Catalyst 2960 Switch Command Reference - Cisco

1 Corporate HeadquartersCisco Systems, West Tasman DriveSan Jose, CA 95134-1706 : 408 526-4000800 553-NETS (6387)Fax: 408 526-4100 Catalyst 2960 Switch Command ReferenceCisco IOS Release (25)SEEF ebruary 2006 Text Part Number: OL-8604-01 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS Reference . IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR Cisco REPRESENTATIVE FOR A Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB s public domain version of the UNIX operating system.

2 All rights reserved. Copyright 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALL FAULTS. Cisco AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE NO EVENT SHALL Cisco OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF Cisco OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH , CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.

3 ; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst , CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco , the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient.

4 And TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0502R)Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, Command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and 2960 Switch Command ReferenceCopyright 2006 Cisco Systems, Inc. All rights reserved. iiiCatalyst 2960 SwitchCommand ReferenceOL-8604-01 CONTENTSP refacexvAudiencexvPurposexvConventionsxv Related PublicationsxviObtaining Documentation DVDxviiOrdering DocumentationxviiiDocumentation FeedbackxviiiCisco Product Security OverviewxviiiReporting Security Problems in Cisco ProductsxixObtaining Technical AssistancexixCisco Technical Support & Documentation WebsitexixSubmitting a Service RequestxxDefinitions of Service Request SeverityxxObtaining Additional Publications and InformationxxiCHAPTER 1 Using the Command -Line Interface1-1 CLI Command Modes1-1 User EXEC Mode 1-2 Privileged EXEC Mode1-3 Global configuration Mode1-3 Interface configuration Mode1-4config-vlan Mode1-4 VLAN configuration Mode1-4 Line configuration Mode1-5 CHAPTER 2 Catalyst 2960 Switch Cisco

5 IOS Commands2-1aaa accounting dot1x2-1aaa authentication dot1x2-3aaa authorization network 2-5archive download-sw2-6 ContentsivCatalyst 2960 Switch Command ReferenceOL-8604-01archive tar2-9archive upload-sw2-12auto qos voip2-14boot boothlpr2-18boot config-file2-19boot enable-break2-20boot helper2-21boot helper-config-file2-22boot manual2-23boot private-config-file2-24boot system2-25channel-group2-26channel-proto col2-29class2-30class-map2-32clear dot1x2-34clear eap2-35 clear ip dhcp snooping database2-36clear lacp2-37clear mac address-table2-38clear mac address-table move update2-39clear pagp2-40clear port-security2-41clear spanning-tree counters2-43clear spanning-tree detected-protocols2-44clear vmps statistics2-45clear vtp counters2-46cluster commander-address 2-47cluster discovery hop-count2-49cluster enable2-50cluster holdtime2-52cluster member2-53cluster outside-interface2-55cluster run2-56cluster standby-group2-57 ContentsvCatalyst 2960 SwitchCommand ReferenceOL-8604-01cluster timer2-59define interface-range2-60delete2-62 deny (MAC access-list configuration )2-63dot1x2-66dot1x auth-fail max-attempts2-68dot1x auth-fail vlan2-70dot1x control-direction2-72dot1x critical (global configuration )2-74dot1x critical (interface configuration )

6 2-76dot1x default2-78dot1x guest-vlan2-79dot1x host-mode2-81dot1x initialize2-82dot1x mac-auth-bypass2-83dot1x max-reauth-req2-85dot1x max-req2-86dot1x pae2-87dot1x port-control2-88dot1x re-authenticate 2-90dot1x reauthentication 2-91dot1x timeout 2-92duplex2-95errdisable detect cause2-97errdisable recovery2-99exception crashinfo2-101flowcontrol2-102interface port-channel2-104interface range2-106interface vlan2-108ip access-group2-109ip address2-111ip dhcp snooping2-113ip dhcp snooping binding2-114ip dhcp snooping database2-116 ContentsviCatalyst 2960 Switch Command ReferenceOL-8604-01ip dhcp snooping information option2-118ip dhcp snooping information option allow-untrusted2-120ip dhcp snooping limit rate2-122ip dhcp snooping trust2-123ip dhcp snooping verify2-124ip dhcp snooping vlan2-125ip igmp filter2-126ip igmp max-groups2-127ip igmp profile2-129ip igmp snooping2-131ip igmp snooping last-member-query-interval2-133ip igmp snooping querier2-135ip igmp snooping report-suppression2-137ip igmp snooping tcn 2-139ip igmp snooping tcn flood 2-141ip igmp snooping vlan immediate-leave2-142ip igmp snooping vlan mrouter2-143ip igmp snooping vlan static2-145ip ssh2-147lacp port-priority2-149lacp system-priority2-151link state group2-153link state track2-155logging file2-156mac access-group2-158mac access-list extended2-160mac address-table aging-time2-162mac address-table move update2-163mac address-table notification2-165mac address-table static2-167mac address-table static drop2-168macro apply2-170macro description2-173macro global2-174macro

