Difference between revisions of "Cisco IOS"
Line 1: | Line 1: | ||
− | [[wikipedia:Cisco | + | [[wikipedia:Cisco IOS|Cisco Internetwork Operating System]] (IOS) is a family of network operating systems used on many Cisco Systems routers and current Cisco network switches |
+ | == Basic commands == | ||
+ | * <code>[[/show version/]]</code> or <code>sh ver</code> (includes [[uptime]] information) | ||
+ | Interfaces: | ||
+ | * <code>show interfaces</code> | ||
+ | * <code>show interface trunk</code> | ||
+ | * <code>show interfaces switchport</code>. To display the administrative and operational status of a switching (nonrouting) port | ||
+ | * <code>[[/show configuration/]]</code> or <code>sh conf</code> | ||
+ | * <code>[[/show running-config/]]</code> or <code>sh run</code> An enable mode command that displays the current configuration | ||
+ | * <code>configure terminal</code> or <code>conf t</code> Logs you into configuration mode | ||
+ | |||
+ | |||
+ | * <code>show ip</code> | ||
+ | * <code>show ip interface</code> | ||
+ | ** <code>show ip interface brief</code> or <code>sh ip int br</code> | ||
+ | * <code>enable</code> Logs into enable mode. Also known as user exec mode or privileged mode. See also: <code>show privilege</code> | ||
+ | ** <code>enable 5</code> Change to level 5 | ||
+ | ** <code>no enable password</code> | ||
+ | |||
+ | * <code>show ip traffic</code> | ||
+ | * <code>[[/show logging/]]</code> | ||
+ | * <code>[[/no shutdown/]]</code>. Enables an interface (brings it up). | ||
+ | |||
+ | |||
+ | * <code>ip route-cache</code> | ||
+ | * <code>no ip route-cache</code> | ||
+ | |||
+ | * <code>[[Cisco IOS/Configure public RSA key authentication|ip ssh pubkey-chain]]</code> | ||
+ | |||
+ | * <code>include</code>, similar to <code>[[linux/Basic commands/grep|grep]]</code> linux command | ||
+ | |||
+ | * <code>show vlan [brief | id <vlan-id> | name <name> [ifindex] | <ifindex>]</code> | ||
+ | ** <code>[[show vlan]]</code> | ||
+ | ** <code>[[show vlan brief]]</code> or <code>[[sh vlan br]]</code> | ||
+ | ** <code>show vlan summary</code> or <code>[[sh vlan s]]</code> | ||
+ | |||
+ | * <code>[[/aaa new model/]]</code> | ||
+ | |||
+ | * <code>[[/show ip route/]]</code> or <code>[[/show ip ro/]]</code> | ||
+ | |||
+ | * <code>[[/show ip arp/]]</code> | ||
+ | * <code>[[/show ip ssh/]]</code> | ||
+ | * <code>show privilege</code> | ||
+ | |||
+ | * <code>[[/username/]]</code> Create and delete users | ||
+ | * <code>[[/show users/]]</code> | ||
+ | |||
+ | * <code>[[/write/]]</code> | ||
+ | |||
+ | * <code>[[/show crypto ca certificates/]]</code> | ||
+ | |||
+ | === Access List === | ||
+ | Configuring IP Access Lists: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html#acltypes | ||
+ | |||
+ | Types of ACLs: Standard ACLs, Extended ACLs, Lock and Key (Dynamic ACLs), IP Named ACLs, Reflexive ACLs, Time-Based ACLs Using Time Ranges, Commented IP ACL Entries, Context-Based Access Control, Authentication Proxy, Turbo ACLs, Distributed Time-Based ACLs, Receive ACLs, Infrastructure Protection ACLs, Transit ACLs. | ||
+ | |||
+ | * <code>show access-list</code> | ||
+ | * <code>show ip access-list</code> | ||
+ | * <code>router(config)#access-list 101 deny icmp any any</code> | ||
+ | * <code>router(config)#access-list 101 permit ip any any</code> | ||
+ | |||
+ | |||
+ | * <code>router(config)#ip access-list extended test</code> | ||
+ | * <code>router(config-ext-nacl)#permit ip host 2.2.2.2 host 3.3.3.3</code> | ||
+ | * <code>router(config-ext-nacl)#permit tcp host 1.1.1.1 host 5.5.5.5 eq www</code> | ||
+ | * <code>router(config-ext-nacl)#permit icmp any any</code> | ||
+ | * <code>router(config-ext-nacl)#permit udp host 6.6.6.6 10.10.10.0 0.0.0.255 eq domain</code> | ||
+ | |||
+ | |||
+ | * <code>ip access-group</code> | ||
+ | |||
+ | === HTTP Server === | ||
+ | * <code>sh ip http server all</code> | ||
+ | * <code>R1(config)#ip http authentication local</code> | ||
+ | * <code>R1(config)#ip http secure-server</code> | ||
+ | |||
+ | == Configuration Guides == | ||
