show interfaces status
Displays a summary of all switch interfaces including their status, VLAN, duplex, speed, and type, used to quickly verify interface connectivity and configuration.
Definition: show interfaces status is a Cisco IOS privileged exec command. Displays a summary of all switch interfaces including their status, VLAN, duplex, speed, and type, used to quickly verify interface connectivity and configuration.
Overview
The 'show interfaces status' command is a cornerstone for any network engineer working with Cisco switches. It provides a concise, tabular summary of all switch ports, displaying their administrative and operational status, assigned VLAN, duplex mode, speed, and port type. This command is essential for quickly verifying interface connectivity and configuration, especially in environments with hundreds of ports.
Unlike 'show interfaces' which gives verbose per-interface details, 'show interfaces status' offers a bird's-eye view, making it ideal for initial troubleshooting and inventory checks. The networking concept behind this command is the OSI Layer 1 and Layer 2 status: it shows whether a cable is plugged in (operational status), whether the port is administratively enabled, and the negotiated or configured speed/duplex. It also reveals VLAN membership, which is critical for understanding broadcast domain segmentation.
You would reach for this command when you need to quickly identify which ports are up/down, which are in error-disable state, or to verify that a newly connected device is being recognized. It is often the first command in a troubleshooting workflow after a connectivity issue is reported. For example, if a user cannot access the network, you would run 'show interfaces status' to see if the port is 'notconnect' (cable issue), 'err-disabled' (security violation), or 'connected' (good).
Alternatives like 'show interfaces' provide more detail but are slower to parse for a large number of ports. 'show interfaces description' is similar but focuses on descriptions. This command fits into the broader workflow as a quick health check before diving into deeper diagnostics like 'show interfaces counters' or 'show spanning-tree'.
Important IOS behavior: the output is buffered and may be truncated if the terminal length is set; use 'terminal length 0' to disable paging. The command requires privileged EXEC mode (enable). It does not affect the running configuration.
In some IOS versions, the output includes a 'Vlan' column that shows the access VLAN or the native VLAN for trunk ports. The command is available on most Catalyst switches running IOS or IOS-XE.
show interfaces statusWhen to Use This Command
- Check if a newly connected device is being detected by the switch (status shows 'connected' or 'notconnect').
- Verify that interfaces are in the correct VLAN after VLAN configuration changes.
- Troubleshoot a user reporting no network connectivity by checking interface status and errors.
- Audit interface configurations for speed/duplex mismatches that cause performance issues.
Parameters
| Parameter | Syntax | Description |
|---|---|---|
| interface-id | interface-id (e.g., GigabitEthernet0/1) | Specifies a particular interface to display status for. If omitted, all interfaces are shown. Common mistake: using an incorrect interface name or slot/port number, leading to 'Invalid input detected' error. |
| module | module <1-9> | Displays status for interfaces on a specific module (line card) in modular switches. Valid values depend on the chassis. Common mistake: specifying a module number that does not exist. |
| vlan | vlan <1-4094> | Filters output to show only interfaces belonging to a specific VLAN. Useful for checking all ports in a VLAN. Common mistake: using a VLAN ID that is not configured or out of range. |
Command Examples
Basic show interfaces status
show interfaces statusPort Name Status Vlan Duplex Speed Type Gi0/0/0 Link to Core connected 1 a-full a-1000 10/100/1000BaseTX Gi0/0/1 User PC notconnect 10 auto auto 10/100/1000BaseTX Gi0/0/2 Server disabled 20 auto auto 10/100/1000BaseTX Gi0/0/3 connected 1 a-half a-10 10/100/1000BaseTX Gi0/0/4 VoIP Phone connected 10 a-full a-100 10/100/1000BaseTX
Port: Interface identifier. Name: Description configured with 'description' command. Status: 'connected' (link up), 'notconnect' (cable unplugged or device off), 'disabled' (administratively down). Vlan: Access VLAN number (or trunk). Duplex: 'a-full' (auto-negotiated full), 'a-half' (auto half), 'full' (manually set), 'half'. Speed: 'a-1000' (auto 1Gbps), 'a-100' (auto 100Mbps), 'a-10' (auto 10Mbps), or fixed values. Type: Physical interface media type.
Show interfaces status with errors
show interfaces statusPort Name Status Vlan Duplex Speed Type Gi0/0/0 Link to Core connected 1 a-full a-1000 10/100/1000BaseTX Gi0/0/1 User PC err-disabled 10 auto auto 10/100/1000BaseTX Gi0/0/2 Server connected 20 a-full a-1000 10/100/1000BaseTX Gi0/0/3 notconnect 1 auto auto 10/100/1000BaseTX
In this output, Gi0/0/1 shows 'err-disabled' status, indicating the interface was automatically shut down due to an error (e.g., port security violation, BPDU guard, or duplex mismatch). The other interfaces show normal states. 'err-disabled' requires manual intervention (shutdown/no shutdown) after resolving the cause.
