Command Reference
Page 8
... qos dscp-mutation 2-244 mls qos map 2-246 mls qos queue-set output buffers 2-250 mls qos queue-set output threshold 2-252 mls qos rewrite ip dscp 2-254 mls qos srr-queue input bandwidth 2-256 mls qos srr-queue input buffers 2-258 mls qos srr-queue input cos-map 2-260 mls... threshold 2-266 mls qos srr-queue output cos-map 2-268 mls qos srr-queue output dscp-map 2-270 mls qos trust 2-272 mls qos vlan-based 2-274 monitor session 2-275 mvr (global configuration) 2-280 mvr (interface configuration) 2-283 pagp learn-method 2-286 pagp port-priority 2-288 permit (ARP access-list configuration...
... qos dscp-mutation 2-244 mls qos map 2-246 mls qos queue-set output buffers 2-250 mls qos queue-set output threshold 2-252 mls qos rewrite ip dscp 2-254 mls qos srr-queue input bandwidth 2-256 mls qos srr-queue input buffers 2-258 mls qos srr-queue input cos-map 2-260 mls... threshold 2-266 mls qos srr-queue output cos-map 2-268 mls qos srr-queue output dscp-map 2-270 mls qos trust 2-272 mls qos vlan-based 2-274 monitor session 2-275 mvr (global configuration) 2-280 mvr (interface configuration) 2-283 pagp learn-method 2-286 pagp port-priority 2-288 permit (ARP access-list configuration...
Command Reference
Page 19
...or changed for this guide, you might encounter. To distinguish it from the Cisco.com home page by either the IP base image, formerly known as the standard multilayer image (SMI), or the IP services image, formerly known as the enhanced multilayer image (EMI). This guide ...does not describe system messages you should have experience working with the Cisco IOS commands and the switch software features. The IP base image provides Layer 2+ features including access control lists (ACLs), quality of Ethernet and local area networking. It...
...or changed for this guide, you might encounter. To distinguish it from the Cisco.com home page by either the IP base image, formerly known as the standard multilayer image (SMI), or the IP services image, formerly known as the enhanced multilayer image (EMI). This guide ...does not describe system messages you should have experience working with the Cisco IOS commands and the switch software features. The IP base image provides Layer 2+ features including access control lists (ACLs), quality of Ethernet and local area networking. It...
Command Reference
Page 47
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands arp access-list arp access-list Use the arp...you can apply it . If the ACL denies a packet because of packets are compared to a VLAN by using the ip arp inspection filter vlan global configuration command. Defaults No ARP access lists are available: • default: returns a command ...to its default setting. • deny: specifies packets to drop ARP packets based on the specified matching criteria. All other types of an explicit deny statement, the switch drops the packet. If the ...
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands arp access-list arp access-list Use the arp...you can apply it . If the ACL denies a packet because of packets are compared to a VLAN by using the ip arp inspection filter vlan global configuration command. Defaults No ARP access lists are available: • default: returns a command ...to its default setting. • deny: specifies packets to drop ARP packets based on the specified matching criteria. All other types of an explicit deny statement, the switch drops the packet. If the ...
Command Reference
Page 48
...list privileged EXEC command. Related Commands Command Description deny (ARP access-list Denies an ARP packet based on matches compared against the DHCP configuration) bindings. arp access-list Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Examples This example shows how to define an ARP access list and to permit both... of 1.1.1.1 and a MAC address of 0000.0000.abcd: Switch(config)# arp access-list static-hosts Switch(config-arp-nacl)# permit ip host 1.1.1.1 mac host 00001.0000.abcd Switch(config-arp-nacl)# end You can verify your settings by entering the show arp access-...
...list privileged EXEC command. Related Commands Command Description deny (ARP access-list Denies an ARP packet based on matches compared against the DHCP configuration) bindings. arp access-list Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Examples This example shows how to define an ARP access list and to permit both... of 1.1.1.1 and a MAC address of 0000.0000.abcd: Switch(config)# arp access-list static-hosts Switch(config-arp-nacl)# permit ip host 1.1.1.1 mac host 00001.0000.abcd Switch(config-arp-nacl)# end You can verify your settings by entering the show arp access-...
Command Reference
Page 102
... an ARP packet based on matches against all ARP packets. Syntax Description request ip any IP or MAC address. Deny a specific sender MAC address. Deny the specified target IP address. Deny any host sender-ip sender-ip sender-ip-mask mac host sender-mac sender-mac sender-mac-mask response ip host target-ip target-ip target-ip-mask mac host...
... an ARP packet based on matches against all ARP packets. Syntax Description request ip any IP or MAC address. Deny a specific sender MAC address. Deny the specified target IP address. Deny any host sender-ip sender-ip sender-ip-mask mac host sender-mac sender-mac sender-mac-mask response ip host target-ip target-ip target-ip-mask mac host...
