set logging console through set ntp server

set logging history
set logging level
set logging server
set logging session
set logging timestamp
set logout
set mls
set mls agingtime
set mls agingtime fast
set mls flow
set mls include
set mls multicast
set mls multicast include
set mls nde
set mls statistics protocol
set module disable
set module enable
set module name
set multicast router
set ntp authentication
set ntp broadcastclient
set ntp broadcastdelay
set ntp client
set ntp key
set ntp server
set password

set logging level

Use the set logging level command to set the facility and severity level used when logging system messages.

set logging level facility severity [default]

Syntax Description

facility	Value for the type of system messages to capture. Facility types are shown in Table 2-3.
severity	Value for the severity level of system messages to capture. Severity level definitions are shown in Table 2-4.
default	(Optional) Keyword to cause the specified logging level to apply to all sessions. If default is not used, the specified logging level applies only to the current session.

Table 2-3: Facility Types

Facility Name Definition

cdp

Cisco Discovery Protocol

mcast

Multicast

dtp

Dynamic Trunk Protocol

dvlan

Dynamic VLAN

earl

Encoded Address Recognition Logic

fddi

Fiber Distributed Data Interface

ip

Internet Protocol

pruning

VTP pruning

snmp

Simple Network Management Protocol

spantree

Spanning-Tree Protocol

sys

System

tac

Terminal Access Controller

tcp

Transmission Control Protocol

telnet

Terminal Emulation Protocol

tftp

Trivial File Transfer Protocol

vtp

Virtual Terminal Protocol

vmps

VLAN Membership Policy Server

kernel

Kernel

filesys

File System

drip

Dual Ring Protocol

pagp

Port Aggregation Protocol

mgmt

Management

mls

Multilayer Switching

protfilt

Protocol Filter

security

Security

Facility Name	Definition
cdp	Cisco Discovery Protocol
mcast	Multicast
dtp	Dynamic Trunk Protocol
dvlan	Dynamic VLAN
earl	Encoded Address Recognition Logic
fddi	Fiber Distributed Data Interface
ip	Internet Protocol
pruning	VTP pruning
snmp	Simple Network Management Protocol
spantree	Spanning-Tree Protocol
sys	System
tac	Terminal Access Controller
tcp	Transmission Control Protocol
telnet	Terminal Emulation Protocol
tftp	Trivial File Transfer Protocol
vtp	Virtual Terminal Protocol
vmps	VLAN Membership Policy Server
kernel	Kernel
filesys	File System
drip	Dual Ring Protocol
pagp	Port Aggregation Protocol
mgmt	Management
mls	Multilayer Switching
protfilt	Protocol Filter
security	Security

Severity Level	Severity Type	Description
0	emergencies	System unusable
1	alerts	Immediate action required
2	critical	Critical condition
3	errors	Error conditions
4	warnings	Warning conditions
5	notifications	Normal bug significant condition
6	informational	Informational messages
7	debugging	Debugging messages

Table 2-4: Severity Level Definitions

Severity Level Severity Type Description

0

emergencies

System unusable

1

alerts

Immediate action required

2

critical

Critical condition

3

errors

Error conditions

4

warnings

Warning conditions

5

notifications

Normal bug significant condition

6

informational

Informational messages

7

debugging

Debugging messages

Default

The switches ship with the following default configuration:

Configuration Parameter Default Setting

system message logging to the console

enabled

system message logging to Telnet sessions

enabled

logging server

disabled

syslog server

unconfigured

server facility

LOCAL7

server severity

Warnings (4)

logging buffer

500

logging history size

1

timestamp option

disabled

facility/severity level for system messages

sys/5
dtp/5
pagp/5
mgmt/5
mls/5
all other facilities/2

Configuration Parameter	Default Setting
system message logging to the console	enabled
system message logging to Telnet sessions	enabled
logging server	disabled
syslog server	unconfigured
server facility	LOCAL7
server severity	Warnings (4)
logging buffer	500
logging history size	1
timestamp option	disabled
facility/severity level for system messages	sys/5 dtp/5 pagp/5 mgmt/5 mls/5 all other facilities/2

