Accessing Command Modes

Table 10 describes the command modes available in the CLI.

Table 10: Command Mode Overview

Mode Name

Use of Mode

Access to Mode

Exit from Mode

AAA Profile Configuration

  • Configure new AAA profiles.
  • From Global Configuration mode, use aaa-profile command.
  • Prompt:
    host1(config-aaa-profile)#
    
  • Use the exit command to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Address Family Configuration

  • Configure BGP or RIP address family parameters.
  • From Global Configuration mode, use router bgp or router rip to enter Router Configuration mode. From Router Configuration, use the address-family command.
  • Prompt:
    host1(config-router-af)#
    
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

ATM VC Class Configuration

  • Configure a class of attributes for an ATM data PVC.
  • From Global Configuration mode, use the vc-class atm command, and specify the name of the VC class.
  • Prompt:
    host1(config-vc-class)#
    
  • Use the exit command to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

ATM VC Configuration

  • Configure individual attributes for an ATM data PVC.
  • From Global Configuration mode, use the interface command to enter Subinterface Configuration mode. From Subinterface Configuration mode, use the pvc command.
  • Prompt:
    host1(config-subif-atm-vc)#
    
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Classifier Group Configuration

  • Configure classifier groups with policy rules used for policy lists.
  • To create a classifier group, from Policy List Configuration mode use the classifier-group command and identify the CLACL and precedence.
  • Prompt:
    host1(config-policy-list-
    classifier-group)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Color Mark Profile Configuration

  • Configure packet color after exit from rate-limit hierarchy.
  • From Rate Limit Profile Configuration Mode, use the color-mark-profile command and identify the interface type (IP, IPv6, MPLS).
  • Prompt:
    host1(config-color-mark-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Control Plane Configuration

  • Configure SRP module policing.
  • From Global Configuration Mode, use the control-plane command.
  • Prompt:
    host1(config-control-plane)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Controller Configuration

  • Configure physical interfaces (for example, T3).
  • From Global Configuration mode, use the controller command.
  • Prompt:
    host1(config-controll)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

DHCP
Local Pool Configuration

  • Configure DHCP local pools.
  • From Global Configuration mode, use the ip dhcp-local pool command.
  • Prompt:
    host1(config-dhcp-local)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Domain Map Configuration

  • Configure domain maps.
  • From Global Configuration mode, use the aaa domain-map command.
  • Prompt:
    host1(config-domain-map)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Domain Map
Tunnel Configuration

  • Configure tunnel parameters.
  • From Domain-Map Configuration mode, use the tunnel command.
  • Prompt:
    host1(config-domain-m
    ap-tunnel)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

DoS Protection Group Configuration

  • Configure parameters for DoS protection groups.
  • From Global Configuration Mode, use the dos-protection-group command.
  • Prompt:
    host1(config-dos-group)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Drop Profile Configuration

  • Configure drop profiles.
  • From Global Configuration mode, use the drop-profile command.
  • Prompt:
    host1(config-drop-profile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Explicit Path Configuration

  • Configure MPLS explicit path parameters.
  • From Global Configuration mode, specify the mpls explicit-path name command.
  • Prompt:
    host1(config-expl-path)#
    
  • Use the exit command to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Flow Cache Configuration

  • Configure parameters for the aggregation cache.
  • From Global Configuration Mode, use the ip flow-aggregation cache command.
  • Prompt:
    host1(config-flow-cache)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Global Configuration

  • Enable a feature or function.
  • Disable a feature or function.
  • Configure a feature or function.
  • From Privileged Exec mode, use the configure command.
  • Prompt:
    host1(config)#
    
  • Use the exit command, or press Ctrl+z to return to Exec mode.
  • Use the interface command to enter Interface Configuration mode.

Interface Configuration

  • Create an interface.
  • Modify the operation of an interface, such as bandwidth or clock rate.
  • From Global Configuration mode, use the interface command and identify the interface by slot/port.
  • Prompt:
    host1(config-if)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IP NAT Pool Configuration

  • Create a NAT pool with a multiple, discontinuous range.
  • From Global Configuration mode, use the ip nat pool command and specify only a prefix length value.
  • Prompt:
    host1(config-ipnat-pool)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IP PIM Data MDT Configuration

  • Create and activate data multicast distribution trees (MDTs)
  • From Global Configuration mode, use the ip pim data-mdt command and specify a name.
  • Prompt:
    host1(config-ip-pim-
    data-mdt)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IP Service Profile Configuration

  • Create a service profile to use in route maps for subscriber management and to authenticate subscribers with RADIUS.
  • From Global Configuration mode, use the ip service-profile command and specify a service profile name with up to 32 ASCII characters.
  • Prompt:
    host1(config-service-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec CA Identity Configuration

  • Create an IPsec identity used in online certificate requests and during negotiations with IKE peers.
  • From the Global Configuration mode, use the ipsec ca identity command.
  • Prompt:
    host1(config-ca-identity)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec Identity Configuration

  • Create an IPsec identity used in offline certificate requests and during negotiations with IKE peers.
  • From the Global Configuration mode, use the ipsec identity command.
  • Prompt:
    host1(config-ipsec-
    identity)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec IKE Policy Configuration

  • Define an IKE policy.
  • From the Global Configuration mode, use the ipsec ike-policy-rule command.
  • Prompt:
    host1(config-ike-policy)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec Manual Key Configuration

  • Enter manual keys.
  • From Global Configuration mode, use the ipsec key manual pre-share command.
  • Prompt:
    host1(config-manual-key)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec Peer Public Key Configuration

  • Enter an ISAKMP/IKE public key that a remote peer uses for RSA authentication without the need for a digital certificate.
  • From Global Configuration mode, use the ipsec key pubkey-chain rsa command.
  • Prompt:
    host1(config-peer-
    public-key)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec Transport Profile Configuration

  • Configure a profile for L2TP over IPsec.
  • From Global Configuration mode, use the ipsec transport profile command.
  • Prompt:
    host1(config-ipsec-transport-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPsec Tunnel Profile Configuration

  • Configure a profile for IPsec tunnels.
  • From Global Configuration mode, use the ipsec tunnel profile command.
  • Prompt:
    host1(config-ipsec-tunnel-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IP Tunnel Destination Profile Configuration

  • Create a profile for dynamic GRE or DVMRP tunnels
  • From Global Configuration mode, use the gre destination profile command or the dvmrp destination profile command and specify a destination profile name.
  • Prompt:
    host1(config-dest-profile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPv6 Local Pool Configuration

  • Configure IPv6 local address pools
  • From Global Configuration mode, use the ipv6 local-pool command, and specify the name of the IPv6 local address pool.
  • Prompt:
    host1(config-ipv6-local)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

IPv6 NdRa Pool Configuration

  • Configure IPv6 local address pools for Neighbor Discovery router advertisements

  • From Global Configuration mode, use the ipv6 local ndra-pool command, and specify the name of the IPv6 local address pool for Neighbor Discovery router advertisements.
  • Prompt:
    host1(config-v6-NdRa)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

L2 Transport Load-Balancing-Circuit Configuration

  • Configure Martini layer 2 transport circuit associated with load-balancing group.
  • From Global Configuration mode, specify the mpls l2transport load-balancing-group command.
  • Prompt:
    host1(config-l2transp
    ort-load-balancing-ci
    rcuit)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

L2TP Destination Profile Configuration

  • Define the location of an LAC.
  • From Global Configuration mode, use the l2tp destination profile command.
  • Prompt:
    host1(config-l2tp-dest-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

L2TP Destination Profile Host Configuration

  • Configure host profile attributes.
  • From L2TP Destination Profile Configuration mode, use the remote host command.
  • Prompt:
    host1(config-l2tp-dest-
    profile-host)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

L2TP Destination Profile Sessions Limit Configuration

  • Define the maximum number of sessions under anL2TP destination profile.
  • From Global Configuration mode, use the l2tp destination profile command to enter L2TP Destination Profile Configuration mode. From L2TP Destination Profile Configuration mode, use the sessions-limit-group command.
  • Prompt:
    host1(config-l2tp-dest-
    profile-sessions-
    limit-group)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

L2TP Tunnel Switch Profile Configuration

  • Configure the L2TP tunnel switching behavior for interfaces to which this profile is assigned.
  • From Global Configuration mode, use the l2tp switch-profile command, and specify the name of the L2TP tunnel switch profile.
  • Prompt:
    host1(config-l2tp-tun
    nel-switch-profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Layer 2 Control Configuration

  • Configure ANCP (L2C) parameters.
  • From Global Configuration mode, use the l2c command.
  • Prompt:
    host1(config-l2c)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Layer 2 Control Neighbor Configuration

  • Configure ANCP (L2C) neighbor parameters.
  • From Layer 2 Configuration mode, use the neighbor command.
  • Prompt:
    host1(config-l2c-
    neighbor)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

LDP Configuration

  • Configure MPLS LDP profile parameters.
  • From Global Configuration mode, specify the mpls ldp profile command.
  • Prompt:
    host1(config-ldp)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Line Configuration

  • Modify a virtual terminal line.
  • From Global Configuration mode, use the line command.
  • Prompt:
    host1(config-line)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Local IPsec Transport Profile Configuration

  • Configure preshared IKE keys for L2TP over IPsec profiles.
  • From the IPsec Transport Profile Configuration mode, use the local ip address command.
  • Prompt:
    host1(config-ipsec-transport-
    profile-local)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Local User Configuration

  • Configure user parameters in local user databases.
  • From Global Configuration mode, specify the aaa local username or the aaa local database command.
  • Prompt:
    host1(config-local-user)#
    
  • Use the exit command to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Map Class Configuration

  • Specify fragmentation for a map class.
  • From Global Configuration mode, specify the map-class frame-relay command.
  • Prompt:
    host1(config-map-class)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Map List Configuration

  • Configure map list parameters.
  • From Global Configuration mode, use the map-list command.
  • Prompt:
    host1(config-map-list)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Parent Group Configuration

  • Configure an external parent group.
  • From Global Configuration mode, use the parent-group command.
  • Prompt:
    host1(config-parent-group)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Policy List Configuration

  • Configure policy lists.
  • To create a policy list, from Global Configuration mode use the policy-list command and identify the type of policy list.
  • Prompt:
    host1(config-policy-list)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Policy List Parent Group Configuration

  • Configure an internal parent group in a hierarchy.
  • From Global Configuration Mode, use the policy-list command to create or access a policy list. From Policy List Configuration Mode, use the parent-group command.
  • Prompt:
    host1(config-policy-l
    ist-parent-group)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Policy Parameter Configuration

  • Configure a policy parameter.
  • From Global Configuration mode, use the policy-parameter command.
  • Prompt:
    host1(config-policy-parameter)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

PPPoE Service Name Table Configuration

  • Configure services for a PPPoE service name table.
  • From Global Configuration mode, use the pppoe-service-name-table command, and specify the alphanumeric name of the PPPoE service name table.
  • Prompt:
    host1(config-pppoe-service-
    name-table)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Privileged Exec

  • Show system information.
  • Set operating parameters.
  • Access Global Configuration mode.
  • From User Exec mode, use the enable command.
  • Prompt:
    host1#
    
  • Use the disable command to return to User Exec mode.
  • Use the exit command to log out of the CLI.
  • Use the configure command to enter Global Configuration mode.

