Cisco ME 3400 Ethernet Access Switch Command Reference Cisco IOS Release 12.2(50)SE March 2009 Americas Headquarters Cisco Systems, Inc 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL-9640-07 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system All rights reserved Copyright © 1981, Regents of the University of California NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc and/or its affiliates in the United States and certain other countries All other trademarks mentioned in this document or website are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company (0812R) Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses Any examples, command display output, and figures included in the document are shown for illustrative purposes only Any use of actual IP addresses in illustrative content is unintentional and coincidental Cisco ME 3400 Ethernet Access Switch Command Reference © 2006-2009 Cisco Systems, Inc All rights reserved CONTENTS Preface xvii Audience Purpose xvii xvii Conventions xviii Related Publications xviii Obtaining Documentation and Submitting a Service Request CHAPTER Using the Command-Line Interface xix 1-1 CLI Command Modes 1-1 User EXEC Mode 1-2 Privileged EXEC Mode 1-3 Global Configuration Mode 1-3 Interface Configuration Mode 1-4 VLAN Configuration Mode 1-4 Line Configuration Mode 1-4 CHAPTER Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands 2-1 aaa accounting dot1x 2-1 aaa authentication dot1x action 2-3 2-5 archive download-sw archive tar 2-10 archive upload-sw arp access-list bandwidth 2-13 2-15 2-17 boot config-file 2-20 boot enable-break boot helper 2-21 2-22 boot helper-config-file boot manual 2-23 2-24 boot private-config-file boot system 2-7 2-25 2-26 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 iii Contents channel-group 2-27 channel-protocol class 2-31 2-33 class-map 2-35 clear ip arp inspection log 2-37 clear ip arp inspection statistics clear ip dhcp snooping clear ipc 2-38 2-39 2-41 clear ipv6 dhcp conflict 2-42 clear l2protocol-tunnel counters clear lacp 2-43 2-44 clear mac address-table 2-45 clear mac address-table move update clear pagp 2-47 clear policer cpu uni-eni counters clear port-security 2-49 clear rep counters 2-51 clear spanning-tree counters 2-48 2-52 clear spanning-tree detected-protocols clear vmps statistics conform-action 2-53 2-55 2-56 cpu traffic qos 2-58 define interface-range delete 2-46 2-60 2-62 deny (ARP access-list configuration) 2-63 deny (IPv6 access-list configuration) 2-65 deny (MAC access-list configuration) dot1x default 2-73 dot1x host-mode dot1x initialize 2-74 2-76 dot1x max-reauth-req dot1x max-req 2-70 2-77 2-78 dot1x port-control 2-79 dot1x re-authenticate dot1x reauthentication 2-81 2-82 Cisco ME 3400 Ethernet Access Switch Command Reference iv OL-9640-07 Contents dot1x system-auth-control 2-83 dot1x test eapol-capable dot1x test timeout dot1x timeout 2-85 2-86 dot1x violation-mode duplex 2-84 2-88 2-89 errdisable detect cause 2-91 errdisable detect cause small-frame errdisable recovery 2-95 errdisable recovery cause small-frame ethernet evc 2-98 ethernet lmi 2-99 ethernet lmi ce-vlan map 2-103 2-105 ethernet uni id 2-107 exceed-action 2-108 flowcontrol 2-110 interface port-channel interface range interface vlan 2-112 2-114 2-116 ip access-group ip address 2-97 2-101 ethernet oam remote-failure ethernet uni 2-93 2-118 2-121 ip arp inspection filter vlan ip arp inspection limit 2-123 2-125 ip arp inspection log-buffer ip arp inspection trust 2-129 ip arp inspection validate ip arp inspection vlan 2-127 2-131 2-133 ip arp inspection vlan logging ip dhcp snooping 2-134 2-136 ip dhcp snooping binding ip dhcp snooping database 2-137 2-139 ip dhcp snooping information option 2-141 ip dhcp snooping information option allowed-untrusted 2-143 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 v Contents ip dhcp snooping information option format remote-id ip dhcp snooping limit rate ip dhcp snooping trust 2-145 2-146 2-147 ip dhcp snooping verify mac-address ip dhcp snooping vlan 2-148 2-149 ip dhcp snooping vlan information option format-type circuit-id string ip igmp filter 2-152 ip igmp max-groups ip igmp profile 2-154 2-156 ip igmp snooping 2-158 ip igmp snooping last-member-query-interval ip igmp snooping querier ip igmp snooping tcn 2-164 2-166 ip igmp snooping tcn flood 2-167 ip igmp snooping vlan immediate-leave ip igmp snooping vlan mrouter ip igmp snooping vlan static ip source binding 2-160 2-162 ip igmp snooping report-suppression ip ssh 2-150 2-168 2-169 2-171 2-173 2-175 ip sticky-arp (global configuration) 2-177 ip sticky-arp (interface configuration) ip verify source 2-181 ipv6 access-list 2-182 ipv6 address dhcp 2-184 