Introduction

This booklet provides a summary of the commands a system admini-strators uses to configure a Cisco router for its routing and bridging tasks. The commands are listed in alphabetical order by command type within sections. The Table of Contents lists the section page numbers; the Index lists each command and the page where its description can be found. See the Router Products Configuration and Reference publication for more complete descriptions and examples of the commands.

Conventions

The command descriptions use these conventions:

Commands and keywords are in boldface.
Variables for which you supply values are in italics.
Elements in square brackets ([ ]) are optional.
Alternative keywords are grouped in braces ({ }) and are separated by a vertical bar (|).
The examples are printed in a screen font.
Information you enter is in boldface screen font.
Nonprinting characters are shown in angle brackets. (< >).
If the no form of the command is not explicitly explained in the description, it negates the command.

EXEC System Use

Enter commands by typing their names at the EXEC prompt and pressing the Return key.
There are two EXEC prompt levels. The user-level prompt is the server name followed by a >, like this example:

Router>

: There is also a privileged-level prompt available to the system admini-strator by entering a password. It is the server name followed by a #, like this example:

Router#

Use the following editing commands when typing commands at the EXEC prompt:

Command	Function
Delete or Backspace	Erase characters
Ctrl-U	Delete line

As a shortcut, you can abbreviate commands to the fewest letters that make them unique. The letters "sho" can be entered for the show command, for example.
Certain EXEC commands display multiple screens with this prompt at the bottom of the screen:

--More--

: Press the space bar to continue the output; type any other key to return to the prompt.

System Help

Type a ? or the letter h (for help) to see a list of available commands at either the user-level or the privileged-level EXEC prompt.
You can type a ? after certain commands to get more information about them. See the command lists for more information.
At any time during an active Telnet session, you can list the Telnet commands by typing this command at the system prompt:

: Ctrl ^ ?
: Type the Ctrl and Shift and 6 keys simultaneously, let go, and type ?.

The Configure Command

Use the privileged EXEC command configure to begin configuration of the router.

Begin by entering the privileged level of the EXEC. To do this, type the enable command at the EXEC prompt:

Router> enable

: The EXEC then prompts you for the privileged-level password:

Password:

Type the password, taking care to match uppercase and lowercase letters. For security purposes, the password does not appear. When you enter the correct password, the system displays the privileged-level prompt:

Router#

To begin configuration mode, enter the configure command at the privileged-level prompt:

Router# configure

: When you enter this command, the EXEC prompts you for the source of the configuration subcommands.

Configuring from terminal, memory, or network [terminal]?

: The default is to type in commands from the terminal console. Pressing the Return key begins this configuration method.

The EXEC provides you with a simple editor for entering the configuration commands and explains the editing functions:

Enter configuration commands, one per line.
Edit with DELETE, CTRL/W, and CTRL/U; end with 
CTRL/Z

The following table lists the edit key functions and their meanings.

Key	Meaning
Delete or Backspace	Erases one character
Ctrl-W	Erases a word
Ctrl-U	Erases a line
Ctrl-R	Redisplays a line
Return	Executes single-line commands
Ctrl-Z	Ends configuration mode and returns to the EXEC

Type Ctrl-Z to end configuration mode. Enter the disable EXEC command to return to the user-level EXEC prompt.

Configuration Command Types

Configuration commands are categorized by these functions:

Global configuration commands--Define system-wide parameters.
Interface subcommands--Define the characteristics of an interface
(a serial or Ethernet interface, for example) and must be preceded by an interface command.
Line subcommands--Define the characteristics of a serial line and must be preceded by a line command.
Router subcommands--Specify a routing protocol (IGRP, OSPF, and so on) and must be preceded by a router command.

Observe the following guidelines when you enter configuration commands:

As with EXEC commands, you can type configuration subcommands in uppercase letters, lowercase letters, or both. You also can shorten all commands and other keywords to the fewest number of characters that uniquely identify the word.
To add a comment, begin the line with an exclamation point (!). Comments do not affect command processing.
If the router encounters a problem, it displays an error message on the console terminal.

System Use Commands

EXEC Terminal Use Commands

{connect|telnet} connection

Connects to a remote host using the Telnet protocol.

connect or telnet--Use either of the two keywords.
connection--Host name or IP address.

Example

connect router

disconnect [connection]

Closes a connection.

connection--Connection name or number displayed by the show users command; the default is the current connection.

Example

disconnect 2

{exit|quit|logout}

Any of these commands terminates the EXEC command processor and closes any active session.

name-connection

Assigns a logical name to a connection. The EXEC prompts for the connection number and name to assign.

resume [connection]

Resumes a connection.

connection--Connection name or number displayed by the show users command; the default is the current connection.

Example

resume 3

where

Displays information about open connections associated with the current terminal line and provides the connection number.

EXEC Terminal Parameter Setting Commands

terminal ?

Lists commands you can enter to temporarily change hardware and software parameters of the current line.

terminal data-character-bits {7|8}

Sets the number of ASCII characters sent over network connections to X.25 hosts.

8--Sets full 8-bit ASCII international character set (default).
7--Sets 7-bit ASCII character set when connections are to hosts that routinely send parity over the network.

terminal [no] escape-character decimal-number

Sets or removes the escape character for the current terminal line. Default is Ctrl ^.

decimal-number--The ASCII decimal representation of the desired escape character or an escape sequence.

Example

terminal escape-character 17

terminal exec-character-bits {7|8}

Sets the number of characters read by the command parser, including those entered in configuration mode.

7--Sets 7-bit ASCII character set (default).
8--Sets 8-bit ASCII international character set in prompts and banners.

terminal [no] length screen-length

Sets the terminal screen length. A screen length of zero or the no keyword disables pausing between screens of output. The screen length specified can be learned by hosts. Default is 24.

screen-length--Desired number of lines.

Example

terminal length 0

terminal [no] monitor

Copies debug command output and system error messages to the current terminal as well as to the console terminal.

terminal [no] notify

Establishes or removes message notification.

terminal [no] padding decimal-number count

Sets or cancels character padding on the current terminal line.

decimal-number--ASCII decimal representation of the character.
count--Number of NULL bytes sent after that character.

Example

terminal padding 25 20

terminal special-character-bits {8|7}

Sets a mode that compares typed-in characters with special key sequences such as flow control, escape, and disconnect functions.

7--Sets the 7-bit ASCII character set (default).
8--Sets the full 8-bit international ASCII character set to support hosts that use these characters.

terminal [no] terminal-type terminal-name

Records, removes, or changes the current terminal type.

terminal-name--Terminal name passed to applications that set terminal types.

Example

terminal terminal-type VT100

terminal [no] width columns

Sets the number of characters (columns) on a single line of the current terminal screen. Default is 80.

column--Number of columns.

Example

terminal width 132

System Use Show Commands

Command	Display
show sessions	Information about open Telnet connections.
show tcp [line-number]	Status of all TCP connections, or, if the line-number argument is specified, the status of a single TCP connection.
show terminal [all]	Information about the terminal configuration parameter settings for the current terminal line and the active ports of the server, or about inactive as well as active ports when the all keyword is included.
show users [all] systat [all]	Information about active lines. Include the all keyword to view information about inactive as well as active ports.
show version	Configuration of the system hardware, the software version, the names and sources of configuration files, and the boot images.

System Management Commands

EXEC System Management Commands

clear line line-number

Aborts connections and processes and resets a terminal line.

line-number--Terminal line number, displayed by show user command.

Example

clear line 3

copy flash tftp

Copies a Flash TFTP image back to a TFTP server.

copy tftp flash

Copies a TFTP image into the current Flash configuration.

copy verify

Provides a checksum on Flash memory.

debug ?

Lists and briefly describes all the debug command options.

Note Enabling the debugging commands can adversely affect system operation. Use these commands only under the direction of Cisco technical personnel.

ping

Invokes a diagnostic tool for testing connectivity. Results are helpful for evaluating path-to-host reliability, delays over the path, and whether the host is functioning.

show ?

Lists show command options for the user-level prompt or privileged-level prompt, whichever is active.

test interfaces

Intended for use by Cisco technical personnel only; not for diagnosing problems with an operational router.

test memory

Intended for use by Cisco technical personnel only; not for diagnosing problems with an operational router. .

test sbe

Tests CSC-R16 16-Mbps Token Ring cards. Perform this test only at the direction of Cisco technical support, and do not issue the command while the system is in use.

trace [destination]

Allows the network administrator to discover the routes that packets will actually take when traveling to their destinations. Supports both IP and CLNS route tracing. To terminate the trace command operation, type the escape sequence.

undebug option

Disables diagnostic output enabled by debug command option.

Examples

debug packet
undebug packet

write erase

Erases the configuration information in nonvolatile memory. This command does not affect the configuration in use.

write memory

Copies the current configuration information to nonvolatile memory.

write network

Sends a copy of the current configuration information to a server host. The system prompts for a destination host and a file name.

write terminal

Displays the current configuration information.

System Management Show Commands

Command	Display
show buffers [interface]	Statistics for the buffer pools on the network server. The interface argument specifies a search of only those buffers that have been associated with the interface for longer than one minute.
show configuration	Contents of nonvolatile memory.
show debugging	Current settings of the debug command options.
show environment	Temperature and voltage information on the console.
show environment last	Last measured value from each of six test points when the system shuts down due to detection of fatal environmental margins.
show flash [error\|all]	Information about each Flash memory device
show line	Line status.
show logging	State of syslog error and event logging, including host addresses and whether console logging is enabled. Also displays SNMP configuration parameters and protocol activity.
show memory	Memory free pool statistics, including summary information about the activities of the system memory allocator and a block-by-block listing of memory use.
show processes	Information about all active processes.
show processes memory	Information about memory utilization.
show protocol	Global and interface-specific status of any configured Level 3 protocol.
show stacks	Monitors the stack utilization of processes and interrupt routines and displays the reason for the last system reboot. Useful for analyzing system crashes.

System Configuration Commands

System Global Configuration Commands

[no] banner {motd|exec|incoming} c text c

Shows or removes the message that the EXEC command interpreter displays whenever a user starts any EXEC process or activates a line.

motd, exec, or incoming--Specifies when the banner message is displayed.
c--Delimiting character that you will use to signify the beginning and end of the banner message.
text--Message to be shown on the screen whenever an interface line is activated.

Example

banner motd #
Building power will be off from 7:00 AM to 9:00 AM this Tuesday.#

[no] boot buffersize bytes

Specifies the size of the buffer to be used for netbooting a host or a net-work configuration file. The no form restores the default, which is the size of nonvolatile memory, or 32 kilobytes if you do not have nonvolatile memory.

bytes--Size of the buffer.

Example

boot buffersize 64

[no] boot {host|network|system} filename [address]

Configures the system image boot files. The no form with the appropriate keyword and filename removes the name. The command can be entered multiple times to build ordered lists.

host--Changes host configuration filename.
network--Changes network configuration filename.
system--Indicates that the filename and host address for the system image are in nonvolatile memory.
filename--New name for the host configuration file or filename of operating system to load.
address--Network host or a subnet broadcast address.
Default is 255.255.255.255.

Examples

boot host config1
boot network config2
boot system opsoft

[no] boot system flash filename

Configures the system image boot files to boot the system from Flash memory.

filename--File name of the image from Flash memory.

Example

boot system flash sysimage

[no] boot system rom

Configures the system to auto-boot from the ROM system image. This command is usually used as a backup to other boot system commands that specify system images existing on the network or in Flash memory.

[no] buffers {small|middle|big|large|huge}
{permanent|max-free|min-free|initial} number

Allows a network administrator to adjust initial buffer pool settings and set limits at which temporary buffers are created and destroyed. The no form with appropriate keywords and arguments restores the default buffer values. Use this command only if instructed to by Cisco technical personnel.

small|middle|big|large|huge--Size of buffers in the pool. The default number is determined by the hardware configuration.
permanent|max-free|min-free|initial--Buffer management parameter to be changed.
number--Number of buffers to be allocated.

Example

buffers small min-free 50

[no] buffers huge size number

Dynamically resizes all huge buffers to the value that you supply. The buffer size cannot be lowered below the default. The no version with the argument restores the default buffer values. Use this command only when instructed to by Cisco technical personnel.

number--Size of huge buffers.

