Chapter 1-10

Commands:

Chapter 1: Overview of the Campus Network and Design Models

There are no commands for this chapter.

Chapter 2: LAN Media

There are no commands for this chapter.

Chapter 3: Configuring the Switch

3.2.1 Clearing a configuration and Cisco 2900 Series

IOS

Switch#show running-config

Switch#erase startup-config

Switch#copy running-config startup-config

CLI

Switch> (enable) clear config all

 

3.2.2 Setting a password

IOS

Set EXEC level password
Switch(config)#enable password level 1 password

Set privileged level password
Switch(config)#enable password level 15 password

Switch(config)#enable secret password

CLI

Set privileged level password
Switch> (enable) set enablepass

vty and con passwords
Switch> (enable) set password

 

3.2.3 Naming the switch

IOS

Switch(config)#hostname hostname

CLI

Switch> (enable) set system name name-string

Switch> (enable) set prompt name

 

3.2.4 Configuring the switch for remote access

IOS

The switch in-band management, management vlan
Switch(config)#interface vlan 1

Switch(config-if)#ip address ip-address netmask

Switch(config-if)#ip default-gateway ip-address

Switch#show ip interface

CLI

The switch in-band management, management vlan
Switch> (enable) set interface sc0 up

Switch> (enable) set interface sc0 ip-address netmask broad

Switch> (enable) set interface sc0 vlan

Switch> (enable) set ip route default gateway-address

Switch> (enable) show interface

 

3.2.5 Identifying individual ports

IOS

Switch(config-if)#description description-string

CLI

Switch> (enable) set port name mod/num description

Switch> (enable) show port name mod/num

 

3.2.6 Defining link speed

IOS

Switch(config-if)#speed [10 | 100 | auto]

CLI

Switch> (enable) set port speed mod/num [10 | 100 | auto]

 

3.2.7 Defining line mode on a switch

IOS

Switch(config-if)#uplex [auto | full | half]

CLI

Switch> (enable) set port duplex mod/num [auto | full | half]

Switch> (enable) set port enable mod/num

 

3.3.1 Command-line recall

history

 

3.3.3 Show commands

IOS

Switch#show running-config

Switch#show ip interface

CLI

Switch> (enable) show config [all]

Switch> (enable) show interface

Switch> (enable) show module

 

3.3.5 Setting idle timeout

IOS

Switch(config-line)#exec-timeout minutes

CLI

Switch> (enable) set logout minutes

 

3.3.6 Verifying connectivity

IOS

Switch#ping ip-address

CLI

Switch> (enable) ping ip-address

 

3.3.7 Backup and restoration of a configuration using a TFTP server

IOS

CLI

Switch> (enable) write net (upload)

Switch> (enable) configure net (download)

Switch> (enable) copy config [flash | file-id | tftp]

Switch> (enable) copy flash [flash | file-id | config

 

3.3.8 HTTP switch commands

IOS

CLI

Switch> (enable) set ip http server enable

Switch> (enable) set ip http port port-number default

Switch> (enable) set authentication login

Switch> (enable) show authentication

 

Chapter 4: Introduction to VLANs

4.3.1 Configuring static VLANs

IOS

Switch(config-if)#switchport mode [access | multi | trunk]

Switch(config-if)#switchport access vlan vlan-num

CLI

Switch> (enable) set vlan vlan-num mod/num,list

 

4.3.2 Verify VLAN configuration

IOS

Switch#show vlan brief

CLI

Switch> (enable) show vlan

 

4.3.3 Deleting VLANs

IOS

Switch(config-if)#no switchport access vlan vlan-num

CLI

Switch> (enable) clear vlan vlan

 

4.3.4 Configure the VMPS server

CLI

Switch> (config) set vmps state enable

Switch> (config) set vmps state disable

 

4.3.5 Configure a VMPS client

CLI

Switch> (enable) set vmps server ip-address [primary]

Switch> (enable) show vmps server

Switch> (enable) set port membership mod-num port-num {dynamic | static}

Switch> (enable) show port {mod-num/port-num}

 

4.5.2 Configuring a VLAN trunk

IOS

Switch(config-if)#switchport mode [access | multi | trunk]

Switch(config-if)#switchport trunk encapsulation {isl|dot1q}

CLI

Switch> (enable) set trunk mod/port [on | off |desirable | auto | nonegotiate] [isl | dot1q | dot10 | lane | negotiate] vlan-range