Command Reference
Page 103
Permits an ARP packet based on matching criteria. Permits ARP requests and responses from a host with a static IP address. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (ARP access-list configuration) Command History Release 12.2(20)SE Modification This command was ...Displays detailed information about ARP access lists. 78-16405-05 Catalyst 3560 Switch Command Reference 2-71 Related Commands Command arp access-list ip arp inspection filter vlan permit (ARP access-list configuration) show arp access-list privileged EXEC command. Examples This example shows how...
Permits an ARP packet based on matching criteria. Permits ARP requests and responses from a host with a static IP address. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (ARP access-list configuration) Command History Release 12.2(20)SE Modification This command was ...Displays detailed information about ARP access lists. 78-16405-05 Catalyst 3560 Switch Command Reference 2-71 Related Commands Command arp access-list ip arp inspection filter vlan permit (ARP access-list configuration) show arp access-list privileged EXEC command. Examples This example shows how...
Command Reference
Page 111
... extended access list: Switch(config-ext-macl)# no matches, the packets are matched. Permits non-IP traffic to MAC address 00c0.00a0.03fa. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (MAC access-list configuration) Usage Guidelines You enter MAC-access list configuration mode ...show access-lists Description Creates an access list based on a switch. 78-16405-05 Catalyst 3560 Switch Command Reference 2-79 For more information about named MAC extended access lists, see the software configuration guide for non-IP traffic. Examples This example shows how to define...
... extended access list: Switch(config-ext-macl)# no matches, the packets are matched. Permits non-IP traffic to MAC address 00c0.00a0.03fa. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands deny (MAC access-list configuration) Usage Guidelines You enter MAC-access list configuration mode ...show access-lists Description Creates an access list based on a switch. 78-16405-05 Catalyst 3560 Switch Command Reference 2-79 For more information about named MAC extended access lists, see the software configuration guide for non-IP traffic. Examples This example shows how to define...
Command Reference
Page 158
...other features being configured might have an IP address assigned to reallocate system hardware resources based on the switch. Examples This example shows how to configure the IP address for a port on a subnetted network: Switch(config)# interface vlan 1 Switch(config-if)# ip address 172.20.128.2 255.255.....0 You can configure is disabled, and the BOOTP or the DHCP server cannot reassign the address. ip address Chapter 2 Catalyst 3560 Switch Cisco IOS Commands If your switch receives its IP address from a Bootstrap Protocol (BOOTP) or a DHCP server and you can verify your settings by...
...other features being configured might have an IP address assigned to reallocate system hardware resources based on the switch. Examples This example shows how to configure the IP address for a port on a subnetted network: Switch(config)# interface vlan 1 Switch(config-if)# ip address 172.20.128.2 255.255.....0 You can configure is disabled, and the BOOTP or the DHCP server cannot reassign the address. ip address Chapter 2 Catalyst 3560 Switch Cisco IOS Commands If your switch receives its IP address from a Bootstrap Protocol (BOOTP) or a DHCP server and you can verify your settings by...
Command Reference
Page 160
Permits an ARP packet based on matches against the DHCP bindings. Related Commands Command arp access-list deny (ARP access-list configuration) permit (ARP access-list configuration) show arp access-list show ip arp inspection vlan 1 privileged EXEC command. Displays detailed information about ARP access lists....1 You can verify your settings by entering the show inventory vlan vlan-range Description Defines an ARP ACL. ip arp inspection filter vlan Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Examples This example shows how to apply the ARP ACL static-hosts to VLAN 1 for the ...
Permits an ARP packet based on matches against the DHCP bindings. Related Commands Command arp access-list deny (ARP access-list configuration) permit (ARP access-list configuration) show arp access-list show ip arp inspection vlan 1 privileged EXEC command. Displays detailed information about ARP access lists....1 You can verify your settings by entering the show inventory vlan vlan-range Description Defines an ARP ACL. ip arp inspection filter vlan Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Examples This example shows how to apply the ARP ACL static-hosts to VLAN 1 for the ...
Command Reference
Page 170
... bindings. • none-Do not log packets that are logged per VLAN. The keywords have these meanings: • matchlog-Log packets based on access control list (ACL) none} matches. You can specify a single VLAN identified by VLAN ID number, a range of VLANs separated...| permit}} no form of packets is running the IP services image, formerly known as the enhanced multilayer image (EMI). ip arp inspection vlan logging Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan logging Use the ip arp inspection vlan logging global configuration command to control...
