Cisco Catalyst 2960 Series Operating manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 2960 Switch Command Reference
Cisco IOS Release 12.2(44)SE
January 2008
Text Part Number: OL-8604-04

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IIN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCVP, the Cisco logo, and Welcome to the Human Network are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of
Cisco Systems, Inc.; and Access Registrar, Aironet, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo,
Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study,
LightStream, Linksys, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PIX, ProConnect, ScriptShare, SMARTnet, StackWise, The Fastest Way
to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0711R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 2960 Switch Command Reference
© 2006–2008 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 2960 Switch Command Reference
OL-8604-04
CONTENTS
Preface xvii
Audience xvii
Purpose xvii
Conventions xvii
Related Publications xviii
Obtaining Documentation, Obtaining Support, and Security Guidelines xix
CHAPTER 1Using the Command-Line Interface 1-1
CLI Command Modes 1-1
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-3
Interface Configuration Mode 1-4
config-vlan Mode 1-4
VLAN Configuration Mode 1-5
Line Configuration Mode 1-5
CHAPTER 2Catalyst 2960 Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
aaa authorization network 2-5
archive download-sw 2-6
archive tar 2-8
archive upload-sw 2-11
auto qos voip 2-13
boot boothlpr 2-17
boot config-file 2-18
boot enable-break 2-19
boot helper 2-20
boot helper-config-file 2-21
boot manual 2-22

Contents
iv
Catalyst 2960 Switch Command Reference
OL-8604-04
boot private-config-file 2-23
boot system 2-24
channel-group 2-25
channel-protocol 2-28
class 2-30
class-map 2-32
clear dot1x 2-34
clear eap sessions 2-35
clear errdisable interface 2-36
clear ip dhcp snooping 2-37
clear lacp 2-39
clear mac address-table 2-40
clear mac address-table move update 2-42
clear pagp 2-43
clear port-security 2-44
clear spanning-tree counters 2-46
clear spanning-tree detected-protocols 2-47
clear vmps statistics 2-48
clear vtp counters 2-49
cluster commander-address 2-50
cluster discovery hop-count 2-52
cluster enable 2-53
cluster holdtime 2-54
cluster member 2-55
cluster outside-interface 2-57
cluster run 2-58
cluster standby-group 2-59
cluster timer 2-61
define interface-range 2-62
delete 2-64
deny (MAC access-list configuration) 2-65
dot1x 2-68
dot1x auth-fail max-attempts 2-70
dot1x auth-fail vlan 2-72
dot1x control-direction 2-74

Contents
v
Catalyst 2960 Switch Command Reference
OL-8604-04
dot1x critical (global configuration) 2-76
dot1x critical (interface configuration) 2-78
dot1x default 2-80
dot1x fallback 2-81
dot1x guest-vlan 2-82
dot1x host-mode 2-84
dot1x initialize 2-85
dot1x mac-auth-bypass 2-86
dot1x max-reauth-req 2-88
dot1x max-req 2-89
dot1x pae 2-90
dot1x port-control 2-91
dot1x re-authenticate 2-93
dot1x reauthentication 2-94
dot1x timeout 2-95
duplex 2-98
errdisable detect cause 2-100
errdisable detect cause small-frame 2-102
errdisable recovery cause small-frame 2-104
errdisable recovery 2-105
exception crashinfo 2-107
fallback profile 2-108
flowcontrol 2-110
interface port-channel 2-112
interface range 2-114
interface vlan 2-117
ip access-group 2-118
ip address 2-120
ip admission 2-122
ip admission name proxy http 2-124
ip dhcp snooping 2-126
ip dhcp snooping binding 2-127
ip dhcp snooping database 2-129
ip dhcp snooping information option 2-131
ip dhcp snooping information option allow-untrusted 2-133

