cc/td/doc/product/lan/cat6000/sw_5_3
hometocprevnextglossaryfeedbacksearchhelp
PDF

Table of Contents

reset---switch
rollback
session
set
set alias
set arp
set authentication enable
set authentication login
set banner motd
set boot config-register
set boot system flash
set cam
set cdp
set channel cost
set channel vlancost
set cops

reset---switch

Use the reset command to restart the system or an individual module.

reset {mod_num | system}

Syntax Description

mod_num

Number of the module to be restarted.

system

Keyword to reset the system to its default values.

Default

This command has no default setting.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

If no module number or module number of the active supervisor engine is specified, the command resets the entire system.

You can use the reset mod_num command to switch to the standby supervisor engine, where mod_num is the slot number of the active supervisor.

Where mod_num is an MSM, both the MSM hardware and software are completely reset.

Examples

This example shows how to reset the supervisor engine on a Catalyst 6000 family switch with redundant supervisor engines:

Console> (enable) reset 1
This command will force a switch-over to the standby supervisor module
and disconnect your telnet session.
Do you want to continue (y/n) [n]? y
Connection closed by foreign host.
host%
 

This example shows how to reset module 4:

Console> (enable) reset 4
This command will reset module 4 and may disconnect your telnet session.
Do you want to continue (y/n) [n]? y
Resetting module 4...
Console> (enable)
 

rollback

Use the rollback command to clear changes made to the ACL edit buffer since its last save. The ACL is rolled back to its state at the last commit command.

rollback qos acl acl_name
rollback security acl acl_name

Syntax Description

qos acl

Keyword to specify QoS ACEs.

security acl

Keywords to specify security ACEs.

acl_name

Name that identifies the VACL whose ACEs are to be affected.

Default

This command has no default setting.

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to clear the edit buffer of a specific QoS ACL.

Console (enable) rollback qos acl ip-8-1
Rollback for QoS ACL ip-8-1 is successful.
Console> (enable) 
 

This example shows how to clear the edit buffer of a specific security ACL.

Console> (enable) rollback security acl IPACL1
IPACL1 editbuffer modifications cleared.
Console> (enable) 
Related Commands

show qos acl info
commit

session

Use the session command to open a session with a module (for example, the MSM or ATM), allowing you to use the module-specific CLI.

session mod_num

Syntax Description

mod_num

Number of the module.

Default

This command has no default setting.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

After you enter this command, the system responds with the Enter Password: prompt, if one is configured on the module.

To end the session, enter the quit command.

Use the session command to toggle between router and switch sessions.

For information on ATM commands, refer to the ATM Configuration Guide for the Catalyst 6000 family switches.

Example

This example shows how to open a session with an MSM (module 4):

Console> session 4
Trying Router-4...
Connected to Router-4.
Escape character is \Q^]'.
 
Router>
Related Commands

switch console
quit

set

Use the set command to display all of the ROM monitor variable names with their values.

set

Syntax Description

This command has no arguments or keywords.

Default

This command has no default setting.

Command Type

ROM monitor command.

Command Mode

Normal.

Example

This example shows how to display all of the ROM monitor variable names with their values:

rommon 2 > set 
PS1=rommon ! > 
BOOT=
?=0
Related Command

varname=

set alias

Use the set alias command to define aliases (shorthand versions) of commands.

set alias name command [parameter] [parameter]

Syntax Description

name

Alias being created.

command

Command for which the alias is being created.

parameter

(Optional) Parameters that apply to the command for which an alias is being created. See the specific command for information about parameters that apply.

Default

The default is no aliases are configured.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

The name all cannot be defined as an alias. Reserved words cannot be defined as aliases.

