Cisco IE 4000 User manual

Cisco Systems, Inc. www.cisco.com
Cisco Industrial Ethernet 4000, 4010 and
5000 Switch Software Configuration Guide
All Cisco IOS Releases up to 15.2(5)E and 15.2(4)EC
First Published: September 2016
Last Updated: March 2018

ii
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE
WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE
ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL
RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE INCORPORATED HEREIN BY
THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR
CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California,
Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981,
Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and
phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is
unintentional and coincidental.
All printed copies and duplicate soft copies are considered un-Controlled copies and the original on-line version should be
referred to for latest version.
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at
www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (1721R)
© 2015–2018 Cisco Systems, Inc. All rights reserved.

iii
Cisco Systems, Inc. www.cisco.com
Preface
Audience
This guide is for the networking professional managing your switch. Before using this guide, you should have experience
working with the Cisco IOS software and be familiar with the concepts and terminology of Ethernet and local area
networking.
Purpose
This guide provides the information that you need to configure Cisco IOS software features on your switch.
This guide provides procedures for using the commands that have been created or changed for use with the switch. It
does not provide detailed information about these commands.
For information about the standard Cisco IOS commands, see the Cisco IOS 15.0 documentation set available from the
Cisco.com home page.
This guide does not provide detailed information on the graphical user interfaces (GUIs) for the embedded Device
Manager. However, the concepts in this guide are applicable to the GUI user. For information about Device Manager, see
the switch online help.
For documentation updates, see the release notes for this release.
Conventions
This publication uses these conventions to convey instructions and information:
Command descriptions use these conventions:
Commands and keywords are in boldface text.
Arguments for which you supply values are in italic.
Square brackets ([ ]) mean optional elements.
Braces ({ }) group required choices, and vertical bars ( | ) separate the alternative elements.
Braces and vertical bars within square brackets ([{ | }]) mean a required choice within an optional element.
Interactive examples use these conventions:
Terminal sessions and system displays are in screen font.
Information you enter is in boldface screen font.
Nonprinting characters, such as passwords or tabs, are in angle brackets (< >).
Notes, cautions, and timesavers use these conventions and symbols:

iv
Preface
Related Publications
Note: Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual.
Caution: Means reader be careful. In this situation, you might do something that could result in equipment damage
or loss of data.
Related Publications
These documents provide complete information about the switch series and are available from this Cisco.com site:
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-4000-series-switches/tsd-products-support-ser
ies-home.html
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-4010-series-switches/tsd-products-support-ser
ies-home.html
http://www.cisco.com/c/en/us/support/switches/industrial-ethernet-5000-series-switches/tsd-products-support-ser
ies-home.html
Before installing, configuring, or upgrading the switch, see these documents:
For initial configuration information, see the “Configuring the Switch with the CLI-Based Setup Program” appendix
in the hardware installation guide.
For Device Manager requirements, see the “System Requirements” section in the release notes (not orderable but
available on Cisco.com).
For upgrading information, see the “Downloading Software” section in the release notes.
See these documents for other information about the switch:
Release Notes
 Software Configuration Guide
Hardware Installation Guide
 Regulatory Compliance and Safety Information
Device Manager online help (available on the switch)
Compatibility matrix documents are available from this Cisco.com site:
http://www.cisco.com/en/US/products/hw/modules/ps5455/products_device_support_tables_list.html
Obtain Documentation and Submit a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and
gathering additional information, see What’s New in Cisco Product Documentation.
Toreceivenew and revised Ciscotechnical content directly to your desktop, you can subscribeto theWhat’s New in
Cisco Product DocumentationRSS feed. The RSS feeds are a free service.

