Default
　　180 seconds
　　Command Mode
　　Global configuration
　　Example
　　This example shows how to set the CDP holdtime to 15 seconds.
　　hostname(config)# cdp holdtime 15
　　Related Commands
　　cdp (advertise-v2)
　　cdp (enable)
　　cdp (timer)
　　show cdp (interface)
　　show cdp (neighbors)
　　cdp (timer)
　　Use the cdp timer global configuration command to specify the rate at which Cisco Discovery PRotocol (CDP) packets are sent. Use the no cdp timer command to reset the CDP rate to the default value.
　　cdp timer timer
　　no cdp timer
　　Syntax Description
　　timer Number between 5 and 900 seconds.
　　
　　Default
　　60 seconds
　　Command Mode
　　Global configuration
　　Example
　　This example shows how to set the CDP packet rate to once in 5 seconds.
　　hostname(config)# cdp timer 5
　　Related Commands
　　cdp (advertise-v2)
　　cdp (enable)
　　cdp (holdtime)
　　show cdp (interface)
　　show cdp (neighbors)
　　cgmp
　　Use the cgmp global configuration command to enable Cisco Group Management Protocol (CGMP) functionality on a switch. Use the no cgmp command to disable CGMP.
　　cgmp
　　no cgmp
　　Syntax Description
　　This command has no arguments or keyWords.
　　Default
　　CGMP is enabled.
　　Command Mode
　　Global configuration
　　Example
　　This example shows how to enable CGMP on a switch.
　　hostname(config)# cgmp
　　Related Commands
　　cgmp (hold-time)
　　cgmp (leave-processing)
　　cgmp (remove)
　　clear (cgmp)
　　show (cgmp)
　　cgmp (hold-time)
　　Use the cgmp hold-time global configuration command to set the Cisco Group Management Protocol (CGMP) hold time. Use the no cgmp hold-time command to reset the default hold time.
　　cgmp hold-time hold_time
　　no cgmp hold-time
　　Syntax Description
　　holdtime Number between 5 and 900 seconds.
　　
　　Defaults
　　Default hold time is 600 seconds.
　　Command Mode
　　Global configuration
　　Example
　　This example shows how to set the CGMP hold time to 40 seconds.
　　hostname(config)# cgmp hold-time 40
　　
　　This example shows how to reset the CGMP hold time to its default value.
　　hostname(config)# no cgmp hold-time
　　Related Commands
　　cgmp
　　cgmp (leave-processing)
　　cgmp (remove)
　　clear (cgmp)
　　show (cgmp)
　　cgmp (leave-processing)
　　Use the cgmp (leave-processing) global configuration command to enable Cisco Group Management Protocol (CGMP) Fast Leave processing. The no form of the command disables CGMP Fast Leave processing.
　　cgmp leave-processing
　　no cgmp leave-processing
　　Syntax Description
　　This command has no arguments or keywords.
　　Default
　　The default configuration is disabled.
　　Command Mode
　　Global configuration
　　Usage Guidelines

　　Fast Leave processing optimizes the use of network bandwidth by redUCing the delay between members of a multicast group leaving the group and the actual pruning of multicast traffic to that segment.
　　This command is available only if CGMP is enabled. Otherwise, the command is not recognized.
　　Example
　　This command enables CGMP Fast Leave processing.
　　hostname(config)# cgmp leave-processing
　　Related Commands
　　cgmp
　　cgmp (hold-time)
　　cgmp (remove)
　　clear (cgmp)
　　show (cgmp)
　　cgmp (remove)
　　Use the cgmp remove global configuration command to remove an address that has been added to the system by Cisco Group Management Protocol (CGMP) activity.
　　cgmp remove mac-address
　　Syntax Description
　　mac-address MAC address.
