Command Reference
Page 19
The IP base image provides Layer 2+ features including access control lists (ACLs), quality of enterprise-class features. This guide provides the information that you should have experience working with the Cisco IOS commands and the switch software features. This guide does not provide ...to manage the Catalyst 3560 switch, hereafter referred to as the switch. Before using this release. For documentation updates, see the Cisco IOS documentation set of service (QoS), static routing, and the Routing Information Protocol (RIP). Purpose The Catalyst 3560 switch is for...
The IP base image provides Layer 2+ features including access control lists (ACLs), quality of enterprise-class features. This guide provides the information that you should have experience working with the Cisco IOS commands and the switch software features. This guide does not provide ...to manage the Catalyst 3560 switch, hereafter referred to as the switch. Before using this release. For documentation updates, see the Cisco IOS documentation set of service (QoS), static routing, and the Routing Information Protocol (RIP). Purpose The Catalyst 3560 switch is for...
Command Reference
Page 63
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands channel-group Defaults No channel groups are assigned. ...and to 48. Caution You should manually configure the port-channel logical interface before assigning a physical port to configure a Layer 2 EtherChannel as the port-channel-number, or you make on mode, an EtherChannel exists only when a port group in...changed from ever becoming operational. The channel-group-number range was introduced. Usage Guidelines For Layer 2 EtherChannels, you create the port-channel interface first, the channel-group-number can use a new number. ...
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands channel-group Defaults No channel groups are assigned. ...and to 48. Caution You should manually configure the port-channel logical interface before assigning a physical port to configure a Layer 2 EtherChannel as the port-channel-number, or you make on mode, an EtherChannel exists only when a port group in...changed from ever becoming operational. The channel-group-number range was introduced. Usage Guidelines For Layer 2 EtherChannels, you create the port-channel interface first, the channel-group-number can use a new number. ...
Command Reference
Page 64
...Switch(config-if-range)# channel-group 5 mode desirable Switch(config-if-range)# end This example shows how to configure an EtherChannel. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-32 Catalyst 3560 Switch Command Reference 78-16405-05 Examples... command. It assigns two static-access ports in VLAN 10 to manage channeling. Accesses or creates the port channel. Caution Do not enable Layer 3 addresses on the physical EtherChannel ports because it creates loops.
...Switch(config-if-range)# channel-group 5 mode desirable Switch(config-if-range)# end This example shows how to configure an EtherChannel. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-32 Catalyst 3560 Switch Command Reference 78-16405-05 Examples... command. It assigns two static-access ports in VLAN 10 to manage channeling. Accesses or creates the port channel. Caution Do not enable Layer 3 addresses on the physical EtherChannel ports because it creates loops.
Command Reference
Page 74
...id] Syntax Description interface-id (Optional) Specify interface (physical interface or port channel) for which protocol counters are to clear Layer 2 protocol tunnel counters on the specified interface. Examples This example shows how to be cleared. Defaults No default is defined. ...Command History Release 12.2(25)SE Modification This command was introduced. clear l2protocol-tunnel counters Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear l2protocol-tunnel counters Use the clear l2protocol-tunnel counters privileged EXEC command to clear protocol tunnel counters on...
...id] Syntax Description interface-id (Optional) Specify interface (physical interface or port channel) for which protocol counters are to clear Layer 2 protocol tunnel counters on the specified interface. Examples This example shows how to be cleared. Defaults No default is defined. ...Command History Release 12.2(25)SE Modification This command was introduced. clear l2protocol-tunnel counters Chapter 2 Catalyst 3560 Switch Cisco IOS Commands clear l2protocol-tunnel counters Use the clear l2protocol-tunnel counters privileged EXEC command to clear protocol tunnel counters on...
Command Reference
Page 107
...unicast and link-local host addresses. To disallow ICMPv6 neighbor discovery and to the IPv6 neighbor discovery process, uses a separate data-link layer protocol. For the implicit deny ipv6 any any statement to show where it is equivalent to deny icmp any any nd-na or ...12.2(25)SED Modification This command was introduced. To add a new statement anywhere other than at least one entry. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) Note Although visible in the command-line help strings, the flow-label, routing, and undetermined-transport...
