Accessing Command Modes
Table 11 describes the command modes available in the CLI.
 |
NOTE: Within any configuration mode, the commands that are available to the user include the commands defined for that configuration mode and all commands defined for Global Configuration mode. See Figure 21. For example, from Router Configuration mode, you could use the interface Global Configuration mode command without first explicitly going back to Global Configuration mode. |
host1(router-config)# interface atm 4/0.3
host1(config-if)#
Exec Modes
There are two Exec modes: User Exec and Privileged Exec.
After you log in to the system, the CLI is in User Exec mode. By default, the commands you can execute from User Exec mode provide only user-level access; however, you should password protect it to prevent unauthorized use. The User Exec commands allow you to perform such functions as:
- Change terminal settings on a temporary basis.
- Perform ping and trace commands.
- Display system information.
host1>?
clear Clear system information
default Set a command to its default(s)
dir Display a list of local files
disable Reduce the command privilege level
enable Enable access to privileged commands
erase Erase configuration settings
exit Exit from the current command mode
flash-disk Perform flash disk operations
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
macro Run a CLI macro
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
show Display system information
sleep Make the Command Interface pause for a specified duration
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destination
Privileged Exec mode provides privileged-level access and therefore should also be password protected to prevent unauthorized use. Privileged Exec commands allow you to perform such functions as:
Password Protection
If the system administrator has configured the system to have a password, the CLI prompts you to enter that password before you receive access to Privileged Exec mode. The password is case sensitive and appears as asterisks on the screen.
To access Privileged Exec mode:
- At the prompt, type enable and press Enter.
- At the password prompt, type your password and press Enter.
host1>enable
Password:
Password:*********
host1#
|
NOTE: The > character in the command-line prompt changes to the # character. |
host1#?
baseline Set a baseline for statistics
clear Clear a state
clock Set the system's clock
configure Enter Global Configuration mode
copy Copy files
debug Configure debugging functions
default Set a command to its default(s)
delete Delete a local file
dir Display a list of local files
disable Reduce the command privilege level
disconnect Disconnect remote CLI session
enable Enable access to privileged commands
exit Exit from the current command mode
flash-disk Perform flash disk operations
halt Halt the system in preparation for power down
help Describe the interactive help system
ip Configure IP attributes on an interface
ipv6 Configure IPv6 attributes
l2tp L2TP operations
log Configure logging settings
logout Logout PPP Subscribers
macro Run a CLI macro
more Display contents of a file
mpls Execute MPLS commands
mtrace Trace the path that packets will traverse from source to
destination for a given group
no Negate a command or set its default(s)
ping Send echo request to remote host
pppoe Set PPPoE information
profile-reassign Perform profile reassignment
redundancy Perform a redundancy action
reload Halt and perform a cold restart
rename Rename a local file
send Send a message to specified lines
show Display system information
sleep Make the Command Interface pause for a specified duration
srp Perform SRP operations
synchronize Manually synchronize redundant system controller file system
telnet Access a remote system via telnet
terminal Configure the terminal line settings
test Test the outcome of a command
traceroute Trace the path that packets traverse to their destination
undebug Disable debug logging functions
virtual-router Specify a virtual router
write Write the system's running configuration to a destination
In addition, you can execute a script file (.scr), which is simply a file containing a sequence of CLI commands, through the configure command.
Global Configuration Mode
Within Global Configuration mode, you can:
- Apply features globally to a router.
- Enable a feature or function.
- Disable a feature or function.
- Configure a feature or function.
- Access all Configuration modes.
To access Global Configuration mode, you begin in Privileged Exec mode. Type configure terminal and press Enter.
host1#configure terminal
Enter configuration commands, one per line. End with ^Z.
host1(config)#
The system is now in Global Configuration mode.
Executing a Script File
- From Privileged Exec mode, type configure and the filename you want to execute, and press Enter.
host1#configure file
File name:/myFile.scr
Proceed with configure? [confirm]
|
NOTE: The filename must end with an .scr extension, and the file must contain a series of valid CLI commands. The file can be a local file on the router or a remote file on a host system. |
For more information, see the section Managing Files in Chapter 5, Managing the System.
AAA Profile Configuration Mode
From this mode, you can restrict or allow the use of domain names, translate an original domain name to a new domain name, or create domain name aliases.
From Global Configuration mode, type the aaa profile command and a profileName, and then press Enter.
host1(config)#aaa profile charlie
host1(config-aaa-profile)#?
allow Configure the authorization domain name
default Set a command to its default(s)
deny Configure the authorization domain name
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
translate Configure the translation map for domain name
Address Family Configuration Mode
From this mode, you can configure address family parameters for BGP VPN services or RIP VPN services.
From Global Configuration mode, type the router bgp command to enter Router Configuration mode for BGP. Type either the address-family ipv4 or address-family vpnv4 command, and then press Enter.
host1(config)#router bgp 100
host1(config-router)#address-family ?
ipv4 Configure IPv4 address family
vpnv4 Configure VPN-IPv4 address family
From Global Configuration mode, type the router rip command to enter Router Configuration mode for RIP. Type the address-family ipv4 command, and then press Enter.
host1(config)#router rip 100
host1(config-router)#address-family ?
ipv4 Configure IPv4 address family
ATM VC Configuration Mode
In this mode, you can configure individual attributes for an ATM data PVC. These attributes include the service category, encapsulation method, Inverse Address Resolution Protocol (Inverse ARP), and F5 Operation, Administration, and Management (OAM) parameters.
