Cisco IOS 15 Supported Commands: Routers

Routers: IOS 15

Packet Tracer uses a simplified model of the Cisco IOS. Click on the CLI tab in the router configuration window to access the Cisco IOS command line interface for the router. Use the Copy and Paste buttons to copy and paste text to and from the command line. This page lists the Cisco IOS command tree for Packet Tracer routers. For Cisco 1841 and 2811 routers with switching capabilities, refer to the "Switch IOS" page for additional commands. The tree contains only Cisco IOS command chains that are supported in Packet Tracer.

User Mode

<1-99>
connect [ WORD ]
disable
disconnect <1-16>
enable [ <0-15> | view [ WORD ] ]
exit
logout
ping [ ip | ipv6 ] WORD
resume [ <1-16> | WORD ]
show
- arp
- cdp
  - entry
    - * [ protocol | version ]
    - WORD [ protocol | version ]
  - interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - neighbors [ details ]
- class-map [ WORD ]
- clock
- controllers
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
- crypto key mypubkey rsa
- dot11 interface
- flash:
- frame-relay
  - lmi
  - map
  - pvc
    - <16-1022>
    - interface
      - serial <0-9>/<0-24>[.][<0-4294967295>]
- history
- hosts
- interfaces
  - Dot11Radio <0-24>/<0-24>/<0-24>
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - Tunnel <0-2147483647>
  - Virtual-Access <1-2>
  - Virtual-Template <1-200>
  - Vlan <1-1005>
  - switchport
  - trunk
- ip
  - arp
  - bgp
    - neighbors
    - summary
  - dhcp binding
  - eigrp
    - interface <1-65535>
    - neighbors <1-65535>
    - topology
      - <1-65535>
        
        A.B.C.D [ A.B.C.D ]
      - A.B.C.D [ A.B.C.D ]
      - all-links
    - traffic <1-65535>
  - interface
    - Dot11Radio <0-9>/<0-24>/<0-24>
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - Tunnel <0-2147483647>
    - Virtual-Access <1-2>
    - Virtual-Template <1-200>
    - Vlan <1-1005>
    - brief
  - nbar port-map
  - ospf
    - <1-65535>
      - <0-4294967295>
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
        
        virtual-links
      - A.B.C.D
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
        
        virtual-links
      - border-routers
      - database
      - interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
      - neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
      - virtual-links
    - border-routers
    - database
    - interface
      - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - neighbor
      - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - Loopback <0-2147483647> [ detail ]
      - Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - detail
    - virtual-links
  - protocols
  - rip database
  - route [ WORD | bgp | connected | eigrp | ospf <1-65535> | rip | static ]
  - ssh
- ipv6
  - access-list WORD
  - eigrp
    - interfaces <1-65535>
    - neighbors <1-65535>
    - topology
      - <1-65535> [ X:X:X:X::X/<0-128>
      - X:X:X:X::X/<0-128>
      - all-links
    - traffic <1-65535>
  - general-prefix
  - interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - Tunnel <0-2147483647>
    - brief
  - nat [ statistics | translations ]
  - neighbors
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - Vlan <1-1005>
  - ospf
    - <1-65535>
      - <0-4294967295>
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
      - A.B.C.D
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
      - border-routers
      - database
      - interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>[.][<0-4294967295>]
      - neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
        detail
    - border-routers
    - database
    - interface
      - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - neighbors
      - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - Loopback <0-2147483647> [ detail ]
      - Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
      - detail
  - border-routers
  - database
  - interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - neighbors
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
    - Loopback <0-2147483647> [ detail ]
    - Serial <0-9>/<0-24>[.][<0-4294967295>] [ detail ]
    - detail
- protocols
- rip database
- route ospf
policy-map
- WORD
- interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
- privilege
- protocols
- queue
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
- queueing
- sessions
- ssh
- tcp [ brief ]
- terminal
- users
- version
- vlan-switch
  - brief
  - id <1-1005>
  - name WORD
- vtp [ counters | status ]
ssh
- -l WORD [ WORD | -v 1 WORD]
- -l WORD [ WORD | -v 2 WORD]
- -v 1 -l WORD WORD
- -v 2 -l WORD WORD
terminal WORD <0-65535>
traceroute
- [ Protocol ] [ Target IP address ] [ Source address ] [ Numeric display ] [ Timeout in seconds ] [ Probe count ] [ Minimum Time to Live ] [ Maximum Time to Live ]

Enable Mode

<1-99>
auto secure
clear
- aaa local user lockout [ all | username WORD ]
- access-list counters [ <1-199> | <1300-2699> | WORD ]
- arp-cache
- cdp table
- frame-relay [ inarp | counter ]
- ip
  - bgp *
  - nat translation *
  - ospf process
  - route [ * | A.B.C.D | A.B.C.D A.B.C.D ]
- ipv6
  - dhcp binding
  - nat translation *
  - neighbors
- line tty <2-90>
- mac-address-table [ dynamic ]
- vtp counters
clock set hh:mm:ss [ <1-31> MONTH <1993-2035> | MONTH <1-31> <1993-2035> ]
configure [ terminal ]
connect [ WORD ]
copy
- flash:
  - ftp:
  - running-config
  - startup-config
  - tftp:
- ftp:
  - flash:
  - running-config
  - startup-config
- running-config
  - flash:
  - ftp
  - startup-config
  - tftp:
- startup-config
  - flash:
  - ftp
  - running-config
  - tftp:
- tftp:
  - flash:
  - running-config
  - startup-config
debug
- aaa authentication
- custom-queue
- eigrp
  - fsm
  - packets
- frame-relay lmi
- ip
  - icmp
  - nat
  - ospf [ adj | events ]
  - packet
  - rip [ events ]
  - routing
- ipv6
  - inspect
    - detailed
    - events
    - function-trace
    - icmp
    - object-creation
    - object-deletion
    - tcp
    - timers
    - udp
  - ospf [ adj | events ]
- ntp packets
- ppp [ authentication | negotiation | packet ]
delete
- WORD
- flash:
dir [ WORD | flash: | nvram: ]
disable
disconnect <1-16>
enable [ <0-15> | view [ WORD ] ]
erase startup-config
exit
logout
mkdir [ WORD | flash: ]
more flash:<filename>
no
- debug
  - all
  - aaa authentication
  - crypto [ isakmp | ipsec ]
  - custom-queue
  - eigrp [ fsm | packets ]
  - ephone register
  - frame-relay lmi
  - ip
    - icmp
    - inspect
      - detailed
      - events
      - function-trace
      - object-creation
      - object-deletion
      - protocol [ http | icmp | tcp | udp ]
      - timers
    - nat
    - ospf [ adj | events ]
    - packet
    - rip [ events ]
    - routing
  - ipv6
- inspect
  - detailed
  - events
  - function-trace
  - icmp
  - object-creation
  - object-deletion
  - tcp
  - timers
  - udp
- ospf [ adj | events ]
- ntp packets
- ppp [ authentication | negotiation | packet ]
ping [ WORD | ip | ipv6 ]
- [ Protocol ] [ Target IP address ] [ Repeat count ] [ Datagram size ] [ Timeout in seconds ] [ Extended commands ] [ Sweep range of sizes ]
reload
resume [ <1-16> | WORD ]
rmdir [ WORD | flash:<filename> ]
send [ * | <0-300> ]
setup
show
- aaa
  - local user lockout
  - sessions
  - user [ <1-4294967295> | all ]
- access-list [ <1-199> | WORD ]
- arp
- cdp
  - entry
    - * [ protocol | version ]
    - WORD [ protocol | version ]
  - interfaces
    - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Serial <0-9>/<0-24>
  - neighbors [ detail ]
- class-map [ WORD ]
- clock
- controllers
  - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - Serial <0-9>/<0-24>
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
- crypto key mypubkey rsa
- debugging
- dhcp lease
- dot11 interface
- file system
- frame-relay
  - lmi
  - map
  - pvc
    - <16-1022>
    - interface Serial <0-9>/<0-24>[<16-1022>]
- history
- hosts
- interface
  - Dot11Radio <0-9>/<0-24>/<0-24>
  - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Serial <0-9>/<0-24>/<0-4294967295>
  - Tunnel <0-2147483647>
  - Virtual-Access <1-2>
  - Virtual-Template <1-200>
  - Vlan <1-1005>
  - switchport
  - trunk
- ip
  - access-lists [ <1-199> | WORD ]
  - arp
  - bgp [ neighbors | summary ]
  - dhcp binding
  - eigrp
    - interfaces [ <1-65535> ]
    - neighbors [ <1-65535> ]
    - topology [ <1-65535> ] [ A.B.C.D A.B.C.D ]
    - traffic [ <1-65535> ]
  - interface
    - Dot11Radio <0-9>/<0-24>/<0-24>
    - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Serial <0-9>/<0-24>/[.][<0-4294967295>
    - Tunnel <0-2147483647>
    - Virtual-Access <1-2>
    - Virtual-Template <1-200>
    - Vlan <1-1005>
    - brief
  - nat [ translations | statistics ]
  - nbar port-map
  - ospf
    - <1-65535>
      - <0-4294967295>
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        detail
        
