Cisco Catalyst 3750 Metro Command Reference Manual
Catalyst 3750 Metro Switch
Command
Cisco IOS Release 12.2(58)SE
April 2011
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Reference
Text Part Number: OL-9645-10
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 3750 Metro Switch Command Reference
©2006-2011 Cisco Systems, Inc. All rights reserved.
IMPLIED, INCLUDING, WITHOUT
CONTENTS
Preface xix
Audience xix
Purpose xix
Conventions xix
Filtering show Command Output xx
Related Publications xxi
Obtaining Documentation and Submitting a Service Request xxi
CHAPTER
CHAPTER
1 Using the Command-Line Interface 1-1
CLI Command Modes 1-1
User EXEC Mode 1-2
Privileged EXEC Mode 1-3
Global Configuration Mode 1-3
Interface Configuration Mode 1-4
VLAN Configuration Mode 1-4
Line Configuration Mode 1-4
Commands Changed in Cisco IOS 12.2(25)EY 1-5
2 Catalyst 3750 Metro Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
action 2-5
archive download-sw 2-7
archive tar 2-9
archive upload-sw 2-12
OL-9645-10
arp access-list 2-13
auto qos voip 2-15
bandwidth 2-20
boot config-file 2-23
boot enable-break 2-24
boot helper 2-25
boot helper-config-file 2-26
Catalyst 3750 Metro Switch Command Reference
iii
Contents
boot manual 2-27
boot private-config-file 2-28
boot system 2-29
channel-group 2-30
channel-protocol 2-34
class 2-35
class-map 2-40
clear ip arp inspection log 2-42
clear ip arp inspection statistics 2-43
clear ip dhcp snooping 2-44
clear ipv6 dhcp conflict 2-46
clear l2protocol-tunnel counters 2-47
clear lacp 2-48
clear mac address-table 2-49
clear mac address-table move update 2-50
clear pagp 2-51
clear rep counters 2-52
clear spanning-tree counters 2-53
clear spanning-tree detected-protocols 2-54
clear vmps statistics 2-55
clear vtp counters 2-56
cpu traffic qos cos 2-57
cpu traffic qos dscp 2-59
cpu traffic qos precedence 2-61
define interface-range 2-63
delete 2-65
deny (ARP access-list configuration) 2-66
deny (IPv6 access-list configuration) 2-68
deny (MAC access-list configuration) 2-73
dot1x auth-fail max-attempts 2-76
iv
dot1x auth-fail vlan 2-78
dot1x default 2-80
dot1x guest-vlan 2-81
dot1x host-mode 2-83
dot1x initialize 2-85
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
dot1x max-reauth-req 2-86
dot1x max-req 2-87
dot1x port-control 2-88
dot1x re-authenticate 2-90
dot1x reauthentication 2-91
dot1x supplicant force-multicast 2-92
dot1x system-auth-control 2-93
dot1x test eapol-capable 2-94
dot1x test timeout 2-95
dot1x timeout 2-96
dot1x violation-mode 2-98
duplex 2-100
errdisable detect cause 2-102
Contents
errdisable detect cause small-frame 2-104
errdisable recovery cause small-frame 2-106
errdisable recovery 2-107
ethernet evc 2-109
ethernet lmi 2-110
ethernet lmi ce-vlan map 2-112
ethernet oam remote-failure 2-114
ethernet uni 2-116
ethernet uni id 2-118
flowcontrol 2-119
interface port-channel 2-121
interface range 2-123
interface vlan 2-125
ip access-group 2-127
ip address 2-130
ip arp inspection filter vlan 2-132
ip arp inspection limit 2-134
OL-9645-10
ip arp inspection log-buffer 2-136
ip arp inspection trust 2-138
ip arp inspection validate 2-140
ip arp inspection vlan 2-142
ip arp inspection vlan logging 2-143
Catalyst 3750 Metro Switch Command Reference
v
Contents
ip device tracking 2-145
ip device tracking maximum 2-146
ip device tracking probe 2-147
ip dhcp snooping 2-149
ip dhcp snooping binding 2-150
ip dhcp snooping database 2-152
ip dhcp snooping information option 2-154
ip dhcp snooping information option allowed-untrusted 2-156
ip dhcp snooping information option format remote-id 2-158
ip dhcp snooping limit rate 2-159
ip dhcp snooping trust 2-160
ip dhcp snooping verify 2-161
ip dhcp snooping vlan 2-162
ip dhcp snooping vlan information option format-type circuit-id string 2-163
ip igmp filter 2-165
ip igmp max-groups 2-167
