Cisco IOS Configuration Fundamentals Command Reference
Cisco IOS Configuration Fundamentals Command Reference
Command Reference
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
CONTENTS
Introduction 1
Cisco IOS IFS Command Syntax 2
Obtaining Documentation Obtaining Support and Security Guidelines 4
A through B 5
activation-character 6
alias 7
archive 11
archive config 13
archive log config persistent save 16
archive tar 18
async-bootp 21
attach 24
autobaud 27
auto-sync 28
autoupgrade disk-cleanup 31
autoupgrade ida url 33
autoupgrade status email 35
banner exec 37
banner incoming 40
banner login 43
banner motd 46
banner slip-ppp 49
boot 52
boot bootldr 57
boot bootstrap 59
boot config 62
boot host 65
boot network 68
boot system 71
boot-end-marker 78
boot-start-marker 81
C commands 85
cd 87
clear archive log config 89
clear catalyst6000 traffic-meter 91
clear configuration lock 92
clear diagnostic event-log 94
clear ip http client cache 96
clear logging 98
clear logging system 100
clear logging xml 102
clear memory low-water-mark 104
clear mls statistics 105
clear parser cache 107
clear parser statistics 109
clear platform netint 111
clear processes interrupt mask 112
clear scp accounting 114
clear tcp 115
clear vlan counters 117
clock 118
clock initialize nvram 120
config-register 121
configure check syntax 123
configuration mode exclusive (Deprecated as of the 15.0S and T releases. It's still available on the
M train.) 124
configure confirm 131
configure memory 133
configure network 135
configure overwrite-network 136
configure replace 137
configure revert 142
configure terminal 144
confreg 147
downward-compatible-config 248
editing 250
enable 254
enable last-resort 258
end 259
environment-monitor shutdown temperature 261
environment temperature-controlled 262
erase 264
erase bootflash 268
errdisable detect cause 269
errdisable recovery 271
escape-character 274
exec 277
exec-banner 278
exec-character-bits 280
exec-timeout 282
execute-on 284
exit (EXEC) 289
exit (global) 291
F through K 293
file prompt 294
file verify auto 295
format 297
fsck 301
full-help 307
help 309
hidekeys 311
history 313
history size 315
hold-character 317
hostname 319
hw-module reset 321
hw-module shutdown 322
insecure 323
international 324
state-machine 1365
stopbits 1367
storm-control level 1369
sync-restart-delay 1371
systat 1373
system flowcontrol bus 1374
system jumbomtu 1376
tdm clock priority 1378
terminal databits 1381
terminal data-character-bits 1383
terminal dispatch-character 1385
terminal dispatch-timeout 1386
terminal download 1388
terminal editing 1389
terminal escape-character 1390
terminal exec-character-bits 1392
terminal flowcontrol 1394
terminal full-help 1396
terminal history 1398
terminal history size 1400
terminal hold-character 1403
terminal international 1405
terminal keymap-type 1407
terminal length 1408
terminal monitor 1410
terminal notify 1411
terminal padding 1412
terminal parity 1414
terminal rxspeed 1416
terminal special-character-bits 1418
terminal speed 1420
terminal start-character 1421
terminal stopbits 1422
terminal stop-character 1423
terminal telnet break-on-ip 1424
vtp 1503
warm-reboot 1507
where 1509
width 1511
write core 1513
write erase 1515
write memory 1516
write mib-data 1517
write network 1519
write terminal 1521
xmodem 1522
ASCII Character Set and Hexadecimal Values 1525
Note Some commands previously documented in this Command Reference have been moved to other books:
Commands related to system management and network monitoring can be found in the Cisco IOS
Network Management Command Reference . Command reference documentation for the Cisco IOS
software feature “Service Assurance Agent (SAA)” can be found in the the Cisco IOS IP SLAs Command
Reference
Prefix Description
ftp: Specifies a File Transfer Protocol (FTP) network
server.
The following table lists the available suffix options (file indentification suffixes) for the URL prefixes
used in the previous table.
rcp: rcp:[[//[username@]location]/directory]/filename
tftp: tftp:[[//location]/directory]/filename
The following table lists common URL prefixes used to indicate memory locations on the system.
Prefix Description
bootflash: Boot flash memory.
Prefix Description
flash: partition-number Flash memory. This prefix is available on all
platforms. For platforms that do not have a device
named flash:, the prefix flash: is aliased to slot0:.
Therefore, you can use the prefix flash: to refer to
the main Flash memory storage area on all
platforms.
For details about the Cisco IOS IFS, and for IFS configuration tasks, refer to the “Using the Cisco IOS
Integrated File System (IFS)” chapter in the latest Cisco IOS Configuration Fundamentals Configuration
Guide appropriate for your release version.
activation-character
To define the character you ent er at a vacant terminal to begin a terminal session, use the activation-
character command in line configuration mode. To make any character activate a terminal, use the no
form of this command.
activation-character ascii-number
no activation-character
Usage Guidelines See the “ASCII Character Set and Hexadecimal Values” document for a list of ASCII characters.
Note If you are using the autoselect function, set the activation character to the default, Return, and exec-
character-bits to 7. If you change these defaults, the application will not recognize the activation request.
Examples The following example shows how to set the activation character for the console to Delete, which is
decimal character 127:
alias
To create a command alias, use the alias command in global configuration mode. To delete all aliases in a
command mode or to delete a specific alias, and to revert to the original command syntax, use the no form
of this command.
Command Default A set of six basic EXEC mode aliases are enabled by default. See the “Usage Guidelines” section of this
command for a list of default aliases.
Usage Guidelines You can use simple words or abbreviations as command aliases.
The table below lists the basic EXEC mode aliases that are enabled by default.
p ping
r resume
s show
w where
The default aliases in the table above are predefined. These default aliases can be disabled with the no alias
exec command.
Common keyword aliases (which cannot be disabled) include running-config (keyword alias for
system:running-config) and startup-config (keyword alias for nvram:startup-config). See the
description of the copy command for more information about these keyword aliases.
Note that aliases can be configured for keywords instead of entire commands. You can create, for example,
an alias for the first part of any command and still enter the additional keywords and arguments as normal.
To determine the value for the mode argument, enter the command mode in which you would issue the
original command (and in which you will issue the alias) and enter the ? command. The name of the
command mode should appear at the top of the list of commands. For example, the second line in the
following sample output shows the name of the command mode as “Interface configuration”:
To match the name of the command mode to the acceptable mode keyword for the alias command, issue
the alias ? command. As shown in the following sample output, the keyword needed to create a command
alias for the access-expression command is interface:
Router(config)# alias ?
accept-dialin VPDN group accept dialin configuration mode
accept-dialout VPDN group accept dialout configuration mode
address-family Address Family configuration mode
call-discriminator Call Discriminator Configuration
cascustom Cas custom configuration mode
clid-group CLID group configuration mode
configure Global configuration mode
congestion Frame Relay congestion configuration mode
controller Controller configuration mode
cptone-set custom call progress tone configuration mode
customer-profile customer profile configuration mode
dhcp DHCP pool configuration mode
dnis-group DNIS group configuration mode
exec Exec mode
flow-cache Flow aggregation cache config mode
fr-fr FR/FR connection configuration mode
interface Interface configuration mode
.
.
.
Router(config)# alias interface express access-expression
When you use online help, command aliases are indicated by an asterisk (*), and displayed in the following
format:
*command-alias =original-command
For example, the lo command alias is shown here along with other EXEC mode commands that start with
“lo”:
Router# lo?
*lo=logout lock login logout
When you use online help, aliases that contain multiple keyword elements separated by spaces are
displayed in quotes, as shown here:
To list only commands and omit aliases, begin your input line with a space. In the following example, the
alias td is not shown, because there is a space before the t?command line.
To circumvent command aliases, use a space before entering the command. In the following example, the
command alias express is not recognized because a space is used before the command.
Router(config-if)#exp?
*express=access-expression
Router(config-if)# express ?
% Unrecognized command
As with commands, you can use online help to display the arguments and keywords that can follow a
command alias. In the following example,the alias td is created to represent the command telnet device.
The /debugand /lineswitchescan be added to telnet device to modify the command:
You must enter the complete syntax for the command alias. Partial syntax for aliases is not accepted. In the
following example, the parser does not recognize the command t as indicating the alias td:
Router# t
Examples In the following example, the alias fixmyrtis configured for the clear iproute 192.168.116.16 EXEC mode
command:
In the following example, the alias express is configured for the first part of the access-expression
interface configuration command:
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface e0
Router(config-if)#?
Interface configuration commands:
access-expression Build a bridge boolean access expression
.
.
.
Router(config-if)#exit
Router(config)#alias ?
accept-dialin VPDN group accept dialin configuration mode
accept-dialout VPDN group accept dialout configuration mode
address-family Address Family configuration mode
call-discriminator Call Discriminator Configuration
cascustom Cas custom configuration mode
clid-group CLID group configuration mode
configure Global configuration mode
congestion Frame Relay congestion configuration mode
controller Controller configuration mode
cptone-set custom call progress tone configuration mode
customer-profile customer profile configuration mode
dhcp DHCP pool configuration mode
dnis-group DNIS group configuration mode
exec Exec mode
flow-cache Flow aggregation cache config mode
fr-fr FR/FR connection configuration mode
interface Interface configuration mode
.
.
.
Router(config)#alias interface express access-expression
Router(config)#int e0
Router(config-if)#exp?
*express=access-expression
Router(config-if)#express ?
input Filter input packets
output Filter output packets
!Note that the true form of the command/keyword alias appears on the screen after issuing
!the express ? command.
Router(config-if)#access-expression ?
input Filter input packets
output Filter output packets
Router(config-if)#ex?
*express=access-expression exit
!Note that in the following line, a space is used before the ex? command
!so the alias is not displayed.
Router(config-if)# ex?
exit
!Note that in the following line, the alias cannot be recognized because
!a space is used before the command.
Router#(config-if)# express ?
% Unrecognized command
Router(config-if)# end
Router# show alias interface
Interface configuration mode aliases:
express access-expression
archive
To enter archive configuration mode, use the archive command in global configuration mode.
archive
Examples The following example shows how to place the router in archive configuration mode:
Command Description
maximum Sets the maximum number of archive files of the
running configuration to be saved in the Cisco IOS
configuration archive.
archive config
To save a copy of the current running configuration to the Cisco IOS configuration archive, use the archive
config command in privileged EXEC mode.
archive config
Usage Guidelines
Note Before using this command, you must configure the path command in order to specify the location and
filename prefix for the files in the Cisco IOS configuration archive.
The Cisco IOS configuration archive is intended to provide a mechanism to store, organize, and manage an
archive of Cisco IOS configuration files to enhance the configuration rollback capability provided by the
configure replace command. Before this feature was introduced, you could save copies of the running
configuration using the copy running-config destination-url command, storing the target file either locally
or remotely. However, this method lacked any automated file management. On the other hand, the
Configuration Replace and Configuration Rollback feature provides the capability to automatically save
copies of the running configuration to the Cisco IOS configuration archive. These archived files serve as
checkpoint configuration references and can be used by the configure replace command to revert to
previous configuration states.
The archive config command allows you to save Cisco IOS configurations in the configuration archive
using a standard location and filename prefix that is automatically appended with an incremental version
number (and optional time stamp) as each consecutive file is saved. This functionality provides a means for
consistent identification of saved Cisco IOS configuration files. You can specify how many versions of the
running configuration are kept in the archive. After the maximum number of files has been saved in the
archive, the oldest file is automatically deleted when the next, most recent file is saved. The show archive
command displays information for all configuration files saved in the Cisco IOS configuration archive.
Examples The following example shows how to save the current running configuration to the Cisco IOS configuration
archive using the archive config command. Before using the archive config command, you must configure
the path command to specify the location and filename prefix for the files in the Cisco IOS configuration
archive. In this example, the location and filename prefix are specified as disk0:myconfig as follows:
configure terminal
!
archive
path disk0:myconfig
end
You then save the current running configuration in the configuration archive, as follows:
archive config
The show archive command displays information on the files saved in the configuration archive as shown
in the following sample output:
Command Description
configure replace Replaces the current running configuration with a
saved Cisco IOS configuration file.
Command Default If this command is not entered, the persisted configuration commands in the archive log are not saved to the
Cisco IOS secure file system.
Usage Guidelines If the router is in the persistent periodic mode, the persistent timer is restarted.
Examples The following example saves the persisted commands in the archive log to the Cisco IOS secure file
system:
archive tar
To create a TAR file, to list files in a TAR file, or to extract the files from a TAR file, use the archive tar
command in privileged EXEC mode.
Syntax Description /create destination-url flash:/ file-url Creates a new TAR file on the local or network file
system.
For destination-url, specify the destination URL
alias for the local or network file system and the
name of the TAR file to create. The following
options are supported:
• flash: --Syntax for the local flash file system.
• ftp: [[// username[: password]@ location]/
directory]/ tar-filename.tar-- Syntax for FTP.
• rcp: [[// username @ location]/ directory]/
tar-filename.tar--Syntax for Remote Copy
Protocol (RCP).
• tftp: [[// location]/ directory]/ tar-
filename.tar--Syntax for TFTP.
The tar-filename.tar is the name of the TAR file to
be created.
For flash:/ file-url, specify the location on the local
flash file system from which the new TAR file is
created.
An optional list of files or directories within the
source directory can be specified to write to the
new TAR file. If none is specified, all files and
directories at this level are written to the newly
created TAR file.
/xtract source-url flash:/ file-url [dir/file...] Extracts files from a TAR file to the local file
system.
For source-url, specify the source URL alias for the
local file system. These options are supported:
• flash: --Syntax for the local flash file system.
• ftp: [[// username[: password]@ location]/
directory]/ tar-filename.tar-- Syntax for FTP.
• rcp: [[// username @ location]/ directory]/
tar-filename.tar--Syntax for Remote Copy
Protocol (RCP).
• tftp: [[// location]/directory]/tar-filename.tar--
Syntax for TFTP.
The tar-filename.tar is the name of the TAR file to
be created.
Release Modification
12.4(22)YB This command was integrated into Cisco IOS
Release 12.4(22)YB.
Usage Guidelines Filenames, directory names, and image names are case sensitive.
The TAR file is an archive file from which you can extract files by using the archive tarcommand.
Examples The following example shows how to create a TAR file. The command writes the contents of the new-
configs directory on the local flash device to a file named saved.tar on the TFTP server at 172.20.136.9.
The following example shows how to display the contents of the c2940-tv0-m.tar file that is in flash
memory. The contents of the TAR file appear on the screen.
The following example shows how to extract the contents of a TAR file on the TFTP server at
172.20.10.30. This command extracts only the new-configs directory into the root directory on the local
flash file system. The remaining files in the saved.tar file are ignored.
async-bootp
To configure extended BOOTP requests for asynchronous interfaces as defined in RFC 1084, use the
async-bootp command in global configuration mode. To restore the default, use the noform of this
command.
Keyword Description
bootfile Specifies use of a server boot file from which to
download the boot program. Use the
optional :hostname argument and the data argument
to specify the filename.
Keyword Description
DNS-server address Dotted decimal address specifying the IP address of
domain name servers (as defined by RFC 1034).
hostname name The name of the client, which may or may not be
domain qualified, depending upon the site.
Command Default If no extended BOOTP commands are entered, the Cisco IOS software generates a gateway and subnet
mask appropriate for the local network.
Usage Guidelines Use the show async-bootp EXEC command to list the configured parameters. Use the no async-bootp
command to clear the list.
Examples The following example illustrates how to specify different boot files: one for a PC, and one for a
Macintosh. With this configuration, a BOOTP request from the host on 172.30.1.1 results in a reply listing
the boot filename as pcboot. A BOOTP request from the host named “mac” results in a reply listing the
boot filename as “macboot.”
The following example specifies a negative time offset of the local subnetwork of 3600 seconds:
attach
To connect to a specific line card or module from a remote location for the purpose of executing
monitoring and maintenance commands on that line card or module, use the attach command in privileged
EXEC mode. To exit from the Cisco IOS software image on the line card and return to the Cisco IOS
image on the main (Supervisor) module, use the exit command.
Syntax Description slot-number Slot number of the line card to which you wish to
connect.
If you omit the slot number, you will be prompted
for it.
Note Do not execute the configEXEC command from the Cisco IOS software image on the line card.
Caution After you enter the attach or remote login command to access another console from your switch, if you
enter global or interface configuration mode commands, the switch might reset.
Th e v alid values for the module-number argument depend on the chassis that is used. For example, if you
have a 13-slot chassis, valid values for the module number are from 1 to 13.
This command is supported on Distributed Forwarding Card (DFC)-equipped modules, FlexWan modules,
and the supervisor engine only.
When you execute the attach module-number command, the prompt changes to Router-dfcx# or Switch-
sp#, depending on the type of module to which you are connecting.
The behavior of the attach command is identical to that of the remote login module numcommand.
There are two ways to end this session:
• You can enter the exit command as follows:
Router-dfc3# exit
[Connection to Switch closed by foreign host]
Router#
Router-dfc3# ^C
Router-dfc3# ^C
Router-dfc3# ^C
Terminate remote login session? [confirm] y
[Connection to Switch closed by local host]
Router#
Examples In the following example, the user connects to the Cisco IOS image running on the line card in slot 9, gets a
list of valid show commands, and returns the Cisco IOS image running on the GRP:
Router# attach 9
Entering Console for 4 Port Packet Over SONET OC-3c/STM-1 in Slot: 9
Type exit to end this session
Press RETURN to get started!
LC-Slot9# show ?
cef Cisco Express Forwarding
clock Display the system clock
context Show context information about recent crash(s)
history Display the session command history
hosts IP domain-name, lookup style, nameservers, and host table
ipc Interprocess communications commands
location Display the system location
sessions Information about Telnet connections
terminal Display terminal configuration parameters
users Display information about terminal lines
version System hardware and software status
LC-Slot9# exit
Disconnecting from slot 9.
Connection Duration: 00:01:04
Router#
Note Because not all statistics are maintained on line cards, the output from some of show commands may be
inconsistent.
The following example shows how to log in remotely to the DFC-equipped module:
Console#
attach 3
Trying Switch ...
Entering CONSOLE for Switch
Type "^C^C^C" to end this session
Router-dfc3#
autobaud
To set the line for automatic baud rate detection (autobaud), use the autobaudcommand in line
configuration mode. To disable automatic baud detection, use the noform of this command.
autobaud
no autobaud
Usage Guidelines The autobaud detection supports a range from 300 to 19200 baud. A line set for autobaud cannot be used
for outgoing connections, nor can you set autobaud capability on a line using 19200 baud when the parity
bit is set (because of hardware limitations).
Note Automatic baud detection must be disabled by using the no autobaud command prior to setting the txspeed,
rxspeed, or speed commands.
Examples In the following example, the auxiliary port is configured for autobaud detection:
Router(config-line)# autobaud
auto-sync
To enable automatic synchronization of the configuration files in NVRAM, use the auto-sync command in
main-cpu redundancy configuration mode. To disable automatic synchronization, use the no form of this
command.
Command Default For the Performance Routing Engines (PREs) on the Cisco uBR10012 universal broadband router, the
system defaults to synchronizing all system files on the (auto-sync standard).
For the Supervisor Engines on the Cisco 7600 series routers, the system defaults to synchronizing the
running configuration. (running-config).
At the Cisco RF Gateway 10 chassis level, all the system files are synchronized by default.
Redundancy configuration (config-r)
Examples
Cisco 7600 Series Routers
The following example shows how (from the default configuration) to enable automatic synchronization of
the configuration register in the main CPU:
Router#
configure terminal
Router (config)#
redundancy
Router (config-r)#
main-cpu
Router (config-r-mc)#
no auto-sync standard
Router (config-r-mc)#
auto-sync config-register
router(config)# redundancy
router(config-r)# main-cpu
router(config-r-mc)# auto-sync startup-config
router(config-r-mc)# exit
router(config-r)# exit
The following example shows how to configure the system to synchronize all system files except for the
startup configuration file. This typically is done when the two PRE1 (or PRE2) modules are running
different software images.
router(config)# redundancy
router(config-r)# main-cpu
router(config-r-mc)# no auto-sync startup-config
router(config-r-mc)# auto-sync config-register
router(config-r-mc)# auto-sync bootvar
router(config-r-mc)# exit
router(config-r)# exit
Cisco RF Gateway 10
The following example shows the synchronization of all system files on the Cisco RFGW-10 chassis:
Router#configure terminal
Router(config)#redundancy
Router(config-red)#main-cpu
Router(config-r-mc)#auto-sync standard
Router(config-r-mc)#exit
Router(config-red)#exit
autoupgrade disk-cleanup
To configure the Cisco IOS Auto-Upgrade Manager disk cleanup utility, use the autoupgrade disk-
cleanup command in global configuration mode. To disable this configuration, use the no form of this
command.
Command Default By default, the crashinfo files, the core files, and the Cisco IOS software images are deleted by the Cisco
IOS Auto-Upgrade Manager disk cleanup utility, and the filesystems that support the undelete operation are
not cleaned up.
Examples The following example shows how to clean-up filesystems that support undelete operation:
autoupgrade status email Configures the address to which the status email is
to be sent.
Usage Guidelines Use the autoupgrade ida url command to configure a new URL for the IDA server, if it is not present in
the default location.
Examples The following example shows how to configure the URL for the IDA server:
autoupgrade status email Configures the address to which the status email is
to be sent.
Command Description
upgrade automatic getversion Downloads a Cisco IOS software image directly
from www.cisco.com or from a non-Cisco server.
Syntax Description recipient The address to which the Cisco IOS Auto-Upgrade
Manager (AUM) status is to be sent.
Command Default Status email is not sent unless the address is configured. The recipient email address and SMTP server have
to be configured in order to receive AUM status email.
Usage Guidelines Use this command to configure the email-address where AUM status email can be sent.
Examples The following example shows how to configure the address to which status email is to be sent:
banner exec
To specify and enable a message to be displayed when an EXEC process is created (an EXEC banner), use
the banner exec command in global configuration mode. To delete the existing EXEC banner, use the no
form of this command.
Usage Guidelines This command specifies a message to be displayed when an EXEC process is created (a line is activated, or
an incoming connection is made to a vty). Follow this command with one or more blank spaces and a
delimiting character of your choice. Then enter one or more lines of text, terminating the message with the
second occurrence of the delimiting character.
When a user connects to a router, the message-of-the-day (MOTD) banner appears first, followed by the
login banner and prompts. After the user logs in to the router, the EXEC banner or incoming banner will be
displayed, depending on the type of connection. For a reverse Telnet login, the incoming banner will be
displayed. For all other connections, the router will display the EXEC banner.
To disable the EXEC banner on a particular line or lines, use the no exec-banner line configuration
command.
To customize the banner, use tokens in the form $(token ) in the message text. Tokens will display current
Cisco IOS configuration variables, such as the router’s host name and IP address. The tokens are described
in the table below.
Examples The following example sets an EXEC banner that uses tokens. The percent sign (%) is used as a delimiting
character. Notice that the $(token ) syntax is replaced by the corresponding configuration variable.
Command Description
exec-banner Controls (enables or disables) the display of EXEC
banners and message-of-the-day banners on a
specified line or lines.
banner incoming
To define and enable a banner to be displayed when there is an incoming connection to a terminal line from
a host on the network, use the banner incoming command in global configuration mode. To delete the
incoming connection banner, use the no form of this command.
Usage Guidelines Follow the banner incomingcommand with one or more blank spaces and a delimiting character of your
choice. Then enter one or more lines of text, terminating the message with the second occurrence of the
delimiting character.
An incoming connection is one initiated from the network side of the router. Incoming connections are also
called reverse Telnet sessions. These sessions can display MOTD banners and incoming banners, but they
do not display EXEC banners. Use the no motd-banner line configuration command to disable the MOTD
banner for reverse Telnet sessions on asynchronous lines.
When a user connects to the router, the message-of-the-day (MOTD) banner (if configured) appears first,
before the login prompt. After the user successfully logs in to the router, the EXEC banner or incoming
banner will be displayed, depending on the type of connection. For a reverse Telnet login, the incoming
banner will be displayed. For all other connections, the router will display the EXEC banner.
Incoming banners cannot be suppressed. If you do not want the incoming banner to appear, you must delete
it with the no banner incoming command.
To customize the banner, use tokens in the form $(token ) in the message text. Tokens will display current
Cisco IOS configuration variables, such as the router’s host name and IP address. The tokens are described
in the table below.
Examples The following example sets an incoming connection banner. The pound sign (#) is used as a delimiting
character.
The following example sets an incoming connection banner that uses several tokens. The percent sign (%)
is used as a delimiting character.
When the incoming connection banner is executed, the user will see the following banner. Notice that the $
(token ) syntax is replaced by the corresponding configuration variable.
Command Description
banner login Defines a customized banner to be displayed before
the username and password login prompts.
banner login
To define and enable a customized banner to be displayed before the username and password login
prompts, use the banner login command in global configuration mode. To disable the login banner, use no
form of this command.
Usage Guidelines Follow the banner login command with one or more blank spaces and a delimiting character of your
choice. Then enter one or more lines of text, terminating the message with the second occurrence of the
delimiting character.
When a user connects to the router, the message-of-the-day (MOTD) banner (if configured) appears first,
followed by the login banner and prompts. After the user successfully logs in to the router, the EXEC
banner or incoming banner will be displayed, depending on the type of connection. For a reverse Telnet
login, the incoming banner will be displayed. For all other connections, the router will display the EXEC
banner.
To customize the banner, use tokens in the form $(token ) in the message text. Tokens will display current
Cisco IOS configuration variables, such as the router’s host name and IP address. The tokens are described
in the table below.
Examples The following example sets a login banner. Double quotes (") are used as the delimiting character.
Router# banner login " Access for authorized users only. Please enter your username and
password. "
The following example sets a login banner that uses several tokens. The percent sign (%) is used as the
delimiting character.
When the login banner is executed, the user will see the following banner. Notice that the $(token) syntax
is replaced by the corresponding configuration variable.
Command Description
banner slip-ppp Defines a customized banner to be displayed when
a serial-line IP or point-to-point connection is
made.
banner motd
To define and enable a message-of-the-day (MOTD) banner, use the banner motd command in global
configuration mode. To delete the MOTD banner, use the no form of this command.
banner motd d message d
no banner motd
Usage Guidelines Follow this command with one or more blank spaces and a delimiting character of your choice. Then enter
one or more lines of text, terminating the message with the second occurrence of the delimiting character.
This MOTD banner is displayed to all terminals connected and is useful for sending messages that affect all
users (such as impending system shutdowns). Use the no exec-banner or no motd-banner command to
disable the MOTD banner on a line. The no exec-banner command also disables the EXEC banner on the
line.
When a user connects to the router, the MOTD banner appears before the login prompt. After the user logs
in to the router, the EXEC banner or incoming banner will be displayed, depending on the type of
connection. For a reverse Telnet login, the incoming banner will be displayed. For all other connections,
the router will display the EXEC banner.
To customize the banner, use tokens in the form $(token ) in the message text. Tokens will display current
Cisco IOS configuration variables, such as the router’s host name and IP address. The tokens are described
in the table below.
Examples The following example configures an MOTD banner. The pound sign (#) is used as a delimiting character.
Router# banner motd # Building power will be off from 7:00 AM until 9:00 AM this coming
Tuesday.
The following example configures an MOTD banner with a token. The percent sign (%) is used as a
delimiting character.
When the MOTD banner is executed, the user will see the following. Notice that the $(token ) syntax is
replaced by the corresponding configuration variable.
Command Description
banner slip-ppp Defines and enables a customized banner to be
displayed when a serial-line IP or point-to-point
connection is made.
banner slip-ppp
To customize the banner that is displayed when a Serial Line Internet Protocol (SLIP) or PPP connection is
made, use the banner slip-ppp command in global configuration mode. To restore the default SLIP or PPP
banner, use the no form of this command.
The banner message when using the service old-slip-prompt command is:
Usage Guidelines Follow this command with one or more blank spaces and a delimiting character of your choice. Then enter
one or more lines of text, terminating the message with the second occurrence of the delimiting character.
Use this command to define a custom SLIP or PPP connection message. This is useful when legacy client
applications require a specialized connection string. To customize the banner, use tokens in the form $
(token ) in the message text. Tokens will display current Cisco IOS configuration variables, such as the
routers host name, IP address, encapsulation type, and Maximum Transfer Unit (MTU) size. The banner
tokens are described in the table below.
Examples The following example sets the SLIP/PPP banner using several tokens and the percent sign (%) as the
delimiting character:
The new SLIP/PPP banner will now be displayed when the slip EXEC command is used. Notice that the $
(token ) syntax is replaced by the corresponding configuration variable.
Router# slip
Starting SLIP connection from 172.16.69.96 to 192.168.1.200 using a maximum packet size
of 1500 bytes...
Command Description
banner motd Defines and enables a customized message-of-the-
day banner.
boot
To boot the router manually, use the bootcommand in ROM monitor mode. The syntax of this command
varies according to the platform and ROM monitor version.
boot
boot file-url
boot filename [tftp-ip-address]
boot flash [flash-fs:] [partition-number:] [filename]
Syntax Description file-url URL of the image to boot (for example, boot tftp://
172.16.15.112/routertest).
flash Boots the router from Flash memory. Note that this
keyword is required in some boot images.
Command Default For most platforms, if you enter the boot command and press Enter, the router boots from ROM by default.
However, for some platforms, such as the Cisco 3600 series routers, if you enter the boot command and
press Enter, the router boots the first image in Flash memory. Refer to the documentation for your platform
for information about the default image.
Usage Guidelines To determine which form of this command to use, refer to the documentation for your platform or use the
CLI help (?) feature.
Use this command only when your router cannot find the boot configuration information needed in
NVRAM. To enter ROM monitor mode, use one of the following methods:
• Enter the reload EXEC command, then press the Break key during the first 60 seconds of startup.
• Set the configuration register bits 0 to 3 to zero (for example, set the configuration register to 0x0) and
enter the reload command.
The ROM Monitor prompt is either “>” or, for newer platforms, “rommon x >”. Enter only lowercase
commands.
These commands work only if there is a valid image to boot. Also, from the ROM monitor prompt, issuing
a prior reset command is necessary for the boot to be consistently successful.
In Cisco IOS Release 12.3(4)T, MONLIB was modified to search in media for a valid Cisco IOS image.
This change prevents boot failures that result when the first file read in disk or flash is not a valid Cisco
IOS image.
Refer to your hardware documentation for information on correct jumper settings for your platform.
Note For some platforms the flash keyword is now required. If your attempts to use the boot command are
failing using the older boot flash:x:[filename ] syntax, try using the boot flash flash:x:[filename ] syntax.
> boot
F3:
(ROM Monitor copyrights)
In the following example, a router boots the file named routertest from a network server with the IP address
172.16.15.112 using the file-url syntax:
The following example shows the boot flash command without the filename argument. The first valid file
in Flash memory is loaded.
The following example boots from Flash memory using the file named gs7-k:
In the following example, the boot flash flash: command boots the relocatable image file named igs-bpx-l
from partition 2 in Flash memory:
In the following command, the Cisco 7000 family router accepts the flash keyword for compatibility but
ignores it, and boots from slot 0:
In the following example, the command did not function because it must be entered in lowercase:
The following example boots the first file in the first partition of internal Flash memory of a Cisco 3600
series router:
The following example boots the first image file in the first partition of the Flash memory card in slot 0 of a
Cisco 3600 series router:
The following example shows the ROM monitor booting the first file in the first Flash memory partition on
a Cisco 1600 series router:
boot bootldr
To specify the location of the boot image that ROM uses for booting, use the boot bootldr command in
global configuration mode. To remove this boot image specification, use the no form of this command.
Syntax Description file-url URL of the boot image on a Flash file system.
Command Default Refer to your platform documentation for the location of the default boot image.
Usage Guidelines The boot bootldr command sets the BOOTLDR variable in the current running configuration. You must
specify both the Flash file system and the filename.
Note When you use this global configuration command, you affect only the running configuration. You must
save the variable setting to your startup configuration to place the information under ROM monitor control
and to have the variable function as expected. Use the copy system:running-config nvram:startup-config
command to save the variable from your running configuration to your startup configuration.
Note The default length of the bootstring filename is 64 characters. Depending on the platform a longer
bootstring filename can be used and supported.
The no form of the command sets the BOOTLDR variable to a null string. On the Cisco 7000 family
routers , a null string causes the first image file in boot Flash memory to be used as the boot image that
ROM uses for booting.
Use the show boot command to display the current value for the BOOTLDR variable.
Examples In the following example, the internal Flash memory contains the boot image:
The following example specifies that the Flash memory card inserted in slot 0 contains the boot image:
show (flash file system) Displays the layout and contents of a Flash memory
file system.
boot bootstrap
To configure the filename that is used to boot a secondary bootstrap image, use the boot bootstrap
command in global configuration mode. To disable booting from a secondary bootstrap image, use the no
form of this command.
Cisco IOS XE Release 2.1 This command was implemented on the Cisco ASR
1000 Series Aggregation Services Routers.
Usage Guidelines The boot bootstrap command causes the router to load a secondary bootstrap image from the specied
URL, such as from a remote server. After the bootstrap image is loaded, the bootstrap image loads the
specified system image file. See the appropriate hardware installation guide for details on setting the
configuration register and secondary bootstrap filename.
Use this command when you have attempted to load a system image but have run out of memory even after
compressing the system image. Secondary bootstrap images allows you to load a larger system image
through a smaller secondary image.
Examples The following example shows how to load the system image file named sysimage-2 by using a secondary
bootstrap image:
Command Description
boot system Specifies the system image that the router loads at
startup.
boot config
To s pecify the device and filename of the configuration file from which the system configures itself during
initialization (startup), use the boot config command in global configuration mode. To return to the default
location for the configuration file, use the no form of this command.
Command Default The default location for the configuration file is NVRAM (nvram:).
Release Modification
12.2(14)SX Support for this command was added for the Cisco
7600 Supervisor Engine 720.
The router uses the NVRAM configuration during initialization when the CONFIG_FILE environment
variable does not exist or when it is null (such as at first-time startup). If the software detects a problem
with NVRAM or the configuration it contains, the device enters setup mode.
When you use the no form of this command, the router returns to using the default NVRAM configuration
file as the startup configuration.