ipv6 dhcp client request vendor ipv6 dhcp ping packets ipv6 dhcp pool 2-187 2-189 ipv6 traffic-filter 2-191 l2protocol-tunnel 2-193 l2protocol-tunnel cos 2-196 2-197 lacp system-priority link state group 2-185 2-186 ipv6 dhcp server lacp port-priority 2-179 2-199 2-201 Cisco ME 3400 Ethernet Access Switch Command Reference vi OL-9640-07 Contents link state track 2-203 location (global configuration) 2-204 location (interface configuration) logging event logging file 2-206 2-208 2-209 mac access-group 2-211 mac access-list extended 2-213 mac address-table aging-time 2-215 mac address-table learning vlan 2-216 mac address-table move update 2-218 mac address-table notification mac address-table static 2-220 2-222 mac address-table static drop macro apply 2-223 2-225 macro description macro global 2-227 2-228 macro global description macro name 2-230 2-231 match (access-map configuration) match access-group match cos 2-235 2-236 match ip dscp 2-237 match ip precedence match qos-group match vlan mdix auto media-type 2-233 2-239 2-241 2-243 2-246 2-248 monitor session 2-250 mvr (global configuration) 2-254 mvr (interface configuration) oam protocol cfm svlan pagp learn-method pagp port-priority 2-257 2-260 2-261 2-263 permit (ARP access-list configuration) 2-265 permit (IPv6 access-list configuration) 2-267 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 vii Contents permit (MAC access-list configuration) police 2-272 2-275 policer aggregate (global configuration) 2-279 police aggregate (policy-map class configuration) policer cpu uni policy-map 2-285 2-287 port-channel load-balance port-type 2-290 2-292 power-supply dual priority 2-294 2-296 private-vlan 2-299 private-vlan mapping queue-limit 2-302 2-304 remote-span 2-307 renew ip dhcp snooping database rep admin vlan 2-311 rep lsl-age-timer 2-314 rep preempt delay 2-315 rep preempt segment rep segment rep stcn 2-309 2-310 rep block port 2-317 2-318 2-321 reserved-only 2-322 rmon collection stats sdm prefer 2-323 2-324 service instance 2-327 service password-recovery 2-329 service-policy (interface configuration) 2-331 service-policy (policy-map class configuration) set cos set dscp 2-333 2-336 2-338 set precedence set qos-group setup 2-283 2-340 2-342 2-344 shape average 2-347 Cisco ME 3400 Ethernet Access Switch Command Reference viii OL-9640-07 Contents show access-lists 2-349 show archive status 2-352 show arp access-list 2-353 show boot 2-354 show cable-diagnostics tdr show class-map 2-356 2-358 show controllers cpu-interface 2-359 show controllers ethernet-controller show controllers tcam 2-368 show controllers utilization show cpu traffic qos show env 2-370 2-372 show dot1q-tunnel show dot1x 2-361 2-373 2-374 2-377 show errdisable detect 2-380 show errdisable flap-values show errdisable recovery show etherchannel 2-382 2-384 2-386 show ethernet service evc 2-389 show ethernet service instance 2-391 show ethernet service interface 2-393 show flowcontrol show idprom show interfaces 2-395 2-397 2-399 show interfaces counters show interfaces rep 2-407 2-409 show interfaces transceivers show inventory 2-411 2-414 show ip arp inspection 2-415 show ip dhcp snooping 2-419 show ip dhcp snooping binding 2-420 show ip dhcp snooping database 2-422 show ip dhcp snooping statistics 2-424 show ip igmp profile show ip igmp snooping 2-427 2-428 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 ix Contents show ip igmp snooping groups 2-430 show ip igmp snooping mrouter 2-432 show ip igmp snooping querier show ip source binding show ip verify source show ipc 2-436 2-437 2-439 show ipv6 access-list 2-443 show ipv6 dhcp conflict 2-445 show ipv6 route updated show l2protocol-tunnel show lacp 2-434 2-446 2-448 2-450 show link state group show location 2-454 2-456 show mac access-group 2-459 show mac address-table 2-461 show mac address-table address 2-463 show mac address-table aging-time show mac address-table count 2-465 2-467 show mac address-table dynamic 2-469 show mac address-table interface 2-471 show mac address-table learning 2-473 show mac address-table move update show mac address-table notification show mac address-table static show mac address-table vlan show monitor show mvr 2-476 2-478 2-480 2-482 2-484 show mvr interface 2-486 show mvr members 2-488 show pagp 2-474 2-490 show parser macro 2-492 show policer aggregate show policer cpu uni-eni show policy-map show port-security 2-494 2-495 2-498 2-502 Cisco ME 3400 Ethernet Access Switch Command Reference x OL-9640-07 Index Ethernet Local Management Interface frame forwarding information, displaying See E-LMI front-end controller counter and status information Ethernet service fsck (boot loader) command debugging B-5 displaying 2-389 