Example

buffers huge size 20000

config-register value

Upon system restart, changes software configuration register settings.

value--Register number to be set in hexadecimal. Common values: 0xF sets system to boot from Flash; 0x0 turns off Flash boot; 0x1 sets the default switch register contents; 0x2 boots from the ROM monitor.

Use with the boot system flash command to enable the system to boot from Flash memory or the ROM monitor on the IGS.

Example

config-reg 0xF
boot system flash sysimage

default-value data-character-bits {8|7}

Sets the number of ASCII characters sent over network connections to X.25 hosts.

8--Sets full 8-bit ASCII international character set (default).
7--Sets 7-bit ASCII character set when connections are to hosts that routinely send parity over the network.

default-value exec-character-bits {8|7}

Sets the number of characters read by the command parser, including those entered in configuration mode.

7--Sets 7-bit ASCII character set (default).
8--Sets 8-bit ASCII international character set in prompts and banners.

default-value special-character-bits {8|7}

Sets a mode that compares typed-in characters with special key sequences such as flow control, escape, and disconnect functions.

7--Sets the 7-bit ASCII character set (default).
8--Sets the full 8-bit international ASCII character set to support hosts that use these characters.

[no] dialer-list dialer-group list list-number
[no] dialer-list dialer-group protocol protocol-name {permit|deny}

Controls automatic dialing of DDR using standard IP or bridging access lists. Applies to dial-on-demand only.

dialer-group--Number of a dialer group identified in any dialer group interface subcommand.
list list-number--Access list number specified in any IP or bridging access list.
protocol protocol-name--One of the following supported protocols: ip, decnet, chaos, xns, novell, appletalk, vines, apollo, pup, clns, bridge (bridging), stun (serial tunneling), or cmns (OSI Connection-Oriented Network Service).
permit or deny--Specifies whether automatic dialing is permitted or denied.

Examples

dialer-list 1 list 101
dialer-list 2 protocol apollo deny

[no] enable last-resort {succeed|password}

Allows you to specify what happens if the TACACS servers used by the enable command do not respond. The default action is to fail.

succeed or password--Use succeed to enable without further question. Use password to enable only if the user enters the privileged command level.

enable password password

Assigns a password for the privileged command level.

password--Password you enter in response to the EXEC command enable.

Example

enable password yourpassword

[no] enable use-tacacs

Enables or disables use of TACACS to check the user ID and password supplied to the EXEC enable command.

hostname name

Specifies the name for the network server. Default is Router.

name--Name of the network server.

Example

hostname HAL

interface dialer number

Designates a dialer group number, indicated by the number argument.

Example

interface dialer 1
encapsulation ppp
dialer map ip 131.108.2.5 username zebra 1415553434

interface type unit

Specifies an interface and begins interface configuration.

type--Interface type: hssi, serial, ethernet, tokenring, fddi, ultranet, or bri 0.
unit--Interface number or card number.

Examples

interface serial 0
interface bri 0

line [type-keyword] first-line [last-line]

Identifies a specific line for configuration and starts line configuration.

type-keyword--Type of line to be configured: console, aux, or vty.
first-line--If type-keyword is specified, provide the relative number (first line) in a contiguous group you want to configure. If type-keyword is not specified, provide the absolute number. Use the EXEC command show users to display line numbers.
last-line--If type-keyword is specified, provide the relative number (last line) in a contiguous group you want to configure. If type-keyword is not specified, provide the absolute number.

Example

line vty 0 4

[no] logging buffered

Copies logging messages to an internal buffer instead of writing them to the console.

[no] logging console level

Limits the logging of messages displayed on the console terminal to messages at or above the specified level. Default is debugging.

The argument level is one of the following keywords:

emergencies--System unusable
alerts--Immediate action needed
critical--Critical conditions
errors--Error conditions
warnings--Warning conditions
notifications--Normal but significant conditions
informational--Informational messages only
debugging--Debugging messages

Example

logging console emergencies

[no] logging IP-address

Identifies a syslog server host to receive logging messages.

IP-address--Internet address of the host.

Example

logging 131.108.2.125

[no] logging monitor level

Limits the logging messages displayed on terminal lines other than the console line to messages with a level at or above level.

level--One of the keywords listed for the logging console.

Example

logging monitor notifications

[no] logging on

Enables or disables message logging to all supported destinations except the console. Default is enabled.

[no] logging trap level

Limits the logging messages sent to syslog servers to messages with a level at or above level.

level--One of the keywords described for the logging console.

Example

logging trap errors

[no] priority-list list default queue-keyword

Assigns a priority queue for those datagrams that did not match any other rule in the priority list. If no default or the no form is specified, the normal queue is assumed.

list--Integer from 1 to 10 that identifies the priority list selected by the user.
queue-keyword--Priority queue name: high, medium, normal,
or low.

Example

priority list 2 default medium

[no] priority-list list interface interface-name queue-keyword

Sets up priority queuing on the specified interface. The no form removes the item from the list.

list--Integer from 1 to 10 that identifies the priority list selected by the user.
interface-name--Name of the interface.
queue-keyword--Priority queue name: high, medium, normal,
or low.

Example

priority list 1 interface ethernet 2 medium

[no] priority-list list protocol protocol-name queue-keyword [args]

Sets up priority queuing by protocol type. The no form removes the item from the list.

protocol-name--Name of the protocol: ip, pup, chaos, xns, decnet, appletalk, clns, novell, apollo, vines, stun, bridge, or rsrb.
list--Integer from 1 to 10 that identifies the priority list selected by the user.
queue-keyword--Priority queue name: high, medium, normal,
or low.

: The optional keyword args is one of the following:

gt byte-count--Specifies a greater-than count. The priority level assigned goes into effect when a packet exceeds the value entered for the argument byte-count.
lt byte-count--Specifies a less-than count. The priority level assigned goes into effect when a packet size is less than the value entered for
byte-count.
bridge list list-number--Assigns the priority level to bridged traffic according to the list-number, which is the Ethernet-type code access list number assigned using the access-list command.
list list-number--Assigns traffic priorities according to the list-number, which is the IP access list number assigned by the access-group list interface subcommand.
tcp port--Assigns the priority level defined to TCP packets originating from or destined to a specified port.
udp port--Assigns the priority level defined to UDP packets
originating from or destined to the specified port.

Examples

priority-list 1 protocol decnet high
priority-list 4 protocol decnet medium lt 200
priority-list 4 protocol ip medium tcp 23

[no] priority-list list queue-limit high-limit medium-limit normal-limit low-limit

Specifies the maximum number of packets that can wait in a single priority queue. If a priority queue overflows, the router discards excess datagrams and may send quench messages. The no form resets all four queue sizes to their defaults: high-limit = 20; medium-limit = 40;
normal-limit = 60; low-limit = 80.

list--Integer from 1 to 10 that identifies the priority list selected by the user.

Example

priority-list 1 queue-limit 20 20 20 10

[no] priority-list list stun queue-keyword address group-number address-number

Sets up priority queuing based on the address of the serial link. The no form removes the item from the list.

list--Integer from 1 to 10 that identifies the priority list selected by the user.
stun--Indicates that this is a serial tunnel feature.
queue-keyword--Priority queue name: high, medium, normal,
or low.
address--Identifies a STUN serial link.
group-number--STUN group number.
address-number--Address of the serial link.

Example

priority list 1 stun high address 1 C1

[no] scheduler-interval milliseconds

Sets the maximum amount of time that can elapse without the router running the lowest-priority system processes. The minimum interval that can be specified is 500 milliseconds; there is no maximum value. The no form restores the no maximum default.

milliseconds--Number of milliseconds. Must be 500 or greater.

Example

scheduler-interval 750

[no] service keyword

Tailors use of network-based services by the network server.

The argument keyword is one of the following:

config--Specifies TFTP autoloading of configuration files; disabled by default on systems with nonvolatile memory.
decimal-tty--Specifies that line numbers be displayed and interpreted as decimal numbers rather than octal numbers; disabled by default.
finger--Allows Finger protocol requests (defined in RFC 742) to be made of the network server; enabled by default.
password-encryption--Enables encrypted passwords.
tcp-keepalives-{in|out}--Generates keepalive packets on idle net-work connections. The in keyword generates them on incoming connections; the out keyword generates them on outgoing
connections.
timestamps--Precedes system error message output with system uptime.

Example

no service config

[no] smt-queue-threshold number

Sets or removes the maximum number of unprocessed FDDI Station Management (SMT) frames that the router will hold for processing. The no form restores the default, which is the number of installed FDDI interfaces.

number--Positive integer.

Example

smt-queue-threshold 2

no snmp-server

Disables the SNMP operations.

[no] snmp-server access-list list

Sets up an access list that determines which hosts can send requests to the network server. Applies only to the global read-only SNMP agent configured by the snmp-server community command.

list--IP list, expressed as an integer from 1 to 99.

Example

snmp-server access-list 20

snmp-server community [string [RO|RW] [list]]
no snmp-server [community [string]]

Enables or disables SNMP server operation on the network server.

string--Community string that acts like a password and permits access to the SNMP protocol.
RO or RW--The RO keyword specifies read-only access (default); the RW keyword specifies read-write access.
list--Integer from 1 through 99 that specifies an access list of Internet addresses that can use the community string.

Example

snmp-server community yourstring RO 4

[no] snmp-server host IP-address community-string [snmp|tty]

Specifies which host or hosts should receive TRAP messages.

IP-address--Name or Internet address of the host.
community-string--Your community string, similar to a password, that you set with the snmp-server community command.

: The keywords snmp or tty specify the TRAP type, as follows:

snmp--Sends all SNMP-type TRAP messages and starts the Cisco-specific RELOAD TRAP message.
tty--Includes TCP connection TRAP messages.

Example

snmp-server host 131.108.2.160 yourstring

[no] snmp-server packetsize bytes

Sets or removes control over the largest SNMP packet size permitted when the SNMP server is receiving a request or generating a reply.

bytes--Byte count from 484 to 8192. Default is 484.

Example

snmp-server packetsize 8192

[no] snmp-server queue-length length

Defines the length of the message queue for each TRAP host. Default
is 10.

length--Number of TRAP events that can be held before the queue must be emptied.

Example

snmp-server queue-length 4

[no] snmp-server system-shutdown

Allows or restricts use of the SNMP message reload feature. Prevents an SNMP system-shutdown request from resetting the Cisco agent.

[no] snmp-server trap-authentication

Allows the network server to send a TRAP message when it receives a packet with an incorrect community string. The no form restricts the sending of TRAP messages.

[no] snmp-server trap-timeout seconds

Defines how often the router attempts to resend TRAP messages in the retransmission queue. The no form restores the default of 30 seconds.

seconds--Number of seconds in the interval.

Example

snmp-server trap-timeout 20

[no] tacacs-server attempts count

Controls the number of login attempts that can be made on a line set up for TACACS verification. The no form allows no attempts. Default is 3.

count--Number of attempts.

Example

tacacs-server attempts 6

[no] tacacs-server authenticate {connect|enable}

Specifies that a response is required from the network or communication server before a user can perform a specific action. The no form removes the response requirement. Select the action that requires a response:

connect--Make TCP connections.
enable--Enter the enable command.

[no] tacacs-server extended

Enables or disables an extended TACACS mode.

[no] tacacs-server host name

Specifies a TACACS host.

name--Name or Internet address of the host.

Example

tacacs-server host host1

[no] tacacs-server last-resort {password|succeed}

Causes the network server to request the privileged password as verifi-cation, or forces successful login without further input from the user. The no form removes the specification. Select one keyword to configure the desired action.

password--Allows the user to access the privileged-level command mode by entering the password set by the enable command.
succeed--Allows the user to access the privileged-level command mode without further question.

tacacs-server notify {connect|enable|logout}

Causes a message to be transmitted to the TACACS server; the message is retransmitted in the background for up to five minutes. The no form removes the specification.

Select one keyword to specify when the TACACS server is notified:

connect--Make TCP connections.
enable-Enter the enable command.
logout--Log out

tacacs-server optional-passwords

Specifies that the first TACACS request to a TACACS server is made without password verification.

