Cisco Router Basics

The Router Router Components (internal) Router Components (external) Router's Startup Procedure Configuration Register Cisco CLI Command Modes User Exec Mode Privileged Exec Mode Setup Mode ROM Monitor Mode The Router
A Router is a layer 3 network device that moves data between different network segments and can look into a packet header to determine the best path for the packet to travel. Routers can connect network segments that use different protocols. They also allow all users in a network to share a single connection to the Internet or a WAN. It is used to improve network performance by: segmenting the network and creating separate collision & broadcast domains. reducing competition for bandwidth. Broadcasts are not forwarded to other network segments. Increases security by using Access Lists. Top Router Components (internal) ROM ROM is used to store the router's bootstrap startup program, operating system software, and power-on diagnostic tests programs. In order to perform ROM upgrades you remove and replace pluggable chips on the motherboard. Flash Memory It holds operating system image(s). Flash memory is erasable, reprogrammable ROM. You can perform Cisco IOS software upgrades without having to remove and replace chips. Flash content is retained when you switch off or restart the router. RAM RAM is used to store operational information such as routing tables, router's running configuration file. RAM also provides caching and packet buffering capabilities. Its contents are lost when you switch off or

restart the router. Top NVRAM NVRAM (nonvolatile RAM), is used to store the router's startup configuration file. It does not lose data when power is switched off. So the contents of the startup configuration file are maintained even when you switch off or restart the router. Network Interfaces The router's network interfaces are located on the motherboard or on separate interface modules. You configure Ethernet or Token Ring interfaces to allow connection to a LAN. The synchronous serial interfaces are configured to allow connection to WANs. You can also configure ISDN BRI interfaces to allow connection to an ISDN WAN..

Router Components (External) A router can be configured over any of its network interfaces. You can supply configuration information to a router using:TFTP servers : Trivial File Transfer Protocol; A simplified version of FTP that allows files to be transferred from one computer to another over a network. virtual terminals network management stations

Top

Router's Startup Procedure

Each time you switch on the router, it goes through power-on self-test diagnostics to verify basic operation of the CPU, memory and network interfaces. The system bootstrap software in ROM (boot image) executes and searches for valid router operating system software (Cisco IOS image). IOS is acronym for Internetwork Operating System. There are three places to find the Cisco IOS image to load: Flash memory A TFTP server on the network ROM The source of the Cisco IOS image is determined from the boot field setting of the router's configuration

register. Configuration Registration: A 16-bit register used to control how the router boots up, where the IOS image, how to deal with the NVRAM configuration, setting the console baud rate and enabling or disabling the break function. The default setting for the configuration register indicates that the router should attempt to load a Cisco IOS image from flash memory. If the router finds a valid IOS image, it searches for a valid configuration file. If your router does not find a valid system image, or if its configuration file is corrupted at startup, and the configuration register (bit 13) is set to enter ROM monitor mode, the system will bypass the NVRAM setting and enters ROM monitor mode. This also allow access to the router in the event a password is lost. The configuration file, saved in NVRAM, is loaded into main memory and executed one line at a time. These configuration commands start routing processes, supply addresses for interfaces, and set media characteristics. If no configuration file exists in NVRAM, the operating system executes a question-driven initial configuration routine called the system configuration dialog. This special mode is also called the Setup mode. Top

Cisco CLI Command Modes The Cisco IOS software provides you with access to several different command modes. Each command mode provides a different group of related commands. The Cisco Command Line Interface (CLI) is called EXEC. EXEC has two modes: User mode Privileged mode For security purposes the two EXEC modes serve as two levels of access to Cisco IOS commands. EXEC user commands allow you to connect to remote devices make temporary changes to terminal settings perform basic tests list system information If you want to access privileged mode you have to enter a password. The commands available in Privileged mode also include all those available in User mode. You can use Privileged EXEC commands to:-

 set operating parameters perform a detailed examination of the router's status test and debug router operation access global and other included configuration modes Top From Privileged mode you can enter global configuration mode. This gives you access to configuration commands that affect the system as a whole, and to other configuration modes. You can specify the source of the configuration commands as being from : a terminal memory the network You can access many other specific configuration modes from Global Configuration mode that allow complex configurations to be performed. Setup Mode: If the router does not have a configuration file it will automatically enter Setup mode when you switch it on. Setup mode presents you with a prompted dialog, called the system configuration dialog, in which you establish an initial configuration. Rom Monitor Mode: If the router does not find a valid operating system image, or if you interrupt the boot sequence, the system may enter ROM monitor mode. From ROM monitor mode you can boot the device or perform diagnostic tests.

Top

Cisco IOS Router Commands

More Cisco information: - Cisco Router Commands - Cisco IP Addressing Commands - Cisco IP Services Commands - Cisco Router and Switch Commands - Cisco Router Configuration Commands - LAB 1 Basic Cisco configuration commands - IP6 Next Generation Overview - Linux Commands - Tom's MCSE Notes - Tom's A+ Plus Notes - Tom's Networking+ (Net+) Plus Notes

Other information:

Routing with Cisco 2500 and 1000 Series for LAN-ISDN Service
Commands - General There are 3 different modes of operation within the Cisco IOS.

1. Disabled mode 2. Enabled mode 3. Configuration mode

In the Disabled mode you can use a limited number of commands. This is used primarily to monitor the router. The Enabled mode is used to show configuration information, enter the configuration mode, and make changes to the configuration. The Configuration mode is used to enter and update the runtime configuration. To get a list of the commands for the cisco type '?' at the prompt. To get further information about any command, type the command followed by a '?'. clear clock configure debug disable enable erase exit help login logout no ping reload Reset functions Manage the system clock Enter configuration mode Debugging functions (see also 'undebug') Turn off privileged commands Turn on privileged commands Erase flash or configuration memory Exit from the EXEC Description of the interactive help system Log in as a particular user Exit from the EXEC Disable debugging functions Send echo messages Halt and perform a cold restart

setup show telnet terminal test traceroute tunnel undebug verify write

Run the SETUP command facility Show running system information Open a telnet connection Set terminal line parameters Test subsystems, memory, and interfaces Trace route to destination Open a tunnel connection Disable debugging functions (see also 'debug') Verify checksum of a Flash file Write running configuration to memory, network, or terminal

show access-lists arp buffers List access lists ARP table Buffer pool statistics

configuration Contents of Non-Volatile memory controllers debugging dialer extended flash flh-log history hosts Interface controller status State of each debugging option Dialer parameters and statistics Extended Interface Information System Flash information Flash Load Helper log buffer Display the session command history IP domain-name, lookup style, name servers, and host table

interfaces ip isdn line logging memory privilege processes protocols queue queueing reload route-map

Interface status and configuration IP information ISDN information TTY line information Show the contents of logging buffers Memory statistics Show current privilege level Active process statistics Active network routing protocols Show queue contents Show queueing configuration Scheduled reload information route-map information

running-config Current operating configuration sessions smf stacks Information about Telnet connections Software MAC filter Process stack utilization

startup-config Contents of startup configuration subsys tcp terminal users version Show subsystem information Status of TCP connections Display terminal configuration parameters Display information about terminal lines System hardware and software status

Other Useful Commands

View the Software Version View the Ethernet IP View the Serial IP View the Default Route View the Filters View the Bandwidth Add a Static Route Change the Dial Number Turn Filters On and Off Ping from the Router Traceroute from the Router View the Software Version Cisco>en Cisco#wr term <--- Shows the running configuration Building configuration... Current configuration: ! version 11.2 no service udp-small-servers no service tcp-small-servers ! hostname Cisco ! interface Ethernet0 ip address 192.168.1.1 255.255.255.0 ! interface Serial0 ip address 192.168.6.1 255.255.255.0 encapsulation frame-relay frame-relay lmi-type ansi ! interface Serial1 ip address 192.168.4.2 255.255.255.0 encapsulation frame-relay bandwidth 1536 keepalive 5 frame-relay map ip 192.168.4.1 101 IETF ! router rip version 2 network 192.168.4.0 network 192.168.6.0 neighbor 192.168.6.2 neighbor 192.168.4.1 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.6.2 ip route 0.0.0.0 0.0.0.0 192.168.4.1 ! line con 0 line aux 0 line vty 0 4 login

! end View the Ethernet IP Router#wr term This will show the running configuration. Within the configuration, you will see an interface ethernet 0 section: interface Ethernet0 ip address 38.150.93.1 255.255.255.0 no ip directed-broadcast View the Serial IP Router#wr term Within the configuration, you will see an interface serial 0 section: interface Serial0 ip address 38.21.10.100 255.255.255.0 ip broadcast-address 38.21.10.255 ip access-group 106 in encapsulation frame-relay bandwidth 56 no fair-queue frame-relay map ip 38.21.10.1 500 IETF View the Default Route Router#wr term Within the configuration, you will see an ip route section. In the ip route section, look for a route: ip route 0.0.0.0 0.0.0.0 38.167.29.1 The last ip address is the POP ip. View the Filters Router#wr term Under interface serial 0, look for: ip access-group 104 in

ip access-group 105 out This means that access-group 104 is the inbound filter set and access-group 105 is the outbound filter set. Then, continue to look in the configuration for the access-list statements: (Example access-list statements) access-list 104 deny ip 38.166.101.0 0.0.0.255 any access-list 104 permit tcp any any established access-list 104 permit tcp any eq ftp-data any gt 1023 access-list 104 permit udp any eq domain any gt 1023 access-list 104 permit udp any eq domain any eq domain access-list 104 permit icmp any any access-list 104 permit udp any eq snmp any gt 1023 access-list 105 deny ip any 38.166.101.0 0.0.0.255 access-list 105 permit tcp any any established access-list 105 permit tcp any any eq ftp access-list 105 deny udp any eq netbios-ns any access-list 105 deny udp any eq netbios-dgm any access-list 105 permit ip any any View the Bandwidth Router#wr term Within the config, you will see an interface serial 0 section: interface Serial0 ip address 38.21.10.100 255.255.255.0 ip broadcast-address 38.21.10.255 ip access-group 106 in encapsulation frame-relay bandwidth 56 no fair-queue frame-relay map ip 38.21.10.1 500 IETF Add a Static Route Cisco#config t Enter configuration commands, one per line. End with CNTL/Z. Cisco(config)#ip route DEST.DEST.DEST.DEST MASK.MASK.MASK.MASK GATE.GATE.GATE.GATE where: DEST.DEST.DEST.DEST = The destination network the static route is for MASK.MASK.MASK.MASK = The subnet mask of the destination network GATE.GATE.GATE.GATE = The gateway of the static route Example route statement: ip route 38.222.75.0 255.255.255.0 38.20.5.1 Cisco(config)#^Z (hit <control> z) Write the entry to memory:

