[PDF] Command Reference Cisco IOS Release 15.2(2)E (Catalyst 2960

View - Download Command Reference Cisco IOS Release 15.2(2)E (Catalyst 2960

Previous PDF

Next PDF

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Catalyst 2960, 2960-S, 2960-SF and

2960-Plus Switches Command Reference

Cisco IOS Release 15.2(2)E

June 2014

Text Part Number: OL-32524-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public

domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this

URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the

document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference © 2004-2014 Cisco Systems, Inc. All rights reserved. 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

CONTENTS

CLI Command Modes1-1

aaa accounting dot1x1-1 dot1x supplicant controlled transient1-151 rmon collection stats1-382 shutdown1-579 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Preface

Audience

This guide is for the networking professional using the Cisco IOS command-line interface (CLI) to

manage the Catalyst switch, hereafter referred to as the switch. Before using this guide, you should have

experience working with the Cisco IOS commands and the switch software features. Before using this

guide, you should have experience working with the concepts and terminology of Ethernet and local area

networking.

Purpose

This guide provides the information that you need about the Layer 2 commands that have been created

or changed for use with the Catalyst switches. For information about the standard Cisco IOS Release 15.2

commands, see the Cisco IOS documentation set available on Cisco.com. This guide does not provide procedures for configuring your switch. For detailed configuration procedures, see the software configuration guide for this release. This guide does not describe system messages you might encounter. For more information, see the system message guide for this release. For documentation updates, see the release notes for this release.

Conventions

This publication uses these conventions to convey instructions and information:

Command descriptions use these conventions:

•Commands and keywords are in boldface text. element. 2 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Preface

Interactive examples use these conventions:

Notes, cautions, and warnings use these conventions and symbols:

NoteMeans reader take note. Notes contain helpful suggestions or references to materials not contained in

this manual.

CautionMeans reader be careful. In this situation, you might do something that could result in equipment

damage or loss of data.

Filtering show Command Output

The show commands have optional output modifiers to filter the command output. Expressions are case sensitive. If you enter | exclude output, the lines that contain output are not displayed, but the lines that contain Output are displayed.

Related Publications

NoteThese documents provide complete information about the switch and are available from this Cisco.com

site: Before installing, configuring, or upgrading the switch, see these documents: installation guide. orderable but available on Cisco.com). orderable but available on Cisco.com). available on Cisco.com). 3 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Preface

See these documents for other information about the switches:

Admission Control Software Configuration Guide.

These SFP compatibility matrix documents are available from this Cisco.com site: ml Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation: Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed

and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free

service and Cisco currently supports RSS version 2.0.

CHAPTER

1-1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

1

Using the Command-Line Interface

The Catalyst switch is supported by Cisco IOS software. This chapter describes how to use the switch

command-line interface (CLI) to configure software features.

2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands."

Commands."

Commands."

In this document, IP refers to IP version 4 (IPv4) unless there is a specific reference to IP version 6

(IPv6).

CLI Command Modes

This section describes the CLI command mode structure. Command modes support specific Cisco IOS commands. For example, the interface interface-id command only works when entered in global configuration mode.

These are the main command modes for the switch:

1-2 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Using the Command-Line Interface

CLI Command Modes

Table 1-1 lists the main command modes, how to access each mode, the prompt you see in that mode, and how to exit that mode. The prompts listed use the default name Switch.

User EXEC Mode

After you access the device, you are automatically in user EXEC command mode. The EXEC commands

available at the user level are a subset of those available at the privileged level. In general, use the user

EXEC commands to temporarily change terminal settings, perform basic tests, and list system information. The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch> ?

Table 1-1 Command Modes Summary

Command Mode Access Method Prompt Exit or Access Next Mode

User EXEC This is the first level of access.

(For the switch) Change terminal settings, perform basic tasks, and list system information.

Switch>

Enter the logout command.

To enter privileged EXEC mode, enter

the enable command.

Privileged EXEC From user EXEC mode, enter the

enable command.

Switch#

To exit to user EXEC mode, enter the

disable command.

To enter global configuration mode,

enter the configure command.

Global

configurationFrom privileged EXEC mode, enter the configure command.

Switch(config)#

To exit to privileged EXEC mode,

enter the exit or end command, or press Ctrl-Z.

To enter interface configuration mode,

enter the interface configuration command.

Interface

configurationFrom global configuration mode, specify an interface by entering the interface command followed by an interface identification.

Switch(config-if)#

To exit to privileged EXEC mode,

enter the end command, or press

Ctrl-Z.

To exit to global configuration mode,

enter the exit command. VLAN configurationIn global configuration mode, enter the vlan vlan-id command.

Switch(config-vlan)#

To exit to global configuration mode,

enter the exit command.

To return to privileged EXEC mode,

enter the end command, or press

Ctrl-Z.

Line configuration From global configuration mode, specify a line by entering the line command.

