# Accessing Command Modes

Table 10 describes the command modes available in the CLI.

Table 10: Command Mode Overview

Mode Name | Use of Mode | Access to Mode | Exit from Mode
--- | --- | --- | ---
- AAA Profile Configuration | Configure new AAA profiles. | From Global Configuration mode, use aaa-profile command. Prompt:
      host1(config-aaa-profile)#
| Use the exit command to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Address Family Configuration | Configure BGP or RIP address family parameters. | From Global Configuration mode, use router bgp or router rip to enter Router Configuration mode. From Router Configuration, use the address-family command. Prompt:
      host1(config-router-af)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- ATM VC Class Configuration | Configure a class of attributes for an ATM data PVC. | From Global Configuration mode, use the vc-class atm command, and specify the name of the VC class. Prompt:
      host1(config-vc-class)#
| Use the exit command to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- ATM VC Configuration | Configure individual attributes for an ATM data PVC. | From Global Configuration mode, use the interface command to enter Subinterface Configuration mode. From Subinterface Configuration mode, use the pvc command. Prompt:
      host1(config-subif-atm-vc)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Classifier Group Configuration | Configure classifier groups with policy rules used for policy lists. | To create a classifier group, from Policy List Configuration mode use the classifier-group command and identify the CLACL and precedence. Prompt:
      host1(config-policy-list-
      classifier-group)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Color Mark Profile Configuration | Configure packet color after exit from rate-limit hierarchy. | From Rate Limit Profile Configuration Mode, use the color-mark-profile command and identify the interface type (IP, IPv6, MPLS). Prompt:
      host1(config-color-mark-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Control Plane Configuration | Configure SRP module policing. | From Global Configuration Mode, use the control-plane command. Prompt:
      host1(config-control-plane)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Controller Configuration | Configure physix`cal interfaces (for example, T3). | From Global Configuration mode, use the controller command. Prompt:
      host1(config-controll)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- DHCP Local Pool Configuration | Configure DHCP local pools. | From Global Configuration mode, use the ip dhcp-local pool command. Prompt:
      host1(config-dhcp-local)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Domain Map Configuration | Configure domain maps. | From Global Configuration mode, use the aaa domain-map command. Prompt:
      host1(config-domain-map)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Domain Map Tunnel Configuration | Configure tunnel parameters. | From Domain-Map Configuration mode, use the tunnel command. Prompt:
      host1(config-domain-m
      ap-tunnel)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- DoS Protection Group Configuration | Configure parameters for DoS protection groups. | From Global Configuration Mode, use the dos-protection-group command. Prompt:
      host1(config-dos-group)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Drop Profile Configuration | Configure drop profiles. | From Global Configuration mode, use the drop-profile command. Prompt:
      host1(config-drop-profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Explicit Path Configuration | Configure MPLS explicit path parameters. | From Global Configuration mode, specify the mpls explicit-path name command. Prompt:
      host1(config-expl-path)#
| Use the exit command to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Flow Cache Configuration | Configure parameters for the aggregation cache. | From Global Configuration Mode, use the ip flow-aggregation cache command. Prompt:
      host1(config-flow-cache)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Global Configuration | Enable a feature or function. Disable a feature or function. Configure a feature or function. | From Privileged Exec mode, use the configure command. Prompt:
      host1(config)#
| Use the exit command, or press Ctrl+z to return to Exec mode. Use the interface command to enter Interface Configuration mode.
- Interface Configuration | Create an interface. Modify the operation of an interface, such as bandwidth or clock rate. | From Global Configuration mode, use the interface command and identify the interface by slot/port. Prompt:
      host1(config-if)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IP NAT Pool Configuration | Create a NAT pool with a multiple, discontinuous range. | From Global Configuration mode, use the ip nat pool command and specify only a prefix length value. Prompt:
      host1(config-ipnat-pool)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IP PIM Data MDT Configuration | Create and activate data multicast distribution trees (MDTs) | From Global Configuration mode, use the ip pim data-mdt command and specify a name. Prompt:
      host1(config-ip-pim-
      data-mdt)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IP Service Profile Configuration | Create a service profile to use in route maps for subscriber management and to authenticate subscribers with RADIUS. | From Global Configuration mode, use the ip service-profile command and specify a service profile name with up to 32 ASCII characters. Prompt:
      host1(config-service-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec CA Identity Configuration | Create an IPSec identity used in online certificate requests and during negotiations with IKE peers. | From the Global Configuration mode, use the ipsec ca identity command. Prompt:
      host1(config-ca-identity)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec Identity Configuration | Create an IPSec identity used in offline certificate requests and during negotiations with IKE peers. | From the Global Configuration mode, use the ipsec identity command. Prompt:
      host1(config-ipsec-
      identity)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec IKE Policy Configuration | Define an IKE policy. | From the Global Configuration mode, use the ipsec ike-policy-rule command. Prompt:
      host1(config-ike-policy)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec Manual Key Configuration | Enter manual keys. | From Global Configuration mode, use the ipsec key manual pre-share command. Prompt:
      host1(config-manual-key)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec Peer Public Key Configuration | Enter an ISAKMP/IKE public key that a remote peer uses for RSA authentication without the need for a digital certificate. | From Global Configuration mode, use the ipsec key pubkey-chain rsa command. Prompt:
      host1(config-peer-
      public-key)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec Transport Profile Configuration | Configure a profile for L2TP over IPSec. | From Global Configuration mode, use the ipsec transport profile command. Prompt:
      host1(config-ipsec-transport-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPSec Tunnel Profile Configuration | Configure a profile for IPSec tunnels. | From Global Configuration mode, use the ipsec tunnel profile command. Prompt:
      host1(config-ipsec-tunnel-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IP Tunnel Destination Profile Configuration | Create a profile for dynamic GRE or DVMRP tunnels | From Global Configuration mode, use the gre destination profile command or the dvmrp destination profile command and specify a destination profile name. Prompt:
      host1(config-dest-profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- IPv6 Local Pool Configuration | Configure IPv6 local address pools. | From Global Configuration mode, use the ipv6 local-pool command and specify the name of the IPv6 local address pool. Prompt:
      host1(config-ipv6-local)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- L2 Transport Load-Balancing-Circuit Configuration | Configure Martini layer 2 transport circuit associated with load-balancing group. | From Global Configuration mode, specify the mpls l2transport load-balancing-group command. Prompt:
      host1(config-l2transp
      ort-load-balancing-ci
      rcuit)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- L2TP Destination Profile Configuration | Define the location of an LAC. | From Global Configuration mode, use the l2tp destination profile command. Prompt:
      host1(config-l2tp-dest-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- L2TP Destination Profile Host Configuration | Configure host profile attributes. | From L2TP Destination Profile Configuration mode, use the remote host command. Prompt:
      host1(config-l2tp-dest-
      profile-host)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- L2TP Tunnel Switch Profile Configuration | Configure the L2TP tunnel switching behavior for interfaces to which this profile is assigned. | From Global Configuration mode, use the l2tp switch-profile command, and specify the name of the L2TP tunnel switch profile. Prompt:
      host1(config-l2tp-tun
      nel-switch-profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Layer 2 Control Configuration | Configure ANCP (L2C) parameters. | From Global Configuration mode, use the l2c command. Prompt:
      host1(config-l2c)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Layer 2 Control Neighbor Configuration | Configure ANCP (L2C) neighbor parameters. | From Layer 2 Configuration mode, use the neighbor command. Prompt:
      host1(config-l2c-
      neighbor)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- LDP Configuration | Configure MPLS LDP profile parameters. | From Global Configuration mode, specify the mpls ldp profile command. Prompt:
      host1(config-ldp)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Line Configuration | Modify a virtual terminal line. | From Global Configuration mode, use the line command. Prompt:
      host1(config-line)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Local IPSec Transport Profile Configuration | Configure preshared IKE keys for L2TP over IPSec profiles. | From the IPSec Transport Profile Configuration mode, use the local ip address command. Prompt:
      host1(config-ipsec-transport-
      profile-local)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Local User Configuration | Configure user parameters in local user databases. | From Global Configuration mode, specify the aaa local username or the aaa local database command. Prompt:
      host1(config-local-user)#
| Use the exit command to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Map Class Configuration | Specify fragmentation for a map class. | From Global Configuration mode, specify the map-class frame-relay command. Prompt:
      host1(config-map-class)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Map List Configuration | Configure map list parameters. | From Global Configuration mode, use the map-list command. Prompt:
      host1(config-map-list)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Parent Group Configuration | Configure an external parent group. | From Global Configuration mode, use the parent-group command. Prompt:
      host1(config-parent-group)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Policy List Configuration | Configure policy lists. | To create a policy list, from Global Configuration mode use the policy-list command and identify the type of policy list. Prompt:
      host1(config-policy-list)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Policy List Parent Group Configuration | Configure an internal parent group in a hierarchy. | From Global Configuration Mode, use the policy-list command to create or access a policy list. From Policy List Configuration Mode, use the parent-group command. Prompt:
      host1(config-policy-l
      ist-parent-group)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Policy Parameter Configuration | Configure a policy parameter. | From Global Configuration mode, use the policy-parameter command. Prompt:
      host1(config-policy-parameter)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- PPPoE Service Name Table Configuration | Configure services for a PPPoE service name table. | From Global Configuration mode, use the pppoe-service-name-table command, and specify the alphanumeric name of the PPPoE service name table. Prompt:
      host1(config-pppoe-service-
      name-table)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Privileged Exec | Show system information. Set operating parameters. Access Global Configuration mode. | From User Exec mode, use the enable command. Prompt:
      host1#
| Use the disable command to return to User Exec mode. Use the exit command to log out of the CLI. Use the configure command to enter Global Configuration mode.
- Profile Configuration | Configure profiles. | From Global Configuration mode, use the profile command. Prompt:
      host1(config-profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- QoS Interface Set Configuration | Configure QoS interface sets. | From Global Configuration mode, use the qos-interface-set command. Prompt:
      host1(config-qos-
      interface-set)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- QoS Interface Superet Configuration | Configure QoS interface supersets. | From Global Configuration mode, use the qos-interface-superset command. Prompt:
      host1(config-qos-
      interface-superet)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- QoS Parameter Definition Configuration | Configure QoS parameter definitions. | From Global Configuration mode, use the qos-parameter-define command. Prompt:
      host1(config-qos-
      parameter-define)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- QoS Profile Configuration | Configure QoS profiles. | From Global Configuration mode, use the qos-profile command. Prompt:
      host1(config-qos-profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- QoS Shared Shaper Control Configuration | Configure variables within the simple shared shaper algorithm. | From Global Configuration mode, use the qos-shared-shaper-control command. Prompt:
      host1(config-qos-shar
      ed-shaper-control)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Queue Profile Configuration | Configure queue profiles. | From Global Configuration mode, use the queue-profile command. Prompt:
      host1(config-queue)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- RADIUS Configuration | Configure Broadband Remote Access Server (B-RAS) parameters. | From Global Configuration mode, use a radius server command. Prompt:
      host1(config-radius)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- RADIUS Relay Configuration | Configure RADIUS relay server parameters. | From Global Configuration mode, use the radius relay server command. Prompt:
      host1(config-radius-relay)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Rate Limit Profile Configuration | Configure an IP or L2TP rate limit parameters. | To create an IP rate limit profile, from Global Configuration mode use the ip rate-limit-profile command. To create an L2TP rate limit profile, from Global Configuration mode use the l2tp rate-limit-profile command. Prompt:
      host1(config-rate-limit-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Redundancy Configuration | Configure high availability (stateful SRP switchover). | From Global Configuration mode, use the redundancy command. Prompt:
      host1(config-redundancy)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Remote Neighbor Configuration | Configure remote neighbor parameters for OSPF, PIM, or RIP. | From Router Configuration mode, use the remote-neighbor command. Prompt:
      host1(config-router-rn)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Route Map Configuration | Configure routing tables and source and destination information. | From Global Configuration mode, use the route-map command. Prompt:
      host1(config-route-map)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Router Configuration | Configure a routing protocol. | From Global Configuration mode, specify a routing protocol with the router command. Prompt:
      host1(config-router)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- RSVP Configuration | Configure an RSVP profile. | From Global Configuration mode, use the mpls rsvp profile command. Prompt:
      host1(config-rsvp)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- RTR Configuration | Configure RTR parameters. | From Global Configuration mode, use the rtr command. Prompt:
      host1(config-rtr)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Scheduler Profile Configuration | Configure shaping parameters. Configure scheduler profiles. | From Global Configuration mode, use the scheduler-profile command. Prompt:
      host1(config-scheduler-