+ | * [[/Cisco IOS DHCP Server configuration/]] | ||
+ | * [[/Configure public RSA key authentication/]]: <code>[[Cisco IOS/Configure public RSA key authentication|ip ssh pubkey-chain]]</code> | ||
+ | |||
+ | == Activities == | ||
+ | # Read wikipedia article about [[w:Cisco IOS|Cisco Internetwork Operating System]] | ||
+ | # Read Cisco IOS command reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/command/Cisco_IOS_Configuration_Fundamentals_Command_Reference.pdf | ||
+ | # Read Cisco IOS Cheat Sheet: https://www.netwrix.com/cisco_commands_cheat_sheet.html | ||
+ | # Configure a user with public key access [[/Configure public RSA key authentication/]] | ||
+ | # [[/Associate a user with default higher privileges/]] using <code>[[/username/]]</code> command | ||
Line 10: | Line 95: | ||
[[Category:Networking]] | [[Category:Networking]] | ||
+ | |||
+ | |||
+ | {{CC license}} https://en.wikiversity.org/wiki/Cisco_IOS |
Revision as of 18:02, 8 December 2019
Cisco Internetwork Operating System (IOS) is a family of network operating systems used on many Cisco Systems routers and current Cisco network switches
Contents
Basic commands
/show version/
orsh ver
(includes uptime information)
Interfaces:
show interfaces
show interface trunk
show interfaces switchport
. To display the administrative and operational status of a switching (nonrouting) port
/show configuration/
orsh conf
/show running-config/
orsh run
An enable mode command that displays the current configurationconfigure terminal
orconf t
Logs you into configuration mode
show ip
show ip interface
show ip interface brief
orsh ip int br
enable
Logs into enable mode. Also known as user exec mode or privileged mode. See also:show privilege
enable 5
Change to level 5no enable password
show ip traffic
/show logging/
/no shutdown/
. Enables an interface (brings it up).
ip route-cache
no ip route-cache
include
, similar togrep
linux command
show vlan [brief | id <vlan-id> | name <name> [ifindex] | <ifindex>]
show vlan
show vlan brief
orsh vlan br
show vlan summary
orsh vlan s
/show ip arp/
/show ip ssh/
show privilege
/username/
Create and delete users/show users/
Access List
Configuring IP Access Lists: https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-confaccesslists.html#acltypes
Types of ACLs: Standard ACLs, Extended ACLs, Lock and Key (Dynamic ACLs), IP Named ACLs, Reflexive ACLs, Time-Based ACLs Using Time Ranges, Commented IP ACL Entries, Context-Based Access Control, Authentication Proxy, Turbo ACLs, Distributed Time-Based ACLs, Receive ACLs, Infrastructure Protection ACLs, Transit ACLs.
show access-list
show ip access-list
router(config)#access-list 101 deny icmp any any
router(config)#access-list 101 permit ip any any
router(config)#ip access-list extended test
router(config-ext-nacl)#permit ip host 2.2.2.2 host 3.3.3.3
router(config-ext-nacl)#permit tcp host 1.1.1.1 host 5.5.5.5 eq www
router(config-ext-nacl)#permit icmp any any
router(config-ext-nacl)#permit udp host 6.6.6.6 10.10.10.0 0.0.0.255 eq domain
ip access-group
HTTP Server
sh ip http server all
R1(config)#ip http authentication local
R1(config)#ip http secure-server
Configuration Guides
- /Cisco IOS DHCP Server configuration/
- /Configure public RSA key authentication/:
ip ssh pubkey-chain
Activities
- Read wikipedia article about Cisco Internetwork Operating System
- Read Cisco IOS command reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fundamentals/command/Cisco_IOS_Configuration_Fundamentals_Command_Reference.pdf
- Read Cisco IOS Cheat Sheet: https://www.netwrix.com/cisco_commands_cheat_sheet.html
- Configure a user with public key access /Configure public RSA key authentication/
- /Associate a user with default higher privileges/ using
/username/
command
See also
Networking: bandwidth, latency, Jitter, Ethernet, UPnP, MPLS, Frame Relay, ATM, TCP/IP, ARP, WiFi, BGP, Networking timeline, Router, Proxy ARP, Services & Networking, Traffic shapper
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. https://en.wikiversity.org/wiki/Cisco_IOS
Advertising: