Table Of Contents
clear mac-address-table dynamic
match (access map configuration)
match (class-map configuration)
permit (MAC-access list configuration)
Cisco IOS Commands
abort
Use the abort VLAN configuration command to abandon the proposed new virtual LAN (VLAN) database, exit VLAN configuration mode, and return to privileged EXEC mode.
abort
Syntax Description
This command has no arguments or keywords.
Defaults
No default is defined.
Command Modes
VLAN configuration
Command History
Usage Guidelines
If you have added, deleted, or modified VLAN parameters in VLAN configuration mode but you do not want to keep the changes, the abort command causes all the changes to be abandoned. The VLAN configuration that was running before you entered VLAN configuration mode continues to be used.
Examples
The following example shows how to abandon the proposed new VLAN database and exit to the privileged EXEC mode:
Switch(vlan)# abortSwitch#You can verify that no VLAN database changes occurred by entering the show vlan brief privileged EXEC command.
Related Commands
action
Use the action access map configuration command to set the action for the virtual LAN (VLAN) access map entry. Use the no form of this command to set the action to the default value, which is to forward. The drop and forward parameters are not used in the no form of the command.
action {drop | forward}
no action
Syntax Description
drop
Drop the packet when the specified conditions are matched.
forward
Forward the packet when the specified conditions are matched.
Defaults
The default action is to forward packets.
Command Modes
Access map configuration
Command History
Usage Guidelines
If the action is drop, you should define the access map, including configuring any access control list (ACL) names in match clauses, before applying the map to a VLAN, or all packets could be dropped.
In access map configuration mode, use the match command to define the match conditions for a VLAN map. Use the action command to set the action that occurs when a packet matches the conditions.
Examples
The following example shows how to identify and apply a VLAN access map vmap4 to VLANs 5 and 6 that causes the VLAN to drop an IP packet if the packet matches the conditions defined in access list al2:
Switch(config)# vlan access-map vmap4Switch(config-access-m)# match ip address al2Switch(config-access-m)# action dropSwitch(config-access-m)# exitSwitch(config)# vlan filter vmap4 vlan-list 5-6You can verify the previous command by entering the show vlan access-map user EXEC command.
Related Commands
apply
Use the apply VLAN configuration command to implement the proposed new virtual LAN (VLAN) database, increment the database configuration revision number, propagate it throughout the administrative domain, and remain in VLAN configuration mode.
apply
Syntax Description
This command has no arguments or keywords.
Defaults
No default is defined.
Command Modes
VLAN configuration
Command History
Usage Guidelines
The apply command implements the configuration changes that you made after you entered VLAN configuration mode and uses them for the running configuration. This command keeps you in VLAN configuration mode.
You cannot use this command when the switch is in the VLAN Trunk Protocol (VTP) client mode.
Examples
The following example shows how to implement the proposed new VLAN database and recognize it as the current database:
Switch(vlan)# applyYou can verify the VLAN database changes by entering the show vlan privileged EXEC command.
Related Commands
archive download-sw
Use the archive download-sw privileged EXEC command to download a new image to the switch and overwrite or keep the existing image.
archive download-sw {/force-reload | /imageonly | /leave-old-sw | /no-set-boot | /overwrite | /reload | /safe} source-url
Syntax Description
Defaults
The current software image is not overwritten with the downloaded image.
Both the software image and HTML files are downloaded.
The new image is downloaded to the flash: file system.
The BOOT environment variable is changed to point to the new software image on the flash: file system.
Image names are case sensitive; the image file is provided in tar format.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Use the /overwrite option to overwrite the image on the Flash device with the downloaded one.
If the Flash device has sufficient space to hold two images and you want to overwrite one of these images with the same version, you must specify the /overwrite option.
If you specify the command without the /overwrite option, the download algorithm verifies that the new image is not the same as the one on the switch flash device. If the images are the same, the download does not occur. If the images are different, the old image is deleted, and the new one is downloaded.
The /imageonly option removes the HTML files for the existing image if the existing image is being removed or replaced. Only the IOS image (without the HTML files) is downloaded.
Using the /safe or /leave-old-sw option can cause the new image download to fail if there is insufficient Flash space.
If you used the /leave-old-sw option and did not overwrite the old image when you downloaded the new one, you can remove the old image by using the delete privileged EXEC command. For more information, see the "delete" section.
If you leave the existing software in place before downloading the new image, an error results if the existing software will prevent the new image from fitting onto Flash memory.
After downloading a new image, enter the reload privileged EXEC command to begin using the new image, or specify the /reload or /force-reload option in the archive download-sw command.