      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec menu.
- Service Session Profile Configuration | Configure attributes for Service Manager service session profiles. | From Global Configuration mode, use the service-management service-session-profile command. Prompt:
      host1(config-service-session-
      profile)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- SNMP Event Manager Configuration | Configure SNMP events. | From Global Configuration mode, use the snmp-server management-event command. Prompt:
      host1(config-mgmtevent)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec menu.
- Statistics Profile Configuration | Configure statistics profiles. | From Global Configuration mode, use the statistics-profile command. Prompt:
      host1(config-statistics-
      profile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec menu.
- Subinterface Configuration | Configure multiple virtual interfaces on a single physical interface. | From Global Configuration mode, use the interface command and identify the interface (slot/port.subinterface). Prompt:
      host1(config-subif)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Subscriber Policy Configuration | Configure a nondefault subscriber policy for a subscriber (client) bridge group interface. | From Global Configuration mode, use the subscriber-policy command and specify the alphanumeric name of the subscriber policy. Prompt:
      host1(config-policy)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Traffic Class Configuration | Configure a traffic class. | From Global Configuration mode, use the traffic-class command. Prompt:
      host1(config-traffic-class)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Traffic Class Group Configuration | Configure a traffic class group. | From Global Configuration mode, use the traffic-class-group command. Prompt:
      host1(config-traffic-class-
      group)
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Tunnel Group Configuration | Add up to 31 tunnel definitions to a tunnel group. | From Global Configuration mode, use the aaa tunnel-group command and specify the name of the tunnel. Prompt:
      host1(config-tunnel-group)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Tunnel Group Tunnel Configuration | Configure attributes for a tunnel group tunnel. | From Tunnel Group Configuration mode, use the tunnel command and specify the tag value (1-31) of the tunnel. Prompt:
      host1(config-tunnel-group-
      tunnel)#
| Use the exit command twice to return to Global Configuration Mode. Press Ctrl+z to return to Exec mode.
- Tunnel Profile Configuration | Configure tunnel profile parameters. | From Global Configuration mode, specify the mpls tunnels profile command. Prompt:
      host1(config-tunnelprofile)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- Tunnel Server Configuration | Configure the maximum number of tunnel-service interfaces for a dynamic tunnel-server port. | From Global Configuration mode, use the tunnel-server command and identify the slot/port location of the dynamic tunnel-server port. Prompt:
      host1(config-tunnel-server)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- User Exec | Change terminal settings on a temporary basis. Show system information. Access Privileged Exec mode. | Log into system. Prompt:
      host1>
| Use the enable command to enter Privileged Exec mode. Use the exit command to log out of the CLI.
- VRF Configuration | Configure VRF parameters for BGP/MPLS VPNs. | From Global Configuration mode, use the ip vrf command. Prompt:
      host1(config-vrf)#
| Use the exit command once to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.
- VR Group Configuration | Configure a virtual router group for AAA broadcast accounting. | From Global Configuration mode, use aaa accounting vr-group to enter VR Group Configuration mode. Prompt:
      host1(config-vr-group)#
| Use the exit command twice to return to Global Configuration mode. Press Ctrl+z to return to Exec mode.

| Note: Within any configuration mode, the commands that are available to the user include the commands defined for that configuration mode and all commands defined for Global Configuration mode. See Figure 21. For example, from Router Configuration mode, you could use the interface Global Configuration mode command without first explicitly going back to Global Configuration mode.

host1(router-config)# interface atm 4/0.3 host1(config-if)#

## Exec Modes

There are two Exec modes: User Exec and Privileged Exec.

After you log in to the system, the CLI is in User Exec mode. By default, the commands you can execute from User Exec mode provide only user-level access; however, you should password protect it to prevent unauthorized use. The User Exec commands allow you to perform such functions as:

- Change terminal settings on a temporary basis.
- Perform ping and trace commands.
- Display system information.

      host1>?
        clear       Clear system information
        default     Set a command to its default(s)
        dir         Display a list of local files
        disable     Reduce the command privilege level
        enable      Enable access to privileged commands
        erase       Erase configuration settings
        exit        Exit from the current command mode
        flash-disk  Perform flash disk operations
        help        Describe the interactive help system
        ip          Configure IP attributes on an interface
        ipv6        Configure IPv6 attributes
        l2tp        L2TP operations
        macro       Run a CLI macro
        mpls        Execute MPLS commands
        mtrace      Trace the path that packets will traverse from source to
                    destination for a given group
        no          Negate a command or set its default(s)
        ping        Send echo request to remote host
        show        Display system information
        sleep       Make the Command Interface pause for a specified duration
        terminal    Configure the terminal line settings
        test        Test the outcome of a command
        traceroute  Trace the path that packets traverse to their destination

Privileged Exec mode provides privileged-level access and therefore should also be password protected to prevent unauthorized use. Privileged Exec commands allow you to perform such functions as:

- Display system information.
- Set operating parameters.
- Gain access to Global Configuration mode.

### Password Protection

If the system administrator has configured the system to have a password, the CLI prompts you to enter that password before you receive access to Privileged Exec mode. The password is case sensitive and appears as asterisks on the screen.

To access Privileged Exec mode:

1. At the prompt, type enable and press Enter.
   host1>enable Password:
2. At the password prompt, type your password and press Enter.
   Password:*********host1#

   | Note: The > character in the command-line prompt changes to the # character.

       host1# ?
         baseline          Set a baseline for statistics
         clear             Clear a state
         clock             Set the system's clock
         configure         Enter Global Configuration mode
         copy              Copy files
         debug             Configure debugging functions
         default           Set a command to its default(s)
         delete            Delete a local file
         dir               Display a list of local files
         disable           Reduce the command privilege level
         disconnect        Disconnect remote CLI session
         enable            Enable access to privileged commands
         exit              Exit from the current command mode
         flash-disk        Perform flash disk operations
         halt              Halt the system in preparation for power down
         help              Describe the interactive help system
         ip                Configure IP attributes on an interface
         ipv6              Configure IPv6 attributes
         l2tp              L2TP operations
         log               Configure logging settings
         logout            Logout PPP Subscribers
         macro             Run a CLI macro
         more              Display contents of a file
         mpls              Execute MPLS commands
         mtrace      	      Trace the path that packets will traverse from source
                     	      to destination for a given group
         no                Negate a command or set its default(s)
         ping              Send echo request to remote host
         pppoe             Set PPPoE information
         profile-reassign  Perform profile reassignment
         redundancy        Perform a redundancy action
         reload            Halt and perform a cold restart
         rename            Rename a local file
         send              Send a message to specified lines
         show              Display system information
         sleep             Make the Command Interface pause for a specified
                           duration
         srp               Perform SRP operations
         synchronize       Manually synchronize redundant system controller file
                           system
         telnet            Access a remote system via telnet
         terminal          Configure the terminal line settings
         test              Test the outcome of a command
         traceroute        Trace the path that packets traverse to their
                           destination
         undebug           Disable debug logging functions
         virtual-router    Specify a virtual router
         write             Write the system's running configuration to a
                           destination

In addition, you can execute a script file (.scr), which is simply a file containing a sequence of CLI commands, through the configure command.

## Global Configuration Mode

Within Global Configuration mode, you can:

- Apply features globally to a router.
- Enable a feature or function.
- Disable a feature or function.
- Configure a feature or function.
- Access all Configuration modes.

To access Global Configuration mode, you begin in Privileged Exec mode. Type configure terminal and press Enter.

host1#configure terminal Enter configuration commands, one per line. End with ^Z.host1(config)#

The system is now in Global Configuration mode.

### Executing a Script File

To execute a script file:

1. From Privileged Exec mode, type configure and the filename you want to execute, and press Enter.
   host1#configure file File name:/myFile.scr Proceed with configure? [confirm]

   | Note: The filename must end with an .scr extension, and the file must contain a series of valid CLI commands. The file can be a local file on the router or a remote file on a host system.

2. Press y or Enter to confirm; pressing any other key aborts the procedure.
   host1#

For more information, see the section Managing Files in Managing the System .

## AAA Profile Configuration Mode

From this mode, you can restrict or allow the use of domain names, translate an original domain name to a new domain name, or create domain name aliases.

From Global Configuration mode, type the aaa profile command and a profileName, and then press Enter.

    host1(config)#aaa profile charlie
    host1(config-aaa-profile)#?
      allow      Configure the authorization domain name
      default    Set a command to its default(s)
      deny       Configure the authorization domain name
      do         Run an exec mode command (alias command run)
      exit       Exit from the current command mode
      help       Describe the interactive help system
      log        Configure logging settings
      macro      Run a CLI macro
      no         Negate a command or set its default(s)
      run        Run an exec mode command (alias command do)
      sleep      Make the Command Interface pause for a specified duration
      translate  Configure the translation map for domain name

## Address Family Configuration Mode

From this mode, you can configure address family parameters for BGP VPN services or RIP VPN services.