[no] tacacs-server retransmit retries

Specifies the number of times the server will search the list of TACACS server hosts before abandoning the attempt. The no form restores the default of 2.

retries--Retransmit count.

Example

tacacs-server retransmit 4

[no] tacacs-server timeout seconds

Sets the interval the server waits for a server host to reply. The no form restores the default of 5 seconds.

seconds--Number of seconds.

Example

tacacs-server timeout 10

[no] tftp-server system filename ip-access-list

Specifies or removes TFTP server operation for a communication server.

filename--Name of the network server ROM file.
access-list--IP access list number.

Example

tftp-server system configfile 22

username name [nopassword|password encryptiontype password]
username name password secret
username name [accesslist number]
username name [autocommand command]
username name [noescape] [nohangup]

Implements a user name-based authentication system for networks that cannot support a TACACS service. Also defines user names that get special treatment.

name--Name of either a local communication server or a remote device.
nopassword--No password is required for this user to log in.
password--Specifies a possibly encrypted password for this user name.
encryptiontype--Single-digit number. Currently defined encryption types are zero, which means no encryption, and seven, which specifies a Cisco-defined encryption algorithm.
password--The password you enter for authentication.
secret--Specifies the secret (a special password) for the local communication server or remote device.
accesslist number--Specifies an outgoing access list that overrides the access list specified in the access class line configuration subcommand.
autocommand command--Causes the command specified to be issued automatically after the user logs in.
noescape--Prevents user from having an escape character with which to escape from the host system.
nohangup--Prevents the network server from disconnecting the user after an automatic command.

Examples

username who nopassword nohangup autocommand show
  users
username superuser password yourpassword

Line Configuration Subcommands

data-character-bits {8|7}

Sets the number of ASCII characters sent over network connections to X.25 hosts.

8--Sets full 8-bit ASCII international character set (default).
7--Sets 7-bit ASCII character set when connections are to hosts that routinely send parity over the network.

[no] escape-character decimal-number

Sets or removes the escape character on the specified line. Default escape character: Ctrl ^ X.

decimal-number--ASCII decimal representation of the character or a control sequence.

Example

escape-character 13

[no] exec-banner

Enables or disables a banner. Default is enabled.

exec-character-bits {8|7}

Sets the number of characters read by the command parser, including those entered in configuration mode.

7--Sets 7-bit ASCII character set (default).
8--Sets 8-bit ASCII international character set in prompts and banners.

[no] exec-timeout minutes [seconds]

Sets the interval the EXEC waits for user input before resuming the current connection, or if no connections exist, before returning the terminal to the idle state and disconnecting the incoming session. The
no form is the same as specifying a timeout of 0.

minutes--Number of minutes. The default interval is ten minutes.
seconds--Number of seconds; an interval of zero specifies no timeouts.

Example

exec-timeout 15 30

[no] length screen-length

Sets the terminal screen length. A screen length of zero disables pausing between screens of output. Default is 24.

screen-length--Number of lines on the screen.

Example

length 32

[no] location text

Enters or removes textual description concerning the terminal location and/or status.

text--Desired description.

Example

location In the hall

[no] login

Enables or disables checking for the password specified by the password command.

[no] login tacacs

Invokes use of the TACACS user ID and password-checking mechanism instead of regular password checking. The no form disables this mechanism.

[no] notify

Enables or disables line notification when a user running multiple, con-current Telnet connections has output pending on a connection other than the current line.

[no] padding decimal-number count

Sets or cancels character padding for a specified output character.

decimal-number--ASCII decimal representation of the character.
count--Number of NULL bytes sent after the character.

Example

padding 13 25

[no] password password

Specifies a password.

password--The password you enter for line access. It can contain up to 80 alphanumeric characters, including spaces.

Example

password yourpassword

special-character-bits {8|7}

Sets a mode that compares typed-in characters with special key sequences such as flow control, escape, and disconnect functions.

7--Sets the 7-bit ASCII character set (default).
8--Sets the full 8-bit international ASCII character set to support hosts that use these characters.

vacant-message [c message c]
no vacant-message

Controls whether or not a banner is displayed on the screen of an idle terminal. The command without any arguments causes the default mes-sage to be displayed. The no vacant-message command suppresses a banner message.

c--Delimiting character that you will use to signify the beginning and end of the banner message.
message--Message to be shown on the screen whenever an interface line is activated.

Example

vacant-message #
    Welcome to Cisco Systems, Inc.
#

Interface and Media Configuration

Interface Configuration Subcommands

[no] backup delay {enable-delay|never} {disable-delay|never}

Defines how much time should elapse before a line is set up or taken down.

enable-delay--Number of seconds after the primary line goes down until the secondary line is activated. The never keyword prevents the line from ever coming up because of the primary going down.
disable-delay--Number of seconds after the primary line goes up before the secondary line is deactivated. The never keyword prevents the line from ever going down because of the primary coming up.

Examples

backup delay 10 never
backup delay 30 60

[no] backup interface interface-name

Configures the serial interface as a secondary line (dial backup line). The no form removes this configuration.

interface-name--Serial port to be set as the secondary interface line.

Example

backup interface serial 1

[no] backup load {enable-threshold |never} {disable-load |never}

Sets the traffic load thresholds. The no form restores the default, which is no backup loads.

enable-threshold and disable-load--Numbers representing the transmitted load as a percentage of the primary line's available bandwidth.
never--Prevents the secondary line from being enabled or disabled because of load.

Example

backup load 60 5

[no] bandwidth kilobits

Sets a bandwidth value for an interface. This is a routing parameter only; it does not affect the physical interface. The no form restores the default, which is set during startup.

kilobits--Bandwidth in kilobits per second.

Example

bandwidth 45045

[no] clockrate speed

Sets the clock rate on the serial interface of the SCI and MCI cards. The no form removes the command from the configuration.

speed--Clock rate in bits per second. Legal values: 1200, 2400, 4800, 9600, 19200, 38400, 56000, and 64000. With high-speed applique: 72000, 125000, 148000, 500000, 800000,1000000,1300000, 2000000, and 4000000.

Example

clockrate 64000

[no] dce-terminal-timing-enable

Causes the DCE to use SCTE from the DTE when the serial Network Interface Module on a Cisco 4000 is operating as a DCE and the DTE provides terminal timing (SCTE or TT). The no form causes the DCE to use its own clock instead of SCTE from the DTE.

[no] delay tens-of-microseconds

Sets the delay that higher-level protocols can use to make operating decisions. The no form restores the default, which is no delay.

tens-of-microseconds--Delay for an interface or network segment expressed in tens of microseconds.

Example

delay 20

[no] description name-string

Adds a descriptive name to an interface.

name-string--Comment displayed in the configuration file.

Example

description 3174 Controller for test lab

[no] dialer enable-timeout number-of-seconds

Sets the length of time an interface stays down before it is available for dialing. The no form restores the default of 15 seconds.

number-of-seconds--Number of seconds an interface stays down before it is available to dial again.

Example

dialer enable-timeout 10

[no] dialer fast-idle number-of-seconds

Specifies the idle time before the line is disconnected on interfaces for which there is an unusually high level of contention. The no form restores the default of 20 seconds.

number-of-seconds--Number of seconds.

Example

dialer fast-idle 30

[no] dialer-group group-number

Assigns an interface to a set of access list expressions. These access list expressions define which packets cause a connection to be established and which keep an interface from being idle. Applies to dial-on-demand only. The no form removes an interface from the specified dialer-group.

group-number--Number of the dialer group to which the specific interface belongs. This group number corresponds to a dialer group defined using the dialer-list command.

Example

dialer-group 3

[no] dialer idle-timeout number-of-seconds

Specifies the idle time before the line is disconnected. Applies to dial-on-demand only. The no form restores the default of 120 seconds.

number-of-seconds--Number of seconds of idle time that must occur on an interface before the line is disconnected.

Example

dialer idle-timeout 180

[no] dialer in-band

Sets or removes v.25 bis dialing for the specified serial interface.

[no] dialer map protocol next-hop-address [username name] dial-string

Defines multiple dial-on-demand numbers for a particular interface. Applies to dial-on-demand only. The no form deletes a particular dialer map entry.

protocol--Supported protocol; currently must be ip.
next-hop-address--IP address used to compare against addresses to which packets are destined.
username name--Specifies a remote system with which the local router communicates.
dial-string--Telephone number sent to the DCE dialing device when packets with the specified next-hop-address are seen.

Examples

dialer map ip 131.108.2.5 14155553434
dialer map ip 131.108.2.5 username ZZZ 1415555343

dialer rotary-group number

Places associated interface in the dialer rotary group indicated by the number argument.

Example

interface dialer 1
interface serial 0
dialer rotary-group 1

[no] dialer string dial-string

Specifies or deletes a telephone number to be passed to a DCE device, typically a v.25 bis modem.

dial-string--Character string to be passed to the v.25 bis DCE device.

Example

dialer string 14155553434

[no] dialer wait-for-carrier-time number-of-seconds

Specifies how long the router will wait for a carrier. The no form restores the default of 30 seconds.

number-of-seconds--Number of seconds.

Example

dialer wait-for-carrier-time 5

[no] dte-invert-txc

Inverts the TXC clock signal from the DCE that is used by the DTE to transmit data on the Cisco 4000 serial Network Interface Module.

[no] early-token-release

Enables or disables the ability of Token Ring interfaces to release the token to the ring immediately after transmitting. Default is disabled.

encapsulation encapsulation-type

Assigns an encapsulation method.

The argument encapsulation-type identifies a supported encapsulation type:

arpa--Ethernet version 2.0 encapsulation
bfex25--Blacker Front End Encryption X.25 operation
ddnx25--DDN X.25 DTE operation
ddnx25-dce--DDN X.25 DCE operation
frame-relay [ietf]--Frame relay and optional IETF encapsulation
hdh--HDH protocol
hdlc--HDLC protocol
iso1--IEEE 802.3 encapsulation
lapb--X.25 LAPB DTE operation
lapb-dce--X.25 LAPB DCE operation
multi-lapb--X.25 LAPB multiprotocol DTE operation
multi-lapb-dce--X.25 LAPB multiprotocol DCE operation
ppp--Point-to-Point Protocol (PPP)
sdlc-primary--Primary SDLC station
sdlc-secondary--Secondary SDLC station
smds--SMDS service
snap--IEEE 802.2 Ethernet media
stun--STUN functionality
x25--X.25 DTE operation
x25-dce--X.25 DCE operation

error-threshold milliseconds

Sets the frequency at which the error recount will be set. This protects against packet overload and resultant recount errors on the MCI interface cards. Default is 1000 milliseconds.

milliseconds--Frequency in milliseconds.

Example

error-threshold 10000

[no] fddi cmt-plus

Controls whether the Connection Management (CMT) functions onboard the CSC-2/FCIT card are on or off. The default is on. A typical use is when problems occur bringing up the ring while working with new FDDI equipment.

fddi cmt-signal-bits signal-bits {phy-a|phy-b}

Controls the information transmitted during the FDDI CMT signaling phase.

signal-bits--Hexadecimal number preceded by "0x."
phy-a or phy-b--Physical Sublayer: Physical A or Physical B station.

Example

fddi cmt-signal-bits 0x208 phy-a

[no] fddi encapsulate

Allows the CSC-FCIT card to interoperate with earlier versions of the CSC-FCI card when performing bridging functions on the same ring. The no form returns the CSC-FCIT card to its transparent, nonencapsulating mode.

[no] fddi if-cmt

Controls whether or not the FDDI Connection Management (CMT) functions are on or off. Default is on. Use the no form to disable the function.

fddi tl-min-time microseconds

Controls the FDDI TL_MIN time, which is the minimum time to trans-mit a Physical Sublayer or PHY line state before advancing to the next Physical Connection Management or PCM state.

microseconds--Usually 30; some implementations of the FDDI standard need more than 30 microseconds to sense a signal.

Example

fddi tl-min-time 30

fddi token-rotation-time microseconds

Controls ring scheduling during normal operation, and detects and recovers from serious ring error situations. Default is 5000 microseconds.

microseconds--Number of microseconds in the token rotation
time (TRT).

