A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W -

Index

A

aaa accounting dot1x command 2-1

aaa authentication dot1x command 2-3

AAA methods 2-3

access control entries

See ACEs

access control lists

See ACLs

access groups

IP 2-133

MAC, displaying 2-482

matching for QoS classification 2-249

access list, IPv6 2-196

access mode 2-640

access ports 2-640

ACEs 2-77, 2-288

ACLs

as match criteria for QoS classes 2-249

deny 2-75

displaying 2-364

for non-IP protocols 2-227

IP 2-133

on Layer 2 interfaces 2-133

permit 2-286

action command 2-5

address aliasing 2-269

aggregate policers

applying 2-299

creating 2-295

displaying 2-517

QoS 2-297

aggregate-port learner 2-275

alarm-contact command 2-7

alarm-contact status, displaying 2-396

allowed VLANs 2-656

archive download-sw command 2-9

archive tar command 2-12

archive upload-sw command 2-15

arp (boot loader) command A-2

arp access-list command 2-17

attaching policy maps to interfaces 2-347

authorization state of controlled port 2-90

autonegotiation of duplex mode 2-101

B

backup interfaces

configuring 2-633

displaying 2-418

bandwidth, configuring for QoS 2-19

bandwidth command 2-19

boot (boot loader) command A-3

boot config-file command 2-22

boot enable-break command 2-23

boot helper command 2-24

boot helper-config file command 2-25

booting

Cisco IOS image 2-28

displaying environment variables 2-369

interrupting 2-23

manually 2-26

boot loader

accessing A-1

booting

Cisco IOS image A-3

helper image 2-24

directories

creating A-18

displaying a list of A-8

removing A-22

displaying

available commands A-13

memory heap utilization A-14

version A-29

environment variables

described A-23

displaying settings A-23

location of A-24

setting A-23

unsetting A-27

files

copying A-6

deleting A-7

displaying a list of A-8

displaying the contents of A-5, A-19, A-26

renaming A-20

file system

formatting A-11

initializing flash A-10

running a consistency check A-12

prompt A-1

resetting the system A-21

boot manual command 2-26

boot private-config-file command 2-27

boot system command 2-28

BPDU filtering, for spanning tree 2-578, 2-616

BPDU guard, for spanning tree 2-580, 2-616

broadcast storm control 2-626

bundling characteristics, UNI 2-109

burst bytes, in QoS policers 2-290, 2-291, 2-295

C

cat (boot loader) command A-5

CBWFQ, configuring 2-19

CDP, enabling protocol tunneling for 2-207

CFM 2-274

CFM as OAM protocol 2-274

channel-group command 2-29

channel-protocol command 2-33

child policy maps 2-349

class-based traffic shaping 2-362

class-based weighted fair queuing

See CBWFQ

class command 2-35

class-map command 2-37

class-map configuration mode 2-37

class maps

creating 2-37

defining the match criteria 2-250

displaying 2-373

matching in 2-37

class of service

See CoS

clear ip arp inspection log command 2-39

clear ip arp inspection statistics command 2-40

clear ipc command 2-43

clear ipv6 dhcp conflict command 2-44

clear l2protocol-tunnel counters command 2-45

clear lacp command 2-46

clear logging onboard command 2-47

clear mac address-table command 2-48, 2-49

clear pagp command 2-50, 2-54

clear policer cpu uni-eni counters command 2-51

clear port-security command 2-52

clear spanning-tree counters command 2-55

clear spanning-tree detected-protocols command 2-56

clear vmps statistics command 2-58

command modes defined 1-1

committed information rate in QoS policers 2-289, 2-295

configuration files

password recovery disable considerations A-1

specifying the name 2-22, 2-27

configuring multiple interfaces 2-129

conform-action command 2-59

control-plane policer 2-51

control-plane policer information, displaying 2-518

control-plane security 2-301

control plane statistics, clearing 2-51

copy (boot loader) command A-6

copy logging onboard module command 2-61

CoS

as match criteria for QoS groups 2-250

for QoS classification 2-351

setting value in policy maps 2-351

CoS value, assigning to Layer 2 protocol packets 2-210

CPU ASIC statistics, displaying 2-374

CPU protection policers, displaying C-26

cpu traffic qos 2-63

D

DC power supply 2-310

debug backup command B-2

debug dot1x command B-3

debug etherchannel command B-4

debug interface command B-9

debug ip dhcp snooping command B-7

debug ip igmp filter command B-10

debug ip igmp max-groups command B-11

debug ip igmp snooping command B-12

debug ip verify source packet command B-8

debug lacp command B-13

debug mac-notification command B-14

debug matm command B-15

debug matm move update command B-16

debug monitor command B-17

debug mvrdbg command B-18

debug nvram command B-19

debug pagp command B-20

debug platform acl command B-21

debug platform backup interface command B-23

debug platform cfm command B-22

debug platform cpu-queues command B-24

debug platform dot1x command B-26

debug platform etherchannel command B-27

