Cisco WS-C3560E-24PD-E Installation manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 3560 Switch Command Reference
Cisco IOS Release 12.2(25)SED
October 2005
Customer Order Number: DOC-7816405=
Text Part Number: 78-16405-05

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn,
and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the
Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the Internet
Generation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise,
the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX,
Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient,
and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0502R)
Catalyst 3560 Switch Command Reference
Copyright © 2004–2005 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 3560 Switch Command Reference
78-16405-05
CONTENTS
Preface xix
Audience xix
Purpose xix
Conventions xx
Related Publications xx
Obtaining Documentation xxi
Cisco.com xxi
Product Documentation DVD xxii
Ordering Documentation xxii
Documentation Feedback xxii
Cisco Product Security Overview xxiii
Reporting Security Problems in Cisco Products xxiii
Obtaining Technical Assistance xxiv
Cisco Technical Support & Documentation Website xxiv
Submitting a Service Request xxiv
Definitions of Service Request Severity xxv
Obtaining Additional Publications and Information xxv
CHAPTER 1Using the Command-Line Interface 1-1
CLI Command Modes 1-1
User EXEC Mode 1-3
Privileged EXEC Mode 1-3
Global Configuration Mode 1-3
Interface Configuration Mode 1-4
config-vlan Mode 1-4
VLAN Configuration Mode 1-5
Line Configuration Mode 1-5
Commands Changed in Cisco IOS 12.2(20)SE 1-6

Contents
iv
Catalyst 3560 Switch Command Reference
78-16405-05
CHAPTER 2Catalyst 3560 Switch Cisco IOS Commands 2-1
aaa accounting dot1x 2-1
aaa authentication dot1x 2-3
action 2-5
archive download-sw 2-7
archive tar 2-10
archive upload-sw 2-13
arp access-list 2-15
auto qos voip 2-17
boot boothlpr 2-22
boot config-file 2-23
boot enable-break 2-24
boot helper 2-25
boot helper-config-file 2-26
boot manual 2-27
boot private-config-file 2-28
boot system 2-29
channel-group 2-30
channel-protocol 2-33
class 2-34
class-map 2-36
clear ip arp inspection log 2-38
clear ip arp inspection statistics 2-39
clear ip dhcp snooping database 2-40
clear ipc 2-41
clear l2protocol-tunnel counters 2-42
clear lacp 2-43
clear mac address-table 2-44
clear mac address-table move update 2-46
clear pagp 2-47
clear port-security 2-48
clear spanning-tree counters 2-50
clear spanning-tree detected-protocols 2-51
clear vmps statistics 2-52
clear vtp counters 2-53

Contents
v
Catalyst 3560 Switch Command Reference
78-16405-05
cluster commander-address 2-54
cluster discovery hop-count 2-56
cluster enable 2-57
cluster holdtime 2-59
cluster member 2-60
cluster outside-interface 2-62
cluster run 2-63
cluster standby-group 2-64
cluster timer 2-66
define interface-range 2-67
delete 2-69
deny (ARP access-list configuration) 2-70
deny (IPv6 access-list configuration) 2-72
deny (MAC access-list configuration) 2-77
dot1x 2-80
dot1x auth-fail max-attempts 2-82
dot1x auth-fail vlan 2-84
dot1x control-direction 2-86
dot1x critical 2-88
dot1x default 2-90
dot1x guest-vlan 2-91
dot1x host-mode 2-93
dot1x initialize 2-95
dot1x max-reauth-req 2-96
dot1x max-req 2-97
dot1x multiple-hosts 2-98
dot1x port-control 2-99
dot1x re-authenticate 2-101
dot1x re-authentication 2-102
dot1x reauthentication 2-103
dot1x timeout 2-104
duplex 2-106
errdisable detect cause 2-108
errdisable recovery 2-110
exception crashinfo 2-113

Contents
vi
Catalyst 3560 Switch Command Reference
78-16405-05
flowcontrol 2-114
interface port-channel 2-116
interface range 2-118
interface vlan 2-120
ip access-group 2-122
ip address 2-125
ip arp inspection filter vlan 2-127
ip arp inspection limit 2-129
ip arp inspection log-buffer 2-131
ip arp inspection trust 2-133
ip arp inspection validate 2-135
ip arp inspection vlan 2-137
ip arp inspection vlan logging 2-138
ip dhcp snooping 2-140
ip dhcp snooping binding 2-141
ip dhcp snooping database 2-143
ip dhcp snooping information option 2-145
ip dhcp snooping information option allow-untrusted 2-147
ip dhcp snooping limit rate 2-149
ip dhcp snooping trust 2-151
ip dhcp snooping verify 2-152
ip dhcp snooping vlan 2-153
ip igmp filter 2-154
ip igmp max-groups 2-155
ip igmp profile 2-157
ip igmp snooping 2-159
ip igmp snooping last-member-query-interval 2-161
ip igmp snooping querier 2-163
ip igmp snooping report-suppression 2-165
ip igmp snooping tcn 2-167
ip igmp snooping tcn flood 2-169
ip igmp snooping vlan immediate-leave 2-170
ip igmp snooping vlan mrouter 2-171
ip igmp snooping vlan static 2-173
ip source binding 2-175

