MindMap Gallery Cisco IOS interface
A mind map about cisco ios interface.
Edited at 2020-09-08 01:24:17The Cisco IOS Interface
Bringing up a router
POST
Power On Self Test
Load Cisco IOS from flash memory
Looks for Config file
Found in NVRAM
Non Volatile Random Access Memory
Not found
Enters Setup mode
provides minimum amount configuration for newbies to IOS and CLI
Can also be entered by typing
setup
User mode & Privileged mode
User mode
provides CLI with very few available commands by default
Does not allow the configuration to be viewed or changed
Privileged mode
allows viewing and changing of configuration
Command
enable
enter enable password of secret if set
enable password
un-encrypted password by default
used on legacy routers before IOS 12.3
cannot be the same as enable secret
Command
(set from config t mode)
enable password [password]
Enable Secret
encrypted password
supersedes enable password from IOS 12.3
Command
(set from config t mode)
enable secret [password]
disable, exit, logout
exit privileged mode
Commands
show version
provides basic system configuration details
provides software version
names and sources of config files
config-register settings
boot images
hostname
set from global config mode
allows user to name device to ease ID
Location is recommended
show interface [interface type] [slot number/port number]
displays line up/down status & protocol status
down, line protocol down
Considered Physical layer problem
up, line protocol is down
considered a data link layer problem
clocking not set (for serials), keep alives different, etc
administratively down, line protocol is down
administrator not open line. use
no shutdown
stats for each interface
IP addresses
?
gives information about next possible command
<cr> means no more options left
description
sets a discription for an interface
useful to describe an interfaces use and destination
must be in interface config mode (Router (config-if)#)
similar to hostname, but for interfaces
shutdown
used to administratively close an interface
use no command to open
|
pipe command or Output modifier
modifies the output
can shorten a long list to just one area
use ? command to view options
erase
allows user to erase files
use to erase startup-config or running-config
copy
save files to other location
can be used to save running-config to startup-config
can also save to ftp, tftp, etc
show protocols
used to verify layers 1 & 2 of each interface
show controllers
displays information about physical interface
details what kind of cable is plugged into serial interface
DTE
DCE
ip address
sets an IP address for an interface
use secondary to add another IP address to the same interface
show ip interface
shows layer 3 details of an interface
show ip interface brief
simplified layer 3 details
Line passwords
Console password
line console [port]
used from global config mode
use ? to ID port number (usually 0)
login
exec timeout [minutes] [seconds]
will log user out if no activity detected in time limit
logging synchronous
stops console messages interrupting input
Auxiliary password
used to log in to device using modem
line aux [port]
use from global config mode
login
vty (telnet) password
from global config mode
line vty [port] [port]
use ? command to find ports
line vty 0 4 will configure all ports the same
login
ssh (secure shell)
similar to telnet, more secure
more complicated setup
set hostname
hostname [host name]
set ip domain name
ip domain-name [domain name]
generate encryption keys
crypto key generate rsa general-keys mudulus ?
set max idle timer for ssh session
ip ssh time-out ?
set max failled attempts to login
ip ssh authentication-retries ?
connect to the vty line
line vty [port] [port]
configure ssh then telnet to access protocols
transport input ssh telnet
encrypt passwords
service password-encryption
revoke with no command
encrypts passwords in show running-config
secret password automatically encrypted
banners
motd (message of the day)
used to show information to all users when logging on to the router
type from global config mode
banner motd ?
Exec banner
banner exec ?
shows a banner everytime an exec process is activated
incoming banner
banner incoming ?
used to show banner when connected to reverse terminals
login banner
banner login ?
shows banner after motd banner but before login
must use no login banner to deactivate