CCNA Router and Catalyst Switch IOS Command Reference - MC MCSE
ROUTER COMMANDS
TERMINAL CONTROLS:

<LI itxtvisited="1">Config# terminal editing - allows for enhanced editing commands <LI itxtvisited="1">Config# terminal monitor - shows output on telnet session <LI itxtvisited="1">Config# terminal ip netmask-format hexadecimal|bit-count|decimal - changes the format of subnet masks

HOST NAME:
<LI itxtvisited="1">Config# hostname ROUTER_NAME

BANNER:
<LI itxtvisited="1">Config# banner motd # TYPE MESSAGE HERE # - # can be substituted for any character, must start and finish the message

DESCRIPTIONS:
<LI itxtvisited="1">Config# description THIS IS THE SOUTH ROUTER - can be entered at the Config-if level

CLOCK:
<LI itxtvisited="1">Config# clock timezone Central -6
# clock set hh:mm:ss dd month yyyy - Example: clock set 14:35:00 25 August 2003

CHANGING THE REGISTER:
<LI itxtvisited="1">Config# config-register 0x2100 - ROM Monitor Mode <LI itxtvisited="1">Config# config-register 0x2101 - ROM boot <LI itxtvisited="1">Config# config-register 0x2102 - Boot from NVRAM

BOOT SYSTEM:
<LI itxtvisited="1">Config# boot system tftp FILENAME SERVER_IP - Example: boot system tftp 2600_ios.bin 192.168.14.2 <LI itxtvisited="1">Config# boot system ROM <LI itxtvisited="1">Config# boot system flash - Then - Config# reload

CDP:
<LI itxtvisited="1">Config# cdp run - Turns CDP on <LI itxtvisited="1">Config# cdp holdtime 180 - Sets the time that a device remains. Default is 180 <LI itxtvisited="1">Config# cdp timer 30 - Sets the update timer.The default is 60 <LI itxtvisited="1">Config# int Ethernet 0 <LI itxtvisited="1">Config-if# cdp enable - Enables cdp on the interface <LI itxtvisited="1">Config-if# no cdp enable - Disables CDP on the interface <LI itxtvisited="1">Config# no cdp run - Turns CDP off

HOST TABLE:
<LI itxtvisited="1">Config# ip host ROUTER_NAME INT_Address - Example: ip host lab-a 192.168.5.1
-or- <LI itxtvisited="1">Config# ip host RTR_NAME INT_ADD1 INT_ADD2 INT_ADD3 - Example: ip host lab-a 192.168.5.1 205.23.4.2 199.2.3.2 - (for e0, s0, s1)

DOMAIN NAME SERVICES:
<LI itxtvisited="1">Config# ip domain-lookup - Tell router to lookup domain names <LI itxtvisited="1">Config# ip name-server 122.22.2.2 - Location of DNS server <LI itxtvisited="1">Config# ip domain-name cisco.com - Domain to append to end of names

CLEARING COUNTERS:
<LI itxtvisited="1"># clear interface Ethernet 0 - Clears counters on the specified interface <LI itxtvisited="1"># clear counters - Clears all interface counters <LI itxtvisited="1"># clear cdp counters - Clears CDP counters

STATIC ROUTES:
<LI itxtvisited="1">Config# ip route Net_Add SN_Mask Next_Hop_Add - Example: ip route 192.168.15.0 255.255.255.0 205.5.5.2 <LI itxtvisited="1">Config# ip route 0.0.0.0 0.0.0.0 Next_Hop_Add - Default route
-or- <LI itxtvisited="1">Config# ip default-network Net_Add - Gateway LAN network

IP ROUTING:
<LI itxtvisited="1">Config# ip routing - Enabled by default <LI itxtvisited="1">Config# router rip
-or- <LI itxtvisited="1">Config# router igrp 100 <LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config-if# ip address 122.2.3.2 255.255.255.0 <LI itxtvisited="1">Config-if# no shutdown

IPX ROUTING:
<LI itxtvisited="1">Config# ipx routing <LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config# ipx maximum-paths 2 - Maximum equal metric paths used <LI itxtvisited="1">Config-if# ipx network 222 encapsulation sap - Also Novell-Ether, SNAP, ARPA on Ethernet. Encapsulation HDLC on serial <LI itxtvisited="1">Config-if# no shutdown