You can display the contents of the BOOT, BOOTLDR, and the CONFIG_FILE environment variables
using the show bootvar command. This command displays the settings for these variables as they exist in
the startup configuration and in the running configuration if a running configuration setting differs from a
startup configuration setting.
When the boot config command is used, the distilled configuration is written into NVRAM and the system
configuration is written into the file specified by the boot config command. If the distilled configuration
exceeds the size of NVRAM, the system configuration gets truncated. Use the nvbypass keyword to
prevent the system configuration from being truncated when the distilled configuration is larger than the
size of NVRAM.
Examples The following example shows how to set the configuration file that is located in internal flash memory to
configure itself during initialization. The third line copies the specification to the startup configuration,
ensuring that this specification will take effect upon the next reload.
The following example instructs a Cisco 7500 series router to use the configuration file named router-
config located on the flash memory card inserted in the second Personal Computer Memory Card Industry
Association (PCMCIA) slot of the Route Switch Processor (RSP) card during initialization. The third line
copies the specification to the startup configuration, ensuring that this specification will take effect upon
the next reload.
boot host
To specify the host-specific configuration file to be used at the next system startup, use the boot host
command in global configuration mode. To restore the host configuration filename to the default, use the
no form of this command.
Command Default If you do not specify a filename using this command, the router uses its configured host name to request a
configuration file from a remote server. To form the configuration filename, the router converts its name to
all lowercase letters, removes all domain information, and appends -confg or -config.
Usage Guidelines This command instructs the system to “Boot using host-specific configuration file x ,” where x is the
filename specified in the remote-url argument. In other words, this command specifies the remote location
and filename of the host-specific configuration file to be used at the next system startup, as well as the
protocol to be used to obtain the file.
Before using the boot host command, use the service config global configuration command to enable the
loading of the specified configuration file at reboot time. Without this command, the router ignores the
boot host command and uses the configuration information in NVRAM. If the configuration information in
NVRAM is invalid or missing, the service config command is enabled automatically.
The network server will attempt to load two configuration files from remote hosts. The first is the network
configuration file containing commands that apply to all network servers on a network. Use the boot
network command to identify the network configuration file. The second is the host configuration file
containing commands that apply to one network server in particular. Use the boot host command to
identify the host configuration file.
Note Usually, the service config command is used in conjunction with the boot host or boot network command.
You must enter the service config command to enable the router to automatically configure the system
from the file specified by the boot host or boot network command. With IOS software versions 12.3(2)T ,
12.3(1)B, and later, you no longer have to specify the service config command for the boot host or boot
network command to be active. If you specify both the no service config command and the boot host
command, the router attempts to find the specified host configuration file. The service config command can
also be used without the boot host or boot network command. If you do not specify host or network
configuration filenames, the router uses the default configuration files. The default network configuration
file is network-confg. The default host configuration file is host-confg, where host is the hostname of the
router. If the Cisco IOS software cannot resolve its hostname, the default host configuration file is router-
confg.
When you load a configuration file from a server using rcp, the Cisco IOS software sends the first valid
username in the following list:
1 The username specified in the file-URL, if a username is specified.
2 The username set by the ip rcmd remote-username command, if the command is configured.
3 The router host name.
Note An account for the username must be defined on the destination server. If the network administrator of the
destination server did not establish an account for the username, this command will not execute
successfully.
3 The router forms a password username @routername .domain . The variable username is the username
associated with the current session, routername is the configured host name, and domain is the domain
of the router.
Examples The following example sets the host filename to wilma-confg at address 192.168.7.19:
boot network
To change the default name of the network configuration file from which to load configuration commands,
use the boot network command in global configuration mode. To restore the network configuration
filename to the default, use the no form of this command.
Usage Guidelines This command instructs the system to “Boot using network configuration file x ,” where x is the filename
specified in the remote-url argument. This command specifies the remote location and filename of the
network configuration file to be used at the next system startup, as well as the protocol to be used to obtain
the file.
When booting from a network server, routers ignore routing information, static IP routes, and bridging
information. As a result, intermediate routers are responsible for handling FTP, rcp, or TFTP requests.
Before booting from a network server, verify that a server is available by using the ping command.
Use the service config command to enable the loading of the specified configuration file at reboot time.
Without this command, the router ignores the boot network command and uses the configuration
information in NVRAM. If the configuration information in NVRAM is invalid or missing, the service
config command is enabled automatically.
The network server will attempt to load two configuration files from remote hosts. The first is the network
configuration file containing commands that apply to all network servers on a network. Use the boot
network command to identify the network configuration file. The second is the host configuration file
containing commands that apply to one network server in particular. Use the boot host command to
identify the host configuration file.
Note Usually, the service config command is used in conjunction with the boot host or boot network command.
You must enter the service config command to enable the router to automatically configure the system
from the file specified by the boot host or boot network command. With IOS software versions 12.3(2)T ,
12.3(1)B, and later, you no longer have to specify the service config command for the boot host or boot
network command to be active. If you specify both the no service config command and the boot host
command, the router attempts to find the specified host configuration file. The service config command can
also be used without the boot host or boot network command. If you do not specify host or network
configuration filenames, the router uses the default configuration files. The default network configuration
file is network-confg. The default host configuration file is host-confg, where host is the hostname of the
router. If the Cisco IOS software cannot resolve its hostname, the default host configuration file is router-
confg.
Note An account for the username must be defined on the destination server. If the network administrator of the
destination server did not establish an account for the username, this command will not execute
successfully.
The router sends the first valid password in the following list:
1 The password specified in the boot network command, if a password is specified.
2 The password set by the ip ftp password command, if the command is configured.
3 The router forms a password username @routername .domain . The variable username is the username
associated with the current session, routername is the configured host name, and domain is the domain
of the router.
Examples The following example changes the network configuration filename to bridge_9.1 and uses the default
broadcast address:
The following example changes the network configuration filename to bridge_9.1, specifies that rcp is to be
used as the transport mechanism, and gives 172.16.1.111 as the IP address of the server on which the
network configuration file resides:
boot system
To specify the system image that the router loads at startup, use one of the following boot system
command in global configuration mode. To remove the startup system image specification, use the no form
of this command.
Syntax Description file-url The URL of the system image to load at system
startup.
Command Default If you configure the router to boot from a network server but do not specify a system image file with the
boot system command, the router uses the configuration register settings to determine the default system
image filename. The router forms the default boot filename by starting with the word cisco and then
appending the octal equivalent of the boot field number in the configuration register, followed by a hyphen
(-) and the processor type name (cisconn-cpu). Refer to the appropriate hardware installation guide for
details on the configuration register and default filename. See also the config-register or confreg
command.
Usage Guidelines For this command to work, the config-register command must be set properly.
Create a comma-delimited list of several boot system commands to provide a fail-safe method for booting
your router. The router stores and executes the boot system commands in the order in which you enter
them in the configuration file. If you enter multiple boot commands of the same type--for example, if you
enter two commands that instruct the router to boot from different network servers--the router tries them in
the order in which they appear in the configuration file. If a boot system command entry in the list
specifies an invalid device, the router omits that entry. Use the boot system rom command to specify use
of the ROM system image as a backup to other boot system commands in the configuration.
Note After a list of several images are specified with the boot system command, running the command again
results in the list being appended, not removed.
For some platforms, the boot image must be loaded before the system image is loaded. However, on many
platforms, the boot image is loaded only if the router is booting from a network server or if the flash file
system is not specified. If the file system is specified, the router will boot faster because it need not load the
boot image first.
Note If you want to rearrange the order of the entries in the configuration file, you must first issue the no boot
system command and then redefine the list.
You need an FTP server running to retrieve the router image from the host. You also need an account on
the server or anonymous file access to the server.
Stopping Booting and Entering ROM Monitor Mode
During the first 60 seconds of startup, you can force the router to stop booting by pressing the Break key.
The router will enter ROM monitor mode, where you can change the configuration register value or boot
the router manually.
Cisco 1600 Series, Cisco 3600 Series, Cisco 7000 Family, and Cisco 7600 Series Router Notes
For the Cisco 3600 series and Cisco 7000 family, the boot system command modifies the BOOT variable
in the running configuration. The BOOT variable specifies a list of bootable images on various devices.
Note When you use the boot system command on the Cisco 1600 series, Cisco 3600 series, Cisco 7000 family,
and Cisco 7600 series, you affect only the running configuration. You must save the BOOT variable
settings to your startup configuration to place the information under ROM monitor control and to have the
variable function as expected. Use the copy system:running-config nvram:startup-config privileged
EXEC command to save the variable from your running configuration to your startup configuration.
To display the contents of the BOOT variable, use the show bootvar EXEC command.
Examples The following example illustrates a configuration that specifies two possible internetwork locations for a
system image, with the ROM software being used as a backup:
The following example boots the system boot relocatable image file named igs-bpx-l from partition 2 of the
flash device:
The following example instructs the router to boot from an image located on the flash memory card
inserted in slot 0:
The following example specifies the file named new-ios-image as the system image for a Cisco 3600 series
router to load at startup. This file is located in the fourth partition of the flash memory card in slot 0.
This example boots from the image fi le named c1600-y-l in part ition 2 of flash memory of a Cisco 1600
series router:
boot-end-marker
The boot-start-marker and boot-end-marker flags, which can be seen in Cisco IOS software
configuration files, are not CLI commands. These markers are written to configuration files automatically
to flag the beginning and end of the boot commands (boot statements). By flagging boot statements, these
markers allow the router to more reliably load Cisco IOS images during bootup.
A boot statement is one or more lines in a configuration file that tells the router which software image to
load after a powercycling (reboot). The boot-start-marker and boot-end-marker flags will appear around
any boot commands, including:
• boot bootstrap
• boot config
• boot host
• boot network
• boot system
Note, however, that these markers will always appear in the output of the show running-configor more
system:running-config commands, regardless of whether any actual boot commands have been entered.
This means that no boot commands will appear between the markers if no boot commands have been
entered, or if all boot commands have been removed from the configuration, as shown in the “Examples”
section.
The boot-start-marker and boot-end-markerflags cannot be removed or modified using the CLI. These
markers are written to the startup configuration file whenever a copy running-config startup-config
command is issued.
These flags were also introduced to circumvent errors in the configuration file, such as a leading space
before a boot command (such as those sometimes introduced by manually edited configuration files), or the
use of text strings that include the word “boot” in banners or other user-specified text.
If the “boot start-marker” flag is not found in the configuration file, the system will use the traditional
method to identify the boot commands. However, if you are manually creating configuration files, or
copying from older Cisco IOS software releases, the addition of these markers is recommended.
Examples In the following example, a boot command is entered, and the boot-start-marker and boot-end-marker flags
are shown in the context of the startup configuration file:
Enter configuration commands, one per line. End with the end command.
Router(config)# boot system slot0:
Router(config)# end
In the following example, the boot-start-marker and boot-end-marker flags appear in the configuration file
even though no boot commands have been entered:
boot system Specifies the system software image that the router
loads at startup.
boot-start-marker
The boot-start-marker and boot-end-marker flags, which can be seen in Cisco IOS software
configuration files, are not CLI commands. These markers are written to configuration files automatically
to flag the beginning and end of the boot commands (boot statements). By flagging boot statements, these
markers allow the router to more reliably load Cisco IOS images during bootup.
A boot statement is one or more lines in a configuration file that tells the router which software image to
load after a powercycling (reboot). The boot-start-marker and boot-end-marker flags will appear around
any boot commands, including:
• boot bootstrap
• boot config
• boot host
• boot network
• boot system
Note, however, that these markers will always appear in the output of the show running-configor more
system:running-config commands, regardless of whether any actual boot commands have been entered.
This means that no boot commands will appear between the markers if no boot commands have been
entered, or if all boot commands have been removed from the configuration, as shown in the “Examples”
section.
The boot-start-marker and boot-end-markerflags cannot be removed or modified using the CLI. These
markers are written to the startup configuration file whenever a copy running-config startup-config
command is issued.
These flags were also introduced to circumvent errors in the configuration file, such as a leading space
before a boot command (such as those sometimes introduced by manually edited configuration files), or the
use of text strings that include the word “boot” in banners or other user-specified text.
If the “boot start-marker” flag is not found in the configuration file, the system will use the traditional
method to identify the boot commands. However, if you are manually creating configuration files, or
copying from older Cisco IOS software releases, the addition of these markers is recommended.
Examples In the following example, a boot command is entered, and the boot-start-marker and boot-end-marker flags
are shown in the context of the startup configuration file:
Enter configuration commands, one per line. End with the end command.
Router(config)# boot system slot0:
Router(config)# end
In the following example, the boot-start-marker and boot-end-marker flags appear in the configuration file
even though no boot commands have been entered:
boot system Specifies the system software image that the router
loads at startup.
cd
To change the default directory or file system, use the cd command in user EXEC or privileged EXEC
mode.
cd [filesystem:] [directory]
Syntax Description filesystem : (Optional) The URL or alias of the directory or file
systems followed by a colon.
Command Default The initial default file system is flash:. For platforms that do not have a physical device named flash:, the
keyword flash: is aliased to the default Flash device.
For the Supervisor Engine, the initial default file system is disk0 :
If you do not specify a directory on a file system, the default is the root directory on that file system.
dircommand, which displays a list of files on a file system, contains an optional filesystemargument. When
you omit this argument, the system lists the files on the file system specified by the cd command.
If you do not specify a directory on a file system, the default is the root directory on that file system.
Examples In the following example, the cd command is used to set the default file system to the Flash memory card
inserted in slot 0:
Router# pwd
bootflash:/
Router# cd slot0:
Router#
pwd
slot0:/
Router# cd disk0:
Router#
pwd
disk0:/
show file systems Lists available file systems and their alias prefix
names.
Syntax Description force (Optional) Eliminates the confirm step before the
contents of the archive log are cleared.
Command Default If this command is not used, the database entries accumulate in the archive log.
Usage Guidelines When the clear archive log configcommand is entered, only the entries in the configuration logging
database file are deleted. The file itself is not deleted; it will be used in the future to log new entries as they
occur.
Examples The following example clears the database entries that have been saved to the config log without asking
you to confirm the action before the entries are cleared:
Examples This example shows how to clear the traffic meter counters:
Examples The following is sample output from the clear configuration lockcommand when the running
configuration file is not locked by the configure replace command:
The following is sample output from the clear configuration lockcommand when the running
configuration file is locked by the configure replace command:
The following example shows how to use the clear configuration lock command to display the owner or
process ID of the lock and prompt the user for confirmation:
After the lock is cleared, a message will be sent to the terminal if the owner of the lock is a TTY user:
Router(config)# The configuration lock was cleared by user <steve> from terminal <5>
show configuration lock Displays information about the lock status of the
running configuration file during a configuration
replace operation.
clear diagnostic event-log {event-type {error | info | warning} | module {num | slot subslot | all}}
module num | slot subslot Specifies clearing events for a specific module.
Usage Guidelines The clear diagnostic event-log command clears all the events for all the modules.
The clear diagnostic event-log module num command clears events only for a specific module.
The clear diagnostic event-log event-typecommand clears only specific event types such as error,
informative, or warning events.
This example shows how to clear error event logs on all the modules:
Syntax Description cache all Removes all HTTP client cache entries.
cache session session-name Removes HTTP client cache entries of the HTTP
client application session specified by the session-
name argument.
cache url complete-url Removes the HTTP client cache entry whose
location is specified by the complete-url argument,
a Cisco IOS File System (IFS) Uniform Resource
Locator (URL), and that consists of HTML files
used by an HTTP server.
Usage Guidelines Use this command to clear entries from the HTTP client cache pool: all the entries, all the entries owned by
a specific session, or only the entry associated with a specific request from an HTTP server.
Examples The following example clears all entries in the HTTP client cache:
The following example removes HTTP client cache entries that belong to the HTTP Client File System
(CFS) application:
The following example removes HTTP client cache entries at the location http://myrouter.cisco.com/flash:/:
clear logging
To clear messages from the logging buffer, use the clear logging command in privileged EXEC mode.
Cisco IOS XE Release 2.4 This command was modified. The persistentand
url keywords, and the filesystem:/directory
arguments were added.
Usage Guidelines The clear logging persistent command is used to remove stored audit records. This action can be
performed by the audit administrator only. The clear logging persistentcommand clears only log files
stored in the directory but does not remove the directory itself. If no log URL is not specified for logging,
this command clears files from the location as specified in the logging persistent command.
The following example shows how to clear persistent logging files from a specific directory:
Syntax Description disk name (Optional) Stores the system event log in the
specified disk.
Usage Guidelines SEA is supported on switches that have a Supervisor Engine 32 or Supervisor Engine 720 with a compact
flash adapter and a Compact Flash card (WS-CF-UPG= for Supervisor Engine 720).
Cisco Universal Broadband Router 10012
The SEA feature is used to address debug trace and system console constraints. SEA is a logging feature
that allows the modules in the system to report major and critical events to the route processor (RP). The
events occurring on the line card or jacket card are also sent to the RP using Inter-Process Communication
(IPC) capability. Use the clear logging system command to clear the event records stored in the SEA log
file.
Note To store the system event logs, the SEA requires either the PCMCIA ATA disk or Compact Flash Disk in
compact flash adapter for PRE2.
Related Commands copy logging system Copies the archived system events to another
location.
Usage Guidelines This command clears the contents of the XML-formatted logging buffer, but does not clear the contents of
the standard logging buffer. The system will prompt you to confirm the action before clearing the buffer.
Command Description
show logging xml Displays the state of XML-formatted system
message logging, followed by the contents of the
XML-specific buffer.
Cisco IOS XE Release 2.1 This command was implemented on the Cisco ASR
1000 Series Aggregation Services Routers.
Usage Guidelines This command clears all processor threshold values and the input/output memory threshold values, if any.
Examples The following example shows how to clear the low-water-mark memory:
Usage Guidelines This command replaces the clear mls stats command, which was introduced on the Supervisor Engine 720
in Cisco IOS Release 12.2(17a)SX, and on the Supervisor Engine 2 in Cisco IOS Release 12.2(17d)SXB.
Examples This example shows how to reset the MLS statistics counters for all modules:
Router#
clear mls statistics
Router#
This example shows how to reset the MLS statistics counters for a specific module:
Router#
clear mls statistics module 5
Router#
Usage Guidelines The Parser Cache feature optimizes the parsing (translation and execution) of Cisco IOS software
configuration command lines by remembering how to parse recently encountered command lines,
decreasing the time required to process large configuration files.
The clear parser cache command will free the system memory used by the Parser Cache feature and will
erase the hit/miss statistics stored for the output of the show parser statistics EXEC command. This
command is only effective when the Parser Cache feature is enabled.
Examples The following example shows the clearing of the parser cache:
show parser statistics Displays statistics about the last configuration file
parsed and the status of the Parser Cache feature.
Usage Guidelines The clear parser statistics command will free the system memory used for recording parser performance
statistics stored for the output of the show parser statistics EXEC command..
Bootup hits:125
Bootup misses:43
Bootup clear parser cache:0
show parser statistics Displays statistics about the last configuration file
parsed and the status of the Parser Cache feature.
Examples This example shows how to clear the interrupt-throttling counters for the platform:
Router#
clear platform netint
Router#
Usage Guidelines See the documentation of the scheduler interrupt mask commands (listed in the Related Commands
table) for further details on process interrupt mask profiling.
Examples The following example demonstrates how to the clear interrupt mask statistics from system memory for all
processes:
scheduler interrupt mask size Configures the maximum number of entries that
can exist in the interrupt mask buffer.
scheduler interrupt mask time Configures the maximum time that a process can
run with interrupts masked.
show process interrupt mask buffer Displays the information stored in the interrupt
mask buffer.
Command Description
show processes interrupt mask detail Displays interrupt masked details for the specified
processes or all processes in the system.
Examples The following example shows how to clear the SCP accounting information:
clear tcp
To clear a TCP connection, use the clear tcpcommand in privileged EXEC mode.
clear tcp {line line-number | local hostname port remote hostname port | tcb address}
Syntax Description line line-number Line number of the TCP connection to clear.
local hostname port remote hostname port Host name of the local router and port and host
name of the remote router and port of the TCP
connection to clear.
Usage Guidelines The clear tcp command is particularly useful for clearing hung TCP connections.
The clear tcp line line-numbercommand terminates the TCP connection on the specified tty line.
Additionally, all TCP sessions initiated from that tty line are terminated.
The clear tcp local hostname port remote hostname portcommand terminates the specific TCP connection
identified by the host name and port pair of the local and remote router.
The clear tcp tcb address command terminates the specific TCP connection identified by the TCB address.
Examples The following example clears a TCP connection using its tty line number. The show tcp command displays
the line number (tty2) that is used in the clear tcp command.
SRTT: 710 ms, RTTO: 4442 ms, RTV: 1511 ms, KRTT: 0 ms
minRTT: 0 ms, maxRTT: 300 ms, ACK hold: 300 ms
The following example clears a TCP connection by specifying its local router host name and port and its
remote router host name and port. The show tcp brief command displays the local (Local Address) and
remote (Foreign Address) host names and ports to use in the clear tcp command.
The following example clears a TCP connection using its TCB address. The show tcp brief command
displays the TCB address to use in the clear tcp command.
Usage Guidelines If you do not specify a vlan-id; the software-cached counter values for all existing VLANs are cleared.
Examples This example shows how to clear the software-cached counter values for a specific VLAN:
clock
To configure the port clocking mode for the 1000BASE-T transceivers, use the clock command in interface
configuration mode. To return to the default settings,use the no form of this command.
• passive --Recovers the clock from the received signal and uses the recovered clock to determine
transmitter-operation timing.
• active prefer --Auto negotiates with the far end of the link but preference is given to the active-clock
switch.
• passive prefer --Auto negotiates with the far end of the link but preference is given to the passive-
clock switch.
Enter the show running-config interface command to display the current clock mode.
Enter the show interfaces command to display the clock mode that is negotiated by the firmware.
show running-config interface Displays the status and configuration of the module
or Layer 2 VLAN.
Command Default By default, the system clock is set to restart from the last known system clock value for platforms that have
no hardware calendar.
Usage Guidelines For platforms that have hardware calendars, the clock initialize nvram command is not available. When
the no form of the command is configured, the system clock gets initialized to default standard values. The
default values can be either 1MAR1993 or 1MAR2002.
Examples The following example shows how to set the system clock to restart from the last known system clock
value:
config-register
To change the configuration register settings, use the config-register command in global configuration
mode.
config-register value
Command Default Refer to the documentation for your platform for the default configuration register value. For many newer
platforms, the default is 0x2102, which causes the router to boot from Flash memory and the Break key to
be ignored.
Usage Guidelines This command applies only to platforms that use a software configuration register.
The lowest four bits of the configuration register (bits 3, 2, 1, and 0) form the boot field. The boot field
determines if the router boots manually, from ROM, or from Flash or the network.
To change the boot field value and leave all other bits set to their default values, follow these guidelines:
• If you set the configuration register boot field value to 0x0, you must boot the operating system
manually with the boot command.
• If you set the configuration register boot field value to 0x1, the router boots using the default ROM
software.
• If you set the configuration register boot field to any value from 0x2 to 0xF, the router uses the boot
field value to form a default boot filename for booting from a network server.
For more information about the configuration register bit settings and default filenames, refer to the
appropriate router hardware installation guide.
Note In a virtual switch application, If you have configured your config-register with a value that would skip file
parsing during the bootup process, your change to either a standalone or virtual switch will not take place
until you reconfigure your config-register. The config-register must be allowed to parse files in order to
ensure the conversion from either a standalone or virtual switch.
Examples In the following example, the configuration register is set to boot the system image from Flash memory:
config-register 0x2102
Examples The following example shows how to check the syntax configuration using the configure check syntax
command:
To enable single-user (exclusive) access functionality for the Cisco IOS command-line interface (CLI), use
the configuration mode exclusive command in global configuration mode. To disable the single-user
access (configuration locking) feature, use the no form of this command.
Release Modification
12.2(33)SXI This command was integrated into a release earlier
than Cisco IOS Release 12.2(33)SXI.
Cisco IOS XE Release 3.1S This command was replaced by the parser
command serializer command.
Usage Guidelines
Note As of the 15.0 release, the configuration mode exclusive command is no longer available on the S and T
trains.
The configuration mode exclusive command enables the exclusive configuration lock feature. The
exclusive configuration lock allows single-user access to configuration modes using single-user
configuration mode. While the device configuration is locked, no other users can enter configuration
commands.
Users accessing the device using the state-full, session-based transports (telnet, Secure Shell (SSH) are able
to enter single-user configuration mode. The user enters single-user configuration mode by acquiring the
exclusive configuration lock using the configure terminal lock privileged EXEC mode command. The
configuration lock is released when the user exits configuration mode by using the end or exit command,
or by pressing Ctrl-Z. While a user is in single-user configuration mode, no other users can configure the
device. Users accessing Command Line Interface (CLI) options through stateless protocols (that is, the
HTTP web-based user interface) cannot access single-user configuration mode. (However, an Application
Programming Interface (API) allows the stateless transports to lock the configuration mode, complete its
operations, and release the lock.)
Examples The following example shows how to configure the configuration file for single-user autoconfiguration
mode by using the configuration mode exclusive auto command. Use the configuration terminal
command to enter global configuration mode and lock the configuration mode exclusively. After the Cisco
IOS configuration mode is locked exclusively, you can verify this configuration by entering the show
configuration lockcommand.
Building configuration...
Current configuration : 2296 bytes
configuration mode exclusive auto <========== auto policy
Router# configure terminal ?
<======== lock option not displayed when in auto policy
Router# configure terminal
<======= acquires the lock
The configuration mode is locked exclusively. The lock is cleared after you exit from configuration mode
by entering the end or exitcommand.
Configuration mode locked exclusively. The lock will be cleared once you exit out of
configuration mode using end/exit
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# configuration mode exclusive manual
Router(config)# end
Router#
Router# show running-configuration
| include configuration
Building configuration...
Current configuration : 2298 bytes
configuration mode exclusive manual <==== 'manual' policy
Router# show configuration lock
lock Lock configuration mode <========= 'lock' option displayed in 'manual' policy
Router# configure terminal <============ ‘configure terminal’ won't acquire lock
automatically
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# show configuration lock
lock Lock configuration mode <======= 'lock' option displayed when in 'manual' policy
Router# configure terminal lock
Configuration mode is locked exclusively. The lock is cleared after you exit from configuration mode by
entering the end or exit command. Enter configuration commands, one per line. End with CNTL/Z.
Command Description
debug configuration lock Enables debugging of the Cisco IOS configuration
lock.
show configuration lock Displays information about the lock status of the
running configuration file during a configuration
replace operation.
configure confirm
To confirm replacement of the current running configuration with a saved Cisco IOS configuration file, use
the configure confirm command in privileged EXEC mode.
configure confirm
Usage Guidelines The configure confirm command is used only if the time seconds keyword and argument of the configure
replace command are specified. If the configure confirm command is not entered within the specified
time limit, the configuration replace operation is automatically reversed (in other words, the current
running configuration file is restored to the configuration state that existed prior to entering the configure
replace command).
Examples The following example shows the use of the configure replace command with the time seconds keyword
and argument. You must enter the configure confirm command within the specified time limit to confirm
replacement of the current running configuration file:
path (config-archive) Specifies the location and filename prefix for the
files in the Cisco IOS configuration archive.
configure memory
To configure the system from the system memory, use the configure memory command in privileged
EXEC mode.
configure memory
Usage Guidelines On all platforms except Class A Flash file system platforms, this command executes the commands located
in the configuration file in NVRAM (the “startup configuration file”).
On Class A Flash file system platforms, if you specify the configure memory command, the router
executes the commands pointed to by the CONFIG_FILE environment variable. The CONFIG_FILE
environment variable specifies the location of the configuration file that the router uses to configure itself
during initialization. The file can be located in NVRAM or any of the Flash file systems supported by the
platform.
When the CONFIG_FILE environment variable specifies NVRAM, the router executes the NVRAM
configuration only if it is an entire configuration, not a distilled version. A distilled configuration is one that
does not contain access lists.
To view the contents of the CONFIG_FILE environment variable, use the show bootvar EXEC command.
To modify the CONFIG_FILE environment variable, use the boot config command and then save your
changes by issuing the copy system:running-config nvram:startup-config command.
Examples In the following example, a router is configured from the configuration file in the memory location pointed
to by the CONFIG_FILE environment variable:
configure network
The configure network command was replaced by the copy{rcp| tftp} running-config command in Cisco
IOS Release 11.0. To maintain backward compatibility, the configure network command continues to
function in Cisco IOS Release 12.2(11)T for most systems, but support for this command may be removed
in a future release.
The copy{rcp| tftp} running-config command was replaced by the copy {ftp: | rcp: | tftp:}[filename]
system: running-config command in Cisco IOS Release 12.1.
The copy {ftp: | rcp: | tftp:}[filename] system: running-config command specifies that a configuration
file should be copied from a FTP, rcp, or TFTP source to the running configuration. See the description of
the copy command in this chapter for more information.
configure overwrite-network
The configure overwrite-network has been replaced by the copy {ftp-url | rcp-url | tftp-url
nvram:startup-config command. See the description of the copycommand in the Cisco IOS File System
Commands chapter for more information.
configure replace
To replace the current running configuration with a saved Cisco IOS configuration file, use the configure
replace command in privileged EXEC mode.
configure replace target-url [nolock] list force ignorecase [revert trigger [error] [timer minutes] |
time minutes]
Syntax Description target-url URL (accessible by the Cisco IOS file system) of
the saved Cisco IOS configuration file that is to
replace the current running configuration.
Usage Guidelines When configuring more than one keyword option, the following rules apply:
• The list keyword must be entered before the force and time keywords.
• The force keyword must be entered before the time keyword.
If the current running configuration is replaced with a saved Cisco IOS configuration file that contains
commands unaccepted by the Cisco IOS software parser, an error message is displayed listing the
commands that were unaccepted. The total number of passes performed in the configuration replace
operation is also displayed.
In Cisco IOS Release 12.2(25)S, a locking feature for the configuration replace operation was introduced.
When the configure replace command is enabled, the Cisco IOS running configuration file is locked by
default for the duration of the configuration replace operation. This locking mechanism prevents other users
from changing the running configuration while the replace operation is taking place, which might otherwise
cause the replace operation to terminate unsuccessfully. You can disable the locking of the running
configuration using the configure replace nolock command.
The running configuration lock is automatically cleared at the end of the configuration replace operation. It
is not expected that you should need to clear the lock manually during the replace operation, but as a
protection against any unforeseen circumstances, you can manually clear the lock using the clear
configuration lock command. You can also display any locks that may be currently applied to the running
configuration using the show configuration lock command.
Replacing the Current Running Configuration with a Saved Cisco IOS Configuration File
The following example shows how to replace the current running configuration with a saved Cisco IOS
configuration file named disk0:myconfig. Note that the configure replace command interactively prompts
you to confirm the operation.
In the following example, the list keyword is specified to display the command lines that were applied
during the configuration replace operation:
Note The path command must be configured before using the archive config command.
You first save the current running configuration in the configuration archive as follows:
After making changes to the running configuration file, you might want to roll back these changes and
revert to the configuration that existed before the changes were made. The show archive command is used
to verify the version of the configuration to be used as a target file. The configure replace command is
then used to revert to the target configuration file as shown in the following example:
configure revert
To cancel the timed rollback and trigger the rollback immediately, or to reset parameters for the timed
rollback, use the configure revertcommand in privileged EXEC mode.
configure revert {now | timer {minutes | idle minutes}}
Syntax Description now Cancels the timed rollback and reverts immediately.
Usage Guidelines In order to use the configure revert command to configure a timed rollback, the Configuration Archive
functionality must be enable first. The Configuration Archive APIs are used to store the current
configuration before applying any changes or rolling back to the previous configuration.
In case of multi-user environments, only the user who enabled the timed rollback functionality will have
the permission to perform the following operations:
• Confirm the configuration change
• Reset the timer
• Cancel the timer and trigger rollback immediately
Examples The following example shows how to cancel the timed rollback and revert to the saved configuration
immediately:
Rourter(config)# archive
Router(config-archive)# path disk0:abc
Router# configure revert now
path (config-archive) Specifies the location and filename prefix for the
files in the Cisco IOS configuration archive.
2. configure terminal
To enter global configuration mode, use the configure terminal command in privileged EXEC mode.
configure terminal
idle minutes Idle time in minutes (1-120) for which to wait for
confirmation.
Release Modification
12.4(20)T The revertkeyword option was added, along with
the timer parameters of idle and minutes.
Usage Guidelines Use this command to enter global configuration mode. Note that commands in this mode are written to the
running configuration file as soon as you enter them (using the Enter key/Carriage Return).
After you enter the configure terminalcommand, the system prompt changes from <router-name># to
<router-name>(config)# , indicating that the router is in global configuration mode. To leave global
configuration mode and return to privileged EXEC mode, type exit or press Ctrl-Z.
To view the changes to the configuration you have made, use the more system:running-config command
or show running-config command in user EXEC or privileged EXEC mode.
Configuration Locking
The first user to enter the configure terminal lockcommand acquires the configuration lock (exclusive
configuration mode).
Examples The following example shows how to enter global configuration mode and lock the Cisco IOS software in
exclusive mode:
configuration mode exclusive Enables locking of the configuration file for single
user access.
Command Description
show running-config Displays the currently running configuration.
or
more system:running-config
confreg
To change the configuration register settings while in ROM monitor mode, use the confreg command in
ROM monitor mode.
confreg [value]
Command Default Refer to your platform documentation for the default configuration register value.
Usage Guidelines Not all versions in the ROM monitor support this command. Refer to your platform documentation for
more information on ROM monitor mode.
If you use this command without specifying the configuration register value, the router prompts for each bit
of the configuration register.
The lowest four bits of the configuration register (bits 3, 2, 1, and 0) form the boot field. The boot field
determines if the router boots manually, from ROM, or from Flash or the network.
To change the boot field value and leave all other bits set to their default values, follow these guidelines:
• If you set the configuration register boot field value to 0x0, you must boot the operating system
manually with the boot command.
• If you set the configuration register boot field value to 0x1, the router boots using the default ROM
software.
• If you set the configuration register boot field to any value from 0x2 to 0xF, the router uses the boot
field value to form a default boot filename for booting from a network server.
For more information about the configuration register bit settings and default filenames, refer to the
appropriate router hardware installation guide.