Examples
The following example shows how to download a new image from a TFTP server at 172.20.129.10 and overwrite the image on the switch:
Switch# archive download-sw /overwrite tftp://172.20.129.10/test-image.tarThe following example shows how to download only the software image from a TFTP server at 172.20.129.10 to the switch:
Switch# archive download-sw /image-only tftp://172.20.129.10/test-image.tarThe following example shows how to keep the old software version after a successful download:
Switch# archive download-sw /leave-old-sw tftp://172.20.129.10/test-image.tarRelated Commands
archive tar
Use the archive tar privileged EXEC command to create a tar file, list files in a tar file, or extract the files from a tar file.
archive tar {/create destination-url flash:/file-url} | {/table source-url} | {/xtract source-url flash:/file-url}
Syntax Description
Defaults
None
Command Modes
Privileged EXEC
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
Image names are case sensitive.
Examples
The following example shows how to create a tar file. The command writes the contents of the new-configs directory on the local Flash device to a file named saved.tar on the TFTP server at 172.20.10.30:
Switch# archive tar /create tftp:172.20.10.30/saved.tar flash:/new-configsThe following example shows how to display the contents of the c3550-tv0-m.tar file that is in Flash memory. The contents of the tar file are displayed on the screen:
Switch# archive tar /table flash:c3550-tv0-m.tarinfo (219 bytes)c3550-tv0-mz-121/ (directory)c3550-tv0-mz-121/html/ (directory)c3550-tv0-mz-121/html/foo.html (0 bytes)c3550-tv0-mz-121/vegas-tv0-mz-121.bin (610856 bytes)c3550-tv0-mz-121/info (219 bytes)info.ver (219 bytes)The following example shows how to display only the c3550-tv0-mz-121/html directory and its contents:
Switch# archive tar /table flash:c3550-tv0-m.tar c3550-tv0-mz-121/htmlc3550-tv0-mz-121/html/ (directory)c3550-tv0-mz-121/html/foo.html (0 bytes)The following example shows how to extract the contents of a tar file on the TFTP server at 172.20.10.30. This command extracts just the new-configs directory into the root directory on the local Flash file system. The remaining files in the saved.tar file are ignored.
Switch# archive tar /xtract tftp:/172.20.10.30/saved.tar flash:/ new-configsRelated Commands
archive download-sw
Downloads a new image to the switch.
archive upload-sw
Uploads an existing image on the switch to a server.
archive upload-sw
Use the archive upload-sw privileged EXEC command to upload an existing switch image to a server.
archive upload-sw [/version version_string] destination-url
Syntax Description
Defaults
Uploads the currently running image from the flash: file system.
Command Modes
Privileged EXEC
Command History
Usage Guidelines
The upload feature is available only if the HTML files associated with the Cluster Management Suite (CMS) have been installed with the existing image.
The files are uploaded in this sequence: info, the IOS image, the HTML files, and info.ver. After these files are uploaded, the software creates the tar file.
Image names are case sensitive.
Examples
The following example shows how to upload the currently running image to a TFTP server at 172.20.140.2:
Switch# archive upload-sw tftp://172.20.140.2/test-image.tarRelated Commands
archive download-sw
Downloads a new image to the switch.
archive tar
Creates a tar file, lists the files in the tar file, or extracts the files from a tar file.
boot boothlpr
Use the boot boothlpr global configuration command to load a special IOS image, which when loaded into memory, can load a second IOS image into memory and launch it. This variable is used only for internal development and testing. Use the no form of this command to return to the default setting.
boot boothlpr filesystem:/file-url
no boot boothlpr
Syntax Description
filesystem:
Alias for a Flash file system. Use flash: for the system board Flash device.
/file-url
The path (directory) and name of a bootable helper image.
Defaults
No helper image is loaded.
Command Modes
Global configuration
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
This command changes the setting of the BOOTHLPR environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot buffersize
Use the boot buffersize global configuration command to specify the size of the file system-simulated nonvolatile RAM (NVRAM) in Flash memory. The buffer holds a copy of the configuration file in memory. Use the no form of this command to return to the default setting.
boot buffersize size
no boot buffersize
Syntax Description
Defaults
The default is 32 KB.
Command Modes
Global configuration
Command History
Usage Guidelines
The configuration file cannot be larger than the buffer size allocation.
This command changes the setting of the CONFIG_BUFSIZE environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot config-file
Use the boot config-file global configuration command to specify the filename that IOS uses to read and write a nonvolatile copy of the system configuration. Use the no form of this command to return to the default setting.
boot config-file flash:/file-url
no boot config-file
Syntax Description
Defaults
The default configuration file is flash:config.text.
Command Modes
Global configuration
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
This command changes the setting of the CONFIG_FILE environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot enable-break
Use the boot enable-break global configuration command to enable interrupting the automatic boot process. Use the no form of this command to return to the default setting.
boot enable-break
no boot enable-break
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled. The automatic boot process cannot be interrupted by pressing the Break key on the console.