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Example

This example shows how to set the default system message logging severity level for the SNMP facility:

Console> (enable) set logging level snmp 2 default
System logging facility <snmp> set to severity 2(critical).
Console> (enable)

Related Commands

show logging
show logging buffer

set l ogging server

Use the set logging server command to enable and disable system message logging to configured syslog servers and to add a syslog server to the system logging server table.

set logging server {enable | disable}
set logging server ip_addr
set logging server facility server_facility_parameter
set logging server severity server_severity_level

Syntax Description

enable	Keyword to enable system message logging to configured syslog servers.
disable	Keyword to disable system message logging to configured syslog servers.
ip_addr	IP address of the syslog server to be added to the configuration. An IP alias or a host name that can be resolved through DNS can also be used.
facility	Keyword to set the type of system messages to capture.
server_facility_parameter	Value to specify the logging facility of syslog server; valid values are local0, local1, local2, local3, local4, local5, local6, local7, and syslog.
severity	Keyword to set the severity level of system messages to capture.
server_severity_level	Value to specify the severity level of system messages to capture; valid values are 0 through 7. Severity level definitions are shown in Table 2-4.

Default

By default, no syslog servers are configured to receive system messages.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to enable system message logging to the console:

Console> (enable) set logging server enable
System logging messages will be sent to the configured syslog servers.
Console> (enable)

This example shows how to add a syslog server to the system logging server table:

Console> (enable) set logging server 192.168.255.255
192.168.255.255 added to the System logging server table.
Console> (enable)

This example shows how to set the syslog server facility to local7:

Console> (enable) set logging server facility local7
System logging server facility set to <local7>
Console> (enable)

This example shows how to set the syslog server severity level to 4:

Console> (enable) set logging server severity 4
System logging server severity set to <4>
Console> (enable)

This example shows how to set the syslog history table size to 400:

Console> (enable) set logging history 400 
System logging history table size set to <400>
Console> (enable)

Related Commands

clear logging server
show logging

set l ogging session

Use the set logging session command to enable or disable the sending of system logging messages to the current login session.

set logging session {enable | disable}

Syntax Description

enable	Keyword to enable the sending of system logging messages to the current login session.
disable	Keyword to disable the sending of system logging messages to the current login session.

Default

By default, system message logging to the current login session is enabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to prevent system logging messages from being sent to the current login session:

Console> (enable) set logging session disable
System logging messages will not be sent to the current login session.
Console> (enable)

This example shows how to cause system logging messages to be sent to the current login session:

Console> (enable) set logging session enable
System logging messages will be sent to the current login session.
Console> (enable)

Related Commands

set logging buffer
set logging level
show logging
show logging buffer

set l ogging timestamp

Use the set logging timestamp command to enable or disable the timestamp display on system logging messages.

set logging timestamp {enable | disable}

Syntax Description

enable	Keyword to enable the timestamp display.
disable	Keyword to disable the timestamp display.

Default

By default, system message logging timestamp is enabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to enable the timestamp display:

Console> (enable) set logging timestamp enable
System logging messages timestamp will be enabled.
Console> (enable)

This example shows how to disable the timestamp display:

Console> (enable) set logging timestamp disable
System logging messages timestamp will be disabled.
Console> (enable)

Related Command

show logging

set logout

Use the set logout command to set the number of minutes until the system disconnects an idle session automatically.

set logout timeout

Syntax Description

timeout

Number of minutes (0 to 10,000) until the system disconnects an idle session automatically. Setting the value to 0 disables the automatic disconnection of idle sessions.

Default

The default value is 20 minutes.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to set the number of minutes until the system disconnects an idle session automatically:

Console> (enable) set logout 20
Sessions will be automatically logged out after 20 minutes of idle time.
Console> (enable)

This example shows how to disable the automatic disconnection of idle sessions:

Console> (enable) set logout 0
Sessions will not be automatically logged out.
Console> (enable)

set mls

Use the set mls command to enable and disable IP or IPX MLS on the switch.

set mls {enable | disable} {ip | ipx}

Syntax Description

disable	Keyword to disable MLS on the switch.
enable	Keyword to enable MLS on the switch.
ip	Keyword to specify IP MLS.
ipx	Keyword to specify IPX MLS.