Examples In the following example, the configuration register is set to boot the system image from Flash memory:
confreg 0x210F
In the following example, no configuration value is entered, so the system prompts for each bit in the
register:
Configuration Summary
enabled are:
console baud: 9600
boot: the ROM Monitor
Configuration Summary
enabled are:
diagnostic mode
console baud: 9600
boot: the ROM Monitor
continue
Usage Guidelines Use this command to return to EXEC mode from ROM monitor mode, to use the system image instead of
reloading. On older platforms, the angle bracket (< >) indicates that the router is in ROM monitor mode.
On newer platforms, rommon number> is the default ROM monitor prompt. Typically, the router is in
ROM monitor mode when you manually load a system image or perform diagnostic tests. Otherwise, the
router will most likely never be in this mode.
Caution While in ROM monitor mode, the Cisco IOS system software is suspended until you issue either a reset or
the continue command.
Examples In the following example, the continue command switches the router from ROM monitor to EXEC mode:
> continue
Router#
copy
To copy any file from a source to a destination, use the copy command in privileged EXEC or diagnostic
mode.
Syntax Description /erase (Optional) Erases the destination file system before
copying.
Note This option is typically provided on
platforms with limited memory to allow for
an easy way to clear local flash memory
space.
The exact format of the source and destination URLs varies according to the file or directory location. You
may enter either an alias keyword for a particular file or a filename that follows the standard Cisco IOS file
system syntax (filesystem :[/filepath ][/filename ]).
The table below shows two keyword shortcuts to URLs.
The following tables list URL prefix keywords by file system type. The available file systems will vary by
platform. If you do not specify a URL prefix keyword, the router looks for a file in the current directory.
The table below lists URL prefix keywords for Special (opaque) file systems.
The table belows lists URL prefix keywords for remote file systems.
The table below lists URL prefix keywords for local writable storage file systems.
Table 14 URL Prefix Keywords for Local Writable Storage File Systems
Release Modification
12.2(28)SB This command was integrated into Cisco IOS
Release 12.2(28)SB.
Cisco IOS XE Release 2.1 The Cisco ASR1000 series routers became
available, and introduced the copy command in
diagnostic mode.
Usage Guidelines The fundamental function of the copy command is to allow you to copy a file (such as a system image or
configuration file) from one location to another location. The source and destination for the file is specified
using a Cisco IOS File System URL, which allows you to specify any supported local or remote file
location. The file system being used (such as a local memory source, or a remote server) dictates the syntax
used in the command.
You can enter on the command line all necessary source- and destination-URL information and the
username and password to use, or you can enter the copy command and have the router prompt you for any
missing information.
For local file systems, two commonly used aliases exist for the system:running-config and
nvram:startup-config files; these aliases are running-config and startup-config, respectively.
Timesaver Aliases are used to reduce the amount of typing you need to perform. For example, it is easier to type copy
run start (the abbreviated form of the copy running-config startup-config command) than it is to type
copy system:r nvram:s (the abbreviated form of the copy system:running-config nvram:startup-
configcommand). These aliases also allow you to continue using some of the common commands used in
previous versions of Cisco IOS software.
The entire copying process may take several minutes and differs from protocol to protocol and from
network to network.
The colon is required after the file system URL prefix keywords (such as flash). In some cases, file system
prefixes that did not require colons in earlier software releases are allowed for backwards compatibility, but
use of the colon is recommended.
In the URL syntax for ftp:, http:, https:, rcp:, scp: and tftp:, the location is either an IP address or a host
name. The filename is specified relative to the directory used for file transfers.
The following sections contain usage guidelines for the following topics:
Understanding Invalid Combinations of Source and Destination
Some invalid combinations of source and destination exist. Specifically, you cannot copy:
• From a running configuration to a running configuration
Character Description
! For network transfers, an exclamation point
indicates that the copy process is taking place. Each
exclamation point indicates the successful transfer
of ten packets (512 bytes each).
Understanding Partitions
You cannot copy an image or configuration file to a flash partition from which you are currently running.
For example, if partition 1 is running the current system image, copy the configuration file or image to
partition 2. Otherwise, the copy operation will fail.
You can identify the available flash partitions by entering the show file system EXECcommand.
Using rcp
The rcp requires a client to send a remote username upon each rcp request to a server. When you copy a
configuration file or image between the router and a server using rcp, the Cisco IOS software sends the first
valid username it encounters in the following sequence:
1 The remote username specified in the copy command, if a username is specified.
2 The username set by the ip rcmd remote-username global configuration command, if the command is
configured.
3 The remote username associated with the current tty (terminal) process. For example, if the user is
connected to the router through Telnet and was authenticated through the username command, the
router software sends the Telnet username as the remote username.
4 The router host name.
For the rcp copy request to process, an account must be defined on the network server for the remote
username. If the network administrator of the destination server did not establish an account for the remote
username, this command will not run. If the server has a directory structure, the configuration file or image
is written to or copied from the directory associated with the remote username on the server. For example,
if the system image resides in the home directory of a user on the server, specify that username as the
remote username.
If you are writing to the server, the rcp server must be properly configured to accept the rcp write request
from the user on the router. For UNIX systems, add an entry to the .rhosts file for the remote user on the
rcp server. Suppose the router contains the following configuration lines:
hostname Rtr1
ip rcmd remote-username User0
If the router IP address translates to Router1.company.com, then the .rhosts file for User0 on the rcp server
should contain the following line:
Router1.company.com Rtr1
Refer to the documentation for your rcp server for more details.
If you are using a personal computer as a file server, the computer must support the remote shell protocol
(rsh).
Using FTP
The FTP protocol requires a client to send a username and password with each FTP request to a remote
FTP server. Use the ip ftp username and ip ftp password global configuration commands to specify a
default username and password for all copy operations to or from an FTP server. Include the username in
the copy command syntax if you want to specify a username for that copy operation only.
When you copy a file from the router to a server using FTP, the Cisco IOS software sends the first valid
username that it encounters in the following sequence:
1 The username specified in the copy command, if a username is specified.
2 The username set by the ip ftp username command, if the command is configured.
3 Anonymous.
The router sends the first valid password in the following list:
1 The password specified in the copy command, if a password is specified.
2 The password set by the ip ftp password command, if the command is configured.
3 The router forms a password [email protected]. The variable username is the username
associated with the current session, routername is the configured host name, and domain is the domain
of the router.
The username and password must be associated with an account on the FTP server. If you are writing to the
server, the FTP server must be properly configured to accept the FTP write request from the user on the
router.
Note The Syslog message will display 'xxxx' in place of the password entered in the syntax of the copy {ftp:}
command.
If the server has a directory structure, the configuration file or image is written to or copied from the
directory associated with the username on the server. For example, if the system image resides in the home
directory of a user on the server, specify that username as the remote username.
Refer to the documentation for your FTP server for details on setting up the server.
Using HTTP or HTTPS
Copying a file to or from a remote HTTP or HTTPS server, to or from a local file system, is performed
using the embedded Secure HTTP client that is integrated in Cisco IOS software. The HTTP client is
enabled by default.
Downloading files from a remote HTTP or HTTPS server is performed using the HTTP client integrated in
Cisco IOS software.
If a username and password are not specified in the copy command syntax, the system uses the default
HTTP client username and password, if configured.
When you copy a file from a remote HTTP or HTTPS server, the Cisco IOS software sends the first valid
username that it encounters in the following sequence:
1 The username specified in the copy command, if a username is specified.
2 The username set by the ip http client username command, if the command is configured.
3 Anonymous.
The router sends the first valid password in the following list:
1 The password specified in the copy command, if a password is specified.
2 The password set by the ip http client password command, if the command is configured.
3 The router forms the password [email protected]. The variable username is the username
associated with the current session, routername is the configured host name, and domain is the domain
of the router.
Storing Images on Servers
Use the copy flash: destination-urlcommand (for example, copy flash: tftp:) to copy a system image or
boot image from flash memory to a network server. You can use the copy of the image as a backup copy.
Also, you can also use the image backup file to verify that the image in flash memory is the same as that in
the original file.
Copying from a Server to Flash Memory
Use the copy destination-url flash: command (for example, copy tftp: flash:) to copy an image from a
server to flash memory.
On Class B file system platforms, the system provides an option to erase existing flash memory before
writing onto it.
Note Verify the image in flash memory before booting the image.
Verifying Images
When copying a new image to your router, you should confirm that the image was not corrupted during the
copy process. You can verify the integrity of the image in any of the following ways:
• Depending on the destination file system type, a checksum for the image file may be displayed when
the copy command completes. You can verify this checksum by comparing it to the checksum value
provided for your image file on Cisco.com.
Caution If the checksum values do not match, do not reboot the router. Instead, reissue the copycommand and
compare the checksums again. If the checksum is repeatedly wrong, copy the original image back into flash
memory beforeyou reboot the router from flash memory. If you have a corrupted image in flash memory
and try to boot from flash memory, the router will start the system image contained in ROM (assuming
booting from a network server is not configured). If ROM does not contain a fully functional system image,
the router might not function and will need to be reconfigured through a direct console port connection.
Note Some specific commands might not get saved to NVRAM. You will need to enter these commands again if
you reboot the machine. These commands are noted in the documentation. We recommend that you keep a
listing of these settings so you can quickly reconfigure your router after rebooting.
On a Cisco 7507 or Cisco 7513 router configured for Dual RSPs, if you copy a file to nvram:startup-
configuration with automatic synchronization disabled, the system prompts whether you also want to copy
the file to the slave startup configuration. The default answer is yes. If automatic synchronization is
enabled, the system automatically copies the file to the slave startup configuration each time you use a
copy command with nvram:startup-configuration as the destination.
Using the copy command with the ASR1000 Series Routers
The copy command is available in both privileged EXEC and diagnostic mode on the Cisco ASR1000
series routers. Because the copycommand is available in diagnostic mode, it can be used to copy all types
of files between directories and remote locations even in the event of an IOS failure.
Router#
copy rcp://[email protected]/file1 flash:file1
Destination file name [file1]?
Accessing file 'file1' on 172.16.101.101...
Loading file1 from 172.16.101.101 (via Ethernet0): ! [OK]
Erase flash device before writing? [confirm]
Flash contains files. Are you sure you want to erase? [confirm]
Copy 'file1' from server
as 'file1' into Flash WITH erase? [yes/no] yes
Copying an Image from a Server to a Flash Memory Using Flash Load Helper Example
The following example copies a system image into a partition of flash memory. The system will prompt for
a partition number only if there are two or more read/write partitions or one read-only and one read/write
partition and dual flash bank support in boot ROMs. If the partition entered is not valid, the process
terminates. You can enter a partition number, a question mark (?) for a directory display of all partitions, or
a question mark and a number (? number) for directory display of a particular partition. The default is the
first read/write partition. In this case, the partition is read-only and has dual flash bank support in boot
ROM, so the system uses flash Load Helper.
Router#
copy flash: rcp:
IP address of remote host [255.255.255.255]? 172.16.13.110
Name of file to copy? gsxx
writing gsxx - copy complete
Copy an Image from Flash Memory to an SSH Server Using scp Example
The following example shows how to use scp to copy a system image from flash memory to a server that
supports SSH:
The system will prompt if there are two or more partitions. If the partition entered is not valid, the process
terminates. You have the option to enter a partition number, a question mark (?) for a directory display of
all partitions, or a question mark and a number (? number) for a directory display of a particular partition.
The default is the first partition.
Copying an Image from a Flash Memory File System to an FTP Server Example
The following example copies the file c3600-i-mz from partition 1 of the flash memory card in slot 0 to an
FTP server at IP address 172.23.1.129:
Router#
copy bootflash:file1 tftp://192.168.117.23/file1
Verifying checksum for 'file1' (file # 1)... OK
Copy 'file1' from Flash to server
as 'file1'? [yes/no]y
!!!!...
Upload to server done
Flash copy took 0:00:00 [hh:mm:ss]
Router#
copy rcp://[email protected]/host1-confg system:running-config
Configure using host1-confg from 172.16.101.101? [confirm]
Connected to 172.16.101.101
Loading 1112 byte file host1-confg:![OK]
Router#
%SYS-5-CONFIG: Configured from host1-config by rcp from 172.16.101.101
Router#
copy ftp://netadmin1:[email protected]/host2-confg nvram:startup-config
Configure using rtr2-confg from 172.16.101.101?[confirm]
Connected to 172.16.101.101
Loading 1112 byte file rtr2-confg:![OK]
[OK]
Router#
%SYS-5-CONFIG_NV:Non-volatile store configured from rtr2-config by
FTP from 172.16.101.101
Router(config)#
end
Router#
copy system:running-config rcp:
Router#
copy nvram:startup-config tftp:
Remote host[]? 172.16.101.101
The following example shows the warning that the system provides if you try to save configuration
information from bootstrap into the system:
Building configuration...
Router# copy
http://
www.example.com:8080/configs/config1 flash:config1
In the following example, a default username and password for HTTP Client communications is
configured, and then the file sample.scr is copied from a secure HTTP server using HTTPS:
Router(config)# end
In the following example, an HTTP proxy server is specified before using the copy http:// command:
Router(config)# end
Router# copy
http://
www.example.com/configs/config3 flash:/configs/config3
Copying an Image from the Master RSP Card to the Slave RSP Card Example
The following example copies the router-image file from the flash memory card inserted in slot 1 of the
master RSP card to slot 0 of the slave RSP card in the same router:
boot system Specifies the system image that the router loads at
startup.
show (flash file system) Displays the layout and contents of a flash memory
file system.
copy http
The copy http:// command is documented as part of the copy command.
copy https
The copy https:// command is documented as part of the copy command.
Syntax Description target : Specifies the destination file system; Valid values
are as follows:
• bootflash:
• disk0:
• disk1:
• ftp:
• http:
• https:
• rcp:
• slavebootflash:
• slavedisk0:
• slavedisk1:
• slavesup-bootdisk:
• slavesup-bootflash:
• sup-bootdisk:
• sup-bootflash:
• tftp:
Release Modification
12.2(33)SCC The command was introduced for the Cisco
uBR10012 router in the Cisco IOS Software
Release 12.2(33)SCC.
Usage Guidelines System Event Archive (SEA) is supported on switches that have a Supervisor Engine 32 or Supervisor
Engine 720 with a compact flash adapter and a Compact Flash card (WS-CF-UPG= for Supervisor Engine
720).
Cisco Universal Broadband Router 10012
The System Event Archive (SEA) feature is used to address the debug trace and system console constraints.
Use the copy logging systemcommand to copy the major and critical events stored in the sea_log.dat file,
to the destination file system.
Note To store the system event logs, the SEA requires either the PCMCIA ATA disk or Compact Flash Disk in
compact flash adapter for PRE2.
The following example shows how to copy the SEA to the file system of disk0:
The following example shows how to copy the SEA using the remote file copy function (rcp):
Related Commands clear logging system Clears the event records stored in the SEA.
copy xmodem
To copy a Cisco IOS image from a local or remote computer (such as a PC, Macintosh, or UNIX
workstation) to Flash memory on a Cisco 3600 series router using the Xmodem protocol, use the copy
xmodem: command in EXEC mode.
Usage Guidelines This command is a form of the copy command. The copy xmodem: and copy xmodem commands are
identical. See the description of the copy command for more information.
Copying a file using FTP, rcp, or TFTP is much faster than copying a file using Xmodem. Use the copy
xmodem: command only if you do not have access to an FTP, TFTP, or rcp server.
This copy operation is performed through the console or AUX port. The AUX port, which supports
hardware flow control, is recommended.
No output is displayed on the port over which the transfer is occurring. You can use the logging buffered
command to log all router messages sent to the console port during the file transfer.
Examples The following example initiates a file transfer from a local or remote computer to the router’s internal Flash
memory using the Xmodem protocol:
copy ymodem
To copy a Cisco IOS image from a local or remote computer (such as a PC, Macintosh, or UNIX
workstation) to Flash memory on a Cisco 3600 series router using the Ymodem protocol, use the copy
ymodem: command in EXEC mode.
Usage Guidelines The copy ymodem: and copy ymodem commands are identical. See the description of the copycommand
for more information.
Copying a file using FTP, rcp, or TFTP is much faster than copying a file using Ymodem. Use the copy
ymodem: command only if you do not have access to an FTP, rcp, or TFTP server.
This copy operation is performed through the console or AUX port. The AUX port, which supports
hardware flow control, is recommended.
No output is displayed on the port over which the transfer is occurring. You can use the logging buffered
command to log all router messages sent to the console port during the file transfer.
Examples The following example initiates a file transfer from a local or remote computer to the router’s internal Flash
memory using the Ymodem protocol:
copy noverify
To disable the automatic image verification for the current copy operation, use the copy /
noverifycommand.
Usage Guidelines The exact format of the source and destination URLs varies according to the file or directory location. You
may enter either an alias keyword for a particular file or an alias keyword for a file system type (not a file
within a type).
Timesaver Aliases are used to cut down on the amount of typing that you need to perform. For example, it is easier to
type copy run start (the abbreviated form of the copy running-config startup-config command) than it is
to type copy system:r nvram:s (the abbreviated form of the copy system:running-config nvram:startup-
configcommand). These aliases allow you to continue using some of the common commands that are used
in previous versions of Cisco IOS software.
The following tables list aliases by file system type. If you do not specify an alias, the system looks for a
file in the current directory.
The table below lists the URL prefix aliases for special (opaque) file systems.
The table below lists the URL prefix aliases for network file systems.
The table below lists the URL prefix aliases for local writable storage file systems.
Table 19 URL Prefix Aliases for Local Writable Storage File Systems
You can enter on the command line all necessary source- and destination-URL information and the
username and password to use, or you can enter the copy command and have the switch prompt you for
any missing information.
If you enter information, choose one of the following three options: running-config, startup-config, or a
file system alias (see the tables above). The location of a file system dictates the format of the source or
destination URL.
The colon is required after the alias. However, earlier commands that do not require a colon remain
supported but are unavailable in context-sensitive help.
The entire copying process may take several minutes and differs from protocol to protocol and from
network to network.
In the alias syntax for ftp:, rcp:, and tftp:, the location is either an IP address or a hostname. The filename
is specified for the directory that is used for file transfers.
Enter the file verify autocommand to set up verification globally.
Examples This example shows how to disable the automatic image verification for the current copy operation:
Command Description
verify Verifies the checksum of a file on a Flash memory
file system or compute an MD5 signature for a file.
databits
To set the number of data bits per character that are interpreted and generated by the router hardware, use
the databitscommand in line configuration mode. To restore the default value, use the no form of the
command.
databits {5 | 6 | 7 | 8}
no databits
Usage Guidelines The databits line configuration command can be used to mask the high bit on input from devices that
generate 7 data bits with parity. If parity is being generated, specify 7 data bits per character. If no parity
generation is in effect, specify 8 data bits per character. The other keywords are supplied for compatibility
with older devices and generally are not used.
Examples The following example sets the number of data bits per character to seven on line 4:
Router(config)# line 4
Router(config-line)# databits 7
terminal databits Changes the number of data bits per character for
the current terminal line for this session.
terminal data-character-bits Sets the number of data bits per character that are
interpreted and generated by the Cisco IOS
software for the current line and session.
data-character-bits
To set the number of data bits per character that are interpreted and generated by the Cisco IOS software,
use the data-character-bitscommand in line configuration mode. To restore the default value, use the no
form of this command.
data-character-bits {7 | 8}
no data-character-bits
Usage Guidelines The data-character-bits line configuration command is used primarily to strip parity from X.25
connections on routers with the protocol translation software option. The data-character-bits line
configuration command does not work on hard-wired lines.
Examples The following example sets the number of data bits per character to seven on virtual terminal line (vty) 1:
default-value data-character-bits
To configure the number of data bits per character that are generated and interpreted by Cisco software to
either 7 bits or 8 bits, use the default-value data-character-bitscommand in global configuration mode.
To disable the configured size, use the no form of this command.
default-value data-character-bits {7 | 8}
no default-value data-character-bits
Cisco IOS XE Release 2.1 This command was integrated into Cisco IOS XE
Release 2.1.
Examples The following example shows how to set the default number of data character bits to 8:
default-value exec-character-bits
To define the EXEC character width for either 7 bits or 8 bits, use the default-value exec-character-bits
command in global configuration mode. To restore the default value, use the no form of this command.
default-value exec-character-bits {7 | 8}
no default-value exec-character-bits
Syntax Description 7 Selects the 7-bit ASCII character set. This is the
default.
Usage Guidelines Configuring the EXEC character width to 8 bits allows you to add graphical and international characters in
banners, prompts, and so on. However, setting the EXEC character width to 8 bits can also cause failures. If
a user on a terminal that is sending parity enters the help command, an “unrecognized command” message
appears because the system is reading all 8 bits, although the eighth bit is not needed for the helpcommand.
Examples The following example selects the full 8-bit ASCII character set for EXEC banners and prompts:
default-value modem-interval
To configure the default frequency time to scan modem signals, use the default-value modem-
intervalcommand in global configuration mode. To disable the configured frequency, use the no form of
this command.
Examples The following example shows how to set the default time to scan the modem signal to 345 ms:
default-value special-character-bits
To configure the flow control default value from a 7-bit width to an 8-bit width, use the default-value
special-character-bits command in global configuration mode. To restore the default value, use the no
form of this command.
Syntax Description 7 Selects the 7-bit character set. This is the default.
Usage Guidelines Configuring the special character width to 8 bits allows you to add graphical and international characters in
banners, prompts, and so on.
Examples The following example selects the full 8-bit special character set:
Command Description
exec-character-bits Configures the character widths of EXEC and
configuration command characters.
define interface-range
To create an interface-range macro, use the define interface-range command in global configuration
mode. To remove an interface-range macro, use the no form of this command.
Usage Guidelines
• The define interface-range command applies a particular configuration on multiple interfaces and
creates multiple logical, and sub interfaces.
• An interface range macro name can comprise up to 32 characters.
• An interface range for a macro can accept a maximum of five ranges. However, the subinterface range
for a macro accepts only one range.
• An interface range cannot span slots.
• Use the interface-type slot/first-interface last-interface format to enter the interface range.
• Valid values for the interface-type argument are as follows:
◦ atm —Supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2
◦ ethernet
◦ fastethernet
◦ ge-wan —Supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2
◦ gigabitethernet
◦ loopback
◦ port-channel interface-number —Valid values are from 1 to 256
◦ pos —Supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2
◦ tengigabitethernet
◦ tunnel
◦ vlan vlan-id —Valid values are from 1 to 4094
delete
To delete a file on a Flash memory device or NVRAM, use the delete command in EXEC, privileged
EXEC, or diagnostic mode.
Syntax Description url Cisco IOS File System URL of the file to be
deleted. Include the file system prefix, followed by
a colon, and, optionally, the name of a file or
directory. See the table below for a list of supported
URLs.
Release Modification
Cisco IOS XE Release 2.1 This command was introduced on the Cisco ASR
1000 Series Routers and the following
enhancements were introduced:
• This command was introduced in diagnostic
mode for the first time. The command can be
entered in both privileged EXEC and
diagnostic mode on the Cisco ASR1000 Series
Routers.
• The harddisk:, obfl:, stby-bootflash: stby-
harddisk:, stby-nvram: , stby-obfl:, stby-
usb[0-1]:, and usb[0 1]: url options were
introduced.
Usage Guidelines If you attempt to delete the configuration file or image specified by the CONFIG_FILE or BOOTLDR
environment variable, the system prompts you to confirm the deletion. Also, if you attempt to delete the
last valid system image specified in the BOOT environment variable, the system prompts you to confirm
the deletion. To accept the change, you may enter y, Y, or simply hit the Enter key. Entering ? will emit a
help prompt.
When you delete a file in Flash memory, the software simply marks the file as deleted, but it does not erase
the file. To later recover a “deleted” file in Flash memory, use the undeleteEXECcommand. You can
delete and undelete a file up to 15 times.
To permanently delete all files marked “deleted” on a linear Flash memory device, use the squeeze EXEC
command.
The table below contains a list of Cisco IOS File System URLs.
Prefix Filesystem
bootflash: Delete the file from boot Flash memory.
obfl: Delete the file from the onboard failure logging file
system.
Prefix Filesystem
stby-harddisk: Delete the file from the standby harddisk file
system.
stby-obfl: Delete the file from the onboard failure logging file
system on the standby hardware.
stby-usb [ 0 - 1 ]: Delete the file from the standby USB Flash drive.
Examples The following example deletes the file named test from the Flash card inserted in slot 0:
diag
To perform field diagnostics on a line card, on the Gigabit Route Processor (GRP), on the Switch Fabric
Cards (SFCs), and on the Clock Scheduler Card (CSC) in Cisco 12000 series Gigabit Switch Routers
(GSRs), use the diag command in privileged EXEC mode. To disable field diagnostics on a line card, use
the no form of this command.
diag command diag slot-number [halt | previous | post | verbose [wait] | wait]
no diag slot-number
Syntax Description slot-number Slot number of the line card you want to test. Slot
numbers range from 0 to 11 for the Cisco 12012
and 0 to 7 for the Cisco 12008 router. Slot numbers
for the CSC are 16 and 17, and for the FSC are 18,
19, and 20.
Command Default No field diagnostics tests are performed on the line card.
Usage Guidelines The diag command must be executed from the GRP main console port.
Perform diagnostics on the CSC only if a redundant CSC is in the router.
Diagnostics will stop and ask you for confirmation before altering the router’s configuration. For example,
running diagnostics on a SFC or CSC will cause the fabric to go from full bandwidth to one-fourth
bandwidth. Bandwidth is not affected by GRP or line card diagnostics.
The field diagnostic software image is bundled with the Cisco IOS software and is downloaded
automatically from the GRP to the target line card prior to testing.
Caution Performing field diagnostics on a line card stops all activity on the line card. Before the diag EXEC
command begins running diagnostics, you are prompted to confirm the request to perform field diagnostics
on the line card.
In normal mode, if a test fails, the title of the failed test is displayed on the console. However, not all tests
that are performed are displayed. To view all the tests that are performed, use the verbose keyword.
After all diagnostic tests are completed on the line card, a PASSED or TEST FAILURE message is
displayed. If the line card sends a PASSED message, the Cisco IOS software image on the line card is
automatically reloaded unless the wait keyword is specified. If the line card sends a TEST FAILURE
message, the Cisco IOS software image on the line card is not automatically reloaded.
If you want to reload the line card after it fails diagnostic testing, use the microcode reload slot global
configuration command.
Note When you stop the field diagnostic test, the line card remains down (that is, in an unbooted state). In most
cases, you stopped the testing because you need to remove the line card or replace the line card. If that is
not the case, and you want to bring the line card back up (that is, online), you must use the microcode
reload global configuration command or power cycle the line card.
If the line card fails the test, the line card is defective and should be replaced. In future releases this might
not be the case because DRAM and SDRAM SIMM modules might be field replaceable units. For
example, if the DRAM test failed you might only need to replace the DRAM on the line card.
For more information, refer to the Cisco 12000 series installation and configuration guides.
Examples In the following example, a user is shown the output when field diagnostics are performed on the line card
in slot 3. After the line card passes all field diagnostic tests, the Cisco IOS software is automatically
reloaded on the card. Before starting the diagnostic tests, you must confirm the request to perform these
tests on the line card because all activity on the line card is halted. The total/indiv. timeout set to 600/220
sec. message indicates that 600 seconds are allowed to perform all field diagnostics tests, and that no single
test should exceed 220 seconds to complete.
Router# diag 3
Running Diags will halt ALL activity on the requested slot. [confirm]
Router#
Launching a Field Diagnostic for slot 3
Running DIAG config check
RUNNING DIAG download to slot 3 (timeout set to 400 sec.)
sending cmd FDIAG-DO ALL to fdiag in slot 3
(total/indiv. timeout set to 600/220 sec.)
Field Diagnostic ****PASSED**** for slot 3
Field Diag eeprom values: run 159 fial mode 0 (PASS) slot 3
last test failed was 0, error code 0
sending SHUTDOWN FDIAG_QUIT to fdiag in slot 3
Board will reload
.
.
.
Router#
In the following example, a user is shown the output when field diagnostics are performed on the line card
in slot 3 in verbose mode:
Running Diags will halt ALL activity on the requested slot. [confirm]
Router#
Launching a Field Diagnostic for slot 3
Running DIAG config check
RUNNING DIAG download to slot 3 (timeout set to 400 sec.)
sending cmd FDIAG-DO ALL to fdiag in slot 3
(total/indiv. timeout set to 600/220 sec.)
FDIAG_STAT_IN_PROGRESS: test #1 R5K Internal Cache
FDIAG_STAT_PASS test_num 1
FDIAG_STAT_IN_PROGRESS: test #2 Sunblock Ordering
FDIAG_STAT_PASS test_num 2
FDIAG_STAT_IN_PROGRESS: test #3 Dram Datapins
FDIAG_STAT_PASS test_num 3
.
.
.
Field Diags: FDIAG_STAT_DONE
Field Diagnostic ****PASSED**** for slot 3
Field Diag eeprom values: run 159 fial mode 0 (PASS) slot 3
last test failed was 0, error code 0
sending SHUTDOWN FDIAG_QUIT to fdiag in slot 3
Board will reload
.
.
.
Router#
Usage Guidelines Setting the diagnostic level determines the level of testing that occurs when the system or module is reset.
The two levels are as follows:
• Complete--Runs all tests.
• Minimal--Runs only EARL tests for the supervisor engine and loopback tests for all ports in the
system.
Note Although the default is minimal, you can set the diagnostic level to complete for troubleshooting hardware
problems.
In certain circumstances, you might want to skip the bootup online diagnostics completely. For example,
you might skip the bootup online diagnostics to verify that a port is as bad as online diagnostics reports. To
skip online diagnostic testing completely, use the no diagnostic bootup level command.
For information on the diagnostic test types, use the show diagnosticcommand.
The new level takes effect at the next reload or the next time that an online insertion and removal is
performed.
Examples The following example shows how to set the diagnostic bootup level:
Router(config)#
diagnostic bootup level complete
diagnostic cns
To configure the Cisco Networking Services (CNS) diagnostics, use the diagnostic cns command in global
configuration mode. To disable sending diagnostic results to the CNS event bus., use the no form of this
command.
Command Default The following are the default settings for diagnostic cns:
diagnostic cns publish cisco.cns.device.diag_results
diagnostic cns subscribe cisco.cns.device.diag_commands
Usage Guidelines The online diagnostics receive events by subscribing to an event subject name. The subject is the event that
you subscribe (receive) or publish (generate) through the CNS bus.
The diagnostic cns publish command sends diagnostic results to a remote network application to make
decisions and take corrective actions that are based on the diagnostic results.
The diagnostic cns subscribe command receives messages from remote network applications to perform
diagnostic tests or retrieve diagnostic results.
Examples This example shows how to enable the publishing of diagnostic results:
Router(config)#
diagnostic cns publish my.cns.publish
Router(config)#
This example shows how to receive messages from remote network applications to perform diagnostic tests
or retrieve diagnostic results:
Router(config)#
diagnostic cns subscribe my.cns.subscribe
Router(config)#
Router(config)#
default
diagnostic cns publish
Router(config)#
show diagnostic cns subscribe Displays the subscribe information about the CNS
subject.
Syntax Description size Diagnostic event-log sizes. The valid values range
from 1 to 10000 entries.
Usage Guidelines The events are dynamically allocated and stored in a circular queue.
You can enter either the default diagnostic event-log size command or the no diagnostic event-log size
command to return to the default settings.
Examples The following example shows how to set the diagnostic event-log size:
Router(config)#
diagnostic event-log size 600
diagnostic level
To turn on power-on diagnostic tests for the network service engines (NSEs) installed in a Cisco 7300
series router, use the diagnostic level command in privileged EXEC configuration mode. There is no no
form of this command.
Usage Guidelines Use this command to enable power-on diagnostic tests to run on the installed NSEs of a Cisco 7300 series
router when the system is booted. It is recommended that you issue this command only if you are
experiencing problems with an NSE and are planning on rebooting the router. Issuing this command causes
an increase in the boot time.
Examples The following example shows how to enable diagnostic power-on tests:
The following sample output shows the output that is displayed upon system bootup after a power cycle or
router crash:
.
.
.
System Power On Diagnostics
DRAM Size ....................128 MB
Testing DRAM..................Passed
Level2 Cache .................Present
Testing Level2 Cache (256 KB)Passed
Level3 Cache .................Present
Testing Level3 Cache (1024 KB)Passed
System Power On Diagnostics Complete
Note This output is displayed when the system is booting, not when the command is issued.
show c7300 Displays the types of cards (NSE and line cards)
installed in a Cisco 7300 series router.
show redundancy (7300) Displays redundancy information for the active and
standby NSEs.
diagnostic monitor
To configure health-monitoring diagnostic testing, use the diagnostic monitor command in global
configuration mode. To disable testing, use the no form of this command.
diagnostic monitor intervalmodule number test {test-id | test-id-range | all} hh:mm:ss milliseconds
days
diagnostic monitor syslog
diagnostic monitor module num test {test-id | test-id-range | all}
no diagnostic monitor {interval | syslog}
bay slot/bay Indicates the card slot and bay number where the
diagnostic test is run periodically and monitored.
The bay keyword is used to refer a SPA on the
router. The valid range for the slot number is from
1 to 8 and 0 to 3 for the bay number.
slot slotnumber Indicates the slot number of the full-height line card
where the diagnostic test is run periodically and
monitored. The slot keyword is used to refer a full-
height line card on the router. The valid range for
the slot is from 1 to 8.
failure count failures Configures the count for maximum failures allowed
after which the failed test results are displayed in
the output of the show diagnostic resultscommand.
The range for number of allowed failures is 0 to 99.
When entering the diagnostic monitor module number test {test-id | test-id-range | all} command,
observe the following:
• Required
◦ Isolate network traffic by disabling all connected ports and do not pump test packets during the
test.
◦ Remove all modules for testing FIB TCAM and SSRAM memory on the PFC of the supervisor
engine.
◦ Reset the system or the test module before putting the system back into the normal operating
mode.
• Recommended
◦ If the DFC module is present, remove all modules, and then reboot the system before starting the
memory test on the central PFC3B of the supervisor engine.
◦ Turn off all background health-monitoring tests on the supervisor engine and the modules using
the no diagnostic monitor module number test {test-id | test-id-range | all} command.
The FIB TCAM test for central PFC3BXL or PFC3B (on the supervisor engine) takes approximately 4
hours and 30 minutes.
