearing database statistics 2-80

DHCP bindings

configuring bindings 2-238

deny ARP packet based on matches 2-146

permit ARP packet based on matches 2-375

DHCP snooping

clearing binding entries 2-77

clearing database 2-79

displaying binding table 2-593

displaying configuration information 2-591

displaying status of DHCP database 2-596

displaying status of error detection 2-544

enabling DHCP globally 2-237

enabling IP source guard 2-279

enabling on a VLAN 2-247

enabling option 82 2-242, 2-244

enabling option-82 2-249

enabling rate limiting on an interface 2-245

enabling trust on an interface 2-246

establishing binding configuration 2-238

renew binding database 2-465

store generated bindings 2-240

diagnostic fpga soft-error recover command 2-156

diagnostic test

bootup packet memory 2-527

displaying attributes 2-521

display module-based results 2-523

running 2-158

show results for TDR 2-509

displaying error disable recovery 2-545

displaying inline power status 2-707

displaying monitoring activity 2-120

displaying PoE policing and monitoring status 2-715

displaying SEEPROM information

GBIC 2-555

displaying SPAN session information 2-750, 2-820

document conventions 1-xx

document organization 1-xix

DoS

CoPP

attaching policy map to control plane 2-473

displaying policy-map class information 2-692

entering configuration mode 2-99

removing service policy from control plane 2-473

entering

CoPP configuration mode 2-99

DOS attack

protecting system's resources 2-223

drop threshold, Layer 2 protocol tunneling 2-309

DSCP rewrite for IP packets

enable 2-450

dual-capable port

selecting a connector 2-357

duplex mode

configuring autonegotiation on an interface 2-182

configuring full duplex on an interface 2-182

configuring half duplex on an interface 2-182

dynamic ARP inspection

preventing 2-223

Dynamic Buffer Limiting

See DBL

Dynamic Host Configuration Protocol

See DHCP

E

EAP

restarting authentication process 2-173

EDCS-587028 2-500, 2-657

EIGRP (Enhanced IGRP)

filters

routing updates, preventing 2-372

enabling

debugging for UDLD 2-142

voice VLANs 2-833

enabling open access 2-31

EnergyWise

display power information through queries 2-191

display setting, status of entity and PoE ports 2-537

on an entity

enable, assign to domain, and set password 2-189

on an entity, enable and configure 2-184

on a PoE port

configuring on PoE port 2-186

energywise (global configuration) command 2-184, 2-186

energywise domain command 2-189

EnergyWise neighbor table, deleting 2-69

energywise query command 2-191

environmental

alarms 2-541

displaying information 2-541

status 2-541

temperature 2-541

erase a file 2-195

error disable detection

clearing error disable on an interface 2-70

enabling error disable detection 2-70, 2-198

enabling per-VLAN on BPDU guard 2-198

error-disabled state

displaying 2-574

error disable recovery

configuring recovery mechanism variables 2-200

displaying recovery timer information 2-545

enabling ARP inspection timeout 2-200

specifying recovery cause 2-200

EtherChannel

assigning interfaces to EtherChannel groups 2-58

debugging EtherChannel 2-112

debugging PAgP shim 2-112

debugging spanning tree activities 2-131

displaying information for a channel 2-547

removing interfaces from EtherChannel groups 2-58

EtherChannel guard

detecting STP misconfiguration 2-787

Explicit Host Tracking

clearing the database 2-83

enabling per-VLAN 2-261

expressions

matching multiple expression occurrences 1-9

multiple-character patterns 1-8

multiplying pattern occurrence 1-11

single-character patterns 1-7

Extensible Authentication Protocol

See EAP

F

fallback profile, specifying 2-28

field replaceable unit (FRU)

