WIXLIB

Catalyst 2960 Switch CommandReferenceCisco IOS Release 12.2(25)SEEFebruary 2006Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax: 408 526-4100Text Part Number: OL-8604-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALLSTATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUTWARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THATSHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSEOR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s publicdomain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California.NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITHALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUTLIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OFDEALING, USAGE, OR TRADE PRACTICE.IIN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCOOR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn,and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, theCisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Empowering the InternetGeneration, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise,the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX,Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StrataView Plus, TeleRouter, The Fastest Way to Increase Your Internet Quotient,and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationshipbetween Cisco and any other company. (0502R)Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in thedocument are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.Catalyst 2960 Switch Command ReferenceCopyright 2006 Cisco Systems, Inc. All rights reserved.

elated PublicationsxviObtaining Documentation xviiCisco.com xviiProduct Documentation DVD xviiOrdering Documentation xviiiDocumentation FeedbackxviiiCisco Product Security Overview xviiiReporting Security Problems in Cisco ProductsxixObtaining Technical Assistance xixCisco Technical Support & Documentation WebsiteSubmitting a Service Request xxDefinitions of Service Request Severity xxObtaining Additional Publications and InformationCHAPTER1Using the Command-Line Interfacexixxxi1-1CLI Command Modes 1-1User EXEC Mode 1-2Privileged EXEC Mode 1-3Global Configuration Mode 1-3Interface Configuration Mode 1-4config-vlan Mode 1-4VLAN Configuration Mode 1-4Line Configuration Mode 1-5CHAPTER2Catalyst 2960 Switch Cisco IOS Commandsaaa accounting dot1x2-1aaa authentication dot1xaaa authorization networkarchive download-sw2-12-32-52-6Catalyst 2960 Switch Command ReferenceOL-8604-01iii

Contentsarchive tar2-9archive upload-sw2-12auto qos voip2-14boot boothlpr2-18boot config-file2-19boot enable-breakboot helper2-202-21boot helper-config-fileboot manual2-222-23boot private-config-fileboot 242-292-30class-mapclear dot1xclear eap2-322-342-35clear ip dhcp snooping databaseclear lacp2-362-37clear mac address-table2-38clear mac address-table move updateclear pagp2-40clear port-security2-41clear spanning-tree counters2-43clear spanning-tree detected-protocolsclear vmps statisticsclear vtp counters2-46cluster discovery hop-countcluster enable2-442-45cluster commander-address2-472-492-50cluster holdtime2-52cluster member2-53cluster outside-interfacecluster run2-392-552-56cluster standby-group2-57Catalyst 2960 Switch Command ReferenceivOL-8604-01

Contentscluster timer2-59define interface-rangedelete2-602-62deny (MAC access-list configuration)dot1x2-66dot1x auth-fail max-attemptsdot1x auth-fail vlan2-682-70dot1x control-direction2-72dot1x critical (global configuration)dot1x critical (interface configuration)dot1x default2-79dot1x host-mode2-81dot1x initialize2-762-82dot1x mac-auth-bypassdot1x max-reauth-reqdot1x max-reqdot1x pae2-742-78dot1x guest-vlan2-832-852-862-87dot1x port-control2-88dot1x re-authenticate2-90dot1x reauthenticationdot1x timeoutduplex2-632-912-922-95errdisable detect cause2-97errdisable recovery2-99exception crashinfo2-101flowcontrol2-102interface port-channelinterface rangeinterface vlan2-1062-108ip access-groupip address2-1042-1092-111ip dhcp snooping2-113ip dhcp snooping bindingip dhcp snooping database2-1142-116Catalyst 2960 Switch Command ReferenceOL-8604-01v

Contentsip dhcp snooping information option2-118ip dhcp snooping information option allow-untrustedip dhcp snooping limit rateip dhcp snooping trust2-1222-123ip dhcp snooping verify2-124ip dhcp snooping vlanip igmp filter2-1252-126ip igmp max-groupsip igmp profile2-1272-129ip igmp snooping2-131ip igmp snooping last-member-query-intervalip igmp snooping querierip igmp snooping tcn2-1332-135ip igmp snooping report-suppression2-1372-139ip igmp snooping tcn flood2-141ip igmp snooping vlan immediate-leaveip igmp snooping vlan mrouterip igmp snooping vlan staticip ssh2-1202-1422-1432-1452-147lacp port-priority2-149lacp system-prioritylink state group2-153link state tracklogging file2-1512-1552-156mac access-group2-158mac access-list extended2-160mac address-table aging-timemac address-table move updatemac address-table notificationmac address-table static2-1652-1682-170macro descriptionmacro global2-1632-167mac address-table static dropmacro apply2-1622-1732-174macro global description2-177Catalyst 2960 Switch Command ReferenceviOL-8604-01