Command Modes
Global configuration
Command History
Usage Guidelines
When you enter this command, you can interrupt the automatic boot process by pressing the Break key on the console after the Flash file system is initialized.
Note
Despite the setting of this command, you can interrupt the automatic boot process at any time by pressing the MODE button on the switch front panel.
This command changes the setting of the ENABLE_BREAK environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot helper
Use the boot helper global configuration command to dynamically load files during boot loader initialization to extend or patch the functionality of the boot loader. Use the no form of this command to return to the default.
boot helper filesystem:/file-url ...
no boot helper
Syntax Description
Defaults
No helper files are loaded.
Command Modes
Global configuration
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
This command changes the setting of the HELPER environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot helper-config-file
Use the boot helper-config-file global configuration command to specify the name of the configuration file to be used by the IOS helper image. If this is not set, the file specified by the CONFIG_FILE environment variable is used by all version of IOS that are loaded. This variable is used only for internal development and testing. Use the no form of this command to return to the default setting.
boot helper-config-file filesystem:/file-url
no boot helper-config file
Syntax Description
filesystem:
Alias for a Flash file system. Use flash: for the system board Flash device.
/file-url
The path (directory) and helper configuration file to load.
Defaults
No helper configuration file is specified.
Command Modes
Global configuration
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
This command changes the setting of the HELPER_CONFIG_FILE environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot manual
Use the boot manual global configuration command to enable manually booting the switch during the next boot cycle. Use the no form of this command to return to the default setting.
boot manual
no boot manual
Syntax Description
This command has no arguments or keywords.
Defaults
Manual booting is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
The next time you reboot the system, the switch is in boot loader mode, which is shown by the loader: prompt. To boot the system, use the boot boot loader command, and specify the name of the bootable image.
This command changes the setting of the MANUAL_BOOT environment variable. For more information, see "Boot Loader Commands."
Related Commands
boot system
Use the boot system global configuration command to specify the IOS image to load during the next boot cycle. Use the no form of this command to return to the default setting.
boot system filesystem:/file-url ...
no boot system
Syntax Description
filesystem:
Alias for a Flash file system. Use flash: for the system board Flash device.
/file-url
The path (directory) and name of a bootable image. Separate image names with a semicolon.
Defaults
The switch attempts to automatically boot the system by using information in the BOOT environment variable. If this variable is not set, the switch attempts to load and execute the first executable image it can by performing a recursive, depth-first search throughout the Flash file system. In a depth-first search of a directory, each encountered subdirectory is completely searched before continuing the search in the original directory.
Command Modes
Global configuration
Command History
Usage Guidelines
Filenames and directory names are case sensitive.
If you are using the archive download-sw privileged EXEC command to maintain system images, you never need to use the boot system command. The boot system command is automatically manipulated to load the downloaded image.
This command changes the setting of the BOOT environment variable. For more information, see "Boot Loader Commands."
Related Commands
channel-group
Use the channel-group interface configuration command to assign an Ethernet interface to an EtherChannel group. Use the no form of this command to remove an Ethernet interface from an EtherChannel group.
channel-group channel-group-number mode {auto [non-silent] | desirable [non-silent] | on}
no channel-group
Syntax Description
Defaults
No channel groups are assigned.
The default mode is auto and silent.
Command Modes
Interface configuration
Command History
Usage Guidelines
You do not have to create a port-channel interface before assigning a physical interface to a channel group. A port-channel interface is created automatically when the channel group gets its first physical interface, if it is not already created.
You do not have to disable the IP address that is assigned to a physical interface that is part of a channel group, but we highly recommend that you do so.
You can create both Layer 2 and Layer 3 port channels by entering the interface port-channel global configuration command or when the channel group gets its first physical interface assignment. The port channels are not created at runtime or dynamically.
Any configuration or attribute changes you make to the port-channel interface are propagated to all interfaces within the same channel group as the port channel (for example, configuration changes are also propagated to the physical interfaces that are not part of the port channel, but are part of the channel group).
With the on mode, a usable EtherChannel exists only when a port group in on mode is connected to another port group in on mode.
If you do not specify non-silent with the auto or desirable mode, silent is assumed. The silent mode is used when the switch is connected to a device that is not PAgP-capable and seldom, if ever, transmits packets. A example of a silent partner is a file server or a packet analyzer that is not generating traffic. In this case, running PAgP on a physical port prevents that port from ever becoming operational; however, it allows PAgP to operate, to attach the interface to a channel group, and to use the interface for transmission. Both ends of the link cannot be set to silent.
Caution
Caution
Examples
The following example shows how to add an interface to the EtherChannel group specified as channel group 1:
Switch(config)# interface gigabitethernet0/1Switch(config-if)# channel-group 1 mode onYou can verify the previous commands by entering the show running-config privileged EXEC command.