displaying status information 2-541

filters

EIGRP

routing updates, preventing 2-372

Flash memory file system

displaying file system information 2-506

verifying checksum 2-887

flow control

configuring a gigabit interface for pause frames 2-203

displaying per-interface statistics for flow control 2-551

G

GBIC

displaying SEEPROM information 2-555

generic-error-message, setting for the switch 2-411

Gigabit Ethernet interface

clearing the hardware logic 2-72

Gigabit Ethernet uplink

selecting 2-211

showing the mode 2-553, 2-554

global configuration mode

using 1-5

H

hardware module

resetting a module by toggling the power 2-208

hardware statistics

disabling 2-206

enabling 2-206

hardware uplink

selecting the mode 2-211

showing the mode 2-553, 2-554

helper addresses, IP 2-611

hot standby protocol

debugging 2-107

disabling debugging 2-107

limiting output 2-107

hw-module uplink mode shared-backplane command 2-209

I

identifier-string, setting for the switch 2-411

ID mapping, creating an ANCP client 2-16

IDPROMs

displaying SEEPROM information

chassis 2-555

clock module 2-555

fan trays 2-555

module 2-555

mux buffer 2-555

power supplies 2-555

supervisor engine 2-555

ifIndex persistence

clearing SNMP ifIndex commands 2-773

compress SNMP ifIndex table format 2-780

enabling globally 2-779

IGMP

applying filters for host joining on Layer 2 interfaces 2-251

clearing IGMP group cache entries 2-81

configuring frequency for IGMP host-query messages 2-254

creating an IGMP profile 2-253

displaying IGMP interface configuration information 2-598

displaying profiles 2-600

setting maximum group numbers 2-252

IGMP profiles

displaying 2-600

IGMP snooping

clearing the EHT database 2-83

configuring a Layer 2 interface as a group member 2-267

configuring a Layer 2 interface as a multicast router 2-265

configuring a static VLAN interface 2-267

displaying multicast information 2-607

displaying VLAN information 2-601, 2-605, 2-608

enabling 2-256

enabling immediate-leave processing 2-263

enabling on a VLAN 2-260

enabling per-VLAN Explicit Host Tracking 2-261

informs

enabling 2-777

inline power

displaying inline power status 2-707

In Service Software Upgrade

See ISSU

inspection log

clearing log buffer 2-75

interface

displaying suppressed multicast bytes 2-568

interface capabilities

displaying 2-564

interface configuration mode

summary 1-5

interface link

display cable disconnect time 2-571

interfaces

configuring dot1q tunnel ports 2-840

creating an interface-range macro 2-145

debugging output of interface related activities 2-106

displaying description 2-570

displaying error-disabled state 2-574

displaying information when tunneling is enabled 2-651

displaying status 2-570

displaying traffic for a specific interface 2-561

entering interface configuration mode 2-215

executing a command on multiple ports in a range 2-218

selecting an interface to configure 2-215

setting a CoS value for Layer 2 packets 2-308

setting drop threshold for Layer 2 packets 2-309

setting the interface type 2-840

interface speed

configuring interface speed 2-815

interface transceiver

displaying diagnostic data 2-578

internal VLAN allocation

configuring 2-901

default setting 2-901

displaying allocation information 2-763

Internet Group Management Protocol

See IGMP

IP address of remote ANCP server, setting 2-17

IP ARP

applying ARP ACL to VLAN 2-221

clearing inspection statistics 2-76

clearing status of log buffer 2-75

controlling packet logging 2-232

enabling dynamic inspection 2-230

limit rate of incoming requests 2-223

set per-port config trust state 2-227

showing status of dynamic ARP inspection 2-585

showing status of log buffer 2-588

IPC

debugging IPC activities 2-115

IP DHCP Snooping

See DHCP snooping

IP header validation

disabling 2-278

enabling 2-278

IP interfaces

displaying usability status 2-610

IP multicast

displaying multicast routing table information 2-616

ip multicast multipath command 2-271

IP packets

enable DSCP rewrite 2-450

IP phone and standard desktop

