Document Outline

• Command Groups
  • Introduction
  • Command Groups
  • Mode Types
  • Layer 2 Commands
  • Management ACL Commands
  • User Interface Commands
  • AAA Commands
  • Address Table Commands
  • Clock Commands
  • Denial of Service Commands
  • DHCP Filtering Commands
  • Ethernet Configuration Commands
  • GVRP Commands
  • IGMP Snooping Commands
  • IGMP Snooping Querier Commands
  • LACP Commands
  • Link Dependency Commands
  • LLDP Commands
  • Password Management
  • Port Monitor Commands
  • PHY Diagnostics Commands
  • System Management Commands
  • ACL Commands
  • Line Commands
  • IP Addressing Commands
  • 802.1x Commands
  • Configuration and Image Files Commands
  • QoS Commands
  • Radius Commands
  • RMON Commands
  • SNMP Commands
  • Port Channel Commands
  • Spanning Tree Commands
  • SSH Commands
  • Syslog Commands
  • TACACS+ Commands
  • Telnet Server Commands
  • VLAN Commands
  • Web Server Commands
  • Layer 3 Commands
  • ARP Commands
  • DHCP and BOOTP Relay Commands
  • DHCPv6 Commands
  • DVMRP Commands
  • IGMP Commands
  • IGMP Proxy Commands
  • IP Routing Commands
  • IPv6 Routing Commands
  • Loopback Interface Commands
  • Multicast Commands
  • OSPF Commands
  • OSPFv3 Commands
  • PIM-DM Commands
  • PIM-SM Commands
  • Router Discovery Protocol Commands
  • Routing Information Protocol (RIP) Commands
  • Tunnel Interface Commands
  • Virtual LAN Routing Commands
  • Virtual Router Redundancy Commands
• Using the CLI
  • Entering and Editing CLI Commands
  • CLI Command Modes
  • Starting the CLI
  • Using CLI Functions and Tools
• Layer 2 Commands
• Management ACL Commands
  • deny (management)
  • management access-class
  • management access-list
  • permit (management)
  • show management access-class
  • show management access-list
• User Interface Commands
  • enable
  • end
  • exit (configuration)
  • exit (EXEC)
• AAA Commands
  • aaa authentication enable
  • aaa authentication login
  • enable authentication
  • enable password
  • ip http authentication
  • ip https authentication
  • login authentication
  • password (Line Configuration)
  • password (User EXEC)
  • show authentication methods
  • show users accounts
  • show users login history
  • username
• Address Table Commands
  • bridge address
  • bridge aging-time
  • bridge multicast address
  • bridge multicast filtering
  • bridge multicast forbidden address
  • bridge multicast forbidden forward-unregistered
  • bridge multicast forward-all
  • bridge multicast forward-unregistered
  • clear bridge
  • port security
  • port security max
  • show bridge address-table
  • show bridge address-table count
  • show bridge address-table static
  • show bridge multicast address-table
  • show bridge multicast filtering
  • show ports security
  • show ports security addresses
• Clock Commands
  • show clock
  • show sntp configuration
  • show sntp status
  • sntp authenticate
  • sntp authentication-key
  • sntp broadcast client enable
  • sntp client poll timer
  • sntp server
  • sntp trusted-key
  • sntp unicast client enable
  • clock timezone hours-offset
  • no clock timezone
  • clock summer-time recurring
  • clock summer-time date
  • no clock summer-time recurring
  • show clock
• Denial of Service Commands
  • dos-control firstfrag
  • dos-control icmp
  • dos-control l4port
  • dos-control sipdip
  • dos-control tcpflag
  • dos-control tcpfrag
  • show dos-control
• DHCP Filtering Commands
  • ip dhcp filtering
  • ip dhcp filtering trust
  • show ip dhcp filtering
