|
|
Use the set standbyports command to enable or disable the standby ports feature. The standby ports feature allows the ports on the standby supervisor engine module to pass traffic. If this feature is disabled, the ports are in standby mode.
set standbyports enable | disable
enable | Keyword to enable the standby ports feature. |
disable | Keyword to disable the standby ports feature. |
The default is disabled. However, if upgrading from supervisor engine software release 4.1 or 4.2, the standby ports feature remains enabled.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
This example shows how to enable the standby ports feature:
Console> (enable) set standbyports enable Standby ports feature enabled. Please wait while the standby ports are coming up. Console> (enable)
This example shows how to disable the standby ports feature:
Console> (enable) set standbyports disable Standby ports feature disabled. Console> (enable)
Use the set summertime command to specify whether the system should set the clock ahead one hour during daylight saving time.
set summertime {enable | disable} [zone]
enable | Keyword to cause the system to set the clock ahead one hour during daylight saving time. |
disable | Keyword to prevent the system from setting the clock ahead one hour during daylight saving time. |
zone | (Optional) Time zone used by the set summertime command. |
By default, the set summertime command is disabled.
Switch command.
Privileged.
This command advances the clock one hour at 2:00 a.m. on the first Sunday in April and moves back the clock one hour at 2:00 a.m. on the last Sunday in October.
This example shows how to cause the system to set the clock ahead one hour during daylight saving time:
Console> (enable) set summertime enable PDT Summertime is enabled and set to "PDT". Console> (enable)
This example shows how to prevent the system from setting the clock ahead one hour during daylight saving time:
Console> (enable) set summertime disable Summertime disabled. Console> (enable)
Use the set system baud command to set the console port baud rate.
set system baud rate
rate | Baud rate. Valid rates are 600, 1200, 2400, 4800, 9600, 19200, and 38400. |
The default value is 9600 baud.
Switch command.
Privileged.
This example shows how to set the system baud rate to 19200:
Console> (enable) set system baud 19200 System console port baud rate set to 19200. Console> (enable)
Use the set system contact command to identify a contact person for the system.
set system contact [contact_string]
contact_string | (Optional) Text string that contains the name of the person to contact for system administration. If no contact string is specified, the system contact string is cleared. |
The default configuration has no system contact configured.
Switch command.
Privileged.
This example shows how to set the system contact string:
Console> (enable) set system contact Xena ext.24 System contact set. Console> (enable)
Use the set system location command to identify the location of the system.
set system location [location_string]
location_string | (Optional) Text string that indicates where the system is located. If no location string is specified, the system location is cleared. |
This command has no default setting.
Switch command.
Privileged.
This example shows how to set the system location string:
Console> (enable) set system location Closet 230 4/F System location set. Console> (enable)
Use the set system modem command to enable or disable modem control lines on the console port.
set system modem {enable | disable}
enable | Keyword to activate modem control lines on the console port. |
disable | Keyword to deactivate modem control lines on the console port. |
The default configuration has modem control lines disabled.
Switch command.
Privileged.
This example shows how to enable modem control lines on the console port:
Console> (enable) set system modem enable Modem control lines enabled on console port. Console> (enable)
This example shows how to disable modem control lines on the console port:
Console> (enable) set system modem disable Modem control lines disabled on console port. Console> (enable)
Use the set system name command to configure a name for the system.
set system name [name_string]
name_string | (Optional) Text string that identifies the system. |
The default configuration has no system name configured.
Switch command.
Privileged.
In Catalyst 5000, 2926G, and 2926 series software release 4.1(1) and later, and Catalyst 4000 and 2948G series software release 4.4 and later, if you use the set system name command to assign a name to the switch, the switch name is used as the prompt string. However, if you specify a different prompt string using the set prompt command, that string is used for the prompt. If no name is specified, the system name is cleared
In Catalyst 5000, 2926G, and 2926 series software release 4.1(1) and later, if you do not specify a system name, the system name is cleared, and a DNS lookup is initiated for a system name. If a name is found, that is the name used; if no name is found, no name is designated.
The system name can be 255 characters long, and the prompt can be 20 characters long. The system name is truncated appropriately when used as a prompt; a greater-than symbol (>) is appended to the truncated system name. If the system name was found from a DNS lookup, it is truncated to remove the domain name. If the prompt is obtained using the system name, it is updated whenever the system name changes. You can overwrite this prompt any time by setting the prompt manually. Any change in the prompt is reflected in all current open sessions.
