Cisco Catalyst 3560-X Series Installation manual

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 3750-X and 3560-X Switch
Command Reference
Cisco IOS Release 12.2(55)SE
August 2010
Text Part Number: OL-21522-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership
relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Catalyst 3750-X and 3560-X Switch Command Reference
©2010 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
CONTENTS
Preface xxiii
Audience xxiii
Purpose xxiii
Conventions xxiii
Related Publications xxiv
Obtaining Documentation and Submitting a Service Request xxv
CHAPTER 1Using the Command-Line Interface 1-1
Accessing the Switch 1-1
CLI Command Modes 1-2
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-4
Interface Configuration Mode 1-4
VLAN Configuration Mode 1-4
Line Configuration Mode 1-5
CHAPTER 2Catalyst 3750-X and 3560-X Switch
Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
aaa authorization network 2-5
action 2-6
archive copy-sw 2-8
archive download-sw 2-11
archive tar 2-15
archive upload-sw 2-18
arp access-list 2-20
authentication command bounce-port ignore 2-22
authentication command disable-port ignore 2-23
authentication control-direction 2-24
authentication event 2-26
authentication event linksec fail action 2-30

Contents
iv
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
authentication fallback 2-31
authentication host-mode 2-33
authentication linksec policy 2-35
authentication mac-move permit 2-36
authentication open 2-38
authentication order 2-40
authentication periodic 2-42
authentication port-control 2-44
authentication priority 2-46
authentication timer 2-48
authentication violation 2-50
auto qos classify 2-52
auto qos trust 2-55
auto qos video 2-58
auto qos voip 2-61
boot auto-copy-sw 2-67
boot auto-download-sw 2-68
boot buffersize 2-70
boot config-file 2-71
boot enable-break 2-72
boot helper 2-73
boot helper-config-file 2-74
boot manual 2-75
boot private-config-file 2-76
boot system 2-77
cdp forward 2-79
channel-group 2-81
channel-protocol 2-85
cisp enable 2-86
class 2-87
class-map 2-90
clear dot1x 2-92
clear eap sessions 2-93
clear errdisable interface 2-94
clear ip arp inspection log 2-95

Contents
v
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
clear ip arp inspection statistics 2-96
clear ip dhcp snooping 2-97
clear ipc 2-99
clear ipv6 dhcp conflict 2-100
clear l2protocol-tunnel counters 2-101
clear lacp 2-102
clear logging onboard 2-103
clear mac address-table 2-104
clear mac address-table move update 2-105
clear macsec counters interface 2-106
clear mka 2-107
clear nmsp statistics 2-109
clear pagp 2-110
clear port-security 2-111
clear spanning-tree counters 2-113
clear spanning-tree detected-protocols 2-114
clear vmps statistics 2-115
clear vtp counters 2-116
cluster commander-address 2-117
cluster discovery hop-count 2-119
cluster enable 2-120
cluster holdtime 2-122
cluster member 2-123
cluster outside-interface 2-125
cluster run 2-126
cluster standby-group 2-127
cluster timer 2-129
copy logging onboard 2-130
confidentiality-offset 2-132
define interface-range 2-133
delete 2-135
deny (ARP access-list configuration) 2-136
deny (IPv6 access-list configuration) 2-138
deny (MAC access-list configuration) 2-143
diagnostic monitor 2-146

Contents
vi
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
diagnostic schedule 2-148
diagnostic start 2-150
dot1x 2-153
dot1x auth-fail max-attempts 2-155
dot1x auth-fail vlan 2-157
dot1x control-direction 2-159
dot1x credentials (global configuration) 2-161
dot1x critical (global configuration) 2-162
dot1x critical (interface configuration) 2-164
dot1x default 2-166
dot1x fallback 2-167
dot1x guest-vlan 2-168
dot1x host-mode 2-170
dot1x initialize 2-171
dot1x mac-auth-bypass 2-172
dot1x max-reauth-req 2-174
dot1x max-req 2-176
dot1x pae 2-177
dot1x port-control 2-178
dot1x re-authenticate 2-180
dot1x reauthentication 2-181
dot1x supplicant force-multicast 2-182
dot1x test eapol-capable 2-183
dot1x test timeout 2-184
dot1x timeout 2-185
dot1x violation-mode 2-188
duplex 2-189
epm access-control open 2-191
errdisable detect cause 2-193
errdisable detect cause small-frame 2-195
errdisable recovery 2-197
errdisable recovery cause small-frame 2-200
exception crashinfo 2-201
fallback profile 2-202
flowcontrol 2-204