　　
　　Default
　　None
　　Command Mode
　　Global configuration
　　Example
　　This example shows how to remove the address 0100.5e00.0203 from the system.
　　hostname(config)# cgmp remove 0100.5e00.0203
　　Related Commands
　　cgmp
　　cgmp (hold-time)
　　cgmp (leave-processing)
　　clear (cgmp)
　　show (cgmp)
　　cgmp (reserved)
　　Use the cgmp reserved global configuration command to permit Cisco Group Management Protocol (CGMP) reserved addresses (from 0100.5E00.0000 to 0100.5E00.00FF) to join as Group Destination Addresses. The no form of the command excludes these reserved addresses.
　　cgmp reserved
　　no cgmp reserved
　　Syntax Description
　　This command has no arguments or keywords.
　　Default
　　Permitted
　　Command Mode
　

 Global configuration
　　Example
　　This command shows how to exclude reserved addresses from the Group Destination Address for compatibility with Catalyst 5000 series switches.
　　hostname# no cgmp reserved
　　Related Commands
　　cgmp
　　cgmp (hold-time)
　　cgmp (remove)
　　cgmp (leave-processing)
　　clear (cgmp)
　　show (cgmp)
　　clear (cgmp)
　　Use the clear cgmp privileged Exec command to remove the specified multicast group or router.
　　clear cgmp [vlan vlan-id] [group [address] router [address]]
　　Syntax Description
　　vlan vlan-id A VLAN ID number from 1 to 1005.
　　group One or more multicast groups.
　　router One or more routers.
　　address MAC address of specific multicast group or router.
　　
　　Default
　　None
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　If the vlan option is specified with the group or router option, only multicast groups or routers in the specified VLAN are removed. If the vlan option is specified without group or router option, all multicast groups and routers are removed from the specified VLAN.
　　Example
　　This command removes all multicast groups and routers from VLAN 1.
　　hostname# clear cgmp vlan 1
　　
　　This command removes all multicast groups.

　　hostname# clear cgmp group
　　
　　This command removes all multicast routers.
　　hostname# clear cgmp router
　　
　　This command removes the multicast group with the MAC address 0100.5e00.0128.
　　hostname# clear cgmp group 0100.5e00.0128
　　
　　This command removes the multicast router with the MAC address 00e0.1e68.7751.
　　hostname# clear cgmp router 00e0.1e68.7751
　　Related Commands
　　cgmp
　　cgmp (hold-time)
　　cgmp (leave-processing)
　　cgmp (remove)
　　show (cgmp)
　　clear (dns-cache)
　　Use the clear dns-cache privileged Exec command to remove all cached Domain Name System (DNS) entries from the switch.
　　clear dns-cache
　　Syntax Description
　　This command has no arguments or keywords.
　　Command Mode
　　Privileged Exec
　　Example
　　This example shows how to clear all DNS entries for the switch.
　　hostname# clear dns-cache
　　Related Commands
　　ip (domain-name)
　　ip (name-server)
　　clear (counters)
　　Use the clear counters privileged Exec command to reset the interface counters for a switched port interface to zero.
　　clear counters [type module/port]
　　Syntax Description
　　type Interface type: ethernet, fastethernet, fddi, atm, or port-channel.
　　module Module interface number:0 for fixed1 or A for module A2 or B for module B
　　port Port identification number or name:1 to 25 Ethernet (fixed)26, 27 Fast Ethernet (fixed)Port channel
　　
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　If you do not specify type module/port, the switch clears the counters for all interfaces.
　　Example
　　This example shows how to clear counters for the Ethernet port 1.
　　hostname# clear counters ethernet 0/1
　　Related Commands
　　interface
　　show (interfaces)
　　clear (mac-address-table)
　　Use the clear mac-address-table privileged Exec command to remove a specified address (or set of addresses) from the MAC address table.
　　clear mac-address-table [dynamic restricted static permanent] [address mac-address]
　　[interface type module/port]
　　Syntax Description
　　dynamic Clears only dynamic addresses.
　　restricted static Clears only restricted static addresses.
　　permanent Clears only permanent addresses.
　　address Clears only a specified address.
　　mac-address Target MAC address.
　　interface Clears all addresses for an interface.
　　type Interface type: ethernet, fastethernet, fddi, atm, or port channel.
　　module The module interface number.0 for fixed1 or A for module A2 or B for module B
　　port Port interface number ranging from 1 to 28:1 to 25 Ethernet (fixed)26, 27 Fast Ethernet (fixed)Port channel
　　
　　Default
　　The dynamic addresses are cleared.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　If clear mac-address-table is invoked with no options, all dynamic addresses are removed. If you specify an address but do not specify an interface, the address is deleted from all interfaces. If you specify an interface but do not specify an address, all addresses on the specified interface are removed.