Example

This example shows how to set the alias for the clear arp command as arpdel:

Console> (enable) set alias arpdel clear arp
Command alias added.
Console> (enable) 
Related Commands

clear alias
show alias

set arp

Use the set arp command to add mapping entries to the ARP table and to set the ARP aging time for the table.

set arp ip_addr hw_addr [route_descr]
set arp agingtime agingtime

Syntax Description

ip_addr

IP address or IP alias to map to the specified MAC address.

hw_addr

MAC address to map to the specified IP address or IP alias.

route_descr

(Optional) Route descriptor. The maximum number of route descriptors allowed in the route_descr parameter is 14.

agingtime

Keyword to set the period of time after which an ARP entry is removed from the ARP table.

agingtime

Number of seconds (from 1 to 1,000,000) that entries will remain in the ARP table before being deleted. Setting this value to 0 disables aging.

Default

The default is no ARP table entries exist; ARP aging is set to 1200 seconds.

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to map IP address 198.133.219.232 to MAC address 00-00-0c-40-0f-bc:

Console> (enable) set arp 198.133.219.232 00-00-0c-40-0f-bc
ARP entry added.
Console> (enable)
 

This example shows how to set the aging time for the ARP table to 1800 seconds:

Console> (enable) set arp agingtime 1800
ARP aging time set to 1800 seconds.
Console> (enable)
Related Commands

clear arp
show arp

set authentication enable

Use the set authentication enable commands to enable authentication using the TACACS+ or RADIUS server to determine if you have privileged access permission.

set authentication enable tacacs enable | disable [console | telnet | both] [primary]
set authentication enable radius enable | disable [console | telnet | both] [primary]
set authentication enable local enable | disable [console | telnet | both]

Syntax Description

tacacs

Keyword to specify TACACS+ authentication for login.

enable

Keyword to enable the specified authentication method for login.

disable

Keyword to disable the specified authentication method for login.

console

(Optional) Keyword to specify the authentication method applies to console sessions.

telnet

(Optional) Keyword to specify the authentication method applies to Telnet sessions.

both

(Optional) Keyword to specify the authentication method applies to both session types.

primary

(Optional) Keyword to specify the specified authentication method be tried first.

radius

Keyword to specify RADIUS authentication for login.

local

Keyword to specify local authentication for login.

Default

The default is local authentication is enabled for both console and Telnet sessions. RADIUS and Tacacs+ are disabled for both console and Telnet sessions.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

Authentication configuration applies to both console and Telnet connection attempts unless you use the console and telnet keywords to specify the authentication methods to use for each connection type individually.

Examples

This example shows how to use the TACACS+ server to determine if a user has privileged access permission:

Console> (enable) set authentication enable tacacs enable
tacacs enable authentication set to enable for console and telnet session.
Console> (enable)
 

This example shows how to use the local password to determine if the user has privileged access permission:

Console> (enable) set authentication enable local enable
local enable authentication set to enable for console and telnet session.
Console> (enable)
 

This example shows how to use the RADIUS server to determine if a user has privileged access permission for both console and telnet sessions.

Console> (enable) set authentication enable radius enable both 
radius enable authentication set to enable for console and telnet sessions.
Console> (enable) 
 

This example shows how to set the TACACS+ servers to be used first:

Console> (enable) set authentication enable tacacs enable primary
tacacs enable authentication set to enable for console and telnet session as primary authentication method.
Console> (enable) 
Related Commands

set authentication login
show authentication

set authentication login

Use the set authentication login command to enable TACACS+ or RADIUS as the primary authentication method for login.

set authentication login tacacs enable | disable [console | telnet | both] [primary]
set authentication login radius enable | disable [console | telnet | both] [primary]
set authentication login local enable | disable [console | telnet | both]

Syntax Description

tacacs

Keyword to specify the use of the TACACS+ server password to determine if you have access permission to the switch.

enable

Keyword to enable the specified authentication method for login.

disable

Keyword to disable the specified authentication method for login.

console

(Optional) Keyword to specify the authentication method applies to console sessions.

telnet

(Optional) Keyword to specify the authentication method applies to Telnet sessions.

both

(Optional) Keyword to specify the authentication method applies to both session types.

primary

(Optional) Keyword to specify the specified authentication method be tried first.

radius

Keyword to specify the use of the RADIUS server password to determine if you have access permission to the switch.

local

Keyword to specify the use of the local password to determine if you have access permission to the switch.

