CCNA Router Commands for the 640-607 exam

独孤

Basics
Enter Privileged Exec Mode
enable
Leave Privileged Exec Mode and go back to User Mode
disable
Log out of the router, end the console session,same as exit command
exit
Log out of the router, end the console session, same as logout command
logout
Setup a basic configuration by answering questions
setup
Show the current configuration stored in RAM
show running-config
Show the startup configuration stored in NVRAM
show startup-config
Display IOS version (configuration register value is also displayed)
show version
Show IOS files stored in flash and available free space
show flash
Save the current configuration into NVRAM
copy running-config startup-config
Use the startup configuration stored in NVRAM
copy startup-config running-config
Load a saved configuration from a TFTP server into NVRAM
copy tftp running-config
Upgrade the IOS stored in flash from an image stored on a TFTP server
copy tftp flash
Create a backup of router IOS and store it in a file on a TFTP server
copy flash tftp
Instruct the router to boot from a specific IOS image stored in flash boot
system flash [filename]
Instruct the router to boot from a specific IOS image stored on a TFTP server
boot system tftp [filename]
Enter Global Configuration Mode
config terminal
Set a Message-of-the-day banner to be displayed before the user logs in to the router
banner motd # message #
Set a login message to be displayed before the user logs in to the router
banner login # message #
Set a banner to be displayed after the user logs in to the router
banner exec # message #
(incoming is displayed with a reverse telnet connection, exec with all others)
banner incoming # message #
Give the router a hostname (default is router)
hostname [name]
Disable DNS lookups (enabled by default)
no ip domain-lookup
Specify DNS servers for for hostname and address resolution ip
name-server server-ip1 [server-ip2...server-ip6]
Disable the HTTP server (enabled by default)
no ip http server
Change the size of the history buffer (default is 10 commands)
terminal history size 20

独孤

Passwords
Set a password for Privileged Exec Mode
enable password [password]
Set an encrypted password for Privileged Exec Mode
enable secret [password]
Set password TELNET access
line vty 0 4
login
password [passwords]
Set a password for Console Port access
line console 0
login
password [passwords]

独孤

Interface configuration
Configure the interface Ethernet 0
interface e 0
Configure the first Serial interface
interface s 0
Configure the second Token Ring interface
interface t 1
Enable an interface
no shutdown
Disable an interface
shutdown
Set the clock rate on a DCE (make a router a DCE)
clock rate 56000
Set the bandwidth
bandwidth 64
Display the status of an interface
show interface serial 1
Display DTE/DCE state
show controller serial 1
Set keepalive period
keepalive 10

独孤

IP
Disable IP routing (IP routing is enabled by default)
no ip routing
Display IP routing table
show ip route
Configure an interface with an IP address
ip address 192.168.1.12 255.255.255.0
Enable RIP
router rip
    network [network-address1]
    network [network-address2…]
Enable Split Horizon on an interface
ip split-horizon
Enable RIP Triggered updates (only send updates when routing table has changed instead of every 30 seconds)
ip rip triggered
Disable automatic route summarization
no auto-summary
Enable IGRP
router igrp [as-number]
    network [network-address1]
    network [network-address2…]

独孤

PPP
Enable PPP on an interface
encapsulation ppp
Set PPP authentication method to PAP
ppp authentication PAP
Set PPP authentication method to CHAP
ppp authentication CHAP
Set PPP authentication method to first try PAP and then CHAP
ppp authentication PAP CHAP
Set PPP authentication method to first try CHAP and then PAP
ppp authentication CHAP PAP
Configure CHAP username to use to connect (default is hostname)
ppp chap hostname [username]
Configure CHAP password to use to connect (default is enable password)
ppp chap password [password]
Configure PAP username to use to connect (default is hostname)
ppp pap sent-username [username] [password]
Create a username to use for connecting routers to log in
username [username] password [password]
Enable PPP compression on an interface
ppp compress [predictor | stac]
Enable Multilink PPP on an interface
ppp multilink
Display information about the multilink bundle
show ppp multilink

独孤

Frame Relay
Enable Frame-Relay on an interface and set the encapsulation type (use ietf when not all the routers are Cisco)
encapsulation frame-relay [cisco | ietf]
Manually specify the LMI type (auto-detected on IOS 11.2+ routers)
frame-relay lmi type [ansi | cisco | q9331]
Set the bandwidth for the frame relay interface (in kilobits)
bandwidth 64
Manually specify the address to DLCI mappings (when Inverse Arp is unavailable) example: frame-relay map ip 10.10.10.10 100 broadcast
frame-relay map protocol
protocol-address dlci [broadcast] [ietf | cisco]
Manually specify DLCI (when LMI is not available)
frame-relay local-dlci [number]
Display traffic statistics about permanent virtual circuits (PVCs)
show frame relay pvc
Display statistics about Local Management Interface (LMI)
show frame relay lmi
Display the current static and dynamic map entries
show frame relay map

独孤

ISDN
Set the ISDN switch type
isdn switch-type
Configure interface BRI 1
interface bri 1
Specify the SPID number for the B1 channel
isdn spid1 spid-number
Specify the SPID number for the B2 channel
isdn spid2 spid-number
Display information about the D Channel B channels of ISDN BRI interface 0
show interfaces bri 0
Display information about the ISDN BRI interface 0
show controllers bri 0

独孤

CDP
Display directly connected neighbors
show cdp neighbor
Display detailed information about directly connected neighbors
show cdp neighbor detail
Disable CDP for the whole router
no cdp run
Disable CDP for a particular interface
no cdp enable
Set the period between sending CDP information (in seconds)
cdp timer 90
Specify the amount of time the receiving device should hold a packet (in seconds)
cdp holdtime 180
Clear the information about neighbors in the CDP table
clear cdp table

独孤

IP Standard Access Lists (Range 1 to 99)
Objective: Configure interface ethernet 0 to deny inbound packets originated from subnet 192.168.1.0 255.255.255.0
1. Deny the subnet
access-list 1 deny 192.168.1.0 0.0.0.255
2. Permit all others (because of the implicit deny all in Step 1.)
access-list 1 permit any
3. Bind the access list to the interface ethernet 0
interface ethernet 0
ip access group 1 in


IP Extended Access Lists (Range 100 to 199)
Objective: Configure interface ethernet 0 to deny subnet 192.168.1.0 from surfing the web
1. Deny the subnet
access-list 100 deny tcp 192.168.1.0 0.0.0.255 any eq 80
2. Permit all others
access-list 100 permit ip any any
3. Bind the access list to the interface ethernet 0
interface ethernet 0
ip access group 100 out

Objective: Configure interface serial 1 to deny host 192.168.1.222 from telnetting to any host on the subnet 172.16.8.1 255.255.0.0
1. Deny the subnet
access-list 101 deny tcp host 192.168.1.222 172.16.8.10.0.255.255 eq 23
2. Permit all others
access-list 101 permit ip any any
3. Bind the access list to the interface serial 1
interface serial 1
ip access group 101 out

独孤

Key Sequences
Recall the previous command from the history buffer
CTRL-P or Up arrow key
Recall the next command in the history buffer
CTRL-N or Down arrow key
Auto-complete commands
TAB
End configuration mode
CTRL-Z
Move the cursor back one character.
Ctrl-B or Left Arrow key
Move the cursor forward one character.
Ctrl-F or Right Arrow key
Move the cursor to the start of the command line.
Ctrl-A
Move the cursor to the end of the command line.
Ctrl-E