Contents
vi
Catalyst 2960 Switch Command Reference
OL-8604-04
ip dhcp snooping limit rate 2-135
ip dhcp snooping trust 2-137
ip dhcp snooping verify 2-138
ip dhcp snooping vlan 2-139
ip igmp filter 2-140
ip igmp max-groups 2-142
ip igmp profile 2-144
ip igmp snooping 2-146
ip igmp snooping last-member-query-interval 2-148
ip igmp snooping querier 2-150
ip igmp snooping report-suppression 2-152
ip igmp snooping tcn 2-154
ip igmp snooping tcn flood 2-156
ip igmp snooping vlan immediate-leave 2-157
ip igmp snooping vlan mrouter 2-159
ip igmp snooping vlan static 2-161
ip ssh 2-163
lacp port-priority 2-165
lacp system-priority 2-167
location (global configuration) 2-168
location (interface configuration) 2-170
link state group 2-172
link state track 2-174
logging event 2-175
logging file 2-176
mac access-group 2-178
mac access-list extended 2-180
mac address-table aging-time 2-182
mac address-table move update 2-183
mac address-table notification 2-185
mac address-table static 2-187
mac address-table static drop 2-188
macro apply 2-190
macro description 2-193
macro global 2-194

Contents
vii
Catalyst 2960 Switch Command Reference
OL-8604-04
macro global description 2-197
macro name 2-198
match (class-map configuration) 2-200
mdix auto 2-202
media-type 2-204
mls qos 2-206
mls qos aggregate-policer 2-208
mls qos cos 2-210
mls qos dscp-mutation 2-212
mls qos map 2-214
mls qos queue-set output buffers 2-218
mls qos queue-set output threshold 2-220
mls qos rewrite ip dscp 2-222
mls qos srr-queue input bandwidth 2-224
mls qos srr-queue input buffers 2-226
mls qos srr-queue input cos-map 2-228
mls qos srr-queue input dscp-map 2-230
mls qos srr-queue input priority-queue 2-232
mls qos srr-queue input threshold 2-234
mls qos srr-queue output cos-map 2-236
mls qos srr-queue output dscp-map 2-238
mls qos trust 2-240
monitor session 2-242
mvr (global configuration) 2-247
mvr (interface configuration) 2-250
pagp learn-method 2-253
pagp port-priority 2-255
permit (MAC access-list configuration) 2-257
police 2-260
police aggregate 2-262
policy-map 2-264
port-channel load-balance 2-266
priority-queue 2-268
queue-set 2-270
radius-server host 2-271

Contents
viii
Catalyst 2960 Switch Command Reference
OL-8604-04
radius-server dead-criteria 2-273
rcommand 2-275
remote-span 2-277
renew ip dhcp snooping database 2-279
rmon collection stats 2-281
sdm prefer 2-282
service password-recovery 2-284
service-policy 2-286
set 2-288
setup 2-290
setup express 2-293
show access-lists 2-295
show archive status 2-298
show auto qos 2-299
show boot 2-303
show cable-diagnostics tdr 2-305
show class-map 2-307
show cluster 2-308
show cluster candidates 2-310
show cluster members 2-312
show controllers cpu-interface 2-314
show controllers ethernet-controller 2-316
show controllers tcam 2-323
show controllers utilization 2-325
show dot1x 2-327
show dtp 2-331
show eap 2-333
show env 2-336
show errdisable detect 2-337
show errdisable flap-values 2-339
show errdisable recovery 2-341
show etherchannel 2-343
show fallback profile 2-346
show flowcontrol 2-348
show interfaces 2-350

Contents
ix
Catalyst 2960 Switch Command Reference
OL-8604-04
show interfaces counters 2-358
show inventory 2-360
show ip dhcp snooping 2-361
show ip dhcp snooping binding 2-362
show ip dhcp snooping database 2-364
show ip dhcp snooping statistics 2-366
show ip igmp profile 2-369
show ip igmp snooping 2-370
show ip igmp snooping groups 2-373
show ip igmp snooping mrouter 2-375
show ip igmp snooping querier 2-377
show lacp 2-379
show link state group 2-385
show mac access-group 2-388
show mac address-table 2-390
show mac address-table address 2-392
show mac address-table aging-time 2-394
show mac address-table count 2-396
show mac address-table dynamic 2-398
show mac address-table interface 2-400
show mac address-table move update 2-402
show mac address-table notification 2-404
show mac address-table static 2-406
show mac address-table vlan 2-408
show mls qos 2-410
show mls qos aggregate-policer 2-411
show mls qos input-queue 2-412
show mls qos interface 2-414
show mls qos maps 2-418
show mls qos queue-set 2-421
show mls qos vlan 2-423
show monitor 2-424
show mvr 2-426
show mvr interface 2-428
show mvr members 2-430