Default

By default, IP MLS is enabled and IPX MLS is disabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.

If you do not specify the ip or ipx keyword, ip is assumed.

Examples

This example shows how to disable IP MLS on the switch:

Console> (enable) set mls disable ip
IP Multilayer switching is disabled.
Console> (enable)

This example shows how to enable IPX MLS on the switch:

Console> (enable) set mls enable ipx
IPX Multilayer switching is enabled
Console> (enable)

Related Commands

set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp

set mls agingtime

Use the set mls agingtime command to configure the IP and IPX MLS entry aging time.

set mls agingtime {ip | ipx} agingtime

Syntax Description

ip	Keyword to specify IP MLS agingtime.
ipx	Keyword to specify IPX MLS agingtime.
agingtime	(Optional) Aging time of MLS entries, in seconds.

Default

The default MLS entry aging time is set to 256 seconds.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.

If you do not specify the ip or ipx keyword, ip is assumed.

The agingtime must be specified as a multiple of 8 seconds in the range of 8 to 2024 seconds. If you enter a value for agingtime that is not a multiple of 8 seconds, the value is adjusted to the closest one. For example, 65 is adjusted to 64, while 127 is adjusted to 128.

Examples

This example shows how to set the IP MLS aging time to 512 seconds:

Console>(enable) set mls agingtime 512
IP Multilayer switching aging time set to 512 seconds.
Console> (enable)

Related Commands

clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
set mls agingtime fast
show mls rp

set mls agingtime fast

Use the set mls agingtime fast command to specify the MLS aging time of shortcuts to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created.

set mls agingtime fast fastagingtime pkt_threshold

Syntax Description

fastagingtime	Valid values are multiples of 8 to any value in the range of 0 to 128 seconds. 0 disables fast aging. If a value is not specified, the default value is used.
pkt_threshold	Valid values are 0, 1, 3, 7, 15, 31, 63, and 127 packets. If a value is not specified, the default value is used.

Default

The default fastagingtime is 0, no fast aging. The default pkt_threshold is 0.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

This command is not available for IPX MLS.

When you set the fastagingtime value, it can be configured as multiples of 8 to any value in the range of 0 to 128 seconds.

The default pkt_threshold is 0. It can be configured as one of the 0, 1, 3, 7, 15, 31, 63, and 127 (the values picked for efficient aging). If fastagingtime is not configured exactly the same among these values, it is adjusted to the closest one. A typical value for fastagingtime and pkt_threshold is 32 seconds and 0 packet, respectively (it means no packet switched within 32 seconds after the entry created).

Agingtime applies to an MLS entry that has no more than pkt_threshold packets switched within fastagingtime seconds after it is created. A typical example is the MLS entry destined to or sourced from a DNS or TFTP server. This entry may never be used again after it is created. For example, only one request goes to a server and one reply returns from the server, and then the connection is closed.

The fastagingtime option is used to purge entries associated with very short flows, such as DNS and TFTP.

We recommend that you keep the number of MLS entries in the MLS cache below 32K. If the number of MLS entries is more than 32K, some flows (less than 1 percent) are sent to the router.

To keep the number of MLS cache entries below 32K, decrease the aging time. Aging time can be decreased up to 8 seconds. If your switch has a lot of short flows that are used by only a few packets, then you can use fast aging.

If cache entries continue to exceed 32K, decrease the normal agingtime in 64-second increments from the 256-second default.