        virtual-links
      - A.B.C.D
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        
        virtual-links
      - border-routers
      - database
      - interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        Loopback <0-9>/<0-24>
      - neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
      - virtual-links
    - border-routers
    - database
    - interface
      - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
    - neighbor
      - Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - Loopback <0-2147483647> [ detail ]
      - Serial <0-9>/<0-24> [ detail ]
    - virtual-links
  - protocols
  - rip database
  - route [ WORD | bgp | connected | eigrp | ospf <1-65535> | rip | static ]
  - ssh
- ipv6
  - access-list [ WORD ]
  - dhcp [ binding | interface | pool ]
  - eigrp
    - interface <1-65535>
    - neighbors <1-65535>
    - topology
      - <1-65535> [ X:X:X:X::X/<0-128>
      - X:X:X:X::X/<0-128>
      - all-links
    - traffic <1-65535>
  - general-prefix
  - inspect
    - all
    - config
    - interfaces
    - name [ WORD ]
    - sessions [ detail ]
  - interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - brief
  - nat [ statistics | translations ]
  - neighbors
    - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
  - ospf
    - <1-65535>
      - <0-4294967295>
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        detail
      - A.B.C.D
        
        database
        interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        
        neighbor
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        detail
      - border-routers
      - database
      - interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
        Loopback <0-2147483647>
        Serial <0-9>/<0-24>
      - neighbors
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
        Loopback <0-2147483647> [ detail ]
        Serial <0-9>/<0-24> [ detail ]
        detail
    - border-routers
    - database
    - interface
      - Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - Loopback <0-2147483647> [ detail ]
      - Serial <0-9>/<0-24> [ detail ]
    - neighbors
      - Ethernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ] [ detail ]
      - Loopback <0-2147483647> [ detail ]
      - Serial <0-9>/<0-24> [ detail ]
  - protocols
  - rip database
  - route [ ospf ]
- licsense [ all | detail | feature | udi ]
- line
- logging
- login [ failures ]
- mac-address-table [ static ]
- ntp status
- parse view
- policy-map
  - WORD
  - interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - type inspect zone-pair sessions
- privileges
- processes
- protocols
- queue
  - Ethernet <0-9>/<0-24>[.][<0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
- queueing
- running-config
- secure [ bootset ]
- sessions
- snmp
- spanning-tree
  - active
  - detail
  - interface
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - Port-channel <1-6>
    - Vlan <1-4094> [ portfast ]
  - summary totals
  - vlan <1-1005>
- ssh
- standby
  - FastEthernet <0-2>/<0-1> [ brief ]
  - brief
- startup-config
- storm-control broadcast
- tcp [ brief ]
- tech-support
- terminal
- users
- users
- version
- vlan-switch [ brief | id <1-1005> | name WORD ]
- vtp [ counters | status ]
ssh
- -l WORD [ WORD | -v 1 WORD]
- -l WORD [ WORD | -v 2 WORD]
- -v 1 -l WORD WORD
- -v 2 -l WORD WORD
telnet [ WORD ] [ <0-65535> ]
terminal history size <0-256>
traceroute [ WORD | ip | ipv6 ]
- [ Protocol ] [ Target IP address ] [ Source address ] [ Numeric display ] [ Timeout in seconds ] [ Probe count ] [ Minimum Time to Live ] [ Maximum Time to Live ]
undebug
- all
- aaa authentication
- custom-queue
- eigrp [ fsm | packets ]
- frame-relay lmi
- ip
  - icmp
  - inspect
    - detailed
    - events
    - function-trace
    - object-creation
    - object-deletion
    - protocol [ http | icmp | tcp | udp ]
    - timers
  - nat
  - ospf [ adj | events ]
  - packet
  - rip [ events ]
  - routing
- ntp packets
- ppp [ authentication | negotiation | packet ]
vlan database
write [ erase | memory | terminal ]

