Routers: IOS

Packet Tracer uses a simplified model of the Cisco IOS. Click on the CLI tab in the router configuration window to access the Cisco IOS command line interface for the router. Use the Copy and Paste buttons to copy and paste text to and from the command line. This page lists the Cisco IOS command tree for Packet Tracer routers. For Cisco 1841 and 2811 routers with switching capabilities, refer to the "Switch IOS" page for additional commands. The tree contains only Cisco IOS command chains that are supported in Packet Tracer.

User Mode

- <1-99>
- connect [WORD]
- disconnect
- enable [ <0-15> | view [ WORD ] ]
- exit
- logout
- ping WORD
- resume [ <1-16> | WORD ]
- show
  - cdp
    - entry
      - * [ protocol | version ]
      - WORD [ protocol | version ]
    - interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Serial <0-9>/<0-24>
    - neighbors [ detail ]
  - class-map [ WORD ]
  - clock
  - controllers
    - Ethernet <0-9>/<0-24>
    - FastEthernet <0-9>/<0-24>
    - GigabitEthernet <0-9>/<0-24>
    - Serial <0-9>/<0-24>
    - Serial <0-9> <0-24> <0-4294967295>
    - Serial <0-9> <0-24> <0-4294967295> <16-1022>
  - crypto key mypubkey rsa
  - dot11 interface
  - flash:
  - frame-relay
    - lmi
    - map
    - pvc
      - <16-1022>
      - interface Serial <0-9>/<0-24> [ <16-1022> ]
      - interface Serial <0-9>/<0-24> [ <16-1022> ]
      - interface Serial <0-9> <0-24> <0-4294967295>
      - interface Serial <0-9> <0-24> <0-4294967295> <16-1022>
  - history
  - hosts
  - interfaces
    - Dot11Radio <0-9>/<0-24>
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Serial <0-9> <0-24> <0-4294967295>
    - Tunnel <0-2147483647>
    - Virtual-Access <1-2>
    - Virtual-Template <1-200>
    - Vlan <1-1005>
    - switchport
    - trunk
  - ip
    - arp
    - bgp [ neighbors | summary ]
    - dhcp binding
    - eigrp
      - interfaces [ <1-65535> ]
      - neighbors [ <1-65535> ]
      - topology [ <1-65535> ] [ A.B.C.D A.B.C.D ]
        - all-links
      - traffic [ <1-65535> ]
    - interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
      - Vlan <1-1005>
      - brief
    - nbar port-map
    - nat translations
    - ospf
      - <1-65535>
        - <0-4294967295>
          - database
          - interface
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - neighbor [ detail ]
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - virtual-links
        - A.B.C.D
          - database
          - interface
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - neighbor [ detail ]
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - virtual-links
        - database
        - interface
          - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - Loopback <0-2147483647>
          - Serial <0-9>/<0-24>
        - neighbor [ detail ]
          - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - Loopback <0-2147483647>
          - Serial <0-9>/<0-24>
        - virtual-links
      - database
      - interface
        - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - Loopback <0-2147483647>
        - Serial <0-9>/<0-24>
      - neighbor [ detail ]
        - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - Loopback <0-2147483647>
        - Serial <0-9>/<0-24>
      - virtual-links
      - border-routers
    - protocols
    - rip database
    - route [ WORD | connected | eigrp | ospf <1-65535> | rip | static ]
    - ssh
  - policy-map [ WORD | interface [ Ethernet <0-9> <0-24> <0-4294967295> | FastEthernet <0-9> <0-24> <0-4294967295> | GigabitEthernet <0-9> <0-24> <0-4294967295> | Serial <0-9> <0-24> | Serial <0-9> <0-24> <0-4294967295> ]
  - privilege
  - protocols
  - processes
  - sessions
  - ssh
  - users
  - version
  - vlan-switch [ brief | id <1-1005> | name WORD ]
  - vtp
    - counters
    - status
  - ipv6
    - access-list [ WORD ]
    - general-prefix
    - interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
      - brief
    - neighbors
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
    - route [ ospf ]
    - rip database
    - eigrp
      - interfaces <1-65535>
      - neighbors <1-65535>
      - topology [ <1-65535> [X:X:X:X::X/<0-128>] | X:X:X:X::X/<0-128> | all-links ]
      - traffic [ <1-65535> ]
    - ospf
      - [ <1-65535> | <0-4294967295> | A.B.C.D | border-routers | database | interface | neighbor ]
      - [ interface [interface] ]
      - [ neighbor [interface] [detail] ]
      - [ border-routers ]
      - [ database ]
    - protocols
    - nat translations
    - dhcp
      - interface
      - pool
- telnet [ WORD ]
- terminal history size <0-256>
- traceroute WORD