Example

This example shows how to use the set mls agingtime fast command to set the agingtime:

Console>(enable) set mls agingtime fast 32 0
Multilayer switching fast aging time set to 32 seconds for entries with no more than 0 packet switched.
Console> (enable)

Related Commands

set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statistics

set mls flow

Use the set mls flow command to specify the minimum flow mask used for MLS. This command is needed to collect statistics for the supervisor engine module.

set mls flow {destination | destination-source | full}

Caution
Use this command carefully. This command purges all existing shortcuts and affects the number of active shortcuts. This command can increase the cache usage and increase the load on the router.

Caution
Be extremely careful if you enter this command on a switch that already has a large number of shortcuts (greater than 16K).

Caution
Do not place this command in scripts that are frequently executed---changing the MLS flow mask purges all MLS cache entries.

Syntax Description

destination	Keyword to set the minimum flow mask to destination flow.
destination-source	Keyword to set the minimum flow mask to source flow.
full	Keyword to set the minimum flow mask to an extended access list.

Default

If there are no access lists on any MLS-RP, the flow mask is set to destination flow.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

This command specifies the minimum MLS flow mask. Depending on the MLS-RP configuration, the actual flow mask used might be more specific than the specified minimum flow mask. For example, if you configure the minimum flow mask to destination-source, but an MLS-RP interface is configured with IP extended access lists, the actual flow mask used will be full.

If you configure a more specific flow mask (for example, destination-source or full), the number of active flow entries increases. To limit the number of active flow entries, you might need to decrease the MLS aging time.

This command is intended to be used for gathering very detailed statistics at the protocol port level; for example, when NetFlow data is exported to an RMON2 probe.

Examples

These examples show how to specify that only expired flows to subnet 171.69.194.0 are exported:

Console> (enable) set mls flow destination
Configured flow mask is set to destination flow.
Console> (enable) 
 
Console> (enable) set mls flow destination-source
Configured flow mask is set to destination-source flow.
Console> (enable) 
 
Console> (enable) set mls flow full
Configured flow mask is set to full flow.
Console> (enable)

Related Commands

clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
set mls agingtime

set mls include

Use the set mls include command to specify routers to add to the IP MLS-RP include list.

set mls include {ip | ipx} ip_addr1 [ip_addr2...]

Syntax Description

ip	Keyword to specify the IP MLS-RP include list.
ipx	Keyword to specify the IPX MLS-RP include list.
ip_addr1	IP address or DNS host name of the first router to include.
ip_addr2...	(Optional) IP addresses or DNS host names of additional routers to include (you can include up to 16 routers to participate in IP MLS).

Default

If a Catalyst 5000 family RSM or RSFC is installed in the switch, it is added to the MLS-RP include list automatically.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

The ipx keyword is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.

If you do not specify the ip or ipx keyword, ip is assumed.

You must use the IP address or DNS host name of the router to add to the IP or IPX MLS-RP include list. You cannot specify the router IPX address.

You can specify the IP addresses of multiple MLS-RPs on the same command line. Up to 16 MLS-RPs can be selected to participate in MLS.

The switch does not process MLSP messages from routers that are not in the MLS-RP include list.

Examples

This example shows how to add a router to the IP MLS-RP include list:

Console> (enable) set mls include ip 172.170.2.1
IP Multilayer switching is enabled for router 172.170.2.1
Console> (enable)

This example shows how to add a router to the IPX MLS-RP include list:

Console> (enable) set mls include ipx 172.170.2.1
IPX Multilayer switching is enabled for router 172.170.2.1
Console> (enable)

Related Commands

set mls nde
clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statistics

set mls multicast

Use the set mls multicast command to enable and disable IP multicast MLS on the switch.

set mls multicast {enable | disable}

Syntax Description

enable	Keyword to enable IP multicast MLS on the switch.
disable	Keyword to disable IP multicast MLS on the switch.

Default

The default is that IP multicast MLS is disabled.

Supported Platforms

Catalyst 5000 family switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

This command is supported only on Catalyst 5000 family switches with Supervisor Engine II G or III G, or Supervisor Engine III or III F with the NFFC II.

You must enable one of the Layer 2 multicast protocols (CGMP, IGMP snooping, or GMRP) on the switch before you enable IP multicast MLS.