　　If a targeted address is not present in the MAC forwarding table, the following error message appears:
　　MAC address not found
　　Example
　　This example shows how to clear all dynamic addresses in the MAC forwarding table.
　　hostname# clear mac-address-table
　　
　　This command clears the permanent address 0040.C80A.2F07 on Ethernet port 1.
　　hostname# clear mac-address-table permanent address 0040.C80A.2F07 interface ether 0/1
　　Related Commands
　　mac-address-table (aging-time)
　　mac-address-table (permanent)
　　mac-address-table (restricted static)
　　show (mac-address-table)
　　show (mac-address-table security)
　　clear (uplink-fast statistics)
　　Use the clear uplink-fast statistics privileged Exec command to reset all Uplink Fast counter statistics to zero.
　　clear uplink-fast statistics
　　Syntax Description
　　This command has no additional arguments or keywords.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　This command is not functional when bridge groups are enabled.
　　Example
　　This example shows how to reset all Uplink Fast counters to zero:
　　hostname# clear uplink-fast statistics
　　Related Commands
　　uplink-fast
　　show (uplink-fast)
　　show (uplink-fast statistics)
　　clear (vtp statistics)
　　Use the clear vtp statistics privileged Exec command to reset all VLAN Trunk Protocol (VTP) statistics counters to zero.
　　clear vtp statistics
　　Syntax Description
　　This command has no additional arguments or keywords.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　This command is not functional when bridge groups are enabled.
　　Example
　　This example shows how to reset all VTP statistics counters to zero.
　　hostname# clear vtp statistics
　　Related Commands
　　delete (vtp)
　　show (vtp)
　　show (vtp statistics)
　　vtp
　　vtp trunk pruning-disable
　　cluster
　　The cluster global configuration command is used under certain conditions to add the switch back into a cluster. The no cluster command removes the switch from its cluster.
　　cluster commander-address
　　no cluster commander-address
　　Syntax Description
　　commander_address MAC address of commander switch.
　　
　　Command Mode
　　Global configuration
　　Usage Guidelines
　　Caution We strongly recommend that you use a command switch management interface to add or remove Catalyst 1900 series or Catalyst 2820 series switches from a cluster. The cluster commander-address command is primarily for debugging and recovery purposes.If you use the no cluster command to remove a Catalyst 1900 series or Catalyst 2820 series switch, you cannot add the switch back into the cluster until you use one of the command switch management interfaces to remove, and then add the switch.
　　To learn more about member switches in a cluster, refer to the Catalyst 1900 Series Installation and Configuration Guide or the Catalyst 2820 Series Installation and Configuration Guide.

　　Example
　　This example shows how to remove the switch from a cluster.
　　hostname(config)# no cluster commander-address
　　
　　This example shows how to add the switch back into the cluster managed by command switch 00D0.5868.F580 after it has been removed and added again using one of the command switch management interfaces.
　　hostname(config)# cluster 00D0.5868.F580
　　Related Commands
　　show cluster
　　configure
　　Use the configure privileged Exec command to enter the global configuration mode. Use the optional terminal keyword to specify a specific terminal.
　　config [terminal]
　　Syntax Description
　　terminal Name of target terminal.