Contents
vii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
hw-module 2-206
interface port-channel 2-208
interface range 2-210
interface vlan 2-212
ip access-group 2-214
ip address 2-217
ip admission 2-219
ip admission name proxy http 2-220
ip arp inspection filter vlan 2-222
ip arp inspection limit 2-224
ip arp inspection log-buffer 2-226
ip arp inspection trust 2-228
ip arp inspection validate 2-230
ip arp inspection vlan 2-232
ip arp inspection vlan logging 2-233
ip device tracking 2-235
ip device tracking maximum 2-236
ip device tracking probe 2-237
ip dhcp snooping 2-239
ip dhcp snooping binding 2-240
ip dhcp snooping database 2-242
ip dhcp snooping information option 2-244
ip dhcp snooping information option allow-untrusted 2-246
ip dhcp snooping information option format remote-id 2-248
ip dhcp snooping limit rate 2-249
ip dhcp snooping trust 2-250
ip dhcp snooping verify 2-251
ip dhcp snooping vlan 2-252
ip dhcp snooping vlan information option format-type circuit-id string 2-253
ip igmp filter 2-255
ip igmp max-groups 2-257
ip igmp profile 2-259
ip igmp snooping 2-261
ip igmp snooping last-member-query-interval 2-263
ip igmp snooping querier 2-265

Contents
viii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
ip igmp snooping report-suppression 2-267
ip igmp snooping tcn 2-269
ip igmp snooping tcn flood 2-271
ip igmp snooping vlan immediate-leave 2-272
ip igmp snooping vlan mrouter 2-273
ip igmp snooping vlan static 2-275
ip snap forwarding 2-277
ip source binding 2-278
ip ssh 2-280
ip sticky-arp (global configuration) 2-282
ip sticky-arp (interface configuration) 2-284
ip verify source 2-286
ipv6 access-list 2-288
ipv6 address dhcp 2-291
ipv6 dhcp client request vendor 2-292
ipv6 dhcp ping packets 2-293
ipv6 dhcp pool 2-295
ipv6 dhcp server 2-298
ipv6 mld snooping 2-300
ipv6 mld snooping last-listener-query-count 2-302
ipv6 mld snooping last-listener-query-interval 2-304
ipv6 mld snooping listener-message-suppression 2-306
ipv6 mld snooping robustness-variable 2-307
ipv6 mld snooping tcn 2-309
ipv6 mld snooping vlan 2-311
ipv6 traffic-filter 2-313
l2protocol-tunnel 2-315
l2protocol-tunnel cos 2-318
lacp port-priority 2-319
lacp system-priority 2-321
link state group 2-323
link state track 2-325
location (global configuration) 2-326
location (interface configuration) 2-328
logging event 2-330

Contents
ix
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
logging event power-inline-status 2-331
logging file 2-332
mab request format attribute 32 2-334
mac access-group 2-336
mac access-list extended 2-338
mac address-table aging-time 2-340
mac address-table learning vlan 2-341
mac address-table move update 2-343
mac address-table notification 2-345
mac address-table static 2-347
mac address-table static drop 2-348
mac sec 2-350
match (access-map configuration) 2-351
match (class-map configuration) 2-353
mdix auto 2-356
media-type rj45 2-358
mka default-policy 2-359
mka policy (global configuration) 2-360
mka policy (interface configuration) 2-362
mls qos 2-364
mls qos aggregate-policer 2-366
mls qos cos 2-368
mls qos dscp-mutation 2-370
mls qos map 2-372
mls qos queue-set output buffers 2-376
mls qos queue-set output threshold 2-378
mls qos rewrite ip dscp 2-380
mls qos srr-queue input bandwidth 2-382
mls qos srr-queue input buffers 2-384
mls qos srr-queue input cos-map 2-386
mls qos srr-queue input dscp-map 2-388
mls qos srr-queue input priority-queue 2-390
mls qos srr-queue input threshold 2-392
mls qos srr-queue output cos-map 2-394
mls qos srr-queue output dscp-map 2-396