Example

This example shows how to enable IP multicast MLS on the switch:

Console> (enable) set mls multicast enable 
Multilayer switching for Multicast is enabled for this device.
Console> (enable)

Related Commands

show mls multicast entry
set mls multicast include
clear mls multicast include
clear mls multicast statistics

set mls multicast include

Use the set mls multicast include command to specify routers to add to the IP MMLS-RP include list.

set mls multicast include ip_addr

Syntax Description

ip_addr

IP address or DNS host name of the router to include.

Default

The default is no routers are in the IP MMLS-RP include list.

Supported Platforms

Catalyst 5000 family switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

You can specify only one router IP address at a time. You can configure a maximum of two internal or directly attached participating routers.

The switch does not process MLSP messages from routers that are not in the MMLS-RP include list.

Example

This example shows how to add a router to the MMLS-RP include list:

Console> (enable) set mls multicast include 172.170.2.1
Multilayer switching enabled for router 172.170.2.1
Console> (enable)

Related Commands

show mls multicast entry
clear mls multicast include
clear mls multicast statistics
clear mls nde

set mls nde

Use the set mls nde command to enable and disable NDE on the switch and to configure the switch to export statistics to the specified collector.

set mls nde {disable | enable}
set mls nde {collector_ip | collector_name} {udp_port_num}
set mls nde flow [destination ip_addr_spec] [source ip_addr_spec] [protocol protocol] [src-port port_number] [dst-port port_number]

Syntax Description

disable	Keyword to disable NDE.
enable	Keyword to enable NDE.
collector_ip	IP address of the collector if DNS is enabled.
collector_name	Name of the collector if DNS is enabled.
udp_port_num	Number of the UDP port to receive the exported statistics.
flow	Keyword to add filtering to NDE.
destination	(Optional) Keyword to specify the destination IP address.
ip_addr_spec	(Optional) Full IP address or a subnet address in these formats: ip_subnet_addr, ip_addr/subnet_mask, or ip_addr/#subnet_mask_bits.
source	(Optional) Keyword to specify the source IP address.
protocol	(Optional) Keyword to specify the protocol type.
protocol	(Optional) Protocol type; valid values can be 0, TCP, UDP, ICMP, or a decimal number for other protocol families. 0 indicates "do not care." If the protocol is not TCP or UDP, we recommend that you set the dst-port port_number and src-port port_number values to 0; otherwise, no flows are displayed.
src-port	(Optional) Keyword to specify the number of the source port. Used with dst-port to specify the port pair if the protocol is TCP or UDP. 0 indicates "do not care." If the protocol is not TCP or UDP, we recommend that you set the src-port value to 0; otherwise, no flows are displayed.
port_number	Number of the TCP/UDP port (decimal).
dst-port	(Optional) Keyword to specify the number of the destination port. Used with src-port to specify the port pair if the protocol is TCP or UDP. 0 indicates "do not care." If the protocol is not TCP or UDP, we recommend that you set the dst-port value to 0; otherwise, no flows are displayed.

Default

All expired flows are exported until the filter is specified explicitly.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

Before you use the set mls nde command for the first time, you must configure the host to collect the MLS statistics. The host name and UDP port number are saved in NVRAM, and you do not need to specify them. If you specify a host name and UDP port, values in NVRAM overwrite the old values. Collector's values in NVRAM do not clear when NDE is disabled; this command configures the collector, but does not enable NDE automatically.

The set mls nde enable command enables NDE, exporting statistics to the preconfigured collector.

The set mls nde flow command adds filtering to the NDE. Expired flows matching the specified criteria are exported. These values are stored in NVRAM. They are not cleared when NDE is disabled. If any option is not specified in this command, it is treated as a wildcard. The NDE filter in NVRAM does not clear when NDE is disabled.