1
Cisco Systems, Inc. www.cisco.com
Configuration Overview
Feature Availability
Unless otherwise indicated, all features and configurations in this guide are supported beginning with release 15.2(2)EA
for the IE-4000, 15.2(2)EB for the IE-5000 and in release 15.2(4)EC for the IE-4010. Where new features or support for
existing features was added after these releases, detailed release information will be indicated in the Feature History
Table for that feature.
Feature availability varies depending on your license. For more information about licenses and available features, refer to
the datasheet:
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-5000-series-switches/datasheet-listing.html
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-4010-series-switches/datasheet-listing.html
http://www.cisco.com/c/en/us/products/switches/industrial-ethernet-4000-series-switches/datasheet-listing.html
Feature Software Licensing
Software Licensing is now simplified with the introduction of right-to-use (RTU) licensing. This allows you to order and
activate a specific license type and level via command line. Uploading an extra license file is no longer necessary.
Note: Upgrading to the IP Services feature set requires the purchase of one of the following licenses (product IDs listed):
The IE-5000 uses "L-IE5000-RTU=" and IE-4000 and IE-4010 use "L-IE4000-RTU=" to upgrade to IP Services.
Right to Use Licenses
The introduction of right-to-use (RTU) licensing allows you to order and activate a specific license type and level via
command line. Uploading an extra license file is no longer necessary.
LanBase images provide basic Layer2 functionality, including:
QOS
Port-Security
1588 PTP
EtherNet/IP
Profinet
IPService: L3 routing features:
RIP
OSPF
ISIS BGP

2
Configuration Overview
Feature Software Licensing
Policy-based routing
IPV6
Defaults
The default license is a lanbase RTU permanent license.
Configuring RTU Licenses
To configure RTU Licenses, follow these guidelines.
Displaying License Information
To determine which license is running on your device, do the following:
Enter the show version privileged EXEC command. The first line of output indicates the image, such as LANBASE.
Enter the show license privileged EXEC command, to see which is the active image:
Switch# show license
Index 1 Feature: ipservices
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: Non-Counted
Index 2 Feature: lanbase
Period left: Life time
License Type: PermanentRightToUse
License State: Active, In Use
License Priority: High
License Count: Non-Counted
Index 3 Feature: mrp-manager
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: 1/0/0 (Active/In-use/Violation)
Index 4 Feature: mrp-client
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: 1/0/0 (Active/In-use/Violation)
License Count: Non-Counted
ipservices license
To activate a Permanent Right-To-Use ipservices license, use the following command:
IE5000#license right-to-use activate ipservices
PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR USING SUCH
PRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.
Use of this product feature requires an additional license from Cisco, together

3
Configuration Overview
Feature Software Licensing
with an additional payment. You may use this product feature subject to the
Cisco end user license agreement
http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html,
together with any supplements relating to such product feature.
It is your responsibility to make payment to Cisco for your use of the
product feature if not already licensed to do so. Your acceptance
of this agreement for the software features on one product shall be deemed
your acceptance with respect to all such software on all Cisco products you
purchase which includes the same software. (The foregoing notwithstanding, you must
purchase a license for each software feature you use, so that if you enable
a software feature on 1000 devices, you must purchase 1000 licenses for use.)
This license may be transferrable from another Cisco device of the same model
for the same functionality if such license already is owned.
Activation of the software command line interface will be evidence of your acceptance
of this agreement.
ACCEPT? (yes/[no]): yes
Activated Permanent Right-To-Use ipservices license
Next Reboot level is ipservices
IE5000#
Ease-of-Deployment and Ease-of-Use Features
Express Setup for quickly configuring a switch for the first time with basic IP information, contact information, switch
and Telnet passwords, and Simple Network Management Protocol (SNMP) information through a browser-based
program.
User-defined and Cisco-default Smartports macros for creating custom switch configurations for simplified
deployment across the network.
A removable SD flash card that stores the Cisco IOS software image and configuration files for the switch. You can
replace and upgrade the switch without reconfiguring the software features.
An embedded Device Manager GUI for configuring and monitoring a single switch through a web browser. For more
information about Device Manager, see the switch online help.
Performance Features
Autosensing of port speed and autonegotiation of duplex mode on all switch ports for optimizing bandwidth
Automatic medium-dependent interface crossover (auto-MDIX) capability on 10/100 and 10/100/1000 Mb/s
interfaces and on 10/100/1000 BASE-TX SFP module interfaces that enables the interface to automatically detect
the required cable connection type (straight-through or crossover) and to configure the connection appropriately
Support for up to 1546 bytes routed frames, up to 9000 bytes for frames that are bridged in hardware, and up to
2000 bytes for frames that are bridged by software
IEEE 802.3x flow control on all ports (the switch does not send pause frames)
Support for up to 10 EtherChannel groups
Port Aggregation Protocol (PAgP) and Link Aggregation Control Protocol (LACP) for automatic creation of
EtherChannel links
Per-port storm control for preventing broadcast, multicast, and unicast storms
Port blocking on forwarding unknown Layer 2 unknown unicast, multicast, and bridged broadcast traffic

