Show Menu
Cheatography
  1. Home >
  2. Cheat Sheets >

Cisco IOS CLI Cheat Sheet (DRAFT) by

Common CLI commnds for Cisco IOS in switches and routers.

This is a draft cheat sheet. It is a work in progress and is not finished yet.

Gene­ral

Command
Descri­ption
Displays As
> en
Enter Privleged Exec Mode
#
# config t
Enter Global Config Mode
(config)#
(config) # int {type} {number}
Enter Interface Config Mode
(confi­g-if)#
(config) # vlan {number}
Enter VLAN Config Mode
(confi­g-v­lan)#
(config) # line con 0
Enter Console Line Config Mode
(confi­g-l­ine)#
(config) # line vty 0 15
Enter VTY Line Config Mode
(confi­g-l­ine)#
(config) # no ip dom lo
Stops Router Domain Lookup
(config) # undebug all
Stops all Debugs
# clock set {time} {date}
Sets manual Time/Date
# show file systems
Lists available file systems
# exit
Exits current mode/level

Hous­eke­eping

Command
Descri­ption
(config) # ho {name}
Set name of device
(config) # ena sec {password}
Set encypted password for Priv Exec Mode
(config) # ser pass
Encrypts All Passwords
(config) # banner motd #{Banner}#
Creates Message banner
(config) # security pass min {number}
Sets min password length
(config) # login block-for {time} attempts {attempts} within {time}
Login failure wait time set
(confi­g-line) # pass {password}
Sets password for Console Line
(confi­g-line) # login
Makes passwords active, use after every password config
(confi­g-line) # exec-t­imeout {time}
Sets login timeout
(confi­g-if) # shut | no shut
Enables | Disables interface
(confi­g-if) #des {descr­iption}
Sets descri­ption of interface
# cop r s
Copies Running Config to the NVRAM

SSH Config

Command
Descri­ption
(config) # ip domain­-name {Abxyz.com}
Sets Domain Name
(config) # cry key gen rsa genera­l-keys mod 1024
Configs complexity of keys
(config) # username {name} secret {password}
Sets a UN & encrypted Pass
(config) # line vty 0 15
Configs which VTY lines to use
(confi­g-line) # login local
Sets LOGIN
(confi­g-line) # transport input ssh
*Defines transport potocol to SSH

IP Routing Config

Command
Descri­ption
(config) # ip route networ­k-a­ddress subnet­-mask {ip-address | exit-intf }
Static Route Command
(config) # ip route 0.0.0.0 0.0.0.0 {ip-address | exit-intf }
Default Static Route Command
(config) # ip route networ­k-a­ddress subnet­-mask {admin-­dis­tance }
Floating Static Route Command (Admin distance default value is 1)

VLAN Config

Command
Descri­ption
(config) # vlan {vlan-id}
Create a VLAN
(confi­g-vlan) # name {vlan-­name}
Specify a unique name to identify the VLAN
(confi­g-vlan) # end
Return to the privileged EXEC mode
(config) # interface {inter­fac­e_id}
Enter interface config­uration mode
(confi­g-if) # switchport mode access
Set the port to access mode.
(confi­g-if) # switchport access vlan vlan_id
Assign the port to a VLAN.
(confi­g-if) # end
Return to the privileged EXEC mode.
(config) #show vlan brief
Display the contents of the vlan.dat file
(confi­g-if) # mls qos trust [cos | device cisco-­phone | dscp | ip-pre­ced­ence]
Set the trusted state of an interface
(confi­g-if) # switchport voice vlan vlan-#
Assign a voice VLAN to a port
(confi­g-if) # switchport mode trunk
Configure a switch port on one end of a trunk link
(confi­g-if) # switchport trunk native vlan #
Configure native VLAN
For a Catalyst switch, the erase startu­p-c­onfig command must accompany the {(config) #delete vlan.dat} command prior to reload to restore the switch to its factory default condition.

PAT Config

Command
Descri­ption
(config)# ip nat pool NAT-PO­OL-­OVE­RLOAD 209.16­5.2­00.241 209.16­5.2­00.250 netmask 255.25­5.2­55.224
Define a pool of public IPv4 addresses 209.16­5.2­00.241 to 209.16­5.2­00.250 with pool name NAT-PO­OL-­OVE­RLOAD.
(config)# access­-list 3 permit 10.0.0.0 0.255.2­55.255
Configure ACL 3 to permit devices from 10.0.0.0/8 network to be translated by NAT.
(config)# ip nat inside source list 3 pool NAT-PO­OL-­OVE­RLOAD overload
Bind NAT-PO­OL-­OVE­RLOAD with ACL 3.
(config)# interface Serial­0/0/0 R2(con­fig­-if)# ip nat inside
Configure the proper inside NAT interface.
R2(con­fig)# interface Serial­0/1/0 R2(con­fig­-if)# ip nat outside
Configure the proper outside NAT interface.

CDP Config

Command
Descri­ption
# show cdp
Display the status of CDP on R1.
R1# configure terminal R1(con­fig)# cdp run R1(con­fig)# interface s0/0/0 R1(con­fig­-if)# no cdp enable R1(con­fig­-if)# end
Enter Global Config­urE­nable CDP globally on R1. Disable CDP on interface S0/0/0. Use end command to exit Global Config­uration mode.
# show cdp neighbors
Display the list of CDP neighbors on R1.
# show cdp neighbors detail
Display more details from the list of CDP neighbors on R1.

Clock & NTP Config

Command
Descri­ption
# show clock detail
Display the clock
(config)# clock timezone PST -8 R1(con­fig)# Clock summer­-time PDT recurring
Set the clock time zone to PST (Pacific Standard Time), which is 8 hours later than GMT (-8). Set PDT (Pacific Daylight Time) to summer time recurring.
(config)# ntp server 209.16­5.2­00.225
Configure R1 to use an external public NTP server with an IP address of 209.16­5.2­00.225.
# show ntp associ­ations
Verify that R1 is associated with the NTP server at IP address 209.16­5.2­00.225.

LLDP Config

Command
Descri­ption
# show lldp
Display the status of LLDP
(config)# lldp run R1(con­fig)# interface s0/0/0 R1(con­fig­-if)# no lldp transmit
Enable LLDP globally on R1. Disable LLDP on interface S0/0/0.
# show lldp neighbors
Display the list of LLDP neighbors
# show lldp neighbors detail
Display more details from the list of LLDP neighbors
 

Shortcuts

Keys
Action
Tab
Completes current abbrv command
Up Arrow
Cycles thru previously used commands
?
Access HELP
Ctrl+S­hift+6
Interupt
Ctrl+C
Exits Config
Ctrl+Z
Applies command, returns to Priv Exec

Display / Show Commands

Command
Descri­ption
# sho run
Displays Running Configs.
# sho access-l
Displays all ACL's.
# sho access-l {name/­number}
Displays only denoted ACL.
# sho ipv6 int
Displays interfaces on IPv6
# sho ip route
Displays all routes attached to router
# sho ip route static
Displays all static routes attached to router
#Sho ip route network
Displays routes only associated with that network
show ip nat transl­ations
nat

Access Control Lists

Command
Descri­ption
(config) # access­-list _ { deny | permit | remark } {sourc­e+w­ild­card}
Create ACL.
(config) # ip access­-list standard {name}
Create Named ACL.
(confi­g-if) # ip access­-group { access­-li­st-­number | access­-li­st-name } { in | out }
Attach ACL to an Interface.
(confi­g-line) # access­-class {number} { in | out }
ACL for VTY.
Wildcard Determined by 255.25­5.2­55.2­55­-Subnet mask (ex 255.25­5.2­55.2­55­-25­5.2­55.2­55.128= Wildcard of 0.0.0.127)
Shortcuts; host = Wilcard of 255.25­5.2­55.255 any = Address & WIldcard of 0.0.0.0 0.0.0.0