enabling Cisco-recommended features 2-336

IP Port Security

enabling 2-279

IP source binding

adding or deleting 2-275

displaying bindingstagging 2-621

IP source guard

debugging messages 2-118

displaying configuration and filters 2-622

enabling on DHCP snooping 2-279

IPv6 MLD

configuring queries 2-285, 2-287

configuring snooping last-listener-query-intervals 2-287

configuring snooping listener-message-suppression 2-289

configuring snooping robustness-variables 2-290

configuring tcn topology change notifications 2-292

counting snooping last-listener-queries 2-285

displaying information 2-627

displaying ports for a switch or VLAN 2-629

displaying querier information 2-630

enabling snooping 2-283

enabling snooping on a VLAN 2-293

ISSU

canceling process 2-295

configuring rollback timer 2-305

displaying capability 2-632

displaying client information 2-634

displaying compatibility matrix 2-636

displaying endpoint information 2-641

displaying entities 2-642

displaying FSM session 2-643

displaying messages 2-644

displaying negotiated 2-646

displaying rollback-timer 2-647

displaying session information 2-648

displaying software version 2-649

displaying state 2-649

forcing switchover to standby supervisor engine 2-303

loading new image 2-299

starting process 2-301

stopping rollback timer 2-297

J

Jumbo frames

enabling jumbo frames 2-366

L

LACP

deselecting channeling protocol 2-60

enabling LACP on an interface 2-60

setting channeling protocol 2-60

lacp port-priority command 2-313

lacp system-priority command 2-314

Layer 2

displaying ACL configuration 2-660

Layer 2 interface type

specifying a nontrunking, nontagged single VLAN interface 2-840

specifying a trunking VLAN interface 2-840

Layer 2 protocol ports

displaying 2-651

Layer 2 protocol tunneling error recovery 2-311

Layer 2 switching

enabling voice VLANs 2-833

modifying switching characteristics 2-833

Layer 2 traceroute

IP addresses 2-872

Layer 3 switching

displaying information about an adjacency table 2-496

displaying port status 2-576

displaying status of native VLAN tagging 2-576

link-status event messages

disabling

globally 2-316, 2-319

on an interface 2-317, 2-320

enabling

globally 2-316, 2-319

on an interface 2-317, 2-320

lldp run command 2-315

log buffer

show status 2-588

logging

controlling IP ARP packets 2-232

M

MAB, display information 2-657

MAB, enable and configure 2-322

mab command 2-322

MAC Access Control Lists

See MAC ACLs

MAC ACLs

defining extended MAC access list 2-324

displaying MAC ACL information 2-760

naming an ACL 2-324

MAC address filtering

configuring 2-333

disabling 2-333

enabling 2-333

MAC address table

adding static entries 2-345

clearing dynamic entries 2-87, 2-89

configuring aging time 2-327

displaying dynamic table entry information 2-667

displaying entry count 2-665

displaying information 2-661

displaying interface-based information 2-669

displaying multicast information 2-671

displaying notification information 2-673

displaying protocol-based information 2-675

displaying static table entry information 2-677

displaying the MAC address aging time 2-663

displaying VLAN-based information 2-680

enabling authentication bypass 2-171

enabling notifications 2-331

learning in the protocol buckets 2-328

removing static entries 2-345

MAC address tables

adding static entries 2-333

deleting secure or specific addresses 2-92

disabling IGMP snooping on static MAC addresses 2-333

removing static entries 2-333

mac-address-table static 2-333

MAC address unicast filtering

dropping unicast traffic 2-333

MAC authentication bypass (MAB), display information 2-657

MAC authorization bypass(MAB), enable and configure 2-322

macro

displaying descriptions 2-344

macro keywords

help strings 2-2

macros

adding a global description 2-344

cisco global 2-342

system-cpp 2-343

mapping secondary VLANs to MST instance 2-427

mapping VLAN(s) to an MST instance 2-213

match (class-map configuration) command 2-14, 2-148, 2-150, 2-152, 2-154, 2-348, 2-821, 2-823, 2-825, 2-827, 2-831

maximum transmission unit (MTU)

