Cisco Catalyst 3560-X Series Installation manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 3750-X and 3560-X Switch
Command Reference
Cisco IOS Release 12.2(55)SE
August 2010
Text Part Number: OL-21522-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 3750-X and 3560-X Switch Command Reference
©2010 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
CONTENTS
Preface xxiii
Audience xxiii
Purpose xxiii
Conventions xxiii
Related Publications xxiv
Obtaining Documentation and Submitting a Service Request xxv
CHAPTER 1Using the Command-Line Interface 1-1
Accessing the Switch 1-1
CLI Command Modes 1-2
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-4
Interface Configuration Mode 1-4
VLAN Configuration Mode 1-4
Line Configuration Mode 1-5
CHAPTER 2Catalyst 3750-X and 3560-X Switch
Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
aaa authorization network 2-5
action 2-6
archive copy-sw 2-8
archive download-sw 2-11
archive tar 2-15
archive upload-sw 2-18
arp access-list 2-20
authentication command bounce-port ignore 2-22
authentication command disable-port ignore 2-23
authentication control-direction 2-24
authentication event 2-26
authentication event linksec fail action 2-30

Contents
iv
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
authentication fallback 2-31
authentication host-mode 2-33
authentication linksec policy 2-35
authentication mac-move permit 2-36
authentication open 2-38
authentication order 2-40
authentication periodic 2-42
authentication port-control 2-44
authentication priority 2-46
authentication timer 2-48
authentication violation 2-50
auto qos classify 2-52
auto qos trust 2-55
auto qos video 2-58
auto qos voip 2-61
boot auto-copy-sw 2-67
boot auto-download-sw 2-68
boot buffersize 2-70
boot config-file 2-71
boot enable-break 2-72
boot helper 2-73
boot helper-config-file 2-74
boot manual 2-75
boot private-config-file 2-76
boot system 2-77
cdp forward 2-79
channel-group 2-81
channel-protocol 2-85
cisp enable 2-86
class 2-87
class-map 2-90
clear dot1x 2-92
clear eap sessions 2-93
clear errdisable interface 2-94
clear ip arp inspection log 2-95

Contents
v
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
clear ip arp inspection statistics 2-96
clear ip dhcp snooping 2-97
clear ipc 2-99
clear ipv6 dhcp conflict 2-100
clear l2protocol-tunnel counters 2-101
clear lacp 2-102
clear logging onboard 2-103
clear mac address-table 2-104
clear mac address-table move update 2-105
clear macsec counters interface 2-106
clear mka 2-107
clear nmsp statistics 2-109
clear pagp 2-110
clear port-security 2-111
clear spanning-tree counters 2-113
clear spanning-tree detected-protocols 2-114
clear vmps statistics 2-115
clear vtp counters 2-116
cluster commander-address 2-117
cluster discovery hop-count 2-119
cluster enable 2-120
cluster holdtime 2-122
cluster member 2-123
cluster outside-interface 2-125
cluster run 2-126
cluster standby-group 2-127
cluster timer 2-129
copy logging onboard 2-130
confidentiality-offset 2-132
define interface-range 2-133
delete 2-135
deny (ARP access-list configuration) 2-136
deny (IPv6 access-list configuration) 2-138
deny (MAC access-list configuration) 2-143
diagnostic monitor 2-146

Contents
vi
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
diagnostic schedule 2-148
diagnostic start 2-150
dot1x 2-153
dot1x auth-fail max-attempts 2-155
dot1x auth-fail vlan 2-157
dot1x control-direction 2-159
dot1x credentials (global configuration) 2-161
dot1x critical (global configuration) 2-162
dot1x critical (interface configuration) 2-164
dot1x default 2-166
dot1x fallback 2-167
dot1x guest-vlan 2-168
dot1x host-mode 2-170
dot1x initialize 2-171
dot1x mac-auth-bypass 2-172
dot1x max-reauth-req 2-174
dot1x max-req 2-176
dot1x pae 2-177
dot1x port-control 2-178
dot1x re-authenticate 2-180
dot1x reauthentication 2-181
dot1x supplicant force-multicast 2-182
dot1x test eapol-capable 2-183
dot1x test timeout 2-184
dot1x timeout 2-185
dot1x violation-mode 2-188
duplex 2-189
epm access-control open 2-191
errdisable detect cause 2-193
errdisable detect cause small-frame 2-195
errdisable recovery 2-197
errdisable recovery cause small-frame 2-200
exception crashinfo 2-201
fallback profile 2-202
flowcontrol 2-204

