ICS Commands

r|v||eged Mode
enab|e geL Lo prlvlleged mode
d|sab|e geL Lo user mode
enab|e password password_here seLs prlvlleged mode password
enab|e secret password_here seLs encrypLed prlvlleged mode password
Sett|ng asswords
enab|e secret password_here seL encrypLed password for prlvlleged access
enab|e password password_here seL password for prlvlleged access (used when Lhere ls no enable
secreL and when uslng older sofLware)
Set password for conso|e access
(conf|g)#||ne conso|e 0
(conf|g||ne)#|og|n
(conf|g||ne)#password password_here
Set password for v|rtua| term|na| (te|net) access (password musL be seL Lo access rouLer Lhrough LelneL)
(conf|g)#||ne vty 0 4
(conf|g||ne)#|og|n
(conf|g||ne)#password password_here
Set password for aux|||ary (modem) access
(conf|g)#||ne aux 0
(conf|g||ne)#|og|n
(conf|g||ne)#password password_here
Conf|gur|ng the kouter
sh runn|ngconf|g deLalls Lhe runnlng conflguraLlon flle (8AM)
sh startupconf|g dlsplays Lhe conflguraLlon sLored ln nv8AM
setup Wlll sLarL Lhe Lhe auLomaLlc seLup Lhe same as when you flrsL booL Lhe rouLer
conf|g t use Lo execuLe conflguraLlon commands from Lhe Lermlnal
conf|g mem execuLes conflguraLlon commands sLored ln nv8AM coples sLarLupconflg Lo runnlng
conflg
conf|g net used Lo reLrleve conflguraLlon lnfo from a 1l1 server
copy runn|ngconf|g startupconf|g coples saved conflg ln runnlng conflg (8AM) Lo nv8AM or wrlLe
memory for lCS under ver11
copy startupconf|g runn|ngconf|g coples from nonvolaLlle (nv8AM) Lo currenL runnlng conflg (8AM)
boot system f|ash f||ename_here Lells rouLer whlch lCS flle ln flash Lo booL from
boot system tftp Lells rouLer whlch lCS flle on Lhe LfLp server Lo booL from
boot system rom Lell rouLer Lo booL from 8CM aL nexL booL
copy f|ash tftp Coples flash Lo LfLp server
copy tftp f|ash 8esLores flash from LfLp server
copy run tftp Coples Lhe currenL runnlngconflg Lo LfLp server
copy tftp run 8esLores Lhe runnlngconflg from LfLp server

Genera| Commands
no shutdown (enables Lhe lnLerface)
re|oad resLarLs Lhe rouLer
sh ver Clsco lCS verslon upLlme of rouLer how Lhe rouLer sLarLed where sysLem was loaded from Lhe
lnLerfaces Lhe CS1 found and Lhe conflguraLlon reglsLer
sh c|ock shows daLe and Llme on rouLer
sh h|story shows Lhe hlsLory of your commands
sh debug shows all debugglng LhaL ls currenLly enabled
no debug a|| Lurns off all debugglng
sh users shows users connecLed Lo rouLer
sh protoco|s shows whlch proLocols are conflgured
banner motd # our_message # SeL/change banner
hostname router_name_here use Lo conflgure Lhe hosLname of Lhe rouLer
c|ear counters clear lnLerface counLers
rocesses Stat|st|cs
sh processes shows acLlve processes runnlng on rouLer
sh process cpu shows cpu sLaLlsLlcs
sh mem shows memory sLaLlsLlcs
sh f|ash descrlbes Lhe flash memory and dlsplays Lhe slze of flles and Lhe amounL of free flash memory
sh buffers dlsplays sLaLlsLlcs for rouLer buffer pools shows Lhe slze of Lhe Small Mlddle 8lg very 8lg
Large and Puge 8uffers
sh stacks shows reason for lasL rebooL monlLors Lhe sLack use of processes and lnLerrupLs rouLlnes
CD Commands (Clsco ulscovery roLocol uses layer 2 mulLlcasL over a SnAcapable llnk Lo send daLa)
sh cdp ne|ghbor shows dlrecLly connecLed nelghbors
sh cdp |nt shows whlch lnLerfaces are runnlng Cu
sh cdp |nt eth 0]0 show Cu lnfo for speclflc lnLerface
sh cdp entry cdp_ne|ghbor_here shows Cu nelghbor deLall
cdp t|mer 120 change how ofLen Cu lnfo ls senL (defaulL cdp Llmer ls 60)
cp ho|dt|me 240 how long Lo walL before removlng a Cu nelghbor (defaulL Cu holdLlme ls 180)
sh cdp run shows lf Cu Lurned on
no cdp run Lurns off Cu for enLlre rouLer (global conflg)
no cdp enab|e Lurns off Cu on speclflc lnLerface