displaying the system MTU setting 2-751

setting the maximum Layer 2 payload size 2-865

MFIB

clearing ip mfib counters 2-84

clearing ip mfib fastdrop 2-85

displaying all active MFIB routes 2-613

displaying MFIB fastdrop table entries 2-615

enabling IP MFIB fastdrops 2-270

MLD

configuring snooping last-listener-query-intervals 2-287

configuring snooping listener-message-suppression 2-289

configuring snooping robustness-variables 2-290

configuring topology change notifications 2-292

counting snooping last-listener-queries 2-285

enabling snooping 2-283

enabling snooping on a VLAN 2-293

MLD snooping

displaying 2-630

modes

access-group 2-6

show access-group interface 2-408, 2-495, 2-718

switching between PVST+, MST, and Rapid PVST 2-792

See also command modes

module password clearing 2-71

module reset

resetting a module by toggling the power 2-208

--More-- prompt

filter 1-6

search 1-7

MST

designating the primary and secondary root 2-801

displaying MST protocol information 2-745

displaying region configuration information 2-745

displaying spanning tree information 2-745

entering MST configuration submode 2-795

setting configuration revision number 2-467

setting path cost and port priority for instances 2-793

setting the forward delay timer for all instances 2-797

setting the hello-time delay timer for all instances 2-798

setting the max-age timer for all instances 2-799

setting the MST region name 2-367

specifying the maximum number of hops 2-800

switching between PVST+ and Rapid PVST 2-792

using the MST configuration submode revision command 2-467

using the submode name command 2-367

MTU

displaying global MTU settings 2-751

multi-auth, setting 2-29

Multicase Listener Discovery

See MLD

multicast

counters 2-101

enabling storm control 2-820

show ancp 2-498

multicast/unicast packets

prevent forwarding 2-839

Multicast Forwarding Information Base

See MFIB

multi-domain, setting 2-29

multiple-character patterns 1-8

Multiple Spanning Tree

See MST

N

native VLAN

controlling tagging of traffic 2-860

displaying ports eligible for native tagging 2-762

displaying ports eligible for tagging 2-762

enabling tagging on 802.1Q trunk ports 2-898

NetFlow

enabling NetFlow statistics 2-273

including infer fields in routing statistics 2-273

next-hop

displaying CEF VLAN information 2-590

nmsp attachment suppress command 2-369

nmsp command 2-368

no form of a command, using 1-6

NVRAM

debugging NVRAM activities 2-122

O

open access on a port, enabling 2-31

output

pattern searches 1-7

P

packet counters (statistics)

clear for PPPoE Intermediate Agent 2-94

packet counters, display for PPPoE Intermediate Agent 2-716

packet forwarding

prevent unknown packets 2-839

packet memory failure

direct switch action upon detection 2-157

packet memory test

bootup, displaying results 2-527, 2-529

ongoing, displaying results 2-531

PACL

access-group mode 2-6

paging prompt

see --More-- prompt

PAgP

clearing port channel information 2-91

debugging PAgP activity 2-123

deselecting channeling protocol 2-60

displaying port channel information 2-689

hot standby mode

returning to defaults 2-371

selecting ports 2-371

input interface of incoming packets

learning 2-370

returning to defaults 2-370

setting channeling protocol 2-60

parentheses 1-11

password

clearing on an intelligent line module 2-71

setting username 2-885

PBR

displaying route maps 1-xx

redistributing route maps 1-xx

PM activities

debugging 2-126

disabling debugging 2-126

PoE policing

configure on an interface 2-403

PoE policing and monitoring

displaying status 2-715

police (percent) command 2-382

police (two rates) command 2-384, 2-386

police command 2-377

policing, configure PoE 2-403

policing and monitoring status

displaying PoE 2-715

Policy Based Routing

See PBR

policy maps

creating 2-390

marking 2-477

See also QoS, hierarchical policies

traffic classification

defining the class

defining trust states 2-875

port, dual-capable

selecting the connector 2-357

Port Aggregation Protocol

See PAgP

port-based authentication

displaying debug messages 2-111

displaying statistics and status 2-533

enabling 802.1X 2-175

host modes 2-168

manual control of authorization state 2-175

periodic re-authentication

enabling 2-178

re-authenticating 802.1X-enabled ports 2-177

switch-to-client frame-retransmission number 2-173

port channel

accessing 2-217

creating 2-217

displaying information 2-689

load distribution method

resetting to defaults 2-392

setting 2-392

port control, changing from unidirectional or bidirectional 2-23

port-control value, configuring 2-35

port range

executing 2-218

port security

debugging ports security 2-127

deleting secure or specific addresses 2-92

displaying settings for an interface or switch 2-700

enabling 2-845

filter source IP and MAC addresses 2-279

setting the rate limit for bad packets 2-845

sticky port 2-845

Port Trust Device

displaying 2-721

power status

displaying inline power 2-707

displaying power status 2-707

power supply

configuring combined and redundant power on the Catalyst 4507R 2-394

configuring inline power 2-399

configuring power consumption 2-394

displaying the SEEPROM 2-555

setting inline power state 2-398

PPPoE Discovery

enable vendor-tag stripping on packetsPPPoE Server

enable vendor-tag stripping on Discovery packets 2-417

PPPoE Discovery packets, limit rate arriving on an interfsce 2-415

PPPoE Intermediate Agent

clear statistics (packet counters) 2-94

debugging 2-128

pppoe intermediate-agent

enable intermediate agent on a switch 2-407

enable on an interface VLAN range 2-410

enable PPPoE Intermediate Agent on an interface 2-408

enable vendor-tag stripping of Discovery packets 2-417

format-type (global) 2-411

limit rate of PPPoE Discovery packets 2-415

set circuit-id or remote-id for an interface 2-413

set circuit-id or remote-id for an interface VLAN range 2-414

set trust configuration on an interface 2-415, 2-416

PPPoE Intermediate Agent, display configuration and statistics (packet counters) 2-716