Enable Mode

- <1-99>
- auto secure
- clear
  - aaa local user user lockout [ all | username WORD ]
  - access-list counters [ <1-199> | <1300-2699> | WORD ]
  - arp-cache
  - cdp table
  - frame-relay [inarp | counter]
  - ip
    - bgp *
    - nat translation *
    - route [ * | A.B.C.D | A.B.C.D A.B.C.D ]
  - ipv6
    - nat translation *
  - mac-address-table dynamic
  - vtp counters
- clock set hh:mm:ss [ <1-31> MONTH <1993-2035> | MONTH <1-31> <1993-2035> ]
- configure [ terminal ]
- connect [ WORD ]
- copy
  - running-config
    - flash:
    - ftp
    - startup-config
    - tftp:
  - startup-config
    - flash:
    - ftp
    - running-config
    - tftp:
  - tftp:
    - flash:
    - running-config
    - startup-config
  - ftp:
    - flash:
    - running-config
    - startup-config
- debug
  - aaa authentication
  - crypto [ isakmp | ipsec ]
  - custom-queue
  - eigrp
    - fsm
    - packets
  - ip
    - icmp
    - inspect
      - detailed
      - events
      - function-trace
      - object-creation
      - object-deletion
      - protocol [ http | icmp | tcp | udp ]
      - timers
    - nat
    - ospf
      - adj
      - events
    - packet
    - rip [ events ]
    - routing
  - ipv6
    - ospf
      - adj
      - events
  - frame-relay lmi
  - ntp packets
  - ppp [ authentication | negotiation | packet ]
- delete
  - WORD
  - flash:
- dir [ flash: ]
- disable
- disconnect <1-16>
- enable [ <1-15> | view [ WORD ] ]
- erase startup-config
- exit
- logout
- mkdir [ WORD | flash: ]
- more file
- no
  - debug
    - all
    - aaa authentication
    - crypto [ isakmp | ipsec ]
    - custom-queue
    - eigrp
      - fsm
      - packets
    - ip
      - icmp
      - inspect
        - detailed
        - events
        - function-trace
        - object-creation
        - object-deletion
        - protocol [ http | icmp | tcp | udp ]
        - timers
      - nat
      - ospf
        - adj
        - events
      - packet
      - rip [ events ]
      - routing
    - ipv6
      - ospf
        - adj
        - events
    - frame-relay lmi
    - ntp packets
    - ppp [ authentication | negotiation | packet ]
- ping [ WORD ]
  - [ Protocol ] [ Target IP address ] [ Repeat count ] [ Datagram size ] [ Timeout in seconds ] [ Extended commands ] [ Sweep range of sizes ]
- reload
- resume [ <1-16> | WORD ]
- mkdir [ WORD | flash: ]
- rmdir [ WORD | flash: ]
- setup
- show
  - aaa
    - local user lockout
    - sessions
    - user [ <1-4294967295> | all ]
  - access-lists [ <1-999> | WORD ]
  - arp
  - cdp
    - entry
      - * [ protocol | version ]
      - WORD [ protocol | version ]
    - interfaces
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Serial <0-9>/<0-24>
    - neighbors [ detail ]
  - class-map [ WORD ]
  - clock
  - controllers
    - Ethernet <0-9>/<0-24>
    - FastEthernet <0-9>/<0-24>
    - GigabitEthernet <0-9>/<0-24>
    - Serial <0-9>/<0-24>
    - Serial <0-9> <0-24> <0-4294967295>
  - crypto
    - isakmp [ policy | sa ]
    - ipsec [ sa | transform-set ]
    - map
    - crypto key mypubkey rsa
  - debugging
  - dhcp lease
  - dot11 interface
  - ephone [attempted-registrations]
  - file systems
  - flash:
  - frame-relay
    - lmi
    - map
    - pvc
      - <16-1022>
      - interface Serial <0-9>/<0-24> [ <16-1022> ]
  - history
  - hosts
  - interfaces
    - dot11Radio <0-9>/<0-24>/<0-24>
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ switchPort ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Serial <0-9> <0-24> <0-4294967295>
    - Tunnel <0-2147483647>
    - Virtual-Access <1-2>
    - Virtual-Template <1-200>
    - Vlan <1-1005>
    - switchport
    - trunk
  - ip
    - access-lists [ <1-199> | WORD ]
    - arp
    - bgp [ neighbors | summary ]
    - dhcp binding
    - eigrp
      - interfaces [ <1-65535> ]
      - neighbors [ <1-65535> ]
      - topology [ <1-65535> ] [ A.B.C.D A.B.C.D ]
        - all-links
      - traffic [ <1-65535> ]
    - inspect
      - all
      - config
      - interfaces
      - name WORD
      - sessions [ detail ]
      - statistics
    - interface
      - dot11Radio <0-9>/<0-24>/<0-24>
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
      - Serial <0-9> <0-24> <0-4294967295>
      - Tunnel <0-2147483647>
      - Virtual-Access <1-2>
      - Virtual-Template <1-200>
      - Vlan <1-1005>
      - brief
    - ips
      - all
      - configuration
      - signatures
        - count
        - sigid WORD subid WORD
    - nat [translations | statistics]
    - ospf
      - <1-65535>
        - <0-4294967295>
          - database
          - interface
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - neighbor [ detail ]
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - virtual-links
        - A.B.C.D
          - database
          - interface
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - neighbor [ detail ]
            - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
            - Loopback <0-2147483647>
            - Serial <0-9>/<0-24>
          - virtual-links
        - database
        - interface
          - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - Loopback <0-2147483647>
          - Serial <0-9>/<0-24>
        - neighbor [ detail ]
          - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
          - Loopback <0-2147483647>
          - Serial <0-9>/<0-24>
        - virtual-links
      - database
      - interface
        - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - Loopback <0-2147483647>
        - Serial <0-9>/<0-24>
      - neighbor [ detail ]
        - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - Loopback <0-2147483647>
        - Serial <0-9>/<0-24>
      - virtual-links
    - protocols
    - rip database
    - route [ WORD | connected | eigrp | ospf <1-65535> | rip | static ]
    - ssh
  - logging
  - mac-address-table [ static ]
  - ntp status
  - parser view
  - policy-map
    - WORD
    - interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Serial <0-9>/<0-24>
      - Serial <0-9> <0-24> <0-4294967295>
    - type inspect zone-pair sessions
  - privilege
  - processes
  - protocols
  - queue
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Serial <0-9>/<0-24>
    - Serial <0-9> <0-24> <0-4294967295>
  - queueing
  - running-config
  - secure [ bootset ]
  - sessions
  - snmp
  - spanning-tree [ vlan <1-1005> ]
  - startup-config
  - storm-control broadcast
  - tcp [ brief ]
  - tech-support
  - terminal
  - users
  - version
  - vlan-switch [ brief | id <1-1005> | name WORD ]
  - vtp
    - counters
    - status
- ssh
  - -l WORD [ WORD | -v WORD WORD]
  - -v WORD -l WORD WORD
- terminal history size <0-256>
- telnet [ WORD ]
- traceroute [ WORD ]
  - [ Protocol ] [ Target IP address ] [ Source address ] [ Numeric display ] [ Timeout in seconds ] [ Probe count ] [ Minimum Time to Live ] [ Maximum Time to Live ]
- undebug
  - all
  - aaa authentication
  - crypto [ isakmp | ipsec ]
  - custom-queue
  - eigrp
    - fsm
    - packets
  - ip
    - icmp
    - inspect
      - detailed
      - events
      - function-trace
      - object-creation
      - object-deletion
      - protocol [ http | icmp | tcp | udp ]
      - timers
    - nat
    - ospf
      - adj
      - events
    - packet
    - rip [ events ]
    - routing
  - ipv6
    - ospf
      - adj
      - events
  - frame-relay lmi
  - ppp [ authentication | negotiation | packet ]
- vlan database
- write [ erase | memory | terminal ]

