Accessing Command Modes
Table 10 describes the command modes available in the CLI.
 |
NOTE: Within any configuration mode, the commands that are available to the user include the commands defined for that configuration mode and all commands defined for Global Configuration mode. See Table 24. For example, from Router Configuration mode, you could use the interface Global Configuration mode command without first explicitly going back to Global Configuration mode. |
host1(router-config)# interface atm 4/0.3
host1(config-if)#
Exec Modes
There are two Exec modes: User Exec and Privileged Exec.
After you log in to the system, the CLI is in User Exec mode. By default, the commands you can execute from User Exec mode provide only user-level access; however, you should password protect it to prevent unauthorized use.The User Exec commands allow you to perform such functions as:
- Change terminal settings on a temporary basis.
- Perform ping and trace commands.
- Display system information.
host1>?
clear Clear system information
default Set a command to its default(s)
dir Display a list of local files
disable Reduce the command privilege level
enable Enable access to privileged commands
erase Erase configuration settings
exit Exit from the current command mode
flash-disk Perform flash disk operations
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
macro Run a CLI macro
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
show Display system information
sleep Make the Command Interface pause for a specified duration
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destination
Privileged Exec mode provides privileged-level access and therefore should also be password protected to prevent unauthorized use. Privileged Exec commands allow you to perform such functions as:
Password Protection
If the system administrator has configured the system to have a password, the CLI prompts you to enter that password before you receive access to Privileged Exec mode. The password is case sensitive and appears as asterisks on the screen.
To access Privileged Exec mode:
- At the prompt, type enable and press <Enter>.
- At the password prompt, type your password and press <Enter>.
host1>enable
Password:
Password:*********
host1#
|
NOTE: The |
host1#?
baseline Set a baseline for statistics
clear Clear a state
clock Set the system's clock
configure Enter Global Configuration mode
copy Copy files
debug Configure debugging functions
default Set a command to its default(s)
delete Delete a local file
dir Display a list of local files
disable Reduce the command privilege level
disconnect Disconnect remote CLI session
enable Enable access to privileged commands
exit Exit from the current command mode
flash-disk Perform flash disk operations
halt Halt the system in preparation for power down
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
log Configure logging settings
logout Logout PPP Subscribers
macro Run a CLI macro
more Display contents of a file
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
pppoe Set PPPoE information
profile-reassign Perform profile reassignment
redundancy Perform a redundancy action
reload Halt and perform a cold restart
rename Rename a local file
send Send a message to specified lines
show Display system information
sleep Make the Command Interface pause for a specified duration
srp Perform SRP operations
synchronize Manually synchronize redundant system controller file system
telnet Access a remote system via telnet
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destination
undebug Disable debug logging functions
virtual-router Specify a virtual router
write Write the system's running configuration to a destination
In addition, you can execute a script file (.scr), which is simply a file containing a sequence of CLI commands, via the configure command.
Global Configuration Mode
Within Global Configuration mode, you can:
- Apply features globally to a router.
- Enable a feature or function.
- Disable a feature or function.
- Configure a feature or function.
- Access all Configuration modes.
To access Global Configuration mode, you begin in Privileged Exec mode. Type configure terminal and press <Enter>.
host1#configure terminal
Enter configuration commands, one per line. End with ^Z.
host1(config)#
The system is now in Global Configuration mode.
Executing a Script File
- From Privileged Exec mode, type configure and the filename you want to execute, and press <Enter>.
host1#configure file
File name:/myFile.scr
Proceed with configure? [confirm]
|
NOTE: The filename must end with an .scr extension, and the file must contain a series of valid CLI commands. The file can be a local file on the router or a remote file on a host system. |
For more information, see the section Managing Files in Chapter 4, Managing the System.
AAA Profile Configuration Mode
From this mode, you can restrict or allow the use of domain names, translate an original domain name to a new domain name, or create domain name aliases.
From Global Configuration mode, type the aaa profile command and a profileName, and then press <Enter>.
host1(config)#aaa profile charlie
host1(config-aaa-profile)#?
allow Configure the authorization domain name
default Set a command to its default(s)
deny Configure the authorization domain name
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
translate Configure the translation map for domain name
Address Family Configuration Mode
From this mode, you can configure address family parameters for BGP VPN services or RIP VPN services.