priority command 2-418

priority-queue command 2-102

Private VLAN

See PVLANs

privileged EXEC mode, summary 1-5

prompts

system 1-5

protocol tunneling

configuring encapsulation rate 2-311

disabling 2-306

displaying port information 2-651

enabling 2-306

setting a CoS value for Layer 2 packets 2-308

setting a drop threshold for Layer 2 packets 2-309

PVLANs

configuring isolated, primary, and community PVLANs 2-420

controlling tagging of native VLAN traffic 2-860

disabling sticky-ARP 2-276

displaying map information for VLAN SVIs 2-573

displaying PVLAN information 2-765

enabling interface configuration mode 2-840

enabling sticky-ARP 2-276

mapping VLANs to the same SVI 2-424

specifying host ports 2-840

specifying promiscuous ports 2-840

Q

QoS

account Layer 2 encapsulation 2-432

attaching a policy-map to an interface 2-468

automatic configuration 2-42

class maps

creating 2-65

defining the match criteria 2-348

clearing aggregate counters 2-95

configuring auto 2-42

defining a named aggregate policer 2-434

defining default CoS value 2-439

defining ingress CoS-to-DSCP mapping 2-444

displaying aggregate policer information 2-719

displaying auto configuration 2-505

displaying class maps information 2-519

displaying configuration information 2-505

displaying configurations of policies 2-695

displaying policy map information 2-691, 2-698

displaying QoS information 2-718

displaying QoS map information 2-723

egress queue-sets

enabling the priority queue 2-102

enabling global configuration mode 2-430

enabling on control packets 2-437

enabling per-VLAN QoS for a Layer 2 interface 2-453

enabling QoS on an interface 2-431

hierarchical policies

average-rate traffic shaping on a class 2-490

bandwidth allocation for a class 2-46, 2-64

creating a service policy 2-471

marking 2-477

strict priority queueing (LLQ) 2-418

mapping DSCP values to transmit queues 2-446

mapping egress DSCP-to-CoS 2-446

mapping the DSCP-to-CoS value 2-446

policy maps

creating 2-390

marking 2-477

traffic classifications

trust states 2-875

setting the mapping of policed DSCP values 2-448

setting the trust state 2-451

specifying flow-based match criteria 2-351

Supervisor Engine 6-E

setting CoS 2-479

setting DSCP 2-482

setting precedence values 2-485

setting QoS group identifiers 2-488

QoS CoS

configuring for tunneled Layer 2 protocol packets 2-308

defining default CoS value 2-439

qos dbl 2-440

quality of service

See QoS

question command 1-1

queueing information

displaying 2-721

queue limiting

configuring packet limits 2-455

R

Rapid PVST

switching between PVST and MST 2-792

re-authenticating 802.1X-enabled ports 2-177

re-authentication

periodic 2-178

set the time 2-180

reauthentication, enabling 2-34

reboots

restoring bindings across 2-238

redundancy

accessing the main CPU 2-457

changing from active to standby supervisor engine 2-461

displaying information 2-725

displaying ISSU config-sync failure information 2-729

displaying redundancy facility information 2-725

displaying RF client list 2-725

displaying RF operational counters 2-725

displaying RF states 2-725

enabling automatic synchronization 2-45

forcing switchover to standby supervisor engine 2-461

mismatched command listing 2-459

set the mode 2-358

synchronizing the route processor configurations 2-345

related documentation 1-xix

remote-id, setting for an interface 2-413

remote-id, setting for an interface VLAN range 2-414

remote SPAN

See RSPAN

renew commands

ip dhcp snooping database 2-465

resetting PVLAN trunk

setting switchport to trunk 2-840

retry failed authentiation, configuring 2-26

rj45 connector, selecting the connector 2-357

ROM monitor mode

summary 1-6

Route Processor Redundancy

See redundancy

router, set to become ANCP client 2-18

RPF

disabling IPv4 exists-only checks 2-281

enabling IPv4 exists-only checks 2-281

RPR

set the redundancy mode 2-358

RSPAN

converting VLAN to RSPAN VLAN 2-464

displaying list 2-767

S

saving configuration changes 1-11

secure address, configuring 2-394

secure ports, limitations 2-846

server (AAA) alive actions, configuring 2-26

server (AAA) dead actions, configuring 2-26

service-policy command (policy-map class) 2-471

session classification, defining 2-29

set the redundancy mode 2-358

sfp connector, selecting the connector 2-357