The FIB TCAM test for the distributed PFC3BXL or PFC3B (on the DFC module) takes approximately 16
hours.
You can run the FIB TCAM test on multiple DFC3BX modules simultaneously.
Cisco UBR10012 Router
The command syntax to refer a line card or SPAs is different on Cisco UBR10012 Router. The keyword is
slot x for a full-height line card, slot x/y for a half-height card, and bay x/y for a SPA.
To monitor a diagnostic test periodically, you first need to configure the hours, minutes, and seconds
interval to run the diagnostic test using the diagnostic monitor intervalcommand. An error message is
displayed, if the interval is not configured before enabling the monitoring.
To store log details for failed tests, execute the diagnostic monitor syslogcommand. A threshold value to
specify the maximum count for allowed failures is configured using the diagnostic monitor
thresholdcommand. The failed test results can be viewed using the show diagnostic resultscommand,
after the number of failed test reaches the maximum number of allowed failures configured using the
diagnostic monitor thresholdcommand.
Examples The following example shows how to run the specified test every 3 days:
The following example shows how to enable the generation of a syslog message when any health-
monitoring test fails:
Router(config)#
diagnostic monitor syslog
The following example shows how to enable the diagnostic monitoring on bay 1/0:
Router(config)# diangostic monitor bay 1/0 test 2
The following example shows how to enable logging of failed messages to syslog:
The following example shows how to configure the failure threshold value after which the failed test results
are displayed in the command output for show diagnostic results:
diagnostic ondemand
To configure the on-demand diagnostics, use the diagnostic ondemand command in privileged EXEC
mode.
Syntax Description iteration iteration-count Sets the number of times the same test to rerun
when the command is issued . The valid range for
iteration-count is between 1 to 999.
Release Modification
12.2(33)SCC The command was integrated in this release to
support Generic Online Diagnostics (GOLD)
functionalityfor Cisco UBR10012 Universal
Broadband Router.
Usage Guidelines Entering 0 for the error-count sets the number of errors that are allowed to unlimited.
Examples The following example shows how to set the ondemand testing iteration count:
Router#
diagnostic ondemand iteration 4
Router#
The following example shows how to set the execution action when an error is detected:
Router#
diagnostic ondemand action-on-failure continue 2
Router#
diagnostic schedule module {module-number | slot/subslot} test {test-id | all | complete | minimal |
non-disruptive | [per-port [port{interface-port-number | port-number-list | all}]]} {on month dd
yyyy hh:mm | daily hh:mm | weekly day-of-week hh:mm}
no diagnostic schedule module {module-number | slot/subslot} test {test-id | all | complete |
minimal | non-disruptive | [per-port [port{interface-port-number | port-number-list | all}]]} {on
month dd yyyy hh:mm | daily hh:mm | weekly day-of-week hh:mm}
Command Default Test-based diagnostic testing for a specific module is not scheduled.
You can specify a periodic switchover (daily or weekly) or a single switchover occurrence at a specific
time using these commands:
• diagnostic schedule module slot / subslot test test-id on mm dd yyyy hh:mm
• diagnostic schedule module slot / subslot test test-id daily hh:mm
• diagnostic schedule module slot / subslot test test-id weekly day-of-week hh:mm
Note To avoid system downtime in the event that the standby supervisor engine cannot switch over the system,
Cisco recommends that you schedule a switchover from the standby supervisor engine to the active
supervisor engine 10 minutes after the switchover occurs.
Examples The following example shows how to schedule the diagnostic testing on a specific month, date and time for
a specific module:
The following example shows how to schedule the diagnostic testing to occur daily at a certain time for a
specific module:
The following example shows how to schedule the diagnostic testing to occur weekly on a certain day for a
specific module:
diagnostic start
To run the specified diagnostic test, use the diagnostic startcommand in privileged EXEC mode.
diagnostic start module num test {test-id | test-id-range | minimal | complete | basic | per-port |
non-disruptive | all} [port{num | port#-range | all}]
diagnostic start system test all
bay slot/bay Indicates the card slot and bay number where the
diagnostic test is executed. The bay keyword is
used to refer a SPA on the router. The valid range
for the slot number is from 1 to 8 and 0 to 3 for the
bay number.
slot slot-no Indicates the slot number of the full-height line card
where the diagnostic test is executed. The slot
keyword is used to refer a full-height line card on
the router. The valid range for slot is from 1 to 8.
Release Modification
12.2(33)SCC The command was integrated in this release to
support Generic Online Diagnostics (GOLD)
functionalityfor Cisco UBR10012 Universal
Broadband Router. The keywords bay, slot, and
subslot were added for the Cisco UBR10012
Universal Broadband Router.
Usage Guidelines
Note Running all online diagnostic tests disrupts normal system operation. Reset the system after the diagnostic
start system test all command has completed. Do not insert, remove, or power down line cards or the
supervisor while the system test is running. Do not issue any diagnostic command other than the diagnostic
stop system test all command while the system test is running. Make sure no traffic is running in
background.
Note Do not enter the diagnostic start module x test all command on systems that are configured with a
DFC3A because this command causes the TCAM test to fail.
Enter the show diagnostic content command to display the test ID list .
Enter the test-id-range or port# range as integers separated by a comma and a hyphen (for example, 1,3-6
specifies test IDs 1, 3, 4, 5, and 6).
Use diagnostic stop command to stop the testing process.
Cisco UBR10012 Router
The command syntax to refer a line card or SPAs is different on Cisco UBR10012 Router. The keyword is
slot x for a full-height line card, slot x/y for a half-height card, and bay x/y for a SPA.
Note To start a diagnostic test on the Cisco UBR10012 Router execute the command diagnostic stopwith the
bay, slot or subslot keyword respectively.
The GOLD test cases used to poll for system errors in Cisco IOS Software Release 12.2(33)SCC are Low
Latency Queueing (LLQ) drop, Cable Line Card (CLC) memory leak, and Guardian index leak tests.
Examples The following example shows how to run the specified diagnostic test at the specified slot:
show diagnostic description Provides the description for the diagnostic tests.
Command Description
show diagnostic ondemand settings Displays the settings for the on-demand
diagnostics.
show diagnostic result Displays the diagnostic test results for a module.
diagnostic stop
To stop the testing process, use the diagnostic stop command in privileged EXEC mode.
bay slot/bay Indicates the card slot and bay number of the SPA
for which the diagnostic test has stopped. The bay
keyword is used to refer a SPA on the router. The
valid range for the slot number is from 1 to 8 and 0
to 3 for the bay number.
slot slot-no Indicates the slot number of full height line card for
which the diagnostic test has to be stopped. The slot
keyword is used to refer a full-height line card on
the router. Valid range for the slot is from 1 to 8.
Release Modification
12.2(33)SRA This command was integrated into Cisco IOS
Release 12.2(33)SRA.
Usage Guidelines Use the diagnostic start command to start the testing process.
Cisco UBR10012 Router
The command syntax to refer a line card or SPAs is different on Cisco UBR10012 Router. The keyword is
slot x for a full-height line card, slot x/y for a half-height card, and bay x/y for a SPA.
Note To stop a diagnostic test on the Cisco UBR10012 Router execute the command diagnostic stopwith the
bay, slot or subslot keyword respectively.
The GOLD test cases used to poll for system errors in Cisco IOS Software Release 12.2(33)SCC are Low
Latency Queueing (LLQ) drop, Cable Line Card (CLC) memory leak, and line card index leak tests.
Examples This example shows how to stop the diagnostic test process:
This example shows how to stop the diagnostic test process for subslot 5/0 on the Cisco UBR10012
Universal Broadband Router:
show diagnostic description Provides the description for the diagnostic tests.
Command Description
diagnostic bootup level Configures the diagnostic bootup level.
show diagnostic ondemand settings Displays the settings for the on-demand
diagnostics.
show diagnostic result Displays the diagnostic test results for a module.
dir
To display a list of files on a file system, use the dircommand in EXEC, privileged EXEC, or diagnostic
mode.
Syntax Description /all (Optional) Lists deleted files, undeleted files, and
files with errors.
Command Default When you omit the /all keyword, the Cisco IOS software displays only undeleted files.
Command Modes User EXEC (>) Privileged EXEC (#) Diagnostic (diag)
Release Modification
12.4(11)T This command was modified. Support for this
command was implemented on the Cisco 7200VXR
NPE-G2 platform.
Cisco IOS XE Release 2.1 This command was introduced on the Cisco ASR
1000 Series Routers, and the following
enhancements were introduced:
• The command was made available in
diagnostic mode.
• The /recursive option was introduced.
• The file systems available with the Cisco ASR
1000 Series Routers became available as
filesystem: options.
Usage Guidelines Use the show file systemscommand to display more details about the files in a particular file system.
Note As of release 15.0(01)XO, on cat4000 series routers, the show(flash file system) and dirwill display
slightly different byte count and usage information for the same file system. This is due to slight difference
in how IOS computes these figures for this platform.
You can use the Cisco IOS software output modifiers to filter the output of the dir command, to display
only those lines you are interested in.
The output modifier feature is invoked by using the pipe symbol (|). To use this feature, enter the dir
command as normal but add a space and the pipe symbol at the end of the command line. Then add one of
the keywords shown in the table below.
Command Purpose
append regular expression Appends redirected output to URL (only to the
URLs supporting the append operation).
begin regular expression Displays the first line that matches the regular
expression, and then all other lines that follow that
line.
include regular expression Displays all lines that match the regular expression.
Command Purpose
exclude regular expression Displays all lines except those that match the
regular expression.
format regular expression Formats the output using the specification file.
Note The append, redirect and tee keywords do not support rcp in the display.
The table below describes the significant fields shown in the displays.
Field Description
1 Index number of the file.
Field Description
4720148 Size of the file, in bytes.
The following example shows how to use the output modifier feature with the exclude keyword and regular
expression. The table above describes the significant fields shown in the output.
disable
To exit privileged EXEC mode and return to user EXEC mode, or to exit to a lower privilege level, enter
the disable command in EXEC, privileged EXEC, or diagnostic mode.
disable [privilege-level]
Syntax Description privilege-level (Optional) Specific privilege level (other than user
EXEC mode).
Cisco IOS XE Release 2.1 This command was introduced on the Cisco ASR
1000 Series Routers, and became available in
diagnostic mode.
Usage Guidelines Up to 16 security levels can be configured using Cisco IOS software. If such levels are configured on a
system, using this command with the privilege-level option allows you to exit to a lower security level. If a
level is not specified, the user will exit to the user EXEC mode, which is the default.
Note Five EXEC commands are associated with privilege level 0: disable, enable, exit, help, and logout. If you
configure a privilege level greater than 0, these five commands will not be included in the command set for
that privilege level.
Examples In the following example, the user enters privileged EXEC mode using the enable command, then exits
back to user EXEC mode using the disable command. Note that the prompt for user EXEC mode is >, and
the prompt for privileged EXEC mode is #.
Router> enable
Password: <letmein>
Router# disable
Router>
disconnect-character
To define a character to disconnect a session, use the disconnect-character command in line configuration
mode. To remove the disconnect character, use the no form of this command.
disconnect-character ascii-number
no disconnect-character
Usage Guidelines See the “ASCII Character Set and Hex Values” appendix for a list of ASCII characters.
The Break character is represented by zero; NULL cannot be represented.
To use the session-disconnect character in normal communications, precede it with the escape character.
Examples The following example defines the disconnect character for virtual terminal line 4 as Escape, which is
decimal character 27:
dispatch-character
To define a character that causes a packet to be sent, use the dispatch-charactercommand in line
configuration mode. To remove the definition of the specified dispatch character, usethe noform of this
command.
Usage Guidelines See the “ASCII Character Set and Hex Values” appendix for a list of ASCII characters.
The dispatch-character command defines one or more dispatch characters that cause a packet to be sent
even if the dispatch timer has not expired. Use of a dispatch character causes the Cisco IOS software to
attempt to buffer characters into larger-sized packets for transmission to the remote host.
Enable the dispatch-character command from the session that initiates the connection, not from the
incoming side of a streaming Telnet session.
This command can take multiple arguments, so you can define any number of characters as dispatch
characters.
Examples The following example defines the Return character (decimal 13) as the dispatch character for virtual
terminal line (vty) line 4:
dispatch-machine
To specify an identifier for a TCP packet dispatch state machine on a particular line, use the dispatch-
machine command in line configuration mode. To disable a state machine on a particular line, use the no
form of this command.
dispatch-machine name
no dispatch-machine
Syntax Description name Name of the state machine that determines when to
send packets on the asynchronous line.
Usage Guidelines When the dispatch-timeout command is specified, a packet being built will be sent when the timer expires,
and the state will be reset to zero.
Any dispatch characters specified using the dispatch-character command are ignored when a state
machine is also specified.
If a packet becomes full, it will be sent regardless of the current state, but the state will not be reset. The
packet size depends on the traffic level on the asynchronous line and the dispatch-timeout value. There is
always room for 60 data bytes. If the dispatch-timeout value is greater than or equal to 100 milliseconds, a
packet size of 536 (data bytes) is allocated.
Examples The following example specifies the name linefeedfor the state machine:
Router(config)# line 1
Router(config-line)# dispatch-machine linefeed
dispatch-timeout
To set the character dispatch timer, use the dispatch-timeoutcommand in line configuration mode. To
remove the timeout definition, use the noform of this command.
dispatch-timeout milliseconds
no dispatch-timeout
Usage Guidelines Use this command to increase the processing efficiency for the remote host.
The dispatch-timeout line configuration command causes the software to buffer characters into packets for
transmission to the remote host. The Cisco IOS software sends a packet a specified amount of time after the
first character is put into the buffer. You can use the dispatch-timeoutand dispatch-character line
configuration commands together. In this case, the software dispatches a packet each time the dispatch
character is entered, or after the specified dispatch timeout interval, depending on which condition is met
first.
Note The system response time might appear intermittent if the timeout interval is greater than 100 milliseconds
and remote echoing is used. For lines with a reverse-Telnet connection, use a dispatch-timeout value less
than 10 milliseconds.
Examples The following example sets the dispatch timer to 80 milliseconds for virtual terminal line (vty) lines 0
through 4:
terminal dispatch-timeout Sets the character dispatch timer for the current
session.
do
To execute user EXEC or privileged EXEC commands from global configuration mode or other
configuration modes or submodes, use the docommand in any configuration mode.
do command
Command Default A user EXEC or privileged EXEC command is not executed from a configuration mode.
Usage Guidelines Use this command to execute user EXEC or privileged EXEC commands (such as show, clear, and debug
commands) while configuring your routing device. After the EXEC command is executed, the system will
return to the configuration mode you were using.
Tip This command can be useful for saving your configuration to the startup-config file without having to
return to the user EXEC mode or privileged EXEC mode (do copy running-config startup-config) or for
checking the status of a feature (using a do show command) while configuring the feature.
Caution Do not enter the do command in user EXEC mode or privileged EXEC mode. Interruption of service might
occur.
You cannot use the do command to execute the configure terminal c ommand because entering the
configure terminal command changes the user EXEC mode or privileged EXEC mode to the global
configuration mode.
You cannot use the do command to execute copy or write c ommands in the global configuration or any
other configuration mode or submode.
Examples The following example shows how to enter the show interfaces serial privileged EXEC command from
within global configuration mode:
The following example shows how to enter the clear vpdn tunnel user EXEC or privileged EXEC
command from within VPDN configuration mode:
downward-compatible-config
To generate a configuration that is compatible with an earlier Cisco IOS release, use the downward-
compatible-configcommand in global configuration mode. To disable this function, use the no form of this
command.
downward-compatible-config version
no downward-compatible-config
Syntax Description version Cisco IOS release number, not earlier than Release
10.2.
Note You must have a period (.) in the version
number. For example, 12.4.
Command Default The configuration is not compatible with earlier Cisco IOS releases.
Cisco IOS XE Release 2.1 This command was implemented on the Cisco ASR
1000 Series Aggregation Services Routers.
Usage Guidelines In Cisco IOS Release 10.3, IP access lists changed format. Use the downward-compatible-
configcommand to regenerate a configuration in a format prior to Release 10.3 if you will downgrade from
your software version to version 10.2 or 10.3. The earliest version value this command accepts is 10.2.
When this command is configured, the router attempts to generate a configuration that is compatible with
the specified version. Note that this command affects only IP access lists.
Under some circumstances, the software might not be able to generate a fully backward-compatible
configuration. In such a case, the software issues a warning message.
Examples The following example shows how to generate a configuration file compatible with Cisco IOS Release 10.2
access lists:
editing
To reen able Cisco IOS enhanced editing features for a particular line after they have been disabled, use the
editing command in line configuration mode. To disable these features, use the no form of this command.
editing
no editing
Usage Guidelines Enhanced editing features are enabled by default. However, there may be situations in which you need to
disable these features. The no form of this command disables these enhanced editing features, and the plain
form of the command can be used to reenable these features.
The table below provides a description of the keys used to enter and edit commands when the editing
features are enabled. Ctrl indicates the Control key, which must be pressed simultaneously with its
associated letter key. Esc indicates the Escape key, which must be pressed first, followed by its associated
letter key. A comma is used in the following table to indicate a key sequence (the comma key should not be
pressed). Keys are not case sensitive. Many letters used for CLI navigation and editing were chosen to
provide an easy way of remembering their functions. In the following table, characters are bolded in the
“Function Summary” column to indicate the relation between the letter used and the function.
Return (at the --More-- prompt) Continue Displays the next line of output.
Space Bar (at the --More-- Continue Displays the next screen of
prompt) output. The amount of output you
see will depend on the screen
depth setting of your terminal.
Left Arrow1 or Ctrl-B B ack character Moves the cursor one character to
the left. When you enter a
command that extends beyond a
single line, you can press the Left
Arrow or Ctrl-B keys repeatedly
to scroll back toward the system
prompt and verify the beginning
of the command entry.
Right Arrow1 or Ctrl-F F orward character Moves the cursor one character to
the right.
Esc, D D elete next word Deletes from the cursor to the end
of the word.
Ctrl-W Delete previous word Deletes the word to the left of the
cursor.
Ctrl-U or Ctrl-X Delete line backward Deletes all characters from the
cursor back to the beginning of
the command line.
Esc, Y Recall next deleted command Recalls the next entry in the
delete buffer. The delete buffer
contains the last ten items you
have deleted. Press Ctrl-Y first to
recall the most recent entry. Then
press Esc Y up to nine times to
recall the remaining entries in the
buffer. If you bypass an entry,
continue to press Esc Y to cycle
back to it.
Router(config)# line 3
Router(config-line)# no editing
1. enable
To change the privilege level for a CLI session or to use a CLI view for a CLI session, use the enable
command in either user EXEC, privileged EXEC, or diagnostic mode.
Release Modification
12.2(33)SB This command was integrated into Cisco IOS
Release 12.2(22)SB.
Cisco IOS XE Release 2.1 This command became available on the ASR 1000
Series Routers, and became available in diagnostic
mode for the first time.
Usage Guidelines By default, using the enable command without the privilege-level argument in user EXEC mode causes the
router to enter privileged EXEC mode (privilege-level 15).
Entering privileged EXEC mode enables the use of privileged commands. Because many of the privileged
commands set operating parameters, privileged access should be password-protected to prevent
unauthorized use. If the system administrator has set a password with the enable password global
configuration command, you are prompted to enter the password before being allowed access to privileged
EXEC mode. The password is case sensitive.
If an enable password has not been set, only enable mode can be accessed through the console connection.
Security levels can be set by an administrator using the enable password and privilege level commands.
Up to 16 privilege levels can be specified, using the numbers 0 through 15. Using these privilege levels, the
administrator can allow or deny access to specific commands. Privilege level 0 is associated with user
EXEC mode, and privilege level 15 is associated with privileged EXEC mode.
For more information on defined privilege levels, see the Cisco IOSSecurity Configuration Guide and the
Cisco IOS Security Command Reference publications.
If a level is not specified when entering the enable command, the user will enter the default mode of
privileged EXEC (level 15).
Accessing a CLI View
CLI views restrict user access to specified CLI and configuration information. To configure and access CLI
views, users must first enter into root view, which is accomplished via the enable view command (without
the view-name argument). Thereafter, users are prompted for a password, which is the same password as
the privilege level 15 password.
The view-name argument is used to switch from one view to another view.
To prevent dictionary attacks, a user is prompted for a password even if an incorrect view name is given.
The user is denied access only after an incorrect view name and password are given.
Examples In the following example, the user enters privileged EXEC mode (changes to privilege-level 15) by using
the enable command without a privilege-level argument. The system prompts the user for a password
before allowing access to the privileged EXEC mode. The password is not printed to the screen. The user
then exits back to user EXEC mode using the disable command. Note that the prompt for user EXEC mode
is the greater than symbol (>), and the prompt for privileged EXEC mode is the number sign (#).
Router> enable
Password: <letmein>
Router# disable
Router>
The following example shows which commands are available inside the CLI view “first” after the user has
logged into this view:
The following example shows how to use the enable view command to switch from the root view to the
CLI view “first”:
Router#
01:08:09:%PARSER-6-VIEW_SWITCH:successfully set to view 'first'.
! Enable the show parser view command from the CLI view “first.”
Router# show parser view
Current view is 'first'
privilege level (line) Sets a privilege level for a command for a specific
line.
enable last-resort
To enable password parameters as the last resort without specifying the local enable password if no
TACACS servers respond, use the enable last-resort command in global configuration mode. To disable
the password parameters, use the no form of this command.
Command Default The password parameters for the router are not enabled.
Examples The following example shows how to enable password parameters as the last resort without specifying the
local enable password if no TACACS servers respond:
Router> enable
Router# configure terminal
Router(config)# enable last-resort succeed
end
To en d the current configuration session and return to privileged EXEC mode, use the end command in
global configuration mode.
end
Usage Guidelines This command will bring you back to privileged EXEC mode regardless of what configuration mode or
configuration submode you are in.
Note This global configuration command can be used in any configuration mode.
Use this command when you are done configuring the system and you want to return to EXEC mode to
perform verification steps.
Examples In the following example, the end command is used to exit from ALPS ASCU configuration mode and
return to privileged EXEC mode. A show command is used in privileged EXEC mode to verify the
configuration.
Router(config-alps-ascu)# end
Router# show interface serial 1:1
Examples This example shows how to place the supervisor engine in ROMMON when a major active alarm occurs:
Router(config)#
environment-monitor shutdown temperature rommon
Router(config)#
This example shows how to power down the supervisor engine when a major active alarm occurs:
Router(config)#
environment-monitor shutdown temperature powerdown
Router(config)#
environment temperature-controlled
To enable the ambient temperature control, use the environment temperature-controlled command in
global configuration mode. To disable the ambient temperature control, use the no form of this command.
environment temperature-controlled
no environment temperature-controlled
Usage Guidelines This command does not affect temperature monitoring and alarm thresholds; it only affects whether a
module may be powered on. The software does not validate the inlet temperature.
If you enter the no form of this command and the cooling capacity is reduced below the module cooling
requirement, a syslog warning (and SNMP alarm) is generated. This module status does not change, and an
environmental alarm is not raised when you enter the no form of this command.
Examples This example shows how to enable the ambient temperature control:
Router(config)#
environment temperature-controlled
Router(config)#
This example shows how to disable the ambient temperature control:
Router(config)#
no environment temperature-controlled
Router(config)#
erase
To erase a file system or all files available on a file system, use the erasecommand in privileged EXEC or
diagnostic mode.
Cisco 7600 Series Routers and Cisco ASR 1000 Series Routers
erase {/all nvram: | filesystem: | startup-config}
Syntax Description /all Erases all files in the specified file system.
Release Modification
Cisco IOS XE Release 2.1 This command was modified. The command was
introduced in diagnostic mode on the Cisco ASR
1000 Series Routers, and the /all keyword was
added.
Usage Guidelines The erase nvram: command replaces the write erase command and the erase startup-config command.
Caution When you use the erase command to erase a file system, you cannot recover the files in the file system.
The word help feature is disabled for the erase command. You must enter the complete command name to
enable the command. The parser does not complete the command name if you enter partial syntax of the
command and press the Tab key. For more information on the word help feature, refer to the Using the
Cisco IOS Command-Line Interface feature guide.
The erasecommand can be used on Class B and Class C flash file systems only.
Class A flash file systems cannot be erased. You can delete individual files using the delete command and
then reclaim the space using the squeeze command. You can use the formatcommand to format the flash
file system. The format command when used on ATA disk clears the File Allocation Table (FAT) and root
directory entries only. The data is not erased.
The erase nvram: command erases NVRAM. On Class A file system platforms, if the CONFIG_FILE
variable specifies a file in flash memory, the specified file will be marked “deleted.”
The erase /all nvram: command erases all files on NVRAM, including private NVRAM.
The /no-squeeze-reserve-space keyword is available on systems with small amounts of flash memory in
order to conserve memory. When a squeeze operation is performed, the last two erase sectors are
permanently reserved for the squeeze logs and squeeze buffer. The /no-squeeze-reserve-spacekeyword
prevents the reservation of space that guarantees the ability to run the squeeze command. Disabling the
squeeze operation keeps these memory sectors free. If any sectors using squeeze data are detected, they will
be erased when the /no-squeeze-reserve-space keyword is used. The /no-squeeze-reserve-space keyword
increases the available amount of usable flash space, but you may not be able to run the squeeze command.
This is typically fine if the file system (such as flash) is used to store a single, large file. For example, an
IOS image.
On Class C flash file systems, space is dynamically reclaimed when you use the delete command. You can
also use either the format or erase command to reinitialize a Class C flash file system.
Note Use the context-sensitive help to determine which file systems can be used for the erase command. The
output will vary based on the platform.
Examples The following example shows how to erase the NVRAM, including the startup configuration located there:
The following example shows how to erase all of partition 2 in internal flash memory:
The following example shows how to erase flash memory when flash is partitioned, but no partition is
specified in the command:
The system will prompt only if there are two or more read/write partitions. If the partition entered is not
valid or is the read-only partition, the process terminates. You can enter a partition number, a question
mark (?) for a directory display of all partitions, or a question mark and a number (? number) for directory
display of a particular partition. The default is the first read/write partition.
Command Description
squeeze Removes all deleted files from the flash file system
and recovers the memory space used by deleted
files.
erase bootflash
The erase bootflash: and erase bootflash commands have identical functions. See the description of the
erasecommand in this chapter for more information.
Usage Guidelines
Note Entering the no errdisable detect cause packet-buffer-error command allows you to detect the fault that
triggers a power cycle of the affected module.
A cause (bpduguard, dtp-flap, link-flap, pagp-flap, root-guard, udld) is defined as the reason why the error-
disable state occurred. When a cause is detected on an interface, the interface is placed in an error-disable
state (an operational state that is similiar to the link-down state).
You must enter the shutdown and then the no shutdown commands to recover an interface manually from
the error-disable state.
Examples The following example shows how to enable error-disable detection for the Layer 2 protocol-tunnel guard
error-disable cause:
Router(config)#
errdisable detect cause l2ptguard
errdisable recovery
To configure recovery mechanism variables, use the errdisable recovery command in global configuration
mode. To return to the default state, use the no form of this command.
Usage Guidelines A cause (bpduguard, channel-misconfig, dhcp-rate-limit, dtp-flap, l2ptguard, link-flap, pagp-flap, psecure-
violation, security-violation, rootguard, udld, or unicast-flood) is defined as the reason why the error-
disable state occurred. When a cause is detected on an interface, the interface is placed in an error-disable
state (an operational state that is similar to the link-down state). If you do not enable error-disable recovery
for the cause, the interface stays in the error-disable state until a shutdown and no shutdown occur. If you
enable recovery for a cause, the interface is brought out of the error-disable state and allowed to retry
operation once all the causes have timed out.
You must enter the shutdown command and then the no shutdown command to manually recover an
interface from the error-disable state.
Note A separate line is required each time you want to enter the errdisable recovery cause command to add a
new reason for recovery; each new reason does not get appended to the original single line. This means you
must enter each new reason separately.
Examples This example shows how to enable the recovery timer for the BPDU-guard error-disable cause:
Router(config)#
errdisable recovery cause bpduguard
This example shows how to set the recovery timer to 300 seconds:
Router(config)#
errdisable recovery interval 300
escape-character
To define a system escape character, use the escape-character command in line configuration mode. To
set the escape character to Break, use the noor defaultform of this command.
escape-character {break | char | default | none | soft}
no escape-character [soft]
default escape-character [soft]
Syntax Description break Sets the escape character to Break. Note that the
Break key should not be used as an escape
character on a console terminal.
Command Default The default escape key sequence is Ctrl-Shift-6 (Ctrl-^) or Ctrl-Shift-6, X (^^X). The X is generally only
required for modem connections.
The default escape-character command sets the escape character to Break (the default setting for Break is
Ctrl-C).
Usage Guidelines See the "ASCII Character Set and Hexidecimal Values" appendix for a list of ASCII characters.
The escape character (or key sequence) suspends any actively running processes and returns you to
privileged EXEC mode or, if a menu is being used, to the system menu interface. The escape character is
used for interrupting or aborting a process started by previously executed command. Examples of processes
from which you can escape include Domain-Name lookup, ping, trace, and Telnet sessions initiated from
the device to which you are connected.
To view the current setting of the escape sequence for a line, use the show line command followed by the
specific line identifier (for example, show line 0, or show line console). The default escape sequence for a
line is often displayed as ^^X . The first caret symbol represents the Control (Ctrl) key, the second caret
symbol is literal (Shift-6), and the X is literal (for most systems, the X is not required).
To set the escape key for the active terminal line session, use the terminal escape-character command.
The Break key cannot be used as an escape character on a console terminal because the Cisco IOS software
interprets Break as an instruction to halt the system. Depending upon the configuration register setting,
break commands issued from the console line either will be ignored or cause the server to shut down.
To send an escape sequence over a Telnet connection, press Ctrl-Shift-6 twice.
The escape-character soft form of this command defines a character or character sequence that will cause
the system to wait until pending input is processed before suspending the current session. This option
allows you to program a key sequence to perform multiple actions, such as using the F1 key to execute a
command, then execute the escape function after the first command is executed.
The following restrictions apply when using the soft keyword:
• The length of the logout sequence must be 14 characters or fewer.
• The soft escape character cannot be the same as the generic Cisco escape character, Break, or the
characters b, d, n, or s.
• The soft escape character should be an ASCII value from 1 to 127. Do not use the number 30.
Examples The following example sets the escape character for the console line to the keyboard entry Ctrl-P, which is
represented by the ASCII decimal value of 16:
Router(config)# line 1
Router(config-line)# escape-character !
Router(config-line)# end
Router# show running-config
Building configuration...
.
.
.
line 1
autoselect during-login
autoselect ppp
modem InOut
transport preferred none
transport output telnet
escape-character 33
terminal escape-character Sets the escape character for the current terminal
line for the current session.
exec
To allow an EXEC process on a line, use the exec command in line configuration mode. To turn off the
EXEC process for the specified line, use the no form of this command.
exec
no exec
Usage Guidelines When you want to allow only an outgoing connection on a line, use the no exec command.
The no exec command allows you to disable the EXEC process for connections which may attempt to send
unsolicited data to the router. (For example, the control port of a rack of modems attached to an auxiliary
port of router.) When certain types of data are sent to a line connection, an EXEC process can start, which
makes the line unavailable.
When a user tries to Telnet to a line with the EXEC process disabled, the user will get no response when
attempting to log on.
Router(config)# line 7
Router(config-line)# no exec
exec-banner
To reenable the display of EXEC and message-of-the-day (MOTD) banners on the specified line or lines,
use the exec-banner command in line configuration mode. To suppress the banners on the specified line or
lines, use the no form of this command.
exec-banner
no exec-banner
Usage Guidelines This command determines whether the router will display the EXEC banner and the message-of-the-day
(MOTD) banner when an EXEC session is created. These banners are defined with the banner exec and
banner motdglobal configurationcommands. By default, these banner are enabled on all lines. Disable the
EXEC and MOTD banners using the no exec-banner command.
This command has no effect on the incoming banner, which is controlled by the banner incoming
command.
The MOTD banners can also be disabled by the no motd-banner line configuration command, which
disables MOTD banners on a line. If the no exec-banner command is configured on a line, the MOTD
banner will be disabled regardless of whether the motd-bannercommand is enabled or disabled. The table
below summarizes the effects of the exec-banner command and the motd-banner command.
For reverse Telnet connections, the EXEC banner is never displayed. Instead, the incoming banner is
displayed. The MOTD banner is displayed by default, but it is disabled if either the no exec-banner
command or no motd-banner command is configured. The table below summarizes the effects of the
exec-banner command and the motd-banner command for reverse Telnet connections.
Table 25 Banners Displayed Based On exec-banner and motd-banner Combinations for Reverse Telnet
Sessions to Async Lines
Examples The following example suppresses the EXEC and MOTD banners on virtual terminal lines 0 to 4:
Router(config-line)# no exec-banner
exec-character-bits
To configure the character widths of EXEC and configuration command characters, use the exec-
character-bits command in line configuration mode. To restore the default value, use the no form of this
command.
exec-character-bits {7 | 8}
no exec-character-bits
Syntax Description 7 Selects the 7-bit character set. This is the default.
Usage Guidelines Setting the EXEC character width to 8 allows you to use special graphical and international characters in
banners, prompts, and so on. However, setting the EXEC character width to 8 bits can cause failures. If a
user on a terminal that is sending parity enters the help command, an “ unrecognized command” message
appears because the system is reading all 8 bits, and the eighth bit is not needed for the help command.
Note If you are using the autoselect function, set the activation character to the default (Return) and the value for
exec-character-bits to 7. If you change these defaults, the application will not recognize the activation
request.
Examples The following example enables full 8-bit international character sets, except for the console, which is an
ASCII terminal. It illustrates use of the default-value exec-character-bits global configuration command
and the exec-character-bits line configuration command.
exec-timeout
To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-
timeout command in line configuration mode. To remove the timeout definition, use the no form of this
command.
Syntax Description minutes Integer that specifies the number of minutes. The
default is 10 minutes.
Usage Guidelines If no input is detected during the interval, the EXEC facility resumes the current connection. If no
connections exist, the EXEC facility returns the terminal to the idle state and disconnects the incoming
session.
To specify no timeout, enter the no form of this command.
Router(config-line)# exec-timeout 0 10
execute-on
To execute commands on a line card, use the execute-on command in privileged EXEC mode.