From Global Configuration mode, type the router bgp command to enter Router Configuration mode for BGP. Type either the address-family ipv4 or address-family vpnv4 command, and then press <Enter>.
host1(config)#router bgp 100
host1(config-router)#address-family ?
ipv4 Configure IPv4 address family
vpnv4 Configure VPN-IPv4 address family
From Global Configuration mode, type the router rip command to enter Router Configuration mode for RIP. Type the address-family ipv4 command, and then press <Enter>.
host1(config)#router rip 100
host1(config-router)#address-family ?
ipv4 Configure IPv4 address family
Classifier Group Configuration Mode
In this mode, you can configure the set of rules for a classification group in a policy list that you can attach to an interface.
From Policy List Configuration mode, type the classifier-group command and its attributes, and then press <Enter>.
host1(config-policy-list)#classifier-group ipCLACL10 precedence 75
host1(config-policy-list-classifier-group)#?
color Create a color policy
default Set a command to its default(s)
exit Exit from the current command mode
filter Create a filter policy
forward Create a forward policy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mark Create a set TOS byte policy
next-hop Create a next-hop policy
next-interface Create a next-interface policy
no Negate a command or set its default(s)
rate-limit-profile Create a rate-limit policy
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
suspend Suspend a policy rule
traffic-class Create a traffic class policy
user-packet-class Create a user packet class policy
Controller Configuration Mode
You can configure physical interfaces such as a T3 in Controller Configuration mode.
From Global Configuration mode, type the appropriate controller command and its attributes, and then press <Enter>.
host1(config)#controller t3 9/1
host1(config-controll)#
host1(config)#controller ?
e1 Configure a channelized E1 controller
e3 Configure a E3 controller
sonet Configure a Sonet controller
t1 Configure a channelized T1 controller
t3 Configure a T3 controller
DHCP Local Pool Configuration Mode
In this mode, you can configure DHCP local pools. For example, you can specify a DNS or Net-Bios server.
From Global Configuration mode, type the command ip dhcp-local pool and a poolName, and then press <Enter>.
host1(config)#ip dhcp-local pool charlie
host1(config-dhcp-local)#?
default Set a command to its default(s)
default-router The default-router to use for this pool
dns-server The dns-server to use for this pool
domain-name The domain name for the pool
exit Exit from the current command mode
help Describe the interactive help system
lease The lease time for addresses from this pool
link Link to another DHCP Pool
log Configure logging settings
macro Run a CLI macro
netbios-name-server The netbios-name-server to use for this pool
netbios-node-type The netbios-node-type to use for this pool
network The network specified for this pool
no Negate a command or set its default(s)
reserve Reserve an ip address for a specific Mac Address
run Run an exec mode command
server-address The DHCP Server address to send to clients
sleep Make the Command Interface pause for a specified
duration
Domain Map Configuration Mode
In this mode, you can map a user domain name to a virtual router and loopback interface.
From Global Configuration mode, type the aaa domain-map command and the domain name value as found in the client's login name. Then press <Enter>.
host1(config)#aaa domain-map charlie76
host1(config-domain-map)#?
address-pool-name Configure the address-pool-name for the domain name
atm Configure ATM parameters
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
ip-hint Configure the IP hint feature for the domain
local-interface Configure the local interface value for remote clients
log Configure logging settings
loopback Configure the loopback interface to use when RX has an
unnumbered interface to the PPP client
macro Run a CLI macro
no Negate a command or set its default(s)
override-user Configure the username and password values to use instead
of the values from the remote client
padn Configure pppoe active discovery network parameters for
the domain name
router-name Configure the virtual-router for the domain name
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
strip-domain Configure the domain name stripping feature for the domain
tunnel Configure tunnel tag
virtual-router Configure the virtual-router for the domain name
Domain Map Tunnel Configuration Mode
In this mode, you can configure tunnel parameters such as the tunnel's endpoint.