From Global Configuration mode, type the router bgp command to enter Router Configuration mode for BGP. Type either the address-family ipv4 or address-family vpnv4 command, and then press Enter.

    host1(config)#router bgp 100
    host1(config-router)#address-family ?
      ipv4   Configure IPv4 address family
      vpnv4  Configure VPN-IPv4 address family

From Global Configuration mode, type the router rip command to enter Router Configuration mode for RIP. Type the address-family ipv4 command, and then press Enter.

    host1(config)#router rip 100
    host1(config-router)#address-family ?
      ipv4   Configure IPv4 address family

## ATM VC Configuration Mode

In this mode, you can configure individual attributes for an ATM data PVC. These attributes include the service category, encapsulation method, Inverse Address Resolution Protocol (Inverse ARP), and F5 Operation, Administration, and Management (OAM) parameters.

From Global Configuration mode, type the interface command and specify the ATM subinterface identifier to enter Subinterface Configuration mode. From Subinterface Configuration mode, type the pvc command and specify the virtual circuit descriptor (VCD), virtual path identifier (VPI) and virtual circuit identifier (VCI) values (in the format vpi/vci), and then press Enter.

    host1(config)#interface atm 3/2.1
    host1(config-subif)#pvc 100 0/100
    host1(config-subif-atm-vc)#?
      cbr            Configure the Constant Bit Rate (CBR) service class
      class-vc       Assign a Virtual Circuit class to the Permanent Virtual
                     Circuit
      default        Set a command to its default(s)
      do             Run an exec mode command (alias command run)
      encapsulation  Configure the ATM encapsulation
      exit           Exit from the current command mode
      help           Describe the interactive help system
      inarp          Configure the Inverse Address Resolution Protocol (InARP)
                     protocol
      log            Configure logging settings
      macro          Run a CLI macro
      no             Negate a command or set its default(s)
      oam            Configure Operations, Administration, and Management (OAM)
      oam-pvc        Configure Operations, Administration, and Management (OAM) for
                     Permanent Virtual Circuit (PVC)
      run            Run an exec mode command (alias command do)
      sleep          Make the Command Interface pause for a specified duration
      ubr            Configure the Unspecified Bit Rate (UBR) service class
      vbr-nrt        Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
                     service class
      vbr-rt         Configure the Variable Bit Rate Real Time (VBR-rt) service
                     class

## ATM VC Class Configuration Mode

In this mode, you can configure a class of attributes for an ATM data PVC. The VC class can include attributes for the service category, encapsulation method, F5 OAM options, and Inverse ARP. You then apply the set of attributes as a group by assigning the VC class to an individual PVC, to all PVCs created on a specified ATM major interface, to all PVCs created on a specified ATM 1483 subinterface, or to a base profile from which bulk-configured VC ranges are dynamically created.

From Global Configuration mode, type the vc-class atm command followed by an alphanumeric VC class name of up to 32 characters, and press Enter.

    host1(config)#vc-class atm premium-subscriber-class
    host1(config-vc-class)#?
      cbr            Configure the Constant Bit Rate (CBR) service class
      default        Set a command to its default(s)
      do             Run an exec mode command (alias command run)
      encapsulation  Configure the ATM encapsulation
      exit           Exit from the current command mode
      help           Describe the interactive help system
      inarp          Configure the Inverse Address Resolution Protocol (InARP)
                     protocol
      log            Configure logging settings
      macro          Run a CLI macro
      no             Negate a command or set its default(s)
      oam            Configure Operations, Administration, and Management (OAM)
      oam-pvc        Configure Operations, Administration, and Management (OAM) for
                     Permanent Virtual Circuit (PVC)
      run            Run an exec mode command (alias command do)
      sleep          Make the Command Interface pause for a specified duration
      ubr            Configure the Unspecified Bit Rate (UBR) service class
      vbr-nrt        Configure the Variable Bit Rate Non-Real Time (VBR-nrt)
                     service class
      vbr-rt         Configure the Variable Bit Rate Real Time (VBR-rt) service
                     class

## Classifier Group Configuration Mode

In this mode, you can configure the set of rules for a classification group in a policy list that you can attach to an interface.

From Policy List Configuration mode, type the classifier-group command and its attributes, and then press Enter.

    host1(config-policy-list)#classifier-group ipCLACL10 precedence 75
    host1(config-policy-list-classifier-group)#?
      color               Create a color policy
      default             Set a command to its default(s)
      do                  Run an exec mode command (alias command run)
      exit                Exit from the current command mode
      filter              Create a filter policy
      forward             Create a forward policy
      help                Describe the interactive help system
      log                 Configure logging settings
      macro               Run a CLI macro
      mark                Create a set TOS byte policy
      next-hop            Create a next-hop policy
      next-interface      Create a next-interface policy
      no                  Negate a command or set its default(s)
      rate-limit-profile  Create a rate-limit policy
      run                 Run an exec mode command (alias command do)
      sleep               Make the Command Interface pause for a specified duration
      suspend             Suspend a policy rule
      traffic-class       Create a traffic class policy
      user-packet-class   Create a user packet class policy

## Color Mark Profile Configuration Mode

In this mode, you can configure translation for a color to a type-dependent mark for TOS or EXP for an IP, IPv6 or MPLS interface.

From Rate Limit Profile Configuration mode, type the color-mark-profile command and specify a profileName, and then press Enter.

    host1(config-rate-limit-profile)# mpls   color-mark-profile myprofile
    host1(config-color-mark-profile)#?
      default      Set a command to its default(s)
      do           Run an exec mode command (alias command run)
      exit         Exit from the current command mode
      green-mark   Apply TOS mark to IP packets classified Green by the rate limit
                   hierarchy
      help         Describe the interactive help system
      log          Configure logging settings
      macro        Run a CLI macro
      mask-value   Mask for all TOS values applied by the color-mark profile
      no           Negate a command or set its default(s)
      red-mark     Apply TOS mark to IP packets classified Red by the rate limit
                   hierarchy
      run          Run an exec mode command (alias command do)
      sleep        Make the Command Interface pause for a specified duration
      yellow-mark  Apply TOS mark to IP packets classified Yellow by the rate limit
                   hierarchy

## Control Plane Configuration Mode

In this mode, you can configure policing for a specific protocol.

From Global Configuration mode, type the control-plane command and press Enter.

    host1(config)#control-plane
    host1(config-control-plane)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      policer  Configure policing
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Controller Configuration Mode

You can configure physical interfaces such as a T3 in Controller Configuration mode.

From Global Configuration mode, type the appropriate controller command and its attributes, and then press Enter.

    host1(config)#controller t3 9/1
    host1(config-controll)#

    host1(config)#controller ?
      e1     Configure a channelized E1 controller
      e3     Configure a E3 controller
      sonet  Configure a Sonet controller
      t1     Configure a channelized T1 controller
      t3     Configure a T3 controller

## DHCP Local Pool Configuration Mode

In this mode, you can configure DHCP local pools. For example, you can specify a DNS or NetBIOS server.

From Global Configuration mode, type the command ip dhcp-local pool and a poolName, and then press Enter.

    host1(config)#ip dhcp-local pool charlie
    host1(config-dhcp-local)#?
      default                   Set a command to its default(s)
      default-router            The default-router to use for this pool
      dns-server                The dns-server to use for this pool
      do                        Run an exec mode command (alias command run)
      domain-name               The domain name for the pool
      exit                      Exit from the current command mode
      grace-period              The grace period to be applied to leases
      help                      Describe the interactive help system
      lease                     The lease time for addresses from this pool
      link                      Link to another DHCP Pool
      log                       Configure logging settings
      macro                     Run a CLI macro
      netbios-name-server       The netbios-name-server to use for this pool
      netbios-node-type         The netbios-node-type to use for this pool
      network                   The network specified for this pool
      no                        Negate a command or set its default(s)
      reserve                   Reserve an ip address for a specific Mac Address
      run                       Run an exec mode command (alias command do)
      server-address            The DHCP Server address to send to clients
      sleep                     Make the Command Interface pause for a specified
                                duration
      snmpTrap                  Enable snmp pool utilization traps
      use-release-grace-period  Apply the grace period to released leases
      warning                   Configure utilization warnings

## Domain Map Configuration Mode

In this mode, you can map a user domain name to a virtual router and loopback interface.

From Global Configuration mode, type the aaa domain-map command and the domain name value as found in the client’s login name. Then press Enter.

    host1(config)#aaa domain-map charlie76
    host1(config-domain-map)#?
      address-pool-name  Configure the address-pool-name for the domain name
      atm                Configure ATM parameters
      default            Set a command to its default(s)
      do                  Run an exec mode command (alias command run)
      exit               Exit from the current command mode
      help               Describe the interactive help system
      ip-hint            Configure the IP hint feature for the domain
      local-interface    Configure the local interface value for remote clients
      log                Configure logging settings
      loopback           Configure the loopback interface to use when RX has an
                         unnumbered interface to the PPP client
      macro              Run a CLI macro
      no                 Negate a command or set its default(s)
      override-user      Configure the username and password values to use instead
                         of the values from the remote client
      padn               Configure pppoe active discovery network parameters for
                         the domain name
      router-name        Configure the virtual-router for the domain name
      run                Run an exec mode command (alias command do)
      sleep              Make the Command Interface pause for a specified duration
      strip-domain       Configure the domain name stripping feature for the domain
      tunnel             Configure tunnel tag
      virtual-router     Configure the virtual-router for the domain name

## Domain Map Tunnel Configuration Mode

In this mode, you can configure tunnel parameters such as the tunnel’s endpoint.

From Domain-Map Configuration mode, type tunnel and a tunnelNumber, and press Enter.

    host1(config-domain-map)#tunnel 17
    host1(config-domain-map-tunnel)#?
      address         Configure tunnel endpoint address
      client-name Configure the client hostname of the tunnel
      default         Set a command to its default(s)
      exit            Exit from the current command mode
      do              Run an exec mode command (alias command run)
      help            Describe the interactive help system
      hostname        Configure the client hostname of the tunnel
      identification  Configure tunnel identification
      log             Configure logging settings
      macro           Run a CLI macro
      max-sessions    Configure maximum sessions for this tunnel
      medium          Configure tunnel medium
      no              Negate a command or set its default(s)
      password        Configure tunnel password
      preference      Configure tunnel preference
      run             Run an exec mode command (alias command do)
      server-name     Configure the remote hostname for the tunnel
      sleep           Make the Command Interface pause for a specified duration
      source-address  Configure tunnel source address
      type            Configure tunnel type

## DoS Protection Group Configuration Mode

In this mode, you can configure parameters for Denial of Service (DoS) protection groups.

