Supported Commands: ASA

ASA

Packet Tracer uses a simplified model of the Cisco Adaptive Security Appliance Software. Click on the CLI tab in the ASA configuration window to access the Cisco command line interface. Use the Copy and Paste buttons to copy and paste text to and from the command line. This page lists the command tree for Packet Tracer ASA. The tree contains only command chains that are supported in Packet Tracer.

User Mode

enable [ <0-15> ]
exit
logout
ping [ ip | ipv6 | WORD ]
quit
show
- version
traceroute [ ip | WORD ]

Enable Mode

configure [ terminal ]
copy
- disk0:
  - running-config
  - startup-config
  - tftp:
- flash:
  - running-config
  - startup-config
  - tftp:
- running-config
  - disk0:
  - flash:
  - startup-config
  - tftp:
- startup-config
  - disk0:
  - flash:
  - running-config
  - tftp:
- tftp:
  - disk0:
  - flash:
  - running-config
  - startup-config
dir
exit
logout
ping [ ip | ipv6 | WORD ]
- tcp [ ip | ipv6 | WORD ]
reload
show
- access-list
- activation-key
- arp
- clock
- crypto
  - isakmp [ sa ]
  - ipsec [ sa ]
  - map
  - crypto key mypubkey rsa
- dhcpd
  - binding all
  - state
- disk0:
- file system
- flash:
- interface
  - inside
  - outside
  - Ethernet <0>/<0-7>
  - Vlan [<1-4090>]
  - ip brief
- ip address
- ipv6
  - access-list
  - interface brief
  - neighbor
  - route
- nat
- ntp status
- route
- running-config
- ssh
- startup-config
- switch vlan
- version
- vlan
- xlate
traceroute [ ip | WORD ]
write [ erase | memory ]

Global Mode

aaa
- authentication
  - ssh
    - console LOCAL
  - telnet
    - console LOCAL
access-group [ WORD ]
- in [ interface ] [inside | outside ]
- out [ interface ] [inside | outside ]
access-list [ WORD ]
- [ deny | permit ]
  - [ A.B.C.D A.B.C.D | any | host A.B.C.D | icmp A.B.C.D ]
  - [ icmp | icmp6 | object-group WORD | tcp | udp ]
    - [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
      - [ echo | echo-reply | unreachable ]
- extended
  - [ deny | permit ]
    - [ A.B.C.D A.B.C.D | any | host A.B.C.D | icmp A.B.C.D ]
    - [ icmp | icmp6 | object-group WORD | tcp | udp ]
      - [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
        
        [ echo | echo-reply | unreachable ]
class-map WORD
clock set hh:mm:ss [ MONTH | Day of Month] [ Day of Month | MONTH ] [ Year ]
configure terminal
crypto
- ikev1
  - policy [ 1-65535 ]
  - enable [ inside | outside ]
- ipsec
  - ikev1 transform-set WORD
    - [ esp-3des | esp-aes | esp-aes-192 | esp-aes-256 | esp-des | esp-md5-hmac | esp-sha-hmac] [ esp-md5-hmac | esp-sha-hmac ]
  - security-association lifetime seconds <120-2147483647>
- key generate rsa modulus [ 1024 | 2048 | 512 | 768 ]
- map WORD
  - interface [ inside | outside ]
  - <1-65535>
    - match address WORD
    - set
      - ikev1 transform-set [ WORD ]
      - peer [ A.B.C.D | X:X:X:X::X ] [ A.B.C.D | X:X:X:X::X ] [ A.B.C.D | X:X:X:X::X ]
      - security-association lifetime seconds <120-2147483647>
dhcpd
- address [ WORD ] [ inside | outside ]
- auto-config [ inside | outside ]
- dns [ Hostname | A.B.C.D ] interface [ inside | outside ]
- domain [ WORD ] interface [ inside | outside ]
- enable [ inside | outside ]
- lease <300-1048575> [ inside | outside ]
domain-name [ WORD ]
enable password [ WORD ] [ encrypted | level <1-15> encrypted ]
end
exit
group-policy [ WORD ] [ attributes | internal ]
hostname WORD
http
- [ WORD ] [ A.B.C.D ] [ inside | outside ]
- enable
- X:X:X:X::X/<0-128> [ inside | outside ]
interface
- Ethernet <0>/<0-7>
- Vlan <1-4090>
ipv6
- access-list WORD
  - [ deny | permit ]
    - [ icmp | icmp6 | object-group WORD | tcp | udp ]
      - [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
        