　　
　　Command Mode
　　Privileged Exec
　　Example
　　This example shows how to enter global configuration mode.
　　hostname# configure
　　hostname(config)#
　　
　　This example shows how to enter global configuration mode from terminal t.
　　hostname# configure t
　　Related Commands
　　disable
　　enable
　　end
　　exit
　　interface
　　line console
　　copy (nvram tFTP)
　　Use the copy (nvram tftp) privileged Exec command to upload the running nondefault configuration to a Trivial File Transfer Protocol (TFTP) server host and the destination file dst_file.
　　copy nvram tftp://host/dst_file
　　Syntax Description
　　//host/dst_file Target host and destination file where host is an IP address or a hostname.
　　
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　Error messages appear in the following situations:
　　?The host is unreachable (using existing time-out implementation).
　　?The host terminates the TFTP session.
　　?The host specified cannot be resolved through DNS.
　　If other download or upload Operations (firmware, configuration, web pages) are in progress, the following error message appears:
　　Other downloads or uploads in progress. Please wait until existing download or upload is completed.
　　Example
　　This example shows how to use TFTP to upload the switch NVRAM configuration to the host spaniel using destination file matilda.cfg.
　　hostname# copy nvram tftp://spaniel/matilda.cfg
　　
　　Configuration upload is successfully completed
　　
　　If the upload fails, the following message displays:
　　Error: Configuration upload operation failed
　　Related Commands
　　copy (tftp)
　　service (config)
　　show (running-config)
　　show (version)
　　tftp (accept)
　　tftp (server)
　　copy (tftp)
　　Use the copy tftp privileged Exec command to download a configuration or operation code file from the Trivial File Transfer Protocol (TFTP) server.
　　copy tftp://host/src_file {opcode [type module] nvram}
　　Syntax Description
　　//host/src_file Host and source file where host is an IP address or hostname. Source filename can be up to 80 characters.

　　opcode Download new operation code.
　　type Interface type. The valid values are fddi and atm.
　　module Interface number: 1 or A for module A, and 2 or B for module B.
　　nvram Download a configuration file into NVRAM.
　　
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　You must specify type and module if the download is for a module.
　　Downloaded configuration files are executed immediately. If the switch is connected to a console, any errors during execution will generate an error message. The switch attempts to execute all commands, irrespective of failures.
　　When downloading an operation code file, the entire system (including other CLI sessions) is inactive for about 30 seconds after the file is retrieved.
　　Error messages appear in the following situations:
　　?The operation code file is not in the correct format.
　　?The host is unreachable (using existing time-out implementation).
　　?The host aborts the TFTP session.
　　?The host specified cannot be resolved through DNS.
　　?The module specified does not have firmware or a configuration that can be downloaded.
　　If other download or upload operations (firmware, configuration, web pages) are in progress, the following message appears:
　　Other downloads or uploads in progress. Please wait until existing download or upload is completed.
　　Examples
　　This example shows how to download new system operational code op.bin from host spaniel.
　　hostname# copy tftp://spaniel/op.bin opcode
　　
　　This example shows how to download new FDDI operational code fddi.bin from host spaniel to the FDDI module in slot A.
　　hostname# copy tftp://spaniel/fddi.bin opcode fddi A
　　
　　TFTP successfully downloaded operational code
　　
　　This example shows how to download configuration file matilda.cfg to NVRAM from host spaniel.
　　hostname# copy tftp://spaniel/matilda.cfg nvram
　　
　　TFTP successfully downloaded configuration file
　　
　　If the download fails, the following message displays:
　　Error: TFTP failed to download the configuration file
　　Related Commands
　　copy (nvram tftp)
　　service (config)
　　show (running-config)
　　show (version)
　　tftp (accept)
　　tftp (server)
　　copy (xmodem)
　　Use the copy xmodem privileged Exec command to download an operation code or firmware file by using the XMODEM protocol.
　　copy xmodem: src_file opcode [type module]
　　Syntax Description
　　src_file Firmware filename.
　　opcode Download new operation code.
　　type Interface type. Valid values are fddi and atm.
　　module Interface number: 1 or A for module 1, 2 or B for module 2.
　　
　　Default
　　If you specify type and module, the file copies the code or file to the specified module. When type and module are not specified, the file copies them to the switch firmware.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　You cannot enter any new information or commands until the download is completed. After downloading operation code file, the entire system (including other CLI sessions) is inactive for about 30 seconds.