ip igmp profile 2-169
ip igmp snooping 2-171
ip igmp snooping querier 2-173
ip igmp snooping report-suppression 2-175
ip igmp snooping vlan immediate-leave 2-177
ip igmp snooping vlan mrouter 2-178
ip igmp snooping vlan static 2-180
ip sla responder twamp 2-182
ip sla server twamp 2-184
ip source binding 2-186
ip ssh 2-188
ip sticky-arp (global configuration) 2-190
ip sticky-arp (interface configuration) 2-192
ip verify source 2-194
vi
ip vrf (global configuration) 2-196
ip vrf (interface configuration) 2-198
ipv6 access-list 2-200
ipv6 address dhcp 2-202
ipv6 dhcp client request vendor 2-203
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
ipv6 dhcp ping packets 2-204
ipv6 dhcp pool 2-205
ipv6 dhcp server 2-207
ipv6 mld snooping 2-209
ipv6 mld snooping last-listener-query-count 2-211
ipv6 mld snooping last-listener-query-interval 2-213
ipv6 mld snooping listener-message-suppression 2-215
ipv6 mld snooping robustness-variable 2-217
ipv6 mld snooping tcn 2-219
ipv6 mld snooping vlan 2-221
ipv6 traffic-filter 2-223
l2protocol-tunnel 2-225
l2protocol-tunnel cos 2-229
Contents
lacp port-priority 2-230
lacp system-priority 2-232
link state group 2-234
link state track 2-236
location (global configuration) 2-237
location (interface configuration) 2-239
logging event 2-241
logging file 2-242
mac access-group 2-244
mac access-list extended 2-246
mac address-table aging-time 2-248
mac address-table learning 2-249
mac address-table move update 2-251
mac address-table notification 2-253
mac address-table static 2-255
mac address-table static drop 2-256
macro apply 2-258
OL-9645-10
macro description 2-261
macro global 2-262
macro global description 2-265
macro name 2-266
match (access-map configuration) 2-268
Catalyst 3750 Metro Switch Command Reference
vii
Contents
match (class-map configuration) 2-270
mdix auto 2-273
mls qos 2-275
mls qos aggregate-policer 2-277
mls qos cos 2-279
mls qos dscp-mutation 2-281
mls qos enhanced 2-283
mls qos map 2-285
mls qos queue-set output buffers 2-288
mls qos queue-set output threshold 2-290
mls qos rewrite ip dscp 2-292
mls qos srr-queue input bandwidth 2-294
mls qos srr-queue input buffers 2-296
mls qos srr-queue input cos-map 2-298
mls qos srr-queue input dscp-map 2-300
mls qos srr-queue input priority-queue 2-302
mls qos srr-queue input threshold 2-304
mls qos srr-queue output cos-map 2-306
mls qos srr-queue output cpu-queue 2-308
mls qos srr-queue output dscp-map 2-310
mls qos trust 2-312
mls qos vlan-based 2-315
monitor session 2-316
mpls l2transport route 2-320
mpls ldp holdtime 2-322
mpls mtu 2-323
mvr (global configuration) 2-325
mvr (interface configuration) 2-328
oam protocol cfm svlan 2-332
pagp learn-method 2-333
viii
pagp port-priority 2-335
permit (ARP access-list configuration) 2-337
permit (IPv6 access-list configuration) 2-339
permit (MAC-access list configuration) 2-344
police 2-347
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
police aggregate 2-349
police cir 2-351
police cir percent 2-354
policy-map 2-358
port-channel load-balance 2-361
priority 2-363
priority-queue 2-365
private-vlan 2-367
private-vlan mapping 2-370
queue-limit 2-372
queue-set 2-374
random-detect 2-375
random-detect dscp 2-378
Contents
random-detect exponential-weighting-constant 2-382
random-detect precedence 2-385
remote-span 2-388
renew ip dhcp snooping database 2-390
rep admin vlan 2-391
rep block port 2-392
rep lsl-age-timer 2-396
rep preempt delay 2-398
rep preempt segment 2-400
rep segment 2-401
rep stcn 2-404
reserved-only 2-406
rmon collection stats 2-407
sdm prefer 2-408
service instance 2-411
service password-recovery 2-412
service-policy (interface configuration) 2-414
OL-9645-10
service-policy (policy-map class) 2-417
set 2-419
setup 2-421
setup express 2-424
shape 2-426
Catalyst 3750 Metro Switch Command Reference
ix
Contents
show access-lists 2-428
