CLI Reference Guide-R05
Table Of Contents
- How to Use This Guide
 - Contents
 - Tables
 - Getting Started
- Initial Switch Configuration
- Connecting to the Switch
 - Configuring the Switch for Remote Management
 - Configuring the Switch for Cloud Management
 - Enabling SNMP Management Access
 - Managing System Files
 - Installing a Port License File
 - Automatic Installation of Operation Code and Configuration Settings
 - Downloading a Configuration File and Other Parameters from a DHCP Server
 - Setting the System Clock
 
 
 - Initial Switch Configuration
 - Command Line Interface
- Using the Command Line Interface
 - General Commands
 - System Management Commands
 - SNMP Commands
 - Remote Monitoring Commands
 - Flow Sampling Commands
 - Authentication Commands
 - General Security Measures
- Port Security
 - Network Access (MAC Address Authentication)
- network-access aging
 - network-access mac-filter
 - mac-authentication reauth-time
 - network-access dynamic-qos
 - network-access dynamic-vlan
 - network-access guest-vlan
 - network-access max- mac-count
 - network-access mode mac-authentication
 - network-access port- mac-filter
 - mac-authentication intrusion-action
 - mac-authentication max-mac-count
 - clear network-access
 - show network-access
 - show network-access mac-address-table
 - show network-access mac-filter
 
 - Web Authentication
 - DHCPv4 Snooping
- ip dhcp snooping
 - ip dhcp snooping information option
 - ip dhcp snooping information option encode no-subtype
 - ip dhcp snooping information option remote-id
 - ip dhcp snooping information option tr101 board-id
 - ip dhcp snooping information policy
 - ip dhcp snooping verify mac-address
 - ip dhcp snooping vlan
 - ip dhcp snooping information option circuit-id
 - ip dhcp snooping max-number
 - ip dhcp snooping trust
 - clear ip dhcp snooping binding
 - clear ip dhcp snooping database flash
 - ip dhcp snooping database flash
 - show ip dhcp snooping
 - show ip dhcp snooping binding
 
 - IPv4 Source Guard
 - ARP Inspection
- ip arp inspection
 - ip arp inspection filter
 - ip arp inspection log-buffer logs
 - ip arp inspection validate
 - ip arp inspection vlan
 - ip arp inspection limit
 - ip arp inspection trust
 - show ip arp inspection configuration
 - show ip arp inspection interface
 - show ip arp inspection log
 - show ip arp inspection statistics
 - show ip arp inspection vlan
 
 - Denial of Service Protection
 - Port-based Traffic Segmentation
 
 - Access Control Lists
 - Interface Commands
 - Link Aggregation Commands
 - Port Mirroring Commands
 - Congestion Control Commands
 - Loopback Detection Commands
 - Address Table Commands
 - Smart Pair Commands
 - Spanning Tree Commands
- spanning-tree
 - spanning-tree cisco-prestandard
 - spanning-tree forward-time
 - spanning-tree hello-time
 - spanning-tree max-age
 - spanning-tree mode
 - spanning-tree mst configuration
 - spanning-tree pathcost method
 - spanning-tree priority
 - spanning-tree system-bpdu-flooding
 - spanning-tree tc-prop
 - spanning-tree transmission-limit
 - max-hops
 - mst priority
 - mst vlan
 - name
 - revision
 - spanning-tree bpdu-filter
 - spanning-tree bpdu-guard
 - spanning-tree cost
 - spanning-tree edge-port
 - spanning-tree link-type
 - spanning-tree loopback-detection
 - spanning-tree loopback-detection action
 - spanning-tree loopback-detection release-mode
 - spanning-tree loopback-detection trap
 - spanning-tree mst cost
 - spanning-tree mst port-priority
 - spanning-tree port-bpdu-flooding
 - spanning-tree port-priority
 - spanning-tree root-guard
 - spanning-tree spanning-disabled
 - spanning-tree tc-prop-stop
 - spanning-tree loopback-detection release
 - spanning-tree protocol-migration
 - show spanning-tree
 - show spanning-tree mst configuration
 - show spanning-tree tc-prop
 
 - VLAN Commands
 - Class of Service Commands
 - Quality of Service Commands
 - Multicast Filtering Commands
- IGMP Snooping
- ip igmp snooping
 - ip igmp snooping priority
 - ip igmp snooping proxy-reporting
 - ip igmp snooping querier
 - ip igmp snooping router-alert-option- check
 - ip igmp snooping router-port- expire-time
 - ip igmp snooping tcn-flood
 - ip igmp snooping tcn-query-solicit
 - ip igmp snooping unregistered-data- flood
 - ip igmp snooping unsolicited-report- interval
 - ip igmp snooping version
 - ip igmp snooping version-exclusive
 - ip igmp snooping vlan general-query- suppression
 - ip igmp snooping vlan immediate-leave
 - ip igmp snooping vlan last-memb-query- count
 - ip igmp snooping vlan last-memb-query- intvl
 - ip igmp snooping vlan mrd
 - ip igmp snooping vlan proxy-address
 - ip igmp snooping vlan query-interval
 - ip igmp snooping vlan query-resp-intvl
 - ip igmp snooping vlan static
 - clear ip igmp snooping groups dynamic
 - clear ip igmp snooping statistics
 - show ip igmp snooping
 - show ip igmp snooping group
 - show ip igmp snooping mrouter
 - show ip igmp snooping statistics
 