• Ethernet Configuration Commands
  • clear counters
  • description
  • duplex
  • flowcontrol
  • interface ethernet
  • interface range ethernet
  • mdix
  • mtu
  • negotiation
  • show interfaces advertise
  • show interfaces configuration
  • show interfaces counters
  • show interfaces description
  • show interfaces status
  • show statistics ethernet
  • show storm-control
  • shutdown
  • speed
  • storm-control broadcast
  • storm-control multicast
  • storm-control unicast
• GVRP Commands
  • clear gvrp statistics
  • garp timer
  • gvrp enable (global)
  • gvrp enable (interface)
  • gvrp registration-forbid
  • gvrp vlan-creation-forbid
  • show gvrp configuration
  • show gvrp error-statistics
  • show gvrp statistics
• IGMP Snooping Commands
  • ip igmp snooping (global)
  • ip igmp snooping (interface)
  • ip igmp snooping host-time-out
  • ip igmp snooping leave-time-out
  • ip igmp snooping mrouter-time-out
  • show ip igmp snooping groups
  • show ip igmp snooping interface
  • show ip igmp snooping mrouter
  • ip igmp snooping (VLAN)
  • ip igmp snooping fast-leave
  • ip igmp snooping groupmembership-interval
  • ip igmp snooping maxresponse
  • ip igmp snooping mcrtrexpiretime
• IGMP Snooping Querier Commands
  • ip igmp snooping querier
  • ip igmp snooping querier query-interval
  • ip igmp snooping querier timer expiry
  • ip igmp snooping querier version
  • ip igmp snooping querier election participate
  • show igmpsnooping querier
• LACP Commands
  • lacp port-priority
  • lacp system-priority
  • lacp timeout
  • show lacp ethernet
  • show lacp port-channel
• Link Dependency Commands
  • link-dependency group
  • no link-dependency group
  • add ethernet
  • no add ethernet
  • add port-channel
  • no add port-channel
  • depends-on ethernet
  • no depends-on ethernet
  • depends-on port-channel
  • no depends-on port-channel
  • show link-dependency
• LLDP Commands
  • clear lldp remote-data
  • clear lldp statistics
  • lldp notification
  • lldp notification-interval
  • lldp receive
  • lldp timers
  • lldp transmit
  • lldp transmit-mgmt
  • lldp transmit-tlv
  • show lldp
  • show lldp connections
  • show lldp interface
  • show lldp local-device
  • show lldp remote-device
  • show lldp statistics
• Password Management Commands
  • passwords aging
  • passwords history
  • passwords lock-out
  • passwords min-length
  • show passwords configuration
• Port Monitor Commands
  • monitor session
  • show monitor session
• PHY Diagnostics Commands
  • show copper-ports cable-length
  • show copper-ports tdr
  • show fiber-ports optical-transceiver
  • test copper-port tdr
• System Management Commands
  • asset-tag
  • cut-through mode
  • hostname
  • ip address
  • ip address none
  • ip address
  • member
  • movemanagement
  • no cut-through mode
  • no standby
  • ping
  • reload
  • set description
  • show boot-version
  • show cut-through mode
  • show ip interface out-of-band
  • show memory cpu
  • show process cpu
  • show sessions
  • show stack-port
  • show stack-port counters
  • show stack-port diag
  • show stack standby
  • show supported switchtype
  • show switch
  • show system
  • show system id
  • show users
  • show version
  • stack
  • standby
  • switch priority
  • switch renumber
  • telnet
  • traceroute
• ACL Commands
  • access-list
  • deny | permit
  • ip access-group
  • no ip access-group
  • mac access-group
  • mac access-list extended
  • mac access-list extended rename
  • show ip access-lists
  • show mac access-list
