Cisco 4500M, WS-C4507R, 4500 Series Command Reference Manual

Catalyst4500 Series SwitchCiscoIOS
Command Reference

Release 12.2(18)EW

Corporate Headquarters

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]

800 553-NETS (6387)

Fax: [phone]

Customer Order Number: DOC-7816201=
Text Part Number: 78-16201-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED ORIMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Catalyst4500 Series SwitchCiscoIOS Command Reference

Copyright © 2003-2004 Cisco Systems, Inc. All rights reserved

Preface xv

Audience xv
Organization xv
Related Documentation xv
Conventions xvi
Obtaining Documentation xvii
Documentation Feedback xviii
Obtaining Technical Assistance xviii
Obtaining Additional Publications and Information xix

CONTENTS

C H A P T E R

C H A P T E R

1 Command-Line Interface 1-1

Getting Help 1-1
How to Find Command Options 1-2
Understanding Command Modes 1-4
Using the No and Default Forms of Commands 1-6
Using the CLI String Search 1-6
Saving Configuration Changes 1-11
Show Platform Commands 1-11

2 Cisco IOS Commands for the Catalyst 4500 Series Switches 2-1

#macro keywords 2-2
aaa accounting dot1x d efault start-stop group radius 2-3
aaa accounting system default start-stop group radius 2-4
access-group mode 2-5
action 2-6
apply 2-7
arp access-list 2-8
attach module 2-9
auto qos voip 2-10
auto-sync 2-13
channel-group 2-14
channel-protocol 2-16

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

iii

Contents

class-map 2-18
clear counters 2-20
clear hw-module slot password 2-22
clear interface gigabitethernet 2-23
clear interface vlan 2-24
clear ip access-template 2-25
clear ip arp inspection log 2-26
clear ip arp inspection statistics 2-27
clear ip dhcp snooping database 2-28
clear ip dhcp snooping database statistics 2-29
clear ip igmp group 2-30
clear ip igmp snooping membership 2-32
clear ip mfib counters 2-33
clear ip mfib fastdrop 2-34
clear lacp counters 2-35
clear mac-address-table dynamic 2-36
clear pagp 2-37
clear port-security 2-38
clear qos 2-39
clear vlan counters 2-40
clear vmps statistics 2-41
debug adjacency 2-42
debug backup 2-43
debug condition interface 2-44
debug condition standby 2-45
debug condition vlan 2-47
debug dot1x 2-48
debug etherchnl 2-49
debug interface 2-51
debug ipc 2-52
debug ip dhcp snooping event 2-53
debug ip dhcp snooping packet 2-54
debug ip verify source packet 2-55
debug lacp 2-56
debug monitor 2-57

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

iv

78-16201-01

debug nvram 2-58
debug pagp 2-59
debug platform packet protocol lacp 2-60
debug platform packet protocol pagp 2-61
debug pm 2-62
debug psecure 2-63
debug redundancy 2-64
debug smf updates 2-65
debug spanning-tree 2-66
debug spanning-tree backbonefast 2-67
debug spanning-tree switch 2-68
debug spanning-tree uplinkfast 2-70
debug sw-vlan 2-71

Contents

debug sw-vlan ifs 2-72
debug sw-vlan notification 2-73
debug sw-vlan vtp 2-74
debug udld 2-75
debug vqpc 2-76
define interface-range 2-77
deny 2-78
diagnostic monitor action 2-80
dot1x guest-vlan 2-81
dot1x initialize 2-82
dot1x max-reauth-req 2-83
dot1x max-req 2-84
dot1x multiple-hosts 2-85
dot1x port-control 2-86
dot1x re-authenticate 2-88
dot1x re-authentication 2-89
dot1x system-auth-control 2-90
dot1x timeout 2-91
duplex 2-93
errdisable detect 2-95
errdisable recovery 2-97
flowcontrol 2-100

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

v

Contents

hw-module power 2-103
instance 2-104
interface port-channel 2-107
interface range 2-108
interface vlan 2-110
ip arp inspection filter vlan 2-111
ip arp inspection limit (interface) 2-113
ip arp inspection log-buffer 2-115
ip arp inspection trust 2-117
ip arp inspection validate 2-118
ip arp inspection vlan 2-120
ip arp inspection vlan logging 2-121
ip cef load-sharing algorithm 2-123
ip dhcp snooping 2-124
ip dhcp snooping binding 2-125
ip dhcp snooping database 2-126
ip dhcp snooping information option 2-128
ip dhcp snooping limit rate 2-129
ip dhcp snooping trust 2-130
ip dhcp snooping vlan 2-131
ip igmp filter 2-133
ip igmp max-groups 2-134
ip igmp profile 2-135
ip igmp query-interval 2-136
ip igmp snooping 2-137
ip igmp snooping report-suppression 2-139
ip igmp snooping vlan 2-141
ip igmp snooping vlan explicit-tracking 2-142
ip igmp snooping vlan immediate-leave 2-143
ip igmp snooping vlan mrouter 2-144
ip igmp snooping vlan static 2-146
ip local-proxy-arp 2-147
ip mfib fastdrop 2-148
ip route-cache flow 2-149
ip source binding 2-151

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

vi

78-16201-01

ip sticky-arp 2-152
ip verify header vlan all 2-154
ip verify source vlan dhcp-snooping 2-155
l2protocol-tunnel 2-157
l2protocol-tunnel cos 2-158
l2protocol-tunnel drop-threshold 2-159
l2protocol-tunnel shutdown-threshold 2-160
lacp port-priority 2-161
lacp system-priority 2-162
mac access-list extended 2-163
mac-address-table aging-time 2-166
mac-address-table dynamic group protocols 2-167
mac-address-table static 2-170

Contents

macro apply cisco-desktop 2-172
macro apply cisco-phone 2-174
macro apply cisco-router 2-176
macro apply cisco-switch 2-178
main-cpu 2-180
match 2-181
monitor session 2-182
mtu 2-186
name 2-187
pagp learn-method 2-188
pagp port-priority 2-189
permit 2-190
policy-map 2-192
port-channel load-balance 2-194
power dc input 2-196
power inline 2-197
power inline consumption 2-199
power redundancy-mode 2-200
power supplies required 2-202
private-vlan 2-203
private-vlan mapping 2-205
private-vlan synchronize 2-207

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

vii

Contents

qos (global configuration mode) 2-208
qos (interface configuration mode) 2-209
qos account layer2 encapsulation 2-210
qos aggregate-policer 2-212
qos cos 2-215
qos dbl 2-216
qos dscp 2-218
qos map cos 2-219
qos map dscp 2-220
qos map dscp policed 2-222
qos rewrite ip dscp 2-223
qos trust 2-224
qos vlan-based 2-226
redundancy 2-227
redundancy force-switchover 2-228
redundancy reload 2-229
remote login module 2-230
remote-span 2-231
renew ip dhcp snooping database 2-232
reset 2-233
revision 2-234
service-policy 2-235
session module 2-236
shape 2-237
show access-group mode interface 2-239
show arp access-list 2-240
show auto qos 2-241
show bootflash: 2-243
show bootvar 2-245
show class-map 2-246
show diagnostic result module 2-247
show diagnostic result module test 2 2-251
show diagnostic result module test 3 2-253
show dot1x 2-255
show environment 2-258

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

viii

78-16201-01

show errdisable detect 2-261
show errdisable recovery 2-262
show etherchannel 2-263
show flowcontrol 2-267
show idprom 2-269
show interfaces 2-274
show interfaces capabilities 2-276
show interfaces counters 2-279
show interfaces description 2-281
show interfaces link 2-282
show interfaces mtu 2-283
show interfaces private-vlan mapping 2-284
show interfaces status 2-285

Contents

show interfaces switchport 2-286
show interfaces transceiver 2-288
show interfaces trunk 2-293
show ip arp inspection 2-295
show ip arp inspection log 2-298
show ip cef vlan 2-299
show ip dhcp snooping 2-300
show ip dhcp snooping binding 2-301
show ip dhcp snooping database 2-304
show ip igmp interface 2-306
show ip igmp profile 2-307
show ip igmp snooping 2-308
show ip igmp snooping membership 2-312
show ip igmp snooping mrouter 2-314
show ip igmp snooping vlan 2-315
show ip mfib 2-316
show ip mfib fastdrop 2-318
show ip mroute 2-319
show ip source binding 2-324
show ip verify source 2-325
show ipc 2-327
show l2protocol-tunnel 2-329

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

ix

Contents

show lacp 2-332
show mac access-group interface 2-335
show mac-address-table address 2-336
show mac-address-table aging-time 2-338
show mac-address-table count 2-339
show mac-address-table dynamic 2-340
show mac-address-table interface 2-342
show mac-address-table multicast 2-344
show mac-address-table protocol 2-346
show mac-address-table static 2-348
show mac-address-table vlan 2-350
show module 2-352
show monitor 2-354
show pagp 2-356
show policy-map 2-358
show policy-map interface 2-359
show port-security 2-361
show power 2-363
show qos 2-367
show qos aggregate policer 2-368
show qos dbl 2-369
show qos interface 2-370
show qos maps 2-371
show redundancy 2-373
show running-config 2-376
show slavebootflash: 2-378
show slaveslot0: 2-380
show slot0: 2-382
show spanning-tree 2-384
show spanning-tree mst 2-389
show storm-control 2-391
show system mtu 2-393
show tech-support 2-394
show udld 2-396
show vlan 2-397

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

x

78-16201-01

show vlan access-map 2-400
show vlan counters 2-401
show vlan dot1q tag native 2-402
show vlan internal usage 2-403
show vlan mtu 2-404
show vlan private-vlan 2-405
show vlan remote-span 2-407
show vmps 2-408
show vtp 2-409
snmp ifindex clear 2-413
snmp ifindex persist 2-414
snmp-server enable traps 2-415
snmp-server ifindex persist 2-417

Contents

snmp-server ifindex persist compress 2-418
spanning-tree backbonefast 2-419
spanning-tree bpdufilter 2-420
spanning-tree bpduguard 2-422
spanning-tree cost 2-423
spanning-tree etherchannel guard misconfig 2-424
spanning-tree extend system-id 2-425
spanning-tree guard 2-426
spanning-tree link-type 2-427
spanning-tree loopguard default 2-428
spanning-tree mode 2-429
spanning-tree mst 2-430
spanning-tree mst configuration 2-431
spanning-tree mst forward-time 2-433
spanning-tree mst hello-time 2-434
spanning-tree mst max-age 2-435
spanning-tree mst max-hops 2-436
spanning-tree mst root 2-437
spanning-tree pathcost method 2-439
spanning-tree portfast (interface configuration mode) 2-440
spanning-tree portfast bpdufilter default 2-442
spanning-tree portfast bpduguard default 2-444

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xi

Contents

spanning-tree portfast default 2-445
spanning-tree port-priority 2-446
spanning-tree uplinkfast 2-447
spanning-tree vlan 2-449
speed 2-451
storm-control 2-454
storm-control broadcast include multicast 2-456
switchport 2-457
switchport access vlan 2-459
switchport block 2-461
switchport mode 2-462
switchport port-security 2-464
switchport private-vlan association trunk 2-468
switchport private-vlan host-association 2-469
switchport private-vlan mapping 2-470
switchport private-vlan trunk allowed vlan 2-471
switchport private-vlan trunk native vlan 2-473
switchport trunk 2-474
system mtu 2-477
traceroute mac 2-478
traceroute mac ip 2-481
tx-queue 2-484
udld (global configuration mode) 2-486
udld (interface configuration mode) 2-488
udld reset 2-490
unidirectional 2-491
username 2-492
verify 2-493
vlan (VLAN Database mode) 2-495
vlan access-map 2-498
vlan database 2-499
vlan dot1q tag native 2-501
vlan filter 2-502
vlan internal allocation policy 2-503
vmps reconfirm (global configuration) 2-504

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xii

78-16201-01

I

N D E X

Contents

vmps reconfirm (privileged EXEC) 2-505
vmps retry 2-506
vmps server 2-507
vtp (global configuration mode) 2-509
vtp client 2-510
vtp domain 2-511
vtp password 2-512
vtp pruning 2-513
vtp server 2-514
vtp transparent 2-515
vtp v2-mode 2-516

A P PE ND I X

A P PE ND I X

A Acronyms A-1

B Acknowledgments for Open-Source Software B-1

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xiii

Contents

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xiv

78-16201-01

Audience

Preface

This preface describes the audience, organization, and conventions of this publication, and provides
information on how to obtain related documentation.