From Global Configuration mode, type the interface command and specify the ATM subinterface identifier to enter Subinterface Configuration mode. From Subinterface Configuration mode, type the pvc command and specify the virtual circuit descriptor (VCD), virtual path identifier (VPI) and virtual circuit identifier (VCI) values (in the format vpi/vci), and then press Enter.
host1(config)#interface atm 3/2.1
host1(config-subif)#pvc 100 0/100
host1(config-subif-atm-vc)#?
cbr Configure the Constant Bit Rate (CBR) service class
class-vc Assign a Virtual Circuit class to the Permanent Virtual
Circuit
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encapsulation Configure the ATM encapsulation
exit Exit from the current command mode
help Describe the interactive help system
inarp Configure the Inverse Address Resolution Protocol (InARP)
protocol
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
oam Configure Operations, Administration, and Management (OAM)
oam-pvc Configure Operations, Administration, and Management (OAM) for
Permanent Virtual Circuit (PVC)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
ubr Configure the Unspecified Bit Rate (UBR) service class
vbr-nrt Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
service class
vbr-rt Configure the Variable Bit Rate Real Time (VBR-rt) service
class
ATM VC Class Configuration Mode
In this mode, you can configure a class of attributes for an ATM data PVC. The VC class can include attributes for the service category, encapsulation method, F5 OAM options, and Inverse ARP. You then apply the set of attributes as a group by assigning the VC class to an individual PVC, to all PVCs created on a specified ATM major interface, to all PVCs created on a specified ATM 1483 subinterface, or to a base profile from which bulk-configured VC ranges are dynamically created.
From Global Configuration mode, type the vc-class atm command followed by an alphanumeric VC class name of up to 32 characters, and press Enter.
host1(config)#vc-class atm premium-subscriber-class
host1(config-vc-class)#?
cbr Configure the Constant Bit Rate (CBR) service class
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encapsulation Configure the ATM encapsulation
exit Exit from the current command mode
help Describe the interactive help system
inarp Configure the Inverse Address Resolution Protocol (InARP)
protocol
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
oam Configure Operations, Administration, and Management (OAM)
oam-pvc Configure Operations, Administration, and Management (OAM) for
Permanent Virtual Circuit (PVC)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
ubr Configure the Unspecified Bit Rate (UBR) service class
vbr-nrt Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
service class
vbr-rt Configure the Variable Bit Rate Real Time (VBR-rt) service
class
Classifier Group Configuration Mode
In this mode, you can configure the set of rules for a classification group in a policy list that you can attach to an interface.
From Policy List Configuration mode, type the classifier-group command and its attributes, and then press Enter.
host1(config-policy-list)#classifier-group ipCLACL10 precedence 75
host1(config-policy-list-classifier-group)#?
color Create a color policy
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
filter Create a filter policy
forward Create a forward policy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mark Create a set TOS byte policy
next-hop Create a next-hop policy
next-interface Create a next-interface policy
no Negate a command or set its default(s)
rate-limit-profile Create a rate-limit policy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
suspend Suspend a policy rule
traffic-class Create a traffic class policy
user-packet-class Create a user packet class policy
Color Mark Profile Configuration Mode
In this mode, you can configure translation for a color to a type-dependent mark for TOS or EXP for an IP, IPv6 or MPLS interface.
From Rate Limit Profile Configuration mode, type the color-mark-profile command and specify a profileName, and then press Enter.
host1(config-rate-limit-profile)#mpls color-mark-profile myprofile
host1(config-color-mark-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
green-mark Apply TOS mark to IP packets classified Green by the rate limit
hierarchy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mask-value Mask for all TOS values applied by the color-mark profile
no Negate a command or set its default(s)
red-mark Apply TOS mark to IP packets classified Red by the rate limit
hierarchy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
yellow-mark Apply TOS mark to IP packets classified Yellow by the rate limit
hierarchy
Control Plane Configuration Mode
In this mode, you can configure policing for a specific protocol.
From Global Configuration mode, type the control-plane command and press Enter.
host1(config)#control-plane
host1(config-control-plane)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
policer Configure policing
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Controller Configuration Mode
You can configure physical interfaces such as a T3 in Controller Configuration mode.
From Global Configuration mode, type the appropriate controller command and its attributes, and then press Enter.
host1(config)#controller t3 9/1
host1(config-controll)#
host1(config)#controller ?
e1 Configure a channelized E1 controller
e3 Configure a E3 controller
sonet Configure a Sonet controller
t1 Configure a channelized T1 controller
t3 Configure a T3 controller
DHCP Local Pool Configuration Mode
In this mode, you can configure DHCP local pools. For example, you can specify a DNS or NetBIOS server.
From Global Configuration mode, type the command ip dhcp-local pool and a poolName, and then press Enter.
host1(config)#ip dhcp-local pool charlie
host1(config-dhcp-local)#?
default Set a command to its default(s)
default-router The default-router to use for this pool
dns-server The dns-server to use for this pool
do Run an exec mode command (alias command run)
domain-name The domain name for the pool
exit Exit from the current command mode
grace-period The grace period to be applied to leases
help Describe the interactive help system
lease The lease time for addresses from this pool
link Link to another DHCP Pool
log Configure logging settings
macro Run a CLI macro
netbios-name-server The netbios-name-server to use for this pool
netbios-node-type The netbios-node-type to use for this pool
network The network specified for this pool
no Negate a command or set its default(s)
reserve Reserve an ip address for a specific Mac Address
run Run an exec mode command (alias command do)
server-address The DHCP Server address to send to clients
sleep Make the Command Interface pause for a specified
duration
snmpTrap Enable snmp pool utilization traps
use-release-grace-period Apply the grace period to released leases
warning Configure utilization warnings
Domain Map Configuration Mode
In this mode, you can map a user domain name to a virtual router and loopback interface.
From Global Configuration mode, type the aaa domain-map command and the domain name value as found in the client's login name. Then press Enter.
host1(config)#aaa domain-map charlie76
host1(config-domain-map)#?
address-pool-name Configure the address-pool-name for the domain name
atm Configure ATM parameters
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip-hint Configure the IP hint feature for the domain
local-interface Configure the local interface value for remote clients
log Configure logging settings
loopback Configure the loopback interface to use when RX has an
unnumbered interface to the PPP client
macro Run a CLI macro
no Negate a command or set its default(s)
override-user Configure the username and password values to use instead
of the values from the remote client
padn Configure pppoe active discovery network parameters for
the domain name
router-name Configure the virtual-router for the domain name
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
strip-domain Configure the domain name stripping feature for the domain
tunnel Configure tunnel tag
virtual-router Configure the virtual-router for the domain name
Domain Map Tunnel Configuration Mode
In this mode, you can configure tunnel parameters such as the tunnel's endpoint.