4
Configuration Overview
Feature Software Licensing
CiscoGroupManagementProtocol(CGMP)serversupportandInternetGroupManagementProtocol(IGMP)snoopingfor
IGMP Versions 1, 2, and 3:
—(For CGMP devices) CGMP for limiting multicast traffic to specified end stations and reducing overall network
traffic
—(For IGMP devices) IGMP snooping for forwarding multimedia and multicast traffic
IGMP report suppression for sending only one IGMP report per multicast router query to the multicast devices
(supported only for IGMPv1 or IGMPv2 queries)
IGMP snooping querier support to configure switch to generate periodic IGMP general query messages
IGMP helper to allow the switch to forward a host request to join a multicast stream to a specific IP destination
address
IGMP filtering for controlling the set of multicast groups to which hosts on a switch port can belong
IGMP throttling for configuring the action when the maximum number of entries is in the IGMP forwarding table
IGMP leave timer for configuring the leave latency for the network
Switch Database Management (SDM) templates for allocating system resources to maximize support for
user-selected features such as lanbase-routing, ipv6 routing.
Cisco IOS IP Service Level Agreements (SLAs), a part of Cisco IOS software that uses active traffic monitoring for
measuring network performance
Configurable small-frame arrival threshold to prevent storm control when small frames (64 bytes or less) arrive on
an interface at a specified rate (the threshold)
FlexLink Multicast Fast Convergence to reduce the multicast traffic convergence time after a FlexLink failure
RADIUS server load balancing to allow access and authentication requests to be distributed evenly across a server
group
Support for QoS marking of CPU-generated traffic and queue CPU-generated traffic on the egress network ports
Management Options
An embedded Device Manager—Device Manager is a GUI application that is integrated in the software image. You
use it to configure and to monitor a single switch. For more information about Device Manager, see the switch online
help.
Network Assistant—Network Assistant is a network management application that can be downloaded from
Cisco.com. You use it to manage a single switch, a cluster of switches, or a community of devices. For more
information about Network Assistant, see Getting Started with Cisco Network Assistant, available at
software.cisco.com/download/.
Prime Infrastructure—Cisco Prime Infrastructure simplifies the management of wireless and wired networks. It offers
Day 0 and 1 provisioning, as well as Day N assurance from the branch to the data center. We call it One Management.
With this single view and point of control, you can reap the benefits of One Management across both network and
compute.
CLI—The Cisco IOS software supports desktop- and multilayer-switching features. You can access the CLI either by
connecting your management station directly to the switch console port or by using Telnet from a remote
management station.
SNMP—SNMP management applications such as CiscoWorks2000 LAN Management Suite (LMS) and HP OpenView.
You can manage from an SNMP-compatible management station that is running platforms such as HP OpenView or
SunNet Manager. The switch supports a comprehensive set of MIB extensions and four remote monitoring (RMON)