Cisco#wr mem Building configuration... [OK] Change the Dial Number Type en to put the router in enable mode: test.com>en The password should be the same as the one used to telnet in. Password: To view the router's configuration, type: test.com#show config There will be a line in the configuration that says: dialer map IP 38.1.1.1 speed 64 name LD3330 2707000 The 2707000 is the dial number. NOTE: Record what interface the dialer map IP line is under because you will need to use that interface when changing the number. Type config t to configure from terminal. test.com#config t Enter configuration commands, one per line. End with CNTL/Z. Enter the interface that the dialer map IP line is under: test.com(config)#interface BRI0 Add in the new dialer map IP line with the new phone number: test.com(config)#dialer map IP 38.1.1.1 speed 64 name LD3330 [new number]

Now, remove the old dialer map IP line. To remove a line, type no and then the line. For example, to remove the old dialer map IP, type: test.com(config)#no dialer map IP 38.1.1.1 speed 64 name LD3330 2707020 Now leave config mode: test.com(config)# [control] z Save changes: test.com# write mem Building configuration... [OK] Verify the new number is in the config: test.com#show config The new number should be in the dialer map IP line. Turn Filters On and Off To turn the filters off:

Router#configure terminal Router(config)#interface Serial0 Router(config-if)#no ip access-group 104 in Router(config-if)#no ip access-group 105 out Router(config-if)# Hit CTRL-Z Router#wr mem Building configuration... [OK] Router# To turn the filters on:

Router#configure terminal Router(config)#interface Serial0 Router(config-if)#ip access-group 104 in Router(config-if)#ip access-group 105 out

Router(config-if)# Hit CTRL-Z Router#wr mem Building configuration... [OK] Router# Ping from the Router Cisco#ping <hostname> Example: Cisco#ping 38.8.14.2

First of all you should remember the keyboard shortcuts of a router. Keyboard Shortcuts CTRL-N - show next command CTRL-P - show previous command SHIFT-CTRL-6 Break Configuring the Router You will be able to learn the basic commands for configuring a router. sh running-config - details the running configuration file (RAM) sh startup-config - displays the configuration stored in NVRAM setup - Will start the the automatic setup; the same as when you first boot the router config t - use to execute configuration commands from the terminal config mem - executes configuration commands stored in NVRAM; copies startup-config to running-config config net - used to retrieve configuration info from a TFTP server copy running-config startup-config - copies saved config in running config (RAM) to NVRAM or "write memory" for IOS under ver.11 copy startup-config running-config - copies from non-volatile (NVRAM) to current running config (RAM) boot system flash <put file filename here> - tells router which IOS file in flash to boot from boot system tftp - tells router which IOS file on the tftp server to boot from boot system rom - tell router to boot from ROM at next boot copy flash tftp - Copies flash to tftp server copy tftp flash - Restores flash from tftp server copy run tftp - Copies the current running-config to tftp server copy tftp run - Restores the running-config from tftp server General Commands Here is a list of the general commands. These are the basic level commands and most commonly used no shutdown - (enables the interface)

reload - restarts the router sh ver - Cisco IOS version, uptime of router, how the router started, where system was loaded from, the interfaces the POST found, and the configuration register sh clock - shows date and time on router sh history - shows the history of your commands sh debug - shows all debugging that is currently enabled no debug all - turns off all debugging sh users - shows users connected to router sh protocols - shows which protocols are configured banner motd # Your customized message here # - Set/change banner hostname <give router name> - use to configure the hostname of the router clear counters - clear interface counters Privileged Mode commands of a router Learn how to work in the privileged mode of a router. enable - get to privileged mode disable - get to user mode enable password <give password here> - sets privileged mode password enable secret <give password here> - sets encrypted privileged mode password Setting Passwords on router Here you will be able to learn how to set the password on a router. enable secret <give password here> - set encrypted password for privileged access enable password <give password here> - set password for privileged access (used when there is no enable secret and when using older software) Setting the password for console access: (config)#line console 0 (config-line)#login (config-line)#password <put password here> Set password for virtual terminal (telnet) access (password must be set to access router through telnet): (config)#line vty 0 4 (config-line)#login (config-line)#password <put password here> Set password for auxiliary (modem) access: (config)#line aux 0 (config-line)#login (config-line)#password <put password here> Router Processes & Statistics By these command you can see the statistics and different processes of the router. sh processes - shows active processes running on router sh process cpu - shows cpu statistics sh mem - shows memory statistics sh flash - describes the flash memory and displays the size of files and the amount of free flash

memory sh buffers - displays statistics for router buffer pools; shows the size of the Small, Middle, Big, Very Big, Large and Huge Buffers sh stacks - shows reason for last reboot, monitors the stack use of processes and interrupts routines IP Commands Here is a list of the IP Commands Configure IP on an interface: int serial 0 ip address 157.89.1.3 255.255.0.0 int eth 0 ip address 2008.1.1.4 255.255.255.0 Other IP Commands: sh ip route - view ip routing table ip route <remote_network> <mask> <default_gateway> [administrative_distance] - configure a static IP route ip route 0.0.0.0 0.0.0.0 <put gateway of the last resort here> - sets default gateway ip classless - use with static routing to allow packets destined for unrecognized subnets to use the best possible route sh arp - view arp cache; shows MAC address of connected routers ip address 2.2.2.2 255.255.255.0 secondary - configure a 2nd ip address on an interface sh ip protocol CDP Commands (Cisco Discovery Protocol uses layer 2 multicast over a SNAP-capable link to send data): sh cdp neighbor - shows directly connected neighbors sh cdp int - shows which interfaces are running CDP sh cdp int eth 0/0 - show CDP info for specific interface sh cdp entry <cdp neighbor here> - shows CDP neighbor detail cdp timer 120 - change how often CDP info is sent (default cdp timer is 60) cp holdtime 240 - how long to wait before removing a CDP neighbor (default CDP holdtime is 180) sh cdp run - shows if CDP turned on no cdp run - turns off CDP for entire router (global config) no cdp enable - turns off CDP on specific interface IPX Commands Enable IPX on router: ipx routing Configure IPX + IPX-RIP on an int:

int ser 0 ipx network 4A Other Commands: sh ipx route - shows IPX routing table sh ipx int e0 - shows ipx address on int sh ipx servers - shows SAP table sh ipx traffic - view traffic statistics debug ipx routing activity - debugs IPS RIP packets debug ipx sap - debugs SAP packets Routing Protocols RIP, IGPR and OSPF are the routing protocols and here is a list of the commands for the working on the routing protocols. Configure RIP: router rip network 157.89.0.0 network 208.1.1.0 Other RIP Commands: debug ip rip - view RIP debugging info Configure IGRP: router IGRP 200 network 157.89.0.0 network 208.1.1.0 Other IGRP Commands: debug ip igrp events - view IGRP debugging info debug ip igrp transactions - view IGRP debugging info Access Lists Here is a list of the Access list command of a router. sh ip int ser 0 - use to view which IP access lists are applies to which int sh ipx int ser 0 - use to view which IPX access lists are applies to which int sh appletalk int ser 0 - use to view which AppleTalk access lists are applies to which int View access lists: sh access-lists sh ip access-lists sh ipx access-lists sh appletalk access-lists Apply standard IP access list to int eth 0: access-list 1 deny 200.1.1.0 0.0.0.255 access-list 1 permit any int eth 0 ip access-group 1 in Apply Extended IP access list to int eth 0: access-list 100 deny tcp host 1.1.1.1 host 2.2.2.2 eq 23

access-list 100 deny tcp 3.3.3.0 0.0.0.255 any eq 80 int eth 0 ip access-group 100 out Apply Standard IPX access list to int eth 0: access-list 800 deny 7a 8000 access-list 800 permit -1 int eth 0 ipx access-group 800 out Apply Standard IPX access list to int eth 0: access-list 900 deny sap any 3378 -1 access-list 900 permit sap any all -1 int eth 0 ipx access-group 900 out WAN Configurations Commands Networking over WAN is the main functionality of a router. The most common use of a router is for the WAN connectivity. Here is a list of the commands for the different methods of the WAN connectivity. PPP Configuration Point to point protocol is a method for the WAN connectivity and you will find here some commands of PPP. encapsulation pppppp authentication <chap or pap here> ppp chap hostname <put router name here> ppp pap sent-username <put user name here> sh int ser 0 - use to view encapsulation on the interface Frame-Relay Configuration One of the methods for the WAN connectivity is the Frame Relay. Find here some basic commands for the WAN connectivity through Frame Relay. encapsulation frame-relay ietf - use IETF when setting up a frame-relay network between a Ciscorouter and a non-Cisco router frame-relay lmi-type ansi - LMI types are Cisco, ANSI, Q933A; Cisco is the default; LMI type is auto-sensed in IOS v11.2 and up frame-relay map ip 3.3.3.3 100 broadcast - if inverse ARP won't work, map Other IP to Your DLCI # (local) keep alive 10 - use to set keep alive sh int ser 0 - use to show DLCI, LMI, and encapsulation info sh frame-relay pvc - shows the configured DLCI's; shows PVC traffic stats sh frame-relay map - shows route mapssh frame-relay lmi - shows LMI info Miscellaneous Commands

In the last but not least here is a list of the some miscellaneous and useful commands sh controller t1 - shows status of T1 lines sh controller serial 1 - use to determine if DCE or DTE device (config-if)#clock rate 6400 - set clock on DCE (bits per second) (config-if)#bandwidth 64 - set bandwidth (kilobits)

Table Of Contents
Using the Command-Line Interface Understanding Cisco IOS Command Modes User EXEC Mode Privileged EXEC Mode Global Configuration Mode Interface Configuration Mode Subinterface Configuration Mode ROM Monitor Mode Summary of the Main Cisco IOS Command Modes Getting Context-Sensitive Help Example of Context Sensitive Help Display Help for All User-Level Commands Checking Command Syntax Using the Command History Features Setting the Command History Buffer Size Recalling Commands Disabling the Command History Feature Using the No and Default Forms of Commands Using Command-Line Editing Features and Shortcuts

Using Capital Letters when Entering Commands Moving Around on the Command Line Completing a Partial Command Name Pasting in Buffer Entries Editing Command Lines that Wrap Deleting Entries Scrolling Down a Line or a Screen Redisplaying the Current Command Line Transposing Mistyped Characters Controlling Capitalization Designating a Keystroke as a Command Entry Disabling and Reenabling Enhanced Editing Features Summary of Cisco IOS Configuration Modes Access-List Configuration Mode APPN Configuration Modes CAS-Custom Configuration Mode Certificate Authorities Configuration Mode Certificate Chain Configuration Mode Controller Configuration Mode Crypto Map Configuration Mode Crypto Transform Configuration Mode Dial-Peer Configuration Mode Hex Input Mode

Hub Configuration Mode IBM Channel Attach Configuration Modes Interface-ATM-VC Configuration Mode IPX-Router Configuration Mode ISAKMP Policy Configuration Mode Key Chain Configuration Mode LANE Database Configuration Mode Line Configuration Mode Map-Class Configuration Mode Map-List Configuration Mode Modem Pool Configuration Mode MPC Configuration Mode MPS Configuration Mode Poll-Group Configuration Mode Public Key Configuration Mode Response Time Reporter Configuration Mode Route-Map Configuration Mode Router Configuration Mode TN3270 Server Configuration Modes VC-Class Configuration Mode Voice-Port Configuration Mode Summary of Configuration Command Modes