From Domain-Map Configuration mode, type tunnel and a tunnelNumber, and press Enter.
host1(config-domain-map)#tunnel 17
host1(config-domain-map-tunnel)#?
address Configure tunnel endpoint address
client-name Configure the client hostname of the tunnel
default Set a command to its default(s)
exit Exit from the current command mode
do Run an exec mode command (alias command run)
help Describe the interactive help system
hostname Configure the client hostname of the tunnel
identification Configure tunnel identification
log Configure logging settings
macro Run a CLI macro
max-sessions Configure maximum sessions for this tunnel
medium Configure tunnel medium
no Negate a command or set its default(s)
password Configure tunnel password
preference Configure tunnel preference
run Run an exec mode command (alias command do)
server-name Configure the remote hostname for the tunnel
sleep Make the Command Interface pause for a specified duration
source-address Configure tunnel source address
type Configure tunnel type
DoS Protection Group Configuration Mode
In this mode, you can configure parameters for Denial of Service (DoS) protection groups.
From Global Configuration mode, type the dos-protection-group command and press Enter.
host1(config)#dos-protection-group
host1(config-dos-protection)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
priority Specify the priority
protocol Specify the protocol
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
use Configure usagehost1(config-dos-protection-group)#?
Drop Profile Configuration Mode
In this mode, you can configure drop profiles for QoS. Drop profiles control RED dropping behavior.
From Global Configuration mode, type the drop-profile command, and press Enter.
host1(config)#drop profile
host1(config-drop-profile)#?
average-length-exponent Select TAQL coefficient
committed-threshold Specify committed queue thresholds and maximum drop
probability
conformed-threshold Specify conformed queue thresholds and maximum drop
probability
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-threshold Specify exceeded queue thresholds and maximum drop
probability
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Explicit Path Configuration Mode
From this mode, you can name and configure an explicit path within MPLS.
From Global Configuration mode, type mpls explicit-path name and the explicitPathName, and press Enter.
host1(config)#mpls explicit-path name xyz
host1(config-expl-path)#?
append-after Add an entry after a specified index
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
index Specify the index of the entry to be added or edited
list List part or all of the entries in current explicit path
log Configure logging settings
macro Run a CLI macro
next-address Configure an IP address at the last hop of the explicit path
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Flow Cache Configuration Mode
In this mode, you can configure parameters for the aggregation cache.
From Global Configuration mode, type the ip flow-aggregation cache command and press Enter.
host1(config)#ip flow-aggregation cache
host1(config-flow-cache)#?
cache Configure Flow Stats cache parameters
default Set a command to its default(s)
do Run an exec mode command (alias command run)
enabled Start flow cache operation
exit Exit from the current command mode
export Configure Flow-Cache export parameters
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Interface Configuration Mode
From Interface Configuration mode, you can enable many system features for each interface you create. Interface Configuration commands allow you to:
From Global Configuration mode, type interface and identify the interface you want to configure and press Enter.
host1(config)#interface atm 0/1
host1(config-if)#
The CLI is now in Interface Configuration mode.
host1(config)#interface ?
atm ATM interface
fastEthernet IEEE 802.3 fastEthernet interface
gigabitEthernet IEEE 802.3 gigabitEthernet interface
hssi High Speed Serial interface
ip Ip shared interface
ipv6 Ipv6 shared interface
lag Link Aggregation interface
loopback Loopback interface
mlframe-relay Multilink frame-relay interface
mlppp Multilink PPP interface
null Null interface
pos Packet over SONET interface
serial Serial interface
tunnel Tunnel interface
Some Interface Configuration commands can affect general interface parameters, such as bandwidth and clock rate. For interface-specific commands, such as commands for ATM interfaces, see the appropriate chapter in this documentation set.
IP NAT Pool Configuration Mode
In this mode, you can specify the information that the system uses in creating IP Network Address Translation (NAT) pools. From Global Configuration mode, type ip nat pool multiplerange prefix-length and press Enter.
host1(config)#ip nat pool multiplerange prefix-length 30
host1(config-ipnat-pool)#?
address Configure address ranges
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
IP PIM Data MDT Configuration Mode
In this mode, you can specify parameters for data MDTs.From Global Configuration mode, type ip pim data-mdt, and press Enter:
host1:pe1:pe13(config)#ip pim data-mdt
host1:western:eastern(config-ip-pim-data-mdt)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mdt-data-delay Configure MDT_DATA_DELAY timeout
mdt-data-holdown Configure MDT_DATA_HOLDOWN timeout
mdt-data-timeout Configure MDT_DATA_TIMEOUT
mdt-interval Configure MDT_INTERVAL timer
no Negate a command or set its default(s)
route-map Configure route-map
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure tunnel parameters
IP Service Profile Configuration Mode
In this mode, you can specify the information that the system uses in creating IP service profiles.
From Global Configuration mode, type ip service-profile and the service profile name, and press Enter.
host1(config)#ip service-profile radius
host1(config-service-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
domain Configure a username domain
exit Exit from the current command mode
help Describe the interactive help system
include Configure an attribute to be included in a username
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
password Configure a user password
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
user-name Configure a user name
user-prefix Configure a username prefix
IPSec CA Identity Configuration Mode
In this mode, you can specify the information that the system uses in online certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec ca identity, and press Enter.
host1(config)#ipsec ca identity
host1(config-ca-identity)#?
crl Certificate Revocation List checking
default Set a command to its default(s)
do Run an exec mode command (alias command run)
enrollment Configure enrollment parameters
exit Exit from the current command mode
help Describe the interactive help system
issuer-identifier issuer identifier
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
root Specify root proxy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
IPSec Identity Configuration Mode
In this mode, you can specify the information that the system uses in offline certificate requests and during negotiations with its peers.
From Global Configuration mode, type ipsec identity, and press Enter.
host1(config)#ipsec identity
host1(config-ipsec-identity)#?
common-name Common Name
country Country name
default Set a command to its default(s)
do Run an exec mode command (alias command run)
domain-name Domain name
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
organization Organization name
sleep Make the Command Interface pause for a specified duration
IPSec IKE Policy Configuration Mode
In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.