Example

fddi token-rotation-time 2500

fddi valid-transmission-time microseconds

Sets the transmission valid timer (TVX) interval. Default is 2500 microseconds.

microseconds--Number of microseconds.

Example

fddi valid-transmission-time 1250

[no] hold-queue length {in|out}

Specifies the hold-queue limit of an interface. The no form restores the default values for the interface.

length--Maximum number of packets in the queue.
in or out--Use in to specify the input queue; use out to specify the output queue.

Example

hold-queue 40 in

[no] hssi external-loopback-request

Enables or disables an external loopback request on HSSI from the
CSU/DSU.

isdn switch-type

Configures a specific Integrated Services Digital Network (ISDN) central office switch.

The argument switch-type is one of these switch type keywords:

basic-1tr6--German switch standard
basic-5ess--AT&T 5ESS
basic-dms100--NT DMS 100
kdd--KDD ISDN switch
ntt--NTT ISDN switch
vn2--French VN2 switch

Example

isdn basic-5ess

[no] keepalive [seconds]

Adjusts the keepalive timer for a specific interface. Default is 10 seconds.

seconds--Number of seconds after which the keepalive timer is activated.

Example

keepalive 3

[no] loopback

Achieves the following effect, depending on the interface:

HSSI--Configures a two-way internal and external loopback loop on the HSA applique of the specified interface.
UltraNet--Configures a two-way internal and external loopback on the ULA applique of the specified interface.
MCI and SCI serial cards--Loops the packets through the CSU/DSU to configure a CSU loop, when the device supports this feature. This is similar to the loopback line command on the HSSI.
MCI and MEC Ethernet cards--Loops the packets at the interface within the router.
CSC-R16 card--Loops the packets at the interface within the router.

The no form disables the loopback test.

[no] loopback applique

For use with HSSI connections only. Configures an internal loop on the HSSI. This command is useful for sending pings to yourself to check functionality of the applique. Equivalent to the loopback command
for HSSI.

[no] loopback dte

For use with HSSI connections only. Checks connectivity between the router and the CSU/DSU by looping packets from the router to the CSU/DSU and back.

[no] loopback line

For use with HSSI connections only. Tests functionality of the CSU/DSU by looping the packets through the CSU/DSU to configure a CSU loop.

[no] loopback remote

For use with HSSI connections only. Loops the packets through the CSU/DSU and over the DS3 link to the remote CSU/DSU.

[no] media-type [aui|10baset]

Selects 15-pin (aui) or RJ45 10BaseT physical connection (10baset) on the Cisco 4000 Network Interface Module.

[no] mtu bytes

Adjusts the default maximum transmission unit (MTU) size. The no form restores the default for the interface.

bytes--Desired size in bytes. Must be at least 64 bytes for serial interfaces.

Example

mtu 576

[no] ppp authentication chap

Enables or disables Challenge Handshake Authentication Protocol (CHAP) on the associated interface.

priority-group list

Assigns a priority group to an interface.

list--Priority list number assigned to the interface.

Example

priority-group 1

[no] pulse-time seconds

Enables or disables pulsing DTR signals on the MCI and SCI serial interfaces for a minimum interval.

seconds--Number of seconds in the minimum interval.

Example

pulse-time 3

ring-speed speed

Sets operational ring speed for Token Ring interface. Default is 16.

speed--Operation speed: 4 or 16 Mbps.

Example

ring-speed 4

[no] shutdown interface

Disables or enables an interface.

interface--Interface name.

Example

shutdown ethernet0

[no] squelch [normal|reduced]

Using squelch reduced on the Cisco 4000 Ethernet Network Interface Module extends the twisted-pair 10BaseT capability beyond the standard 100 meters.

[no] transmitter-delay HDLC-flags

For the Cisco IGS router and the High Speed Serial Interface (HSSI) connector only. Specifies the minimum number of HDLC flags that the router should send between packets. The no form restores the default of zero seconds.

hdlc-flags--Number of HDLC flags. Valid range on IGS is 2 to 62; valid range on HSSI is 2 to 128000.

Example

transmitter-delay 40

[no] transmitter-delay microseconds

For MCI and SCI serial cards only. Specifies a minimum delay time after the router transmits a datagram. The no form restores the default, which is zero microseconds.

microseconds--Approximate number of microseconds.

Example

transmitter-delay 300

ultranet address UltraNet-MAC-address

Assigns the MAC layer address of the interface.

UltraNet-MAC-address--MAC address of the UltraNet service line.

Example

ultranet address 8/32

EXEC Interface Management Commands

clear counters [type unit]

Clears all the current interface counters from the interface, or clears those counters described by the optional arguments.

type--Interface type: serial, ethernet, tokenring, fddi, hssi, or ultranet.
unit--Interface unit or card number.

Example

clear counters serial 1

clear interface [type unit]

Resets the hardware logic on an interface.

type--Interface type: serial, ethernet, tokenring, fddi, hssi, ultranet or bri 0.
unit--Interface connection or card number.

Examples

clear interface fddi 0
clear interface bri 0

cmt connect [interface [phy-a|phy-b]]

Starts the FDDI CMT process.

interface--FDDI interface.
phy-a or phy-b--Physical Sublayer A or B.

Example

cmt connect fddi 0 phy-a

cmt disconnect [interface [phy-a|phy-b]]

Stops the FDDI CMT process.

interface--FDDI interface.
phy-a or phy-b--Physical Sublayer A or B.

Example

cmt disconnect fddi 0 phy-a

Interface Management Show Commands

Command		Display
show controllers	serial tokenring mci cbus fddi	Current internal status information for different interface cards.
show dialer interface [interface unit]		Information about dialer interfaces or a specific interface when optional interface type is specified.
show interfaces	ethernet [unit] hssi [unit] serial [unit] tokenring [unit] ultranet [unit] fddi [unit] bri 0 [1\|2] [2]	Network interface statistics. Argument unit is the interface unit or card number. Keywords 1 and 2 indicate B channels 1 and 2 on the Basic Rate Interface (BRI).
show interfaces [interface unit] [accounting]		Number of packets of each protocol type that have been transmitted through the interface.

Frame Relay Interface Subcommands

[no] frame-relay keepalive seconds

Enables and disables the LMI mechanism for serial lines using the frame relay encapsulation. Default is 10 seconds.

seconds--Keepalive interval in seconds.

Example

frame-relay keepalive 15

[no] frame-relay lmi-type ANSI

Specifies the exchange of local management interface messages as defined by ANSI standard T1.617. The no form restores the LMI type to the default as defined by the Cisco/StrataCom/Northern Telecom/DEC specification.

frame-relay local-dlci number

Used for testing. Sets the source data link connection identifier (DLCI) for use when the local management interface (LMI) is not supported. If LMI is supported and the multicast information element is present, the network server sets its local DLCI based on information provided via the LMI.

number--Local or source DLCI number.

Example

frame-relay local-dlci 100

frame-relay map protocol protocol-address DLCI [broadcast] [ietf]
frame-relay map bridge DLCI broadcast
frame-relay map clns DLCI broadcast
no frame-relay map

Defines the mapping between an address and the DLCI used to connect to the address.The frame relay map tells the network server how to get from a specific protocol and address pair to the correct DLCI. The no form deletes the mapping entry.

bridge--Specifies bridging.
clns--Specifies ISO CLNS protocol.
protocol--One of these keywords: ip, decnet, appletalk, xns, novell, vines, or clns.
protocol-address--Protocol address.
DLCI--DLCI number.
broadcast--Specifies that broadcasts should be forwarded to this address when the multicast is not enabled.
ietf--Selects RFC 1294 Frame Relay encapsulation.

Examples

frame-relay map IP 131.108.123.1 100
frame-relay map bridge 144 broadcast

frame-relay multicast-dlci number

Defines a DLCI to be used for multicasts. Use this command only when the multicast facility is not supported. Network transmissions (packets) sent to a multicast DLCI are delivered to all network servers defined as members of the multicast group.

number--Multicast group number.

Example

frame-relay multicast-dlci 1022

[no] frame-relay short-status

Instructs the network server to request the short status message from the switch (see Version 2.3 of the joint Frame Relay Interface specification). Default is disabled (full status message).

Frame Relay Show Commands

Command	Display
show frame-relay map	Information about the current frame relay map.
show frame-relay traffic	Frame relay statistics.

SMDS Global Command

arp IP-address SMDS-address smds

Allows inclusion of static ARP entries.

IP-address--IP address.
SMDS-address--SMDS address.

Example

arp 128.27.101.8 c141.5797.1311 smds

SMDS Interface Subcommands

[no] smds address SMDS-address

Sets or removes the SMDS individual address for a particular interface.

SMDS-address--Individual address provided by the SMDS service provider.

Example

smds address C141.5797.1313

[no] smds d15-mode

Enables or disables AT&T's d15 packet structure. Default is enabled.

[no] smds enable-arp

Enables or disables ARP processing on a particular interface. Set the multicast address for ARP before issuing this command. Default is disabled.

[no] smds multicast protocol-type SMDS-group-address

Maps an SMDS group address to a broadcast or multicast address used by higher-level protocols. The no form of the command, with arguments, removes a multicast address.

protocol-type--Name of the protocol: ip, arp, decnet, decnet_router, decnet_node, appletalk, aarp, xns, novell, clns, clns_is, or clns_es.
SMDS-group-address--SMDS address.

Example

smds multicast IP E180.0999.9999

[no] smds static-map protocol-type protocol-address SMDS-address

Sets up a static mapping between an SMDS address and a higher-level protocol address. Do not use this command for broadcast addresses; instead, use the smds multicast command.

protocol-type--Name of the protocol: ip, decnet, appletalk, xns, novell, or clns.
protocol-address--Address of specified protocol.
SMDS-address--SMDS address.

Example

smds static-map XNS 111.00C0.2711.0123 C141.
5688.1212

SMDS Show Commands

Command	Display
show smds addresses	Addresses and associated interfaces.
show smds map	SMDS addresses mapped to a higher-level protocol.
show smds traffic	SMDS counters.

X.25 EXEC Command

bfe {enter|leave} interface unit

Implements Blacker Front End Emergency (BFE) Mode when the
x25 bfe-decision ask configuration command is set.

enter--Router enters emergency mode.
leave--Router leaves emergency mode.
interface--Interface name such as serial, Ethernet, and so on.
unit--Interface number, port number, card number, and so on.

Example

bfe leave serial 1

X.25 Global Configuration Commands

[no] x25 route [#position]X.121-patt [cud patt] interface int-name
[no] x25 route [#position]X.121-patt [cud patt] ip IP-address
[no] x25 route [#position]X.121-patt [cud patt] alias int-name
[no] x25 route [#position]X.121-patt [substitute-source pattern]
[substitute-dest pattern] [cud patt] interface destination

Inserts or removes an entry in the X.25 routing table.

#position--Positional parameter that indicates the existing entry after which the current entry will be inserted or deleted. See following table for pattern matching characters.
X.121-patt--X.121 address of the called destination. Tables below list pattern matching characters.
cud patt--Call User Data and pattern, or regular expression that must match the called address.
interface int-name--Interface name.
ip IP-address--IP address.
alias--Treats X.121 addresses as local.
substitute-source--Allows substitution of the calling address.
substitute-dest--Allows substitution of the destination address.
pattern--Replaces the called or calling X.121 address in routed X.25 packets.
interface destination--Destination address of the specified interface.

Use the following table for pattern matching.

Pattern Description
\0	Replaces the entire original address.
\1...9	Replaces strings that match the first through ninth parenthesized part of the X.121 address.
*	Matches 0 or more sequences of the regular expressions.
+	Matches 1 or more sequences of the regular expressions.
?	Matches the regular expression of the null string.
^	Matches the null string at the beginning of the input string.
$	Matches the null string at the end of the input string.
\char	Matches char.
.	Matches any single character.

Example

x25 route ^1111(.*) substitute-dest 2222\1
  interface serial 3

[no] x25 routing

Enables or disables X.25 switching. X.25 calls are not forwarded until this command is issued.

