Command List2

8/6/2019 Command List2

http://slidepdf.com/reader/full/command-list2 1/47

ommand List

Command List II

The following commands may be used in this course . Click each command to view a description of the command, its syntax, and its command parameters.

Command

access-class

access-list (standard)

access-list (extended)

arp

bandwidth

banner motd

cdp enable

clear frame-relay-inarp

clear ip nat translation

clock rate

clock set

configure terminal

controller

copy running-config startup-config

debug dialer

debug frame-relay lmi

debug ip eigrp

debug ip igrp events

debug ip igrp transactions

debug ip ospf events

debug ip ospf packet

debug ip nat

debug ip rip

debug isdn q921

debug isdn q931

debug ppp

description

dialer-group

dialer idle-timeout

dialer-list

dialer load-threshold

dialer map

dialer pool

ttp://www.gkcontent.com/b2c/0000A029/5031001-.../VariableIntro/en/online/5055_command_list.htm (1 of 47) [1/29/2009 11:27:07 AM



ommand List

dialer pool-member

dialer remote-name

dialer string

disable

duplex

enable

enable password

enable secret

encapsulation

encapsulation frame-relay

encapsulation hdlc

encapsulation ppp

end

erase

exec-timeout

exit

frame-relay inverse-arp

frame-relay lmi-type

frame-relay map

framing

history size

hostname

interface

interface range

ip access-group

ip access-list

ip address

ip classless

ip default-gateway

ip domain-lookup

ip nat

ip nat inside source list

ip nat inside source list pool

ip nat inside source static

ip nat pool

ip route

isdn spid#




ommand List

isdn switch-type

line console 0

line vty

linecode

logging synchronous

login

mac-address-table static

media-type

name

network

password

ping

ppp authentication

pri-group

router

service password-encryption

setup

show access-lists

show clock

show cdp neighbors

show controller

show dialer

show frame-relay lmi

show frame-relay map

show frame-relay pvc

show frame-relay traffic

show history

show interface brief

show interface status

show interfaces

show ip

show ip eigrp neighbors

show ip eigrp topology

show ip eigrp traffic

show ip interface

show ip nat translations

show ip nat statistics




ommand List

show ip ospf interface

show ip ospf neighbor

show ip protocols

show ip route

show ip route eigrp

show isdn active

show isdn status

show mac-address-table

show port-security

show protocol access-list

show running-config

show spanning-tree

show startup-config

show version

show vlan

shutdown

switchport access

switchport mode

switchport nonnegotiate

switchport port-security

switchport trunk encapsulation

telnet

terminal editing

terminal history size

traceroute

traffic-share

username

variance

vlan

vtp

Descriptions

Device(config-line)# access-class access-list-number {in | out} The access-class command restricts incoming and outgoing connections between a vty on a Cisco device and

the addresses in an access list.




ommand List

Command Parameter Description

access-list-number The ACL that is to be linked to this virtual terminal line.

in Keyword that restricts incoming connections between a Cisco device and the addresses in

the specified access list.

out Keyword that restricts outgoing connections between a Cisco device and the addresses in

the specified access list.

back to top

Device(config)# access-list access-list-number {permit | deny | remark} source

[mask]

The access-list command is used to configure access-list entries for controlling traffic that passes through

network devices, such as routers. The syntax shown above is for a standard access list.


access-list-number The list that the ACL entry belongs to. For standard IP ACLs, this number is

in the ranges of 1 to 99 and 1300 to 1999.

permit | deny Keyword that identifies whether traffic matching the test conditions specifiedby the ACL entry is allowed or blocked.

remark Keyword that allows you to add a description for the ACL.

source The source IP address.

mask The wildcard mask, which is used to determine which bits in the source address are matched. A 0 in the wildcard mask indicates that the

corresponding bit in the address is to be matched; a 1 indicates that the corresponding bit is to be ignored. The default wildcard mask is 0.0.0.0.

back to top

Device(config)# access-list access-list-number {permit | deny} protocol source

source-wildcard [operator port] destination destination-wildcard [operator port]

[established] [log]




ommand List

Theaccess-list command is used to configure access-list entries for controlling traffic that passes through network devices, such as

routers. The syntax shown above is for an extended access list.


access-list-number The list that the ACL entry belongs to. For extended IP ACLs, this number is in the ranges of

100 to 199 and 2000 to 2699.

permit | deny Keyword that identifies whether traffic matching the test conditions specified by the ACL

entry is allowed or blocked.

protocol The protocol being used to send the packet. The following protocols can be specified for this

parameter: IP, TCP, UDP, ICMP, GRE, and IGRP.

source The source IP address.

source-wildcard The wildcard mask that is used to determine which bits in the source address are matched.

A 0 in the wildcard mask indicates that the corresponding bit in the address is to be

matched; a 1 indicates that the corresponding bit is to be ignored.

destination The destination IP address.

destination-wildcard The wildcard mask that is used to determine which bits in the destination address arematched. A 0 in the wildcard mask indicates that the corresponding bit in the address is to

be matched; a 1 indicates that the corresponding bit is to be ignored.

operator Mathematical operator that is used to specify ranges of ports as well as specific ports to

match on. Possible values includeeq (equal), lt (less than), gt (greater than), andneq

(not equal).

port Port number of packets being matched. This parameter is used in conjunction with an

operator and can be specified for both source and destination.

established Keyword used in conjunction with TCP traffic that allows TCP traffic to pass if the packets

are using an established connection (that is, the packets have their acknowledgment bits

set).

log Keyword that sends a logging message to the console whenever traffic matching the ACL

entry is identified.

back to top

Device(config)# arp ip-address hardware-address encapsulation-type [alias]




ommand List

Thearp command is used to add a permanent entry in the ARP cache. You can remove an entry from the ARP cache using the no

form of this command.


ip-address IP address in four-part dotted-decimal format that corresponds to the local data link address

(a 32-bit address).

hardware-address Local data link address (a 48-bit address).

encapsulation-type The encapsulation type. For Ethernet interfaces, this is typically the arpa keyword. For

FDDI and Token Ring interfaces, this is the snap keyword.