From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber, and press Enter.
host1(config)#ipsec ike-policy-rule 10
host1(config-ike-policy)#?
aggressive-mode Allows aggressive mode negotiation for the tunnel
authentication Configure the authentication method
default Set a command to its default(s)
do Run an exec mode command (alias command run)
encryption Configure the encryption algorithm within an IKE policy
exit Exit from the current command mode
group Configure the Diffie-Hellman group identifier
hash Configure the hash algorithm within an IKE policy
help Describe the interactive help system
lifetime Configure the time an SA will live before expiration
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
IPSec Manual Key Configuration Mode
In this mode, you can enter the manual key that a peer uses for authentication during the tunnel establishment phase.
From the Global Configuration mode, type ipsec key manual pre-share and the peerIPaddress, and press Enter.
host1(config)#ipsec key manual pre-share 10.10.1.1
host1(config-manual-key)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key Manually specify a key
log Configure logging settings
macro Run a CLI macro
masked-key Enter a masked key (not for manual entry, show config generates)
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
IPSec Peer Public Key Configuration Mode
In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses for RSA authentication during the tunnel establishment phase without the need for a digital certificate.
From Global Configuration mode, type ipsec key pubkey-chain rsa and either the IP address or fully qualified domain name of the remote peer, and press Enter.
host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5
host1(config-peer-public-key)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key-string Enter key string
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
IPSec Transport Profile Configuration Mode
In this mode, you can configure an IP Security (IPSec) transport profile, which is used for Layer 2 Tunneling Protocol (L2TP) over IPSec connections.
From the Global Configuration mode, type ipsec transport profile, the profileName, virtual-router vrName, ip address ipAddress, and press Enter.
host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0
host1(config-ipsec-transport-profile)#?
application Configure the application type that is protected by the l2tp
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
lifetime Configure the renegotiation time
local Configure local endpoint of the transport connection
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
pfs Configure perfect forward secrecy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
transform-set Configure the transform set used by ipsec transport profile
IPSec Tunnel Profile Configuration Mode
In this mode, you can configure a profile of an IPSec tunnel.
From Global Configuration mode, type ipsec tunnel profile and the profileName, and press Enter.
host1(config)#ipsec tunnel profile profile1
host1(config-ipsec-tunnel-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
domain-suffix Configure a domain suffix to be appended to users on
this profile
exit Exit from the current command mode
extended-authentication Configure extended authentication parameters
help Describe the interactive help system
ike Configure IKE characteristics
ip Configure local IP characteristics
lifetime Configure the phase 2 life parameters
local Configure local characteristics
log Configure logging settings
macro Run a CLI macro
max-interfaces Configure the maximum allowed dynamic interface
instantiations
no Negate a command or set its default(s)
peer Configure peer characteristics
pfs Configure the phase 2 perfect forward secrecy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
transform Configure the phase 2 transforms allowed on this
IPSEC tunnel profile
tunnel Configure tunnel parameters
IP Tunnel Destination Profile Mode
In this mode, you can specify parameters for GRE or DVMRP dynamic tunnels.
From Global Configuration mode, type gre destination profile or dvmrp destination profile and the destination profile name, and press Enter.
host1(config)#gre destination profile global
host1(config-dest-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
enable Enable a tunnel parameter
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
profile Assign a profile
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure a tunnel parameter
host1(config)#dvmrp destination profile global
host1(config-dest-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
enable Enable a tunnel parameter
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
profile Assign a profile
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure a tunnel parameter
L2 Transport Load-Balancing-Circuit Configuration Mode
In this mode, you can specify a member subinterface for a Martini layer 2 circuit that is associated with a load-balancing group.
From Global Configuration mode, type mpls l2transport load-balancing-group, specify a group number and a Martini circuit, and press Enter.
host1(config)#mpls l2transport load-balancing-group 100 mpls-relay 10.1.1.1 30
host1(config-l2transport-load-balancing-circuit)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
member Configure members of a l2transport load-balancing circuit
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
L2TP Destination Profile Configuration Mode
In this mode, you can create the destination profile that defines the location of an L2TP Access Concentrator (LAC) and define the attributes used when an L2TP Network Server (LNS) communicates with an LAC. The destination is necessary to enable an LAC to connect to the LNS.
From Global Configuration mode, type l2tp destination profile, the profileName, an ipAddress, and press Enter.
host1(config)#l2tp destination profile augusta ip address 123.45.76.16
host1(config-l2tp-dest-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
remote Configure L2TP remote parameters
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
L2TP Destination Profile Host Configuration Mode
In this mode, you can set and modify L2TP host profile attributes, such as the proxy Link Control Protocol (LCP), the local hostname, the local IP address, or the interface profile.
From Global Configuration mode, enter L2TP Destination Profile mode (see above), and type remote host and a hostName, and press Enter.
host1(config-l2tp-dest-profile)#remote host george
host1(config-l2tp-dest-profile-host)#?
default Set a command to its default(s)
disable Disable L2TP parameter for remote host
do Run an exec mode command (alias command run)
enable Enable L2TP parameter for remote host
exit Exit from the current command mode
help Describe the interactive help system
local Configure L2TP local parameters for remote host
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
profile Assign a profile for remote host
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure L2TP tunnel parameters for remote host
L2TP Tunnel Switch Profile Configuration Mode
In this mode, you can create an L2TP tunnel switch profile, which configures the L2TP tunnel switching behavior for the interfaces to which this profile is assigned. Issue the avp command from this mode to define the L2TP tunnel switching behavior for a specified L2TP attribute-value pair (AVP) type.
From Global Configuration mode, type the l2tp switch-profile command followed by an alphanumeric profile name of up to 64 characters, and press Enter.
host1(config)#l2tp switch-profile concord
host1(config-l2tp-tunnel-switch-profile)#?
avp Configure AVP behavior
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Layer 2 Control Configuration Mode
In this mode, you can define session timeout values and access the L2C Neighbor Configuration mode to specify the L2C neighbor.