Using the Command-Line Interface

The Cisco IOS command-line interface (CLI) is the primary user interface used for configuring, monitoring, and maintaining Cisco devices. This user interface provides direct and simple execution of Cisco Internetwork Operating System (IOS) commands, whether using a router console or terminal, or using remote access methods. This chapter describes the basic features of the Cisco IOS command-line interface and how to use them. Topics covered include navigation and editing features, help features, command history features, and Cisco IOS command modes. Additional user interfaces include the Cisco Web Browser, and user-menus configured by a system administrator. For information on issuing commands using the Cisco Web Browser, see the "Using the Cisco Web Browser" chapter of this book. For information on user-menus, see the "Managing Connections, Menus, and System Banners" chapter of this book. For a complete description of the user interface commands in this chapter, refer to the "Basic Command-Line Interface Commands" chapter of the Configuration Fundamentals Command Reference. To locate documentation of other commands, use the command reference index or search online. This chapter contains information about the following command-line interface topics: Understanding Cisco IOS Command Modes Using the No and Default Forms of Commands Getting Context-Sensitive Help Checking Command Syntax Using the Command History Features Using the Editing Features

As a further context for understand Cisco IOS Command Modes, this chapter also contains: Summary of Cisco IOS Configuration Modes

Understanding Cisco IOS Command Modes

The Cisco IOS command-line interface is divided into many different modes. The commands available to you at any given time depend on which mode you are currently in. Entering a

question mark (?) at the system prompt allows you to obtain a list of commands available for each command mode. For security purposes, Cisco routers have two basic levels of access to commands: user EXEC mode and priviledged EXEC mode. When you start a session on the router, you begin in user EXEC mode. Only a limited subset of EXEC commands are available in user EXEC mode. This level of access is reserved for nonconfiguration tasks like checking the router status. In order to have access to all commands, you must enter privileged EXEC mode. Normally, you must enter a password to enter privileged EXEC mode. From privileged mode, you can enter any EXEC command or enter global configuration mode. Most of the EXEC commands are one-time commands, such as show commands, which show the current configuration status, and clear commands, which clear counters or interfaces. The EXEC commands are not saved across reboots of the router. Configuration modes allow you to make changes to the running configuration. If you later save the configuration, these commands are stored across router reboots. In order to access the various configuration modes, you must start at global configuration mode. From global configuration mode, you can enter interface configuration mode, subinterface configuration mode, and a variety of protocol-specific modes. ROM monitor mode is a separate mode used when the router cannot boot properly. If your router or access server does not find a valid system image when it is booting, or if its configuration file is corrupted at startup, the system might enter read-only memory (ROM) monitor mode. The following sections describe how to access the main Cisco IOS command modes: User EXEC Mode Privileged EXEC Mode Global Configuration Mode Interface Configuration Mode Subinterface Configuration Mode ROM Monitor Mode

These sections are followed by a table () summarizing the main command modes, showing prompt examples and access/exit methods. For a summary of all the Cisco IOS command modes, see the final section of this chapter,

User EXEC Mode

After you log in to the router or access server, you are automatically in user EXEC command mode. The EXEC commands available at the user level are a subset of those available at the privileged level. In general, the user EXEC commands allow you to connect to remote devices, change terminal settings on a temporary basis, perform basic tests, and list system information. To list the user EXEC commands, use the following command: Command ? Purpose Lists the user EXEC commands.

The user-level prompt consists of the host name followed by the angle bracket (>):
Router>

The default host name is Router unless it has been changed during initial configuration using the setup command. Refer to the product user guide for information on the setup facility. You can also change the host name using the hostname global configuration command described in the "Basic System Management Commands" chapter in the Configuration Fundamentals Command Reference. To list the commands available in user EXEC mode, enter a question mark (?) as shown in the following example:
Router> ? Exec commands: <1-99> Session number to resume connect Open a terminal connection disconnect Disconnect an existing telnet session enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC menu Start a menu-based user interface mbranch Trace multicast route for branch of tree mrbranch Trace reverse multicast route to branch of tree mtrace Trace multicast route to group name-connection Name an existing telnet connection pad Open a X.29 PAD connection ping Send echo messages resume Resume an active telnet connection show Show running system information systat Display information about terminal lines telnet Open a telnet connection terminal Set terminal line parameters tn3270 Open a tn3270 connection

trace where x3 xremote

Trace route to destination List active telnet connections Set X.3 parameters on PAD Enter XRemote mode

The list of commands might vary slightly from this example, depending on the software feature set and configuration of the product.

Privileged EXEC Mode

Because many of the privileged commands set operating parameters, privileged access should be password protected to prevent unauthorized use. The privileged command set includes those commands contained in user EXEC mode, as well as the configure command through which you can access the remaining command modes. Privileged EXEC mode also includes high-level testing commands, such as debug. For details on the debug commands, see the Debug Command Reference. The privileged EXEC mode prompt consists of the devices's host name followed by the pound sign (#). (If the router or access server was named with the hostname command, that name would appear as the prompt instead of "Router.")
Router#

To access and list the privileged EXEC commands, use the following commands: Step 1 2 ? Command enable [password] Purpose Enters the privileged EXEC mode. Lists privileged EXEC commands.

If the system administrator has set a password, you are prompted to enter it before being allowed access to privileged EXEC mode. The password is not displayed on the screen and is case sensitive. If an enable password has not been set, enable mode can be accessed only from the router console. The system administrator uses the enable password global configuration command to set the password that restricts access to privileged mode. This command is described in the "Passwords and Privileges Commands" chapter in the Security Command Reference. The following example shows how to access privileged EXEC mode:
Router> enable Password:letmein Router#

To return from privileged EXEC mode to user EXEC mode, use the following command: Command disable Purpose Moves from privileged EXEC mode to user EXEC mode.

From the privileged level, you can access global configuration mode. For instructions, see the "Global Configuration Mode" section, which follows this section.

Global Configuration Mode

Global configuration commands apply to features that affect the system as a whole, rather than just one protocol or interface. From global configuration mode you can also enter specifiec configuration modes and submodes used to configure specific system features. Use the configure terminal privileged EXEC command to enter global configuration mode. Commands to enable a particular routing or bridging function are also global configuration commands. For information on protocol-specific global configuration commands, see the appropriate configuration guide in the Cisco IOS software documentation. To access and list the global configuration commands, use the following commands: Step 1 2 Command configure terminal ? Purpose At the terminal, from the privileged EXEC mode, enters global configuration mode. Lists the global configuration commands.

The following example shows the process of entering global configuration mode from privileged EXEC mode:
Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#

Note that the system prompt changes to indicate that you are now in global configuration mode. The prompt for global configuration mode consists of the host-name of the device followed by (config) and the pound sign (#). To list the commands available in privileged EXEC mode, issue the ? command at the prompt. Commands entered in global configuration mode update the running configuration file as soon as they are entered. In other words, changes to the configuration take effect each time you press the Enter or Return key at the end of a valid command. However, these changes are not saved into

the startup configuration file until you issue the copy running-config startup-config EXEC mode command. This behavior is explained in more detail later in this document. As shown in the example above, the system dialogue prompts you to end your configuration session (exit configuration mode) by pressing the Control (Ctrl) and "z" keys simultaneously; when you press these keys, ^Z is printed to the screen. You can actually end your configuration session by entering the Ctrl-Z key combination, using the end command, using the Ctrl-C key combination. The end command is the recommended way to indicate to the system that you are done with the current configuration session.

Note If you use Ctrl-Z at the end of a command line in which a valid command has been typed, that command will be added to the running configuration file. In other words, using Ctrl-Z is equivalent to hitting the Enter (Carriage Return) key before exiting. For this reason, it is safer to end your configuration session using the end command. Alternatively, you can use the Ctrl-C key combination to end your configuration session without sending a Carriage Return signal.

You can also use the exit command to return from global configuration mode to EXEC mode, but this only works in global configuration mode. Pressing Ctrl-Z or entering the end command will always take you back to EXEC mode regardless of which configuration mode or configuration submode you are in. To exit global configuration command mode and return to privileged EXEC mode, use one of the following commands:To exit global configuration command mode and return to privileged EXEC mode, use one of the following commands: Command end or ^Z exit Exits the current command mode and returns to the preceding mode. For example, exits from global configuration mode to privileged EXEC mode. Purpose Ends the current configuration session and returns to privileged EXEC mode.

From global configuration mode, you can access a number of other command modes. These command modes are described in the sections that follow. For a complete list of these modes, see the section "Other Configuration Modes."

Interface Configuration Mode

Many features are enabled on a per-interface basis. Interface configuration commands modify the operation of an interface such as an Ethernet, FDDI, or serial port. Interface configuration commands always follow an interface global configuration command, which defines the interface type. For details on interface configuration commands that affect general interface parameters, such as bandwidth, clock rate, and so on, see the "Interface Commands" chapter in the Configuration Fundamentals Command Reference. For protocol-specific commands, see the appropriate Cisco IOS software command reference. To access and list the interface configuration commands, use the following commands: Step 1 2 Command interface type number ? Purpose From global configuration mode, enters interface configuration mode. Lists the interface configuration commands.

In the following example, serial interface 0 is about to be configured. The new prompt Router(config-if)# indicates interface configuration mode.
Router(config)# interface serial 0 <Return> Router(config-if)#

To exit interface configuration mode and return to global configuration mode, enter the exit command. To exit configuration mode and return to privileged EXEC mode, use the end command or press Ctrl-Z.

Subinterface Configuration Mode

You can configure multiple virtual interfaces (called subinterfaces) on a single physical interface. Subinterfaces appear to be distinct physical interfaces to the various protocols. For example, Frame Relay networks provide multiple point-to-point links called permanent virtual circuits (PVCs). PVCs can be grouped under separate subinterfaces that in turn are configured on a single physical interface. From a bridging spanning-tree viewpoint, each subinterface is a separate bridge port, and a frame arriving on one subinterface can be sent out on a another subinterface. Subinterfaces also allow multiple encapsulations for a protocol on a single interface. For example, a router or access server can receive an ARPA-framed IPX packet and forward the packet back out the same physical interface as a SNAP-framed IPX packet.

For detailed information on how to configure subinterfaces, see the appropriate module for a specific protocol in the Cisco IOS software documentation. To access and list the subinterface configuration commands, use the following commands: Step 1 Command See the example that follows. For information on interface commands that allow subinterface implementation, see the protocol specific chapter later in this publication. ? Purpose From interface configuration mode, configures a virtual interface. Lists the subinterface configuration commands.

In the following example, a subinterface is configured for serial line 2, which is configured for Frame Relay encapsulation. The subinterface is called 2.1 to indicate that it is subinterface 1 of serial interface 2. The new prompt Router(config-subif)# indicates that you are in subinterface configuration mode. The subinterface can be configured to support one or more Frame Relay PVCs.
Router(config)# interface serial 2 Router(config-if)# encapsulation frame-relay Router(config-if)# interface serial 2.1 Router(config-subif)#

To exit subinterface configuration mode and return to global configuration mode, enter the exit command. To exit configuration mode and return to privileged EXEC mode, press Ctrl-Z.