M|sce||aneous Commands
sh contro||er t1 shows sLaLus of 11 llnes
sh contro||er ser|a| 1 use Lo deLermlne lf uCL or u1L devlce
(conf|g|f)#c|ock rate 6400 seL clock on uCL (blLs per second)
(conf|g|f)#bandw|dth 64 seL bandwldLh (klloblLs)
I Commands
Conf|gure I on an |nterface
|nt ser|a| 0
|p address 1S78913 2SS2SS00
|nt eth 0
|p address 2008114 2SS2SS2SS0
Cther I Commands
sh |p route vlew lp rouLlng Lable
|p route remote_network mask defau|t_gateway adm|n|strat|ve_d|stance conflgure a sLaLlc
l rouLe
|p route 0000 0000 gateway_of_|ast_resort seLs defaulL gaLeway
|p c|ass|ess use wlLh sLaLlc rouLlng Lo allow packeLs desLlned for unrecognlzed subneLs Lo use Lhe besL
posslble rouLe
sh arp vlew arp cache shows MAC address of connecLed rouLers
|p address 2222 2SS2SS2SS0 secondary conflgure a 2nd lp address on an lnLerface
sh |p protoco|
Ik Commands
Lnab|e Ik on router
|px rout|ng
Conf|gure Ik + IkkI on an |nt
|nt ser 0
|px network 4A
Cther Commands
sh |px route shows lx rouLlng Lable
sh |px |nt e0 shows lpx address on lnL
sh |px servers shows SA Lable
sh |px traff|c vlew Lrafflc sLaLlsLlcs
debug |px rout|ng act|v|ty debugs lS 8l packeLs
debug |px sap debugs SA packeLs
kout|ng rotoco|s
Conf|gure kI
router r|p
network 1S78900
network 208110
Cther kI Commands
debug |p r|p vlew 8l debugglng lnfo
Conf|gure IGk
router IGk 200
network 1S78900
network 208110
Cther IGk Commands
debug |p |grp events vlew lC8 debugglng lnfo
debug |p |grp transact|ons vlew lC8 debugglng lnfo
Access L|sts(see noLes below for deLalls)
sh |p |nt ser 0 use Lo vlew whlch l access llsLs are applles Lo whlch lnL
sh |px |nt ser 0 use Lo vlew whlch lx access llsLs are applles Lo whlch lnL
sh app|eta|k |nt ser 0 use Lo vlew whlch Apple1alk access llsLs are applles Lo whlch lnL
V|ew access ||sts
sh access||sts
sh |p access||sts
sh |px access||sts
sh app|eta|k access||sts
App|y standard I access ||st to |nt eth 0
access||st 1 deny 200110 0002SS
access||st 1 perm|t any
|nt eth 0
|p accessgroup 1 |n
App|y Lxtended I access ||st to |nt eth 0
access||st 100 deny tcp host 1111 host 2222 eq 23
access||st 100 deny tcp 3330 0002SS any eq 80
|nt eth 0
|p accessgroup 100 out
App|y Standard Ik access ||st to |nt eth 0
access||st 800 deny 7a 8000
access||st 800 perm|t 1
|nt eth 0
|px accessgroup 800 out
App|y Standard Ik access ||st to |nt eth 0
access||st 900 deny sap any 3378 1
access||st 900 perm|t sap any a|| 1
|nt eth 0
|px accessgroup 900 out
Wan Conf|gurat|ons (see noLes below for more deLalls)
Conf|gurat|on
encapsu|at|on ppp
ppp authent|cat|on chap_or_pap_here
ppp chap hostname routername_here
ppp pap sentusername username_here
sh |nt ser 0 use Lo vlew encapsulaLlon on Lhe lnLerface