From Global Configuration mode, type the dos-protection-group command and press Enter.

    host1(config)#dos-protection-group
    host1(config-dos-protection)#?
      default   Set a command to its default(s)
      do        Run an exec mode command (alias command run)
      exit      Exit from the current command mode
      help      Describe the interactive help system
      log       Configure logging settings
      macro     Run a CLI macro
      no        Negate a command or set its default(s)
      priority  Specify the priority
      protocol  Specify the protocol
      run       Run an exec mode command (alias command do)
      sleep     Make the Command Interface pause for a specified duration
      use       Configure usagehost1(config-dos-protection-group)#?

## Drop Profile Configuration Mode

In this mode, you can configure drop profiles for QoS. Drop profiles control RED dropping behavior.

From Global Configuration mode, type the drop-profile command, and press Enter.

    host1(config)#drop profile
    host1(config-drop-profile)#?
      average-length-exponent  Select TAQL coefficient
      committed-threshold      Specify committed queue thresholds and maximum drop
                               probability
      conformed-threshold      Specify conformed queue thresholds and maximum drop
                               probability
      default                  Set a command to its default(s)
      do                       Run an exec mode command (alias command run)
      exceeded-threshold       Specify exceeded queue thresholds and maximum drop
                               probability
      exit                     Exit from the current command mode
      help                     Describe the interactive help system
      log                      Configure logging settings
      macro                    Run a CLI macro
      no                       Negate a command or set its default(s)
      run                      Run an exec mode command (alias command do)
      sleep                    Make the Command Interface pause for a specified duration

## Explicit Path Configuration Mode

From this mode, you can name and configure an explicit path within MPLS.

From Global Configuration mode, type mpls explicit-path name and the explicitPathName, and press Enter.

    host1(config)#mpls explicit-path name xyz
    host1(config-expl-path)#?
      append-after  Add an entry after a specified index
      default       Set a command to its default(s)
      do            Run an exec mode command (alias command run)
      exit          Exit from the current command mode
      help          Describe the interactive help system
      index         Specify the index of the entry to be added or edited
      list          List part or all of the entries in current explicit path
      log           Configure logging settings
      macro         Run a CLI macro
      next-address  Configure an IP address at the last hop of the explicit path
      no            Negate a command or set its default(s)
      run           Run an exec mode command (alias command do)
      sleep         Make the Command Interface pause for a specified duration

## Flow Cache Configuration Mode

In this mode, you can configure parameters for the aggregation cache.

From Global Configuration mode, type the ip flow-aggregation cache command and press Enter.

    host1(config)#ip flow-aggregation cache
    host1(config-flow-cache)#?
      cache    Configure Flow Stats cache parameters
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      enabled  Start flow cache operation
      exit     Exit from the current command mode
      export   Configure Flow-Cache export parameters
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Interface Configuration Mode

From Interface Configuration mode, you can enable many system features for each interface you create. Interface Configuration commands allow you to:

- Create an interface.
- Modify the operation of an interface.
- Access Subinterface Configuration mode.

From Global Configuration mode, type interface and identify the interface you want to configure and press Enter.

host1(config)#interface atm 0/1 host1(config-if)#

The CLI is now in Interface Configuration mode.

    host1(config)#interface ?
      atm              ATM interface
      fastEthernet     IEEE 802.3 fastEthernet interface
      gigabitEthernet  IEEE 802.3 gigabitEthernet interface
      hssi             High Speed Serial interface
      ip               Ip shared interface
      ipv6             Ipv6 shared interface
      lag              Link Aggregation interface
      loopback         Loopback interface
      mlframe-relay    Multilink frame-relay interface
      mlppp            Multilink PPP interface
      null             Null interface
      pos              Packet over SONET interface
      serial           Serial interface
      tunnel           Tunnel interface

Some Interface Configuration commands can affect general interface parameters, such as bandwidth and clock rate. For interface-specific commands, such as commands for ATM interfaces, see the appropriate chapter in this documentation set.

| Note: Although it appears in the list of configurable interfaces, you cannot configure any values on a null interface. For information about using the null interface, see JunosE IP Services Configuration Guide.

## IP NAT Pool Configuration Mode

In this mode, you can specify the information that the system uses in creating IP Network Address Translation (NAT) pools. From Global Configuration mode, type ip nat pool multiplerange prefix-length and press Enter.

    host1(config)#ip nat pool multiplerange prefix-length 30
    host1(config-ipnat-pool)#?
      address  Configure address ranges
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## IP PIM Data MDT Configuration Mode

In this mode, you can specify parameters for data MDTs.

From Global Configuration mode, type ip pim data-mdt, and press Enter:

    host1:pe1:pe13(config)#ip pim data-mdt
    host1:western:eastern(config-ip-pim-data-mdt)#?
      default           Set a command to its default(s)
      do                Run an exec mode command (alias command run)
      exit              Exit from the current command mode
      help              Describe the interactive help system
      log               Configure logging settings
      macro             Run a CLI macro
      mdt-data-delay    Configure MDT_DATA_DELAY timeout
      mdt-data-holdown  Configure MDT_DATA_HOLDOWN timeout
      mdt-data-timeout  Configure MDT_DATA_TIMEOUT
      mdt-interval      Configure MDT_INTERVAL timer
      no                Negate a command or set its default(s)
      route-map         Configure route-map
      run               Run an exec mode command (alias command do)
      sleep             Make the Command Interface pause for a specified duration
      tunnel            Configure tunnel parameters

## IP Service Profile Configuration Mode

In this mode, you can specify the information that the system uses in creating IP service profiles.

From Global Configuration mode, type ip service-profile and the service profile name, and press Enter.

    host1(config)#ip service-profile radius
    host1(config-service-profile)#?
      default      Set a command to its default(s)
      do           Run an exec mode command (alias command run)
      domain       Configure a username domain
      exit         Exit from the current command mode
      help         Describe the interactive help system
      include      Configure an attribute to be included in a username
      log          Configure logging settings
      macro        Run a CLI macro
      no           Negate a command or set its default(s)
      password     Configure a user password
      run          Run an exec mode command (alias command do)
      sleep        Make the Command Interface pause for a specified duration
      user-name    Configure a user name
      user-prefix  Configure a username prefix

## IPSec CA Identity Configuration Mode

In this mode, you can specify the information that the system uses in online certificate requests and during negotiations with its peers.

From Global Configuration mode, type ipsec ca identity, and press Enter.

    host1(config)#ipsec ca identity
    host1(config-ca-identity)#?
      crl                Certificate Revocation List checking
      default            Set a command to its default(s)
      do                 Run an exec mode command (alias command run)
      enrollment         Configure enrollment parameters
      exit               Exit from the current command mode
      help               Describe the interactive help system
      issuer-identifier  issuer identifier
      log                Configure logging settings
      macro              Run a CLI macro
      no                 Negate a command or set its default(s)
      root               Specify root proxy
      run                Run an exec mode command (alias command do)
      sleep              Make the Command Interface pause for a specified

## IPSec Identity Configuration Mode

In this mode, you can specify the information that the system uses in offline certificate requests and during negotiations with its peers.

From Global Configuration mode, type ipsec identity, and press Enter.

    host1(config)#ipsec identity
    host1(config-ipsec-identity)#?
      common-name   Common Name
      country       Country name
      default       Set a command to its default(s)
      do            Run an exec mode command (alias command run)
      domain-name   Domain name
      exit          Exit from the current command mode
      help          Describe the interactive help system
      log           Configure logging settings
      macro         Run a CLI macro
      no            Negate a command or set its default(s)
      organization  Organization name
      sleep         Make the Command Interface pause for a specified duration

## IPSec IKE Policy Configuration Mode

In this mode, you can create an IKE policy, which is used during IKE phase 1 negotiation.

From the Global Configuration mode, type ipsec ike-policy-rule and the policyNumber, and press Enter.

    host1(config)#ipsec ike-policy-rule 10
    host1(config-ike-policy)#?
      aggressive-mode  Allows aggressive mode negotiation for the tunnel
      authentication   Configure the authentication method
      default          Set a command to its default(s)
      do               Run an exec mode command (alias command run)
      encryption       Configure the encryption algorithm within an IKE policy
      exit             Exit from the current command mode
      group            Configure the Diffie-Hellman group identifier
      hash             Configure the hash algorithm within an IKE policy
      help             Describe the interactive help system
      lifetime         Configure the time an SA will live before expiration
      log              Configure logging settings
      macro            Run a CLI macro
      no               Negate a command or set its default(s)
      run              Run an exec mode command (alias command do)
      sleep            Make the Command Interface pause for a specified duration

## IPSec Manual Key Configuration Mode

In this mode, you can enter the manual key that a peer uses for authentication during the tunnel establishment phase.

From the Global Configuration mode, type ipsec key manual pre-share and the peerIPaddress, and press Enter.

    host1(config)#ipsec key manual pre-share 10.10.1.1
    host1(config-manual-key)#?
      default     Set a command to its default(s)
      do          Run an exec mode command (alias command run)
      exit        Exit from the current command mode
      help        Describe the interactive help system
      key         Manually specify a key
      log         Configure logging settings
      macro       Run a CLI macro
      masked-key  Enter a masked key (not for manual entry, show config generates)
      no          Negate a command or set its default(s)
      run         Run an exec mode command (alias command do)
      sleep       Make the Command Interface pause for a specified duration

## IPSec Peer Public Key Configuration Mode

In this mode, you can configure the ISAKMP/IKE public key that a remote peer uses for RSA authentication during the tunnel establishment phase without the need for a digital certificate.

From Global Configuration mode, type ipsec key pubkey-chain rsa and either the IP address or fully qualified domain name of the remote peer, and press Enter.

    host1(config)#ipsec key pubkey-chain rsa address 192.168.50.5
    host1(config-peer-public-key)#?
      default     Set a command to its default(s)
      do          Run an exec mode command (alias command run)
      exit        Exit from the current command mode
      help        Describe the interactive help system
      key-string  Enter key string
      log         Configure logging settings
      macro       Run a CLI macro
      no          Negate a command or set its default(s)
      run         Run an exec mode command (alias command do)
      sleep       Make the Command Interface pause for a specified duration

## IPSec Transport Profile Configuration Mode

In this mode, you can configure an IP Security (IPSec) transport profile, which is used for Layer 2 Tunneling Protocol (L2TP) over IPSec connections.