Profile Configuration

  • Configure profiles.
  • From Global Configuration mode, use the profile command.
  • Prompt:
    host1(config-profile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

QoS Interface Set Configuration

  • Configure QoS interface sets.
  • From Global Configuration mode, use the qos-interface-set command.
  • Prompt:
    host1(config-qos-
    interface-set)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

QoS Interface Superset Configuration

  • Configure QoS interface supersets.
  • From Global Configuration mode, use the qos-interface-superset command.
  • Prompt:
    host1(config-qos-
    interface-superset)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

QoS Parameter Definition Configuration

  • Configure QoS parameter definitions.
  • From Global Configuration mode, use the qos-parameter-define command.
  • Prompt:
    host1(config-qos-
    parameter-define)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

QoS Profile Configuration

  • Configure QoS profiles.
  • From Global Configuration mode, use the qos-profile command.
  • Prompt:
    host1(config-qos-profile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

QoS Shared Shaper Control Configuration

  • Configure variables within the simple shared shaper algorithm.
  • From Global Configuration mode, use the qos-shared-shaper-control command.
  • Prompt:
    host1(config-qos-shar
    ed-shaper-control)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Queue Profile Configuration

  • Configure queue profiles.
  • From Global Configuration mode, use the queue-profile command.
  • Prompt:
    host1(config-queue)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

RADIUS Configuration

  • Configure Broadband Remote Access Server (B-RAS) parameters.
  • From Global Configuration mode, use a radius server command.
  • Prompt:
    host1(config-radius)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

RADIUS Relay Configuration

  • Configure RADIUS relay server parameters.
  • From Global Configuration mode, use the radius relay server command.
  • Prompt:
    host1(config-radius-relay)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Rate Limit
Profile Configuration

  • Configure an IP or L2TP rate limit parameters.
  • To create an IP rate limit profile, from Global Configuration mode use the ip rate-limit-profile command.
  • To create an L2TP rate limit profile, from Global Configuration mode use the l2tp rate-limit-profile command.
  • Prompt:
    host1(config-rate-limit-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Redundancy Configuration

  • Configure high availability (stateful SRP switchover).
  • From Global Configuration mode, use the redundancy command.
  • Prompt:
    host1(config-redundancy)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Remote Neighbor Configuration

  • Configure remote neighbor parameters for OSPF, PIM, or RIP.
  • From Router Configuration mode, use the remote-neighbor command.
  • Prompt:
    host1(config-router-rn)#
    
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Route Map Configuration

  • Configure routing tables and source and destination information.
  • From Global Configuration mode, use the route-map command.
  • Prompt:
    host1(config-route-map)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Router Configuration

  • Configure a routing protocol.
  • From Global Configuration mode, specify a routing protocol with the router command.
  • Prompt:
    host1(config-router)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

RSVP Configuration

  • Configure an RSVP profile.
  • From Global Configuration mode, use the mpls rsvp profile command.
  • Prompt:
    host1(config-rsvp)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

RTR Configuration

  • Configure RTR parameters.
  • From Global Configuration mode, use the rtr command.
  • Prompt:
    host1(config-rtr)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Scheduler Profile Configuration

  • Configure shaping parameters.
  • Configure scheduler profiles.
  • From Global Configuration mode, use the scheduler-profile command.
  • Prompt:
    host1(config-scheduler-
    
    profile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec menu.

Service Session Profile Configuration

  • Configure attributes for Service Manager service session profiles.
  • From Global Configuration mode, use the service-management service-session-profile command.
  • Prompt:
    host1(config-service-session-
    profile)#
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

SNMP Event Manager Configuration

  • Configure SNMP events.
  • From Global Configuration mode, use the snmp-server management-event command.
  • Prompt:
    host1(config-mgmtevent)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec menu.

Statistics Profile Configuration

  • Configure statistics profiles.
  • From Global Configuration mode, use the statistics-profile command.
  • Prompt:
    host1(config-statistics-
    profile)#
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec menu.

Subinterface Configuration

  • Configure multiple virtual interfaces on a single physical interface.
  • From Global Configuration mode, use the interface command and identify the interface (slot/port.subinterface).
  • Prompt:
    host1(config-subif)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Subscriber Policy Configuration

  • Configure a nondefault subscriber policy for a subscriber (client) bridge group interface.
  • From Global Configuration mode, use the subscriber-policy command and specify the alphanumeric name of the subscriber policy.
  • Prompt:
    host1(config-policy)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Traffic Class Configuration

  • Configure a traffic class.
  • From Global Configuration mode, use the traffic-class command.
  • Prompt:
    host1(config-traffic-class)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Traffic Class Group Configuration

  • Configure a traffic class group.
  • From Global Configuration mode, use the traffic-class-group command.
  • Prompt:
    host1(config-traffic-class-
    group)
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Tunnel Group Configuration

  • Add up to 31 tunnel definitions to a tunnel group.
  • From Global Configuration mode, use the aaa tunnel-group command and specify the name of the tunnel.
  • Prompt:
    host1(config-tunnel-group)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Tunnel Group Tunnel Configuration

  • Configure attributes for a tunnel group tunnel.
  • From Tunnel Group Configuration mode, use the tunnel command and specify the tag value (1-31) of the tunnel.
  • Prompt:
    host1(config-tunnel-group-
    tunnel)#
  • Use the exit command twice to return to Global Configuration Mode.
  • Press Ctrl+z to return to Exec mode.

Tunnel Profile Configuration

  • Configure tunnel profile parameters.
  • From Global Configuration mode, specify the mpls tunnels profile command.
  • Prompt:
    host1(config-tunnelprofile)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Tunnel Server Configuration

  • Configure the maximum number of tunnel-service interfaces for a dynamic tunnel-server port.
  • From Global Configuration mode, use the tunnel-server command and identify the slot/port location of the dynamic tunnel-server port.
  • Prompt:
    host1(config-tunnel-server)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

User Exec

  • Change terminal settings on a temporary basis.
  • Show system information.
  • Access Privileged Exec mode.
  • Log into system.
  • Prompt:
    host1>
    
  • Use the enable command to enter Privileged Exec mode.
  • Use the exit command to log out of the CLI.

VRF Configuration

  • Configure VRF parameters for BGP/MPLS VPNs.
  • From Global Configuration mode, use the ip vrf command.
  • Prompt:
    host1(config-vrf)#
    
  • Use the exit command once to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

VR Group Configuration

  • Configure a virtual router group for AAA broadcast accounting.
  • From Global Configuration mode, use aaa accounting vr-group to enter VR Group Configuration mode.
  • Prompt:
    host1(config-vr-group)#
    
  • Use the exit command twice to return to Global Configuration mode.
  • Press Ctrl+z to return to Exec mode.

Note: Within any configuration mode, the commands that are available to the user include the commands defined for that configuration mode and all commands defined for Global Configuration mode. See Figure 21. For example, from Router Configuration mode, you could use the interface Global Configuration mode command without first explicitly going back to Global Configuration mode.

host1(router-config)# interface atm 4/0.3 host1(config-if)#

Exec Modes

There are two Exec modes: User Exec and Privileged Exec.

After you log in to the system, the CLI is in User Exec mode. By default, the commands you can execute from User Exec mode provide only user-level access; however, you should password protect it to prevent unauthorized use. The User Exec commands allow you to perform such functions as:

Privileged Exec mode provides privileged-level access and therefore should also be password protected to prevent unauthorized use. Privileged Exec commands allow you to perform such functions as:

Password Protection

If the system administrator has configured the system to have a password, the CLI prompts you to enter that password before you receive access to Privileged Exec mode. The password is case sensitive and appears as asterisks on the screen.

To access Privileged Exec mode:

  1. At the prompt, type enable and press Enter.
    host1>enable Password:
  2. At the password prompt, type your password and press Enter.
    Password:*********host1#

    Note: The > character in the command-line prompt changes to the # character.

    host1# ?
      baseline          Set a baseline for statistics
      clear             Clear a state
      clock             Set the system's clock
      configure         Enter Global Configuration mode
      copy              Copy files
      debug             Configure debugging functions
      default           Set a command to its default(s)
      delete            Delete a local file
      dir               Display a list of local files
      disable           Reduce the command privilege level
      disconnect        Disconnect remote CLI session
      enable            Enable access to privileged commands
      exit              Exit from the current command mode
      flash-disk        Perform flash disk operations
      halt              Halt the system in preparation for power down
      help              Describe the interactive help system
      ip                Configure IP attributes on an interface
      ipv6              Configure IPv6 attributes
      l2tp              L2TP operations
      log               Configure logging settings
      logout            Logout PPP Subscribers
      macro             Run a CLI macro
      more              Display contents of a file
      mpls              Execute MPLS commands
      mtrace      	      Trace the path that packets will traverse from source
                  	      to destination for a given group
      no                Negate a command or set its default(s)
      ping              Send echo request to remote host
      pppoe             Set PPPoE information
      profile-reassign  Perform profile reassignment
      redundancy        Perform a redundancy action
      reload            Halt and perform a cold restart
      rename            Rename a local file
      send              Send a message to specified lines
      show              Display system information
      sleep             Make the Command Interface pause for a specified
                        duration
      srp               Perform SRP operations
      synchronize       Manually synchronize redundant system controller file
                        system
      telnet            Access a remote system via telnet
      terminal          Configure the terminal line settings
      test              Test the outcome of a command
      traceroute        Trace the path that packets traverse to their
                        destination
      undebug           Disable debug logging functions
      virtual-router    Specify a virtual router
      write             Write the system's running configuration to a
                        destination
    

In addition, you can execute a script file (.scr), which is simply a file containing a sequence of CLI commands, through the configure command.

Global Configuration Mode

Within Global Configuration mode, you can:

To access Global Configuration mode, you begin in Privileged Exec mode. Type configure terminal and press Enter.

host1#configure terminal Enter configuration commands, one per line. End with ^Z.host1(config)#

The system is now in Global Configuration mode.

Executing a Script File

To execute a script file:

  1. From Privileged Exec mode, type configure and the filename you want to execute, and press Enter.
    host1#configure file File name:/myFile.scr Proceed with configure? [confirm]

    Note: The filename must end with an .scr extension, and the file must contain a series of valid CLI commands. The file can be a local file on the router or a remote file on a host system.