LAPB and X.25 Interface Subcommands

[no] cmns enable

Enables or disables CMNS on a nonserial interface.

hdh {packet|message}

Enables the packet or message mode of the HDH protocol.

packet--Specifies the packet mode.
message--Specifies the message mode.

lapb k window-size

Defines the maximum permissible number of outstanding LAPB frames.

window-size--Packet count, from 1 to 7.

Example

lapb k 4

lapb n1 bits

Defines the maximum number of bits a LAPB frame can hold. Default is 12000 bits (1500 bytes).

bits--Number of bits. Must be a multiple of 8 from 8 to 12000.

Example

lapb n1 6000

lapb n2 retries

Defines the maximum number of times a LAPB acknowledgment frame can be retransmitted. Default is 20.

retries--Retransmission count, from 1 to 255.

Example

lapb n2 100

lapb t1 milliseconds

Defines the length of time a LAPB transmitted frame can remain unacknowledged before the router polls for an acknowledgment.
Default is 3000.

milliseconds--Number of milliseconds, from 1 to 64000.

Example

lapb t1 32000

[no] x25 accept-reverse

Instructs the router to accept all reverse charge calls by default. This behavior also can be configured on a peer-to-peer basis using the x25 map subcommand. The no form disables this feature.

x25 address X.121-address

Sets the X.121 address of a particular network interface. The address is assigned by the X.25 network supplier.

X.121-address--Variable-length X.121 address.

Example

x25 address 31370054065

x25 bfe-decision {no|yes|ask}

Indicates decision criteria for x25 bfe-emergency decision command.

no--Router will not participate in decision to enter or leave emergency mode.
yes--Router will participate in decision to enter emergency mode.
ask--Router will prompt for EXEC command to place it in or out of emergency mode.

Example

x25 bfe-decision ask

x25 bfe-emergency {never|always|decision}

Specifies the circumstances under which the router enters Blacker Front End Emergency (BFE) Mode.

never--Router never goes into mode (default).
always--Router enters when directed by the BFE.
decision--Router waits until it receives a diagnostic packet from the BFE device.

Example

x25 bfe-emergency always

[no] x25 default {ip|pad}

Specifies or removes a protocol by which the router interprets calls with unknown Call User Data. The protocol is either ip or pad.

[no] x25 facility keyword argument

Overrides interface settings on a per-call basis. This enables X.25 facilities that are sent between DTE and DCE devices to negotiate certain link parameters. The no form of the command, with keyword and argument, removes the facility.

Choose one of the following keyword-argument pairs:

cug number--Specifies a Closed User Group number from 1 through 99 to provide an extra measure of network security.
packetsize in-size out-size--Sets the size in bytes of input packets
(in-size) and output packets (out-size). Both values should be the same.
reverse--Reverses charges on all Call Request packets from the interface.
windowsize in-size out-size--Sets the packet count for input windows (in-size) and output windows (out-size). Both values should be the same.
throughput in out--Sets the requested throughput values for input and output throughput across the network.
rpoa name--Specifies the list of transit Recognized Private Operating Agencies (RPOAs) to use in outgoing Call Request packets.
transit-delay number--Specifies the transit delay value in milliseconds (0 to 65334) for the mapping in of outgoing calls.

Examples

x25 facility cug 1
x25 facility transit-delay 10

x25 hic circuit-number

Sets the highest incoming-only virtual circuit number. Default is zero.

circuit-number--Virtual Circuit number from 1 to 4095; zero disables the range.

Example

x25 hic 10

x25 hoc circuit-number

Sets the highest outgoing-only virtual circuit number. Default is zero.

circuit-number--Virtual circuit number from 1 to 4095; zero disables the range.

Example

x25 hoc 2048

[no] x25 hold-queue queue-size

Defines the number of packets the router can hold until a virtual circuit is established. The no form restores the default of zero.

queue-size--Number of packets.

Example

x25 hold-queue 3

[no] x25 hold-vc-timer minutes

Prevents overruns on X.25 switches for traffic through the virtual circuits (VCs) for a specified period. When this command is activated, incoming calls are still accepted. The no form restores the default of zero.

minutes--Number of minutes to prevent calls to a previously failed destination.

Example

x25 hold-vc-timer 1

x25 htc circuit-number

Sets the highest two-way virtual circuit number. Default is 1024 for X.25, and 4095 for CMNS.

circuit-number--Virtual Circuit number from 1 to 4095; zero disables the range.

Example

x25 htc 512

[no] x25 idle minutes

Sets the period of inactivity once an SVC has been cleared. Affects calls both originated and terminated by the router. The no form restores the default of zero minutes.

minutes--Number of minutes in the period. Both calls originated and terminated by the router are cleared.

Example

x25 idle 1

[no] x25 ip-precedence

Enables or disables the router's ability to open a new virtual circuit based on the IP Type of Service (TOS) field. By default, the router opens one virtual circuit for each type of service.

x25 ips bytes

Sets the router input packet size to match those of the network. Default is 128 bytes.

byte--Byte count from 16 to 1024. Larger packet sizes are better. Use the same byte value for x25 ips and x25 ops unless your network supports asymmetry between input and output packets.

Example

x25 ips 1024

x25 lic circuit-number

Sets the lowest incoming-only virtual circuit number. Default is zero.

circuit-number--Virtual Circuit number from 1 to 4095; zero disables the range.

Example

x25 lic 2

[no] x25 linkrestart

Forces a packet-level restart when the link level is restarted. Restarts X.25 Level 2 (LAPB) when errors occur. The no form turns off this behavior. Default is enabled.

x25 loc circuit-number

Sets the lowest outgoing-only virtual circuit number. Default is zero.

circuit-number--Virtual circuit number from 1 to 4095; zero disables the range.

Example

x25 loc 2000

x25 ltc circuit-number

Sets the lowest two-way virtual circuit. Default is 1.

circuit-number--Virtual circuit number from 1 to 4095; zero disables the range.

Example

x25 ltc 20

[no] x25 map protocol-keyword protocol-address X.121-address [option1... option6]

Specifies a protocol-to-X.121 address mapping, such as Internet-to-X.121 or DECnet-to-X.121.

protocol-keyword--Protocol type: ip, decnet, chaos, xns, novell, appletalk, vines, apollo, pup, clns, bridge, cmns, or compressedtcp.
protocol-address--Protocol address to be mapped.
X.121-address--X.121 address to which the protocol address will be mapped.

: Choose up to six of the following mapping features for the option argument (not for use with x25 map cmns command):

accept-reverse--Instructs the router to accept incoming reverse-charged calls. If this option is not present, the router clears reverse-charged calls.
broadcast--Instructs the router to direct any broadcasts sent through this interface to the specified X.121 address. This option is needed when dynamic routing protocols are being used to access the X.25 network.
cug number--Specifies a Closed User Group number (from 1 to 99) for the mapping in the outgoing call.
modulo size--Specifies the maximum window size for this map. The argument size permits windows of 8 or 128 on the same interface.
nuid username password--Specifies that a network ID facility be sent in the outgoing call with the specified user name and password.
nvc count--Sets the number of virtual circuits (VCs) for this protocol/host. The default count is the x25 nvc setting of the interface. A maximum number of eight VCs can be configured for
a single protocol/host.
packetsize in-size out-size--Specifies input packet size (in-size) and output packet size (out-size) for the mapping in the outgoing call.
reverse--Specifies reverse charging for outgoing calls.
rpoa--Specifies the list of transit Recognized Private Operating Agencies to use in outgoing Call Request packets for this entry.
throughput in out--Requests the amount of bandwidth through
the X.25 network.
transit-delay number--Specifies the transit delay value in milliseconds (0 to 65334) for the mapping in of outgoing calls. Used only for networks that support delay transit.
windowsize in-size out-size--Specifies input window size (in-size) and output window size (out-size) for the mapping in the outgoing call.

Example

x25 map ip 131.108.9.2 31370054065 reverse
 broadcast nvc 4

x25 map bridge X.121-address broadcast [options-keywords]

Specifies Internet-to-X.121 mapping.

X.121-address--X.121 address.
broadcast--Bridges X.25 frames.
options-keywords--Services that can be added to this map. See the x25 map command for options.

Example

x25 map bridge 31370054065 broadcast

[no] x25 map cmns NSAP {MAC-address|X.121-address}

Maps NSAP addresses to either MAC-layer addresses or X.121 addresses. Required after enabling CMNS on a nonserial interface or specifying X.25 encapsulation on a serial interface). The no form with address arguments cancels the mapping.

NSAP--DTE NSAP address or NSAP prefix of NSAP address.
MAC-address--MAC address.
X.121-address--X.121 address.

Example

x25 map cmns 38.8261.17 0800.4e02.1f9f

[no] x25 map compressedtcp IP-address X.121-address [options]

Specifies a network protocol-to-X.121 address mapping, such as Internet-to-X.121 or DECnet-to-X.121. This command is required to make the X.25 calls complete for compressed packets. The no form disables header compression for the link.

IP-address--IP address.
X.121-address--X.121 address.
options--See the x25 map command for options.

Example

x25 map compressed 131.108.9.2 31370054065

x25 modulo modulus

Sets the modulus. The value of the modulo parameter must agree with that of the device on the other end of the X.25 link. Default is 8.

modulus--8 or 128.

Example

x25 modulo 128

x25 nvc count

Specifies the maximum number of switched virtual circuits that can be open to one host simultaneously. Default is 1.

count--Circuit count from 1 to 8.

Example

x25 nvc 3

x25 ops bytes

Sets the router output packet size to match that of the network. Default is 128 bytes.

byte--Byte count from 16 to 1024. Larger packet sizes are better, because smaller packets require more overhead processing. Use the same byte value for x25 ips and x25 ops unless your network supports asymmetry between input and output packets.

Example

x25 ips 1024

[no] x25 pvc circuit protocol-keyword protocol-address

Establishes or deletes Permanent Virtual Circuits (PVCs). You must specify the required network protocol-to-X.121 address mapping with an x25 map subcommand before you can set up a PVC.

circuit--Virtual circuit channel number. Must be lower than the lower limit of the incoming call range in the virtual circuit channel sequence (set using the lic keyword).
protocol-keyword--Protocol type: ip, decnet, chaos, xns, novell, appletalk, vines, apollo, pup, clns, bridge, or cmns.
protocol-address--Protocol address of the host at the other end
of the PVC.

Examples

x25 pvc 3 ip 131.108.1.4
x25 pvc 2 xns 00c0.0123.4567

[no] x25 pvc pvc-number1 interface interface-name pvc pvc-number2 [options]

Configures a PVC for a given interface.

pvc-number--PVC number; the first is the number used on the local interface, the second is the number on the remote interface.
interface interface-name--Remote interface type and unit number.
options--The windowsize and packetsize options can be entered; see the x25 map command options for syntax.

Example

x25 pvc 2 serial 0 2

[no] x25 remote-red host-IP-address remote-black Blacker-IP-address

Sets up a table listing BFE nodes to which the router will send packets.

host-IP-address--IP address of a host or router to which packets are sent.
remote-black--Specifies remote Blacker Front End unit.
Blacker-IP-address--IP address of remote Blacker Front End unit in front of the host to which packets are sent.

Example

x25 remote-red 21.0.0.12 remote-black 21.0.01

[no] x25 rpoa name number

Specifies a list of transit Recognized Private Operating Agencies (RPOAs) to use, referenced by name.

[no] x25 suppress-called-address

Omits the called (destination) X.121 address in Call Request packets. This option is required for networks that expect only subaddresses in the called address field. The no form resets the default, which is to send the calling address.

[no] x25 suppress-calling-address

Omits the calling (source) X.121 address in Call Request packets. This option is required for networks that expect only subaddresses in the calling address field. The no form resets the default, which is to send the calling address.

x25 t10 seconds

Sets the limit for the Restart Request retransmission timer (T10) on DCE devices. Default is 60 seconds.

seconds--Number of seconds.

Example

x25 t10 90

x25 t11 seconds

Sets the limit for the Call Request retransmission timer (T11) on DCE devices. Default is 180 seconds.

seconds--Number of seconds.