Default

The default setting of this command is local authentication enabled and TACACS+ and RADIUS authentication disabled for console, Telnet, or both console and Telnet sessions.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

You can specify TACACS+ or RADIUS as the primary authentication method for login and enable access by entering the primary keyword. If you enter the primary keyword, the specified authentication method will be tried first. If you do not specify a primary authentication, authentication will be tried in the order in which each was enabled.

You can specify that the authentication method applies to console, Telnet, or both console and Telnet sessions, by entering the the console, telnet, or both keywords. If you do not specify console, telnet, or both, the authentication method applies to both console and Telnet sessions.

Examples

These examples show how to use the set authentication login command to authenticate access permission to the switch:

Console> (enable) set authentication login tacacs disable telnet
TACACS Login authentication set to disable for the telnet sessions.
Console> (enable) 
 
Console> (enable) set authentication login radius disable console
RADIUS Login authentication set to disable for the console sessions.
Console> (enable) 
 
Console> (enable) set authentication login local disable telnet
Local Login authentication set to disable for the telnet sessions.
Console> (enable) 
Related Commands

set authentication enable
show authentication

set banner motd

Use the set banner motd command to program an MOTD banner to appear before session login.

set banner motd c [text] c

Syntax Description

c

Delimiting character used to begin and end the message.

text

(Optional) Message of the day.

Default

This command has no default setting.

Command Type

Switch command.

Command Mode

Privileged.

Examples

This example shows how to set the message of the day using the pound sign (#) as the delimiting character:

Console> (enable) set banner motd #
** System upgrade at 6:00am Tuesday.
** Please log out before leaving on Monday. #
MOTD banner set.
Console> (enable)
 

This example shows how to clear the message of the day:

Console> (enable) set banner motd ##
MOTD banner cleared.
Console> (enable)
Related Command

clear banner motd

set boot config-register

Use the set boot config-register commands to set the boot configuration register value.

set boot config-register 0xvalue [mod_num]
set boot config-register baud {1200 | 2400 | 4800 | 9600} [mod_num]
set boot config-register ignore-config {enable | disable} [mod_num]
set boot config-register boot {rommon | bootflash | system} [mod_num]

Syntax Description

0xvalue

(Optional) Keyword to set the 16-bit configuration register value.

mod_num

(Optional) Module number of the supervisor engine containing the Flash device.

baud

Keyword to set the console baud rate.

1200 | 2400 | 4800 | 9600

Keywords to specify baud rate.

ignore-config

Keywords to set the ignore-config feature.

enable

Keyword to enable the ignore-config feature.

disable

Keyword to disable the ignore-config feature.

boot

Keyword to specify the boot image to use on the next restart.

rommon

Keyword to specify booting from the ROM monitor.

bootflash

Keyword to specify booting from the bootflash.

system

Keyword to specify booting from the system.

Default

The defaults are as follows:

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

We recommend that you use only the rommon and system options to the set boot config-register boot command.

Each time you enter one of the set boot config-register commands, the system displays all current configuration-register information (the equivalent of entering the show boot command).

The baud rate specified in the configuration register is used by the ROM monitor only and is different from the baud rate specified by the set system baud command.

When you enable the ignore-config feature, the system software ignores the configuration information stored in NVRAM the next time the switch is restarted.

Caution Enabling the ignore-config parameter is the same as entering the clear config all command; that is, it clears the entire configuration stored in NVRAM the next time the switch is restarted.
Examples

This example shows how to specify booting from the ROM monitor:

Console> (enable) set boot config-register boot rommon
Configuration register is 0x100
ignore-config: disabled
console baud: 9600
boot: the ROM monitor
Console> (enable)
 

This example shows how to specify the default 16-bit configuration register value:

Console> (enable) set boot config-register 0x10f
Configuration register is 0x10f
break: disabled
ignore-config: disabled
console baud: 9600
boot: image specified by the boot system commands
Console> (enable)
 

This example shows how to change the ROM monitor baud rate to 4800:

Console> (enable) set boot config-register baud 4800
Configuration register is 0x90f
ignore-config: disabled
console baud: 4800
boot: image specified by the boot system commands
Console> (enable)
 

This example shows how to enable the ignore-config option:

Console> (enable) set boot config-register ignore-config enable
Configuration register is 0x94f
ignore-config: enabled
console baud: 4800
boot: image specified by the boot system commands
Console> (enable) 
 

This example shows how to specify rommon as the boot image to use on the next restart:

Console> (enable) set boot config-register boot rommon
Configuration register is 0x100
ignore-config: disabled
console baud: 9600
boot: the ROM monitor
Console> (enable) 
Related Commands

clear boot system
show boot

set boot system flash

Use the set boot system flash command to set the BOOT environment variable that specifies a list of images the switch loads at startup.

set boot system flash device:[filename] [prepend] [mod_num]

Syntax Description

device:

Device where the Flash resides.

filename

(Optional) Name of the configuration file.

prepend

(Optional) Keyword to place the device first in the list of boot devices.

mod_num

(Optional) Module number of the supervisor engine containing the Flash device.

Default

This command has no default setting.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

A colon (:) is required after the specified device.

You can enter several boot system commands to provide a fail-safe method for booting the switch. The system stores and executes the boot system commands in the order in which you enter them. Remember to clear the old entry when building a new image with a different filename in order to use the new image.

If the file does not exist (for example, if you entered the wrong filename), then the filename is appended to the bootstring, and a message displays, "Warning: File not found but still added in the bootstring."

If the file does exist, but is not a supervisor engine image, the file is not added to the bootstring, and a message displays, "Warning: file found but it is not a valid boot image."

Examples

This example shows how to append the filename cat6000-sup.5.3.1.CSX.bin on device bootflash to the BOOT environment variable:

Console> (enable) set boot system flash bootflash:cat6000-sup.s.bin prepend 
BOOT variable = bootflash:cat6000-sup.5.3.1.CSX.bin,1; bootflash:cat6000-sup.5.3.1.CSX.bin,1;
Console> (enable) 
 

This example shows how to prepend bootflash:c to the beginning of the boot string:

Console> (enable) set boot system flash bootflash:c prepend
Console> (enable)
Related Commands

clear boot system
show boot

set cam

Use the set cam commands to add entries into the CAM table and set the aging time for the CAM table.

set cam {dynamic | static | permanent} {unicast_mac | route_descr} mod/port [vlan]
set cam {static | permanent} {multicast_mac} mod/ports.. [vlan]
set cam agingtime vlan agingtime

Syntax Description

dynamic

Keyword to specify that entries are subject to aging.

static

Keyword to specify that entries are not subject to aging. Static (nonpermanent) entries will remain in the table until the active supervisor engine is reset.

permanent

Keyword to specify that permanent entries are stored in NVRAM until they are removed by the clear cam or clear config command.

unicast_mac

MAC address of the destination host used for a unicast.

route_descr

Route descriptor of the "next hop" relative to this switch. This variable is entered as two hexadecimal bytes in the following format: 004F. Do not use a "-" to separate the bytes. Valid values are 0 to 0xffff.

mod/port

Number of the module and the port.

vlan

(Optional) Number of the VLAN. This number is optional unless you are setting CAM entries to dynamic, static, or permanent for a trunk port, or if you are using the agingtime keyword.

multicast_mac

MAC address of the destination host used for a multicast.

mod/ports..

Number of the module and the ports.

agingtime

Keyword to set the period of time after which an entry is removed from the table.

agingtime

Number of seconds (0 to 1,000,000) that dynamic entries remain in the table before being deleted. Setting the aging time to 0 disables aging.

Default

The default configuration has a local MAC address, spanning-tree address (01-80-c2-00-00-00), and CDP multicast address for destination port 1/3 (the NMP). The default aging time for all configured VLANs is 300 seconds.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

If the given MAC address is a multicast address (the least significant bit of the most significant byte is set to 1) or broadcast address (ff-ff-ff-ff-ff-ff) and multiple ports are specified, the ports must all be in the same VLAN. If the given address is a unicast address and multiple ports are specified, the ports must be in different VLANs.