Contents
x
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
mls qos trust 2-398
mls qos vlan-based 2-400
mode 2-401
monitor session 2-403
mvr (global configuration) 2-408
mvr (interface configuration) 2-411
network-policy 2-414
network-policy profile (global configuration) 2-415
network-policy profile (network-policy configuration) 2-416
nmsp 2-418
nmsp attachment suppress 2-419
no authentication logging verbose 2-420
no dot1x logging verbose 2-421
no mab logging verbose 2-422
nsf 2-423
pagp learn-method 2-425
pagp port-priority 2-427
permit (ARP access-list configuration) 2-429
permit (IPv6 access-list configuration) 2-431
permit (MAC access-list configuration) 2-437
police 2-440
police aggregate 2-442
policy-map 2-444
port-channel load-balance 2-447
power inline 2-449
power inline consumption 2-452
power inline police 2-455
power-priority 2-458
power rps 2-460
power supply 2-462
priority-queue 2-464
private-vlan 2-466
private-vlan mapping 2-469
queue-set 2-471
radius-server dead-criteria 2-472

Contents
xi
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
radius-server host 2-474
rcommand 2-476
reload 2-478
remote command 2-480
remote-span 2-482
renew ip dhcp snooping database 2-484
replay-protection 2-486
reserved-only 2-487
rmon collection stats 2-489
sdm prefer 2-490
service password-recovery 2-494
service-policy 2-496
session 2-499
set 2-500
setup 2-502
setup express 2-505
show access-lists 2-507
show archive status 2-510
show arp access-list 2-511
show authentication 2-512
show auto qos 2-516
show boot 2-520
show cable-diagnostics tdr 2-523
show cdp forward 2-525
show cisp 2-526
show class-map 2-527
show cluster 2-528
show cluster candidates 2-530
show cluster members 2-532
show controllers cpu-interface 2-534
show controllers ethernet-controller 2-536
show controllers ethernet-controller fastethernet 2-543
show controllers ethernet phy macsec 2-546
show controllers power inline 2-549
show controllers tcam 2-551

Contents
xii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
show controllers utilization 2-553
show diagnostic 2-555
show dot1q-tunnel 2-560
show dot1x 2-562
show dtp 2-566
show eap 2-568
show env 2-571
show errdisable detect 2-574
show errdisable flap-values 2-576
show errdisable recovery 2-577
show etherchannel 2-579
show fallback profile 2-582
show flowcontrol 2-584
show idprom interface 2-586
show interfaces 2-588
show interfaces counters 2-599
show interfaces transceivers 2-602
show inventory 2-605
show ip arp inspection 2-606
show ip dhcp snooping 2-610
show ip dhcp snooping binding 2-611
show ip dhcp snooping database 2-613
show ip dhcp snooping statistics 2-615
show ip igmp profile 2-618
show ip igmp snooping 2-619
show ip igmp snooping groups 2-622
show ip igmp snooping mrouter 2-624
show ip igmp snooping querier 2-626
show ip source binding 2-628
show ip verify source 2-630
show ipc 2-632
show ipv6 access-list 2-636
show ipv6 dhcp conflict 2-638
show ipv6 mld snooping 2-639
show ipv6 mld snooping address 2-641