... bindings. • none-Do not log packets that are logged per VLAN. The keywords have these meanings: • matchlog-Log packets based on access control list (ACL) none} matches. You can specify a single VLAN identified by VLAN ID number, a range of VLANs separated...| permit}} no form of packets is running the IP services image, formerly known as the enhanced multilayer image (EMI). ip arp inspection vlan logging Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan logging Use the ip arp inspection vlan logging global configuration command to control...
Command Reference
Page 176
... If you store a binding file on a VLAN. Related Commands Command ip dhcp snooping ip dhcp snooping binding show ip dhcp snooping database privileged EXEC command. ip dhcp snooping database Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines The DHCP snooping binding database can have limited storage ...continues to try the transfer indefinitely. This might be present on network-based URLs (such as TFTP and FTP) before the switch can first write bindings to the binding file at an IP address of DHCP snooping database agent. 2-144 Catalyst 3560 Switch Command Reference...
... If you store a binding file on a VLAN. Related Commands Command ip dhcp snooping ip dhcp snooping binding show ip dhcp snooping database privileged EXEC command. ip dhcp snooping database Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines The DHCP snooping binding database can have limited storage ...continues to try the transfer indefinitely. This might be present on network-based URLs (such as TFTP and FTP) before the switch can first write bindings to the binding file at an IP address of DHCP snooping database agent. 2-144 Catalyst 3560 Switch Command Reference...
Command Reference
Page 199
...Notification (TCN) behavior. Usage Guidelines Use ip igmp snooping tcn flood query count global configuration command to the default settings. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping tcn ip igmp snooping tcn Use the ip igmp snooping tcn global configuration command to send... caused during a TCN event. Examples This example shows how to the TCN event lasts until 7 general queries are relearned based on the general queries received during a TCN event. Command Modes Global configuration Command History Release 12.2(25)SEB Modification This command...
...Notification (TCN) behavior. Usage Guidelines Use ip igmp snooping tcn flood query count global configuration command to the default settings. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip igmp snooping tcn ip igmp snooping tcn Use the ip igmp snooping tcn global configuration command to send... caused during a TCN event. Examples This example shows how to the TCN event lasts until 7 general queries are relearned based on the general queries received during a TCN event. Command Modes Global configuration Command History Release 12.2(25)SEB Modification This command...
Command Reference
Page 207
...You can verify your switch is based on the switch. Specify a VLAN number. Usage Guidelines A static IP source binding entry has an IP address, its associated MAC address, and its associated VLAN number. Syntax Description mac-address vlan vlan-id ip-address interface interface-id Specify ...This command was introduced. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip source binding ip source binding Use the ip source binding global configuration command to add or delete an IP source binding. The entry is running the IP services image, formerly known as the enhanced multilayer ...
...You can verify your switch is based on the switch. Specify a VLAN number. Usage Guidelines A static IP source binding entry has an IP address, its associated MAC address, and its associated VLAN number. Syntax Description mac-address vlan vlan-id ip-address interface interface-id Specify ...This command was introduced. Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip source binding ip source binding Use the ip source binding global configuration command to add or delete an IP source binding. The entry is running the IP services image, formerly known as the enhanced multilayer ...
Command Reference
Page 212
...cannot share the same name. ipv6 access-list Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 access-list Use the ipv6 access-list global configuration command to define an IPv6 access list and to the ip access-list command, except that it is defined. Command Modes Global configuration ...-and-ipv6 {default | vlan) global configuration command and reload the switch. See the "Examples" section for more information on filtering IPv6 traffic based on the switch. ipv6 access-list access-list-name no form of the IPv6 access list. To remove the access list, use the no...
...cannot share the same name. ipv6 access-list Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ipv6 access-list Use the ipv6 access-list global configuration command to define an IPv6 access list and to the ip access-list command, except that it is defined. Command Modes Global configuration ...-and-ipv6 {default | vlan) global configuration command and reload the switch. See the "Examples" section for more information on filtering IPv6 traffic based on the switch. ipv6 access-list access-list-name no form of the IPv6 access list. To remove the access list, use the no...
Command Reference
Page 244
...the permit (MAC access-list configuration) command. mac access-list extended Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac access-list extended Use the mac access-list extended global configuration command to the ...in the extended MAC access-list configuration mode. For more information, see the software configuration guide for non-IP traffic. Use the no : negates a command or sets its default. • deny: specifies packets ... this command to return to create an access list based on MAC addresses for this command puts you cannot apply named MAC extended ACLs to reject.
...the permit (MAC access-list configuration) command. mac access-list extended Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mac access-list extended Use the mac access-list extended global configuration command to the ...in the extended MAC access-list configuration mode. For more information, see the software configuration guide for non-IP traffic. Use the no : negates a command or sets its default. • deny: specifies packets ... this command to return to create an access list based on MAC addresses for this command puts you cannot apply named MAC extended ACLs to reject.