From the Global Configuration mode, type ipsec transport profile, the profileName, virtual-router vrName, ip address ipAddress, and press Enter.

    host1(config)#ipsec transport profile secureL2tp virtual-router default ip address 0.0.0.0
    host1(config-ipsec-transport-profile)#?
      application    Configure the application type that is protected by the l2tp
      default        Set a command to its default(s)
      do             Run an exec mode command (alias command run)
      exit           Exit from the current command mode
      help           Describe the interactive help system
      lifetime       Configure the renegotiation time
      local          Configure local endpoint of the transport connection
      log            Configure logging settings
      macro          Run a CLI macro
      no             Negate a command or set its default(s)
      pfs            Configure perfect forward secrecy
      run            Run an exec mode command (alias command do)
      sleep          Make the Command Interface pause for a specified duration
      transform-set  Configure the transform set used by ipsec transport profile

## IPSec Tunnel Profile Configuration Mode

In this mode, you can configure a profile of an IPSec tunnel.

From Global Configuration mode, type ipsec tunnel profile and the profileName, and press Enter.

    host1(config)#ipsec tunnel profile profile1
    host1(config-ipsec-tunnel-profile)#?
      default                  Set a command to its default(s)
      do                       Run an exec mode command (alias command run)
      domain-suffix            Configure a domain suffix to be appended to users on
                               this profile
      exit                     Exit from the current command mode
      extended-authentication  Configure extended authentication parameters
      help                     Describe the interactive help system
      ike                      Configure IKE characteristics
      ip                       Configure local IP characteristics
      lifetime                 Configure the phase 2 life parameters
      local                    Configure local characteristics
      log                      Configure logging settings
      macro                    Run a CLI macro
      max-interfaces           Configure the maximum allowed dynamic interface
                               instantiations
      no                       Negate a command or set its default(s)
      peer                     Configure peer characteristics
      pfs                      Configure the phase 2 perfect forward secrecy
      run                      Run an exec mode command (alias command do)
      sleep                    Make the Command Interface pause for a specified
                               duration
      transform                Configure the phase 2 transforms allowed on this
                               IPSEC tunnel profile
      tunnel                   Configure tunnel parameters

## IP Tunnel Destination Profile Mode

In this mode, you can specify parameters for GRE or DVMRP dynamic tunnels.

From Global Configuration mode, type gre destination profile or dvmrp destination profile and the destination profile name, and press Enter.

    host1(config)#gre destination profile global
    host1(config-dest-profile)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      enable   Enable a tunnel parameter
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      profile  Assign a profile
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      tunnel   Configure a tunnel parameter

    host1(config)#dvmrp destination profile global
    host1(config-dest-profile)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      enable   Enable a tunnel parameter
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      profile  Assign a profile
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      tunnel   Configure a tunnel parameter

## IPv6 Local Pool Configuration Mode

In this mode, you can specify the IPv6 local address pool from which prefixes are allocated to the requesting router in networks that use DHCPv6. From Global Configuration mode, type ipv6 local pool poolName and press Enter.

    host1(config)#ipv6 local pool dhcpv6pd_pool
    host1(config-v6–locall)#?
      default            Set a command to its default(s)
      dns-domain-search  Specify a search domain
      dns-server         Specify the IPv6 DNS server address
      do                 Run an exec mode command (alias command run)
      exclude-prefix     Specify prefix(es) to be excluded from allocation
      exit               Exit from the current command mode
      help               Describe the interactive help system
      log                Configure logging settings
      macro              Run a CLI macro
      no                 Negate a command or set its default(s)
      prefix             Specify the IPv6 prefix range
      run                Run an exec mode command (alias command do)
      sleep              Make the Command Interface pause for a specified duration

| Note: You must enable the IPv6 local address pool feature to be able to configure IPv6 local address pools.

## L2 Transport Load-Balancing-Circuit Configuration Mode

In this mode, you can specify a member subinterface for a Martini layer 2 circuit that is associated with a load-balancing group.

From Global Configuration mode, type mpls l2transport load-balancing-group, specify a group number and a Martini circuit, and press Enter.

    host1(config)#mpls l2transport load-balancing-group 100 mpls-relay 10.1.1.1 30
    host1(config-l2transport-load-balancing-circuit)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      member   Configure members of a l2transport load-balancing circuit
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## L2TP Destination Profile Configuration Mode

In this mode, you can create the destination profile that defines the location of an L2TP Access Concentrator (LAC) and define the attributes used when an L2TP Network Server (LNS) communicates with an LAC. The destination is necessary to enable an LAC to connect to the LNS.

From Global Configuration mode, type l2tp destination profile, the profileName, an ipAddress, and press Enter.

    host1(config)#l2tp destination profile augusta ip address 123.45.76.16
    host1(config-l2tp-dest-profile)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      remote   Configure L2TP remote parameters
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## L2TP Destination Profile Host Configuration Mode

In this mode, you can set and modify L2TP host profile attributes, such as the proxy Link Control Protocol (LCP), the local hostname, the local IP address, or the interface profile.

From Global Configuration mode, enter L2TP Destination Profile mode (see above), and type remote host and a hostName, and press Enter.

    host1(config-l2tp-dest-profile)#remote host george
    host1(config-l2tp-dest-profile-host)#?
      default  Set a command to its default(s)
      disable  Disable L2TP parameter for remote host
      do       Run an exec mode command (alias command run)
      enable   Enable L2TP parameter for remote host
      exit     Exit from the current command mode
      help     Describe the interactive help system
      local    Configure L2TP local parameters for remote host
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      profile  Assign a profile for remote host
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      tunnel   Configure L2TP tunnel parameters for remote host

## L2TP Tunnel Switch Profile Configuration Mode

In this mode, you can create an L2TP tunnel switch profile, which configures the L2TP tunnel switching behavior for the interfaces to which this profile is assigned. Issue the avp command from this mode to define the L2TP tunnel switching behavior for a specified L2TP attribute-value pair (AVP) type.

From Global Configuration mode, type the l2tp switch-profile command followed by an alphanumeric profile name of up to 64 characters, and press Enter.

    host1(config)#l2tp switch-profile concord
    host1(config-l2tp-tunnel-switch-profile)#?
      avp      Configure AVP behavior
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Layer 2 Control Configuration Mode

In this mode, you can define session timeout values and access the L2C Neighbor Configuration mode to specify the L2C neighbor.

From Global Configuration mode, type l2C and press Enter.

    host1(config)#l2c
    host1(config-l2c)#?
      default          Set a command to its default(s)
      do               Run an exec mode command (alias command run)
      exit             Exit from the current command mode
      help             Describe the interactive help system
      log              Configure logging settings
      macro            Run a CLI macro
      neighbor         Configure l2c neighbor parameters
      no               Negate a command or set its default(s)
      run              Run an exec mode command (alias command do)
      session-timeout  Configure the l2c time-out attribute
      sleep            Make the Command Interface pause for a specified duration

## Layer 2 Control Neighbor Configuration Mode

In this mode, you can specify a neighbor ID and the maximum number of branches that the neighbor can have.

From Global Configuration mode, type neighbor and press Enter.

    host1(config-l2c)#neighbor
    host1(config-l2c-neighbor)#?
      default       Set a command to its default(s)
      do            Run an exec mode command (alias command run)
      exit          Exit from the current command mode
      help          Describe the interactive help system
      id            Configure neighbor-id associated with neighbor
      log           Configure logging settings
      macro         Run a CLI macro
      max-branches  Configure max number of branches for neighbor
      no            Negate a command or set its default(s)
      run           Run an exec mode command (alias command do)
      sleep         Make the Command Interface pause for a specified duration

## LDP Configuration Mode

In this mode, you can create and configure MPLS Label Distribution Protocol (LDP) profile parameters.

From Global Configuation mode, type mpls ldp interface profile and the profileName, and press Enter.

    host1(config)#mpls ldp interface profile shell
    host1(config-ldp)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      hello    Configure hello parameters
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Line Configuration Mode

In this mode, you can modify the operation of a virtual terminal (vty) line.

From Global Configuration mode, type the line vty command and either the lineNumber or the rangeOfLineNumbers you want to configure, and press Enter.

| Note: The factory default is 5 vty lines. However, you can increase the number of vty lines available by typing the start number and end number of the vty line range. Once you execute the line vty command, you will have access to line numbers up to the ending line number.

    host1(config)#line vty 0 29
    host1(config-line)#?
      access-class         Restrict or permit telnet access based on an access list
      data-character-bits  Set the number of bits per character used by the display
      default              Set a command to its default(s)
      do                   Run an exec mode command (alias command run)
      exec-banner          Enable the exec banner
      exec-timeout         Set the inactivity timeout
      exit                 Exit from the current command mode
      help                 Describe the interactive help system
      log                  Configure logging settings
      login                Require the use of passwords for vty logins
      macro                Run a CLI macro
      motd-banner          Enable the message of the day banner
      no                   Negate a command or set its default(s)
      password             Configure the password for line access
      run                  Run an exec mode command (alias command do)
      sleep                Make the Command Interface pause for a specified duration
      timeout              Specify the login timeout value for the selected line(s)

| Note: The privilege command is available in Line Configuration mode when the user is logged in at privilege level 15. For more information, see Privileged-Level Access and CLI Command Privileges .

## Local IPSec Transport Profile Configuration

In this mode, you can configure preshared IKE keys for IPSec transport profiles.

From the IPSec Transport Profile Configuration mode, type local ip address and the ipAddress, and press Enter.

    host1(config-ipsec-transport-profile)#local ip address 10.10.1.1
    host1(config-ipsec-transport-profile-local)#?
      default           Set a command to its default(s)
      do                Run an exec mode command (alias command run)
      exit              Exit from the current command mode
      help              Describe the interactive help system
      log               Configure logging settings
      macro             Run a CLI macro
      no                Negate a command or set its default(s)
      pre-share         Specify pre-shared group key based on local ip address
      pre-share-masked  A pre-encrypted key, generated by show config rather than
                        interactive
      run               Run an exec mode command (alias command do)
      sleep             Make the Command Interface pause for a specified duration

## Local User Configuration Mode

In this mode, you can configure parameters for user entries in local user databases.

From the Global Configuration mode, type either aaa local username and the userName and databaseName or aaa local database and the databaseName. Then press Enter.

    host1(config)#aaa local username curt38 database westLocal12
    host1(config-local-user)#?
      default                     Set a command to its default(s)
      do                          Run an exec mode command (alias command run)
      exit                        Exit from the current command mode
      help                        Describe the interactive help system
      ip-address                  Specify an IP address for the user
      ip-address-pool             Specify an IP address pool for the user
      log                         Configure logging settings
      macro                       Run a CLI macro
      no                          Negate a command or set its default(s)
      operational-virtual-router  Specify an operational virtual router for the
                                  user
      password                    Configure the password
      run                         Run an exec mode command (alias command do)
      secret                      Configure the secret
      sleep                       Make the Command Interface pause for a specified
                                  duration
      support                     Enter Support mode

## Map Class Configuration Mode

In this mode, you can specify Frame Relay End-to-End fragmentation and reassembly for a map class. Optionally, you can specify the maximum payload size of a fragment or specify fragmentation only or reassembly only.