5
Configuration Overview
Default Settings After Initial Switch Configuration
groups. For more information about using SNMP, see Configuring SNMP, page 527
Cisco IOS Configuration Engine (previously known as the Cisco IOS CNS agent)—Configuration service automates
the deployment and management of network devices and services. You can automate initial configurations and
configuration updates by generating switch-specific configuration changes, sending them to the switch, executing
the configuration change, and logging the results.
For more information about CNS, see Configuring Cisco IOS Configuration Engine, page 79
Industrial Application
CIP—Common Industrial Protocol (CIP) is a peer-to-peer application protocol that provides application level
connections between the switch and industrial devices such as I/O controllers, sensors, relays, and so forth.You can
manage the switch using RSlogix/RSlinx then monitor the CIP functionality via IOS command lines or Web based
Device Manager.
Profinet Version 2—Support for PROFINET IO, a modular communication framework for distributed automation
applications. The embedded Profinet GSD file allows user to bring up Cisco IE switch using Siemens STEP7 or TIA
Portal software then monitor the functionality via command line or Web based Device Manger.
Default Settings After Initial Switch Configuration
The switch is designed for plug-and-play operation, requiring only that you assign basic IP information to the switch and
connect it to the other devices in your network. If you have specific network needs, you can change the interface-specific
and system-wide settings.
Note: For information about assigning an IP address by using the CLI-based setup program, see the hardware installation
guide.
If you do not configure the switch at all, the switch operates with these default settings:
Note: For more information about the following default settings, see the corresponding sections of this guide.
Default switch IP address, subnet mask, and default gateway is 0.0.0.0.
Default domain name is not configured.
DHCP client is enabled, the DHCP server is enabled, and the DHCP relay agent is enabled.
Switch cluster is disabled.
No passwords are defined.
System name and prompt is Switch.
NTP is enabled.
DNS is enabled.
TACACS+ is disabled.
RADIUS is disabled.
The standard HTTP server and Secure Socket Layer (SSL) HTTPS server are both enabled.
IEEE 802.1x is disabled.
Port parameters

6
Configuration Overview
Default Settings After Initial Switch Configuration
—Interface speed and duplex mode is autonegotiate.
—Auto-MDIX is enabled.
—Flow control is off.
VLANs
—Default VLAN is VLAN 1.
—VLAN trunking setting is dynamic auto (DTP).
—Trunk encapsulation is negotiate.
—VTP mode is server.
—VTP version is Version 1.
—Voice VLAN is disabled.
STP, PVST+ is enabled on VLAN 1.
MSTP is disabled.
Optional spanning-tree features are disabled.
FlexLinks are not configured.
DHCP snooping is disabled.
IP source guard is disabled.
DHCP server port-based address allocation is disabled.
Dynamic ARP inspection is disabled on all VLANs.
IGMP snooping is enabled. No IGMP filters are applied.
IGMP throttling setting is deny.
The IGMP snooping querier feature is disabled.
MVR is disabled.
Port-based traffic
—Broadcast, multicast, and unicast storm control is disabled.
—No protected ports are defined.
—Unicast and multicast traffic flooding is not blocked.
—No secure ports are configured.
CDP is enabled.
UDLD is disabled.
LLDP is disabled.
SPAN and RSPAN are disabled.
RMON is disabled.

7
Configuration Overview
Default Settings After Initial Switch Configuration
Syslog messages are enabled and appear on the console.
SNMP is enabled (Version 1).
No ACLs are configured.
QoS is enabled.
No EtherChannels are configured.
IP unicast routing is disabled.