ROM Monitor Mode

If your router or access server does not find a valid system image, or if you interrupt the boot sequence, the system might enter read-only memory (ROM) monitor mode. From ROM monitor mode, you can boot the device or perform diagnostic tests. You can also enter ROM monitor mode by entering the reload EXEC command and then pressing the Break key during the first 60 seconds of startup. If you have changed the configuration, use the copy running-config startup-config command and then issue the reload command to save your configuration changes. To access and list the ROM monitor configuration commands, use the following commands: Step 1 reload Command Purpose Enters ROM monitor mode

Press the Break key during the first 60 from privileged EXEC mode. seconds while the system is booting. 2 ? Lists the ROM monitor commands.

The ROM monitor prompt is the angle bracket (>):

> ? $ state Toggle cache state (? for help) B [filename] [TFTP Server IP address | TFTP Server Name] Load and execute system image from ROM or from TFTP server C [address] Continue execution [optional address] D /S M L V Deposit value V of size S into location L with modifier M E /S M L Examine location L with size S with modifier M G [address] Begin execution H Help for commands I Initialize K Stack trace L [filename] [TFTP Server IP address | TFTP Server Name] Load system image from ROM or from TFTP server, but do not begin execution O Show configuration register option settings P Set the break point S Single step next instruction T function Test device (? for help) Deposit and Examine sizes may be B (byte), L (long) or S (short). Modifiers may be R (register) or S (byte swap). Register names are: D0-D7, A0-A6, SS, US, SR, and PC

To return to user EXEC mode, type continue. To initialize the router or access server, enter the i command. The i command causes the bootstrap program to reinitialize the hardware, clear the contents of memory, and boot the system. (It is best to issue the i command before you run any tests or boot software.) To boot the system image file, use the b command (see the "Rebooting a Router" chapter). For details on ROM monitor mode commands, refer to the appropriate hardware installation guide.

Summary of the Main Cisco IOS Command Modes

summarizes the main command modes of the Cisco IOS software. Table 42 Summary of the Main Cisco IOS Command Modes Command Mode Prompt Access Method Exit Method User EXEC Privileged Log in. From user EXEC Router> Router# Use the logout command. To exit back to user

EXEC

mode, use the enable EXEC command.

EXEC mode, use the disable command. To enter global configuration mode, use the configure terminal privileged EXEC command.

Global From privileged EXEC Router(config)# To exit to configuration mode, use the privileged EXEC configure terminal mode, use the exit privileged EXEC or end command or command. press Ctrl-Z. To enter interface configuration mode, use the interface configuration command. Interface From global Router(configconfiguration configuration mode, if)# enter by specifying an interface with an interface command. To exit to global configuration mode, use the exit command. To exit to privileged EXEC mode, use the exit command or press Ctrl-Z. To enter subinterface configuration mode, specify a subinterface with the interface command. Subinterface From interface configuration configuration mode, specify a subinterface with an interface command. Router(configsubif)# To exit to global configuration mode, use the exit command.

To enter privileged EXEC mode, use the end command or press Ctrl-Z. ROM monitor From privileged EXEC > mode, use the reload EXEC command. Press the Break key during the first 60 seconds while the system is booting. To exit to user EXEC mode, use the continue command.

Getting Context-Sensitive Help

Entering a question mark (?) at the system prompt displays a list of commands available for each command mode. You can also get a list of any command's associated keywords and arguments with the context-sensitive help feature. To get help specific to a command mode, a command, a keyword, or an argument, perform one of the following commands: Step 1 2 3 4 5 6 help abbreviated-commandentry? abbreviated-commandentry<Tab> ? command ? command keyword ? Command Purpose Obtain a brief description of the help system in any command mode. Obtain a list of commands that begin with a particular character string. Complete a partial command name. List all commands available for a particular command mode. List a command's associated keywords. List a keyword's associated arguments.

When using context-sensitive help, the space (or lack of a space) before the question mark (?) is significant. To obtain a list of commands that begin with a particular character sequence, type in those characters followed immediately by the question mark (?). Do not include a space. This form of help is called word help, because it completes a word for you. To list keywords or arguments, enter a question mark (?) in place of a keyword or argument. Include a space before the ?. This form of help is called command syntax help, because it

reminds you which keywords or arguments are applicable based on the command, keywords, and arguments you already have entered. You can abbreviate commands and keywords to the number of characters that allow a unique abbreviation. For example, you can abbreviate the show command to sh. Enter the help command (which is available in any command mode) for a brief description of the help system:
Router# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must back up until entering a '?' shows the available options. Two styles of help are provided: 1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each possible argument. 2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show pr?'.)

As described in the help command output, you can enter a partial command name and a question mark (?) to obtain a list of commands beginning with a particular character set. (See the section "Complete a Partial Command Name" later in this chapter for more details.)

Example of Context Sensitive Help

The following example illustrates how the context-sensitive help feature enables you to create an access list from configuration mode. Enter the letters co at the system prompt followed by a question mark (?). Do not leave a space between the last letter and the question mark (?). The system provides the commands that begin with co.
Router# co? configure connect copy

Enter the configure command followed by a space and a question mark (?) to list the command's keywords and a brief explanation:
Router# configure ? memory Configure from NV memory network Configure from a TFTP network host terminal Configure from the terminal <cr>

Enter the terminal keyword to enter configuration mode from the terminal:
Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#

Enter the access-list command followed by a space and a question mark (?) to list the command's keywords:
Router(config)# access-list ? <1-99> IP standard access list <100-199> IP extended access list <1000-1099> IPX SAP access list <1100-1199> Extended 48-bit MAC address access list <200-299> Protocol type-code access list <300-399> DECnet access list <400-499> XNS standard access list <500-599> XNS extended access list <600-699> Appletalk access list <700-799> 48-bit MAC address access list <800-899> IPX standard access list <900-999> IPX extended access list

The two numbers within the angle brackets represent an inclusive range. Enter the access list number 99 and then enter another question mark (?) to see the arguments that apply to the keyword and brief explanations:
Router(config)# access-list 99 ? deny Specify packets to reject permit Specify packets to forward

Enter the deny argument followed by a question mark (?) to list additional options:
Router(config)# access-list 99 deny ? A.B.C.D Address to match

Generally, uppercase letters represent variables, though this is not always the case. Enter the IP address followed by a question mark (?) to list additional options:
Router(config)# access-list 99 deny 131.108.134.0 ? A.B.C.D Mask of bits to ignore <cr>

The <cr> symbol appears in the list to indicate that one of your options is to press Return to execute the command.

The other option is to add a wildcard mask. Enter the wildcard mask followed by a question mark (?) to list further options.
Router(config)# access-list 99 deny 131.108.134.0 0.0.0.255 ? <cr> Router(config)# access-list 99 deny 131.108.134.0 0.0.0.255

The <cr> symbol by itself indicates there are no more keywords or arguments. Press Return to execute the command. The system adds an entry to access list 99 that denies access to all hosts on subnet 131.108.134.0.

Display Help for All User-Level Commands

To configure a line to display help for the full set of user-level commands during all sessions, use the following commands in line configuration mode: Command full-help Purpose Configure a line or lines to receive help for the full set of userlevel commands when a user presses ?.

To configure the current session to display help for the full set of user-level commands, use the following command in user exec mode: Command terminal fullhelp Purpose Configure this session to provide help for the full set of user-level commands.

The full-help and terminal full-help commands enable (or disable) a display of all help messages available from the terminal. They are used with the show command. The following example is output for show ? with terminal full-help disabled and then enabled:
Router> show bootflash calendar clock context dialer history hosts isdn kerberos modemcap ? Boot Flash information Display the hardware calendar Display the system clock Show context information Dialer parameters and statistics Display the session command history IP domain-name, lookup style, nameservers, and host table ISDN information Show Kerberos Values Show Modem Capabilities database

ppp rmon sessions snmp terminal users version

PPP parameters and statistics rmon statistics Information about Telnet connections snmp statistics Display terminal configuration parameters Display information about terminal lines System hardware and software status

Router> terminal full-help Router> show ? access-expression List access expression access-lists List access lists aliases Display alias commands apollo Apollo network information appletalk AppleTalk information arp ARP table async Information on terminal lines used as router interfaces bootflash Boot Flash information bridge Bridge Forwarding/Filtering Database [verbose] bsc BSC interface information bstun BSTUN interface information buffers Buffer pool statistics calendar Display the hardware calendar cdp CDP information clns CLNS network information clock Display the system clock cls DLC user information cmns Connection-Mode networking services (CMNS) information ... x25 X.25 information xns XNS information xremote XRemote statistics

Checking Command Syntax

The user interface provides error isolation in the form of an error indicator, a caret symbol (^). The ^ symbol appears at the point in the command string where you have entered an incorrect command, keyword, or argument. In the following example, suppose you want to set the clock. Use context-sensitive help to check the syntax for setting the clock.
Router# clock ? set Set the time and date Router# clock

The help output shows that the set keyword is required. Check the syntax for entering the time:
Router# clock set ? hh:mm:ss Current time Router# clock set

Enter the current time:

Router# clock set 13:32:00 % Incomplete command.

The system indicates that you need to provide additional arguments to complete the command. Press Ctrl-P (see the next section, "Use the Command History Features") to automatically repeat the previous command entry. Then add a space and question mark (?) to reveal the additional arguments:
Router# clock set 13:32:00 ? <1-31> Day of the month January Month of the year February March April May June July August September October November December

Now you can complete the command entry:

Router# clock set 13:32:00 23 February 97 ^ % Invalid input detected at '^' marker.

The caret symbol (^) and help response indicate an error at 97. To list the correct syntax, enter the command up to the point where the error occurred and then enter a question mark (?):
Router# clock set 13:32:00 23 February ? <1993-2035> Year Router# clock set 13:32:00 23 February

Enter the year using the correct syntax and press Return to execute the command.
Router# clock set 13:32:00 23 February 1997

Using the Command History Features

With the current Cisco IOS release, the user interface provides a history or record of commands that you have entered. This feature is particularly useful for recalling long or complex commands

or entries, including access lists. With the command history feature, you can complete the tasks in the following sections: Set the Command History Buffer Size Recall Commands Disable the Command History Feature

Setting the Command History Buffer Size

By default, the system records 10 command lines in its history buffer. To set the number of command lines that the system will record during the current terminal session, use the following command in EXEC mode: Command terminal history [size number-of-lines] Purpose Enable the command history feature for the current terminal session.

The terminal no history size command resets the number of lines saved in the history buffer to the default of 10 lines. To configure the number of command lines the system will record for all sessions on a particular line, use the following command in line configuration mode: Command history [size number-of-lines]1
1

Purpose Enable the command history feature.

The no history command turns off command history for the line.