From Global Configuration mode, type the map-class frame-relay command and the mapClassName you want to configure, and press Enter.

    host1(config)#map-class frame-relay testmapclass
    host1(config-map-class)#?
      default      Set a command to its default(s)
      do           Run an exec mode command (alias command run)
      exit         Exit from the current command mode
      frame-relay  Configure frame relay parameters
      help         Describe the interactive help system
      log          Configure logging settings
      macro        Run a CLI macro
      no           Negate a command or set its default(s)
      run          Run an exec mode command (alias command do)
      sleep        Make the Command Interface pause for a specified duration

## Map List Configuration Mode

In this mode, you can configure map list parameters. In Map List Configuration mode, commands such as map-list and ip atm-vc are used to configure ATM NBMA interfaces.

From Global Configuration mode, type map-list and a mapListName, and press Enter.

    host1(config)#map-list mjt3330
    host1(config-map-list)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      ip       Add IP address to the map
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Parent Group Configuration Mode

In this mode, you can configure a parent group in a hierarchy.

From Global Configuration mode, type the parent-group command and specify a parentGroupName, and press Enter.

    host1(config)#parent-group group1
    host1(config-parent-group)#?
      default             Set a command to its default(s)
      do                  Run an exec mode command (alias command run)
      exit                Exit from the current command mode
      help                Describe the interactive help system
      log                 Configure logging settings
      macro               Run a CLI macro
      next-parent         Specify the next parent group to call in hierarchy
      no                  Negate a command or set its default(s)
      rate-limit-profile  Specify a hierarchical rate limit profile
      run                 Run an exec mode command (alias command do)
      sleep               Make the Command Interface pause for a specified

## Policy List Configuration Mode

In this mode, you can configure a policy list—that is, a set of rules—that you can attach to an interface. You can modify a policy list and update it wherever the policy list is used in the configuration.

To create a policy list, from Global Configuration mode type policy-list command preceded by the type of policy and press Enter. For example,

host1(config)#l2tp policy-list routeL2tp100

| Note: If you do not include the type of policy, the system creates an IP policy list.

    host1(config)#ip policy-list routeForABBCCorp
    host1(config-policy-list)#?
      classifier-group       Specify the classifier list
      color                  Create a color policy
      default                Set a command to its default(s)
      do                     Run an exec mode command
      exit                   Exit from the current command mode
      filter                 Create a filter policy
      forward                Create a forward policy
      help                   Describe the interactive help system
      log                    Configure logging settings
      macro                  Run a CLI macro
      mark                   Create a set TOS byte policy
      next-hop               Create a next-hop policy
      next-interface         Create a next-interface policy
      no                     Negate a command or set its default(s)
      rate-limit-profile     Create a rate-limit policy
      run                    Run an exec mode command (alias command do)
      sleep                  Make the Command Interface pause for a specified
                             duration
      suspend                Suspend a policy rule
      traffic-class          Create a traffic class policy
      traffic-shape-profile  Create a traffic-shape policy
      user-packet-class      Create a user packet class policy

## Policy List Parent Group Configuration Mode

In this mode, you can configure a parent group in a hierarchy.

From Policy List Configuration Mode, type the parent-group command and specify a parentGroupName, and press Enter.

    host1(config)#policy-list grouppol1
    host1(config-policy-list)#parent-group group1
    host1(config-policy-list-parent-group)#?
      default             Set a command to its default(s)
      do                  Run an exec mode command (alias command run)
      exit                Exit from the current command mode
      help                Describe the interactive help system
      log                 Configure logging settings
      macro               Run a CLI macro
      no                  Negate a command or set its default(s)
      rate-limit-profile  Specify the hierarchical rate limit profile
      run                 Run an exec mode command (alias command do)
      sleep               Make the Command Interface pause for a specified

## Policy Parameter Configuration Mode

In this mode, you can configure a policy parameter.

From Global Configuration mode, type the policy-parameter command and specify a policyParameterType, the hierarchical keyword, and press Enter.

    host1(config)#policy-parameter param1 hierarchical
    host1(config-policy-parameter)#?
      aggregation-node  Configure the aggregation node value
      default           Set a command to its default(s)
      do                Run an exec mode command (alias command run)
      exit              Exit from the current command mode
      help              Describe the interactive help system
      log               Configure logging settings
      macro             Run a CLI macro
      no                Negate a command or set its default(s)
      run               Run an exec mode command (alias command do)
      sleep             Make the Command Interface pause for a specified time

## PPPoE Service Name Table Configuration Mode

In this mode, you can configure entries for a PPPoE service name table. PPPoE clients use these entries to request that an access concentrator (AC), such as an E Series router, support certain services. Issue the service command from this mode to configure a specific service name entry, or to specify that the AC should ignore (drop), rather than respond to (terminate, the default action), a PPPoE Active Discovery Initiation (PADI) request from a client containing the empty service name tag.

From Global Configuration mode, type the pppoe-service-name-table command followed by an alphanumeric table name of up to 32 characters, and press Enter.

    host1(config)#pppoe-service-name-table serviceTable1
    host1(config-pppoe-service-name-table)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      service  Configure service-name table entries
      sleep    Make the Command Interface pause for a specified duration

## Profile Configuration Mode

In this mode, you can configure a profile to subsequently configure dynamic IP interfaces.

From Global Configuration mode, type the profile command followed by a profile name of up to 80 characters, and press Enter.

    host1(config)#profile germany78
    host1(config-profile)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      ip       Configure IP characteristics
      l2tp     Configure L2TP characteristics
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      ppp      Configure PPP parameters
      pppoe    Pppoe information
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## QoS Interface Set Configuration Mode

In this mode, you can can configure QoS interface sets.

From Global Configuration mode, type the qos-interface-set command followed by an interfaceSetName, and press Enter.

    host1(config)#qos-interface-set video
    host1(config-interface-set)#?
    default                Set a command to its default(s)
      do                     Run an exec mode command (alias command run)
      exit                   Exit from the current command mode
      help                   Describe the interactive help system
      log                    Configure logging settings
      macro                  Run a CLI macro
      member-interface-type  Define the member interface type of the interface set
      no                     Negate a command or set its default(s)
      qos-interface-parent   Select a QoS interface super set as the parent of this
                             interface.
      qos-parameter          Instantiate a QoS parameter for this interface
      qos-profile            Attach/Detach a qos-profile
      restricted             Define restricted interface
      run                    Run an exec mode command (alias command do)
      sleep                  Make the Command Interface pause for a specified
                             duration

## QoS Interface Superset Configuration Mode

In this mode, you can configure QoS interface supersets.

From Global Configuration mode, type the qos-interface-superset command followed by an interfaceSupersetName, and press Enter.

    host1(config)#qos-interface-superset voice
    host1(config-interface-set)#?
      default               Set a command to its default(s)
      do                    Run an exec mode command (alias command run)
      exit                  Exit from the current command mode
      help                  Describe the interactive help system
      log                   Configure logging settings
      macro                 Run a CLI macro
      no                    Negate a command or set its default(s)
      qos-interface-parent  Define parent of the interface set
      qos-parameter         Instantiate a QoS parameter for this interface
      qos-profile           Attach/Detach a qos-profile
      restricted            Define restricted interface
      run                   Run an exec mode command (alias command do)
      sleep                 Make the Command Interface pause for a specified
                            duration

## QoS Parameter Definition Configuration Mode

In this mode, you can configure QoS parameter definitions.

From Global Configuration mode, type the qos-parameter-define command followed by a QosParameterDefinitionName, and press Enter.

    host1(config)#qos-parameter-define vpSharedShaper1
    host1(config-qos-parameter-define)#?
      controlled-interface-type  Configure the valid interface types controlled by
                                 this parameter
      default                    Set a command to its default(s)
      do                         Run an exec mode command (alias command run)
      exit                       Exit from the current command mode
      help                       Describe the interactive help system
      instance-interface-type    Configure the interface types upon which
                                 parameters can be instantiated
      log                        Configure logging settings
      macro                      Run a CLI macro
      no                         Negate a command or set its default(s)
      range                      Set the valid range of a QoS parameter
      run                        Run an exec mode command (alias command do)
      sleep                      Make the Command Interface pause for a specified
                                 duration
      subscriber-interface-type  Configure interface types representing subscriber
                                 interfaces

## QoS Profile Configuration Mode

In this mode, you can specify queue profiles and scheduler profiles in combination with interface types.

From Global Configuration mode, type the qos-profile command followed by a QosProfileName, and press Enter.

    host1(config)#qos-profile testabc
    host1(config-qos-profile)#?
    atm          ATM interface
      atm-vc       ATM-VC interface
      bridge       Bridge interface
      default      Set a command to its default(s)
      do           Run an exec mode command (alias command run)
      ethernet     Ethernet interface
      exit         Exit from the current command mode
      fr-vc        Frame Relay subinterface
      help         Describe the interactive help system
      ip           IP interface
      ip-tunnel    IP FROM-tunnel interface
      l2tp-tunnel  L2tp FROM-tunnel interface
      log          Configure logging settings
      lsp          Lsp (MPLS) interface
      macro        Run a CLI macro
      no           Negate a command or set its default(s)
      run          Run an exec mode command (alias command do)
      serial       Serial interface
      server-port  Server Port interface
      sleep        Make the Command Interface pause for a specified duration
      svlan        Stacked VLAN subinterface
      vlan         VLAN subinterface

## QoS Shared Shaper Control Configuration

In this mode, you can configure variables within the simple shared shaper algorithm to control the minimum dynamic rate for all simple shared shapers on the router.

From Global Configuration mode, type the qos-shared-shaper-control command and press Enter.

    host1(config)#qos-shared-shaper-control
    host1(config-qos-shared-shaper-control)#?
      convergence-factor            Configure how quickly the simple shared shaper
                                    converges to a calculated rate
      default                       Set a command to its default(s)
      do                            Run an exec mode command (alias command run)
      exit                          Exit from the current command mode
      help                          Describe the interactive help system
      log                           Configure logging settings
      macro                         Run a CLI macro
      maximum-voql                  Configure the simple shared shaper's maximum
                                    virtual output queue length
      minimum-dynamic-rate-percent  Configure the minimum dynamic rate for a simple
                                    shared shaper as a percentage of the
                                    shared-shaping-rate
      no                            Negate a command or set its default(s)
      reaction-factor               Configure how the simple shared shaper reacts
                                    to changes in measured rate
      run                           Run an exec mode command (alias command do)
      sleep                         Make the Command Interface pause for a
                                    specified duration

## Queue Profile Configuration Mode

In this mode, you can configure queue profiles and various queue profile parameters, such as constraints on queue lengths or queue buffer weights.