show archive status 2-431
show arp access-list 2-432
show auto qos 2-433
show boot 2-436
show class-map 2-438
show controllers cpu-interface 2-439
show controllers ethernet-controller 2-441
show controllers tcam 2-445
show cpu traffic qos 2-447
show dot1q-tunnel 2-449
show dot1x 2-450
show dtp 2-453
show env 2-455
show errdisable detect 2-456
show errdisable flap-values 2-458
show errdisable recovery 2-460
show etherchannel 2-462
show ethernet service evc 2-465
show ethernet service instance 2-466
show ethernet service interface 2-468
show interfaces 2-470
show interfaces counters 2-477
show interfaces rep 2-480
show interfaces transceiver 2-482
show inventory 2-485
show ip arp inspection 2-486
show ip dhcp snooping 2-490
show ip dhcp snooping binding 2-491
show ip dhcp snooping database 2-493
show ip dhcp snooping statistics 2-495
show ip igmp profile 2-498
show ip igmp snooping 2-499
show ip igmp snooping groups 2-501
show ip igmp snooping mrouter 2-503
Catalyst 3750 Metro Switch Command Reference
x
OL-9645-10
show ip igmp snooping querier 2-504
show ip sla standards 2-506
show ip sla twamp connection 2-507
show ip sla twamp session 2-509
show ip source binding 2-510
show ip verify source 2-511
show ipv6 dhcp conflict 2-513
show ipv6 mld snooping 2-514
show ipv6 mld snooping address 2-516
show ipv6 mld snooping mrouter 2-518
show ipv6 mld snooping querier 2-520
show ipv6 route updated 2-522
show l2protocol-tunnel 2-524
Contents
show lacp 2-526
show link state group 2-530
show location 2-532
show mac access-group 2-534
show mac address-table 2-535
show mac address-table address 2-537
show mac address-table aging-time 2-538
show mac address-table count 2-540
show mac address-table dynamic 2-542
show mac address-table interface 2-544
show mac address-table learning 2-545
show mac address-table move update 2-546
show mac address-table multicast 2-548
show mac address-table notification 2-550
show mac address-table static 2-552
show mac address-table vlan 2-554
show mls qos 2-556
OL-9645-10
show mls qos aggregate-policer 2-557
show mls qos input-queue 2-558
show mls qos interface 2-559
show mls qos maps 2-562
show mls qos queue-set 2-565
Catalyst 3750 Metro Switch Command Reference
xi
Contents
show mls qos vlan 2-567
show monitor 2-568
show mpls l2transport vc 2-570
show mvr 2-574
show mvr interface 2-576
show mvr members 2-578
show pagp 2-580
show parser macro 2-582
show policy-map 2-585
show port-security 2-587
show rep topology 2-590
show sdm prefer 2-592
show setup express 2-595
show spanning-tree 2-596
show storm-control 2-602
show system mtu 2-604
show udld 2-605
show version 2-608
show vlan 2-610
show vlan access-map 2-615
show vlan filter 2-616
show vmps 2-617
show vtp 2-620
shutdown 2-625
shutdown vlan 2-626
small-frame violation rate 2-627
snmp mib rep trap-rate 2-629
snmp-server enable traps 2-630
snmp-server host 2-634
snmp trap mac-notification change 2-639
xii
spanning-tree backbonefast 2-641
spanning-tree bpdufilter 2-642
spanning-tree bpduguard 2-644
spanning-tree cost 2-646
spanning-tree etherchannel guard misconfig 2-648
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
spanning-tree extend system-id 2-650
spanning-tree guard 2-651
spanning-tree link-type 2-653
spanning-tree loopguard default 2-655
spanning-tree mode 2-657
spanning-tree mst configuration 2-659
spanning-tree mst cost 2-661
spanning-tree mst forward-time 2-663
spanning-tree mst hello-time 2-664
spanning-tree mst max-age 2-665
spanning-tree mst max-hops 2-666
spanning-tree mst pre-standard 2-668
spanning-tree mst port-priority 2-669
Contents
spanning-tree mst priority 2-671
spanning-tree mst root 2-672
spanning-tree port-priority 2-674
spanning-tree portfast (global configuration) 2-676
spanning-tree portfast (interface configuration) 2-678
spanning-tree uplinkfast 2-680