 - Static Multicast Routing
 - IGMP Filtering and Throttling
- ip igmp filter (Global Configuration)
 - ip igmp profile
 - permit, deny
 - range
 - ip igmp filter (Interface Configuration)
 - ip igmp max-groups
 - ip igmp max-groups action
 - ip igmp query-drop
 - ip multicast-data-drop
 - show ip igmp filter
 - show ip igmp profile
 - show ip igmp query-drop
 - show ip igmp throttle interface
 - show ip multicast-data-drop
 
 - MLD Snooping
- ipv6 mld snooping
 - ipv6 mld snooping proxy-reporting
 - ipv6 mld snooping querier
 - ipv6 mld snooping query-interval
 - ipv6 mld snooping query-max-response- time
 - ipv6 mld snooping robustness
 - ipv6 mld snooping router-port- expire-time
 - ipv6 mld snooping unknown-multicast mode
 - ipv6 mld snooping unsolicited-report- interval
 - ipv6 mld snooping version
 - ipv6 mld snooping vlan immediate-leave
 - ipv6 mld snooping vlan mrouter
 - ipv6 mld snooping vlan static
 - clear ipv6 mld snooping groups dynamic
 - clear ipv6 mld snooping statistics
 - show ipv6 mld snooping
 - show ipv6 mld snooping group
 - show ipv6 mld snooping group source-list
 - show ipv6 mld snooping mrouter
 - show ipv6 mld snooping statistics
 
 - MLD Filtering and Throttling
 
 - IGMP Snooping
 - LLDP Commands
- lldp
 - lldp holdtime-multiplier
 - lldp med-fast-start-count
 - lldp notification-interval
 - lldp refresh-interval
 - lldp reinit-delay
 - lldp tx-delay
 - lldp admin-status
 - lldp basic-tlv management-ip- address
 - lldp basic-tlv port-description
 - lldp basic-tlv system-capabilities
 - lldp basic-tlv system-description
 - lldp basic-tlv system-name
 - lldp dot1-tlv proto-ident
 - lldp dot1-tlv proto-vid
 - lldp dot1-tlv pvid
 - lldp dot1-tlv vlan-name
 - lldp dot3-tlv link-agg
 - lldp dot3-tlv mac-phy
 - lldp dot3-tlv max-frame
 - lldp med-location civic-addr
 - lldp med-notification
 - lldp med-tlv inventory
 - lldp med-tlv location
 - lldp med-tlv med-cap
 - lldp med-tlv network-policy
 - lldp notification
 - show lldp config
 - show lldp info local-device
 - show lldp info remote-device
 - show lldp info statistics
 
 - Domain Name Service Commands
 - DHCP Commands
 - IP Interface Commands
 - IP Routing Commands
- Global Routing Configuration
 - Routing Information Protocol (RIP)
- router rip
 - default-information originate
 - default-metric
 - distance
 - maximum-prefix
 - neighbor
 - network
 - passive-interface
 - redistribute
 - timers basic
 - version
 - ip rip authentication mode
 - ip rip authentication string
 - ip rip receive version
 - ip rip receive-packet
 - ip rip send version
 - ip rip send-packet
 - ip rip split-horizon
 - clear ip rip route
 - show ip protocols rip
 - show ip rip
 
 
 
 - Appendices
 - Glossary
 - Commands
 - Index
 
Chapter 2
 | Using the Command Line Interface
Entering Commands
– 70 –
Getting Help
on Commands
You can display a brief description of the help system by entering the help 
command. You can also display command syntax by using the “?” character to list 
keywords or parameters.
Showing Commands
If you enter a “?” at the command prompt, the system will display the first level of 
keywords or command groups. You can also display a list of valid keywords for a 
specific command. For example, the command “show system ?” displays a list of 
possible show commands:
Console#show ?
 cluster Display cluster
 dns DNS information
 dot1q-tunnel 802.1Q tunnel
 sflow Shows the sflow information
 upgrade Shows upgrade information
 access-group Access groups
 access-list Access lists
 accounting Uses the specified accounting list
 arp Information of ARP cache
 authorization Enables EXEC accounting
 bridge-ext Bridge extension information
 cable-diagnostics Shows the information of cable diagnostics
 calendar Date and time information
 class-map Displays class maps
 debug State of each debugging option
 dns DNS information
 dos-protection Shows the system dos-protection summary information
 dot1q-tunnel 802.1Q tunnel
 dot1x 802.1X content
 history Shows history information
 hosts Host information
 interfaces Shows interface information
 ip IP information
 ipv6 IPv6 information
 lacp LACP statistics
 license Show license
 line TTY line information
 lldp LLDP
 log Log records
 logging Logging setting
 loopback-detection Shows loopback detection information
 mac MAC access list
 mac-address-table Configuration of the address table
 mac-vlan MAC-based VLAN information
 management Shows management information
 memory Memory utilization
 network-access Shows the entries of the secure port.
 nlm Show notification log
 ntp Network Time Protocol configuration
 policy-map Displays policy maps
 port Port characteristics
 port-channel Port channel information
 power-save Shows the power saving information
 privilege Shows current privilege level
 process Device process
 protocol-vlan Protocol-VLAN information
 public-key Public key information
 qos Quality of Service
 queue Priority queue information