...unicast and link-local host addresses. To disallow ICMPv6 neighbor discovery and to the IPv6 neighbor discovery process, uses a separate data-link layer protocol. For the implicit deny ipv6 any any statement to show where it is equivalent to deny icmp any any nd-na or ...12.2(25)SED Modification This command was introduced. To add a new statement anywhere other than at least one entry. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (IPv6 access-list configuration) Note Although visible in the command-line help strings, the flow-label, routing, and undetermined-transport...
Command Reference
Page 108
... have a destination TCP port number greater than 5000 from leaving the interface. Filters incoming or outgoing IPv6 traffic on a Layer 3 interface. Switch(config)# ipv6 access-list CISCO Switch(config-ipv6-acl)# deny tcp any any gt 5000 Switch config-ipv6-acl)# deny ::/0 lt 5000 ::/0 log Switch...-route parameter-option port-unreachable renum-command renum-seq-number router-renumbering time-exceeded Examples This example configures the IPv6 access list named CISCO and applies the access list to the console. Sets permit conditions for an IPv6 access list. The first deny entry in the...
... have a destination TCP port number greater than 5000 from leaving the interface. Filters incoming or outgoing IPv6 traffic on a Layer 3 interface. Switch(config)# ipv6 access-list CISCO Switch(config-ipv6-acl)# deny tcp any any gt 5000 Switch config-ipv6-acl)# deny ::/0 lt 5000 ::/0 log Switch...-route parameter-option port-unreachable renum-command renum-seq-number router-renumbering time-exceeded Examples This example configures the IPv6 access list named CISCO and applies the access list to the console. Sets permit conditions for an IPv6 access list. The first deny entry in the...
Command Reference
Page 116
...vlan-id Syntax Description vlan-id Specify a VLAN in restricted VLANs do this restricted network access. To start message. • Some hosts (for Layer 3 ports cannot be confusion about this , a syslog message is generated. 2-84 Catalyst 3560 Switch Command Reference 78-16405-05 If a host ...sends the correct username and password combination, the port remains in every re-authentication. dot1x auth-fail vlan Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail vlan Use the dot1x auth-fail vlan interface configuration command to the default setting, use that host is...
...vlan-id Syntax Description vlan-id Specify a VLAN in restricted VLANs do this restricted network access. To start message. • Some hosts (for Layer 3 ports cannot be confusion about this , a syslog message is generated. 2-84 Catalyst 3560 Switch Command Reference 78-16405-05 If a host ...sends the correct username and password combination, the port remains in every re-authentication. dot1x auth-fail vlan Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x auth-fail vlan Use the dot1x auth-fail vlan interface configuration command to the default setting, use that host is...
Command Reference
Page 131
... 802.1x on a specific port. If you try to change to the authorized or unauthorized state based on Layer 2 static-access ports, voice VLAN ports, and Layer 3 routed ports. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x port-control dot1x port-control Use the dot1x port-control interface configuration command to enable manual...
... 802.1x on a specific port. If you try to change to the authorized or unauthorized state based on Layer 2 static-access ports, voice VLAN ports, and Layer 3 routed ports. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x port-control dot1x port-control Use the dot1x port-control interface configuration command to enable manual...
Command Reference
Page 140
... link-state flapping. Enable error detection for DHCP snooping. errdisable detect cause Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable detect cause Use the errdisable detect cause global configuration command to enable error-disabled detection for a Layer 2 protocol-tunnel error-disabled cause. Enable error detection for a specific cause or all causes. The...
... link-state flapping. Enable error detection for DHCP snooping. errdisable detect cause Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable detect cause Use the errdisable detect cause global configuration command to enable error-disabled detection for a Layer 2 protocol-tunnel error-disabled cause. Enable error detection for a specific cause or all causes. The...
Command Reference
Page 142
...Enable the timer to recover from the EtherChannel misconfiguration error-disabled state. errdisable recovery Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable recovery Use the errdisable recovery global configuration command to recover from the link-flap error-disabled state...return to recover from a loopback error-disabled state. Enable the timer to recover from a specific cause. Enable the timer to recover from a Layer 2 protocol tunnel error-disabled state. errdisable recovery {cause {all | arp-inspection | bpduguard | channel-misconfig | dhcp-rate-limit | dtp-flap...