Ethernet service instance 2-393 Ethernet statistics, collecting Ethernet UNI configuration ethernet uni id command A-11 global configuration mode 1-2, 1-3 2-323 2-105 H 2-107 Ethernet virtual connections hardware ACL statistics See EVCs 2-349 help (boot loader) command EVC configuration mode 2-98 A-12 host connection, port configuration 2-98 host ports, private VLANs and VLANs C-10 G 2-327 Ethernet service interfaces EVCs C-8 2-615 2-619 2-105 service instances UNI counts 2-327 I 2-653 EVC service IEEE 802.1ag Connectivity Fault Management point-to-multipoint point-to-point 2-653 See CFM 2-653 exceed-action command IEEE 802.1Q trunk ports and native VLANs 2-108 IEEE 802.1Q tunnel ports extended-range VLANs configuring and allowed VLAN list configuring 2-632 2-657 extended system ID for STP 2-662 2-562 2-616 displaying 2-373 limitations 2-617 IEEE 802.1x and switchport modes 2-617 violation error recovery F 2-95 See also port-based authentication fan information, displaying files, deleting 2-377 IGMP filters 2-62 applying flash_init (boot loader) command A-9 2-152 debug messages, display Flex Links B-10 IGMP groups, setting maximum configuring 2-609 IGMP maximum groups, debugging configuring preferred VLAN displaying 2-611 creating 2-110 displaying format (boot loader) command 2-156 2-427 A-10 forwarding packets, with ACL matches forwarding results, display B-11 IGMP profiles 2-399 flowcontrol command 2-154 2-5 C-8 Cisco ME 3400 Ethernet Access Switch Command Reference IN-6 OL-9640-07 Index IGMP snooping Internet Group Management Protocol adding ports as a static member of a group displaying enabling 2-171 invalid GBIC 2-428, 2-432, 2-434 error detection for 2-158 enabling the configurable-leave timer 2-160 enabling the Immediate-Leave feature 2-168 flooding query count querier 2-91 error recovery timer 2-166 interface topology change notification behavior multicast table See IGMP 2-167 2-95 ip address command 2-121 IP addresses, setting 2-121 IP address matching 2-233 ip arp inspection filter vlan command 2-430 ip arp inspection limit command 2-162 query solicitation 2-125 ip arp inspection log-buffer command 2-166 report suppression ip arp inspection trust command 2-164 switch topology change notification behavior 2-166 images See software images ip arp inspection validate command 2-131 2-133 ip arp inspection vlan logging command Immediate-Leave feature, MVR immediate-leave processing See DHCP snooping 2-168 ip dhcp snooping binding command 2-137 and ACL classification 2-235 ip dhcp snooping command and aggregate policers 2-281 ip dhcp snooping database command commands not supported in configuration guidelines 2-288 2-112 ip dhcp snooping limit rate command 2-114 ip dhcp snooping trust command 2-58, 2-60 ip dhcp snooping vlan command assigning Ethernet interface to channel group 2-89 2-114 debug messages, display disabling 2-112 ip igmp profile command 2-537 ip igmp snooping command 2-471 2-537 2-149 2-152 ip igmp max-groups command B-9 2-148 ip dhcp snooping vlan information option format-type circuit-id string command 2-150 ip igmp filter command displaying the MAC address table restarting 2-27 2-146 2-147 ip dhcp snooping verify command interfaces creating port-channel logical 2-141 ip dhcp snooping information option format remote-id command 2-145 1-2, 1-4 interface port-channel command configuring multiple 2-139 ip dhcp snooping information option command interface configuration mode configuring 2-136 ip dhcp snooping information option allow-untrusted command 2-143 2-288 2-116 interface-range macros 2-134 IP DHCP snooping 2-257 input policy maps interface range command 2-127 2-129 ip arp inspection vlan command interface command 2-123 2-154, 2-177, 2-179 2-156 2-158 ip igmp snooping last-member-query-interval command 2-160 interface speed, configuring 2-600 ip igmp snooping querier command internal registers, displaying 2-361, 2-368, 2-372 ip igmp snooping report-suppression command ip igmp snooping tcn command 2-162 2-164 2-166 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-7 Index ip igmp snooping tcn flood command lacp port-priority command 2-167 ip igmp snooping vlan immediate-leave command ip igmp snooping vlan mrouter command ip igmp snooping vlan static command IP multicast addresses 2-168 error detection for 2-239 2-448 2-91 error recovery timer 2-173 IP source guard 2-95 Layer protocol tunnel counters 2-43 Layer protocol tunneling error recovery 2-181 displaying 2-194 Layer traceroute binding entries configuration enabling 2-605 Layer protocol-tunnel IP precedence, as match criteria for QoS groups disabling 2-199 Layer protocol ports, displaying 2-171 2-254 ip source binding command lacp system-priority command Layer