From Global Configuration mode, type l2C and press Enter.
host1(config)#l2c
host1(config-l2c)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
neighbor Configure l2c neighbor parameters
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
session-timeout Configure the l2c time-out attribute
sleep Make the Command Interface pause for a specified duration
Layer 2 Control Neighbor Configuration Mode
In this mode, you can specify a neighbor ID and the maximum number of branches that the neighbor can have.
From Global Configuration mode, type neighbor and press Enter.
host1(config-l2c)#neighbor
host1(config-l2c-neighbor)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
id Configure neighbor-id associated with neighbor
log Configure logging settings
macro Run a CLI macro
max-branches Configure max number of branches for neighbor
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
LDP Configuration Mode
In this mode, you can create and configure MPLS Label Distribution Protocol (LDP) profile parameters.
From Global Configuation mode, type mpls ldp interface profile and the profileName, and press Enter.
host1(config)#mpls ldp interface profile shell
host1(config-ldp)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
hello Configure hello parameters
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Line Configuration Mode
In this mode, you can modify the operation of a virtual terminal (vty) line.
From Global Configuration mode, type the line vty command and either the lineNumber or the rangeOfLineNumbers you want to configure, and press Enter.
host1(config)#line vty 0 29
host1(config-line)#?
access-class Restrict or permit telnet access based on an access list
data-character-bits Set the number of bits per character used by the display
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exec-banner Enable the exec banner
exec-timeout Set the inactivity timeout
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
login Require the use of passwords for vty logins
macro Run a CLI macro
motd-banner Enable the message of the day banner
no Negate a command or set its default(s)
password Configure the password for line access
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
timeout Specify the login timeout value for the selected line(s)
|
NOTE: The privilege command is available in Line Configuration mode when the user is logged in at privilege level 15. For more information, see Privileged-Level Access and CLI Command Privileges. |
Local IPSec Transport Profile Configuration
In this mode, you can configure preshared IKE keys for IPSec transport profiles.
From the IPSec Transport Profile Configuration mode, type local ip address and the ipAddress, and press Enter.
host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
host1(config-ipsec-transport-profile-local)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
pre-share Specify pre-shared group key based on local ip address
pre-share-masked A pre-encrypted key, generated by show config rather than
interactive
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Local User Configuration Mode
In this mode, you can configure parameters for user entries in local user databases.
From the Global Configuration mode, type either aaa local username and the userName and databaseName or aaa local database and the databaseName. Then press Enter.
host1(config)#aaa local username curt38 database westLocal12
host1(config-local-user)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip-address Specify an IP address for the user
ip-address-pool Specify an IP address pool for the user
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
operational-virtual-router Specify an operational virtual router for the
user
password Configure the password
run Run an exec mode command (alias command do)
secret Configure the secret
sleep Make the Command Interface pause for a specified
duration
support Enter Support mode
Map Class Configuration Mode
In this mode, you can specify Frame Relay End-to-End fragmentation and reassembly for a map class. Optionally, you can specify the maximum payload size of a fragment or specify fragmentation only or reassembly only.
From Global Configuration mode, type the map-class frame-relay command and the mapClassName you want to configure, and press Enter.
host1(config)#map-class frame-relay testmapclass
host1(config-map-class)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
frame-relay Configure frame relay parameters
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Map List Configuration Mode
In this mode, you can configure map list parameters. In Map List Configuration mode, commands such as map-list and ip atm-vc are used to configure ATM NBMA interfaces.
From Global Configuration mode, type map-list and a mapListName, and press Enter.
host1(config)#map-list mjt3330
host1(config-map-list)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Add IP address to the map
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Parent Group Configuration Mode
In this mode, you can configure a parent group in a hierarchy.
From Global Configuration mode, type the parent-group command and specify a parentGroupName, and press Enter.
host1(config)#parent-group group1
host1(config-parent-group)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
next-parent Specify the next parent group to call in hierarchy
no Negate a command or set its default(s)
rate-limit-profile Specify a hierarchical rate limit profile
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
Policy List Configuration Mode
In this mode, you can configure a policy list—that is, a set of rules—that you can attach to an interface. You can modify a policy list and update it wherever the policy list is used in the configuration.
To create a policy list, from Global Configuration mode type policy-list command preceded by the type of policy and press Enter. For example,
host1(config)#l2tp policy-list routeL2tp100
|
NOTE: If you do not include the type of policy, the system creates an IP policy list. |
host1(config)#ip policy-list routeForABBCCorp
host1(config-policy-list)#?
classifier-group Specify the classifier list
color Create a color policy
default Set a command to its default(s)
do Run an exec mode command
exit Exit from the current command mode
filter Create a filter policy
forward Create a forward policy
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mark Create a set TOS byte policy
next-hop Create a next-hop policy
next-interface Create a next-interface policy
no Negate a command or set its default(s)
rate-limit-profile Create a rate-limit policy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
suspend Suspend a policy rule
traffic-class Create a traffic class policy
traffic-shape-profile Create a traffic-shape policy
user-packet-class Create a user packet class policy
Policy List Parent Group Configuration Mode
In this mode, you can configure a parent group in a hierarchy.
From Policy List Configuration Mode, type the parent-group command and specify a parentGroupName, and press Enter.
host1(config)#policy-list grouppol1
host1(config-policy-list)#parent-group group1
host1(config-policy-list-parent-group)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
rate-limit-profile Specify the hierarchical rate limit profile
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
Policy Parameter Configuration Mode
In this mode, you can configure a policy parameter.
From Global Configuration mode, type the policy-parameter command and specify a policyParameterType, the hierarchical keyword, and press Enter.
host1(config)#policy-parameter param1 hierarchical
host1(config-policy-parameter)#?
aggregation-node Configure the aggregation node value
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified time
PPPoE Service Name Table Configuration Mode
In this mode, you can configure entries for a PPPoE service name table. PPPoE clients use these entries to request that an access concentrator (AC), such as an E-series router, support certain services. Issue the service command from this mode to configure a specific service name entry, or to specify that the AC should ignore (drop), rather than respond to (terminate, the default action), a PPPoE Active Discovery Initiation (PADI) request from a client containing the empty service name tag.