debug platform forw-tcam command B-28

debug platform ip arp inspection command B-29

debug platform ipc command B-38

debug platform ip dhcp command B-30

debug platform ip igmp snooping command B-31

debug platform ip multicast command B-33

debug platform ip source-guard command B-35

debug platform led command B-39

debug platform matm command B-40

debug platform messaging application command B-41

debug platform phy command B-42

debug platform pm command B-44

debug platform policer cpu uni-eni command B-46

debug platform port-asic command B-47

debug platform port-security command B-48

debug platform qos-acl-tcam command B-49

debug platform qos-manager command B-50

debug platform remote-commands command B-51

debug platform rep command B-52

debug platform resource-manager command B-53

debug platform snmp command B-54

debug platform span command B-55

debug platform supervisor-asic command B-56

debug platform sw-bridge command B-57

debug platform tcam command B-58

debug platform udld command B-60

debug platform vlan command B-61

debug pm command B-62

debug port-security command B-64

debug qos-manager command B-65

debug spanning-tree bpdu command B-68

debug spanning-tree bpdu-opt command B-69

debug spanning-tree command B-66

debug spanning-tree mstp command B-70

debug spanning-tree switch command B-72

debug sw-vlan command B-74

debug sw-vlan ifs command B-75

debug sw-vlan notification command B-76

debug udld command B-78

debug vqpc command B-80

default policer configuration

NNIs C-29

UNIs C-27

define interface-range command 2-65

delete (boot loader) command A-7

delete command 2-67

deny (ARP access-list configuration) command 2-68

deny (IPv6) command 2-70

deny command 2-75

detect mechanism, causes 2-102

DHCP snooping

accepting untrusted packets from edge switch 2-157

enabling

on a VLAN 2-163

option 82 2-155, 2-157

trust on an interface 2-161

error recovery timer 2-104

rate limiting 2-160

DHCP snooping binding database

binding file, configuring 2-153

bindings

adding 2-151

deleting 2-151

displaying 2-439

clearing database agent statistics 2-41

database agent, configuring 2-153

displaying

binding entries 2-439

database agent status 2-441, 2-443

renewing 2-325

diagnostic monitor command 2-78

diagnostic schedule test command 2-80

diagnostic start test command 2-82

differentiated service code point

See DSCP

Digital Optical Monitoring

see DoM

dir (boot loader) command A-8

directories, deleting 2-67

DoM

displaying supported transceivers 2-430

domains, CFM 2-274

dot1x default command 2-84

dot1x host-mode command 2-85

dot1x initialize command 2-87

dot1x max-req command 2-88, 2-89

dot1x port-control command 2-90

dot1x re-authenticate command 2-92

dot1x reauthentication command 2-93

dot1x system-auth-control command 2-94

dot1x test eapol-capable command 2-95

dot1x test timeout command 2-96

dot1x timeout command 2-97

dot1x violation-mode command 2-99

dropping packets, with ACL matches 2-5

drop threshold, Layer 2 protocol tunneling 2-207

DSCP

as match criteria for QoS groups 2-251, 2-257

for QoS traffic marking 2-353

setting in policy maps 2-353

dual IPv4 and IPv6 templates 2-281

dual-purpose uplink ports, selecting the type 2-262

duplex command 2-100

dynamic-access ports

configuring 2-631

restrictions 2-632

dynamic ARP inspection

ARP ACLs

apply to a VLAN 2-138

define 2-17

deny packets 2-68

display 2-368

permit packets 2-279

clear

log buffer 2-39

statistics 2-40

display

ARP ACLs 2-368

configuration and operating state 2-434

log buffer 2-434

statistics 2-434

trust state and rate limit 2-434

enable per VLAN 2-147

error detection for 2-102

error recovery timer 2-104

log buffer

clear 2-39

configure 2-142

display 2-434

rate-limit incoming ARP packets 2-140

statistics

clear 2-40

display 2-434

trusted interface state 2-144

type of packet logged 2-148

validation checks 2-145

Dynamic Host Configuration Protocol (DHCP)

See DHCP snooping

E

EAP-request/identity frame

maximum number to send 2-89

response time before retransmitting 2-97

E-LMI

enabling 2-107

mapping 2-109

environment variables, displaying 2-369

errdisable detect cause command 2-102

errdisable recovery command 2-104

error conditions, displaying 2-400

error disable detection 2-102

error-disabled interfaces, displaying 2-418

EtherChannel

assigning Ethernet interface to channel group 2-29

creating port-channel logical interface 2-127

debug EtherChannel/PAgP, display B-4

debug platform-specific events, display B-27

displaying 2-404

enabling Layer 2 protocol tunneling for

LACP 2-208

PAgP 2-208

UDLD 2-208

interface information, displaying 2-418

LACP

clearing channel-group information 2-46

debug messages, display B-13

displaying 2-469

modes 2-29

port priority for hot-standby ports 2-211

restricting a protocol 2-33

system priority 2-213

load-distribution methods 2-306

EtherChannel (continued)

