Common Cisco configuration commands and Parameters

Start the interface and assign an IP Address: routerrouterenablerouter # router # configureterminalrouter (config) # router (config) # interfaceTypePortrouter (config-if) # noshutdownrouter (config-if) # ipaddressIP-AddressSubnet-Maskrouter (config-if) # ^ z

Start the interface and assign an IP Address: router enable router # configure terminal router (config) # interface Type Port router (config-if) # no shutdown router (config-if) # ip address IP-Address Subnet-Mask router (config-if) # ^ z

Start the interface and assign an IP Address:
Router>
Router> enable
Router #
Router # configure terminal
Router (config )#
Router (config) # interface Type Port
Router (config-if) # no shutdown
Router (config-if) # ip address IP-Address Subnet-Mask
Router (config-if) # ^ z

ConfigurationRIP route protocol: updated once every 30 seconds
Router (config) # router rip
Router (config-if) # network Network-Number <-- advertise standard A, B, and C Networks -->
Router (config-if) # ^ z

ConfigurationIGRP route protocol: updated every 90 seconds
Router (config) # router igrp AS-Number <-- AS-Number range: 1 ~ 65535 -->
Router (config-if) # network Network-Number <-- advertise standard A, B, and C Networks -->
Router (config-if) # ^ z

ConfigurationNovell IPX Routing Protocol: Novell RIP is updated once every 60 seconds
Router (config) # ipx routing [node address]
Router (config) # ipx maximum-paths Paths <-- set load balancing, range: 1 ~ 512 -->
Router (config) # interface Type Port
Router (config-if) # ipx network Network-Number [encapsulation-type] [secondary] <-- advertise standard A, B, and C Networks -->
Router (config-if) # ^ z

ConfigurationDDR:
Router (config) # dialer-list Group-Number protocol Protocol-Type permit [list ACL-Number]
Router (config) # interface bri 0
Router (config-if) # dialer-group Group-Number
Router (config-if) # dialer map Protocol-Type Next-Hop-Address name Hostname Telphone-Number
Router (config-if) # ^ z

ConfigurationISDN:
Router (config) # isdn swith-type Swith-Type <--ConfigurationISDN switch type, China use basic-net3 -->
Router (config-if) # ^ z

ConfigurationFrame Relay:
Router (config-if) # encapsulation frame-relay [cisco | ietf]
Router (config-if) # frame-relay LR-type [ansi | cisco | q933a]
Router (config-if) # bandwidth kilobits
Router (config-if) # frame-relay invers-arp [Protocol] [dlci]
<--ConfigurationStatic Invers ARP table:
Router (config) # frame-relay Protocol-Address DLCI [Broadcast] [ietf | cisco] [payload-compress | packet-by-packet]
-->
<-- Set the Keepalive interval:
Router (config-if) # keepalive Number
-->
<-- Specify DLCI for the Local interface:
Router (config-if) # frame-lelay local-dlci Number
-->
<-- SubinterfaceConfiguration:
Router (config-if) # interface Type Port. Subininterface-Number [multipoint | point-to-point]
Router (config-subif) # ip unnumbered Interface
Router (config-subif) # frame-lelay local-dlci Number
-->
Router (config-if) # ^ z

ConfigurationStandard ACL:
Router (config) # access-list Access-List-Number [permit | deny] source [source-mask] <-- Access-List-Number range: 1 ~ 99 standard ACLs; 100 ~ 199 extend the ACL; 800 ~ 899 standard ipx acl; 900 ~ 999 extend ipx acl; 1000 ~ 1099IPX sap acl; 600 ~ 699 Apple Talk ACL -->
Router (config) # interface Type Port
Router (config-if) # ip access-group Access-List-Number [in | out]
Router (config-if) # ^ z

ConfigurationExtended ACL:
Router (config) # access-list Access-List-Number [permit | deny] [Protocol | Protocol-Number] source-wildcard [Source-Port] destination-wildcard [Destination-Port] [established]
Router (config) # interface Type Port
Router (config-if) # ip access-group Access-List-Number [in | out]
Router (config-if) # ^ z

ConfigurationName ACL:
Router (config) # ip access-list [standard | extended] ACL-Name
Router (config [std-| ext-] nacl) # [permit | deny] [IP-Access-List-Test-Conditions]
Router (config [std-| ext-] nacl) # no [permit | deny] [IP-Access-List-Test-Conditions]
Router (config [std-| ext-] nacl) # ^ z
Router (config) # interface Type Port
Router (config-if) # ip access-group [ACL-Name | 1 ~ 199] [in | out]
Router (config-if) # ^ z

ConfigurationDCE clock:
Router # show controllers Type Port <-- confirm DCE interface -->
Router (confin-if) # clock rate 64000 <-- enter the DCE interface to set the clock rate -->
Router (config-if) # ^ z