Global Mode

- aaa
  - authentication
    - enable default
      - enable
      - group [ radius | tacacs+ ]
      - local
      - none
  - authorization
    - [ exec | network ] [ WORD | default ]
      - group [ radius | tacacs+ ]
      - if-authenticated
      - local
      - none
  - new-model
- access-list (named ACL is under the "ip access-list" branch in Global Mode)
  - <1-99>
    - [ deny | permit ] [ A.B.C.D | any | host A.B.C.D ]
    - [ deny | permit ] [ A.B.C.D A.B.C.D ]
    - remark LINE
  - <100-199>
    - [ deny | permit ] [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
    - [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
    - remark LINE
- banner
  - motd LINE
  - login LINE
- boot system flash WORD
- cdp run
- class-map [ type inspect ] [ match-all | match-any ] WORD
- clock timezone WORD <-23 - 23> [ <0-59> ]
- config-register WORD
- crypto
  - dynamic-map WORD <1-65535> [ ipsec-isakmp ]
  - ipsec
    - security-association lifetime seconds <120-86400>
    - transform-set WORD [ ah-md5-hmac | ah-sha-hmac ]
      - esp-3des [ esp-md5-hmac | esp-sha-hmac ]
      - esp-aes [ 128 | 192 | 256 ] [ esp-md5-hmac | esp-sha-hmac ]
      - esp-des [ esp-md5-hmac | esp-sha-hmac ]
      - esp-md5-hmac
      - esp-sha-hmac
  - isakmp
    - client configuration group WORD
    - key WORD address A.B.C.D [ A.B.C.D ]
    - policy <1-10000>
  - key [ generate | zeroize ] rsa
  - map WORD
    - <1-65535> [ ipsec-isakmp ] [dynamic WORD ]
    - client [ authentication list WORD | configuration address respond ]
    - isakmp authorization list WORD
- dial-peer voice <1-2147483647> voip
- do LINE
- enable
  - password
    - 7 WORD
    - LINE
    - level <1-15>
      - 7 WORD
      - LINE
  - secret
    - [ 0 | 5 ] LINE
    - level <1-15>
      - [ 0 | 5 ] LINE
- end
- ephone <1-96>
- ephone-dn <1-288>
- exit
- hostname WORD
- interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24> [ multipoint | point-to-point ]
  - Tunnel <0-2147483647>
  - Vlan <1-1005>
  - range
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24> [ multipoint | point-to-point ]
    - Vlan <1-1005>
- ip
  - access-list
    - extended
      - <100-199>
      - WORD
    - standard
      - <1-99>
      - WORD
  - default-network A.B.C.D
  - dhcp
    - excluded-address A.B.C.D [ A.B.C.D ]
    - pool WORD
  - domain-lookup
  - domain-name WORD
  - host WORD A.B.C.D [ A.B.C.D ] [ A.B.C.D ]
  - inspect
    - alert-off
    - audit-trail
    - dns-timeout <1-2147483>
    - max-incomplete [ high | low ] <1-2147483647>
    - name WORD [ protocol ]
      - alert [ off | on ]
      - audit-trail [ off | on ]
      - timeout <5-43200>
    - one-minute [ high | low ] <1-2147483647>
    - tcp [ finwait-time | idle-time | synwait-time ] <1-2147483>
    - udp idle-time <1-2147483>
  - ips
    - config location [ WORD [ retries <1-5>] ]
    - fail closed
    - name WORD [ list [ <1-199> | WORD ] ]
    - notify log
    - signature-category
    - signature-definition
  - local pool WORD A.B.C.D A.B.C.D
  - name-server [A.B.C.D] [X:X:X:X::X]
  - nat
    - inside source
      - list [ <1-199> | WORD ] interface [ Ethernet | FastEthernet | GigabitEthernet | Serial ] <0-9>/<0-24>[ . ][ <0-4294967295> ] [ overload ]
      - list [ <1-199> | WORD ] pool WORD [ overload ]
      - static
        - A.B.C.D A.B.C.D
        - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
        - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
    - outside source
      - list [ <1-199> | WORD ] pool WORD
      - static
        - A.B.C.D A.B.C.D
        - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
        - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
    - pool WORD A.B.C.D A.B.C.D netmask A.B.C.D
  - route A.B.C.D A.B.C.D
    - A.B.C.D [ <1-255> ]
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
    - Loopback <0-2147483647> [ <1-255> ]
    - Serial <0-9>/<0-24> [ <1-255> ]
    - Vlan <1-1005> [ <1-255> ]
  - ssh version <1-2>
- ipv6
  - general-prefix prefix-name
    - ipv6-prefix/prefix-length
  - neighbor X:X:X:X::X
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] H.H.H
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] H.H.H
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] H.H.H
    - Loopback <0-2147483647> H.H.H
    - Serial <0-9>/<0-24> H.H.H
    - Vlan <1-1005> H.H.H
  - unicast-routing
  - route X:X:X:X::X/<0-128>
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
    - Loopback <0-2147483647> [ <1-254> ]
    - Serial <0-9>/<0-24> [ <1-254> ]
    - Vlan <1-1005> [ <1-254> ]
    - X:X:X:X::X [ <1-254> ]
  - router
    - eigrp <1-65535>
    - ospf <1-65535>
    - rip WORD
  - dhcp pool WORD
  - access-list WORD
  - nat
    - prefix X:X:X:X::X/<0-128>
    - v4v6
      - pool WORD X:X:X:X::X X:X:X:X::X
      - source A.B.C.D X:X:X:X::X
      - source list WORD [pool] WORD
    - v6v4
      - pool WORD A.B.C.D A.B.C.D
      - source X:X:X:X::X A.B.C.D
      - source list WORD [pool WORD | interface] [overload]
  - host WORD X:X:X:X::X [X:X:X:X::X] [X:X:X:X::X]
- line
  - <0-81> [ <1-81> ]
  - console <0-0>
  - vty <0-15> [ <1-15> ]
- logging
  - A.B.C.D
  - buffered <4096-2147483647>
  - console
  - host A.B.C.D
  - on
  - trap [ debugging ]
  - userinfo
- login

- block-for <1-65535> attempts <1-65535> within <1-65535>
- on-failure [ log | trap ]
- on-success [ log | trap ]