rameke|ay Conf|gurat|on
encapsu|at|on framere|ay |etf use lL1l when seLLlng up a framerelay neLwork beLween a Clsco rouLer
and a nonClsco rouLer
framere|ay |m|type ans| LMl Lypes are Clsco AnSl C933A Clsco ls Lhe defaulL LMl Lype ls auLo
sensed ln lCS v112 and up
framere|ay map |p 3333 100 broadcast lf lnverse A8 wonL work map CLher l Lo ?our uLCl # (local)
keepa||ve 10 use Lo seL keepallve
sh |nt ser 0 use Lo show uLCl LMl and encapsulaLlon lnfo
sh framere|ay pvc shows Lhe conflgured uLCls shows vC Lrafflc sLaLs
sh framere|ay map shows rouLe maps
sh framere|ay |m| shows LMl lnfo
keyboard Shortcuts
C1kL show prevlous command
C1kLN show nexL command
SnI1C1kL6 8reak
Notes
Stat|c and Dynam|c kout|ng

Stat|c kout|ng manually asslgned by Lhe Admln user enLerlng Lhe rouLes (kouted rotoco|s l lx and
Apple1alk)
Dynam|c kout|ng generaLed/deLermlned by a 8ouLlng roLocol (8ouLlng roLocols 8l l 8l ll lC8
LlC8 CSl nLS 81M)
Dynam|c
1) WlLh uynamlc 8ouLlng rouLers pass lnformaLlon beLween each oLher so LhaL rouLlng Lables are
regularly malnLalned
2) 1he rouLers Lhen deLermlne Lhe correcL paLhs packeLs should Lake Lo reach Lhelr desLlnaLlons
3) lnformaLlon ls passed only beLween rouLers
4) A rouLlng domaln ls called an AuLonomous SysLem as lL ls a porLlon of Lhe lnLerneLwork under
common admln auLhorlLy
3) ConslsLs of rouLers LhaL share lnformaLlon over Lhe same proLocol Can be spllL lnLo rouLlng areas
D|stance Vector and L|nkState kout|ng
kout|ng rotoco|s
I) Inter|or (wlLhln an auLonomous sysLem AS group of rouLers under Lhe same admlnlsLraLlve
auLhorlLy)
a) D|stance Vector undersLands Lhe dlrecLlon and dlsLance Lo any neLwork connecLlon on Lhe
lnLerneLwork knows how
many hops (Lhe meLrlc) Lo geL Lhere All rouLers w/ln Lhe lnLerneLwork llsLen for messages from oLher
rouLers whlch are senL
every 30 Lo 90 seconds 1hey pass Lhelr enLlre rouLlng Lables uses hop counL for measuremenL 1) used
ln smaller neLworks
LhaL are have fewer Lhan 100 rouLers 2) Lasy Lo conflgure and use 3) As rouLers lncrease ln number
you need Lo conslder
Cu uLlllzaLlon convergence Llme and bandwldLh uLlllzaLlon 4) Convergence ls due Lo rouLlng updaLes
aL seL lnLervals 3) When
a rouLer recognlzes a change lL updaLes Lhe rouLlng Lable and sends Lhe whole Lable Lo all of lLs
nelghbors
1) kI 13 hop counL max
2) IGk 233 hop counL max uses rellablllLy facLor (233 opLlmal) and bandwldLh
3) k1M
b) L|nk State undersLands Lhe enLlre neLwork and does noL use secondhand lnformaLlon 8ouLers
exchange LS?s (hello
packeLs) Lach rouLer bullds a Lopographlcal vlew of Lhe neLwork Lhen uses Sl (shorLesL paLh flrsL)
algorlLhm Lo deLermlne Lhe
besL rouLe Changes ln Lopology can be senL ouL lmmedlaLely so convergence can be qulcker uses
8andwldLh congesLlon for measuremenL ul[ksLras algorlLhm
1) MalnLalns 1opology uaLabase 2) 8ouLers have formal nelghbor relaLlonshlp 3) Lxchanges LSA (Llnk
SLaLe AdverLlsemenL) or
hello packeLs wlLh dlrecLly connecLed lnLerfaces 4) 1hese are exchanged aL shorL lnLervals (Lyplcally 10
sec) 3) Cnly new lnfo ls
exchanged 6) Scales well however llnk?sLaLe proLocols are more complex 7) 8equlres more processlng
power memory and bandwldLh
1) CS declslons based on cosL of rouLe (meLrlc llmlL of 63333)
2) LIGk hybrld proLocol (boLh ulsLancevecLor and Llnk SLaLe) Clsco proprleLary
3) NLS
4) ISIS
II) Lxter|or
1) LG (LxLerlor CaLeway roLocol)
2) 8G (8order CaLeway roLocol)
kout|ng rotoco|s used for each kouted rotoco|
I 8l lC8 CSl lSlS LlC8
Ik lx 8l nLS LlC8
App|e1a|k 81M Au8 LlC8