• Line Commands
  • exec-timeout
  • history
  • history size
  • line
  • show line
  • speed
• IP Addressing Commands
  • clear host
  • helper-address
  • interface out-of-band
  • ip address
  • ip address dhcp
  • ip address vlan
  • ip default-gateway
  • ip domain-lookup
  • ip domain-name
  • ip helper-address
  • ip host
  • ip name-server
  • show arp switch
  • show hosts
  • show ip helper-address
  • show ip interface management
• 802.1x Commands
  • aaa authentication dot1x
  • dot1x max-req
  • dot1x port-control
  • dot1x re-authenticate
  • dot1x re-authentication
  • dot1x system-auth-control
  • dot1x timeout quiet-period
  • dot1x timeout re-authperiod
  • dot1x timeout server-timeout
  • dot1x timeout supp-timeout
  • dot1x timeout tx-period
  • show dot1x
  • show dot1x statistics
  • show dot1x users
  • dot1x auth-not-req
  • dot1x guest-vlan
  • dot1x guest-vlan enable
  • dot1x multiple-hosts
  • dot1x single-host-violation
  • show dot1x advanced
• Configuration and Image File Commands
  • boot system
  • clear config
  • copy
  • delete backup-config
  • delete backup-image
  • delete startup-config
  • filedescr
  • ftpdownload
  • script apply
  • script delete
  • script list
  • script validate
  • show backup-config
  • show bootvar
  • show dir
  • show running-config
  • show startup-config
  • update bootcode
• QoS Commands
  • assign-queue
  • class
  • class-map
  • class-map rename
  • classofservice dot1p-mapping
  • classofservice ip-dscp-mapping
  • classofservice trust
  • conform-color
  • cos-queue min-bandwidth
  • cos-queue strict
  • diffserv
  • drop
  • mark cos
  • mark ip-dscp
  • mark ip-precedence
  • match class-map
  • match cos
  • match destination-address mac
  • match dstip
  • match dstl4port
  • match ethertype
  • match ip dscp
  • match ip precedence
  • match ip tos
  • match protocol
  • match source-address mac
  • match srcip
  • match srcl4port
  • match vlan
  • mirror
  • police-simple
  • policy-map
  • redirect
  • service-policy
  • show class-map
  • show classofservice dot1p-mapping
  • show classofservice ip-dscp-mapping
  • show classofservice trust
  • show diffserv
  • show diffserv service interface ethernet in
  • show diffserv service interface port-channel in
  • show diffserv service brief
  • show interfaces cos-queue
  • show policy-map
  • show policy-map interface
  • show service-policy
  • traffic-shape
• Radius Commands
  • auth-port
  • deadtime
  • key
  • priority
  • radius-server deadtime
  • radius-server host
  • radius-server key
  • radius-server retransmit
  • radius-server source-ip
  • radius-server timeout
  • retransmit
  • show radius-servers
  • source-ip
  • timeout
  • usage
• RMON Commands
  • rmon alarm
  • rmon collection history
  • rmon event
  • rmon table-size
  • show rmon alarm
  • show rmon alarm-table
  • show rmon collection history
  • show rmon events
  • show rmon history
  • show rmon log
  • show rmon statistics
• SNMP Commands
  • show snmp
  • show snmp engineID
  • show snmp filters
  • show snmp groups
  • show snmp users
  • show snmp views
  • snmp-server community
  • snmp-server community-group
  • snmp-server contact
  • snmp-server enable traps
  • snmp-server engineID local
  • snmp-server filter
  • snmp-server group
  • snmp-server host
  • snmp-server location
  • snmp-server trap authentication
  • snmp-server user
  • snmp-server view
  • snmp-server v3-host
• Port Channel Commands
  • channel-group
  • interface port-channel
  • interface range port-channel