[alias] (Optional) Causes the software to respond to ARP requests as if it were the owner of both

the specified IP address and hardware address, whether proxy ARP is enabled or not.

back to top

Device(config-if)# bandwidth bandwidth

Thebandwidth command sets a bandwidth value for an interface.


bandwidth Bandwidth value in kilobits per second.

back to top

Device(config)# banner motd d message d

Thebanner motd command configures a message of the day banner to be displayed at login.


d Delimiting character used to signal the beginning and the end of the message. The

delimiting character can be any character on the keyboard but cannot be a character that

appears in the message.

message Text to be displayed as the message of the day.

back to top

Device(config-if)# cdp enable




ommand List

Thecdp enable command enables CDP on an interface. Theno cdp enable command disables CDP on an interface.


N/A Thecdp enable command does not take arguments or keywords.

back to top

Device# clear frame-relay-inarp

Theclear frame relay-inarp command is used to clear dynamically created Frame Relay maps that are created by the use of the

Inverse Address Resolution Protocol.


N/A Theclear frame-relay-inarp command does not take arguments or keywords.

back to top

Device# clear ip nat translation [ protocol] {* | inside global-ip global-port

local-ip local-port [outside local-ip local-port global-ip global-port]}

Theclear ip nat translation command clears dynamic translation entries from the NAT table.


protocol Protocol of entries to be cleared (TCP, UDP, or ESP).

* Wildcard character that tells the router to clear all dynamic address translation entries from

the NAT table.

inside Keyword that tells the router to clear inside translations containing the specified global and

local IP addresses and ports.

outside Keyword that tells the router to clear outside translations containing the specified global and

local IP addresses and ports.

global-ip Global IP address.

global-port Global port. Theglobal-port parameter is specified when clearing extended address

translation entries.local-ip Local IP address.

local-port Local port. The local-port parameter is specified when clearing extended address

translation entries.

back to top




ommand List

Device(config-if)# clock rate clock-rate

Theclock rate command configures the clock rate on serial interfaces.


clock-rate Desired clock rate in bits per second.

back to top

Device# clock set hh:mm:ss day month year

Theclock set command sets the current time and date.


hh:mm:ss Current time in hours (military format), minutes, and seconds.

day Current day of the month (integer value from 1 to 31).

month Current month (by name, not number).

year Current year (four-digit integer value).

back to top

Device# configure terminal

Theconfigure terminal command is used to enter global configuration mode.


N/A Theconfigure terminal command does not take arguments.

back to top

Device(config)# controller controller slot/port

Thecontroller command enters controller configuration mode for a T1 or E1 controller.


controller Type of controller being configured. Possible values are t1 ande1.

slot/port Slot and port numbers of the controller interface on the router.

back to top




ommand List

Device# copy running-config startup-config

Thecopy running-config startup-config command saves the current running configuration to thestartup-config file.


N/A Thecopy running-config startup-config command does not take arguments.

back to top

Device# debug dialer [events | packets]

Thedebug dialer command displays DDR debugging information about the packets received on a dialer interface.


events Keyword used to display the cause of any call. Information displayed includes the name of the

DDR interface, the type of packet (protocol) being sent, and the source and destinationaddresses of the packet.

packets Keyword used to display information about packets being sent as part of a call. Information

displayed includes the interface type, the type of packet (protocol) being sent, the source and

destination addresses, the size of the packet, and the default action for the packet ( permit

or deny).

back to top

Device# debug frame-relay lmi [interface name]

Thedebug frame-relay lmi command is used to display information on the LMI packets exchanged by the router and the Frame

Relay service provider. Theno form of this command disables debugging output.


interface name (Optional) Name of interface.

back to top

Device# debug ip eigrp

Thedebug ip eigrp command displays EIGRP packets as they are sent and received.


N/A Thedebug ip eigrp command does not take arguments.

back to top

ttp://www.gkcontent.com/b2c/0000A029/5031001-.../VariableIntro/en/online/5055_command_list.htm (10 of 47) [1/29/2009 11:27:07 A



ommand List

Device# debug ip igrp events [ip-address]

Thedebug ip igrp events command displays a summary of IGRP routing information.


ip-address (Optional) IP address of an IGRP neighbor. If an IP address is specified, the output of thedebug ip igrp events command will include summary information about IGRP

transactions that occur between the router and the specified IGRP neighbor only.

back to top

Device# debug ip igrp transactions [ip-address]

Thedebug ip igrp transactions command displays information about IGRP transactions as they occur.


ip-address (Optional) IP address of an IGRP neighbor. If an IP address is specified, the output of the

debug ip igrp transactions command will include IGRP transactions between the

router and the specified IGRP neighbor only.

back to top

Device# debug ip ospf eventsThedebug ip ospf events command displays information on OSPF events, such as designated router selection and SPF

calculation.


N/A Thedebug ip ospf events command does not take arguments.

back to top

Device# debug ip ospf packet

Thedebug ip ospf packet command displays information about each OSPF packet that is received.


N/A Thedebug ip ospf packet command does not take arguments.

back to top




ommand List

Device# debug ip nat

Thedebug ip nat command displays information about every packet that is translated by a device.


N/A Thedebug ip nat command does not take arguments.

back to top

Device# debug ip rip

Thedebug ip rip command displays RIP routing updates as they are sent and received.


N/A Thedebug ip rip command does not take arguments.

back to top

Device# debug isdn q921

Thedebug isdn q921 command displays ISDN layer 2 messages.

Command Parameter DescriptionN/A Thedebug isdn q921 command does not take arguments.

back to top

Device# debug isdn q931

Thedebug isdn q931 command displays ISDN call setup and teardown activity (layer 3).