Understanding the Output
The 'show interfaces status' command provides a quick overview of all switch ports. The 'Status' column is the most critical: 'connected' means the interface has a working link; 'notconnect' means no cable or device is detected; 'disabled' means the interface is administratively down (shutdown); 'err-disabled' indicates a port that was automatically disabled due to an error condition. The 'Vlan' column shows the access VLAN assigned to the port (or 'trunk' for trunk ports).
'Duplex' and 'Speed' show negotiated or configured values; 'a-' prefix indicates auto-negotiated values. Mismatches (e.g., one side full, other half) cause poor performance or errors. 'Type' shows the physical media.
In a real network, look for ports that are 'notconnect' when they should be connected, or 'err-disabled' which requires troubleshooting. Also watch for speed/duplex mismatches (e.g., one side auto, other fixed) that degrade performance.
Configuration Scenarios
Verify newly connected access switch uplink
An access switch has been connected to a distribution switch via two fiber uplinks. The goal is to verify that both uplinks are up and forming an EtherChannel.
Topology
Access-SW (Gi0/1, Gi0/2) --- Fiber --- (Gi0/1, Gi0/2) Dist-SWSteps
- 1.Step 1: Enter privileged EXEC mode on the distribution switch: Dist-SW> enable
- 2.Step 2: Run 'show interfaces status' to see all ports: Dist-SW# show interfaces status
- 3.Step 3: Look for the uplink ports (e.g., Gi0/1 and Gi0/2). They should show 'connected' in the Status column.
- 4.Step 4: Verify the speed and duplex are correct (e.g., 1000/Full).
- 5.Step 5: Check the Vlan column: for trunk ports, it should show 'trunk' or the native VLAN.
! No configuration needed for verification; this is a show command. ! However, if the ports are not up, check configuration: Dist-SW(config)# interface range GigabitEthernet0/1-2 Dist-SW(config-if-range)# no shutdown Dist-SW(config-if-range)# channel-group 1 mode active
Verify: Dist-SW# show interfaces status Port Name Status Vlan Duplex Speed Type Gi0/1 Uplink to Access connected trunk full 1000 10/100/1000BaseTX Gi0/2 Uplink to Access connected trunk full 1000 10/100/1000BaseTX Both ports show 'connected' and correct speed/duplex.
Watch out: If the ports show 'notconnect', check the fiber cables and ensure both switches have compatible SFP modules. Also verify that the ports are not administratively down (Status: disabled).
Identify error-disabled port due to port security violation
A user reports that their workstation cannot connect to the network. The switch port may have been error-disabled due to a port security violation (e.g., MAC address change).
Topology
PC1 --- (Fa0/1) Access-SWSteps
- 1.Step 1: Enter privileged EXEC mode on the access switch: Access-SW> enable
- 2.Step 2: Run 'show interfaces status' to see all ports: Access-SW# show interfaces status
- 3.Step 3: Look for the port in question (e.g., Fa0/1). The Status column may show 'err-disabled'.
- 4.Step 4: If err-disabled, note the cause by running 'show interfaces status err-disabled' or 'show interfaces fa0/1'.
- 5.Step 5: Recover the port by shutting and no shutting, or configure auto-recovery.
! To recover the port manually: Access-SW(config)# interface FastEthernet0/1 Access-SW(config-if)# shutdown Access-SW(config-if)# no shutdown ! To enable auto-recovery for port security: Access-SW(config)# errdisable recovery cause psecure-violation Access-SW(config)# errdisable recovery interval 300
Verify: After recovery, run 'show interfaces status' again. The port should show 'connected' and the workstation should get network access. Also verify with 'show interfaces fa0/1' to confirm no errors.
Watch out: Simply re-enabling the port without addressing the root cause (e.g., unauthorized device) will result in another violation. Always check the violation log with 'show port-security interface fa0/1'.
Troubleshooting with This Command
When using 'show interfaces status' for troubleshooting, the first thing to look for is the Status column. Healthy output shows 'connected' for ports that are administratively up and have a device connected. 'notconnect' indicates the port is up but no cable is detected or the connected device is powered off.
'disabled' means the port has been administratively shut down (shutdown command). 'err-disabled' is a critical state where the switch has automatically disabled the port due to an error condition such as a port security violation, BPDU guard, or UDLD failure. The Vlan column is also crucial: for access ports, it shows the access VLAN; for trunk ports, it shows 'trunk' or the native VLAN.
If an access port shows a VLAN that is not the expected one, the port may be misconfigured. The Duplex and Speed columns help identify mismatches: a common symptom is a port showing 'half' duplex when it should be 'full', or speed showing '10' instead of '100' or '1000'. This often indicates a duplex mismatch or faulty cable.