From Domain-Map Configuration mode, type tunnel and a tunnelNumber, and press <Enter>.
host1(config-domain-map)#tunnel 17
host1(config-domain-map-tunnel)#?
address Configure tunnel endpoint address
client-name Configure the client hostname of the tunnel
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
hostname Configure the client hostname of the tunnel
identification Configure tunnel identification
log Configure logging settings
macro Run a CLI macro
max-sessions Configure maximum sessions for this tunnel
medium Configure tunnel medium
no Negate a command or set its default(s)
password Configure tunnel password
preference Configure tunnel preference
run Run an exec mode command
server-name Configure the remote hostname for the tunnel
sleep Make the Command Interface pause for a specified duration
source-address Configure tunnel source address
type Configure tunnel type
Drop Profile Configuration Mode
In this mode, you can configure drop profiles for QoS. Drop profiles control RED dropping behavior.
From Global Configuration mode, type the drop-profile command, and press <Enter>.
host1(config)#drop profile
host1(config-drop-profile)#?
average-length-exponent Select TAQL coefficient
committed-threshold Specify committed queue thresholds and maximum drop
probability
conformed-threshold Specify conformed queue thresholds and maximum drop
probability
default Set a command to its default(s)
exceeded-threshold Specify exceeded queue thresholds and maximum drop
probability
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Explicit Path Configuration Mode
From this mode, you can name and configure an explicit path within MPLS.
From Global Configuration mode, type mpls explicit-path name and the explicitPathName, and press <Enter>.
host1(config)#mpls explicit-path name xyz
host1(config-expl-path)#?
append-after Add an entry after a specified index
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
index Specify the index of the entry to be added or edited
list List part or all of the entries in current explicit path
log Configure logging settings
macro Run a CLI macro
next-address Configure an IP address at the last hop of the explicit path
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Interface Configuration Mode
From Interface Configuration mode, you can enable many system features for each interface you create. Interface Configuration commands allow you to:
From Global Configuration mode, type interface and identify the interface you want to configure.
host1(config)#interface atm 0/1
host1(config-if)#
The CLI is now in Interface Configuration mode.
host1(config)#interface ?
atm ATM interface
fastEthernet IEEE 802.3 fastEthernet interface
gigabitEthernet IEEE 802.3 gigabitEthernet interface
hssi High Speed Serial interface
ip Ip shared interface
loopback Loopback interface
mlframe-relay Multilink frame-relay interface
mlppp Multilink PPP interface
null Null interface
pos Packet over SONET interface
serial Serial interface
sonet SONET interface
tunnel Tunnel interface
Some Interface Configuration commands can affect general interface parameters, such as bandwidth and clock rate. For interface-specific commands, such as commands for ATM interfaces, see the appropriate chapter in this documentation set.
IP NAT Pool Configuration Mode
In this mode, you can specify the information that the system uses in creating IP Network Address Translation (NAT) pools.
host1(config)#ip nat pool multiplerange prefix-length 30
host1(config-ipnat-pool)#?
address Configure address ranges
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
IPSec CA Identity Configuration Mode
In this mode, you can specify the information that the system uses in online certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec ca identity, and press <Enter>.
host1(config)#ipsec ca identity
host1(config-ca-identity)#?
crl Certificate Revocation List checking
default Set a command to its default(s)
enrollment Configure enrollment parameters
exit Exit from the current command mode
help Describe the interactive help system
issuer-identifier issuer identifier
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
root Specify root proxy
run Run an exec mode command
sleep Make the Command Interface pause for a specified
IPSec Identity Configuration Mode
In this mode, you can specify the information that the system uses in offline certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec identity, and press <Enter>.
host1(config)#ipsec identity
host1(config-ipsec-identity)#?
common-name Common Name
country Country name
default Set a command to its default(s)
domain-name Domain name
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
organization Organization name
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
IPSec IKE Policy Configuration Mode
In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.
From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber, and press <Enter>.
host1(config)#ipsec ike-policy-rule 10
host1(config-ike-policy)#?
aggressive-mode Allows aggressive mode negotiation for the tunnel
authentication Configure the authentication method
default Set a command to its default(s)
encryption Configure the encryption algorithm within an IKE policy
exit Exit from the current command mode
group Configure the Diffie-Hellman group identifier
hash Configure the hash algorithm within an IKE policy
help Describe the interactive help system
lifetime Configure the time an SA will live before expiration
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
IPSec Manual Key Configuration Mode
In this mode, you can enter the manual key that a peer uses for authentication during the tunnel establishment phase.