Contents
vii
Catalyst 3560 Switch Command Reference
78-16405-05
ip ssh 2-177
ip verify source 2-179
ipv6 access-list 2-180
ipv6 mld snooping 2-183
ipv6 mld snooping last-listener-query-count 2-185
ipv6 mld snooping last-listener-query-interval 2-187
ipv6 mld snooping listener-message-suppression 2-189
ipv6 mld snooping robustness-variable 2-191
ipv6 mld snooping tcn 2-193
ipv6 mld snooping vlan 2-195
ipv6 traffic-filter 2-197
l2protocol-tunnel 2-199
l2protocol-tunnel cos 2-202
lacp port-priority 2-203
lacp system-priority 2-205
logging event power-inline-status 2-207
logging file 2-208
mac access-group 2-210
mac access-list extended 2-212
mac address-table aging-time 2-214
mac address-table move update 2-215
mac address-table notification 2-217
mac address-table static 2-219
mac address-table static drop 2-220
macro apply 2-222
macro description 2-225
macro global 2-226
macro global description 2-229
macro name 2-230
match (access-map configuration) 2-232
match (class-map configuration) 2-234
mdix auto 2-236
mls qos 2-238
mls qos aggregate-policer 2-240
mls qos cos 2-242

Contents
viii
Catalyst 3560 Switch Command Reference
78-16405-05
mls qos dscp-mutation 2-244
mls qos map 2-246
mls qos queue-set output buffers 2-250
mls qos queue-set output threshold 2-252
mls qos rewrite ip dscp 2-254
mls qos srr-queue input bandwidth 2-256
mls qos srr-queue input buffers 2-258
mls qos srr-queue input cos-map 2-260
mls qos srr-queue input dscp-map 2-262
mls qos srr-queue input priority-queue 2-264
mls qos srr-queue input threshold 2-266
mls qos srr-queue output cos-map 2-268
mls qos srr-queue output dscp-map 2-270
mls qos trust 2-272
mls qos vlan-based 2-274
monitor session 2-275
mvr (global configuration) 2-280
mvr (interface configuration) 2-283
pagp learn-method 2-286
pagp port-priority 2-288
permit (ARP access-list configuration) 2-290
permit (IPv6 access-list configuration) 2-292
permit (MAC access-list configuration) 2-298
police 2-301
police aggregate 2-303
policy-map 2-305
port-channel load-balance 2-308
power inline 2-310
power inline consumption 2-313
priority-queue 2-315
private-vlan 2-317
private-vlan mapping 2-320
queue-set 2-322
rcommand 2-323
remote-span 2-325

Contents
ix
Catalyst 3560 Switch Command Reference
78-16405-05
renew ip dhcp snooping database 2-327
rmon collection stats 2-329
sdm prefer 2-330
service password-recovery 2-333
service-policy 2-335
set 2-338
setup 2-340
setup express 2-343
show access-lists 2-345
show archive status 2-348
show arp access-list 2-349
show auto qos 2-350
show boot 2-354
show cable-diagnostics tdr 2-356
show class-map 2-359
show cluster 2-360
show cluster candidates 2-362
show cluster members 2-364
show controllers cpu-interface 2-366
show controllers ethernet-controller 2-368
show controllers power inline 2-375
show controllers tcam 2-377
show controllers utilization 2-379
show dot1q-tunnel 2-381
show dot1x 2-382
show dtp 2-386
show env 2-388
show errdisable detect 2-390
show errdisable flap-values 2-392
show errdisable recovery 2-394
show etherchannel 2-396
show flowcontrol 2-399
show interfaces 2-401
show interfaces counters 2-411
show inventory 2-413

Contents
x
Catalyst 3560 Switch Command Reference
78-16405-05
show ip arp inspection 2-414
show ip dhcp snooping 2-417
show ip dhcp snooping binding 2-418
show ip dhcp snooping database 2-420
show ip igmp profile 2-422
show ip igmp snooping 2-423
show ip igmp snooping groups 2-426
show ip igmp snooping mrouter 2-428
show ip igmp snooping querier 2-430
show ip source binding 2-432
show ip verify source 2-434
show ipc 2-436
show ipv6 access-list 2-440
show ipv6 mld snooping 2-442
show ipv6 mld snooping address 2-444
show ipv6 mld snooping mrouter 2-446
show ipv6 mld snooping querier 2-448
show l2protocol-tunnel 2-450
show lacp 2-453
show mac access-group 2-457
show mac address-table 2-459
show mac address-table address 2-461
show mac address-table aging-time 2-463
show mac address-table count 2-465
show mac address-table dynamic 2-467
show mac address-table interface 2-469
show mac address-table move update 2-471
show mac address-table notification 2-473
show mac address-table static 2-475
show mac address-table vlan 2-477
show mls qos 2-479
show mls qos aggregate-policer 2-480
show mls qos input-queue 2-481
show mls qos interface 2-483
show mls qos maps 2-487