Cisco Systems

 


Modules:  1  |  2  |  3  |  4  |  5  |  6  |  7  |  8  |  9  |  CS  |  All  |
Module 6: Switch Configuration
 
  Command Command Description Command Syntax
6.1.6 show interface status Use the show interface privileged EXEC command to display the administrative and operational status of a switching (nonrouting) port. show interface [interface-id | vlan number] [flow-control | pruning | status | switchport [allowed-vlan | prune-elig | native-vlan]]
  show controllers ethernet-controller Use the show controllers ethernet EXEC command to display information on the Cisco 2500, Cisco 2600, Cisco 3000, or Cisco 4000 series. show controllers ethernet slot/port
  show post Tells if the switch passed the Power-On Self Test show post
6.2.1 no ip address To set IP addresses for an interface, use the ip address interface configuration command. The secondary keyword designates an IP address as an auxiliary address. To remove the specified addresses, use the no form of this command. no ip address
  show running-config This command allows you to view the current configuration in the RAM. This configuration is the active configuration, and changes made to the router will show up in this configuration file. Since it is stored in the RAM, any changes not saved will be gone when the router resets. show running-config
  show startup-config This command allows you to view the configuration file "startup-config" in the NVRAM. This configuration file is the stored, default file that is used by the router when it boots. Any changes made to the active configuration on the router that is not saved to this file using "copy running-config startup-config" will be lost upon next reload. show startup-config
  show ip interface VLAN 1 To display the usability status of interfaces configured for IP, use the show ip interface EXEC command. show ip interface interface-type number
  show version To display the configuration of the system hardware, the software version, the names and sources of configuration files and the boot images, use the show version EXEC command. show version
  show interface fastethernet Use the show interface privileged EXEC command to display the administrative and operational status of a switching (nonrouting) port. show interface [interface-id | vlan number] [flow-control | pruning | status | switchport [allowed-vlan | prune-elig | native-vlan]]
  show vlan Use the show vlan command to display VLAN information. Each Ethernet switch port and Ethernet repeater group belong to only one VLAN. Trunk, FDDI/CDDI, and ATM ports can exist on multiple VLANs. show vlan type
  dir flash: To display a list of files on a file system, use the dir EXEC command. dir [/all] [filesystem: | file-url]
  show flash To display the layout and contents of a Flash memory file system, use the show EXEC command. show flash-filesystem:
  copy running-config startup-config Use the copy command set to upload or download a Flash image or a switch configuration to or from a Flash device, rcp server, or TFTP server. copy file-id {config | flash | rcp | tftp}
  exit Use the exit command at the EXEC levels to exit the EXEC mode. Use the exit command at the configuration level to return to privileged EXEC mode. exit
  delete flash:vlan.dat To delete a file on a Flash memory device, use the delete EXEC command. delete flash-url
  delete vtp This command resets the switch with VTP parameters set to factory defaults. All other parameters will be unchanged. delete vtp
6.2.2 configure terminal This command is used to switch from enable mode to one of the configuration modes. configure {terminal | memory | network | overwrite-network}
  hostname This command is used to name the switch. hostname
  line con 0 To identify a specific line for configuration and begin the line configuration command collection mode, use the line global configuration command. line [aux | console | tty | vty ] line-number [ending-line-number]
  password To specify a password on a line, use the password line configuration command. Use the no form of this command to remove the password. password password
  login To enable password checking at login, use the login line configuration command. Use the no form of this command to disable password checking and allow connections without a password. login [local | tacacs]
  line vty 0 4 To identify a specific line for configuration and begin the line configuration command collection mode, use the line global configuration command. line [aux | console | tty | vty ] line-number [ending-line-number]
  enable secret To specify an additional layer of security over the enable password command, use the enable secret global configuration command. Use the no form of this command to turn off the enable secret function. enable secret [level level] {password | [encryption-type] encrypted-password}
  enable password To set a local password to control access to various privilege levels, use the enable password global configuration command. Use the no form of this command to remove the password requirement. enable password [level level] {password | [encryption-type] encrypted-password}
  interface VLAN1 Use the interface global configuration command to configure an interface type and enter interface configuration mode. interface type number
  ip address To set IP addresses for an interface, use the ip address interface configuration command. The secondary keyword designates an IP address as an auxiliary address. To remove the specified addresses, use the no form of this command. ip address ip-address mask [secondary]
  ip default-gateway To define a default gateway (router) when IP routing is disabled, use the ip default-gateway global configuration command. To disable this function, use the no form of this command. ip default-gateway ip address
  show interface VLAN Use the show interface privileged EXEC command to display the administrative and operational status of a switching (nonrouting) port. show interface [interface-id | vlan number] [flow-control | pruning | status | switchport [allowed-vlan | prune-elig | native-vlan]]
