CISCO COMMAND REFERENCE

Common Commands
Hostname
R(config)# hostname R1

Console Password
R(config)# line console 0
R(config-line)# password CISCO123
R(config-line)# login

Telnet (VTY) Password

R(config)# line vty 0 4
R(config-line)# password CISCO123
R(config-line)# login

Exec Mode (enable) Password – Encrypted

R(config)# enable secret CISCO321

Disable DNS Lookups

R(config)# no ip domain-lookup

Synchronous Logging
No interrupti ons while typing a command
R(config)# line console 0 (or line vty 0 4)
R(config-line)# logging synchronous

Banner
R(config)# banner motd $Authorized Personnel Only!
You are knowingly violating usage rights by accessing this system
without permission and will be prosecuted to the fullest extent
of the law.$

Router Commands
Subinterfaces (Router on a Stick)
R(config)# int fa0/1
R(config-if)# no shutdown
R(config-if)# int fa0/1.10
R(config-subif)# encapsulation dot1q 10
R(config-subif)# ip address 192.168.10.1 255.255.255.0
R(config-subif)# int fa0/1.20
R(config-subif)# encapsulation dot1q 20
R(config-subif)# ip address 192.168.20.1 255.255.255.0

DHCP Pools
R(config)# ip dhcp pool Subnet10
R(dhcp-config)# default router 192.168.10.1
R(dhcp-config)# network 192.168.10.0 255.255.255.0

Switch Commands
Default Gateway
S(config)# ip default-gateway 1.2.3.4

Creating & Naming a VLAN

S(config)# vlan 99
S(config-vlan)# name Students

Assigning an Address to a VLAN Interface

S(config)# int vlan 99
S(config-if)# ip address 1.2.3.4 255.255.255.0
S(config-if)# no shutdown

Configuring Several Interfaces at Once

S(config)# int range fa0/1 – fa0/24
S(config-if-range)# some command to apply

Port Speed
S(config)# int fa0/1
S(config-if)# speed 10 (10 or 100 or auto)

Port Duplex Mode

S(config)# int fa0/1
S(config-if)# duplex half (half or full or auto)

Access Port
S(config)# int fa0/1
S(config-if)# switchport mode access
S(config-if)# switchport access vlan 99
Trunk Port
S(config)# int fa0/1
S(config-if)# switchport trunk encapsulation dot1q (or isl)
S(config-if)# switchport trunk native vlan 99 (optional)
S(config-if)# switchport mode trunk

VTP Server
S(config)# vtp mode server
S(config)# vtp version 2
S(config)# vtp domain Cisco123
S(config)# vtp password ciscoSECRET

VTP Client
S(config)# vtp version 2
S(config)# vtp mode client
S(config)# vtp domain Cisco123
S(config)# vtp password ciscoSECRET

Port Security
S(config)# int fa0/1
S(config-if)# switchport port-security
S(config-if)# switchport port-security maximum 3
S(config-if)# switchport port-security violation shutdown
S(config-if)# switchport port-security mac-address sticky

Spanning Tree
Switch Priority (Per VLAN)
S1(config)# spanning-tree vlan 1,5,15,25,35 priority 4096

Root Switch
S2(config)# spanning-tree vlan 5 root
S2(config)# spanning-tree vlan 5 root primary

Secondary Root Switch

Backup in case the root fails
S2(config)# spanning-tree vlan 5 root secondary

Port Cost
S2(config)# interface fa0/1
S2(config-if)# spanning-tree cost 20
S2(config-if)# end
Port Priority
S2(config)# interface gig0/1
S2(config-if)# spanning-tree port-priority 64
S2(config-if)# spanning-tree vlan 5 port-priority 64

PortFast
S2(config)# interface fa0/10
S2(config-if)# spanning-tree portfast (access port)
S2(config-if)# spanning-tree portfast trunk (trunk port - DANGEROUS)

Access Control Lists

Access List (Standard)
R(config)# access-list 10 permit 172.16.0.0 0.0.255.255
R(config)# access-list 10 deny host 172.17.0.1

IP Access List (Standard)

R(config)# ip access-list standard 99
R(config-std-nacl)# permit 192.168.10.0
R(config-std-nacl)# permit 192.168.10.0 0.0.0.255

Remark Command
Add a comment to the access-list
R(config)# access-list 10 remark Only Jones has access

To see sequence numbers

Tells you the order of the commands
R# show access-lists
R# show access-lists list name
R# show ip access-list
R# show ip access-list list name

Miscellaneous
Correcting Native VLAN Mismatch
Indicates a misconfi gured trunk port
Go to the Switch & FA that it specifies- Type the following:
S(config-if)# switchport trunk native vlan 30
S(config-if)# switchport mode trunk

When configuring a PC
IP Address – same VLAN, count 1 up.
PC0 is on VLAN 20 (192.168.20.225)
PC3 is on VLAN20 (192.168.20.226)
PC1 is on VLAN 10 (192.168.10.193)
PC4 is on VLAN 10 (192.168.10.194)
Example:
VLAN 10 = Sales = 192.168.10.192/26
VLAN 20 = HR = 192.168.20.224/27
VLAN 30 = MGMT = 192.168.99.0/28

Configuring the Default Gateway (Router) of a PC

Look at what VLAN the PC is on-
If the PC is on VLAN 10 then choose 192.168.10.254

Configuring the Subnet Mask

/20 240 255.255.240.0 /26 192 255.255.255.192
/21 248 255.255.248.0 /27 224 255.255.255.224
/22 252 255.255.252.0 /28 240 255.255.255.240
/23 254 255.255.254.0 /29 248 255.255.255.248
/24 0 255.255.255.0 /30 252 255.255.255.252
/25 128 255.255.255.128

To Backup Your IOS

R# copy run start
R# copy flash: some_file_name TFTP: destination_file_name

Pre IOS
Flash-init
Load_helper
Dir flash:
Rename flash: config.text flash: cat
Dir flash:
Boot

IOS
R# show flash:
R# rename flash: cat flash: config.text
R# copy start run

Password Recovery for 2960 series Switches

Switch: flash_init
Switch: load_helper
Switch: dir flash:
Switch: rename flash: config.text flash: config.old
Switch: boot
Password Recovery on a Router (Cisco 2950)
1. Reboot the device
2. Ctrl, lightly press Pause|Break key
3. Rommon:
4. Rommon: config 0x2142 (changes configuration register to 2142)
5. Rommon: reset
6. No startup config
copy start run
7. config t: config-register 0x2102

The Configuration Register

R# show version
R(config)# config-register 0x2142 (changes configuration register to 2142)