GTKC Knowledgebase
A little bit of wisdom
Cisco Router show commands
Posted by  Admin on


SHOW COMMANDS - CISCO ROUTERS (some command relevant to Cisco switches too)

Show version - software version, config files, boot images, config register, basic config of router
Show ipx interface - status, ipx rip and sap received/sent, ipx access-lists

Show ipx route - ipx routing table

Show ipx servers - server list (name, port, hops, type of service)

Show ipx traffic - number/type of packets, RIP and SAP packets

Show protocol - ipx addresses of an interface, IP addresses and routing protocol

Show ip protocol - routing update times, networks active on, neighbour routers, administrative distances, AS number

Show access-lists - shows standard and extended access-lists on all interfaces

Show access-list 101

Show ip interface - IP addresses, masks, MTU, access-lists, split horizon, ICMP, CDP status, NAT statistics, LMI info, DLCIs

Show interface serial 0 - shows bandwidth, MTU, keepalives

Show ip route - ip routing table

Show cdp neighbor - deviceID, local intf, holdtime, capability, platform, remote portID

Show cdp entry * - IP address of neighbour, protocol info, platform, capability, portID, holdtime, same info as show version, neighbour device ID, local interface

Show cdp neighbor detail - same as above also IP address, version info

Show cdp traffic - info on traffic and errors

Show cdp interface - encapsulation, timer, holdtime for each intf

Show controllers serial 0 - shows DTE/DCE connections, buffer size, collisions, mac address

Show host(s) - shows hostname to IP resolution of hosts

Show session(s) - shows connections to a remote device

Show users - shows connections to your router, port and time connected

Show frame-relay lmi - lmi errors and lmi type

Show frame-relay pvc - all configured PVC's, DLCI numbers, status of connections, No. of BECN/FECN

Show frame-relay pvc 16

Show frame-relay map - ip to dlci mappings

Show run - display router config (RAM), configured PVCs, ACLs.


SHOW COMMANDS - 1900 SWITCH
Show mac-address-table

Show run

Show ip - like ipconfig

Show port system - shows switching method

Show vtp

Show trunk A allowed-vlans - shows which VLANS allowed on trunk link

Show vlan-membership

Show vlan 2

Show vlan - verify VLAN config

Show history - shows last 10 commands entered by default

Show terminal - shows terminal config + history buffer size


GENERAL ROUTER COMMANDS
Banner exec - for activation or incoming vty

Banner incoming - displayed on reverse telnet sessions

Banner login - displayed on all connected terminals. Displayed before MOTD banner but before login prompts

Bfe - manual emergency mode setting

Clear counters - clears counters on all interfaces

Clear frame-relay-inarp - clears dynamic mappings

Clear line 1 - clears vty 1 connection to a remote router

Clock set 10.30.10 28 may 2002

Config-register 0x2102 - changes config register

Copy flash tftp

Copy tftp flash - copies IOS image from tftp server default directory to router flash

Disable - to get back to user mode from privileged

Disconnect 1 - clears a connection to a remote router

Enable - to get into privileged mode

Enable last-resort - define enable action if no tacas servers respond

Enable use-tacas - tells the router to authenticate passwords through a tacas server

Encapsulation isl 3 - encapsulates ISL frame-tagging for VLAN 3 on an interface

Exec timeout 0 1 - sets console timeout to 1 second

Exec-timeout 0 0 - sets exec timeout to never timeout

Exec-timeout 1 0 - set exec timeout to 1 minute

Ip domain-lookup - enables DNS (use no form to stop this)

Ip domain-name nikmakris.com - appends domain name to hostname (required for DNS)

Ip host nik 172.17.1.63 - adds to host table (up to 8 ip addr)

Ip name-server - sets ip address(es) of DNS servers

Lock - locks the terminal

Logging synchronous - stops console messages overwriting commands

Logout - to logout of the router

Media-type 100BaseX - sets media type

Mrinfo - request neigbour and version information from a multicast router

No login - sets line, vty ports not to prompt for login info

Passive-inteface s0 - disables routing updates on interface (Global command) - they are not sent out this interface but they are still received.

Ping ipx 40.0000.0c8d.5c9d

Service password-encryption - encrypts passwords (Global command)

Terminal monitor - needed to view debug commands from telnet session

Terminal history size 50 - sets command history to 50 lines

Tftp-server system - Make router a tftp server


CONFIGURE COMMANDS
Interface Ethernet 2/0/1 - type slot / port adapter / port number (interface) for VIP cards

Config terminal - configures RAM

Config network (config net) - changes a config on a tftp host

Config memory - configure NVRAM

Ip address 172.17.1.63 255.255.255.0 secondary - adds a secondary subnet address to an interface

Clock rate 56000 - sets clock rate to 56kbps for DCE interfaces


ACCESS LISTS (ACL)
Access-enable - creates a temporary access-list entry

Access-template - creates a temporary access-list entry

Access-profile - apply user profile to interface

Access-list 1 permit 0.0.0.0 255.255.255.255 - same as next line

Access-list 1 permit any - permits any host

Access-list 1 permit 172.30.16.29 0.0.0.0 - same as next line

Access-list 1 permit host 172.30.16.29 - permits host 172.30.16.29

No access list 1 - deletes access list 1

Ip access-group 1 out (out is default)

Access-list 101 deny tcp 172.16.4.0 0.0.0.255 any eq telnet

Access-list 101 permit ip any any established (TCP connection)