N/A Thedebug isdn q931 command does not take arguments.

back to top

Device# debug ppp {packet | negotiation | error | authentication | compression |

cbcp}




ommand List

Thedebug ppp command displays information on traffic and exchanges in an internetwork implementing PPP. The no form of this

command disables debugging output.


packet Displays PPP packets sent and received.

negotiation Displays PPP packets transmitted during PPP startup, where PPP options are negotiated.

error Displays protocol errors and error statistics associated with PPP connection negotiation andoperation.

authentication Displays authentication protocol messages, including CHAP packet exchanges and PAP

exchanges.

compression Displays information specific to the exchange of PPP connections using MPPC. This is

useful for obtaining incorrect packet sequence number information where MPPC

compression is enabled.

cbcp Displays protocol errors and statistics associated with PPP connection negotiations using

MSCB.

back to top

Device(config-if)# description string

Thedescription command configures a description for the configured interface to allow administrators to easily identify the interface

function.


string Text identifying the function of the interface or other useful data (such as location,information about the connected ISP, responsible authority, and so forth).

back to top

Device(config-if)# dialer-group dialer-group

Thedialer-group command binds an interesting traffic definition to an interface.


dialer-group Number of the dialer group that the interface belongs to. The dialer group number can be an

integer from 1 to 10. This number must match the dialer-group parameter specified in

thedialer-list command. Each interface can have only one dialer group, but the same

dialer list can be assigned to multiple interfaces.

back to top




ommand List

Device(config-if)# dialer idle-timeout seconds

Thedialer idle-timeout command specifies the number of idle seconds before a call is disconnected.


seconds The number of seconds until a call is disconnected after the last interesting traffic is sent.

The default is 120.

back to top

Device(config)# dialer-list dialer-group protocol protocol-name {permit | deny |

list list-number }

Thedialer-list command identifies which packets are to be considered interesting for the purpose of triggering DDR.


dialer-group Number that maps a dialer list to an interface. This number must be the same as the dialer group number configured using the dialer-group command.

protocol protocol-name Layer 3 protocol of packets that are designated as interesting. Choices include IP, IPX,

AppleTalk, DECnet, and VINES.

permit | deny Keywords that designate whether to allow or block packets that belong to the specified layer-

3 protocol. If the list list-number parameter is specified, thepermit anddeny

keywords are not used.

list list-number Access list that is to be used to identify interesting traffic. The list parameter is used when

you need to identify interesting traffic at a more granular level than the level-3 protocol.

back to top

Device(config-if)# dialer load-threshold load [outbound | inbound | either]

Thedialer load-threshold command establishes how much traffic must be on a DDR link before a second link is enabled.


load Interface load (from 1 to 255) beyond which the dialer will initiate another call to the

destination. The bandwidth is defined as a ratio of 255, where 255 is 100 percent of theavailable bandwidth.

outbound | inbound | either (Optional) Keywords that identify the traffic direction for which bandwidth is calculated. The

outbound keyword calculates the actual load using outbound traffic only. The inbound

keyword calculates the actual load using inbound traffic only. The either keyword

calculates the actual load using combined outbound and inbound loads. The default is

outbound.

back to top




ommand List

Device(config-if)# dialer map protocol next-hop-address [name hostname] [speed 56

| 64] [broadcast] dialer-string

Thedialer map command configures contact information for reaching one or more DDR destinations.


protocol Layer-3 protocol being used. Options include IP, IPX, AppleTalk, DECnet, and VINES.next-hop-address Address of the next-hop router.

name hostname (Optional) Host name of the remote device. This name is used for PPP authentication or

ISDN calls supporting caller ID.

speed 56 | 64 (Optional) The link speed (in Kbps) to use for ISDN calls. The default is 64.

broadcast (Optional) Keyword that indicates that broadcasts and multicasts are permitted to be

forwarded to this destination (but only when the link is enabled by interesting traffic). DDR is

nonbroadcast by default, so no update traffic will cross the link unless this parameter is set.

Thebroadcast keyword permits the use of dynamic routing protocols over the connection

dialer-string Telephone number sent to the device when packets that have the specified next-hop

address are received.

back to top

Device(config-if)# dialer pool number

Thedialer pool command specifies the pool of physical interfaces that are available to reach the destination subnetwork.


number The number used to identify the dialer pool. This parameter can have a value from 1 to 255.

back to top

Device(config-if)# dialer pool-member number [priority priority ] [min-link

minimum ] [max-link maximum ]




ommand List

Thedialer pool-member command associates a physical interface with a specifically numbered dialer pool, then places the

interface in that pool.


number The number of the dialer pool that the interface is part of. The dialer pool number is a

decimal value from 1 to 255.

priority priority The priority of the physical interface within the dialer pool when the dialer pool contains

multiple physical interfaces. Interfaces with the highest priority number are selected firstwhen dialing out. This parameter is used to determine which interfaces are used the most or

to determine which are reserved for special pool purposes. This parameter takes a decimal

value from 1 to 255.

min-link minimum The minimum number of ISDN B channels on an interface that are reserved for this dialing

pool. This minimum number ranges from 1 to 255. This parameter is used for dialer backup.

max-link maximum The maximum number of ISDN B channels on an interface that are reserved for this dialing

pool. This maximum number ranges from 1 to 255. This parameter is used for dialer backup.

back to top

Device(config-if)# dialer remote-name name

Thedialer remote-name command specifies the authentication name of the remote router on the destination subnetwork for a

dialer interface.


name The authentication name of the remote router.

back to top

Device(config-if)# dialer string number [class map class-name]

Thedialer string command specifies the telephone number of the destination in a dialer profile.


number The telephone number of the destination.

class map class-name (Optional) A specific map class to use in the call. The map class defines characteristics for

calls to the specified destination.

back to top

Device# disable




ommand List

Thedisable command exits privileged EXEC mode and returns the device to user EXEC mode.