Recalling Commands
To recall commands from the history buffer, use one of the following commands: Command Press Ctrl-P or the up arrow key.1 Press Ctrl-N or the down arrow key.1 Purpose Recall commands in the history buffer, beginning with the most recent command. Repeat the key sequence to recall successively older commands. Return to more recent commands in the history buffer after recalling commands with Ctrl-P or the up arrow key. Repeat the key sequence to recall successively more

recent commands. show history

1

While in EXEC mode, list the last several commands you have just entered.

The arrow keys function only on ANSI-compatible terminals such as VT100s.

Disabling the Command History Feature

The command history feature is automatically enabled. To disable it during the current terminal session, use the following EXEC mode command: Command terminal no history Purpose Disable the command history feature for the current session.

To configure a specific line so that the command history feature is disabled, use the following command in line configuration mode: Command Purpose

no history Configure the line so that the command history feature is disabled.

Using the No and Default Forms of Commands

Almost every configuration command also has a no form. In general, use the no form to disable a feature or function. Use the command without the keyword no to reenable a disabled feature or to enable a feature that is disabled by default. For example, IP routing is enabled by default. To disable IP routing, use the no ip routing form of the ip routing command. To reenable it, use the plain ip routing form. The Cisco IOS software command reference publications provide the complete syntax for every configuration command and describes what the no form of a command does (when a no form is available).

Using Command-Line Editing Features and Shortcuts

There are a variety of shortcuts and editing features enabled for the Cisco IOS command-line interface. The following subsections describe these features: Enable Enhanced Editing Mode Move Around on the Command Line

Complete a Partial Command Name Paste in Buffer Entries Edit Command Lines that Wrap Delete Entries Scroll Down a Line or a Screen Redisplay the Current Command Line Transpose Mistyped Characters Control Capitalization Designate a Keystroke as a Command Entry Disable Enhanced Editing Mode

Using Capital Letters when Entering Commands

Note You can enter commands in uppercase, lowercase, or mixed case. Only passwords are case sensitive. However, throughoutit is a Cisco IOS documentation convention to always present commands in lowercase.

Moving Around on the Command Line

Use the following commands to move the cursor around on the command line to make corrections or changes: Step 1 Keystrokes Press Ctrl-B or press the left arrow key.1 Press Ctrl-F or press the right arrow key.1 Press Ctrl-A. Purpose Move the cursor back one character.

Move the cursor forward one character.

Move the cursor to the beginning of the

command line. 4 5 6
1

Press Ctrl-E. Press Esc B. Press Esc F.

Move the cursor to the end of the command line. Move the cursor back one word. Move the cursor forward one word.

The arrow keys function only on ANSI-compatible terminals such as VT100s.

Completing a Partial Command Name

If you cannot remember a complete command name, press the Tab key to allow the system to complete a partial entry. To do so, use the following command: Keystrokes Enter the first few letters and press the Tab key. Purpose Complete a command name.

If your keyboard does not have a Tab key, press Ctrl-I instead. In the following example, when you enter the letters conf and press the Tab key, the system provides the complete command:
Router# conf<Tab> Router# configure

If you enter a set of characters that could indicate more than one command, the system beeps to indicate an error. Enter a question mark (?) to obtain a list of commands that begin with that set of characters. Do not leave a space between the last letter you enter and the question mark (?). For example, there are three commands in privileged mode that start with co. To see what they are, type co? at the privileged EXEC prompt:
Router# co? configure connect Router# co copy

Pasting in Buffer Entries

The system provides a buffer that contains the last 10 items you deleted. To recall these items and paste them in the command line, use the following commands:

Step 1 2

Keystrokes Press Ctrl-Y. Press Esc Y.

Purpose Recall the most recent entry in the buffer. Recall the next buffer entry.

The buffer contains only the last 10 items you have deleted or cut. If you press Esc Y more than 10 times, you will cycle back to the first buffer entry.

Editing Command Lines that Wrap

The enhanced editing provides a wraparound feature for commands that extend beyond a single line on the screen. When the cursor reaches the right margin, the command line shifts 10 spaces to the left. You cannot see the first ten characters of the line, but you can scroll back and check the syntax at the beginning of the command. To scroll back, use the following command: Keystrokes Press Ctrl-B or the left arrow key repeatedly until you scroll back to the beginning of the command entry, or press Ctrl-A to return directly to the beginning of the line.1
1

Purpose Return to the beginning of a command line to verify that you have entered a lengthy command correctly.

The arrow keys function only on ANSI-compatible terminals such as VT100s.

In the following example, the access-list command entry extends beyond one line. When the cursor first reaches the end of the line, the line is shifted 10 spaces to the left and redisplayed. The dollar sign ($) indicates that the line has been scrolled to the left. Each time the cursor reaches the end of the line, the line is again shifted 10 spaces to the left.
Router(config)# 131.108.1 Router(config)# 255.25 Router(config)# eq Router(config)# access-list 101 permit tcp 131.108.2.5 255.255.255.0 $ 101 permit tcp 131.108.2.5 255.255.255.0 131.108.1.20 $t tcp 131.108.2.5 255.255.255.0 131.108.1.20 255.255.255.0 $108.2.5 255.255.255.0 131.108.1.20 255.255.255.0 eq 45

When you have completed the entry, press Ctrl-A to check the complete syntax before pressing the Return key to execute the command. The dollar sign ($) appears at the end of the line to indicate that the line has been scrolled to the right:
Router(config)# access-list 101 permit tcp 131.108.2.5 255.255.255.0 131.108.1$

The Cisco IOS software assumes you have a terminal screen that is 80 columns wide. If you have a width other than that, use the terminal width command to set the width of your terminal. Use line wrapping in conjunction with the command history feature to recall and modify previous complex command entries. See the section "Recall Commands" in this chapter for information about recalling previous command entries.

Deleting Entries
Use any of the following commands to delete command entries if you make a mistake or change your mind: Keystrokes Press the Delete or Backspace key. Press Ctrl-D. Press Ctrl-K. Press Ctrl-U or Ctrl-X. Press Ctrl-W. Press Esc D. Purpose Erase the character to the left of the cursor. Delete the character at the cursor. Delete all characters from the cursor to the end of the command line. Delete all characters from the cursor to the beginning of the command line. Delete the word to the left of the cursor. Delete from the cursor to the end of the word.

Scrolling Down a Line or a Screen

When you use the help facility to list the commands available in a particular mode, the list is often longer than the terminal screen can display. In such cases, a More prompt is displayed at the bottom of the screen, assuming that the length or terminal length command is configured correctly. To view the next line or screen, use the following commands: Keystrokes Press the Return key. Press the Space bar. Purpose Scroll down one line. Scroll down one screen.

Note The More prompt is used for any output that has more lines than can be displayed on the terminal screen, including show command output. You can use the keystrokes listed above whenever you see the More prompt.

Redisplaying the Current Command Line

If you are entering a command and the system suddenly sends a message to your screen, you can easily recall your current command line entry. To do so, use the following command: Keystrokes Press Ctrl-L or Ctrl-R. Purpose Redisplay the current command line.

Transposing Mistyped Characters

If you have mistyped a command entry, you can transpose the mistyped characters by using the following command: Keystrokes Press CtrlT. Purpose Transpose the character to the left of the cursor with the character located at the cursor.

Controlling Capitalization
You can capitalize or lowercase words or capitalize a set of letters with simple keystroke sequences. To do so, use the following commands: Keystrokes Press Esc C. Press Esc L. Press Esc U. Capitalize at the cursor. Change the word at the cursor to lowercase. Capitalize letters from the cursor to the end of the word. Purpose

Designating a Keystroke as a Command Entry

Sometimes you might want to use a particular keystroke as an executable command, perhaps as a shortcut. Use the following keystroke to insert a system code for this purpose: Keystrokes Press Ctrl-V or Esc Q.

Disabling and Reenabling Enhanced Editing Features

The above editing features were introduced in Cisco IOS Release 9.21, and are automatically enabled on your system. However, there may be some unique situations which could warrant disabling these enhanced editing features. For example, you may have prebuilt scripts that conflict with enhanced editing functionality. To globally disable enhanced editing mode and revert to the editing mode of software releases before Cisco IOS release 9.21, use the following command in line configuration mode: Command no editing Purpose Disable the enhanced editing features for a particular line.

To disable enhanced editing mode for the current terminal session, use the following command in EXEC mode: Command Purpose

terminal no editing Disable the enhanced editing features for the local line.

You can reenable enhanced editing mode with the editing command or terminal editing command. To reenable the enhanced editing mode for the current terminal session, use the following command in EXEC mode: Command terminal editing Purpose Enable the enhanced editing features for the current terminal session.

To reconfigure a specific line to have enhanced editing mode, use the following command in line configuration mode: Command editing Purpose Enable the enhanced editing features.

Summary of Cisco IOS Configuration Modes

This section contains summaries of the other configuration modes not mentioned in the "Summary of the Main Cisco IOS Command Modes" on page 22. For specific information on

any particular configuration mode, see the documentation references given in the following summaries: Access-List Configuration Mode APPN Configuration Modes CAS-Custom Configuration Mode Certificate Authorities Configuration Mode Certificate Chain Configuration Mode Controller Configuration Mode Crypto Map Configuration Mode Crypto Transform Configuration Mode Dial-Peer Configuration Mode Hex Input Mode Hub Configuration Mode IBM Channel Attach Configuration Modes Interface Channel Configuration Mode Internal LAN Configuration Mode Internal Adapter Configuration Mode Interface-ATM-VC Configuration Mode IPX-Router Configuration Mode ISAKMP Policy Configuration Mode Key Chain Configuration Mode Key Chain Key Configuration Mode LANE Database Configuration Mode Line Configuration Mode

Map-Class Configuration Mode Map-List Configuration Mode Modem Pool Configuration Mode MPC Configuration Mode MPS Configuration Mode Poll-Group Configuration Mode Public Key Configuration Mode Public Key Chain Configuration Mode Response Time Reporter Configuration Mode Route-Map Configuration Mode Router Configuration Mode TN3270 Server Command Modes VC-Class Configuration Mode Voice-Port Configuration Mode

Most of these modes can be entered from global configuration mode. In these modes, the exit command returns you to the global configuration mode. Other modes must be entered from another configuration mode. Entering the exit command in one of these modes returns you to the configuration mode you used to enter the mode. In any configuration mode, to enter privileged EXEC mode and leave configuration mode entirely, use the end command or press Ctrl-Z. Table 2 in the "Summary of Configuration Command Modes" section lists how to enter each mode.

Access-List Configuration Mode

All IP and IPX access lists can be identified by a number. Alternatively, some IP and IPX access lists can be identified by a name. Use access-list configuration mode when you are creating a named IP or IPX access list.

For information on creating a named IP access list, refer to the "Configuring IP Services" chapter in the Network Protocols Configuration Guide, Part 1. For information on creating a named IPX access list, refer to the "Configuring Novell IPX" chapter in the Network Protocols Configuration Guide, Part 2.