PAgP

aggregate-port learner 2-275

clearing channel-group information 2-50

debug messages, display B-20

displaying 2-513

error detection for 2-102

error recovery timer 2-104

learn method 2-275

modes 2-29

physical-port learner 2-275

priority of interface for transmitted traffic 2-277

ethermet lmi ce command 2-107

Ethernet controller, internal register display 2-376

ethernet evc command 2-106

ethernet lim global command 2-107

ethernet lmi ce-vlan map command 2-109, 2-116

ethernet lmi command 2-107

Ethernet Local Management Interface

See E-LMI

ethernet loopback interface configuration command 2-111

ethernet loopback privileged EXEC command 2-114

Ethernet service

debugging B-5

displaying 2-409

Ethernet service instance 2-343

Ethernet service interfaces 2-412

Ethernet statistics, collecting 2-339

Ethernet UNI configuration 2-118

ethernet uni id command 2-120

Ethernet virtual connections

See EVCs

EVC configuration mode 2-106

EVCs 2-106

and VLANs 2-118

service instances 2-343

UNI counts 2-678

EVC service

point-to-multipoint 2-678

point-to-point 2-678

exceed-action command 2-121

extended-range VLANs

and allowed VLAN list 2-656

configuring 2-684

extended system ID for STP 2-586

external alarms, configuring 2-7

F

failure logging data

clearing 2-47

copying 2-61

fan information, displaying 2-396

files, deleting 2-67

flash_init (boot loader) command A-10

Flex Links

configuring 2-633

configuring preferred VLAN 2-635

displaying 2-418

flowcontrol command 2-123

format (boot loader) command A-11

forwarding packets, with ACL matches 2-5

forwarding results, display C-8

frame forwarding information, displaying C-8

front-end controller counter and status information C-10

fsck (boot loader) command A-12

G

global configuration mode 1-2, 1-3

H

hardware ACL statistics 2-364

health-monitoring diagnostic testing 2-78

help (boot loader) command A-13

host connection, port configuration 2-639

host ports, private VLANs 2-643

hw-module module logging onboard command 2-125

I

IEEE 802.1ag Connectivity Fault Management

See CFM

IEEE 802.1Q trunk ports and native VLANs 2-689

IEEE 802.1Q tunnel ports

configuring 2-640

displaying 2-392

limitations 2-641

IEEE 802.1x

and switchport modes 2-641

violation error recovery 2-104

See also port-based authentication

IGMP filters

applying 2-166

debug messages, display B-10

IGMP groups, setting maximum 2-168

IGMP maximum groups, debugging B-11

IGMP profiles

creating 2-170

displaying 2-446

IGMP snooping

adding ports as a static member of a group 2-185

displaying 2-447, 2-451, 2-453

enabling 2-172

enabling the configurable-leave timer 2-174

enabling the Immediate-Leave feature 2-182

flooding query count 2-180

interface topology change notification behavior 2-181

multicast table 2-449

IGMP snooping (continued)

querier 2-176

query solicitation 2-180

report suppression 2-178

switch topology change notification behavior 2-180

images

See software images

Immediate-Leave feature, MVR 2-271

immediate-leave processing 2-182

input policy maps

and ACL classification 2-249

and aggregate policers 2-297

commands not supported in 2-304

configuration guidelines 2-304

interface command 2-131

interface configuration mode 1-2, 1-4

interface port-channel command 2-127

interface range command 2-129

interface-range macros 2-63, 2-65

interfaces

assigning Ethernet interface to channel group 2-29

configuring 2-100

configuring multiple 2-129

creating port-channel logical 2-127

debug messages, display B-9

disabling 2-563

displaying the MAC address table 2-494

restarting 2-563

interface speed, configuring 2-624

internal registers, displaying 2-376, 2-383, 2-387

Internet Group Management Protocol

See IGMP

invalid GBIC

error detection for 2-102

error recovery timer 2-104

ip address command 2-136

IP addresses, setting 2-136

IP address matching 2-247

ip arp inspection filter vlan command 2-138

ip arp inspection limit command 2-140

ip arp inspection log-buffer command 2-142

ip arp inspection trust command 2-144

ip arp inspection validate command 2-145

ip arp inspection vlan command 2-147

ip arp inspection vlan logging command 2-148

IP DHCP snooping

See DHCP snooping

ip dhcp snooping binding command 2-151

ip dhcp snooping command 2-150

ip dhcp snooping database command 2-153

ip dhcp snooping information option allow-untrusted command 2-157

ip dhcp snooping information option command 2-155

ip dhcp snooping information option format remote-id command 2-159

ip dhcp snooping limit rate command 2-160

ip dhcp snooping trust command 2-161

ip dhcp snooping verify command 2-162

ip dhcp snooping vlan command 2-163

ip dhcp snooping vlan information option format-type circuit-id string command 2-164