From the Global Configuration mode, type ipsec key manual pre-share and the peerIPaddress, and press <Enter>.
host1(config)#ipsec key manual pre-share 10.10.1.1
host1(config-manual-key)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
key Manually specify a key
log Configure logging settings
macro Run a CLI macro
masked-key Enter a masked key (not for manual entry, show config generates)
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
IPSec Transport Profile Configuration Mode
In this mode, you can configure an IPSec transport profile, which is used for L2TP over IPSec connections.
From the Global Configuration mode, type ipsec transport profile, the profileName, virtual-router vrName, ip address ipAddress, and press <Enter>.
host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0
host1(config-ipsec-transport-profile)#?
application Configure the application type that is protected by the l2tp
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
lifetime Configure the renegotiation time
local Configure local endpoint of the transport connection
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
pfs Configure perfect forward secrecy
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
transform-set Configure the transform set used by ipsec transport profile
L2TP Destination Profile Configuration Mode
In this mode, you can create the destination profile that defines the location of an L2TP Access Concentrator (LAC) and define the attributes used when an L2TP Network Server (LNS) communicates with an LAC. The destination is necessary to enable an LAC to connect to the LNS.
From Global Configuration mode, type l2tp destination profile, the profileName, an ipAddress, and press <Enter>.
host1(config)#l2tp destination profile augusta ip address 123.45.76.16
host1(config-l2tp-dest-profile)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
remote Configure L2TP remote parameters
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
L2TP Destination Profile Host Configuration Mode
In this mode, you can set and modify L2TP host profile attributes, such as the proxy Link Control Protocol (LCP), the local hostname, the local IP address, or the interface profile.
From Global Configuration mode, enter L2TP Destination Profile mode (see above), and type remote host and a hostName, and press <Enter>.
host1(config-l2tp-dest-profile)#remote host george
host1(config-l2tp-dest-profile-host)#?
default Set a command to its default(s)
disable Disable L2TP parameter for remote host
enable Enable L2TP parameter for remote host
exit Exit from the current command mode
help Describe the interactive help system
local Configure L2TP local parameters for remote host
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
profile Assign a profile for remote host
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
tunnel Configure L2TP tunnel parameters for remote host
LDP Configuration Mode
In this mode, you can create and configure MPLS Label Distribution Protocol (LDP) profile parameters.
From Global Configuation mode, type mpls ldp interface profile and the profileName, and press <Enter>.
host1(config)#mpls ldp interface profile shell
host1(config-ldp)#?
cr-ldp Enable CR-LDP at interface level
default Set a command to its default(s)
exit Exit from the current command mode
hello Configure hello parameters
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Line Configuration Mode
In this mode, you can modify the operation of a virtual terminal (vty) line.
From Global Configuration mode, type the line vty command and either the lineNumber or the rangeOfLineNumbers you want to configure, and press <Enter>.
host1(config)#line vty 0 29
host1(config-line)#?
access-class Restrict or permit telnet access based on an access list
data-character-bits Set the number of bits per character used by the display
default Set a command to its default(s)
exec-banner Enable the exec banner
exec-timeout Set the inactivity timeout
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
login Require the use of passwords for vty logins
macro Run a CLI macro
motd-banner Enable the message of the day banner
no Negate a command or set its default(s)
password Configure the password for line access
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
timeout Specify the login timeout value for the selected line(s)
|
NOTE: The privilege command is available in Line Configuration mode when the user is logged in at privilege level 15. For more information, see Privileged-Level Access and Changing CLI Command Privileges. |
Local IPSec Transport Profile Configuration
In this mode, you can configure preshared IKE keys for IPSec transport profiles.
From the IPSec Transport Profile Configuration mode, type local ip address and the ipAddress, and press <Enter>.
host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
host1(config-ipsec-transport-profile-local)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
pre-share Specify pre-shared group key based on local ip address
pre-share-masked A pre-encrypted key, generated by show config rather than
interactive
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Map Class Configuration Mode
In this mode, you can specify Frame Relay End-to-End fragmentation and reassembly for a map class. Optionally, you can specify the maximum payload size of a fragment or specify fragmentation only or reassembly only.