  2. Press y or Enter to confirm; pressing any other key aborts the procedure.
    host1#

For more information, see File Management Overview.

AAA Profile Configuration Mode

From this mode, you can restrict or allow the use of domain names, translate an original domain name to a new domain name, or create domain name aliases.

From Global Configuration mode, type the aaa profile command and a profileName, and then press Enter.

host1(config)#aaa profile charlie
host1(config-aaa-profile)#?
  allow      Configure the authorization domain name
  default    Set a command to its default(s)
  deny       Configure the authorization domain name
  do         Run an exec mode command (alias command run)
  exit       Exit from the current command mode
  help       Describe the interactive help system
  log        Configure logging settings
  macro      Run a CLI macro
  no         Negate a command or set its default(s)
  run        Run an exec mode command (alias command do)
  sleep      Make the Command Interface pause for a specified duration
  translate  Configure the translation map for domain name

Address Family Configuration Mode

From this mode, you can configure address family parameters for BGP VPN services or RIP VPN services.

From Global Configuration mode, type the router bgp command to enter Router Configuration mode for BGP. Type either the address-family ipv4 or address-family vpnv4 command, and then press Enter.

host1(config)#router bgp 100
host1(config-router)#address-family ?
  ipv4   Configure IPv4 address family
  vpnv4  Configure VPN-IPv4 address family

From Global Configuration mode, type the router rip command to enter Router Configuration mode for RIP. Type the address-family ipv4 command, and then press Enter.

host1(config)#router rip 100
host1(config-router)#address-family ?
  ipv4   Configure IPv4 address family

ATM VC Configuration Mode

In this mode, you can configure individual attributes for an ATM data PVC. These attributes include the service category, encapsulation method, Inverse Address Resolution Protocol (Inverse ARP), and F5 Operation, Administration, and Management (OAM) parameters.

From Global Configuration mode, type the interface command and specify the ATM subinterface identifier to enter Subinterface Configuration mode. From Subinterface Configuration mode, type the pvc command and specify the virtual circuit descriptor (VCD), virtual path identifier (VPI) and virtual circuit identifier (VCI) values (in the format vpi/vci), and then press Enter.

host1(config)#interface atm 3/2.1
host1(config-subif)#pvc 100 0/100
host1(config-subif-atm-vc)#?
  cbr            Configure the Constant Bit Rate (CBR) service class
  class-vc       Assign a Virtual Circuit class to the Permanent Virtual
                 Circuit 
  default        Set a command to its default(s)
  do             Run an exec mode command (alias command run)
  encapsulation  Configure the ATM encapsulation
  exit           Exit from the current command mode
  help           Describe the interactive help system
  inarp          Configure the Inverse Address Resolution Protocol (InARP)
                 protocol
  log            Configure logging settings
  macro          Run a CLI macro
  no             Negate a command or set its default(s)
  oam            Configure Operations, Administration, and Management (OAM)
  oam-pvc        Configure Operations, Administration, and Management (OAM) for
                 Permanent Virtual Circuit (PVC)
  run            Run an exec mode command (alias command do)
  sleep          Make the Command Interface pause for a specified duration
  ubr            Configure the Unspecified Bit Rate (UBR) service class
  vbr-nrt        Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
                 service class
  vbr-rt         Configure the Variable Bit Rate Real Time (VBR-rt) service
                 class 

ATM VC Class Configuration Mode

In this mode, you can configure a class of attributes for an ATM data PVC. The VC class can include attributes for the service category, encapsulation method, F5 OAM options, and Inverse ARP. You then apply the set of attributes as a group by assigning the VC class to an individual PVC, to all PVCs created on a specified ATM major interface, to all PVCs created on a specified ATM 1483 subinterface, or to a base profile from which bulk-configured VC ranges are dynamically created.

From Global Configuration mode, type the vc-class atm command followed by an alphanumeric VC class name of up to 32 characters, and press Enter.

host1(config)#vc-class atm premium-subscriber-class
host1(config-vc-class)#?
  cbr            Configure the Constant Bit Rate (CBR) service class
  default        Set a command to its default(s)
  do             Run an exec mode command (alias command run)
  encapsulation  Configure the ATM encapsulation
  exit           Exit from the current command mode
  help           Describe the interactive help system
  inarp          Configure the Inverse Address Resolution Protocol (InARP)
                 protocol
  log            Configure logging settings
  macro          Run a CLI macro
  no             Negate a command or set its default(s)
  oam            Configure Operations, Administration, and Management (OAM)
  oam-pvc        Configure Operations, Administration, and Management (OAM) for
                 Permanent Virtual Circuit (PVC)
  run            Run an exec mode command (alias command do)
  sleep          Make the Command Interface pause for a specified duration
  ubr            Configure the Unspecified Bit Rate (UBR) service class
  vbr-nrt        Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
                 service class
  vbr-rt         Configure the Variable Bit Rate Real Time (VBR-rt) service
                 class 

Classifier Group Configuration Mode

In this mode, you can configure the set of rules for a classification group in a policy list that you can attach to an interface.

From Policy List Configuration mode, type the classifier-group command and its attributes, and then press Enter.

host1(config-policy-list)#classifier-group ipCLACL10 precedence 75
host1(config-policy-list-classifier-group)#?
  color               Create a color policy
  default             Set a command to its default(s)
  do                  Run an exec mode command (alias command run)
  exit                Exit from the current command mode
  filter              Create a filter policy
  forward             Create a forward policy
  help                Describe the interactive help system
  log                 Configure logging settings
  macro               Run a CLI macro
  mark                Create a set TOS byte policy
  next-hop            Create a next-hop policy
  next-interface      Create a next-interface policy
  no                  Negate a command or set its default(s)
  rate-limit-profile  Create a rate-limit policy
  run                 Run an exec mode command (alias command do)
  sleep               Make the Command Interface pause for a specified duration
  suspend             Suspend a policy rule
  traffic-class       Create a traffic class policy
  user-packet-class   Create a user packet class policy 

Color Mark Profile Configuration Mode

In this mode, you can configure translation for a color to a type-dependent mark for TOS or EXP for an IP, IPv6 or MPLS interface.

From Rate Limit Profile Configuration mode, type the color-mark-profile command and specify a profileName, and then press Enter.

host1(config-rate-limit-profile)# mpls   color-mark-profile myprofile
host1(config-color-mark-profile)#?
  default      Set a command to its default(s)
  do           Run an exec mode command (alias command run)
  exit         Exit from the current command mode
  green-mark   Apply TOS mark to IP packets classified Green by the rate limit
               hierarchy
  help         Describe the interactive help system
  log          Configure logging settings
  macro        Run a CLI macro
  mask-value   Mask for all TOS values applied by the color-mark profile
  no           Negate a command or set its default(s)
  red-mark     Apply TOS mark to IP packets classified Red by the rate limit
               hierarchy
  run          Run an exec mode command (alias command do)
  sleep        Make the Command Interface pause for a specified duration
  yellow-mark  Apply TOS mark to IP packets classified Yellow by the rate limit
               hierarchy 

Control Plane Configuration Mode

In this mode, you can configure policing for a specific protocol.

From Global Configuration mode, type the control-plane command and press Enter.

host1(config)#control-plane
host1(config-control-plane)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  policer  Configure policing
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Controller Configuration Mode

You can configure physical interfaces such as a T3 in Controller Configuration mode.

From Global Configuration mode, type the appropriate controller command and its attributes, and then press Enter.

host1(config)#controller t3 9/1
host1(config-controll)#
host1(config)#controller ?
  e1     Configure a channelized E1 controller
  e3     Configure a E3 controller
  sonet  Configure a Sonet controller
  t1     Configure a channelized T1 controller
  t3     Configure a T3 controller

DHCP Local Pool Configuration Mode

In this mode, you can configure DHCP local pools. For example, you can specify a DNS or NetBIOS server.

From Global Configuration mode, type the command ip dhcp-local pool and a poolName, and then press Enter.

host1(config)#ip dhcp-local pool charlie
host1(config-dhcp-local)#?
  default                   Set a command to its default(s)
  default-router            The default-router to use for this pool
  dns-server                The dns-server to use for this pool
  do                        Run an exec mode command (alias command run) 
  domain-name               The domain name for the pool
  exit                      Exit from the current command mode
  grace-period              The grace period to be applied to leases 
  help                      Describe the interactive help system
  lease                     The lease time for addresses from this pool
  link                      Link to another DHCP Pool
  log                       Configure logging settings
  macro                     Run a CLI macro
  netbios-name-server       The netbios-name-server to use for this pool
  netbios-node-type         The netbios-node-type to use for this pool
  network                   The network specified for this pool
  no                        Negate a command or set its default(s)
  reserve                   Reserve an ip address for a specific Mac Address
  run                       Run an exec mode command (alias command do) 
  server-address            The DHCP Server address to send to clients
  sleep                     Make the Command Interface pause for a specified
                            duration
  snmpTrap                  Enable snmp pool utilization traps
  use-release-grace-period  Apply the grace period to released leases 
  warning                   Configure utilization warnings

Domain Map Configuration Mode

In this mode, you can map a user domain name to a virtual router and loopback interface.

From Global Configuration mode, type the aaa domain-map command and the domain name value as found in the client’s login name. Then press Enter.

host1(config)#aaa domain-map charlie76
host1(config-domain-map)#?
  address-pool-name  Configure the address-pool-name for the domain name
  atm                Configure ATM parameters
  default            Set a command to its default(s)
  do                  Run an exec mode command (alias command run)
  exit               Exit from the current command mode
  help               Describe the interactive help system
  ip-hint            Configure the IP hint feature for the domain
  local-interface    Configure the local interface value for remote clients
  log                Configure logging settings
  loopback           Configure the loopback interface to use when RX has an
                     unnumbered interface to the PPP client
  macro              Run a CLI macro
  no                 Negate a command or set its default(s)
  override-user      Configure the username and password values to use instead
                     of the values from the remote client
  padn               Configure pppoe active discovery network parameters for
                     the domain name
  router-name        Configure the virtual-router for the domain name
  run                Run an exec mode command (alias command do)
  sleep              Make the Command Interface pause for a specified duration
  strip-domain       Configure the domain name stripping feature for the domain
  tunnel             Configure tunnel tag
  virtual-router     Configure the virtual-router for the domain name

Domain Map Tunnel Configuration Mode

In this mode, you can configure tunnel parameters such as the tunnel’s endpoint.