From Global Configuration mode, type the queue-profile command followed by a queueProfileName, and press Enter.

    host1(config)#queue-profile testabcd1234
    host1(config-queue)#?
      buffer-weight       Set drop threshold in proportion to this weight
      committed-length    Set min and max constraints for committed threshold
      conformed-fraction  Set conformed threshold as a percentage of committed
      conformed-length    Set min and max constraints for conformed threshold
      default             Set a command to its default(s)
      do                  Run an exec mode command (alias command run)
      exceeded-fraction   Set exceeded threshold as a percentage of committed
      exceeded-length     Set min and max constraints for exceeded threshold
      exit                Exit from the current command mode
      help                Describe the interactive help system
      log                 Configure logging settings
      macro               Run a CLI macro
      no                  Negate a command or set its default(s)
      run                 Run an exec mode command (alias command do)
      sleep               Make the Command Interface pause for a specified duration

## RADIUS Configuration Mode

In this mode, you can configure various parameters of your RADIUS authentication, accounting, and dynamic-request servers.

From Global Configuration mode, type either the radius authentication server, radius accounting server, or radius dynamic-request server command with the server ipAddress, and press Enter.

    host1(config)#radius authentication server 1.2.1.3
    host1(config-radius)#?
      deadtime      Configure the amount of time a timed-out server is dropped for usage
      default       Set a command to its default(s)
      do            Run an exec mode command (alias command run)
      exit          Exit from the current command mode
      help          Describe the interactive help system
      key           Configure the secret used in RADIUS client to server exchange
      log           Configure logging settings
      macro         Run a CLI macro
      max-sessions  Configure the number of outstanding requests allowed to the server
      no            Negate a command or set its default(s)
      retransmit    Configure the number of times to retransmit RADIUS request
                    before failing
      run           Run an exec mode command (alias command do)
      sleep         Make the Command Interface pause for a specified duration
      timeout       Configure the number of seconds to wait for a RADIUS response
                    before retransmitting
      udp-port      Configure the RADIUS server's UDP port

## RADIUS Relay Configuration Mode

In this mode, you can configure various parameters of your RADIUS relay authentication and accounting servers.

From Global Configuration mode, type either the radius relay authentication server or radius relay accounting server command, and press Enter.

    host1(config)#radius relay authentication server
    radius authentication serverhost1(config-radius-relay)#?
      default   Set a command to its default(s)
      do        Run an exec mode command (alias command run)
      exit      Exit from the current command mode
      help      Describe the interactive help system
      key       Configure the secret used in RADIUS client to relay server exchange
      log       Configure logging settings
      macro     Run a CLI macro
      no        Negate a command or set its default(s)
      run       Run an exec mode command (alias command do)
      sleep     Make the Command Interface pause for a specified duration
      udp-port  Configure the RADIUS relay server's udp port

## Rate Limit Profile Configuration Mode

In this mode, you can set parameters for an IP or L2TP rate-limit profile, which is a set of bandwidth attributes and associated actions that become part of a policy list. The policy list is then applied to the ingress or egress of an interface.

To create a hierarchical rate-limit-profile for an IP interface, from Global Configuration mode type rate-limit-profile and a profileName, and add the keyword hierarchical, and press Enter.

To create an IP rate-limit profile, from Global Configuration mode type ip rate-limit-profile and a profileName, and press Enter.

To create an L2TP rate limit profile, from Global Configuration mode type l2tp rate-limit-profile and a profileName, and press Enter.

| Note: If you do not include either the ip or l2tp keywords, the system creates an IP rate limit profile.

    host1(config)#ip rate-limit-profile fm78930
    host1(config-rate-limit-profile)#?
      committed-action  Set the committed access rate action
      committed-burst   Set the committed access rate burst size in Bytes
      committed-rate    Set the committed access rate value in bits per second
      conformed-action  Set the conformed access rate action
      default           Set a command to its default(s)
      do                Run an exec mode command (alias command run)
      exceeded-action   Set the exceeded action
      exit              Exit from the current command mode
      help              Describe the interactive help system
      log               Configure logging settings
      macro             Run a CLI macro
      mask-val          Set mask to be applied with mark values
      no                Negate a command or set its default(s)
      peak-burst        Set the peak burst size in Bytes
      peak-rate         Set the peak access rate in bits per second
      run               Run an exec mode command (alias command do)
      sleep             Make the Command Interface pause for a specified duration

## Redundancy Configuration Mode

In this mode, you can activate high availability (SRP switchover) by issuing the mode high-availability command.

From Global Configuration mode, type the redundancy command and press Enter.

    host1(config-router)#redundancy
    host1(config-redundancy)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      mode     Configure redundancy mode
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration

## Remote Neighbor Configuration Mode

In this mode, you can configure remote neighbor parameters for Routing Information Protocol (RIP), Protocol Independent Multicast (PIM), and Open Shortest Path First (OSPF).

From Global Configuration mode, type either router rip, router pim, or router ospf and the processID. Press Enter. You are now in Router Configuration mode.

From Router Configuration mode, type the remote-neighbor command and the appropriate attributes, and press Enter.

    host1(config-router)#remote-neighbor 10.13.5.61
    host1(config-router-rn)#?
      authentication        Configure authentication
      default               Set a command to its default(s)
      distribute-list       Specify an access list to be a distribute list
      do                    Run an exec mode command (alias command run)
      exit                  Exit from the current command mode
      exit-remote-neighbor  Exit the remote-neighbor configuration mode
      help                  Describe the interactive help system
      log                   Configure logging settings
      macro                 Run a CLI macro
      no                    Negate a command or set its default(s)
      receive               Set reception characteristics
      route-map             Specify a route map to apply to outgoing routes
      run                   Run an exec mode command (alias command do)
      send                  Set transmit characteristics
      sleep                 Make the Command Interface pause for a specified
                            duration
      split-horizon         Enable Split-horizon
      time-to-live          Configure ttl used to send to this neighbor
      update-source         Source address to be used for transmit

## Route Map Configuration Mode

In this mode, you can create and modify route maps.

From Global Configuration mode, type the route-map command and the appropriate routeMapNumber, and press Enter.

    host1(config)#route-map unis889
    host1(config-route-map)#?
      default    Set a command to its default(s)
      do         Run an exec mode command (alias command run)
      exit       Exit from the current command mode
      help       Describe the interactive help system
      log        Configure logging settings
      macro      Run a CLI macro
      match      Identify this entry as requiring an attribute match
      match-set  Identify this entry to match and set attributes
      no         Negate a command or set its default(s)
      run        Run an exec mode command (alias command do)
      set        Configure this entry to set attributes
      sleep      Make the Command Interface pause for a specified duration

## Router Configuration Mode

In this mode, you can configure a routing protocol using router commands.

From Global Configuration mode, type the router command and the appropriate router attributes, and press Enter.

    host1(config)#router bgp 2378
    host1(config-router)#?
      address-family                Enter address family configuration mode
      aggregate-address             Create an aggregate entry in BGP routing table
      auto-summary                  Automatic summarization of redistributed routes
                                    to their natural network masks
      bgp                           Configure BGP
      default                       Set a command to its default(s)
      default-fields                Set default fields for show commands
      default-information           Configure the distribution of default routing
                                    information
      disable-dynamic-redistribute  disable dynamic importing of routing
                                    information with the latest policy
      distance                      Configure administrative distances for routes
      do                            Run an exec mode command (alias command run)
      exit                          Exit from the current command mode
      help                          Describe the interactive help system
      ip                            Configure the type of route to be contributed
                                    by this BGP address family
      limits                        Configure limits on internal BGP tables
      log                           Configure logging settings
      macro                         Run a CLI macro
      maximum-paths                 Configure the maximum number of equal-cost paths
      neighbor                      Specify neighbor properties
      network                       Identify a network for BGP to announce
      no                            Negate a command or set its defaults
      overload                      Configure BGP behaviour when reaching overload
                                    state (no more resources available)
      redistribute                  Configure the redistribution of routing
                                    information from another protocol
      rib-out                       Configure rib-out storage for all BGP peers
      run                           Run an exec mode command (alias command do)
      sleep                         Make the Command Interface pause for a
                                    specified duration
      synchronization               Enable synchronization with the IGP
      table-map                     Specify a table map to map external entry
                                    attributes into routing table
      timers                        Configure the keep-alive interval and the hold-time

## RSVP Configuration Mode

In this mode, you can create and configure MPLS Resource Reservation Protocol (RSVP) parameters.

From Global Configuration mode, type mpls rsvp interface profile and the profileName, and press Enter.

    host1(config)#mpls rsvp interface profile sprint
    host1(config-rsvp)#?
      cleanup-timeout-factor  Configure the timeout factor
      default                 Set a command to its default(s)
      do                      Run an exec mode command (alias command run)
      exit                    Exit from the current command mode
      help                    Describe the interactive help system
      log                     Configure logging settings
      macro                   Run a CLI macro
      no                      Negate a command or set its default(s)
      refresh-period          Configure refresh period
      run                     Run an exec mode command (alias command do)
      sleep                   Make the Command Interface pause for a specified
                              duration

## RTR Configuration Mode

In this mode, you can configure Response Time Reporter (RTR) parameters. The RTR feature allows you to monitor your network’s performance and its resources by measuring response times and the availability of your network devices.

From Global Configuration mode, type rtr and the mapNumber, and press Enter.

    host1(config)#rtr 784078348
    host1(config-rtr)#?
      default                  Set a command to its default(s)
      do                       Run an exec mode command (alias command run)
      exit                     Exit from the current command mode
      frequency                Specify the frequency interval
      help                     Describe the interactive help system
      hops-of-statistics-kept  Specify the hops capture
      log                      Configure logging settings
      macro                    Run a CLI macro
      max-response-failure     Specify the maximum number of consecutive failures
      no                       Negate a command or set its default(s)
      operations-per-hop       Specify a number of operations per hop
      owner                    Specify the owner of entry
      request-data-size        Specify the request payload size
      run                      Run an exec mode command (alias command do)
      samples-of-history-kept  Specify the maximum history samples
      sleep                    Make the Command Interface pause for a specified duration
      tag                      Specify the user defined tag
      timeout                  Specify the operation timeout
      tos                      Specify a value for the ToS byte
      type                     Specify the type of the entry

## Scheduler Profile Configuration Mode

In this mode, you can configure a scheduler profile. You can then set the shaping rate value, enable the strict-priority scheduling for the scheduler node, or set the weighted-round-robin (WRR) value of the scheduler node or queue.