mode, enabling 2-169 2-197 IP addresses 2-436 MAC addresses 2-437 2-181 static IP source bindings 2-173 IP source guard, displaying dynamic binding entries ip ssh command 2-420 2-605 line configuration mode 1-2, 1-4 Link Aggregation Control Protocol See EtherChannel IPv6 access list, deny conditions error detection for ipv6 dhcp ping packets command IPv6 SDM template 2-185 2-186 ip verify source command 2-95 link state group command link state track command 2-201 2-203 load-distribution methods for EtherChannel 2-187 location (global configuration) command 2-189 2-191 logging event command logging file command 2-181 logical interface 2-290 2-204 location (interface configuration) command 2-324 ipv6 traffic-filter command 2-91 error recovery timer 2-184 ipv6 dhcp client request vendor command ipv6 dhcp server command link flap 2-65 2-182 ipv6 address dhcp command ipv6 dhcp pool command 2-643 Layer mode, enabling 2-175 ipv6 access-list command 2-646 2-206 2-208 2-209 2-112 loopback error J detection for recovery timer jumbo frames 2-91 2-95 loop guard, for spanning tree See MTU 2-564, 2-568 M L l2protocol-tunnel command 2-193 l2protocol-tunnel cos command 2-196 mac access-group command 2-211 MAC access-groups, displaying 2-459 MAC access list configuration mode LACP See EtherChannel mac access-list extended command MAC access lists 2-213 2-213 2-70 Cisco ME 3400 Ethernet Access Switch Command Reference IN-8 OL-9640-07 Index MAC addresses macros disabling MAC address learning per VLAN 2-216 displaying applying 2-465 dynamic MAC address-table move updates notification settings per VLAN 2-474 2-639 class 2-461 2-35 VLAN 2-215 2-45 displaying 2-653 maps creating deleting 2-469 enabling MAC address notification creating 2-660 defining 2-233 displaying 2-220 enabling MAC address-table move update 2-218 2-533 match access-group command match cos command 2-233 static adding and removing match qos-group command 2-478 match vlan command 2-223 MAC address notification, debugging mac address-table aging-time 2-241 2-243 mdix auto command 2-211, 2-233 mac address-table learning command 2-215 2-216 mac address-table move update command 2-218 mac address-table notification command mac address-table static command 2-220 2-223 2-246 media-type command 2-248 memory (boot loader) command mkdir (boot loader) command mode, MVR A-14 1-1 monitor session command 2-250 more (boot loader) command 2-227 A-13 2-254 modes, commands 2-222 mac address-table static drop command macro description command See MTU B-14 mac address-table aging-time command A-15 2-228 macro global description command macro name command 2-239 maximum transmission unit 2-463 macro global command 2-237 match ip precedence command 2-222 dropping on an interface 2-235 2-236 match ip dscp command displaying 2-228 2-228 mapping tables, QoS 2-480 2-478 aging time 2-60, 2-114 maintenance end points dynamic tables interface range tracing 2-467 2-471 static and dynamic entries matching 2-492 specifying parameter values 2-473, 2-476 number of addresses in a VLAN per interface 2-231 displaying 2-469 2-230 2-228 creating 2-463 static 2-227 adding a global description aging time all adding a description 2-230 2-231 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-9 Index MSTP MSTP (continued) displaying interoperability link type state changes 2-513 blocking to forwarding state 2-53 enabling BPDU filtering 2-566 MST region enabling BPDU guard aborting changes 2-572 enabling Port Fast applying changes 2-572 forward-delay time configuration name current or pending display 2-576 state information display configuring size 2-572 2-520 multicast groups, MVR 2-53 2-257 2-255 multicast router learning method preventing from becoming designated root guard 2-564 2-564 multicast storm control 2-602 multicast VLAN, MVR 2-254 2-169 multicast VLAN registration 2-564 root switch See MVR affects of extended system ID hello-time 2-169 multicast router ports, configuring 2-564 restricting which can be root 2-592 2-512 multicast group address, MVR 2-570 root port loop guard 2-566 2-636 displaying global setting restart protocol migration process 2-576 MTU 2-572 2-574 protocol mode 2-592, 2-595 shutting down Port Fast-enabled ports 2-573 VLANs-to-instance mapping path cost 2-556, 2-592 rapid transition to forwarding 2-573 2-513 MST configuration mode 2-554, 2-592 length of listening and learning states 2-572 configuration revision number displaying 2-595 multiple hosts on authorized port 2-562 2-74 Multiple Spanning Tree Protocol 2-577, 2-588 interval between BDPU messages See MSTP 2-579 interval between hello BPDU messages 2-577, 2-588 multiplexing, UNI 2-105 MVR max-age 2-579 and address aliasing maximum hop count before