spanning-tree vlan 2-682
speed 2-685
srr-queue bandwidth limit 2-687
srr-queue bandwidth shape 2-689
srr-queue bandwidth share 2-691
storm-control 2-693
switchport 2-696
switchport access 2-698
switchport backup interface 2-700
switchport block 2-704
switchport host 2-706
OL-9645-10
switchport mode 2-707
switchport mode private-vlan 2-710
switchport nonegotiate 2-712
switchport port-security 2-714
switchport port-security aging 2-718
Catalyst 3750 Metro Switch Command Reference
xiii
Contents
switchport priority extend 2-720
switchport private-vlan 2-722
switchport protected 2-724
switchport trunk 2-725
switchport vlan mapping 2-729
switchport voice vlan 2-732
system mtu 2-734
traceroute mac 2-737
traceroute mac ip 2-740
trust 2-742
udld (global configuration) 2-744
udld (interface configuration) 2-746
udld reset 2-748
APPENDIX
uni count 2-749
vlan 2-751
vlan access-map 2-756
vlan filter 2-758
vmps reconfirm (privileged EXEC) 2-760
vmps reconfirm (global configuration) 2-761
vmps retry 2-762
vmps server 2-763
vrf upgrade-cli multi-af-mode 2-765
vtp 2-767
xconnect 2-771
A Catalyst 3750 Metro Switch
Boot Loader Commands A-1
boot A-2
cat A-4
copy A-5
xiv
delete A-6
dir A-7
flash_init A-9
format A-10
fsck A-11
help A-12
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
memory A-13
mkdir A-14
more A-15
rename A-16
reset A-17
rmdir A-18
set A-19
type A-22
unset A-23
version A-25
Contents
APPENDIX
B Catalyst 3750 Metro Switch Debug Commands B-1
debug auto qos B-2
debug backup B-4
debug dot1x B-5
debug dtp B-6
debug etherchannel B-7
debug ethernet service B-8
debug interface B-10
debug ip dhcp snooping B-11
debug ip igmp filter B-12
debug ip igmp max-groups B-13
debug ip igmp snooping B-14
debug ip sla error twamp connection B-15
debug ip sla error twamp control reflector B-17
debug ip sla error twamp control server B-19
debug ip sla error twamp session B-21
debug ip sla trace twamp connection B-23
OL-9645-10
debug ip sla trace twamp control reflector B-25
debug ip sla trace twamp control server B-27
debug ip sla trace twamp session B-29
debug ip verify source packet B-31
debug lacp B-32
debug mac-notification B-33
debug matm B-34
debug matm move update B-35
Catalyst 3750 Metro Switch Command Reference
xv
Contents
debug monitor B-36
debug mpls atom B-37
debug mpls l2transport vlan B-38
debug mvrdbg B-39
debug nvram B-40
debug pagp B-41
debug platform acl B-42
debug platform backup interface B-43
debug platform cfm B-44
debug platform cpu-queues B-45
debug platform dot1ad B-47
debug platform dot1x B-48
debug platform etherchannel B-49
debug platform fallback-bridging B-50
debug platform forw-tcam B-51
debug platform ip arp inspection B-52
debug platform ip igmp snooping B-53
debug platform ip multicast B-55
debug platform ip unicast B-57
debug platform led B-59
debug platform matm B-60
debug platform messaging application B-61
debug platform mpls B-62
debug platform phy B-63
debug platform pm B-64
debug platform port-asic B-66
debug platform port-security B-67
debug platform qos-acl-tcam B-68
debug platform remote-commands B-69
debug platform rep B-70
xvi
debug platform resource-manager B-71
debug platform snmp B-72
debug platform span B-73
debug platform supervisor-asic B-74
debug platform sw-bridge B-75
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
debug platform tcam B-76
debug platform udld B-78
debug platform vlan B-79
debug pm B-80
debug port-security B-82
debug rep B-83
debug qos-manager B-84
debug spanning-tree B-85
debug spanning-tree backbonefast B-87
debug spanning-tree bpdu B-88
debug spanning-tree bpdu-opt B-89
debug spanning-tree mstp B-90
debug spanning-tree switch B-92
Contents
APPENDIX
debug spanning-tree uplinkfast B-94
debug sw-vlan B-95
debug sw-vlan ifs B-97
debug sw-vlan notification B-98
debug sw-vlan vtp B-99
debug udld B-101
debug vqpc B-103