This example shows how to set the system name to Information Systems:
Console> (enable) set system name Information Systems System name set. Console> (enable)
Use the set tacacs attempts command to configure the maximum number of login attempts allowed to the TACACS+ server.
set tacacs attempts count
count | Number of login attempts allowed (1 to 10). |
The default value for this command is 3.
Switch command.
Privileged.
This example shows how to configure the TACACS+ server to allow a maximum of six login attempts:
Console> (enable) set tacacs attempts 6 Tacacs number of attempts set to 6. Console> (enable)
Use the set tacacs directedrequest command to enable or disable the TACACS+ directed-request option. When enabled, you can direct a request to any of the configured TACACS+ servers and only the username is sent to the specified server.
set tacacs directedrequest {enable | disable}
enable | Keyword to send the portion of the address before the @ sign (the username) to the host specified after the @ sign. |
disable | Keyword to send the entire address string to the default TACACS+ server. |
This default configuration has the TACACS+ directed-request option disabled.
Switch command.
Privileged.
When tacacs directedrequest is enabled, you must specify a configured TACACS+ server after the @ sign. If the specified host name does not match the IP address of a configured TACACS+ server, the request is rejected. When tacacs directedrequest is disabled, the Catalyst 5000, 4000, 2948G, 2926G, and 2926 series switch queries the list of servers beginning with the first server in the list and then sends the entire string, accepting the first response from the server. This command is useful for sites that have developed their own TACACS+ server software to parse the entire address string and make decisions based on the contents of the string.
This example shows how to enable the tacacs directedrequest option:
Console> (enable) set tacacs directedrequest enable Tacacs direct request has been enabled. Console> (enable)
Use the set tacacs key command to set the key for TACACS+ authentication and encryption.
set tacacs key key
key | Printable ASCII characters used for authentication and encryption. Key length is limited to 100 characters. |
The default value of key is null.
Switch command.
Privileged.
The key must be the same as the key used on the TACACS+ server. All leading spaces are ignored. Spaces within the key and at the end of the key are included. Double quotation marks are not required, even if there are spaces between words in the key, unless the quotation marks themselves are part of the key. The key can consist of any printable ASCII characters except the tab character.
This example shows how to set the authentication and encryption key:
Console> (enable) set tacacs key Who Goes There The tacacs key has been set to Who Goes There. Console> (enable)
clear spantree uplinkfast
show tacacs
Use the set tacacs server command to define a TACACS+ server.
set tacacs server ip_addr [primary]
ip_addr | IP address of the server on which the TACACS+ server resides. |
primary | (Optional) Keyword to designate the specified server as the primary TACACS+ server. |
There is no default setting for this command.
Switch command.
Privileged.
You can configure a maximum of three servers. The primary server, if configured, is contacted first. If no primary server is configured, the first server configured becomes the primary server.
This example shows how to configure the server on which the TACACS+ server resides and to designate it as the primary server:
Console> (enable) set tacacs server 170.1.2.20 primary 170.1.2.20 added to TACACS server table as primary server. Console> (enable)
clear tacacs server
show tacacs
Use the set tacacs timeout command to set the response timeout interval for the TACACS+ server daemon. The TACACS+ server must respond to a TACACS+ authentication request before this interval expires or the next configured server is queried.
set tacacs timeout seconds
seconds | Timeout response interval in seconds (1 to 255). |
The default value for this command is 5 seconds.
Switch command.
Privileged.
This example shows how to set the response timeout interval for the TACACS+ server to 8 seconds:
Console> (enable) set tacacs timeout 8 Tacacs timeout set to 8 seconds. Console> (enable)
Use the set time command to change the time of day on the system clock.
set time [day_of_week] [mm/dd/yy] [hh:mm:ss]
day_of_week | (Optional) Day of the week. |
mm/dd/yy | (Optional) Month, day, and year. |
hh:mm:ss | (Optional) Current time in 24-hour format. |
This command has no default setting.
Switch command.
Privileged.
This example shows how to set the system clock to Friday, June 12, 1998, 7:50 a.m:
Console> (enable) set time fri 6/12/98 7:50 Fri Jun 12 1998, 07:50:00 Console> (enable)
Use the set timezone command to set the time zone for the system.
set timezone [zone_name ] [hours [minutes]]
zone_name | (Optional) Name of the time zone to be displayed. |
hours | (Optional) Number of hours offset from UTC; valid values are -12 to 12. |
minutes | (Optional) Number of minutes offset from UTC. If the specified hours value is a negative number, then the minutes value is assumed to be negative as well; valid values are 0 to 59. |
By default, the time zone is set to UTC.