This publication is for experienced network administrators who are responsible for configuring and
maintaining Catalyst4500 series switches.

Organization

This publication is organized as follows:

Chapter Title Description

Chapter 1 Command-Line Interface Describes the Catalyst4500 series switch

Chapter 2 Cisco IOS Commands for

the Catalyst 4500 Series
Switches

Appendix A Acronyms Defines the acronyms used in this

Appendix B Acknowledgments for

Open-Source Software

Related Documentation

The Catalyst4500 series Cisco IOS documentation set includes these publications:

• Catalyst4500 Series Switch InstallationGuide

• Catalyst 4500 Series Switch Supervisor Engine III Installation Note

CLI.
Lists all Catalyst4500 series CiscoIOS

commands alphabetically and provides
detailed information on each command.

publication.
Provides the acknowledgments for

Open-Source Software.

• Catalyst 4500 Series Switch Supervisor Engine IV Installation Note

• Catalyst4500 Series Switch Cisco IOS Software Configuration Guide

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xv

Conventions

Conventions

• Catalyst4500 Series Switch Cisco IOS System Message Guide

• Release Notes for Catalyst 4500 Series Switch Software Release 12.1(13)EW

Other documents in the Cisco IOS documentation set include:

• Cisco IOS Release 12.1 Configuration Guides

• Cisco IOS Release 12.1 Command References

For information about MIBs, refer to this URL:

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

This document uses these conventions:

Convention Description

boldface font Boldface text indicates commands and keywords that you

enter literally as shown.

italic font Italic text indicates arguments for which you supply values.
[x] Square brackets enclose an optional element (keyword or

argument).

| A vertical line indicates a choice within an optional or

required set of keywords or arguments.

[x | y] Square brackets enclosing keywords or arguments separated

by a vertical line indicate an optional choice.

{x | y} Braces enclosing keywords or arguments separated by a

vertical line indicate a required choice.

[x {y | z }] Braces and a vertical line within square brackets indicate a

required choice within an optional element.

string A nonquoted set of characters. Do not use quotation marks

around the string or the string will include the quotation
marks.

screen font Terminal sessions and information the system displays are in

screen font.

boldface screen

font
italic screen font Arguments for which you supply values are in italic screen

^ The symbol ^ represents the key labeled Control—for

<> Nonprinting characters, such as passwords, are in angle

Information you must enter is in boldface screen font.

font.

example, the key combination ^D in a screen display means
hold down the Control key while you press the D key.

brackets.

Preface

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xvi

78-16201-01

Preface

Obtaining Documentation

Convention Description

[] Default responses to system prompts are in square brackets.
!, # An exclamation point (!) or a pound sign (#) at the beginning

of a line of code indicates a comment line.

Notes use this convention:

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the

publication.

Cautions use this convention:

Caution Means reader be careful. In this situation, you might do something that could result in equipment

damage or loss of data.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

• Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from

the Ordering tool:

http://www.cisco.com/en/US/partner/ordering/index.shtml

• Nonregistered Cisco.com users can order documentation through a local account representative by

calling Cisco Systems Corporate Headquarters (California, USA) at 408526-7208 or, elsewhere in
North America, by calling 800553-NETS (6387).

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xvii

Documentation Feedback

Documentation Feedback

You can submit e-mail comments about technical documentation to [e-mail].
You can submit comments by using the response card (if present) behind the front cover of your

document or by writing to the following address:
Cisco Systems

Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco
Technical Assistance Center (TAC) provides 24-hour-a-day, award-winning technical support services,
online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for
technical assistance. If you do not hold a valid Cisco service contract, please contact your reseller.

Preface

Cisco TAC Website

The Cisco TAC website provides online documents and tools for troubleshooting and resolving technical
issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365
days a year. The Cisco TAC website is located at this URL:

http://www.cisco.com/tac

Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you
have a valid service contract but do not have a login ID or password, register at this URL:

http://tools.cisco.com/RPF/register/register.do

Opening a TAC Case

Using the online TAC Case Open Tool is the fastest way to open P3 and P4 cases. (P3 and P4 cases are
those in which your network is minimally impaired or for which you require product information.) After
you describe your situation, the TAC Case Open Tool automatically recommends resources for an
immediate solution. If your issue is not resolved using the recommended resources, your case will be
assigned to a Cisco TAC engineer. The online TAC Case Open Tool is located at this URL:

http://www.cisco.com/tac/caseopen

For P1 or P2 cases (P1 and P2 cases are those in which your production network is down or severely
degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers
are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xviii

78-16201-01

Preface

To open a case by telephone, use one of the following numbers:
Asia-Pacific: [phone] (Australia: 1 800 805 227)

EMEA: [phone]
USA: 1 800 553-2447

For a complete listing of Cisco TAC contacts, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

TAC Case Priority Definitions

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.
Priority 1 (P1)—Your network is “down” or there is a critical impact to your business operations. You

and Cisco will commit all necessary resources around the clock to resolve the situation.
Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your

business operation are negatively affected by inadequate performance of Cisco products. You and Cisco
will commit full-time resources during normal business hours to resolve the situation.

Priority 3 (P3)—Operational performance of your network is impaired, but most business operations
remain functional. You and Cisco will commit resources during normal business hours to restore service
to satisfactory levels.

Obtaining Additional Publications and Information

Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or
configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online
and printed sources.

• Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Go

to this URL to visit the company store:

http://www.cisco.com/go/marketplace/

• The Cisco Product Catalog describes the networking products offered by CiscoSystems, as well as

ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://cisco.com/univercd/cc/td/doc/pcat/

• Cisco Press publishes a wide range of general networking, training and certification titles. Both new

and experienced users will benefit from these publications. For current Cisco Press titles and other
information, go to Cisco Press online at this URL:

http://www.ciscopress.com

• Packet magazine is the Cisco quarterly publication that provides the latest networking trends,

technology breakthroughs, and Cisco products and solutions to help industry professionals get the
most from their networking investment. Included are networking deployment and troubleshooting
tips, configuration examples, customer case studies, tutorials and training, certification information,
and links to numerous in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

78-16201-01

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xix

Obtaining Additional Publications and Information

• iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet

business strategies for executives. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

• Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering

professionals involved in designing, developing, and operating public and private internets and
intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

• Training—Cisco offers world-class networking training. Current offerings in network training are

listed at this URL:

http://www.cisco.com/en/US/learning/index.html

Preface

Catalyst4500 Series Switch Cisco IOS Command Reference—Release 12.2(18)EW

xx

78-16201-01

C H A P T E R

1

Command-Line Interface

This chapter provides information for understanding and using the CiscoIOS command-line interface
(CLI) on the Catalyst4500 series switch. This chapter includes the following sections:

• Getting Help, page 1-1

• How to Find Command Options, page 1-2

• Understanding Command Modes, page 1-4

• Using the No and Default Forms of Commands, page 1-6

• Using the CLI String Search, page 1-6

• Saving Configuration Changes, page 1-11

For an overview of the Catalyst4500 series switch Cisco IOS configuration, refer to the Catalyst4500
Series Switch CiscoIOS Software Configuration Guide .

Getting Help

To display a list of commands that you can use within a command mode, enter a question mark (?) at the
system prompt. You also can display keywords and arguments for each command with this
context-sensitive help feature.

Table1-1 lists commands you can enter to get help that is specific to a command mode, a command, a

keyword, or an argument.

Table1-1 Getting Help

Command Purpose

abbreviated-command-entry? Displays a list of commands that begin with a

particular character string. (Do not leave a space
between the command and question mark.)

abbreviated-command-entry<Tab> Completes a partial command name.
? Lists all commands for the command mode.

command ? Lists all keywords for the command. Leave a space

between the command and the question mark.

command keyword ? Lists all arguments for the keyword. Leave a space

between the keyword and the question mark.

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-1

How to Find Command Options

How to Find Command Options

This section provides an example of how to display syntax for a command. The syntax can consist of
optional or required keywords. To display keywords for a command, enter a question mark (?) at the
command prompt or after entering part of a command followed by a space. The Catalyst4500 series
switch software displays a list of available keywords along with a brief description of the keywords. For
example, if you are in global configuration mode and want to see all the keywords for the arap
command, you enter arap ?.

Table1-2 shows examples of how you can use the question mark (?) to assist you in entering commands

and also guides you through entering the following commands:

• interface gigabitethernet 1/1

• channel-group 1 mode auto

Table1-2 How to Find Command Options

Command Purpose

Switch> enable
Password: <password>
Switch#

Enter the enable command and
password to access privileged EXEC
commands.

Chapter1 Command-Line Interface

Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#

Switch(config)# interface gigabitethernet ?
<1-9> GigabitEthernet interface number
Switch(config)# interface gigabitethernet 1/1
Switch(config-if)#

You are in privileged EXEC mode
when the prompt changes to Switch# .

Enter global configuration mode.
You are in global configuration mode

when the prompt changes to

Switch(config)#.

Enter interface configuration mode by
specifying the Gigabit Ethernet
interface that you want to configure
using the interface gigabitethernet
global configuration command.

Enter a ? to display what you must
enter next on the command line. In
this example, you must enter an
interface number from 1to 9 in the
format module-number /port-number.

You are in interface configuration
mode when the prompt changes to

Switch(config-if)#.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-2

78-16201-01

Chapter1 Command-Line Interface

Table1-2 How to Find Command Options (continued)

Command Purpose

Switch(config-if)# ?
Interface configuration commands:
access-expression Build a bridge boolean access expression
apollo Apollo interface subcommands
appletalk Appletalk interface subcommands
arp Set arp type (arpa, probe, snap) or timeout
backup Modify backup parameters
bandwidth Set bandwidth informational parameter
bgp-policy Apply policy propogated by bgp community string
bridge-group Transparent bridging interface parameters
carrier-delay Specify delay for interface transitions
cdp CDP interface subcommands
channel-group Etherchannel/port bundling configuration
clns CLNS interface subcommands
cmns OSI CMNS
custom-queue-list Assign a custom queue list to an interface
decnet Interface DECnet config commands
default Set a command to its defaults
delay Specify interface throughput delay
description Interface specific description
dlsw DLSw interface subcommands
dspu Down Stream PU
exit Exit from interface configuration mode
fair-queue Enable Fair Queuing on an Interface
flowcontrol Configure flow operation.
fras DLC Switch Interface Command
help Description of the interactive help system
hold-queue Set hold queue depth
ip Interface Internet Protocol config commands
ipx Novell/IPX interface subcommands
isis IS-IS commands
iso-igrp ISO-IGRP interface subcommands

Enter a ? to display a list of all the
interface configuration commands
available for the Gigabit Ethernet
interface.

How to Find Command Options

.
.
.

Switch(config-if)#
Switch(config-if)# channel-group ?

group channel-group of the interface

Switch(config-if)#channel-group

Enter the command that you want to
configure for the controller. In this
example, the channel-group
command is used.

Enter a ? to display what you must
enter next on the command line. In
this example, you must enter the
group keyword.

Because a <cr> is not displayed, it
indicates that you must enter more
information to complete the
command.