N/A Thedisable command does not take arguments.

back to top

Device(config-if)# duplex {auto | full | half}

Theduplex command specifies the duplex mode of operation for the specified interface.


auto Keyword that sets duplex mode to autonegotiation.

full Keyword that sets duplex mode to full duplex.

half Keyword that sets duplex mode to half duplex.

back to top

Device> enable

Theenable command is used to enter privileged EXEC mode.


N/A Theenable command does not take arguments.

back to top

Device> enable password password

Theenable password command configures the enable password for a device (the password used to access privileged mode on a

device).


password The password to be used as the enable password. The enable password is not encrypted in

the running-config and is not used if an enable secret password is configured for the device.

back to top

Device> enable secret password




ommand List

Theenable secret command configures the enable secret password for a device (the password used to access privileged mode on

device).


password The password to be used as the enable secret password. The enable secret password is

encrypted in the running-config and is used instead of the enable password if it is configured

for a device.

back to top

Device(config-subif)# encapsulation [isl | dot1q] vlan-identifier

Theencapsulation subinterface command configures ISL or 802.1Q encapsulation on a VLAN.


Isl Keyword that specifies that ISL encapsulation is to be enabled on the subinterface.

dot1q Keyword that specifies that 802.1Q encapsulation is to be enabled on the subinterface.

vlan-identifier The number of the VLAN being configured.

back to top

Device(config-if)# encapsulation frame-relay [cisco | ietf]

Theencapsulation frame-relay command enables Frame Relay encapsulation on an interface. To disable Frame Relay

encapsulation, use the no form of this command.


cisco (Optional) Keyword that specifies Cisco’s proprietary encapsulation method, which uses a 4-

byte header, with 2 bytes to identify the DLCI and 2 bytes to identify the packet type.

ietf (Optional) Sets the encapsulation method to comply with the IETF standard (RFC 1490).

Use this keyword when connecting to another vendor's equipment across a Frame Relay

network.

back to top

Device(config-if)# encapsulation hdlc




ommand List

Theexec-timeout sets the amount of time that the console will wait for user input before logging out of the current EXEC session.


minutes Number of minutes that the system will wait for user input. If a value of 0 0 is used (meaning

0 minutes, 0 seconds), the timeout is disabled and the session will never time out.

seconds (Optional.) Number of seconds that the system will wait (in addition to the value specified for

minutes ) for user input.

back to top

Device(configuration-mode)# exit

Theexit command exits the current configuration mode and backs the device up one level to the previous configuration mode. For

example, typingexit from interface configuration mode returns the device to global configuration mode. Typing exit from global

configuration mode returns the device to privileged EXEC mode.


N/A Theexit command does not take arguments.

back to top

Device(config-if)# frame-relay inverse-arp [ protocol] [dlci]

The frame-relay inverse-arp command re-enables Inverse ARP on a specified interface or subinterface if it was previously

disabled on a router configured for Frame Relay. Use the no form of this command to disable this feature.


protocol Level 3 protocol being used. Supported protocols are AppleTalk, DECnet, IP, IPX, Vines,

and XNS.

dlci One of the DLCI numbers used on the interface. Acceptable numbers are integers in the

range of 16 through 1007.

back to top

Device(config-if)# frame-relay lmi-type {ansi | cisco | q933a}




ommand List

The frame-relay lmi-type command is used to select the LMI type. To return to the default LMI type, use theno form of this

command.


ansi Annex D defined by ANSI standard T1.617.

cisco LMI type defined jointly by Cisco and three other companies.

q933a ITU-T Q.933 Annex A.

back to top

Device(config-if)# frame-relay map protocol protocol-address dlci [broadcast]

[ietf | cisco | payload-compress packet-by-packet]

The frame-relay map command is used to define the mapping between a destination protocol address and the DLCI used to

connect to the destination address. Use the no form of this command to delete the map entry.


protocol Supported protocol, bridging, or logical link control keywords: appletalk, decnet, dlsw,

ip, ipx, llc2, rsrb, vines, andxns.

protocol-address Destination protocol address.

dlci DLCI number used to connect to the specified protocol address on the interface.

broadcast (Optional) Keyword that allows broadcasts and multicasts over the VC. This keyword allows

the use of dynamic routing protocols over the VC.

ietf (Optional) Keyword that specifies the use of IETF Frame Relay encapsulation. Use when therouter or access server is connected to another vendor's equipment across a Frame Relay

network.

cisco (Optional) Keyword that specifies the use of Cisco Frame Relay encapsulation.

payload-compress packet-by-packet

(Optional) Keyword that enables packet-by-packet payload compression using the Stacker

method. This is a Cisco proprietary compression method.

back to top

Device(config-controller)# framing frame-type

The framing command selects a frame type for a T1 or E1 data line.


frame-type Type of framing to be used for transmitting data over a T1 or E1 line. Possible T1 values

includesf (default) andesf. Possible E1 values includecrc4 (default) andno-crc4. The

australia keyword can optionally be used with no-crc4 to specify an E1 frame type used

in Australia.




ommand List

back to top

Device(config-line)# history size lines

Thehistory size command configures the size of the command history buffer for the specified line.


lines Number of command lines that the device will record in its history buffer. The range is from 0

to 256. The default is 10.

back to top

Device(config)# hostname name

Thehostname command is used to specify or modify the host name for the network server.


name New host name for the network server.

back to top

Device(config)# interface type number [.subinterface-number [multipoint | point-to

point]]

The interface command is used to configure an interface or subinterface.


type Type of interface to be configured (for example, ethernet, fastethernet, serial ,

vlan , or loopback).

number Port, connector, or interface card number. Some Cisco devices require both a slot and port

number in the formslot/port .

subinterface-number (Optional) Subinterface to be configured. Thesubinterface-number parameter tells the

interface command to enter subinterface configuration mode for the specified interface.

multipoint (Optional) Keyword that specifies a multipoint subinterface.

point-to-point (Optional) Keyword that specifies a point-to-point subinterface.