ConfigurationPPP protocol:
Router (config) # username Name password Set-Password-Here <-- the validator creates a database -->
Router (config) # interface Type Port
Router (config-if) # encapsulation ppp <-- start the PPP protocol -->
Router (config-if) # ppp outhentication [chap | chap pap | pap chap | pap] <-- select PPP authentication -->
Router (config-if) # ppp pap sent-username Name password Password <-- send verification information -->
Router (config-if) # ^ z

PAP one-way authenticationConfigurationInstance:
Validators:
Router-server (config) # username Client password 12345 <-- the validator creates a database -->
Router-server (config) # interface serial 0
Router-server (config-if) # encapsulation ppp
Router-server (config-if) # ppp authentication pap <-- select to use PAP for PPP authentication -->
Router-server (config-if) # ^ z
Verified:
Router-client (config-if) # encapsulation ppp
Router-client (config-if) # ppp pap sent-username Client password 12345 <-- send verification information -->
Router-client (config-if) # ^ z

PAP two-way authenticationConfigurationInstance:
Router:
Routeconfig # username B password 12345
Routeconfig # interface serial 0
Roupid (config-if) # encapsulation ppp
Roupid (config-if) # ppp authentication pap
Routeconfig-if # ppp pap sent-username A password 54321
Routeconfig-if # ^ z
Router B:
RouterB (config) # username A password 54321
RouterB (config) # interface serial 1
RouterB (config-if) # encapsulation ppp
RouterB (config-if) # ppp authentication pap
RouterB (config-if) # ppp pap sent-username B password 12345
RouterB (config-if) # ^ z

CHAP one-way authenticationConfigurationInstance:
Validators:
Router-server (config) # username router-client password 12345
Router-server (config) # interface serial 0
Router-server (config-if) # encapsulation ppp
Router-server (config-if) # ppp authentication chap
Router-server (config-if) # ^ z
Verified:
Router-client (config-if) # encapsulation ppp
Router-client (config-if) # ppp authentication chap
Router-client (config-if) # ppp chap hostname router-client
Router-client (config-if) # ppp chap password 12345
Router-client (config-if) # ^ z

CHAP mutual authenticationConfigurationInstance:
Router:
Routerbandwidth (config) # username routerB password 12345
Routeconfig # interface serial 0
Roupid (config-if) # encapsulation ppp
Roupid (config-if) # ppp authentication chap
Roupid (config-if) # ppp chap hostname roupid
Routeconfig-if # ppp chap password 54321
Routeconfig-if # ^ z
Router B:
RouterB (config) # username routerpassword 54321
RouterB (config) # interface serial 1
RouterB (config-if) # encapsulation ppp
RouterB (config-if) # ppp authentication chap
RouterB (config-if) # ppp chap hostname routerB
RouterB (config-if) # ppp chap password 12345
RouterB (config-if) # ^ z

Telnet:
Roupid # terminal monitor <-- can be sent back to the remote host for debugging.CommandResult -->
Route# telnet IP-Address [Router-Name] <-- Telnet to the host with the specified Address or Name -->
RouterB # [exit | logout] <-- exit Telnet -->
RouterB # ++ <6> press <-- suspend Telnet -->
Route# show sessions <-- display all current Telnet information, including Connect-Number -->
Route# Connect-Number <-- return the specified Telnet connection -->
RouterA # disconnect IP-Address [Router-Name] <-- disconnect the host with the specified Address or Name -->
Roupid # show user <-- display the connection information from Telnet to the local machine -->
Router # clear line [0 | 1 | 2 | 3 | 4] <-- disconnect the connection from the specified Telnet instance to the local machine -->

Disable Telnet to the local machine:
Router (config) # line vty 0 4
Router (config-line) # access-class ACL-Number
Router (config) # ^ z

Set the Host Name:
Router (config) # hostname Set-Hostname
Router (config) # ^ z
Router (config) # ^ z

Set User mode password:
Router (config) # line console 0
Router (config-line) # login
Router (config-line) # password Set-Password
Router (config-line) # ^ z
Set the Telnet password:
Router (config) # line vty 0 4
Router (config-line) # login
Router (config-line) # password Set-Password
Router (config-line) # ^ z

Set the privileged mode password:
Router (config) # enable password Set-Password <-- Unencrypted password, plaintext -->
Router (config) # enable secret Set-Password <-- encrypted Password -->
Router (config) # ^ z

Encrypt all passwords:
Router (config) # service password-ancryption Set-Password-Here
Router (config) # no service password-ancryption <-- Cancel encryption -->
Router (config) # ^ z

Set LogonBanner:
Router (config )#Banner MotdDelimiter Set-Banner-Information-Here separator <-- the front and back separators must be consistent -->