From Global Configuration mode, type scheduler-profile and the scheduleProfileName that you want to create or configure, and press Enter.

    host1(config)#scheduler-profile A990
    host1(config-scheduler-profile)#?
      default          Set a command to its default(s)
      do               Run an exec mode command (alias command run)
      exit             Exit from the current command mode
      help             Describe the interactive help system
      log              Configure logging settings
      macro            Run a CLI macro
      no               Negate a command or set its default(s)
      run              Run an exec mode command (alias command do)
      shaping-rate     Shape the node or queue to the specified rate
      sleep            Make the Command Interface pause for a specified duration
      strict-priority  Dequeue strict priority packets ahead of other packets
      weight           Set the relative weight of the node or queue

## Service Session Profile Configuration Mode

In this mode, you can set and modify Service Manager service session profile attributes, such as time, volume, and statistics.

From Global Configuration mode, type the service-management service-session-profile command and the profileName, and then press Enter.

    host1(confi)#service-management service-session-profile vodISP1
    host1(config-service-session-profile)#?
      default     Set a command to its default(s)
      do          Run an exec mode command (alias command run)
      exit        Exit from the current command mode
      help        Describe the interactive help system
      log         Configure logging settings
      macro       Run a CLI macro
      no          Negate a command or set its default(s)
      run         Run an exec mode command (alias command do)
      sleep       Make the Command Interface pause for a specified duration
      statistics  Configure statistics
      time        Configure time
      volume      Configure volume

## SNMP Event Manager Configuration Mode

In this mode, you can configure certain SNMP triggers for events, what occurs when an event is triggered, resource limits for triggers, and some trap notification options.

From Global Configuration mode, type the snmp-server management-event command and then press Enter.

    host1(config)#snmp-server management-event
    host1(config-mgmtevent)#?
      default   Set a command to its default(s)
      do        Run an exec mode command (alias command run)
      event     Specify what happens when an event is triggered
      exit      Exit from the current command mode
      help      Describe the interactive help system
      log       Configure logging settings
      macro     Run a CLI macro
      no        Negate a command or set its default(s)
      resource  Specify the resource limits
      run       Run an exec mode command (alias command do)
      sleep     Make the Command Interface pause for a specified duration
      trigger   Specify the conditions that lead to events

## Statistics Profile Configuration Mode

In this mode, you can configure a statistics profile. You can then set the rate period during which statistics are gathered, enable statistics gathering, and enable the counting of drop and forwarding events.

From Global Configuration mode, type statistics-profile and the statisticsProfileName that you want to create or configure, and press Enter.

    host1(config)#statistics-profile statpro-1
    host1(config-statistics-profile)#?
      committed-drop-threshold   Set threshold for logging a committed-drop event
      conformed-drop-threshold   Set threshold for logging a conformed-drop event
      default                    Set a command to its default(s)
      do                         Run an exec mode command (alias command run)
      exceeded-drop-threshold    Set threshold for logging an exceeded-drop event
      exit                       Exit from the current command mode
      forwarding-rate-threshold  Set threshold for logging a forwarding-rate event
      help                       Describe the interactive help system
      log                        Configure logging settings
      macro                      Run a CLI macro
      no                         Negate a command or set its default(s)
      rate-period                Set the time period for calculating queue rates
      run                        Run an exec mode command (alias command do)
      sleep                      Make the Command Interface pause for a specified
                                 duration

## Subinterface Configuration Mode

In this mode, you can configure one or more virtual interfaces, called subinterfaces, on a single physical interface. The system supports this feature with ATM and Frame Relay.

Both ATM and Frame Relay provide permanent virtual circuits (PVCs) that can be grouped under separate subinterfaces configured on a single physical interface. Subinterfaces allow multiple encapsulations for a protocol on a single interface.

From Interface Configuration mode, indicate a subinterface by typing the interface command and an interfaceSpecifier in slot/port.subinterface format, and then press Enter. For example:

host1(config-if)#interface atm 3/2.6 host1(config-subif)#

## Subscriber Policy Configuration Mode

In this mode, you can configure a policy (a set of forwarding and filtering rules) that defines how a subscriber (client) bridge group interface should handle various packet types. After you define the policy, use the bridge subscriber-policy command (from Global Configuration mode) to associate the policy with a bridge group interface.

From Global Configuration mode, type the subscriber-policy command followed by an alphanumeric policy name of any character length, and press Enter.

    host1(config)#subscriber-policy client1
    host1(config-policy)#?
      arp                  Modify arp policy
      broadcast            Modify broadcast policy
      default              Set a command to its default(s)
      do                   Run an exec mode command (alias command run)
      exit                 Exit from the current command mode
      help                 Describe the interactive help system
      ip                   Modify ip policy
      log                  Configure logging settings
      macro                Run a CLI macro
      mpls                 Modify mpls policy
      multicast            Modify multicast policy
      no                   Negate a command or set its default(s)
      pppoe                Modify PPPoE policy
      relearn              Modify relearn policy
      run                  Run an exec mode command (alias command do)
      sleep                Make the Command Interface pause for a specified
                           duration
      unicast              Modify user-to-user (Unicast) policy
      unknown-destination  Modify unknown destination policy
      unknown-protocol     Modify unknown protocol policy

## Traffic Class Configuration Mode

In this mode, you can create a traffic class and configure the level of service to packets assigned to the traffic class.

From Global Configuration mode, type the traffic-class command followed by a trafficClassName, and then press Enter.

    host1(config)#traffic-class test123
    host1(config-traffic-class)#?
      default                 Set a command to its default(s)
      do                      Run an exec mode command (alias command run)
      exit                    Exit from the current command mode
      fabric-strict-priority  Allow packets in this class to be dequeued out of the
                              fabric ahead of other traffic classes
      help                    Describe the interactive help system
      log                     Configure logging settings
      macro                   Run a CLI macro
      no                      Negate a command or set its default(s)
      run                     Run an exec mode command (alias command do)
      sleep                   Make the Command Interface pause for a specified duration

## Traffic Class Group Configuration Mode

In this mode, you can create and configure traffic-class groups, which can contain multiple traffic classes.

From Global Configuration mode, type the traffic-class-group command and a trafficClassGroupName, and press Enter.

    host1(config)#traffic-class-group trafclasnameabcd
    host1(config-traffic-class-group)#?
      default        Set a command to its default(s)
      do             Run an exec mode command (alias command run)
      exit           Exit from the current command mode
      help           Describe the interactive help system
      log            Configure logging settings
      macro          Run a CLI macro
      no             Negate a command or set its default(s)
      run            Run an exec mode command (alias command do)
      sleep          Make the Command Interface pause for a specified duration
      traffic-class  Set the traffic class belong to this group

## Tunnel Group Configuration Mode

In this mode, you can define up to 31 tunnels for a tunnel group.

From Global Configuration mode, type aaa tunnel-group and the groupName, and press Enter.

    host1(config)#aaa tunnel-group storm
    host1(config-tunnel-group)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      tunnel   Configure tunnel tag

## Tunnel Group Tunnel Configuration Mode

In this mode, you can configure attributes for a tunnel group tunnel.

From Tunnel Group Configuration mode, type tunnel and the tag number (in the range 1–31) for the tunnel, and press Enter.

    host1(config-tunnel-group)#tunnel 1
    host1(config-tunnel-group-tunnel)#?
      address         Configure tunnel endpoint address
      client-name     Configure the client hostname of the tunnel
      default         Set a command to its default(s)
      do              Run an exec mode command (alias command run)
      exit            Exit from the current command mode
      help            Describe the interactive help system
      identification  Configure tunnel identification
      log             Configure logging settings
      macro           Run a CLI macro
      max-sessions    Configure maximum sessions for this tunnel
      medium          Configure tunnel medium
      no              Negate a command or set its default(s)
      password        Configure tunnel password
      preference      Configure tunnel preference
      receive-window  Configure the receive window size for this tunnel
      router-name     Configure the virtual-router for the domain name
      run             Run an exec mode command (alias command do)
      server-name     Configure the remote hostname for the tunnel
      sleep           Make the Command Interface pause for a specified duration
      source-address  Configure tunnel source address
      type            Configure tunnel type

## Tunnel Profile Configuration Mode

In this mode, you can create and configure MPLS tunnel profiles.

From Global Configuration mode, type mpls tunnels profile and the profileName, and press Enter.

    host1(config)#mpls tunnels profile storm
    host1(config-tunnelprofile)#?
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      tunnel   Configure tunnel interface parameters

## Tunnel Server Configuration Mode

In this mode, you can configure (provision) the maximum number of tunnel-service interfaces to be used on a dynamic tunnel-server port.

From Global Configuration mode, type tunnel-server and the slot number and port number of the dynamic tunnel-server port, and press Enter.

    host1(config)#tunnel-server 2/2
    host1(config-tunnel-server)#?
      default         Set a command to its default(s)
      do              Run an exec mode command (alias command run)
      exit            Exit from the current command mode
      help            Describe the interactive help system
      log             Configure logging settings
      macro           Run a CLI macro
      max-interfaces  Configure maximum number of tunnel-server interfaces for
                      dynamic server port
      no              Negate a command or set its default(s)
      run             Run an exec mode command (alias command do)
      sleep           Make the Command Interface pause for a specified duration

## VRF Configuration Mode

In this mode, you can create and configure VRF parameters for BGP/MPLS VPNs.

From Global Configuration mode, type ip vrf and the vrfName, and press Enter. Confirm the new VRF by pressing Enter.

    host1(config)#ip vrf yankee
    Proceed with new vrf creation? [confirm]
    host1(config-vrf)#?
      default       Set a command to its default(s)
      description   Configure VRF specific description
      do            Run an exec mode command (alias command run)
      exit          Exit from the current command mode
      export        Specify VRF export characteristics
      help          Describe the interactive help system
      import        Specify VRF import characteristics
      ip            Configure IP characteristics
      log           Configure logging settings
      macro         Run a CLI macro
      maximum       Specify a maximum limit
      no            Negate a command or set its default(s)
      rd            Specify route distinguisher
      route-target  Specify VPN extended community Target
      run           Run an exec mode command (alias command do)
      sleep         Make the Command Interface pause for a specified duration

## VR Group Configuration Mode

In this mode, you can add up to four virtual routers to the virtual router group. The accounting servers of the virtual routers in the group can receive AAA broadcast accounting records.

From Global Configuation mode, type aaa accounting vr-group and the vrGroupName, and press Enter.

    host1(config)#aaa accounting vr-group westVrGroup38
    host1(config-vr-group)#?
      aaa      Configure authentication, authorization, and accounting
               characteristics
      default  Set a command to its default(s)
      do       Run an exec mode command (alias command run)
      exit     Exit from the current command mode
      help     Describe the interactive help system
      log      Configure logging settings
      macro    Run a CLI macro
      no       Negate a command or set its default(s)
      run      Run an exec mode command (alias command do)
      sleep    Make the Command Interface pause for a specified duration
      support  Enter Support mode