Switch command.
Privileged.
The set timezone command is effective only when NTP is running. If you set the time explicitly and NTP is disengaged, the set timezone command has no effect. If you have enabled NTP and have not entered the set timezone command, the Catalyst 5000, 4000, 2948G, 2926G, and 2926 series switch displays UTC by default.
This example shows how to set the time zone to Pacific Standard Time with an offset of minus 8 hours from UTC:
Console> (enable) set timezone PST -8 Timezone set to "PST", offset from UTC is -8 hours. Console> (enable)
Use the set tokenring acbits command to specify whether AC bits are set unconditionally or conditionally when a port forwards certain LLC frames.
set tokenring acbits mod_num/port_num {enable | disable}
mod_num | Number of the module. |
port_num | Number of the port on the module. |
enable | Keyword to unconditionally (enable) set AC bits when a port forwards certain LLC frames. |
disable | Keyword to conditionally (disable) set AC bits when a port forwards certain LLC frames. |
The default configuration is disable.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
You can use the set tokenring acbits command to specify whether the AC bits should be set unconditionally on repeated source-routed LLC frames, which include source-routed frames with a RIF length greater than two and all Spanning-Tree Explorer and All-Routes Explorer frames.
If you set this parameter to disable, the setting of these bits is based on whether the frame was actually forwarded.
This example shows port 4 on module 4 is enabled to set unconditionally the AC bits when forwarding certain LLC frames.
Console> (enable) set tokenring acbits 4/4 enable Port 4/4 acbits enabled. Console> (enable)
This example shows port 4 on module 4 is disabled to set conditionally the AC bits when forwarding certain LLC frames.
Console> (enable) set tokenring acbits 4/4 disable Port 4/4 acbits disabled. Console> (enable)
Use the set tokenring configloss command to specify thresholds that, when exceeded during the user-specified interval, cause the port to be administratively disabled.
set tokenring configloss mod_num/port_num [threshold thresh_num] [interval int_num]
mod_num | Number of the module. |
port_num | Number of the port on the module. |
threshold | (Optional) Keyword to set the threshold for configuration losses. |
thresh_num | Valid values are 1 to 100; the default is 8. |
interval | (Optional) Keyword to set the interval at which the configuration loss is measured. |
int_num | Valid values are 1 to 99 minutes; the default is 10. |
The default threshold configuration is 8; the default interval is 10.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
Configuration loss occurs when a port completes a connection, allows data traffic to flow, and subsequently closes. The configuration loss threshold is used to control the number of configuration losses that can occur within a specified time. When the threshold is exceeded, the port is disabled and you must enable it by using the set port enable command or an SNMP manager.
The following example shows how to set a configuration loss threshold of 25 and an interval of 5 minutes for port 1 on module 4:
Console> (enable) set tokenring configloss 4/1 threshold 25 interval 5 Port 4/1 configloss threshold set to 25, interval set to 5. Console> (enable)
Use the set tokenring distrib-crf command to enable or disable distribution of TrCRF VLANs.
set tokenring distrib-crf {enable | disable}
enable | Keyword to enable distribution of TrCRF VLANs. |
disable | Keyword to disable distribution of TrCRF VLANs. |
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
This example shows how to enable distribution of TrCRF VLANs:
Console> (enable) set tokenring distrib-crf enable
This example shows how to disable distribution of TrCRF VLANs:
Console> (enable) set tokenring distrib-crf disable
Use the set tokenring etr command to enable or disable a Token Ring port's use of the early token release procedure when transmitting frames.
set tokenring etr mod_num/port_num {enable | disable}
mod_num | Number of the module. |
port_num | Number of the port on the module. |
enable | disable | Keyword to specify that early token release should be used (enable) or not used (disable) when transmitting frames. |
For 16-Mbps and autospeed-detection ports, the default configuration is to enable early token release.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
You cannot enable early token release for 4-Mbps ports. Enabling or disabling early token release on a port causes the port to close and reopen.