Switch(config-line)#

To exit to global configuration mode,

enter the exit command.

To return to privileged EXEC mode,

enter the end command, or press

Ctrl-Z.

1-3 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Using the Command-Line Interface

CLI Command Modes

Privileged EXEC Mode

Because many of the privileged commands configure operating parameters, privileged access should be password-protected to prevent unauthorized use. The privileged command set includes those commands contained in user EXEC mode, as well as the configure privileged EXEC command through which you access the remaining command modes.

If your system administrator has set a password, you are prompted to enter it before being granted access

to privileged EXEC mode. The password does not appear on the screen and is case sensitive. The privileged EXEC mode prompt is the device name followed by the pound sign (

Switch#

Enter the enable command to access privileged EXEC mode:

Switch> enable

Switch#

The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch# ?

To return to user EXEC mode, enter the disable privileged EXEC command.

Global Configuration Mode

Global configuration commands apply to features that affect the device as a whole. Use the configure privileged EXEC command to enter global configuration mode. The default is to enter commands from the management console. When you enter the configure command, a message prompts you for the source of the configuration commands:

Switch# configure

Configuring from terminal, memory, or network [terminal]? You can specify either the terminal or NVRAM as the source of configuration commands. This example shows you how to access global configuration mode:

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z. The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch(config)# ?

To exit global configuration command mode and to return to privileged EXEC mode, enter the end or exit command, or press Ctrl-Z. 1-4 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Using the Command-Line Interface

CLI Command Modes

Interface Configuration Mode

Interface configuration commands modify the operation of the interface. Interface configuration commands always follow a global configuration command, which defines the interface type. Use the interface interface-id command to access interface configuration mode. The new prompt means interface configuration mode.

Switch(config-if)#

The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch(config-if)# ?

To exit interface configuration mode and to return to global configuration mode, enter the exit command.

To exit interface configuration mode and to return to privileged EXEC mode, enter the end command, or press Ctrl-Z.

VLAN Configuration Mode

Use this mode to configure normal-range VLANs (VLAN IDs 1 to 1005) or, when VTP mode is transparent, to configure extended-range VLANs (VLAN IDs 1006 to 4094). When VTP mode is transparent, the VLAN and VTP configuration is saved in the running configuration file, and you can save it to the switch startup configuration file by using the copy running-config startup-config privileged EXEC command. The configurations of VLAN IDs 1 to 1005 are saved in the VLAN database if VTP is in transparent or server mode. The extended-range VLAN configurations are not saved in the

VLAN database.

Enter the vlan vlan-id global configuration command to access config-vlan mode:

Switch(config)# vlan 2000

Switch(config-vlan)#

The supported keywords can vary but are similar to the commands available in VLAN configuration mode. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch(config-vlan)# ?

For extended-range VLANs, all characteristics except the MTU size must remain at the default setting.

To return to global configuration mode, enter exit; to return to privileged EXEC mode, enter end. All

the commands except shutdown take effect when you exit config-vlan mode.

Line Configuration Mode

Line configuration commands modify the operation of a terminal line. Line configuration commands always follow a line command, which defines a line number. Use these commands to change terminal parameter settings line-by-line or for a range of lines. Use the line vty line_number [ending_line_number] command to enter line configuration mode. The new prompt means line configuration mode. The following example shows how to enter line configuration mode for virtual terminal line 7:

Switch(config)# line vty 0 7

1-5 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Using the Command-Line Interface

CLI Command Modes

The supported commands can vary depending on the version of software in use. To display a comprehensive list of commands, enter a question mark (?) at the prompt.

Switch(config-line)# ?

To exit line configuration mode and to return to global configuration mode, use the exit command. To exit line configuration mode and to return to privileged EXEC mode, enter the end command, or press

Ctrl-Z.

CHAPTER

1-1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

1

Catalyst 2960, 2960-S, 2960-SF and 2960-Plus

Switches Cisco IOS Commands

aaa accounting dot1x Use the aaa accounting dot1x global configuration command to enable authentication, authorization, and accounting (AAA) accounting and to create method lists defining specific accounting methods on a per-line or per-interface basis for IEEE 802.1x sessions. Use the no form of this command to disable

IEEE 802.1x accounting.

aaa accounting dot1x {name | default} start-stop {broadcast group {name | radius | tacacs+} [group {name | radius | tacacs+}...] | group {name | radius | tacacs+} [group {name | radius | tacacs+}...]} no aaa accounting dot1x {name | default} Syntax DescriptionnameName of a server group. This is optional when you enter it after the broadcast group and group keywords. defaultUse the accounting methods that follow as the default list for accounting services. start-stopSend a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process. The start accounting record is sent in the background. The requested-user process begins regardless of whether or not the start accounting notice was received by the accounting server. broadcastEnable accounting records to be sent to multiple AAA servers and send accounting records to the first server in each group. If the first server is unavailable, the switch uses the list of backup servers to identify the first server. groupSpecify the server group to be used for accounting services. These are valid server group names: The group keyword is optional when you enter it after the broadcast group and group keywords. You can enter more than optional group keyword. 1-2 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands aaa accounting dot1x

DefaultsAAA accounting is disabled.