From Global Configuration mode, type the pppoe-service-name-table command followed by an alphanumeric table name of up to 32 characters, and press Enter.
host1(config)#pppoe-service-name-table serviceTable1
host1(config-pppoe-service-name-table)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
service Configure service-name table entries
sleep Make the Command Interface pause for a specified duration
Profile Configuration Mode
In this mode, you can configure a profile to subsequently configure dynamic IP interfaces.
From Global Configuration mode, type the profile command followed by a profile name of up to 80 characters, and press Enter.
host1(config)#profile germany78
host1(config-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Configure IP characteristics
l2tp Configure L2TP characteristics
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
ppp Configure PPP parameters
pppoe Pppoe information
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
QoS Parameter Definition Configuration Mode
In this mode, you can configure QoS parameter definitions.
From Global Configuration mode, type the qos-parameter-define command followed by a QosParameterDefinitionName, and press Enter.
host1(config)#qos-parameter-define vpSharedShaper1
host1(config-qos-parameter-define)#?
controlled-interface-type Configure the valid interface types controlled by
this parameter
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
instance-interface-type Configure the interface types upon which
parameters can be instantiated
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
range Set the valid range of a QoS parameter
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
subscriber-interface-type Configure interface types representing subscriber
interfaces
QoS Profile Configuration Mode
In this mode, you can specify queue profiles and scheduler profiles in combination with interface types.
From Global Configuration mode, type the qos-profile command followed by a QosProfileName, and press Enter.
host1(config)#qos-profile testabc
host1(config-qos-profile)#?
atm ATM interface
atm-vc ATM-VC interface
bridge Bridge interface
default Set a command to its default(s)
do Run an exec mode command (alias command run)
ethernet Ethernet interface
exit Exit from the current command mode
fr-vc Frame Relay subinterface
help Describe the interactive help system
ip IP interface
ip-tunnel IP FROM-tunnel interface
l2tp-tunnel L2tp FROM-tunnel interface
log Configure logging settings
lsp Lsp (MPLS) interface
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
serial Serial interface
server-port Server Port interface
sleep Make the Command Interface pause for a specified duration
svlan Stacked VLAN subinterface
vlan VLAN subinterface
QoS Shared Shaper Control Configuration
In this mode, you can configure variables within the simple shared shaper algorithm to control the minimum dynamic rate for all simple shared shapers on the router.
From Global Configuration mode, type the qos-shared-shaper-control command and press Enter.
host1(config)#qos-shared-shaper-control
host1(config-qos-shared-shaper-control)#?
convergence-factor Configure how quickly the simple shared shaper
converges to a calculated rate
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
maximum-voql Configure the simple shared shaper's maximum
virtual output queue length
minimum-dynamic-rate-percent Configure the minimum dynamic rate for a simple
shared shaper as a percentage of the
shared-shaping-rate
no Negate a command or set its default(s)
reaction-factor Configure how the simple shared shaper reacts
to changes in measured rate
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a
specified duration
Queue Profile Configuration Mode
In this mode, you can configure queue profiles and various queue profile parameters, such as constraints on queue lengths or queue buffer weights.
From Global Configuration mode, type the queue-profile command followed by a queueProfileName, and press Enter.
host1(config)#queue-profile testabcd1234
host1(config-queue)#?
buffer-weight Set drop threshold in proportion to this weight
committed-length Set min and max constraints for committed threshold
conformed-fraction Set conformed threshold as a percentage of committed
conformed-length Set min and max constraints for conformed threshold
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-fraction Set exceeded threshold as a percentage of committed
exceeded-length Set min and max constraints for exceeded threshold
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
RADIUS Configuration Mode
In this mode, you can configure various parameters of your RADIUS authentication, accounting, and dynamic-request servers.
From Global Configuration mode, type either the radius authentication server, radius accounting server, or radius dynamic-request server command with the server ipAddress, and press Enter.
host1(config)#radius authentication server 1.2.1.3
host1(config-radius)#?
deadtime Configure the amount of time a timed-out server is dropped for usage
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key Configure the secret used in RADIUS client to server exchange
log Configure logging settings
macro Run a CLI macro
max-sessions Configure the number of outstanding requests allowed to the server
no Negate a command or set its default(s)
retransmit Configure the number of times to retransmit RADIUS request
before failing
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
timeout Configure the number of seconds to wait for a RADIUS response
before retransmitting
udp-port Configure the RADIUS server's UDP port
RADIUS Relay Configuration Mode
In this mode, you can configure various parameters of your RADIUS relay authentication and accounting servers.
From Global Configuration mode, type either the radius relay authentication server or radius relay accounting server command, and press Enter.
host1(config)#radius authentication server
host1(config-radius-relay)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
key Configure the secret used in RADIUS client to relay server exchange
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
udp-port Configure the RADIUS relay server's udp port
Rate Limit Profile Configuration Mode
In this mode, you can set parameters for an IP or L2TP rate-limit profile, which is a set of bandwidth attributes and associated actions that become part of a policy list. The policy list is then applied to the ingress or egress of an interface.
To create a hierarchical rate-limit-profile for an IP interface, from Global Configuration mode type rate-limit-profile and a profileName, and add the keyword hierarchical, and press Enter.
To create an IP rate-limit profile, from Global Configuration mode type ip rate-limit-profile and a profileName, and press Enter.
To create an L2TP rate limit profile, from Global Configuration mode type l2tp rate-limit-profile and a profileName, and press Enter.
|
NOTE: If you do not include either the ip or l2tp keywords, the system creates an IP rate limit profile. |
host1(config)#ip rate-limit-profile fm78930
host1(config-rate-limit-profile)#?
committed-action Set the committed access rate action
committed-burst Set the committed access rate burst size in Bytes
committed-rate Set the committed access rate value in bits per second
conformed-action Set the conformed access rate action
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-action Set the exceeded action
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mask-val Set mask to be applied with mark values
no Negate a command or set its default(s)
peak-burst Set the peak burst size in Bytes
peak-rate Set the peak access rate in bits per second
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Redundancy Configuration Mode
In this mode, you can activate high availability (SRP switchover) by issuing the mode high-availability command.