debug xconnect B-104
C Catalyst 3750 Metro Switch
Show Platform Commands C-1
show platform acl C-2
show platform cfm C-3
show platform configuration C-4
show platform etherchannel C-5
show platform forward C-6
show platform ip igmp snooping C-8
OL-9645-10
show platform ip multicast C-9
show platform ip policy C-10
show platform ip unicast C-11
show platform ipc trace C-12
show platform layer4op C-13
show platform mac-address-table C-14
Catalyst 3750 Metro Switch Command Reference
xvii
Contents
show platform messaging C-15
show platform monitor C-16
show platform mvr table C-17
show platform pm C-18
show platform port-asic C-19
show platform port-security C-23
show platform qos C-24
show platform resource-manager C-25
show platform snmp counters C-26
show platform spanning-tree C-27
show platform stp-instance C-28
show platform tb C-29
show platform tcam C-30
APPENDIX
I
NDEX
show platform vlan C-32
D Acknowledgments for Open-Source Software D-1
xviii
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Audience
Preface
This guide is for the networking professional using the Cisco IOS command-line interface (CLI) to
manage the Catalyst
should have experience working with the Cisco IOS commands and the switch software features. Before
using this guide, you should have experience working with the concepts and terminology of Ethernet and
local area networking.
3750 Metro switch, hereafter referred to as the switch. Before using this guide, you
Purpose
The Catalyst 3750 Metro switch is supported by a set of enterprise-class features, including Layer 2+
features such as access control lists (ACLs) and quality of service (QoS) and Layer 3 features such as IP
unicast routing, IP multicast routing, and fallback bridging. It also includes features for the service
provider, including multiprotocol label switching (MPLS), Ethernet over MPLS (EoMPLS), hierarchical
QoS, and 802.1Q tunneling.
This guide provides the information you need about the commands that have been created or changed
for use with the Catalyst
commands, see the Cisco IOS documentation set available from the Cisco.com home page by selecting
Service and Support > Technical Documents. On the Cisco Product Documentation home page, select
Release 12.2 from the Cisco IOS Software drop-down list.
This guide does not provide procedures for configuring your switch. For detailed configuration
procedures, see the software configuration guide for this release.
This guide does not describe system messages that you might encounter. For more information, see the
system message guide for this release.
For documentation updates, see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
• Commands and keywords are in boldface text.
3750 Metro switches. For information about the standard Cisco IOS Release 12.2
OL-9645-10
• Arguments for which you supply values are in italic.
Catalyst 3750 Metro Switch Command Reference
xix
Preface
• Square brackets ([ ]) means optional elements.
• Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
• Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.
Interactive examples use these conventions:
• Terminal sessions and system displays are in screen font.
• Information you enter is in boldface screen font.
• Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and warnings use these conventions and symbols:
Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in
this manual.
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Filtering show Command Output
The show commands have optional output modifiers to filter the command output.
• | begin—Display begins with the line that matches the expression.
• | exclude—Display excludes with the line that matches the expression.
• | include—Display includes with the line that matches the expression.
• expression—Expression in the output to use as a reference point.