Use the following syntax to specify an IP subnet address:

ip_subnet_addr---This is the short subnet address format. The trailing decimal number 00 in an IP address YY.YY.YY.00 specifies the boundary for an IP subnet address. For example, 172.22.36.00 indicates a 24-bit subnet address (subnet mask 172.22.36.00/255.255.255.0), and 173.24.00.00 indicates a 16-bit subnet address (subnet mask 173.24.00.00/255.255.0.0). However, this format can identify only a subnet address of 8, 16, or 24 bits.
ip_addr/subnet_mask---This is the long subnet address format, for example, 172.22.252.00/255.255.252.00 indicates a 22-bit subnet address. This format can specify a subnet address of any bit number. To provide more flexibility, the ip_addr is a full host address, such as 172.22.253.1/255.255.252.00.
ip_addr/maskbits---This is the simplified long subnet address format. The mask bits specify the number of bits of the network masks. For example, 172.22.252.00/22 indicates a 22-bit subnet address. The ip_addr is a full host address, such as 193.22.253.1/22, which has the same subnet address as the ip_subnet_addr.

If the protocol value is not set to TCP or UDP, we recommend you set the dst_port and src_port values to 0; otherwise, no flows will be displayed.

Examples

These examples show how to use the set mls nde command set to configure NDE:

Console> (enable) set mls nde Stargate 120
Netflow data export not enabled. 
Netflow data export to port 120 on 172.20.15.1(Stargate)
Console> (enable) 
 
Console>(enable) set mls nde enable
Netflow data export enabled.
Netflow data export to port 120 on 172.20.15.1 (Stargate)
Console> (enable) 
 
Console> (enable) set mls nde disabled
Netflow data export disabled.
Console> (enable) 
 
Console> (enable) set mls nde flow destination 171.69.194.140/24
Netflow data export: destination filter set to 171.69.194.0/24
Console> (enable) 
 
Console> (enable) set mls nde flow destination 171.69.194.140
Netflow data export: destination filter set to 171.69.194.140/32
Console> (enable) 
 
Console>(enable) set mls nde flow destination 171.69.194.140/24 source 171.69.173.5/24
Netflow data export: destination filter set to 171.69.194.0/24
Netflow data export: source filter set to 171.69.173.0/24
Console>(enable)
 
console> (enable) set mls nde flow source 171.69.194.140 protocol 51
Netflow data export: source filter set to 171.69.194.140/32
Netflow data export: protocol filter set to 51.
Console> (enable) 
 
Console>(enable) set mls nde flow dst-port 23
Netflow data export: destination port filter set to 23.
Console>(enable)
 
Console>(enable) set mls nde flow source 171.69.194.140 dst-port 23
Netflow data export: destination port filter set to 23
Netflow data export: source filter set to 171.69.194.140/32
Console>(enable)

Related Commands

clear mls entry ip
clear mls entry ipx
clear mls include ip
clear mls include ipx
clear mls nde
clear mls statistics
show mls rp
show mls statistics
set mls agingtime
set mls agingtime fast

set mls statistics protocol

Use the set mls statistics protocol command to specify protocols and ports for which to gather MLS statistics.

set mls statistics protocol protocol port

Syntax Description

protocol	Number of the protocol.
port	Number of the port.

Default

The default is no protocols are specified for statistics collection.

Supported Platforms

Catalyst 5000 family switches
Catalyst 2926G series switches

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

You can configure a maximum of 64 ports on which to collect protocol statistics. Use the show mls statistics command to view MLS statistics for the specified protocols.

Examples

This example shows how to specify a protocol and port for which to gather MLS statistics:

Console>(enable) set mls statistics protocol 17 1934
Protocol 17 port 1934 is added to protocol statistics list.
Console> (enable)

Related Commands

show mls statistics

set module disable

Use the set module disable command to disable a module.

set module disable mod_num

Syntax Description

mod_num

Number of the module. You can specify a series of modules by entering a comma between each module number (for example, 2,3,5). You can specify a range of modules by entering a dash between module numbers (for example, 2-5).

Default

The default configuration has all modules enabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

Avoid disabling a module when you are connected through a Telnet session; if you disable the module that contains the port through which your Telnet session was established, you will disconnect your Telnet session.