ACCESS LISTS:
IP Standard1-99IP Extended100-199IPX Standard800-899IPX Extended900-999IPX SAP Filters1000-1099
IP STANDARD:
<LI itxtvisited="1">Config# access-list 10 permit 133.2.2.0 0.0.0.255 - allow all src ip’s on network 133.2.2.0
-or-
<LI itxtvisited="1">Config# access-list 10 permit host 133.2.2.2 - specifies a specific host
-or-
<LI itxtvisited="1">Config# access-list 10 permit any - allows any address

<LI itxtvisited="1">Config# int Ethernet 0 <LI itxtvisited="1">Config-if# ip access-group 10 in - also available: out

IP EXTENDED:
<LI itxtvisited="1">Config# access-list 101 permit tcp 133.12.0.0 0.0.255.255 122.3.2.0 0.0.0.255 eq telnet
-protocols: tcp, udp, icmp, ip (no sockets then), among others
-source then destination address
-eq, gt, lt for comparison
-sockets can be numeric or name (23 or telnet, 21 or ftp, etc)
-or-
<LI itxtvisited="1">Config# access-list 101 deny tcp any host 133.2.23.3 eq www
-or-
<LI itxtvisited="1">Config# access-list 101 permit ip any any

<LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config-if# ip access-group 101 out

IPX STANDARD:
<LI itxtvisited="1">Config# access-list 801 permit 233 AA3 - source network/host then destination network/host
-or-
<LI itxtvisited="1">Config# access-list 801 permit -1 -1 - “-1” is the same as “any” with network/host addresses

<LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config-if# ipx access-group 801 out

IPX EXTENDED:
<LI itxtvisited="1">Config# access-list 901 permit sap 4AA all 4BB all
- Permit protocol src_add socket dest_add socket
-“all” includes all sockets, or can use socket numbers
-or-
<LI itxtvisited="1">Config# access-list 901 permit any any all any all
-Permits any protocol with any address on any socket to go anywhere

<LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config-if# ipx access-group 901 in

IPX SAP FILTER:
<LI itxtvisited="1">Config# access-list 1000 permit 4aa 3 - “3” is the service type
-or-
<LI itxtvisited="1">Config# access-list 1000 permit 4aa 0 - service type of “0” matches all services

<LI itxtvisited="1">Config# interface Ethernet 0 <LI itxtvisited="1">Config-if# ipx input-sap-filter 1000 - filter applied to incoming packets
-or-
<LI itxtvisited="1">Config-if# ipx output-sap-filter 1000 - filter applied to outgoing packets

NAMED ACCESS LISTS:
<LI itxtvisited="1">Config# ip access-list standard LISTNAME
-can be ip or ipx, standard or extended
-followed by the permit or deny list <LI itxtvisited="1">Config# permit any

<LI itxtvisited="1">Config-if# ip access-group LISTNAME in
-use the list name instead of a list number
-allows for a larger amount of access-lists

PPP SETUP:
<LI itxtvisited="1">Config-if# encapsulation ppp <LI itxtvisited="1">Config-if# ppp authentication chap pap
-order in which they will be used
-only attempted with the authentification listed
-if one fails, then connection is terminated <LI itxtvisited="1">Config-if# exit <LI itxtvisited="1">Config# username Lab-b password 123456
-username is the router that will be connecting to this one
-only specified routers can connect
-or-
<LI itxtvisited="1">Config-if# ppp chap hostname ROUTER <LI itxtvisited="1">Config-if# ppp chap password 123456
-if this is set on all routers, then any of them can connect to any other
-set same on all for easy configuration

ISDN SETUP:
<LI itxtvisited="1">Config# isdn switch-type basic-5ess - determined by telecom <LI itxtvisited="1">Config# interface serial 0 <LI itxtvisited="1">Config-if# isdn spid1 2705554564 - isdn “phonenumber” of line 1 <LI itxtvisited="1">Config-if# isdn spid2 2705554565 - isdn “phonenumber” of line 2 <LI itxtvisited="1">Config-if# encapsulation PPP - or HDLC, LAPD