From Domain-Map Configuration mode, type tunnel and a tunnelNumber, and press Enter.

host1(config-domain-map)#tunnel 17
host1(config-domain-map-tunnel)#?
  address         Configure tunnel endpoint address
  client-name Configure the client hostname of the tunnel
  default         Set a command to its default(s)
  exit            Exit from the current command mode
  do              Run an exec mode command (alias command run)
  help            Describe the interactive help system
  hostname        Configure the client hostname of the tunnel
  identification  Configure tunnel identification
  log             Configure logging settings
  macro           Run a CLI macro
  max-sessions    Configure maximum sessions for this tunnel
  medium          Configure tunnel medium
  no              Negate a command or set its default(s)
  password        Configure tunnel password
  preference      Configure tunnel preference
  run             Run an exec mode command (alias command do)
  server-name     Configure the remote hostname for the tunnel
  sleep           Make the Command Interface pause for a specified duration
  source-address  Configure tunnel source address
  type            Configure tunnel type

DoS Protection Group Configuration Mode

In this mode, you can configure parameters for Denial of Service (DoS) protection groups.

From Global Configuration mode, type the dos-protection-group command and press Enter.

host1(config)#dos-protection-group
host1(config-dos-protection)#?
  default   Set a command to its default(s)
  do        Run an exec mode command (alias command run)
  exit      Exit from the current command mode
  help      Describe the interactive help system
  log       Configure logging settings
  macro     Run a CLI macro
  no        Negate a command or set its default(s)
  priority  Specify the priority
  protocol  Specify the protocol
  run       Run an exec mode command (alias command do)
  sleep     Make the Command Interface pause for a specified duration
  use       Configure usagehost1(config-dos-protection-group)#?

Drop Profile Configuration Mode

In this mode, you can configure drop profiles for QoS. Drop profiles control RED dropping behavior.

From Global Configuration mode, type the drop-profile command, and press Enter.

host1(config)#drop profile
host1(config-drop-profile)#?
  average-length-exponent  Select TAQL coefficient
  committed-threshold      Specify committed queue thresholds and maximum drop
                           probability
  conformed-threshold      Specify conformed queue thresholds and maximum drop
                           probability
  default                  Set a command to its default(s)
  do                       Run an exec mode command (alias command run)
  exceeded-threshold       Specify exceeded queue thresholds and maximum drop
                           probability
  exit                     Exit from the current command mode
  help                     Describe the interactive help system
  log                      Configure logging settings
  macro                    Run a CLI macro
  no                       Negate a command or set its default(s)
  run                      Run an exec mode command (alias command do)
  sleep                    Make the Command Interface pause for a specified duration

Explicit Path Configuration Mode

From this mode, you can name and configure an explicit path within MPLS.

From Global Configuration mode, type mpls explicit-path name and the explicitPathName, and press Enter.

host1(config)#mpls explicit-path name xyz
host1(config-expl-path)#?
  append-after  Add an entry after a specified index
  default       Set a command to its default(s)
  do            Run an exec mode command (alias command run)
  exit          Exit from the current command mode
  help          Describe the interactive help system
  index         Specify the index of the entry to be added or edited
  list          List part or all of the entries in current explicit path
  log           Configure logging settings
  macro         Run a CLI macro
  next-address  Configure an IP address at the last hop of the explicit path
  no            Negate a command or set its default(s)
  run           Run an exec mode command (alias command do)
  sleep         Make the Command Interface pause for a specified duration

Flow Cache Configuration Mode

In this mode, you can configure parameters for the aggregation cache.

From Global Configuration mode, type the ip flow-aggregation cache command and press Enter.

host1(config)#ip flow-aggregation cache
host1(config-flow-cache)#?
  cache    Configure Flow Stats cache parameters
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  enabled  Start flow cache operation
  exit     Exit from the current command mode
  export   Configure Flow-Cache export parameters
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Interface Configuration Mode

From Interface Configuration mode, you can enable many system features for each interface you create. Interface Configuration commands allow you to:

From Global Configuration mode, type interface and identify the interface you want to configure and press Enter.

host1(config)#interface atm 0/1 host1(config-if)#

The CLI is now in Interface Configuration mode.

host1(config)#interface ?
  atm              ATM interface
  fastEthernet     IEEE 802.3 fastEthernet interface
  gigabitEthernet  IEEE 802.3 gigabitEthernet interface
  hssi             High Speed Serial interface
  ip               Ip shared interface
  ipv6             Ipv6 shared interface
  lag              Link Aggregation interface
  loopback         Loopback interface
  mlframe-relay    Multilink frame-relay interface
  mlppp            Multilink PPP interface
  null             Null interface
  pos              Packet over SONET interface
  serial           Serial interface
  tunnel           Tunnel interface 

Some Interface Configuration commands can affect general interface parameters, such as bandwidth and clock rate. For interface-specific commands, such as commands for ATM interfaces, see the appropriate chapter in this documentation set.

Note: Although it appears in the list of configurable interfaces, you cannot configure any values on a null interface. For information about using the null interface, see JunosE IP Services Configuration Guide.

IP NAT Pool Configuration Mode

In this mode, you can specify the information that the system uses in creating IP Network Address Translation (NAT) pools. From Global Configuration mode, type ip nat pool multiplerange prefix-length and press Enter.

host1(config)#ip nat pool multiplerange prefix-length 30
host1(config-ipnat-pool)#?
  address  Configure address ranges
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

IP PIM Data MDT Configuration Mode

In this mode, you can specify parameters for data MDTs.

From Global Configuration mode, type ip pim data-mdt, and press Enter:

host1:pe1:pe13(config)#ip pim data-mdt
host1:western:eastern(config-ip-pim-data-mdt)#?
  default           Set a command to its default(s)
  do                Run an exec mode command (alias command run)
  exit              Exit from the current command mode
  help              Describe the interactive help system
  log               Configure logging settings
  macro             Run a CLI macro
  mdt-data-delay    Configure MDT_DATA_DELAY timeout
  mdt-data-holdown  Configure MDT_DATA_HOLDOWN timeout
  mdt-data-timeout  Configure MDT_DATA_TIMEOUT
  mdt-interval      Configure MDT_INTERVAL timer
  no                Negate a command or set its default(s)
  route-map         Configure route-map
  run               Run an exec mode command (alias command do)
  sleep             Make the Command Interface pause for a specified duration
  tunnel            Configure tunnel parameters 

IP Service Profile Configuration Mode

In this mode, you can specify the information that the system uses in creating IP service profiles.

From Global Configuration mode, type ip service-profile and the service profile name, and press Enter.

host1(config)#ip service-profile radius
host1(config-service-profile)#?
  default      Set a command to its default(s)
  do           Run an exec mode command (alias command run)
  domain       Configure a username domain
  exit         Exit from the current command mode
  help         Describe the interactive help system
  include      Configure an attribute to be included in a username
  log          Configure logging settings
  macro        Run a CLI macro
  no           Negate a command or set its default(s)
  password     Configure a user password
  run          Run an exec mode command (alias command do)
  sleep        Make the Command Interface pause for a specified duration
  user-name    Configure a user name
  user-prefix  Configure a username prefix 

IPsec CA Identity Configuration Mode

In this mode, you can specify the information that the system uses in online certificate requests and during negotiations with its peers.

From Global Configuration mode, type ipsec ca identity, and press Enter.

host1(config)#ipsec ca identity    
host1(config-ca-identity)#?
  crl                Certificate Revocation List checking
  default            Set a command to its default(s)
  do                 Run an exec mode command (alias command run)
  enrollment         Configure enrollment parameters
  exit               Exit from the current command mode
  help               Describe the interactive help system
  issuer-identifier  issuer identifier
  log                Configure logging settings
  macro              Run a CLI macro
  no                 Negate a command or set its default(s)
  root               Specify root proxy
  run                Run an exec mode command (alias command do)
  sleep              Make the Command Interface pause for a specified 

IPsec Identity Configuration Mode

In this mode, you can specify the information that the system uses in offline certificate requests and during negotiations with its peers.

From Global Configuration mode, type ipsec identity, and press Enter.

host1(config)#ipsec identity    
host1(config-ipsec-identity)#?
  common-name   Common Name
  country       Country name
  default       Set a command to its default(s)
  do            Run an exec mode command (alias command run)
  domain-name   Domain name
  exit          Exit from the current command mode
  help          Describe the interactive help system
  log           Configure logging settings
  macro         Run a CLI macro
  no            Negate a command or set its default(s)
  organization  Organization name
  sleep         Make the Command Interface pause for a specified duration

IPsec IKE Policy Configuration Mode

In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.

From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber, and press Enter.

host1(config)#ipsec ike-policy-rule 10
host1(config-ike-policy)#?
  aggressive-mode  Allows aggressive mode negotiation for the tunnel
  authentication   Configure the authentication method
  default          Set a command to its default(s)
  do               Run an exec mode command (alias command run)
  encryption       Configure the encryption algorithm within an IKE policy
  exit             Exit from the current command mode
  group            Configure the Diffie-Hellman group identifier
  hash             Configure the hash algorithm within an IKE policy
  help             Describe the interactive help system
  lifetime         Configure the time an SA will live before expiration
  log              Configure logging settings
  macro            Run a CLI macro
  no               Negate a command or set its default(s)
  run              Run an exec mode command (alias command do)
  sleep            Make the Command Interface pause for a specified duration

IPsec Manual Key Configuration Mode

In this mode, you can enter the manual key that a peer uses for authentication during the tunnel establishment phase.

From the Global Configuration mode, type ipsec key manual pre-share and the peerIPaddress, and press Enter.

host1(config)#ipsec key manual pre-share 10.10.1.1
host1(config-manual-key)#?
  default     Set a command to its default(s)
  do          Run an exec mode command (alias command run)
  exit        Exit from the current command mode
  help        Describe the interactive help system
  key         Manually specify a key
  log         Configure logging settings
  macro       Run a CLI macro
  masked-key  Enter a masked key (not for manual entry, show config generates)
  no          Negate a command or set its default(s)
  run         Run an exec mode command (alias command do)
  sleep       Make the Command Interface pause for a specified duration

IPsec Peer Public Key Configuration Mode

In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses for RSA authentication during the tunnel establishment phase without the need for a digital certificate.

From Global Configuration mode, type ipsec key pubkey-chain rsa and either the IP address or fully qualified domain name of the remote peer, and press Enter.

host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5
host1(config-peer-public-key)#?
  default     Set a command to its default(s)
  do          Run an exec mode command (alias command run)
  exit        Exit from the current command mode
  help        Describe the interactive help system
  key-string  Enter key string
  log         Configure logging settings
  macro       Run a CLI macro
  no          Negate a command or set its default(s)
  run         Run an exec mode command (alias command do)
  sleep       Make the Command Interface pause for a specified duration

IPsec Transport Profile Configuration Mode

In this mode, you can configure an IP Security (IPsec) transport profile, which is used for Layer 2 Tunneling Protocol (L2TP) over IPsec connections.