　　Example
　　This example shows how to download the operational code file.
　　hostname# copy xmodemp_code.bin opcode
　　
　　This shows how to download new FDDI operational code fddi.bin to module slot A.
　　hostname# copy xmodem:fddi.bin opcode fddi A
　　Related Commands
　　copy (tftp)
　　copy (xmodem)
　　show (running-config)
　　show (version)
　　databits
　　Use the databits line-configuration command to set the data bits per character for a port.
　　databits [7 8]
　　Syntax Description
　　7 or 8 Number of data bits per character.
　　
　　Default
　　8 data bits per character.
　　Command Mode
　　Line configuration
　　Example
　　This example shows how to set the number of data bits per character to 7.
　　hostname(config-line)# databits 7
　　Related Commands
　　autobaud
　　line console
　　modem (dialin)
　　parity
　　show (line)
　　show (terminal)
　　speed
　　stopbits
　　terminal
　　delete (nvram)
　　Use the delete nvram privileged Exec command to reset the system or module configuration to factory defaults.
　　delete nvram [type module]
　　Syntax Description
　　type Interface type. Valid values are fddi and atm.
　　module Module interface number: 1 or A for module A, and 2 or B for module B.
　　
　　Default
　　The system or module is reset to factory defaults.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　
　　Note If you reset a Catalyst 2820 switch by using the delete nvram command, you reset both the system and the module. However, resetting the switch to factory defaults does not reset module arguments stored in the module NVRAM.
　　
　　Examples
　　This example shows how to reset system configuration to factory defaults.
　　hostname(config)# delete nvram
　　
　　This command resets the switch with factory defaults. All parameters will revert to their default factory settings. All static system and dynamic addresses will be removed.
　　Reset system with factory defaults, [y]es or [n]o?
　　
　　Press Y or N to proceed.
　　This example shows how to reset the ATM module in slot A to factory defaults.
　　hostname(config)# delete nvram atm 1
　　
　　This command resets the module and restores all settings to factory defaults.
　　The module is deinstalled until it successfully completes its self tests.
　　
　　Reset module with factory defaults, [Y]es or [N]o?
　　
　　Press Y or N to proceed.
　　Related Commands
　　copy (tftp)
　　reload
　　delete (vtp)
　　Use the delete vtp privileged Exec command to set the system VLAN Trunk Protocol (VTP) configuration back to factory defaults.
　　delete vtp
　　Syntax Description
　　This command has no additional arguments or keywords.
　　Command Mode
　　Privileged Exec
　　Usage Guidelines
　　Resetting the system VTP configuration also resets the system. This command first prompts the user to confirm:

　　This command resets the switch VTP arguments to factory defaults. All other arguments will be unchanged.
　　Reset system VTP arguments to factory defaults, [y]es or [n]o?
　　
　　Press Y or N to proceed.
　　Example
　　This example shows how to reset system VTP configuration to factory defaults.
　　hostname# delete vtp
　　Related Commands
　　clear (vtp statistics)
　　show (vtp)
　　show (vtp statistics)
　　vtp
　　vtp trunk pruning-disable
　　description
　　Use the description interface configuration command to describe or name an interface. Use the no description command to remove a description from an interface.
　　description name-string
　　no description
　　Syntax Description
　　name-string A text description between 1 and 80 alphanumeric characters.
　　
　　Default
　　This command has no default value.
　　Command Mode
　　Interface configuration
　　Usage Guidelines
　　To use the description command, you must first identify the interface you want while working in global configuration mode. Enter the interface command with an interface identifier to enter interface configuration mode, where you can then enter a description.