  • hashing-mode
  • no hashing-mode
  • show interfaces port-channel
  • show statistics port-channel
• Spanning Tree Commands
  • abort (mst)
  • clear spanning-tree detected-protocols
  • exit (mst)
  • instance (mst)
  • name (mst)
  • revision (mst)
  • show (mst)
  • show spanning-tree
  • spanning-tree
  • spanning-tree bpdu
  • spanning-tree bpdu-protection
  • spanning-tree cost
  • spanning-tree disable
  • spanning-tree forward-time
  • spanning-tree hello-time
  • spanning-tree max-age
  • spanning-tree mode
  • spanning-tree mst configuration
  • spanning-tree mst cost
  • spanning-tree mst max-hops
  • spanning-tree mst port-priority
  • spanning-tree mst priority
  • spanning-tree portfast
  • spanning-tree port-priority
  • spanning-tree priority
  • spanning-tree root-protection
• SSH Commands
  • crypto key generate dsa
  • crypto key generate rsa
  • crypto key pubkey-chain ssh
  • ip ssh port
  • ip ssh pubkey-auth
  • ip ssh server
  • key-string
  • show crypto key mypubkey
  • show crypto key pubkey-chain ssh
  • show ip ssh
  • user-key
• Syslog Commands
  • clear logging
  • clear logging file
  • description
  • level
  • logging cli-command
  • logging
  • logging buffered
  • logging buffered size
  • logging console
  • logging facility
  • logging file
  • logging on
  • port
  • show logging
  • show logging file
  • show syslog-servers
• TACACS+ Commands
  • key
  • port
  • priority
  • show tacacs
  • tacacs-server host
  • tacacs-server key
  • tacacs-server timeout
  • timeout
• Telnet Server Commands
  • ip telnet server disable
  • ip telnet port
  • show ip telnet
• VLAN Commands
  • dvlan-tunnel ethertype
  • interface vlan
  • interface range vlan
  • mode dvlan-tunnel
  • name
  • protocol group
  • protocol vlan group
  • protocol vlan group all
  • show dvlan-tunnel
  • show dvlan-tunnel interface
  • show interfaces switchport
  • show port protocol
  • show switchport protected
  • show vlan
  • show vlan association mac
  • show vlan association subnet
  • switchport access vlan
  • switchport forbidden vlan
  • switchport general acceptable-frame-type tagged-only
  • switchport general allowed vlan
  • switchport general ingress-filtering disable
  • switchport general pvid
  • switchport mode
  • switchport protected
  • switchport protected name
  • switchport trunk allowed vlan
  • vlan
  • vlan association mac
  • vlan association subnet
  • vlan database
  • vlan makestatic
  • vlan protocol group
  • vlan protocol group add protocol
  • vlan protocol group remove
• Web Server Commands
  • common-name
  • country
  • crypto certificate generate
  • crypto certificate import
  • crypto certificate request
  • duration
  • ip http port
  • ip http server
  • ip https certificate
  • ip https port
  • ip https server
  • key-generate
  • location
  • organization-unit
  • show crypto certificate mycertificate
  • show ip http
  • show ip https
  • state
• Layer 3 Commands
• ARP Commands
  • arp
  • arp cachesize
  • arp dynamicrenew
  • arp purge
  • arp resptime
  • arp retries
  • arp timeout
  • clear arp-cache
  • ip proxy-arp
  • show arp
• DHCP and BOOTP Relay Commands
  • bootpdhcprelay cidridoptmode
  • bootpdhcprelay enable
  • bootpdhcprelay maxhopcount
  • bootpdhcprelay minwaittime
  • bootpdhcprelay serverip
  • show bootpdhcprelay
• DHCPv6 Commands
  • clear ipv6 dhcp
  • dns-server
  • domain-name
  • ipv6 dhcp pool
  • ipv6 dhcp relay
  • ipv6 dhcp relay-agent-info-opt
  • ipv6 dhcp relay-agent-info-remote-id-subopt