From the Global Configuration mode, type ipsec transport profile, the profileName, virtual-router vrName, ip address ipAddress, and press Enter.

host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0 
host1(config-ipsec-transport-profile)#?  
  application    Configure the application type that is protected by the l2tp
  default        Set a command to its default(s)
  do             Run an exec mode command (alias command run)
  exit           Exit from the current command mode
  help           Describe the interactive help system
  lifetime       Configure the renegotiation time
  local          Configure local endpoint of the transport connection
  log            Configure logging settings
  macro          Run a CLI macro
  no             Negate a command or set its default(s)
  pfs            Configure perfect forward secrecy
  run            Run an exec mode command (alias command do)
  sleep          Make the Command Interface pause for a specified duration
  transform-set  Configure the transform set used by ipsec transport profile

IPsec Tunnel Profile Configuration Mode

In this mode, you can configure a profile of an IPsec tunnel.

From Global Configuration mode, type ipsec tunnel profile and the profileName, and press Enter.

host1(config)#ipsec tunnel profile profile1
host1(config-ipsec-tunnel-profile)#?
  default                  Set a command to its default(s)
  do                       Run an exec mode command (alias command run)
  domain-suffix            Configure a domain suffix to be appended to users on
                           this profile
  exit                     Exit from the current command mode
  extended-authentication  Configure extended authentication parameters
  help                     Describe the interactive help system
  ike                      Configure IKE characteristics
  ip                       Configure local IP characteristics
  lifetime                 Configure the phase 2 life parameters
  local                    Configure local characteristics
  log                      Configure logging settings
  macro                    Run a CLI macro
  max-interfaces           Configure the maximum allowed dynamic interface
                           instantiations
  no                       Negate a command or set its default(s)
  peer                     Configure peer characteristics
  pfs                      Configure the phase 2 perfect forward secrecy
  run                      Run an exec mode command (alias command do)
  sleep                    Make the Command Interface pause for a specified
                           duration
  transform                Configure the phase 2 transforms allowed on this
                           IPSEC tunnel profile
  tunnel                   Configure tunnel parameters

IP Tunnel Destination Profile Mode

In this mode, you can specify parameters for GRE or DVMRP dynamic tunnels.

From Global Configuration mode, type gre destination profile or dvmrp destination profile and the destination profile name, and press Enter.

host1(config)#gre destination profile global
host1(config-dest-profile)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  enable   Enable a tunnel parameter
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  profile  Assign a profile
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  tunnel   Configure a tunnel parameter 
host1(config)#dvmrp destination profile global
host1(config-dest-profile)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  enable   Enable a tunnel parameter
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  profile  Assign a profile
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  tunnel   Configure a tunnel parameter 

IPv6 Local Pool Configuration Mode

In this mode, you can specify the IPv6 local address pool from which prefixes are allocated to the requesting router in networks that use DHCPv6. From Global Configuration mode, type ipv6 local pool poolName and press Enter.

host1(config)#ipv6 local pool dhcpv6pd_pool
host1(config-v6–locall)#?
  default            Set a command to its default(s)
  dns-domain-search  Specify a search domain
  dns-server         Specify the IPv6 DNS server address
  do                 Run an exec mode command (alias command run)
  exclude-prefix     Specify prefix(es) to be excluded from allocation
  exit               Exit from the current command mode
  help               Describe the interactive help system
  log                Configure logging settings
  macro              Run a CLI macro
  no                 Negate a command or set its default(s)
  prefix             Specify the IPv6 prefix range
  run                Run an exec mode command (alias command do)
  sleep              Make the Command Interface pause for a specified duration

  

Note: You must enable the IPv6 local address pool feature to be able to configure IPv6 local address pools.

L2 Transport Load-Balancing-Circuit Configuration Mode

In this mode, you can specify a member subinterface for a Martini layer 2 circuit that is associated with a load-balancing group.

From Global Configuration mode, type mpls l2transport load-balancing-group, specify a group number and a Martini circuit, and press Enter.

host1(config)#mpls l2transport load-balancing-group 100 mpls-relay 10.1.1.1 30
host1(config-l2transport-load-balancing-circuit)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  member   Configure members of a l2transport load-balancing circuit
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration 

L2TP Destination Profile Configuration Mode

In this mode, you can create the destination profile that defines the location of an L2TP Access Concentrator (LAC) and define the attributes used when an L2TP Network Server (LNS) communicates with an LAC. The destination is necessary to enable an LAC to connect to the LNS.

From Global Configuration mode, type l2tp destination profile, the profileName, an ipAddress, and press Enter.

host1(config)#l2tp destination profile augusta ip address 123.45.76.16
host1(config-l2tp-dest-profile)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  remote   Configure L2TP remote parameters
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

L2TP Destination Profile Host Configuration Mode

In this mode, you can set and modify L2TP host profile attributes, such as the proxy Link Control Protocol (LCP), the local hostname, the local IP address, or the interface profile.

From Global Configuration mode, enter L2TP Destination Profile mode (see above), and type remote host and a hostName, and press Enter.

host1(config-l2tp-dest-profile)#remote host george
host1(config-l2tp-dest-profile-host)#?
  default  Set a command to its default(s)
  disable  Disable L2TP parameter for remote host
  do       Run an exec mode command (alias command run)
  enable   Enable L2TP parameter for remote host
  exit     Exit from the current command mode
  help     Describe the interactive help system
  local    Configure L2TP local parameters for remote host
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  profile  Assign a profile for remote host
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  tunnel   Configure L2TP tunnel parameters for remote host

L2TP Tunnel Switch Profile Configuration Mode

In this mode, you can create an L2TP tunnel switch profile, which configures the L2TP tunnel switching behavior for the interfaces to which this profile is assigned. Issue the avp command from this mode to define the L2TP tunnel switching behavior for a specified L2TP attribute-value pair (AVP) type.

From Global Configuration mode, type the l2tp switch-profile command followed by an alphanumeric profile name of up to 64 characters, and press Enter.

host1(config)#l2tp switch-profile concord
host1(config-l2tp-tunnel-switch-profile)#?
  avp      Configure AVP behavior
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Layer 2 Control Configuration Mode

In this mode, you can define session timeout values and access the L2C Neighbor Configuration mode to specify the L2C neighbor.

From Global Configuration mode, type l2C and press Enter.

host1(config)#l2c
host1(config-l2c)#?
  default          Set a command to its default(s)
  do               Run an exec mode command (alias command run)
  exit             Exit from the current command mode
  help             Describe the interactive help system
  log              Configure logging settings
  macro            Run a CLI macro
  neighbor         Configure l2c neighbor parameters
  no               Negate a command or set its default(s)
  run              Run an exec mode command (alias command do)
  session-timeout  Configure the l2c time-out attribute
  sleep            Make the Command Interface pause for a specified duration

Layer 2 Control Neighbor Configuration Mode

In this mode, you can specify a neighbor ID and the maximum number of branches that the neighbor can have.

From Global Configuration mode, type neighbor and press Enter.

host1(config-l2c)#neighbor
host1(config-l2c-neighbor)#?
  default       Set a command to its default(s)
  do            Run an exec mode command (alias command run)
  exit          Exit from the current command mode
  help          Describe the interactive help system
  id            Configure neighbor-id associated with neighbor
  log           Configure logging settings
  macro         Run a CLI macro
  max-branches  Configure max number of branches for neighbor
  no            Negate a command or set its default(s)
  run           Run an exec mode command (alias command do)
  sleep         Make the Command Interface pause for a specified duration

LDP Configuration Mode

In this mode, you can create and configure MPLS Label Distribution Protocol (LDP) profile parameters.

From Global Configuration mode, type mpls ldp interface profile and the profileName, and press Enter.

host1(config)#mpls ldp interface profile shell
host1(config-ldp)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  hello    Configure hello parameters
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Line Configuration Mode

In this mode, you can modify the operation of a virtual terminal (vty) line.

From Global Configuration mode, type the line vty command and either the lineNumber or the rangeOfLineNumbers you want to configure, and press Enter.

Note: The factory default is 5 vty lines. However, you can increase the number of vty lines available by typing the start number and end number of the vty line range. Once you execute the line vty command, you will have access to line numbers up to the ending line number.

host1(config)#line vty 0 29 
host1(config-line)#?
  access-class         Restrict or permit telnet access based on an access list
  data-character-bits  Set the number of bits per character used by the display
  default              Set a command to its default(s)
  do                   Run an exec mode command (alias command run)
  exec-banner          Enable the exec banner
  exec-timeout         Set the inactivity timeout
  exit                 Exit from the current command mode
  help                 Describe the interactive help system
  log                  Configure logging settings
  login                Require the use of passwords for vty logins
  macro                Run a CLI macro
  motd-banner          Enable the message of the day banner
  no                   Negate a command or set its default(s)
  password             Configure the password for line access
  run                  Run an exec mode command (alias command do)
  sleep                Make the Command Interface pause for a specified duration
  timeout              Specify the login timeout value for the selected line(s)

Note: The privilege command is available in Line Configuration mode when the user is logged in at privilege level 15. For more information, see Privileged-Level Access and CLI Command Privileges.

Local IPsec Transport Profile Configuration

In this mode, you can configure preshared IKE keys for IPsec transport profiles.

From the IPsec Transport Profile Configuration mode, type local ip address and the ipAddress, and press Enter.

host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
host1(config-ipsec-transport-profile-local)#?  
  default           Set a command to its default(s)
  do                Run an exec mode command (alias command run)
  exit              Exit from the current command mode
  help              Describe the interactive help system
  log               Configure logging settings
  macro             Run a CLI macro
  no                Negate a command or set its default(s)
  pre-share         Specify pre-shared group key based on local ip address
  pre-share-masked  A pre-encrypted key, generated by show config rather than
                    interactive
  run               Run an exec mode command (alias command do)
  sleep             Make the Command Interface pause for a specified duration

Local User Configuration Mode

In this mode, you can configure parameters for user entries in local user databases.

From the Global Configuration mode, type either aaa local username and the userName and databaseName or aaa local database and the databaseName. Then press Enter.

host1(config)#aaa local username curt38 database westLocal12
host1(config-local-user)#?
  default                     Set a command to its default(s)
  do                          Run an exec mode command (alias command run)
  exit                        Exit from the current command mode
  help                        Describe the interactive help system
  ip-address                  Specify an IP address for the user
  ip-address-pool             Specify an IP address pool for the user
  log                         Configure logging settings
  macro                       Run a CLI macro
  no                          Negate a command or set its default(s)
  operational-virtual-router  Specify an operational virtual router for the
                              user
  password                    Configure the password
  run                         Run an exec mode command (alias command do)
  secret                      Configure the secret
  sleep                       Make the Command Interface pause for a specified
                              duration
  support                     Enter Support mode

Map Class Configuration Mode

In this mode, you can specify Frame Relay End-to-End fragmentation and reassembly for a map class. Optionally, you can specify the maximum payload size of a fragment or specify fragmentation only or reassembly only.