back to top

Device(config)# interface range {vlan vlan_id – vlan_id } { port-range | macro name}




ommand List

The interface range command is used to execute a command on multiple ports at the same time.


vlan vlan_id – vlan_id Keyword and variables to specify a VLAN range. Valid ranges are from 1 to 1005.

port-range Port range

macro name Keyword and variable to specify the name of a macro

back to top

Device(config-if)# ip access-group access-list-identifier {in | out}

The ip access-group command activates an IP ACL on an interface.


access-list-identifier The ACL that is to be linked to this interface. This parameter can be a number or an

alphanumeric string.

in | out Keyword that identifies the direction (incoming or outgoing) in which the ACL is applied on

the interface

back to top

Device(config)# ip access-list {standard | extended} name

Device(config {std- | ext-}nacl)# {permit | deny} {IP access list test conditions

{permit | deny} {IP access list test conditions} no {permit | deny} { IP access

list test conditions }

The ip access-list command is used to configure named access-lists for controlling traffic that passes through network devices, suc

as routers. Issuing the ip access-list command places you in a configuration mode where you can configure the permit andden

statements that will comprise the ACL.


standard | extended Keyword that identifies whether the ACL being configured is a standard ACL or an extended

ACL.

name The alphanumeric name that will be used to represent the ACL.

permit | deny Keyword that identifies whether traffic matching the test conditions specified by the ACL

entry is allowed or blocked.

IP access list test conditions The conditions that must be matched for a packet to be permitted or denied by this ACL

entry. For standard ACLs, the test conditions consist of the source IP address and a

wildcard mask. For extended ACLs, the test conditions consist of the protocol, the source

and destination IP addresses and masks, the source and destination ports, and for TCP

packets, whether the connection is already established.




ommand List

no Keyword used to remove a test from a named ACL.

back to top

Device(config-if)# ip address address mask

The ip address command assigns an IP address to an interface or subinterface. To remove an IP address or disable IP processing,

use the no form of this command.


address IP address being assigned to the interface.

mask (Optional) Subnet mask of the network to which the interface belongs.

back to top

Device(config-if)# ip classless

The ip classless command tells a classful router to use the default route to forward packets addressed to unknown subnets of

directly connected networks.


N/A The ip classless command does not take arguments.

back to top

Device(config)# ip default-gateway address

The ip default-gateway command configures a default gateway on a device.


address IP address of the default gateway.

back to top

Device# ip domain-lookup




ommand List

The ip domain-lookup command enables DNS lookups on a device. With DNS lookups enabled, the device will query a DNS serve

for anything entered on a command-line that it does not recognize. The no form of this command disables domain lookups, which is

useful when configuring a device to prevent domain lookups on misspelled commands.


N/A The ip domain-lookup command does not take arguments or keywords.

back to top

Device(config-if)# ip nat [inside | outside]

The ip nat [inside | outside] command identifies an interface on a router as being connected to the inside network or the outside

network for the purposes of NAT translation.


inside Keyword that marks the interface as connected to the inside.

outside Keyword that marks the interface as connected to the outside.

back to top

Device(config)# ip nat inside source list access-list-number interface interface

overload

The ip nat inside source list command with theoverload parameter configures the router to use PAT to translate inside local

addresses to a single global address.


access-list-number Standard ACL that identifies the inside local addresses to be translated using PAT.

interface Outgoing interface whose IP address will be used as the global address for all inside local

addresses translated using PAT.

overload Keyword that enables PAT.

back to top

Device(config)# ip nat inside source list access-list-number pool name




ommand List

The ip nat inside source list pool command configures the router to use dynamic PAT to translate inside local addresses to a

pool of global addresses.


access-list-number Standard ACL that identifies the inside local addresses to be translated using NAT.

name Name of the pool of global addresses that are available for NAT to use in the translation

process.

back to top

Device(config)# ip nat inside source static local-ip global-ip

The ip nat inside source static command configures a static NAT entry in the router ’s NAT table to translate a specified local

address to a specified global address.


local-ip The inside local IP address that is to be translated.

global-ip The global IP address that the local address is to be translated into.

back to top

Device(config)# ip nat pool name start-ip end-ip {netmask netmask | prefix-length

prefix-length}

The ip nat pool command defines a pool of global IP addresses to be allocated as needed during NAT operation.


name Name to be assigned to the pool of global addresses that are available for NAT to use in the

translation process.

start-ip end-ip IP address range of global addresses to be used by NAT.

netmask netmask Subnet mask of the network to which the pool addresses belong. The netmask value is

given in dotted-decimal format.

prefix-length prefix-length Subnet mask of the network to which the pool addresses belong. The prefix-length value isthe number of bits in the subnet mask that represent the network portion of the address

(indicated by 1 bits).

back to top

Device(config)# ip route network [ mask] {next-hop | interface} [distance]

[permanent]




ommand List

The isdn switch-type command specifies the type of switch that a router communicates with during ISDN operation.


switch-type Type of ISDN switch. The following are common values for this parameter:

BRI Switches PRI Switches Description Region

basic-5ess: primary-5ess AT&T United States

basic-dms100 primary-dms100 Nortel North America

basic-nil primary-ni National ISDN-1 North America

basic-net3 primary-net5 Net3 United Kingdom and

Europe

ntt primary-ntt NTT ISDN Japan

basic ts013 . TS013 Australia

none . No switch

specified

.

back to top

Device(config)# line console 0

The line console 0 command places the router in line configuration mode for the console terminal.