Expressions are case sensitive. If you enter | exclude output, the lines that contain output are not
displayed, but the lines that contain Output are displayed.
xx
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Preface
Related Publications
These documents provide complete information about the switch and are available from this Cisco.com
site:
http://www.cisco.com/en/US/products/hw/switches/ps5532/tsd_products_support_series_home.html
Note Before installing, configuring, or upgrading the switch, see these documents:
• For initial configuration information, see the “Using Express Setup” chapter or the “Configuring the
Switch with the CLI-Based Setup Program” appendix in the hardware installation guide.
• For upgrade information, see the “Downloading Software” section in the release notes.
• Release Notes for the Catalyst 3750 Metro Switch
• Catalyst 3750 Metro Switch Software Configuration Guide
• Catalyst 3750 Metro Switch Command Reference
• Catalyst 3750 Metro Switch System Message Guide
• Catalyst 3750 Metro Switch Hardware Installation Guide
• Cisco Small Form-Factor Pluggable Modules Installation Notes
• These compatibility matrix documents are available from this Cisco.com site:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
–
Cisco Gigabit Ethernet Transceiver Modules Compatibility Matrix
–
Cisco 100-Megabit Ethernet SFP Modules Compatibility Matrix
–
Cisco Small Form-Factor Pluggable Modules Compatibility Matrix
–
Compatibility Matrix for 1000BASE-T Small Form-Factor Pluggable Modules
Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional
information, see the monthly What’s
revised Cisco
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free
service and Cisco currently supports RSS version 2.0.
technical documentation, at:
New in Cisco Product Documentation, which also lists all new and
OL-9645-10
Catalyst 3750 Metro Switch Command Reference
xxi
Preface
xxii
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Using the Command-Line Interface
The Catalyst 3750 Metro switch is supported by Cisco IOS software. This chapter describes how to use
the switch command-line interface (CLI) to configure software features.
For a complete description of the commands that support these features, see Chapter 2, “Catalyst 3750
Metro Switch Cisco IOS Commands.” For information on the boot loader commands, see Appendix A,
“Catalyst 3750 Metro Switch Boot Loader Commands.” For information on the debug commands, see
Appendix B, “Catalyst 3750 Metro Switch Debug Commands.” For information on the show platform
commands, see Appendix C, “Catalyst 3750 Metro Switch Show Platform Commands.” For more
information on Cisco IOS Release 12.2, see the Cisco IOS Release 12.2 Command Summary.
For task-oriented configuration steps, see the software configuration guide for this release.
CLI Command Modes
This section describes the CLI command mode structure. Command modes support specific Cisco IOS
commands. For example, the interface interface-id command only works when entered in global
configuration mode.
These are the main command modes for the switch:
• User EXEC
CHAP T E R
1
OL-9645-10
• Privileged EXEC
• Global configuration
• Interface configuration
• VLAN configuration
• Line configuration
Table 1-1 lists the main command modes, how to access each mode, the prompt you see in that mode,
and how to exit that mode. The prompts listed use the default name Switch.
Catalyst 3750 Metro Switch Command Reference
1-1
Chapter 1 Using the Command-Line Interface
CLI Command Modes
Ta b l e 1-1 Command Modes Summary
Command Mode Access Method Prompt Exit or Access Next Mode
User EXEC This is the first level of access.
(For the switch) Change terminal
settings, perform basic tasks, and
list system information.
Privileged EXEC From user EXEC mode, enter the
enable command.
Global
configuration
Interface
configuration
From privileged EXEC mode,
enter the configure command.
From global configuration mode,
specify an interface by entering
the interface command followed
by an interface identification.
VLAN
configuration
In global configuration mode,
enter the vlan vlan-id command.
Switch>
Switch#
Switch(config)#
Switch(config-if)#
Switch(config-vlan)#
Enter the logout command.
To enter privileged EXEC mode, enter
the enable command.
To exit to user EXEC mode, enter the
disable command.
To enter global configuration mode,
enter the configure command.
To exit to privileged EXEC mode,
enter the exit or end command, or
press Ctrl-Z.
To enter interface configuration mode,
enter the interface configuration
command.
To exit to privileged EXEC mode,
enter the end command, or press
Ctrl-Z.
To exit to global configuration mode,
enter the exit command.
To exit to global configuration mode,
enter the exit command.
Line configuration From global configuration mode,
specify a line by entering the line
command.