Global Mode

aaa
- authentication
  - enable default
    - enable
    - group [ radius | tacacs+ ]
    - local
    - none
  - login [ WORD | default ]
    - enable
    - group [ radius | tacacs+ ]
    - local
      - enable
      - group [ radius | tacacs+ ]
      - none [ group | local ]
    - none
      - group [ radius | tacacs+ ]
      - local [ enable | group [ radius | tacacs+ ] | none ]
  - ppp [ WORD | default ]
    - enable
    - group [ radius | tacacs+ ]
    - local [ enable | group [ radius | tacacs+ ] | none ]
    - none [ group [ radius | tacacs+ ] | local ]
- authorization [ exec | network ] [ WORD | default ]
  - group [ radius | tacacs+ ]
  - if-authenticated
  - local [ group [ radius | tacacs+ ] | if-authenticated | none ]
  - none [ group [ radius | tacacs+ ] | if-authenticated | local ]
- new-model
access-list (named ACL is under the "ip access-list" branch in Global Mode)
- <1-99>
  - [ deny | permit ] [ A.B.C.D | any | host A.B.C.D ]
  - [ deny | permit ] [ A.B.C.D A.B.C.D ]
  - remark LINE
- <100-199>
  - [ deny | permit ] [ ahp | eigrp | esp | gre | ospf ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ deny | permit ] icmp [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
    - <0-256>
    - echo
    - echo-reply
    - host-unreachable
    - net-unreachable
    - port-unreachable
    - protocol-unreachable
    - ttl-exceeded
    - unreachable
  - [ deny | permit ] ip [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
  - remark LINE
banner
- motd LINE
- login LINE
boot system [ WORD | flash WORD ]
cdp run
class-map [ type inspect ] [ match-all | match-any ] WORD
clock timezone WORD <-23-23> [ <0-59> ]
config-register WORD
crypto
- dynamic-map WORD <1-65535> [ ipsec-isakmp ]
- key [ generate | zeroize ] rsa
do LINE
enable
- password
  - 7 WORD
  - LINE
  - level <1-15>
    - 7 WORD
    - LINE
- secret
  - [ 0 | 5 ] LINE
  - level <1-15>
    - [ 0 | 5 ] LINE
end
exit
hostname WORD
interface
- Dot11Radio <0-9>/<0-24>/<0-24>
- Ethernet <0-9>/<0-24>[.][<0-4294967295>]
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
- Loopback <0-2147483647>
- Serial <0-9>/<0-24> [ multipoint | point-to-point ]
- Tunnel <0-2147483647>
- Virtual-Template <1-200>
- Vlan <1-1005>
- range
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24> [ multipoint | point-to-point ]
  - Vlan <1-1005>
ip
- access-list
  - extended [ <100-199> | WORD ]
  - standard [ <1-99> | WORD ]
- default-network A.B.C.D
- dhcp
  - excluded-address A.B.C.D [ A.B.C.D ]
  - pool WORD
- domain-lookup
- domain-name WORD
- forward-protocol udp [ <0-65535> | bootpc | bootps | domain | netbios-dgm | netbios-ns | tacacs | tftp | time ]
- ftp
  - passive
  - password [ <0-7> | LINE ]
  - username WORD
- host WORD [ <0-65535> | A.B.C.D ] [ A.B.C.D ] [ A.B.C.D ]
- local pool WORD A.B.C.D A.B.C.D
- name-server [ A.B.C.D ] [ X:X:X:X::X ]
- nat
  - inside source
    - list [ <1-199> | WORD ] interface [ Ethernet | FastEthernet | GigabitEthernet | Serial ] <0-9>/<0-24>[.][<0-4294967295>]
    - list [ <1-199> | WORD ] pool WORD [ overload ]
    - static
      - A.B.C.D A.B.C.D
      - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
      - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
  - outside source
    - list [ <1-199> | WORD ] pool WORD
    - static
      - A.B.C.D A.B.C.D
      - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
      - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
    - pool WORD A.B.C.D A.B.C.D netmask A.B.C.D
- route A.B.C.D A.B.C.D
  - A.B.C.D [<1-255>]
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [<1-255>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [<1-255>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [<1-255>]
  - Loopback <0-214483647> [<1-255>]
  - Serial <0-9>/<0-24>[.][<1-255>]
  - Vlan <1-1005> [<1-255>]
- ssh
  - authentication-retries <0-5>
  - time-out <1-120>
  - version <1-2>
- tcp [ mss <68-1000> | window-size <0-107374823> ]
ipv6
- access-list WORD
- dhcp pool WORD
- general-prefix WORD
  - X:X:X:X::X/<1-128>
- host WORD
  - <0-65535> [ X:X:X:X::X ] [ X:X:X:X::X ] [ X:X:X:X::X ]
  - [ X:X:X:X::X ] [ X:X:X:X::X ] [ X:X:X:X::X ]
- inspect
  - alert-off
  - audit-trail
  - max-incomplete [ high | low ] <1-2147483647>
  - name WORD [ icmp | tcp | udp ]
    - alert [ off | on ]
    - audit-trail [ off | on ]
    - timeout <5-43200>
  - one-minute [ high | low ] <1-2147483647>
  - tcp
    - finwait-time <1-2147483>
    - idle-time <1-2147483>
    - synwait-time <1-2147483>
  - udp idle-time <1-2147483>
- nat
  - prefix X:X:X:X::X/<0-128>
  - v4v6
    - pool WORD X:X:X:X::X X:X:X:X::X prefix-length <1-128>
    - source A.B.C.D X:X:X:X::X
    - source list WORD [ pool ] WORD
  - v6v4
    - pool WORD A.B.C.D A.B.C.D prefix-length
    - source X:X:X:X::X A.B.C.D
    - source list WORD
      - pool WORD [ overload ]
      - interface
        
        Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ overload ]
        FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ overload ]
        GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ overload ]
        Serial <0-9>/<0-24> [ overload ]
- neighbor X:X:X:X::X
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>] H.H.H
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] H.H.H
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] H.H.H
  - Loopback <0-2147483647> H.H.H
  - Serial <0-9>/<0-24> H.H.H
  - Vlan <1-1005> H.H.H
- route X:X:X:X::X/<0-128>
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
  - Loopback <0-2147483647> [ <1-254> ]
  - Serial <0-9>/<0-24> [ <1-254> ]
  - Vlan <1-1005> [ <1-254> ]
  - X:X:X:X::X [ <1-254> ]
- unicast-routing
license boot module c2900 technology-package [ securityk9 disable | uck9 disable ]
line
- <2-499> [ <3-499> ]
- aux <0-0>
- console <0-0>
- tty <2-90> [ <2-90> ]
- vty <0-15> [ <0-15> ]
- x/y/z
logging
- A.B.C.D
- buffered <4096-2147483647>
- console
- host A.B.C.D
- on
- trap [ debugging ]
- userinfo
login
- block-for <1-65535> attempt <1-65535> within <1-65535>
- on-failure [ log | trap ]
- on-success [ log | trap ]
mac-address-table static H.H.H interface
- Ethernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
no
- aaa
  - authentication [ enable default ]
  - authorization [ exec | network ] [ WORD | default ]
  - new-model
- access-list [ <1-99> | <100-199> ]
- banner [ login | motd ]
- boot system [ WORD | flash WORD ]
- cdp run
- class-map [ type inspect ] [ match-all | match-any ] WORD
- clock timezone
- config-register
- Dot11 ssid LINE
- enable
  - password [ 7 WORD | level <1-15> ]
  - secret [ level <1-15> ]
- hostname
- interface
  - Dot11Radio <0-9>/<0-24>/<0-24>
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Tunnel <0-2147483647>
  - Virtual-Template <1-200>
  - Vlan <1-1005>
- ip
  - access-list
    - extended [ <100-199> | WORD ]
    - standard [ <1-99> | WORD ]
  - default-network A.B.C.D
  - dhcp
    - excluded-address A.B.C.D [ A.B.C.D ]
    - pool WORD
  - domain [ lookup | name ]
  - domain-lookup
  - domain-name
  - forward-protocol [ <0-65535> | bootpc | domain | netbios-dgm | netbios-ns | tacacs | tftp ]
  - ftp [ passive | password | username ]
  - host WORD [ <0-65535> ] [ A.B.C.D ] [ A.B.C.D ] [ A.B.C.D ]
  - inspect
    - alert-off
    - audit-trail
    - dns-timeout <1-2147483>
    - max-incomplete [ high | low ] <1-2147483647>
    - name WORD [ http | icmp | tcp | telnet | udp ]
    - one-minute [ high | low ] <1-2147483647>
    - tcp [ finwait-time | idle-time | synwait-time ] <1-2147483>
    - udp idle-time <1-2147483>
  - local pool WORD
  - name-server
  - nat
    - inside source
      - list [ <1-199> | WORD ]
      - static
        
        A.B.C.D A.B.C.D
        tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
        udp A.B.C.D <1-65535> A.B.C.D <1-65535>
    - outside source
      - list [ <1-199> | WORD ]
      - static
        