ip igmp filter command 2-166

ip igmp max-groups command 2-168, 2-191, 2-193

ip igmp profile command 2-170

ip igmp snooping command 2-172

ip igmp snooping last-member-query-interval command 2-174

ip igmp snooping querier command 2-176

ip igmp snooping report-suppression command 2-178

ip igmp snooping tcn command 2-180

ip igmp snooping tcn flood command 2-181

ip igmp snooping vlan immediate-leave command 2-182

ip igmp snooping vlan mrouter command 2-183

ip igmp snooping vlan static command 2-185

IP multicast addresses 2-268

IP precedence, as match criteria for QoS groups 2-253

ip source binding command 2-187

IP source guard

disabling 2-195

displaying

binding entries 2-455

configuration 2-456

enabling 2-195

static IP source bindings 2-187

IP source guard, displaying dynamic binding entries 2-439

ip ssh command 2-189

IPv6 access list, deny conditions 2-70

ipv6 access-list command 2-196

ipv6 address dhcp command 2-198

ipv6 dhcp client request vendor command 2-199

ipv6 dhcp ping packets command 2-200

ipv6 dhcp pool command 2-201

ipv6 dhcp server command 2-203

IPv6 SDM template 2-340

ipv6 traffic-filter command 2-205

ip verify source command 2-195

J

jumbo frames

See MTU

L

l2protocol-tunnel command 2-207

l2protocol-tunnel cos command 2-210

LACP

See EtherChannel

lacp port-priority command 2-211

lacp system-priority command 2-213

Layer 2 mode, enabling 2-629

Layer 2 protocol ports, displaying 2-467

Layer 2 protocol-tunnel

error detection for 2-102

error recovery timer 2-104

Layer 2 protocol tunnel counters 2-45

Layer 2 protocol tunneling error recovery 2-208

Layer 2 traceroute

IP addresses 2-671

MAC addresses 2-668

Layer 3 mode, enabling 2-629

line configuration mode 1-2, 1-4

Link Aggregation Control Protocol

See EtherChannel

link flap

error detection for 2-102

error recovery timer 2-104

link state group command 2-215

link state track command 2-217

load-distribution methods for EtherChannel 2-306

location (global configuration) command 2-218

location (interface configuration) command 2-220

logging event command 2-222

logging file command 2-223

logical interface 2-127

loopback error

detection for 2-102

recovery timer 2-104

loop guard, for spanning tree 2-588, 2-592

M

mac access-group command 2-225

MAC access-groups, displaying 2-482

MAC access list configuration mode 2-227

mac access-list extended command 2-227

MAC access lists 2-75

MAC addresses

disabling MAC address learning per VLAN 2-230

displaying

aging time 2-488

all 2-486

dynamic 2-492

MAC address-table move updates 2-497

notification settings 2-496, 2-499

number of addresses in a VLAN 2-490

per interface 2-494

per VLAN 2-503

static 2-501

static and dynamic entries 2-484

dynamic

aging time 2-229

deleting 2-48

displaying 2-492

enabling MAC address notification 2-234

enabling MAC address-table move update 2-232

matching 2-247

static

adding and removing 2-236

displaying 2-501

dropping on an interface 2-237

tables 2-486

MAC address notification, debugging B-14

mac address-table aging-time 2-225, 2-247

mac address-table aging-time command 2-229

mac address-table learning command 2-230

mac address-table move update command 2-232

mac address-table notification command 2-234

mac address-table static command 2-236

mac address-table static drop command 2-237

macro description command 2-241

macro global command 2-242

macro global description command 2-244

macro name command 2-245

macros

adding a description 2-241

adding a global description 2-244

applying 2-242

creating 2-245

displaying 2-515

interface range 2-65, 2-129

specifying parameter values 2-242

tracing 2-242

maintenance end points 2-678

mapping tables, QoS 2-664

maps

class

creating 2-37

VLAN

creating 2-687

defining 2-247

displaying 2-557

match access-group command 2-249

match cos command 2-250

match ip dscp command 2-251

match ip precedence command 2-253

match qos-group command 2-255

match vlan command 2-257

maximum transmission unit

See MTU

mdix auto command 2-260

ME 34000EG-2CS switch policers C-26

ME 3400E-24TS switch policers C-26, C-27

ME 3400EG-12CS switch policers C-26

media-type command 2-262

memory (boot loader) command A-14

mgmt_clr (boot loader) command A-15

mgmt_init (boot loader) command A-16, A-17

mkdir (boot loader) command A-18

mode, MVR 2-268

modes, commands 1-1

monitor session command 2-264

more (boot loader) command A-19

MSTP

displaying 2-537

interoperability 2-56

link type 2-590

MST region

aborting changes 2-596

applying changes 2-596

configuration name 2-596

configuration revision number 2-597

current or pending display 2-597

displaying 2-537

MST configuration mode 2-596

VLANs-to-instance mapping 2-596

path cost 2-598

protocol mode 2-594

restart protocol migration process 2-56

root port

loop guard 2-588

preventing from becoming designated 2-588

restricting which can be root 2-588

root guard 2-588

root switch

affects of extended system ID 2-586

hello-time 2-601, 2-612

interval between BDPU messages 2-603

interval between hello BPDU messages 2-601, 2-612

max-age 2-603

maximum hop count before discarding BPDU 2-605

port priority for selection of 2-607

primary or secondary 2-612

switch priority 2-610

MSTP (continued)

state changes

blocking to forwarding state 2-619

enabling BPDU filtering 2-578, 2-616

enabling BPDU guard 2-580, 2-616

enabling Port Fast 2-616, 2-619

forward-delay time 2-600

length of listening and learning states 2-600

rapid transition to forwarding 2-590

shutting down Port Fast-enabled ports 2-616

state information display 2-536

MTU

configuring size 2-662

displaying global setting 2-544

multicast group address, MVR 2-271

multicast groups, MVR 2-269

multicast router learning method 2-183

multicast router ports, configuring 2-183

multicast storm control 2-626

multicast VLAN, MVR 2-268

multicast VLAN registration

See MVR

multiple hosts on authorized port 2-85

Multiple Spanning Tree Protocol

See MSTP

multiplexing, UNI 2-118

MVR

and address aliasing 2-269

configuring 2-268

configuring interfaces 2-271

debug messages, display B-18

displaying 2-507

displaying interface information 2-509

members, displaying 2-511

mvr (global configuration) command 2-268

mvr (interface configuration) command 2-271

mvr vlan group command 2-272

N

native VLANs 2-656

native VLAN tagging 2-689

network node interface 2-308

nonegotiate, speed 2-624, 2-625

non-IP protocols

denying 2-75

forwarding 2-286

non-IP traffic access lists 2-227

non-IP traffic forwarding

denying 2-75

permitting 2-286

normal-range VLANs 2-684

no vlan command 2-684

O

OAM PDUs 2-116

OAM protocol 2-274

oam protocol cfm svlan command 2-274

on-board failure logging, displaying 2-478

on-board failure logging, enabling 2-125

online diagnostics

enabling

scheduling 2-80

global configuration mode

clearing test-based testing schedule 2-80

setting test-based testing 2-80

setting up test-based testing 2-80

removing scheduling 2-80

scheduled switchover

disabling 2-80

enabling 2-80

setting test interval 2-80

starting testing 2-82

online diagnostic tests, displaying results 2-388

online diagnostic tests, starting 2-82

operation, administration, and maintenance protocol

See OAM

output policy maps

and QoS group classification 2-255

and traffic shaping 2-362

commands not supported in 2-304

configuration guidelines 2-304

priority in 2-313

queue limit in 2-320

P

PAgP

See EtherChannel

pagp learn-method command 2-275

pagp port-priority command 2-277

parent policy maps 2-349

password-recovery mechanism, enabling and disabling 2-345

permit (ARP access-list configuration) command 2-279

permit (IPv6) command 2-281

permit command 2-286

per-VLAN spanning-tree plus

See STP

physical-port learner 2-275

PID, displaying 2-433

PIM-DVMRP, as multicast router learning method 2-183

police

multiple conform actions for a class 2-59

multiple exceed actions for a class 2-121

multiple violate actions for a class 2-682

with priority 2-289

police aggregate command 2-299

police command 2-289

policer aggregate command 2-295

policer configuration

default for NNIs C-29

default for UNIs C-27

policer cpu uni command 2-301

policers

aggregate 2-295, 2-299

for CPU protection 2-301

individual 2-289

policy-map class, configuring multiple actions 2-59, 2-121, 2-682

policy-map class configuration mode 2-35

policy-map class police configuration mode 2-59, 2-293

policy-map command 2-303

policy-map configuration mode 2-303

policy maps

and CoS classification 2-250

and DSCP classification 2-251

and IP precedence classification 2-253

and policing 2-292

applying 2-347

applying to an interface 2-304, 2-347, 2-359

child 2-349

creating 2-303

displaying 2-521

hierarchical 2-349

parent 2-349

policers

for a single class 2-289

for multiple classes 2-295, 2-299, 2-301, 2-349

setting priority 2-312

setting QoS group identifier 2-357

traffic classification, defining 2-35

traffic marking

setting CoS values 2-351

setting DSCP values 2-353

setting IP precedence values 2-355

Port Aggregation Protocol

See EtherChannel

port-based authentication

AAA method list 2-3

configuring violation modes 2-99

debug messages, display B-3

enabling 802.1x

port-based authentication (continued)