DDR - 4 Steps to setting up ISDN with DDR

1. <LI itxtvisited="1">Configure switch type
   Config# isdn switch-type basic-5ess - can be done at interface config
   
   <LI itxtvisited="1">Configure static routes
   Config# ip route 123.4.35.0 255.255.255.0 192.3.5.5 - sends traffic destined for 123.4.35.0 to 192.3.5.5
   Config# ip route 192.3.5.5 255.255.255.255 bri0 - specifies how to get to network 192.3.5.5 (through bri0)
   
   <LI itxtvisited="1">Configure Interface
   Config-if# ip address 192.3.5.5 255.255.255.0
   Config-if# no shutdown
   Config-if# encapsulation ppp
   Config-if# dialer-group 1 - applies dialer-list to this interface
   Config-if# dialer map ip 192.3.5.6 name Lab-b 5551212
   connect to lab-b at 5551212 with ip 192.3.5.6 if there is interesting traffic
   can also use “dialer string 5551212” instead if there is only one router to connect to
   
   <LI itxtvisited="1">Specify interesting traffic
   Config# dialer-list 1 ip permit any
   -or-
   Config# dialer-list 1 ip list 101 - use the access-list 101 as the dialer list
   
2. Other Options
   Config-if# hold-queue 75 - queue 75 packets before dialing
   Config-if# dialer load-threshold 125 either
   -load needed before second line is brought up
   -“125” is any number 1-255, where % load is x/255 (ie 125/255 is about 50%)
   -can check by in, out, or either
   Config-if# dialer idle-timeout 180
   -determines how long to stay idle before terminating the session
   -default is 120

FRAME RELAY SETUP:
<LI itxtvisited="1">Config# interface serial 0 <LI itxtvisited="1">Config-if# encapsulation frame-relay - cisco by default, can change to ietf <LI itxtvisited="1">Config-if# frame-relay lmi-type cisco - cisco by default, also ansi, q933a <LI itxtvisited="1">Config-if# bandwidth 56

<LI itxtvisited="1">Config-if# interface serial 0.100 point-to-point - subinterface <LI itxtvisited="1">Config-if# ip address 122.1.1.1 255.255.255.0 <LI itxtvisited="1">Config-if# frame-relay interface-dlci 100
-maps the dlci to the interface
-can add BROADCAST and/or IETF at the end

<LI itxtvisited="1">Config-if# interface serial 1.100 multipoint <LI itxtvisited="1">Config-if# no inverse-arp - turns IARP off; good to do <LI itxtvisited="1">Config-if# frame-relay map ip 122.1.1.2 48 ietf broadcast
-maps an IP to a dlci (48 in this case)
-required if IARP is turned off
-ietf and broadcast are optional <LI itxtvisited="1">Config-if# frame-relay map ip 122.1.1.3 54 broadcast