        A.B.C.D A.B.C.D
        tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
        udp A.B.C.D <1-65535> A.B.C.D <1-65535>
  - route A.B.C.D A.B.C.D
    - <1-255>
    - A.B.C.D [ <1-255> ]
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-255> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-255> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-255> ]
    - Loopback <0-2147483647> [ <1-255> ]
    - Null <0-0> <1-255>
    - Serial <0-9>/<0-24> [ <1-255> ]
    - Vlan <1-1005> [ <1-255> ]
  - ssh
    - authentication-retries
    - time-out
    - version [ 1 | 2 ]
  - tcp [ mss | window-size ]
- ipv6
  - access-list WORD
  - dhcp pool WORD
  - general-prefix WORD [ X:X:X:X::X/<0-128> ]
  - host WORD
  - inspect
    - alert-off
    - audit-trail
    - max-incomplete [ high | low ]
    - name WORD [ icmp | tcp | udp ]
    - one-minute [ high | low ]
    - tcp [ finwait-time | idle-time | synwait-time ]
    - udp idle-time
  - nat
    - prefix X:X:X:X::X/<0-128>
    - v4v6
      - pool WORD
      - source A.B.C.D X:X:X:X::X
      - source list WORD [ pool ] WORD
    - v6v4
      - pool WORD
      - source X:X:X:X::X A.B.C.D
      - source list WORD pool WORD [ overload ]
  - neighbor X:X:X:X::X
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Vlan <1-1005>
  - route X:X:X:X::X/<0-128>
    - <1-254>
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] [ <1-254> ]
    - Loopback <0-2147483647> [ <1-254> ]
    - Serial <0-9>/<0-24> [ <1-254> ]
    - X:X:X:X::X [ <1-254> ]
  - router
    - eigrp <1-65535>
    - ospf <1-65535>
    - rip WORD
  - unicast-routing
- license boot module c2900 technology-package [ security disable | uck9 disable ]
- logging
  - A.B.C.D
  - buffered
  - console
  - host A.B.C.D
  - on
  - trap [ debugging ]
  - userinfo
- login
  - block-for
  - on-failure [ log | trap ]
  - on-success [ log | trap ]
- mac-address-table static H.H.H interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>] vlan <1-1005>
  ntp
  - authenticatee
  - authentication-key <1-4294967295>
  - server A.B.C.D
  - trusted-key <1-4294967295>
  - update-calendar
- parser view WORD
- policy-map [ type inspect ] WORD
- priority-list <1-16>
  - default
  - protocol
    - ip [ high | low | medium | normal ] [ list <1-199> | tcp <0-65535> | udp <0-65535> ]
    - ipv6 [ high | low | medium | normal ]
  - queue-limit
- privilege [ configure | exec | interface | line | router ] [ all ] [ level <0-15> ] LINE
- queue-list <1-16>
  - default
  - protocol
    - ip <0-16>
      - list [ <1-199> | <1300-2699> ]
      - tcp <0-65535>
      - udp <0-65535>
    - ipv6 <0-16>
  - queue <0-16>
    - byte-count <1-16777215> [ limit <0-32767> ]
    - limit <0-32767> [ byte-count <1-16777215> ]
- radius-server
  - host A.B.C.D
    - auth-port <0-65535> [ key LINE ]
    - key LINE
  - key LINE
- router
  - bgp <1-65535>
  - eigrp <1-65535>
  - ospf <1-65535>
  - rip
- secure [ boot-config | boot-image ]
- security passwords min-length <0-16>
- service
  - nagle
  - password-encryption
  - timestamps [ debug | log ] [ datetime | msec ]
- snmp-server [ community WORD [ ro | rw ] ]
- spanning-tree
  - mode
  - portfast default
  - vlan <1-1005> [ priority | root ]
- tacacs-server
  - host A.B.C.D
    - key LINE
    - single-connection key LINE
  - key LINE
- username WORD
- vpdn enable
- vpdn-group WORD
- zone security WORD
- zone-pair security WORD source [ WORD | self ] destination [ WORD | self ]
ntp
- authentication
- authentication-key <1-4294967295> md5 WORD [ <0-4294967295> ]
- server A.B.C.D [ key <0-4294967295> ]
- trusted-key <1-4294967295>
- update-calendar
parser view WORD
policy-map [ type inspect ] WORD
priority-list <1-16>
- default [ high | low | medium | normal ]
- protocol
  - ip [ high | low | medium | normal ] [ list <1-199> | tcp <0-65535> | udp <0-65535> ]
  - ipv6 [ high | low | medium | normal ]
- queue-limit <0-32767> <0-32767> <0-32767> <0-32767>
privilege [ configure | exec | interface | line | router ] [ all ] [ level <0-15> | reset ] LINE
queue-list <1-16>
- default <0-16>
- protocol
  - ip <0-16>
    - list [ <1-199> | <1300-2699> ]
    - tcp <0-65535>
    - udp <0-65535>
  - ipv6 <0-16>
- queue <0-16>
  - byte-count <1-16777215> [ limit <0-32767> ]
  - limit <0-32767> [ byte-count <1-16777215> ]
radius-server
- host A.B.C.D
  - auth-port <0-65535> [ key LINE ]
  - key LINE
- key LINE
router
- bgp <1-65535>
- eigrp <1-65535>
- ospf <1-65535>
- rip
secure [ boot-config | boot-image ]
security password min-length <0-16>
service
- nagle
- password-encryption
- timestamps [ debug | log ] [ datetime | msec ]
snmp-server community WORD [ ro | rw ]
spanning-tree
- mode [ pvst | rapid-pvst ]
- portfast default
- vlan <1-1005>
  - priority <0-61440>
  - root [ primary | secondary ]
tacacs-server
- host A.B.C.D
  - key LINE
  - single-connection key LINE
- key LINE
username WORD [ privilege <0-15> ]
- password [ 0 LINE | 7 WORD | LINE ]
- secret [ 0 LINE | 5 WORD | LINE ]
vpdn enable
vpdn-group WORD
zone security WORD
zone-pair security WORD source [ WORD | self ] destination [ WORD | self ]

Standard Access List Configuration Mode

<1-2147483647>
- deny
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- permit
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- default
  - deny
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
  - permit
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
- deny
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- exit
- no
  - deny
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
  - permit
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
- permit
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- remark LINE

Extended Access List Configuration Mode

<1-2147483647>
- deny
  - [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq<0-65535> | host A.B.C.D | gt<0-65535> | lt <0-65535> | neq<0-65535> | range<0-65535><0-65535> ]
- permit
  - [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq<0-65535> | host A.B.C.D | gt<0-65535> | lt <0-65535> | neq<0-65535> | range<0-65535><0-65535> ]
default
- [ deny | permit ] [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
- [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
deny
- [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
- [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
exit
no
- [ deny | permit ] [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
- [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
permit
- [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
- [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
remark LINE