Contents
xiii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
show ipv6 mld snooping mrouter 2-643
show ipv6 mld snooping querier 2-645
show ipv6 route updated 2-647
show l2protocol-tunnel 2-649
show lacp 2-652
show link state group 2-656
show lldp 2-658
show location 2-659
show logging onboard 2-662
show mac access-group 2-667
\show mac address-table 2-668
show mac address-table address 2-670
show mac address-table aging-time 2-672
show mac address-table count 2-674
show mac address-table dynamic 2-676
show mac address-table interface 2-678
show mac address-table learning 2-680
show mac address-table move update 2-681
show mac address-table notification 2-683
show mac address-table static 2-685
show mac address-table vlan 2-687
show macsec 2-689
show mka default-policy 2-691
show mka policy 2-693
show mka session 2-696
show mka statistics 2-699
show mka summary 2-702
show mls qos 2-705
show mls qos aggregate-policer 2-706
show mls qos input-queue 2-707
show mls qos interface 2-709
show mls qos maps 2-713
show mls qos queue-set 2-716
show mls qos vlan 2-718
show monitor 2-719

Contents
xiv
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
show mvr 2-721
show mvr interface 2-723
show mvr members 2-725
show network-policy profile 2-727
show nmsp 2-728
show pagp 2-731
show policy-map 2-733
show port-security 2-734
show power inline 2-737
show sdm prefer 2-743
show setup express 2-746
show spanning-tree 2-747
show stack-power 2-753
show storm-control 2-755
show switch 2-757
show system mtu 2-762
show udld 2-763
show version 2-766
show vlan 2-768
show vlan access-map 2-773
show vlan filter 2-774
show vmps 2-775
show vtp 2-777
shutdown 2-783
shutdown vlan 2-784
small-frame violation rate 2-785
snmp-server enable traps 2-787
snmp-server host 2-792
snmp trap mac-notification change 2-796
spanning-tree backbonefast 2-798
spanning-tree bpdufilter 2-799
spanning-tree bpduguard 2-801
spanning-tree cost 2-803
spanning-tree etherchannel guard misconfig 2-805
spanning-tree extend system-id 2-807

Contents
xv
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
spanning-tree guard 2-809
spanning-tree link-type 2-811
spanning-tree loopguard default 2-813
spanning-tree mode 2-815
spanning-tree mst configuration 2-817
spanning-tree mst cost 2-819
spanning-tree mst forward-time 2-821
spanning-tree mst hello-time 2-822
spanning-tree mst max-age 2-823
spanning-tree mst max-hops 2-824
spanning-tree mst port-priority 2-825
spanning-tree mst pre-standard 2-827
spanning-tree mst priority 2-828
spanning-tree mst root 2-829
spanning-tree port-priority 2-831
spanning-tree portfast (global configuration) 2-833
spanning-tree portfast (interface configuration) 2-836
spanning-tree transmit hold-count 2-838
spanning-tree uplinkfast 2-839
spanning-tree vlan 2-841
speed 2-844
srr-queue bandwidth limit 2-846
srr-queue bandwidth shape 2-848
srr-queue bandwidth share 2-850
stack-mac persistent timer 2-852
stack-power 2-854
storm-control 2-856
switch 2-859
switch priority 2-861
switch provision 2-862
switch renumber 2-864
switchport 2-866
switchport access 2-868
switchport autostate exclude 2-870
switchport backup interface 2-872

Contents
xvi
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
switchport block 2-875
switchport host 2-877
switchport mode 2-878
switchport mode private-vlan 2-881
switchport nonegotiate 2-883
switchport port-security 2-885
switchport port-security aging 2-890
switchport priority extend 2-892
switchport private-vlan 2-894
switchport protected 2-896
switchport trunk 2-898
switchport voice detect 2-901
switchport voice vlan 2-902
system env temperature threshold yellow 2-904
system mtu 2-906
test cable-diagnostics tdr 2-909
traceroute mac 2-910
traceroute mac ip 2-913
trust 2-915
udld 2-917
udld port 2-919
udld reset 2-921
usb-inactivity-timeout 2-922
vlan (global configuration) 2-923
vlan access-map 2-928
vlan dot1q tag native 2-930
vlan filter 2-932
vmps reconfirm (privileged EXEC) 2-934
vmps reconfirm (global configuration) 2-935
vmps retry 2-936
vmps server 2-937
vtp (global configuration) 2-939
vtp (interface configuration) 2-944
vtp primary 2-945