Switch> (enable) show port capabilities mod/num

 

4.5.3 Removing VLANs from a trunk

IOS

Switch(config-if)#switchport trunk allowed vlan remove vlan-list

CLI

Switch> (enable) clear trunk mod/port vlan-range

Switch> (enable) show trunk

 

4.7.2 Configure the VTP version

IOS

Switch(vlan)#vtp v2-mode

CLI

Switch> (enable) set vtp v2 enable (version 2)

 

4.7.3 Configure the VTP domain

IOS

Switch(vlan)#vtp domain domain-name

CLI

Switch> (enable) set vtp [domain domain-name]
     [mode {server | client | transparent}]
     [password password]

 

4.7.4 Configure the VTP mode

IOS

Switch(vlan)#vtp {server | client | transparent}

CLI

Switch> (enable) set vtp [domain domain-name]
     [mode {server | client | transparent}]
     [password password]

 

4.7.5 Verify VTP configuration

IOS

Switch#show vtp

Switch#show vtp status

Switch#show vtp counters

CLI

Switch> (enable) show vtp domain

Switch> (enable) show vtp statistics

Switch> (enable) show vlan

 

4.8.2 Configure VTP pruning

IOS

Switch(vlan)#vtp pruning

Switch(config-if)#switchport trunk pruning vlan remove vlan-list

CLI

Switch> (enable) set vtp pruning enable

Switch> (enable) set vtp pruneeligible vlan-range

Switch> (enable) clear vtp pruning vlan-range

 

4.8.3 Verify VTP pruning

IOS

Switch#show interface mod/num switchport

Switch#show vtp

Switch#show vtp status

Switch#show vtp counters

CLI

Switch> (enable) show trunk

Switch> (enable) show vtp domain

Switch> (enable) show vtp statistics

 

Chapter 5: Spanning Tree Protocol (STP) and Redundant Links

5.2.9 Enabling and verifying Spanning Tree

IOS

Switch(config)#spantree vlan-list

Switch(config)#no spantree vlan-list

Switch#show spanning-tree [vlan]

Switch#show spanning-tree mod/num

CLI

Switch> (enable) set spantree enable [all | mod/num]

Switch> (enable) set spantree disable [all | mod/num]

Switch> (enable) show spantree [vlan]

Switch> (enable) show spantree mod/num

 

5.4.1 Establishing a root bridge

IOS

Switch(config)#spanning-tree portfast

Switch(config)#spanning-tree [vlan vlan-list] priority prty

CLI

Switch> (enable) set spantree portfast [mod/num] [enable|disable]

Switch> (enable) set spantree root [secondary] [vlan-list] [dia diameter] [hello hellotime]

 

 

5.4.3 Configuring the root cost

IOS

Switch(config-if)#spanning-tree [vlan vlan-list] cost cost

CLI

Switch> (enable) set spantree portcost mod/num cost

Switch> (enable) set spantree portvlancost mod/num [cost cost] [vlan-list]

 

 

5.4.4 Modifying port priority

IOS

Switch(config-if)#spanning-tree [vlan vlan-list] port-priority port-priority

CLI

Switch> (enable) set spantree portpri mod/num cost

 

5.4.5 Modifying port priority by VLAN

IOS

Switch(config-if)#spanning-tree [vlan vlan-list] port-priority port-priority

CLI

Switch> (enable) set spantree portvlanpri mod/num priority vlan-list

 

5.4.6 Modifying STP timers

IOS

Switch(config)#spanning-tree [vlan vlan-list] [hello-time seconds]

Switch(config)#spanning-tree [vlan vlan-list] [forward-time seconds]

Switch(config)#spanning-tree [vlan vlan-list] [max-age seconds]

CLI

Switch> (enable) set spantree hello interval [vlan]

Switch> (enable) set spantree fwddelay delay [vlan]

Switch> (enable) set spantree maxage agingtime [vlan]

Switch> (enable) set spantree root [secondary] [vlan-list] [dia diameter] [hello hellotime]

 

 

5.5.3 EtherChannel rules of the road

IOS

CLI

Switch> (enable) set port channel

 

5.5.4 Configuring Fast EtherChannel

IOS

Switch(config-if)#port group group number distribution |destination / source|

CLI

Switch> (enable) show port capabilities [mod_num[/port_num]]

Switch> (enable) set port channel mod_num/ports on | off | auto | desirable.