User EXEC Mode
After you access the device, you are automatically in user EXEC command mode. The EXEC commands
available at the user level are a subset of those available at the privileged level. In general, use the user
EXEC commands to temporarily change terminal settings, perform basic tests, and list system
information.
The supported commands can vary depending on the version of software in use. To view a
comprehensive list of commands, enter a question mark (?) at the prompt.
Switch> ?
Switch(config-line)#
To return to privileged EXEC mode,
enter the end command, or press
Ctrl-Z.
To exit to global configuration mode,
enter the exit command.
To return to privileged EXEC mode,
enter the end command, or press
Ctrl-Z.
1-2
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 1 Using the Command-Line Interface
Privileged EXEC Mode
Because many of the privileged commands configure operating parameters, privileged access should be
password-protected to prevent unauthorized use. The privileged command set includes those commands
contained in user EXEC mode, as well as the configure privileged EXEC command through which you
access the remaining command modes.
If your system administrator has set a password, you are prompted to enter it before being granted access
to privileged EXEC mode. The password does not appear on the screen and is case sensitive.
The privileged EXEC mode prompt is the device name followed by the pound sign (#).
Switch#
Enter the enable command to access privileged EXEC mode:
Switch> enable
Switch#
The supported commands can vary depending on the version of software in use. To view a
comprehensive list of commands, enter a question mark (?) at the prompt.
Switch# ?
CLI Command Modes
To return to user EXEC mode, enter the disable privileged EXEC command.
Global Configuration Mode
Global configuration commands apply to features that affect the device as a whole. Use the configure
privileged EXEC command to enter global configuration mode. The default is to enter commands from
the management console.
When you enter the configure command, a message prompts you for the source of the configuration
commands:
Switch# configure
Configuring from terminal, memory, or network [terminal]?
You can specify either the terminal or NVRAM as the source of configuration commands.
This example shows you how to access global configuration mode:
Switch# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
The supported commands can vary depending on the version of software in use. To view a
comprehensive list of commands, enter a question mark (?) at the prompt.
Switch(config)# ?
To exit global configuration command mode and to return to privileged EXEC mode, enter the end or
exit command, or press Ctrl-Z.
OL-9645-10
Catalyst 3750 Metro Switch Command Reference
1-3
CLI Command Modes
Interface Configuration Mode
Interface configuration commands modify the operation of the interface. Interface configuration
commands always follow a global configuration command, which defines the interface type.
Use the interface interface-id command to access interface configuration mode. The new prompt means
interface configuration mode.
Switch(config-if)#
The supported commands can vary depending on the version of software in use. To view a
comprehensive list of commands, enter a question mark (?) at the prompt.
Switch(config-if)# ?
To exit interface configuration mode and to return to global configuration mode, enter the exit command.
To exit interface configuration mode and to return to privileged EXEC mode, enter the end command,
or press Ctrl-Z.
VLAN Configuration Mode
Chapter 1 Using the Command-Line Interface
Use this mode to configure normal-range VLANs (VLAN IDs 1 to 1005) or, when VTP mode is
transparent, to configure extended-range VLANs (VLAN IDs 1006 to 4094). When VTP mode is
transparent, the VLAN and VTP configuration is saved in the running configuration file, and you can
save it to the switch startup configuration file by using the copy running-config startup-config
privileged EXEC command. The configurations of VLAN IDs 1 to 1005 are saved in the VLAN database
if VTP is in transparent or server mode. The extended-range VLAN configurations are not saved in the
VLAN database.
Enter the vlan vlan-id global configuration command to access config-vlan mode:
Switch(config)# vlan 2000
Switch(config-vlan)#
The supported keywords can vary but are similar to the commands available in VLAN configuration
mode. To view a comprehensive list of commands, enter a question mark (?) at the prompt.
Switch(config-vlan)# ?
For extended-range VLANs, all characteristics except the maximum transmission unit (MTU) size must
remain at the default setting.
To return to global configuration mode, enter exit; to return to privileged EXEC mode, enter end. All
the commands except shutdown take effect when you exit config-vlan mode.
Line Configuration Mode
1-4
Line configuration commands modify the operation of a terminal line. Line configuration commands
always follow a line command, which defines a line number. Use these commands to change terminal
parameter settings line-by-line or for a range of lines.