- mac-address-table static H.H.H interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
- no
  - aaa
    - authentication
      - enable default
        - enable
        - group [ radius | tacacs+ ]
        - local
        - none
    - authorization
      - [ exec | network ] [ WORD | default ]
        - group [ radius | tacacs+ ]
        - if-authenticated
        - local
        - none
    - new-model
  - access-list [ <1-99> | <100-199> ]
  - banner [login | motd]
  - boot system flash WORD
  - cdp run
  - class-map [ type inspect ] [ match-all | match-any ] WORD
  - clock timezone
  - config-register
  - crypto
    - dynamic-map WORD <1-65535> [ ipsec-isakmp ]
    - ipsec
      - security-association lifetime seconds <120-86400>
      - transform-set WORD [ ah-md5-hmac | ah-sha-hmac ]
        - esp-3des [ esp-md5-hmac | esp-sha-hmac ]
        - esp-aes [ 128 | 192 | 256 ] [ esp-md5-hmac | esp-sha-hmac ]
        - esp-des [ esp-md5-hmac | esp-sha-hmac ]
        - esp-md5-hmac
        - esp-sha-hmac
    - isakmp
      - client configuration group WORD
      - key WORD address A.B.C.D [ A.B.C.D ]
      - policy <1-10000>
    - map WORD
      - <1-65535> [ ipsec-isakmp ] [dynamic WORD ]
      - client [ authentication list WORD | configuration address respond ]
      - isakmp authorization list WORD
  - enable
    - password
      - 7 WORD
      - level <1-15>
    - secret
      - level <1-15>
  - hostname
  - interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - Vlan <1-1005>
  - ip
    - access-list
      - extended [ <100-199> | WORD ]
      - standard [ <1-99> | WORD ]
    - default-network A.B.C.D
    - dhcp
      - excluded-address A.B.C.D [ A.B.C.D ]
      - pool WORD
    - domain-lookup
    - domain-name
    - host WORD [ A.B.C.D ] [ A.B.C.D ] [ A.B.C.D ]
    - inspect
      - alert-off
      - audit-trail
      - dns-timeout <1-2147483>
      - max-incomplete [ high | low ] <1-2147483647>
      - name WORD [ protocol ]
        - alert [ off | on ]
        - audit-trail [ off | on ]
        - timeout <5-43200>
      - one-minute [ high | low ] <1-2147483647>
      - tcp [ finwait-time | idle-time | synwait-time ] <1-2147483>
      - udp idle-time <1-2147483>
    - ips
      - config location [ WORD [ retries <1-5>] ]
      - fail closed
      - name WORD [ list [ <1-199> | WORD ] ]
      - notify log
      - signature-category
    - local pool WORD A.B.C.D A.B.C.D
    - name-server
    - nat
      - inside source
        - list [ <1-199> | WORD ]
        - static
          - A.B.C.D A.B.C.D
          - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
          - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
      - outside source
        - list [ <1-199> | WORD ] pool WORD
        - static
          - A.B.C.D A.B.C.D
          - tcp A.B.C.D <1-65535> A.B.C.D <1-65535>
          - udp A.B.C.D <1-65535> A.B.C.D <1-65535>
      - pool WORD
    - route A.B.C.D A.B.C.D
      - <1-255>
      - A.B.C.D [ <1-255> ]
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-255> ]
      - Loopback <0-2147483647> [ <1-255> ]
      - Serial <0-9>/<0-24> [ <1-255> ]
      - Vlan <1-1005> [ <1-255> ]
    - ssh version
  - ipv6
    - dhcp pool WORD
    - general-prefix prefix-name
      - ipv6-prefix/prefix-length
    - access-list WORD
    - nat
      - prefix X:X:X:X::X/<0-128>
      - v4v6
        - pool WORD X:X:X:X::X X:X:X:X::X
        - source A.B.C.D X:X:X:X::X
        - source list WORD [pool] WORD
      - v6v4
        - pool WORD A.B.C.D A.B.C.D
        - source X:X:X:X::X A.B.C.D
        - source list WORD [pool WORD | interface] [overload]
    - neighbor X:X:X:X::X
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
      - Vlan <1-1005>
    - route X:X:X:X::X/<0-128>
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] [ <1-254> ]
      - Loopback <0-2147483647> [ <1-254> ]
      - Serial <0-9>/<0-24> [ <1-254> ]
      - Vlan <1-1005> [ <1-254> ]
      - X:X:X:X::X [ <1-254> ]
    - router
      - eigrp <1-65535>
      - ospf <1-65535>
      - rip WORD
    - unicast-routing
    - host WORD
  - logging
    - A.B.C.D
    - buffered
    - console
    - host A.B.C.D
    - on
    - trap [ debugging ]
    - userinfo
  - mac-address-table static H.H.H int
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ] vlan <1-1005>
  - ntp
    - authenticate
    - authentication-key <1-4294967295>
    - server A.B.C.D
    - trusted-key <1-4294967295>
    - update-calendar
  - parser view WORD
  - policy-map [ type inspect ] WORD
  - priority-list <1-16>
    - default
    - protocol
      - ip [ high | low | medium | normal ] [ list <1-199> | tcp <0-65535> | udp <0-65535> ]
      - ipv6 [ high | low | medium | normal ]
    - queue-limit
  - privilege [ configure | exec | interface | line | router ] [ all ] [ level <0-15> ] LINE
  - queue-list <1-16>
    - default
    - protocol
      - ip <0-16>
        - list [ <1-199> | <1300-2699> ]
        - tcp <0-65535>
        - udp <0-65535>
      - ipv6 <0-16>
    - queue <0-16>
      - byte-count <1-16777215> [ limit <0-32767> ]
      - limit <0-32767> [ byte-count <1-16777215> ]
  - router
    - bgp <1-65535>
    - eigrp <1-65535>
    - ospf <1-65535>
    - rip
  - service
    - nagle
    - password-encryption
    - timestamps [ debug | log ] datetime msec
  - snmp-server [ community WORD [ ro | rw ] ]
  - spanning-tree vlan <1-1005> priority
  - tacacs-server
    - host A.B.C.D
      - key LINE
      - single-connection key LINE
    - key LINE
  - username WORD
  - zone security WORD
  - zone-pair security WORD source [ WORD | self ] destination [ WORD | self ]
- ntp
  - authenticate
  - authentication-key <1-4294967295> md5 WORD [ <0-4294967295> ]
  - server A.B.C.D [ key <0-4294967295> ]
  - trusted-key <1-4294967295>
  - update-calendar
- parser view WORD
- policy-map [ type inspect ] WORD
- priority-list <1-16>
  - default [ high | low | medium | normal ]
  - protocol
    - ip [ high | low | medium | normal ] [ list <1-199> | tcp <0-65535> | udp <0-65535> ]
    - ipv6 [ high | low | medium | normal ]
  - queue-limit <0-32767> <0-32767> <0-32767> <0-32767>
- privilege [ configure | exec | interface | line | router ] [ all ] [ level <0-15> | reset ] LINE
- queue-list <1-16>
  - default <0-16>
  - protocol
    - ip <0-16>
      - list [ <1-199> | <1300-2699> ]
      - tcp <0-65535>
      - udp <0-65535>
    - ipv6 <0-16>
  - queue <0-16>
    - byte-count <1-16777215> [ limit <0-32767> ]
    - limit <0-32767> [ byte-count <1-16777215> ]
- router
  - bgp <1-65535>
  - eigrp <1-65535>
  - ospf <1-65535>
  - rip
- secure [ boot-config | boot-image ]
- security passwords min-length <0-16>
- service
  - nagle
  - password-encryption
  - timestamps [ debug | log ] datetime msec
- snmp-server community WORD [ ro | rw ]
- spanning-tree vlan <1-1005> priority <0-61440>
- tacacs-server
  - host A.B.C.D
    - key LINE
    - single-connection key LINE
  - key LINE
- telephony-service
- username WORD [ privilege <0-15> ]
  - password
    - 0 LINE
    - 7 WORD
    - LINE
  - secret
    - 0 LINE
    - 5 WORD
    - LINE
- vpdn enable
- vpdn-group WORD
- zone security WORD
- zone-pair security WORD source [ WORD | self ] destination [ WORD | self ]