　　If you want to enter a description with spaces between characters, you must enclose the string in quotation marks (see "Paul's machine" example, below)
　　Example
　　This example shows how to give the name Hal to Ethernet port 1.
　　hostname(config)# interface ether 0/1
　　hostname(config-if)# description Hal
　　
　　This example shows how to give the name Paul's machine to ATM module 1.
　　hostname(config)# interface atm A
　　hostname(config-if)# description "Paul's machine"
　　
　　This example shows how to give the description server1 to port 1 on ATM module 1.
　　hostname(config)# interface atm A
　　hostname(config-if)# description server1
　　Related Commands
　　interface
　　show cdp (interface)
　　show (interfaces)
　　disable
　　Use the disable privileged Exec command to exit the privileged access level and enter user levels.
　　disable
　　Syntax Description
　　This command has no arguments or keywords.
　　Command Mode
　　Privileged Exec
　　Example
　　This example shows how to exit privileged Exec mode and change to user Exec mode.
　　hostname# disable
　　Related Command
　　configure
　　enable
　　end
　　exit
　　interface
　　line console
　　duplex
　　Use the duplex interface configuration command to enable duplex mode for an interface.
　　duplex {auto full full-flow-control half}
　　Syntax Description
　　auto Auto-negotiation of duplex mode.
　　full Full-duplex mode.
　　full-flow-control Force full-duplex mode with flow control.
　　half Half-duplex mode.
　　
　　Defaults
　　For 100-Mbps TX ports: duplex auto.
　　For all other ports that support half- and full-duplex: duplex half.

　　Command Mode
　　Interface configuration
　　Usage Guidelines
　　Use the auto argument only for fixed Fast Ethernet TX ports. In auto-negotiation mode, the switch attempts to negotiate full-duplex connectivity with the connecting device. If negotiation is successful, the port operates in full-duplex mode. If the connecting device is unable to operate in full-duplex, the port operates in half-duplex. This process is repeated whenever there is a change in link status.
　　Example
　　This example shows how to set the port to full-duplex mode.
　　hostname(config-if)# duplex full
　　Related Commands
　　interface
　　show (interfaces)
　　back-pressure
　　ecc
　　Use the ecc global configuration command to enable Enhanced Congestion Control (ECC). This command allows frames to be discarded early when a port becomes congested, which limits the number of frames queued on a port. Use the no ecc command to disable congestion control.
　　ecc {10M A B} {adaptive moderate-aggressive aggressive}
　　no ecc [10M A B]
　　Syntax Description
　　10M Congestion control for 10-Mbps ports.
　　A Congestion control for port A. For single Fast Ethernet fixed and modular ports only.
　　B Congestion control for port B. For single Fast Ethernet fixed and modular ports only.
　　adaptive Adaptive congestion control.
　　moderate-aggressive Moderately aggressive congestion control.
　　aggressive Aggressive congestion control.
　　
　　Default
　　Enhanced congestion control is disabled.
　　Command Mode
　　Global configuration
　　Examples
　　This example shows how to set enhanced congestion control for the 10-Mbps Ethernet ports to adaptive.
　　hostname(config)# ecc 10m adaptive
　　
　　This example shows how to set enhanced congestion control for Fast Ethernet port A to aggressive.
　　hostname(config)# ecc A aggressive
　　Related Command
　　show (port system)
　　enable
　　Use the enable Exec command to enter privileged Exec mode.
　　enable [access-level]
　　Syntax Description
　　access-level 1 through 14 (user Exec level) or 15 (privileged Exec level).
　　
　　Default
　　The access-level default for initial login is 1. The default access level after login is 15.
　　Command Mode
　　User and privileged Exec
　　Usage Guidelines
　　If a password is configured, you are prompted for the password:
　　Password:
　　
　　You are allowed three attempts to provide the correct password. The same prompt is repeated until you enter the correct password or you exceed the maximum number of attempts. If the password fails after the maximum attempts, the following error message appears:
　　Bad password.