Syntax Description slot slot-number Executes the command on the line card in the
specified slot. Slot numbers can be chosen from the
following ranges:
• Cisco 12012 router: 0 to 11
• Cisco 12008 access server: 0 to 7
• Cisco AS5800 access server: 0 to 13
Usage Guidelines Use this command to execute a command on one or all line cards to monitor and maintain information on
one or more line cards (for example, a line card in a specified slot on a dial shelf). This allows you to issue
commands remotely; that is, to issue commands without needing to log in to the line card directly. The all
form of the command allows you to issue commands to all the line cards without having to log in to each in
turn.
Though this command does not have a no form, note that it is possible to use the no form of the remotely
executed commands used in this command.
Tip This command is useful when used with show EXEC commands (such as show version), because you can
verify and troubleshoot the features found only on a specific line card. Please note, however, that because
not all statistics are maintained on the line cards, the output from some of the show commands might not be
consistent.
Timesaver Though you can use the attachprivileged EXEC command to execute commands on a specific line card,
using the execute-on slotcommand saves you some steps. For example, first you must use the attach
command to connect to the Cisco IOS software running on the line card. Next you must issue the
command. Finally you must disconnect from the line card to return to the Cisco IOS software running on
the GRP card. With the execute-on slot command, you can perform three steps with one command. In
addition, the execute-on allcommand allows you to perform the same command on all line cards
simultaneously.
Caution Do not use this command to change configurations on dial shelf cards, because such changes will not be
reflected in the router shelf.
Using this command makes it possible to accumulate inputs for inclusion in the show tech-
supportcommand.
The master form of the command can run a designated command remotely on the router from the DSC
card. However, using the console on the DSC is not recommended. It is used for technical support
troubleshooting only.
The show tech-supportcommand for each dial shelf card is bundled into the router shelf's show tech-
support command via the execute-on facility.
The execute-on command also support interactive commands such as the following:
slot
ping
The execute-on command has the same limitations and restrictions as a vty telnet client has; that is, it
cannot reload DSC using the following command:
slot
reload
You can use the execute-on command to enable remote execution of the commands included in the
following partial list:
• debug dsc clock
• show context
• show diag
• show environment
• show dsc clock
• show dsi
• show dsip
• show tech-support
Examples In the following example, the user executes the show controllers command on the line card in slot 4 of a
Cisco 12000 series GSR:
Interface POS3
Hardware is BFLC POS
lcpos_instance struct 60341E80
RX POS ASIC addr space 12000000
TX POS ASIC addr space 12000100
SUNI framer addr space 12000A00
SUNI rsop intr status 00
CRC32 enabled, HDLC enc, ext clock
no loop
Router#
In the following example, the user executes the show version command on the line card in slot 2 and 3 of a
Cisco c7600 Sup series device:
Router#execute-on 4 show
?
WORD Command to be executed
| Output modifiers
<cr>
Router#execute-on 4 show
| ?
append Append redirected output to URL (URLs supporting append operation
only)
begin Begin with the line that matches
exclude Exclude lines that match
include Include lines that match
exit (EXEC)
To close an active terminal session by logging off the router, use the exit command in EXEC mode.
exit
Usage Guidelines Use the exit command in EXEC mode to exit the active session (log off the device). This command can be
used in any EXEC mode (such as User EXEC mode or Privileged EXEC mode) to exit from the EXEC
process.
Examples In the following example, the exit (global) command is used to move from global configuration mode to
privileged EXEC mode, the disable command is used to move from privileged EXEC mode to user EXEC
mode, and the exit (EXEC) command is used to log off (exit the active session):
Router(config)# exit
Router# disable
Router> exit
Command Description
exit (global) Exits from the current configuration mode to the
next highest configuration mode.
exit (global)
To exit any configuration mode to the next highest mode in the CLI mode hierarchy, use the exit command
in any configuration mode.
exit
Usage Guidelines The exit command is used in the Cisco IOS CLI to exit from the current command mode to the next highest
command mode in the CLI mode hierarchy.
For example, use the exit command in global configuration mode to return to privileged EXEC mode. Use
the exit command in interface, line, or router configuration mode to return to global configuration mode.
Use the exit command in subinterface configuration mode to return to interface configuration mode. At the
highest level, EXEC mode, the exit command will exit the EXEC mode and disconnect from the router
interface (see the description of the exit (EXEC) command for details).
Examples The following example shows how to exit from the subinterface configuration mode and to return to the
interface configuration mode:
Router(config-subif)# exit
Router(config-if)#
The following example displays an exit from the interface configuration mode to return to
the global configuration mode:
Router(config-if)# exit
Router(config)#
file prompt
To specify the level of prompting, use the file promptcommand in global configuration mode.
Usage Guidelines Use this command to change the amount of confirmation needed for different file operations.
This command affects only prompts for confirmation of operations. The router will always prompt for
missing information.
Examples The following example configures confirmation prompting for all file operations:
Command Default Image verification is not automatically applied to all images that are copied or reloaded onto a router.
Usage Guidelines Image verification is accomplished by verifying the compressed Cisco IOS image checksum.
Image verification allows users to automatically verify the integrity of all Cisco IOS images. Thus, users
can be sure that the image is protected from accidental corruption, which can occur at any time during
transit, starting from the moment the files are generated by Cisco until they reach the user.
The file verify auto command enables image verification globally; that is, all images that are to be copied
(via the copy command) or reloaded (via the reload command) are automatically verified. Although both
the copy and reload commands have a /verify keyword that enables image verification, you must issue the
keyword each time you want to copy or reload an image. The file verify auto command enables image
verification by default so you no longer have to specify image verification multiple times.
If you have enabled image verification by default but prefer to disable verification for a specific image
copy or reload, the /noverify keyword along with either the copy or the reload command will override the
file verify auto command.
Examples The following example shows how to enable automatic image verification:
format
To format a Class A, Class B, or Class C flash memory file system, use the format command in privileged
EXEC or diagnostic mode.
Command Default spare-number : 0monlib-filename:The monlib file bundled with the system software
Cisco IOS XE Release 2.1 This command was introduced on the Cisco ASR
1000 Series Routers and the following
enhancements were introduced:
• This command was introduced in diagnostic
mode for the first time. The command can be
entered in both privileged EXEC and
diagnostic mode on the Cisco ASR 1000 Series
Routers.
• The harddisk:, obfl:, stby-harddisk:, stby-
usb[0-1]: and usb[0-1]: filesystem1 : options
were introduced.
Usage Guidelines Reserve a certain number of memory sectors as spares, so that if some sectors fail, most of the flash
memory card can still be used. Otherwise, you must reformat the flash card after some of the sectors fail.
Use this command to format Class A, B, or C flash memory file systems. The Cisco 7600 series router
supports only Class A and Class C flash file systems.
In some cases, you might need to insert a new Personal Computer Memory Card Industry Association
(PCMCIA) flash memory or flash PC card and load images or backup configuration files onto it. Before
you can use a new flash memory or flash PC card, you must format it.
Sectors in flash memory or flash PC cards can fail. Reserve certain flash memory or flash PC sectors as
“spares” by using the optional spare-number argument on the format command to specify 0 to 16 sectors
as spares. If you reserve a small number of spare sectors for emergencies, you can still use most of the flash
memory or flash PC card. If you specify 0 spare sectors and some sectors fail, you must reformat the flash
memory or flash PC card, thereby erasing all existing data.
The monlib file is the ROM monitor library. The ROM monitor uses this file to access files in the flash file
system. The Cisco IOS system software contains a monlib file. Use the show disk0: allcommand to display
monlib file details.
When this command is used with HSA and you do not specify the monlib-filename argument, the system
takes the ROM monitor library file from the slave image bundle. If you specify the monlib-filename
argument, the system assumes that the files reside on the slave devices.
In the command syntax, the filesystem1 :argumentspecifies the device to format and the
filesystem2 :argumentspecifies the optional device containing the monlib file used to format the
filesystem1 :argument. The device determines which monlib file to use, as follows:
• If you omit the optional filesystem2 : and monlib-filename arguments, the system formats the
filesystem1 : argument using the monlib file already bundled with the system software.
• If you omit only theoptional filesystem2 : argument, the system formats the filesystem1 :
argumentusing the monlib file from the device you specified with the cd command.
• If you omit only the optional monlib-filename argument, the system formats filesystem1 : using the
filesystem2 : monlib file.
• When you specify both arguments--filesystem2 : and monlib-filename-- the system formats the
filesystem1 : argumentusing the monlib file from the specified device.
• You can specify the filesystem1 :arguments’s own monlib file in this argument. If the system cannot
find a monlib file, it terminates its formatting.
Note Most platforms do not support booting from images stored on flash memory cards . You should reboot your
device only from integrated memory locations, such as NVRAM.
Examples The following example shows how to format a flash memory card that is inserted in slot 0:
When the console returns to the privileged EXEC prompt, the new flash memory card is formatted and
ready for use.
This following example shows how to format a CompactFlash PC card that is inserted in slot 0:
This follwing example shows how a format operation cleans up the disk and writes the monitor library on
the disk filesystem:
show disk0: all Displays ATA MONLIB file information for disk0.
fsck
To check a File Allocation Table (FAT)-based disk, a flash file system, or a Class C file system for damage
and to repair any problems, use the fsckcommand in privileged EXEC or diagnostic mode.
Supported Platforms Other than the Cisco 7600 Series and Cisco ASR1000 Series Routers
fsck [/nocrc] [/automatic] [/all] [/force] [filesystem:]
Command Default A FAT-based disk, flash file system, or Class C file system is not checked for damage and repaired. If you
do not enter the /automatic keyword, command-line interface (CLI) prompts for actions are issued. For the
Cisco 7600 series router, if you do not specify the disk0: keyword, the current file system is checked.
This command is available in both privileged EXEC and diagnostic mode on the Cisco ASR1000 series
routers.
Cisco IOS XE Release 2.1 This command was introduced on the Cisco ASR
1000 Series Routers and the following
enhancements were introduced:
• This command was introduced in diagnostic
mode for the first time. The command can be
entered in both privileged EXEC and
diagnostic mode on the Cisco ASR 1000 series
routers.
• The /all option was introduced.
• The harddisk:, obfl:, stby-harddisk:, stby-
usb[0-1]:,and usb[0-1]: filesystem : options
were introduced.
Usage Guidelines Supported Platforms Other than Cisco 7600 Series Router
This command performs all steps necessary to remove corrupted files and reclaim unused disk space.
Changes include checking for incorrect file sizes, cluster loops, and so on. The default form of this
command issues multiple prompts to confirm each of the changes. However, you can skip these prompts by
using the /automatic keyword when issuing the command.
When you use the /automatickeyword you are prompted to confirm that you want the automatic option.
Prompts for actions will be skipped, but all actions performed are displayed to the terminal (see the
example below).
This command works with ATA Personal Computer Memory Card Industry Association (PCMCIA) cards
formatted in Disk Operating System (DOS), or for Class C flash file systems.
Note Only one partition (the active partition) is checked in the ATA disk.
Checks Actions
Checks the boot sector and the partition table and reports the No action.
errors.
Validates the media with the signature in the last 2 bytes of the No action.
first sector (0x55 and 0xaa, respectively).
Checks the number of FAT’s field (correct values are 1 and 2). No action.
Checks Actions
Checks these values: No action.
• n_fat_sectors cannot be less than 1.
• n_root_entries cannot be less than 16.
• n_root_sectors cannot be less than 2.
• base_fat_sector, n_sectors_per_cluster, n_heads,
n_sectors_per_track is not 0.
Checks the FAT for invalid cluster numbers. If the cluster is a part of a file chain, the cluster is changed to
end of file (EOF). If the cluster is not part of a file chain, it is
added to the free list and unused cluster chain. The table below
lists valid cluster numbers; numbers other than those listed in
the table below are invalid numbers.
Checks the file’s cluster chain for loops. If the loop is broken, the file is truncated at the cluster where
the looping occurred.
Checks the directories for nonzero size fields. If directories are found with nonzero size fields, the size is reset
to zero.
Checks for invalid start cluster file numbers. If the start cluster number of a file is invalid, the file is deleted.
Checks files for bad or free clusters. If the file contains bad or free clusters, the file is truncated at
the last good cluster; an example is the cluster that points to
this bad/free cluster.
Checks to see if the file’s cluster chain is longer than indicated If the file’s cluster chain is longer than indicated by the size
by the size fields. fields, the file size is recalculated and the directory entry is
updated.
Checks to see if two or more files share the same cluster If two or more files are crosslinked, you are prompted to accept
(crosslinked). the repair, and one of the files is truncated.
Checks to see if the file’s cluster chain is shorter than is If the file’s cluster chain is shorter than is indicated by the size
indicated by the size fields. fields, the file size is recalculated and the directory entry is
updated.
Checks to see if there are any unused cluster chains. If unused cluster chains are found, new files are created and
linked to that file with the name fsck-start cluster
The table below lists the valid cluster numbers. Numbers other than those listed in the table below are
invalid numbers.
Available cluster 0 0
Examples
Supported Platforms Other than the Cisco 7600 Series Router
The following example shows sample output from the fsck command in automatic mode:
Router# fsck
Checking the boot sector and partition table...
Checking FAT, Files and Directories...
Files
1) disk0:/FILE3 and
2) disk0:/FILE2
full-help
To get help f or the full set of user-level commands, use the full-help command in line configuration mode.
full-help
Usage Guidelines The full-help command enables (or disables) an unprivileged user to see all of the help messages available.
It is used with the show ? command.
Examples In the following example, the show ? command is used first with full-help disabled. Then full-help is
enabled for the line, and the show ? command is used again to demonstrate the additional help output that
is displayed.
Router> show ?
bootflash Boot Flash information
calendar Display the hardware calendar
clock Display the system clock
context Show context information
dialer Dialer parameters and statistics
history Display the session command history
hosts IP domain-name, lookup style, nameservers, and host table
isdn ISDN information
kerberos Show Kerberos Values
modemcap Show Modem Capabilities database
ppp PPP parameters and statistics
rmon rmon statistics
sessions Information about Telnet connections
snmp snmp statistics
terminal Display terminal configuration parameters
users Display information about terminal lines
version System hardware and software status
Router> enable
Password:<letmein>
Router#
%SYS-5-CONFIG_I: Configured from console by console
Router# disable
Router> show ?
access-expression List access expression
access-lists List access lists
aliases Display alias commands
apollo Apollo network information
appletalk AppleTalk information
arp ARP table
async Information on terminal lines used as router interfaces
bootflash Boot Flash information
bridge Bridge Forwarding/Filtering Database [verbose]
bsc BSC interface information
bstun BSTUN interface information
buffers Buffer pool statistics
calendar Display the hardware calendar
.
.
.
translate Protocol translation information
ttycap Terminal capability tables
users Display information about terminal lines
version System hardware and software status
vines VINES information
vlans Virtual LANs Information
whoami Info on current tty line
x25 X.25 information
xns XNS information
xremote XRemote statistics
help
To display a brief description of the help system, use the help command in any command mode.
help
Usage Guidelines The help command provides a brief description of the context-sensitive help system, which functions as
follows:
• To list all commands available for a particular command mode, enter a question mark (?) at the system
prompt.
• To obtain a list of commands that begin with a particular character string, enter the abbreviated
command entry immediately followed by a question mark (?). This form of help is called word help ,
because it lists only the keywords or arguments that begin with the abbreviation you entered.
• To list the keywords and arguments associated with a command, enter a question mark (?) in place of a
keyword or argument on the command line. This form of help is called command syntax help , because
it lists the keywords or arguments that apply based on the command, keywords, and arguments you
have already entered.
Examples In the following example, the help command is used to display a brief description of the help system:
Router#
help
Help may be requested at any point in a command by entering
The following example shows how to use word help to display all the privileged EXEC commands that
begin with the letters “co.” The letters entered before the question mark are reprinted on the next command
line to allow the user to continue entering the command.
Router# co?
configure connect copy
Router# co
The following example shows how to use command syntax help to display the next argument of a partially
complete access-list command. One option is to add a wildcard mask. The <cr> symbol indicates that the
other option is to press Enter to execute the command without adding any more keywords or arguments.
The characters entered before the question mark are reprinted on the next command line to allow the user to
continue entering the command or to execute that command as it is.
hidekeys
To suppress the display of password information in configuration log files, use the hidekeys command in
configuration change logger configuration mode. To allow the display of password information in
configuration log files, use the no form of this command.
hidekeys
no hidekeys
Usage Guidelines Enabling the hidekeys command increases security by preventing password information from being
displayed in configuration log files.
Examples The following example shows how to prevent password information from being displayed in configuration
log files:
Router(config)# archive
Router(config-archive)# log config
Router(config-archive-log-config)# hidekey
s
Router(config-archive-log-config)# end
show archive log config Displays entries from the configuration log.
history
To enable the command history function, use the history command in line configuration mode. To disable
the command history function, use the no form of this command.
history
no history
Usage Guidelines The command history function provides a record of EXEC commands that you have entered. This function
is particularly useful for recalling long or complex commands or entries, including access lists.
To change the number of command lines that the system will record in its history buffer, use the history
size line configuration command.
The history command enables the history function with the last buffer size specified or, if there was not a
prior setting, with the default of ten lines. The no history command disables the history function.
The show history EXEC command will list the commands you have entered, but you can also use your
keyboard to display individual commands. The table below lists the keys you can use to recall commands
from the command history buffer.
Key(s) Functions
Ctrl-P or Up Arrow2 Recalls commands in the history buffer in a
backward sequence, beginning with the most recent
command. Repeat the key sequence to recall
successively older commands.
Examples In the following example, the command history function is disabled on line 4:
Router(config)# line 4
Router(config-line)# no history
show history Lists the commands you have entered in the current
EXEC session.
history size
To change the command history buffer size for a particular line, use the history size command in line
configuration mode. To reset the command history buffer size to ten lines, use the no form of this
command.
Syntax Description number-of-lines Specifies the number of command lines that the
system will record in its history buffer. The range is
from 0 to 256. The default is 10.
Usage Guidelines The history size command should be used in conjunction with the history and show history commands.
The history command enables or disables the command history function. The show history command lists
the commands you have entered in the current EXEC session. The number of commands that the history
buffer will show is set by the history size command.
Note The history size command only sets the size of the buffer; it does not reenable the history function. If the
no history command is used, the history command must be used to reenable this function.
Examples The following example displays line 4 configured with a history buffer size of 35 lines:
Router(config)# line 4
Router(config-line)# history size 35
show history Lists the commands you have entered in the current
EXEC session.
terminal history size Enables the command history function for the
current terminal session or changes the size of the
command history buffer for the current terminal
session.
hold-character
To define the local hold character used to pause output to the terminal screen, use the hold-character
command in line configuration mode. To restore the default, use the no form of this command.
hold-character ascii-number
no hold-character
Usage Guidelines The Break character is represented by zero; NULL cannot be represented. To continue the output, enter any
character after the hold character. To use the hold character in normal communications, precede it with the
escape character. See the “ASCII Character Set” appendix for a list of ASCII characters.
Examples The following example sets the hold character to Ctrl-S, which is ASCII decimal character 19:
Router(config)# line 8
Router(config-line)# hold-character 19
hostname
To specify or modify the hostname for the network server, use the hostname command in global
configuration mode.
hostname name
Cisco IOS XE Release 2.5 This command was integrated into Cisco IOS XE
Release 2.5.
Usage Guidelines The hostname is used in prompts and default configuration filenames.
Do not expect case to be preserved. Uppercase and lowercase characters look the same to many internet
software applications. It may seem appropriate to capitalize a name the same way you might do in English,
but conventions dictate that computer names appear all lowercase. For more information, refer to RFC
1178, Choosing a Name for Your Computer .
The name must also follow the rules for ARPANET hostnames. They must start with a letter, end with a
letter or digit, and have as interior characters only letters, digits, and hyphens. Names must be 63 characters
or fewer. Creating an all numeric hostname is not recommended but the name will be accepted after an
error is returned.
Router(config)#hostname 123
% Hostname contains one or more illegal characters.
123(config)#
A hostname of less than 10 characters is recommended. For more information, refer to RFC 1035, Domain
Names--Implementation and Specification .
On most systems, a field of 30 characters is used for the hostname and the prompt in the CLI. Note that the
length of your hostname may cause longer configuration mode prompts to be truncated. For example, the
full prompt for service profile configuration mode is:
(config-service-profile)#
However, if you are using the hostname of “Router,” you will only see the following prompt (on most
systems):
Router(config-service-profil)#
If the hostname is longer, you will see even less of the prompt:
Basement-rtr2(config-service)#
Keep this behavior in mind when assigning a name to your system (using the hostname global
configuration command). If you expect that users will be relying on mode prompts as a CLI navigation aid,
you should assign hostnames of no more than nine characters.
The use of a special character such as '\'(backslash) and a three or more digit number for the character
setting like hostname, results in incorrect translation:
Router(config)#
Router(config)#hostname \99
% Hostname contains one or more illegal characters.
hw-module reset
To reset a module by turning the power off and then on, use the hw-module reset command in privileged
EXEC mode.
Syntax Description module num Applies the command to a specific module; see the
“Usage Guidelines” section for valid values.
Usage Guidelines The num argument designates the module number. Valid values depend on the chassis that is used. For
example, if you have a 13-slot chassis, valid values for the module number are from 1 to 13.
Router#
hw-module module 3 reset
hw-module shutdown
To shut down the module, use the hw-module shutdown command in privileged EXEC mode.
Syntax Description module num Applies the command to a specific module; see the
“Usage Guidelines” section for valid values.
Usage Guidelines This command is supported on the SSL Services Module and the NAM.
If you enter the hw-module shutdowncommand to shut down the module, you will have to enter the no
power enable module command and the power enable module command to restart (power down and then
power up) the module.
Examples This example shows how to shut down and restart the module:
insecure
To configure a line as insecure, use the insecure command in line configuration mode. To disable this
function, use the no form of this command.
insecure
no insecure
Usage Guidelines Use this command to identify a modem line as insecure for DEC local area transport (LAT) classification.
Router(config)# line 10
Router(config-line)# insecure
international
If you are using Telnet to access a Cisco IOS platform and you want to display 8-bit and multibyte
international characters (for example, Kanji) and print the Escape character as a single character instead of
as the caret and bracket symbols (^[), use the international command in line configuration mode. To
display characters in 7-bit format, use the no form of this command.
international
no international
Usage Guidelines If you are configuring a Cisco IOS platform using the Cisco web browser user interface (UI), this function
is enabled automatically when you enable the Cisco web browser UI using the ip http server global
configuration command.
Examples The following example enables a Cisco IOS platform to display 8-bit and multibyte characters and print the
Escape character as a single character instead of as the caret and bracket symbols (^[) when you are using
Telnet to access the platform:
line vty 4
international
ip bootp server
To enable the Bootstrap Protocol (BOOTP) service on your routing device, use the ip bootp server
command in global configuration mode. To disable BOOTP services, use the no form of the command.
ip bootp server
no ip bootp server
Usage Guidelines By default, the BOOTP service is enabled. When disabled, the no ip bootp server command will appear in
the configuration file.
The integrated Dynamic Host Configuration Protocol (DHCP) server was introduced in Cisco IOS Release
12.0(1)T. Because DHCP is based on BOOTP, both of these services share the “well-known” UDP server
port of 67 (per RFC 951, RFC 1534, and RFC 2131; the client port is 68). To disable DHCP services
(DHCP relay and DHCP server), use the no service dhcp command. To disable BOOTP services (in
releases 12.2(8)T and later), but leave DHCP services enabled, use the ip dhcp bootp ignore command.
If both the BOOTP server and DHCP server are disabled, “ICMP port unreachable” messages will be sent
in response to incoming requests on port 67, and the original incoming packet will be discarded. If DHCP
is enabled, using the no ip bootp server command by itself will not stop the router from listening on UDP
port 67.
Note As with all minor services, the async line BOOTP service should be disabled on your system if you do not
have a need for it in your network. Any network device that has User Data Protocol (UDP), TCP, BOOTP,
DHCP, or Finger services should be protected by a firewall or have the services disabled to protect against
Denial of Service attacks.
Examples In the following example, BOOTP and DHCP services are disabled on the router:
ip finger
To configure a system to accept Finger protocol requests (defined in RFC 742), use the ip finger command
in global configuration mode. To disable this service, use the noform of this command.
ip finger [rfc-compliant]
no ip finger
Usage Guidelines The Finger service allows remote users to view the output equivalent to the show users [wide] command.
When ip finger is configured, the router will respond to a telnet a.b.c.d finger command from a remote
host by immediately displaying the output of the show userscommand and then closing the connection.
When the ip finger rfc-compliantcommandis configured, the router will wait for input before displaying
anything (as required by RFC 1288). The remote user can then enter the Return key to display the output of
the show users EXEC command, or enter /W to display the output of the show users wide EXEC
command. After this information is displayed, the connection is closed.
Note As with all minor services, the Finger service should be disabled on your system if you do not have a need
for it in your network. Any network device that has UDP, TCP, BOOTP, or Finger services should be
protected by a firewall or have the services disabled to protect against Denial of Service attacks.
Because of the potential for hung lines, the rfc-compliantform of this command should not be configured
for devices with more than 20 simultaneous users.
Router(config)# no ip finger
ip ftp passive
To configure the router to use only passive FTP connections, use the ip ftp passivecommand in global
configuration mode . To allow all types of FTP connections, use the noform of this command.
ip ftp passive
no ip ftp passive
Examples In the following example, the router is configured to use only passive FTP connections:
ip ftp password
To specify the password to be used for File Transfer Protocol (FTP) connections, use the ip ftp
passwordcommand in global configuration mode. To return the password to its default, use the no form of
this command.
Command Default The router forms a password [email protected]. The variable username is the username
associated with the current session, routername is the configured host name, and domain is the domain of
the router.
Examples The following example configures the router to use the username “red” and the password “blue” for FTP
connections:
ip ftp source-interface
To specify the source IP address for File Transfer Protocol (FTP) connections, use the ip ftp source-
interfacecommand in global configuration mode. To use the address of the interface where the connection
is made, use the no form of this command.
Syntax Description interface-type interface-number The interface type and number to use to obtain the
source address for FTP connections.
Command Default The FTP source address is the IP address of the interface that the FTP packets use to leave the router.
Usage Guidelines Use this command to set the same source address for all FTP connections.
In Cisco IOS 12.3(6) and later releases, FTP is VRF-aware, which means that FTP transfer is supported
across an interface within a VRF instance. To specify a VRF as a source for FTP connections, the VRF
must be associated with the same interface that you configure with the ip ftp source-interface command.
In this configuration, FTP looks for the destination IP address for file transfer in the specified VRF table. If
the specified source interface is not up, Cisco IOS software selects the address of the interface closest to the
destination as the source address.
Examples The following example shows how to configure the router to use the IP address associated with Ethernet
interface 0 as the source address on all FTP packets, regardless of which interface is actually used to send
the packet:
Router> enable
Router# configure terminal
Router(config)# ip ftp source-interface ethernet 0
The following example shows how to configure the router to use the VRF table named vpn1 to look for the
destination IP address for the transfer of FTP packets:
ip ftp username
To configure the username for File Transfer Protocol (FTP) connections, use the ip ftp usernamecommand
in global configuration mode . To configure the router to attempt anonymous FTP, use the noform of this
command.
Usage Guidelines The remote username must be associated with an account on the destination server.
Examples In the following example, the router is configured to use the username “red” and the password “blue”for
FTP connections:
Command Description
ip ftp password Specifies the password to be used for FTP
connections.
ip rarp-server
To enable the router to act as a Reverse Address Resolution Protocol (RARP) server, use the ip rarp-
server command in interface configuration mode. To restore the interface to the default of no RARP server
support, use the noform of this command.
ip rarp-server ip-address
no ip rarp-server ip-address
Usage Guidelines This feature makes diskless booting of clients possible between network subnets where the client and server
are on separate subnets.
RARP server support is configurable on a per-interface basis, so that the router does not interfere with
RARP traffic on subnets that need no RARP assistance.
The Cisco IOS software answers incoming RARP requests only if both of the following two conditions are
met:
• The ip rarp-server command has been configured for the interface on which the request was received.
• A static entry is found in the IP ARP table that maps the MAC address contained in the RARP request
to an IP address.
Use the show ip arp EXEC command to display the contents of the IP ARP cache.
Sun Microsystems, Inc. makes use of RARP and UDP-based network services to facilitate network-based
booting of SunOS on it’s workstations. By bridging RARP packets and using both the ip helper-address
interface configuration command and the ip forward-protocol global configuration command, the Cisco
IOS software shouldbe able to perform the necessary packet switching to enable booting of Sun
workstations across subnets. Unfortunately, some Sun workstations assume that the sender of the RARP
response, in this case the router, is the host that the client can contact to TFTP load the bootstrap image.
This causes the workstations to fail to boot.
By using the ip rarp-server command, the Cisco IOS software can be configured to answer these RARP
requests, and the client machine should be able to reach its server by having its TFTP requests forwarded
through the router that acts as the RARP server.
In the case of RARP responses to Sun workstations attempting to diskless boot, the IP address specified in
the ip rarp-server interface configuration command should be the IP address of the TFTP server. In
addition to configuring RARP service, the Cisco IOS software must be configured to forward UDP-based
Sun portmapper requests to completely support diskless booting of Sun workstations. This can be
accomplished using configuration commands of the following form:
Examples The following partial example configures a router to act as a RARP server. The router is configured to use
the primary address of the specified interface in its RARP responses.
In the following example, a router is configured to act as a RARP server, with TFTP and portmapper
requests forwarded to the Sun server:
ip rcmd domain-lookup
To reena ble the basic Domain Name Service (DNS) security check for rcp and rsh, use the ip rcmd
domain-lookupcommand in global configuration mode. T o disable the basic DNS security check for
remote copy protocol (rcp) and remote shell protoco (rsh), use the no form of this command.
ip rcmd domain-lookup
no ip rcmd domain-lookup
Usage Guidelines The abbreviation RCMD (remote command) is used to indicate both rsh and rcp.
DNS lookup for RCMD is enabled by default (provided general DNS services are enabled on the system
using the ip domain-lookupcommand).
The no ip rcmd domain-lookup command is used to disable the DNS lookup for RCMD. The ip rcmd
domain-lookup command is used to reenable the DNS lookup for RCMD.
DNS lookup for RCMD is performed as a basic security check. This check is performed using a host
authentication process. When enabled, the system records the address of the requesting client. That address
is mapped to a host name using DNS. Then a DNS request is made for the IP address for that host name.
The IP address received is then checked against the original requesting address. If the address does not
match with any of the addresses received from DNS, the RCMD request will not be serviced.
This reverse lookup is intended to help protect against spoofing. However, please note that the process only
confirms that the IP address is a valid “routable” address; it is still possible for a hacker to spoof the valid
IP address of a known host.
The DNS lookup is done after the TCP handshake but before the router (which is acting as a rsh/rcp server)
sends any data to the remote client.
The no ip rcmd domain-lookup will turn off DNS lookups for rsh and rcp only. The no ip domain-
lookup command takes precedence over the ip rcmd domain-lookupcommand. This means that if the no
ip domain-lookup command is in the current configuration, DNS will be bypassed for rcp and rsh even if
the ip rcmd domain-lookup command is enabled.
Examples In the following example, the DNS security check is disabled for RCMD (rsh/rcp):
ip rcmd rcp-enable
To configure the Cisco IOS software to allow remote users to copy files to and from the router using
remote copy protocol (rcp), use the ip rcmd rcp-enable command in global configuration mode. To
disable rcp on the device, use the no form of this command.
ip rcmd rcp-enable
no ip rcmd rcp-enable
Command Default To ensure security, the router is not enabled for rcp by default.
Usage Guidelines To allow a remote user to execute rcp commands on the router, you must also create an entry for the remote
user in the local authentication database using the ip rcmd remote-host command.
The no ip rcmd rcp-enable command does not prohibit a local user from using rcp to copy system images
and configuration files to and from the router.
To protect against unauthorized users copying the system image or configuration files, the router is not
enabled for rcp by default.
Examples In the following example, the rcp service is enabled on the system, the IP address assigned to the
Loopback0 interface is used as the source address for outbound rcp and rsh packets, and access is granted
to the user “netadmin3”on the remote host 172.16.101.101:
Router(config)# ip rcmd rcp-enable
ip rcmd remote-host
To create an entry for the remote user in a local authentication database so that remote users can execute
commands on the router using remote shell protocol (rsh) or remote copy protocol (rcp), use the ip rcmd
remote-host command in global configuration mode. To remove an entry for a remote user from the local
authentication database, use the no form of this command.
Syntax Description local-username Name of the user on the local router. You can
specify the router name as the username. This name
needs to be communicated to the network
administrator or to the user on the remote system.
To be allowed to remotely execute commands on
the router, the remote user must specify this value
correctly.
remote-username Name of the user on the remote host from which the
router will accept remotely executed commands.
Usage Guidelines A TCP connection to a router is established using an IP address. Using the host name is valid only when
you are initiating an rcp or rsh command from a local router. The host name is converted to an IP address
using DNS or host-name aliasing.
To allow a remote user to execute rcp or rsh commands on a local router, you must create an entry for the
remote user in the local authentication database. You must also enable the router to act as an rsh or rcp
server.
To enable the router to act as an rsh server, issue the ip rcmd rsh-enable command. To enable the router to
act as an rcp server, issue the ip rcmd rcp-enable command.The router cannot act as a server for either of
these protocols unless you explicitly enable the capacity.
A local authentication database, which is similar to a UNIX .rhosts file, is used to enforce security on the
router through access control. Each entry that you configure in the authentication database identifies the
local user, the remote host, and the remote user. To permit a remote user of rsh to execute commands in
privileged EXEC mode or to permit a remote user of rcp to copy files to the router, specify the enable
keyword and level. For information on the enable level, refer to the privilege level global configuration
command in the Release 12.2 Cisco IOS Security Command Reference.
An entry that you configure in the authentication database differs from an entry in a UNIX .rhostsfile in the
following aspect. Because the .rhosts file on a UNIX system resides in the home directory of a local user
account, an entry in a UNIX .rhosts file need not include the local username; the local username is
determined from the user account. To provide equivalent support on a router, specify the local username
along with the remote host and remote username in each authentication database entry that you configure.
For a remote user to be able to execute commands on the router in its capacity as a server, the local
username, host address or name, and remote username sent with the remote client request must match
values configured in an entry in the local authentication file.