 

5.5.5 Configuring PortFast

IOS

Switch(config)#spanning-tree portfast

CLI

Switch> (enable) set spantree portfast [mod/num] [enable|disable]

 

5.5.6 Configuring UplinkFast

IOS

Switch(config)#spanning-tree uplinkfast [max-update-rate pkts-per-sec]

CLI

Switch> (enable) set spantree uplinkfast [enable|disable] [rate update-rate] [all-protocols off | on]

 

5.5.7 Configuring BackboneFast

IOS

CLI

Switch> (enable) set spantree backbonefast [enable|disable]

Switch> (enable) show spantree backbonefast

 

Chapter 6: Routing between VLANs

6.2.1 Configuring inter-VLAN routing

IOS

CLI

Switch> (enable) show module mod-number

 

6.2.2 Accessing the RSM

Switch> (enable) session module-number

Router(config)#hostname name

Router#copy running-config startup-config

 

6.2.3 Configuring a routing protocol on the RSM

Router(config)#ip routing

Router(config)#router routing-protocol

Router(config-router)#network network

 

6.2.4 Configuring RSM interfaces

Router(config)#interface vlan-interface-number

Router(config-if)#ip address ip-address subnet-mask

Router(config)#interface port-channel channel_number

Router(config)#interface [g3 | g4]
Router(config-if)#channel-group channel_number

Router(config)#interface port-channel channel_number.vlan_id Router(config-subif)#encapsulation dot1Q vlan_id
Router(config-subif)#ip address ip_address subnet_mask

Router(config)#interface port-channel channel_number.vlan_id Router(config-subif)#encapsulation dot1Q vlan_id native Router(config-subif)#ip address ip_address subnet_mask

Switch> (enable) set port channel mod_num/ports on | off | auto | desirable.

Switch> (enable) set trunk mod_num/port_num

 

6.2.5 Configure a default gateway on a switch

IOS

Switch(config)#ip default-gateway ip-address

CLI

Switch> (enable) set ip route destination gateway metric

 

6.3.1 Configuring external routers

Router(config)#interface ethernet slot-number / port-number. subinterface-number

Router(config-if)#encapsulation isl vlan-number

Router(config-if)#ip address ip-address subnet-mask

 

Chapter 7: Multilayer Switching

7.1.4 Step 1: MLS packets are sent by the MLS-RP

Switch> (enable) show cam

 

7.1.8 Cache aging issues

Console> (enable) set mls agingtime [agingtime]

Console> (enable) set mls agingtime fast [fastagingtime] [pkt_threshold]

 

7.2.1 Configuring the route processor

Router(config)#mls rp ip

Router(config)#interface vlan vlan-number

Router(config-if)#mls rp vtp-domain domain-name

Router(config-if)#mls rp management-interface

 

7.2.2 Assigning an MLS to a VTP domain

Router(config)#interface ethernet 0

Router(config-if)#mls rp vlan-id vlan-id-num (Optional?)

Router(config-if)#mls rp vtp-domain domain-name

Router(config-if)#mls rp ip

 

7.2.3 Enabling MLS on an interface

Router(config-if)#mls rp ip

 

7.2.5 MLS management interface

Router(config-if)#mls rp management-interface

 

7.2.6 Assigning a VLAN ID to an interface on an external router

Router(config)#interface interface

Router(config-if)#mls rp vlan-id vlan-id-num

 

7.3.4 Input access lists and flow masks 

Router(config)#mls rp input-acl

 

7.4.1 Enabling and disabling MLS on a switch

Switch> (enable) set mls enable

Switch> (enable) set mls disable

 

7.4.2 Adding external router MLS identification 

Switch> (enable) set mls include ip-address

Switch> (enable) show mls rp

Switch> (enable) clear mls include

 

7.4.3 Verify MLS configuration 

Switch> (enable) show mls

Switch> (enable) show mls include

Switch> (enable) show mls entry source

Switch> (enable) show mls entry destination

Switch> (enable) show mls entry flow

Switch> (enable) show mls entry rp

Switch> (enable) clear mls entry source ip-address

Switch> (enable) clear mls entry destination ip-address

Switch> (enable) clear mls entry rp ip-address

Switch> (enable) clear mls entry flow protocol source-port destination-port

 