If there are no other network connections to the switch, you must connect to the switch through the console port to reenable the module.

Examples

This example shows how to disable module 3 when connected through the console port:

Console> (enable) set module disable 3
Module 3 disabled.
Console> (enable)

This example shows how to disable module 2 when connected through a Telnet session:

Console> (enable) set module disable 2
This command may disconnect your telnet session.
Do you want to continue (y/n) [n]? y
Module 2 disabled.

Related Commands

set module enable
show module

set module enable

Use the set module enable command to enable a module.

set module enable mod_num

Syntax Description

mod_num

Number of the module to enable.

Default

The default setting has all modules enabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

If an individual port on a module was previously disabled, enabling the module does not enable the disabled port.

Example

This example shows how to enable module 2:

Console> (enable) set module enable 2
Module 2 enabled.
Console> (enable)

Related Commands

set module disable
show module

set module name

Use the set module name command to set the name for a module.

set module name mod_num [mod_name]

Syntax Description

mod_num	Number of the module.
mod_name	(Optional) Name to assign to the module.

Default

The default configuration has no module names configured for any modules.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

If you do not specify a mod_name value, any previously specified name is cleared.

Module names configured using the set module name command are displayed in the output of the show module command and other commands.

Example

This example shows how to set the name for module 1 to Supervisor:

Console> (enable) set module name 1 Supervisor
Module name set.
Console> (enable)

Related Command

show module

set multicast router

Use the set multicast router command to manually configure a port as a multicast router port.

set multicast router mod_num/port _num

Syntax Description

mod_num/port _num

Number of the module and the port.

Default

By default, no ports are configured as multicast router ports.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

When you enable CGMP or IGMP snooping, the ports to which a multicast-capable router is attached are identified automatically. The set multicast router command allows you to configure multicast router ports statically.

Example

This example shows how to configure a multicast router port:

Console> (enable) set multicast router 3/1
Port 3/1 added to multicast router port list.
Console> (enable)

Related Commands

clear multicast router
set cgmp
set igmp
show multicast router
show multicast group count

set ntp authentication

Use the set ntp authentication command to enable or disable the NTP authentication feature.

set ntp authentication {enable | disable}

Syntax Description

enable	Keyword to enable NTP authentication.
disable	Keyword to disable NTP authentication.

Default

The default is NTP authentication.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to enable NTP authentication:

Console> (enable) set ntp authentication enable
NTP authentication feature enabled.
At least one trusted key must be set for NTP to work.
Console> (enable)

This example shows how to disable NTP authentication:

Console> (enable) set ntp authentication disable
NTP authentication feature disabled.
Console> (enable)

Related Command

show ntp

set ntp broadcastclient

Use the set ntp broadcastclient command to enable or disable NTP broadcast-client mode.

set ntp broadcastclient {enable | disable}

Syntax Description

enable	Keyword to enable NTP broadcast-client mode.
disable	Keyword to disable NTP broadcast-client mode.

Default

The default setting for this command is disabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

You can configure NTP in either broadcast-client mode or client mode. The broadcast-client mode assumes that a broadcast server, such as a router, sends time-of-day information regularly to the switch.

Examples

This example shows how to enable NTP broadcast client:

Console> (enable) set ntp broadcastclient enable
NTP Broadcast Client mode enabled.
Console> (enable)

This example shows how to disable NTP broadcast client:

Console> (enable) set ntp broadcastclient disable
NTP Broadcast Client mode disabled.
Console> (enable)

Related Command

set port broadcast

s et ntp broadcastdelay

Use the set ntp broadcastdelay command to configure a time-adjustment factor so the switch can receive broadcast packets.

set ntp broadcastdelay microseconds

Syntax Description

microseconds

Estimated round-trip time, in microseconds, for NTP broadcasts. Allowable range is from 1 to 999999.