  • ipv6 dhcp server
  • prefix-delegation
  • service dhcpv6
  • show ipv6 dhcp
  • show ipv6 dhcp binding
  • show ipv6 dhcp interface
  • show ipv6 dhcp pool
  • show ipv6 dhcp statistics
• DVMRP Commands
  • ip dvmrp
  • ip dvmrp metric
  • ip dvmrp trapflags
  • show ip dvmrp
  • show ip dvmrp interface
  • show ip dvmrp neighbor
  • show ip dvmrp nexthop
  • show ip dvmrp prune
  • show ip dvmrp route
• IGMP Commands
  • ip igmp
  • ip igmp last-member-query-count
  • ip igmp last-member-query-interval
  • ip igmp query-interval
  • ip igmp query-max-response-time
  • ip igmp robustness
  • ip igmp startup-query-count
  • ip igmp startup-query-interval
  • ip igmp version
  • show ip igmp
  • show ip igmp groups
  • show ip igmp interface
  • show ip igmp interface membership
  • show ip igmp interface stats
  • ip igmp router-alert-optional
• IGMP Proxy Commands
  • ip igmp-proxy
  • ip igmp-proxy reset-status
  • ip igmp-proxy unsolicited-report-interval
  • show ip igmp-proxy
  • show ip igmp-proxy interface
  • show ip igmp-proxy groups
  • show ip igmp-proxy groups detail
• IP Routing Commands
  • encapsulation
  • ip address
  • ip mtu
  • ip netdirbcast
  • ip route
  • ip route default
  • ip route distance
  • ip routing
  • routing
  • show ip brief
  • show ip interface
  • show ip protocols
  • show ip route
  • show ip route preferences
  • show ip route summary
  • show ip stats
• IPv6 Routing Commands
  • clear ipv6 neighbors
  • clear ipv6 statistics
  • ipv6 address
  • ipv6 enable
  • ipv6 forwarding
  • ipv6 mtu
  • ipv6 nd dad attempts
  • ipv6 nd managed-config-flag
  • ipv6 nd ns-interval
  • ipv6 nd other-config-flag
  • ipv6 nd prefix
  • ipv6 nd ra-interval
  • ipv6 nd ra-lifetime
  • ipv6 nd reachable-time
  • ipv6 nd suppress-ra
  • ipv6 route
  • ipv6 route distance
  • ipv6 unicast-routing
  • ping ipv6
  • ping ipv6 interface
  • show ipv6 brief
  • show ipv6 interface
  • show ipv6 neighbors
  • show ipv6 route
  • show ipv6 route preferences
  • show ipv6 route summary
  • show ipv6 traffic
  • show ipv6 vlan
  • traceroute ipv6
• Loopback Interface Commands
  • interface loopback
  • show interfaces loopback
• Multicast Commands
  • ip mcast boundary
  • ip multicast
  • ip multicast staticroute
  • ip multicast ttl-threshold
  • mrinfo
  • mstat
  • mtrace
  • no ip mcast mroute
  • show ip mcast
  • show ip mcast boundary
  • show ip mcast interface
  • show ip mcast mroute
  • show ip mcast mroute group
  • show ip mcast mroute source
  • show ip mcast mroute static
  • show mrinfo
  • show mstat
  • show mtrace
• OSPF Commands
  • area default-cost
  • area nssa
  • area nssa default-info-originate
  • area nssa no-redistribute
  • area nssa no-summary
  • area nssa translator-role
  • area nssa translator-stab-intv
  • area range
  • area stub
  • area stub no-summary
  • area virtual-link
  • area virtual-link authentication
  • area virtual-link dead-interval
  • area virtual-link hello-interval
  • area virtual-link retransmit-interval
  • area virtual-link transmit-delay
  • default-information originate
  • default-metric
  • distance ospf
  • distribute-list out
  • enable
  • exit-overflow-interval
  • external-lsdb-limit
  • ip ospf
  • ip ospf areaid
  • ip ospf authentication
  • ip ospf cost
  • ip ospf dead-interval
  • ip ospf hello-interval
  • ip ospf mtu-ignore
  • ip ospf priority
  • ip ospf retransmit-interval
  • ip ospf transmit-delay
  • maximum-paths
  • redistribute
  • router-id
  • router ospf
  • show ip ospf
  • show ip ospf abr
