Catalyst 3750 Switch Command Reference - Cisco

Contentsspanning-tree bpduguardspanning-tree cost2-5842-586spanning-tree etherchannel guard misconfigspanning-tree extend system-idspanning-tree guard2-5902-592spanning-tree link-type2-594spanning-tree loopguard defaultspanning-tree mode2-5962-598spanning-tree mst configurationspanning-tree mst cost2-6002-602spanning-tree mst forward-timespanning-tree mst hello-timespanning-tree mst max-age2-6042-6052-606spanning-tree mst max-hops2-607spanning-tree mst port-priority2-609spanning-tree mst pre-standardspanning-tree mst priorityspanning-tree mst root2-6112-6122-613spanning-tree port-priority2-615spanning-tree portfast (global configuration)spanning-tree portfast (interface configuration)spanning-tree transmit hold-countspanning-tree uplinkfastspanning-tree eue bandwidth limit2-629srr-queue bandwidth shape2-631srr-queue bandwidth share2-633stack-mac persistent timer2-635storm-control2-637switch priority2-640switch provision2-641switch renumber2-643switchport2-645switchport access2-647Catalyst 3750 Switch Command Referencexii78-16181-06

Contentsswitchport backup interfaceswitchport block2-6492-651switchport host2-652switchport mode2-653switchport mode private-vlanswitchport nonegotiate2-658switchport port-security2-6602-656switchport port-security agingswitchport priority extendswitchport private-vlanswitchport protectedswitchport trunk2-6652-6672-6692-6712-673switchport voice vlan2-676system env temperature threshold yellowsystem mtu2-680test cable-diagnostics tdrtraceroute mactrust2-688udld2-6902-6822-683traceroute mac ipudld port2-6782-6862-692udld reset2-694vlan (global configuration)2-695vlan (VLAN configuration)2-701vlan access-mapvlan database2-7072-709vlan dot1q tag nativevlan filter2-7122-714vmps reconfirm (privileged EXEC)2-716vmps reconfirm (global configuration)vmps retryvmps server2-7172-7182-719vtp (global configuration)2-721vtp (VLAN configuration)2-725Catalyst 3750 Switch Command Reference78-16181-06xiii

ContentsAPPENDIXACatalyst 3750 Switch Boot Loader CommandsbootcatA-2A-4copyA-5deletedirA-6A-7flash initformatA-9A-10fsckA-11helpA-12load irsetA-1A-27Catalyst 3750 Switch Debug Commandsdebug auto qosB-2debug backupB-4debug clusterB-5debug dot1xdebug dtpB-1B-7B-9debug etherchanneldebug ilpowerB-10B-12debug ip dhcp snoopingB-13debug ip verify source packetdebug interfaceB-14B-15debug ip igmp filterB-17debug ip igmp max-groupsB-18Catalyst 3750 Switch Command Referencexiv78-16181-06

Contentsdebug ip igmp snoopingdebug lacpB-19B-20debug mac-notificationdebug matmB-21B-22debug matm move updatedebug monitorB-24debug mvrdbgB-26debug nvramdebug pagpB-23B-27B-28debug platform aclB-29debug platform backup interfaceB-30debug platform cli-redirection maindebug platform configurationB-32debug platform cpu-queuesB-33debug platform device-managerdebug platform dot1xB-31B-35B-36debug platform etherchannelB-37debug platform fallback-bridgingdebug platform forw-tcamB-38B-39debug platform frontend-controllerdebug platform ip arp inspectiondebug platform ip dhcpB-40B-42B-43debug platform ip igmp snoopingdebug platform ip multicastB-46debug platform ip unicastdebug platform ipcB-50debug platform ledB-51debug platform matmB-44B-48B-52debug platform messaging applicationdebug platform phyB-56debug platform pmB-58debug platform port-asicB-54B-60debug platform port-securityB-61debug platform qos-acl-tcamB-62debug platform remote-commandsB-63Catalyst 3750 Switch Command Reference78-16181-06xv