Contents
x
Catalyst 2960 Switch Command Reference
OL-8604-04
show pagp 2-432
show parser macro 2-434
show policy-map 2-437
show port-security 2-439
show sdm prefer 2-442
show setup express 2-444
show spanning-tree 2-445
show storm-control 2-451
show system mtu 2-453
show udld 2-454
show version 2-457
show vlan 2-459
show vmps 2-462
show vtp 2-465
shutdown 2-470
shutdown vlan 2-471
small-frame violation rate 2-472
snmp-server enable traps 2-474
snmp-server host 2-478
snmp trap mac-notification 2-482
spanning-tree backbonefast 2-484
spanning-tree bpdufilter 2-485
spanning-tree bpduguard 2-487
spanning-tree cost 2-489
spanning-tree etherchannel guard misconfig 2-491
spanning-tree extend system-id 2-493
spanning-tree guard 2-495
spanning-tree link-type 2-497
spanning-tree loopguard default 2-499
spanning-tree mode 2-501
spanning-tree mst configuration 2-503
spanning-tree mst cost 2-505
spanning-tree mst forward-time 2-507
spanning-tree mst hello-time 2-508
spanning-tree mst max-age 2-509

Contents
xi
Catalyst 2960 Switch Command Reference
OL-8604-04
spanning-tree mst max-hops 2-510
spanning-tree mst port-priority 2-512
spanning-tree mst pre-standard 2-514
spanning-tree mst priority 2-515
spanning-tree mst root 2-516
spanning-tree port-priority 2-518
spanning-tree portfast (global configuration) 2-520
spanning-tree portfast (interface configuration) 2-522
spanning-tree transmit hold-count 2-524
spanning-tree uplinkfast 2-525
spanning-tree vlan 2-527
speed 2-530
srr-queue bandwidth limit 2-532
srr-queue bandwidth shape 2-534
srr-queue bandwidth share 2-536
storm-control 2-538
switchport access 2-541
switchport backup interface 2-543
switchport block 2-547
switchport host 2-548
switchport mode 2-549
switchport nonegotiate 2-551
switchport port-security 2-553
switchport port-security aging 2-558
switchport priority extend 2-560
switchport protected 2-562
switchport trunk 2-564
switchport voice vlan 2-567
system mtu 2-569
test cable-diagnostics tdr 2-571
traceroute mac 2-572
traceroute mac ip 2-575
trust 2-577
udld 2-579
udld port 2-581

Contents
xii
Catalyst 2960 Switch Command Reference
OL-8604-04
udld reset 2-583
vlan (global configuration) 2-584
vlan (VLAN configuration) 2-589
vlan database 2-595
vmps reconfirm (privileged EXEC) 2-598
vmps reconfirm (global configuration) 2-599
vmps retry 2-600
vmps server 2-601
vtp (global configuration) 2-603
vtp (VLAN configuration) 2-607
APPENDIX ACatalyst 2960 Switch Bootloader Commands A-1
boot A-2
cat A-4
copy A-5
delete A-6
dir A-7
flash_init A-9
format A-10
fsck A-11
help A-12
memory A-13
mkdir A-14
more A-15
rename A-16
reset A-17
rmdir A-18
set A-19
type A-22
unset A-23
version A-25
APPENDIX BCatalyst 2960 Switch Debug Commands B-1
debug auto qos B-2
debug backup B-4
debug cluster B-5