　　Example
　　This example shows you how to move from user Exec mode access to privileged Exec mode access.
　　hostname> enable
　　hostname#
　　Related Command
　　configure
　　disable
　　end
　　exit
　　interface
　　line console
　　enable (password)

　　Use the enable password global configuration command to set unencrypted user Exec or privileged Exec passwords. Use the no enable password command to clear the password.
　　enable password level <1-15>
　　no enable password level level
　　Syntax Description
　　level <1-15> Level for which the password applies:1-14 user Exec privileges.15 privileged Exec privileges.
　　password A noncase-sensitive string of between 4 and 8 characters, spaces, and punctuation (except double quotes). Password strings with blank spaces must be enclosed in double quotes.
　　
　　Default
　　No default password.
　　Command Mode
　　Global configuration
　　Usage Guidelines
　　The level argument must be specified.
　　For more information about assigning passwords of various levels and encryption modes, see "Understanding Command Modes" in "Overview."
　　Examples
　　This example shows how to set an unencrypted privileged Exec password to WILLOW 6.
　　hostname(config)# enable password level 15 "WiLLoW 6"
　　
　　Both of these examples show how to set an unencrypted user Exec password to MAY DAY.
　　hostname(config)# enable password level 1 "May Day"
　　hostname(config)# enable password level 8 "may day"
　　Related Commands
　　enable (secret)
　　enable (use-tacacs)
　　enable (secret)
　　Use the enable secret global configuration command to set encrypted user Exec or privileged Exec passwords. Use the no enable secret command to clear the password.
　　enable secret [level <1-15>] [0 5 ]
　　no enable secret [level <1-15>]
　　Syntax Description
　　level <1-15> Level for which the password applies:1-14 user Exec privileges.15 privileged Exec privileges.
　　0 Specifies an unencrypted password follows.
　　5 Specifies an encrypted password follows.
　　password A case-sensitive string of between 1 and 25 characters, spaces, and punctuation.
　　
　　Default
　　Privilege level 15, unencrypted.
　　No default password.
　　Command Mode
　　Global configuration
　　Usage Guidelines
　　
　　Note Encrypted passwords are typically used only in configuration files generated by the switch.
　　
　　The level argument must be used to specify any level 1 through 14 encrypted password. The level argument is optional when specifying a default level 15 encrypted password.
　　Although levels 2 to 14 are accepted, levels 1 to 14 map to user-level password (level 1). For more information about assigning passwords of various levels and encryption modes, see "Understanding Command Modes" in the "Overview" chapter.
　　If you enter a password that begins with a number followed by a space, an error message appears:
　　hostname(config)# enable secret level 1 9 lives
　　Invalid encryption type: 9
　　Examples
　　The following examples show different ways to set an unencrypted privileged Exec password to Pass&WoRd-87.
　　hostname(config)# enable secret Pass&WoRd-87

　　hostname(config)# enable secret 0 Pass&WoRd-87
　　hostname(config)# enable secret level 15 Pass&WoRd-87
　　hostname(config)# enable secret level 15 0 Pass&WoRd-87
　　
　　The following examples show two ways to set an encrypted privileged Exec password to grandkey.
　　hostname(config)# enable secret 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
　　hostname(config)# enable secret level 15 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
　　
　　The following examples show two ways to set an unencrypted user Exec password to Forescore & 7 years ago.
　　hostname(config)# enable secret level 1 Forescore & 7 years ago
　　hostname(config)# enable secret level 12 0 Forescore & 7 years ago
　　
　　The following example shows how to set an encrypted user Exec password to grandkey.
　　hostname(config)# enable secret level 14 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
　　Related Commands
　　enable (password)
　　enable (use-tacacs)
　　enable (use-tacacs)
　　Use the enable use-tacacs global configuration command to use the Cisco Terminal Access Controller Access Control System Plus (TACACS+) for authentication of all switch passwords from a central authentication server. Use the no enable use-tacacs command to disable central authentication of switch passwords.
　　enable use-tacacs
　　no enable use-tacacs
　　Syntax Description
　　This command has no additional arguments or keywords.
　　Default
　　Disabled.
　　Command Mode
　　Global configuration
　　Usage Guidelines
　　If you do not use TACACS+ to authenticate passwords, local authentication is enabled.