N/A The line console 0 command does not take arguments.

back to top

Device(config)# line vty {vty-number | vty-range}

The line vty command places the router in line configuration mode for the specified vty line or range of vty lines.


vty-number Specific vty line to be configured.

vty-range Range of vty lines to be configured.

back to top

Device(config-controller)# linecode linecode-type




ommand List

The linecode command selects a line-code type for a T1 or E1 data line.


linecode-type Line coding to be used for transmitting data over a T1 or E1 line. Possible T1 values include

ami (default) andb8zs. Possible E1 values includeami andhdb3 (default).

back to top

Device(config-line)# logging synchronous [level severity | all] [limit number ]

The logging synchronous command tells the device to redisplay your input after each console message that displays while you

are typing.


level severity (Optional) Value that identifies the level at which messages are not to be printed

synchronously. Messages with a severity level equal to or higher than severity are to be

printed asynchronously. Lower numbers indicate greater severity.

all (Optional) Keyword that indicates that all messages are to be printed asynchronously.

limit number (Optional) Value that identifies the number of buffers to be queued for the terminal before

new messages are dropped.

back to top

Device(config-line)# login

The login command enables password checking at login for the specified console or virtual terminal lines.


N/A The login command does not take arguments.

back to top

Device(config-if)# mac-address-table static mac-address vlan vlan interface

interface




ommand List

Themac-address-table static command adds a static entry to the MAC address table.


mac-address The MAC address being added to the MAC table.

vlan vlan VLAN that the device that owns the MAC address belongs to.

interface interface The interface out which the device that owns the MAC address can be found.

back to top

Device(config-if)# media-type {aui | 10baset | 100baset | mii}

Themedia-type command specifies a physical connection on an interface.


aui AUI 15-pin connection. This is the default on Cisco 4000 Series routers.

10baset RJ-45 10BaseT connection.

100baset RJ-45 100BaseT connection. This is the default on Cisco 7000 Series and Cisco 7200 Series

routers.

mii Media Independent interface.

back to top

Device(config-vlan)# name vlan-name

Thename command specifies a name for the VLAN being configured.


vlan-name The name being assigned to the VLAN. This value must be an ASCII string containing from

1 to 32 characters, and it must be unique within the administrative domain.

back to top

Device(config-router)# network network-number [wildcard-mask] [area area-id ]




ommand List

Thenetwork command designates which directly connected networks participate in the routing process for the configured routing

protocol.


network-number IP address of a directly connected network that will participate in the routing process. With

RIP, IGRP, and EIGRP, this is a classful network address. OSPF allows the use of wildcard

masks for configuring classless network addresses.

wildcard-mask (OSPF only) Wildcard mask, used to identify the network portion of the address. A 0 in thewildcard mask indicates a match, and a 1 indicates that the bits are not to be used as part of

the network address. For example, a wildcard mask of 0.0.0.0 indicates a match of all 32 bits

in the address.

area area-id (OSPF only) Area that is to be associated with the OSPF address range. It can be specified

either as a decimal value or in dotted-decimal notation.

back to top

Device(config-line)# password password

Thepassword command configures a password for the specified console or virtual terminal lines.


password The password that will be used to access the specified console or virtual terminal lines.

back to top

Device(config)# ping host

Theping command is used to test connectivity to a network host.


host Name or IP address of the host being pinged.

back to top

Device(config-if)# ppp authentication {chap | chap pap | pap chap | pap}




ommand List

Theppp authentication command is used to specify the method of authentication that will be used between two hosts in a PPP

connection.


chap Keyword that enables CHAP on a serial interface.

chap pap Keyword that enables both CHAP and PAP on a serial interface. CHAP authentication is

attempted first, and if the routers are unable to perform CHAP, PAP authentication is

attempted.

pap chap Keyword that enables both PAP and CHAP on a serial interface. PAP authentication is

attempted first, and if the routers are unable to perform PAP, CHAP is attempted.

pap Keyword that enables PAP on a serial interface.

back to top

Device(config-controller)# pri-group timeslots range

Thepri-group command enables PRI on a T1 or E1 interface.


timeslots Keyword used to specify a range of 64-Kbps channels to use in the PRI operation.

range Range of timeslots to be used. For ISDN PRI on a T1, the value 1-24 specifies the use of 23

B channels and 1 D channels, and for ISDN PRI on an E1, the value 1-31 specifies the use of

30 B channels and 1 D channel.

back to top

Device(config)# router protocol [keyword ]

The router command starts a routing process and enters router configuration mode for the designated routing protocol.


protocol Routing protocol to be configured (RIP, IGRP, EIGRP, or OSPF)

keyword (Optional) Additional parameter required by some routing protocols. For example, IGRP andEIGRP require that an autonomous system number be identified when configuring the

routing protocol on a router. OSPF requires that you specify a local process ID for the OSPF

process that you are configuring.

back to top

Device(config)# service password-encryption




ommand List

Theservice password-encryption command is used to encrypt passwords. All passwords that are entered between the

execution of this command and the execution of the no service password-encryption command are encrypted.


N/A Theservice password-encryption command does not take arguments.

back to top

Device(config)# setup

Thesetup command launches the system configuration dialog, which walks you through a basic configuration of a router or switch.


N/A Thesetup command does not take arguments.

back to top

Device# show access-lists [access-list-identifier ]

Theshow access-lists command displays the contents of all ACLs configured on a Cisco device.


access-list-identifier (Optional) The name or number of a specific ACL. If this parameter is used, only the

contents of the specified ACL are displayed.

back to top

Device# show clock

Theshow clock command displays the current time and date.


N/A Theshow clock command does not take arguments.

back to top

Device# show cdp neighbors [interface] [detail]




ommand List

Theshow cdp neighbors command displays information about neighboring devices that were discovered using CDP.


interface (Optional) The interface that is connected to the neighbors that you want to display

information about. If this argument is not specified, the show cdp neighbors command

displays information about all CDP neighbors.

detail Keyword that tells the router to display detailed information about its CDP neighbors.

back to top

Device# show controller type number

Theshow controller command displays information about the specified physical interface, such as the type of cable connected to

the interface.


type Type of interface (such as ethernet, fastethernet, serial, or atm).

number Port, connector, or interface card number. Some Cisco devices require both a slot and port

number in the formslot/port .

back to top

Device# show dialer [interface type number ]

Theshow dialer command lists general diagnostic information about an interface configured for DDR, such as the number of timesthe dialer string has been successfully reached, the idle and fast-idle timer values for each B channel, and current-call-specific

information (such as the length of the call and the number and name of the device that the interface is currently connected to).


interface type number (Optional) A specific interface for which dialer information is to be displayed.

back to top

Device# show frame-relay lmi [type number ]

Theshow frame-relay lmi command is used to display statistics about the LMI.


type (Optional) Interface type. It must be serial.

number (Optional) Interface number.




ommand List

back to top

Device# show frame-relay map

Theshow frame-relay map command is used to display the current map entries and information about the connections.