Contents
xiii
Catalyst 2960 Switch Command Reference
OL-8604-04
debug dot1x B-7
debug dtp B-8
debug eap B-9
debug etherchannel B-10
debug interface B-11
debug ip dhcp snooping B-12
debug ip igmp filter B-13
debug ip igmp max-groups B-14
debug ip igmp snooping B-15
debug lacp B-16
debug mac-notification B-17
debug matm B-18
debug matm move update B-19
debug monitor B-20
debug mvrdbg B-21
debug nvram B-22
debug pagp B-23
debug platform acl B-24
debug platform backup interface B-25
debug platform cpu-queues B-26
debug platform dot1x B-28
debug platform etherchannel B-29
debug platform forw-tcam B-30
debug platform ip dhcp B-31
debug platform ip igmp snooping B-32
debug platform led B-34
debug platform matm B-35
debug platform messaging application B-36
debug platform phy B-37
debug platform pm B-39
debug platform port-asic B-41
debug platform port-security B-42
debug platform qos-acl-tcam B-43
debug platform resource-manager B-44
debug platform snmp B-45

Contents
xiv
Catalyst 2960 Switch Command Reference
OL-8604-04
debug platform span B-46
debug platform supervisor-asic B-47
debug platform sw-bridge B-48
debug platform tcam B-49
debug platform udld B-51
debug platform vlan B-52
debug pm B-53
debug port-security B-55
debug qos-manager B-56
debug spanning-tree B-57
debug spanning-tree backbonefast B-59
debug spanning-tree bpdu B-60
debug spanning-tree bpdu-opt B-61
debug spanning-tree mstp B-62
debug spanning-tree switch B-64
debug spanning-tree uplinkfast B-66
debug sw-vlan B-67
debug sw-vlan ifs B-69
debug sw-vlan notification B-71
debug sw-vlan vtp B-72
debug udld B-74
debug vqpc B-76
APPENDIX CCatalyst 2960 Switch Show Platform Commands C-1
show platform acl C-2
show platform backup interface C-3
show platform etherchannel C-4
show platform forward C-5
show platform ip igmp snooping C-7
show platform layer4op C-9
show platform mac-address-table C-10
show platform messaging C-11
show platform monitor C-12
show platform mvr table C-13
show platform pm C-14
show platform port-asic C-15

Contents
xv
Catalyst 2960 Switch Command Reference
OL-8604-04
show platform port-security C-20
show platform qos C-21
show platform resource-manager C-22
show platform snmp counters C-24
show platform spanning-tree C-25
show platform stp-instance C-26
show platform tcam C-27
show platform vlan C-29
I NDEX

Contents
xvi
Catalyst 2960 Switch Command Reference
OL-8604-04

xvii
Catalyst 2960 Switch Command Reference
OL-8604-04
Preface
Audience
This guide is for the networking professional using the Cisco IOS command-line interface (CLI) to
manage the Catalyst 2960 switch, hereafter referred to as the switch. Before using this guide, you should
have experience working with the Cisco IOS commands and the switch software features. Before using
this guide, you should have experience working with the concepts and terminology of Ethernet and local
area networking.
Purpose
The Catalyst 2960 switch is supported by a software image that provides enterprise-class intelligent
services such as access control lists (ACLs) and quality of service (QoS) features. The Catalyst 2960
switch is supported by either the LAN Base or the LAN Lite image.
This guide provides the information that you need about the Layer 2 commands that have been created
or changed for use with the Catalyst 2960 switches. For information about the standard Cisco IOS Release
12.2 commands, see the Cisco IOS documentation set available from the Cisco.com home page by selecting
Technical Support & Documentation > Cisco IOS Software.
This guide does not provide procedures for configuring your switch. For detailed configuration
procedures, see the software configuration guide for this release.
This guide does not describe system messages you might encounter. For more information, see the
system message guide for this release.
For documentation updates, see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
•Commands and keywords are in boldface text.
•Arguments for which you supply values are in italic.
•Square brackets ([ ]) means optional elements.
•Braces ({}) group required choices, and vertical bars ( | ) separate the alternative elements.