From Global Configuration mode, type the map-class frame-relay command and the mapClassName you want to configure, and press Enter.

host1(config)#map-class frame-relay testmapclass
host1(config-map-class)#?
  default      Set a command to its default(s)
  do           Run an exec mode command (alias command run)
  exit         Exit from the current command mode
  frame-relay  Configure frame relay parameters
  help         Describe the interactive help system
  log          Configure logging settings
  macro        Run a CLI macro
  no           Negate a command or set its default(s)
  run          Run an exec mode command (alias command do)
  sleep        Make the Command Interface pause for a specified duration

Map List Configuration Mode

In this mode, you can configure map list parameters. In Map List Configuration mode, commands such as map-list and ip atm-vc are used to configure ATM NBMA interfaces.

From Global Configuration mode, type map-list and a mapListName, and press Enter.

host1(config)#map-list mjt3330
host1(config-map-list)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  ip       Add IP address to the map
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Parent Group Configuration Mode

In this mode, you can configure a parent group in a hierarchy.

From Global Configuration mode, type the parent-group command and specify a parentGroupName, and press Enter.

host1(config)#parent-group group1
host1(config-parent-group)#?
  default             Set a command to its default(s)
  do                  Run an exec mode command (alias command run)
  exit                Exit from the current command mode
  help                Describe the interactive help system
  log                 Configure logging settings
  macro               Run a CLI macro
  next-parent         Specify the next parent group to call in hierarchy
  no                  Negate a command or set its default(s)
  rate-limit-profile  Specify a hierarchical rate limit profile
  run                 Run an exec mode command (alias command do)
  sleep               Make the Command Interface pause for a specified 

Policy List Configuration Mode

In this mode, you can configure a policy list—that is, a set of rules—that you can attach to an interface. You can modify a policy list and update it wherever the policy list is used in the configuration.

To create a policy list, from Global Configuration mode type policy-list command preceded by the type of policy and press Enter. For example,

host1(config)#l2tp policy-list routeL2tp100

Note: If you do not include the type of policy, the system creates an IP policy list.

host1(config)#ip policy-list routeForABBCCorp
host1(config-policy-list)#?
  classifier-group       Specify the classifier list
  color                  Create a color policy
  default                Set a command to its default(s)
  do                     Run an exec mode command
  exit                   Exit from the current command mode
  filter                 Create a filter policy
  forward                Create a forward policy
  help                   Describe the interactive help system
  log                    Configure logging settings
  macro                  Run a CLI macro
  mark                   Create a set TOS byte policy
  next-hop               Create a next-hop policy
  next-interface         Create a next-interface policy
  no                     Negate a command or set its default(s)
  rate-limit-profile     Create a rate-limit policy
  run                    Run an exec mode command (alias command do)
  sleep                  Make the Command Interface pause for a specified
                         duration
  suspend                Suspend a policy rule
  traffic-class          Create a traffic class policy
  traffic-shape-profile  Create a traffic-shape policy
  user-packet-class      Create a user packet class policy 

Policy List Parent Group Configuration Mode

In this mode, you can configure a parent group in a hierarchy.

From Policy List Configuration Mode, type the parent-group command and specify a parentGroupName, and press Enter.

host1(config)#policy-list grouppol1
host1(config-policy-list)#parent-group group1
host1(config-policy-list-parent-group)#?
  default             Set a command to its default(s)
  do                  Run an exec mode command (alias command run)
  exit                Exit from the current command mode
  help                Describe the interactive help system
  log                 Configure logging settings
  macro               Run a CLI macro
  no                  Negate a command or set its default(s)
  rate-limit-profile  Specify the hierarchical rate limit profile
  run                 Run an exec mode command (alias command do)
  sleep               Make the Command Interface pause for a specified

Policy Parameter Configuration Mode

In this mode, you can configure a policy parameter.

From Global Configuration mode, type the policy-parameter command and specify a policyParameterType, the hierarchical keyword, and press Enter.

host1(config)#policy-parameter param1 hierarchical
host1(config-policy-parameter)#?
  aggregation-node  Configure the aggregation node value
  default           Set a command to its default(s)
  do                Run an exec mode command (alias command run)
  exit              Exit from the current command mode
  help              Describe the interactive help system
  log               Configure logging settings
  macro             Run a CLI macro
  no                Negate a command or set its default(s)
  run               Run an exec mode command (alias command do)
  sleep             Make the Command Interface pause for a specified time

PPPoE Service Name Table Configuration Mode

In this mode, you can configure entries for a PPPoE service name table. PPPoE clients use these entries to request that an access concentrator (AC), such as an E Series router, support certain services. Issue the service command from this mode to configure a specific service name entry, or to specify that the AC should ignore (drop), rather than respond to (terminate, the default action), a PPPoE Active Discovery Initiation (PADI) request from a client containing the empty service name tag.

From Global Configuration mode, type the pppoe-service-name-table command followed by an alphanumeric table name of up to 32 characters, and press Enter.

host1(config)#pppoe-service-name-table serviceTable1
host1(config-pppoe-service-name-table)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  service  Configure service-name table entries
  sleep    Make the Command Interface pause for a specified duration

Profile Configuration Mode

In this mode, you can configure a profile to subsequently configure dynamic IP interfaces.

From Global Configuration mode, type the profile command followed by a profile name of up to 80 characters, and press Enter.

host1(config)#profile germany78
host1(config-profile)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  ip       Configure IP characteristics
  l2tp     Configure L2TP characteristics
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  ppp      Configure PPP parameters
  pppoe    Pppoe information
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

QoS Interface Set Configuration Mode

In this mode, you can configure QoS interface sets.

From Global Configuration mode, type the qos-interface-set command followed by an interfaceSetName, and press Enter.

host1(config)#qos-interface-set video
host1(config-interface-set)#?
default                Set a command to its default(s)
  do                     Run an exec mode command (alias command run)
  exit                   Exit from the current command mode
  help                   Describe the interactive help system
  log                    Configure logging settings
  macro                  Run a CLI macro
  member-interface-type  Define the member interface type of the interface set
  no                     Negate a command or set its default(s)
  qos-interface-parent   Select a QoS interface super set as the parent of this
                         interface.
  qos-parameter          Instantiate a QoS parameter for this interface
  qos-profile            Attach/Detach a qos-profile
  restricted             Define restricted interface
  run                    Run an exec mode command (alias command do)
  sleep                  Make the Command Interface pause for a specified
                         duration   

QoS Interface Superset Configuration Mode

In this mode, you can configure QoS interface supersets.

From Global Configuration mode, type the qos-interface-superset command followed by an interfaceSupersetName, and press Enter.

host1(config)#qos-interface-superset voice
host1(config-interface-set)#?
  default               Set a command to its default(s)
  do                    Run an exec mode command (alias command run)
  exit                  Exit from the current command mode
  help                  Describe the interactive help system
  log                   Configure logging settings
  macro                 Run a CLI macro
  no                    Negate a command or set its default(s)
  qos-interface-parent  Define parent of the interface set
  qos-parameter         Instantiate a QoS parameter for this interface
  qos-profile           Attach/Detach a qos-profile
  restricted            Define restricted interface
  run                   Run an exec mode command (alias command do)
  sleep                 Make the Command Interface pause for a specified
                        duration    

QoS Parameter Definition Configuration Mode

In this mode, you can configure QoS parameter definitions.

From Global Configuration mode, type the qos-parameter-define command followed by a QosParameterDefinitionName, and press Enter.

host1(config)#qos-parameter-define vpSharedShaper1
host1(config-qos-parameter-define)#?
  controlled-interface-type  Configure the valid interface types controlled by
                             this parameter
  default                    Set a command to its default(s)
  do                         Run an exec mode command (alias command run)
  exit                       Exit from the current command mode
  help                       Describe the interactive help system
  instance-interface-type    Configure the interface types upon which
                             parameters can be instantiated
  log                        Configure logging settings
  macro                      Run a CLI macro
  no                         Negate a command or set its default(s)
  range                      Set the valid range of a QoS parameter
  run                        Run an exec mode command (alias command do)
  sleep                      Make the Command Interface pause for a specified
                             duration
  subscriber-interface-type  Configure interface types representing subscriber
                             interfaces

QoS Profile Configuration Mode

In this mode, you can specify queue profiles and scheduler profiles in combination with interface types.

From Global Configuration mode, type the qos-profile command followed by a QosProfileName, and press Enter.

host1(config)#qos-profile testabc
host1(config-qos-profile)#?
atm          ATM interface
  atm-vc       ATM-VC interface
  bridge       Bridge interface
  default      Set a command to its default(s)
  do           Run an exec mode command (alias command run)
  ethernet     Ethernet interface
  exit         Exit from the current command mode
  fr-vc        Frame Relay subinterface
  help         Describe the interactive help system
  ip           IP interface
  ip-tunnel    IP FROM-tunnel interface
  l2tp-tunnel  L2tp FROM-tunnel interface
  log          Configure logging settings
  lsp          Lsp (MPLS) interface
  macro        Run a CLI macro
  no           Negate a command or set its default(s)
  run          Run an exec mode command (alias command do)
  serial       Serial interface
  server-port  Server Port interface
  sleep        Make the Command Interface pause for a specified duration
  svlan        Stacked VLAN subinterface 
  vlan         VLAN subinterface

QoS Shared Shaper Control Configuration

In this mode, you can configure variables within the simple shared shaper algorithm to control the minimum dynamic rate for all simple shared shapers on the router.

From Global Configuration mode, type the qos-shared-shaper-control command and press Enter.

host1(config)#qos-shared-shaper-control
host1(config-qos-shared-shaper-control)#?
  convergence-factor            Configure how quickly the simple shared shaper
                                converges to a calculated rate
  default                       Set a command to its default(s)
  do                            Run an exec mode command (alias command run)
  exit                          Exit from the current command mode
  help                          Describe the interactive help system
  log                           Configure logging settings
  macro                         Run a CLI macro
  maximum-voql                  Configure the simple shared shaper's maximum
                                virtual output queue length
  minimum-dynamic-rate-percent  Configure the minimum dynamic rate for a simple
                                shared shaper as a percentage of the
                                shared-shaping-rate
  no                            Negate a command or set its default(s)
  reaction-factor               Configure how the simple shared shaper reacts
                                to changes in measured rate
  run                           Run an exec mode command (alias command do)
  sleep                         Make the Command Interface pause for a
                                specified duration 

Queue Profile Configuration Mode

In this mode, you can configure queue profiles and various queue profile parameters, such as constraints on queue lengths or queue buffer weights.