The Type column shows the media type (e.g., 10/100/1000BaseTX) and can help identify if the wrong SFP is installed. A step-by-step diagnostic flow: 1) Identify the problematic port from the user's location. 2) Run 'show interfaces status' and check if the port is 'connected'. If not, check for 'err-disabled' and investigate the cause with 'show interfaces status err-disabled' or 'show errdisable detect'. 3) If 'notconnect', verify the cable and the connected device. 4) If 'disabled', check the configuration for 'shutdown'. 5) If 'connected' but the user still has issues, check the Vlan column to ensure the port is in the correct VLAN. 6) Verify speed/duplex match the expectations. 7) If all looks good, proceed to higher-layer troubleshooting with 'show mac address-table' or 'show spanning-tree'.
Correlating with other commands: 'show interfaces' provides detailed error counters (CRC, collisions) that can explain why a port is flapping. 'show interfaces description' gives a quick view of port descriptions. 'show logging' may reveal why a port went err-disabled.
'show port-security' details security violations. 'show interfaces counters' shows packet counts. For trunk ports, 'show interfaces trunk' provides trunk-specific status.
In summary, 'show interfaces status' is the first line of defense in physical layer troubleshooting, quickly narrowing down the problem to cable, configuration, or device issues.
CCNA Exam Tips
CCNA exam often tests the difference between 'connected', 'notconnect', 'disabled', and 'err-disabled' statuses.
Remember that 'err-disabled' is caused by security violations (port security, BPDU guard) or errors (duplex mismatch) and requires manual recovery.
The 'Vlan' column shows the access VLAN; if a port is in trunk mode, it will show 'trunk' instead of a VLAN number.
Be able to identify a speed/duplex mismatch: one side shows 'a-full' and the other shows 'half' or 'a-half'.
Common Mistakes
Confusing 'notconnect' with 'disabled': 'notconnect' means no cable or device, while 'disabled' means the interface is administratively shut down.
Assuming 'a-full' and 'full' are the same: 'a-full' is auto-negotiated full duplex, 'full' is manually configured; mismatches can occur.
Forgetting that 'err-disabled' ports require a 'shutdown' followed by 'no shutdown' to recover after fixing the cause.
show interfaces status vs show interfaces description
Both 'show interfaces status' and 'show interfaces description' provide a quick overview of switch interfaces, but they emphasize different details. They are commonly confused because both offer a concise summary, yet each serves a distinct troubleshooting or verification purpose.
| Aspect | show interfaces status | show interfaces description |
|---|---|---|
| Output fields | Port, Name, Status, Vlan, Duplex, Speed, Type | Interface, Status, Protocol, Description |
| VLAN information | Shows VLAN assigned to each port | Does not include VLAN |
| Duplex and speed | Displays duplex and speed settings | Does not display duplex or speed |
| Description column | Shows port name (if configured) as 'Name' | Shows interface description (if configured) |
| Protocol status | Does not show protocol status | Shows protocol status (up/down) |
Use show interfaces status when you need to quickly verify VLAN assignments, duplex, and speed settings across all ports.
Use show interfaces description when you need a fast check of interface connectivity (status and protocol) along with any administrative descriptions.
Platform Notes
In IOS-XE (e.g., Catalyst 9000 series), the 'show interfaces status' command syntax and output are very similar to classic IOS. However, some newer switches may include additional columns like 'Err-disabled reason' or 'Flow Control'. The command is available in privileged EXEC mode.
In NX-OS (e.g., Nexus switches), the equivalent command is 'show interface status' (note: 'interface' singular). The output format is similar but may include additional fields like 'Mode' (access/trunk) and 'Status' (connected/notconnect/disabled). For example: 'show interface status' on Nexus shows Port, Status, Vlan, Duplex, Speed, Type.
There is also 'show interface brief' which provides a similar summary. On ASA firewalls, the command is 'show interface' or 'show interface ip brief' but there is no direct equivalent to 'show interfaces status' because ASAs are not switches. The command does not exist in IOS-XR; instead, use 'show interfaces brief' or 'show interfaces description'.
In older IOS versions (12.x), the output may not include the 'Type' column. In 15.x and later, the 'Type' column is standard. Some IOS versions support the 'module' and 'vlan' filters, but these are not available on all platforms.
Always check the specific platform documentation. For Catalyst 2960/3560/3750 running IOS 15.x, the command works as described. For Catalyst 3850/9300 running IOS-XE 16.x, the output is identical.
For Nexus 9000 running NX-OS 9.x, use 'show interface status'.
Related Commands
show interfaces
Displays detailed Layer 1 and Layer 2 statistics for all interfaces or a specific interface: line protocol state, hardware type, MAC address, MTU, bandwidth, duplex, speed, input/output rates, error counters, and queue statistics.
show interfaces description
Displays a summary of all interfaces with their status, protocol, and description, useful for quickly verifying interface connectivity and administrative notes.
Practice for the CCNA 200-301
Test your knowledge with practice questions covering all CCNA 200-301 exam domains.
Practice CCNA 200-301 Questions