Chapter 8: Hot Standby Routing Protocol (HSRP)

8.1.4 The virtual router MAC address

Router#show ip arp

 

8.2.1 Configuring HSRP

Router(config-if)#standby group-num ip virtual-ip-add

 

8.2.2 HSRP standby priority

Router(config-if)#standby group-num priority priority

 

8.2.3 HSRP standby preempt

Router(config-if)#standby group-num preempt

 

8.2.4 HSRP hello timers

Router(config-if)#standby group-num timers hellotime holdtime

 

8.2.5 HSRP interface tracking

Router(config-if)#standby group-num track type num decremented-priority

 

8.2.6 Verify HSRP configuration

Router#show standby type group brief

Router#show standby brief

 

Chapter 9: Multicasting

9.5.2 Configuring PIM-DM

Router(config)#ip multicast-routing

Router(config)#ip pim { dense-mode | sparse-mode | sparse-dense-mode }

 

9.5.3 Configuring PIM-SM

Router(config)#ip multicast-routing

Router(config)#ip pim { dense-mode | sparse-mode | sparse-dense-mode }

Router(config)#ip pim rp-address ip-address [group-acl-num] [override]

 

9.5.4 Verifying PIM configuration 

Router#show ip pim interface [type number] [count]

 

9.5.6 Display a PIM Neighbor

Router#show ip pim neighbor [type] [number]

 

9.6.1 Configure auto-RP

Router(config)#ip pim send-rp-announce type number scope ttl group-list acl-number

Router(config)#ip pim send-rp-discover scope ttl

 

9.6.2 Define scope of delivery of multicast packets

Router(config-if)#ip multicast ttl-threshold ttl

 

9.6.3 Join a multicast group

Router(config)#ip igmp join-group group-address

 

9.6.4 Change IGMP versions

Router#show ip igmp interface type-number

Router(config-if)#ip igmp version {2 | 1}

 

9.6.5 Configure CGMP

Router(config-if)#ip cgmp

IOS

Switch(config)#cgmp {CGMP enabled by default}

Switch(config)#cgmp leave-processing

CLI

Switch> (enable) set cgmp enable

 

9.6.6 Configure CGMP leave

CLI

Switch> (enable) show cgmp leave

Switch> (enable) set cgmp leave enable

Switch> (enable) set cgmp leave disable

 

9.7.1 Verify CGMP configuration

IOS

Switch#show cgmp

CLI 

Switch> (enable) show cgmp statistics vlan 

Switch> (enable) show multicast group cgmp vlan

 

Chapter 10: Restricting Network Access

10.2.3 Basic password protection

IOS

Set EXEC level password
Switch(config)#enable password level 1 password

Set privileged level password
Switch(config)#enable password level 15 password

Switch(config)#username username password password

Switch(config-line)#login local

Switch(config-line)#login authentication

Switch(config-line)#login tacacs

CLI

Switch> (enable) set enablepass

Switch> (enable) set password

 

10.2.4 Using AAA and Secure Server

IOS

CLI

Switch> (enable) set authentication login local enable

Switch> (enable) set authentication login tacacs enable

Switch> (enable) set tacacs server ip-address

Switch> (enable) set tacacs key key

 

10.2.5 Restricting VTY and HTTP access

IOS

Switch(config)#ip http server

Switch(config)#ip http authentication [aaa | enable | local | tacacs]

Switch(config-line)#access-class number in|out

CLI

Switch> (enable) set interface sc0 [ip_addr / netmask]

Switch> (enable) set ip http server enable

Switch> (enable) set ip http port port_number default

Switch> (enable) show ip http

 

10.2.6 Configuring timeouts

IOS

Switch(config-line)#exec-timeout minutes

CLI

Switch> (enable) set logout [number of minutes]

 

10.2.7 Configuring privilege levels

Router(config)#privilege mode level level command

Router(config)#enable secret level level password

 

10.2.8 Banner messages

Router(config)#banner motd % message here %

Switch(enable)#set banner motd % message here %

 

10.3.1 Policy in the access layer

Switch> (enable) set port security mod_num/port_num...enable mac address

Switch> (enable) show port mod_num/port_num

Switch(config-if)#port security [max-mac-count maximum-mac-count]

Switch#show mac-address-table security [type module/port]

ALSwitch(config-if)#port security action shutdown