A remote client host should be registered with DNS. The Cisco IOS software uses DNS to authenticate the
remote host’s name and address. Because DNS can return several valid IP addresses for a host name, the
Cisco IOS software checks the address of the requesting client against all of the IP addresses for the named
host returned by DNS. If the address sent by the requester is considered invalid, that is, it does not match
any address listed with DNS for the host name, then the software will reject the remote-command execution
request.
Note that if no DNS servers are configured for the router, then that device cannot authenticate the host in
this manner. In this case, the Cisco IOS software sends a broadcast request to attempt to gain access to
DNS services on another server. If DNS services are not available, you must use the no ip domain-lookup
command to disable the attempt to gain access to a DNS server by sending a broadcast request.
If DNS services are not available and, therefore, you bypass the DNS security check, the software will
accept the request to remotely execute a command only if all three values sent with the request match
exactly the values configured for an entry in the local authentication file.
Examples The following example allows the remote user named netadmin3 on a remote host with the IP address
172.16.101.101 to execute commands on router1 using the rsh or rcp protocol. User netadmin3 is allowed
to execute commands in privileged EXEC mode.
ip rcmd remote-username
To configure the remote username to be used when requesting a remote copy using remote copy protocol
(rcp), use the ip rcmd remote-usernamecommand in global configuration mode . To remove from the
configuration the remote username, use the noform of this command.
Syntax Description username Name of the remote user on the server. This name
is used for rcp copy requests. All files and images
to be copied are searched for or written relative to
the directory of the remote user’s account, if the
server has a directory structure, for example, as do
UNIX systems.
Command Default If you do not issue this command, the Cisco IOS software sends the remote username associated with the
current tty process, if that name is valid, for rcp copy commands. For example, if the user is connected to
the router through Telnet and the user was authenticated through the usernamecommand, then the software
sends that username as the remote username.
Note The remote username must be associated with an account on the destination server.
If the username for the current tty process is not valid, the Cisco IOS software sends the host name as the
remote username. For rcp boot commands, the Cisco IOS software sends the access server host name by
default.
Note For Cisco, tty lines are commonly used for access services. The concept of tty originated with UNIX. For
UNIX systems, each physical device is represented in the file system. Terminals are called tty devices (tty
stands for teletype, the original UNIX terminal).
Release Modification
12.2(33)SRA This command was integrated into Cisco IOS
Release 12.2(33)SRA.
Usage Guidelines The rcp protocol requires that a client send the remote username on an rcp request to the server. Use this
command to specify the remote username to be sent to the server for an rcp copy request. If the server has a
directory structure, as do UNIX systems, all files and images to be copied are searched for or written
relative to the directory of the remote user’s account.
Note Cisco IOS Release 10.3 added the ip keyword to rcmd commands. If you are upgrading from Release 10.2
to Release 10.3 or a later release, this keyword is automatically added to any rcmd commands you have in
your Release 10.2 configuration files.
boot system rcp Specifies the system image that the router loads at
startup.
bridge acquire Forwards any frames for stations that the system
has learned about dynamically.
ip rcmd rsh-enable
To configure the router to allow remote users to execute commands on it using remote shell protocol (rsh),
use the ip rcmd rsh-enable command in global configuration mode. To disable a router that is enabled for
rsh, use the no form of this command.
ip rcmd rsh-enable
no ip rcmd rsh-enable
Command Default To ensure security, the router is not enabled for rsh by default.
Usage Guidelines rsh, used as a client process, gives users the ability to remotely get router information (such as status)
without the need to connect into the router and then disconnect. This is valuable when looking at many
statistics on many different routers.
Use this command to enable the router to receive rsh requests from remote users. In addition to issuing this
command, you must create an entry for the remote user in the local authentication database to allow a
remote user to execute rsh commands on the router.
The no ip rcmd rsh-enable command does not prohibit a local user of the router from executing a
command on other routers and UNIX hosts on the network using rsh. The no form of this command only
disables remote access to rsh on the router.
ip rcmd source-interface
To force remote copy protocol (rcp) or remote shell protocol (rsh) to use the IP address of a specified
interface for all outgoing rcp/rsh communication packets, use the ip rcmd source-interface command in
global configuration mode. To disable a previously configured ip rcmd source-interface command, use
the no form of this command.
ip rcmd source-interface interface-id
no ip rcmd source-interface interface-id
Syntax Description interface-id The name and number used to identify the
interface. For example, Loopback2.
Command Default The address of the interface closest to the destination is used as the source interface for rcp/rsh
communications.
Usage Guidelines If this command is not used, or if the interface specified in this command is not available (not up), the
Cisco IOS software uses the address of the interface closest to the destination as the source address.
Use this command to force the system to tag all outgoing rcp/rsh packets with the IP address associated
with the specified interface. This address is used as the source address as long as the interface is in the up
state.
This command is especially useful in cases where the router has many interfaces, and you want to ensure
that all rcp and/or rsh packets from this router have the same source IP address. A consistent address is
preferred so that the other end of the connection (the rcp/rsh server or client) can maintain a single session.
The other benefit of a consistent address is that an access list can be configured on the remote device.
The specified interface must have an IP address associated with it. If the specified interface does not have
an IP address or is in a down state, then rcp/rsh reverts to the default. To avoid this, add an IP address to the
subinterface or bring the interface to the up state.
Examples In the following example, Loopback interface 0 is assigned an IP address of 220.144.159.200, and the ip
rcmd source-interface command is used to specify that the source IP address for all rcp/rsh packets will be
the IP address assigned to the Loopback0 interface:
interface Loopback0
description Loopback interface
ip address 220.144.159.200 255.255.255.255
no ip directed-broadcast
!
.
.
.
clock timezone GMT 0
ip subnet-zero
no ip source-route
no ip finger
ip rcmd source-interface Loopback0
ip telnet source-interface Loopback0
ip tftp source-interface Loopback0
ip ftp source-interface Loopback0
ip ftp username cisco
ip ftp password shhhhsecret
no ip bootp server
ip domain-name net.galaxy
ip name-server 220.144.159.1
ip name-server 220.144.159.2
ip name-server 219.10.2.1
!
.
.
.
ip telnet source-interface
To specify the IP address of an interface as the source address for Telnet connections, use the ip telnet
source-interface command in global configuration mode. To reset the source address to the default for
each connection, use the no form of this command.
Command Default The address of the closest interface to the destination is the source address.
Usage Guidelines Use this command to set the IP address of an interface as the source for all Telnet connections.
If the specified interface is not up, the Cisco IOS software selects the address of the interface closest to the
destination as the source address.
Examples The following example forces the IP address for Ethernet interface 1 as the source address for Telnet
connections :
ip tftp blocksize
To negotiate a transfer TFTP blocksize, use the ip tftp blocksizecommand in global configuration mode.
To disable this configuration, use the no form of this command.
Syntax Description bytes The size in bytes of the TFTP block from 512 to
8192.
Examples The following example shows how to set a 1024 byte TFTP blocksize:
Router> enable
Router# configure terminal
Router(config)# ip tftp bblocksize 1024
ip tftp boot-interface
To use an interface for TFTP booting, use the ip tftp boot-interfacecommand in global configuration
mode. To disable this configuration, use the no form of this command.
Syntax Description type The type of the interface to be used. You can
choose from a list of interfaces.
Examples The following example shows how to ensure that an interface is used for TFTP booting:
Router> enable
Router# configure terminal
Router(config)# ip tftp boot-interface
ip tftp min-timeout
To specify the minimum timeout period for retransmission of data using TFTP, use the ip tftp min-
timeoutcommand in global configuration mode. To disable, use the no form of this command.
Syntax Description seconds Specifies the timeout value, in seconds. The range
is from 4 to 20.
Command Default The default minimum timeout period for retransmission of data is 4 seconds.
Examples The following example shows how to specify the minimum timeout period for retransmission of data as 5
seconds:
Router> enable
Router# configure terminal
Router(config)# ip tftp min-timeout 5
ip tftp source-interface
To specify the IP address of an interface as the source address for TFTP connections, use the ip tftp
source-interface command in global configuration mode. To return to the default, use the no form of this
command.
ip tftp source-interface interface-type interface-number
no ip tftp source-interface
Syntax Description interface-type interface-number The interface type and number whose address is to
be used as the source for TFTP connections.
Command Default The address of the closest interface to the destination is selected as the source address.
Usage Guidelines Use this command to set the IP address of an interface as the source for all TFTP connections.
If the specified interface is not up, the Cisco IOS software selects the address of the interface closest to the
destination as the source address.
In Cisco IOS 12.3(6) and later releases, TFTP is VRF-aware, which means that TFTP transfer is supported
across an interface within a Virtual Private Network (VPN) routing and forwarding (VRF) instance. To
specify a VRF as a source for TFTP connections, the VRF must be associated with the same interface that
you configure with the ip tftp source-interface command. In this configuration, TFTP looks for the
destination IP address for file transfer in the specified VRF table.
Examples The following example shows how to configure the router to use the IP address associated with loopback
interface 0 as the source address for TFTP connections :
The following example shows how to configure the router to use the VRF table named vpn1 to look for the
destination IP address for TFTP connections. In this example, file transfer using TFTP is accomplished
across an interface within a VRF (VRF vpn1) link.
Syntax Description group-address group-address (Optional) Directs the router to use a specified
multicast IP address for communication with the
WCCP service group. See the “Usage Guidelines”
section for additional information.
Command Default When this command is not configured, hardware acceleration for WCCPv1 is not enabled.
Release Modification
12.2(18)SXD1 This command was changed to support the
Supervisor Engine 720.
Usage Guidelines The group-address group-address option requires a multicast address that is used by the router to
determine which cache engine should receive redirected messages. This option instructs the router to use
the specified multicast IP address to coalesce the “I See You” responses for the “Here I Am” messages that
it has received on this group address. In addition, the response is sent to the group address. The default is
for no group-address to be configured, so that all “Here I Am” messages are responded to with a unicast
reply.
The redirect-list access-list option instructs the router to use an access list to control the traffic that is
redirected to the cache engines of the service group that is specified by the service-name given. The access-
list argument specifies either a number from 1 to 99 to represent a standard or extended access list number,
or a name to represent a named standard or extended access list. The access list itself specifies the traffic
that is permitted to be redirected. The default is for no redirect-list to be configured (all traffic is
redirected).
The group-list access-list option instructs the router to use an access list to control the cache engines that
are allowed to participate in the specified service group. The access-list argument specifies either a number
from 1 to 99 to represent a standard access list number, or a name to represent a named standard access list.
The access list specifies which cache engines are permitted to participate in the service group. The default
is for no group-list to be configured, so that all cache engines may participate in the service group.
The password can be up to seven characters. When you designate a password, the messages that are not
accepted by the authentication are discarded. The password name is combined with the HMAC MD5 value
to create security for the connection between the router and the cache engine.
Examples The following example shows how to enable the hardware acceleration for WCCP version 1:
length
To set the terminal screen length, use the length command in line configuration mode. To restore the
default value, use the no form of this command.
length screen-length
no length
Syntax Description screen-length The number of lines on the screen. A value of zero
disables pausing between screens of output.
Usage Guidelines The Cisco IOS software uses the value of this command to determine when to pause during multiple-screen
output. Not all commands recognize the configured screen length. For example, the show terminal
command assumes a screen length of 24 lines or more.
Examples In the following example, the terminal type is specified and the screen pause function is disabled for the
terminal connection on line 6:
Router(config)# line 6
Router(config-line)# terminal-type VT220
Router(config-line)# length 0
load-interval
To change the length of time for which data is used to compute load statistics, use the load-interval
command in interface configuration mode or Frame Relay DLCI configuration mode. To revert to the
default setting, use the noform of this command.
load-interval seconds
no load-interval seconds
Syntax Description seconds Length of time for which data is used to compute
load statistics. Value is a multiple of 30, from 30 to
600 (30, 60, 90, 120, and so on). The default is 300
seconds.
Usage Guidelines To make computations more reactive to short bursts of traffic, you can shorten the length of time over
which load averages are computed.
If the load interval is set to 30 seconds, new data is used for load calculations over a 30-second period. This
data is used to compute load statistics, including the input rate in bits and packets per second, the output
rate in bits and packets per second, the load, and reliability.
Load data is gathered every five seconds. This data is used for a weighted-average calculation in which
recent load data has more weight in the computation than older load data. If the load interval is set to 30
seconds, the average is computed for the last 30 seconds of load data.
If you change the calculation interval from the default of five minutes to a shorter period of time, the input
and output statistics that are displayed by the show interface command or the show frame-relay pvc
command will be more current and will be based on more nearly instantaneous data, rather than reflecting
the average load over a longer period of time.
This command is often used for dial backup purposes to increase or decrease the likelihood of
implementation of a backup interface, but it can be used on any interface.
Examples
Interface Example
In the following example, the default average of five minutes is changed to a 30-second average. A burst in
traffic that would not trigger a dial backup for an interface configured with the default five-minute interval
might trigger a dial backup for this interface, which is set for the shorter 30-second interval.
location
To provide a description of the location of a serial device, use the location command in line configuration
mode. To remove the description, use the no form of this command.
location text
no location
Usage Guidelines The location command enters information about the device location and status. Use the show users all
EXEC command to display the location information.
Examples In the following example, the location description for the console line is given as “Building 3, Basement”:
lock
To configure a temporary password on a line, use the lockcommand in EXEC mode.
lock
Usage Guidelines You can prevent access to your session while keeping your connection open by setting up a temporary
password. To lock access to the terminal, perform the following steps:
1 Enter the lock command. The system prompts you for a password.
2 Enter a password, which can be any arbitrary string. The system will prompt you to confirm the
password. The screen then clears and displays the message “Locked.”
3 To regain access to your sessions, reenter the password.
The Cisco IOS software honors session timeouts on a locked lines. You must clear the line to remove this
feature. The system administrator must set the line up to allow use of the temporary locking feature by
using the lockable line configuration command.
Examples The following example shows configuring the router as lockable, saving the configuration, and then
locking the current session for the user:
Router(config-line)# lockable
Router(config-line)# ^Z
Router# copy system:running-config nvram:startup-config
Building configuration...
OK
Router# lock
Password: <password>
Again: <password>
Locked
Password: <password>
Router#
lockable
To enable use of the lock EXEC command, use the lockablecommand in line configuration mode. To
reinstate the default (the terminal session cannot be locked), use the noform of this command.
lockable
no lockable
Command Default Sessions on the line are not lockable (the lock EXEC command has no effect).
Usage Guidelines This command enables use of temporary terminal locking, which is executed using the lock EXEC
command. Terminal locking allows a user keep the current session open while preventing access by other
users.
Examples In the following example, the terminal connection is configured as lockable, then the current connection is
locked:
Password: <password>
Router#
log config
To enter configuration change logger configuration mode, use the log configcommand in archive
configuration mode.
log config
Examples The following example shows how to place the router in configuration change logger configuration mode:
show archive log config Displays entries from the configuration log.
logging buginf
To allow debug messages to be generated for the standard system logging buffer, use the logging
buginfcommand in global configuration mode. To disable the logging for debugging functionality, use the
no form of this command.
logging buginf
no logging buginf
Cisco IOS XE Release 2.1 This command was integrated into Cisco IOS XE
Release 2.1.
Usage Guidelines The no logging buginfcommand is used to avoid a situation where a large amount of debug messages
might overload the processor (CPU hog condition). This condition differs from the use of the undebug
allcommand wherein all debugging calls are disabled in the Cisco IOS software. No debug reporting is
available, even if debugging is enabled. Note that even though debugging has been completely disabled in
the system, other message reporting, including error reporting, is still available.
Examples The following example shows how to enable buginf logging for debugging:
logging enable
To enable the logging of configuration changes, use the logging enablecommand in configuration change
logger configuration mode. To disable the logging of configuration changes, use the no form of this
command.
logging enable
no logging enable
Usage Guidelines Use this command if you want to log configuration changes. If you disable configuration logging, all
configuration log records that were collected are purged.
The following example shows how to clear the configuration log by disabling and then reenabling the
configuration log:
show archive log config Displays entries from the configuration log.
Cisco IOS XE Release 2.1 This command was integrated into Cisco IOS XE
Release 2.1.
Usage Guidelines You can use the no logging esm config command to disallow configuration changes from ESM filters.
Examples The following example shows how to configure the ESM filters:
Usage Guidelines The logging event bundle-status command is not applicable on Port Channel or Ether-Channel interfaces.
Examples This example shows how to enable the system logging of the interface state-change events on all interfaces
in the system:
channel Port-channel2
*Aug 4 17:36:48.256 UTC: %LINK-SP-5-CHANGED: Interface FastEthernet9/23, changed state to
administratively down
*Aug 4 17:36:47.865 UTC: %EC-SPSTBY-5-UNBUNDLE: Interface FastEthernet9/23 left the port-
channel Port-channel2
Router # show logging event bundle-status
*Aug 4 17:37:35.845 UTC: %EC-SP-5-BUNDLE: Interface FastEthernet9/23 joined port-channel
Port-channel2
*Aug 4 17:37:35.533 UTC: %EC-SPSTBY-5-BUNDLE: Interface FastEthernet9/23 joined port-
channel Port-channel2
Usage Guidelines You do not have to enter the logging event link-status boot command to enable link-status messaging
during system initialization. The logging event link-status default command logs system messages even
during system initialization.
If you enter both the logging event link-status default and the no logging event link-status
bootcommands, the interface state-change events are logged after all modules in the Cisco 7600 series
router come online after system initialization. The logging event link-status default and the no logging
event link-status boot commands are saved and retained in the running configuration of the system.
When both the logging event link-status default and the no logging event link-status bootcommands are
present in the running configuration and you want to display the interface state-change messages during
system initialization, enter the logging event link-status boot command.
Examples This example shows how to enable the system logging of the interface state-change events on all interfaces
in the system:
This example shows how to enable the system logging of interface state-change events on all interfaces
during system initialization:
This example shows how to disable the system logging of interface state-change events on all interfaces:
This example shows how to disable the system logging of interface state-change events during system
initialization:
Usage Guidelines To enable system logging of interface state-change events on a specific interface, enter the logging event
link-status command.
Examples The following example shows how to enable link-status event messaging on an interface:
Usage Guidelines This command is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine
720.
To enable system logging of interface state-change events on a specific subinterface, enter the logging
event subif-link-status command.
To enable system logging of interface state-change events on a specific interface, enter the logging event
link-status command.
To enable system logging of interface state-change events on all interfaces in the system, enter the logging
event link-status command.
Examples This example shows how to enable the system logging of the interface state-change events on a
subinterface:
This example shows how to disable the system logging of the interface state-change events on a
subinterface:
Usage Guidelines The logging event bundle-status command is not applicable on Port Channel or Ether-Channel interfaces.
Examples This example shows how to enable the trunk status messaging on physical ports:
logging reload
To set the reload logging level, use the logging reloadcommand in global configuration mode. To disable
the reload logging, use the no form of this command.
Syntax Description message-limit (Optional) Sets the limit on the number of messages
that can be logged during reload.
Cisco IOS XE Releas e2.1 This command was integrated into Cisco IOS XE
Release 2.1.
Usage Guidelines The default setting is recommended. Setting the message-limit too low may result in losing important
messages during reload. If the logging reload command is not enabled, logging is turned off during reload.
Examples The following example shows how to set the limit on number of messages that can be logged during reload
to 100:
Syntax Description entries entries Specifies the maximum number of log entries that
are cached in the software; valid values are from 0
to 1048576 entries.
rate-limit pps Specifies the number of packets that are logged per
second in the software; valid values are from 10 to
1000000 pps.
Usage Guidelines This command is supported on Cisco 7600 series routers that are configured with a Supervisor Engine 720
only.
OAL is supported on IPv4 unicast traffic only.
You cannot configure OAL and VACL capture on the same chassis. OAL and VACL capture are
incompatible. With OAL configured, use SPAN to capture traffic.
If the entry is inactive for the duration that is specified in the update-interval seconds command, th e entry
is removed from the cache.
If you enter the no logging ip access-list cache command without keywords, all the parameters are
returned to the default values.
You must set ICMP unreachable rate limiting to 0 if the OAL is configured to log denied packets.
When enabling the IP "too short" check using the mls verify ip length minimum command, valid IP packets
with with an IP protocol field of ICMP(1), IGMP(2), IP(4), TCP(6), UDP(17), IPv6(41), GRE(47), or
SIPP-ESP(50) will be hardware switched. All other IP protocol fields are software switched.
Caution Using optimized access-list logging (OAL) and the mls verify ip length minimum command together can
cause routing protocol neighbor flapping as they are incompatible
Examples This example shows how to specify the maximum number of log entries that are cached in the software:
Router(config)#
logging ip access-list cache entries 200
This example shows how to specify the maximum time interval before an entry is sent to the system log:
Router(config)#
logging ip access-list cache interval 350
This example shows how to specify the number of packets that are logged per second in the software:
Router(config)#
logging ip access-list cache rate-limit 100
This example shows how to specify the number of packet matches before an entry is sent to the system log:
Router(config)#
logging ip access-list cache threshold 125
Command Description
show logging ip access-list Displays information about the logging IP access
list.
update-interval seconds Removes entries from the cache that are inactive for
the duration that is specified in the command.
Usage Guidelines This command is supported on Cisco 7600 series routers that are configured with a Supervisor Engine 720
only.
This command is supported on traffic that matches the log keyword in the applied ACL. You must set
ICMP unreachable rate limiting to 0 if the OAL is configured to log denied packets.
On systems that are configured with a PFC3A, support for the egress direction on tunnel interfaces is not
supported.
OAL is supported on IPv4 unicast traffic only.
You cannot configure OAL and VACL capture on the same chassis. OAL and VACL capture are
incompatible. With OAL configured, use SPAN to capture traffic.
If the entry is inactive for the duration that is specified in the update-interval seconds command, th e entry
is removed from the cache.
If you enter the no logging ip access-list cache command without keywords, all the parameters are
returned to the default values.
When enabling the IP "too short" check using the mls verify ip length minimum command, valid IP packets
with with an IP protocol field of ICMP(1), IGMP(2), IP(4), TCP(6), UDP(17), IPv6(41), GRE(47), or
SIPP-ESP(50) will be hardware switched. All other IP protocol fields are software switched.
Caution Using optimized access-list logging (OAL) and the mls verify ip length minimum command together can
cause routing protocol neighbor flapping as they are incompatible
Router(config-if)#
logging ip access-list cache in
Router(config-if)#
logging ip access-list cache out
update-interval seconds Removes entries from the cache that are inactive for
the duration that is specified in the command.
Command Default The configuration commands are not saved to the Cisco IOS secure file system.
Command Modes Archive configuration mode, log config (configuration-change logger) submode (config-archive-log-cfg)#
Usage Guidelines When you use the manualkeyword, you must save each configuration command manually to the Cisco IOS
secure file system. To do this, you must use the archive log config persistent save command.
Examples The following example automatically saves the configuration commands to the Cisco IOS secure file
system:
Router(config)# archive
Router(config-archive)# log config
Router(config-archive-log-cfg)# logging enable
Router(config-archive-log-cfg)# logging persistent auto
archive log config persistent save Saves the persisted commands in the configuration
log to the Cisco IOS secure file system.
Command Default The configuration commands saved in the configuration logger database are not applied to the running-
config file.
Command Modes Archive config mode; log config (configuration change logger) submode (config-archive-log-cfg)#
Usage Guidelines Use the logging persistent reload command when you want changed configuration commands to take
effect on the next reload of the router.
Examples The following example applies the configuration commands in the configuration logger database to the
running-config file after the next reload:
logging size
To specify the maximum number of entries retained in the configuration log, use the logging sizecommand
in configuration change logger configuration mode. To reset the default value, use the no form of this
command.
Usage Guidelines When the configuration log is full, the oldest log entry will be removed every time a new entry is added.
Note If a new log size is specified that is smaller than the current log size, the oldest entries will be immediately
purged until the new log size is satisfied, regardless of the age of the log entries.
Examples The following example shows how to specify that the configuration log may have a maximum of 200
entries:
The following example shows how to clear the configuration log by reducing the log size to 1, then
resetting the log size to the desired value. Only the most recent configuration log file will be saved.
Router(config)# archive
Router(config-archive)# log config
Router(config-archive-log-config)# logging size 1
Router(config-archive-log-config)# logging size 200
show archive log config Displays entries from the configuration log.
logging synchronous
To synchronize unsolicited messages and debug output with solicited Cisco IOS software output and
prompts for a specific console port line, auxiliary port line, or vty, use the logging synchronous command
in line configuration mode. To disable synchronization of unsolicited messages and debug output, use the
no form of this command.
logging synchronous [level severity-level | all] [limit number-of-lines]
no logging synchronous [level severity-level | all] [limit number-of-lines]
Syntax Description level severity-level (Optional) Specifies the message severity level.
Messages with a severity level equal to or higher
than this value are printed asynchronously. Low
numbers indicate greater severity and high numbers
indicate lesser severity. The default value is 2.
Usage Guidelines When synchronous logging of unsolicited messages and debug output is turned on, unsolicited Cisco IOS
software output is displayed on the console or printed after solicited Cisco IOS software output is displayed
or printed. This keeps unsolicited messages and debug output from being interspersed with solicited
software output and prompts.
Tip This command is useful for keeping system messages from interrupting your typing. By default, messages
will appear immediately when they are processed by the system, and the CLI cursor will appear at the end
of the displayed message. For example, the line “Configured by console from console” may be printed to
the screen, interrupting whatever command you are currently typing. The logging synchronous command
allows you to avoid these potentially annoying interruptions without have to turn off logging to the console
entirely.
When this command is enabled, unsolicited messages and debug output are displayed on a separate line
than user input. After the unsolicited messages are displayed, the CLI returns to the user prompt.
Note This command is also useful for allowing you to continue typing when debugging is enabled.
When specifying a severity level number, consider that for the logging system, low numbers indicate
greater severity and high numbers indicate lesser severity.
When a message queue limit of a terminal line is reached, new messages are dropped from the line,
although these messages might be displayed on other lines. If messages are dropped, the notice “ %SYS-3-
MSGLOST number-of-messages due to overflow” follows any messages that are displayed. This notice is
displayed only on the terminal that lost the messages. It is not sent to any other lines, any logging servers,
or the logging buffer.
Caution By configuring abnormally large message queue limits and setting the terminal to “terminal monitor” on a
terminal that is accessible to intruders, you expose yourself to “denial of service” attacks. An intruder could
carry out the attack by putting the terminal in synchronous output mode, making a Telnet connection to a
remote host, and leaving the connection idle. This could cause large numbers of messages to be generated
and queued, and these messages could consume all available RAM. You should guard against this type of
attack through proper configuration.
Examples In the following example, a system message appears in the middle of typing the show running-config
command:
Router(config-line)# end
Router# show ru
2w1d: %SYS-5-CONFIG_I: Configured from console by consolenning-config
.
.
.
The user then enables synchronous logging for the current line (indicated by the * symbol in the show line
command), after which the system displays the system message on a separate line, and returns the user to
the prompt to allow the user to finish typing the command on a single line:
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
* 0 CTY - - - - - 0 3 0/0 -
.
.
.
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# line 0
Router(config-line)# logging syn
<tab>
Router(config-line)# logging synchronous
Router(config-line)# end
Router# show ru
In the following example, synchronous logging for line 4 is enabled with a severity level of 6. Then
synchronous logging for line 2 is enabled with a severity level of 7 and is specified with a maximum
number of buffer lines of 1,000.
Router(config)# line 4
Router(config-line)# logging synchronous level 6
Router(config-line)# exit
Router(config)# line 2
Router(config-line)# logging synchronous level 7 limit 1000
Router(config-line)# end
Router#
logging system
To enable System Event Archive (SEA) logging, use the logging systemcommand in global configuration
mode. To disable SEA logging, use the no form of this command.
Syntax Description disk name (Optional) Stores the system event archive (system
event log file) in the specified disk. The specified
disk must be already have been configured to allow
for the storage of the system event archive.
Command Default By default, SEA logging feature is enabled, and the events are logged to a file on a persistent storage device
(bootflash: or disk:).
Usage Guidelines SEA is supported on switches that have a Supervisor Engine 32 or Supervisor Engine 720 with a compact
flash adapter and a Compact Flash card (WS-CF-UPG= for Supervisor Engine 720).
To stop SEA logging to a specified disk, use the default logging system command.
For documentation of the configuration tasks associated with this feature, see the chapter “Configuring the
System Event Archive” in the Catalyst 6500 Release 12.2SX Software Configuration Guide .
Cisco Universal Broadband Router 100112
The SEA feature is used to address the deficiencies of the debug trace and system console. Support for SEA
feature was introduced on Cisco uBR10012 Router in the Cisco IOS Release 12.2(33)SCC. Use the logging
system disk command to change the location of the disk used to store the sea_log.dat file.
Note To store the system event logs, the SEA requires either PCMCIA ATA disk or Compact Flash disk in
compact flash adapter for PRE2.
Examples The following example shows how to specify that the SEA log file should be written to the disk “disk1:”:
Router(config)# end
Related Commands clear logging system Clears the event records stored in the SEA.
copy logging system Copies the archived system event log to another
location.
logout
To close an active terminal session by logging off the router, use the logout command in user EXEC mode.
logout
Examples In the following example, the exit (global) command is used to move from global configuration mode to
privileged EXEC mode, the disable command is used to move from privileged EXEC mode to user EXEC
mode, and the logout command is used to log off (exit from the active session):
Router(config)# exit
Router# disable
Router> logout
logout-warning
To warn users of an impending forced timeout, use the logout-warningcommand in line configuration
mode. To restore the default, use the no form of this command.
logout-warning [seconds]
logout-warning
Usage Guidelines This command notifies the user of an impending forced timeout (set using the absolute-timeout
command).
Examples In the following example, a logout warning is configured on line 5 with a countdown value of 30 seconds:
Router(config)# line 5
Router(config-line)# logout-warning 30
Command Description
session-timeout Sets the interval for closing the connection when
there is no input or output traffic.
Usage Guidelines You can enter up to three keyword pairs using the macro global trace command.
You can enter the macro global descriptioncommand on the switch stack or on a standalone switch.
Use the description textkeyword and argument to associate the comment text, or the macro name with a
switch. When multiple macros are applied on a switch, the description text is used from the last applied
macro. You can verify the global description settings by using the show parser macro description
command.
To find the syntax or configuration errors, enter the macro global trace macro-name command to apply
and debug the macro.
To display a list of any keyword-value pairs defined in the macro, enter the macro global apply macro-
name ? command.
You can delete a global macro-applied configuration on a switch only by entering the no version of each
command that is in the macro.
Keyword matching is case sensitive.
When a macro is applied on the commands, all matching occurrences of keywords are replaced with the
corresponding values.
The no form of the macro name command deletes only the macro definition. It does not affect the
configuration of the interfaces on which the macro is already applied.
Examples The following example shows how to apply the macro called snmp to set the hostname address to “test-
server” and to set the IP precedence value to 7:
The following example shows how to debug the macro called snmp by using the macro global trace
command to find the syntax or configuration errors in the macro when it is applied to a switch:
Usage Guidelines You can enter up to three keyword changes using the macro trace command.
You can enter the macro description command on the switch stack or on a standalone switch.
Use the description text keyword and argument to associate comment text, or the macro name, with a
switch. When multiple macros are applied on a switch, the description text will be from the last applied
macro. You can verify the description settings by entering the show parser macro description command.
To find any syntax or configuration errors, enter the macro trace macro-name command to apply and
debug the macro.
To display a list of any keyword-value pairs defined in the macro, enter the macro apply macro-name ?
command.
To successfully apply the macro, you must enter any required keyword-value pairs.
Keyword matching is case sensitive.
In the commands that the macro applies, all matching occurrences of keywords are replaced with the
corresponding values.
You can delete all configuration on an interface by entering the default interface interfaceinterface
configuration command.
Examples The following example shows how to apply the user-created macro called desktop-config and to verify the
configuration:
The following example shows how to apply the user-created macro called desktop-config and to replace all
occurrences of vlan with VLAN ID 25:
maximum
To set the maximum number of archive files of the running configuration to be saved in the Cisco IOS
configuration archive, use the maximum command in archive configuration mode. To reset this command
to its default, use the no form of this command.
maximum number
no maximum number
Command Default By default, a maximum of 10 archive files of the running configuration are saved in the Cisco IOS
configuration archive.
Usage Guidelines
Note Before using this command, you must configure the path command to specify the location and filename
prefix for the files in the Cisco IOS configuration archive.
After the maximum number of files are saved in the Cisco IOS configuration archive, the oldest file is
automatically deleted when the next, most recent file is saved.
Note This command should only be used when a local writable file system is specified in the url argument of the
path command. Network file systems may not support deletion of previously saved files.
Examples In the following example, a value of 5 is set as the maximum number of archive files of the running
configuration to be saved in the Cisco IOS configuration archive:
configure terminal
!
archive
path disk0:myconfig
maximum 5
end
Command Default Memory cache error recovery mechanisms are not enabled.
Examples The following example shows how to enable the memory cache error-recovery command:
Router> enable
Router# configure terminal
Router(config)# memory cache error-recovery
Syntax Description abort-if-same-content Abort recovery if the cache contains the same
content as the memory.
Command Default Memory cache error recovery mechanisms are not enabled.
Examples The following example shows how to enable the memory cache error-recovery optionscommand:
Router> enable
Syntax Description processor threshold Sets the processor memory threshold in kilobytes.
When available processor memory falls below this
threshold, a notification message is triggered. Valid
values are 1 to 4294967295.
Usage Guidelines Using this command, you can configure a router to issue a system logging message each time available free
memory falls below a specified threshold (“low-watermark”). Once available free memory rises to 5
percent above the threshold, another notification message is generated.
Examples The following example specifies a free processor memory notification threshold of 20000 KB:
If available free processor memory falls below this threshold, the router sends a notification message like
this one:
000029: *Aug 12 22:31:19.559: %SYS-4-FREEMEMLOW: Free Memory has dropped below 20000k
Pool: Processor Free: 66814056 freemem_lwm: 204800000
Once available free processor memory rises to a point 5 percent above the threshold, another notification
message like this is sent:
memory lite
To enable the memory allocation lite (malloc_lite) feature, use the memory lite command in global
configuration mode. To disable this feature, use the no form of this command.
memory lite
no memory lite
Usage Guidelines The malloc_lite feature was implemented to avoid excessive memory allocation overhead for situations
where less than 128 bytes were required. This feature is supported for processor memory pools only.