discarding BPDU 2-581 port priority for selection of primary or secondary switch priority 2-583 2-588 2-586 configuring 2-255 2-254 configuring interfaces 2-257 debug messages, display displaying B-18 2-484 displaying interface information members, displaying 2-486 2-488 mvr (global configuration) command mvr (interface configuration) command mvr vlan group command 2-254 2-257 2-258 Cisco ME 3400 Ethernet Access Switch Command Reference IN-10 OL-9640-07 Index password-recovery mechanism, enabling and disabling 2-329 N native VLANs permit (ARP access-list configuration) command 2-632 native VLAN tagging network node interface nonegotiate, speed permit (IPv6) command 2-662 permit command 2-292 physical-port learner 2-70 PID, displaying 2-272 non-IP traffic access lists 2-414 multiple conform actions for a class multiple exceed actions for a class 2-272 normal-range VLANs 2-169 police 2-70 no vlan command 2-261 PIM-DVMRP, as multicast router learning method 2-213 non-IP traffic forwarding permitting 2-272 See STP forwarding denying 2-267 per-VLAN spanning-tree plus 2-600, 2-601 non-IP protocols denying 2-265 with priority 2-657 police command 2-283 2-275 policer aggregate command O 2-108 2-275 police aggregate command 2-657 2-56 2-279 policer configuration OAM PDUs OAM protocol 2-103 2-260 oam protocol cfm svlan command 2-260 operation, administration, and maintenance protocol C-28 default for UNIs C-27 policer cpu uni command and QoS group classification and traffic shaping 2-241 configuration guidelines individual 2-285 2-275 policy-map class, configuring multiple actions 2-347 commands not supported in 2-288 2-288 policy-map class configuration mode 2-56, 2-277 2-287 policy-map configuration mode 2-304 2-56, 2-108 2-33 policy-map class police configuration mode policy-map command 2-297 queue limit in 2-279, 2-283 for CPU protection output policy maps 2-285 policers aggregate See OAM priority in default for NNIs 2-287 policy maps and CoS classification P and DSCP classification 2-237 and IP precedence classification PAgP and policing See EtherChannel pagp learn-method command pagp port-priority command parent policy maps 2-236 2-334 2-261 2-263 applying 2-277 2-331 applying to an interface child 2-239 2-288, 2-331, 2-344 2-333 creating 2-287 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-11 Index policy maps (continued) displaying switch-to-client retransmission time 2-498 hierarchical parent port-based authentication (continued) test for IEEE 802.1x readiness 2-333 policers Port Fast, for spanning tree for a single class setting priority port ranges, defining 2-275 for multiple classes 2-279, 2-283, 2-285, 2-333 ports, debugging 2-595 2-58, 2-60 2-630 port security 2-342 traffic classification, defining aging 2-33 traffic marking 2-626 debug messages, display setting CoS values enabling 2-336 setting DSCP values port shaping 2-340 Port Aggregation Protocol 2-95 2-348 port-type command See EtherChannel port types, MVR 2-292 2-257 port-based authentication power information, displaying AAA method list power-supply dual command 2-3 configuring violation modes debug messages, display host modes setting in policy maps 2-83 priority command 2-79 IEEE 802.1x AAA accounting methods 2-1 priority with police, QoS 2-82 2-299 association 2-628 configuring 2-299 configuring ports 2-86 quiet period between failed authentication exchanges 2-86 resetting configurable 802.1x parameters 2-296 2-302 private VLANs 2-74 re-authenticating 802.1x-enabled ports 2-340 private-vlan mapping command 2-79 periodic re-authentication time between attempts 2-340 2-296 private-vlan command 2-76, 2-85 manual control of authorization state enabling 2-377 2-296 priority queuing, QoS 2-74 multiple hosts on authorized port 2-294 precedence B-3 for QoS traffic marking initialize an interface 2-377 power-supply status, displaying 2-88 enabling 802.1x per interface B-63 2-622 violation error recovery 2-338 setting IP precedence values 2-290 B-61 ports, protected 2-296 setting QoS group identifier globally 2-84 port-channel load-balance command 2-334 2-86 2-81 2-73 switch-to-authentication server retransmission time 2-86 switch-to-client frame-retransmission number 2-77 to 2-78 displaying 2-528 host ports 2-619 2-619 mapping configuring displaying 2-628 2-399 promiscuous ports privileged EXEC mode 2-619 1-2, 1-3 product identification information, displaying 2-414 Cisco ME 3400 Ethernet Access Switch Command Reference IN-12 OL-9640-07 Index promiscuous ports, private VLANs 2-619 QoS match criteria PVST+ ACLs See STP 2-235 CoS value 2-236 DSCP value 2-237, 2-243 precedence value Q 2-239 QoS group number 2-241 quality of service QoS aggregate policers See QoS applying