  speed 100 To configure the speed for a Fast Ethernet interface, use the speed interface configuration command. Use the no form of this command to disable a speed setting. speed {10 | 100 | auto}
  duplex full To configure the duplex operation on an interface, use the duplex interface configuration command. Use the no form of this command to return the system to half-duplex mode, which is the system default. duplex {full | half | auto}
6.2.3 show mac-address–table Used to examine the addresses that a switch has learned. show mac-address–table
  clear mac-address-table Rather than wait for a dynamic entry to age-out, the administrator has the option to use this privileged exec command. clear mac-address-table
6.2.4 mac-address-table static <mac-address of host> interface FastEthernet<Ethernet numer> vlan, To set a static MAC address entry for a switch use this command. mac-address-table static <mac-address of host> interface FastEthernet<Ethernet numer> vlan,
  no mac-address-table static <mac-address of host>interface FastEthernet <Ethernet number> vlan <vlan name> To remove this entry use the no form of the command. no mac-address-table static <mac-address of host>interface FastEthernet <Ethernet number> vlan <vlan name>
6.2.5 port security Use the port security interface configuration command to enable port security on a port and restrict the use of the port to a user-defined group of stations. Use the no form of this command to return the port to its default value. port security [action {shutdown | trap} | max-mac-count addresses]
  no port security Use the port security interface configuration command to enable port security on a port and restrict the use of the port to a user-defined group of stations. Use the no form of this command to return the port to its default value. port security [action {shutdown | trap} | max-mac-count addresses]
  port security action Use the port security interface configuration command to enable port security on a port and restrict the use of the port to a user-defined group of stations. Use the no form of this command to return the port to its default value. port security [action {shutdown | trap} | max-mac-count addresses]
  show port security To verify port security status use this command.. show port security
  port secure To verify port security status use this command on the Cisco 1900. port secure
  show mac-address-table security Use the show (mac-address-table security) privileged Exec command to display the addressing security configuration. show mac-address-table security 
  port security max-mac-count 1 Use the port security interface configuration command to enable port security on a port and restrict the use of the port to a user-defined group of stations. Use the no form of this command to return the port to its default value. port security [action {shutdown | trap} | max-mac-count addresses]
  port secure max-mac-count 1 Maximum number of addresses allowed on the port on a 1900. port secure max-mac-count
  switchport port-security maximum Maximum number of addresses allowed on the port on a 1900. switchport port-security maximum
  port security action shutdown In the event of a security violation the interface should be shut down. port security action shutdown
6.2.6 switchport port-security mac-address sticky The switchport accepts only one device. switchport port-security mac-address sticky
  clear mac-address-table dynamic This will unlock the MAC addresses from security and allow a new address to be registered. clear mac-address-table dynamic
6.2.7 show flash To display the layout and contents of a Flash memory file system, use the show EXEC command. show flash-filesystem:y
  copy flash tftp To copy any file from a source to a destination, use the copy EXEC command. Use the /erase option to erase the destination file system before copying. copy {flash | ftp | nvram | running-config | startup-config | system | tftp} {flash | ftp | nvram | running-config | startup-config | system | tftp}
  copy startup-config tftp To copy any file from a source to a destination, use the copy EXEC command. Use the /erase option to erase the destination file system before copying. copy {flash | ftp | nvram | running-config | startup-config | system | tftp} {flash | ftp | nvram | running-config | startup-config | system | tftp}
  copy start tftp To copy any file from a source to a destination, use the copy EXEC command. Use the /erase option to erase the destination file system before copying. copy {flash | ftp | nvram | running-config | startup-config | system | tftp} {flash | ftp | nvram | running-config | startup-config | system | tftp}
6.2.8 flash_init One of three commands that are used to initialize the flash filesystem, and finish loading the operating system software in the 2950 switch. flash_init
  load_helper One of three commands that are used to initialize the flash filesystem, and finish loading the operating system software in the 2950 switch. load_helper
  dir flash: To display a list of files on a file system, use the dir EXEC command. dir [/all] [filesystem: | file-url]
  rename flash:config.text flash:config.old Renames the configuration file saved in the flash. rename flash:config.text flash:config.old
  boot Boots the system. boot
6.2.9 no ip http server To enable a Cisco router to be configured from a browser using the Cisco IOS ClickStart software, and to enable any router to be monitored or have its configuration modified from a browser using the Cisco Web browser interface, use the ip http server global configuration command. To disable this feature, use the no form of this command. no ip http server
  delete flash:archive tar /x tftp://192.168.1.3/
c2950-c3h2s-mz.
120-5.3.WC.1.tar flash:
To delete a file on a Flash memory device, use the delete EXEC command. delete flash-url
  boot system flash: To specify the system image that the router loads at startup, use one of the following boot system global configuration commands. Use a no form of this command to remove the startup system image specification. boot system flash [flash-fs:] [partition-number:] [filename]
Close Window
All contents copyright © 2003 Cisco Systems, Inc. All rights reserved.