This example shows how to enable early token release on port 2 on module 3:
Console> (enable) set tokenring etr 3/2 enable Port 3/2 Early Token Release enabled. Console> (enable)
This example shows how to disable early token release on port 2 on module 3:
Console> (enable) set tokenring etr 3/2 disable Port 3/2 Early Token Release disabled. Console> (enable)
Use the set tokenring portmode command to specify the connection type and access protocol used by a port.
set tokenring portmode mod_num/port_num {auto | fdxcport | hdxcport | fdxstation | hdxstation | riro}
mod_num | Number of the module. |
port_num | Number of the port on the module. |
auto | Keyword to set the port to detect the connection mode. |
fdxcport | Keyword to set the port to operate as a concentrator port in full-duplex mode. |
hdxcport | Keyword to set the port to operate as a concentrator port in half-duplex mode. |
fdxstation | Keyword to set the port to operate as a station in full-duplex mode. |
hdxstation | Keyword to set the port to operate as a station in half-duplex mode. |
riro | Parameter applicable to fiber-optic modules only. |
The default configuration has the port detect the mode of connection.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
This example shows how to set the port mode to autosensing on port 1 on module 4:
Console> (enable) set tokenring portmode 4/1 auto Port 4/1 mode set to auto. Console> (enable)
This example shows how to set port 2 on module 4 to operate as a concentrator port in full-duplex mode:
Console> (enable) set tokenring portmode 4/2 fdxcport Port 4/2 mode set to fdxcport. Console> (enable)
Use the set tokenring priority command to specify the highest Token Ring frame priority that will go to the low-priority transmit queue and the minimum Token Ring frame priority that is used when requesting a token.
set tokenring priority mod_num/port_num {threshold thresh_num | minxmit min_num}
mod_num | Number of the module. |
port_num | Number of the port on the module. |
threshold | Keyword to specify the priority queue threshold. |
thresh_num | Valid values are 0 to 7; the default is 3. |
minxmit | Keyword to specify the minimum frame priority to be used. |
min_num | Valid values are 0 to 6; the default is 4. |
The default configuration for threshold is 3. The default configuration for minxmit is 4.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
This example shows how to set the priority threshold levels on port 2 on module 4:
Console> (enable) set tokenring priority 4/2 threshold 6 Port 2 priority threshold set to 6. Console> (enable)
This example shows how to set the minimum priority levels on port 2 on module 4:
Console> (enable) set tokenring priority 4/2 minxmit 5 Port 2 priority minxmit set to 5. Console> (enable)
Use the set tokenring reduction command to reduce broadcast storms in an externally looped network.
set tokenring reduction {enable | disable}
enable | disable | Keyword to turn broadcast reduction on (enable) or off (disable). |
The default configuration is enabled.
Switch command.
Privileged.
This command is not supported by the Catalyst 4000 and 2948G series switches.
The following example shows how to enable All-Routes Explorer reduction:
Console> (enable) set tokenring reduction enable Tokenring reduction enabled Console> (enable)
The following example shows how to disable All-Routes Explorer reduction:
Console> (enable) set tokenring reduction disable Tokenring reduction disabled Console> (enable)
Use the set trunk command to configure trunk ports and to add VLANs to the allowed VLAN list for existing trunks.
set trunk mod_num/port_num [on | off | desirable | auto | nonegotiate] [vlan_range] [isl | dot1q | dot10 | lane | negotiate]
mod_num | Number of the module. |
port_num | Number of the port on the module. |
on | (Optional) Keyword to force the port to become a trunk port and persuade the neighboring port to become a trunk port. The port becomes a trunk port even if the neighbor port does not agree to become a trunk. This is the only possible mode for ATM ports. |
off | (Optional) Keyword to force the port to become a nontrunk port and persuade the neighboring port to become a nontrunk port. The port becomes a nontrunk port even if the neighbor port does not agree to become a nontrunk port. This is the default mode for FDDI trunks. This option is not allowed for ATM ports. |
desirable | (Optional) Keyword to cause the port to negotiate actively with the neighbor port to become a trunk link. This mode is not allowed on FDDI and ATM ports. |
auto | (Optional) Keyword to cause the port to become a trunk port if the neighboring port tries to negotiate a trunk link. This mode is not allowed on FDDI and ATM ports. This is the default mode for Fast Ethernet and Gigabit Ethernet ports. |
nonegotiate | (Optional) Keyword to force the port to become a trunk port but prevent it from sending DTP frames to its neighbor. This mode is only allowed on ISL and IEEE 802.1Q trunks. |
vlan_range | (Optional) VLANs to add to the list of allowed VLANs on the trunk. The VLAN range is 1 to 1005. |
isl | (Optional) Keyword to specify an ISL trunk on an Ethernet port. If no trunk type keyword is specified when configuring an Ethernet trunk, ISL is used as the default. |
dot1q | (Optional) Keyword to specify an IEEE 802.1Q trunk on an Ethernet port. IEEE 802.1Q trunks are supported in Catalyst 5000, 2926G, and 2926 series software release 4.1(1) and later with 802.1Q-capable hardware. Automatic negotiation of 802.1Q trunks is supported in software release 4.2(1) and later. In software release 4.1, you must use the nonegotiate mode with 802.1Q trunks. |
dot10 | (Optional) Keyword to specify an IEEE 802.10 trunk on a FDDI or CDDI port. |
lane | (Optional) Keyword to specify an ATM LANE trunk on an ATM port. |
negotiate | (Optional) Keyword to specify that the port become an ISL (preferred) or 802.1Q trunk, depending on the configuration and capabilities of the neighboring port. |
All ports except ATM LANE ports are nontrunk ports by default. ATM LANE and RSM ports are always configured as trunk ports.