Contentsmacro name2-178match (class-map configuration)mdix auto2-182media-typemls qos2-1802-1842-186mls qos aggregate-policermls qos cos2-1882-190mls qos dscp-mutationmls qos map2-1922-194mls qos queue-set output buffers2-198mls qos queue-set output thresholdmls qos rewrite ip dscp2-2002-202mls qos srr-queue input bandwidthmls qos srr-queue input buffers2-2042-206mls qos srr-queue input cos-map2-208mls qos srr-queue input dscp-map2-210mls qos srr-queue input priority-queue2-212mls qos srr-queue input threshold2-214mls qos srr-queue output cos-map2-216mls qos srr-queue output dscp-mapmls qos trust2-2182-220monitor session2-222mvr (global configuration)mvr (interface configuration)pagp learn-methodpagp port-priority2-2272-2302-2332-235permit (MAC access-list configuration)police2-2372-240police aggregatepolicy-map2-2422-244port-channel radius-server dead-criteriaradius-server host2-2512-253Catalyst 2960 Switch Command ReferenceOL-8604-01vii

Contentsrcommand2-255remote-span2-257renew ip dhcp snooping databasermon collection statssdm prefer2-2612-262service -2662-2682-270setup express2-273show access-lists2-275show archive statusshow auto qosshow boot2-2782-2792-283show cable-diagnostics tdrshow class-mapshow cluster2-2852-2872-288show cluster candidatesshow cluster members2-2902-292show controllers cpu-interface2-294show controllers ethernet-controllershow controllers tcam2-303show controllers utilizationshow dot1x2-2962-3052-307show dtp2-311show eap2-313show env2-316show errdisable detect2-317show errdisable flap-valuesshow errdisable recoveryshow etherchannelshow flowcontrolshow interfaces2-3212-3232-3262-328show interfaces countersshow inventory2-3192-3352-337Catalyst 2960 Switch Command ReferenceviiiOL-8604-01

Contentsshow ip dhcp snooping2-338show ip dhcp snooping binding2-339show ip dhcp snooping databaseshow ip igmp profile2-3412-343show ip igmp snooping2-344show ip igmp snooping groups2-347show ip igmp snooping mrouter2-349show ip igmp snooping queriershow lacp2-3512-353show link state group2-357show mac access-group2-359show mac address-table2-361show mac address-table address2-363show mac address-table aging-timeshow mac address-table count2-3652-367show mac address-table dynamic2-369show mac address-table interface2-371show mac address-table move updateshow mac address-table notificationshow mac address-table staticshow mac address-table vlanshow mls qos2-3792-381show mls qos input-queueshow mls qos interfaceshow mls qos mapsshow mls qos vlan2-3852-3892-3922-3942-3952-397show mvr interface2-399show mvr members2-401show pagp2-3822-383show mls qos queue-setshow mvr2-3752-377show mls qos aggregate-policershow monitor2-3732-403show parser macroshow policy-map2-4052-408Catalyst 2960 Switch Command ReferenceOL-8604-01ix

Contentsshow port-securityshow sdm prefer2-4102-413show setup express2-415show spanning-tree2-416show storm-control2-427show system mtushow udld2-430show versionshow vlanshow vmpsshow vtpshutdown2-4292-4332-4352-4392-4422-447shutdown vlan2-448snmp-server enable trapssnmp-server host2-4492-452snmp trap mac-notification2-456spanning-tree backbonefastspanning-tree bpdufilter2-4582-459spanning-tree bpduguardspanning-tree cost2-4612-463spanning-tree etherchannel guard misconfigspanning-tree extend system-idspanning-tree guard2-4672-468spanning-tree link-type2-470spanning-tree loopguard defaultspanning-tree mode2-4652-4722-474spanning-tree mst configurationspanning-tree mst cost2-4762-478spanning-tree mst forward-timespanning-tree mst hello-timespanning-tree mst max-age2-4802-4812-482spanning-tree mst max-hops2-483spanning-tree mst port-priority2-485spanning-tree mst pre-standardspanning-tree mst priority2-4872-488Catalyst 2960 Switch Command ReferencexOL-8604-01

Contentsspanning-tree mst root2-489spanning-tree port-priority2-491spanning-tree portfast (global configuration)spanning-tree portfast (interface configuration)spanning-tree transmit hold-countspanning-tree uplinkfastspanning-tree vlanspeed2-4932-4952-4972-4982-5002-503srr-queue bandwidth limit2-505srr-queue bandwidth shape2-507srr-queue bandwidth share2-509storm-control2-511switchport access2-514switchport backup interfaceswitchport block2-5162-519switchport host2-520switchport mode2-521switchport nonegotiate2-523switchport port-security2-525switchport port-security agingswitchport priority extendswitchport protectedswitchport trunk2-5342-5382-540test cable-diagnostics tdrtraceroute mactrust2-548udld2-550udld reset2-5422-543traceroute mac ipudld port2-5322-535switchport voice vlansystem mtu2-5302-5462-5522-554vlan (global configuration)2-555vlan (VLAN configuration)2-561vlan database2-567Catalyst 2960 Switch Command ReferenceOL-8604-01xi