Example

x25 t11 90

x25 t12 seconds

Sets the limit for the Reset Request retransmission timer (T12) on DCE devices. Default is 60 seconds.

seconds--Number of seconds.

Example

x25 t12 90

x25 t13 seconds

Sets the limit for the Clear Request retransmission timer (T13) on DCE devices. Default is 60 seconds.

seconds--Number of seconds.

Example

x25 t13 90

x25 t20 seconds

Sets the limit for the Restart Request retransmission timer (T20) on DTE devices. Default is 180 seconds.

seconds--Number of seconds.

Example

x25 t20 90

x25 t21 seconds

Sets the limit for the Call Request retransmission timer (T21) on DTE devices. Default is 200 seconds.

seconds--Number of seconds.

Example

x25 t21 220

x25 t22 seconds

Sets the limit for the Reset Request retransmission timer (T22) on DTE devices. Default is 180 seconds.

seconds--Number of seconds.

Example

x25 t22 100

x25 t23 seconds

Sets the limit for the Clear Request retransmission timer (T23) on DTE devices. Default is 180 seconds.

seconds--Number of seconds.

Example

x25 t23 200

x25 th delay

Instructs the router to send acknowledgment packets when it is not busy sending other packets, even if the number of input packets has not reached the win count. The router sends acknowledgment packets when the number of input packets reaches the count you specify, providing there are no other packets to send. This command improves line responsiveness at the expense of bandwidth. Default is zero.

delay--Number of input packets, from zero to the input window size. The value 1 instructs the router to send an acknowledgment for each packet.

Example

x25 th 1

[no] x25 use-source-address

Updates the source address of outgoing calls forwarded over a specific interface. The no form prevents the update.

x25 {win|wout} packets

Sets the upper limits on the number of outstanding unacknowledged packets. Set win and wout to the same value unless your network supports asymmetry between input and output window sizes. Default is 2.

win--Use the keyword win to specify the upper limits of the number of outstanding unacknowledged packets in the input window.
wout--Use the keyword wout to specify the upper limits of the number of outstanding unacknowledged packets in the output window.
packets--Packet count. For win, defines how many packets the router can receive before sending an X.25 acknowledgment. For wout, defines how many sent packets can remain unacknowledged before the router uses a hold queue. The value must be between one and modulus minus one.

Example

x25 win 3
x25 wout 3

X.25 Show Commands

Command	Display
show cmns	CMNS traffic and activity.
show imp-hosts	Information about HDH transactions.
show x25 map	Network protocol-to-X.121 address mapping.
show x25 remote-reds	One-to-one mapping of the host IP addresses and remote BFE IP addresses.
show x25 route	X.25 routing table.
show x25 vc	Virtual circuit parameters and statistics.

Protocol Configuration

Apollo Domain Global Configuration Commands

[no] apollo access-list name {permit|deny} [firstnet]lastnet.host [wildcard-mask]

Specifies Apollo Domain access conditions.

name--Defined by the network administrator for the access list.
firstnet- and lastnet.host--First and last numbers in a network range. Use the argument lastnet.host to specify a single network.
permit or deny--Specifies permit or deny condition for this list.
wildcard-mask--Wildcard mask that uses the one bits to ignore the host part of the network address. Host bits corresponding to wildcard mask bits set to zero are used in comparisons.

Example

apollo access-list Engineering permit 89.5

[no] apollo maximum-paths paths

Sets or cancels the maximum number of multiple paths that the router remembers and uses. Default is one.

paths--Number of paths to be assigned.

Example

apollo maximum-paths 5

[no] apollo route network network.address

Specifies static routes for an Apollo Domain network.

network--Network number.
network.address--Address to which to forward packets.

Example

apollo route 45 17.32

[no] apollo routing address

Enables or disables Apollo routing and specifies which system-wide host address to use.

address--Unique, five-digit hexadecimal host address.

Example

apollo routing 1293c

Apollo Domain Interface Subcommands

[no] apollo access-group name

Specifies the interface on which an Apollo Domain access list is defined.

name--User-defined name for the access list defined by the apollo access-list global configuration command.

Example

apollo access-group eng

[no] apollo network number

Assigns Apollo Domain network numbers to the appropriate interface.

number--Network number expressed in hexadecimal form.

Example

apollo network 4e

[no] apollo update-time seconds

Sets the Apollo Domain routing update timers. Default is 30 seconds.

seconds--Number of seconds between updates. The minimum value is 10 seconds.

Example

apollo update-time 20

Apollo Domain Show Commands

Command	Display
show apollo arp	Portion of Address Resolution Protocol (ARP) table pertaining to Apollo Domain ARP.
show apollo interface [interface unit]	Apollo Domain parameters that have been configured on the interfaces.
show apollo route	Apollo Domain routing table.
show apollo traffic	Number and type of Apollo Domain packets transmitted and received.

AppleTalk Global Configuration Commands

access-list list {permit|deny} additional-zones

Establishes an AppleTalk access control list (ACL) for zone-related checks to specify the default action for zones that were not enumerated. Default is deny additional zones.

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.

Example

access-list 600 permit additional-zones

[no] access-list list {permit|deny} cable-range start-end

Establishes an ACL for an extended network. Affects extended networks with starting and ending numbers exactly matching those specified in the command.

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.
start-end--The cable range.

Example

access-list 600 permit cable-range 1000-1010

[no] access-list list {permit|deny} includes start-end

Establishes an ACL for any network, extended or nonextended, which overlaps any part of the specified range

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.
start-end--The cable range.

Example

access-list 600 permit includes 1000-1010

[no] access-list list {permit|deny} network network

Establishes an AppleTalk access control list (ACL) for a single network number. The ACL affects matching nonextended networks, and extended networks with the same starting and ending number.

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.
network--AppleTalk network number.

Example

access-list 600 permit network 21

[no] access-list list {permit|deny} other-access

Establishes an ACL used as the default for any case not enumerated. Default is deny other access.

[no] access-list list {permit|deny} within start-end

Establishes an ACL for any network, extended or nonextended, bounded by the specified range. The start and end numbers are considered to be within the range.

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.
start-end--The cable range.

Example

access-list 600 permit within 1000-1010

[no] access-list list {permit|deny} zone zone

Establishes an ACL that applies to any network that has the specified zone in its zone list.

list--An integer between 600 and 699.
permit or deny--Specifies the permit or deny condition.
zone--AppleTalk zone name.

Example

access-list 600 deny zone Twilight

no appletalk arp

Resets the arp interval and arp retransmit commands to their default values.

appletalk arp [probe|request] retransmit-count count

Specifies the number of times the router will retransmit an ARP packet before abandoning address negotiations and using the selected address. Default is 20.

probe--Sets parameters associated with the router's dynamic address assignment.
request--Sets parameters that the router uses to resolve another node's address.
count--Transmission count. The minimum value is 1.

Example

appletalk arp retransmit-count 25

[no] appletalk arp interval milliseconds

Specifies the interval between retransmission of ARP packets. Default is 33 milliseconds.

milliseconds--Number of milliseconds in the interval. Must be 33 or greater.

Example

appletalk arp interval 100

[no] appletalk checksum

Enables or disables the generation and verification of checksums for all AppleTalk packets except routed packets. Default is enabled.

[no] appletalk event-logging

Logs significant events using the logger facility. Logged events include routing changes, zone creation, port status, and address.

[no] appletalk lookup-type service-type

Specifies services listed in the show apple nbp and show apple name-cache EXEC command display. The no form with arguments removes the specified service type from the name cache. The no form without arguments removes all names except those relating to the router.

service-type--Type of AppleTalk service.

[no] appletalk macip dynamic IP-address [IP-address] zone server-zone

Allocates a single IP address or a range of IP addresses for assignment to dynamic MacIP clients by the MacIP server. The no form with arguments removes the specified dynamic address assignment statement from the configuration; without arguments, it shuts down all running MacIP services.

IP-address--The IP address. To specify a range, supply the first and last IP addresses separated by a space.
server-zone--The name of the zone containing the MacIP server.

Example

appletalk macip dynamic 131.108.1.28 131.108.1.44 
zone Engineering

[no] appletalk macip server IP-address zone server-zone

Establishes a new MacIP server. The no form with arguments removes a server statement from the configuration; without arguments, it shuts down all running MacIP services.

IP-address--The IP address. You can optionally specify a range by supplying the first and the last IP address.
server-zone--The name of the zone containing the MacIP server.

Example

appletalk macip server 131.108.1.27
zone Engineering

[no] appletalk macip static IP-address [IP-address] zone server-zone

Defines a range of addresses to be made available to MacIP clients that have reserved invariant IP addresses. The no form with arguments removes the specified static address assignment statement from the configuration; without arguments, it shuts down all running MacIP services.

IP-address--The IP address. You can optionally specify a range by supplying the first and the last IP address.
server-zone--The name of the zone containing the MacIP server.

Examples

appletalk macip static 131.108.1.50 131.108.1.66 
zone Engineering
appletalk macip static 131.108.1.81
zone Engineering

[no] appletalk name-lookup-interval seconds

Sets or cancels the interval between service polls by the router on its AppleTalk interfaces. The value zero or the no form disables name lookup. Default is zero.

seconds--Number of seconds.

Example

appletalk name-lookup-interval 1200

[no] appletalk permit-partial-zones

Permits partial zones. Even though a network of a zone is denied, the zone is permitted. Default is disabled.

[no] appletalk proxy-npb network-number zonename

Assigns a proxy. Required for each zone that has a nonextended-only AppleTalk router connected to a network in the zone.

network-number--Unique network number that the router will advertise as if it were a real network number.
zonename--Name of the zone requiring compatibility support. Only one proxy is needed to support a zone, but additional proxies can be defined with different network numbers if redundancy is desired.

Example

apple proxy-npb 60 Twilight

[no] appletalk require-route-zones

Prevents fake routes (possibly generated by a broken router or corrupt packet) from causing ZIP protocol storms. Requires the router to know the zone name for a route before including it in an update. Default is enabled.

[no] appletalk routing

Enables or disables AppleTalk protocol processing.

[no] appletalk strict-rtmp

Enforces maximum checking of routing packets to ensure their validity.

[no] appletalk timers update-interval valid-interval invalid-interval

Changes the intervals used in AppleTalk routing.

update-interval--Number of seconds between routing updates sent to other routers on the network. Default is 10 seconds.
valid-interval--Number of seconds that the router will consider a route valid without having heard a routing update for that route. The value is normally twice the update-interval. Default is 20 seconds.
invalid-interval--Number of seconds that the router will wait before marking a route invalid; the default is three times the valid-interval,
or 60 seconds.

Example

appletalk timers 20 40 120

AppleTalk Interface Subcommands

[no] appletalk access-group access-list-number

Creates a packet filter, which prevents any packets from being sent out an interface if the destination network has access denied. Once assigned, any packet that fails the appletalk access-list command cannot go out on that interface.

access-list-number--Number of an access list in the range 600 to 699. If an undefined access list is used, the rule defaults to permit. If the condition is not handled by the specified access list, the rule defaults to deny unless permitted via the other-access option of the access-list global configuration command.

Example

appletalk access-group 699

[no] appletalk address address

Assigns AppleTalk addresses on the interfaces that will be used for the AppleTalk protocol. Used to configure nonextended interfaces.

address--AppleTalk address.

Example

appletalk address 1.129

[no] appletalk cable-range start-end [network.node]

Designates an interface as being on an extended AppleTalk network.

start-end--First and last network in the range expressed as decimal numbers between 1 and 65279, inclusive. The arguments start and end can be assigned the same number.
network.node--Network and node number that the router should first use to select the AppleTalk address for this interface.

Example

appletalk cable-range 2-2

[no] appletalk discovery

Resets the discovery mode and allows a new cable range to be discovered.

appletalk distribute-list access-list-number in

Filters input from the networks so that AppleTalk network numbers specified by the access-list-number argument will not be inserted into the router's AppleTalk routing table when routing updates are received. The no form removes this filter.

access-list-number--Number of a predefined access list in the range 600 to 699.