Related Commands
interface port-channel
Accesses or creates the port channel.
show running-config
Displays the current operating configuration.
class
Use the class policy-map configuration command to define a traffic classification for the policy to act on using the class map name, access-group, Differentiated Services Code Point (DSCP), or IP precedence. Use the no form of this command to delete an existing class map.
class class-map-name [access-group acl-index-or-name | dscp dscp-list | precedence ip-precedence-list]
no class class-map-name
Syntax Description
Note
Defaults
No policy map class-maps are defined.
Command Modes
Policy-map configuration
Command History
Usage Guidelines
Use the policy-map global configuration command to identify the policy map and to enter policy-map configuration mode before you use the class command. After you specify a policy map, you can configure a policy for new classes or modify a policy for any existing classes in that policy map. You attach the policy map to an interface by using the service-policy interface configuration command; however, you cannot attach one that uses an ACL classification to the egress direction.
The class name that you specify in the policy map ties the characteristics for that class to the class map and its match criteria as configured by using the class-map global configuration command.
The class command performs the same function as the class-map global configuration command. Use the class command when a new classification, which is not shared with any other ports, is needed. Use the class-map command when the map is shared among many ports.
After issuing the class command, you enter policy-map class configuration mode. When you are in this mode, these configuration commands are available:
•
•
•
•
•
•
To return to policy-map configuration mode, use the exit command. To return to privileged EXEC mode, use the end command.
Examples
The following example shows how to create a policy map called policy1. When attached to the ingress direction, it matches all the incoming traffic defined in class1 and polices the traffic at an average rate of 1 Mbps and bursts at 2 MB. Traffic exceeding the profile is marked down to a DSCP value obtained from the policed-DSCP map and then transmitted.
Switch(config)# policy-map policy1Switch(config-pmap)# class class1Switch(config-pmap-c)# police 100000 20000 exceed-action policed-dscp-transmitSwitch(config-pmap)# exitThe following example shows how to configure multiple classes in a policy map called policymap2.
Switch(config)# policy-map policy2Switch(config-pmap)# class class1Switch(config-pmap-c)# police 100000 20000 exceed-action policed-dscp-transmitSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class2 access-group fire1Switch(config-pmap-c)# police 100000 20000 exceed-action dropSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class3 dscp 50 51 52Switch(config-pmap-c)# police 100000 20000 exceed-action dropSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class4 precedence 0 1 2Switch(config-pmap-c)# police 100000 20000 exceed-action policed-dscp-transmitSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class5 dscp 60 61 62Switch(config-pmap-c)# set dscp 0 (no policer)Switch(config-pmap-c)# exitYou can verify the previous commands by entering the show policy-map user EXEC command.
Related Commands
class-map
Use the class-map global configuration command to create a class map to be used for matching packets to the class whose name you specify and to enter class-map configuration mode. Use the no form of this command to delete an existing class map and return to global configuration mode.
class-map class-map-name [match-all | match-any]
no class-map class-map-name [match-all | match-any]
Syntax Description
Defaults
No class maps are defined.
When neither the match-all or match-any keyword is specified, the default is match-all.
Command Modes
Global configuration
Command History
Usage Guidelines
Use this command to specify the name of the class for which you want to create or modify class-map match criteria and to enter class-map configuration mode. In this mode, you can enter one match command to configure the match criteria for this class.
The class-map command and its subcommands are used to define packet classification, marking, and aggregate policing as part of a globally named service policy applied on a per-interface basis.
Once you are in quality of service (QoS) class-map configuration mode, these configuration commands are available:
•
•
•
Only one match criteria per class map is supported. For example, when defining a class map, only one match command can be issued.
Because only one match command per class map is supported, the match-all and match-any keywords function the same.
Only one access control list (ACL) can be configured in a class map. The ACL can have multiple access control entries (ACEs).
Examples
The following example shows how to configure the class map called class1. class1 has one match criteria, which is an access list called 103.
Switch(config)# access-list 103 permit any any dscp 10Switch(config)# class-map class1Switch(config-cmap)# match access-group 103Switch(config-cmap)# exitThe following example shows how to delete the class map class1:
Switch(config)# no class-map class1You can verify the previous commands by entering the show class-map user EXEC command.
Related Commands
clear mac-address-table dynamic
Use the clear mac-address-table dynamic privileged EXEC command to delete from the MAC address table a specific dynamic address, all dynamic addresses on a particular interface, or all dynamic addresses on a particular VLAN.
clear mac-address-table dynamic [address mac-addr | interface interface-id | vlan vlan-id]
Syntax Description
Command Modes
Privileged EXEC
Command History
Examples
The following example shows how to remove a specific MAC address from the dynamic address table:
Switch# clear mac-address-table dynamic address 0008.0070.0007You can verify the previous command by entering the show mac-address-table privileged EXEC command.
Related Commands
clear pagp
Use the