  • show ip ospf area
  • show ip ospf asbr
  • show ip ospf database
  • show ip ospf database database-summary
  • show ip ospf interface
  • show ip ospf interface brief
  • show ip ospf interface stats
  • show ip ospf neighbor
  • show ip ospf range
  • show ip ospf statistics
  • show ip ospf stub table
  • show ip ospf virtual-link
  • show ip ospf virtual-link brief
  • timers spf
  • trapflags
  • 1583compatibility
• OSPFv3 Commands
  • area default-cost
  • area nssa
  • area nssa default-info-originate
  • area nssa no-redistribute
  • area nssa no-summary
  • area nssa translator-role
  • area nssa translator-stab-intv
  • area range
  • area stub
  • area stub no-summary
  • area virtual-link
  • area virtual-link dead-interval
  • area virtual-link hello-interval
  • area virtual-link retransmit-interval
  • area virtual-link transmit-delay
  • default-information originate
  • default-metric
  • distance ospf
  • enable
  • exit-overflow-interval
  • external-lsdb-limit
  • ipv6 ospf
  • ipv6 ospf areaid
  • ipv6 ospf cost
  • ipv6 ospf dead-interval
  • ipv6 ospf hello-interval
  • ipv6 ospf mtu-ignore
  • ipv6 ospf network
  • ipv6 ospf priority
  • ipv6 ospf retransmit-interval
  • ipv6 ospf transmit-delay
  • ipv6 router ospf
  • maximum-paths
  • redistribute
  • router-id
  • show ipv6 ospf
  • show ipv6 ospf abr
  • show ipv6 ospf area
  • show ipv6 ospf asbr
  • show ipv6 ospf database
  • show ipv6 ospf database database-summary
  • show ipv6 ospf interface
  • show ipv6 ospf interface brief
  • show ipv6 ospf interface stats
  • show ipv6 ospf interface vlan
  • show ipv6 ospf neighbor
  • show ipv6 ospf range
  • show ipv6 ospf stub table
  • show ipv6 ospf virtual-link
  • show ipv6 ospf virtual-link brief
  • trapflags
• PIM-DM Commands
  • ip pimdm
  • ip pimdm mode
  • ip pimdm query-interval
  • show ip pimdm
  • show ip pimdm interface
  • show ip pimdm interface stats
  • show ip pimdm neighbor
• PIM-SM Commands
  • ip pimsm
  • ip pimsm cbsrhashmasklength
  • ip pimsm cbsrpreference
  • ip pimsm crppreference
  • ip pimsm message-interval
  • ip pimsm mode
  • ip pimsm query-interval
  • ip pimsm register-rate-limit
  • ip pimsm spt-threshold
  • ip pimsm staticrp
  • ip pim-trapflags
  • show ip pimsm
  • show ip pimsm componenttable
  • show ip pimsm interface
  • show ip pimsm interface stats
  • show ip pimsm neighbor
  • show ip pimsm rp
  • show ip pimsm rphash
  • show ip pimsm staticrp
• Router Discovery Protocol Commands
  • ip irdp
  • ip irdp address
  • ip irdp holdtime
  • ip irdp maxadvertinterval
  • ip irdp minadvertinterval
  • ip irdp preference
  • show ip irdp
• Routing Information Protocol (RIP) Commands
  • auto-summary
  • default-information originate
  • default-metric
  • distance rip
  • distribute-list out
  • enable
  • hostroutesaccept
  • ip rip
  • ip rip authentication
  • ip rip receive version
  • ip rip send version
  • redistribute
  • router rip
  • show ip rip
  • show ip rip interface
  • show ip rip interface brief
  • split-horizon
• Tunnel Interface Commands
  • interface tunnel
  • show interfaces tunnel
  • tunnel destination
  • tunnel mode ipv6ip
  • tunnel source
• Virtual LAN Routing Commands
  • show ip vlan
  • vlan routing
• Virtual Router Redundancy Protocol Commands
  • ip vrrp
  • ip vrrp authentication
  • ip vrrp ip
  • ip vrrp mode
  • ip vrrp preempt
  • ip vrrp priority
  • ip vrrp timers advertise
  • show ip vrrp
  • show ip vrrp interface
  • show ip vrrp interface brief
  • show ip vrrp interface stats