APPN Configuration Modes

Advanced Peer-to-Peer Networking (APPN) is the second generation of SNA. APPN provides support for client/server applications and offers more dynamics than traditional hierarchical SNA, such as dynamic directory and routing services. APPN allows you to define attributes of the APPN network that can become quite complex. To easily manage the details of APPN, special configuration command modes and conventions have been developed. Because APPN offers a large number of configuration options, specific configuration dialogs are used for each major APPN configuration item. When you define the major item, you will automatically enter the detailed configuration mode for that item. There are two options to exit the detailed configuration mode. Use the complete command to exit the detailed configuration mode and update the APPN subsystem with the changes. Use the exit command to leave the definition in "no complete" state without updating the APPN subsystem. Refer to the "APPN Configuration Commands" chapter in the Bridging and IBM Networking Command Reference for information on the following APPN modes: APPN Control Point Mode APPN Port Mode APPN Link Station Mode APPN Connection Network Mode APPN Class of Service Mode APPN Mode Configuration Mode APPN Partner LU Location Mode APPN Subsystem Mode

CAS-Custom Configuration Mode

R2 signaling is an international signaling standard common to channelized E1 networks. However, there is no single signaling standard for R2. The ITU-T Q.400-Q.490 recommendation

defines R2, but a number of countries and geographic regions implement R2 in entirely different ways. Use CAS-custom configuration mode to customize E1 R2 signaling parameters for a particular E1 channel group on a channelized E1 line. Some switches require you to fine tune your R2 settings. However, do not tamper with these special signaling commands unless you understand exactly how your switch will be effected. For more information, refer to the "Channelized E1 and Channelized T1" chapter in the Dial Solutions Configuration Guide.

Certificate Authorities Configuration Mode

Performing the crypto ca identity command puts you into the ca-identity configuration mode. In this mode you can specify characteristics for certificate authorities (CAs).

Certificate Chain Configuration Mode

The crypto ca certificate chain global configuration command puts you into certificate chain configuration mode. In this mode you can delete certificates using the certificate command.

Controller Configuration Mode

You can configure channelized T1 in the controller configuration mode. Refer to the "Configuring Channelized E1 and Channelized T1" chapter in the Dial Solutions Configuration Guide for more information.

Crypto Map Configuration Mode

Use crypto map configuration mode to create or alter the definition of a crypto-map. Cryptomaps are part of an authentication/encryption router configuration. For more information, refer to the "Configuring Cisco Encryption Technology" chapter in the Security Configuration Guide.

Crypto Transform Configuration Mode

Using the crypto ipsec transform-set command puts you into crypto transform configuration mode. While in this mode you can change the initialization vector length for the esp-rfc1829 transform, or you can change the mode to tunnel or transport.

Dial-Peer Configuration Mode

Use dial-peer configuration mode to configure dial peers for Voice over IP, Voice over ATM, Voice over Frame Relay, and Voice over HDLC. For more information, refer to the chapters on these technologies in the Voice, Video, and Home Applications Configuration Guide.

Hex Input Mode

Use hex input mode to enter a public key for an encrypting peer router. The public key data is entered in hexadecimal form, and it will take more than one command line to enter. To continue entering the public key data on a new line, press Return. When the public key is completely entered, press Return to get a new line, then type quit to return to the global configuration mode. For more information, refer to the "Configuring Cisco Encryption Technology" chapter in the Security Configuration Guide.

Hub Configuration Mode

Hub configuration commands configure hub functionality for an Ethernet interface on the Cisco 2500. They always follow a hub global configuration command. Refer to the "Configuring LAN Interfaces" chapter in this publication.

IBM Channel Attach Configuration Modes

The Channel Interface Processor (CIP) supports the IBM channel attach feature. This configuration is an ideal connectivity hub for large corporate networks that provide routing services between mainframes and LANs.

Interface Channel Configuration Mode

Before you configure your channel attach interface, you must select an interface. The following mode is valid only for port 2 on a CIP board. Ports 0 and 1 represent real, physical ports. Port 2 is an internal, virtual port. Refer to the "IBM Channel Attach Commands" chapter in the Bridging and IBM Networking Command Reference.

Internal LAN Configuration Mode

Use the IBM channel internal LAN configuration mode to configure an internal LAN on a CIP interface and configure Cisco Systems Network Architecture (CSNA) parameters. Refer to the "IBM Channel Attach Commands" chapter in the Bridging and IBM Networking Command Reference.

Internal Adapter Configuration Mode

Internal adapter commands allow you to configure the link characteristics for the internal LAN adapter and name the internal LAN adapter. Refer to the "IBM Channel Attach Commands" chapter in the Bridging and IBM Networking Command Reference. To configure an internal adapter interface, you must first use the bridge-group internal LAN configuration command or the source-bridge internal LAN configuration command to configure bridging type. These commands are documented in the "Source-Route Bridging Commands" chapter of the Bridging and IBM Networking Command Reference.

Interface-ATM-VC Configuration Mode

When you create an ATM PVC or SVC, you will enter the interface-ATM-VC configuration sub-mode which allows you to configure various parameters that will apply when the VC is active. For configuration information, refer to the ATM configuration chapters of the Wide-Area Networking Configuration Guide.

IPX-Router Configuration Mode

Internet Packet Exchange (IPX) is a Novell network-layer protocol. The IPX-router configuration mode is used to configure IPX routing. Refer to the "Novell IPX Commands" chapter in the Network Protocols Command Reference, Part 2

ISAKMP Policy Configuration Mode

When you enter the crypto isakmp policy command, you are put into the ISAKMP policy configuration command mode. In this mode, you can specify IKE policy parameters.

Key Chain Configuration Mode

From key chain configuration mode, you can manage authentication keys. For details on how to use key chain configuration commands, consult the "Configuring IP Routing ProtocolIndependent Features" chapter of the Network Protocols Configuration Guide, Part 1. Key management controls the authentication keys that routing protocols use. To enter key chain configuration mode, identify or define a key chain using the keychain command. From key chain configuration mode, you can identify or define key numbers.

Key Chain Key Configuration Mode

Once you define a key chain, use the key chain key configuration mode to configure the keys on the key chain. Refer to the "IP Routing Protocol-Independent Commands" chapter in the Network Protocols Command Reference, Part 1.

LANE Database Configuration Mode

LAN emulation (LANE) clients consult the LANE configuration server for information such as the location of the LANE server. The configuration server looks up the configuration information in its name database. A LANE database contains entries that bind an emulated LAN name to the ATM address of the LANE server, bind LANE client MAC addresses to an emulated LAN name, and bind LANE client ATM address templates to an emulated LAN name.

In LANE database configuration mode, you can use the client-atm-address name, default name, mac-address name, and name server-atm-address commands to create entries in the specified database. Refer to the "LAN Emulation Commands" chapter of the Cisco IOS Switching Services Command Reference.

Line Configuration Mode

Line configuration commands modify the operation of an auxiliary, console, physical, or virtual terminal line. Line configuration commands always follow a line command, which defines a line number. These commands are generally used to connect to remote routers or access servers, change terminal parameter settings either on a line-by-line basis or for a range of line, and set up the auxiliary port modem configuration to support dial-on-demand routing (DDR). See the "Configuring Modem Support and Asynchronous Devices" chapter in the Dial Solutions Configuration Guide.

Map-Class Configuration Mode

Cisco IOS Frame Relay software allows you to specify parameters that control the traffic that the source router will send over a switched virtual circuit (SVC). Use the map-class configuration mode to configure these parameters. For configuration information, see the "Configure a Map Class" section in the "Configuring Frame Relay" chapter of the Wide-Area Networking Configuration Guide.

Map-List Configuration Mode

Cisco IOS Frame Relay software supports static mapping schemes that identify the protocol addresses of remote hosts or routers. Use the map-list configuration mode to define the protocol addresses and associate each protocol address with a specific map class. For configuration information, see the "Configuring Frame Relay" chapter in the Wide-Area Networking Configuration Guide.

Modem Pool Configuration Mode

A modem pool is a group of modems inside an access server that are assigned a single dialed number identification service number (DNIS). After you enter modem pool configuration mode, you can create multiple pools of physical modems, assign unique DNIS numbers to each modem pool, and set maximum simultaneous connect limits. For more information, refer to the "Managing Modems" chapter in the Dial Solutions Configuration Guide.

MPC Configuration Mode

When you configure/create an MPOA client (MPC), you automatically enter the MPC configuration mode. Using the MPC configuration mode is optional. You can use the MPC configuration mode only when you need to change certain operating parameters. If you choose not to change any parameters, just exit and the default values will be used. Refer to the "MPOA Commands" chapter of the Cisco IOS Switching Services Command Reference.

MPS Configuration Mode

When you configure/create an MPOA server (MPS), you automatically enter the MPS configuration mode. Using the MPS configuration mode is optional. You can use the MPS configuration mode only when you need to change certain operating parameters. If you choose not to change any parameters, just exit and the default values will be used. Refer to the "MPOA Commands" chapter of the Cisco IOS Switching Services Command Reference.

Poll-Group Configuration Mode

Use the syscon poll-group command to enable data collection for a specific poll group. The poll-group configuration mode is required for Performance Data Collection, which allows a system controller to collect and store SNMP MIB data from its managed router and dial shelves. You can enter any of the following commands while in poll-group configuration mode: enable (poll-group configuration) oid poll-interval samples shelf-type transfer-mode

You must specify the desired Object IDs and the transfer mode. If you do not specify the shelftype command, the system controller collects data from all discovered shelves. The default data collection interval is 10 minutes. The default maximum number of samples is 10. To begin the data collection process, specify the enable command. See the "System Controller Commands" chapter in the Configuration Fundamentals Command Reference for more information about poll group configuration mode.

Public Key Configuration Mode

Using the addressed-key or named-key public key chain configuration commands puts you into public key configuration mode. In this mode you can specify RSA or DSS public keys.

Public Key Chain Configuration Mode

Using the crypto key pubkey-chain rsa command puts you into public key chain configuration mode. In this mode, you can manually specify other IPSec peers' RSA or DSS public keys.

Response Time Reporter Configuration Mode

Use the response time reporter configuration mode to configure a probe to measure response times and availability. Refer to the "Monitoring the Router and Network" chapter in the Configuration Fundamentals Configuration Guide.

Route-Map Configuration Mode

Use the route-map configuration mode to configure routing table and source and destination information. See the "Configuring IP Routing Protocol-Independent Features" chapter in the Network Protocols Configuration Guide, Part 1.

Router Configuration Mode

Router configuration commands configure an IP routing protocol and always follow a router command. See the relevant chapter on your IP routing protocol in the Network Protocols Configuration Guide, Part 1.

TN3270 Server Configuration Modes

The TN3270 server provides a set of configuration modes. The TN3270 server can be configured only on Port 2, the internal LAN port, of a Channel Interface Processor (CIP) card.

Note These commands are documented in the "Configuring IBM Channel Attach" chapter in the Bridging and IBM Networking Configuration Guide and the "IBM Channel Attach Commands" chapter in the Bridging and IBM Networking Command Reference.