shape command 2-490

show ancp multicast 2-498

show authentication interface command 2-500

show authentication registration command 2-500

show authentication sessions command 2-500

show commands

filtering parameters 1-7

searching and filtering 1-6

show platform commands 1-11

show energywise command 2-537

show mab command 2-657

show nmsp command 2-686

Simple Network Management Protocol

See SNMP

single-character patterns

special characters 1-7

single-host, setting 2-29

slaveslot0

displaying information on the standby supervisor 2-736

slot0

displaying information about the system 2-738

SNMP

debugging spanning tree activities 2-131

ifIndex persistence

clearing SNMP ifIndex commands 2-773

compress SNMP ifIndex table format 2-780

enabling globally 2-779

informs

enabling 2-777

traps

configuring to send when storm occurs 2-818

enabling 2-777

mac-notification

adding     1

removing     1

snmp ifindex persist command 2-775

SPAN commands

configuring a SPAN session to monitor 2-360

displaying SPAN session information 2-750, 2-820

SPAN enhancements

displaying status 2-684

Spanning Tree Protocol

See STP

SPAN session

displaying session information 2-684

filter ACLs 2-360

specify encap type 2-360

turn off host learning based on ingress packets 2-360

special characters

anchoring, table 1-10

SSO 2-358

standard desktop

enabling Cisco-recommended features 2-334

standard desktop and Cisco IP phone

enabling Cisco-recommended features 2-336

sticky address, configuring 2-395

sticky-ARP

disabling on PVLANs 2-276

enabling on PVLANs 2-276

sticky port

deleting 2-92

enabling security 2-845

storm control

disabling suppression mode 2-544

displaying settings 2-748

enabling 2-818

enabling broadcast 2-818, 2-820

enabling multicast 2-818, 2-820

enabling suppression mode 2-544

enabling timer to recover from error disable 2-200

enabling unicast 2-818, 2-820

multicast, enabling 2-820

setting high and low levels 2-818

setting suppression level 2-544

STP

configuring link type for a port 2-790

configuring tunneling encapsulation rate 2-311

debugging all activities 2-131

debugging spanning tree activities 2-131

debugging spanning tree BackboneFast events 2-133

debugging spanning tree UplinkFast 2-136

detecting misconfiguration 2-787

displaying active interfaces only 2-740

displaying BackboneFast status 2-740

displaying bridge status and configuration 2-740

displaying spanning tree debug messages 2-131

displaying summary of interface information 2-740

enabling BPDU filtering by default on all PortFast ports 2-806

enabling BPDU filtering on an interface 2-783

enabling BPDU guard by default on all PortFast ports 2-808

enabling BPDU guard on an interface 2-785

enabling extended system ID 2-788

enabling loop guard as a default on all ports 2-791

enabling PortFast by default on all access ports 2-809

enabling PortFast mode 2-804

enabling protocol tunneling for 2-306

enabling root guard 2-789

enabling spanning tree BackboneFast 2-782

enabling spanning tree on a per VLAN basis 2-813

enabling spanning tree UplinkFast 2-811

setting an interface priority 2-810

setting drop threshold for 2-309

setting pathcost 2-786

setting the default pathcost calculation method 2-803

subinterface configuration mode, summary 1-6

subscribe-to-alert-group inventory command 2-829

SVI

creating a Layer 3 interface on a VLAN 2-220

switching characteristics

excluding from link-up calculation 2-837

modifying 2-837

returning to interfaces

capture function 2-837

switchport interfaces

displaying status of Layer 3 port 2-576

displaying status of native VLAN tagging 2-576

switchport private-vlan trunk allowed vlan command 2-857

switchport trunk command 2-861

switch shim

debugging 2-134

disabling debugging 2-134

switch to router connection

enabling Cisco-recommended features 2-338

switch to switch connection

enabling Cisco-recommended features 2-340

switch virtual interface

See SVI

sw-vlan 2-137

system prompts 1-5

T

Tab key

command completion 1-1

tables

characters with special meaning 1-7

mac access-list extended subcommands 2-324

multipliers 1-9

relationship between duplex and speed commands 2-816

show cable-diagnostics tdr command output fields 2-510

show cdp neighbors detail field descriptions 2-518

show cdp neighbors field descriptions 2-517