Switch command.
Privileged.
The Catalyst 2948G is a fixed configuration switch. All ports are located on "module 2;" for this reason, if you enter 1/N for the module/port number, an error message is displayed.
Trunking capabilities are hardware dependent. Refer to the Module Installation Guide for your switch to determine the trunking capabilities of your hardware, or enter the show port capabilities command.
The Catalyst 5000, 4000, 2948G, 2926G, and 2926 series switches use the DTP (formerly known as DISL) to negotiate trunk links automatically on Fast Ethernet and Gigabit Ethernet ports. Whether a port will negotiate to become a trunk port depends on both the mode and the trunk type specified for that port. Refer to the Software Configuration Guide for your switch for detailed information on how trunk ports are negotiated.
DTP is a point-to-point protocol. However, some internetworking devices might improperly forward DTP frames. You can avoid this problem by ensuring that trunking is turned off on ports connected to non-Catalyst 5000, 4000, 2948G, 2926G, and 2926 series devices if you do not intend to trunk across those links. When enabling trunking on a link to a Cisco router, enter the nonegotiate keyword to cause the port to become a trunk but not generate DTP frames. The nonegotiate keyword is available in Catalyst 5000, 4000, 2948G, 2926G, and 2926 series software release 2.4(3) and later.
For trunking to be negotiated on Fast Ethernet and Gigabit Ethernet ports, the ports must be in the same VTP domain. However, you can use the on mode to force a port to become a trunk, even if it is in a different domain.
To remove VLANs from the allowed list for a trunk, enter the clear trunk mod_num/port_num vlan_range command. When you first configure a port as a trunk, the set trunk command always adds all VLANs to the allowed VLAN list for the trunk, even if you specify a VLAN range (the specified VLAN range is ignored).
To remove VLANs from the allowed list, enter the clear trunk mod_num/port_num vlan_range command. To later add VLANs that were removed, enter the set trunk mod_num/port_num vlan_range command.
You cannot change the allowed VLAN range on the RSM port.
The RSM port can be configured only as an IEEE 802.1Q-type trunk.
The dot1q trunk type is the only trunk type supported by the Catalyst 4000 and 2948G series switches.
To return a trunk to its default trunk type and mode, enter the clear trunk mod_num/port_num command.
If you enter the set trunk command on a Token Ring port, you receive a message indicating that the port is "not a trunk-capable port."
This example shows how to set port 2 on module 1 as a trunk port:
Console> (enable) set trunk 1/2 on Port(s) 1/2 trunk mode set to on. Console> (enable)
This example shows how to add VLANs 5 through 50 to the allowed VLAN list for a trunk port (VLANs were previously removed from the allowed list with the clear trunk command):
Console> (enable) set trunk 1/1 5-50 Adding vlans 5-50 to allowed list. Port(s) 1/1 allowed vlans modified to 1,5-50,101-1005. Console> (enable)
This example shows how to set port 5 on module 4 as an 802.1Q trunk port in desirable mode:
Console> (enable) set trunk 4/5 desirable dot1q Port(s) 4/5 trunk mode set to desirable. Port(s) 4/5 trunk type set to dot1q. Console> (enable)
clear trunk
set vtp
show trunk
show vtp statistics
|
|