        [ echo | echo-reply | unreachable ]
- route [ inside | outside ] [ Hostname | X:X:X:X::X ] [ <1-255> ]
name [ A.B.C.D | X:X:X:X::X ] [ WORD ]
names
no
- aaa
  - authentication
    - ssh
      - console LOCAL
    - telnet
      - console LOCAL
- access-group [ WORD ]
  - in [ interface ] [inside | outside ]
  - out [ interface ] [inside | outside ]
- access-list [ WORD ]
  - [ deny | permit ]
    - [ A.B.C.D A.B.C.D | any | host A.B.C.D | icmp A.B.C.D ]
    - [ icmp | icmp6 | object-group WORD | tcp | udp ]
      - [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
        
        [ echo | echo-reply | unreachable ]
  - extended
    - [ deny | permit ]
      - [ A.B.C.D A.B.C.D | any | host A.B.C.D | icmp A.B.C.D ]
      - [ icmp | icmp6 | object-group WORD | tcp | udp ]
        
        [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
        
        [ echo | echo-reply | unreachable ]
- class-map WORD
- clock set hh:mm:ss [ MONTH | Day of Month] [ Day of Month | MONTH ] [ Year ]
- configure terminal
- crypto
  - ikev1
    - policy [ 1-65535 ]
    - enable [ inside | outside ]
  - ipsec
    - ikev1 transform-set WORD
      - [ esp-3des | esp-aes | esp-aes-192 | esp-aes-256 | esp-des | esp-md5-hmac | esp-sha-hmac] [ esp-md5-hmac | esp-sha-hmac ]
    - security-association lifetime seconds <120-2147483647>
  - key generate rsa modulus [ 1024 | 2048 | 512 | 768 ]
  - map WORD
    - interface [ inside | outside ]
    - <1-65535>
      - match address WORD
      - set
        
        ikev1 transform-set [ WORD ]
        peer [ A.B.C.D | X:X:X:X::X ] [ A.B.C.D | X:X:X:X::X ] [ A.B.C.D | X:X:X:X::X ]
        security-association lifetime seconds <120-2147483647>
- dhcpd
  - address [ WORD ] [ inside | outside ]
  - auto-config [ inside | outside ]
  - dns [ Hostname | A.B.C.D ] interface [ inside | outside ]
  - domain [ WORD ] interface [ inside | outside ]
  - enable [ inside | outside ]
  - lease <300-1048575> [ inside | outside ]
- domain-name [ WORD ]
- enable password [ WORD ] [ encrypted | level <1-15> encrypted ]
- end
- exit
- group-policy [ WORD ] [ attributes | internal ]
- hostname WORD
- http
  - [ WORD ] [ A.B.C.D ] [ inside | outside ]
  - enable
  - X:X:X:X::X/<0-128> [ inside | outside ]
- interface
  - Ethernet <0>/<0-7>
  - Vlan <1-4090>
- ipv6
  - access-list WORD
    - [ deny | permit ]
      - [ icmp | icmp6 | object-group WORD | tcp | udp ]
        
        [A.B.C.D A.B.C.D A.B.C.D | any A.B.C.D A.B.C.D | host A.B.C.D A.B.C.D | object WORD A.B.C.D A.B.C.D ]
        