Contents
xvii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
APPENDIX ACatalyst 3750-X and 3560-X Switch Boot Loader Commands A-1
arp A-2
boot A-3
cat A-5
copy A-6
delete A-7
dir A-8
flash_init A-10
format A-11
fsck A-12
help A-13
memory A-14
mgmt_clr A-16
mgmt_init A-17
mgmt_show A-18
mkdir A-19
more A-20
rename A-21
reset A-22
rmdir A-23
set A-24
type A-27
unset A-28
version A-30
APPENDIX BCatalyst 3750-X and 3560-X Switch Debug Commands B-1
debug authentication B-2
debug auto qos B-4
debug backup B-6
debug cisp B-7
debug cluster B-8
debug dot1x B-10
debug dtp B-11
debug eap B-12
debug etherchannel B-13

Contents
xviii
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
debug fastethernet B-14
debug ilpower B-15
debug interface B-16
debug ip dhcp snooping B-17
debug ip verify source packet B-18
debug ip igmp filter B-19
debug ip igmp max-groups B-20
debug ip igmp snooping B-21
debug lacp B-22
debug lldp packets B-23
debug mac-notification B-24
debug macsec B-25
debug matm B-26
debug matm move update B-27
debug mka B-28
debug monitor B-30
debug mvrdbg B-31
debug nmsp B-32
debug nvram B-33
debug pagp B-34
debug platform acl B-35
debug platform backup interface B-37
debug platform cisp B-38
debug platform cli-redirection main B-39
debug platform configuration B-40
debug platform cpu-queues B-41
debug platform device-manager B-43
debug platform dot1x B-44
debug platform etherchannel B-45
debug platform fallback-bridging B-46
debug platform forw-tcam B-47
debug platform frontend-controller B-48
debug platform ip arp inspection B-49
debug platform ip dhcp B-50
debug platform ip igmp snooping B-51

Contents
xix
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
debug platform ip multicast B-53
debug platform ip unicast B-55
debug platform ip wccp B-57
debug platform ipc B-58
debug platform led B-59
debug platform matm B-60
debug platform messaging application B-61
debug platform phy B-62
debug platform pm B-64
debug platform port-asic B-66
debug platform port-security B-67
debug platform qos-acl-tcam B-68
debug platform remote-commands B-69
debug platform resource-manager B-70
debug platform snmp B-71
debug platform span B-72
debug platform stack-manager B-73
debug platform supervisor-asic B-74
debug platform sw-bridge B-75
debug platform tcam B-76
debug platform udld B-79
debug platform vlan B-80
debug pm B-81
debug port-security B-83
debug qos-manager B-84
debug spanning-tree B-85
debug spanning-tree backbonefast B-87
debug spanning-tree bpdu B-88
debug spanning-tree bpdu-opt B-89
debug spanning-tree mstp B-90
debug spanning-tree switch B-92
debug spanning-tree uplinkfast B-94
debug sw-vlan B-95
debug sw-vlan ifs B-97
debug sw-vlan notification B-98

Contents
xx
Catalyst 3750-X and 3560-X Switch Command Reference
OL-21522-02
debug sw-vlan vtp B-100
debug udld B-102
debug vqpc B-104
APPENDIX CCatalyst 3750-X and 3560-X Show Platform Commands C-1
show platform acl C-2
show platform backup interface C-3
show platform configuration C-4
show platform dl C-5
show platform etherchannel C-6
show platform forward C-7
show platform frontend-controller C-9
show platform ip igmp snooping C-10
show platform ip multicast C-12
show platform ip unicast C-13
show platform ip unicast vrf compaction C-15
show platform ip unicast vrf tcam-label C-16
show platform ip wccp C-17
show platform ipc trace C-18
show platform ipv6 mld snooping C-19
show platform ipv6 unicast C-20
show platform layer4op C-22
show platform mac-address-table C-23
show platform messaging C-24
show platform monitor C-25
show platform mvr table C-26
show platform pm C-27
show platform port-asic C-29
show platform port-security C-34
show platform qos C-35
show platform resource-manager C-36
show platform snmp counters C-38
show platform spanning-tree C-39
show platform stp-instance C-40
show platform stack manager C-41
show platform stack ports C-43