Standard Access List Configuration Mode

- default
  - deny
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
  - permit
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
- deny
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- exit
- no
  - deny
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
  - permit
    - A.B.C.D [ A.B.C.D ]
    - any
    - host A.B.C.D
- permit
  - A.B.C.D [ A.B.C.D ]
  - any
  - host A.B.C.D
- remark LINE

Extended Access List Configuration Mode

- default
  - [ deny | permit ] [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
- deny
  - [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
- exit
- no
  - [ deny | permit ] [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ deny | permit ] [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
- permit
  - [ icmp | ip ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ]
  - [ tcp | udp ] [ A.B.C.D A.B.C.D | any | host A.B.C.D ] [ A.B.C.D A.B.C.D | any | eq <0-65535> | host A.B.C.D | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ] [ eq <0-65535> | gt <0-65535> | lt <0-65535> | neq <0-65535> | range <0-65535> <0-65535> ]
- remark LINE

Ethernet / FastEthernet / GigabitEthernet Interface Mode

- arp timeout <0-2147483>
- bandwidth <1-10000000>
- cdp enable
- crypto map WORD
- custom-queue-list <1-16>
- delay <1-16777215>
- description LINE
- duplex [ auto | full | half ]
- exit
- fair-queue [ <16-4096> ] [ <16-4096> ] [ <0-1000> ]
- hold-queue <0-4096> out
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address
    - A.B.C.D A.B.C.D
    - dhcp
  - hello-interval eigrp <1-65535> <1-65535>
  - inspect WORD [ in | out ]
  - ips WORD [ in | out ]
  - mtu <68-1500>
  - nat [ inside | outside ]
  - ospf
    - authentication [ message-digest | null ]
    - authentication-key LINE
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - message-digest-key <1-255> md5 LINE
    - priority <0-255>
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
  - virtual-reassembly
- ipv6
  - address
    - autoconfig
    - ipv6-prefix/prefix length
      - anycast
      - eui-64
    - ipv6-address
      - linklocal
    - prefix-name ipv6-prefix/prefix-length
  - enable
  - rip WORD
    - default-information originate
    - enable
  - eigrp <1-65535>
  - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
  - hello-interval eigrp <1-65535> <1-65535>
  - ospf
    - <1-65535> area area-id [instance instance-id]
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - priority <0-255>
  - dhcp
    - client pd WORD
    - server WORD
  - nat
    - prefix X:X:X:X::X/<0-128> [v4-mapped] [WORD]
  - mtu <1280-1500>
- mac-address H.H.H
- mtu <64-1600>
- no
  - arp timeout
  - bandwidth
  - cdp enable
  - crypto map [ WORD ]
  - custom-queue-list <1-16>
  - delay
  - description
  - duplex
  - fair-queue [ <16-4096> ] [ <16-4096> ] [ <0-1000> ]
  - hold-queue [ <0-4096> ] out
  - ip
    - access-group [ <1-199> | WORD ] [ in | out ]
    - address [ dhcp ]
    - hello-interval eigrp <1-65535>
    - inspect WORD [ in | out ]
    - ips WORD [ in | out ]
    - mtu <68-1500>
    - nat [ inside | outside ]
    - ospf
      - authentication
      - authentication-key
      - cost
      - dead-interval
      - hello-interval
      - message-digest-key <1-255>
      - priority
    - split-horizon
    - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
    - virtual-reassembly
  - ipv6
    - address
      - autoconfig
      - ipv6-prefix/prefix length
        - anycast
        - eui-64
      - ipv6-address
        - linklocal
      - prefix-name ipv6-prefix/prefix-length
    - dhcp
      - client pd WORD
      - server WORD
    - eigrp <1-65535>
    - ospf
      - <1-65535> area area-id [instance instance-id]
      - cost <1-65535>
      - dead-interval <1-65535>
      - hello-interval <1-65535>
      - priority <0-255>
    - summary-address eigrp <1-65535> X:X:X:X::X/<0-128> [ <1-255> ]
    - hello-interval eigrp <1-65535> <1-65535>
    - nat
    - rip WORD
      - default-information originate
      - enable
  - mac-address
  - mtu
  - pppoe enable
  - priority-group
  - service-policy [ input | output ] WORD
  - shutdown
  - speed
  - tx-ring-limit
  - zone-member security WORD
- pppoe enable
- priority-group <1-16>
- service-policy [ input | output ] WORD
- shutdown
- speed [ 10 | 100 | 1000 | auto ] (10/100 options are only available for FastEthernet and GigabitEthernet interfaces and 10/100/1000 options are only available for GigabitEthernet interfaces respectively)
- tx-ring-limit <1-32767>
- zone-member security WORD