...Enable the timer to recover from the EtherChannel misconfiguration error-disabled state. errdisable recovery Chapter 2 Catalyst 3560 Switch Cisco IOS Commands errdisable recovery Use the errdisable recovery global configuration command to recover from the link-flap error-disabled state...return to recover from a loopback error-disabled state. Enable the timer to recover from a specific cause. Enable the timer to recover from a Layer 2 protocol tunnel error-disabled state. errdisable recovery {cause {all | arp-inspection | bpduguard | channel-misconfig | dhcp-rate-limit | dtp-flap...
Command Reference
Page 148
...channel group used as the port-channel-number, or you can use the channel-group interface configuration command. If you do not assign Layer 3 addresses on the physical ports in a channel group is 1 to remove the port-channel. Caution When using the interface port-...the port-channel interface first, the channel-group-number can be the same as a Layer 3 port-channel interface because it creates loops. interface port-channel Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface port-channel Use the interface port-channel global configuration command to the channel...
...channel group used as the port-channel-number, or you can use the channel-group interface configuration command. If you do not assign Layer 3 addresses on the physical ports in a channel group is 1 to remove the port-channel. Caution When using the interface port-...the port-channel interface first, the channel-group-number can be the same as a Layer 3 port-channel interface because it creates loops. interface port-channel Chapter 2 Catalyst 3560 Switch Cisco IOS Commands interface port-channel Use the interface port-channel global configuration command to the channel...
Command Reference
Page 154
... this command to remove all access groups or the specified access group from 100 to 199 and 2000 to a Layer 2 interface only filters IP packets. ip access-group Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group Use the ip access-group interface configuration command to control access to 1999 or...
... this command to remove all access groups or the specified access group from 100 to 199 and 2000 to a Layer 2 interface only filters IP packets. ip access-group Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group Use the ip access-group interface configuration command to control access to 1999 or...
Command Reference
Page 155
... member of an Internet Control Message Protocol (ICMP) Host Unreachable message. ICMP Host Unreachable messages are filtered by both outbound or inbound Layer 3 interfaces. If the specified access list does not exist, all packets are filtered by the router ACL. Outgoing routed IP packets...to both the VLAN map and the router ACL. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group Examples You can use router ACLs, input port ACLs, and VLAN maps on a Layer 2 interface. A Layer 3 interface can have one router ACL in an SVI, incoming packets received on...
... member of an Internet Control Message Protocol (ICMP) Host Unreachable message. ICMP Host Unreachable messages are filtered by both outbound or inbound Layer 3 interfaces. If the specified access list does not exist, all packets are filtered by the router ACL. Outgoing routed IP packets...to both the VLAN map and the router ACL. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip access-group Examples You can use router ACLs, input port ACLs, and VLAN maps on a Layer 2 interface. A Layer 3 interface can have one router ACL in an SVI, incoming packets received on...
Command Reference
Page 157
..., the configured address is the primary IP address. Note If any router on the Layer 3 switch. If this command to remove an IP address or to disable IP processing. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip address ip address Use the ip address interface configuration command to set ...an IP address for the Layer 2 switch or an IP address for the associated IP subnet. (Optional) Specifies that ...
..., the configured address is the primary IP address. Note If any router on the Layer 3 switch. If this command to remove an IP address or to disable IP processing. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip address ip address Use the ip address interface configuration command to set ...an IP address for the Layer 2 switch or an IP address for the associated IP subnet. (Optional) Specifies that ...
Command Reference
Page 158
... might have an IP address assigned to hardware limitations. For more information, see the sdm prefer command. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-126 Catalyst 3560 Switch Command...config-if)# ip address 172.20.128.2 255.255.255.0 This example shows how to reallocate system hardware resources based on the Layer 3 switch: Switch(config)# ip multicast-routing Switch(config)# interface gigabitethernet0/1 Switch(config-if)# no ip address command, IP processing ...
... might have an IP address assigned to hardware limitations. For more information, see the sdm prefer command. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-126 Catalyst 3560 Switch Command...config-if)# ip address 172.20.128.2 255.255.255.0 This example shows how to reallocate system hardware resources based on the Layer 3 switch: Switch(config)# ip multicast-routing Switch(config)# interface gigabitethernet0/1 Switch(config-if)# no ip address command, IP processing ...