Ethernet / FastEthernet / GigabitEthernet Interface Mode

arp timeout <0-2147483>
bandwidth <1-10000000>
cdp enable
crypto map WORD
custom-queue-list <1-16>
delay <1-16777215>
description LINE
duplex [ auto | full | half ]
exit
fair-queue [ <1-4096> ] [ <16-4096> ] [ <0-1000> ]
hold-queue <0-4096> out
ip
- access-group [ <1-199> | WORD ] [ in | out ]
- address [ A.B.C.D A.B.C.D | dhcp ]
- hello-interval eigrp <1-65535> <1-65535>
- helper-address A.B.C.D
- mtu <68-1500>
- ospf
  - authentication [ message-digest | null ]
  - authentication-key [ <0-7> ] WORD
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - message-digest-key <1-255> md5 LINE
  - priority <0-255>
- proxy-arp
- split-horizon
- summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
ipv6
- address
  - WORD X:X:X:X::X/<0-128>
  - X:X:X:X::X link-local
  - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
  - autoconfig
- dhcp
  - client pd WORD
  - server WORD
- eigrp <1-65535>
- enable
- hello-interval eigrp <1-65535> <1-65535>
- inspect WORD [ in | out ]
- mtu <1280-1500>
- nat [ prefix X:X:X:X::X/<0-128> [ v4-mapped ] [ WORD ] ]
- nd [ other-config-flag | na suppress ]
- ospf
  - <1-65535> area area-id [ instance instance-id ]
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - priority <0-255>
- rip WORD
  - default-information originate
  - enable
- summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
- traffic-filter WORD [ in | out ]
mac-address H.H.H
mtu <64-1600>
no
- arp timeout
- bandwidth
- cdp enable
- crypto map [ WORD ]
- custom-queue-list <1-16>
- delay
- description
- duplex
- fair-queue [ <1-4096> ] [ <16-4096> ] [ <0-1000> ]
- hold-queue [ <0-4096> ] out
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address [ dhcp ]
  - hello-interval eigrp <1-65535>
  - helper-address
  - mtu <68-1500>
  - nat [ inside | outside ]
  - ospf
    - authentication
    - authentication-key
    - cost
    - dead-interval
    - hello-interval
    - message-digest-key <1-255>
    - priority
  - proxy-arp
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- ipv6
  - address
    - WORD X:X:X:X::X/<0-128>
    - X:X:X:X::X link-local
    - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
    - autoconfig
  - dhcp
    - client pd WORD
    - server WORD
  - eigrp <1-65535>
  - enable
  - hello-interval eigrp <1-65535>
  - inspect WORD [ in | out ]
  - mtu <1280-1500>
  - nat [ prefix X:X:X:X::X/<0-128> [ v4-mapped ] [ WORD ] ]
  - nd
  - ospf
    - <1-65535> area area-id [ instance instance-id ]
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - network
    - priority <0-255>
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
  - rip WORD [ default-information originate | enable ]
  - traffic-filter [ in | out ] WORD
- mac-address
- mtu
- pppoe enable
- priority-group
- service-policy [ input | output ] WORD
- shutdown
- speed
- standby
  - <0-4095>
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
    - ip A.B.C.D
    - ipv6
    - preempt
    - priority
    - track
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - preempt
  - priority
  - track
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
- tx-ring-limit
pppoe enable
priority-group <1-16>
service-policy [ input | output ] WORD
shutdown
speed [ 10 | 100 | 1000 | auto ] (10/100 options are only available for FastEthernet and GigabitEthernet interfaces and 10/100/1000 options are only available for GigabitEthernet interfaces respectively)
standby
- <0-4095>
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - ip A.B.C.D
  - ipv6
  - preempt
  - priority
  - track
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
- preempt
- priority
- track
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>[.][<0-4294967295>]
tx-ring-limit <1-32767>

Ethernet / FastEthernet / GigabitEthernet Sub-Interface Mode

arp timeout <0-2147483>
bandwidth <1-10000000>
delay <1-16777215>
description LINE
encapsulation dot1q <1-1005> [ native ]
exit
ip
- access-group [ <1-199> | WORD ] [ in | out ]
- address [ A.B.C.D A.B.C.D | dhcp ]
- hello-interval eigrp <1-65535> <1-65535>
- helper-address A.B.C.D
- mtu <68-1500>
- nat [ inside | outside ]
- ospf
  - authentication [ message-digest | null ]
  - authentication-key [ <0-7> ] WORD
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - message-digest-key <1-255> md5 LINE
  - priority <0-255>
- proxy-arp
- split-horizon
- summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
ipv6
- address
  - WORD X:X:X:X::X/<0-128>
  - X:X:X:X::X link-local
  - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
  - autoconfig
- dhcp
  - client pd WORD
  - server WORD
- eigrp <1-65535>
- enable
- hello-interval eigrp <1-65535> <1-65535>
- inspect WORD [ in | out ]
- mtu <1280-1500>
- nat prefix X:X:X:X::X/<0-128> [ v4-mapped WORD ]
- nd [ other-config-flag | ra suppress ]
- ospf
  - <1-65535> area [ [ <0-4294967295> | A.B.C.D ] instance <0-255> ]
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - network [ broadcast | point-to-point ]
- rip WORD [ default-information originate | enable ]
- summary-address eigrp <1-65535> X:X:X:X::X/<0-128> <1-255>
- traffic-filter WORD [ in | out ]
mtu <64-1600>
no
- arp timeout
- bandwidth
- delay
- description
- encapsulation dot1q
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address [ dhcp ]
  - hello-interval eigrp <1-65535>
  - helper-address A.B.C.D
  - mtu
  - nat [ inside | outside ]
  - ospf
    - authentication
    - authentication-key
    - cost
    - dead-interval
    - hello-interval
    - message-digest-key <1-255>
    - priority
  - proxy-arp
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- ipv6
  - address
    - WORD X:X:X:X::X/<0-128>
    - X:X:X:X::X link-local
    - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
    - autoconfig
  - dhcp
    - client pd WORD
    - server WORD
  - eigrp <1-65535>
  - enable
  - hello-interval eigrp <1-65535>
  - inspect WORD [ in | out ]
  - mtu
  - nat prefix X:X:X:X::X/<0-128> [ v4-mapped WORD ]
  - nd [ other-config-flag | ra suppress ]
  - ospf
    - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
    - cost
    - dead-interval
    - hello-interval
    - network
    - priority
  - rip WORD [ default-information originate | enable ]
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> <1-255>
  - traffic-filter [ WORD [ in | out ] | [ in | out ] ]
- mtu
- shutdown
- standby <0-4095> ipv6
shutdown
standby
- <0-4095> ipv6 autoconfig
- ipv6 autoconfig