From Global Configuration mode, type the queue-profile command followed by a queueProfileName, and press Enter.

host1(config)#queue-profile testabcd1234
host1(config-queue)#?
  buffer-weight       Set drop threshold in proportion to this weight
  committed-length    Set min and max constraints for committed threshold
  conformed-fraction  Set conformed threshold as a percentage of committed
  conformed-length    Set min and max constraints for conformed threshold
  default             Set a command to its default(s)
  do                  Run an exec mode command (alias command run)
  exceeded-fraction   Set exceeded threshold as a percentage of committed
  exceeded-length     Set min and max constraints for exceeded threshold
  exit                Exit from the current command mode
  help                Describe the interactive help system
  log                 Configure logging settings
  macro               Run a CLI macro
  no                  Negate a command or set its default(s)
  run                 Run an exec mode command (alias command do)
  sleep               Make the Command Interface pause for a specified duration

RADIUS Configuration Mode

In this mode, you can configure various parameters of your RADIUS authentication, accounting, and dynamic-request servers.

From Global Configuration mode, type either the radius authentication server, radius accounting server, or radius dynamic-request server command with the server ipAddress, and press Enter.

host1(config)#radius authentication server 1.2.1.3
host1(config-radius)#?
  deadtime      Configure the amount of time a timed-out server is dropped for usage
  default       Set a command to its default(s)
  do            Run an exec mode command (alias command run)
  exit          Exit from the current command mode
  help          Describe the interactive help system
  key           Configure the secret used in RADIUS client to server exchange
  log           Configure logging settings
  macro         Run a CLI macro
  max-sessions  Configure the number of outstanding requests allowed to the server
  no            Negate a command or set its default(s)
  retransmit    Configure the number of times to retransmit RADIUS request
                before failing
  run           Run an exec mode command (alias command do)
  sleep         Make the Command Interface pause for a specified duration
  timeout       Configure the number of seconds to wait for a RADIUS response
                before retransmitting
  udp-port      Configure the RADIUS server's UDP port

RADIUS Relay Configuration Mode

In this mode, you can configure various parameters of your RADIUS relay authentication and accounting servers.

From Global Configuration mode, type either the radius relay authentication server or radius relay accounting server command, and press Enter.

host1(config)#radius relay authentication server
radius authentication serverhost1(config-radius-relay)#?
  default   Set a command to its default(s)
  do        Run an exec mode command (alias command run)
  exit      Exit from the current command mode
  help      Describe the interactive help system
  key       Configure the secret used in RADIUS client to relay server exchange
  log       Configure logging settings
  macro     Run a CLI macro
  no        Negate a command or set its default(s)
  run       Run an exec mode command (alias command do)
  sleep     Make the Command Interface pause for a specified duration
  udp-port  Configure the RADIUS relay server's udp port 

Rate Limit Profile Configuration Mode

In this mode, you can set parameters for an IP or L2TP rate-limit profile, which is a set of bandwidth attributes and associated actions that become part of a policy list. The policy list is then applied to the ingress or egress of an interface.

To create a hierarchical rate-limit-profile for an IP interface, from Global Configuration mode type rate-limit-profile and a profileName, and add the keyword hierarchical, and press Enter.

To create an IP rate-limit profile, from Global Configuration mode type ip rate-limit-profile and a profileName, and press Enter.

To create an L2TP rate limit profile, from Global Configuration mode type l2tp rate-limit-profile and a profileName, and press Enter.

Note: If you do not include either the ip or l2tp keywords, the system creates an IP rate limit profile.

host1(config)#ip rate-limit-profile fm78930
host1(config-rate-limit-profile)#?
  committed-action  Set the committed access rate action
  committed-burst   Set the committed access rate burst size in Bytes
  committed-rate    Set the committed access rate value in bits per second
  conformed-action  Set the conformed access rate action
  default           Set a command to its default(s)
  do                Run an exec mode command (alias command run)
  exceeded-action   Set the exceeded action
  exit              Exit from the current command mode
  help              Describe the interactive help system
  log               Configure logging settings
  macro             Run a CLI macro
  mask-val          Set mask to be applied with mark values
  no                Negate a command or set its default(s)
  peak-burst        Set the peak burst size in Bytes
  peak-rate         Set the peak access rate in bits per second
  run               Run an exec mode command (alias command do)
  sleep             Make the Command Interface pause for a specified duration

Redundancy Configuration Mode

In this mode, you can activate high availability (SRP switchover) by issuing the mode high-availability command.

From Global Configuration mode, type the redundancy command and press Enter.

host1(config-router)#redundancy
host1(config-redundancy)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  mode     Configure redundancy mode
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration

Remote Neighbor Configuration Mode

In this mode, you can configure remote neighbor parameters for Routing Information Protocol (RIP), Protocol Independent Multicast (PIM), and Open Shortest Path First (OSPF).

From Global Configuration mode, type either router rip, router pim, or router ospf and the processID. Press Enter. You are now in Router Configuration mode.

From Router Configuration mode, type the remote-neighbor command and the appropriate attributes, and press Enter.

host1(config-router)#remote-neighbor 10.13.5.61
host1(config-router-rn)#?
  authentication        Configure authentication
  default               Set a command to its default(s)
  distribute-list       Specify an access list to be a distribute list
  do                    Run an exec mode command (alias command run) 
  exit                  Exit from the current command mode
  exit-remote-neighbor  Exit the remote-neighbor configuration mode
  help                  Describe the interactive help system
  log                   Configure logging settings
  macro                 Run a CLI macro
  no                    Negate a command or set its default(s)
  receive               Set reception characteristics
  route-map             Specify a route map to apply to outgoing routes
  run                   Run an exec mode command (alias command do)
  send                  Set transmit characteristics
  sleep                 Make the Command Interface pause for a specified
                        duration
  split-horizon         Enable Split-horizon
  time-to-live          Configure ttl used to send to this neighbor
  update-source         Source address to be used for transmit

Route Map Configuration Mode

In this mode, you can create and modify route maps.

From Global Configuration mode, type the route-map command and the appropriate routeMapNumber, and press Enter.

host1(config)#route-map unis889
host1(config-route-map)#?
  default    Set a command to its default(s)
  do         Run an exec mode command (alias command run)
  exit       Exit from the current command mode
  help       Describe the interactive help system
  log        Configure logging settings
  macro      Run a CLI macro
  match      Identify this entry as requiring an attribute match
  match-set  Identify this entry to match and set attributes
  no         Negate a command or set its default(s)
  run        Run an exec mode command (alias command do)
  set        Configure this entry to set attributes
  sleep      Make the Command Interface pause for a specified duration

Router Configuration Mode

In this mode, you can configure a routing protocol using router commands.

From Global Configuration mode, type the router command and the appropriate router attributes, and press Enter.

host1(config)#router bgp 2378
host1(config-router)#?
  address-family                Enter address family configuration mode
  aggregate-address             Create an aggregate entry in BGP routing table
  auto-summary                  Automatic summarization of redistributed routes
                                to their natural network masks
  bgp                           Configure BGP
  default                       Set a command to its default(s)
  default-fields                Set default fields for show commands
  default-information           Configure the distribution of default routing
                                information
  disable-dynamic-redistribute  disable dynamic importing of routing
                                information with the latest policy
  distance                      Configure administrative distances for routes
  do                            Run an exec mode command (alias command run)
  exit                          Exit from the current command mode
  help                          Describe the interactive help system
  ip                            Configure the type of route to be contributed
                                by this BGP address family
  limits                        Configure limits on internal BGP tables
  log                           Configure logging settings
  macro                         Run a CLI macro
  maximum-paths                 Configure the maximum number of equal-cost paths
  neighbor                      Specify neighbor properties
  network                       Identify a network for BGP to announce
  no                            Negate a command or set its defaults
  overload                      Configure BGP behavior when reaching overload
                                state (no more resources available)
  redistribute                  Configure the redistribution of routing
                                information from another protocol
  rib-out                       Configure rib-out storage for all BGP peers
  run                           Run an exec mode command (alias command do)
  sleep                         Make the Command Interface pause for a
                                specified duration
  synchronization               Enable synchronization with the IGP
  table-map                     Specify a table map to map external entry
                                attributes into routing table
  timers                        Configure the keep-alive interval and the hold-time

RSVP Configuration Mode

In this mode, you can create and configure MPLS Resource Reservation Protocol (RSVP) parameters.

From Global Configuration mode, type mpls rsvp interface profile and the profileName, and press Enter.

host1(config)#mpls rsvp interface profile sprint
host1(config-rsvp)#?
  cleanup-timeout-factor  Configure the timeout factor
  default                 Set a command to its default(s)
  do                      Run an exec mode command (alias command run)
  exit                    Exit from the current command mode
  help                    Describe the interactive help system
  log                     Configure logging settings
  macro                   Run a CLI macro
  no                      Negate a command or set its default(s)
  refresh-period          Configure refresh period
  run                     Run an exec mode command (alias command do)
  sleep                   Make the Command Interface pause for a specified
                          duration

RTR Configuration Mode

In this mode, you can configure Response Time Reporter (RTR) parameters. The RTR feature allows you to monitor your network’s performance and its resources by measuring response times and the availability of your network devices.

From Global Configuration mode, type rtr and the mapNumber, and press Enter.

host1(config)#rtr 784078348
host1(config-rtr)#?
  default                  Set a command to its default(s)
  do                       Run an exec mode command (alias command run)
  exit                     Exit from the current command mode
  frequency                Specify the frequency interval
  help                     Describe the interactive help system
  hops-of-statistics-kept  Specify the hops capture
  log                      Configure logging settings
  macro                    Run a CLI macro
  max-response-failure     Specify the maximum number of consecutive failures
  no                       Negate a command or set its default(s)
  operations-per-hop       Specify a number of operations per hop
  owner                    Specify the owner of entry
  request-data-size        Specify the request payload size
  run                      Run an exec mode command (alias command do)
  samples-of-history-kept  Specify the maximum history samples
  sleep                    Make the Command Interface pause for a specified duration
  tag                      Specify the user defined tag
  timeout                  Specify the operation timeout
  tos                      Specify a value for the ToS byte
  type                     Specify the type of the entry

Scheduler Profile Configuration Mode

In this mode, you can configure a scheduler profile. You can then set the shaping rate value, enable the strict-priority scheduling for the scheduler node, or set the weighted-round-robin (WRR) value of the scheduler node or queue.