The set cam command does not support the MSM.

If you enter a route descriptor with no VLAN parameter specified, the default is the VLAN already associated with the port. If you enter a route descriptor, you may only use a single port number (of the associated port).

If port(s) are trunk ports, you must specify the VLAN.

Examples

This example shows how to set the CAM table aging time to 300 seconds:

Console> (enable) set cam agingtime 1 300
Vlan 1 CAM aging time set to 300 seconds.
Console> (enable) 
 

This example shows how to add a unicast entry to the table for module 2, port 9:

Console> (enable) set cam static 00-00-0c-a0-03-fa 2/9
Static unicast entry added to CAM table.
Console> (enable)
 

This example shows how to add a permanent multicast entry to the table for module 1, port 1, and module 2, ports 1, 3, and 8 through 12:

Console> (enable) set cam permanent 01-40-0b-a0-03-fa 1/1,2/1,2/3,2/8-12
Permanent multicast entry added to CAM table.
Console> (enable)
Related Commands

clear cam
show cam

set cdp

Use the set cdp commands to enable, disable, or configure CDP features globally on all ports or on specified ports.

set cdp {enable | disable} {mod/ports...}
set cdp interval interval
set cdp holdtime holdtime

Syntax Description

enable

Keyword to enable the CDP feature.

disable

Keyword to disable the CDP feature.

mod/ports...

Number of the module and the port.

interval

Keyword to specify the CDP message interval value.

interval

Number of seconds (5 to 900) the system waits before sending a message; valid values are 5 to 900 seconds.

holdtime

Keyword to specify the global Time-To-Live value.

holdtime

Number of seconds for the global Time-To-Live value; valid values are 10 to 255 seconds.

Default

The default system configuration has CDP enabled; the message interval is set to 60 seconds for every port; the default Time-To-Live value has the message interval globally set to 180 seconds.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

If you enter the global set cdp enable or disable command, CDP is globally configured. If CDP is globally disabled, CDP is automatically disabled on all interfaces, but the per-port enable (or disable) configuration is not changed. If CDP is globally enabled, whether CDP is running on an interface or not depends on its per-port configuration.

If you configure CDP on a per-port basis, the mod_num/port_num can be entered as a single module and port or a range of ports; for example, 2/1-12,3/5-12.

Examples

This example shows how to enable the CDP message display for port 1 on module 2:

Console> (enable) set cdp enable 2/1
CDP enabled on port 2/1.
Console> (enable)
 

This example shows how to disable the CDP message display for port 1 on module 2:

Console> (enable) set cdp disable 2/1
CDP disabled on port 2/1.
Console> (enable)
 

This example shows how to specify the CDP message interval value:

Console> (enable) set cdp interval 400
CDP interval set to 400 seconds.
Console> (enable)
 

This example shows how to specify the global Time-To-Live value:

Console> (enable) set cdp holdtime 200
CDP holdtime set to 200 seconds.
Console> (enable)
Related Command

show cdp

set channel cost

Use the set channel cost command to set the channel path cost and adjust the port costs of the ports in the channel automatically.

set channel cost channel_id | all [cost]

Syntax Description

channel_id

Number of the channel identification.

all

Keyword to configure all channels.

cost

(Optional) Port costs of the ports in the channel.

Default

The default is the port cost is updated automatically based on the current port costs.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guideline

When you do not enter the cost, the cost is updated based on the current port costs of the channeling ports. If you change the channel cost, member ports in the channel might be modified and saved to NVRAM. If this is the case, a message appears to list the ports whose port path costs were updated due to the channel cost modification.