From Global Configuration mode, type the map-class frame-relay command and the mapClassName you want to configure, and press <Enter>.
host1(config)#map-class frame-relay testmapclass
host1(config-map-class)#?
default Set a command to its default(s)
exit Exit from the current command mode
frame-relay Configure frame relay parameters
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Map List Configuration Mode
In this mode, you can configure map list parameters. In Map List Configuration mode, commands such as map-list and ip atm-vc are used to configure ATM NBMA interfaces.
From Global Configuration mode, type map-list and a mapListName, and press <Enter>.
host1(config)#map-list mjt3330
host1(config-map-list)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
ip Add IP address to the map
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Policy List Configuration Mode
In this mode, you can configure a policy list—that is, a set of rules—that you can attach to an interface. You can modify a policy list and update it wherever the policy list is used on the configuration.
To create an policy list, from Global Configuration mode type the policy-list command preceded by the type of policy and press <Enter>. For example,
host1(config)#l2tp policy-list routeL2tp100
|
NOTE: If you do not include the type of policy, the system creates an IP policy list. |
host1(config)#ip policy-list routeForABBCCorp
host1(config-policy-list)#?
classifier-group Specify the classifier list
color Create a color policy
default Set a command to its default(s)
exit Exit from the current command mode
filter Create a filter policy
forward Create a forward policy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mark Create a set TOS byte policy
next-hop Create a next-hop policy
next-interface Create a next-interface policy
no Negate a command or set its default(s)
rate-limit-profile Create a rate-limit policy
run Run an exec mode command
sleep Make the Command Interface pause for a specified
duration
suspend Suspend a policy rule
traffic-class Create a traffic class policy
traffic-shape-profile Create a traffic-shape policy
user-packet-class Create a user packet class policy
PPPoE Service Name Table Configuration Mode
In this mode, you can configure entries for a PPPoE service name table. PPPoE clients use these entries to request that an access concentrator (AC), such as an E-series router, support certain services. Issue the service command from this mode to configure a specific service name entry, or to specify that the AC should ignore (drop), rather than respond to (terminate, the default action), a PPPoE Active Discovery Initiation (PADI) request from a client containing the empty service name tag.
From Global Configuration mode, type the pppoe-service-name-table command followed by an alphanumeric table name of up to 32 characters, and press <Enter>.
host1(config)#pppoe-service-name-table serviceTable1
host1(config-pppoe-service-name-table)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
service Configure service-name table entries
sleep Make the Command Interface pause for a specified duration
Profile Configuration Mode
In this mode, you can configure a profile to subsequently configure dynamic IP interfaces.
From Global Configuration mode, type the profile command followed by a profile name of up to 80 characters, and press <Enter>.
host1(config)#profile germany78
host1(config-profile)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
ip Configure IP characteristics
l2tp Configure L2TP characteristics
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
ppp Configure PPP parameters
pppoe Pppoe information
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
QoS Profile Configuration Mode
In this mode, you can specify queue profiles and scheduler profiles in combination with interface types.
From Global Configuration mode, type the qos-profile command followed by a QosProfileName, and press <Enter>.
host1(config)#qos-profile testabc
host1(config-qos-profile)#?
atm ATM interface
atm-vc ATM-VC interface
bridge Bridge interface
cbf Cbf interface
default Set a command to its default(s)
ethernet Ethernet interface
exit Exit from the current command mode
fr-vc Frame Relay subinterface
help Describe the interactive help system
ip IP interface
ip-tunnel IP FROM-tunnel interface
l2tp-tunnel L2tp FROM-tunnel interface
log Configure logging settings
lsp Lsp (MPLS) interface
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
serial Serial interface
server-port Server Port interface
sleep Make the Command Interface pause for a specified duration
vlan VLAN subinterface
Queue Profile Configuration Mode
In this mode, you can configure queue profiles and various queue profile parameters, such as constraints on queue lengths or queue buffer weights.
From Global Configuration mode, type the queue-profile command followed by a queueProfileName, and press <Enter>.
host1(config)#queue-profile testabcd1234
host1(config-queue)#?
buffer-weight Set drop threshold in proportion to this weight
committed-length Set min and max constraints for committed threshold
conformed-fraction Set conformed threshold as a percentage of committed
conformed-length Set min and max constraints for conformed threshold
default Set a command to its default(s)
exceeded-fraction Set exceeded threshold as a percentage of committed
exceeded-length Set min and max constraints for exceeded threshold
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
RADIUS Configuration Mode
In this mode, you can configure various parameters of your RADIUS authentication, accounting, and dynamic-request servers.
