Cisco CLI

Cisco CLI

1. User EXEC

   • enable (priv exec)
     • show
       • ip nat statistics
       • ip nat translations
       • mac address-table
         • * dynamic * static * secure - port-security * count* aging-timeclear mac address-table dynamicdynamic vlan _vlan-id_dynamic interface _int-id_dynamic address _mac-addr_
       • running -config
       • dhcp lease
         • display any leases assigned to the switch or router
       • crypto key mypubkey rsa
         • displays the public and private key pair generated by crypto key generate
       • ip ssh
         • displays information about the ssh server and version 
       • ssh
         • display information about ssh sessions
       • ip default-gateway
       • history
         • display command history
     • terminal history size __size__
       • changes the history size for the current session
   • show mac address-table

2. configure terminal

   • interface <type id>
     • * type -&nbsp; ** gig, ten, po, vlan
     • switchport mode <mode>
       • * trunk * access * dynamic auto * dynamic desirable * dynamic auto * nonegotiate
     • ip address <address> <mask> [secondary]
       • ip address dhcp for auto configuration&nbsp;
     • ip nat <zone>
       • * inside - applied to inside interface with RFC1918 address * outside - applied to outside interface with public address
     • switchport access vlan __vlan-id__
     • switchport trunk allowed vlan [add,remove] __vlan-id__
   • ip
     • route <address> <mask> <next-hop> [AD]
     • nat inside source static <inside-local> <inside-global>
       • * inside global is the address that is used to traverse the internet.
     • nat pool <name> <first addr> <second addr> netmask <mask>
       • Dynamic NAT
     • nat inside source list [#] pool <name>
       • Dynamic NAT
     • nat inside source list [#] interface <type id> overload
       • NAT overload or PAT
     • ssh version <1|2>
     • ssh source interface <type id>
     • default-gateway __ip-address__
     • name-server __ip-addr__ __ip-addr__ ...
       • add a dns resolver to IOS
   • access-list [#] <permit|deny> <addr>
   • line
     • console 0
     • vty 0 _num_
       • access-class __access-list__ <in|out>
       • tranport input <all|ssh|telnet|none>
     • password _password_
     • login [local]
     • history __size__ __length__
     • exec-timeout __minutes__ [seconds]
   • hostname __hostname__
     • set the hostname for the router
   • enable secret __secret__
   • logging synchronous
     • it will wait until the command is entered before outputting the logs to the console
   • crypto key generate rsa [general-use] [modulous 1024, 2048]