Ethernet / FastEthernet / GigabitEthernet Sub-Interface Mode

- arp timeout <0-2147483>
- bandwidth <1-10000000>
- delay <1-16777215>
- description LINE
- encapsulation dot1Q <1-1005> [ native ]
- exit
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address
    - A.B.C.D A.B.C.D
    - dhcp
  - hello-interval eigrp <1-65535> <1-65535>
  - nat [ inside | outside ]
  - ospf
    - authentication [ message-digest | null ]
    - authentication-key LINE
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - message-digest-key <1-255> md5 LINE
    - priority <0-255>
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- no
  - arp timeout
  - bandwidth
  - delay
  - description
  - encapsulation dot1Q
  - ip
    - access-group [ <1-199> | WORD ] [ in | out ]
    - address [ dhcp ]
    - hello-interval eigrp <1-65535>
    - nat [ inside | outside ]
    - ospf
      - authentication
      - authentication-key
      - cost
      - dead-interval
      - hello-interval
      - message-digest-key <1-255>
      - priority
    - split-horizon
    - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
  - shutdown
- shutdown

Serial Interface Mode

- bandwidth <1-10000000>
- cdp enable
- clock rate <1200-4000000> (only certain clock rates that are listed are valid)
- crypto map WORD
- custom-queue-list <1-16>
- delay <1-16777215>
- description LINE
- encapsulation
  - hdlc
  - ppp
  - frame-relay [ ietf ]
- exit
- fair-queue [ <16-4096> ] [ <16-4096> ] [ <0-1000> ]
- frame-relay
  - interface-dlci <16-1007>
  - lmi-type [ ansi | cisco | q933a ]
  - map ip A.B.C.D <16-1007>
    - broadcast [ cisco | ietf ]
    - cisco [ broadcast ]
    - ietf [ broadcast ]
- hold-queue <0-4096> out
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address A.B.C.D A.B.C.D
  - hello-interval eigrp <1-65535> <1-65535>
  - inspect WORD [ in | out ]
  - ips WORD [ in | out ]
  - mtu <68-1500>
  - nat [ inside | outside ]
  - ospf
    - authentication [ message-digest | null ]
    - authentication-key LINE
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - message-digest-key <1-255> md5 LINE
    - priority <0-255>
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
  - virtual-reassembly
- keepalive <0-30>
- mtu <64-17940>
- no
  - bandwidth <1-10000000>
  - cdp enable
  - clock rate
  - crypto map [ WORD ]
  - custom-queue-list <1-16>
  - delay
  - description
  - encapsulation
  - fair-queue [ <16-4096> ] [ <16-4096> ] [ <0-1000> ]
  - frame-relay
    - interface-dlci <16-1007>
    - lmi-type [ ansi | cisco | q933a ]
    - map ip A.B.C.D
  - hold-queue [ <0-4096> ] out
  - ip
    - access-group [ <1-199> | WORD ] [ in | out ]
    - address [ dhcp ]
    - hello-interval eigrp <1-65535>
    - inspect WORD [ in | out ]
    - ips WORD [ in | out ]
    - mtu <68-1500>
    - nat [ inside | outside ]
    - ospf
      - authentication
      - authentication-key
      - cost
      - dead-interval
      - hello-interval
      - message-digest-key <1-255>
      - priority
    - split-horizon
    - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
    - virtual-reassembly
  - keepalive
  - mtu
  - ppp
    - authentication
    - pap sent-username
  - priority-group <1-16>
  - service-policy [ input | output ] WORD
  - shutdown
  - speed
  - tx-ring-limit
  - zone-member security WORD
- ppp
  - authentication chap [ pap ]
  - authentication pap [ chap ]
- priority-group <1-16>
- service-policy [ input | output ] WORD
- shutdown
- tx-ring-limit <1-32767>
- zone-member security WORD

Tunnel Interface Mode

- exit
- ip address A.B.C.D A.B.C.D
- no
  - ip address [ A.B.C.D A.B.C.D ]
  - shutdown
  - tunnel [ destination | source ]
- shutdown
- tunnel
  - destination A.B.C.D
  - source
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>

VLAN Interface Mode

- arp timeout <0-2147483>
- bandwidth <1-10000000>
- delay <1-16777215>
- description LINE
- exit
- ip
  - access-group [ <1-199> | WORD ] [ in | out ]
  - address
    - A.B.C.D A.B.C.D
    - dhcp
  - hello-interval eigrp <1-65535> <1-65535>
  - nat [ inside | outside ]
  - ospf
    - authentication [ message-digest | null ]
    - authentication-key LINE
    - cost <1-65535>
    - dead-interval <1-65535>
    - hello-interval <1-65535>
    - message-digest-key <1-255> md5 LINE
    - priority <0-255>
  - split-horizon
  - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
- mac-address H.H.H
- no
  - arp timeout
  - bandwidth
  - delay
  - description
  - ip
    - access-group [ <1-199> | WORD ] [ in | out ]
    - address [ dhcp ]
    - hello-interval eigrp <1-65535>
    - nat [ inside | outside ]
    - ospf
      - authentication
      - authentication-key
      - cost
      - dead-interval
      - hello-interval
      - message-digest-key <1-255>
      - priority
    - split-horizon
    - summary-address eigrp <1-65535> A.B.C.D A.B.C.D [ <1-255> ]
  - mac-address
  - shutdown
- shutdown

VLAN Configuration Mode

- exit
- no
  - vlan <1-1005>
  - vtp
    - client
    - password
    - transparent
    - v2-mode
- vlan <1-1005> [ name ] [ WORD ]
- vtp
  - client
  - domain WORD
  - password WORD
  - server
  - transparent
  - v2-mode