Serial Interface Mode

bandwidth <1-10000000>
cdp enable
clock rate <1200-4000000> (only certain clock rates that are listed are valid)
crypto map WORD
custom-queue-list <1-16>
delay <1-16777215>
description LINE
encapsulation
- hdlc
- ppp
- frame-relay [ ietf ]
exit
fair-queue [ <1-4096> ] [ <16-4096> ] [ <0-1000> ]
frame-relay
- interface-dlci <16-1007>
- lmi-type [ ansi | ciso | q933a ]
- map
  - ip A.B.C.D <16-1007>
    - broadcast [ cisco | ietf ]
    - cisco [ broadcast ]
    - ietf [ broadcast ]
  - ipv6 X:X:X:X::X <16-1007>
    - broadcast [ cisco | ietf ]
    - cisco [ broadcast ]
    - ietf [ broadcast ]
hold-queue <0-4096> out
ip
- access-group [ <1-199> | WORD ] [ in | out ]
- address A.B.C.D A.B.C.D
- hello-interval eigrp <1-65535> <1-65535>
- inspect WORD [ in | out ]
- ips WORD [ in | out ]
- mtu <68-1500>
- nat [ inside | outside ]
- ospf
  - authentication [ message-digest | null ]
  - authentication-key [ <0-7> ] WORD
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - message-digest-key <1-255> md5 LINE
  - network [ broadcast | point-to-point ]
  - priority <0-255>
- split-horizon
- summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- virtual-reassembly
ipv6
- address
  - WORD X:X:X:X::X/<0-128>
  - X:X:X:X::X link-local
  - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
  - autoconfig
- dhcp
  - client pd WORD
  - server WORD
- eigrp <1-65535>
- enable
- hello-interval eigrp <1-65535> <1-65535>
- inspect WORD [ in | out ]
- mtu <1280-1500>
- nat prefix X:X:X:X::X/<0-128> [ v4-mapped WORD ]
- nd [ other-config-flag | ra suppress ]
- ospf
  - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - network [ broadcast | point-to-point ]
  - priority <0-255>
- rip WORD [ default-information originate | enable ]
- summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
- traffic-filter WORD [ in | out ]
keepalive <0-30>
mtu <64-17940>
no
- bandwidth <1-10000000>
- cdp enable
- clock rate
- crypto map [ WORD ]
- custom-queue-list <1-16>
- delay
- description
- ecnapsulation
- fair-queue [ <1-4096> ] [ <16-4096> ] [ <0-1000> ]
- frame-relay
  - interface-dlci <16-1007>
  - lmi-type [ ansi | cisco | q933a ]
  - map [ ip A.B.C.D | ipv6 X:X:X:X::X ]
- hold-queue [ <0-4096> ] out
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address [ dhcp ]
  - hello-interval eigrp <1-65535>
  - helper-address A.B.C.D
  - inspect WORD [ in | out ]
  - ips WORD [ in | out ]
  - mtu <68-1500>
  - nat [ inside | outside ]
  - ospf
    - authentication
    - authentication-key
    - cost
    - dead-interval
    - hello-interval
    - message-digest-key <1-255>
    - network
    - priority
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
  - virtual-reassembly
- ipv6
  - address
    - WORD X:X:X:X::X/<0-128>
    - X:X:X:X::X link-local
    - X:X:X:X::X/<0-128>
    - autoconfig
  - dhcp
    - client pd WORD
    - server WORD
  - eigrp <1-65535>
  - enable
  - hello-interval eigrp <1-65535>
  - inspect WORD [ in | out ]
  - mtu
  - nat [ prefix X:X:X:X::X/<0-128> ] [ v4-mapped WORD ]
  - nd [ other-config-flag | ra suppress ]
  - ospf
    - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
    - cost
    - dead-interval
    - hello-interval
    - network
    - priority
  - rip WORD [ default-information originate | enable ]
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
  - traffic-filter [ WORD ] [ in | out ]
- keepalive
- mtu
- ppp [ authentication | pap sent-username ]
- priority-group <1-16>
- service-policy [ input | output ] WORD
- shutdown
- tx-ring-limit
- zone-member security WORD
ppp
- authentication chap [ pap ]
- authentication pap [ chap ]
- pap sent-username WORD password [ 0 LINE | LINE ]
priority-group <1-16>
service-policy [ input | output ] WORD
shutdown
tx-ring-limit <1-32767>
zone-member security WORD

Tunnel Interface Mode

exit
ip address A.B.C.D A.B.C.D
ipv6
- address
  - WORD X:X:X:X::X/<0-128>
  - X:X:X:X::X link-local
  - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
  - autoconfig
- eigrp <1-65535>
- enable
- hello-interval eigrp <1-65535> <1-65535>
- nd ra suppress
- ospf
  - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - network [ broadcast | point-to-point ]
  - priority <0-255>
- rip WORD [ default-information originate | enable ]
- summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
no
- ip address [ A.B.C.D A.B.C.D ]
- ipv6
  - address
    - WORD X:X:X:X::X/<0-128>
    - X:X:X:X::X link-local
    - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
    - autoconfig
  - eigrp <1-65535>
  - enable
  - hello-interval eigrp <1-65535>
  - nd ra suppress
  - ospf
    - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
    - cost
    - dead-interval
    - hello-interval
    - network
    - priority
  - rip WORD [ default-information originate | enable ]
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
- shutdown
- tunnel [ destination | mode | source ]
shutdown
tunnel
- destination A.B.C.D
- mode [ gre ip | ipv6ip isatap ]
- source
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>

VLAN Interface Mode

arp timeout <0-2147483>
bandwidth <1-10000000>
delay <1-16777215>
description LINE
exit
ip
- access-group [ <1-199> | WORD ] [ in | out ]
- address [ A.B.C.D A.B.C.D ] [ dhcp ]
- hello-interval eigrp <1-65535> <1-65535>
- helper-address A.B.C.D
- nat [ inside | outside ]
- ospf
  - authentication [ message-digest | null ]
  - authentication-key [ <0-7> ] WORD
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - message-digest-key <1-255> md5 LINE
  - priority <0-255>
- proxy-arp
- split-horizon
- summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
ipv6
- address
  - WORD X:X:X:X::X/<0-128>
  - X:X:X:X::X link-local
  - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
  - autoconfig
- dhcp
  - client pd WORD
  - server WORD
- eigrp <1-65535>
- enable
- hello-interval eigrp <1-65535> <1-65535>
- inspect WORD [ in | out ]
- mtu <1280-1500>
- nat prefix [ X:X:X:X::X/<0-128> ] [ v4-mapped WORD ]
- nd [ other-config-flag | ra suppress ]
- ospf
  - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
  - cost <1-65535>
  - dead-interval <1-65535>
  - hello-interval <1-65535>
  - network [ broadcast | point-to-point ]
  - priority <0-255>
- rip WORD [ default-information originate | enable ]
- summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
- traffic-filter WORD [ in | out ]
no
- arp timeout
- bandwidth
- delay
- description
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address [ dhcp ]
  - hello-interval eigrp <1-65535>
  - helper-address A.B.C.D
  - nat [ inside | outside ]
  - ospf
    - authentication
    - authentication-key
    - cost
    - dead-interval
    - hello-interval
    - message-digest-key <1-255>
    - priority
  - proxy-arp
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- ipv6
  - address
    - WORD X:X:X:X::X/<0-128>
    - X:X:X:X::X link-local
    - X:X:X:X::X/<0-128> [ anycast | eui-64 ]
    - autoconfig
  - dhcp
    - client pd WORD
    - server WORD
  - eigrp <1-65535>
  - enable
  - hello-interval eigrp <1-65535>
  - inspect WORD [ in | out ]
  - mtu
  - nat prefix [ X:X:X:X::X/<0-128> ] [ v4-mapped WORD ]
  - nd [ other-config-flag | ra suppress ]
  - ospf
    - <1-65535> area [ <0-4294967295> | A.B.C.D ] [ instance <0-255> ]
    - cost
    - dead-interval
    - hello-interval
    - network
    - priority
  - rip WORD [ default-information originate | enable ]
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
  - traffic-filter [ WORD ] [ in | out ]
- shutdown
- standby
  - <0-4095>
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295]
    - ip A.B.C.D
    - ipv6
    - preempt
    - priority
    - track
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - Serial <0-9>/<0-24>[.][<0-4294967295>]
  - preempt
  - priority
  - track
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
shutdown
standby
- <0-4095>
  - ip A.B.C.D
  - ipv6 autoconfig
  - preempt
  - priority <0-255>
  - track
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Serial <0-9>/<0-24>[.][<0-4294967295>]
- ip A.B.C.D
- ipv6 autoconfig
- preempt
- priority <0-255>
- timers <1-254>
- track
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Serial <0-9>/<0-24>[.][<0-4294967295>]

