Cisco Certified Network

Associate(CCNA)
Presented By Odoch Herbert
HYPER SOLUTIONS
 Introduction to The Cisco Command Line
Interface for the Cisco IOS
• Cisco Devices have operating systems called Cisco IOS(Internet
Operating System).
• The interfaces used to configure the IOS can be CLI or GUI
How to connect to a Cisco Device
 User Exec Mode
• (place diagram of representation from photoshop here)
• User Exec mode is very limited.
• Users can look at some things but cant make any changes to the
configuration.
• Also called ‘user mode’.
 Privileged Exec Mode
• To go to the Privileged Exec Mode from the User Mode type enable.
• Provides complete access to view the devices’ configuration, restart
the device etc.
• Cannot change the device configuration but can change the time on
the device, save configuration file etc.
NB
• To view all the all the commands in either modes, type ? After > or #
signs.
• In the CLI, you can use shortcuts or incomplete words when entering
commands e.g. en for enable. This can be accomplished by clicking
tab button or even just entering . For the case of tab, it will be
complete the command word, but enter will just execute. However,
this shortcuts have limits especially when there are many words to be
completed for the same shortcut e.g. ‘e’ it will show ‘ambiguous
command’
• To exit any mode type exit.
 Global Configuration Mode
• To enter this mode from the Privileged Exec Mode, type configure
terminal/(conf t).
 enable password
• In-order to protect Privileged Exec Mode, we use enable password
command. This is done in Global Configuration mode.
• To do this type enable password then password which will be case-
sensitive.
 Configuration Files
• There are two separate configuration files kept on the device at once.
• Running-config and start-up config files.
• Running-config is the current active configuration file on the device. As you enter commands in the
CLI you edit the active configuration.
• Startup-config is the configuration file that will be loaded upon the restart of the device( it will be
default incase running-config is not copied to it).
• To view running-config and startup configurations, type show running-config / show startup-config
respectively in the Privileged Exec Mode.
• Incase there is default startup-config or the running-config is not copied to the startup-config, the
show startup-config command will show startup-config not present.
• There are three ways to save the running-config file .i.e. type
i. write
ii. write memory
iii. copy running-config startup-config
(All this is done in the Privileged Exec Mode)
 service password-encryption
• When one types show running-config or show startup-config, he/she
is able to view the enabled password and can recall it, to encrypt this
password, use the service password-encryption command in the
Global Configuration mode
• This provides an Encryption of type 7, which can be easily cracked.
 enable secret
• To make the password of enable password hard to crack, use the
enable secret command which gives MD5 encryption.
 Cancelling commands
• To cancel a command, type no [command] e.g. to cancel service
password-encryption, type no service password-encryption
 service password-encryption ii
• If you enable service password-encryption:
• Current passwords will be encrypted.
• Future passwords will be encrypted
• The enable secret will not be affected
• If you disable service password-encryption:
• Current passwords will not be decrypted.
• Future passwords will not be encrypted
• The enable secret will not be affected
 Modes Review
• Router> = User Exec Mode
• Router# = Privileged Exec Mode
• Router(config)#= Global Configuration Mode
 Command Review
• Router>enable
• Used to enter Privileged Exec Mode from User Exec mode.
• Router>configure terminal
• Used to enter Global Configuration Mode from Privileged Exec mode
• Router(config)# enable password [password]
• Configure a password to protect Privileged Exec Mode.
• Router(config)# service password-encryption
• Encrypts enable password and other passwords.
• Router(config)# enable secret [password]
• Configures a more secure, always encrypted enable password.
• Router(config)# run [Privileged Exec Mode command]
• Executes a privileged mode command in the global configuration mode.
• Router(config)# no [command]
• Removes a command.
• Router(config)# show running-config
• Displays the current, active configuration file
• Router(config)# show startup-config
• Displays saved configuration which will be loaded if the device is restarted
• Router(config)# write / write memory /copy running-config startup-config
• Either of the three saves the current configuration