From Global Configuration mode, type the redundancy command and press Enter.
host1(config-router)#redundancy
host1(config-redundancy)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
mode Configure redundancy mode
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Remote Neighbor Configuration Mode
In this mode, you can configure remote neighbor parameters for Routing Information Protocol (RIP), Protocol Independent Multicast (PIM), and Open Shortest Path First (OSPF).
From Global Configuration mode, type either router rip, router pim, or router ospf and the processID. Press Enter. You are now in Router Configuration mode.
From Router Configuration mode, type the remote-neighbor command and the appropriate attributes, and press Enter.
host1(config-router)#remote-neighbor 10.13.5.61
host1(config-router-rn)#?
authentication Configure authentication
default Set a command to its default(s)
distribute-list Specify an access list to be a distribute list
do Run an exec mode command (alias command run)
exit Exit from the current command mode
exit-remote-neighbor Exit the remote-neighbor configuration mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
receive Set reception characteristics
route-map Specify a route map to apply to outgoing routes
run Run an exec mode command (alias command do)
send Set transmit characteristics
sleep Make the Command Interface pause for a specified
duration
split-horizon Enable Split-horizon
time-to-live Configure ttl used to send to this neighbor
update-source Source address to be used for transmit
Route Map Configuration Mode
In this mode, you can create and modify route maps.
From Global Configuration mode, type the route-map command and the appropriate routeMapNumber, and press Enter.
host1(config)#route-map unis889
host1(config-route-map)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
match Identify this entry as requiring an attribute match
match-set Identify this entry to match and set attributes
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
set Configure this entry to set attributes
sleep Make the Command Interface pause for a specified duration
Router Configuration Mode
In this mode, you can configure a routing protocol using router commands.
From Global Configuration mode, type the router command and the appropriate router attributes, and press Enter.
host1(config)#router bgp 2378
host1(config-router)#?
address-family Enter address family configuration mode
aggregate-address Create an aggregate entry in BGP routing table
auto-summary Automatic summarization of redistributed routes
to their natural network masks
bgp Configure BGP
default Set a command to its default(s)
default-fields Set default fields for show commands
default-information Configure the distribution of default routing
information
disable-dynamic-redistribute disable dynamic importing of routing
information with the latest policy
distance Configure administrative distances for routes
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Configure the type of route to be contributed
by this BGP address family
limits Configure limits on internal BGP tables
log Configure logging settings
macro Run a CLI macro
maximum-paths Configure the maximum number of equal-cost paths
neighbor Specify neighbor properties
network Identify a network for BGP to announce
no Negate a command or set its defaults
overload Configure BGP behaviour when reaching overload
state (no more resources available)
redistribute Configure the redistribution of routing
information from another protocol
rib-out Configure rib-out storage for all BGP peers
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a
specified duration
synchronization Enable synchronization with the IGP
table-map Specify a table map to map external entry
attributes into routing table
timers Configure the keep-alive interval and the hold-time
RSVP Configuration Mode
In this mode, you can create and configure MPLS Resource Reservation Protocol (RSVP) parameters.
From Global Configuration mode, type mpls rsvp interface profile and the profileName, and press Enter.
host1(config)#mpls rsvp interface profile sprint
host1(config-rsvp)#?
cleanup-timeout-factor Configure the timeout factor
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
refresh-period Configure refresh period
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
RTR Configuration Mode
In this mode, you can configure Response Time Reporter (RTR) parameters. The RTR feature allows you to monitor your network's performance and its resources by measuring response times and the availability of your network devices.
From Global Configuration mode, type rtr and the mapNumber, and press Enter.
host1(config)#rtr 784078348
host1(config-rtr)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
frequency Specify the frequency interval
help Describe the interactive help system
hops-of-statistics-kept Specify the hops capture
log Configure logging settings
macro Run a CLI macro
max-response-failure Specify the maximum number of consecutive failures
no Negate a command or set its default(s)
operations-per-hop Specify a number of operations per hop
owner Specify the owner of entry
request-data-size Specify the request payload size
run Run an exec mode command (alias command do)
samples-of-history-kept Specify the maximum history samples
sleep Make the Command Interface pause for a specified duration
tag Specify the user defined tag
timeout Specify the operation timeout
tos Specify a value for the ToS byte
type Specify the type of the entry
Scheduler Profile Configuration Mode
In this mode, you can configure a scheduler profile. You can then set the shaping rate value, enable the strict-priority scheduling for the scheduler node, or set the weighted-round-robin (WRR) value of the scheduler node or queue.
From Global Configuration mode, type scheduler-profile and the scheduleProfileName that you want to create or configure, and press Enter.
host1(config)#scheduler-profile A990
host1(config-scheduler-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
shaping-rate Shape the node or queue to the specified rate
sleep Make the Command Interface pause for a specified duration
strict-priority Dequeue strict priority packets ahead of other packets
weight Set the relative weight of the node or queue
Service Session Profile Configuration Mode
In this mode, you can set and modify Service Manager service session profile attributes, such as time, volume, and statistics.
From Global Configuration mode, type the service-management service-session-profile command and the profileName, and then press Enter.
host1(confi)#service-management service-session-profile vodISP1
host1(config-service-session-profile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
statistics Configure statistics
time Configure time
volume Configure volume
SNMP Event Manager Configuration Mode
In this mode, you can configure certain SNMP triggers for events, what occurs when an event is triggered, resource limits for triggers, and some trap notification options.
From Global Configuration mode, type the snmp-server management-event command and then press Enter.
host1(config)#snmp-server management-event
host1(config-mgmtevent)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
event Specify what happens when an event is triggered
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
resource Specify the resource limits
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
trigger Specify the conditions that lead to events
Statistics Profile Configuration Mode
In this mode, you can configure a statistics profile. You can then set the rate period during which statistics are gathered, enable statistics gathering, and enable the counting of drop and forwarding events.