Contentsdebug platform resource-managerdebug platform snmpB-65debug platform spanB-66B-64debug platform stack-managerB-67debug platform supervisor-asicB-68debug platform sw-bridgeB-69debug platform tcamB-70debug platform udldB-73debug platform vlanB-74debug pmB-75debug port-securityB-77debug qos-managerB-78debug spanning-treeB-79debug spanning-tree backbonefastdebug spanning-tree bpduB-82debug spanning-tree bpdu-optdebug spanning-tree mstpB-83B-84debug spanning-tree switchB-86debug spanning-tree uplinkfastdebug sw-vlanB-91debug sw-vlan notificationdebug sw-vlan vtpCB-88B-89debug sw-vlan ifsAPPENDIXB-81debug udldB-97debug vqpcB-99B-93B-95Catalyst 3750 Switch Show Platform Commandsshow platform aclC-1C-2show platform backup interfaceshow platform configurationC-4show platform etherchannelC-5show platform forwardC-6show platform frontend-controllershow platform ip igmp snoopingshow platform ip multicastshow platform ip unicastC-3C-8C-9C-11C-12Catalyst 3750 Switch Command Referencexvi78-16181-06

Contentsshow platform ip unicast vrf compactionshow platform ip unicast vrf tcam-labelshow platform ipc traceshow platform layer4opC-17C-19show platform mac-address-tableshow platform messagingC-22C-23C-24show platform port-asicC-25show platform port-securityshow platform qosC-31C-32show platform resource-managershow platform snmp countersshow platform spanning-treeshow platform stp-instanceshow platform stack-managershow platform tbshow platform tcamshow platform vlanC-20C-21show platform mvr tableshow platform pmC-15C-16show platform ipv6 unicastshow platform talyst 3750 Switch Command Reference78-16181-06xvii

ContentsCatalyst 3750 Switch Command Referencexviii78-16181-06

PrefaceAudienceThis guide is for the networking professional using the Cisco IOS command-line interface (CLI) tomanage the Catalyst 3750 switch, hereafter referred to as the switch. Before using this guide, you shouldhave experience working with the Cisco IOS commands and the switch software features. Before usingthis guide, you should have experience working with the concepts and terminology of Ethernet and localarea networking.PurposeThe Catalyst 3750 switch is supported by either the IP base image, formerly known as the standardmultilayer image (SMI), or the IP services image, formerly known as the enhanced multilayer image(EMI). The IP base image provides Layer 2 features including access control lists (ACLs), quality ofservice (QoS), static routing, and the Routing Information Protocol (RIP). The IP services imageprovides a richer set of enterprise-class features. It includes Layer 2 features and full Layer 3 routing(IP unicast routing, IP multicast routing, and fallback bridging). To distinguish it from the Layer 2 static routing and RIP, the IP services image includes protocols such as the Enhanced Interior GatewayRouting Protocol (EIGRP) and Open Shortest Path First (OSPF) Protocol.This guide provides the information that you need about the Layer 2 and Layer 3 commands that havebeen created or changed for use with the Catalyst 3750 switches. For information about the standard CiscoIOS Release 12.2 commands, see the Cisco IOS documentation set available from the Cisco.com home pageby selecting Technical Support & Documentation Cisco IOS Software.This guide does not provide procedures for configuring your switch. For detailed configurationprocedures, see the software configuration guide for this release.This guide does not describe system messages you might encounter. For more information, see thesystem message guide for this release.For documentation updates, see the release notes for this release.Catalyst 3750 Switch Command Reference78-16181-06xix