Example

appletalk distribute-list 601 in

[no] appletalk distribute-list access-list-number out

Filters routing data generated from zones or networks. The no form removes the filter.

access-list-number--Access list number in the range 600 to 699. If an undefined access list is used, the rule defaults to permit. If the condition is not handled by the specified access list, the rule defaults to deny unless permitted via the other-access option of the access-list global configuration command.

Example

appletalk distribute-list 655 out

[no] appletalk getzonelist-filter list

Modifies zone-list replies.

list--Access list number in the range 600 to 699. If an undefined access list is used, the rule defaults to permit. If the condition is not handled by the specified access list, the rule defaults to deny unless permitted via the additional-zones option of the access-list global configuration command.

Example

appletalk getzonelist-filter 600

appletalk iptalk net.node zone

Encapsulates AppleTalk in IP packets in a manner compatible with the Columbia AppleTalk Package (CAP) IPtalk and the Kinetics IPtalk (KIP) implementation.

net.node--Network node number.
zone--AppleTalk zone name.

Example

appletalk iptalk 30.0 UDPzone

appletalk iptalk-baseport port-number

Specifies the UDP port number, which is the beginning of the range of UDP ports used in mapping AppleTalk well-known DDP socket numbers to UDP ports.

port-number--UDP port number.

Example

appletalk iptalk-baseport 200

[no] appletalk send-rtmp

Allows a router to be placed on a network with AppleTalk so it is enabled but not seen. This allows disabling of routing updates.

[no] appletalk zone zonename

Sets the zone name for the connected AppleTalk network. Must be specified after the appletalk address or appletalk cable-range command if discovery is not enabled. This command can be issued multiple times if it follows the appletalk cable-range command.

zonename--Specifies the zone name for the connected AppleTalk network.

Example

appletalk zone twilight

AppleTalk Show Commands

Command	Display
show apple access-lists	Conditions specified in AppleTalk access list configurations.
show apple adjacent-routes	Routes that are directly connected or one hop away.
show apple arp	AppleTalk ARP cache.
show apple cache	Current AppleTalk fast-switching cache.
show apple global	AppleTalk internetwork and router parameter information.
show apple interface [interface]	AppleTalk parameters that have been applied to the interface.
show apple macip-clients	Status of known MacIP clients.
show apple macip-servers	Status of MacIP servers.
show apple name-cache	List of NBP (Name Binding Protocol) services of nearby routers or other devices.
show apple nbp	NBP name registration table.
show apple neighbor [*address*]	AppleTalk routers directly connected to any network on which this router is connected.
show apple route [*network*]	Routing table for AppleTalk networks.
show apple socket [*socket*]	Process-level processing on all sockets in the AppleTalk interface.
show apple traffic	Status of MacIP traffic.
show apple zone	Zone information table.

CHAOSnet Global Configuration Command

[no] router chaos

Starts or stops the CHAOSnet router process.

CHAOSnet Show Command

Command	Display
show chaos-arp	CHAOSnet-specific ARP entries as 16-bit octal addresses.

DECnet Global Configuration Commands

access-list list {permit|deny} destination destination-mask

Creates a DECnet access list.

list--An integer between 300 and 399 that uniquely identifies the access list.
permit or deny--Specifies permit or deny condition for this list.
destination--DECnet address.
destination-mask--The mask, expressed in DECnet address format, with bits set wherever the corresponding bits in the address should
be ignored.

Examples

access-list 300 deny 4.51 0.0
access-list 300 permit 2.31 0.0

[no] access-list list {permit|deny} source source-mask [destination destination-mask] [connect-entries]

Filters connect initiate packets by DECnet object type.

list--Access list number in the range 300-399.
permit or deny--Specifies permit or deny condition for this list.
source source-mask--Source address and mask.
destination destination-mask--Destination address and mask.

The connect-entries argument specifies the entries used to match connect packets. Use the command syntax {eq|neq} [src-object] [dst-object] [identification].

eq or neq--The keyword eq specifies that the item matches the packet if all the specified parts of src-object, dst-object, and identification match data in the packet. The keyword neq specifies that the item matches the packet if any of the specified parts do not match the corresponding entry in the packet.
src-object--The keyword src and the argument obj-spec.
dst-object--The keyword dst and the argument obj-spec.
identification--The keyword id, password, or account, followed by the argument regex.
obj-spec--One of the following: relop object-number, exp regex, uic [group,user]; with the latter, the bracket symbols must be entered.
relop--One of the following relational operator keywords: eq
(equal to), neq (not equal to), lt (less than), gt (greater than).
object-number--Numeric DECnet object number.
regex--Regular expression that matches a string.
[group, user]--Numeric UID expression expressed in decimal, octal, or hexadecimal format.

The argument obj-spec is the object specifications, in one of three formats:

Relational operator and an object number (eq 17).
Regular expression that matches a string (exp ^SYSTEM$).
Matches a UIC (uic [1,4]).
id, password, or account--Type of value that the argument regex should match. The special format eq any matches any connect packet.

Examples

access-list 300 permit 0.0 63.1023 eq dst eq 27
access-list 300 permit 0.0 63.1023 neq dst eq 17
access-list 300 permit 0.0 63.1023 eq id^SYSTEM$
access-list 300 permit 1.0 0.1023 eq src exp
 ^SYSTEM$ dst eq 27
access-list 300 permit 0.0 0.1023 eq any

decnet area-max-cost value

Sets the maximum cost specification value for interarea routing.

value--Maximum cost for a route that the router considers usable. The router treats as unreachable any route with a cost greater than the value you specify. The valid range is from 1 to 1022.

Example

decnet area-max-cost 500

decnet area-max-hops value

Sets the maximum hop count specification value for interarea routing.

value--Maximum number of hops for a route to a distant area that the router may consider usable; the router treats as unreachable any route with a counter greater than the value you specify. The valid range is from
1 to 30.

Example

decnet area-max-hops 21

decnet conversion NSAP-prefix

Enables conversion.

NSAP-prefix--Value used for the IDP when constructing NSAPs from a Phase IV address.

Example

decnet conversion 47.0004.004d

decnet first-network map virtual-address second-network real-address

Establishes a translation entry to translate a virtual DECnet address to a real DECnet address for the ATG.

first-network--First DECnet network number, in the range 0 to 3.
map virtual-address--Numeric DECnet address that you want to translate to a real address.
second-network--Second DECnet network number, in the range
0 to 3.
real-address--Real DECnet address to which you want to translate
the virtual address.

Example

decnet 0 map 19.5 1 50.1

decnet network-number keywords

Specifies ATG (Address Translation Gateway).

network-number--Network number, in the range 0 to 3. To configure network 0, do not include the network-number modifier.
keywords--One of the DECnet global configuration command keywords; for example, area-max-cost or max-units.

Examples

decnet 1 node-type area
decnet 0

decnet max-address value

Determines the largest node number specification allowed in the
current area. Default is 255.

value--Node number from 1 to 1023; default is 255.

Example

decnet max-address 300

decnet max-area value

Determines the largest node number specification allowed in the
current area.

value--Largest area number specification the router can handle from 1 to 63.

Example

decnet max-area 30

decnet max-cost value

Sets the largest maximum cost specification for intra-area routing.

value--Number from 1 to 1022.

Example

decnet max-cost 500

decnet max-hops value

Sets the maximum hop count specification for intra-area routing.

value--Hop count from 1 to 30.

Example

decnet max-hops 30

decnet max-paths value

Defines the maximum number of equal cost paths to a destination that the router can maintain. Default is 1 (no multiple paths).

value--Maximum number of equal cost paths from 1 to 31.

Example

decnet max-paths 2

decnet max-visits value

Sets the limit on the number of times a packet can pass through a router.

value--Number of times from 1 to 63.

Example

decnet max-visits 15

decnet node-type {area|routing-iv}

Specifies the node type for the router.

area or routing-iv--Specify area to make the router exchange traffic directly with routers in other areas, participate in the interarea (Level 2) routing protocol, and act as an intra-area (Level 1) router for its local area. Specify routing-iv to make the router act as an intra-area router and route packets out of the area by taking the least cost path to an interarea router.

Example

decnet node-type area

decnet path-split-mode {normal|interim}

Sets the mode for splitting the routes between equal cost paths.

normal or interim--Specify normal to make the router select equal cost paths one after the other. Specify interim to make the router route traffic for a single higher-level session over the same path. Always specify interim if the network is running DECnet VMS Version 4.5 or earlier.

Example

decnet path-split-mode normal

[no] decnet router-priority value

Sets a priority value for use in determining the default router. The no form restores the default of 64.

value--Number between 1 and 127. To configure a router as the designated router, assign it the highest possible node address.

Example

decnet router-priority 127

[no] decnet routing DECnet-address

Enables or disables DECnet routing for a particular area and node.

DECnet-address--An address in DECnet format X.Y, where X is the area number and Y is the node number.

Examples

no decnet routing 6.1023
decnet routing 6.10

DECnet Interface Subcommands

[no] decnet access-group list

Interface subcommand that applies or removes an access list.

list--Standard or extended DECnet access list. Standard DECnet access lists apply to destination addresses in this command.

Example

decnet access-group 389

[no] decnet cost cost-value

Sets or removes a cost value for an interface.

cost-value--An integer from 1 to 63. The suggested cost for Ethernet networks is 4. All hosts on the same cable must share the same value.

Example

decnet cost 4

decnet encapsulation {pre-dec|dec}

Configures the router for operation on the same Token Ring with routers running software versions prior to 9.1. Use pre-dec for Cisco-style encapsulation; use dec to return to the default.

Example

interface tokenring 0
decnet encapsulation pre-dec
decnet cost 4

[no] decnet hello-timer value

Specifies how often the router sends hello messages. The no form restores the default of 15 seconds.

value--An interval from 1 to 8191 seconds.

Example

decnet hello-timer 120

[no] decnet in-routing-filter list

Provides access control to hello messages or routing information received on this interface. The no form removes access control.

list--Standard DECnet access list.

Example

decnet in-routing-filter 321

[no] decnet out-routing-filter list

Applies access control to routing information being sent out on this interface. The no form removes access control.

list--Standard DECnet access list.

Example

decnet out-routing-filter 351

[no] decnet route-cache

Enables or disables fast switching and the route cache. The no form disables fast switching. Default is enabled.

[no] decnet routing-timer value

Specifies how often the router sends routing messages. The no form restores the default of 40 seconds.

value--Number of seconds between 1 and 65,535.

Example

decnet routing-timer 60

DECnet Show Commands

Command	Display
show decnet interface [interface]	DECnet parameters that have been configured on the interfaces.
show decnet map	Address mapping information used by the DECnet Address Translation Gateway.
show decnet route	DECnet routing table.
show decnet traffic	DECnet traffic statistics including datagrams sent, received, and forwarded.

IP and SLIP Global Configuration Commands

[no] access-list list {permit|deny} IP-address wildcard-mask

Creates or removes an IP access list.

list--An IP list number from 1 to 99.
permit or deny--Specifies permit or deny condition for this list.
IP-address--IP address to which the router compares the address being tested.
wildcard-mask--Wildcard mask bits for the address in 32-bit, dotted decimal notation.

Example

access-list 1 permit 192.5.34.0 0.0.0.255

[no] access-list list {permit|deny} protocol source source-mask destination destination-mask [operator operand] [established]

Creates or removes an extended IP access list.

list--An IP list number from 100 to 199.
permit or deny--Specifies permit or deny condition for this list.
protocol--One of the supported protocol keywords: ip, tcp, udp, or icmp.
source--An IP address in 32-bit, dotted decimal notation.
source-mask--Mask bits for the source address in 32-bit, dotted decimal notation.
destination--Destination address in 32-bit, dotted decimal notation.
destination-mask--Destination address mask in 32-bit, dotted decimal notation.
operator--If tcp or udp is the protocol, use these optional arguments to compare destination ports, service access points, or contact names. Specify lt (less than), gt (greater than), eq (equal to), or neq (not equal).
operand--If tcp or udp is the protocol, specify the decimal destination port for the specified protocol.
established--For the TCP protocol, use the established keyword to match TCP datagrams that have the ACK or RST bits set.