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-3

Understanding Command Modes

Table1-2 How to Find Command Options (continued)

Command Purpose

Switch(config-if)# channel-group ?
<1-256> Channel group number

Switch(config-if)#channel-group

Switch(config-if)# channel-group 1 ?
mode Etherchannel Mode of the interface

Switch(config-if)#

Switch(config-if)# channel-group 1 mode ?
auto Enable PAgP only if a PAgP device is detected
desirable Enable PAgP unconditionally
on Enable Etherchannel only

Switch(config-if)#

Switch(config-if)# channel-group 1 mode auto ?
<cr>

Switch(config-if)#

Switch(config-if)# channel-group 1 mode auto
Switch(config-if)#

After you enter the group keyword,
enter a ? to display what you must
enter next on the command line. In
this example, you must enter a channel
group number from 1to 256.

Because a <cr> is not displayed, it
indicates that you must enter more
information to complete the
command.

After you enter the channel group
number, enter a ? to display what you
must enter next on the command line.
In this example, you must enter the
mode keyword.

Because a <cr> is not displayed, it
indicates that you must enter more
information to complete the
command.

After you enter the mode keyword,
enter a ? to display what you must
enter next on the command line. In
this example, you must enter the auto,
desirable, or on keyword.

Because a <cr> is not displayed, it
indicates that you must enter more
information to complete the
command.

In this example, the auto keyword is
entered. After you enter the auto
keyword, enter a ? to display what you
must enter next on the command line.

Because a <cr> is displayed, it
indicates that you can press Return to
complete the command. If additional
keywords are listed, you can enter
more keywords or press Return to
complete the command.

In this example, press Return to
complete the command.

Chapter1 Command-Line Interface

Understanding Command Modes

The CiscoIOS user interface on the Catalyst4500 series switch has many different modes. The
commands that are available to you depend on which mode you are currently in. You can obtain a list of
commands available for each command mode by entering a question mark (?) at the system prompt.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-4

78-16201-01

Chapter1 Command-Line Interface

When you start a session on the Catalyst4500 series switch, you begin in user mode, often called EXEC
mode. Only a limited subset of the commands are available in EXEC mode. In order to have access to
all commands, you must enter privileged EXEC mode. Normally, you must enter a password to enter
privileged EXEC mode. From privileged EXEC mode, you can enter any EXEC command or enter global
configuration mode. Most EXEC commands are one-time commands, such as show commands, which
show the current status of a given item, and clear commands, which clear counters or interfaces. The
EXEC commands are not saved across reboots of the Catalyst4500 series switch.

The configuration modes provide a way for you to make changes to the running configuration. When you
save changes to the configuration, the changes remain intact when the Catalyst 4500 series switch
reboots. From global configuration mode, you can enter interface configuration mode, subinterface
configuration mode, and other protocol-specific modes.

ROM-monitor mode is a separate mode used when the Catalyst4500 series switch cannot boot properly.
If your Catalyst4500 series switch or access server does not find a valid system image when it is booting,
or if its configuration file is corrupted at startup, the system might enter ROM-monitor mode.

Table1-3 provides a summary of the main command modes.

Table1-3 Summary of Main Command Modes

Command
Mode Access Method Prompt Exit Method

User EXEC Log in. Switch> Use the logout command.
Privileged

EXEC

Global
configuration

Interface
configuration

From user EXEC mode,
enter the enable EXEC
command.

From privileged EXEC
mode, enter the

configure terminal

privileged EXEC
command.

From global
configuration mode,
enter by specifying an
interface with an
interface command.

Switch# To exit to user EXEC mode, enter the disable

command.
To enter global configuration mode, enter the

configure terminal privileged EXEC command.

Switch(config)# To exit to privileged EXEC mode, enter the exit or

end command or press Ctrl-Z.

To enter interface configuration mode, enter an
interface configuration command.

Switch(config-if)# To exit to global configuration mode, enter the exit

command.
To exit to privileged EXEC mode, enter the exit

command or press Ctrl-Z.
To enter subinterface configuration mode, specify a

subinterface with the interface command.

Understanding Command Modes

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-5

Using the No and Default Forms of Commands

Table1-3 Summary of Main Command Modes (continued)

Command
Mode Access Method Prompt Exit Method

Subinterface
configuration

ROM monitor From privileged EXEC

From interface
configuration mode,
specify a subinterface
with an interface
command.

mode, enter the reload
EXEC command. Press
the Break key during the
first 60 seconds while the
system is booting.

For more information on command modes, refer to the “Using the Command Line Interface” chapter of
the Configuration Fundamentals Configuration Guide .

Switch(config-subif)# To exit to global configuration mode, enter the exit

command.
To enter privileged EXEC mode, enter the end

command or press Ctrl-Z.

Rommon> To exit ROM-monitor mode, you must reload the

image by entering the boot command. If you use
the boot command without specifying a file or any
other boot instructions, the system boots from the
default Flash image (the first image in onboard
Flash memory). Otherwise, you can instruct the
system to boot from a specific Flash image (using
the boot system flash filename command).

Chapter1 Command-Line Interface

Using the No and Default Forms of Commands

Almost every configuration command has a no form. In general, enter the no form to disable a function.
Use the command without the keyword no to reenable a disabled function or to enable a function that is
disabled by default. For example, IP routing is enabled by default. To disable IP routing, specify the
noiprouting command and specify ip routing to reenable it. This publication provides the complete
syntax for the configuration commands and describes what the no form of a command does.

Some configuration commands have a default form. The default form of a command returns the
command setting to its default settings. Most commands are disabled by default, so the default form is
the same as the no form. However, some commands are enabled by default, with variables set to certain
default values. In these cases, the default form of the command enables the command and returns its
variables to their default values.

Using the CLI String Search

The pattern in the command output is referred to as a string. The CLI string search feature allows you to
search or filter any show or more command output and allows you to search and filter at --More-­prompts. This feature is useful when you need to sort though large amounts of output, or if you want to
exclude output that you do not need to see.

With the search function, you can begin unfiltered output at the first line that contains a regular
expression you specify. You can then specify a maximum of one filter per command or start a new search
from the --More-- prompt.

A regular expression is a pattern (a phrase, number, or more complex pattern) software uses to match
against show or more command output. Regular expressions are case sensitive and allow for complex
matching requirements. Examples of simple regular expressions are Serial, misses, and 138. Examples
of complex regular expressions are 00210..., (is), and [Oo]utput.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-6

78-16201-01

Chapter1 Command-Line Interface

You can perform three types of filtering:

• Use the begin keyword to begin output with the line that contains a specified regular expression.

• Use the include keyword to include output lines that contain a specified regular expression.

• Use the exclude keyword to exclude output lines that contain a specified regular expression.

You can then search this filtered output at the --More-- prompts.

Note The CLI string search function does not allow you to search or filter backward through previous output;

filtering cannot be specified using HTTP access to the CLI.

Regular Expressions

A regular expression can be a single character that matches the same single character in the command
output or multiple characters that match the same multiple characters in the command output. This
section describes how to create both single-character patterns and multiple-character patterns and how
to create more complex regular expressions using multipliers, alternation, anchoring, and parentheses.

Using the CLI String Search

Single-Character Patterns

The simplest regular expression is a single character that matches the same single character in the
command output. You can use any letter (A-Z, a-z) or digit (0-9) as a single-character pattern. You can
also use other keyboard characters (such as ! or ~) as single-character patterns, but certain keyboard
characters have special meaning when used in regular expressions. Table1-4 lists the keyboard
characters that have special meaning.

Table1-4 Characters with Special Meaning

Character Special Meaning

. Matches any single character, including white space.
* Matches 0 or more sequences of the pattern.
+ Matches 1 or more sequences of the pattern.
? Matches 0 or 1 occurrences of the pattern.
^ Matches the beginning of the string.
$ Matches the end of the string.
_ (underscore) Matches a comma (,), left brace ({), right brace (}), left parenthesis (( ),

To enter these special characters as single-character patterns, remove the special meaning by preceding
each character with a backslash (\). These examples are single-character patterns matching a dollar sign,
an underscore, and a plus sign, respectively.

right parenthesis ()), the beginning of the string, the end of the string, or a
space.

\$ \_ \+

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-7

Using the CLI String Search

You can specify a range of single-character patterns to match against command output. For example, you
can create a regular expression that matches a string containing one of the following letters: a, e, i, o, or
u. One and only one of these characters must exist in the string for pattern matching to succeed. To
specify a range of single-character patterns, enclose the single-character patterns in square brackets
([]).For example,

[aeiou]

matches any one of the five vowels of the lowercase alphabet, while

[abcdABCD]

matches any one of the first four letters of the lower- or uppercase alphabet.
You can simplify ranges by entering only the end points of the range separated by a dash (-). Simplify

the previous range as follows:

[a-dA-D]

To add a dash as a single-character pattern in your range, include another dash and precede it with a
backslash:

[a-dA-D\-]

You can also include a right square bracket (]) as a single-character pattern in your range. To do so, enter
the following:

Chapter1 Command-Line Interface

[a-dA-D\-\]]

The previous example matches any one of the first four letters of the lower- or uppercase alphabet, a
dash, or a right square bracket.

You can reverse the matching of the range by including a caret (^) at the start of the range. This example
matches any letter except the ones listed:

[^a-dqsv]
This example matches anything except a right square bracket (]) or the letter d:

[^\]d]

Multiple-Character Patterns

When creating regular expressions, you can also specify a pattern containing multiple characters. You
create multiple-character regular expressions by joining letters, digits, or keyboard characters that do not
have special meaning. For example, a4% is a multiple-character regular expression. Put a backslash in
front of the keyboard characters that have special meaning when you want to remove their special
meaning.

With multiple-character patterns, order is important. The regular expression a4% matches the character
a followed by a 4 followed by a % sign. If the string does not have a4%, in that order, pattern matching
fails. This multiple-character regular expression:

a.

uses the special meaning of the period character to match the letter a followed by any single character.
With this example, the strings ab, a!, or a2 are all valid matches for the regular expression.

You can remove the special meaning of the period character by putting a backslash in front of it. In the
following expression:

a\.

only the string a. matches this regular expression.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-8

78-16201-01

Chapter1 Command-Line Interface

You can create a multiple-character regular expression containing all letters, all digits, all keyboard
characters, or a combination of letters, digits, and other keyboard characters. These examples are all
valid regular expressions:

telebit 3107 v32bis

Multipliers

You can create more complex regular expressions to match multiple occurrences of a specified regular
expression by using some special characters with your single- and multiple-character patterns. Table1-5
lists the special characters that specify “multiples” of a regular expression.

Table1-5 Special Characters Used as Multipliers

Character Description

* Matches 0 or more single- or multiple-character patterns.
+ Matches 1 or more single- or multiple-character patterns.
? Matches 0 or 1 occurrences of the single- or multiple-character patterns.

Using the CLI String Search

This example matches any number of occurrences of the letter a, including none:

a*

This pattern requires that at least one letter a in the string is matched:

a+

This pattern matches the string bb or bab:

ba?b

This string matches any number of asterisks (*):
\**
To use multipliers with multiple-character patterns, you enclose the pattern in parentheses. In the

following example, the pattern matches any number of the multiple-character string ab:

(ab)*

As a more complex example, this pattern matches one or more instances of alphanumeric pairs (but not
none; that is, an empty string is not a match):

([A-Za-z][0-9])+
The order for matches using multipliers (*, +, or ?) is to put the longest construct first. Nested constructs

are matched from outside to inside. Concatenated constructs are matched beginning at the left side of the
construct. Thus, the regular expression matches A9b3, but not 9Ab3 because the letters are specified
before the numbers.

Alternation

Alternation allows you to specify alternative patterns to match against a string. You separate the
alternative patterns with a vertical bar (|). Exactly one of the alternatives can match the string. For
example, the regular expression

codex | telebit
matches the string codex or the string telebit, but not both codex and telebit.

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-9

Using the CLI String Search

Anchoring

Chapter1 Command-Line Interface

You can match a regular expression pattern against the beginning or the end of the string. That is, you
can specify that the beginning or end of a string contains a specific pattern. You “anchor” these regular
expressions to a portion of the string using the special characters shown in Table1-6 .

Table1-6 Special Characters Used for Anchoring

Character Description

^ Matches the beginning of the string.
$ Matches the end of the string.