The following are the TN3270 server command modes: TN3270 server configuration mode

DLUR configuration mode DLUR SAP configuration mode PU configuration mode

VC-Class Configuration Mode

A VC class is a set of preconfigured VC parameters that you configure and apply to a particular VC or ATM interface. You may apply a VC class to an ATM main interface, subinterface, PVC or SVC. For example, you can create a VC class that contains VC parameter configurations that you will apply to a particular PVC or SVC. You might create another VC class that contains VC parameter configurations that you will apply to all VCs configured on a particular ATM main interface or subinterface. Use VC-class configuration mode to configure a set of VC parameters that will apply to an ATM main interface, subinterface, PVC, or SVC. For information on configuring a VC class, refer to the "Configure VC Classes" section in one of the following ATM chapters in the Wide-Area Networking Configuration Guide: Configuring ATM on the AIP for Cisco 7500 Series Routers Configuring ATM on the ATM Port Adapter for Cisco 7200 & 7500 Series Routers Configuring ATM on the ATM-CES Port Adapter for Cisco 7200 Series Routers

Configuring ATM on the Enhanced ATM Port Adapter for Cisco 7200 & 7500 Series Routers Configuring ATM on the NPM for Cisco 4500 and 4700 Routers Configuring ATM on the 1-Port ATM-25 Network Module

Voice-Port Configuration Mode

Use voice port configuration mode to configure voice port settings on the Cisco 3600 and Cisco MC3810. For more information, refer to the Configuring Voice Ports chapter in the Cisco IOS Solutions for Voice, Video, and Home Applications Configuration Guide.

Summary of Configuration Command Modes

Table 2 lists the command modes covered in this section, how to access and exit each mode, the prompt while in each mode, and an example of how to get to the mode.

Note The exit method is only listed if the exit command does not return you to global configuration mode or you must use a different command to exit the mode.

The prompts listed assume that the default device name of "Router" is in use. Table 43 Configuration Command Modes Command Mode Access and Exit Method Prompt Example

Access-list From global configurati configuration on mode, use the ip access-list or ipx access-list command. ip access-list {standard | extended} name or ipx access-list {standard | extended | sap | summary} name APPN From global configurati configuration on mode, use the appn mode command. Ca-identity From global configurati configuration on mode, use the crypto ca identity command. CAS custom configurati on

Router(confi Router(config)# ip access-list extended flag g-std-nacl)# or Router(config-ext-nacl)# Router(confi g-ext-nacl)#

Router(appn) Router(config)# appn mode # Router(appn)#

Router(caidentity)#

Router(config)# crypto ca identity Router(ca-identity)#

From controller Router(confi Router(config-controller)# cas-custom 1 E1 g-ctrl-cas)# router(config-ctrl-cas)# ? configuration CAS custom commands: mode, use the ani-digits cas-custom answer-signal

channel command. Certificate chain configurati on

caller-digits ...

From global Router(confi Router(config)# crypto ca certificate configuration g-certmode, use the chain)# Router(config-cert-chain)# crypto ca certificate chain command.

Controller From global Router(confi Router(config)# controller t1 0/0 configurati configuration gon mode, use the controller)# Router(config-controller)# controller t1 slot/port command to configure a channelized T1 interface. Crypto map configurati on From global Router(confi Router(config)# crypto map Research 10 configuration g-cryptomode, use the map)# Router(config-crypto-map)# crypto map map-name [seqnum] command. From global configuration mode, use the crypto ipsec transform-set command. Router(confi Router(config)# crypto ipsec transform-set g-cryptotrans)# Router(config-crypto-trans)#

Crypto transform configurati on

Dial peer voice configurati on

From global Router(confi Router(config)# dial peer voice 1 pots configuration g-dialpeer)# mode, use the Router(config-dialpeer)# dial peer voice tag {pots | voip | vofr|voatm|vohd lc} command. From global configuration mode, use the crypto publickey command. crypto publickey key-name Router(confi Router(config)# crypto public-key g-pubkey)# BananaCryptoEngine 01709644 Enter a public key as a hexadecimal number .... Router(config-pubkey)# C31260F4 BD8A5ACE 2C1B1E6C 8B0ABD27 01493A50

Hex input

serial-number To exit hex input mode, use the quit command.

Router(config-pubkey)# A6A66946 Router(config-pubkey)# quit Router(config)#

Hub From global Router(confi Router(config)# hub ethernet 0 1 3 configurati configuration g-hub)# on mode, enter by Router(config-hub)# specifying a hub with the hub number port [port] command. InterfaceATM-VC configurati on From interface Router(confi Router(config-if)# pvc 0/33 configuration g-if-atm-vc)# mode, use the Router(config-if-atm-vc)# pvc vpi/vci or svc nsap address or command. Router(config-if)# svc nsap AB.CDEF.01.234567.890A.BCDE.F012.3456.7890 .1234.12 Router(config-if-atm-vc)# Interface channel configurati on From global configuration mode, use the interface channel slot/port command. Router(confi Router(config)# interface channel 0/1 g)# Router(config)#

Internal LAN configurati on

From interface Router(confi Router(config)# lan ethernet 10 configuration g-if)# mode, use the Router(cfg-lan-Ether 10)# lan [ethernet | tokenring | fddi] lan-id command. To exit to interface configuration mode, use the exit command.

Internal adapter configurati on

From internal Router(confi Router(config)# lan ethernet 10 LAN g-lan)# configuration Router(cfg-lan-Ether 10)# adapter 1 4.5.6 mode, enter the adapter adapterRouter(cfg-adap-Ether 10-1)# number macaddress command. To exit to Internal LAN configuration mode, use the exit command.

IPX-router From global Router(confi Router(config)# ipx router rip configurati configuration g-ipxon mode, enter by router)# Router(config-ipx-router)# issuing the ipx routing command, then a command that begins with ipx router (such as ipx router eigrp). ipx router {eigrp autonomoussystem-number | nlsp [tag] | rip} ISAKMP policy configurati on From global configuration mode, use the crypto isakmp policy command. Router(confi Router(config)# crypto isakmp policy g-isakmp)# Router(config-isakmp)#

Key chain From global Router(confi Router(config)# keychain blue configurati configuration g-keychain)# on mode, use the Router(config-keychain)# keychain command. keychain nameof-chain Key chain From key chain Router(confi Router(config)# keychain blue key configuration g-keychainconfigurati mode, use the key)#

on

key number command. To exit to key chain configuration mode, use the exit command.

Router(config-keychain)# key 10 Router(config-keychain-key)#

LANE database configurati on

From global Router(lane- Router(config)# lane database red configuration configmode, use the datab)# Router(lane-config-datab)# lane database command. lane database [database-name]

Line From global Router(confi Router(config)# line vty 0 4 configurati configuration g-line)# on mode, enter by Router(config-line)# specifying a line with a line {aux | con | tty | vty} line-number [ending-linenumber] command. Map-class From global Router(confi Router(config)# map-class atm aaa configurati configuration g-mapon mode, configure class)# Router(config-map-class)# a map class with the map-class encapsulation class-name command. Map-list From global Router(confi Router(config)# map-list atm configurati configuration g-map-list)# on mode, define a Router(config-map-list)# map list with the map-list name command. Modem pool configurati on From global Router(confi Router(config)# modem-pool v90service configuration g-modemRouter(config-modem-pool)# pool-range 30-50 mode, use the pool)# Router(config-modem-pool)# called-number 2000 modem-pool Router(config-modem-pool)# exit name command. Router(config)

MPC From global configurati configuration mode, use the on mode mpoa client config name command. MPS From global configurati configuration on mode mode, use the mpoa server config name command. Poll-group From global configurati configuration on mode, enter poll-group configuration mode with the syscon pollgroup command.

Router(confi Router(config)# mpoa client config name ip_mpc g)# Router(mpoa-client-config)#

Router(confi Router(config)# mpoa server config name ip_mps g)# Router(mpoa-server-config)#

Router(confi Router(config)# syscon poll-group cmlineinfo g-poll-gr)# Router(config-poll-gr)#

Public key Using the Router(confi Router(config)# addressed-key configurati addressed-key g-pubkey)# on or named-key Router(config-pubkey)# public key chain configuration commands puts you into public key configuration mode. In this mode you can specify RSA or DSS public keys. Public key chain configurati on From global Router(confi Router(config)# crypto key pubkey-chain rsa configuration g-pubkeymode, enter key)# Router(config-pubkey-key)# public key chain configuration mode with the crypto key pubkey-chain rsa command .

Response time reporter configurati on

From global Router(confi Router(config)# rtr 1 configuration g-rtr)# mode, use the Router(config-rtr)# rtr command. rtr probe Router(confi Router(config)# route-map arizona g-routemap)# Router(config-route-map)#

Route-map From global configurati configuration on mode, enter by specifying the route-map [map-tag] command.

Router From global Router(confi Router(config)# router rip configurati configuration g-router)# on mode, enter by Router(config-router)# issuing the router [keyword] command (such as router igrp). TN3270 server configurati on From interface configuration mode, use the tn3270-server command. To exit to interface configuration mode, use the exit command. DLUR From TN3270 Router(tn327 Router(config)# tn3270-server configurati configuration 0-dlur)# on mode, use the Router(tn3270-server)# dlur dlur command. Router(tn3270-dlur)# To exit to TN3270 configuration mode, use the exit command. DLUR From DLUR SAP configuration configurati mode, use the Router(tn327 Router(config)# tn3270-server 0-dlur-sap)# Router(tn327 Router(config)# tn3270-server 0-server)# Router(tn3270-server)#

on

lsap command. To exit to DLUR configuration mode, use the exit command.

Router(tn3270-server)# dlur Router(tn3270-dlur)# lsap Router(tn3270-dlur-sap)#

PU From TN3270 configurati server on configuration mode or from DLUR configuration mode, use the PU command. To exit PU configuration mode, use the exit command.