Line Configuration Mode

- access-class [ <1-199> | <1300-2699> | WORD ] [ in | out ]
- databits [ 5 | 6 | 7 | 8 ]
- default [ databits | flowcontrol | history size | parity | speed | stopbits ]
- exit
- exec-timeout <0-35791> [<0-2147483>]
- flowcontrol [ NONE | hardware | software ]
- history size <0-256>
- ipv6 access-class WORD [in | out]
- logging synchronous
- login
  - authentication [ WORD | default ]
  - local
- motd-banner
- no
  - [ access-class [ <1-199> | <1300-2699> | WORD ] [ in | out ] | databits | flowcontrol | history size | login | motd-banner | parity | password | session-limit | speed | stopbits ]
  - databits
  - exec-timeout
  - flowcontrol
  - history size
  - ipv6 access-class WORD [in | out]
  - logging synchronous
  - motd-banner
  - parity
  - password
  - privilege level
  - session-limit
  - speed
  - stopbits
  - transport output
- parity [ even | mark | none | odd | space ]
- password
  - 7 WORD
  - LINE
- privilege level <0-15>
- session-limit <0-4294967295>
- speed <0-4294967295>
- stopbits [ 1 | 1.5 | 2 ]
- transport output [ all | none | ssh | telnet ]

Class-Map Configuration Mode

- description LINE
- exit
- match
  - access-group <1-2699>
  - any
  - class-map WORD
  - cos <0-7>
  - destination-address mac H.H.H
  - input-interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
  - ip
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - not
    - access-group <1-2699>
    - class-map WORD
    - cos <0-7>
    - destination-address mac H.H.H
    - input-interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
    - ip
      - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
      - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - protocol [ arp | cdp | dhcp | dns | eigrp | ftp | http | icmp | ip | ipsec | ipv6 | ospf | rip | ssh | tcp | telnet | tftp ]
    - qos-group <0-1023>
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - protocol
    - arp
    - bgp
    - cdp
    - dhcp
    - dns
    - eigrp
    - ftp
    - gre
    - h323
    - http [ host WORD | mime WORD | url WORD ]
    - icmp
    - ip
    - ipsec
    - ipv6
    - ntp
    - ospf
    - pop3
    - rtp
    - skinny
    - smtp
    - snmp
    - rip
    - ssh
    - syslog
    - tcp
    - telnet
    - tftp
    - udp
  - qos-group <0-1023>
- no
  - description [ LINE ]
  - match
    - access-group <1-2699>
    - any
    - class-map WORD
    - cos <0-7>
    - destination-address mac H.H.H
    - input-interface
      - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
      - Loopback <0-2147483647>
      - Serial <0-9>/<0-24>
    - ip
      - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
      - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - not
      - access-group <1-2699>
      - class-map WORD
      - cos <0-7>
      - destination-address mac H.H.H
      - input-interface
        - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
        - Loopback <0-2147483647>
        - Serial <0-9>/<0-24>
      - ip
        - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
        - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
      - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
      - protocol
        - arp
        - bgp
        - cdp
        - dhcp
        - dns
        - eigrp
        - ftp
        - gre
        - h323
        - http [ host WORD | mime WORD | url WORD ]
        - icmp
        - ip
        - ipsec
        - ipv6
        - ntp
        - ospf
        - pop3
        - rtp
        - skinny
        - smtp
        - snmp
        - rip
        - ssh
        - syslog
        - tcp
        - telnet
        - tftp
        - udp
      - qos-group <0-1023>
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
    - protocol [ arp | cdp | dhcp | dns | eigrp | ftp | http | icmp | ip | ipsec | ipv6 | ospf | rip | ssh | tcp | telnet | tftp ]
    - qos-group <0-1023>

Policy-Map Configuration Mode

- class [ type inspect ] [ WORD | class-default ]
- exit
- no
  - class [ type inspect ] [ WORD | class-default ]

Policy-Map Class Configuration Mode

- bandwidth [ <8-2000000> | percent <1-100> | remaining percent <1-100> ]
- drop
- exit
- fair-queue [ <16-4096> ]
- inspect
- no
  - bandwidth
  - drop
  - fair-queue
  - inspect
  - pass
  - priority
  - random-detect
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - dscp-based
    - prec-based
    - precedence <0-7>
  - service-policy WORD
  - set
    - ip
      - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
    - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
  - shape average
- pass
- priority [ <8-2000000> | percent <1-100> ] [ <32-2000000> ]
- queue-limit <1-4096>
- random-detect
  - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ] <1-4096> <1-4096> [ <1-65535> ]
  - dscp-based
  - prec-based
  - precedence <0-7> <1-4096> <1-4096> [ <1-65535> ]
- service-policy WORD
- set
  - ip
    - dscp [ <0-63> | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef ]
  - precedence [ <0-7> | critical | flash | flash-override | immediate | internet | network | priority | routine ]
- shape average <8000-154400000>

Zone Security Configuration Mode

- exit

Zone-Pair Security Configuration Mode

- exit
- no
  - service-policy type inspect WORD
- service-policy type inspect WORD

Crypto Map Configuration Mode

- description LINE
- exit
- match address [ <100-199> | WORD ]
- no
  - match address
  - set
    - peer A.B.C.D
    - pfs [ group1 | group2 | group5 ]
    - security-association lifetime seconds
    - transform-set
- set
  - peer A.B.C.D
  - pfs [ group1 | group2 | group5 ]
  - security-association lifetime seconds <120-86400>
  - transform-set WORD [ WORD ] [ WORD ] [ WORD ] [ WORD ] [ WORD ]

ISAKMP Configuration Mode

- authentication pre-share
- encryption [ 3des | aes [ 128 | 192 | 256 ] | des ]
- exit
- group [ 1 | 2 | 5 ]
- hash [ md5 | sha ]
- lifetime <60-86400>
- no
  - authentication pre-share
  - encryption [ 3des | aes [ 128 | 192 | 256 ] | des ]
  - group [ 1 | 2 | 5 ]
  - hash [ md5 | sha ]
  - lifetime <60-86400>

IPS Signature Category Configuration Mode

- category [ all | ios_ips basic ]
- exit
- no
  - category [ all | ios_ips basic ]

IPS Signature Category Action Configuration Mode

- exit
- no
  - retired [ false | true ]
- retired [ false | true ]

IPS Signature Definition Configuration Mode

- exit
- retired <1-65535> [ <0-65535> ]

IPS Signature Definition Sig Configuration Mode

- engine
- exit
- status

IPS Signature Definition Sig Engine Configuration Mode

- event-action [ deny-packet-inline | produce-alert ]
- exit
- no
  - event-action [ deny-packet-inline | produce-alert ]