Default

By default, the NTP broadcast delay is set to 3000.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Example

This example shows how to set the NTP broadcast delay to 4000 microseconds:

Console> (enable) set ntp broadcastdelay 4000
NTP broadcast delay set to 4000 microseconds.
Console> (enable)

Related Command

set port broadcast

set ntp client

Use the set ntp client command to enable or disable the switch as an NTP client.

set ntp client {enable | disable}

Syntax Description

enable	Keyword to enable the NTP client.
disable	Keyword to disable the NTP client.

Default

By default, NTP client mode is disabled.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

You can configure NTP in either broadcast-client mode or client mode. The client mode assumes that the client switch regularly sends time-of-day requests to the NTP server.

Example

This example shows how to enable NTP client mode:

Console> (enable) set ntp client enable
NTP client mode enabled.
Console> (enable)

Related Command

set port broadcast

set ntp key

Use the set ntp key command to define an NTP authentication key pair or to specify a key to be trusted or untrusted.

set ntp key public_keynum {trusted | untrusted} [md5 secret_keystring]

Syntax Description

public_keynum	Number of the key pair; valid values are 1 to 4292945295.
trusted	Keyword to specify the trusted key mode.
untrusted	Keyword to specify the untrusted key mode.
md5	(Optional) Keyword to set the keystring of the key pair.
secret_keystring	Key string; valid values are 1 to 32 printable characters.

Default

There is no default setting for this command.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

If you enter the set ntp key command without the md5 keyword, the trusted or untrusted mode of the key will change after it is entered into the key table. Enter the set ntp key command with the md5 option to enter an authentication key pair into the system.

Examples

These examples show how to define an NTP authentication key:

Console> (enable) set ntp key 435 trusted md5 have_a_smurfy_day
NTP key 435 added.
Console> (enable) 
 
 
Console> (enable) set ntp key 2345 trusted
NTP key 2345 configured to be trusted.
Console> (enable) 
 
Console> (enable) set ntp key 9999 untrusted
NTP key 9999 configured not to be trusted.
Console> (enable)

Related Commands

clear ntp key
show ntp

s et ntp server

Use the set ntp server command to specify the NTP server address and to configure an NTP server authentication key.

set ntp server ip_addr [key public_keynum]

Syntax Description

ip_addr	IP address of the NTP server.
key	(Optional) Keyword to specify the key number.
public_keynum	Number of the key pair; valid values are 1 to 4292945295.

Default

There is no default setting for this command.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

If you enter the set ntp server command without the key argument, and the authentication feature is enabled, the following message appears:

A trusted key may be required to communicate with this server.

Examples

This example shows how to configure an NTP server:

Console> (enable) set ntp server 172.20.52.3
NTP server 172.20.52.3 added
Console> (enable)

This example shows how to configure an NTP server with a key:

Console> (enable) set ntp server 111.222.111.222 key 879
NTP server 111.222.111.222 with key 879 added
Console> (enable)

This example shows how to assign a new key to an NTP server:

Console> (enable) set ntp server 111.222.111.222 key 4323423
NTP server 111.222.111.222 has been updated with key 4323423
Console> (enable)

Related Commands

clear ntp server
show ntp

set password

Use the set password command to change the normal (login) mode password on the switch.

set password

Syntax Description

This command has no arguments or keywords.

Default

The default configuration has no password configured.

Supported Platforms

Catalyst 5000 family switches
Catalyst 4000 family switches
Catalyst 2926G series switches
Catalyst 2948G switch

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

The command prompts you for the old password. If the password you enter is valid, you are prompted to enter a new password and to verify the new password. A zero-length password is allowed by pressing Return.

Example

This example shows how to set the normal (login) mode password:

Console> (enable) set password
Enter old password: <old_password>
Enter new password: <new_password>
Retype new password: <new_password>
Password changed.

Console> (enable)

Related Command

set enablepass

Table of Contents

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Example

Related Command

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Example

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Examples

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Examples

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Examples

Related Command

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Examples

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Usage Guidelines

Examples

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Usage Guidelines

Examples

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Usage Guidelines

Example

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Usage Guidelines

Examples

Related Commands

Syntax Description

Default

Supported Platforms

Command Type

Command Mode

Usage Guidelines