Router(tn327 Router(config)# tn3270-server 0-pu)# Router(tn3270-server)# pu PU1 05d00001 10.0.0.1 Router(tn327 token-adapter 1 8 rmac 4000.0000.0001 rsap 4 0-dlur-pu)# Router(tn3270-pu)#

VC-class From interface Router(confi Router(config-if)# vc-class atm pvc1 configurati configuration g-vc-class)# on mode, use the Router(config-vc-class)# vc-class atm name command. Voice-port From global Router(confi Router(config)# voice port 1/1/2 configurati configuration g-voiceport)# on mode, enter by Router(config-voiceport) issuing the voice port slot/subunit/port command for the Cisco 3600 series, or voice port slot/port for the Cisco MC3810.

y y y y y y y y y y

IOS Commands User Mode Enable Mode Config Mode Vlan Mode Configif Mode Router Mode - RIP Router Mode - EIGRP Router Mode - BGP Router Mode - OSPF

List of supported IOS commands:

User Mode enable help exit logout show clock show history show snmp show version Enable Mode clock set <time> <month> <day> clock set <month> <day> configure terminal disable exit help

Command Description To change the mode from User to Enable mode. Displays the help description in the Modes. To log out from the client. To log out from the client. To show the clock time of the CLI agent in the network. To display the History of the connected terminal. To show the SNMP status of the agent in the network. To show the IOS version and its details. Command Description Sets the Clock with Date and Time in the Router Sets the Clock with Date and Time in the Router Change the mode to Configuration Mode Change the mode to user mode from Enable mode. To logout from the CLI client. Displays help description in the Mode.

show access-list <number> show cdp show cdp entry all show cdp entry <name> show cdp interface show cdp neighbors show clock show flash

show flash all

show flash chips

show flash detailed

show flash error show history show ip alias show rmon alarms show rmon events show snmp show version ping <word> show ip route static

Displays the access-list configurations Displays the CDP service in the network node Displays information about all neighboring devices discovered using CDP . Displays information about a specific neighboring device discovered using CDP. Displays information about the interfaces on which Cisco Discovery Protocol (CDP) is enabled Displays detailed information about all neighboring devices discovered using CDP. Display clock time of the CLIAgent in the network. Displays the details of the CISCO Flash File Table Displays complete information about Flash memory, including information about the individual ROM devices in Flash memory and the names and sizes of all system image files stored in Flash memory Displays information per partition and per chip, including which bank the chip is in, plus its code, size and name Displays detailed file directory information per partition, including file length, address, name, Flash memory checksum, computer checksum, bytes used, bytes available, total bytes, and bytes of system Flash memory. Displays write or erase failures in the form of number of retries Displays the History of the connected terminal. Displays the IP Alias configured in the CLIAgent in the network. Display all the active alarms in the rmon alarm table Display all the event in the rmon event table Displays the SNMP status of the CLIagent in the network. Displays the IOS Version and its details of the CLIagent. To ping the device To show the IP address route for the Interface

show ip interface brief show vlan <Line> show protocols show arp show ip access-lists show ip bgp neighbors show ip bgp neighbors <IP Address> clear ip bgp <IP Address> clear ip bgp <AS Number> show ip ospf show ip ospf <processid> show startup-config show running-config Vlan database

show vlan name [WORD]

show vlan [vlan-id]

show vlan

Show vlan brief

show vtp status show vtp counters

in the device. To show the brief of the interfaces in the device. To show the details of VLan configured in the device. Displays the active network routing protocols. Displays the ARP table. List of IP access lists. Displays detailed information on TCP and BGP neighbor connections. Displays detailed information on TCP and BGP connections for the specified neighbor ipaddress. Clear BGP connection. Clear BGP connection based on the AS number of the peer. Display general information about OSPF routing processes Display general information about OSPF routing process for the specified processid Displays the contents of startup configuration Displays the current operating configuration This command is to enter into the Vlan mode without specifying any Vlan number. The vlan_database_en.py script file is used. To show the details of the specified Vlan name. The script file used for this command is show_vlan_name_en.py. To show the details of the specified Vlan id. The script file used for this command is show_vlan_number_en.py To show the details of all the configured Vlans. The script file used for this command is show_vlan_en.py. This file is to show the details of VLan Interface configured. The script file used for this command is show_vlan_brief_en.py To show the VTP status for the Vlan in the device. The script file used for this command is show_vtp_status_en.py. To show the VTP Counters for the Vlan in the device. The script file used for this command is

show ip interface brief show startup config

show running config

show ip eigrp interface

show ip eigrp neighbours

show ip eigrp traffic

show ip protocols

show running-config

show startup-config

show_vtp_counters_en.py. This command's output needs to be changed with Vlan configuration. show_ip_ifbrief_en.py This command's output needs to be changed with Vlan configuration. show_startup_config_en.py This command's output needs to be changed with Vlan configuration. show_running_config_en.py. To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py. To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py. To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py. To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py Command Description Creates the standard access list entry Creates the standard access list entry Creates the standard access list entry Configure the HoldTime for the CDP service in the network Inteface node. Run the CDP service in the network node. To configure the Timer value to the CDP service in the network node. Change the mode from Configuration to Enable mode. Change the mode from Configuration to Enable

Config Mode access-list <number> <deny/permit> <any> access-list <number> <deny/permit> host <hostname> access-list <number> <deny/permit> <host name>/<ip address> cdp holdtime <time in sec.> cdp run cdp timer <time in sec> end exit

help hostname <word> interface ethernet <0-0> no <access-list> number no cdp holdtime no cdp run no cdp timer no snmp-server enable traps no snmp-server enable trap <trap type> no snmp-server host <ip address>

no rmon event <number> no rmon alarm <number> rmon alarm number variable interval {delta | absolute} rising-threshold value [event-number] Sets an alarm on any MIB object based on the falling-threshold value [event-number] [owner inputs provided in the command . string] rmon event number description <string> owner Adds an event in the RMON event table that is <string> log trap <community> associated with an RMON event number. Adds an event in the RMON event table that is rmon event number description <string> owner associated with an RMON event number, use <string> trap <community> log the #rmon event in global configuration command Sets up the community access string to permit snmp-server community <community name> access to the Simple Network Management Protocol(SNMP) snmp-server contact <line> Sets the system contact (sysContact) string. snmp-server enable traps Enables all the supported trap types Enables the trap specified in the command by snmp-server enable trap <trap type> inserting the data in the database Sets up the system location string that describes snmp-server location <line> the system location information. Integer byte count from 484 to 8192. The snmp-server packetsize <byte-count> default is 1500 bytes. snmp-server host [host-addr] [communityTo specify the recipients of the SNMP string] notification operation

mode. Displays help description in the Mode. Updates the given value as the host name. Change the mode from Configuration to Config Interface mode. To remove a specific access-list Setting cdpGlobalHoldTime to CDP default, if the cdpGlobalRun value is 1/True(default value: 180 seconds. Stops the CDP service in the network node. The node cdpGlobalMessageInterval is set to the default time interval of 60 seconds. Disables all the supported trap types Disables the trap specified in the command Removes a specific recipient of the SNMP notification operation Removes an event in the RMON event table Removes an alarm in the RMON alarm table

enable password <Line> ip route <IP Address> <netmask> <gateway> router rip vlan <vlan id> router bgp <number> arp <IP Address> <hardware address> arpa no arp <IP Address> router ospf <processid> no router ospf <processid>

router eigrp

Vlan Mode name <vlan name> mtu <mtu size of vlan> vlan vlan-id name vlan-name

vlan vlan-id name vlan-name mtu mtu-size

vlan vlan-id mtu mtu-size name vlan-name

vlan vlan-id mtu mtu-size

vlan [vlan-id]

show current [vlan-id] show current

To change the Password of the User Enable mode in the Router. To specify the secondary IP Address for the Interface in the router. To change the Mode to Router mode To set the Vlan to the device Enable bgp routing process Configure IP address of ARP entry Removes the arp entry Enable a routing process Removes the ospf process with the specified processid To enable EIGRP routing. This command is added into the 'basedata' database with ParamName as 'eigrp_as'. The script file used for this command is router_eigrp_autonomous_system_ct.py Command Description To set the vlan name To set the mtu size of vlan This command is used to enter the Vlan name with specifying the Vlan id in Config mode. The vlan_name_vid_ct.py script file is used. This command is used to enter the Vlan name and MTU value with specifying the Vlan id in Config mode. The vlan_name_mtu_vid.py script file is used. This command is used to enter the MTU value and Vlan name with specifying the Vlan id in Config mode. The vlan_mtu_name_vid.py script file is used. This command is used to enter the MTU size with specifying the Vlan id in Config mode. The vlan_mtu_vid_ct.py script file is used. This command is to specify the Vlan number in the vlan mdoe. The vlan_number_vlan.py script file is used. To show the details of the specified Vlan id. The script file used for this command is show_current_vid_vlan.py. To show the details of all the configured Vlans. The script file used for this command is

Show proposed

Show proposed [vlan-id]

exit apply no vlan vlan-id

no vlan [vlan id] name

no vlan mtu

vtp server

vtp client

vtp trasparent

no vtp client

no vtp transparent

show_current_vlan.py. To show the details of all the configured Vlans. The script file used for this command is show_proposed_vlan.py. To show the details of all the configured Vlans. The script file used for this command is show_proposed_vid_vlan.py. To exit from the Vlan mode to Config mode. The script file used for this command is vlan_exit.py. Just print Apply Completed. Write the new script file for this. vlan_apply.py To remove the configured Vlan from the device. The script file used for this command is no_vlan_vid_vlan.py To remove the Vlan name for the Vlan configuration from the device. The script file used for this command is no_vlan_name_vlan.py. To remove the Vlan MTU value for the Vlan configuration from the device. The script file used for this command is no_vlan_mtu_vlan.py To change the VTP mode of Vlan configuration. The script file used for this command is set_vtp_mode_vlan.py. To change the VTP mode of Vlan configuration. The script file used for this command is set_vtp_mode_vlan.py. To change the VTP mode of Vlan configuration. The script file used for this command is set_vtp_mode_vlan.py. To disable the VTP Client mode of Vlan configuration. The mode has been changed into Transparent. The script file used for this command is no_vtp_client_vlan.py. To disable the VTP Transparent mode of Vlan configuration. The mode has been changed into Server. The script file used for this command is no_vtp_transparent_vlan.py Command Description Enables the CDP service in the network node. Set the ipaddress of an interface

Configif Mode cdp enable ip address <A.B.C.D>

ip mtu <value> ip ospf transmit-delay <seconds> ip ospf retransmit-interval <seconds> ip ospf priority <number> help exit no cdp enable Router Mode - RIP network <network id> neighbour <network id> no neighbor <network id> no network <network id> help exit Router Mode - BGP network <IP Address> neighbor <IP Address> remote-as <1-65535> neighbor <IP Address> version <2-4> no network <IP Address> no neighbor <IP Address> help exit Router Mode - EIGRP network <network-number>

neighbor <neighbor address>

variance <variance number> timers active-time

To specify the MTU value for the network interface node to which the CLI client is connected. Configure Link state transmit delay for OSPF Configure time between retransmitting lost link state advertisements for OSPF Configure IP OSPF router priority To display the help description Change the mode from config-if to Configuration mode. Disables the CDP service in the network node for the CLI command. Command Description To enable RIP for the specified network id. To add the Route for the network in the Router To remove the Route for the network in the Router To disable RIP for the specified network id To display the help description Exit from routing protocol configuration mode Command Description Specify a network to announce via BGP Specify a BGP neighbor Set the BGP version to match a neighbor Disable BGP routing on an IP network Disable BGP neighbor entry To display the help description Exit from routing protocol configuration mode Command Description To add the Network address to the EIGRP routing mode. The script file used for this command is eigrp_network_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py. To add the Variance value to the EIGRP routing mode. The script file used for this command is eigrp_variance_router.py To configure the active timer to the EIGRP routing mode. The script file used for this

timers active-time <timer in minutes>

timers active-time disable

help

exit

command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py To add the Neighbor address to the EIGRP routing mode. The script file used for this command is eigrp_neighbor_router.py Command Description Set the ospf areaid To display the help description Exit from routing protocol configuration mode

Router Mode - OSPF network<IP Address> areaid <number> help exit

Note:

1. Vlan, VTP support is provided for the following switch devices: Cisco3750 and Cisco6500 Switches

2. EIGRP support is provided for the following Router devices: Cisco3600 and Cisco1700 Routers.