querytime, MVR creating 2-283 queue-limit command 2-279 displaying R 2-35 defining the match criteria displaying 2-236 rapid per-VLAN spanning-tree plus See STP 2-358 displaying statistics for rapid PVST+ 2-498, C-36 policy maps See STP applying an aggregate policer 2-279, 2-283, 2-285, 2-333 re-authenticating 802.1x-enabled ports 2-81 re-authentication applying to an interface creating 2-304 2-494 class maps creating 2-254 2-331, 2-344 2-287 defining policers setting CoS values receiver ports, MVR 2-498 causes 2-340 setting QoS group identifier 2-342 2-33 table maps 2-110 display 2-95 2-356, 2-380, 2-384 timer interval 2-96 remote-span command 2-307 Remote Switched Port Analyzer 2-639 See RSPAN 2-521 rename (boot loader) command QoS groups as match criteria 2-257 recovery mechanism 2-338 setting IP precedence values traffic classifications 2-86 receiving flow-control packets 2-336 setting DSCP values displaying 2-82 time between attempts 2-275 displaying policy maps configuring periodic A-16 renew ip dhcp snooping database command 2-241 rep admin vlan command for QoS traffic classification setting in policy maps 2-342 2-342 rep block port command 2-310 2-311 rep lsl-age-timer command 2-314 rep preempt delay command 2-315 rep preempt segment command rep segment command rep stcn command 2-309 2-317 2-318 2-321 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-13 Index reset (boot loader) command set qos-group command A-17 resource templates, displaying rmdir (boot loader) command 2-344 SFPs, displaying information about A-18 rmon collection stats command root guard, for spanning tree setup command 2-510 2-342 shape average command 2-323 2-347 show access-lists command 2-564 routed ports 2-414 2-349 show aggregate-policer command IP addresses on 2-122 number supported 2-122 RSPAN show archive status command 2-352 show arp access-list command 2-353 show boot command configuring displaying 2-354 show class-map command 2-250 2-521 2-358 show controllers cpu-interface command 2-482 filter RSPAN traffic show controllers ethernet-controller command 2-250 remote-span command show controllers tcam command 2-307 sessions displaying start new show controller utilization command 2-250 show cpu traffic qos 2-482 show dot1x command show env command S 2-374 2-377 show errdisable recovery command SDM templates displaying 2-380 show errdisable flap-values command 2-324 allowed resources 2-370 2-373 show errdisable detect command sdm prefer command 2-370 2-372 show dot1q-tunnel command 2-250 show etherchannel command 2-325 2-382 2-384 2-386 show ethernet service evc command 2-510 2-361 2-368 show controllers utilization command add interfaces to 2-359 2-389 dual IPv4 and IPv6 2-324 show ethernet service instance command 2-391 secure ports, limitations 2-624 show ethernet service interface command 2-393 sending flow-control packets service instance command show flowcontrol command 2-110 show idprom command 2-327 service instances, displaying show interfaces command 2-329 service-policy interface configuration command set dscp command A-19 2-336 2-407 2-409 show interface transceivers command show inventory command 2-414 show ip arp inspection command show ipc command 2-411 2-415 2-439 show ip dhcp snooping binding command 2-338 set precedence command 2-399 show interfaces rep command 2-331 service-policy policy-map class configuration command 2-333 set cos command 2-409 show interfaces counters command service policy (policy-map class configuration) command 2-333 set (boot loader) command 2-397 show interface rep command 2-391 service password-recovery command 2-395 2-340 show ip dhcp snooping command 2-420 2-419 show ip dhcp snooping database command 2-422, 2-424 Cisco ME 3400 Ethernet Access Switch Command Reference IN-14 OL-9640-07 Index show ip igmp profile command show platform cfm command 2-427 show ip igmp snooping command show platform configuration command 2-428 show ip igmp snooping command querier detail show ip igmp snooping groups command 2-434 show ipv6 route updated show platform igmp snooping command C-14 show platform ipv6 unicast command show platform l2pt dm command 2-446 show l2protocol-tunnel command C-20, C-43 show platform mac-address-table command 2-448 show platform messaging command 2-450 show link state group command show platform monitor command 2-454 show platform pm command 2-456 show mac access-group command C-23 show mac address-table address command C-25 show platform port-asic command 2-463 show mac address-table aging time command show mac address-table command C-24 show platform policer cpu command 2-459 2-465 show mac address-table count command C-26 C-30 show platform port-security command show platform qos command 2-461 