From Global Configuration mode, type scheduler-profile and the scheduleProfileName that you want to create or configure, and press Enter.

host1(config)#scheduler-profile A990
host1(config-scheduler-profile)#?
  default          Set a command to its default(s)
  do               Run an exec mode command (alias command run)
  exit             Exit from the current command mode
  help             Describe the interactive help system
  log              Configure logging settings
  macro            Run a CLI macro
  no               Negate a command or set its default(s)
  run              Run an exec mode command (alias command do)
  shaping-rate     Shape the node or queue to the specified rate
  sleep            Make the Command Interface pause for a specified duration
  strict-priority  Dequeue strict priority packets ahead of other packets
  weight           Set the relative weight of the node or queue

Service Session Profile Configuration Mode

In this mode, you can set and modify Service Manager service session profile attributes, such as time, volume, and statistics.

From Global Configuration mode, type the service-management service-session-profile command and the profileName, and then press Enter.

host1(config)#service-management service-session-profile vodISP1
host1(config-service-session-profile)#?
  default     Set a command to its default(s)
  do          Run an exec mode command (alias command run)
  exit        Exit from the current command mode
  help        Describe the interactive help system
  log         Configure logging settings
  macro       Run a CLI macro
  no          Negate a command or set its default(s)
  run         Run an exec mode command (alias command do)
  sleep       Make the Command Interface pause for a specified duration
  statistics  Configure statistics
  time        Configure time
  volume      Configure volume

SNMP Event Manager Configuration Mode

In this mode, you can configure certain SNMP triggers for events, what occurs when an event is triggered, resource limits for triggers, and some trap notification options.

From Global Configuration mode, type the snmp-server management-event command and then press Enter.

host1(config)#snmp-server management-event
host1(config-mgmtevent)#?
  default   Set a command to its default(s)
  do        Run an exec mode command (alias command run)
  event     Specify what happens when an event is triggered
  exit      Exit from the current command mode
  help      Describe the interactive help system
  log       Configure logging settings
  macro     Run a CLI macro
  no        Negate a command or set its default(s)
  resource  Specify the resource limits
  run       Run an exec mode command (alias command do)
  sleep     Make the Command Interface pause for a specified duration
  trigger   Specify the conditions that lead to events 

Statistics Profile Configuration Mode

In this mode, you can configure a statistics profile. You can then set the rate period during which statistics are gathered, enable statistics gathering, and enable the counting of drop and forwarding events.

From Global Configuration mode, type statistics-profile and the statisticsProfileName that you want to create or configure, and press Enter.

host1(config)#statistics-profile statpro-1
host1(config-statistics-profile)#?
  committed-drop-threshold   Set threshold for logging a committed-drop event
  conformed-drop-threshold   Set threshold for logging a conformed-drop event
  default                    Set a command to its default(s)
  do                         Run an exec mode command (alias command run)
  exceeded-drop-threshold    Set threshold for logging an exceeded-drop event
  exit                       Exit from the current command mode
  forwarding-rate-threshold  Set threshold for logging a forwarding-rate event
  help                       Describe the interactive help system
  log                        Configure logging settings
  macro                      Run a CLI macro
  no                         Negate a command or set its default(s)
  rate-period                Set the time period for calculating queue rates
  run                        Run an exec mode command (alias command do)
  sleep                      Make the Command Interface pause for a specified
                             duration

Subinterface Configuration Mode

In this mode, you can configure one or more virtual interfaces, called subinterfaces, on a single physical interface. The system supports this feature with ATM and Frame Relay.

Both ATM and Frame Relay provide permanent virtual circuits (PVCs) that can be grouped under separate subinterfaces configured on a single physical interface. Subinterfaces allow multiple encapsulations for a protocol on a single interface.

From Interface Configuration mode, indicate a subinterface by typing the interface command and an interfaceSpecifier in slot/port.subinterface format, and then press Enter. For example:

host1(config-if)#interface atm 3/2.6 host1(config-subif)#

Subscriber Policy Configuration Mode

In this mode, you can configure a policy (a set of forwarding and filtering rules) that defines how a subscriber (client) bridge group interface should handle various packet types. After you define the policy, use the bridge subscriber-policy command (from Global Configuration mode) to associate the policy with a bridge group interface.

From Global Configuration mode, type the subscriber-policy command followed by an alphanumeric policy name of any character length, and press Enter.

host1(config)#subscriber-policy client1
host1(config-policy)#?
  arp                  Modify arp policy
  broadcast            Modify broadcast policy
  default              Set a command to its default(s)
  do                   Run an exec mode command (alias command run)
  exit                 Exit from the current command mode
  help                 Describe the interactive help system
  ip                   Modify ip policy
  log                  Configure logging settings
  macro                Run a CLI macro
  mpls                 Modify mpls policy
  multicast            Modify multicast policy
  no                   Negate a command or set its default(s)
  pppoe                Modify PPPoE policy
  relearn              Modify relearn policy
  run                  Run an exec mode command (alias command do)
  sleep                Make the Command Interface pause for a specified
                       duration
  unicast              Modify user-to-user (Unicast) policy
  unknown-destination  Modify unknown destination policy
  unknown-protocol     Modify unknown protocol policy

Traffic Class Configuration Mode

In this mode, you can create a traffic class and configure the level of service to packets assigned to the traffic class.

From Global Configuration mode, type the traffic-class command followed by a trafficClassName, and then press Enter.

host1(config)#traffic-class test123
host1(config-traffic-class)#?
  default                 Set a command to its default(s)
  do                      Run an exec mode command (alias command run)
  exit                    Exit from the current command mode
  fabric-strict-priority  Allow packets in this class to be dequeued out of the
                          fabric ahead of other traffic classes
  help                    Describe the interactive help system
  log                     Configure logging settings
  macro                   Run a CLI macro
  no                      Negate a command or set its default(s)
  run                     Run an exec mode command (alias command do)
  sleep                   Make the Command Interface pause for a specified duration

Traffic Class Group Configuration Mode

In this mode, you can create and configure traffic-class groups, which can contain multiple traffic classes.

From Global Configuration mode, type the traffic-class-group command and a trafficClassGroupName, and press Enter.

host1(config)#traffic-class-group trafclasnameabcd
host1(config-traffic-class-group)#?
  default        Set a command to its default(s)
  do             Run an exec mode command (alias command run)
  exit           Exit from the current command mode
  help           Describe the interactive help system
  log            Configure logging settings
  macro          Run a CLI macro
  no             Negate a command or set its default(s)
  run            Run an exec mode command (alias command do)
  sleep          Make the Command Interface pause for a specified duration
  traffic-class  Set the traffic class belong to this group

Tunnel Group Configuration Mode

In this mode, you can define up to 31 tunnels for a tunnel group.

From Global Configuration mode, type aaa tunnel-group and the groupName, and press Enter.

host1(config)#aaa tunnel-group storm
host1(config-tunnel-group)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  tunnel   Configure tunnel tag

Tunnel Group Tunnel Configuration Mode

In this mode, you can configure attributes for a tunnel group tunnel.

From Tunnel Group Configuration mode, type tunnel and the tag number (in the range 1–31) for the tunnel, and press Enter.

host1(config-tunnel-group)#tunnel 1
host1(config-tunnel-group-tunnel)#?
  address         Configure tunnel endpoint address
  client-name     Configure the client hostname of the tunnel
  default         Set a command to its default(s)
  do              Run an exec mode command (alias command run)
  exit            Exit from the current command mode
  help            Describe the interactive help system
  identification  Configure tunnel identification
  log             Configure logging settings
  macro           Run a CLI macro
  max-sessions    Configure maximum sessions for this tunnel
  medium          Configure tunnel medium
  no              Negate a command or set its default(s)
  password        Configure tunnel password
  preference      Configure tunnel preference
  receive-window  Configure the receive window size for this tunnel
  router-name     Configure the virtual-router for the domain name
  run             Run an exec mode command (alias command do)
  server-name     Configure the remote hostname for the tunnel
  sleep           Make the Command Interface pause for a specified duration
  source-address  Configure tunnel source address
  type            Configure tunnel type

Tunnel Profile Configuration Mode

In this mode, you can create and configure MPLS tunnel profiles.

From Global Configuration mode, type mpls tunnels profile and the profileName, and press Enter.

host1(config)#mpls tunnels profile storm
host1(config-tunnelprofile)#?
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  tunnel   Configure tunnel interface parameters

Tunnel Server Configuration Mode

In this mode, you can configure (provision) the maximum number of tunnel-service interfaces to be used on a dynamic tunnel-server port.

From Global Configuration mode, type tunnel-server and the slot number and port number of the dynamic tunnel-server port, and press Enter.

host1(config)#tunnel-server 2/2
host1(config-tunnel-server)#?
  default         Set a command to its default(s)
  do              Run an exec mode command (alias command run)
  exit            Exit from the current command mode
  help            Describe the interactive help system
  log             Configure logging settings
  macro           Run a CLI macro
  max-interfaces  Configure maximum number of tunnel-server interfaces for
                  dynamic server port
  no              Negate a command or set its default(s)
  run             Run an exec mode command (alias command do)
  sleep           Make the Command Interface pause for a specified duration

VRF Configuration Mode

In this mode, you can create and configure VRF parameters for BGP/MPLS VPNs.

From Global Configuration mode, type ip vrf and the vrfName, and press Enter. Confirm the new VRF by pressing Enter.

host1(config)#ip vrf yankee
Proceed with new vrf creation? [confirm]
host1(config-vrf)#?
  default       Set a command to its default(s)
  description   Configure VRF specific description
  do            Run an exec mode command (alias command run)
  exit          Exit from the current command mode
  export        Specify VRF export characteristics
  help          Describe the interactive help system
  import        Specify VRF import characteristics
  ip            Configure IP characteristics
  log           Configure logging settings
  macro         Run a CLI macro
  maximum       Specify a maximum limit
  no            Negate a command or set its default(s)
  rd            Specify route distinguisher
  route-target  Specify VPN extended community Target
  run           Run an exec mode command (alias command do)
  sleep         Make the Command Interface pause for a specified duration

VR Group Configuration Mode

In this mode, you can add up to four virtual routers to the virtual router group. The accounting servers of the virtual routers in the group can receive AAA broadcast accounting records.

From Global Configuration mode, type aaa accounting vr-group and the vrGroupName, and press Enter.

host1(config)#aaa accounting vr-group westVrGroup38
host1(config-vr-group)#?
  aaa      Configure authentication, authorization, and accounting
           characteristics
  default  Set a command to its default(s)
  do       Run an exec mode command (alias command run)
  exit     Exit from the current command mode
  help     Describe the interactive help system
  log      Configure logging settings
  macro    Run a CLI macro
  no       Negate a command or set its default(s)
  run      Run an exec mode command (alias command do)
  sleep    Make the Command Interface pause for a specified duration
  support  Enter Support mode