This regular expression matches a string only if the string starts with abcd:

^abcd

In contrast, this expression is in a range that matches any single letter, as long as it is not the letters a, b,
c, or d:

[^abcd]

With this example, the regular expression matches a string that ends with .12:

$\.12

Contrast these anchoring characters with the special character underscore (_). The underscore matches
the beginning of a string (^), the end of a string ($), parentheses ( ), space ( ), braces { }, comma (,), or
underscore (_). With the underscore character, you can specify that a pattern exist anywhere in the string.

For example:

_1300_

matches any string that has 1300 somewhere in the string. The string’s 1300 can be preceded by or end
with a space, brace, comma, or underscore. For example:

{1300_

matches the regular expression, but 21300 and 13000 do not.
Using the underscore character, you can replace long regular expression lists, such as the following:

^1300$ ^1300(space) (space)1300 {1300, ,1300, {1300} ,1300, (1300

with

_1300_

Parentheses for Recall

As shown in the “Multipliers” section on page1-9, you use parentheses with multiple-character regular
expressions to multiply the occurrence of a pattern. You can also use parentheses around a single- or
multiple-character pattern to remember a pattern for use elsewhere in the regular expression.

To create a regular expression that recalls a previous pattern, you use parentheses to indicate a
remembered specific pattern and a backslash (\) followed by an integer to reuse the remembered pattern.
The integer specifies the occurrence of the parentheses in the regular expression pattern. If you have
more than one remembered pattern in your regular expression, then \1 indicates the first remembered
pattern, \2indicates the second remembered pattern, and so on.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-10

78-16201-01

Chapter1 Command-Line Interface

This regular expression uses parentheses for recall:

a(.)bc(.)\1\2

This regular expression matches an a followed by any character (call it character 1), followed by bc
followed by any character (character 2), followed by character 1 again, followed by character 2 again.
So, the regular expression can match aZbcTZT. The software remembers that character 1 is Z and
character 2 is T and then uses Z and T again later in the regular expression.

Saving Configuration Changes

To save your configuration changes to your startup configuration so that they will not be lost if there is
a system reload or power outage, enter the following command:

Switch# copy system:running-config nvram:startup-config
Building configuration...

It might take a minute or two to save the configuration. After the configuration has been saved, the
following output appears:

[OK]
Switch#

Saving Configuration Changes

On most platforms, this step saves the configuration to NVRAM. On the Class A Flash file system
platforms, this step saves the configuration to the location specified by the CONFIG_FILE environment
variable. The CONFIG_FILE environment variable defaults to NVRAM.

Show Platform Commands

You should use these commands only when you are working directly with your technical support
representative, while troubleshooting a problem. Do not use these commands unless your technical
support representative asks you to do so.

Note The show platform commands are not described in this document.

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-11

Show Platform Commands

Chapter1 Command-Line Interface

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

1-12

78-16201-01

C H A P T E R

2

Cisco IOS Commands for the Catalyst 4500 Series
Switches

This chapter contains an alphabetical listing of CiscoIOS commands for the Catalyst4500 series
switches. For information about Cisco IOS commands that are not included in this publication, refer to
CiscoIOS Release 12.1 ConfigurationGuides and CommandReferences at this URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/index.htm

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-1

#macro keywords

#macro keywords

To specify the help string for macro keywords, use the #macro keywords command.

#macro keywords [keyword1] [keyword2] [keyword3]

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

keyword 1 (Optional) Specifies a keyword that is needed while applying a macro to an

interface.

keyword 2 (Optional) Specifies a keyword that is needed while applying a macro to an

interface.

keyword 3 (Optional) Specifies a keyword that is needed while applying a macro to an

interface.

Defaults This command has no default settings.

Command Modes Global configuration

Command History

Release Modification

12.2(18)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines If you do not specify the mandatory keywords for a macro, the macro is to be considered invalid and fails

when you attempt to apply it. By entering #macro keywords , you will receive a message indicating what
you need to include to make the syntax valid.

Examples This example shows how to specify the help string for keywords associated with a macro named test:

Switch(config)# macro name test
macro name test
Enter macro commands one per line. End with the character '@'.

#macro keywords $VLAN $MAX

swichport
@

Switch(config)# int gi1/1
Switch(config-if)# macro apply test ?
WORD Keyword to replace with a value e.g $VLAN, $MAX << It is shown as help
<cr>

Related Commands macro apply cisco-desktop

macro apply cisco-phone
macro apply cisco-router
macro apply cisco-switch

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-2

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

aaa accounting dot1x d efault start-stop group radius

aaa accounting dot1x default start-stop group radius

To enable accounting for dot.1x authentication sessions, use the aaa accounting dot1x default
start-stop group radius command. Use the no form of this command to disable accounting.

aaa accounting dot1x default start-stop group radius
no aaa accounting dot1x default start-stop group radius

Syntax Description This command has no arguments or keywords.

Defaults Accounting is disabled.

Command Modes Global configuration

Command History

Release Modification

12.2(18)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines 802.1x accounting requires a RADIUS server.

This command enables the Authentication, Authorization, and Accounting (AAA) client’s accounting
feature to forward 802.1x update and watchdog packets from the 802.1x supplicant (workstation client)
to the authentication (RADIUS) server. (Watchdog packets are defined as EAPOL-LOGON,
EAPOL-LOGOFF, and EAPOL-INTERIM messages.) Successful authentication and authorization of
the supplicant by the authentication server is required before these packets are considered valid and are
forwarded. When the client is reauthenticated, an interim-update accounting notice is sent to the
accounting server.

Examples The following example shows how to configure 802.1x accounting:

Switch(config)# aaa accounting dot1x default start-stop group radius

Note The RADIUS authentication server must be properly configured to accept and log update or watchdog

packets from the AAA client.

Related Commands aaa accounting system default start-stop group radius

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-3

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

aaa accounting system default start-stop group radius

aaa accounting system default start-stop group radius

To receive session termination messages after the switch reboots, use the aaa accounting system
default start-stop group radius command. Use the no form of this command to disable accounting.

aaa accounting system default start-stop group radius
no aaa accounting system default start-stop group radius

Syntax Description This command has no arguments or keywords.

Defaults Accounting is disabled.

Command Modes Global configuration mode

Command History

Release Modification

12.2(18)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines 802.1x accounting requires the RADIUS server.

This command enables the AAA client’s accounting feature to forward 802.1x update and watchdog
packets from the 802.1x supplicant (workstation client) to the authentication (RADIUS) server.
(Watchdog packets are defined as EAPOL-LOGON, EAPOL-LOGOFF, and EAPOL-INTERIM
messages.) Successful authentication and authorization of the supplicant by the authentication server is
required before these packets are considered valid and are forwarded. When the client is reauthenticated,
an interim-update accounting notice is sent to the accounting server.

Examples The following example shows how to generate a logoff after a switch reboots:

Switch(config)# aaa accounting system default start-stop group radius

Note The RADIUS authentication server must be properly configured to accept and log update or watchdog

packets from the AAA client.

Related Commands aaa accounting dot1x default start-stop group radius

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-4

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

access-group mode

To specify override modes (for example, VACL overrides PACL) and non-override modes (for example,
merge or strict mode), use the access-group mode command. Use the no form of this command to return
to preferred port mode.

access-group mode {prefer {port | vlan} | merge}
no access-group mode {prefer {port | vlan} | merge}

access-group mode

Syntax Description

prefer port Specifies that the PACL mode take precedence if PACLs are configured. If no

PACL features are configured on the port, other features applicable to the
interface are merged and applied on the interface.

prefer vlan Specifies that the VLAN-based ACL mode take precedence. If no VLAN-based

ACL features are configured on the port’s VLAN, the PACL features on the port
are applied.

merge Merges applicable ACL features before they are programmed into the hardware.

Defaults PACL override mode

Command Modes Interface configuration

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines On the Layer 2 interface, prefer port, prefer VLAN, and merge modes are supported. A Layer2 interface

can have one IP ACL applied in either direction (one inbound and one outbound).

Examples This example shows how to make the PACL mode on the switch take effect:

(config-if)# access-group mode prefer port

This example shows how to merge applicable ACL features:

(config-if)# access-group mode merge

Related Commands show access-group mode interface

show ip interface (refer to Cisco IOS documentation)

show mac access-group interface

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-5

action

action

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To specify an action to be taken when a match occurs in a VACL, use the action command. To remove
an action clause, use the no form of this command.

action {drop | forward}
no action {drop | forward }

Syntax Description

drop Sets the action to drop packets.
forward Sets the action to forward packets to their destination.

Defaults This command has no default settings.

Command Modes VLAN access-map

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines In a VLAN access map, if at least one ACL is configured for a packet type (IP or MAC), the default

action for the packet type is drop (deny).
If an ACL is not configured for a packet type, the default action for the packet type is forward (permit).
If an ACL for a packet type is configured and the ACL is empty or undefined, the configured action will

be applied to the packet type.

Examples This example shows how to define a drop action:

Switch(config-access-map)# action drop
Switch(config-access-map)#

This example shows how to define a forward action:

Switch(config-access-map)# action forward
Switch(config-access-map)#

Related Commands match

show vlan access-map
vlan access-map

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-6

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

apply

To implement a new VLAN database, increment the configuration number, save the configuration
number in NVRAM, and propagate the configuration number throughout the administrative domain, use
the apply command.

apply

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes VLAN configuration

apply

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines The apply command implements the configuration changes you made after you entered VLAN database

mode and uses them for the running configuration. This command keeps you in VLAN database mode.
You cannot use this command when the switch is in the VTP client mode.
You can verify that VLAN database changes occurred by entering the show vlan command from

privileged EXEC mode.

Examples This example shows how to implement the proposed new VLAN database and to recognize it as the

current database:

Switch(config-vlan)# apply
Switch(config-vlan)#

Related Commands abort (refer to Cisco IOS documentation)

exit (refer to Cisco IOS documentation)

reset
show vlan

shutdown vlan (refer to Cisco IOS documentation)

vtp (global configuration mode)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-7

arp access-list

arp access-list

To define an ARP access list or add clauses at the end of a predefined list, use the arp access-list
command.

arp access-list name

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

name Specifies the access control list name.

Defaults None

Command Modes Configuration

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples The following example shows how to define an ARP access list named static-hosts:

Switch(config)# arp access-list static-hosts
Switch(config)#

Related Commands deny

ip arp inspection filter vlan
permit

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-8

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

attach module

To remotely connect to a specific module, use the attach module configuration command.

attach module mod

attach module

Syntax Description

mod Target module for the command.

Defaults This command has no default settings.

Command Modes Privileged

Command History

Release Modification

12.1(19)EW This command was first introduced.

Usage Guidelines This command applies only to the Access Gateway Module on Catalyst 4500 series switches.

The valid values for mod depend on the chassis used. For example, if you have a Catalyst 4006 chassis,
valid values for the module are from 2 to 6. If you have a 4507R chassis, valid values are from 3 to 7.

When you execute the attach module mod command, the prompt changes to Gateway#.
This command is identical in the resulting action to the session module mod and the remote login

module mod commands.

Examples This example shows how to remotely log in to an Access Gateway Module:

Switch# attach module 5
Attaching console to module 5
Type 'exit' at the remote prompt to end the session

Gateway>

Related Commands remote login module

session module

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

78-16201-01

2-9

auto qos voip

auto qos voip

To automatically configure quality of service (auto-QoS) for voice over IP (VoIP) within a QoS domain,
use the auto qos voip interface configuration command. Use the no form of this command to change the
auto-QoS configuration settings to the standard QoS defaults.

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

auto qos voip {cisco-phone | trust}
no auto qos voip {cisco-phone | trust}

Syntax Description

Defaults Auto-QoS is disabled on all interfaces.