N/A Theshow frame-relay map command does not take arguments or keywords.

back to top

Device# show frame-relay pvc [interface interface] [dlci] [64-bit]

Theshow frame-relay pvc command is used to display statistics about PVCs for Frame Relay interfaces.


interface interface (Optional) Specific interface for which PVC information will be displayed.

dlci (Optional) A specific DLCI number used on the interface. Statistics for the specified PVC are

displayed when a DLCI is also specified.

64-bit (Optional) Keyword that tells the router to display 64-bit counter statistics.

back to top

Device# show frame-relay traffic

Theshow frame-relay traffic command is used to display the global Frame Relay statistics since the last reload.


N/A Theshow frame-relay traffic command does not take arguments or keywords.

back to top

Device# show history

Theshow history command lists the contents of the command history buffer (that is, the most recent commands [as determined by

the size of the command history buffer] that have been entered during the current EXEC session).


N/A Theshow history command does not take arguments or keywords.




ommand List

Device# show ip

Theshow ip command displays IP address, subnet mask, and other IP settings on a device.


N/A Theshow ip command does not take arguments or keywords.

back to top

Device# show ip eigrp neighbors

Theshow ip eigrp neighbors command displays neighbors discovered by EIGRP.


N/A Theshow ip eigrp neighbors command does not take arguments.

back to top

Device# show ip eigrp topology

Theshow ip eigrp topology command displays the EIGRP topology table. This command shows the topology table, the active o

passive state of routes, the number of successors, and the feasible distance to the destination.


N/A Theshow ip eigrp topology command does not take arguments.

back to top

Device# show ip eigrp traffic

Theshow ip eigrp traffic command displays the number of EIGRP packets sent and received. This command displays statistics o

hello packets, updates, queries, replies, and acknowledgments.


N/A Theshow ip eigrp traffic command does not take arguments.

back to top

Device# show ip interface [brief] [type] [number ]




ommand List

Theshow ip interface command displays information about the IP interfaces on a Cisco device.


brief Keyword that tells a router or switch to display information about its interfaces in a brief

format.

type (Optional) Interface type. Allowed values include async, bri, dialer, ethernet,

fastethernet, fddi, hssi, loopback, null, serial, tokenring, and tunnel.

number (Optional) Port, connector, or interface card number. Some Cisco devices require both a slot

and port number in the formslot/port . If an interface number is specified, theshow ip

interfaces command displays information for the specified interface only.

back to top

Device# show ip nat translations

Theshow ip nat translations command displays address translations that are active in the NAT table.


N/A Theshow ip nat translations command does not take arguments.

back to top

Device# show ip nat statistics

Theshow ip nat statistics command displays address translation statistics.


N/A Theshow ip nat statistics command does not take arguments.

back to top

Device# show ip ospf interface

Theshow ip ospf interface command displays the area ID, timer intervals (including the hello interval), and adjacency informatio


N/A Theshow ip ospf interface command does not take arguments.

back to top




ommand List

Device# show ip ospf neighbor

Theshow ip ospf neighbor command displays OSPF neighbor information on a per-interface basis.


N/A Theshow ip ospf neighbor command does not take arguments.

back to top

Device# show ip protocols

Theshow ip protocols command displays information about routing protocols that are configured on the router, including routing

protocol timer information, networks with which the router is exchanging routing updates, and the devices from which the router is

receiving routing information.


N/A Theshow ip protocols command does not take arguments.

back to top

Device# show ip route [noalias]

Theshow ip route command displays the contents of the IP routing table.


noalias Keyword that forces the router to display IP addresses, not IP aliases.

back to top

Device# show ip route eigrp

Theshow ip route eigrp command displays the current EIGRP entries in the routing table.


N/A Theshow ip route eigrp command does not take arguments.

back to top

Device# show isdn active




ommand List

Theshow isdn active command displays current call information, including called number, the time until the call is disconnected,

AOC charging units used during the call, and whether the AOC information is provided during calls or at the end of calls.


N/A Theshow isdn active command does not take arguments.

back to top

Device# show isdn status

Theshow isdn status command displays the number of active calls and the status of layer 1, layer 2, and layer 3 connectivity

between the router and the ISDN switch. In the output, a layer 1 status of ACTIVE and a layer 2 status of

MULTIPLE_FRAME_ESTABLISHED indicates that the router is communicating with the ISDN switch.


N/A Theshow isdn status command does not take arguments.

back to top

Device# show mac-address-table

Theshow mac-address-table command displays the contents of the MAC address table.


N/A Theshow mac-address-table command does not take arguments.

back to top

Device# show port-security [interface interface] [address | {{begin | exclude |

include} expression}]




ommand List

Theshow port-security command displays the port security settings defined for the specified interface.


interface interface (Optional) Interface for which you want to display the port security settings.

address (Optional) Keyword that tells the router to display all the secure addresses on all ports.

begin (Optional) Keyword that sets it so that the display begins with the line that matches the

specified expression.

exclude (Optional) Keyword that sets it so that the display excludes lines that match the specified

expression.

include (Optional) Keyword that sets it so that the display includes lines that match the specified

expression.

expression Expression that will be used as a reference point in the output.

back to top

Device# show protocol access-list [access-list-identifier ]

Theshow protocol access-list command displays the contents of all ACLs configured for the specified protocol on a Cisco

device.


protocol Protocol whose ACLs are to be displayed. For example, the show ip access-list

command displays only the IP ACLs configured on a router.

access-list-identifier (Optional) The name or number of a specific ACL. If this parameter is used, only thecontents of the specified ACL are displayed.

back to top

Device# show running-config

Theshow running-config command displays the configuration information currently running in RAM on the device.