8
Configuration Overview
Default Settings After Initial Switch Configuration

9
Cisco Systems, Inc. www.cisco.com
Using the Command-Line Interface
Information About Using the Command-Line Interface
This chapter describes the Cisco IOS command-line interface (CLI) and how to use it to configure your switch.
Command Modes
The Cisco IOS user interface is divided into many different modes. The commands available to you depend on which
mode you are currently in. Enter a question mark (?) at the system prompt to obtain a list of commands available for each
command mode.
When you start a session on the switch, you begin in user mode, often called user EXEC mode. Only a limited subset of
the commands are available in user EXEC mode. For example, most of the user EXEC commands are one-time
commands, such as show commands, which show the current configuration status, and clear commands, which clear
counters or interfaces. The user EXEC commands are not saved when the switch reboots.
To have access to all commands, you must enter privileged EXEC mode. You must enter a password to enter privileged
EXEC mode. From this mode, you can enter any privileged EXEC command or enter global configuration mode.
Using the configuration modes (global, interface, and line), you can make changes to the running configuration. If you
save the configuration, these commands are stored and used when the switch reboots. To access the various
configuration modes, you must start at global configuration mode. From global configuration mode, you can enter
interface configuration mode and line configuration mode.
Table 1 on page 9 describes the main command modes, how to access each one, the prompt you see in that mode, and
how to exit the mode. The examples in the table use the hostname Switch.
Table 1 Command Mode Summary
Mode Access Method Prompt Exit Method About This Mode
User EXEC Begin a session with
your switch.
Switch> Enter logout or
quit.
Use this mode to
Change terminal settings.
Perform basic tests.
Display system
information.
Privileged EXEC While in user EXEC
mode, enter the
enable command.
Switch# Enter disable to
exit.
Use this mode to verify
commands that you have
entered. Use a password to
protect access to this mode.
Global configuration While in privileged
EXEC mode, enter
the configure
command.
Switch(config)# To exit to privileged
EXEC mode, enter
exit or end, or
press Ctrl-Z.
Use this mode to configure
parameters that apply to the
entire switch.

10
Using the Command-Line Interface
Information About Using the Command-Line Interface
Help System
You can enter a question mark (?) at the system prompt to display a list of commands available for each command mode.
You can also obtain a list of associated keywords and arguments for any command, as shown in Table 2 on page 10.
Config-vlan While in global
configuration mode,
enter the
vlan vlan-id
command.
Switch(config-vlan)
#To exit to global
configuration
mode, enter the
exit command.
To return to
privileged EXEC
mode, press Ctrl-Z
or enter end.
Use this mode to configure
VLAN parameters. When VTP
mode is transparent, you can
create extended-range VLANs
(VLAN IDs greater than 1005)
and save configurations in the
switch startup configuration
file.
VLAN configuration While in privileged
EXEC mode, enter
the vlan database
command.
Switch(vlan)# To exit to privileged
EXEC mode, enter
exit.
Use this mode to configure
VLAN parameters for VLANs 1
to 1005 in the VLAN database.
Interface
configuration
While in global
configuration mode,
enter the interface
command (with a
specific interface).
Switch(config-if)# To exit to global
configuration
mode, enter exit.
To return to
privileged EXEC
mode, press Ctrl-Z
or enter end.
Use this mode to configure
parameters for the Ethernet
ports.
Line configuration While in global
configuration mode,
specify a line with
the line vty or line
console command.
Switch(config-line)
#To exit to global
configuration
mode, enter exit.
To return to
privileged EXEC
mode, press Ctrl-Z
or enter end.
Use this mode to configure
parameters for the terminal
line.
Table 1 Command Mode Summary (continued)
Mode Access Method Prompt Exit Method About This Mode
Table 2 Help Summary
Command Purpose
help Obtain a brief description of the help system in any command mode.
abbreviated-command-entry?Obtain a list of commands that begin with a particular character string.
For example:
Switch# di?
dir disable disconnect
abbreviated-command-entry<Tab> Complete a partial command name.
For example:
Switch# sh conf<tab>
Switch# show configuration