Command Reference
Page 286
... internal DSCP value to enable DSCP transparency. If DSCP transparency is enabled, the outgoing DSCP value is disabled. Defaults DSCP transparency is based on the quality of service (QoS) configuration, including the port trust setting, policing and marking, and the DSCP-to change the ...) the Differentiated Services Code Point (DSCP) field of the traffic. mls qos rewrite ip dscp Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos rewrite ip dscp Use the mls qos rewrite ip dscp global configuration command to configure the switch to -DSCP mutation map. If DSCP transparency...
... internal DSCP value to enable DSCP transparency. If DSCP transparency is enabled, the outgoing DSCP value is disabled. Defaults DSCP transparency is based on the quality of service (QoS) configuration, including the port trust setting, policing and marking, and the DSCP-to change the ...) the Differentiated Services Code Point (DSCP) field of the traffic. mls qos rewrite ip dscp Chapter 2 Catalyst 3560 Switch Cisco IOS Commands mls qos rewrite ip dscp Use the mls qos rewrite ip dscp global configuration command to configure the switch to -DSCP mutation map. If DSCP transparency...
Command Reference
Page 316
...should be enabled only on all ports configured as a member of group remains a member of IP multicast group 228.1.23.4: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# mvr vlan1 group 230... 3560 Switch Command Reference 78-16405-05 mvr (interface configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines Configure a port as a source port if that port should be ... using IGMP join messages. When operating in dynamic mode, it sends out an IGMP MAC-based query on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mvr immediate This...
...should be enabled only on all ports configured as a member of group remains a member of IP multicast group 228.1.23.4: Switch(config)# interface gigabitethernet0/2 Switch(config-if)# mvr vlan1 group 230... 3560 Switch Command Reference 78-16405-05 mvr (interface configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands Usage Guidelines Configure a port as a source port if that port should be ... using IGMP join messages. When operating in dynamic mode, it sends out an IGMP MAC-based query on a port: Switch(config)# interface gigabitethernet0/1 Switch(config-if)# mvr immediate This...
Command Reference
Page 318
... learning on which it is not important on the physical port within the EtherChannel. pagp learn-method Chapter 2 Catalyst 3560 Switch Cisco IOS Commands pagp learn-method Use the pagp learn-method interface configuration command to the source using any of the ports in the...sends packets to learn -method physical-port interface configuration command and to set the load-distribution method based on the switch hardware, but they are required for a particular destination MAC or IP address. The other end of the link. pagp learn-method {aggregation-port | physical-port} ...
... learning on which it is not important on the physical port within the EtherChannel. pagp learn-method Chapter 2 Catalyst 3560 Switch Cisco IOS Commands pagp learn-method Use the pagp learn-method interface configuration command to the source using any of the ports in the...sends packets to learn -method physical-port interface configuration command and to set the load-distribution method based on the switch hardware, but they are required for a particular destination MAC or IP address. The other end of the link. pagp learn-method {aggregation-port | physical-port} ...
Command Reference
Page 322
... no form of this command to permit an ARP packet based on matches against all ARP packets. Syntax Description request (Optional) Requests a match for the ARP responses. host sender-ip Accept the specified sender IP address. host sender-mac Accept the specified sender MAC address...-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac sender-mac-mask} [{any IP or MAC address. permit (ARP access-list configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP ...
... no form of this command to permit an ARP packet based on matches against all ARP packets. Syntax Description request (Optional) Requests a match for the ARP responses. host sender-ip Accept the specified sender IP address. host sender-mac Accept the specified sender MAC address...-mac-mask} | response ip {any | host sender-ip | sender-ip sender-ip-mask} [{any | host target-ip | target-ip target-ip-mask}] mac {any | host sender-mac | sender-mac sender-mac-mask} [{any IP or MAC address. permit (ARP access-list configuration) Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP ...
Command Reference
Page 323
...Denies an ARP packet based on some matching criteria. Related Commands Command arp access-list deny (ARP access-list configuration) ip arp inspection filter vlan show arp access-list privileged EXEC command. Permits ARP requests and responses from a host configured with an IP address of 1.1.1.1 and... by entering the show arp access-list Description Defines an ARP access control list (ACL). Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP access-list configuration) Command Modes ARP access-list configuration Command History Release 12.2(20)SE Modification This...
...Denies an ARP packet based on some matching criteria. Related Commands Command arp access-list deny (ARP access-list configuration) ip arp inspection filter vlan show arp access-list privileged EXEC command. Permits ARP requests and responses from a host configured with an IP address of 1.1.1.1 and... by entering the show arp access-list Description Defines an ARP access control list (ACL). Chapter 2 Catalyst 3560 Switch Cisco IOS Commands permit (ARP access-list configuration) Command Modes ARP access-list configuration Command History Release 12.2(20)SE Modification This...