Contents
vii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
hw-module 2-206
interface port-channel 2-208
interface range 2-210
interface vlan 2-212
ip access-group 2-214
ip address 2-217
ip admission 2-219
ip admission name proxy http 2-220
ip arp inspection filter vlan 2-222
ip arp inspection limit 2-224
ip arp inspection log-buffer 2-226
ip arp inspection trust 2-228
ip arp inspection validate 2-230
ip arp inspection vlan 2-232
ip arp inspection vlan logging 2-233
ip device tracking 2-235
ip device tracking maximum 2-236
ip device tracking probe 2-237
ip dhcp snooping 2-239
ip dhcp snooping binding 2-240
ip dhcp snooping database 2-242
ip dhcp snooping information option 2-244
ip dhcp snooping information option allow-untrusted 2-246
ip dhcp snooping information option format remote-id 2-248
ip dhcp snooping limit rate 2-249
ip dhcp snooping trust 2-250
ip dhcp snooping verify 2-251
ip dhcp snooping vlan 2-252
ip dhcp snooping vlan information option format-type circuit-id string 2-253
ip igmp filter 2-255
ip igmp max-groups 2-257
ip igmp profile 2-259
ip igmp snooping 2-261
ip igmp snooping last-member-query-interval 2-263
ip igmp snooping querier 2-265

Contents
viii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
ip igmp snooping report-suppression 2-267
ip igmp snooping tcn 2-269
ip igmp snooping tcn flood 2-271
ip igmp snooping vlan immediate-leave 2-272
ip igmp snooping vlan mrouter 2-273
ip igmp snooping vlan static 2-275
ip snap forwarding 2-277
ip source binding 2-278
ip ssh 2-280
ip sticky-arp (global configuration) 2-282
ip sticky-arp (interface configuration) 2-284
ip verify source 2-286
ipv6 access-list 2-288
ipv6 address dhcp 2-291
ipv6 dhcp client request vendor 2-292
ipv6 dhcp ping packets 2-293
ipv6 dhcp pool 2-295
ipv6 dhcp server 2-298
ipv6 mld snooping 2-300
ipv6 mld snooping last-listener-query-count 2-302
ipv6 mld snooping last-listener-query-interval 2-304
ipv6 mld snooping listener-message-suppression 2-306
ipv6 mld snooping robustness-variable 2-307
ipv6 mld snooping tcn 2-309
ipv6 mld snooping vlan 2-311
ipv6 traffic-filter 2-313
l2protocol-tunnel 2-315
l2protocol-tunnel cos 2-318
lacp port-priority 2-319
lacp system-priority 2-321
link state group 2-323
link state track 2-325
location (global configuration) 2-326
location (interface configuration) 2-328
logging event 2-330

Contents
ix
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
logging event power-inline-status 2-331
logging file 2-332
mab request format attribute 32 2-334
mac access-group 2-336
mac access-list extended 2-338
mac address-table aging-time 2-340
mac address-table learning vlan 2-341
mac address-table move update 2-343
mac address-table notification 2-345
mac address-table static 2-347
mac address-table static drop 2-348
mac sec 2-350
match (access-map configuration) 2-351
match (class-map configuration) 2-353
mdix auto 2-356
media-type rj45 2-358
mka default-policy 2-359
mka policy (global configuration) 2-360
mka policy (interface configuration) 2-362
mls qos 2-364
mls qos aggregate-policer 2-366
mls qos cos 2-368
mls qos dscp-mutation 2-370
mls qos map 2-372
mls qos queue-set output buffers 2-376
mls qos queue-set output threshold 2-378
mls qos rewrite ip dscp 2-380
mls qos srr-queue input bandwidth 2-382
mls qos srr-queue input buffers 2-384
mls qos srr-queue input cos-map 2-386
mls qos srr-queue input dscp-map 2-388
mls qos srr-queue input priority-queue 2-390
mls qos srr-queue input threshold 2-392
mls qos srr-queue output cos-map 2-394
mls qos srr-queue output dscp-map 2-396

Contents
x
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
mls qos trust 2-398
mls qos vlan-based 2-400
mode 2-401
monitor session 2-403
mvr (global configuration) 2-408
mvr (interface configuration) 2-411
network-policy 2-414
network-policy profile (global configuration) 2-415
network-policy profile (network-policy configuration) 2-416
nmsp 2-418
nmsp attachment suppress 2-419
no authentication logging verbose 2-420
no dot1x logging verbose 2-421
no mab logging verbose 2-422
nsf 2-423
pagp learn-method 2-425
pagp port-priority 2-427
permit (ARP access-list configuration) 2-429
permit (IPv6 access-list configuration) 2-431
permit (MAC access-list configuration) 2-437
police 2-440
police aggregate 2-442
policy-map 2-444
port-channel load-balance 2-447
power inline 2-449
power inline consumption 2-452
power inline police 2-455
power-priority 2-458
power rps 2-460
power supply 2-462
priority-queue 2-464
private-vlan 2-466
private-vlan mapping 2-469
queue-set 2-471
radius-server dead-criteria 2-472