Cisco 3750 - Catalyst EMI Switch Installation manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 3750 Switch Command Reference
Cisco IOS Release 12.2(50)SE
March 2009
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO
CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS
MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY
PRODUCTS.
Text Part Number: OL-8552-07

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome
to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS,
Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS,
Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone,
MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase,
SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of
Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0812R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 3750 Switch Command Reference
© 2004–2009 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 3750 Switch Command Reference
OL-8552-07
CONTENTS
Preface xxi
Audience xxi
Purpose xxi
Conventions xxii
Related Publications xxii
Obtaining Documentation and Submitting a Service Request xxiv
CHAPTER 1Using the Command-Line Interface 1-1
Accessing the Switch 1-1
CLI Command Modes 1-2
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-4
Interface Configuration Mode 1-4
config-vlan Mode 1-4
VLAN Configuration Mode 1-5
Line Configuration Mode 1-5
CHAPTER 2Catalyst 3750 Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
aaa authorization network 2-5
action 2-6
archive copy-sw 2-8
archive download-sw 2-11
archive tar 2-15
archive upload-sw 2-18
arp access-list 2-20
authentication control-direction 2-22
authentication event 2-24
authentication fallback 2-26
authentication host-mode 2-28

Contents
iv
Catalyst 3750 Switch Command Reference
OL-8552-07
authentication open 2-30
authentication order 2-32
authentication periodic 2-34
authentication port-control 2-36
authentication priority 2-38
authentication timer 2-40
authentication violation 2-42
auto qos voip 2-44
boot auto-copy-sw 2-49
boot auto-download-sw 2-50
boot config-file 2-52
boot enable-break 2-53
boot helper 2-54
boot helper-config-file 2-55
boot manual 2-56
boot private-config-file 2-57
boot system 2-58
channel-group 2-60
channel-protocol 2-64
cisp enable 2-65
class 2-66
class-map 2-68
clear dot1x 2-70
clear eap sessions 2-71
clear energywise neighbors 2-72
clear errdisable interface 2-73
clear arp inspection log 2-74
clear ip arp inspection statistics 2-75
clear ip dhcp snooping 2-76
clear ipc 2-78
clear ipv6 dhcp conflict 2-79
clear l2protocol-tunnel counters 2-80
clear lacp 2-81
clear mac address-table 2-82
clear mac address-table move update 2-84

Contents
v
Catalyst 3750 Switch Command Reference
OL-8552-07
clear nmsp statistics 2-85
clear pagp 2-86
clear port-security 2-87
clear spanning-tree counters 2-89
clear spanning-tree detected-protocols 2-90
clear vmps statistics 2-91
clear vtp counters 2-92
cluster commander-address 2-93
cluster discovery hop-count 2-95
cluster enable 2-96
cluster holdtime 2-97
cluster member 2-98
cluster outside-interface 2-100
cluster run 2-101
cluster standby-group 2-102
cluster timer 2-104
define interface-range 2-106
delete 2-108
deny (ARP access-list configuration) 2-110
deny (IPv6 access-list configuration) 2-112
deny (MAC access-list configuration) 2-117
diagnostic monitor 2-120
diagnostic schedule 2-123
diagnostic start 2-125
dot1x 2-127
dot1x auth-fail max-attempts 2-129
dot1x auth-fail vlan 2-131
dot1x control-direction 2-133
dot1x credentials (global configuration) 2-135
dot1x critical (global configuration) 2-136
dot1x critical (interface configuration) 2-138
dot1x default 2-140
dot1x fallback 2-141
dot1x guest-vlan 2-142
dot1x host-mode 2-145

Contents
vi
Catalyst 3750 Switch Command Reference
OL-8552-07
dot1x initialize 2-147
dot1x mac-auth-bypass 2-148
dot1x max-reauth-req 2-150
dot1x max-req 2-151
dot1x multiple-hosts 2-152
dot1x pae 2-153
dot1x port-control 2-154
dot1x re-authenticate 2-156
dot1x re-authentication 2-157
dot1x reauthentication 2-158
dot1x test eapol-capable 2-159
dot1x test timeout 2-160
dot1x timeout 2-161
dot1x violation-mode 2-165
duplex 2-167
energywise (global configuration) 2-169
energywise (interface configuration) 2-171
energywise domain 2-173
energywise query 2-175
errdisable detect cause 2-179
errdisable detect cause small-frame 2-182
errdisable recovery cause small-frame 2-184
errdisable recovery 2-185
exception crashinfo 2-188
fallback profile 2-189
flowcontrol 2-191
interface port-channel 2-193
interface range 2-195
interface vlan 2-197
ip access-group 2-199
ip address 2-202
ip admission 2-204
ip admission name proxy http 2-205
ip arp inspection filter vlan 2-207
ip arp inspection limit 2-209

Contents
vii
Catalyst 3750 Switch Command Reference
OL-8552-07
ip arp inspection log-buffer 2-211
ip arp inspection trust 2-213
ip arp inspection validate 2-215
ip arp inspection vlan 2-217
ip arp inspection vlan logging 2-218
ip dhcp snooping 2-220
ip dhcp snooping binding 2-221
ip dhcp snooping database 2-223
ip dhcp snooping information option 2-225
ip dhcp snooping information option allow-untrusted 2-227
ip dhcp snooping information option format remote-id 2-229
ip dhcp snooping limit rate 2-231
ip dhcp snooping trust 2-232
ip dhcp snooping verify 2-233
ip dhcp snooping vlan 2-234
ip dhcp snooping vlan information option format-type circuit-id string 2-235
ip igmp filter 2-237
ip igmp max-groups 2-239
ip igmp profile 2-241
ip igmp snooping 2-243
ip igmp snooping last-member-query-interval 2-245
ip igmp snooping querier 2-247
ip igmp snooping report-suppression 2-249
ip igmp snooping tcn 2-251
ip igmp snooping tcn flood 2-253
ip igmp snooping vlan immediate-leave 2-254
ip igmp snooping vlan mrouter 2-256
ip igmp snooping vlan static 2-258
ip snap forwarding 2-260
ip source binding 2-261
ip ssh 2-263
ip sticky-arp (global configuration) 2-265
ip sticky-arp (interface configuration) 2-267
ip verify source 2-269
ipv6 access-list 2-270

Contents
viii
Catalyst 3750 Switch Command Reference
OL-8552-07
ipv6 address dhcp 2-273
ipv6 dhcp client request vendor 2-274
ipv6 dhcp ping packets 2-275
ipv6 dhcp pool 2-277
ipv6 dhcp server 2-280
ipv6 mld snooping 2-282
ipv6 mld snooping last-listener-query-count 2-284
ipv6 mld snooping last-listener-query-interval 2-286
ipv6 mld snooping listener-message-suppression 2-288
ipv6 mld snooping robustness-variable 2-290
ipv6 mld snooping tcn 2-292
ipv6 mld snooping vlan 2-294
ipv6 traffic-filter 2-296
l2protocol-tunnel 2-298
l2protocol-tunnel cos 2-301
lacp port-priority 2-302
lacp system-priority 2-304
location (global configuration) 2-306
location (interface configuration) 2-308
link state group 2-310
link state track 2-312
logging event 2-313
logging event power-inline-status 2-314
logging file 2-315
mac access-group 2-317
mac access-list extended 2-319
mac address-table aging-time 2-321
mac address-table learning vlan 2-322
mac address-table move update 2-324
mac address-table notification 2-326
mac address-table static 2-328
mac address-table static drop 2-329
macro apply 2-331
macro auto execute 2-334
macro auto global processing 2-339

Contents
ix
Catalyst 3750 Switch Command Reference
OL-8552-07
macro description 2-341
macro global 2-342
macro global description 2-345
macro name 2-346
match (access-map configuration) 2-348
match (class-map configuration) 2-350
mdix auto 2-352
mls qos 2-353
mls qos aggregate-policer 2-355
mls qos cos 2-357
mls qos dscp-mutation 2-359
mls qos map 2-361
mls qos queue-set output buffers 2-365
mls qos queue-set output threshold 2-367
mls qos rewrite ip dscp 2-369
mls qos srr-queue input bandwidth 2-371
mls qos srr-queue input buffers 2-373
mls qos srr-queue input cos-map 2-375
mls qos srr-queue input dscp-map 2-377
mls qos srr-queue input priority-queue 2-379
mls qos srr-queue input threshold 2-381
mls qos srr-queue output cos-map 2-383
mls qos srr-queue output dscp-map 2-385
mls qos trust 2-387
mls qos vlan-based 2-389
monitor session 2-390
mvr (global configuration) 2-395
mvr (interface configuration) 2-398
network-policy 2-401
network-policy profile (global configuration) 2-402
network-policy profile (network-policy configuration) 2-404
nmsp 2-406
nmsp attachment suppress 2-408
nsf 2-409
pagp learn-method 2-410

Contents
x
Catalyst 3750 Switch Command Reference
OL-8552-07
pagp port-priority 2-412
permit (ARP access-list configuration) 2-414
permit (IPv6 access-list configuration) 2-416
permit (MAC access-list configuration) 2-422
police 2-425
police aggregate 2-427
policy-map 2-429
port-channel load-balance 2-432
power inline 2-434
power inline consumption 2-437
priority-queue 2-439
private-vlan 2-441
private-vlan mapping 2-444
queue-set 2-446
radius-server dead-criteria 2-447
radius-server host 2-449
rcommand 2-451
reload 2-453
remote command 2-455
remote-span 2-457
renew ip dhcp snooping database 2-459
reserved-only 2-461
rmon collection stats 2-463
sdm prefer 2-464
service password-recovery 2-468
service-policy 2-470
session 2-473
set 2-475
setup 2-477
setup express 2-480
shell trigger 2-482
show access-lists 2-484
show archive status 2-487
show arp access-list 2-488
show authentication 2-489