From Global Configuration mode, type either the radius authentication server, radius accounting server, or radius dynamic-request server command with the server ipAddress, and press <Enter>.
host1(config)#radius authentication server 1.2.1.3
host1(config-radius)#?
deadtime Configure the amount of time a timed-out server is dropped for usage
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
key Configure the secret used in RADIUS client to server exchange
log Configure logging settings
macro Run a CLI macro
max-sessions Configure the number of outstanding requests allowed to the server
no Negate a command or set its default(s)
retransmit Configure the number of times to retransmit RADIUS request
before failing
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
timeout Configure the number of seconds to wait for a RADIUS response
before retransmitting
udp-port Configure the RADIUS server's UDP port
RADIUS Relay Configuration Mode
In this mode, you can configure various parameters of your RADIUS relay authentication and accounting servers.
From Global Configuration mode, type either the radius relay authentication server or radius relay accounting server command, and press <Enter>.
host1(config)#radius authentication server
host1(config-radius-relay)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
key Configure the secret used in RADIUS client to relay server exchange
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
udp-port Configure the RADIUS relay server's udp port
Rate Limit Profile Configuration Mode
In this mode, you can set parameters for an IP or L2TP rate limit profile, which is a set of bandwidth attributes and associated actions that become part of a policy list. The policy list is then applied to the ingress or egress of an interface.
To create an IP rate limit profile, from Global Configuration mode type ip rate-limit-profile and a profileName, and press <Enter>.
To create an L2TP rate limit profile, from Global Configuration mode type l2tp rate-limit-profile and a profileName, and press <Enter>.
|
NOTE: If you do not include either the ip or l2tp keywords, the system creates an IP rate limit profile. |
host1(config)#ip rate-limit-profile fm78930
host1(config-rate-limit-profile)#?
committed-action Set the committed access rate action
committed-burst Set the committed access rate burst size in Bytes
committed-rate Set the committed access rate value in bits per second
conformed-action Set the conformed access rate action
default Set a command to its default(s)
exceeded-action Set the exceeded action
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mask-val Set mask to be applied with mark values
no Negate a command or set its default(s)
peak-burst Set the peak burst size in Bytes
peak-rate Set the peak access rate in bits per second
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Remote Neighbor Configuration Mode
In this mode, you can configure remote neighbor parameters for Routing Information Protocol (RIP), Protocol Independent Multicast (PIM), and Open Shortest Path First (OSPF).
From Global Configuration mode, type either router rip, router pim, or router ospf and the processID. Press <Enter>. You are now in Router Configuration mode.
From Router Configuration mode, type the remote-neighbor command and the appropriate attributes, and press <Enter>.
host1(config-router)#remote-neighbor 10.13.5.61
host1(config-router-rn)#?
authentication Configure authentication
default Set a command to its default(s)
distribute-list Specify an access list to be a distribute list
exit Exit from the current command mode
exit-remote-neighbor Exit the remote-neighbor configuration mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
receive Set reception characteristics
route-map Specify a route map to apply to outgoing routes
run Run an exec mode command
send Set transmit characteristics
sleep Make the Command Interface pause for a specified
duration
split-horizon Enable Split-horizon
time-to-live Configure ttl used to send to this neighbor
update-source Source address to be used for transmit
Route Map Configuration Mode
In this mode, you can create and modify route maps.
From Global Configuration mode, type the route-map command and the appropriate routeMapNumber, and press <Enter>.
host1(config)#route-map unis889
host1(config-route-map)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
match Identify this entry as requiring an attribute match
match-set Identify this entry to match and set attributes
no Negate a command or set its default(s)
run Run an exec mode command
set Configure this entry to set attributes
sleep Make the Command Interface pause for a specified duration
Router Configuration Mode
In this mode, you can configure a routing protocol using router commands.