VLAN Configuration Mode

exit
no
- vlan <1-1005> [ name ]
- vtp
  - client
  - password
  - transparent
  - v2-mode
vlan <1-1005> [ name ] [ WORD ]
vtp
- client
- domain WORD
- password WORD
- server
- transparent
- v2-mode

Class-Map Configuration Mode

description LINE
exit
match
- access-group
  - <1-2699>
  - name WORD
- any
- class-map WORD
- cos <0-7>
- destination-address mac H.H.H
- input-interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
- ip
  - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
- not
  - access-group
    - <1-2699>
    - name WORD
  - class-map WORD
  - cos <0-7>
  - destination-address mac H.H.H
  - input-interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
  - ip
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - protocol [ arp | bgp | cdp | dhcp | dns | eigrp | ftp | gre | h323 | http | icmp | ip | ipsec | ipv6 | ntp | ospf | pop3 | rip | rtp | skinny | smtp | snmp | ssh | syslog | tcp | telnet | tftp | udp ]
  - qos-group <0-1023>
- precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
- protocol
  - arp
  - bgp
  - cdp
  - dhcp
  - dns
  - eigrp
  - ftp
  - gre
  - h323
  - http [ host WORD | mime WORD | url WORD ]
  - icmp
  - ip
  - ipsec
  - ipv6
  - ntp
  - ospf
  - pop3
  - rip
  - rtp
  - skinny
  - smtp
  - snmp
  - ssh
  - syslog
  - tcp
  - telnet
  - tftp
  - udp
- qos-group <0-1023>
no
- description [ LINE ]
- match
  - access-group
    - <1-2699>
    - name WORD
  - any
  - class-map WORD
  - cos <0-7>
  - destination-address mac H.H.H
  - input-interface
    - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
    - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
  - ip
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - not
    - access-group
      - <1-2699>
      - name WORD
    - class-map WORD
    - cos <0-7>
    - destination-address mac H.H.H
    - input-interface
      - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
      - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
    - ip
      - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
      - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - protocol
      - arp
      - bgp
      - cdp
      - dhcp
      - dns
      - eigrp
      - ftp
      - gre
      - h323
      - http [ host WORD | mime WORD | url WORD ]
      - icmp
      - ip
      - ipsec
      - ipv6
      - ntp
      - ospf
      - pop3
      - rip
      - rtp
      - skinny
      - smtp
      - snmp
      - ssh
      - syslog
      - tcp
      - telnet
      - tftp
      - udp
    - qos-group <0-1023>
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - protocol [ arp | bgp | cdp | dhcp | dns | eigrp | ftp | gre | h323 | http | icmp | ip | ipsec | ipv6 | ntp | ospf | pop3 | rip | rtp | skinny | smtp | snmp | ssh | syslog | tcp | telnet | tftp | udp ]
  - qos-group <0-1023>

Zone Security Configuration Mode

exit

Zone-Pair Security Configuration Mode

exit
no
- service-policy type inspect WORD
service-policy type inspect WORD

Dynamic Crypto Map Configuration Mode

exit
no
- reverse-route
- set transform-set
reverse-route
set transform-set WORD

Parser View Configuration Mode

commands [ configure | exec | interface | line | router ] include [ all ] LINE
default
- commands [ configure | exec | interface | line | router ] include [ all ] LINE
- secret
exit
no
- commands [ configure | exec | interface | line | router ] include [ all ] LINE
- secret
secret [ 0 | 5 ] LINE

Router BGP Mode

bgp
- log-neighbor-changes
- redistribute-internal
- router-id A.B.C.D
exit
neighbor
- A.B.C.D next-hop-self
- A.B.C.D remote-as <1-65535>
network
- A.B.C.D mask A.B.C.D
no
- bgp
  - log-neighbor-changes
  - redistribute-internal
  - router-id A.B.C.D
- neighbor
  - A.B.C.D next-hop-self
  - A.B.C.D remote-as <1-65535>
- network
  - A.B.C.D mask A.B.C.D
- redistribute
  - connected
  - eigrp <1-65535>
  - ospf <1-65535>
    - match
      - external
      - internal
      - nssa-external
  - static
- synchronization
- timers bgp <0-65535>
redistribute
- connected
- eigrp <1-65535>
- ospf <1-65535>
  - match
    - external
    - internal
    - nssa-external
- static
synchronization
timers bgp <0-65535> <0-65535>

Router EIGRP Mode

auto-summary
distance eigrp <1-255> <1-255>
exit
metric weights <0-8> <0-256> <0-256> <0-256> <0-256> <0-256>
network A.B.C.D [ A.B.C.D ]
no
- auto-summary
- distance eigrp
- metric weights
- network A.B.C.D [ A.B.C.D ]
- redistribute
  - bgp <1-65535> [ metric ] [ <1-4294967295> ] [ <0-4294967295> <0-255> <1-255> <1-65535> ]
  - connected [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
  - eigrp <1-65535> [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
  - metric [ <1-4294967295> ] [ <0-4294967295> <0-255> <1-255> <1-65535> ]
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
  - rip [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
  - static [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
- passive-interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Vlan <1-1005>
  - default
- variance
passive-interface
- Ethernet <0-9>/<0-24>[.][<0-4294967295>]
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
- Loopback <0-2147483647>
- Serial <0-9>/<0-24>
- Vlan <1-1005>
- default
redistribute
- bgp <1-65535> [ metric ] [ <1-4294967295> ] [ <0-4294967295> <0-255> <1-255> <1-65535> ]
- connected [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
- eigrp <1-65535> [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
- metric [ <1-4294967295> ] [ <0-4294967295> <0-255> <1-255> <1-65535> ]
- ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
- rip [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
- static [ metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ]
variance <1-128>

IPv6 Router EIGRP Mode

exit
metric weights <0-8> <0-255> <0-255> <0-255> <0-255> <0-255>
no
- metric weights <0-8> <0-255> <0-255> <0-255> <0-255> <0-255>
- redistribute
  - bgp <1-65535> [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
  - connected [ metric [ <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ] ]
  - eigrp <1-65535> [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
  - rip WORD [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
  - static
- router-id
- shutdown
redistribute

bgp <1-65535> [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
connected [ metric [ <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535> ] ]
eigrp <1-65535> [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
rip WORD [ metric <1-4294967295> [ <0-4294967295> <0-255> <1-255> <1-65535> ] ]
static
router-id A.B.C.D
shutdown

Router OSPF Mode

area
- [ <0-4294967295> | A.B.C.D ]
  - authentication message-digest
  - default-cost <0-16777215>
  - nssa no-summary
  - stub no-summary
  - virtual-link A.B.C.D
default-information originate
distance <1-255>
exit
log-adjacency-changes [ detail ]
network A.B.C.D A.B.C.D area [ <0-4294967295> | A.B.C.D ]
no
- area
  - [ <0-4294967295> | A.B.C.D ]
    - authentication message-digest
    - default-cost <0-16777215>
    - nssa no-summary
    - stub no-summary
    - virtual-link A.B.C.D
- default-information originate
- distance <1-255>
- log-adjacency-changes [ detail ]
- network A.B.C.D A.B.C.D area [ <0-4294967295> | A.B.C.D ]
- redistribute
  - bgp <1-65535> [ metric <0-16777214 | subnets | tag <0-4294967295> ]
  - connected [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - eigrp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - metric <0-16777214>
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - rip [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - static [ metric <0-16777214> | subnets | tag <-0-4294967295> ]
- passive-interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Vlan <1-1005>
  - default
- router-id
passive-interface
- Ethernet <0-9>/<0-24>[.][<0-4294967295>]
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
- Loopback <0-2147483647>
- Serial <0-9>/<0-24>
- Vlan <1-1005>
- default
redistribute
- bgp <1-65535> [ metric <0-16777214 | subnets | tag <0-4294967295> ]
- connected [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- eigrp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- metric <0-16777214>
- ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- rip [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- static [ metric <0-16777214> | subnets | tag <-0-4294967295> ]
router-id A.B.C.D