PrefaceConventionsConventionsThis publication uses these conventions to convey instructions and information:Command descriptions use these conventions: Commands and keywords are in boldface text. Arguments for which you supply values are in italic. Square brackets ([ ]) means optional elements. Braces ({}) group required choices, and vertical bars ( ) separate the alternative elements. Braces and vertical bars within square brackets ([{ }]) mean a required choice within an optionalelement.Interactive examples use these conventions: Terminal sessions and system displays are in screen font. Information you enter is in boldface Nonprinting characters, such as passwords or tabs, are in angle brackets ( ).screenfont.Notes, cautions, and warnings use these conventions and symbols:NoteCautionMeans reader take note. Notes contain helpful suggestions or references to materials not contained inthis manual.Means reader be careful. In this situation, you might do something that could result in equipmentdamage or loss of data.Related PublicationsThese documents provide complete information about the switch and are available from this doc/product/lan/cat3750/index.htmNoteBefore installing, configuring, or upgrading the switch, see these documents: For initial configuration information, see the “Using Express Setup” chapter in the getting startedguide or the “Configuring the Switch with the CLI-Based Setup Program” appendix in the hardwareinstallation guide. For device manager requirements, see the “System Requirements” section in the release notes (notorderable but available on Cisco.com). For Network Assistant requirements, see the Getting Started with Cisco Network Assistant (notorderable but available on Cisco.com).Catalyst 3750 Switch Command Referencexx78-16181-06

PrefaceObtaining Documentation For cluster requirements, see the Release Notes for Cisco Network Assistant (not orderable butavailable on Cisco.com). For upgrade information, see the “Downloading Software” section in the release notes.You can order printed copies of documents with a DOC-xxxxxx number from the Cisco.com sites andfrom the telephone numbers listed in the “Obtaining Documentation” section on page xxi. Release Notes for the Catalyst 3750, 3560, 2970, and 2960 Switches (not orderable but available onCisco.com) Catalyst 3750 Switch Software Configuration Guide (order number DOC-7816180 ) Catalyst 3750 Switch Command Reference (order number DOC-7816181 ) Catalyst 3750 Switch System Message Guide (order number DOC-7816184 ) Device manager online help (available on the switch) Catalyst 3750 Switch Hardware Installation Guide (not orderable but available on Cisco.com) Catalyst 3750 Switch Getting Started Guide (order number DOC-7816663 ) Regulatory Compliance and Safety Information for the Catalyst 3750 Switch (order numberDOC-7816664) Getting Started with Cisco Network Assistant (not orderable but available on Cisco.com) Release Notes for Cisco Network Assistant (not orderable but available on Cisco.com) Cisco Small Form-Factor Pluggable Modules Installation Notes (order number DOC-7815160 ) Cisco CWDM GBIC and CWDM SFP Modules Installation Note (not orderable but available onCisco.com) Cisco RPS 300 Redundant Power System Hardware Installation Guide (order numberDOC-7810372 ) Cisco RPS 675 Redundant Power System Hardware Installation Guide (order numberDOC-7815201 )Obtaining DocumentationCisco documentation and additional literature are available on Cisco.com. Cisco also provides severalways to obtain technical assistance and other technical resources. These sections explain how to obtaintechnical information from Cisco Systems.Cisco.comYou can access the most current Cisco documentation at this URL:http://www.cisco.com/techsupportYou can access the Cisco website at this URL:http://www.cisco.comYou can access international Cisco websites at this URL:http://www.cisco.com/public/countries languages.shtmlCatalyst 3750 Switch Command Reference78-16181-06xxi

PrefaceDocumentation FeedbackProduct Documentation DVDCisco documentation and additional literature are available in the Product Documentation DVD package,which may have shipped with your product. The Product Documentation DVD is updated regularly andmay be more current than printed documentation.The Product Documentation DVD is a comprehensive library of technical product documentation onportable media. The DVD enables you to access multiple versions of hardware and software installation,configuration, and command guides for Cisco products and to view technical documentation in HTML.With the DVD, you have access to the same documentation that is found on the Cisco website withoutbeing connected to the Internet. Certain products also have .pdf versions of the documentation available.The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.comusers (Cisco direct customers) can order a Product Documentation DVD (product numberDOC-DOCDVD ) from Cisco Marketplace at this URL:http://www.cisco.com/go/marketplace/Ordering DocumentationBeginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the ProductDocumentation Store in the Cisco Marketplace at this red Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m.(0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere bycalling 011 408 519-5055. You can also order documentation by e-mail attech-doc-store-mkpl@external.cisco.com or by fax at 1 408 519-5001 in the United States and Canada,or elsewhere at 011 408 519-5001.Documentation FeedbackYou can rate and provide feedback about Cisco technical documents by completing the online feedbackform that appears with the technical documents on Cisco.com.You can send comments about Cisco documentation to bug-doc@cisco.com.You can submit comments by using the response card (if present) behind the front cover of yourdocument or by writing to the following address:Cisco SystemsAttn: Customer Document Ordering170 West Tasman DriveSan Jose, CA 95134-9883We appreciate your comments.Catalyst 3750 Switch Command Referencexxii78-16181-06