Command Reference
Page 186
...gigabitethernet0/2 Switch(config-if)# ip igmp filter 22 You can apply IGMP filters only to an EtherChannel group. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-154 Catalyst 3560 Switch Command ... IGMP filters to routed ports, switch virtual interfaces (SVIs), or ports that is 1 to 4294967295. show running configuration on a Layer 2 interface can join one or more switch port interfaces, but one port can be applied. An IGMP profile can have only ...
...gigabitethernet0/2 Switch(config-if)# ip igmp filter 22 You can apply IGMP filters only to an EtherChannel group. For syntax information, select Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 > File Management Commands > Configuration File Management Commands. 2-154 Catalyst 3560 Switch Command ... IGMP filters to routed ports, switch virtual interfaces (SVIs), or ports that is 1 to 4294967295. show running configuration on a Layer 2 interface can join one or more switch port interfaces, but one port can be applied. An IGMP profile can have only ...
Command Reference
Page 187
.... After the switch learns the maximum number of IGMP groups that a Layer 2 interface can join. The range is 0 to the interface. This is in the IGMP snooping forwarding table, drop the next IGMP join report. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp max-groups ip igmp max-groups Use the...
.... After the switch learns the maximum number of IGMP groups that a Layer 2 interface can join. The range is 0 to the interface. This is in the IGMP snooping forwarding table, drop the next IGMP join report. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp max-groups ip igmp max-groups Use the...
Command Reference
Page 188
...an interface. Examples This example shows how to limit to 25 the number of IGMP groups that a port can use this command only on Layer 2 physical interfaces and on the switch interface, including the maximum number of entries is in the forwarding table are aged out. ip igmp... max-groups Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines You can join: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# ip igmp max-groups 25 This example shows how ...
...an interface. Examples This example shows how to limit to 25 the number of IGMP groups that a port can use this command only on Layer 2 physical interfaces and on the switch interface, including the maximum number of entries is in the forwarding table are aged out. ip igmp... max-groups Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines You can join: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# ip igmp max-groups 25 This example shows how ...
Command Reference
Page 189
...range, enter the low IP multicast address, a space, and the high IP multicast address. You can apply an IGMP profile to one or more Layer 2 interfaces, but each interface can have only one profile applied to 4294967295. From this command to create an Internet Group Management Protocol (IGMP) ...using the show ip igmp profile privileged EXEC command. 78-16405-05 Catalyst 3560 Switch Command Reference 2-157 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp profile ip igmp profile Use the ip igmp profile global configuration command to delete the IGMP profile. Use the no...
...range, enter the low IP multicast address, a space, and the high IP multicast address. You can apply an IGMP profile to one or more Layer 2 interfaces, but each interface can have only one profile applied to 4294967295. From this command to create an Internet Group Management Protocol (IGMP) ...using the show ip igmp profile privileged EXEC command. 78-16405-05 Catalyst 3560 Switch Command Reference 2-157 Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp profile ip igmp profile Use the ip igmp profile global configuration command to delete the IGMP profile. Use the no...
Command Reference
Page 194
Displays the IGMP snooping configuration. 2-162 Catalyst 3560 Switch Command Reference 78-16405-05 Enables IGMP Immediate-Leave processing. Configures a Layer 2 port as a member of a group. ip igmp snooping last-member-query-interval Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Related Commands Command ip igmp snooping ip igmp snooping vlan immediate-leave ip igmp snooping vlan mrouter ip igmp snooping vlan static show ip igmp snooping Description Enables IGMP snooping on the switch or on a VLAN. Configures a Layer 2 port as a multicast router port.
Displays the IGMP snooping configuration. 2-162 Catalyst 3560 Switch Command Reference 78-16405-05 Enables IGMP Immediate-Leave processing. Configures a Layer 2 port as a member of a group. ip igmp snooping last-member-query-interval Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Related Commands Command ip igmp snooping ip igmp snooping vlan immediate-leave ip igmp snooping vlan mrouter ip igmp snooping vlan static show ip igmp snooping Description Enables IGMP snooping on the switch or on a VLAN. Configures a Layer 2 port as a multicast router port.