rob|ems w|th kout|ng rotoco|s
1) kout|ng Loops occur when rouLlng Lables are noL updaLed fasL enough when one of Lhe neLworks
becomes unreachable uue Lo Lhe slow convergence (updaLes of rouLlng Lable beLween all rouLers)
some rouLers wlll end up wlLh lncorrecL rouLlng Lable and wlll broadcasL LhaL rouLlng Lable Lo oLher
rouLers 1hls lncorrecL rouLlng Lables wlll cause packeLs Lo Lravel repeaLedly ln clrcles
2) Count|ng to |nf|n|ty occurs when packeLs end up ln a rouLlng loop hop counL lncreases wlLh every
pass Lhrough a rouLer on Lhe neLwork
So|ut|ons to rob|ems w|th kout|ng rotoco|s
1) Def|ne the max|mum number of hops When Lhe number of hops reaches Lhls predeflned value Lhe
dlsLance ls consldered lnflnlLe Lhus Lhe neLwork ls consldered unreachable 1hls does sLop rouLlng loops
buL only llmlL Lhe Llme LhaL packeL can Lravel lnslde Lhe loop
2) Sp||t hor|zon 1he packeLs cannoL be senL back Lo Lhe same lnLerface LhaL Lhey orlglnally came from
uurlng Lhe updaLes one rouLer does noL send updaLes Lo Lhe rouLer LhaL lL recelved Lhe lnformaLlon
from
3) koute po|son|ng 1he rouLer seLs Lhe cosL/dlsLance of rouLes LhaL are unreachable Lo lnflnlLy used
wlLh holddown Llmers
4) 1r|ggered updates 1he rouLer sends updaLes of Lhe rouLlng Lable as soon as lL deLecLs changes ln Lhe
neLwork uoes noL walL for Lhe prescrlbed Llme Lo explre
S) no|dDowns AfLer Lhe rouLer deLecLs unreachable neLwork Lhe rouLers walLs for a speclfled Llme
before announclng LhaL a neLwork ls unreachable 1he rouLer wlll also walL for a perlod of Llme before lL
updaLes lLs rouLlng Lable afLer lL deLecLs LhaL anoLher rouLer came onllne (8ouLer keeps an enLry for Lhe
neLwork posslbly down sLaLe allowlng Llme for oLher rouLers Lo recompuLe for Lhls Lopology change)
Polddowns can only parLlally prevenL counLlng Lo lnflnlLy problem revenLs rouLes from changlng Loo
rapldly ln order Lo deLermlne lf a llnk has really falled or ls back up

Lncapsu|at|on 1ypes

Lncapsu|at|on
8022 sap
8023 novelleLher
LLherneL ll arpa (lnLerneL SLandard)
Snap snap

Wan Serv|ce rov|ders
1) Customer prem|ses equ|pment (CL) uevlces physlcally locaLed aL subscrlber?s locaLlon examples
CSu/uSu modem wlrlng on Lhe cusLomers locaLlon
2) Demarcat|on (or demarc) 1he place where Lhe CL ends and Lhe local loop porLlon of Lhe servlce
beglns (usually ln Lhe phone closeL)
3) Loca| |oop Cabllng from Lhe demarc lnLo Lhe WAn servlce provlder?s cenLral offlce wlrlng from
cusLomers locaLlon Lo Lhe nearesL CC
4) Centra| Cff|ce sw|tch (CC) SwlLchlng faclllLy LhaL provldes Lhe nearesL polnL of presence for Lhe
provlder?s WAn servlce locaLlon of Lelephone companys equlpmenL where Lhe phone llne connecLs Lo
Lhe hlgh speed llne (Lrunk) 8eglonal 1elco Cfflce where Lhe local loop LermlnaLes (Lhe 1elco locaLlon
nearesL you)
S) 1o|| network 1he swlLches and faclllLles (Lrunks) lnslde Lhe WAn provlder?s cloud