SHOW COMMANDS
<LI itxtvisited="1">Show access-lists - all access lists on the router <LI itxtvisited="1">Show cdp - cdp timer and holdtime frequency <LI itxtvisited="1">Show cdp entry * - same as next <LI itxtvisited="1">Show cdp neighbors detail - details of neighbor with ip add and ios version <LI itxtvisited="1">Show cdp neighbors - id, local interface, holdtime, capability, platform portid <LI itxtvisited="1">Show cdp interface - int’s running cdp and their encapsulation <LI itxtvisited="1">Show cdp traffic - cdp packets sent and received <LI itxtvisited="1">Show controllers serial 0 - DTE or DCE status <LI itxtvisited="1">Show dialer - number of times dialer string has been reached, other stats <LI itxtvisited="1">Show flash - files in flash <LI itxtvisited="1">Show frame-relay lmi - lmi stats <LI itxtvisited="1">Show frame-relay map - static and dynamic maps for PVC’s <LI itxtvisited="1">Show frame-relay pvc - pvc’s and dlci’s <LI itxtvisited="1">Show history - commands entered <LI itxtvisited="1">Show hosts - contents of host table <LI itxtvisited="1">Show int f0/26 - stats of f0/26 <LI itxtvisited="1">Show interface Ethernet 0 - show stats of Ethernet 0 <LI itxtvisited="1">Show ip - ip config of switch <LI itxtvisited="1">Show ip access-lists - ip access-lists on switch <LI itxtvisited="1">Show ip interface - ip config of interface <LI itxtvisited="1">Show ip protocols - routing protocols and timers <LI itxtvisited="1">Show ip route - Displays IP routing table <LI itxtvisited="1">Show ipx access-lists - same, only ipx <LI itxtvisited="1">Show ipx interfaces - RIP and SAP info being sent and received, IPX addresses <LI itxtvisited="1">Show ipx route - ipx routes in the table <LI itxtvisited="1">Show ipx servers - SAP table <LI itxtvisited="1">Show ipx traffic - RIP and SAP info <LI itxtvisited="1">Show isdn active - number with active status <LI itxtvisited="1">Show isdn status - shows if SPIDs are valid, if connected <LI itxtvisited="1">Show mac-address-table - contents of the dynamic table <LI itxtvisited="1">Show protocols - routed protocols and net_addresses of interfaces <LI itxtvisited="1">Show running-config - dram config file <LI itxtvisited="1">Show sessions - connections via telnet to remote device <LI itxtvisited="1">Show startup-config - nvram config file <LI itxtvisited="1">Show terminal - shows history size <LI itxtvisited="1">Show trunk a/b - trunk stat of port 26/27 <LI itxtvisited="1">Show version - ios info, uptime, address of switch <LI itxtvisited="1">Show vlan - all configured vlan’s <LI itxtvisited="1">Show vlan-membership - vlan assignments <LI itxtvisited="1">Show vtp - vtp configs

CATALYST COMMANDS
For Native IOS - Not CatOS
SWITCH ADDRESS:
<LI itxtvisited="1">Config# ip address 192.168.10.2 255.255.255.0 <LI itxtvisited="1">Config# ip default-gateway 192.168.10.1

DUPLEX MODE:
<LI itxtvisited="1">Config# interface Ethernet 0/5 - “fastethernet” for 100 Mbps ports <LI itxtvisited="1">Config-if# duplex full - also, half | auto | full-flow-control

SWITCHING MODE:
<LI itxtvisited="1">Config# switching-mode store-and-forward - also, fragment-free

MAC ADDRESS CONFIGS:
<LI itxtvisited="1">Config# mac-address-table permanent aaab.000f.ffef e0/2 - only this mac will work on this port <LI itxtvisited="1">Config# mac-address-table restricted static aaab.000f.ffef e0/2 e0/3
-port 3 can only send data out port 2 with that mac
-very restrictive security

<LI itxtvisited="1">Config-if# port secure max-mac-count 5 - allows only 5 mac addresses mapped to this port

VLANS:
<LI itxtvisited="1">Config# vlan 10 name FINANCE <LI itxtvisited="1">Config# interface Ethernet 0/3 <LI itxtvisited="1">Config-if# vlan-membership static 10

TRUNK LINKS:
<LI itxtvisited="1">Config-if# trunk on - also, off | auto | desirable | nonegotiate <LI itxtvisited="1">Config-if# no trunk-vlan 2
-removes vlan 2 from the trunk port
-by default, all vlans are set on a trunk port

CONFIGURING VTP:
<LI itxtvisited="1">Config# delete vtp - should be done prior to adding to a network <LI itxtvisited="1">Config# vtp server - the default is server, also client and transparent <LI itxtvisited="1">Config# vtp domain Camp - name doesn’t matter, just so all switches use the same <LI itxtvisited="1">Config# vtp password 1234 - limited security <LI itxtvisited="1">Config# vtp pruning enable - limits vtp broadcasts to only switches affected <LI itxtvisited="1">Config# vtp pruning disable

FLASH UPGRADE:
<LI itxtvisited="1">Config# copy tftp://192.5.5.5/configname.ios opcode - “opcode” for ios upgrade, “nvram” for startup config

DELETE STARTUP CONFIG:
<LI itxtvisited="1">Config# delete nvram

__________________
Hacking - The Art of Exploitation
DomainKeys: Chìa khóa quan trọng của Anti-Spammer

thanh lap doanh nghiep
thanh lap cong ty
piano
luat cho moi người

�ây là những lệnh cấu hình trên thiết bị cisco, thế mà em cứ tưởng bác Admin cho ra đống lý thuyết nào chứ