IPv6 Router OSPF Mode

area <1-65535>
- default-cost <0-16777215>
- nssa [ no-summary ]
- stub [ no-summary ]
- virtual-link A.B.C.D
distance <1-254>
exit
log-adjacency-changes [ detail ]
no
- area <1-65535>
  - default-cost <0-16777215>
  - nssa [ no-summary ]
  - stub [ no-summary ]
  - virtual-link A.B.C.D
- distance <1-254>
- log-adjacency-changes [ detail ]
- passive-interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - default
- redistribute
  - bgp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - connected [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - eigrp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
  - metric <0-16777214>
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric <0-16777214> | subnets | tag <0-4294967295 ]
  - rip WORD [ metric <0-16777214> | subnets | tag <0-4294967295>
  - static [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- router-id
passive-interface
- Ethernet <0-9>/<0-24>[.][<0-4294967295>]
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
- Loopback <0-2147483647>
- Serial <0-9>/<0-24>
- default
redistribute
- bgp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- connected [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- eigrp <1-65535> [ metric <0-16777214> | subnets | tag <0-4294967295> ]
- metric <0-16777214>
- ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric <0-16777214> | subnets | tag <0-4294967295 ]
- rip WORD [ metric <0-16777214> | subnets | tag <0-4294967295>
- static [ metric <0-16777214> | subnets | tag <0-4294967295> ]
router-id A.B.C.D

Router RIP Mode

auto-summary
default-information originate
distance <1-255>
exit
network A.B.C.D
no
- auto-summary
- default-information
- distance <1-255>
- network A.B.C.D
- passive-interface
  - Ethernet <0-9>/<0-24>[.][<0-4294967295>]
  - FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - Vlan <1-1005>
  - default
- redistribute
  - connected [ metric [ <0-16> | transparent ] ]
  - eigrp <1-65535> [ metric [ <0-16> | transparent ] ]
  - metric [ <0-16> | transparent ]
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric default-metric ]
  - rip [ metric [ <0-16> | transparent ] ]
  - static [ metric [ <0-16> | transparent ] ]
- timers basic
- version <1-2>
passive-interface
- Ethernet <0-9>/<0-24>[.][<0-4294967295>]
- FastEthernet <0-9>/<0-24>[.][<0-4294967295>]
- GigabitEthernet <0-9>/<0-24>[.][<0-4294967295>]
- Loopback <0-2147483647>
- Serial <0-9>/<0-24>
- Vlan <1-1005>
- default
redistribute
- connected [ metric [ <0-16> | transparent ] ]
- eigrp <1-65535> [ metric [ <0-16> | transparent ] ]
- metric [ <0-16> | transparent ]
- ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric default-metric ]
- rip [ metric [ <0-16> | transparent ] ]
- static [ metric [ <0-16> | transparent ] ]
timers basic <0-4294967295> <1-4294967295> <0-4294967295> <1-4294967295>
version <1-2>

IPv6 Router RIP Mode

distance <1-254>
exit
no
- distance
- redistribute
  - connected [ metric [ <1-16> | transparent ] ]
  - eigrp <1-65535> [ metric [ <1-16> | transparent ] ]
  - metric [ <1-16> | transparent ]
  - ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric [ <1-16> | transparent ] ]
  - rip WORD [ metric [ <1-16> | transparent ] ]
  - static [ metric [ <1-16> | transparent ] ]
redistribute

connected [ metric [ <1-16> | transparent ] ]
eigrp <1-65535> [ metric [ <1-16> | transparent ] ]
metric [ <1-16> | transparent ]
ospf <1-65535> [ match { external [ 1 | 2 ] | internal | nssa-external } ] [ metric [ <1-16> | transparent ] ]
rip WORD [ metric [ <1-16> | transparent ] ]
static [ metric [ <1-16> | transparent ] ]

DHCP Pool Configuration Mode

default-router A.B.C.D
dns-server A.B.C.D
exit
network A.B.C.D A.B.C.D
no dns-server
option <0-254> ip A.B.C.D

IPv6 DHCP Pool Configuration Mode

dns-server X:X:X:X::X
domain-name WORD
exit
no
- dns-server X:X:X:X::X
- domain-name WORD
- prefix-delegation
  - X:X:X:X::X/<0-128> WORD [ lifetime ] <60-4294967295> <60-4294967295>
  - pool WORD [ lifetime ] <60-4294967295> <60-4294967295>
prefix-delegation
- X:X:X:X::X/<0-128> WORD [ lifetime ] <60-4294967295> <60-4294967295>
- pool WORD [ lifetime ] <60-4294967295> <60-4294967295>

Line Configuration Mode

access-class [ <1-199> | <1300-2699> | WORD ] [ in | out ]
databits [ 5 | 6 | 7 | 8 ]
default [ databits | flowcontrol | history size | parity | speed | stopbits ]
exit
exec-timeout <0-35791> [ <0-2147483> ]
flowcontrol [ NONE | hardware | software ]
history size <0-256>
ipv6 access-class WORD [ in | out ]
logging synchronous
login
- authentication [ WORD | default ]
- local
motd-banner
no
- [ access-class [ <1-199> | <1300-2699> | WORD ] [ in | out ]
- databits
- exec-timeout
- flowcontrol
- history size
- ipv6 access-class WORD [ in | out ]
- logging synchronous
- login
  - authentication [ WORD | default ]
  - local
- motd-banner
- parity
- password
- privilege level
- session-limit
- speed
- stopbits
- transport output
parity [ even | mark | none | odd | space ]
password [ 7 WORD | LINE ]
privilege level <0-15>
session-limit <0-4294967295>
speed <0-4294967295>
stopbits [ 1 | 1.5 | 2 ]
transport output [ all | none | ssh | telnet ]

Policy-Map Configuration Mode

class [ type inspect ] [ WORD | class-default ]
exit
no
- class [ type inspect ] [ WORD | class-default ]

Policy-Map Class Configuration Mode

bandwidth [ <8-2000000> | percent <1-100> | remaining percent <1-100> ]
exit
no
- bandwidth
- priority
- queue-limit
- random-detect
  - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
  - dscp-based
  - prec-based
  - precedence <0-7>
- service-policy WORD
- set
  - ip
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
- shape average
priority [ <8-2000000> | percent <1-100> ] [ <32-2000000> ]
queue-limit <1-4096>
random-detect
- dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ] <1-4096> <1-4096> [ <1-65535> ]
- dscp-based
- prec-based
- precedence <0-7> <1-4096> <1-4096> [ <1-65535> ]
service-policy WORD
set
- ip
  - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
- precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
shape average <8000-154400000>

Rommon Mode

boot
confreg config-register-number
dir flash:
help
reset
set
tftpdnld
unset variable
variable=value