Cisco Catalyst 2960 Series Installation manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2960 Switch Command Reference
Cisco IOS Release 12.2(25)FX
September 2005
Customer Order Number: DOC-7816882=
Text Part Number: 78-16882-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IIN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn,
and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the
Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet
Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise,
the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX,
Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient,
and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0502R)
Catalyst 2960 Switch Command Reference
Copyright © 2005 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 2960 Switch Command Reference
78-16882-01
CONTENTS
Preface xv
Audience xv
Purpose xv
Conventions xv
Related Publications xvi
Obtaining Documentation xvii
Cisco.com xvii
Product Documentation DVD xvii
Ordering Documentation xviii
Documentation Feedback xviii
Cisco Product Security Overview xix
Reporting Security Problems in Cisco Products xix
Obtaining Technical Assistance xx
Cisco Technical Support & Documentation Website xx
Submitting a Service Request xx
Definitions of Service Request Severity xxi
Obtaining Additional Publications and Information xxi
CHAPTER 1Using the Command-Line Interface 1-1
CLI Command Modes 1-1
User EXEC Mode 1-2
Privileged EXEC Mode 1-3
Global Configuration Mode 1-3
Interface Configuration Mode 1-4
config-vlan Mode 1-4
VLAN Configuration Mode 1-4
Line Configuration Mode 1-5
CHAPTER 2Catalyst 2960 Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
archive download-sw 2-5
archive tar 2-8

Contents
iv
Catalyst 2960 Switch Command Reference
78-16882-01
archive upload-sw 2-11
auto qos voip 2-13
boot boothlpr 2-17
boot config-file 2-18
boot enable-break 2-19
boot helper 2-20
boot helper-config-file 2-21
boot manual 2-22
boot private-config-file 2-23
boot system 2-24
channel-group 2-25
channel-protocol 2-28
class 2-29
class-map 2-31
clear ip dhcp snooping database 2-33
clear lacp 2-34
clear mac address-table 2-35
clear pagp 2-36
clear port-security 2-37
clear spanning-tree counters 2-39
clear spanning-tree detected-protocols 2-40
clear vmps statistics 2-41
clear vtp counters 2-42
cluster commander-address 2-43
cluster discovery hop-count 2-45
cluster enable 2-46
cluster holdtime 2-48
cluster member 2-49
cluster outside-interface 2-51
cluster run 2-52
cluster standby-group 2-53
cluster timer 2-55
define interface-range 2-56
delete 2-58
deny (MAC access-list configuration) 2-59

Contents
v
Catalyst 2960 Switch Command Reference
78-16882-01
dot1x 2-62
dot1x default 2-64
dot1x guest-vlan 2-65
dot1x host-mode 2-67
dot1x initialize 2-68
dot1x max-reauth-req 2-69
dot1x max-req 2-70
dot1x port-control 2-71
dot1x re-authenticate 2-73
dot1x reauthentication 2-74
dot1x timeout 2-75
duplex 2-77
errdisable detect cause 2-79
errdisable recovery 2-81
flowcontrol 2-83
interface port-channel 2-85
interface range 2-87
interface vlan 2-90
ip access-group 2-91
ip address 2-93
ip dhcp snooping 2-95
ip dhcp snooping binding 2-96
ip dhcp snooping database 2-98
ip dhcp snooping information option 2-100
ip dhcp snooping information option allow-untrusted 2-102
ip dhcp snooping limit rate 2-104
ip dhcp snooping trust 2-105
ip dhcp snooping verify 2-106
ip dhcp snooping vlan 2-107
ip igmp filter 2-108
ip igmp max-groups 2-109
ip igmp profile 2-111
ip igmp snooping 2-113
ip igmp snooping last-member-query-interval 2-115
ip igmp snooping querier 2-117

Contents
vi
Catalyst 2960 Switch Command Reference
78-16882-01
ip igmp snooping report-suppression 2-119
ip igmp snooping tcn 2-121
ip igmp snooping tcn flood 2-123
ip igmp snooping vlan immediate-leave 2-124
ip igmp snooping vlan mrouter 2-125
ip igmp snooping vlan static 2-127
ip ssh 2-129
lacp port-priority 2-131
lacp system-priority 2-133
logging file 2-135
mac access-group 2-137
mac access-list extended 2-139
mac address-table aging-time 2-141
mac address-table notification 2-142
mac address-table static 2-144
mac address-table static drop 2-145
macro apply 2-147
macro description 2-150
macro global 2-151
macro global description 2-154
macro name 2-155
match (class-map configuration) 2-157
mdix auto 2-159
media-type 2-161
mls qos 2-163
mls qos aggregate-policer 2-165
mls qos cos 2-167
mls qos dscp-mutation 2-169
mls qos map 2-171
mls qos queue-set output buffers 2-175
mls qos queue-set output threshold 2-177
mls qos rewrite ip dscp 2-179
mls qos srr-queue input bandwidth 2-181
mls qos srr-queue input buffers 2-183
mls qos srr-queue input cos-map 2-185

Contents
vii
Catalyst 2960 Switch Command Reference
78-16882-01
mls qos srr-queue input dscp-map 2-187
mls qos srr-queue input priority-queue 2-189
mls qos srr-queue input threshold 2-191
mls qos srr-queue output cos-map 2-193
mls qos srr-queue output dscp-map 2-195
mls qos trust 2-197
monitor session 2-199
mvr (global configuration) 2-204
mvr (interface configuration) 2-207
pagp learn-method 2-210
pagp port-priority 2-212
permit (MAC access-list configuration) 2-214
police 2-217
police aggregate 2-219
policy-map 2-221
port-channel load-balance 2-224
priority-queue 2-226
queue-set 2-228
rcommand 2-229
remote-span 2-231
renew ip dhcp snooping database 2-233
rmon collection stats 2-235
sdm prefer 2-236
service password-recovery 2-238
service-policy 2-240
set 2-242
setup 2-244
setup express 2-247
show access-lists 2-249
show archive status 2-252
show auto qos 2-253
show boot 2-257
show cable-diagnostics tdr 2-259
show class-map 2-261
show cluster 2-262

Contents
viii
Catalyst 2960 Switch Command Reference
78-16882-01
show cluster candidates 2-264
show cluster members 2-266
show controllers cpu-interface 2-268
show controllers ethernet-controller 2-270
show controllers tcam 2-277
show controllers utilization 2-279
show dot1x 2-281
show dtp 2-284
show env 2-286
show errdisable detect 2-287
show errdisable flap-values 2-289
show errdisable recovery 2-291
show etherchannel 2-293
show flowcontrol 2-296
show interfaces 2-298
show interfaces counters 2-305
show inventory 2-307
show ip dhcp snooping 2-308
show ip dhcp snooping binding 2-309
show ip dhcp snooping database 2-311
show ip igmp profile 2-313
show ip igmp snooping 2-314
show ip igmp snooping groups 2-317
show ip igmp snooping mrouter 2-319
show ip igmp snooping querier 2-321
show lacp 2-323
show mac access-group 2-327
show mac address-table 2-329
show mac address-table address 2-331
show mac address-table aging-time 2-333
show mac address-table count 2-335
show mac address-table dynamic 2-337
show mac address-table interface 2-339
show mac address-table notification 2-341
show mac address-table static 2-343

Contents
ix
Catalyst 2960 Switch Command Reference
78-16882-01
show mac address-table vlan 2-345
show mls qos 2-347
show mls qos aggregate-policer 2-348
show mls qos input-queue 2-349
show mls qos interface 2-351
show mls qos maps 2-355
show mls qos queue-set 2-358
show mls qos vlan 2-360
show monitor 2-361
show mvr 2-364
show mvr interface 2-366
show mvr members 2-368
show pagp 2-370
show parser macro 2-372
show policy-map 2-375
show port-security 2-377
show sdm prefer 2-380
show setup express 2-382
show spanning-tree 2-383
show storm-control 2-389
show system mtu 2-391
show udld 2-392
show version 2-395
show vlan 2-397
show vmps 2-400
show vtp 2-403
shutdown 2-407
shutdown vlan 2-408
snmp-server enable traps 2-409
snmp-server host 2-412
snmp trap mac-notification 2-416
spanning-tree backbonefast 2-418
spanning-tree bpdufilter 2-419
spanning-tree bpduguard 2-421
spanning-tree cost 2-423

Contents
x
Catalyst 2960 Switch Command Reference
78-16882-01
spanning-tree etherchannel guard misconfig 2-425
spanning-tree extend system-id 2-427
spanning-tree guard 2-428
spanning-tree link-type 2-430
spanning-tree loopguard default 2-432
spanning-tree mode 2-434
spanning-tree mst configuration 2-436
spanning-tree mst cost 2-438
spanning-tree mst forward-time 2-440
spanning-tree mst hello-time 2-441
spanning-tree mst max-age 2-442
spanning-tree mst max-hops 2-443
spanning-tree mst port-priority 2-444
spanning-tree mst priority 2-446
spanning-tree mst root 2-447
spanning-tree port-priority 2-449
spanning-tree portfast (global configuration) 2-451
spanning-tree portfast (interface configuration) 2-453
spanning-tree uplinkfast 2-455
spanning-tree vlan 2-457
speed 2-460
srr-queue bandwidth limit 2-462
srr-queue bandwidth shape 2-464
srr-queue bandwidth share 2-466
storm-control 2-468
switchport access 2-471
switchport backup interface 2-473
switchport block 2-475
switchport host 2-476
switchport mode 2-477
switchport nonegotiate 2-479
switchport port-security 2-481
switchport port-security aging 2-486
switchport priority extend 2-488
switchport protected 2-490