globally 2-94

per interface 2-90

host modes 2-85

IEEE 802.1x AAA accounting methods 2-1

initialize an interface 2-87, 2-96

manual control of authorization state 2-90

multiple hosts on authorized port 2-85

periodic re-authentication

enabling 2-93

time between attempts 2-97

quiet period between failed authentication exchanges 2-97

re-authenticating 802.1x-enabled ports 2-92

resetting configurable 802.1x parameters 2-84

switch-to-authentication server retransmission time 2-97

switch-to-client frame-retransmission number2-88to 2-89

switch-to-client retransmission time 2-97

test for IEEE 802.1x readiness 2-95

port-channel load-balance command 2-306

Port Fast, for spanning tree 2-619

port ranges, defining 2-47, 2-61, 2-63, 2-65

ports, debugging B-62

ports, protected 2-654

port security

aging 2-650

debug messages, display B-64

enabling 2-646

violation error recovery 2-104

port shaping 2-363

port-type command 2-308

port types, MVR 2-271

power information, displaying 2-396

power-supply alarm indications, configruing 2-310

power-supply dual command 2-310

power-supply status, displaying 2-396

precedence

for QoS traffic marking 2-355

setting in policy maps 2-355

priority command 2-312

priority queuing, QoS 2-312

priority with police, QoS 2-312

private-vlan command 2-315

private-vlan mapping command 2-318

private VLANs

association 2-652

configuring 2-315

configuring ports 2-643

displaying 2-552

host ports 2-643

mapping

configuring 2-652

displaying 2-418

promiscuous ports 2-643

privileged EXEC mode 1-2, 1-3

product identification information, displaying 2-433

promiscuous ports, private VLANs 2-643

PVST+

See STP

Q

QoS

aggregate policers

applying 2-299

creating 2-295

displaying 2-517

class maps

creating 2-37

defining the match criteria 2-250

displaying 2-373

conform actions, configuring 2-60

displaying statistics for 2-521, C-35

exceed actions, configuring 2-122

QoS (continued)