The malloc_lite feature is enabled by default. If the malloc_lite feature is disabled using the no memory
litecommand, you can re-enable the feature by entering the memory lite command.
Examples The following example shows how to disable the malloc_lite feature:
no memory lite
memory reserve
To reserve a specified amount of memory in kilobytes for console access and critical notifications, use the
memory reserve command in global configuration mode. To disable the configuration, use the no form of
this command.
Syntax for Releases 12.2(33)SXI, Cisco IOS XE Release 2.1 and Later Releases
memory reserve critical [total-size]
no memory reserve critical
Syntax Description console Reserves the memory size for a console session.
Command Default 256 KB is reserved for console memory access. 100 KB is reserved for cricial memory access.
Release Modification
Cisco IOS XE Release 2.1 This command was implemented on the Cisco ASR
1000 Series Aggregation Services Routers.
Usage Guidelines The memory reserve console command reserves enough memory to ensure console access to a Cisco IOS
device for administrative and troubleshooting purposes. This feature is especially beneficial when the
device runs low on memory.
The memory reserve critical command reserves the specified amount of memory in kilobytes so that the
router can issue critical notifications. The amount of memory reserved for critical notifications cannot
exceed 25 percent of the total available memory.
Examples The following example shows how to reserve a specified amount of memory in kilobytes for console
access:
To configure the size of the memory region to be used for critical notifications (system logging messages),
use the memory reserve criticalcommand in global configuration mode. To disable the reservation of
memory for critical notifications, use the no form of this command.
memory reserve critical kilobytes
no memory reserve critical
Command Default 100 kilobytes of memory is reserved for the logging process.
Usage Guidelines This command reserves a region of memory on the router so that, when system resources are overloaded,
the router retains enough memory to issue critical system logging messages.
Note Once the size of the reserved memory region is specified, any change to the specified value takes effect
only after the current configuration is saved and the system has been reloaded.
Examples The following example shows how to reserve 1,000 KB of system memory for logging messages at the
next system restart:
memory sanity
To perform a “sanity check” for corruption in buffers and queues, use the memory sanity command in
global configuration mode. To disable this feature, use the no form of this command.
memory sanity [buffer | queue | all]
no memory sanity
Command Default This command is not enabled by default. If the buffer or queue keyword is not specified, a sanity check
will be performed on all buffers and queues.
Usage Guidelines When the memory sanity buffer command is enabled, a sanity check is performed on buffers when a
packet buffer is allocated or when a packet buffer is returned to the buffer pool. This command also time-
stamps the buffer, which may be useful when tracking the age of a buffer.
The memory sanity command can be saved in the startup configuration file and, therefore, it is not
necessary to reconfigure this command each time the router is reloaded. Like the scheduler heapcheck
process memory command, the memory sanity command can check for corruption in the I/O memory
block.
Enabling the memory sanity command may result in slight router performance degradation.
Examples The following example shows how to perform a sanity check for corruption in all buffers and queues:
memory sanity all
memory scan
To enable the Memory Scan feature, use the memory scan command in global configuration mode. To
restore the router configuration to the default, use the no form of this command.
memory scan
no memory scan
Usage Guidelines The Memory Scan feature adds a low-priority background process that searches all installed dynamic
random-access memory (DRAM) for possible parity errors. If errors are found in memory areas that are not
in use, this feature attempts to scrub (remove) the errors. The time to complete one memory scan and scrub
cycle can range from 10 minutes to several hours, depending on the amount of installed memory. The
impact of the Memory Scan feature on the central processing unit (CPU) is minimal. To view the status of
the memory scan feature on your router, use the show memory scan command in EXEC mode.
Examples The following example enables the Memory Scan feature on a Cisco 7500 series router:
memory-size iomem
To reallocate the percentage of DRAM to use for I/O memory and processor memory, use the memory-size
iomem command in global configuration mode. To revert to the default memory allocation, use the no
form of this command.
Command Default The default memory allocation is 25 percent of the DRAM to I/O memory and 75 percent of the DRAM to
processor memory.
Note If thesmartinitprocess has been enabled, the default memory allocation of 25 percent to the I/O memory
does not apply. Instead, smartinitexamines the network modules, and then calculates the memory
allocation for the I/O memory.
Usage Guidelines When you specify the percentage of I/O memory in the command line, the processor memory automatically
acquires the remaining percentage of the DRAM memory.
Examples The following example allocates 40 percent of the DRAM memory to I/O memory and the remaining 60
percent to the processor memory:
Router#
configure terminal
Router(config)#
memory-size iomem 40
Smart-init will be disabled and new I/O memory size will take effect upon reload.
menu (EXEC)
To display a preconfigured user menu, use the menu command in user EXEC or privileged EXEC mode.
menu menu-name
Usage Guidelines A user menu is a type of user interface where text descriptions of actions to be performed are displayed to
the user. The user can use the menu to select services and functions without having to know the details of
command-line interface (CLI) commands.
Menus can be created for users in global configuration mode, using the commands listed in the “Related
Commands” section.
A menu can be invoked at either the user or privileged EXEC level, but if an item in the menu contains a
privileged EXEC command, the user must be logged in at the privileged level for the command to succeed.
Syntax Description menu-name Name of the menu this command should be applied
to.
Command Default Enabled for menus with more than nine items; disabled for menus with nine or fewer items.
Usage Guidelines When more than nine menu items are defined, the menu is displayed single-spaced. To configure the menus
with nine or fewer items to display single-spaced, use this command.
Examples In the following example, single-spaced menu items are displayed for the menu named Access1:
Command Description
menu default Specifies the menu item to use as the default.
menu clear-screen
To clear the terminal screen before displaying a menu, use the menu clear-screen command in global
configuration mode.
Syntax Description menu-name Name of the menu this command should be applied
to.
Usage Guidelines This command uses a terminal-independent mechanism based on termcap entries defined in the router and
the configured terminal type for the user. This command allows the same menu to be used on multiple
types of terminals instead of having terminal-specific strings embedded within menu titles. If the termcap
entry does not contain a clear string, the menu system enters 24 new lines, causing all existing text to scroll
off the top of the terminal screen.
Examples In the following example, the terminal screen is cleared before displaying the menu named Access1:
Command Description
menu default Specifies the menu item to use as the default.
menu command
To specify underlying commands for user menus, use the menu command command in global
configuration mode.
Syntax Description menu-name Name of the menu. You can specify a maximum of
20 characters.
Usage Guidelines Use this command to assign actions to items in a menu. Use the menu text global configuration command
to assign text to items. These commands must use the same menu name and menu selection key.
The menu command command has a special keyword for the command argument, menu-exit, that is
available only within menus. It is used to exit a submenu and return to the previous menu level, or to exit
the menu altogether and return to the EXEC command prompt.
You can create submenus that are opened by selecting entries in another menu. Use the menu EXEC
command as the command for the submenu item.
Note If you nest too many levels of menus, the system prints an error message on the terminal and returns to the
previous menu level.
When a menu allows connections (their normal use), the command for an entry activating the connection
should contain a resume command, or the line should be configured to prevent users from escaping their
sessions with the escape-char none command. Otherwise, when they escape from a connection and return
to the menu, there will be no way to resume the session and it will sit idle until the user logs out.
Specifying the resume command as the action that is performed for a selected menu entry permits a user to
resume a named connection or connect using the specified name, if there is no active connection by that
name. As an option, you can also supply the connect string needed to connect initially. When you do not
supply this connect string, the command uses the specified connection name.
You can also use the resume/next command, which resumes the next connection in the user’s list of
connections. This function allows you to create a single menu entry that steps through all of the user’s
connections.
Note A menu should not contain any exit paths that leave users in an unfamiliar interface environment.
When a particular line should always display a menu, that line can be configured with an autocommand
line configuration command. Menus can be run on a per-user basis by defining a similar
autocommandcommand for that local username. For more information about the autocommand
command, refer to the Cisco IOS Dial Technologies Configuration Guide.
Examples In the following example, the commands to be issued when the menu user selects option 1, 2, or 3 are
specified for the menu named Access1:
The following example allows a menu user to exit a menu by entering Exit at the menu prompt:
Command Description
menu default Specifies the menu item to use as the default.
menu default
To specify the menu item to use as the default, use the menu default command in global configuration
mode.
Syntax Description menu-name Name of the menu. You can specify a maximum of
20 characters.
Usage Guidelines Use this command to specify which menu entry is used when the user presses Enter without specifying an
item. The menu entries are defined by the menu command and menu text global configuration commands.
Examples In the following example, the menu user exits the menu when pressing Enter without selecting an item:
menu line-mode
To require the user to press Enter after specifying an item, use the menu line-mode command in global
configuration mode.
Syntax Description menu-name Name of the menu this command should be applied
to.
Command Default Enabled for menus with more than nine items. Disabled for menus with nine or fewer items.
Usage Guidelines In a menu of nine or fewer items, you ordinarily select a menu item by entering the item number. In line
mode, you select a menu entry by entering the item number and pressing Enter. Line mode allows you to
backspace over the selected number and enter another number before pressing Enter to issue the command.
This option is activated automatically when more than nine menu items are defined but also can be
configured explicitly for menus of nine or fewer items.
In order to use strings as keys for items, the menu line-mode command must be configured.
Examples In the following example, the line-mode option is enabled for the menu named Access1:
menu options
To set options for items in user menus, use the menu options command in global configuration mode.
Syntax Description menu-name The name of the menu. You can specify a
maximum of 20 characters.
Cisco IOS XE Release 3.1S This command was integrated into a release earlier
than Cisco IOS Release 3.1S.
Usage Guidelines Use the menu command and menu text commands to define a menu entry.
Examples The following example shows how to configure the router to request a login before issuing the command
specified by menu entry 3 of the menu named Access1:
Router(config)#
menu Access1 options 3 login
menu prompt
To specify the prompt for a user menu, use the menu prompt command in global configuration mode.
Syntax Description menu-name Name of the menu. You can specify a maximum of
20 characters.
Usage Guidelines Press Enter after entering the first delimiter. The router will prompt you for the text of the prompt. Enter the
text followed by the delimiter, and press Enter.
Use the menu command and menu text commands to define the menu selections.
Examples In the following example, the prompt for the menu named Access1 is configured as “Select an item.”:
menu status-line
To display a line of status information about the current user at the top of a menu, use the menu status-line
command in global configuration mode.
Syntax Description menu-name Name of the menu this command should be applied
to.
Usage Guidelines This command displays the status information at the top of the screen before the menu title is displayed.
This status line includes the router’s host name, the user’s line number, and the current terminal type and
keymap type (if any).
Examples In the following example, status information is enabled for the menu named Access1:
Command Description
menu command Specifies underlying commands for user menus.
menu text
To specify th e text of a menu item in a user menu, use the menu text command in global configuration
mode.
Syntax Description menu-name Name of the menu. You can specify a maximum of
20 characters.
Usage Guidelines Use this command to assign text to items in a menu. Use the menu command command to assign actions
to items. These commands must use the same menu name and menu selection key.
You can specify a maximum of 18 items in a menu.
Examples In the following example, the descriptive text for the three entries is specified for options 1, 2, and 3 in the
menu named Access1:
menu title
To create a t itle (banner) for a user menu, use the menu title command in global configuration mode.
Syntax Description menu-name Name of the menu. You can specify a maximum of
20 characters.
Usage Guidelines The menu title command must use the same menu name used with the menu text and menu command
commands used to create a menu.
You can position the title of the menu horizontally by preceding the title text with blank characters. You
can also add lines of space above and below the title by pressing Enter.
Follow the title keyword with one or more blank characters and a delimiting character of your choice. Then
enter one or more lines of text, ending the title with the same delimiting character. You cannot use the
delimiting character within the text of the message.
When you are configuring from a terminal and are attempting to include special control characters, such as
a screen-clearing string, you must use Ctrl-V before the special control characters so that they are accepted
as part of the title string. The string ^[[H^[[J is an escape string used by many VT100-compatible terminals
to clear the screen. To use a special string, you must enter Ctrl-V before each escape character.
You also can use the menu clear-screen global configuration command to clear the screen before
displaying menus and submenus, instead of embedding a terminal-specific string in the menu title. The
menu clear-screen command allows the same menu to be used on different types of terminals.
Examples In the following example, the title that will be displayed is specified when the menu named Access1 is
invoked. Press Enter after the second slash (/) to display the prompt.
microcode (12000)
To load a Cisco IOS software image on a line card from Flash memory or the GRP card on a Cisco 12000
series Gigabit Switch Router (GSR), use the microcode command in global configuration mode. To load
the microcode bundled with the GRP system image, use the no form of this command.
Command Default The default is to load the image from the GRP card (system).
Release Modification
12.2(33)SRA This command was integrated into Cisco IOS
Release 12.2(33)SRA.
Usage Guidelines In addition to the Cisco IOS image that resides on the GRP card, each line card on a Cisco 12000 series has
a Cisco IOS image. When the router is reloaded, the specified image is loaded onto the GRP card and then
automatically downloaded to all the line cards.
Normally, you want the same Cisco IOS image on the GRP card and all line cards. However, if you want to
upgrade a line card with a new version of microcode for testing or to fix a defect, you might need to load a
Cisco IOS image that is different from the one on the line card. Additionally, you might need to load a new
image on the line card to work around a problem that is affecting only one of the line cards.
To load a Cisco IOS image on a line card, first use the copy tftp command to download the Cisco IOS
image to a slot on one of the PCMCIA Flash memory cards. Then use the microcode command to
download the image to the line card, followed by the microcode reload command to start the image.
Immediately after you enter the microcode reload command and press Return, the system reloads all
microcode. Global configuration mode remains enabled. After the reloading is complete, enter the exit
command to return to the EXEC system prompt.
To verify that the correct image is running on the line card, use the execute-on slot slot show version
command.
For additional information on GSR configuration, refer to the documentation specific to your Cisco IOS
software release.
Examples In the following example, the Cisco IOS software image in slot 0 is downloaded to the line card in slot 10.
This software image is used when the system is booted, a line card is inserted or removed, or the
microcode reloadglobal configuration command is issued.
In this example, the user would issue the execute-on slot 10 show version command to verify that the
correct version is loaded.
microcode (7000/7500)
To specify the location of the microcode that you want to download from Flash memory into the writable
control store (WCS) on Cisco 7000 series (including RSP based routers) or Cisco 7500 series routers, use
the microcode command in global configuration mode. To load the microcode bundled with the system
image, use the no form of this command.
Command Default The default is to load from the microcode bundled in the system image.
Release Modification
12.2(33)SRA This command was integrated into Cisco IOS
Release 12.2(33)SRA.
Usage Guidelines If you do not use the microcode reload command after using the microcode command, the microcode
reload command will be written to the configuration file automatically.
When using Dual RSPs for simple hardware backup, ensure that the master and slave RSP card contain the
same microcode image in the same location when the router is to load the interface processor microcode
from a Flash file system. Thus, if the slave RSP becomes the master, it will be able to find the microcode
image and download it to the interface processor.
Examples In the following example, all FIP cards will be loaded with the microcode found in Flash memoryfile
fip.v141-7 when the system is booted, when a card is inserted or removed, or when the microcode
reloadglobal configuration command is issued. The configuration is then written to the startup
configuration file.
Router(config)#
microcode fip slot0:fip.v141-7
Router(config)# end
Router# copy system:running-config nvram:startup-config
microcode (7200)
To configure a default override for the microcode that is downloaded to the hardware on a Cisco 7200
series router, use the microcode command in global configuration mode. To revert to the default microcode
for the current running version of the Cisco IOS software, use the no form of this command.
Command Default If the default or noform of the command is specified, the driver uses the default microcode for the current
running version of the Cisco IOS software.
Usage Guidelines If there are any default overrides when the configuration is written, then the microcode reload command
will be written to the configuration automatically. This action enables the configured microcode to be
downloaded at system startup.
The CPA microcode image is preloaded on Flash memory cards for Cisco 7200-series routers for Cisco
IOS Release 11.3(3)T and later releases. You may be required to copy a new image to Flash memory when
a new microcode image becomes available.
For more information on the CPA configuration and maintenance, refer to the “Configuring Cisco
Mainframe Channel Connection Adapters” chapter in the Release 12.2 Cisco IOS Bridging and IBM
Networking Configuration Guide.
Examples The following example instructs the Cisco IOS software to load the microcode from an individual
microcode image that is stored as a file on the Flash card inserted in Flash card slot 0:
Syntax Description slot-number (Optional) Slot number of the line card that you
want to reload the Cisco IOS software image on.
Slot numbers range from 0 to 11 for the Cisco
12012 and from 0 to 7 for the Cisco 12008 router. If
you do not specify a slot number, the Cisco IOS
software image is reloaded on all line cards.
Usage Guidelines In addition to the Cisco IOS image that resides on the GRP card, each line card on Cisco 12000 series
routers has a Cisco IOS image. When the router is reloaded, the specified Cisco IOS image is loaded onto
the GRP card and automatically downloaded to all the line cards.
Normally, you want the same Cisco IOS image on the GRP card and all line cards. However, if you want to
upgrade a line card with a new version of microcode for testing or to fix a defect, you might need to load a
different Cisco IOS image. Additionally, you might need to load a new image on the line card to work
around a problem affecting only one of the line cards.
To load a Cisco IOS image on a line card, first use the copy tftp command to download the Cisco IOS
image to a slot on one of the PCMCIA Flash memory cards. Then use the microcode command to
download the image to the line card, followed by the microcode reload command to start the image. To
verify that the correct image is running on the line card, use the execute-on slot slot show version
command.
For additional information on GSR configuration, refer to the “Observing System Startup and Performing a
Basic Configuration” chapter in the Cisco 12000 series installation and configuration guides.
The microcode reload (12000) command allows you to issue another command immediately.
Note Issuing a microcode reload command on any of the line cards in a Cisco 12000 GSR immediately returns
the console command prompt. This allows you to issue a subsequent command immediately to the
reloading line card. However, any commands entered at this time will not execute, and often no indication
will be given that such a command failed to run. Verify that the microcode has reloaded before issuing new
commands.
Examples In the following example, the mirocode firmware is reloaded on the line card in slot 10:
Syntax Description slot-number (Optional) Reloads the specified processor card slot
on a Cisco 7500 series router.
Usage Guidelines This command reloads the microcode without rebooting the router. Immediately after you enter the
microcode reload command, the system reloads all microcode. Global configuration mode remains
enabled.
Note If you modify the system configuration to load a microcode image, the microcode reload command will be
written to the configuration file automatically following the use of a microcode command. This action
enables the configured microcode to be downloaded at system startup.
Examples In the following example, all controllers are reset, and the microcode specified in the current configuration
is loaded:
Syntax Description all Resets and reloads all hardware types that support
downloadable microcode.
Usage Guidelines Hardware types that do not support downloadable microcode are unaffected by the microcode reload all
command.
You will be prompted for confirmation before the microcode reloadcommand is executed.
Examples The following example reloads the ESCON CPA microcode in slot 5 with the currently configured
microcode:
mkdir
To create a new directory in a Class C flash file system, use the mkdir command in user EXEC, privileged
EXEC, or diagnostic mode.
mkdir directory
Command Modes User EXEC (>) Privileged EXEC (#) Diagnostic (diag)
Cisco IOS XE Release 2.1 This command was modified and implemented on
the Cisco ASR 1000 Aggregation Services Routers.
The following enhancements were made:
• This command was introduced in diagnostic
mode. The command can be entered in both
privileged EXEC and diagnostic mode on the
Cisco ASR 1000 Series Routers.
• The harddisk:, obfl:, stby-harddisk:, stby-
nvram:, stby-obfl:, stby-usb[0-1]:,and
usb[0-1]: directory options were added.
Usage Guidelines This command is valid only on Class C flash file systems.
When executing the mkdir directory command on a USB token device, you can create only two levels of
subdirectories under a directory. A new directory (third level directory) cannot be created on the USB
token, but you can copy files to the existing subdirectories.
Directory of flash:
2 drwx 0 Mar 13 1993 13:16:21 newdir
8128000 bytes total (8126976 bytes free)
mkdir disk0:
To create a new directory in a Flash file system, use the mkdir disk0:command.
mkdir disk0:
mode
To set the redundancy mode, use the mode command in redundancy configuration mode.
Command Default
• The default is SSO mode if the system is not configured for redundancy and the active and standby
supervisor engines have the same image.
• The default is RPR mode if different versions are installed.
• If redundancy is enabled, the default is the mode that you have configured.
Command Default
• The default is RPR+ mode if the system is not configured for redundancy and the active and standby
supervisor engines have the same image.
• The default is RPR mode if different versions are installed.
• If redundancy is enabled, the default is the mode that you have configured.
Command Default
• The default is SSO mode if the system is not configured for redundancy and the active and standby
supervisor engines have the same image.
• The default is RPR mode if different versions are installed.
Command Default • The default is SSO mode if the system is not configured for redundancy and the active and standby
supervisor engines have the same image.
• The default is RPR mode if different versions are installed.
Cisco IOS XE Release 2.5 This command was modified. This command was
implemented on the Cisco ASR 1000 Series
Routers.
Usage Guidelines Cisco IOS Release 12.2S and 7600 Series Routers
SSO is not supported on Cisco 7600 series routers that are configured with a Supervisor Engine 2.
On releases prior to Release 12.2(17d)SXB, single router mode (SRM) with SSO redundancy does not
support stateful switchover for multicast traffic. When a switchover occurs, all multicast hardware
switching entries are removed and are then re-created and reinstalled in the hardware by the newly active
multilayer switch feature card (MSFC).
SRM/SSO is supported in the following releases only:
• Release 12.2(17b)SXA and subsequent rebuilds.
• Release 12.2(17d)SXB and subsequent rebuilds.
Nonstop forwarding (NSF) with SSO redundancy mode supports IPv4. NSF with SSO redundancy mode
does not support IPv6, Internetwork Packet Exchange (IPX), and Multiprotocol Label Switching (MPLS).
If you have configured MPLS on the Cisco 7600 series routers with redundant supervisor engines, you
must configure the Cisco 7600 series router in RPR mode. The switch should not be running in the default
mode of SSO.
Enter the redundancy command in global configuration mode to enter redundancy configuration mode.
You can enter the mode command within redundancy configuration mode.
Follow these guidelines when configuring your system for RPR+ mode:
• You must install compatible images on the active and standby supervisor engines to support RPR+
mode and SSO mode.
• Both supervisor engines must run the same Cisco IOS software version.
• Any modules that are not online at the time of a switchover are reset and reloaded on a switchover.
• The Forwarding Information Base (FIB) tables are cleared on a switchover. As a result, routed traffic
is interrupted until route tables reconverge.
The standby supervisor engine reloads on any change of mode and begins to work in the current mode.
When you use this command to force the standby supervisor engine to run as a Distributed Forwarding
Card (DFC) card, the uplink ports in the standby engine continue to be in use and are not disabled.
Cisco IOS Release XE Release 2.5 and ASR 1000 Series Routers
For Cisco ASR 1002 and 1004 routers, RRP and stateful switchover can be used to switch between Cisco
IOS processes. RPR and SSO need to be configured by the user, however, because a second Cisco IOS
process is not available by default on Cisco ASR 1002 and 1004 routers. Enter the redundancy command
in global configuration mode to enter redundancy configuration mode. You can enter the mode command
within redundancy configuration mode.
The Cisco ASR 1006 Router supports a second Route Processor. The second Cisco IOS process can run
only on the standby Route Processor. This means that hardware redundancy is available and RPR and SSO
do not need to be configured by the user because a second Cisco IOS process is available by default on the
Cisco ASR 1006 router.
RPR+ mode is not supported on the Cisco ASR 1000 Series Routers.
Cisco IOS Release 12.2XNE and 1000 Series Routers
Enter the redundancy command in global configuration mode to enter redundancy configuration mode.
You can enter the mode command within redundancy configuration mode.
RPR mode is not supported on the Cisco 10000 router.
Examples This example shows how to set the redundancy mode to RPR+:
Router(config)# redundancy
Router(config-red)# mode rpr-plus
Router(config)# redundancy
Router(config-red)# mode sso
route-converge-interval Configures the time interval after which the old FIB
entries are purged.
Command Description
show redundancy Displays RF information.
monitor event-trace component {clear | continuous | disable | dump [pretty] | enable | one-shot}
Release Modification
12.2(25)S This command was integrated into Cisco IOS
Release 12.2(25)S. The monitor event-trace cef
ipv4 clearcommand replaces the clear ip cef
event-logcommand.
Usage Guidelines Use the monitor event-trace command to control what, when, and how event trace data is collected. Use
this command after you have configured the event trace functionality on the networking device using the
monitor event-trace command in global configuration mode.
Note The amount of data collected from the trace depends on the trace message size configured using the
monitor event-tracecommand in global configuration mode for each instance of a trace.
The Cisco IOS software allows for the subsystem components to define whether support for event tracing is
enabled or disabled at boot time. You can enable or disable event tracing in two ways: using the monitor
event-tracecommand in privileged EXEC mode or using the monitor event-tracecommand in global
configuration mode. To disable event tracing, you would enter either of these commands with the disable
keyword. To enable event tracing again, you would enter either of these commands with the enable
keyword.
To determine whether you can enable event tracing on a subsystem, use the monitor event-trace ?
commandto get a list of software components that support event tracing. To determine whether event
tracing is enabled by default for the subsystem, use the show monitor event-trace command to display
trace messages.
Use the show monitor event-trace command to display trace messages. Use the monitor event-trace
component dump command to save trace message information for a single event. By default, trace
information is saved in binary format. If you want to save trace messages in ASCII format, possibly for
additional application processing, use the monitor event-trace component dump pretty command.
To write the trace messages for all events currently enabled on a networking device to a file, enter the
monitor event-trace dumpcommand.
To configure the file where you want to save trace information, use the monitor event-trace command in
global configuration mode. The trace messages are saved in a binary format.
Examples The following example shows the privileged EXEC commands to stop event tracing, clear the current
contents of memory, and reenable the trace function for the interprocess communication (IPC) component.
This example assumes that the tracing function is configured and enabled on the networking device.
The following example shows how the monitor event-trace one-shotcommand accomplishes the same
function as the previous example except in one command. In this example, once the size of the trace
message file has been exceeded, the trace is terminated.
The following example shows the command for writing trace messages for an event in binary format. In
this example, the trace messages for the IPC component are written to a file.
The following example shows the command for writing trace messages for an event in ASCII format. In
this example, the trace messages for the MBUS component are written to a file.
Catalyst 6500 Series Switches and Cisco 7600 Series Routers Examples Only
This example shows how to stop event tracing, clear the current contents of memory, and reenable the trace
function for the SPA component. This example assumes that the tracing function is configured and enabled
on the networking device.
monitor event-trace dump-traces Saves trace messages for all event traces currently
enabled on the networking device.
show monitor event-trace Displays event trace messages for Cisco IOS
software subsystem components.
monitor event-trace component {disable | dump-file filename | enable | size number | stacktrace
number} timestamps [datetime [localtime] [msec] [show-timezone] | uptime]
dump-file filename Specifies the file where event trace messages are
written from memory on the networking device.
The maximum length of the filename (path and
filename) is 100 characters, and the path can point
to flash memory on the networking device or to a
TFTP or FTP server.
Command Default Event tracing is enabled or disabled depending on the software component.
Release Modification
12.2(28)SB This command was integrated into Cisco IOS
Release 12.2(28)SB and implemented on the Cisco
10000 series routers.
Usage Guidelines Use the monitor event-trace command to enable or disable event tracing and to configure event trace
parameters for Cisco IOS software subsystem components.
Note Event tracing is intended for use as a software diagnostic tool and should be configured only under the
direction of a Technical Assistance Center (TAC) representative. In Cisco IOS software images that do not
provide subsystem support for the event trace function, the monitor event-trace command is not available.
The Cisco IOS software allows the subsystem components to define whether support for event tracing is
enabled or disabled by default. The command interface for event tracing allows you to change the default
two ways: using the monitor event-tracecommand in privileged EXEC mode or using the monitor event-
tracecommand in global configuration mode.
Additionally, default settings do not show up in the configuration file. If the subsystem software enables
event tracing by default, the monitor event-tracecomponentenable command will not show up in the
configuration file of the networking device; however, disabling event tracing that has been enabled by
default by the subsystem will create a command entry in the configuration file.
Note The amount of data collected from the trace depends on the trace message size configured using the
monitor event-tracecommand for each instance of a trace.
To determine whether you can enable event tracing on a subsystem, use the monitor event-trace ?
commandto get a list of software components that support event tracing.
To determine whether event tracing is enabled by default for the subsystem, use the show monitor event-
trace command to display trace messages.
To specify the trace call stack at tracepoints, you must first clear the trace buffer.
Examples The following example shows how to enable event tracing for the interprocess communication (IPC)
subsystem component in Cisco IOS software and configure the size to 4096 messages. The trace messages
file is set to ipc-dump in slot0 (flash memory).
configure terminal
!
monitor event-trace ipc enable
monitor event-trace ipc dump-file slot0:ipc-dump
monitor event-trace ipc size 4096
When you select Cisco Express Forwarding as the component for which to enable event tracing, you can
use the following additional arguments and keywords: monitor event-trace cef [events | interface | ipv6 |
ipv4][all]. The following example shows how to enable event tracing for IPv4 or IPv6 events of the Cisco
Express Forwarding component in Cisco IOS software:
configure terminal
!
monitor event-trace cef ipv4 enable
configure terminal
!
monitor event-trace cef ipv6 enable
exit
The following example shows what happens when you try to enable event tracing for a
component (in this case, adjacency events) when it is already enabled:
configure terminal
!
monitor event-trace adjacency enable
%EVENT_TRACE-6-ENABLE: Trace already enabled.
monitor event-trace dump-traces Saves trace messages for all event traces currently
enabled on the networking device.
show monitor event-trace Displays event trace messages for Cisco IOS
software subsystem components.
Syntax Description pretty (Optional) Saves the event trace message in ASCII
format.
Usage Guidelines Use the monitor event-trace dump-traces command to save trace message information for all event traces
currently enabled on a networking device. By default, trace information is saved in binary format. If you
want to save trace messages in ASCII format, possibly for additional application processing, use the
monitor event-trace dump-traces pretty command.
To write the trace messages for an individual trace event to a file, enter the monitor event-trace (EXEC)
command.
To configure the file where you want to save messages, use the monitor event-trace (global) command.
Examples The following example shows how to save the trace messages in binary format for all event traces enabled
on the networking device.
The following example shows how to save the trace messages in ASCII format for all event traces enabled
on the networking device.
monitor event-trace (global) Configures event tracing for a specified Cisco IOS
software subsystem component.
show monitor event-trace Displays event trace messages for Cisco IOS
software subsystem components.
Usage Guidelines You can use the monitor pcm-tracer capture-destination command to specify a location to save the PCM
trace information. When Cisco IOS software saves the data to network file systems, such as TFTP and FTP,
it assumes the location is valid and has write access.
After the PCM capture is complete, the router automatically copies the captured contents to the specified
location. The filename format at the destination location is as follows:
You can identify the dial feature card (DFC) channel from where the PCM is traced using the filename
format.
Consider the following example:
In this example, two files are created for the data corresponding to each DS0s, one for each direction
(transmitter and receiver). When the debug pcmtracer command is enabled, the trace data is copied into
the following files:
• cap_data_tx_6_1_22 and cap_data_rx_6_1_22--This corresponds to the traffic flowing through DS0
6/1:22.
• cap_data_tx_6_1_22 and cap_data_rx_6_1_22--cap_data_tx_6_1_22 is the data in the transmit
direction (from the DFC to the system backplane) and cap_data_rx_6_1_22 is the data in the receiver
direction (to the DFC from the system backplane).
Examples The following example shows how to configure a router to save the PCM trace information to a flash drive:
Examples The following example shows how to configure the PCM tracer delay time to 1000 seconds:
Usage Guidelines You must create at least one user profile under the channels that need to be traced. You can create the
following profile operations:
• Create a user profile identified by a profile number.
• Add one or more profiles. A user profile consists of capture groups in which the channels that are to be
traced are specified.
• Configure one or more capture groups under a profile.
Examples The following example shows how to create a PCM capture profile with profile number 1:
monitor permit-list
To configure a destination port permit list or add to an existing destination port permit list, use the monitor
permit-list command in global configuration mode. To delete from or clear an existing destination port
permit list, use the no form of this command.
Activate monitoring
monitor permit-list
no monitor permit-list
Usage Guidelines To prevent accidental configuration of ports as destinations, you can create a permit list of the ports that are
valid for use as destinations. With a destination port permit list configured, you can only configure the ports
in the permit list as destinations.
When you enter multiple instances of interface interface-type slot/port-fastport, you must enter a space
before and after the comma. For example, interface interface-type slot/port-fastport , interface-type slot/
port-fastport , interface-type slot/port-fastport.
Examples This example shows how to configure a destination port permit list that includes Gigabit Ethernet ports 5/1
through 5/4, and activate monitoring:
This example shows how to configure a destination port permit list that includes Fast Ethernet ports 1/1-48,
2/1-48, and Gigabit Ethernet ports 3/1 through 3/4, and activate monitoring:
Command Default Cisco IOS Releases 12.2(33)SXH2a and later releases: Centralized mode
Cisco IOS Releases 12.2(33)SXH, SXH1, and SXH2: Distributed mode
Usage Guidelines
Note Prior to Cisco IOS Release 12.2(33)SXH and the introduction of this feature, the operating mode was
centralized and could not be changed.
Centralized egress span monitoring redirects traffic to the supervisor engine for egress monitoring.
Distributed egress span monitoring is performed in the ingress module. Distributed replication for Switched
Port Analyzer (SPAN), Remote SPAN (RSPAN), and Encapsulated RSPAN (ERSPAN) increases the total
throughput at the span destination.
Note Distributed egress span (DES) mode is applied to ASIC-based sessions only.
Examples
Cisco IOS Release 12.2(33)SXH, SXH1, and SXH2
The following example shows how to switch the egress-span mode from the distributed default to
centralized mode:
The following example shows how to switch the egress-span mode from centralized back to distributed
mode:
The following example shows how to switch the egress-span mode from distributed back to centralized
mode:
Release Modification
12.2(18)SXF This command was changed as follows:
• Support for this command was introduced on
the Supervisor Engine 32.