From Global Configuration mode, type the router command and the appropriate router attributes, and press <Enter>.
host1(config)#router bgp 2378
host1(config-router)#?
address-family Enter address family configuration mode
aggregate-address Create an aggregate entry in BGP routing table
auto-summary Automatic summarization of redistributed routes
to their natural network masks
bgp Configure BGP
default Set a command to its default(s)
default-fields Set default fields for show commands
default-information Configure the distribution of default routing
information
disable-dynamic-redistribute disable dynamic importing of routing
information with the latest policy
distance Configure administrative distances for routes
exit Exit from the current command mode
help Describe the interactive help system
ip Configure the type of route to be contributed
by this BGP address family
limits Configure limits on internal BGP tables
log Configure logging settings
macro Run a CLI macro
maximum-paths Configure the maximum number of equal-cost paths
neighbor Specify neighbor properties
network Identify a network for BGP to announce
no Negate a command or set its defaults
overload Configure BGP behaviour when reaching overload
state (no more resources available)
redistribute Configure the redistribution of routing
information from another protocol
rib-out Configure rib-out storage for all BGP peers
run Run an exec mode command
sleep Make the Command Interface pause for a
specified duration
synchronization Enable synchronization with the IGP
table-map Specify a table map to map external entry
attributes into routing table
timers Configure the keep-alive interval and the hold-time
RSVP Configuration Mode
In this mode, you can create and configure MPLS Resource Reservation Protocol (RSVP) parameters.
From Global Configuration mode, type mpls rsvp interface profile and the profileName, and press <Enter>.
host1(config)#mpls rsvp interface profile sprint
host1(config-rsvp)#?
cleanup-timeout-factor Configure the timeout factor
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
refresh-period Configure refresh period
run Run an exec mode command
sleep Make the Command Interface pause for a specified
duration
RTR Configuration Mode
In this mode, you can configure Response Time Reporter (RTR) parameters. The RTR feature allows you to monitor your network's performance and its resources by measuring response times and the availability of your network devices.
From Global Configuration mode, type rtr and the mapNumber, and press <Enter>.
host1(config)#rtr 784078348
host1(config-rtr)#?
default Set a command to its default(s)
exit Exit from the current command mode
frequency Specify the frequency interval
help Describe the interactive help system
hops-of-statistics-kept Specify the hops capture
log Configure logging settings
macro Run a CLI macro
max-response-failure Specify the maximum number of consecutive failures
no Negate a command or set its default(s)
operations-per-hop Specify a number of operations per hop
owner Specify the owner of entry
request-data-size Specify the request payload size
run Run an exec mode command
samples-of-history-kept Specify the maximum history samples
sleep Make the Command Interface pause for a specified duration
tag Specify the user defined tag
timeout Specify the operation timeout
tos Specify a value for the ToS byte
type Specify the type of the entry
Scheduler Profile Configuration Mode
In this mode, you can configure a scheduler profile. You can then set the shaping rate value, enable the strict-priority scheduling for the scheduler node, or set the weighted-round-robin (WRR) value of the scheduler node or queue.
From Global Configuration mode, type scheduler-profile and the scheduleProfileName that you want to create or configure, and press <Enter>.
host1(config)#scheduler-profile A990
host1(config-scheduler-profile)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
shaping-rate Shape the node or queue to the specified rate
sleep Make the Command Interface pause for a specified duration
strict-priority Dequeue strict priority packets ahead of other packets
weight Set the relative weight of the node or queue
SNMP Event Manager Configuration Mode
In this mode, you can configure certain SNMP triggers for events, what occurs when an event is triggered, resource limits for triggers, and some trap notification options.
|
NOTE: This release supports only threshold triggers for absolute and delta sampling. |
host1(config)#snmp-server management-event
host1(config-mgmtevent)#?
default Set a command to its default(s)
event Specify what happens when an event is triggered
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
resource Specify the resource limits
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
trigger Specify the conditions that lead to events
Statistics Profile Configuration Mode
In this mode, you can configure a statistics profile. You can then set the rate period during which statistics are gathered, enable statistics gathering, and enable the counting of drop and forwarding events.
From Global Configuration mode, type statistics-profile and the statisticsProfileName that you want to create or configure, and press <Enter>.
host1(config)#statistics-profile statpro-1
host1(config-statistics-profile)#?
committed-drop-threshold Set threshold for logging a committed-drop event
conformed-drop-threshold Set threshold for logging a conformed-drop event
default Set a command to its default(s)
exceeded-drop-threshold Set threshold for logging an exceeded-drop event
exit Exit from the current command mode
forwarding-rate-threshold Set threshold for logging a forwarding-rate event
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
rate-period Set the time period for calculating queue rates
run Run an exec mode command
sleep Make the Command Interface pause for a specified
duration
Subinterface Configuration Mode
In this mode, you can configure one or more virtual interfaces, called subinterfaces, on a single physical interface. The system supports this feature with ATM and Frame Relay.