D1L Lhe rouLer slde and recelve clocklng
DCL Lhe CSu/uSu slde and provlde clocklng
WAN Dev|ces
kouters Cffer boLh lnLerneLwork and WAn lnLerface conLrols
A1M Sw|tches Plghspeed cell swlLchlng beLween boLh LAns and WAns
k2S and rameke|ay Sw|tches ConnecL prlvaLe daLa over publlc clrculLs uslng dlglLal slgnals
Modems ConnecL prlvaLe daLa over publlc Lelephone clrculLs uslng analog slgnals
CSU]DSU (Channe| Serv|ce Un|ts]Data Serv|ce Un|ts) CusLomer remlses LqulpmenL (CL) whlch ls
used Lo LermlnaLe a dlglLal clrculL aL Lhe cusLomer slLe
Commun|cat|on Servers ulal ln/ouL servers LhaL allow dlallng ln from remoLe locaLlons and aLLach Lo
Lhe LAn
Mu|t|p|exors uevlce LhaL allows more Lhan one slgnal Lo be senL ouL slmulLaneously over one physlcal
clrculL
ISDN
ISDN 8kI (8aslc 8aLe lnLerface) 2 64k 8 channels plus 1 16k u channel
ISDN kI (rlmary 8aLe lnLerface) 23 64k 8 channels plus 1 64k u channel (norLh Amerlca !apan) 30
64k 8 channels plus 1 64k u channel (Lurope AusLralla)

C|assfu| and C|ass|ess rotoco|s
C|assfu| summarlzes rouLlng lnfo by ma[or neLwork numbers ex 8l lC8
C|ass|ess 8C CSl
Adm|n|strat|ve D|stances for I koutes

AdmlnlsLraLlve ulsLances are conflgured uslng lp rouLe command

Lxample lp rouLe 1344330 2332332330 19323331 83 (where 83 ls Lhe admlnlsLraLlve dlsLance)

I koute Adm|n|strat|ve D|stance
ulrecLly connecLed lnLerface 0
SLaLlc rouLe uslng connecLed lnLerface 0
SLaLlc rouLe uslng l address 1
LlC8 summary rouLe 3
LxLernal 8C rouLe 20
lnLernal LlC8 rouLe 90
lC8 rouLe 100
CSl rouLe 110
lSlS rouLe 113
8l rouLe 120
LC rouLe 140
LxLernal LlC8 rouLe 170
lnLernal 8C rouLe 200
8ouLe of unknown orlgln 233