policy maps

applying an aggregate policer 2-295, 2-299, 2-301, 2-349

applying to an interface 2-347, 2-359

creating 2-303

defining policers 2-289

displaying policy maps 2-521

setting CoS values 2-351

setting DSCP values 2-353

setting IP precedence values 2-355

setting QoS group identifier 2-357

traffic classifications 2-35

table maps

configuring 2-664

displaying 2-545

violate actions, configuring 2-683

QoS groups

as match criteria 2-255

for QoS traffic classification 2-357

setting in policy maps 2-357

QoS match criteria

ACLs 2-249

CoS value 2-250

DSCP value 2-251, 2-257

precedence value 2-253

QoS group number 2-255

quality of service

See QoS

querytime, MVR 2-268

queue-limit command 2-320

R

rapid per-VLAN spanning-tree plus

See STP

rapid PVST+

See STP

re-authenticating 802.1x-enabled ports 2-92

re-authentication

periodic 2-93

time between attempts 2-97

receiver ports, MVR 2-271

receiving flow-control packets 2-123

recovery mechanism

causes 2-104

display 2-371, 2-398, 2-402

timer interval 2-105

remote-span command 2-323

Remote Switched Port Analyzer

See RSPAN

rename (boot loader) command A-20

renew ip dhcp snooping database command 2-325

rep admin vlan command 2-326

rep block port command 2-327

rep lsl-age-timer command 2-330

rep preempt delay command 2-331

rep preempt segment command 2-333

rep segment command 2-334

rep stcn command 2-337

reset (boot loader) command A-21

resource templates, displaying 2-534

rmdir (boot loader) command A-22

rmon collection stats command 2-339

root guard, for spanning tree 2-588

routed ports

IP addresses on 2-137

number supported 2-137

RSPAN

configuring 2-264

displaying 2-505

filter RSPAN traffic 2-264

remote-span command 2-323

sessions

add interfaces to 2-264

displaying 2-505

start new 2-264

S

scheduled switchover

disabling 2-80

enabling 2-80

scheduling diagnostic tests 2-80

sdm prefer command 2-340

SDM templates

allowed resources 2-341

displaying 2-534

dual IPv4 and IPv6 2-340

secure ports, limitations 2-648

sending flow-control packets 2-123

service instance command 2-343

service instances, displaying 2-410

service password-recovery command 2-345

service policy (policy-map class configuration) command 2-349

service-policy interface configuration command 2-347

service-policy policy-map class configuration command 2-349

set (boot loader) command A-23

set cos command 2-351

set dscp command 2-353

set precedence command 2-355

set qos-group command 2-357

setup command 2-359

SFPs, displaying information about 2-433

shape average command 2-362

show access-lists command 2-364

show aggregate-policer command 2-545

show archive status command 2-367

show arp access-list command 2-368

show boot command 2-369

show class-map command 2-373

show controllers cpu-interface command 2-374

show controllers ethernet-controller command 2-376

show controllers tcam command 2-383

show controllers utilization command 2-385

show controller utilization command 2-385

show cpu traffic qos 2-387

show diagnostic command 2-388

show dot1q-tunnel command 2-392

show dot1x command 2-393

show env command 2-396

show errdisable detect command 2-398

show errdisable flap-values command 2-400

show errdisable recovery command 2-402

show etherchannel command 2-404

show ethernet loopback command 2-407

show ethernet service evc command 2-409

show ethernet service instance command 2-410

show ethernet service interface command 2-412

show flowcontrol command 2-414

show idprom command 2-416

show interface rep command 2-428

show interfaces command 2-418

show interfaces counters command 2-426

show interfaces rep command 2-428

show interface transceivers command 2-430

show inventory command 2-433

show ip arp inspection command 2-434

show ipc command 2-458

show ip dhcp snooping binding command 2-439

show ip dhcp snooping command 2-438

show ip dhcp snooping database command 2-441, 2-443

show ip igmp profile command 2-446

show ip igmp snooping command 2-447

show ip igmp snooping command querier detail 2-453

show ip igmp snooping groups command 2-449

show ip igmp snooping mrouter command 2-451

show ip igmp snooping querier command 2-453

show ip igmp snooping querier detail command 2-453

show ip source binding command 2-455

show ipv6 access-list command 2-462

show ipv6 dhcp conflict command 2-464

show ipv6 route updated 2-465

show ipv6 route updated command 2-465

show ip verify source command 2-456

show l2protocol-tunnel command 2-467

show lacp command 2-469

show link state group command 2-473

show location 2-475

show location command 2-475

show logging onboard command 2-478

show mac access-group command 2-482

show mac address-table address command 2-486

show mac address-table aging time command 2-488

show mac address-table command 2-484

show mac address-table count command 2-490

show mac address-table dynamic command 2-492

show mac address-table interface command 2-494

show mac address-table learning command 2-496

show mac address-table move update command 2-497

show mac address-table notification command 2-49, 2-499, B-16

show mac address-table static command 2-501

show mac address-table vlan command 2-503

show monitor command 2-505

show mvr command 2-507

show mvr interface command 2-509

show mvr members command 2-511

show pagp command 2-513

show parser macro command 2-515

show platform acl command C-2

show platform backup interface command C-3

show platform cfm command C-4

show platform configuration command C-5

show platform dl command C-6

show platform etherchannel command C-7

show platform forward command C-8

show platform frontend-controller command C-10

show platform igmp snooping command C-11

show platform ipc trace command C-16

show platform ip multicast command C-13

show platform ip unicast command C-14

show platform ipv6 unicast command C-17

show platform l2pt dm command C-19

show platform layer4op command C-20, C-42

show platform mac-address-table command C-21

show platform messaging command C-22

show platform monitor command C-23

show platform mvr table command C-24

show platform pm command C-25

show platform policer cpu command C-26

show platform port-asic command C-30

show platform port-security command C-34

show platform qos command C-35

show platform resource-manager command C-38

show platform snmp counters command C-40

show platform spanning-tree synchronization command C-41

show platform stp-instance command C-43

show platform tcam command C-44

show platform vlan command C-47

show platform vlan mapping command C-48

show policer aggregate command 2-517

show policer cpu uni-eni command 2-518

show policy-map command 2-521

show policy-map interface output fields 2-524

show port security command 2-526

show port-type command 2-529

show rep topology command 2-531

show sdm prefer command 2-534

show spanning-tree command 2-536

show storm-control command 2-542

show system mtu command 2-544

show udld command 2-547

show version command 2-550

show vlan access-map command 2-557

show vlan command 2-552

show vlan command, fields 2-554

show vlan filter command 2-558

show vlan mapping command 2-559

show vmps command 2-561

shutdown command 2-563

shutdown threshold, Layer 2 protocol tunneling 2-207

shutdown vlan command 2-564

SNMP host, specifying 2-570

SNMP informs, enabling the sending of 2-566

snmp mib rep trap-rate command 2-565

snmp-server enable traps command 2-566

snmp-server host command 2-570

snmp trap mac-notification command 2-574

SNMP traps

enabling MAC address notification trap 2-574

enabling the MAC address notification feature 2-234

enabling the sending of 2-566

software images

deleting 2-67

downloading 2-9

upgrading 2-9

uploading 2-15

software version, displaying 2-550

source ports, MVR 2-271

SPAN

configuring 2-264

debug messages, display B-17

displaying 2-505

filter SPAN traffic 2-264

sessions

add interfaces to 2-264

displaying 2-505

start new 2-264

spanning-tree bpdufilter command 2-576, 2-578

spanning-tree bpduguard command 2-580

spanning-tree cost command 2-582

spanning-tree etherchannel command 2-584

spanning-tree extend system-id command 2-586

spanning-tree guard command 2-588

spanning-tree link-type command 2-590

spanning-tree loopguard default command 2-592

spanning-tree mode command 2-594

spanning-tree mst configuration command 2-596

spanning-tree mst cost command 2-598

spanning-tree mst forward-time command 2-600

spanning-tree mst hello-time command 2-601

spanning-tree mst max-age command 2-603

spanning-tree mst max-hops command 2-605

spanning-tree mst port-priority command 2-607

spanning-tree mst pre-standard command 2-609

spanning-tree mst priority command 2-610

spanning-tree mst root command 2-612

spanning-tree portfast (global configuration) command 2-616

spanning-tree portfast (interface configuration) command 2-619

spanning-tree port-priority command 2-614

Spanning Tree Protocol

See STP

spanning-tree vlan command 2-621

speed command 2-624

SSH, configuring version 2-189

static-access ports, configuring 2-631

statistics, Ethernet group 2-339

sticky learning, enabling 2-646

storm-control command 2-626

STP

counters, clearing 2-55

debug messages, display

MSTP B-70

optimized BPDUs handling B-69

spanning-tree activity B-66

switch shim B-72

transmitted and received BPDUs B-68

enabling on ENIs 2-576

enabling protocol tunneling for 2-207

EtherChannel misconfiguration 2-584

extended system ID 2-586

path cost 2-582

protocol modes 2-594

STP (continued)