        [ echo | echo-reply | unreachable ]
  - route [ inside | outside ] [ Hostname | X:X:X:X::X ] [ <1-255> ]
- name [ A.B.C.D | X:X:X:X::X ] [ WORD ]
- names
- ntp
  - authenticate
  - authentication-key <1-4294967295> md5 WORD [ <0-4294967295> ]
  - server A.B.C.D [ key <0-4294967295> ]
  - trusted-key <1-4294967295>
- object network [ WORD ]
- object-group service [ WORD ]
  - tcp
  - tcp-udp
  - udp
- passwd [ WORD ] encrypted
- policy-map
  - WORD
  - type inspect dns WORD
- route [ inside | outside ] [ Hostname | A.B.C.D ] [ Hostname | A.B.C.D ] [ Hostname | A.B.C.D ] [<1-255>]
- service-policy [ WORD ] [ global | interface inside | interface outside ]
- setup
- ssh
  - WORD A.B.C.D [ inside | outside ]
  - X:X:X:X::X/<0-128> [ inside | outside ]
  - timeout <1-1440>
- telnet
  - WORD A.B.C.D [ inside | outside ]
  - X:X:X:X::X/<0-128> [ inside | outside ]
  - timeout <1-1440>
- tunnel-group [ WORD ]
  - general-attributes
  - ipsec-attributes
  - type [ ipsec-121 | remote-access ]
- username [ WORD ] [ attributes | password WORD encrypted ]
- webvpn
ntp
- authenticate
- authentication-key <1-4294967295> md5 WORD [ <0-4294967295> ]
- server A.B.C.D [ key <0-4294967295> ]
- trusted-key <1-4294967295>
object network [ WORD ]
object-group service [ WORD ]
- tcp
- tcp-udp
- udp
passwd [ WORD ] encrypted
policy-map
- WORD
- type inspect dns WORD
route [ inside | outside ] [ Hostname | A.B.C.D ] [ Hostname | A.B.C.D ] [ Hostname | A.B.C.D ] [<1-255>]
service-policy [ WORD ] [ global | interface inside | interface outside ]
setup
ssh
- WORD A.B.C.D [ inside | outside ]
- X:X:X:X::X/<0-128> [ inside | outside ]
- timeout <1-1440>
telnet
- WORD A.B.C.D [ inside | outside ]
- X:X:X:X::X/<0-128> [ inside | outside ]
- timeout <1-1440>
tunnel-group [ WORD ]
- general-attributes
- ipsec-attributes
- type [ ipsec-121 | remote-access ]
username [ WORD ] [ attributes | password WORD encrypted ]
webvpn

Ethernet Interface Mode

exit
ip
- address
  - A.B.C.D A.B.C.D
  - dhcp
nameif [ WORD ]
security-level <0-100>
shutdown
switchport access vlan <1-4090>

VLAN Interface Mode

exit
forward
ip
- address
  - A.B.C.D A.B.C.D
  - dhcp
ipv6
- access-list [ WORD ] [ deny | permit ]
  - [ icmp | icmp6 | object-group WORD | tcp | udp ]
    - [A.B.C.D A.B.C.D | any A.B.C.D | host A.B.C.D | object WORD A.B.C.D ]
      - [ echo | echo-reply | unreachable ]
- route
nameif [ WORD ]
security-level <0-100>
shutdown

Class-Map Configuration Mode

exit
match
- access-list [ WORD ]
- any
- default-inspection-traffic

Group-policy Configuration Mode

exit
webvpn
vpn-tunnel-protocol ssl-clientless

Object Configuration Mode

description [ LINE ]
host [ A.B.C.D | X:X:X:X::X ]
nat ( Open parenthesis for (<internal_if_name>,<external_if_name>) pair
subnet [ A.B.C.D A.B.C.D | X:X:X:X::X<0-128>]

Object-group Configuration Mode

description [ LINE ]
port-object
- eq [ domain | www | <0-65535> ]
- range [ <0-65535> ] [ <0-65535> ]

Webvpn Configuration Mode

enable password [ WORD ] [ encrypted | level <1-15> encrypted ]
exit

Rommon Mode

address addr
boot args
clear
confreg value
dev
file name
gateway addr
help
history
interface name
reboot
reload
repeat arg
reset
server addr
set
show cmd
tftpdnld
unset varname