• ERSPAN is supported in any switch fabric
module functionality switching mode.
Usage Guidelines Release 12.2(18)SXE and later releases support ERSPAN with the Supervisor Engine 720, hardware
revision 3.2 or higher. Enter the show module version | include WS-SUP720-BASE command to display
the hardware revision.
ERSPAN traffic is GRE-encapsulated SPAN traffic that can only be processed by an ERSPAN destination
session.
This command is not supported on Catalyst 6500 series switches that are configured with a Supervisor
Engine 2.
All ERSPAN source sessions on a switch must use the same source IP address. You enter the origin ip
address command to configure the IP address for the ERSPAN source sessions.
All ERSPAN destination sessions on a switch must use the same IP address. You enter the ip address
command to configure the IP address for the ERSPAN destination sessions. If the ERSPAN destination IP
address is not a Supervisor Engine 720 (for example, it is a network sniffer), the traffic arrives with the
GRE and RSPAN headers/encapsulation intact.
The ERSPAN source session destination IP address, which must be configured on an interface on the
destination switch, is the source of traffic that an ERSPAN destination session sends to the destination
ports. You configure the same address in both the source and destination sessions with the ip address
command.
The ERSPAN ID differentiates the ERSPAN traffic arriving at the same destination IP address from
different ERSPAN source sessions.
The local ERSPAN session limits are as follows:
• Total sessions--66
• Source sessions--2 (ingress or egress or both)
• Destination sessions--23
The monitor session type command creates a new ERSPAN session or allows you to enter the ERSPAN
session configuration mode. ERSPAN uses separate source and destination sessions. You configure the
source and destination sessions on different switches. The ERSPAN session configuration mode prompts
are as follows:
• Router(config-mon-erspan-src)--Indicates the ERSPAN source session configuration mode.
Syntax Description
Global Configuration Mode
monitor session erspan-destination-session-number | rspan- Enters ERSPAN or RSPAN destination session configuration
destination-session-number type erspan-destination | erspan- mode and changes the prompt to the following:
destination Router(config-mon-erspan-dst)#
Router(config-mon-rspan-dst)#
destination {single-interface | interface-list | interface-range | Associates the ERSPAN destination session number with the
mixed-interface-list } destination ports.
ip address ip-address [force] Configures the ERSPAN flow destination IP address, which
must also be configured on an interface on the destination
switch and be entered in the ERSPAN destination session
configuration.
vrf vrf-name (Optional) Configures the VRF name of the packets in the
ERSPAN traffic.
The table below lists the ERSPAN source session configuration mode syntaxes.
Syntax Description
Global Configuration Mode
monitor session erspan-source-session-number type erspan- Enters ERSPAN or RSPAN source session configuration mode
source | rspan-source and changes the prompt as appropriate to the following:
Router(config-mon-erspan-src)#
Router(config-mon-rspan-src)#
source {{single-interface | interface-list | interface-range | Associates the ERSPAN or RSPAN source session number
mixed-interface-list | single-vlan | vlan-list | vlan-range | mixed- with the source ports or VLANs, and selects the traffic
vlan-list } [rx | tx | both]} direction to be monitored.
filter { single-vlan | vlan-list | vlan-range | mixed-vlan-list } (Optional) Configures source VLAN filtering when the
ERSPAN or RSPAN source is a trunk port.
erspan-id erspan-flow-id Configures the ID number used by the source and destination
sessions to identify the ERSPAN or RSPAN traffic.
origin ip address ip-address Configures the IP address used as the source of the ERSPAN or
RSPAN traffic.
ip {{ttlttl-value } | {precipp-value } | {dscpdscp-value }} (Optional) Configures the following packet values in the
ERSPAN or RSPAN traffic:
• ttl ttl -value --IP time-to-live (TTL) value
• prec ipp-value-- IP-precedence value
• dscp dscp-value-- IP-precedence value
vrf vrf-name (Optional) Configures the VRF name of the packets in the
ERSPAN or RSPAN traffic.
When you configure the monitor sessions, follow these syntax guidelines:
• erspan-destination-span-session-number can range from 1 to 66.
Note In lists, you must enter a space before and after the comma. In ranges, you must enter a space before and
after the dash.
Note When you enter the no monitor session range command, do not enter spaces before or after the dash. If
you enter multiple ranges, do not enter spaces before or after the commas.
Use the monitor session type local command to configure ingress, egress, or both ingress and egress
SPAN sessions.
Use the monitor session type local-tx command to configure egress-only SPAN sessions.
When you enter the local or the local egress-only SPAN session configuration mode, the prompt changes
accordingly to Router(config-mon-local)# or Router(config-mon-local-tx)#, and the following commands
are available:
• description -- Describes the properties for this session using this syntax:
description description
The descriptioncan be up to 240 characters and cannot contain special characters or spaces.
• destination -- Specifies the destination and the destination properties using this syntax:
destination analysis-module num anomaly-detector-module num interface type number intrusion-
detection-module num
analysis-module num Specifies the SPAN destination analysis-module.
interface type number Specifies the interface type and number as follows:
• GigabitEthernet mod /port
• port-channel num --Ethernet Channel of
interfaces; valid values are from 1 to 496.
interface type number Specifies the interface type and number as follows:
• FastEthernet mod /port
• GigabitEthernet mod /port
• Port-channel num --Ethernet Channel of
interfaces; valid values are from 1 to 496.
tx When you enter the local-tx keyword, the rx and (Optional) Monitors the transmitted traffic only.
both keywords are not available and the tx keyword
is required.
Only one destination per SPAN session is supported. If you attempt to add another destination interface to a
session that already has a destination interface configured, you get an error. You must first remove a SPAN
destination interface before changing the SPAN destination to a different interface.
You can configure up to 64 SPAN destination interfaces, but you can have one egress SPAN source
interface and up to 128 ingress source interfaces only.
A SPAN session can either monitor VLANs or monitor individual interfaces, but it cannot monitor both
specific interfaces and specific VLANs. Configuring a SPAN session with a source interface and then
trying to add a source VLAN to the same SPAN session causes an error. Configuring a SPAN session with
a source VLAN and then trying to add a source interface to that session also causes an error. You must first
clear any sources for a SPAN session before switching to another type of source.
Port channel interfaces display in the list of interface options if you have them configured. VLAN
interfaces are not supported. However, you can span a particular VLAN by entering the monitor session
session source vlan vlan-id command.
When you configure the destination, use these guidelines:
• A single-interface is as follows:
◦ interface type slot/port; type is fastethernet, gigabitethernet, or tengigabitethernet.
◦ interface port-channel number
Note Destination port channel interfaces must be configured with the channel-group group-num mode on
command and the no channel-protocol command.
Note In lists, you must enter a space before and after the comma. In ranges, you must enter a space before and
after the dash.
Note When you enter the no monitor session range command, do not enter spaces before or after the dash. If
you enter multiple ranges, do not enter spaces before or after the commas.
Examples This example shows how to configure an ERSPAN source session number and enter the ERSPAN source
session configuration mode for the session:
Router(config-mon-erspan-src)#
This example shows how to configure an ERSPAN destination session number and enter the ERSPAN
destination session configuration mode for the session:
Router(config-mon-erspan-dst)#
This example shows how to associate the ERSPAN destination session number with the destination ports:
Router(config-mon-erspan-dst)# source
Router(config-mon-erspan-dst-src)#
This example shows how to enter the ERSPAN destination session source configuration mode:
Router(config-mon-erspan-dst)# source
Router(config-mon-erspan-dst-src)#
This example shows how to configure multiple sources for a session:
Router(config-mon-erspan-src)# destination
Router(config-mon-erspan-src-dst)#
This example shows how to configure the ID number that is used by the source and destination sessions to
identify the ERSPAN traffic:
mop device-code
To identify the type of device sending Maintenance Operation Protocol (MOP) System Identification
(sysid) messages and request program messages, use the mop device-code command in global
configuration mode. To set the identity to the default value, use the no form of this command.
Syntax Description cisco Denotes a Cisco device code. This is the default.
Usage Guidelines The sysid messages and request program messages use the identity information indicated by this command.
Examples The following example identifies a DECserver 200 device as sending MOP sysid and request program
messages:
mop retransmit-timer
To configure the length of time that the Cisco IOS software waits before resending boot requests to a
Maintenance Operation Protocol (MOP) server, use the mop retransmit-timer command in global
configuration mode. To reinstate the default value, use the no form of this command.
Syntax Description seconds Sets the length of time (in seconds) that the
software waits before resending a message. The
value is a number from 1 to 20.
Usage Guidelines By default, when the software sends a request that requires a response from a MOP boot server and the
server does not respond, the message is re-sent after 4 seconds. If the MOP boot server and router are
separated by a slow serial link, it might take longer than 4 seconds for the software to receive a response to
its message. Therefore, you might want to configure the software to wait longer than 4 seconds before
resending the message if you are using such a link.
Examples In the following example, if the MOP boot server does not respond within 10 seconds after the router sends
a message, the server will resend the message:
mop retransmit-timer 10
mop retries
To configure the number of times the Cisco IOS software will resend boot requests to a Maintenance
Operation Protocol (MOP) server, use the mop retries command in global configuration mode. To
reinstate the default value, use the no form of this command.
Syntax Description count Indicates the number of times the software will
resend a MOP boot request. The value is a number
from 3 to 24. The default is 8.
Examples In the following example, the software will attempt to resend a message to an unresponsive host 11 times
before declaring a failure:
Command Description
mop retransmit-timer Configures the length of time that the Cisco IOS
software waits before resending boot requests to a
MOP server.
more
To display the contents of a file, use the morecommand in privileged EXEC mode.
Command Default The command displays the conent of a file in its native format. Optional formats include ascii, binary, and
ebcdic.
Cisco IOS XE Release 2.5 This command was implemented on Cisco ASR
1000 series routers.
Usage Guidelines The more system:running-config command displays the same output as the show running-config
command. The more nvram:startup-config command is recommended as a replacement for the show
startup-config command and the show configuration command.
You can use this command to display configuration files, as follows:
• The more nvram:startup-config command displays the startup configuration file contained in
NVRAM or specified by the CONFIG_FILE environment variable. The Cisco IOS software informs
you whether the displayed configuration is a complete configuration or a distilled version. A distilled
configuration is one that does not contain access lists.
• The more system:running-config command displays the running configuration.
These commands show the version number of the software used when you last changed the configuration
file.
You can also display the contents of files on remote systems using the more command. For example, you
could display a saved running configuration file on an FTP server using more ftp://
username:password@ftp-host1/mydirectory/7200-basic-running-config. See the description of the
copy command for more information on file-system prefixes available in the Cisco IOS CLI.
Options for filtering and redirecting the output of this command are available by appending a pipe character
(|). See the Related Commands table for a list of more <url> command extensions.
Examples The following partial sample output displays the configuration file named startup-config in NVRAM:
The following is partial sample output from the more nvram:startup-config command when the
configuration file has been compressed:
Router#
more nvram:startup-config
Building configuration...
Current configuration:
!
version 12.1
no service udp-small-servers
no service tcp-small-servers
!
hostname Router2
!
.
.
.
!
end
more <url> exclude Filters the output of any more command to exclude
a matched string.
more <url> include Filters the output of any more command to display
only the lines that match the specified string.
Syntax Description url The Universal Resource Locator (RLl) of the file to
display. More commands are advanced show
commands; for details, see the command reference
page in this book for the more command.
Usage Guidelines The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at every --More-- prompt.
To search the remaining output of the more command, use the following command at the --More-- prompt:
/ regular-expression
To filter the remaining output of the more command, use one of the following commands at the --More--
prompt:
- regular-expression
+ regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press
Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Note Once you specify a filter for a more command, you cannot specify another filter at a --More-- prompt. The
first specified filter remains until the more command output finishes or until you interrupt the output. The
use of the keyword begin does not constitute a filter.
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples The following is partial sample output of the more nvram:startup-config | begincommand that begins
unfiltered output with the first line that contain the regular expression “ip.” At the --More-- prompt, the
user specifies a filter to exclude output lines that contain the regular expression “ip.”
Command Description
more <url> include Filters more command output so that it displays
only lines that contain a particular regular
expression.
show <command> begin Searches the output of any show command and
displays the output from the first instance of a
specified string.
Syntax Description url The Universal Resource Locator (URL) of the file
to display. More commands are advanced show
commands; for details, see the command reference
page in this book for the more command.
The Cisco IOS File System (IFS) uses URLs to
specify the location of a file system, directory, and
file. Typical URL elements include:
prefix:[directory/]filename
Prefixes can be local file systems or file locations,
such as nvram: or system:. Alternatively, you can
specify network locations using the following
syntax:
ftp: [[//[username [:password ]@]location ]/
directory ]/filename
tftp: [[//location ]/directory ]/filename
rcp: [[//[username @]location ]/directory ]/
filename
Release Modification
12.0(1)T This extension of the more command was
introduced.
Usage Guidelines The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at any --More-- prompt. To search the remaining output of the more
command, use the following command at the --More-- prompt:
/ regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press
Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples The following is partial sample output of the more nvram:startup-config | excludecommand. The use of |
exclude service in the command specifies a filter that excludes lines that contain the regular expression
“service.” At the --More-- prompt, the user searches for the regular expression “Dialer1,” which continues
filtered output with the first line that contains “Dialer1.”
Command Description
more <url> include Filters more command output so that it displays
only lines that contain a particular regular
expression.
show <command> begin Searches the output of any show command and
displays the output from the first instance of a
specified string.
Syntax Description url The Universal Resource Locator (URL) of the file
to display. More commands are advanced show
commands; for details, see the command reference
page in this book for the more command.
Usage Guidelines The regular-expression argument is case sensitive and allows for complex matching requirements.
You can specify a new search at any --More-- prompt. To search the remaining output of the more
command, use the following syntax at the --More-- prompt:
/ regular-expression
When output volume is large, the search can produce long lists of output. To interrupt the output, press
Ctrl-^ (Ctrl-Shift-6) or Ctrl-Z.
Because prior output is not saved, you cannot search or filter backward through prior output.
Examples The following is partial sample output of the more nvram:startup-config | includecommand. It only
displays lines that contain the regular expression “ip.”
show <command> begin Searches the output of any show command and
displays the output from the first instance of a
specified string.
more flh:logfile
To view the system console output generated during the Flash load helper operation, use the more
flh:logfile privileged EXEC command.
more flh:logfile
Usage Guidelines If you are a remote Telnet user performing the Flash upgrade without a console connection, this command
allows you to retrieve console output when your Telnet connection has terminated due to the switch to the
ROM image. The output indicates what happened during the download, and is particularly useful if the
download fails.
This command is a form of the more command. See the more command for more information.
Length Name/status
1 2251320
abc/igs-kf.914
[2251384 bytes used, 1942920 available, 4194304 total]
Accessing file 'abc/igs-kf.914' on 172.16.1.111...
Loading from 172.16.13.111:
Erasing device...... erased
Loading from 172.16.13.111:
- [OK -
2251320/4194304 bytes]
Verifying checksum... OK (0x97FA)
Flash copy took 79292 msecs
%FLH: Re-booting system after download
motd-banner
To enable the display of message-of-the-day (MOTD) banners on the specified line or lines, use the motd-
banner command in line configuration mode. To suppress the MOTD banners on the specified line or
lines, use the no form of this command.
motd-banner
no motd-banner
Usage Guidelines This command determines whether the router will display the MOTD banner when an EXEC session is
created on the specified line or lines. The MOTD banner is defined with the banner motd global
configuration command. By default, the MOTD banner is enabled on all lines. Disable the MOTD banner
on specific lines using the no motd-banner line configuration command.
The MOTD banners can also be disabled by the no exec-banner line configuration command, which
disables both MOTD banners and EXEC banners on a line. If the no exec-banner command is configured
on a line, the MOTD banner will be disabled regardless of whether the motd-bannercommand is enabled
or disabled. The table below summarizes the effects of the exec-banner command and the motd-banner
command.
For reverse Telnet connections, the EXEC banner is never displayed. Instead, the incoming banner is
displayed. The MOTD banner is displayed by default, but it is disabled if either the no exec-banner
command or no motd-banner command is configured. The table below summarizes the effects of the
exec-banner command and the motd-banner command for reverse Telnet connections.
Table 32 Banners Displayed Based On exec-banner and motd-banner Combinations for Reverse Telnet
Sessions to Async Lines
Examples The following example suppresses the MOTD banner on vty lines 0 through 4:
line vty 0 4
no motd-banner
name-connection
To assign a logical name to a connection, use the name-connectioncommand in user EXEC mode.
name-connection
Usage Guidelines This command can be useful for keeping track of multiple connections.
You are prompted for the connection number and name to assign. The where command displays a list of
the assigned logical connection names.
Examples The following example assigns the logical name blueto the connection:
Router> where
Conn Host Address Byte Idle Conn Name
* 1 doc-2509 172.30.162.131 0 0 doc-2509
Router> name-connection
Connection number: 1
Enter logical name:
blue
Connection 1 to doc-2509 will be named "BLUE" [confirm]
no menu
To delete a user menu from the configuration file, use the no menu command in global configuration
mode.
no menu menu-name
Syntax Description menu-name Name of the menu to delete from the configuration
file.
Usage Guidelines Use this command to remove any menu commands for a particular menu from the configuration file.
As with all global configuration commands, this command will only effect the startup configuration file
when you save the running configuration using the copy running-config startup-config EXEC command.
no menu Access1
Command Description
menu prompt Specifies the prompt for a user menu.
notify
To enable terminal notification about pending output from other Telnet connections, use the notify
command in line configuration mode. To disable notifications, use the noform of this command.
notify
no notify
Usage Guidelines This command sets a line to inform a user that has multiple, concurrent Telnet connections when output is
pending on a connection other than the current one.
Examples In the following example, notification of pending output from connections is enabled on virtual terminal
lines 0 to 4:
notify syslog
To enable the sending of notifications of configuration changes to a remote system message logging
(syslog), use the notify syslogcommand in configuration change logger configuration mode. To disable the
sending of notifications of configuration changes to the syslog, use the no form of this command.
Syntax Description contenttype (Optional) Allows you to choose a format for the
configuration change messages that are sent via
syslog.
Usage Guidelines Enable the notify syslog command if you use the syslog to monitor your router. Syslog monitoring prevents
the need to gather configuration log information manually.
Examples The following example shows how to enable the router to send notifications (in XML format) to the syslog:
show archive log config Displays entries from the configuration log.
padding
To set the padding on a specific output character, use the padding command in line configuration mode. To
remove padding for the specified output character, use the no form of this command.
Usage Guidelines Use this command when the attached device is an old terminal that requires padding after certain characters
(such as ones that scrolled or moved the carriage). See the “ASCII Character Set and Hex Values”
appendix for a list of ASCII characters.
Examples In the following example, the Return (decimal character 13) is padded with 25 NULL bytes on the console
line:
Router(config-line)# padding 13 25
parity
To define generation of a parity bit, use the parity command in line configuration mode. To specify no
parity, use the no form of this command.
Usage Guidelines Communication protocols provided by devices such as terminals and modems sometimes require a specific
parity bit setting. Refer to the documentation for your device to determine required parity settings.
If you use this command to set parity on Cisco AS5350 and Cisco AS5400 NextPort lines, do not also set
parity by means of S-register settings in a modemcap. (A modemcap is a series of parameter settings that
are sent to your modem to configure it to interact with a Cisco device in a specified way. Cisco IOS
software defines modemcaps that have been found to properly initialize most modems so that they function
properly with Cisco routers and access servers.)
Examples In the following example, even parity is configured for line 34:
Router(config)# line 34
Router(config-line)# parity even
parser cache
To reenable the Cisco IOS software parser cache after disabling it, use the parser cache command in
global configuration mode. To disable the parser cache, use the no form of this command.
parser cache
no parser cache
Usage Guidelines The Parser Cache feature optimizes the parsing (translation and execution) of Cisco IOS software
configuration command lines by remembering how to parse recently encountered command lines,
decreasing the time required to process large configuration files.
The parser cache is enabled by default. However, if you wish to disable the parser cache, you may do so
using the no parser cache command in global configuration mode. To reenable the parser cache after it has
been disabled, use the parser cache command.
When the no parser cache is issued, the command line appears in the running configuration file. However,
if the parser cache is reenabled, no command line appears in the running configuration file.
Examples In the following example, the Cisco IOS software Parser Cache feature is disabled:
show parser statistics Displays statistics about the last configuration file
parsed and the status of the Parser Cache feature.
Command Default Access is granted only to the user holding the lock.
Usage Guidelines The Parser Concurrency and Locking Improvements feature ensures that exclusive access is granted only to
a requested process and prevents other users from concurrently accessing the Cisco IOS configuration. That
is, it prevents simultaneous execution of two or more commands. Use the parser command serializer
command to configure the Parser Concurrency and Locking Improvements feature.
Examples The following example shows how to configure the Parser Concurrency and Locking Improvements
feature:
test parser session-lock Tests the behavior of the Parser Concurrency and
Locking Improvements feature.
Usage Guidelines Enable the parser config cache interfacecommand to reduce the execution time required for running
configuration management commands such as the show running-configuration, write terminal, and copy
system:running-configuration commands. Information for these configuration management commands is
supplied by nonvolatile generation (NVGEN) processes that query the system for configuration details. The
parser config cache interfacecommand is especially useful for managing large system configurations that
contain numerous interface configurations.
Once enabled, the command provides faster execution of the NVGEN commands that process the running
system configuration by caching interface configurations in system memory, and by retrieving only
configuration information that has changed. For this reason, the device on which this command is enabled
must have enough memory available to store the interface configuration. For example, if the interface
configurations take up 15 KB of memory, using this command would require having an additional 15 KB
of memory space available.
The first time you display the configuration file, you will not see much evidence of improvement in
performance because the interface cache will be filled up. However, you will notice performance
improvements when you enter subsequent NVGEN-type commands such as the show running-
configuration EXEC command.
Each time the interface configuration is changed, the interface cache is flushed. Entering an NVGEN-type
command after modifying the interface configuration will once again not show any performance
improvement until the next NVGEN-type command is entered.
Examples The following example shows how to enable the functionality for reducing the time required for the
command-line interpreter to execute commands that manage the running system configuration files:
Usage Guidelines This command controls (enables or disables) the Configuration Partitioning feature.
To display the list of commands that make up the current running configuration for a specific part
(“partition”) of the system’s global running configuration, use the show running-config partition
command in privileged Exec mode.
The Configuration Partitioning feature uses a small amount of system resources. The no parser config
partition command allows you to disable this feature if the feature is not needed on your system.
Note Only the no form of this command will appear in configuration files. To determine if config partitioning is
supported on your system and whether it is enabled, use the show running-config parser ? command.
Examples The following example shows how to disable partitioning of the system running configuration:
Router> enable
Router# config t
parser maximum
To specify performance maximums for CLI operations use the parser maximum command in global
configuration mode. To clear any previously established maximums, us the No form of the command.
Usage Guidelines The Parser Maximum feature provides a workaround in the event of a problem with the coding of a
protocol, allowing the error to be bypassed untill it can be corrected.
Examples The following example shows how to impose a latency limit of 100.
partition
To separate Flash memory into partitions on Class B file system platforms, use the partition command in
global configuration mode. To undo partitioning and to restore Flash memory to one partition, use the no
form of this command.
Syntax Description flash-filesystem : One of the following Flash file systems, which
must be followed by a colon (:). The Cisco 1600
series can only use the flash: keyword.
• flash: -- Internal Flash memory
• slot0: -- Flash memory card in PCMCIA slot 0
• slot1: -- Flash memory card in PCMCIA slot 1
Usage Guidelines For the Cisco 1600 series and Cisco 3600 series routers, to undo partitioning, use the partition flash-
filesystem :1 or no partition flash-filesystem : command. For other Class B platforms, use either the
partition flash 1 or no partition flash command. If there are files in a partition other than the first, you
must use the erase flash-filesystem:partition-numbercommand to erase the partition before reverting to a
single partition.
When creating two partitions, you must not truncate a file or cause a file to spill over into the second
partition.
Note The partition command will only create 3MB or larger partitions and may not be used if the device memory
contains logging persistent files.
Examples The following example creates two partitions of 4 MB each in Flash memory:
The following example divides the Flash memory card in slot 0 into two partitions, each 8 MB in size on a
Cisco 3600 series router:
Router(config)#
partition slot0: 2 8 8
The following example creates four partitions of equal size in the card on a Cisco 1600 series router:
path url
no path url
Syntax Description url URL (accessible by the Cisco IOS file system) used
for saving archive files of the running configuration
file in the Cisco IOS configuration archive.
Command Default If this command is not configured, no location or filename prefix is specified for files in the Cisco IOS
configuration archive.
Usage Guidelines When this command is entered, an archive file of the running configuration is saved when the archive
config, write-memory, or copy running-config startup-config command is entered.
URLs are commonly used to specify files or location on the World Wide Web. On Cisco routers, URLs can
be used to specify the location of a file or directory on a router or a remote file server. The path command
uses a URL to specify the location and filename prefix for the Cisco IOS configuration archive.
The locations or file systems that you can specify in the url argument are as follows:
• If your platform has disk0--disk0:, disk1:, ftp:, pram:, rcp:, slavedisk0:, slavedisk1:, or tftp:
• If your platform does not have disk0--ftp:, http:, pram:, rcp:, or tftp:
The colon is required in the location format.
The filename of the first archive file is the filename specified in the url argument followed by -1. The
filename of the second archive file is the filename specified in the url argument followed by -2 and so on.
Because some file systems are incapable of storing the date and time that a file was written, the filename of
the archive file can contain the date, time, and router hostname. To include the router hostname in the
archive file filename, enter the characters $h (for example, disk0:$h). To include the date and time in the
archive file filename, enter the characters $t.
When a configuration archive operation is attempted on a local file system, the file system is tested to
determine if it is writable and if it has sufficient space to save an archive file. If the file system is read-only
or if there is not enough space to save an archive file, an error message is displayed.
If you specify the tftp: file server as the location with the path command, you need to create the
configuration file on the TFTP file server and change the file’s privileges before the archive config
command works properly.
Examples The following example of the path command shows how to specify the hostname, date, and time as the
filename prefix for which to save archive files of the running configuration. In this example, the time-
period command is also configured to automatically save an archive file of the running configuration every
20 minutes.
configure terminal
!
archive
path disk0:$h$t
time-period 20
end
The following is sample output from the show archive command illustrating the format of the resulting
configuration archive filenames.
12
13
14
> touch
router-cfg-1
> chmod
777 router-cfg-1
The following example show how to create the configuration archive, save the running configuration to the
archive, and display the files in the archive:
configure terminal
!
archive
path tftp://10.48.71.226/router-cfg
exit
exit
!
archive config
Router# show archive
The next archive file will be named tftp://10.48.71.226/router-cfg-2
Archive # Name
0
1 tftp://10.48.71.226/router-cfg-1 <- Most Recent
2
3
4
5
6
7
8
9
10
11
12
13
14
The following is sample output from the show archive command if you did not create the configuration file
on the TFTP server before attempting to archive the current running configuration file:
configure terminal
!
archive
path tftp://10.48.71.226/router-cfg
exit
exit
archive config
Router# show archive
The next archive file will be named tftp://10.48.71.226/router-cfg-1
Archive # Name
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
periodic
To specify a recurring (weekly) time range for functions that support the time-range feature, use the
periodic command in time-range configuration mode. To remove the time limitation, use the no form of
this command.
Syntax Description days-of-the-week The first occurrence of this argument is the starting
day or day of the week that the associated time
range is in effect. The second occurrence is the
ending day or day of the week the associated
statement is in effect.
This argument can be any single day or
combinations of days: Monday, Tuesday,
Wednesday, Thursday, Friday, Saturday, and
Sunday. Other possible values are:
• daily --Monday through Sunday
• weekdays --Monday through Friday
• weekend --Saturday and Sunday
If the ending days of the week are the same as the
starting days of the week, they can be omitted.
Usage Guidelines For Cisco IOS Release 12.2(11)T, IP and Internetwork Packet Exchange (IPX) extended access lists are the
only functions that can use time ranges. For further information on using these functions, refer to the Cisco
IOS IP Configuration Guide and the Cisco IOS AppleTalk and Novell IPX Configuration Guide.
The periodiccommand is one way to specify when a time range is in effect. Another way is to specify an
absolute time period with the absolute command. Use either of these commands after the time-range
global configuration command, which specifies the name of the time range. Multiple periodicentries are
allowed per time-range command.
If the end days-of-the-week value is the same as the start value, they can be omitted.
If a time-range command has both absolute and periodic values specified, then the periodic items are
evaluated only after the absolute start time is reached, and are not further evaluated after the absolute end
time is reached.
Note All time specifications are taken as local time. To ensure that the time range entries take effect at the
desired times, you should synchronize the system software clock using Network Time Protocol (NTP).
The table below lists some typical settings for your convenience:
Every day of the week, from 8:00 a.m. to 6:00 p.m. periodic daily 8:00 to 18:00
only
Every minute from Monday 8:00 a.m. to Friday periodic monday 8:00 to friday 20:00
8:00 p.m.
All weekend, from Saturday morning through periodic weekend 00:00 to 23:59
Sunday night
Saturdays and Sundays, from noon to midnight periodic weekend 12:00 to 23:59
Examples The following example configuration denies HTTP traffic on Monday through Friday from 8:00 a.m. to
6:00 p.m.:
.
.
.
time-range no-http
periodic weekdays 8:00 to 18:00
!
ip access-list extended strict
deny tcp any any eq http time-range no-http
!
interface ethernet 0
ip access-group strict in
.
.
.
The following example configuration permits Telnet traffic on Mondays, Tuesdays, and Fridays from 9:00
a.m. to 5:00 p.m.:
.
.
.
time-range testing
periodic Monday Tuesday Friday 9:00 to 17:00
!
ip access-list extended legal
permit tcp any any eq telnet time-range testing
!
interface ethernet 0
ip access-group legal in
.
.
.
deny (IP) Sets conditions under which a packet does not pass
a named IP access list.
ping
To diagnose basic network connectivity on AppleTalk, ATM, Connectionless Network Service (CLNS),
DECnet, IP, Novell IPX, or source-route bridging (SRB) networks, use the ping command in user EXEC or
privileged EXEC mode.
Release Modification
12.2(13)T The atmprotocol keyword was added.
The following keywords were removed because the
Apollo Domain, Banyan VINES, and XNS
protocols are no longer supported in Cisco IOS
software:
• apollo
• vines
• xns
Cisco IOS XE Release 2.1 This command was introduced on Cisco ASR 1000
Series Routers.
Usage Guidelines The ping command sends an echo request packet to an address then waits for a reply. Ping output can help
you evaluate path-to-host reliability, delays over the path, and whether the host can be reached or is
functioning. For example, the ping clns command sends International Organization for Standardization
(ISO) CLNS echo packets to test the reachability of a remote router over a connectionless Open System
Interconnection (OSI) network.
If you enter the ping command without any keywords or argument values, an interactive system dialog
prompts you for the additional syntax appropriate to the protocol you specify. (See the “Examples”
section.)
To exit the interactive ping dialog before responding to all the prompts, type the escape sequence. The
default escape sequence is Ctrl-^, X (Simultaneously press and release the Ctrl, Shift, and 6 keys and then
press the X key). The escape sequence will vary depending on your line configuration. For example,
another commonly used escape sequence is Ctrl-c.
The table below describes the test characters sent by the pingfacility.
Character Description
! Each exclamation point indicates receipt of a reply.
Character Description
. Each period indicates that the network server timed
out while waiting for a reply.
Note Not all protocols require hosts to support pings. For some protocols, the pings are Cisco defined and can be
answered only by another Cisco router.
The availability of protocol keywords depends on what protocols are enabled on your system.
Issuing the ping command in user EXEC mode will generally offer fewer syntax options than issuing the
ping command in privileged EXEC mode.
Examples After you enter the ping command in privileged EXEC mode, the system prompts you for a protocol
keyword. The default protocol is IP.
If you enter a hostname or address on the same line as the ping command, the default action is taken as
appropriate for the protocol type of that name or address.
The following example is sample dialog from the ping command using default values. The specific dialog
varies somewhat from protocol to protocol.
Router# ping
Protocol [ip]:
Target IP address: 192.168.7.27
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.7.27, timeout is 2 seconds:
!!!!!
Success rate is 100 percent, round-trip min/avg/max = 1/2/4 ms
The table below describes the significant fields shown in the display.
Field Description
Protocol [ip]: Prompt for a supported protocol. Default: ip.
Repeat count [5]: Number of ping packets that will be sent to the
destination address. Default: 5.
Datagram size [100]: Size of the ping packet (in bytes). Default: 100
bytes.
Sweep range of sizes [n]: Allows you to vary the sizes of the echo packets
being sent. This capability is useful for determining
the minimum sizes of the maximum transmission
units (MTUs) configured on the nodes along the
path to the destination address. Packet
fragmentation contributing to performance
problems can then be reduced.
round-trip min/avg/max = 1/2/4 ms Round-trip travel time intervals for the protocol
echo packets, including minimum/average/
maximum (in milliseconds).
The following example verifies connectivity to the neighboring ATM device for the ATM permanent
virtual circuit (PVC) with the virtual path identifier (VPI)/virtual channel identifier (VCI) value 0/16:
Router# ping
Protocol [ip]:atm
ATM Interface:atm1/0
The table below describes the default ping fields shown in the display.
Field Description
Protocol [ip]: Prompt for a supported protocol. Default: ip.
VPI value [0]: Prompt for the virtual path identifier. Default: 0.
VCI value [1]: Prompt for the virtual channel identifier. Default:1.
Loopback - End(0), Segment(1) [0]: Prompt to specify end loopback, which verifies
end-to-end PVC integrity, or segment loopback,
which verifies PVC integrity to the neighboring
ATM device. Default: segment loopback.
Repeat Count [5]: Number of ping packets that will be sent to the
destination address. Default: 5.
round-trip min/avg/max = 1/1/1 ms Round-trip travel time intervals for the protocol
echo packets, including minimum/average/
maximum (in milliseconds).
Command Description
ping ip Tests network connectivity on IP networks.
ping (privileged)
To diagnose basic network connectivity on Apollo, AppleTalk, Connectionless Network Service (CLNS),
DECnet, IP, Novell IPX, VINES, or XNS networks, use the pingcommand in privileged EXEC command
mode.