CCNA Router Commands for the 640-607 exam

独孤

CCNA Router Commands for the 640-607 exam
  
Basics
Enter Privileged Exec Mode enable
Leave Privileged Exec Mode and go back to User Mode disable
Log out of the router, end the console session,same as exit command exit
Log out of the router, end the console session, same as logout command logout
Setup a basic configuration by answering questions setup
Show the current configuration stored in RAM show running-config
Show the startup configuration stored in NVRAM show startup-config
Display IOS version (configuration register value is also displayed) show version
Show IOS files stored in flash and available free space show flash
Save the current configuration into NVRAM copy running-config startup-config
Use the startup configuration stored in NVRAM copy startup-config running-config
Load a saved configuration from a TFTP server into NVRAM copy tftp running-config
Upgrade the IOS stored in flash from an image stored on a TFTP server copy tftp flash
Create a backup of router IOS and store it in a file on a TFTP server copy flash tftp
Instruct the router to boot from a specific IOS image stored in flash boot system flash [filename]
Instruct the router to boot from a specific IOS image stored on a TFTP server boot system tftp [filename]
Enter Global Configuration Mode config terminal
Set a Message-of-the-day banner to be displayed before the user logs in to the router banner motd # message #
Set a login message to be displayed before the user logs in to the router banner login # message #
Set a banner to be displayed after the user logs in to the router banner exec # message #
(incoming is displayed with a reverse telnet connection, exec with all others) banner incoming # message #
Give the router a hostname (default is router) hostname [name]
Disable DNS lookups (enabled by default) no ip domain-lookup
Specify DNS servers for for hostname and address resolution ip name-server server-ip1 [server-ip2...server-ip6]
Disable the HTTP server (enabled by default) no ip http server
Change the size of the history buffer (default is 10 commands) terminal history size 20
Passwords
Set a password for Privileged Exec Mode enable password [password]
Set an encrypted password for Privileged Exec Mode enable secret [password]
Set password TELNET access line vty 0 4
login
password [passwords]  
Set a password for Console Port access line console 0
login
password [passwords]  
Interface configuration
Configure the interface Ethernet 0 interface e 0
Configure the first Serial interface interface s 0
Configure the second Token Ring interface interface t 1
Enable an interface no shutdown
Disable an interface shutdown
Set the clock rate on a DCE (make a router a DCE) clock rate 56000
Set the bandwidth bandwidth 64
Display the status of an interface show interface serial 1
Display DTE/DCE state show controller serial 1
Set keepalive period keepalive 10
IP
Disable IP routing (IP routing is enabled by default) no ip routing
Display IP routing table show ip route
Configure an interface with an IP address ip address 192.168.1.12 255.255.255.0
Enable RIP router rip
     network [network-address1]
     network [network-address2…]  
Enable Split Horizon on an interface ip split-horizon
Enable RIP Triggered updates (only send updates when routing table has changed instead of every 30 seconds) ip rip triggered
Disable automatic route summarization no auto-summary
Enable IGRP router igrp [as-number]
     network [network-address1]
     network [network-address2…]  
PPP
Enable PPP on an interface encapsulation ppp
Set PPP authentication method to PAP ppp authentication PAP
Set PPP authentication method to CHAP ppp authentication CHAP
Set PPP authentication method to first try PAP and then CHAP ppp authentication PAP CHAP
Set PPP authentication method to first try CHAP and then PAP ppp authentication CHAP PAP
Configure CHAP username to use to connect (default is hostname) ppp chap hostname [username]
Configure CHAP password to use to connect (default is enable password) ppp chap password [password]
Configure PAP username to use to connect (default is hostname) ppp pap sent-username [username] [password]
Create a username to use for connecting routers to log in username [username] password [password]
Enable PPP compression on an interface ppp compress [predictor | stac]
Enable Multilink PPP on an interface ppp multilink
Display information about the multilink bundle show ppp multilink
Frame Relay
Enable Frame-Relay on an interface and set the encapsulation type (use ietf when not all the routers are Cisco) encapsulation frame-relay [cisco | ietf]
Manually specify the LMI type (auto-detected on IOS 11.2+ routers) frame-relay lmi type [ansi | cisco | q9331]
Set the bandwidth for the frame relay interface (in kilobits) bandwidth 64
Manually specify the address to DLCI mappings (when Inverse Arp is unavailable) example: frame-relay map ip 10.10.10.10 100 broadcast frame-relay map protocol protocol-address dlci [broadcast] [ietf | cisco]
Manually specify DLCI (when LMI is not available) frame-relay local-dlci [number]
Display traffic statistics about permanent virtual circuits (PVCs) show frame relay pvc
Display statistics about Local Management Interface (LMI) show frame relay lmi
Display the current static and dynamic map entries show frame relay map
ISDN
Set the ISDN switch type isdn switch-type
Configure interface BRI 1 interface bri 1
Specify the SPID number for the B1 channel isdn spid1 spid-number  
Specify the SPID number for the B2 channel isdn spid2 spid-number  
Display information about the D Channel B channels of ISDN BRI interface 0 show interfaces bri 0
Display information about the ISDN BRI interface 0 show controllers bri 0
CDP
Display directly connected neighbors show cdp neighbor
Display detailed information about directly connected neighbors show cdp neighbor detail
Disable CDP for the whole router no cdp run
Disable CDP for a particular interface no cdp enable
Set the period between sending CDP information (in seconds) cdp timer 90
Specify the amount of time the receiving device should hold a packet (in seconds) cdp holdtime 180
Clear the information about neighbors in the CDP table  clear cdp table
Access Control Lists
IP Standard Access Lists (Range 1 to 99)
Objective: Configure interface ethernet 0 to deny inbound packets originated from subnet 192.168.1.0 255.255.255.0
1. Deny the subnet access-list 1 deny 192.168.1.0 0.0.0.255
2. Permit all others (because of the implicit deny all in Step 1.) access-list 1 permit any
3. Bind the access list to the interface ethernet 0  interface ethernet 0
ip access group 1 in  
IP Extended Access Lists (Range 100 to 199)
Objective: Configure interface ethernet 0 to deny subnet 192.168.1.0 from surfing the web
1. Deny the subnet access-list 100 deny tcp 192.168.1.0 0.0.0.255 any eq 80
2. Permit all others access-list 100 permit ip any any
3. Bind the access list to the interface ethernet 0  interface ethernet 0
ip access group 100 out
Objective: Configure interface serial 1 to deny host 192.168.1.222 from telnetting to any host on the subnet 172.16.8.1 255.255.0.0
1. Deny the subnet access-list 101 deny tcp host 192.168.1.222 172.16.8.1 0.0.255.255 eq 23
2. Permit all others access-list 101 permit ip any any
3. Bind the access list to the interface serial 1 interface serial 1
ip access group 101 out
Key Sequences  
Recall the previous command from the history buffer CTRL-P or Up arrow key  
Recall the next command in the history buffer CTRL-N or Down arrow key  
Auto-complete commands TAB
End configuration mode CTRL-Z
Move the cursor back one character.  Ctrl-B or Left Arrow key
Move the cursor forward one character.  Ctrl-F or Right Arrow key
Move the cursor to the start of the command line.  Ctrl-A  
Move the cursor to the end of the command line.  Ctrl-E