Sw|tch|ng 1erm|no|ogy
Storeandorward coples enLlre frame lnLo buffer checks for C8C errors before forwardlng Plgher
laLency
Cut1hrough ? reads only Lhe desLlnaLlon address lnLo buffer and forwards lmmedlaLely Low laLency
wlrespeed
ragment free ? modlfled form of cuLLhrough swlLch wlll read lnLo Lhe flrsL 64 byLes before forwardlng
Lhe frame Colllslons wlll usually occur wlLhln Lhe flrsL 64 byLes (defaulL for 1900 serles)
Access L|sts
199 l SLandard Access LlsL
100199 l LxLended Access LlsL
200299 roLocol 1ypecode Access LlsL
300399 uLCneL Access LlsL
600699 AppleLalk Access LlsL
700799 48blL MAC Address Access LlsL
800899 lx SLandard Access LlsL
900999 lx LxLended Access LlsL
10001099 lx SA Access LlsL
11001199 LxLended 48blL MAC Address Access LlsL
12001299 lx Summary Address Access LlsL
Access
L|st
||ters W||dcard Masks Add|t|ona| Notes
Standard
I
Source l address
fleld ln Lhe packeLs
l header
1o puL slmply when Lhe
l ls broken down Lo
blnary Lhe 1s allow
everyLhlng and Lhe 0s
musL maLch exacLly
Wlldcard mask examples 0000enLlre
address musL maLch 0233233233only
Lhe flrsL ocLeL musL maLch Lhe resL wlll
allow everyLhlng 233233233233allow
everyLhlng
Lxtended
I
Source l or
uesLlnaLlon l or 1C
or uu Source or
uesLlnaLlon orLs or
roLocol
Same as sLandard
1he key word An? lmplles any l value ls
allowed Lhe keyword PCS1 lmplles Lhe
l exacLly has Lo maLch
Standard
Ik
ackeLs senL by
cllenLs and servers
and SA updaLes senL
by servers and
rouLers
Conflgured as a
hexadeclmal number
lnsLead of blnary
1 means any and all neLwork numbers
( works llke An?)
Lxtended Source neLwork or MaLch mulLlple 1he mosL pracLlcal use of Lhe proLocol
Ik node or uesLlnaLlon
neLwork or node or
lx roLocol or lx
SockeL or SA
neLworks wlLh one
sLaLemenL agaln ln
hexadeclmal
Lype ls for neL8lCS
SA
SenL and recelved
SA Lrafflc
n/A
updaLes lLs own SA Lables Agaln uses 1
Lo mean An?
1roub|eshoot|ng 1oo|s
|ng kesu|ts
! success
LlmeouL
u desLlnaLlon unreachable
? unknown packeL Lype
11L exceeded
1raceroute kesu|ts
!P rouLer recd buL dldnL forward because of accessllsL
proLocol unreachable
n neLwork unreachable
u porL unreachable
LlmeouL
Access|ng kouter w|th 1erm|na| Lmu|at|on
uslng Pyper1ermlnal on a Wlndows machlne ad[usL Lhe followlng seLLlngs
v1100 LmulaLlon
ConnecLlon Speed 9600 8aud
uaLa 8lLs 8
arlLy none
SLop 8lLs 1
llow ConLrol none
Cn a Llnux machlne you may use Seyon or Mlnlcom (aL leasL one should come wlLh your dlsLrlbuLlon)
kouter Startup Sequence
CS1
8ooLsLrap program loaded from 8CM
lCS ls loaded from elLher flash (defaulL) 1l1 or 8CM
lCS lmage loaded lnLo lowaddressed memory hardware and sofLware ls deLermlned
Conflg flle ls load from nv8AM lf no conflguraLlon exlsLs ln nv8AM Lhe lnlLlal conflguraLlon dlalog wlll
begln
M|sce||aneous Notes
Mu|t|p|e Loop rob|ems Complex Lopology can cause mulLlple loops Lo occur Layer 2 has no mechanlsm
Lo sLop Lhe loop 1hls ls Lhe maln reason for Spannlng 1ree roLocol

Spann|ng1ree rotoco| (S1) ILLL 8021d ueveloped Lo prevenL rouLlng loops uses S1A (Spannlng
1ree AlgorlLhm) Lo calculaLe a loopfree neLwork Lopology allows redundanL paLhs wlLhouL sufferlng Lhe
effecLs of loops ln Lhe neLwork

V|rtua| LANs (VLANs) seLs dlfferenL porLs on a swlLch Lo be parL of dlfferenL subneLworks Some
beneflLs slmpllfy moves adds changes reduce admlnlsLraLlve cosLs have beLLer conLrol of broadcasLs
LlghLen securlLy and dlsLrlbuLe load 8elocaLe Lhe server lnLo a secured locaLlon

nDLC (n|ghLeve| Data L|nk Contro|) Llnk layer proLocol for Serlal llnks Clsco uefaulL SupporLs Lhe
followlng modes normal 8esponse Mode as per Secondary under SuLC Asynchronous 8esponse Mode
allows secondary Lo communlcaLe wlLhouL permlsslon Asynchronous 8alanced mode comblnes Lhe Lwo
sLaLlons Pas lower overhead Lhan LA8 buL less error checklng
Modu|ar Sw|tch]VI Syntax
Lype sloL/porL (example e 2/1)
Lype sloL/porLadapLer/porL (example e 2/0/1)