Command Modes Interface configuration

Command History

Usage Guidelines Use this command to configure the QoS appropriate for VoIP traffic within the QoS domain. The QoS

cisco-phone Connects the interface to a Cisco IP phone and automatically configures QoS for

VoIP. The CoS labels of incoming packets are trusted only when the telephone is
detected.

trust Connects the interface to a trusted switch or router and automatically configures

QoS for VoIP. The CoS and DSCP labels of incoming packets are trusted.

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

domain includes the switch, the interior of the network, and the edge devices that can classify incoming
traffic for QoS.

Use the cisco-phone keyword on ports at the edge of the network that are connected to Cisco IP phones.
The switch detects the telephone through the Cisco Discovery Protocol (CDP) and trusts the CoS labels
in packets received from the telephone.

Use the trust keyword on ports connected to the interior of the network. Because it is assumed that traffic
has already been classified by other edge devices, the CoS/DSCP labels in these packets are trusted.

When you enable the auto-QoS feature on the specified interface, these actions automatically occur:

• QoS is globally enabled (qos global configuration command).

• DBL is enabled globally (qos dbl global configuration command).

• When you enter the auto qos voip cisco-phone interface configuration command, the trusted

boundary feature is enabled. It uses the Cisco Discovery Protocol (CDP) to detect the presence or
absence of a Cisco IP phone. When a Cisco IP phone is detected, the ingress classification on the
specific interface is set to trust the CoS label received in the packet because some old phones do not
mark DSCP. When a Cisco IP phone is absent, the ingress classification is set to not trust the CoS
label in the packet.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-10

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

auto qos voip

• When you enter the auto qos voip trust interface configuration command, the ingress classification

on the specified interface is set to trust the CoS label received in the packet if the specified interface

is configured as Layer 2 (and is set to trust DSCP if the interface is configured as Layer 3).
You can enable auto-QoS on static, dynamic-access, voice VLAN access, and trunk ports.
To display the QoS configuration that is automatically generated when auto-QoS is enabled, enable

debugging before you enable auto-QoS. Use the debug auto qos privileged EXEC command to enable
auto-QoS debugging.

To disable auto-QoS on an interface, use the no auto qos voip interface configuration command. When
you enter this command, the switch enables standard QoS and changes the auto-QoS settings to the
standard QoS default settings for that interface. This action will not change any global configuration
performed by auto-QoS; the global configuration remains the same.

Examples This example shows how to enable auto-QoS and to trust the CoS and DSCP labels received in incoming

packets when the switch or router connected to Gigabit Ethernet interface 1/1 is a trusted device:

Switch(config)# interface gigabitethernet1/1
Switch(config-if)# auto qos voip trust

This example shows how to enable auto-QoS and to trust the CoS labels received in incoming packets
when the device connected to Fast Ethernet interface 2/1 is detected as a Cisco IP phone:

Switch(config)# interface fastethernet2/1
Switch(config-if)# auto qos voip cisco-phone

This example shows how to display the QoS configuration that is automatically generated when
auto-QoS is enabled:

Switch# debug auto qos
AutoQoS debugging is on
Switch# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# auto qos voip trust
Switch(config-if)#
00:00:56:qos
00:00:57:qos map cos 3 to dscp 26
00:00:57:qos map cos 5 to dscp 46
00:00:58:qos map dscp 32 to tx-queue 1
00:00:58:qos dbl
00:01:00:policy-map autoqos-voip-policy
00:01:00: class class-default
00:01:00: dbl
00:01:00:interface GigabitEthernet1/1
00:01:00: qos trust cos
00:01:00: tx-queue 3
00:01:00: priority high
00:01:00: shape percent 33
00:01:00: service-policy output autoqos-voip-policy
Switchconfig-if)# interface gigabitethernet1/1
Switch(config-if)# auto qos voip cisco-phone
Switch(config-if)#
00:00:55:qos
00:00:56:qos map cos 3 to dscp 26
00:00:57:qos map cos 5 to dscp 46
00:00:58:qos map dscp 32 to tx-queue 1
00:00:58:qos dbl
00:00:59:policy-map autoqos-voip-policy
00:00:59: class class-default

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-11

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

auto qos voip

00:00:59: dbl
00:00:59:interface GigabitEthernet1/1
00:00:59: qos trust device cisco-phone
00:00:59: qos trust cos
00:00:59: tx-queue 3
00:00:59: priority high
00:00:59: shape percent 33
00:00:59: bandwidth percent 33
00:00:59: service-policy output autoqos-voip-policy

You can verify your settings by entering the show auto qos interface command.

Related Commands debug auto qos (refer to Cisco IOS documentation)

qos map cos
qos trust
show auto qos
show qos
show qos interface
show qos maps

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-12

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

auto-sync

To enable automatic synchronization of the configuration files in NVRAM, use the auto-sync command.
To disable automatic synchronization, use the no form of this command.

auto-sync {startup-config | config-register | bootvar | standard}

no auto-sync {startup-config | config-register | bootvar | standard}

auto-sync

Syntax Description

startup-config Specifies automatic synchronization of the startup configuration.
config-register Specifies automatic synchronization of the configuration register configuration.
bootvar Specifies automatic synchronization of the BOOTVAR configuration.
standard Specifies automatic synchronization of the startup configuration, BOOTVAR, and

configuration registers.

Defaults Standard automatic synchronization of all configuration files

Command Modes Redundancy main-cpu

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch
(Catalyst4507R only).

Usage Guidelines If you enter the no auto-sync standard command, no automatic synchronizations occur.

Examples This example shows how (from the default configuration) to enable automatic synchronization of the

configuration register in the main CPU:

Switch# config terminal
Switch (config)# redundancy
Switch (config-r)# main-cpu
Switch (config-r-mc)# no auto-sync standard
Switch (config-r-mc)# auto-sync configure-register
Switch (config-r-mc)#

Related Commands redundancy

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-13

channel-group

channel-group

To assign and configure an EtherChannel interface to an EtherChannel group, use the channel-group
command. To remove a channel group configuration from an interface, use the no form of this command.

channel-group number mode {active | on | auto [non-silent]} | {passive | desirable [non-silent]}
no channel-group

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

Defaults No channel groups are assigned.

Command Modes Interface configuration

Command History

number Specifies the channel group number; valid values are from 1 to 64.

mode Specifies the EtherChannel mode of the interface.
active Enables LACP unconditionally.
on Forces the port to channel without PAgP.
auto Places a port into a passive negotiating state, in which the port responds to PAgP

packets it receives but does not initiate PAgP packet negotiation.

non-silent (Optional) Used with the auto or desirable mode when traffic is expected from the

other device.

passive Enables LACP only if an LACP device is detected.
desirable Places a port into an active negotiating state, in which the port initiates negotiations

with other ports by sending PAgP packets.

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(13)EW Support for LACP was added.

Usage Guidelines You do not have to create a port channel interface before assigning a physical interface to a channel

group. If a port channel interface has not been created, it is automatically created when the first physical
interface for the channel group is created.

If a specific channel number is used for the PAgP-enabled interfaces of a channel group, that same
channel number cannot be used for configuring a channel that has LACP-enabled interfaces or vice
versa.

You can also create port channels by entering the interface port-channel command. This will create a
Layer 3 port channel. To change the Layer 3 port channel into a Layer 2 port channel, use the switchport
command before you assign physical interfaces to the channel group. A port channel cannot be changed
from Layer 3 to Layer 2 or vice versa when it contains member ports.

You do not have to disable the IP address that is assigned to a physical interface that is part of a channel
group, but we recommend that you do so.

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-14

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

channel-group

Any configuration or attribute changes you make to the port-channel interface are propagated to all
interfaces within the same channel group as the port channel (for example, configuration changes are
also propagated to the physical interfaces that are not part of the port channel, but are part of the channel
group).

You can create in on mode a usable EtherChannel by connecting two port groups together.

Caution Do not enable Layer3 addresses on the physical EtherChannel interfaces. Do not assign bridge groups

on the physical EtherChannel interfaces because it creates loops.

Examples This example shows how to add Gigabit Ethernet interface 1/1 to the EtherChannel group specified by

port channel 45:

Switch(config-if)# channel-group 45 mode on
Creating a port-channel interface Port-channel45
Switch(config-if)#

Related Commands interface port-channel

show interfaces port-channel (refer to Cisco IOS documentation)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-15

channel-protocol

channel-protocol

To enable LACP or PAgP on an interface, use the channel-protocol command. To disable the protocols,
use the no form of this command.

channel-protocol {lacp | pagp}
no channel-protocol {lacp | pagp}

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

lacp Enables LACP to manage channeling.
pagp Enables PAgP to manage channeling.

Defaults PAgP

Command Modes Interface configuration

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst4500 series switches.

Usage Guidelines This command is not supported on systems configured with a Supervisor Engine 1.

You can also select the protocol using the channel-group command.
If the interface belongs to a channel, the no form of this command is rejected.
All ports in an EtherChannel must use the same protocol; you cannot run two protocols on one module.
PAgP and LACP are not compatible; both ends of a channel must use the same protocol.
You can manually configure a switch with PAgP on one side and LACP on the other side in the on mode.
You can change the protocol at any time, but this change causes all existing EtherChannels to reset to

the default channel mode for the new protocol. You can use the channel-protocol command to restrict
anyone from selecting a mode that is not applicable to the selected protocol.

Configure all ports in an EtherChannel to operate at the same speed and duplex mode (full duplex only
for LACP mode).

For a complete list of guidelines, refer to the “Configuring EtherChannel” section of the Catalyst4500
Series Switch CiscoIOS Software Configuration Guide.

Examples This example shows how to select LACP to manage channeling on the interface:

Switch(config-if)# channel-protocol lacp
Switch(config-if)#

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-16

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Related Commands channel-group

show etherchannel

channel-protocol

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-17

class-map

class-map

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To access the QoS class map configuration mode to configure QoS class maps, use the class-map
command. To delete a class map, use the no form of this command.

class-map [match-all | match-any] name
no class-map [match-all | match-any ] name

Syntax Description

match-all (Optional) Specifies that all match criteria in the class map must be matched.
match-any (Optional) Specifies that one or more match criteria must match.

name Name of the class map.

Defaults Match all criteria.

Command Modes Global configuration

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines The variables name and acl_name are case sensitive.

Use the class-map command and its subcommands on individual interfaces to define packet
classification, marking, aggregate, and flow policing as part of a globally named service policy.

These commands are available in QoS class map configuration mode:

• exit—Exits you from QoS class map configuration mode.

• no—Removes a match statement from a class map.

• match —Configures classification criteria.

These optional subcommands are also available:

–

access-group {acl_index | name acl_name}

–

ip {dscp | precedence} value1 value2... value8

–

any

The following subcommands appear in the CLI help, but they are not supported on LAN interfaces:

• input-interface {interface interface_number | null number | vlan vlan_id}

• protocol linktype

• destination-address mac mac_address

• source-address mac mac_address

• qos-group

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-18

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

• mpls

• no

After you have configured the class map name and are in class map configuration mode, you can enter
the match subcommands. The syntax for these subcommands is as follows:

match {[access-group {acl_index | name acl_name}] | [ip {dscp | precedence} value1 value2...

value8]}

See Table2-1 for a syntax description of the match subcommands.

Table2-1 Syntax Description for the match Command

Optional Subcommand Description

access-group

acl_index | acl_name

access-group

Specifies the access list index or access list names; valid access list index
values are from 1to2699.

Specifies the named access list.

acl_name
ip dscp value1 value2

... value8
ip precedence value1

value2 ... value8

Specifies IP DSCP values to match; valid values are from 0 to 63. Enter up
to eight DSCP values separated by white spaces.

