paulgorman.org

Cisco notes

Help

To get on the Cisco, use ?.

cisco# ?
Exec commands:
  <1-99&ht;        Session number to resume
  access-enable    Create a temporary Access-List entry
  access-profile   Apply user-profile to interface
  access-template  Create a temporary Access-List entry
  archive          manage archive files
...
cisco# show ip ?
  access-lists            List IP access lists
  accounting              The active IP accounting database
  admission               Network Admission Control information
  aliases                 IP alias table
...

Cisco IOS also has tab completion.

Configuration

Ciscos can have multiple configurations. show running-config show the current operational configuration. The running-config may include unsaved changes, which will be lost on the next reboot. View the saved config with show startup-config. To save the running config: copy running-config startup-config. You can also copy the startup-config over the running-config to reverse any unsaved changes.

To make changes or see more sensitive info, enable administrative mode with enable.

To enter configuration mode: config t; leave config mode with exit.

To negate an already configured command, use no, like no access-list 100 to delete access list 100.

Access lists

To monitor allows and denies, add the log option to the access list (like deny ip any any log) and turn on monitoring (for telnet sessions) with terminal monitor. Turn monitoring off with terminal no monitor.