C-35 C-36 show platform resource-manager command 2-467 show mac address-table dynamic command 2-469 show platform snmp counters command show mac address-table interface command 2-471 show mac address-table learning command 2-473 show platform spanning-tree synchronization command C-42 show mac address-table move update command show mac address-table notification command B-16 show mac address-table static command show mac address-table vlan command show monitor command show mvr command 2-478 2-480 2-474 2-46, 2-476, show platform stp-instance command show platform tcam command C-45 show platform vlan command C-48 show policer aggregate command 2-486 show port security command show mvr members command 2-488 show port-type command show platform acl command show sdm prefer command 2-492 C-2 show platform backup interface command C-3 2-501 2-502 2-505 show rep topology command 2-490 show parser macro command 2-495 2-498 show mvr interface command show pagp command C-41 C-44 show policy-map interface output fields 2-484 C-39 2-494 show policer cpu uni-eni command show policy-map command 2-482 C-21 C-22 show platform mvr table command 2-456 show location command C-17 C-19 show platform layer4op command 2-437 C-11 C-13 show platform ip unicast command 2-445 C-10 C-16 show platform ip multicast command 2-446 show ip verify source command show location C-8 show platform ipc trace command 2-443 show ipv6 route updated command show lacp command 2-434 2-436 show ipv6 dhcp conflict command C-7 show platform frontend-controller command 2-434 show ip igmp snooping querier detail command show ipv6 access-list command C-6 show platform forward command 2-432 show ip igmp snooping querier command show platform dl command C-5 show platform etherchannel command 2-430 show ip igmp snooping mrouter command show ip source binding command C-4 2-507 2-510 show spanning-tree command 2-512 show storm-control command 2-518 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-15 Index show system mtu command show udld command spanning-tree bpduguard command 2-520 spanning-tree cost command 2-523 show version command spanning-tree guard command show vlan command, fields shutdown command spanning-tree mode command shutdown threshold, Layer protocol tunneling 2-193 snmp mib rep trap-rate command 2-542 snmp trap mac-notification command SNMP traps spanning-tree mst pre-standard command 2-585 2-586 2-588 spanning-tree portfast (global configuration) command 2-592 2-550 enabling the MAC address notification feature 2-581 2-583 spanning-tree mst root command 2-550 enabling MAC address notification trap 2-579 spanning-tree mst port-priority command spanning-tree mst priority command 2-546 2-576 2-577 spanning-tree mst max-hops command 2-542 2-541 snmp-server enable traps command enabling the sending of 2-572 2-574 spanning-tree mst max-age command 2-546 snmp-server host command spanning-tree mst cost command spanning-tree mst hello-time command 2-539 SNMP informs, enabling the sending of 2-220 2-542 spanning-tree portfast (interface configuration) command 2-595 spanning-tree port-priority command software images 2-590 Spanning Tree Protocol 2-62 downloading See STP 2-7 upgrading 2-7 uploading 2-13 spanning-tree vlan command speed command source ports, MVR 2-526 2-250 statistics, Ethernet group 2-323 sticky learning, enabling 2-622 storm-control command debug messages, display 2-175 static-access ports, configuring 2-257 SPAN configuring 2-597 2-600 SSH, configuring version software version, displaying displaying 2-570 spanning-tree mst forward-time command 2-538 small violation-rate command deleting 2-568 spanning-tree mst configuration command 2-537 SNMP host, specifying 2-566 spanning-tree loopguard default command 2-534 2-535 shutdown vlan command 2-562 2-564 spanning-tree link-type command 2-530 show vlan filter command 2-560 spanning-tree extend system-id command 2-533 2-528 show vmps command 2-558 spanning-tree etherchannel command 2-526 show vlan access-map command show vlan command 2-556 2-607 2-602 B-17 2-482 filter SPAN traffic 2-250 sessions add interfaces to displaying start new 2-250 2-482 2-250 spanning-tree bpdufilter command 2-552, 2-554 Cisco ME 3400 Ethernet Access Switch Command Reference IN-16 OL-9640-07 Index STP SVIs, creating counters, clearing Switched Port Analyzer 2-52 debug messages, display MSTP 2-116 See SPAN switching characteristics B-70 optimized BPDUs handling spanning-tree activity switch shim modifying B-69 returning to interfaces B-66 transmitted and received BPDUs switchport block command enabling protocol tunneling for 2-193 switchport command EtherChannel misconfiguration 2-560 switchport host command path cost switchport private-vlan