IPS Signature Definition Sig Status Configuration Mode

- enabled [ false | true ]
- exit
- no
  - enabled [ false | true ]
  - retired [ false | true ]
- retired [ false | true ]

Parser View Configuration Mode

- commands [ configure | exec | interface | line | router ] include [ all ] LINE
- exit
- no
  - commands [ configure | exec | interface | line | router ] include [ all ] LINE
  - secret
- secret [ 0 | 5 ] LINE

Router Bgp Mode

- bgp
  - log-neighbor-changes
  - redistribute-internal
  - router-id A.B.C.D
- exit
- neighbor
  - neighbor A.B.C.D next-hop-self
  - neighbor A.B.C.D remote-as <1-65535>
- network
  - network network A.B.C.D
  - network A.B.C.D mask A.B.C.D
- no
  - neighbor
    - neighbor A.B.C.D next-hop-self
    - neighbor A.B.C.D remote-as <1-65535>
  - network
    - network network A.B.C.D
    - network A.B.C.D mask A.B.C.D
  - redistribute
    - connected
    - eigrp <1-65535>
    - ospf <1-65535>
    - static
  - synchronization
  - timers bgp <0-65535> <0-65535
- redistribute
  - connected
  - eigrp <1-65535>
  - ospf <1-65535>
  - static
- synchronization
- timers bgp <0-65535> <0-65535>

Router EIGRP Mode

- auto-summary
- exit
- metric weights <0-8> <0-256> <0-256> <0-256> <0-256> <0-256>
- network A.B.C.D [ A.B.C.D ]
- redistribute
  - connected [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
  - eigrp <1-65535> [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
  - rip [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
  - static [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
  - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
- no
  - auto-summary
  - metric weights
  - network A.B.C.D [ A.B.C.D
  - redistribute
    - connected [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
    - eigrp <1-65535> [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
    - rip [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
    - static [metric <1-4294967295> <0-4294967295> <0-255> <1-255> <1-65535>]
    - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external } ] [ metric bandwidth delay reliability effective BW MTU ]
  - passive-interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - default
  - variance <1-128>
- passive-interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - default
- variance <1-128>

IPv6 Router Eigrp Mode

- router-id A.B.C.D
- metric weights <0-8> <0-255> <0-255> <0-255> <0-255> <0-255>
- shutdown
- no
  - router-id
  - metric weights <0-8> <0-255> <0-255> <0-255> <0-255> <0-255>
  - shutdown

Router OSPF Mode

- area
  - [ <0-4294967295> | A.B.C.D ] authentication [ message-digest ]
  - [ <0-4294967295> | A.B.C.D ] nssa [no-summary]
  - [ <0-4294967295> | A.B.C.D ] virtual-link A.B.C.D
- default-information originate
- exit
- log-adjacency-changes [ detail ]
- network A.B.C.D A.B.C.D area [ <0-4294967295> | A.B.C.D ]
- redistribute
  - connected [metric <0-16777214>] [subnets]
  - eigrp <1-65535> [metric <0-16777214>] [subnets]
  - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external } ] [ metric ospf-default-metric ] [subnets]
  - rip [metric <0-16777214>] [subnets]
  - static [metric <0-16777214>] [subnets]
- no
  - area
    - [ <0-4294967295> | A.B.C.D ] authentication [ message-digest ]
    - [ <0-4294967295> | A.B.C.D ] nssa [no-summary]
    - [ <0-4294967295> | A.B.C.D ] virtual-link A.B.C.D
  - default-information
  - log-adjacency-changes [ detail ]
  - network A.B.C.D A.B.C.D area [ <0-4294967295> | A.B.C.D ]
  - redistribute
    - connected [metric <0-16777214>] [subnets]
    - eigrp <1-65535> [metric <0-16777214>] [subnets]
    - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external } ] [ metric ospf-default-metric ] [subnets]
    - rip [metric <0-16777214>] [subnets]
    - static [metric <0-16777214>] [subnets]
  - passive-interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - default
- passive-interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - default

IPv6 Router Ospf Mode

- router-id A.B.C.D
- area area-id
  - default-cost <0-16777215>
  - nssa [no-summary]
  - stub [no-summary]
  - virtual-link A.B.C.D
- log-adjacency-changes [ detail ]
- passive-interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - default
- no
  - log-adjacency-changes [ detail ]
  - passive-interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - default

Router RIP Mode

- auto-summary
- default-information originate
- distance <1-255>
- exit
- network A.B.C.D
- redistribute
  - connected [metric [<0-16> | transparent]]
  - eigrp <1-65535> [metric [<0-16> | transparent]]
  - static [metric [<0-16> | transparent]]
  - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external }] [ metric default-metric ]
- no
  - auto-summary
  - default-information
  - distance <1-255>
  - network A.B.C.D
  - redistribute
    - connected [metric [<0-16> | transparent]]
    - eigrp <1-65535> [metric [<0-16> | transparent]]
    - static [metric [<0-16> | transparent]]
    - ospf <1-65535> [ match { external [1 | 2] | internal | nssa-external }] [ metric default-metric ]
  - passive-interface
    - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
    - Loopback <0-2147483647>
    - Serial <0-9>/<0-24>
    - default
  - timers basic
  - version <1-2>
- passive-interface
  - Ethernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - FastEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - GigabitEthernet <0-9>/<0-24>[ . ][ <0-4294967295> ]
  - Loopback <0-2147483647>
  - Serial <0-9>/<0-24>
  - default
- timers basic <0-4294967295> <1-4294967295> <0-4294967295> <1-4294967295>
- version <1-2>

IPv6 Router RIP Mode

- distance <1-254>
- no distance

DHCP Pool Configuration Mode

- default-router A.B.C.D
- dns-server A.B.C.D
- exit
- network A.B.C.D A.B.C.D
- no dns-server

IPv6 DHCP Pool Configuration Mode

- prefix-delegation
  - X:X:X:X::X/<0-128> WORD [lifetime] <60-4294967295>
  - pool WORD [lifetime] <60-4294967295>
- dns-server X:X:X:X::X
- exit
- no
  - prefix-delegation
    - X:X:X:X::X/<0-128> WORD [lifetime] <60-4294967295>
    - pool WORD [lifetime] <60-4294967295>

Rommon Mode

- boot
- confreg config-register-number
- dir flash:
- help
- reset
- set
- tftpdnld
- unset variable
- variable=value