Specifies IP precedence values to match; valid values are from 0 to 7. Enter
up to eight precedence values separated by white spaces.

class-map

Examples This example shows how to access the class-map commands and subcommands and to configure a class

map named ipp5 and enter a match statement for ip precedence 5:

Switch# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# class-map ipp5
Switch(config-cmap)# match ip precedence 5
Switch(config-cmap)#

This example shows how to configure the class map to match an already configured access list:

Switch(config-cmap)# match access-group IPacl1
Switch(config-cmap)#

Related Commands policy-map

service-policy
show class-map
show policy-map
show policy-map interface

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-19

clear counters

clear counters

To clear interface counters, use the clear counters command.

clear counters [{FastEthernet interface_number} | {GigabitEthernet interface_number} |

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

{null interface_number} | {port-channel number} | {vlan vlan_id }]

Syntax Description

FastEthernet interface_number (Optional) Specifies the Fast Ethernet interface; valid values

GigabitEthernet interface_number (Optional) Specifies the Gigabit Ethernet interface; valid values

null interface_number (Optional) Specifies the null interface; the valid value is 0.
port-channel number (Optional) Specifies the channel interface; valid values are

vlan vlan_id (Optional) Specifies the VLAN; valid values are from 1 to

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses was added.

are from 1 to 9.

are from 1 to 9.

from 1 to 64.

4096.

Usage Guidelines This command clears all the current interface counters from all interfaces unless you specify an

interface.

Note This command does not clear counters retrieved using SNMP, but only those seen when you enter the

show interface counters command.

Examples This example shows how to clear all interface counters:

Switch# clear counters
Clear "show interface" counters on all interfaces [confirm] y
Switch#

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-20

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

This example shows how to clear counters on a specific interface:

Switch# clear counters vlan 200
Clear "show interface" counters on this interface [confirm]y
Switch#

Related Commands show interface counters (refer to Cisco IOS documentation)

clear counters

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-21

clear hw-module slot password

clear hw-module slot password

To clear the password on an intelligent line module, use the clear hw-module slot password command:

clear hw-module slot slot_num password

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

slot_num (Optional) Specifies a slot on a line module.

Defaults The password is not cleared.

Command Modes Privileged EXEC

Command History

Release Modification

12.2(18)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines You only need to change the password once unless the password is reset.

Examples This example shows how to clear the password from slot 5 on a line module:

Switch# clear hw-module slot 5 password
Switch#

Related Commands hw-module power

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-22

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear interface gigabitethernet

To clear the hardware logic from a Gigabit Ethernet IEEE 802.3z interface, use the clear interface
.gigabitethernet command.

clear interface gigabitethernet slot/port

clear interface gigabitethernet

Syntax Description

slot/port Number of the slot and port.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear the hardware logic from a Gigabit Ethernet IEEE 802.3z interface:

Switch# clear interface gigabitethernet 1/1
Switch#

Related Commands show interfaces status

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-23

clear interface vlan

clear interface vlan

To clear the hardware logic from a VLAN, use the clear interface vlan command.

clear interface vlan number

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

number Number of the VLAN interface; valid values are from 1 to 4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Examples This example shows how to clear the hardware logic from a specific VLAN:

Switch# clear interface vlan 5
Switch#

Related Commands show interfaces status

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-24

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear ip access-template

To clear statistical information in access lists, use the clear ip access-template command.

clear ip access-template access-list

clear ip access-template

Syntax Description

access-list Number of the access list; valid values are from 100 to 199 for an IP extended access

list, and from 2000 to 2699 for an expanded range IP extended access list.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear statistical information for an access list:

Switch# clear ip access-template 201
Switch#

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-25

clear ip arp inspection log

clear ip arp inspection log

To clear the status of the log buffer, use the clear ip arp inspection log command.

clear ip arp inspection log

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear the contents of the log buffer:

Switch# clear ip arp inspection log
Switch#

Related Commands arp access-list

show ip arp inspection log

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-26

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear ip arp inspection statistics

To clear the dynamic ARP inspection statistics, use the clear ip arp inspection statistics command.

clear ip arp inspection statistics [vlan vlan-range]

clear ip arp inspection statistics

Syntax Description

vlan vlan-range (Optional) Specifies the VLAN range.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows to clear the DAI statistics from VLAN 1:

Switch# clear ip arp inspection statistics vlan 1
Switch# show ip arp inspection statistics vlan 1

Vlan Forwarded Dropped DHCP Drops ACL Drops

---- --------- ------- ---------- ---------­ 1 0 0 0 0

Vlan DHCP Permits ACL Permits Source MAC Failures

---- ------------ ----------- ------------------­ 1 0 0 0

Vlan Dest MAC Failures IP Validation Failures

---- ----------------- ---------------------­ 1 0 0
Switch#

Related Commands arp access-list

clear ip arp inspection log
show ip arp inspection

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-27

clear ip dhcp snooping database

clear ip dhcp snooping database

To clear the DHCP binding database, use the clear ip dhcp snooping database command.

clear ip dhcp snooping database

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear the DHCP binding database:

Switch# clear ip dhcp snooping database
Switch#

Related Commands ip dhcp snooping

ip dhcp snooping binding interface (refer to Cisco IOS documentation)

ip dhcp snooping information option
ip dhcp snooping trust
ip dhcp snooping vlan
show ip dhcp snooping
show ip dhcp snooping binding

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-28

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear ip dhcp snooping database statistics

To clear DHCP binding database statistics, use the clear ip dhcp snooping database statistics
command.

clear ip dhcp snooping database statistics

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

clear ip dhcp snooping database statistics

Command History

Release Modification

12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear the DHCP binding database:

Switch# clear ip dhcp snooping database statistics
Switch#

Related Commands ip dhcp snooping

ip dhcp snooping binding
ip dhcp snooping information option
ip dhcp snooping trust
ip dhcp snooping vlan
show ip dhcp snooping
show ip dhcp snooping binding

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-29

clear ip igmp group

clear ip igmp group

To delete IGMP group cache entries, use the clear ip igmp group command.

clear ip igmp group [{fastethernet slot/port} | {GigabitEthernet slot/port} | {host_name |

group_address} {Loopback interface_number } | {null interface_number} |
{port-channel number} | { vlan vlan_id}]

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

fastethernet (Optional) Specifies the Fast Ethernet interface.

slot/port (Optional) Number of the slot and port.

GigabitEthernet (Optional) Specifies the Gigabit Ethernet interface.

host_name (Optional) Hostname, as defined in the DNS hosts table or with the

ip host command.

group_address (Optional) Address of the multicast group in four-part, dotted

notation.

Loopback interface_number (Optional) Specifies the loopback interface; valid values are from 0

to 2,147,483,647.

null interface_number (Optional) Specifies the null interface; the valid value is 0.
port-channel number (Optional) Specifies the channel interface; valid values are from 1 to

64.

vlan vlan_id (Optional) Specifies the VLAN; valid values are from 1 to 4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines The IGMP cache contains a list of the multicast groups of which hosts on the directly connected LAN

are members.
To delete all entries from the IGMP cache, enter the clear ip igmp group command with no arguments.

Examples This example shows how to clear entries for a specific group from the IGMP cache:

Switch# clear ip igmp group 224.0.255.1
Switch#

This example shows how to clear IGMP group cache entries from a specific interface:

Switch# clear ip igmp group gigabitethernet 2/2
Switch#

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-30

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Related Commands ip host (refer to Cisco IOS documentation)

show ip igmp groups (refer to Cisco IOS documentation)

show ip igmp interface

clear ip igmp group

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-31

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear ip igmp snooping membership

clear ip igmp snooping membership

To clear the explicit host tracking database, use the clear ip igmp snooping membership command.

clear ip igmp snooping membership [vlan vlan_id]

Syntax Description

vlan vlan_id (Optional) Specifies a VLAN; valid values are from 1 to 1001 and from 1006 to 4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(20)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines By default, the explicit host tracking database maintains a maximum of 1 KB entries. After you reach

this limit, no additional entries can be created in the database. To create more entries, you will need to
delete the database with the clear ip igmp snooping statistics vlan command.

Examples This example shows how to display IGMP snooping statistics for VLAN 25:

Switch# clear ip igmp snooping membership vlan 25
Switch#

Related Commands ip igmp snooping vlan explicit-tracking

show ip igmp snooping membership

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-32

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear ip mfib counters

To clear global MFIB counters and counters for all active MFIB routes, use the clear ip mfib counters
command.

clear ip mfib counters

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

clear ip mfib counters

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear all the active MFIB routes and global counters:

Switch# clear ip mfib counters
Switch#

Related Commands show ip mfib

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-33

clear ip mfib fastdrop

clear ip mfib fastdrop

To clear all MFIB fast drop entries, use the clear ip mfib fastdrop command.

clear ip mfib fastdrop

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines If new fast-dropped packets arrive, new fast drop entries are created.

Examples This example shows how to clear all fast drop entries:

Switch# clear ip mfib fastdrop
Switch#

Related Commands ip mfib fastdrop

show ip mfib fastdrop

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-34

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear lacp counters

To clear statistics for all interfaces belonging to a specific channel group, use the clear lacp counters
command.

clear lacp [channel-group] counters

clear lacp counters

Syntax Description

channel-group (Optional) Channel group number; valid values are from 1 to 64.

Defaults This command has no default settings.

Command Modes Privileged EXEC mode

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst4500 series switches.

Usage Guidelines This command is not supported on systems configured with a Supervisor Engine 1.

If you do not specify a channel group, all channel groups are cleared.
If you enter this command for a channel group that contains members in PAgP mode, the command is

ignored.

Examples This example shows how to clear the statistics for a specific group:

Switch# clear lacp 1 counters
Switch#

Related Commands show lacp

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-35

clear mac-address-table dynamic

clear mac-address-table dynamic

To clear dynamic address entries from the Layer2 MAC address table, use the clear mac-address-table
dynamic command.

clear mac-address-table dynamic [{address mac_addr} | {interface interface}] [vlan vlan_id]

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

address mac_addr (Optional) Specifies the MAC address.
interface interface (Optional) Specifies the interface and clear the entries associated with it; valid

values are FastEthernet and GigabitEthernet.

vlan vlan_id (Optional) Specifies the VLANs; valid values are from 1 to 4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Usage Guidelines Enter the clear mac-address-table dynamic command with no arguments to remove all dynamic entries

from the table.

Examples This example shows how to clear all dynamic Layer2 entries for a specific interface (gi1/1):

Switch# clear mac-address-table dynamic interface gi1/1
Switch#

Related Commands mac-address-table aging-time

main-cpu
show mac-address-table address

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-36

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear pagp

To clear port channel information, use the clear pagp command.

clear pagp {group-number | counters }

clear pagp

Syntax Description

group-number Channel group number; valid values are from 1 to 64.

counters Clears traffic filters.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to clear port channel information for a specific group:

Switch# clear pagp 32
Switch#

This example shows how to clear all port channel traffic filters:

Switch# clear pagp counters
Switch#

Related Commands show pagp

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-37

clear port-security

clear port-security

To delete from the MAC address table all secure addresses, all configured secure addresses, or a specific
dynamic or sticky secure address on an interface, use the clear port-security command.

clear port-security {all | dynamic} [address mac-addr [vlan vlan-id]] | [interface interface-id]

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

all Delete s all secure MAC addresses.
dynamic Delete s all dynamic secure MAC addresses.
address mac-addr (Optional) Delete s the specified secure MAC address.
vlan vlan-id (Optional) Deletes the specified secure MAC address from the specified

VLAN.

interface interface-id (Optional) Delete s secure MAC addresses on the specified physical port or

port channel.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Usage Guidelines If you enter the clear port-security all command, the switch removes all secure MAC addresses from

the MAC address table.
If you enter the clear port-security dynamic interface interface-id command, the switch removes all

dynamic secure MAC addresses on an interface from the MAC address table.

Command History

Release Modification

12.2(18)EW This command was first introduced on the Catalyst 4500 series switch.

Examples This example shows how to remove all secure addresses from the MAC address table:

Switch# clear port-security all

This example shows how to remove a dynamic secure address from the MAC address table:

Switch# clear port-security dynamic address 0008.0070.0007

This example shows how to remove all the dynamic secure addresses learned on a specific interface:

Switch# clear port-security dynamic interface gigabitethernet0/1

You can verify that the information was deleted by entering the show port-security command.