N/A Theshow running-config command does not take arguments.

back to top

Device# show spanning-tree [detail]




ommand List

Theshutdown command causes an administrative shutdown of the specified interface, disconnecting any calls that are in progress.

Theno form of this command enables the interface.


N/A Theshutdown command does not take arguments.

back to top

Device(config-if)# switchport access vlan vlan

Theswitchport access command assigns an interface to a VLAN.


vlan vlan The VLAN that the interface is being assigned to.

back to top

Device(config-if)# switchport mode {trunk | access | dynamic desirable | dynamic

auto}

Theswitchport mode command configures the VLAN mode for an interface.


trunk Keyword that configures the port into permanent 802.1Q trunk mode and negotiates with the

connected device to convert the link to trunk mode.

access Keyword that disables port trunk mode and negotiates with the connected device to convert

the link to nontrunk.

dynamic desirable Keywords that trigger the port to negotiate the link from nontrunk to trunk mode. The port

negotiates to a trunk port if the connected device is in either trunk state, desirable state, or

auto state. Otherwise, the port becomes a nontrunk port, which is the default mode for all

Ethernet interfaces.

dynamic auto Keyword that enables a port to become a trunk only if the connected device has the state set

to trunk or desirable. Otherwise, the port becomes a nontrunk port.

back to top

Device(config-if)# switchport nonnegotiate




ommand List

Theswitchport nonnegotiate command specifies that DTP negotiation packets are not sent on the layer 2 interface. The switch

does not engage in DTP negotiation on this interface. This command is valid only when the interface switchport mode is access or trunk

(configured by using the switchport mode access or theswitchport mode trunk interface configuration command). This

command returns an error if you attempt to execute it in dynamic (auto or desirable) mode. Use the no form of this command to return

to the default setting.


N/A Theswitchport nonnegotiate command does not take arguments.

back to top

Device(config-if)# switchport port-security [{mac-address mac-address} | {maximum

value} | {violation {protect | restrict | shutdown}}]

Theswitchport port-security command enables port security on an interface.


mac address mac-address (Optional) Secure MAC address for the port. You can add additional secure MAC addresses

up to the maximum value configured.

maximum value (Optional) Maximum number of secure MAC addresses for the interface. The range is from 1


violation (Optional) Keyword that sets the security violation mode or the action to be taken if port

security is violated. The default is shutdown.

protect Keyword that sets the security violation to protect mode. When port secure MAC addresses

reach the limit that is allowed on the port, packets with unknown source addresses are

dropped until you remove a sufficient number of secure MAC addresses to drop below themaximum value.

restrict Keyword that sets the security violation to restrict mode. In this mode, a port security

violation causes a trap notification to be sent to the network management station.

shutdown Keyword that sets the security violation to shutdown mode. In this mode, a port security

violation causes the interface to immediately become error-disabled, and an SNMP trap

notification is sent. When a secure port is in the error-disabled state, you can bring it out of

this state by entering theerrdisable recovery cause psecure-violation global

configuration command, or you can manually re-enable it by entering the shutdown and

no shutdown interface configuration commands.

back to top

Device(config-if)# switchport trunk encapsulation {isl | dot1q | negotiate}




ommand List

Theswitchport trunk encapsulation command sets the trunk encapsulation method for the interface.


isl Keyword that specifies that only 802.1Q trunking encapsulation is used.

dot1q Keyword that specifies that only ISL trunking encapsulation is used.

negotiate Keyword that tells the device to negotiate trunking encapsulation with a peer on the interface

back to top

Device# telnet {hostname | ip-address}

The telnet command allows you to connect to a network host remotely.


hostname Name of the host that you are connecting to.

ip-address IP address of the host that you are connecting to.

back to top

Device# terminal editing

The terminal editing command enables the advanced editing features of Cisco IOS software. The no version of this command

disables the advanced editing features.


N/A The terminal editing command does not take arguments or keywords.

back to top

Device# terminal history size lines

The terminal history size command configures the command history buffer size for the current terminal session.


lines Number of command lines that the device will record in its history buffer. The range is from 0


back to top




ommand List

Device(config-router)# traceroute {hostname | ip-address}

The traceroute command allows you to display the route packets take to the specified host.


hostname Name of the host that you are connecting to.

ip-address IP address of the host that you are connecting to.

back to top

Device(config-router)# traffic-share {balanced | min}

The traffic-share command controls how traffic is distributed among IGRP load-sharing routes.


balanced Keyword that specifies the distribution of traffic proportionally according to the ratios of the

metrics.

min Keyword that specifies the use of routes that have minimum costs.

back to top

Device(config)# username name password password

Theusername command is used to establish a username-based authentication system.


name The User ID. This is the host name of the remote router. It is case sensitive.

password The password assigned to all routers. It must be the same for both the remote router and

authenticating router.

back to top

Device(config-router)# variance multiplier

Thevariance command defines the difference between the best metric and the worst acceptable metric when performing unequal-co

load balancing.


multiplier The range of metric values that will be accepted for load balancing. Acceptable values are

nonzero, positive integers. The default value is 1, which means equal-cost load balancing.

back to top




ommand List

Device(config-router)# vlan vlan-number

Thevlan command creates a VLAN on a router.


vlan-number The number of the VLAN being created.

back to top

Device(config)# vtp {{mode [server | client | transparent]} | {domain domain-name

| {password password }}

Thevtp command configures VTP parameters on a router.


mode [server | client |transparent]

VTP operating mode.

domain domain-name VTP domain name.

password password VTP password.

back to top

Command List2

Documents

Transcript of Command List2