Both ATM and Frame Relay provide permanent virtual circuits (PVCs) that can be grouped under separate subinterfaces configured on a single physical interface. Subinterfaces allow multiple encapsulations for a protocol on a single interface.
From Interface Configuration mode, indicate a subinterface by typing the interface command and an interfaceSpecifier in slot/port.subinterface format, and then press <Enter>. For example:
host1(config-if)#interface atm 3/2.6
host1(config-subif)#
Subscriber Policy Configuration Mode
In this mode, you can configure a policy (a set of forwarding and filtering rules) that defines how a subscriber (client) bridge group interface should handle various packet types. After you define the policy, use the bridge subscriber-policy command (from Global Configuration mode) to associate the policy with a bridge group interface.
From Global Configuration mode, type the subscriber-policy command followed by an alphanumeric policy name of any character length, and press <Enter>.
host1(config)#subscriber-policy client1
host1(config-policy)#?
arp Modify arp policy
broadcast Modify broadcast policy
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
ip Modify ip policy
log Configure logging settings
macro Run a CLI macro
mpls Modify mpls policy
multicast Modify multicast policy
no Negate a command or set its default(s)
pppoe Modify PPPoE policy
relearn Modify relearn policy
run Run an exec mode command
sleep Make the Command Interface pause for a specified
duration
unicast Modify user-to-user (Unicast) policy
unknown-destination Modify unknown destination policy
unknown-protocol Modify unknown protocol policy
Traffic Class Configuration Mode
In this mode, you can create a traffic class and configure the level of service to packets assigned to the traffic class.
From Global Configuration mode, type the traffic-class command followed by a trafficClassName, and then press <Enter>.
host1(config)#traffic-class test123
host1(config-traffic-class)#?
default Set a command to its default(s)
exit Exit from the current command mode
fabric-strict-priority Allow packets in this class to be dequeued out of the
fabric ahead of other traffic classes
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
Traffic Class Group Configuration Mode
In this mode, you can create and configure traffic class groups, which can contain multiple traffic classes.
From Global Configuration mode, type traffic-class-group command and a trafficClassGroupName, and press <Enter>.
host1(config)#traffic-class-group trafclasnameabcd
host1(config-traffic-class-group)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
traffic-class Set the traffic class belong to this group
Tunnel Profile Configuration Mode
In this mode, you can create and configure MPLS tunnel profiles.
From Global Configuration mode, type mpls tunnels profile and the profileName, and press <Enter>.
host1(config)#mpls tunnels profile storm
host1(config-tunnelprofile)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
tunnel Configure tunnel interface parameters
Tunnel Server Configuration Mode
In this mode, you can configure (provision) the maximum number of tunnel-service interfaces to be used on a dynamic tunnel-server port.
From Global Configuration mode, type tunnel-server and the slot number and port number of the dynamic tunnel-server port, and press <Enter>.
host1(config)#tunnel-server 2/2
host1(config-tunnel-server)#?
default Set a command to its default(s)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
max-interfaces Configure maximum number of tunnel-server interfaces for
dynamic server port
no Negate a command or set its default(s)
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
VRF Configuration Mode
In this mode, you can create and configure VRF parameters for BGP/MPLS VPNs.
From Global Configuration mode, type ip vrf and the vrfName, and press <Enter>. Confirm the new VRF by pressing <Enter>.
host1(config)#ip vrf yankee
Proceed with new vrf creation? [confirm]
host1(config-vrf)#?
default Set a command to its default(s)
description Configure VRF specific description
exit Exit from the current command mode
export Specify VRF export characteristics
help Describe the interactive help system
import Specify VRF import characteristics
ip Configure IP characteristics
log Configure logging settings
macro Run a CLI macro
maximum Specify a maximum limit
no Negate a command or set its default(s)
rd Specify route distinguisher
route-target Specify VPN extended community Target
run Run an exec mode command
sleep Make the Command Interface pause for a specified duration
host1(config-vrf)#