SHOW COMMANDS - CISCO ROUTERS
Show version - software version, config files, boot images, config register, basic config of router
Show
ipx interface - status, ipx rip and sap received/sent, ipx access-lists
Show ipx route - ipx routing table
Show ipx
servers - server list (name, port, hops, type of service)
Show ipx traffic - number/type of packets, RIP and SAP packets
Show
protocol - ipx addresses of an interface, IP addresses and routing protocol
Show ip protocol - routing update times, networks
active on, neighbour routers, administrative distances, AS number
Show access-lists - shows standard and extended access-lists
on all interfaces
Show access-list 101
Show ip interface - IP addresses, masks, MTU, access-lists, split horizon, ICMP,
CDP status, NAT statistics, LMI info, DLCIs
Show interface serial 0 - shows bandwidth, MTU, keepalives
Show ip route
- ip routing table
Show cdp neighbor - deviceID, local intf, holdtime, capability, platform, remote portID
Show cdp
entry * - IP address of neighbour, protocol info, platform, capability, portID, holdtime, same info as show version, neighbour
device ID, local interface
Show cdp neighbor detail - same as above also IP address, version info
Show cdp traffic -
info on traffic and errors
Show cdp interface - encapsulation, timer, holdtime for each intf
Show controllers serial
0 - shows DTE/DCE connections, buffer size, collisions, mac address
Show host(s) - shows hostname to IP resolution of hosts
Show
session(s) - shows connections to a remote device
Show users - shows connections to your router, port and time connected
Show
frame-relay lmi - lmi errors and lmi type
Show frame-relay pvc - all configured PVC's, DLCI numbers, status of connections,
No. of BECN/FECN
Show frame-relay pvc 16
Show frame-relay map - ip to dlci mappings
Show run - display router config
(RAM), configured PVCs, ACLs.
SHOW COMMANDS - 1900 SWITCH
Show mac-address-table
Show run
Show ip - like ipconfig
Show port system - shows switching method
Show
vtp
Show trunk A allowed-vlans - shows which VLANS allowed on trunk link
Show vlan-membership
Show vlan 2
Show
vlan - verify VLAN config
Show history - shows last 10 commands entered by default
Show terminal - shows terminal config
+ history buffer size
GENERAL ROUTER COMMANDS
Banner exec - for activation or incoming vty
Banner incoming - displayed on reverse telnet sessions
Banner
login - displayed on all connected terminals. Displayed before MOTD banner but before login prompts
Bfe - manual emergency
mode setting
Clear counters - clears counters on all interfaces
Clear frame-relay-inarp - clears dynamic mappings
Clear
line 1 - clears vty 1 connection to a remote router
Clock set 10.30.10 28 may 2002
Config-register 0x2102 - changes
config register
Copy flash tftp
Copy tftp flash - copies IOS image from tftp server default directory to router flash
Disable
- to get back to user mode from privileged
Disconnect 1 - clears a connection to a remote router
Enable - to get into
privileged mode
Enable last-resort - define enable action if no tacas servers respond
Enable use-tacas - tells the router
to authenticate passwords through a tacas server
Encapsulation isl 3 - encapsulates ISL frame-tagging for VLAN 3 on an
interface
Exec timeout 0 1 - sets console timeout to 1 second
Exec-timeout 0 0 - sets exec timeout to never timeout
Exec-timeout
1 0 - set exec timeout to 1 minute
Ip domain-lookup - enables DNS (use no form to stop this)
Ip domain-name nikmakris.com
- appends domain name to hostname (required for DNS)
Ip host nik 172.17.1.63 - adds to host table (up to 8 ip addr)
Ip
name-server - sets ip address(es) of DNS servers
Lock - locks the terminal
Logging synchronous - stops console messages
overwriting commands
Logout - to logout of the router
Media-type 100BaseX - sets media type
Mrinfo - request neigbour
and version information from a multicast router
No login - sets line, vty ports not to prompt for login info
Passive-inteface
s0 - disables routing updates on interface (Global command) - they are not sent out this interface but they are still received.