Set the interface description:
Router (config-if) # description Set-Port-Information-Here
Router (config) # ^ z

CDP control:
Router (config-if) # cdp enable <-- enable CDP on the specified port; default -->
Router (config-if) # no cdp enable <-- disable CDP on the specified port -->
Router (config) # cdp run <-- enable CDP for all ports -->
Router (config) # no cdp run <-- disable CDP for all ports -->

Ping usage:
Router # ping IP-Address
Router # ping <-- extended PingCommand-->
Protocol [ip]: [Protocol-Type] <-- select Protocol Type -->
Target IP address: IP-Address <-- enter the test address -->
Repeat count [5]: <-- select the number of ICMP packets sent -->
Datemedisize [100]: <-- select the size of each package -->
Timeout in seconds [2]: <-- set the Timeout value for each packet -->
Extended commands [n]: y <-- use Extended PingCommand-->
Sweep range of sizes [n]:

Tracke usage:
Router # trace IP-Address [Host-Name]

Specify the media type for the Cisco 4000 vro:
Router (config-if) # media-type 10 baset <-- invalidate AUI (default), change to use RJ-45 -->
Router (config-if) # ^ z

Change the vro startup sequence:
Router (config) # boot system flash IOS-FileName
Router (config) # boot system tftp IOS-FileName TFTP-IP-Address
Router (config) # boot system rom
Router (config) # ^ z

Modify the register value:
Router (config) # config-register Value <-- Cisco factory default Value = 0x2102, Value range: 0x2100 (go to ROM Monitor ), 0x2101 (enable the system to start from ROM), 0x2102 ~ 0x210F (enable the system to start from NVRAM ). 0x1 = 0x2101, starting from the minimum bit -->

Change the register value in the ROM monitor:
> O/r Value

Vro password recovery:
Cold shutdown, and then start again, and press <Ctrl> + within 60 seconds
Go to ROM monitor mode
> O/r 0x2142 <-- 25xx type Router --> or> confreg 0x2142 <-- 16xx type Router -->
Router> I
Router> n
Router> enable
Router # copy startup-config running-config
Router # configure terminal
Router (config) # enable secret New-Password
Machine (config) # config-register 0x2102
Router (config) # ^ z
Router # copy running-config startup-config
Router # reload

ConfigurationName-host entry:
Router (config) # ip host Set-Name [TCP-Port-Number] IP-Address [IP-Address 2]...
Router (config) # ^ z

Define DNS host:
Router (config) # ip name-server Server-Address [Server-Address 2]...
Router (config) # ^ z

Disable DNS:
Router (config) # no ip domain-lookup
Router (config) # ^ z

ConfigurationHorizontal segmentation:
Router (config-if) # ip split-horizon
Router (config-if) # no ip split-horizon
Router (config-if) # ^ z

ConfigurationStatic Routing:
Router (config) # ip route IP-Address Subnet-Mask [Next-Hop-Address | Local-Out-Port] [Distace]
<-- Distance range: 1 ~ 255 is equivalent to priority. The smaller the value, the better. RIP = 120; DSPF = 110; IGRP = 100; VPN = 90 -->
Router (config) # ^ z

ConfigurationDefault route:
Router (config) # ip defoult-network IP-Address <-- Dynamic default route -->
Router (config) # ip route 0.0.0.0 0.0.0.0 [Next-Hop-Address | Local-Out-Port] [Distace] <-- Static default route -->
Router (config) # ^ z

OthersCommand:
Router # show version
Router # show running-config
Router # show startup-config
Router # show flash
Router # show interface [Type Port]
Router # show buffers
Router # show protocol
Router # show mem
Router # show stacks
Router # show processes
Router # show cdp entry [Device-Name] <-- display layer-3 information of a specified neighbor -->
Router # show cdp neighbors
Router # show cdp neighbors detail <--- display layer-3 information of all neighbors->
Router # show ip router
Router # show ipx router
Router # show host
Router # show ip protocol
Router # show ip interface Type Port
Router # show ipx interface Type Port
Router # show ipx servers
Router # show ipx traffic
Router # show access-lists [ACL-Number]
Router # show isdn status
Router # show dialer <-- View ISDN dialing information -->
Router # show isdn active
Router # show frame-relay pvc
Router # show frame-relay map
Router # show frame-relay LMS
Router # erase startup-config
Router # reload
Router # setup
Router # copy running-config startup-config
Router # copy startup-config running-config
Router # copy tftp running-config
Router # copy running-config tftp
Router # debug ipx routing activity
Router # debug ipx sap
Router # debug isdn q921
Router # debug isdn q931
Router # debug dialer
Router # debug ip rip
Router # clear interface bri [0 | 1 | 2