DHCPv4 Config

Command
Descri­ption
(config) #ip dhcp exclud­ed-­address {low ip range} {high ip range} | {single ip}
Excludes ip ranges, or single IP's.
(config) # ip dhcp pool {name}
Creates named DHCP pool
(dhcp-­config) #net {ipv4net} {subnet}
Define Range of Addresses
(dhcp-­config) #default-r {gateway}
Sets Default Gateway
(dhcp-­config) #dns-s {DNS}
Sets DNS
(dhcp-­config) #domain-n {Axyz.com}
Sets Domain
(config) #ip helper­-ad­dress {ipv4net}
Sets DHCP Relay

DHCPv6 Config

Command
Descri­ption
(confi­g-if) # ipv6 unicas­t-r­outing
Enable IPv6
(confi­g-if) # ipv6 dhcp pool {name}
Name Pool
(confi­g-if) # address prefix {prefix length} lifetime {infinite | time}
Statefull Only
(confi­g-if) # dns-s {IPv6DNS}
Set IPv6 DNS
(confi­g-if) # domain-n {Axyz.com}
Set Domain
(confi­g-if) # ipv6 dhcp server {name}
Set Server Name
See Note Below for Final CMD
 
(confi­g-if) # ipv6 dhcp relay destin­ation {ipv6net}
Sets Router as a DHCPv6 Relay
# debug ipv6 dhcp detail
Displays debug details
SLAAC (confi­g-if) # no ipv6 nd manage­d-c­onf­ig-flag (confi­g-if) # no ipv6 nd other-­con­fig­-flag Note: No other config required for SLAAC.
Stateless DHCPv6 (confi­g-inf) # ipv6 nd other-­con­fig­-flag
Statefull DHCPv6 (confi­g-inf) # ipv6 nd manage­d-c­onf­ig-flag

RIP Config

Command
Descri­ption
(config) # router rip
(confi­g-r­outer) #version 2
(confi­g-r­outer) # no auto-s­ummary
modify the default RIPv2 behavior of automatic summar­ization
(config) #show ip protocols
(config) #network ip-address
(config) #passiv­e-i­nte­rface
prevent the transm­ission of routing updates through a router interface, but still allow that network to be advertised to other routers.
(confi­g-r­outer) #ip route 0.0.0.0 0.0.0.0
propagate a default route in RIP
(confi­g-r­outer) #defaul­t-i­nfo­rmation originate
This instructs R1 to originate default inform­ation, by propag­ating the static default route in RIP updates.

NAT Config

Command
Descri­ption
(config)# ip nat inside source static 192.16­8.11.99 209.16­5.201.5
Configure the static transl­ation with an inside local address of 192.16­8.11.99 and an inside global address of 209.16­5.2­01.5.
(config)# interface Serial­0/0/0 , (confi­g-if)# ip nat inside
Configure the proper inside NAT interface.
R2(con­fig)# interface Serial­0/1/0 , (confi­g-if)# ip nat outside
Configure the proper outside NAT interface.
 
(config)# ip nat pool PUBLIC­-POOL 209.16­5.2­00.241 209.16­5.2­00.250 netmask 255.25­5.2­55.224
Define a pool of public IPv4 addresses 209.16­5.2­00.241 to 209.16­5.2­00.250 with pool name PUBLIC­-POOL.
R2(con­fig)# access­-list 2 permit 192.16­8.10.0 0.0.0.255
Configure ACL 2 to permit devices from 192.16­8.1­0.0/24 network to be translated by NAT.
R2(con­fig)# ip nat inside source list 2 pool PUBLIC­-POOL
Bind PUBLIC­-POOL with ACL 2.
R2(con­fig)# interface Serial­0/0/0 R2(con­fig­-if)# ip nat inside
Configure the proper inside NAT interface.
R2(con­fig)# interface Serial­0/1/0 R2(con­fig­-if)# ip nat outside
Configure the proper outside NAT interface.
ip nat transl­ation timeout
clear ip nat transl­ation *
Top is Static Config
Bottom is Dynamic Config

SysLog Config

Command
Descri­ption
(config) # logging {address}
Configure the destin­ation hostname or IPv4 address of the syslog.
(config) # logging trap {level}
Control the level of messages that will be sent
(config)# logging source­-in­terface {inter­face}
Logging Source