Ping
ipx 40.0000.0c8d.5c9d
Service password-encryption - encrypts passwords (Global command)
Terminal monitor - needed to
view debug commands from telnet session
Terminal history size 50 - sets command history to 50 lines
Tftp-server system
<image name> - Make router a tftp server
CONFIGURE COMMANDS
Interface Ethernet 2/0/1 - type slot / port adapter / port number (interface) for VIP cards
Config terminal
- configures RAM
Config network (config net) - changes a config on a tftp host
Config memory - configure NVRAM
Ip
address 172.17.1.63 255.255.255.0 secondary - adds a secondary subnet address to an interface
Clock rate 56000 - sets clock
rate to 56kbps for DCE interfaces
ACCESS LISTS (ACL)
Access-enable - creates a temporary access-list entry
Access-template - creates a temporary access-list
entry
Access-profile - apply user profile to interface
Access-list 1 permit 0.0.0.0 255.255.255.255 - same as next
line
Access-list 1 permit any - permits any host
Access-list 1 permit 172.30.16.29 0.0.0.0 - same as next line
Access-list
1 permit host 172.30.16.29 - permits host 172.30.16.29
No access list 1 - deletes access list 1
Ip access-group 1 out
(out is default)
Access-list 101 deny tcp 172.16.4.0 0.0.0.255 any eq telnet
Access-list 101 permit ip any any established
(TCP connection)
Router(Config)#ip access-list standard nik
Router(Config std-nacl)#deny any log (log - logs packets)
No
ip access-group in - won't delete inbound lists if you leave the in off the end of the command
FRAME RELAY
Router(Config)#int s0
Router(Config-if)#encapsulation frame-relay cisco (default)
Router(Config-if)#exit
Router(Config)#int
s0.16 point-to-point
Router(Config-if)#no inverse-arp
Router(Config-if)#ip address 172.17.1.63 255.255.255.0
Router(Config-if)#bandwidth
64 - sets bandwidth to 64kbps (Only used by routing protocols)
Router(Config-if)#frame-relay map ip 172.16.30.17 16 ietf
broadcast - broadcast tells the router to send broadcasts out this intf
IGRP CONFIGURATION
Router(Config)#router igrp 50
Router(Config-router)#timers basic 15 45 0 60
Router(Config-router)#variance
1-128 (controls load balancing between best and worse metrics)
Router(Config-router)#traffic-share balanced/min
Balanced
- share inversely proportional to metrics
Min - use routers that have only min costs
Router(Config-router)#network
128.6.0.0
Router(Config-router)#no metric holddown
Router(Config-router)#metric maximum-hop 50
IPX RIP CONFIGURATION
Router(Config)#ipx routing - enables IPX routing, RIP and SAP
Router(Config)#ipx maximum-paths 2 - enables
equal cost load balancing over 2 paths
Router(Config)#ipx per-host-load-share - ensures all packets to 1 destination are
sent over same line
Router(Config)#int e0
Router(Config-if)#ipx network 10 encapsulation sap secondary - assigns ipx
network 10 to a secondary interface on Ethernet 0 with encapsulation Ethernet_802.2
Router(Config-if)#ipx delay 6 - sets
tick metric for IPX RIP (LAN = 1, WAN = 6 default)
Router(Config-if)#exit
CISCO ISDN CONFIGURATION
Router(Config)#interface bri 0
Router(Config-if)#ip address 172.17.1.63 255.255.255.0
Router(Config-if)#no
shutdown
Router(Config-if)#dialer-group 1
Router(Config-if)#dialer map ip 172.16.60.2 name 8042 8350661
(Next router
ip - hostname of next route (auth) - number to dial)
Router(Config-if)#dialer load-threshold 2 either - makes both interfaces
come up immediately
Router(Config-if)#dialer load-threshold 255 either - only brings up 2nd B-channel if first is 100%
loaded
Router(Config-if)#hold-queue 75 in - holds 75 packets in the queue during connection
Router(Config-if)#dialer
idle-timeout 300 - sets idle time out (120 default)
Router(Config-if)#encapsulation ppp
Router(Config-if)#exit
Router(Config)#dialer-list
1 list 110
Router(Config)#access-list 110 permit tcp any any eq smtp
Router(Config)#access-list 110 permit tcp any any
eq telnet
STATIC/DEFAULT ROUTES
Ip route 0.0.0.0 0.0.0.0 172.16.20.1 = default route
Ip default-network 172.16.1.0
Ip route 172.17.1.63
255.255.255.0 serial 1 1 permanent - keeps static route even if router cannot communicate with it, administration distance
1
CISCO DISCOVERY PROTOCOL (CDP) COMMANDS
Cdp timer 90
Cdp holdtime 240
Cdp enable (no cdp enable)
1900 SWITCH CONFIGURATION
#config t
(Config)#enable password level 1 nikolas - usermode password
(Config)#enable password level
15 makris - enable password
(Config)#enable secret nik2 - precedes the enable p/w
(Config)#hostname nik
(Config)#vtp
pruning enable - enables pruning on whole switch
(Config)#delete vtp - deletes VTP database
(Config)#vtp server (client/transparent)
(Config)#vtp
domain nikolas
(Config)#vtp password cisco
(Config)#ip address 172.17.1.63 255.255.255.0
(Config)#ip default-gateway
172.17.1.50
(Config)#switching-mode store-and-forward (fragment-free)
(Config)#vlan 2 name sales
(Config)#vlan 3
name marketing
(Config)#int Ethernet 0/1 - slot 0/port 1
(Config-if)#vlan-membership static 2
(Config-if)#description
Finance_VLAN
(Config-if)#port secure max-mac-count 1 - allows only one mac address per port
(Config-if)#exit
(Config)#int
f0/26
(Config-if)#trunk on - enables trunking of all VLANS not just VLAN 1
(Config-if)#no trunk-vlan 3 - stops trunking
vlan 3
(Config-if)#duplex full - sets to full duplex (auto sense default)
(Config-if)#exit
(Config)#copy tftp://192.168.0.120/cat1900EN_9_00.bin
opcode - download into flash memory
(Config)#copy nvram tftp://192.168.0.120/cat1900EN
(Config)#copy tftp://192.168.0.120/cat1900EN
nvram
(Config)#delete nvram - deletes config
(Config)#delete vtp - deletes VTP database
(Config)#clear mac-address-table
[dynamic]
CISCO DEBUG COMMANDS
Debug ipx routing activity - info on RIP updates
Debug ipx sap - info on sap updates
Debug ip igrp
events - what's being rec'd sent, route type (int/ext,system), source, dest
Debug ip igrp transactions - shows contents
of routing updates
Debug ip rip - source/contents of updates, network, metrics
Debug frame-relay lmi - enables verification
of connection
Debug ppp authentication
UNDEBUG ALL