7 Global description2-177 ContentsviiCatalyst 2960 SwitchCommand ReferenceOL-8604-01macro name2-178match (class-map configuration )2-180mdix auto2-182media-type2-184mls qos2-186mls qos aggregate-policer2-188mls qos cos2-190mls qos dscp-mutation2-192mls qos map2-194mls qos queue-set output buffers2-198mls qos queue-set output threshold2-200mls qos rewrite ip dscp2-202mls qos srr-queue input bandwidth2-204mls qos srr-queue input buffers2-206mls qos srr-queue input cos-map2-208mls qos srr-queue input dscp-map2-210mls qos srr-queue input priority-queue2-212mls qos srr-queue input threshold2-214mls qos srr-queue output cos-map2-216mls qos srr-queue output dscp-map2-218mls qos trust2-220monitor session2-222mvr (global configuration )2-227mvr (interface configuration )2-230pagp learn-method2-233pagp port-priority2-235permit (MAC access-list configuration )

8 2-237police2-240police aggregate2-242policy-map2-244port-channe l load-balance2-246priority-queue2-248queu e-set2-250radius-server dead-criteria2-251radius-server host2-253 ContentsviiiCatalyst 2960 Switch Command ReferenceOL-8604-01rcommand2-255remote-s pan2-257renew ip dhcp snooping database2-259rmon collection stats2-261sdm prefer2-262service password-recovery2-264service-policy2-26 6set2-268setup2-270setup express2-273show access-lists2-275show archive status2-278show auto qos2-279show boot2-283show cable-diagnostics tdr2-285show class-map2-287show cluster2-288show cluster candidates2-290show cluster members 2-292show controllers cpu-interface2-294show controllers ethernet-controller 2-296show controllers tcam 2-303show controllers utilization2-305show dot1x2-307show dtp2-311show eap2-313show env2-316show errdisable detect2-317show errdisable flap-values2-319show errdisable recovery2-321show etherchannel2-323show flowcontrol2-326show interfaces2-328show interfaces counters2-335show inventory2-337 ContentsixCatalyst 2960 SwitchCommand ReferenceOL-8604-01show ip dhcp snooping2-338show ip dhcp snooping binding2-339show ip dhcp snooping database2-341show ip igmp profile2-343show ip igmp snooping2-344show ip igmp snooping groups2-347show ip igmp snooping mrouter2-349show ip igmp snooping querier2-351 show lacp2-353show link state group2-357show mac access-group2-359show mac address-table2-361show mac address-table address2-363show mac address-table aging-time2-365show mac address-table count2-367show mac address-table dynamic2-369show mac

9 Address-table interface2-371show mac address-table move update2-373show mac address-table notification2-375show mac address-table static2-377show mac address-table vlan2-379show mls qos2-381show mls qos aggregate-policer2-382show mls qos input-queue2-383show mls qos interface2-385show mls qos maps2-389show mls qos queue-set2-392show mls qos vlan2-394show monitor2-395show mvr2-397show mvr interface2-399show mvr members2-401show pagp2-403show parser macro2-405show policy-map2-408 ContentsxCatalyst 2960 Switch Command ReferenceOL-8604-01show port-security2-410show sdm prefer2-413show setup express2-415show spanning-tree2-416show storm-control2-427show system mtu2-429show udld2-430show version2-433show vlan2-435show vmps2-439show vtp2-442shutdown2-447shutdown vlan2-448snmp-server enable traps2-449snmp-server host 2-452snmp trap mac-notification2-456spanning-tree backbonefast2-458spanning-tree bpdufilter 2-459spanning-tree bpduguard 2-461spanning-tree cost2-463spanning-tree etherchannel guard misconfig2-465spanning-tree extend system-id2-467spanning-tree guard2-468spanning-tree link-type2-470spanning-tree loopguard default2-472spanning-tree mode2-474spanning-tree mst configuration2-476spanning-tree mst cost2-478spanning-tree mst forward-time2-480spanning-tree mst hello-time2-481spanning-tree mst max-age2-482spanning-tree mst max-hops2-483spanning-tree mst port-priority2-485spanning-tree mst pre-standard2-487spanning-tree mst priority2-488 ContentsxiCatalyst 2960 SwitchCommand ReferenceOL-8604-01spanning-tree mst

10 Root2-489spanning-tree port-priority2-491spanning-tree portfast (global configuration )2-493spanning-tree portfast (interface configuration )2-495spanning-tree transmit hold-count2-497spanning-tree uplinkfast2-498spanning-tree vlan2-500speed2-503srr-queue bandwidth limit2-505srr-queue bandwidth shape2-507srr-queue bandwidth share2-509storm-control2-511switchport access2-514switchport backup interface2-516switchport block2-519switchport host2-520switchport mode2-521switchport nonegotiate2-523switchport port-security2-525switchport port-security aging2-530switchport priority extend2-532switchport protected2-534switchport trunk2-535switch