　　Example
　　This example shows how to use TACACS+ for central authentication of switch passwords.
　　hostname(config)# enable use-tacacs
　　Related Commands
　　enable (password)
　　enable (secret)
　　login (tacacs)
　　show (tacacs)
　　tacacs-server (last-resort)
　　end
　　Use the end command from global configuration mode (config), interface configuration mode (config-if), and line configuration mode (config-line) to exit the current mode and enter privileged Exec mode.
　　end
　　Syntax Description
　　This command has no arguments or keywords.
　　Default
　　None
　　Command Mode
　　All configuration modes.
　　Usage Guidelines
　　To exit the system and terminate the console or telnet session, use the exit command.
　　Example
　　This example shows how to exit the global configuration mode and enter privileged Exec mode.
　　hostname(config)# end
　　hostname#
　　Related Commands
　　configure
　　disable
　　enable
　　exit
　　interface
　　line console
　　exit
　　Use the exit configuration command to exit the system or current configuration mode.
　　exit
　　Syntax Description
　　This command has no arguments or keywords.
　　Command Mode
　　All configuration and Exec modes.
　　Usage Guidelines
　　If the current mode is privileged or user Exec, this command exits the system and terminates the console or Telnet session. If the current mode is global configuration, this commands sets the mode to privileged Exec. If the current mode is other than global configuration, this command sets the mode to global configuration.

　　Example
　　This example shows how to exit from global configuration mode and enter privileged Exec mode:
　　hostname(config)# exit
　　hostname#
　　
　　This example shows how to exit from interface configuration mode and enter global configuration mode:
　　hostname(config-if)# exit
　　hostname(config)#
　　Related Commands
　　configure
　　disable
　　enable
　　end
　　interface
　　line console
　　fddi (authorization)
　　Use the fddi authorization interface configuration command to enable authorization checking for the station management (SMT) entity. Use the no fddi authorization command to disable authorization checking.
　　fddi authorization
　　no fddi authorization
　　Syntax Description
　　This command has no additional arguments or keywords.
　　Default
　　FDDI authorization is disabled.
　　Command Mode
　　Interface configuration
　　Usage Guidelines
　　When authorization string checking is enabled, the FDDI module uses the current authorization string to verify SMT requests from remote stations. This command is only valid within FDDI module interface-configuration mode.
　　Example
　　This example shows how to enable authorization string checking.
　　hostname(config-if)# fddi authorization
　　
　　This example shows how to disable authorization string checking.
　　hostname(config-if)# no fddi authorization
　　Related Commands
　　fddi (auth-string)
　　fddi (notify-timer)
　　fddi (novell-snap-translation)
　　fddi (unmatched-snap-translation)
　　interface
　　show (interfaces)
　　fddi (auth-string)
　　Use the fddi auth-string interface configuration command to assign a new authorization string value used in the verification of station management (SMT) requests. Use the no fddi auth-string command to clear the existing authorization string.
　　fddi auth-string string
　　no fddi auth-string
　　Syntax Description
　　string A string of 4 to 80 alphanumeric characters entered in multiples of 4 characters.
　　
　　Default
　　No FDDI authorization string is set.
　　Command Mode
　　Interface configuration
　　Usage Guidelines
　　This command is only valid within FDDI module interface-configuration mode.
　　
　　Note You must enter an authorization string with a number of characters (including punctuation and numbers) that is divisible by 4.
　　
　　Example
　　This example shows how to assign the authorization string value check_it (8 characters).
　　hostname(config-if)# fddi auth-string check_it
　　Related Commands
　　fddi (authorization)
　　fddi (notify-timer)
　　fddi (novell-snap-translation)
　　fddi (unmatched-snap-translation)
　　interface
　　show (interfaces)
　　fddi (notify-timer)
　　Use the fddi notify-timer interface configuration command to assign a new timer value for the Neighbor Notification Protocol. Use the no fddi notify-timer command to set the timer value to module defaults.

　　fddi notify-timer seconds
　　no fddi notify-timer
　　Syntax Description
　　seconds A number between 2 and 30 seconds.