11
Using the Command-Line Interface
CLI Error Messages
Understanding Abbreviated Commands
You need to enter only enough characters for the switch to recognize the command as unique.
This example shows how to enter the show configuration privileged EXEC command in an abbreviated form:
Switch# show conf
No and default Forms of Commands
Almost every configuration command also has a no form. In general, use the no form to disable a feature or function or
reverse the action of a command. For example, the no shutdown interface configuration command reverses the
shutdown of an interface. Use the command without the keyword no to reenable a disabled feature or to enable a feature
that is disabled by default.
Configuration commands can also have a default form. The default form of a command returns the command setting to
its default. Most commands are disabled by default, so the default form is the same as the no form. However, some
commands are enabled by default and have variables set to certain default values. In these cases, the default command
enables the command and sets variables to their default values.
CLI Error Messages
Table 3 on page 12 lists some error messages that you might encounter while using the CLI to configure your switch.
?List all commands available for a particular command mode.
For example:
Switch> ?
command ?List the associated keywords for a command.
For example:
Switch> show ?
command keyword ?List the associated arguments for a keyword.
For example:
Switch(config)# cdp holdtime ?
<10-255> Length of time (in sec) that receiver must keep this packet
Table 2 Help Summary (continued)
Command Purpose

12
Using the Command-Line Interface
How to Use the CLI to Configure Features
Configuration Logging
You can log and view changes to the switch configuration. You can use the Configuration Change Logging and
Notification feature to track changes on a per-session and per-user basis. The logger tracks each configuration
command that is applied, the user who entered the command, the time that the command was entered, and the parser
return code for the command. This feature includes a mechanism for asynchronous notification to registered applications
whenever the configuration changes. You can choose to have the notifications sent to the syslog.
Note: Only CLI or HTTP changes are logged.
How to Use the CLI to Configure Features
Configuring the Command History
The software provides a history or record of commands that you have entered. The command history feature is
particularly useful for recalling long or complex commands or entries, including access lists. You can customize this
feature to suit your needs as described in these sections:
Changing the Command History Buffer Size, page 12 (optional)
Recalling Commands, page 13 (optional)
Disabling the Command History Feature, page 13 (optional)
Changing the Command History Buffer Size
By default, the switch records ten command lines in its history buffer. You can alter this number for a current terminal
session or for all sessions on a particular line. These procedures are optional.
Beginning in privileged EXEC mode, enter this command to change the number of command lines that the switch records
during the current terminal session:
Switch# terminal history [size number-of-lines]
Table 3 Common CLI Error Messages
Error Message Meaning How to Get Help
% Ambiguous command:
"show con" You did not enter enough characters
for your switch to recognize the
command.
Reenter the command followed by a question mark (?)
with a space between the command and the question
mark.
The possible keywords that you can enter with the
command appear.
% Incomplete command. You did not enter all the keywords or
values required by this command.
Reenter the command followed by a question mark (?)
with a space between the command and the question
mark.
The possible keywords that you can enter with the
command appear.
% Invalid input detected
at ‘^’ marker. You entered the command
incorrectly. The caret (^) marks the
point of the error.
Enter a question mark (?) to display all the commands
that are available in this command mode.
The possible keywords that you can enter with the
command appear.