xviii
Catalyst 2960 Switch Command Reference
OL-8604-04
Preface
Related Publications
•Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional
element.
Interactive examples use these conventions:
•Terminal sessions and system displays are in screen font.
•Information you enter is in boldface screen font.
•Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and warnings use these conventions and symbols:
Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in
this manual.
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Related Publications
These documents provide complete information about the switch and are available from this Cisco.com
site:
http://www.cisco.com/en/US/products/ps6406/tsd_products_support_series_home.html
Note Before installing, configuring, or upgrading the switch, see these documents:
•For initial configuration information, see the “Using Express Setup” section in the getting started
guide or the “Configuring the Switch with the CLI-Based Setup Program” appendix in the hardware
installation guide.
•For device manager requirements, see the “System Requirements” section in the release notes (not
orderable but available on Cisco.com).
•For Network Assistant requirements, see the Getting Started with Cisco Network Assistant (not
orderable but available on Cisco.com).
•For cluster requirements, see the Release Notes for Cisco Network Assistant (not orderable but
available on Cisco.com).
•For upgrade information, see the “Downloading Software” section in the release notes.
You can order printed copies of documents with a DOC-xxxxxx= number from the Cisco.com sites and
from the telephone numbers listed in the URL referenced in Obtaining Documentation, Obtaining
Support, and Security Guidelines, page xix.
•Release Notes for the Catalyst 3750, 3560, 2970, and 2960 Switches (not orderable but available on
Cisco.com)
•Catalyst 2960 Switch Software Configuration Guide (not orderable but available on Cisco.com)
•Catalyst 2960 Switch Command Reference (not orderable but available on Cisco.com)
•Device manager online help (available on the switch)

xix
Catalyst 2960 Switch Command Reference
OL-8604-04
Preface
Obtaining Documentation, Obtaining Support, and Security Guidelines
•Catalyst 2960 Switch Hardware Installation Guide (not orderable but available on Cisco.com)
•Catalyst 2960 Switch Getting Started Guide (order number DOC-7816879=)
•Regulatory Compliance and Safety Information for the Catalyst 2960 Switch (order number
DOC-7816880=)
•Catalyst 3750, 3560, 3550, 2970, and 2960 Switch System Message Guide (not orderable but
available on Cisco.com)
•Getting Started with Cisco Network Assistant (not orderable but available on Cisco.com)
•Release Notes for Cisco Network Assistant (not orderable but available on Cisco.com)
•Cisco Small Form-Factor Pluggable Modules Installation Notes (order number DOC-7815160=)
•Cisco CWDM GBIC and CWDM SFP Modules Installation Note (not orderable but available on
Cisco.com)
•Cisco RPS 300 Redundant Power System Hardware Installation Guide (order number
DOC-7810372=)
•Cisco RPS 675 Redundant Power System Hardware Installation Guide (order number
DOC-7815201=)
•Cisco Redundant Power System 2300 Hardware Installation Guide (order number DOC-7817647=)
•For information about the Network Admission Control (NAC) features, see the Network Admission
Control Software Configuration Guide (not orderable but available on Cisco.com)
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
– Cisco Gigabit Ethernet Transceiver Modules Compatibility Matrix (not orderable but available
on Cisco.com)
– Cisco 100-Megabit Ethernet SFP Modules Compatibility Matrix (not orderable but available on
Cisco.com)
– Cisco Small Form-Factor Pluggable Modules Compatibility Matrix (not orderable but available
on Cisco.com)
– Compatibility Matrix for 1000BASE-T Small Form-Factor Pluggable Modules (not orderable
but available on Cisco.com)
Obtaining Documentation, Obtaining Support, and Security
Guidelines
For information on obtaining documentation, submitting a service request, and gathering additional
information, see the monthly What’s New in Cisco Product Documentation, which also lists all new and
revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What’s New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed
and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free
service and Cisco currently supports RSS version 2.0.

xx
Catalyst 2960 Switch Command Reference
OL-8604-04
Preface
Obtaining Documentation, Obtaining Support, and Security Guidelines