Example

access-list 189 permit tcp 128.88.0.0 0.0.255.255
  0.0.0.0 255.255.255.255
access-list 190 permit tcp  0.0.0.0 255.255.255.255
  128.88.1.2  eq  25

[no] arp IP-address hardware-address type [alias]

Installs a permanent entry in the ARP cache. The router uses this entry to translate 32-bit Internet Protocol addresses into 48-bit hardware addresses.

IP-address--The Internet address that corresponds to the local
data-link address specified by the argument hardware-address.
hardware-address--Local data-link address.
type--Encapsulation description: arpa for Ethernet interfaces, snap for FDDI and Token Ring interfaces, or ultra for UltraNet interfaces.
alias--Supply this keyword if the router should respond to ARP requests as if it were the owner of the specified IP address.

Example

arp 192.31.7.19 0800.0900.1834 arpa

[no] async-bootp tag [:hostname] data

Specifies extended BootP requests defined in RFC 1084 when the router is configured for SLIP. If no extended BootP commands are entered, by default the software generates a gateway and subnet mask appropriate for the local network.

The argument tag is the item being requested and is one of the following expressed as filename, integer, or IP dotted decimal address:

bootfile--Specifies use of a server boot file from which to download the boot program. Use the optional :hostname and data arguments to specify the filename.
subnet-mask mask--Dotted decimal address specifying the network and local subnetwork mask (as defined by RFC 950).
time-offset offset--A signed 32-bit integer specifying the time offset of the local subnetwork in seconds from Universal Time Coordinated (UTC).
gateway address--Dotted decimal address specifying the IP addresses of gateways for this subnetwork. A preferred gateway should be listed first.
time-server address--Dotted decimal address specifying the IP address of time servers (as defined by RFC 868).
IEN116-server address--Dotted decimal address specifying the IP address of name servers (as defined by IEN 116).
DNS-server address--Dotted decimal address specifying the IP address of Domain Name Servers (as defined by RFC 1034).
log-server address--Dotted decimal address specifying the IP address of an MIT-LCS UDP log server.
quote-server address--Dotted decimal address specifying the IP
address of Quote of the Day servers (as defined in RFC 865).
lpr-server address--Dotted decimal address specifying the IP address of Berkeley UNIX Version 4 BSD servers.
impress-server address--Dotted decimal address specifying the IP address of Impress network image servers.
rlp-server address--Dotted decimal address specifying the IP address of Resource Location Protocol (RLP) servers (as defined in RFC 887).
hostname name--The name of the client, (which may or may not be domain qualified, depending upon the site).
bootfile-size value--A two-octet value specifying the number of 512-octet (byte) blocks in the default boot file.
:hostname--Host to which this entry applies, expressed as either an IP address or logical host name.
data--List of IP addresses entered in dotted decimal notation or as logical host names, a number, or a quoted string.

Examples

async-bootp bootfile :128.128.1.1 "pcboot"
async-bootp bootfile :mac "macboot"
async-bootp subnet-mask 255.255.0.0

[no] ip accounting-list IP-address mask

Specifies a set of filters to control accounting information for hosts. The no form removes this filter.

IP-address--IP address for the host.
mask--Mask with which the source and destination address of each IP datagram is logically ANDed to determine whether there is a match.

Example

ip accounting-list 192.31.7.18 255.255.0.0

[no] ip accounting-threshold threshold

Sets the maximum number of accounting entries to be created. The no form removes this limit.

threshold--Maximum number of accounting entries that can be created.

Example

ip accounting-threshold 500

[no] ip accounting-transits count

Controls the number of transit records that will be stored in the IP accounting database. Transit entries are those that do not match any of the filters specified by ip-accounting-list commands.

count--Maximum number of transit records.

Example

ip accounting-transits 100

[no] ip domain-list name

Defines a list of default domain names to complete unqualified host names. The no form deletes a domain name from the list.

name--Domain name to add to or delete from the list.

Example

ip domain-list cisco.com

[no] ip domain-lookup

Enables or disables IP Domain Name System-based hostname-to-address translation. The no form disables the feature. Default is enabled.

[no] ip domain-name name

Defines the default domain name, which is specified by the argument name. The router uses the default domain name to complete names without a dotted domain name. The no form deletes the default domain name.

name--Default domain name.

Example

ip domain-name cisco.com

[no] ip forward-protocol {udp|nd} [port]

Specifies which protocols and ports are forwarded for an interface with an ip helper-address. The no form disables forwarding of the specified protocol.

udp or nd--Specify udp for UDP protocol or nd for the ND protocol used by older diskless Sun workstations.
port--If you specified UDP protocol, optionally specify a UDP destination port to control which UDP services are forwarded.

Example

ip forward-protocol udp

[no] ip forward-protocol spanning-tree

Permits IP broadcasts to be flooded throughout the internetwork in a controlled fashion. The no form prevents flooding.

[no] ip host name [TCP-port-number] IP-address1|[IP-address2...
IP-address8]

Defines a static hostname-to-address mapping in the host cache.

name--Host name.
TCP-port-number--TCP port number. Default is 23 (Telnet).
IP-address--IP address associated with the host name. Up to eight addresses can be supplied.

Example

ip host croff 192.31.7.18

[no] ip hp-host hostname IP-address

Enables or disables the use of the proxy service.

hostname--Name of the Hewlett-Packard host in the host table.
IP-address--IP address of the host.

Example

ip hp-host bl4zip 131.24.6.27

[no] ip ipname-lookup

Specifies or removes the IP IEN-116 Name Server hostname-to-address translation. Default is disabled.

[no] ip name-server server-address 1 [server-address 2...server-address 6]

Specifies the addresses of the name servers to use for name and address resolution. Default: all-ones broadcast address (255.255.255.255).

server-address--Internet addresses of up to six name servers in dotted decimal format.

Example

ip name-server 131.108.1.111 131.108.1.2

[no] ip routing

Enables or disables IP routing. If the system has optional bridging-enabled software, use the no form to set up a system to bridge (not route) IP datagrams. Default is enabled.

[no] ip source-route

Controls the handling of IP datagrams with source routing header options. The no form instructs the system to discard IP datagrams containing a source-route option. Default is enabled.

[no] ip subnet-zero

Enables or disables the ability to configure and route to "subnet zero" subnets. Default is disabled.

IP Interface Subcommands

[no] arp {arpa|probe|snap}

Controls the interface-specific handling of IP address resolution into
48-bit Ethernet, FDDI, and Token Ring hardware addresses. Default is arpa.

arpa--Specifies standard Ethernet-style ARP (RFC 826).
probe--Specifies the HP Probe for IEEE-802.3 networks.
snap--Specifies ARP packets conforming to RFC 1042.

Example

arp probe

[no] arp timeout seconds

Sets the number of seconds an ARP cache entry will stay in the cache. The no form restores the default of 14,400 seconds (4 hours).

seconds--Number of seconds used to age an ARP cache entry for this interface.

Example

arp timeout 7200

[no] ip access-group list

Defines an IP access group.

list--Standard or extended IP access list number from 1 to 199.

Example

access-group 101

[no] ip accounting

Enables or disables IP accounting on an interface.

[no] ip address IP-address net-mask [secondary]

Sets an IP address for an interface.

IP-address--IP address.
net-mask--Subnet mask for the associated network. The subnet mask must be the same for all interfaces connected to subnets of the same network.
secondary--Include this keyword for all IP addresses other than the first.

Examples

ip address 131.108.1.27 255.255.255.0
ip address 192.31.7.17 255.255.255.0 secondary

[no] ip broadcast-address [IP-broadcast-address]

Defines a broadcast address. If you use the no form or do not specify a broadcast address, the system uses the default of all ones (255.255.255.255).

IP-broadcast-address--IP broadcast address for the network.

Example

ip broadcast-address 121.24.43.2

[no] ip directed-broadcast

Enables or disables forwarding of directed broadcasts on the interface. Default is enabled.

[no] ip helper-address address

Defines a helper address for a specified address. The helper address defines the selective forwarding of UDP broadcasts received on the interface. The no form deletes the helper address.

address--Destination broadcast or host address that the router should use when forwarding datagrams.

Example

ip helper-address 128.24.17.111

[no] ip mask-reply

Sets the interface to send ICMP Mask Reply messages. Default is disabled.

[no] ip mtu bytes

Sets the maximum transmission unit (MTU) or size of IP packets sent on an interface. The no form restores the default, which depends on the interface medium.

bytes--Maximum packet size for this interface from 128 to one less than the maximum for the interface.

Example

ip mtu 300

[no] ip probe proxy

Enables or disables HP Probe support, which allows a router to respond to HP Probe Proxy Name requests. Default is disabled.

[no] ip proxy arp

Enables or disables proxy ARP on the interface. Default is enabled.

[no] ip redirects

Enables or disables the sending of ICMP redirects on this interface. Default is enabled.

[no] ip route-cache [cbus]

Controls the use of outgoing packets on a high-speed switching cache for IP routing. The cache is enabled by default and allows load-balancing for individual destinations; autonomous switching is disabled by default. The no form disables fast-switching, enabling load-balancing on a per-packet basis.

cbus--Enables autonomous switching.

[no] ip security

Restores an interface to its default state, dedicated, unclassified Genser, with no extended state allowed.

[no] ip security add

Adds a basic security option to all datagrams leaving the router on the specified interface. The no form disables this function.

ip security dedicated level authority [authority...]

Sets or removes the requested level of classification and authority on the interface.

level--Degree of sensitivity of information: reserved4, TopSecret, Secret, Confidential, Reserved3, Reserved2, Unclassified, or Reserved1.
authority--Organization that defines the set of security levels that will be used in a network: Genser, Sio-Esi, SCI, or NSA.

Example

ip security dedicated confidential Genser

[no] ip security extended-allowed

Allows or rejects datagrams with an extended security option on the specified interface.

[no] ip security first

Prioritizes the presence of security options on a datagram.

[no] ip security ignore-authorities

Sets an interface to ignore the authority fields of all incoming datagrams. The no form removes the setting.

[no] ip security implicit-labelling [level authority [authority [authority...]]]

Sets the interface to accept datagrams, even if the packets do not include a security option. The no form removes the setting.

level--Degree of sensitivity of information: reserved4, TopSecret, Secret, Confidential, Reserved3, Reserved2, Unclassified, or Reserved1.
authority--Organization that defines the set of security levels that will be used in a network: Genser, Sio-Esi, SCI, or NSA.

Example

ip security implicit-labelling confidential Genser

ip security multilevel level1 [authority...] to level2 authority2
[authority3...]

Sets the requested range of classification and authority on the interface. Traffic entering or leaving the system must have a security option that belongs in the specified range. The no form removes the setting.

level--Degree of sensitivity: reserved4, TopSecret, Secret, Confidential, Reserved3, Reserved2, Unclassified, or Reserved1.
authority--Organization that defines the set of security levels that will be used in a network: Genser, Sio-Esi, SCI, or NSA.

Example

ip security multilevel Confidential Genser to
 TopSecret Genser

[no] ip security strip

Removes any basic security option on all datagrams leaving the router on the specified interface. The no form disables the function.

[no] ip split-horizon

Enables or disables the split horizon mechanism. The default for interfaces without frame relay or SMDS encapsulation is enabled. The default for all other interfaces is disabled.

[no] ip tcp compression-connections number

Sets the maximum number of connections per interface that the compression cache can support. Default is 16.

number--Number of connections from 3 to 256.

Example

ip tcp compression-connections 256

[no] ip tcp header-compression [passive]

Enables TCP header compression. The no form disables the compression. Default is disabled.

passive--Sets the interface to compress outgoing traffic on the inter-face only when incoming traffic is compressed.

Example

ip tcp header-compression passive

[no] ip unnumbered interface-name

Enables or disables IP processing on a serial interface, but does not assign an explicit IP address to the interface.

interface-name--Name of another interface on which the router has assigned an IP address. Do not use this interface or another unnumbered interface.

Example

ip unnumbered ethernet 0

[no] ip unreachables

Enables or disables the ability to send ICMP unreachable messages on an interface. Default is enabled.

transmit-interface interface-name

Assigns a transmit interface to a receive-only interface.

interface-name--Name of the interface to which you want to convert the interface designated as the source of the route.

Example

transmit-interface ethernet 0