13
Using the Command-Line Interface
How to Use the CLI to Configure Features
The range is from 0 to 256.
Beginning in line configuration mode, enter this command to configure the number of command lines the switch records
for all sessions on a particular line:
Switch(config-line)# history [size number-of-lines]
The range is from 0 to 256.
Recalling Commands
To recall commands from the history buffer, perform one of the actions listed in Table 4 on page 13. These actions are
optional.
Disabling the Command History Feature
The command history feature is automatically enabled. You can disable it for the current terminal session or for the
command line. These procedures are optional.
To disable the feature during the current terminal session, enter the terminal no history privileged EXEC command.
To disable command history for the line, enter the no history line configuration command.
Using Editing Features
This section describes the editing features that can help you manipulate the command line. It contains these sections:
Enabling and Disabling Editing Features, page 13 (optional)
Editing Commands Through Keystrokes, page 14 (optional)
Editing Command Lines That Wrap, page 15 (optional)
Enabling and Disabling Editing Features
Although enhanced editing mode is automatically enabled, you can disable it, reenable it, or configure a specific line to
have enhanced editing. These procedures are optional.
To globally disable enhanced editing mode, enter this command in line configuration mode:
Table 4 Recalling Commands
Action1Result
Press Ctrl-P or the up arrow key. Recall commands in the history buffer, beginning with the most recent command.
Repeat the key sequence to recall successively older commands.
Press Ctrl-N or the down arrow key. Return to more recent commands in the history buffer after recalling commands
with Ctrl-P or the up arrow key. Repeat the key sequence to recall successively
more recent commands.
show history While in privileged EXEC mode, list the last several commands that you just
entered. The number of commands that appear is controlled by the setting of the
terminal history global configuration command and the history line configuration
command.
1. The arrow keys function only on ANSI-compatible terminals such as VT100s.

14
Using the Command-Line Interface
How to Use the CLI to Configure Features
Switch (config-line)# no editing
To reenable the enhanced editing mode for the current terminal session, enter this command in privileged EXEC mode:
Switch# terminal editing
To reconfigure a specific line to have enhanced editing mode, enter this command in line configuration mode:
Switch(config-line)# editing
Editing Commands Through Keystrokes
Table 5 on page 14 shows the keystrokes that you need to edit command lines. These keystrokes are optional.
Table 5 Editing Commands through Keystrokes
Capability Keystroke1Purpose
Move around the command line to
make changes or corrections.
Press Ctrl-B, or press the
left arrow key.
Move the cursor back one character.
Press Ctrl-F, or press the
right arrow key.
Move the cursor forward one character.
Press Ctrl-A. Move the cursor to the beginning of the command line.
Press Ctrl-E. Move the cursor to the end of the command line.
Press Esc B. Move the cursor back one word.
Press Esc F. Move the cursor forward one word.
Press Ctrl-T. Transpose the character to the left of the cursor with the
character located at the cursor.
Recall commands from the buffer
and paste them in the command line.
The switch provides a buffer with the
last ten items that you deleted.
Press Ctrl-Y. Recall the most recent entry in the buffer.
Press Esc Y. Recall the next buffer entry.
The buffer contains only the last 10 items that you have
deleted or cut. If you press Esc Y more than ten times, you
cycle to the first buffer entry.
Delete entries if you make a mistake
or change your mind.
Press the Delete or
Backspace key.
Erase the character to the left of the cursor.
Press Ctrl-D. Delete the character at the cursor.
Press Ctrl-K. Delete all characters from the cursor to the end of the
command line.
Press Ctrl-U or Ctrl-X. Delete all characters from the cursor to the beginning of
the command line.
Press Ctrl-W. Delete the word to the left of the cursor.
Press Esc D. Delete from the cursor to the end of the word.
Capitalize or lowercase words or
capitalize a set of letters.
Press Esc C. Capitalize at the cursor.
Press Esc L. Change the word at the cursor to lowercase.
Press Esc U. Capitalize letters from the cursor to the end of the word.