command 2-564 2-564 switchport protected command switchports, displaying 2-564 2-626 2-622 2-628 2-630 2-632 system env temperature threshold yellow command affects of extended system ID system message logging, save message to flash 2-562, 2-598 system mtu command 2-597 interval between BDPU messages primary or secondary switch priority 2-209 2-324 2-597 2-597 port priority for selection of 2-634 2-636 system resource templates 2-597 interval between hello BPDU messages T 2-590 2-597 table-map command 2-597 2-639 table-map configuration mode state changes 2-639 table maps blocking to forwarding state enabling BPDU filtering enabling BPDU guard enabling Port Fast 2-595 configuring 2-554, 2-592 displaying 2-556, 2-592 QoS 2-592, 2-595 forward-delay time 2-639 2-521 2-639 tar files, creating, listing, and extracting enabling timer to recover from error state 2-95 2-597 TDR, running temperature information, displaying 2-597 temperature status, displaying shutting down Port Fast-enabled ports 2-592 templates, system resources state information display 2-512 2-586, 2-597 2-10 2-641 length of listening and learning states VLAN options 2-619 2-399 switchport trunk command 2-564 root switch max-age 2-616 switchport port-security command restricting which can be root hello-time 2-615 switchport port-security aging command 2-570 preventing from becoming designated root guard 2-605 switchport mode private-vlan command root port loop guard 2-609 2-613 switchport mode command 2-562 2-558 protocol modes 2-607 switchport backup interface command B-68 2-552 extended system ID 2-605 switchport access command B-72 enabling on ENIs 2-605 2-377 2-324 test cable-diagnostics tdr command traceroute mac command 2-377 2-641 2-643 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-17 Index traceroute mac ip command traffic shaping, QoS 2-616 trunk ports 2-616 1-2 user network interface 2-347 trunking, VLAN mode trunk mode user EXEC mode 2-646 2-292 2-616 V tunnel ports, Layer protocol, displaying type (boot loader) command 2-448 A-22 version (boot loader) command vlan access-map command A-25 2-660 VLAN access map configuration mode 2-660 VLAN access maps U actions UDLD aggressive mode 2-648, 2-650 debug messages, display enable globally 2-5 displaying 2-533 vlan command 2-657 VLAN configuration mode B-78 2-648 commands 2-657 1-4 enable per interface 2-650 description error recovery timer 2-95 entering 2-657 summary 1-2 message timer normal mode 2-648 reset a shutdown interface status vlan dot1q tag native command 2-648, 2-650 vlan filter command 2-652 udld command VLAN ID range 2-648 udld port command applying 2-652 UNI bundling and multiplexing 2-105 uni count command creating 2-660 defining 2-233 See VQP 2-653 VLANs See UDLD adding 2-657 debug messages, display 2-655 unknown multicast traffic, preventing unknown unicast traffic, preventing unset (boot loader) command 2-657 configuring 2-107 uni-vlan command 2-533 VLAN Query Protocol 2-602 UniDirectional Link Detection UNI ID, Ethernet 2-657 2-664 displaying 2-105 unicast storm control 2-534 VLAN maps 2-650 udld reset command Ethernet 2-664 VLAN filters, displaying 2-523 2-613 2-613 A-23 upgrading activation of B-76 VLAN IOS file system error tests VLAN manager activity displaying configurations software images extended-range 2-7 monitoring status of 2-662 B-75 B-74 2-528 2-657 2-352 Cisco ME 3400 Ethernet Access Switch Command Reference IN-18 OL-9640-07 Index VLANs (continued) W MAC addresses displaying 2-480 number of 2-467 normal-range private Weighted Tail Drop See WTD WTD, queue-limit command 2-657 2-304 2-619 configuring 2-299 displaying 2-528 See also private VLANs restarting 2-538 saving the configuration shutting down suspending 2-657 2-538 2-538 VMPS configuring servers displaying 2-669 2-535 error recovery timer 2-95 reconfirming dynamic VLAN assignments 2-666 vmps reconfirm (global configuration) command vmps reconfirm (privileged EXEC) command vmps retry command vmps server command 2-667 2-666 2-668 2-669 VQP and dynamic-access ports 2-608 clearing client statistics 2-55 displaying information 2-535 per-server retry count reconfirmation interval 2-668 2-667 reconfirming dynamic VLAN assignments VTP, enabling tunneling for 2-666 2-193 Cisco ME 3400 Ethernet Access Switch Command Reference OL-9640-07 IN-19 Index Cisco ME 3400 Ethernet Access Switch Command Reference IN-20 OL-9640-07 ... CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration... Cisco ME 3400 Ethernet Access Switch Command Reference viii OL-9640-07 Contents show access-lists 2-349 show archive status 2-352 show arp access-list 2-353 show boot 2-354 show cable-diagnostics... HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx,