Cisco Catalyst 2960 Series Operating manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2960 Switch Command Reference
Cisco IOS Release 12.2(40)SE
August 2007
Text Part Number: OL-8604-03

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IIN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of
Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo,
Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study,
LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way to
Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0705R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 2960 Switch Command Reference
© 2006–2007 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 2960 Switch Command Reference
OL-8604-03
CONTENTS
Preface xvii
Audience xvii
Purpose xvii
Conventions xvii
Related Publications xviii
Obtaining Documentation, Obtaining Support, and Security Guidelines xix
CHAPTER 1Using the Command-Line Interface 1-1
CLI Command Modes 1-1
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-3
Interface Configuration Mode 1-4
config-vlan Mode 1-4
VLAN Configuration Mode 1-5
Line Configuration Mode 1-5
CHAPTER 2Catalyst 2960 Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
aaa authorization network 2-5
archive download-sw 2-6
archive tar 2-8
archive upload-sw 2-11
auto qos voip 2-13
boot boothlpr 2-18
boot config-file 2-19
boot enable-break 2-20
boot helper 2-21
boot helper-config-file 2-22
boot manual 2-23

Contents
iv
Catalyst 2960 Switch Command Reference
OL-8604-03
boot private-config-file 2-24
boot system 2-25
channel-group 2-26
channel-protocol 2-29
class 2-31
class-map 2-33
clear dot1x 2-35
clear eap sessions 2-36
clear errdisable interface 2-37
clear ip dhcp snooping 2-38
clear lacp 2-40
clear mac address-table 2-41
clear mac address-table move update 2-43
clear pagp 2-44
clear port-security 2-45
clear spanning-tree counters 2-47
clear spanning-tree detected-protocols 2-48
clear vmps statistics 2-49
clear vtp counters 2-50
cluster commander-address 2-51
cluster discovery hop-count 2-53
cluster enable 2-54
cluster holdtime 2-55
cluster member 2-56
cluster outside-interface 2-58
cluster run 2-59
cluster standby-group 2-60
cluster timer 2-62
define interface-range 2-64
delete 2-66
deny (MAC access-list configuration) 2-67
dot1x 2-70
dot1x auth-fail max-attempts 2-72
dot1x auth-fail vlan 2-74
dot1x control-direction 2-76

Contents
v
Catalyst 2960 Switch Command Reference
OL-8604-03
dot1x critical (global configuration) 2-78
dot1x critical (interface configuration) 2-80
dot1x default 2-82
dot1x fallback 2-83
dot1x guest-vlan 2-84
dot1x host-mode 2-86
dot1x initialize 2-87
dot1x mac-auth-bypass 2-88
dot1x max-reauth-req 2-90
dot1x max-req 2-91
dot1x pae 2-92
dot1x port-control 2-93
dot1x re-authenticate 2-95
dot1x reauthentication 2-96
dot1x timeout 2-97
duplex 2-100
errdisable detect cause 2-102
errdisable recovery 2-104
exception crashinfo 2-106
fallback profile 2-107
flowcontrol 2-109
interface port-channel 2-111
interface range 2-113
interface vlan 2-116
ip access-group 2-118
ip address 2-121
ip admission 2-123
ip admission name proxy http 2-124
ip dhcp snooping 2-126
ip dhcp snooping binding 2-127
ip dhcp snooping database 2-129
ip dhcp snooping information option 2-131
ip dhcp snooping information option allow-untrusted 2-133
ip dhcp snooping limit rate 2-135
ip dhcp snooping trust 2-136

Contents
vi
Catalyst 2960 Switch Command Reference
OL-8604-03
ip dhcp snooping verify 2-137
ip dhcp snooping vlan 2-138
ip igmp filter 2-139
ip igmp max-groups 2-141
ip igmp profile 2-143
ip igmp snooping 2-145
ip igmp snooping last-member-query-interval 2-147
ip igmp snooping querier 2-149
ip igmp snooping report-suppression 2-151
ip igmp snooping tcn 2-153
ip igmp snooping tcn flood 2-155
ip igmp snooping vlan immediate-leave 2-156
ip igmp snooping vlan mrouter 2-158
ip igmp snooping vlan static 2-160
ip ssh 2-162
lacp port-priority 2-164
lacp system-priority 2-166
location (global configuration) 2-168
location (interface configuration) 2-170
link state group 2-172
link state track 2-174
logging event 2-175
logging file 2-176
mac access-group 2-178
mac access-list extended 2-180
mac address-table aging-time 2-182
mac address-table move update 2-183
mac address-table notification 2-185
mac address-table static 2-187
mac address-table static drop 2-188
macro apply 2-190
macro description 2-193
macro global 2-194
macro global description 2-197
macro name 2-198

Contents
vii
Catalyst 2960 Switch Command Reference
OL-8604-03
match (class-map configuration) 2-200
mdix auto 2-202
media-type 2-204
mls qos 2-206
mls qos aggregate-policer 2-208
mls qos cos 2-210
mls qos dscp-mutation 2-212
mls qos map 2-214
mls qos queue-set output buffers 2-218
mls qos queue-set output threshold 2-220
mls qos rewrite ip dscp 2-222
mls qos srr-queue input bandwidth 2-224
mls qos srr-queue input buffers 2-226
mls qos srr-queue input cos-map 2-228
mls qos srr-queue input dscp-map 2-230
mls qos srr-queue input priority-queue 2-232
mls qos srr-queue input threshold 2-234
mls qos srr-queue output cos-map 2-236
mls qos srr-queue output dscp-map 2-238
mls qos trust 2-240
monitor session 2-242
mvr (global configuration) 2-247
mvr (interface configuration) 2-250
pagp learn-method 2-253
pagp port-priority 2-255
permit (MAC access-list configuration) 2-257
police 2-260
police aggregate 2-262
policy-map 2-264
port-channel load-balance 2-266
priority-queue 2-268
queue-set 2-270
radius-server dead-criteria 2-271
radius-server host 2-273
rcommand 2-275

Contents
viii
Catalyst 2960 Switch Command Reference
OL-8604-03
remote-span 2-277
renew ip dhcp snooping database 2-279
rmon collection stats 2-383
sdm prefer 2-385
service password-recovery 2-387
service-policy 2-389
set 2-391
setup 2-393
setup express 2-396
show access-lists 2-398
show archive status 2-401
show auto qos 2-402
show boot 2-406
show cable-diagnostics tdr 2-408
show class-map 2-410
show cluster 2-411
show cluster candidates 2-413
show cluster members 2-415
show controllers cpu-interface 2-417
show controllers ethernet-controller 2-419
show controllers tcam 2-426
show controllers utilization 2-428
show dot1x 2-430
show dtp 2-434
show eap 2-436
show env 2-439
show errdisable detect 2-440
show errdisable flap-values 2-442
show errdisable recovery 2-444
show etherchannel 2-446
show fallback profile 2-449
show flowcontrol 2-451
show interfaces 2-453
show interfaces counters 2-462
show inventory 2-465

Contents
ix
Catalyst 2960 Switch Command Reference
OL-8604-03
show ip dhcp snooping 2-466
show ip dhcp snooping binding 2-467
show ip dhcp snooping database 2-469
show ip dhcp snooping statistics 2-471
show ip igmp profile 2-474
show ip igmp snooping 2-475
show ip igmp snooping groups 2-478
show ip igmp snooping mrouter 2-480
show ip igmp snooping querier 2-482
show lacp 2-484
show location 2-488
show link state group 2-491
show mac access-group 2-493
show mac address-table 2-495
show mac address-table address 2-497
show mac address-table aging-time 2-499
show mac address-table count 2-501
show mac address-table dynamic 2-503
show mac address-table interface 2-505
show mac address-table move update 2-507
show mac address-table notification 2-509
show mac address-table static 2-511
show mac address-table vlan 2-513
show mls qos 2-515
show mls qos aggregate-policer 2-516
show mls qos input-queue 2-517
show mls qos interface 2-519
show mls qos maps 2-523
show mls qos queue-set 2-526
show mls qos vlan 2-528
show monitor 2-529
show mvr 2-531
show mvr interface 2-533
show mvr members 2-535
show pagp 2-537

Contents
x
Catalyst 2960 Switch Command Reference
OL-8604-03
show parser macro 2-539
show policy-map 2-542
show port-security 2-544
show sdm prefer 2-547
show setup express 2-549
show spanning-tree 2-550
show storm-control 2-556
show system mtu 2-558
show udld 2-560
show version 2-563
show vlan 2-565
show vmps 2-569
show vtp 2-572
shutdown 2-629
shutdown vlan 2-630
snmp-server enable traps 2-631
snmp-server host 2-635
snmp trap mac-notification 2-639
spanning-tree backbonefast 2-641
spanning-tree bpdufilter 2-642
spanning-tree bpduguard 2-644
spanning-tree cost 2-646
spanning-tree etherchannel guard misconfig 2-648
spanning-tree extend system-id 2-650
spanning-tree guard 2-652
spanning-tree link-type 2-654
spanning-tree loopguard default 2-656
spanning-tree mode 2-658
spanning-tree mst configuration 2-660
spanning-tree mst cost 2-662
spanning-tree mst forward-time 2-664
spanning-tree mst hello-time 2-665
spanning-tree mst max-age 2-666
spanning-tree mst max-hops 2-667
spanning-tree mst port-priority 2-669