show ip dhcp snooping command output 2-501, 2-657

show ip interface field descriptions 2-611

show policy-map control-plane field descriptions 2-694

show vlan command output fields 2-766

show vtp command output fields 2-771

special characters 1-9

special characters used for anchoring 1-10

speed command options 2-351, 2-816

valid interface types 2-215

TAC

displaying information useful to TAC 2-752

TCAM

debugging spanning tree activities 2-131

TDR

displaying cable diagnostic test results 2-509

test condition of copper cables 2-867

temperature readings

displaying information 2-541

timer information 2-545

traceroute mac command 2-869

traffic monitor

display status 2-657

traffic shaping

enable on an interface 2-492

traps, enabling 2-777

trunk interfaces

displaying trunk interfaces information 2-583

trust configuration, setting on an interface 2-415, 2-416

trust state

setting 2-227

tunnel ports

displaying information about Layer 2 protocol 2-651

TX queues

allocating bandwidth 2-877

returning to default values 2-877

setting priority to high 2-877

specifying traffic rate 2-877

U

UDLD

displaying administrative and operational status 2-754

enabling by default on all fiber interfaces 2-879

enabling on an individual interface 2-881

preventing a fiber interface from being enabled 2-881

resetting all shutdown ports 2-883

setting the message timer 2-879

unicast

counters 2-101

Unidirectional Link Detection

See UDLD

unidirection port control, changing from bidirectional 2-23

unknown multicast traffic, preventing 2-839

unknown unicast traffic, preventing 2-839

user EXEC mode, summary 1-5

username

setting password and privilege level 2-885

V

VACLs

access-group mode 2-6

applying VLAN access maps 2-900

displaying VLAN access map information 2-760

specifying an action in a VLAN access map 2-13

specifying the match clause for a VLAN access-map sequence 2-346

using a VLAN filter 2-900

VLAN

applying an ARP ACL 2-221

configuring 2-889

configuring service policies 2-894

converting to RSPAN VLAN 2-464

displaying CEF information 2-590

displaying CEF next-hop information 2-590

displaying information on switch interfaces 2-601, 2-605

displaying information on VLAN switch interfaces 2-608

displaying information sorted by group IP address 2-601, 2-605

displaying IP address and version information 2-601, 2-605

displaying Layer 2 VLAN information 2-756

displaying statistical information 2-682

displaying VLAN information 2-758

enabling dynamic ARP inspection 2-230

enabling Explicit Host Tracking 2-261

enabling guest per-port 2-166

enabling guest VLAN supplicant 2-159, 2-167

entering VLAN configuration mode 2-894, 2-896

native frames

enabling tagging on all 802.1Q trunk ports 2-898

VLAN Access Control Lists

See VACLs

VLAN access map

See VACLs

vlan access-map command 2-892

VLAN database

resetting 2-466

VLAN debugging

limiting output 2-109

VLAN link-up calculation

excluding a switch port 2-837

VLAN manager

debugging 2-137

disabling debugging 2-137

IOS file system error tests

debugging 2-138

disabling debugging 2-138

VLAN Query Protocol

See VQP

VLAN query protocol (VQPC)

debugging 2-144

VLANs

clearing

counters 2-97

clearing hardware logic 2-73

configuring

internal allocation scheme 2-901

displaying

internal VLAN allocation information 2-763

RSPAN VLANs 2-767

entering VLAN configuration mode 2-896

VMPS

configuring servers 2-905

reconfirming dynamic VLAN assignments 2-144, 2-903

vmps reconfirm (privileged EXEC) command 2-903

voice VLANs

enabling 2-833

VoIP

configuring auto-QoS 2-42

VQP

per-server retry count 2-904

reconfirming dynamic VLAN assignments 2-144, 2-903

VTP

configuring the administrative domain name 2-909

configuring the device in VTP client mode 2-908

configuring the device in VTP server mode 2-912

configuring the device in VTP transparent mode 2-913

configuring tunnel encapsulation rate 2-311

creating a VTP domain password 2-910

displaying domain information 2-770

displaying statistics information 2-770

enabling protocol tunneling for 2-306

enabling pruning in the VLAN database 2-911

enabling VTP version 2 mode 2-914

modifying the VTP configuration storage file name 2-907

set drop threshold for 2-309

VTP protocol code

activating debug messages 2-141

deactivating debug messages 2-141

W

Webauth fallback, enabling 2-28