Examples

This example shows how to set the channel 768 path cost to 23:

Console> (enable) set channel cost 768 23
Port(s) 1/1-2,7/3,7/5 port path cost are updated to 60.
Channel 768 cost is set to 23.
Warning:channel cost may not be applicable if channel is broken.
Console> (enable) 
 

This example shows how to set all channel path costs to 15:

Console> (enable) set channel cost all 15
Port(s) 4/1-4 port path cost are updated to 39.
Channel 768 cost is set to 15.
Warning:channel cost may not be applicable if channel is broken.
Related Command

show channel

set channel vlancost

Use the set channel vlancost command to set the channel VLAN cost and automatically adjust the port VLAN costs of the ports in the channel.

set channel vlancost channel_id cost

Syntax Description

channel_id

Number of the channel identification.

cost

(Optional) Port costs of the ports in the channel.

Default

The default is the VLAN cost is updated automatically based on the current port VLAN costs of the channeling ports.

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

When you do not enter the cost, the cost is updated based on the current port VLAN costs of the channeling ports.

You can configure only one channel at a time.

If you change the channel VLAN cost, member ports in the channel might be modified and saved to NVRAM. If this is the case, a message appears to list the ports whose port path costs were updated due to the channel cost modification.

Example

This example shows how to set the channel 768 path cost to 10:

Console> (enable) set channel vlancost 768 10
Port(s) 1/1-2 vlan cost are updated to 24.
Channel 768 vlancost is set to 10.
Console> (enable) 
Related Command

show channel

set cops

Use the set cops commands to configure COPS functionality.

set cops server ipaddress [port] [primary] [diff-serv | rsvp]
set cops domain-name domain_name
set cops retry-interval initial incr max

Syntax Description

server

Keyword to set the name of the COPS server.

ipaddress

IP address or IP alias of the server.

port

(Optional) Number of the TCP port the switch connects to on the server.

primary

(Optional) Keyword to specify the primary server.

diff-serv

(Optional) Keyword to set the COPS server for differentiated services.

rsvp

(Optional) Keyword to set the COPS server for RSVP+.

domain-name domain_name

Keyword and variable to specify the domain name of the switch.

retry-interval

Keyword to specify the retry interval in seconds.

initial

Initial timeout value; valid values are 0 to 65535 seconds.

incr

Incremental value; valid values are 0 to 65535 seconds.

max

Maximum timeout value; valid values are 0 to 65535 seconds.

Default

The defaults are as follows:

Command Type

Switch command.

Command Mode

Privileged.

Usage Guidelines

You can configure the names or addresses of up to two PDP servers. One must be the primary, and the optional second server is a secondary, or backup, PDP server.

The COPS domain name can be set globally only; there is no option to set it for each COPS client.

Names such as the server, domain-name, and roles can contain a maximum of 31 characters; longer names are truncated to 31 characters. Valid letters are a-z, A-Z, 0-9, ., - and _. Names cannot start with an underscore (_). The names are not case-sensitive for matching, but are case-sensitive for display.

When specifying the retry-interval, the total of the initial timeout value and the incremental value (increment on each subsequent failure) may not exceed the maximum timeout value.

Examples

This example shows how to configure a server as a primary server:

Console> (enable) set cops server 171.21.34.56 primary
171.21.34.56 added to COPS server table as primary server.
Console> (enable) 
 

This example shows how to configure a server as a primary RSVP+ server:

Console> (enable) set cops server 171.21.34.56 primary rsvp
171.21.34.56 added to COPS server table as primary server for RSVP.
Console> (enable) 
 

This example shows how to configure a server as a secondary (or backup) server:

Console> (enable) set cops server my_server2
my_server2 added to the COPS server table as backup server.
Console> (enable) 
 

This example shows how to set the domain name:

Console> (enable) set cops domain-name my_domain
Domain name set to my_domain.
Console> (enable) 
 

This example shows how to set the retry interval:

Console> (enable) set cops retry-interval 15 1 30
Connection retry intervals set.
Console> (enable) 
 

This example shows the display output if the total of the initial timeout value and the incremental value you entered exceeds the maximum timeout value:

Console> (enable) set cops retry-interval 15 1 10
The initial timeout plus the increment value may not exceed the max value.
Console> (enable) 
Related Commands

clear cops
show cops


hometocprevnextglossaryfeedbacksearchhelp
Posted: Fri Dec 31 10:58:09 PST 1999
Copyright 1989-1999©Cisco Systems Inc.