Related Commands show port-security

switchport port-security

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-38

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear qos

To clear global and per-interface aggregate QoS counters, use the clear qos command.

clear qos [aggregate-policer [name] | interface {{fastethernet | GigabitEthernet}

{slot/interface}} | vlan {vlan_num} | port-channel {number}]

clear qos

Syntax Description

aggregate-policer name (Optional) Specifies an aggregate policer.
interface (Optional) Specifies an interface.
fastethernet (Optional) Specifies the Fast Ethernet 802.3 interface.
GigabitEthernet (Optional) Specifies the Gigabit Ethernet 802.3z interface.

slot/interface (Optional) Number of the slot and interface.

vlan vlan_num (Optional) Specifies a VLAN.
port-channel number (Optional) Specifies the channel interface; valid values are from 1to64.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines

Note When you enter the clear qos command, the way that the counters work is affected and traffic that is

normally restricted could be forwarded for a short period of time.

The clear qos command resets the interface QoS policy counters. If no interface is specified, the clear
qos command resets the QoS policy counters for all interfaces.

Examples This example shows how to clear global and per-interface aggregate QoS counters for all protocols:

Switch# clear qos
Switch#

This example shows how to clear specific protocol aggregate QoS counters for all interfaces:

Switch# clear qos aggregate-policer
Switch#

Related Commands show qos

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-39

clear vlan counters

clear vlan counters

To clear the software-cached counter values to start from zero again for a specified VLAN or all existing
VLANs, use the clear vlan counters command.

clear vlan [vlan-id] counters

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

vlan-id (Optional) VLAN number; see “Usage Guidelines” for valid values.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst4500 series switches.

Usage Guidelines If you do not specify a vlan-id value; the software-cached counter values for all existing VLANs are

cleared.

Examples This example shows how to clear the software-cached counter values for a specific VLAN:

Switch# clear vlan 10 counters
Clear "show vlan" counters on this vlan [confirm]y
Switch#

Related Commands show vlan counters

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-40

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

clear vmps statistics

To clear VMPS statistics, use the clear vmps statistics command.

clear vmps statistics

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

clear vmps statistics

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst4500 series switches.

Examples This example shows how to clear VMPS statistics:

Switch# clear vmps statistics
Switch#

Related Commands show vmps

vmps reconfirm (privileged EXEC)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-41

debug adjacency

debug adjacency

To display adjacency debugging information, use the debug adjacency command. To disable debugging
output, use the no form of this command.

debug adjacency [ipc]
no debug adjacency

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

ipc (Optional) Displays IPC entries in the adjacency database.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to display information in the adjacency database:

Switch# debug adjacency
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
4d02h: ADJ: add 172.20.52.36 (GigabitEthernet1/1) via ARP will expire: 04:00:00
<... output truncated...>
Switch#

Related Commands undebug adjacency (same as no debug adjacency)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-42

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug backup

To debug backup events, use the debug backup command. To disable debugging output, use the no form
of this command.

debug backup
no debug backup

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

debug backup

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to debug backup events:

Switch# debug backup
Backup events debugging is on
Switch#

Related Commands undebug backup (same as no debug backup)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-43

debug condition interface

debug condition interface

To limit debugging output of interface-related activities, use the debug condition interface command.
To disable debugging output, use the no form of this command.

debug condition interface {fastethernet slot/port | GigabitEthernet slot/port |

null interface_num | port-channel interface-num | vlan vlan_id}

no debug condition interface {fastethernet slot/port | GigabitEthernet slot/port | null

interface_num | port-channel interface-num | vlan vlan_id}

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

fastethernet Limits debugging to Fast Ethernet interfaces.

slot/port Number of the slot and port.

GigabitEthernet Limits debugging to Gigabit Ethernet interfaces.
null interface-num Limits debugging to null interfaces; the valid value is 0.
port-channel interface-num Limits debugging to port-channel interfaces; valid values are from 1

to 64.

vlan vlan_id Specifies the VLAN interface number; valid values are from 1 to 4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Examples This example shows how to limit debugging output to VLAN interface 1:

Switch# debug condition interface vlan 1
Condition 2 set
Switch#

Related Commands debug interface

undebug condition interface (same as no debug condition interface)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-44

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug condition standby

To limit debugging output for standby state changes, use the debug condition standby command. To
disable debugging output, use the no form of this command.

debug condition standby {fastethernet slot/port | GigabitEthernet slot/port |

port-channel interface-num | vlan vlan_id group-number}

no debug condition standby {fastethernet slot/port | GigabitEthernet slot/port |

port-channel interface-num | vlan vlan_id group-number}

debug condition standby

Syntax Description

fastethernet Limits debugging to Fast Ethernet interfaces.

slot/port Number of the slot and port.

GigabitEthernet Limits debugging to Gigabit Ethernet interfaces.
port-channel interface_num Limits debugging output to port-channel interfaces; valid values are

from 1 to 64.

vlan vlan_id Limits debugging of a condition on a VLAN interface; valid values are

from 1 to 4094.

group-number VLAN group number; valid values are from 0 to 255.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Usage Guidelines If you attempt to remove the only condition set, you will be prompted with a message asking if you want

to abort the removal operation. You can enter n to abort the removal or y to proceed with the removal. If
you remove the only condition set, an excessive number of debugging messages might occur.

Examples This example shows how to limit the debugging output to group 0 in VLAN 1:

Switch# debug condition standby vlan 1 0
Condition 3 set
Switch#

This example shows the display if you try to turn off the last standby debug condition:

Switch# no debug condition standby vlan 1 0
This condition is the last standby condition set.
Removing all conditions may cause a flood of debugging
messages to result, unless specific debugging flags

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-45

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug condition standby

are first removed.

Proceed with removal? [yes/no]: n
% Operation aborted
Switch#

Related Commands undebug condition standby (same as no debug condition standby)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-46

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug condition vlan

To limit VLAN debugging output for a specific VLAN, use the debug condition vlan command. To
disable debugging output, use the no form of this command.

debug condition vlan {vlan_id}
no debug condition vlan {vlan_id}

debug condition vlan

Syntax Description

vlan_id Number of the VLAN; valid values are from 1 to 4096.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Usage Guidelines If you attempt to remove the only VLAN condition set, you will be prompted with a message asking if

you want to abort the removal operation. You can enter n to abort the removal or y to proceed with the
removal. If you remove the only condition set, it could result in the display of an excessive number of
messages.

Examples This example shows how to limit debugging output to VLAN 1:

Switch# debug condition vlan 1
Condition 4 set
Switch#

This example shows the message that is displayed when you attempt to disable the last VLAN debug
condition:

Switch# no debug condition vlan 1
This condition is the last vlan condition set.
Removing all conditions may cause a flood of debugging
messages to result, unless specific debugging flags
are first removed.

Proceed with removal? [yes/no]: n
% Operation aborted
Switch#

Related Commands undebug condition vlan (same as no debug condition vlan)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-47

debug dot1x

debug dot1x

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To enable debugging for the 802.1x feature, use the debug dot1x command. Use the no form of this
command to disable debugging output.

debug dot1x {all | errors | events | packets | registry | state-machine}
no debug dot1x {all | errors | events | packets | registry | state-machine}

Syntax Description

Defaults Debugging is disabled.

Command Modes Privileged EXEC

Command History

Related Commands show dot1x

all Enables debugging of all conditions.
errors Enables debugging of print statements guarded by the dot1x error flag.
events Enables debugging of print statements guarded by the dot1x events flag.
packets All incoming dot1x packets are printed with packet and interface information.
registry Enables debugging of print statements guarded by the dot1x registry flag.
state-machine Enables debugging of print statements guarded by the dot1x registry flag.

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

undebug dot1x (same as no debug dot1x)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-48

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug etherchnl

To debug EtherChannel, use the debug etherchnl command. To disable debugging output, use the no
form of this command.

debug etherchnl [all | detail | error | event | idb | linecard]
no debug etherchnl

debug etherchnl

Syntax Description

all (Optional) Displays all EtherChannel debug messages.
detail (Optional) Displays detailed EtherChannel debug messages.
error (Optional) Displays EtherChannel error messages.
event (Optional) Debugs major EtherChannel event messages.
idb (Optional) Debugs PAgP IDB messages.
linecard (Optional) Debugs SCP messages to the module.

Defaults The default settings are as follows:

• Debug is disabled.

• All messages are displayed.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines If you do not specify a keyword, all debug messages are displayed.

Examples This example shows how to display all EtherChannel debug messages:

Switch# debug etherchnl
PAgP Shim/FEC debugging is on
22:46:30:FEC:returning agport Po15 for port (Fa2/1)
22:46:31:FEC:returning agport Po15 for port (Fa4/14)
22:46:33:FEC:comparing GC values of Fa2/25 Fa2/15 flag = 1 1
22:46:33:FEC:port_attrib:Fa2/25 Fa2/15 same
22:46:33:FEC:EC - attrib incompatable for Fa2/25; duplex of Fa2/25 is half, Fa2/15 is full
22:46:33:FEC:pagp_switch_choose_unique:Fa2/25, port Fa2/15 in agport Po3 is incompatable
Switch#

This example shows how to display EtherChannel IDB debug messages:

Switch# debug etherchnl idb
Agport idb related debugging is on
Switch#

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-49

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug etherchnl

This example shows how to disable debugging:

Switch# no debug etherchnl
Switch#

Related Commands undebug etherchnl (same as no debug etherchnl)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-50

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug interface

To abbreviate entry of the debug condition interface command, use the debug interface command. To
disable debugging output, use the no form of this command.

debug interface {FastEthernet slot/port | GigabitEthernet slot/port | null |

port-channel interface-num | vlan vlan_id}

no debug interface {FastEthernet slot/port | GigabitEthernet slot/port | null |

port-channel interface-num | vlan vlan_id}

debug interface

Syntax Description

FastEthernet Limits debugging to Fast Ethernet interfaces.

slot/port Number of the slot and port.

GigabitEthernet Limits debugging to Gigabit Ethernet interfaces.
null Limits debugging to null interfaces; the only valid value is 0.
port-channel interface-num Limits debugging to port-channel interfaces; valid values are from 1

to 64.

vlan vlan_id Specifies the VLAN interface number; valid values are from 1 to

4094.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

12.1(12c)EW Support for extended VLAN addresses added.

Examples This example shows how to limit debugging to interface VLAN 1:

Switch# debug interface vlan 1
Condition 1 set
Switch#

Related Commands debug condition interface

undebug interface (same as no debug interface)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-51

debug ipc

debug ipc

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To debug IPC activity, use the debug ipc command. To disable debugging output, use the no form of this
command.

debug ipc {all | errors | events | headers | packets | ports | seats}
no debug ipc {all | errors | events | headers | packets | ports | seats}

Syntax Description

all Enables all IPC debugging.
errors Enables IPC error debugging.
events Enables IPC event debugging.
headers Enables IPC header debugging.
packets Enables IPC packet debugging.
ports Enables debugging of the creation and deletion of ports.
seats Enables debugging of the creation and deletion of nodes.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable debugging of IPC events:

Switch# debug ipc events
Special Events debugging is on
Switch#

Related Commands undebug ipc (same as no debug ipc)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-52

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug ip dhcp snooping event

To debug DHCP snooping events, use the debug ip dhcp snooping event command. To disable
debugging output, use the no form of this command.

debug ip dhcp snooping event
no debug ip dhcp snooping event

Syntax Description This command has no arguments or keywords.

Defaults Debugging of snooping event is disabled.

Command Modes Privileged EXEC

debug ip dhcp snooping event

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable debugging for DHCP snooping events:

Switch# debug ip dhcp snooping event
Switch#

This example shows how to disable debugging for DHCP snooping events:

Switch# no debug ip dhcp snooping event
Switch#

Related Commands debug ip dhcp snooping packet

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-53

debug ip dhcp snooping packet

debug ip dhcp snooping packet

To debug DHCP snooping messages, use the debug ip dhcp snooping packet command. To disable
debugging output, use the no form of this command.

debug ip dhcp snooping packet
no debug ip dhcp snooping packet

Syntax Description This command has no arguments or keywords.