Router(Config)#ip access-list standard nik

Router(Config std-nacl)#deny any log (log - logs packets)

No ip access-group in - won't delete inbound lists if you leave the in off the end of the command


FRAME RELAY
Router(Config)#int s0

Router(Config-if)#encapsulation frame-relay cisco (default)

Router(Config-if)#exit

Router(Config)#int s0.16 point-to-point

Router(Config-if)#no inverse-arp

Router(Config-if)#ip address 172.17.1.63 255.255.255.0

Router(Config-if)#bandwidth 64 - sets bandwidth to 64kbps (Only used by routing protocols)

Router(Config-if)#frame-relay map ip 172.16.30.17 16 ietf broadcast - broadcast tells the router to send broadcasts out this intf


IGRP CONFIGURATION
Router(Config)#router igrp 50

Router(Config-router)#timers basic 15 45 0 60

Router(Config-router)#variance 1-128 (controls load balancing between best and worse metrics)

Router(Config-router)#traffic-share balanced/min

Balanced - share inversely proportional to metrics

Min - use routers that have only min costs

Router(Config-router)#network 128.6.0.0

Router(Config-router)#no metric holddown

Router(Config-router)#metric maximum-hop 50


IPX RIP CONFIGURATION

Router(Config)#ipx routing - enables IPX routing, RIP and SAP

Router(Config)#ipx maximum-paths 2 - enables equal cost load balancing over 2 paths

Router(Config)#ipx per-host-load-share - ensures all packets to 1 destination are sent over same line

Router(Config)#int e0

Router(Config-if)#ipx network 10 encapsulation sap secondary - assigns ipx network 10 to a secondary interface on Ethernet 0 with encapsulation Ethernet_802.2

Router(Config-if)#ipx delay 6 - sets tick metric for IPX RIP (LAN = 1, WAN = 6 default)

Router(Config-if)#exit


CISCO ISDN CONFIGURATION
Router(Config)#interface bri 0

Router(Config-if)#ip address 172.17.1.63 255.255.255.0

Router(Config-if)#no shutdown

Router(Config-if)#dialer-group 1

Router(Config-if)#dialer map ip 172.16.60.2 name 8042 8350661

(Next router ip - hostname of next route (auth) - number to dial)

Router(Config-if)#dialer load-threshold 2 either - makes both interfaces come up immediately

Router(Config-if)#dialer load-threshold 255 either - only brings up 2nd B-channel if first is 100% loaded

Router(Config-if)#hold-queue 75 in - holds 75 packets in the queue during connection

Router(Config-if)#dialer idle-timeout 300 - sets idle time out (120 default)

Router(Config-if)#encapsulation ppp

Router(Config-if)#exit

Router(Config)#dialer-list 1 list 110

Router(Config)#access-list 110 permit tcp any any eq smtp

Router(Config)#access-list 110 permit tcp any any eq telnet


STATIC/DEFAULT ROUTES
Ip route 0.0.0.0 0.0.0.0 172.16.20.1 = default route

Ip default-network 172.16.1.0

Ip route 172.17.1.63 255.255.255.0 serial 1 1 permanent - keeps static route even if router cannot communicate with it, administration distance 1


CISCO DISCOVERY PROTOCOL (CDP) COMMANDS
Cdp timer 90

Cdp holdtime 240

Cdp enable (no cdp enable)


1900 SWITCH CONFIGURATION
#config t

(Config)#enable password level 1 nikolas - usermode password

(Config)#enable password level 15 makris - enable password

(Config)#enable secret nik2 - precedes the enable p/w

(Config)#hostname nik

(Config)#vtp pruning enable - enables pruning on whole switch

(Config)#delete vtp - deletes VTP database

(Config)#vtp server (client/transparent)

(Config)#vtp domain nikolas

(Config)#vtp password cisco

(Config)#ip address 172.17.1.63 255.255.255.0

(Config)#ip default-gateway 172.17.1.50

(Config)#switching-mode store-and-forward (fragment-free)

(Config)#vlan 2 name sales

(Config)#vlan 3 name marketing

(Config)#int Ethernet 0/1 - slot 0/port 1

(Config-if)#vlan-membership static 2

(Config-if)#description Finance_VLAN

(Config-if)#port secure max-mac-count 1 - allows only one mac address per port

(Config-if)#exit

(Config)#int f0/26

(Config-if)#trunk on - enables trunking of all VLANS not just VLAN 1

(Config-if)#no trunk-vlan 3 - stops trunking vlan 3

(Config-if)#duplex full - sets to full duplex (auto sense default)

(Config-if)#exit

(Config)#copy tftp://192.168.0.120/cat1900EN_9_00.bin opcode - download into flash memory

(Config)#copy nvram tftp://192.168.0.120/cat1900EN

(Config)#copy tftp://192.168.0.120/cat1900EN nvram

(Config)#delete nvram - deletes config

(Config)#delete vtp - deletes VTP database

(Config)#clear mac-address-table [dynamic]


CISCO DEBUG COMMANDS
Debug ipx routing activity - info on RIP updates

Debug ipx sap - info on sap updates

Debug ip igrp events - what's being rec'd sent, route type (int/ext,system), source, dest

Debug ip igrp transactions - shows contents of routing updates

Debug ip rip - source/contents of updates, network, metrics

Debug frame-relay lmi - enables verification of connection

Debug ppp authentication


UNDEBUG ALL
Turn of debugging.


Tags: Networking , Cisco

Return to home page: Home