PrefaceCisco Product Security OverviewCisco Product Security OverviewCisco provides a free online Security Vulnerability Policy portal at this URL:http://www.cisco.com/en/US/products/products security vulnerability policy.htmlFrom this site, you can perform these tasks: Report security vulnerabilities in Cisco products. Obtain assistance with security incidents that involve Cisco products. Register to receive security information from Cisco.A current list of security advisories and notices for Cisco products is available at this URL:http://www.cisco.com/go/psirtIf you prefer to see advisories and notices as they are updated in real time, you can access a ProductSecurity Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:http://www.cisco.com/en/US/products/products psirt rss feed.htmlReporting Security Problems in Cisco ProductsCisco is committed to delivering secure products. We test our products internally before we release them,and we strive to correct all vulnerabilities quickly. If you think that you might have identified avulnerability in a Cisco product, contact PSIRT: Emergencies — security-alert@cisco.comAn emergency is either a condition in which a system is under active attack or a condition for whicha severe and urgent security vulnerability should be reported. All other conditions are considerednonemergencies. Nonemergencies — psirt@cisco.comIn an emergency, you can also reach PSIRT by telephone:Tip 1 877 228-7302 1 408 525-6532We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitiveinformation that you send to Cisco. PSIRT can work from encrypted information that is compatible withPGP versions 2.x through 8.x.Never use a revoked or an expired encryption key. The correct public key to use in your correspondencewith PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy pageat this URL:http://www.cisco.com/en/US/products/products security vulnerability policy.htmlThe link on this page has the current PGP key ID in use.Catalyst 3750 Switch Command Reference78-16181-06xxiii

PrefaceObtaining Technical AssistanceObtaining Technical AssistanceCisco Technical Support provides 24-hour-a-day award-winning technical assistance. The CiscoTechnical Support & Documentation website on Cisco.com features extensive online support resources.In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC)engineers provide telephone support. If you do not have a valid Cisco service contract, contact yourreseller.Cisco Technical Support & Documentation WebsiteThe Cisco Technical Support & Documentation website provides online documents and tools fortroubleshooting and resolving technical issues with Cisco products and technologies. The website isavailable 24 hours a day, at this URL:http://www.cisco.com/techsupportAccess to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com userID and password. If you have a valid service contract but do not have a user ID or password, you canregister at this oNoteUse the Cisco Product Identification (CPI) tool to locate your product serial number before submittinga web or phone request for service. You can access the CPI tool from the Cisco Technical Support &Documentation website by clicking the Tools & Resources link under Documentation & Tools. ChooseCisco Product Identification Tool from the Alphabetical Index drop-down list, or click the CiscoProduct Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: byproduct ID or model name; by tree view; or for certain products, by copying and pasting show commandoutput. Search results show an illustration of your product with the serial number label locationhighlighted. Locate the serial number label on your product and record the information before placing aservice call.Catalyst 3750 Switch Command Referencexxiv78-16181-06

PrefaceObtaining Technical AssistanceSubmitting a Service RequestUsing the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3and S4 service requests are those in which your network is minimally impaired or for which you requireproduct information.) After you describe your situation, the TAC Service Request Tool provid

CHAPTER 2 Catalyst 3750 Switch Cisco IOS Commands 2-1 aaa accounting dot1x 2-1 aaa authentication dot1x 2-3. Contents iv Catalyst 3750 Switch Command Reference 78-16181-06 action 2-5 archive copy-sw 2-7 archive download-sw 2-10 archive tar 2-15 archi