root port

loop guard 2-588

preventing from becoming designated 2-588

restricting which can be root 2-588

root guard 2-588

root switch

affects of extended system ID 2-586, 2-622

hello-time 2-621

interval between BDPU messages 2-621

interval between hello BPDU messages 2-621

max-age 2-621

port priority for selection of 2-614

primary or secondary 2-621

switch priority 2-621

state changes

blocking to forwarding state 2-619

enabling BPDU filtering 2-578, 2-616

enabling BPDU guard 2-580, 2-616

enabling Port Fast 2-616, 2-619

enabling timer to recover from error state 2-104

forward-delay time 2-621

length of listening and learning states 2-621

shutting down Port Fast-enabled ports 2-616

state information display 2-536

VLAN options 2-610, 2-621

SVIs, creating 2-131

Switched Port Analyzer

See SPAN

switching characteristics

modifying 2-629

returning to interfaces 2-629

switchport access command 2-631

switchport backup interface command 2-633

switchport block command 2-637

switchport command 2-629

switchport host command 2-639

switchport mode command 2-640

switchport mode private-vlan command 2-643

switchport port-security aging command 2-650

switchport port-security command 2-646

switchport private-vlan command 2-652

switchport protected command 2-654

switchports, displaying 2-418

switchport trunk command 2-656

switchport vlan mapping command 2-658

system env temperature threshold yellow command 2-661

system message logging, save message to flash 2-223

system mtu command 2-662

system resource templates 2-340

T

table-map command 2-664

table-map configuration mode 2-664

table maps

configuring 2-664

displaying 2-545

QoS 2-664

tar files, creating, listing, and extracting 2-12

TDR, running 2-666

temperature information, displaying 2-396

temperature status, displaying 2-396

templates, system resources 2-340

test cable-diagnostics tdr command 2-666

traceroute mac command 2-668

traceroute mac ip command 2-671

traffic shaping, QoS 2-362

trunking, VLAN mode 2-640

trunk mode 2-640

trunk ports 2-640

tunnel ports, Layer 2 protocol, displaying 2-467

type (boot loader) command A-26

U

UDLD

aggressive mode 2-673, 2-675

debug messages, display B-78

enable globally 2-673

enable per interface 2-675

error recovery timer 2-104

message timer 2-673

normal mode 2-673, 2-675

reset a shutdown interface 2-677

status 2-547

udld command 2-673

udld port command 2-675

udld reset command 2-677

UNI

bundling and multiplexing 2-118

Ethernet 2-118

unicast storm control 2-626

uni count command 2-678

UniDirectional Link Detection

See UDLD

UNI ID, Ethernet 2-120

uni-vlan command 2-680

unknown multicast traffic, preventing 2-637

unknown unicast traffic, preventing 2-637

unset (boot loader) command A-27

upgrading

software images 2-9

monitoring status of 2-367

user EXEC mode 1-2

user network interface 2-308

V

version (boot loader) command A-29

violate-action command 2-682

vlan access-map command 2-687

VLAN access map configuration mode 2-687

VLAN access maps

actions 2-5

displaying 2-557

vlan command 2-684

VLAN configuration mode

commands 2-684

description 1-4

entering 2-684

summary 1-2

vlan dot1q tag native command 2-689

vlan filter command 2-691

VLAN filters, displaying 2-558

VLAN ID range 2-684

VLAN ID translation

See VLAN mapping

VLAN mapping

configuring 2-658

described 2-659

displaying 2-559

VLAN maps

applying 2-691

creating 2-687

defining 2-247

displaying 2-557

VLAN Query Protocol

See VQP

VLANs

adding 2-684

configuring 2-684

debug messages, display

activation of B-76

VLAN IOS file system error tests B-75

VLAN manager activity B-74

displaying configurations 2-552

extended-range 2-684

MAC addresses

displaying 2-503

number of 2-490

normal-range 2-684

VLANs (continued)

private 2-643

configuring 2-315

displaying 2-552

See also private VLANs

restarting 2-564

saving the configuration 2-684

shutting down 2-564

suspending 2-564

VMPS

configuring servers 2-696

displaying 2-561

error recovery timer 2-105

reconfirming dynamic VLAN assignments 2-693

vmps reconfirm (global configuration) command 2-694

vmps reconfirm (privileged EXEC) command 2-693

vmps retry command 2-695

vmps server command 2-696

VQP

and dynamic-access ports 2-632

clearing client statistics 2-58

displaying information 2-561

per-server retry count 2-695

reconfirmation interval 2-694

reconfirming dynamic VLAN assignments 2-693

VTP, enabling tunneling for 2-207

W

Weighted Tail Drop

See WTD

WTD, queue-limit command 2-320