From Global Configuration mode, type statistics-profile and the statisticsProfileName that you want to create or configure, and press Enter.
host1(config)#statistics-profile statpro-1
host1(config-statistics-profile)#?
committed-drop-threshold Set threshold for logging a committed-drop event
conformed-drop-threshold Set threshold for logging a conformed-drop event
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exceeded-drop-threshold Set threshold for logging an exceeded-drop event
exit Exit from the current command mode
forwarding-rate-threshold Set threshold for logging a forwarding-rate event
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
rate-period Set the time period for calculating queue rates
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
Subinterface Configuration Mode
In this mode, you can configure one or more virtual interfaces, called subinterfaces, on a single physical interface. The system supports this feature with ATM and Frame Relay.
Both ATM and Frame Relay provide permanent virtual circuits (PVCs) that can be grouped under separate subinterfaces configured on a single physical interface. Subinterfaces allow multiple encapsulations for a protocol on a single interface.
From Interface Configuration mode, indicate a subinterface by typing the interface command and an interfaceSpecifier in slot/port.subinterface format, and then press Enter. For example:
host1(config-if)#interface atm 3/2.6
host1(config-subif)#
Subscriber Policy Configuration Mode
In this mode, you can configure a policy (a set of forwarding and filtering rules) that defines how a subscriber (client) bridge group interface should handle various packet types. After you define the policy, use the bridge subscriber-policy command (from Global Configuration mode) to associate the policy with a bridge group interface.
From Global Configuration mode, type the subscriber-policy command followed by an alphanumeric policy name of any character length, and press Enter.
host1(config)#subscriber-policy client1
host1(config-policy)#?
arp Modify arp policy
broadcast Modify broadcast policy
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
ip Modify ip policy
log Configure logging settings
macro Run a CLI macro
mpls Modify mpls policy
multicast Modify multicast policy
no Negate a command or set its default(s)
pppoe Modify PPPoE policy
relearn Modify relearn policy
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified
duration
unicast Modify user-to-user (Unicast) policy
unknown-destination Modify unknown destination policy
unknown-protocol Modify unknown protocol policy
Traffic Class Configuration Mode
In this mode, you can create a traffic class and configure the level of service to packets assigned to the traffic class.
From Global Configuration mode, type the traffic-class command followed by a trafficClassName, and then press Enter.
host1(config)#traffic-class test123
host1(config-traffic-class)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
fabric-strict-priority Allow packets in this class to be dequeued out of the
fabric ahead of other traffic classes
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
Traffic Class Group Configuration Mode
In this mode, you can create and configure traffic-class groups, which can contain multiple traffic classes.
From Global Configuration mode, type the traffic-class-group command and a trafficClassGroupName, and press Enter.
host1(config)#traffic-class-group trafclasnameabcd
host1(config-traffic-class-group)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
traffic-class Set the traffic class belong to this group
Tunnel Group Configuration Mode
In this mode, you can define up to 31 tunnels for a tunnel group.
From Global Configuration mode, type aaa tunnel-group and the groupName, and press Enter.
host1(config)#aaa tunnel-group storm
host1(config-tunnel-group)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure tunnel tag
Tunnel Group Tunnel Configuration Mode
In this mode, you can configure attributes for a tunnel group tunnel.
From Tunnel Group Configuration mode, type tunnel and the tag number (in the range 1–31) for the tunnel, and press Enter.
host1(config-tunnel-group)#tunnel 1
host1(config-tunnel-group-tunnel)#?
address Configure tunnel endpoint address
client-name Configure the client hostname of the tunnel
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
identification Configure tunnel identification
log Configure logging settings
macro Run a CLI macro
max-sessions Configure maximum sessions for this tunnel
medium Configure tunnel medium
no Negate a command or set its default(s)
password Configure tunnel password
preference Configure tunnel preference
receive-window Configure the receive window size for this tunnel
router-name Configure the virtual-router for the domain name
run Run an exec mode command (alias command do)
server-name Configure the remote hostname for the tunnel
sleep Make the Command Interface pause for a specified duration
source-address Configure tunnel source address
type Configure tunnel type
Tunnel Profile Configuration Mode
In this mode, you can create and configure MPLS tunnel profiles.
From Global Configuration mode, type mpls tunnels profile and the profileName, and press Enter.
host1(config)#mpls tunnels profile storm
host1(config-tunnelprofile)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
tunnel Configure tunnel interface parameters
Tunnel Server Configuration Mode
In this mode, you can configure (provision) the maximum number of tunnel-service interfaces to be used on a dynamic tunnel-server port.
From Global Configuration mode, type tunnel-server and the slot number and port number of the dynamic tunnel-server port, and press Enter.
host1(config)#tunnel-server 2/2
host1(config-tunnel-server)#?
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
max-interfaces Configure maximum number of tunnel-server interfaces for
dynamic server port
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
VRF Configuration Mode
In this mode, you can create and configure VRF parameters for BGP/MPLS VPNs.
From Global Configuration mode, type ip vrf and the vrfName, and press Enter. Confirm the new VRF by pressing Enter.
host1(config)#ip vrf yankee
Proceed with new vrf creation? [confirm]
host1(config-vrf)#?
default Set a command to its default(s)
description Configure VRF specific description
do Run an exec mode command (alias command run)
exit Exit from the current command mode
export Specify VRF export characteristics
help Describe the interactive help system
import Specify VRF import characteristics
ip Configure IP characteristics
log Configure logging settings
macro Run a CLI macro
maximum Specify a maximum limit
no Negate a command or set its default(s)
rd Specify route distinguisher
route-target Specify VPN extended community Target
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
VR Group Configuration Mode
In this mode, you can add up to four virtual routers to the virtual router group. The accounting servers of the virtual routers in the group can receive AAA broadcast accounting records.
From Global Configuation mode, type aaa accounting vr-group and the vrGroupName, and press Enter.
host1(config)#aaa accounting vr-group westVrGroup38
host1(config-vr-group)#?
aaa Configure authentication, authorization, and accounting
characteristics
default Set a command to its default(s)
do Run an exec mode command (alias command run)
exit Exit from the current command mode
help Describe the interactive help system
log Configure logging settings
macro Run a CLI macro
no Negate a command or set its default(s)
run Run an exec mode command (alias command do)
sleep Make the Command Interface pause for a specified duration
support Enter Support mode