Command ModesGlobal configuration

Command History

Usage GuidelinesThis command requires access to a RADIUS server. We recommend that you enter the dot1x reauthentication interface configuration command before configuring IEEE 802.1x RADIUS accounting on an interface. ExamplesThis example shows how to configure IEEE 802.1x accounting:

Switch(config)# aaa new-model

Switch(config)# aaa accounting dot1x default start-stop group radius

NoteThe RADIUS authentication server must be properly configured to accept and log update or watchdog

packets from the AAA client. Related Commandsradius(Optional) Enable RADIUS authorization. tacacs+(Optional) Enable TACACS+ accounting.

Release Modification

Command Description

aaa authentication dot1xSpecifies one or more AAA methods for use on interfaces running

IEEE 802.1x.

aaa new-modelEnables the AAA access control model. dot1x reauthenticationEnables or disables periodic reauthentication. dot1x timeout reauth-periodSets the number of seconds between re-authentication attempts. 1-3 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands aaa authentication dot1x aaa authentication dot1x Use the aaa authentication dot1x global configuration command to specify the authentication, authorization, and accounting (AAA) method to use on ports complying with the IEEE 802.1x authentication. Use the no form of this command to disable authentication. aaa authentication dot1x {default} method1 no aaa authentication dot1x {default}

Syntax Description

NoteThough other keywords are visible in the command-line help strings, only the default and group radius

keywords are supported.

DefaultsNo authentication is performed.

Command ModesGlobal configuration

Command History

Usage GuidelinesThe method argument identifies the method that the authentication algorithm tries in the given sequence

to validate the password provided by the client. The only method that is truly IEEE 802.1x-compliant is

the group radius method, in which the client data is validated against a RADIUS authentication server.

If you specify group radius, you must configure the RADIUS server by entering the radius-server host global configuration command. Use the show running-config privileged EXEC command to display the configured lists of authentication methods.

ExamplesThis example shows how to enable AAA and how to create an IEEE 802.1x-compliant authentication

list. This authentication first tries to contact a RADIUS server. If this action returns an error, the user is

not allowed access to the network.

Switch(config)# aaa new-model

Switch(config)# aaa authentication dot1x default group radius

You can verify your settings by entering the show running-config privileged EXEC command.defaultUse the listed authentication method that follows this argument as the default

method when a user logs in. method1Enter the group radius keywords to use the list of all RADIUS servers for authentication. 1-4 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands aaa authentication dot1x

Related Commands Command Description

aaa new-modelEnables the AAA access control model. show running-configDisplays the current operating configuration. 1-5 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands aaa authorization network aaa authorization network Use the aaa authorization network global configuration command to the configure the switch to use user-RADIUS authorization for all network-related service requests, such as IEEE 802.1x VLAN assignment. Use the no form of this command to disable RADIUS user authorization. aaa authorization network default group radius no aaa authorization network default

Syntax Description

DefaultsAuthorization is disabled.

Command ModesGlobal configuration

Command History

Usage GuidelinesUse the aaa authorization network default group radius global configuration command to allow the

switch to download IEEE 802.1x authorization parameters from the RADIUS servers in the default authorization list. The authorization parameters are used by features such as VLAN assignment to get parameters from the RADIUS servers. Use the show running-config privileged EXEC command to display the configured lists of authorization methods.

ExamplesThis example shows how to configure the switch for user RADIUS authorization for all network-related

service requests: Switch(config)# aaa authorization network default group radius You can verify your settings by entering the show running-config privileged EXEC command.

Related Commandsdefault group

radiusUse the list of all RADIUS hosts in the server group as the default authorization list.

Command Description

show running-configDisplays the current operating configuration. 1-6 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Command Reference

OL-32524-01

Chapter 1 Catalyst 2960, 2960-S, 2960-SF and 2960-Plus Switches Cisco IOS Commands archive download-sw archive download-swquotesdbs_dbs10.pdfusesText_16

[PDF] cisco americas partner organization

[PDF] cisco and appdynamics

[PDF] cisco annual cybersecurity report 2018

[PDF] cisco annual cybersecurity report 2018 pdf

[PDF] cisco annual internet report 2017

[PDF] cisco annual report 2013

[PDF] cisco annual report 2015

[PDF] cisco annual report 2017 pdf

[PDF] cisco annual report 2018 19

[PDF] cisco annual report 2019

[PDF] cisco annual revenue

[PDF] cisco annual revenue 2018

[PDF] cisco annual revenue 2019

[PDF] cisco annual security report 2016

[PDF] cisco annual security report 2017