15
Using the Command-Line Interface
How to Use the CLI to Configure Features
Editing Command Lines That Wrap
You can use a wraparound feature for commands that extend beyond a single line on the screen. When the cursor
reaches the right margin, the command line shifts ten spaces to the left. You cannot see the first ten characters of the
line, but you can scroll back and check the syntax at the beginning of the command. The keystroke actions are optional.
To scroll back to the beginning of the command entry, press Ctrl-B or the left arrow key repeatedly. You can also press
Ctrl-A to immediately move to the beginning of the line.
The arrow keys function only on ANSI-compatible terminals such as VT100s.
In this example, the access-list global configuration command entry extends beyond one line. When the cursor first
reaches the end of the line, the line is shifted ten spaces to the left and redisplayed. The dollar sign ($) shows that the
line has been scrolled to the left. Each time the cursor reaches the end of the line, the line is again shifted ten spaces to
the left.
Switch(config)# access-list 101 permit tcp 131.108.2.5 255.255.255.0 131.108.1
Switch(config)# $ 101 permit tcp 131.108.2.5 255.255.255.0 131.108.1.20 255.25
Switch(config)# $t tcp 131.108.2.5 255.255.255.0 131.108.1.20 255.255.255.0 eq
Switch(config)# $108.2.5 255.255.255.0 131.108.1.20 255.255.255.0 eq 45
After you complete the entry, press Ctrl-A to check the complete syntax before pressing the Return key to execute the
command. The dollar sign ($) appears at the end of the line to show that the line has been scrolled to the right:
Switch(config)# access-list 101 permit tcp 131.108.2.5 255.255.255.0 131.108.1$
The software assumes you have a terminal screen that is 80 columns wide. If you have a different width, use the terminal
width privileged EXEC command to set the width of your terminal.
Use line wrapping with the command history feature to recall and modify previous complex command entries. For
information about recalling previous command entries, see Editing Commands Through Keystrokes, page 14.
Designate a particular keystroke as
an executable command, perhaps as
a shortcut.
Press Ctrl-V or Esc Q.
Scroll down a line or screen on
displays that are longer than the
terminal screen can display.
Note: The More prompt is used for
any output that has more lines than
can be displayed on the terminal
screen, including show command
output. You can use the Return and
Space bar keystrokes whenever you
see the More prompt.
Press the Return key. Scroll down one line.
Press the Space bar. Scroll down one screen.
Redisplay the current command line
if the switch suddenly sends a
message to your screen.
Press Ctrl-L or Ctrl-R. Redisplay the current command line.
1. The arrow keys function only on ANSI-compatible terminals such as VT100s.
Table 5 Editing Commands through Keystrokes (continued)
Capability Keystroke1Purpose

16
Using the Command-Line Interface
How to Use the CLI to Configure Features
Searching and Filtering Output of show and more Commands
You can search and filter the output for show and more commands. This is useful when you need to sort through large
amounts of output or if you want to exclude output that you do not need to see. Using these commands is optional.
To use this functionality, enter a show or more command followed by the pipe character (|), one of the keywords begin,
include, or exclude, and an expression that you want to search for or filter out:
command |{begin | include | exclude} regular-expression
Expressions are case sensitive. For example, if you enter | exclude output, the lines that contain output are not
displayed, but the lines that contain Output appear.
This example shows how to include in the output display only lines where the expression protocol appears:
Switch# show interfaces | include protocol
Vlan1 is up, line protocol is up
Vlan10 is up, line protocol is down
Accessing the CLI
You can access the CLI through a console connection, through Telnet, or by using the browser.
Accessing the CLI through a Console Connection or through Telnet
To understand the boot process and the options available for assigning IP information, see Performing Switch Setup
Configuration, page 59
If your switch is already configured, you can access the CLI through a local console connection or through a remote Telnet
session, but your switch must first be configured for this type of access. For more information, see Setting the Telnet
Password for a Terminal Line: Example, page 184.
You can use one of these methods to establish a connection with the switch:
Connect the switch console port to a management station or dial-up modem. For information about connecting to
the console port, see the Hardware Installation Guide Hardware Technical Guide.
Use any Telnet TCP/IP or encrypted Secure Shell (SSH) package from a remote management station. The switch
must have network connectivity with the Telnet or SSH client, and the switch must have an enable secret password
configured.
The switch supports up to 16 simultaneous Telnet sessions. Changes made by one Telnet user are reflected in all
other Telnet sessions.
For information about configuring the switch for SSH, see Configuring the SSH Server, page 179. The switch
supports up to five simultaneous secure SSH sessions.
After you connect through the console port, through a Telnet session or through an SSH session, the user EXEC prompt
appears on the management station.