Defaults Debugging of snooping packet is disabled.

Command Modes Privileged EXEC

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable debugging for DHCP snooping packets:

Switch# debug ip dhcp snooping packet
Switch#

This example shows how to disable debugging for DHCP snooping packets:

Switch# no debug ip dhcp snooping packet
Switch#

Related Commands debug ip dhcp snooping event

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-54

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug ip verify source packet

To debug IP source guard messages, use the debug ip verify source packet command. To disable
debugging output, use the no form of this command.

debug ip verify source packet
no debug ip verify source packet

Syntax Description This command has no arguments or keywords.

Defaults Debugging of snooping security packets is disabled.

Command Modes Privileged EXEC

debug ip verify source packet

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable debugging for IP source guard:

Switch# debug ip verify source packet
Switch#

This example shows how to disable debugging for IP source guard:

Switch# no debug ip verify source packet
Switch#

Related Commands ip dhcp snooping

ip dhcp snooping information option
ip dhcp snooping limit rate
ip dhcp snooping trust

ip verify source vlan dhcp-snooping (refer to Cisco IOS documentation)

show ip dhcp snooping
show ip dhcp snooping binding

show ip verify source (refer to Cisco IOS documentation)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-55

debug lacp

debug lacp

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To debug LACP activity, use the debug lacp command. To disable debugging output, use the no form of
this command.

debug lacp [all | event | fsm | misc | packet]
no debug lacp

Syntax Description

all (Optional) Enables all LACP debugging.
event (Optional) Enables debugging of LACP events.
fsm (Optional) Enables debugging of the LACP finite state machine.
misc (Optional) Enables miscellaneous LACP debugging.
packet (Optional) Enables LACP packet debugging.

Defaults Debugging of LACP activity is disabled.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines This command is supported by the supervisor engine only and can be entered only from the switch

console.

Examples This example shows how to enable LACP miscellaneous debugging:

Switch# debug lacp
Port Aggregation Protocol Miscellaneous debugging is on
Switch#

Related Commands undebug pagp (same as no debug pagp)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-56

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug monitor

To display monitoring activity, use the debug monitor command. To disable debugging output, use the
no form of this command.

debug monitor {all | errors | idb-update | list | notifications | platform | requests}
no debug monitor {all | errors | idb-update | list | notifications | platform | requests}

debug monitor

Syntax Description

all Displays all SPAN debugging messages.
errors Displays SPAN error details.
idb-update Displays SPAN IDB update traces.
list Displays SPAN and VLAN list tracing.
notifications Displays SPAN notifications.
platform Displays SPAN platform tracing.
requests Displays SPAN requests.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to debug monitoring errors:

Switch# debug monitor errors
SPAN error detail debugging is on
Switch#

Related Commands undebug monitor (same as no debug monitor)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-57

debug nvram

debug nvram

To debug NVRAM activity, use the debug nvram command. To disable debugging output, use the no
form of this command.

debug nvram
no debug nvram

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to debug NVRAM:

Switch# debug nvram
NVRAM behavior debugging is on
Switch#

Related Commands undebug nvram (same as no debug nvram)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-58

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug pagp

To debug PAgP activity, use the debug pagp command. To disable debugging output, use the no form
of this command.

debug pagp [all | event | fsm | misc | packet]
no debug pagp

debug pagp

Syntax Description

all (Optional) Enables all PAgP debugging.
event (Optional) Enables debugging of PAgP events.
fsm (Optional) Enables debugging of the PAgP finite state machine.
misc (Optional) Enables miscellaneous PAgP debugging.
packet (Optional) Enables PAgP packet debugging.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines This command is supported by the supervisor engine only and can be entered only from the switch

console.

Examples This example shows how to enable PAgP miscellaneous debugging:

Switch# debug pagp misc
Port Aggregation Protocol Miscellaneous debugging is on
Switch#
*Sep 30 10:13:03: SP: PAgP: pagp_h(Fa5/6) expired
*Sep 30 10:13:03: SP: PAgP: 135 bytes out Fa5/6
*Sep 30 10:13:03: SP: PAgP: Fa5/6 Transmitting information packet
*Sep 30 10:13:03: SP: PAgP: timer pagp_h(Fa5/6) started with interval 30000
<... output truncated...>
Switch#

Related Commands undebug pagp (same as no debug pagp)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-59

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug platform packet protocol lacp

debug platform packet protocol lacp

To debug LACP protocol packets, use the debug platform packet protocol lacp command. To disable
debugging output, use the no form of this command.

debug platform packet protocol lacp [receive | transmit | vlan]
no debug platform packet protocol lacp [receive | transmit | vlan]

Syntax Description

receive (Optional) Enables platform packet reception debugging functions.
transmit (Optional) Enables platform packet transmission debugging functions.
vlan (Optional) Enables platform packet VLAN debugging functions.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable all PM debugging:

Switch# debug platform packet protocol lacp
Switch#

Related Commands undebug platform packet protocol lacp (same as no debug platform packet protocol lacp)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-60

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug platform packet protocol pagp

To debug PAgP protocol packets, use the debug platform packet protocol lacp command. To disable
debugging output, use the no form of this command.

debug platform packet protocol pagp [receive | transmit | vlan]
no debug platform packet protocol pagp [receive | transmit | vlan]

debug platform packet protocol pagp

Syntax Description

receive Enables platform packet reception debugging functions.
transmit Enables platform packet transmission debugging functions.
vlan Enables platform packet VLAN debugging functions.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable all PM debugging:

Switch# debug platform packet protocol pagp
Switch#

Related Commands undebug platform packet protocol pagp (same as no debug platform packet protocol pagp)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-61

debug pm

debug pm

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

To debug port manager (PM) activity, use the debug pm command. To disable debugging output, use the
no form of this command.

debug pm {all | card | cookies | etherchnl | messages | port | registry | scp | sm | span | split |

vlan | vp}

no debug pm {all | card | cookies | etherchnl | messages | port | registry | scp | sm | span | split|

vlan | vp}

Syntax Description

all Displays all PM debugging messages.
card Debugs module-related events.
cookies Enables internal PM cookie validation.
etherchnl Debugs EtherChannel-related events.
messages Debugs PM messages.
port Debugs port-related events.
registry Debugs PM registry invocations.
scp Debugs SCP module messaging.
sm Debugs state machine-related events.
span Debugs spanning tree-related events.
split Debugs split-processor.
vlan Debugs VLAN-related events.
vp Debugs virtual port-related events.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable all PM debugging:

Switch# debug pm all
Switch#

Related Commands undebug pm (same as no debug pm)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-62

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug psecure

To debug port security, use the debug psecure command. To disable debugging output, use the no form
of this command.

debug psecure
no debug psecure

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

debug psecure

Command History

Release Modification

12.1(13)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to enable all PM debugging:

Switch# debug psecure
Switch#

Related Commands switchport port-security

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-63

debug redundancy

debug redundancy

To debug supervisor redundancy, use the debug redundancy command. To disable debugging output,
use the no form of this command.

debug redundancy {errors | fsm | kpa | msg | progression | status | timer}
no debug redundancy

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

errors Enables redundancy facility for error debugging.
fsm Enables redundancy facility for FSM event debugging.
kpa Enables redundancy facility for keepalive debugging.
msg Enables redundancy facility for messaging event debugging.
progression Enables redundancy facility for progression event debugging.
status Enables redundancy facility for status event debugging.
timer Enables redundancy facility for timer event debugging.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(12c)EW Support for this command was introduced on the Catalyst 4500 series switch
(Catalyst 4507R only).

Examples This example shows how to debug redundancy facility timer event debugging:

Switch# debug redundancy timer
Redundancy timer debugging is on
Switch#

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-64

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug smf updates

To debug software MAC filter (SMF) address insertions and deletions, use the debug smf updates
command. To disable debugging output, use the no form of this command.

debug smf updates
no debug smf updates

Syntax Description This command has no arguments or keywords.

Defaults This command has no default settings.

Command Modes Privileged EXEC

debug smf updates

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to debug SMF updates:

Switch# debug smf updates
Software MAC filter address insertions and deletions debugging is on
Switch#

Related Commands undebug smf (same as no debug smf)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-65

debug spanning-tree

debug spanning-tree

To debug spanning tree activities, use the debug spanning-tree command. To disable debugging output,
use the no form of this command.

debug spanning-tree {all | bpdu | bpdu-opt | etherchannel | config | events | exceptions |

general | mst | pvst+ | root | snmp}

no debug spanning-tree {all | bpdu | bpdu-opt | etherchannel | config | events | exceptions |

general | mst | pvst+ | root | snmp}

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

all Displays all spanning tree debugging messages.
bpdu Debugs spanning tree BPDU.
bpdu-opt Debugs optimized BPDU handling.
etherchannel Debugs spanning tree EtherChannel support.
config Debugs spanning tree configuration changes.
events Debugs TCAM events.
exceptions Debugs spanning tree exceptions.
general Debugs general spanning tree activity.
mst Debugs multiple spanning tree events.
pvst+ Debugs PVST+ events.
root Debugs spanning tree root events.
snmp Debugs spanning tree SNMP events.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Examples This example shows how to debug spanning tree PVST+:

Switch# debug spanning-tree pvst+
Spanning Tree PVST+ debugging is on
Switch#

Related Commands undebug spanning-tree (same as no debug spanning-tree)

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-66

78-16201-01

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

debug spanning-tree backbonefast

To enable debugging of spanning tree BackboneFast events, use the debug spanning-tree backbonefast
command. To disable debugging output, use the no form of this command.

debug spanning-tree backbonefast [detail | exceptions]
no debug spanning-tree backbonefast

debug spanning-tree backbonefast

Syntax Description

detail (Optional) Displays detailed BackboneFast debugging messages.
exceptions (Optional) Enables debugging of spanning tree BackboneFast exceptions.

Defaults This command has no default settings.

Command Modes Privileged EXEC

Command History

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

Usage Guidelines This command is supported by the supervisor engine only and can be entered only from the switch

console.

Examples This example shows how to enable debugging and to display detailed spanning tree BackboneFast

debugging information:

Switch# debug spanning-tree backbonefast detail
Spanning Tree backbonefast detail debugging is on
Switch#

Related Commands undebug spanning-tree backbonefast (same as no debug spanning-tree backbonefast)

78-16201-01

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-67

debug spanning-tree switch

debug spanning-tree switch

To enable switch shim debugging, use the debug spanning-tree switch command. To disable debugging
output, use the no form of this command.

debug spanning-tree switch {all | errors | general | pm | rx {decode | errors | interrupt |

process } | state | tx [decode]}

no debug spanning-tree switch {all | errors | general | pm | rx {decode | errors | interrupt |

process } | state | tx [decode]}

Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches

Syntax Description

Defaults This command has no default settings.

Command Modes Privileged EXEC

all Displays all spanning tree switch shim debugging messages.
errors Enables debugging of switch shim errors or exceptions.
general Enables debugging of general events.
pm Enables debugging of port manager events.
rx Displays received BPDU-handling debugging messages.
decode Enables debugging of the decode received packets of the spanning tree switch shim.
errors Enables debugging of the receive errors of the spanning tree switch shim.
interrupt Enables shim ISR receive BPDU debugging on the spanning tree switch.
process Enables process receive BPDU debugging on the spanning tree switch.
state Enables debugging of the state changes on the spanning tree port.
tx Enables transmit BPDU debugging on the spanning tree switch shim.
decode (Optional) Enables decode transmitted packets debugging on the spanning tree

switch shim.

Command History

Usage Guidelines This command is supported only by the supervisor engine and can be entered only from the switch

Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW

2-68

Release Modification

12.1(8a)EW Support for this command was introduced on the Catalyst 4500 series switch.

console.

78-16201-01