Use the line vty line_number [ending_line_number] command to enter line configuration mode. The
new prompt means line configuration mode. The following example shows how to enter line
configuration mode for virtual terminal line
Switch(config)# line vty 0 7
Catalyst 3750 Metro Switch Command Reference
7:
OL-9645-10
Chapter 1 Using the Command-Line Interface
The supported commands can vary depending on the version of software in use. To view a
comprehensive list of commands, enter a question mark (?) at the prompt.
Switch(config-line)# ?
To exit line configuration mode and to return to global configuration mode, use the exit command. To
exit line configuration mode and to return to privileged EXEC mode, enter the end command, or press
Ctrl-Z.
Commands Changed in Cisco IOS 12.2(25)EY
Table 1-2 lists describes the commands that have the same function but different syntax than they did in
software releases before Cisco IOS Release 12.2(25)EY.
Ta b l e 1-2 Commands Changed
Commands Changed in Cisco IOS 12.2(25)EY
Releases earlier than
Cisco IOS
Release 12.2(25)EY
debug autoqos debug auto qos Enables debugging of the auto-QoS1 feature.
xconnect {destination
vc-id}
1. auto-QoS = automatic quality of service
Cisco IOS
Release 12.2(25)EY or
later
xconnect {destination
vc-id encapsulation
mpls}
Description
Routes a Layer 2 packets over a specified
point-to-point virtual connection.
OL-9645-10
Catalyst 3750 Metro Switch Command Reference
1-5
Commands Changed in Cisco IOS 12.2(25)EY
Chapter 1 Using the Command-Line Interface
1-6
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
CHAP T E R
2
Catalyst 3750 Metro Switch Cisco IOS Commands
aaa accounting dot1x
Use the aaa accounting dot1x global configuration command to enable authentication, authorization,
and accounting (AAA) accounting and to create method lists defining specific accounting methods on a
per-line or per-interface basis for 802.1x sessions. Use the no form of this command to disable 802.1x
accounting.
aaa accounting dot1x {name | default} start-stop {broadcast group {name | radius | tacacs+}
[group {name | radius | tacacs+} ... ] | group {name | radius | tacacs+} [group {name | radius
| tacacs+} ... ]}
no aaa accounting dot1x {name | default}
Syntax Description name Name of a server group. This is optional when you enter it after the
broadcast group and group keywords.
default Use the accounting methods that follow as the default list for accounting
services.
start-stop Send a start accounting notice at the beginning of a process and a stop
accounting notice at the end of a process. The start accounting record is sent
in the background. The requested-user process begins regardless of whether
or not the start accounting notice was received by the accounting server.
broadcast Enable accounting records to be sent to multiple AAA servers and send
accounting records to the first server in each group. If the first server is
unavailable, the switch uses the list of backup servers to identify the first
server.
group Specify the server group to be used for accounting services. These are valid
server group names:
OL-9645-10
• name—Name of a server group.
• radius—List of all RADIUS hosts.
• tacacs+—List of all TACACS+ hosts.
The group keyword is optional when you enter it after the broadcast group
and group keywords. You can enter more than optional group keyword.
radius (Optional) Enable RADIUS authorization.
tacacs+ (Optional) Enable TACACS+ accounting.
Catalyst 3750 Metro Switch Command Reference
2-1
aaa accounting dot1x
Defaults AAA accounting is disabled.
Command Modes Global configuration
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
Command History
Release Modification
12.2(25)EY This command was introduced.
Usage Guidelines This command requires access to a RADIUS server.
Note We recommend that you enter the dot1x reauthentication interface configuration command before
configuring 802.1x RADIUS accounting on an interface.
Examples This example shows how to configure 802.1x accounting:
Switch(config)# aaa accounting dot1x default start-stop group radius
Switch(config)#
Note The RADIUS authentication server must be properly configured to accept and log update or watchdog
packets from the AAA client.
Related Commands
Command Description
aaa accounting dot1x Specifies one or more AAA methods for use on interfaces running 802.1x.
dot1x reauthentication Enables or disables periodic reauthentication.
dot1x test
Sets the number of seconds between re-authentication attempts.
eapol-capable
reauth-period
2-2
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Loading...