Page 1

CISCO CCENT ICND1 100-101 COMMANDS

Router Commands (Configure, Exec, Show)

CONFIGURE (Router)
accept-lifetime hh:mm:ss <1-31> MONTH <1993-2035> infinite
accept-lifetime hh:mm:ss MONTH <1-31> <1993-2035> infinite
no accept-lifetime
access-class {<1-199> | name} {in | out}
no access-class {<1-199> | name} {in | out}
access-list <1-99> {deny | permit} { any | {network wildcard-mask {hostname | ip-address}}
no access-list <1-99>
access-list {<1-99> | <100-199>} remark text
access-list <100-199> {deny | permit} {ip | icmp | } { network wildcard-mask | any | host
{hostname | ip-address} { network wildcard-mask | any | host {hostname | ip-address}
access-list <100-199> {deny | permit} {tcp | udp} { network wildcard-mask | any | host
{hostname | ip-address} [{eq | neq} [port_num | keyword]] { network wildcard-mask| any |
host {hostname | ip-address } [{eq | neq} [port_num | keyword]]
no access-list <100-199>
auto-cost reference-bandwidth value
no auto-cost reference-bandwidth value
auto-summary
no auto-summary
bandwidth <1-10000000>
no bandwidth
boot system {flash | ftp | rcp | rom | tftp} system-filename [ip-address]
no boot system {flash | ftp | rcp | rom | tftp} system-filename [ip-address]
clock rate <1200-2000000>
no clock rate
clock timezone zone hours [minutes]
config-register <0x0000-0xFFFF>
no config-register
crypto key generate rsa
no crypto key generate rsa
default-information originate
default-router address
no default-router
{deny | permit} { any | {ip-address | hostname } | host {ip-address | hostname } }
no {deny | permit} { any | {ip-address | hostname } | host {ip-address | hostname } }
{deny | permit} {icmp | ip} { network wildcard-mask| any | host {ip-address | hostname} {
network wildcard-mask| any | host {ip-address | hostname}
Page 2

CONFIGURE (Router)
{deny | permit} {tcp | udp} { network wildcard-mask | any | host {ip-address | hostname}} [{eq
| neq} port] { network wildcard-mask | any | host {ip-address | hostname}} [{eq | neq} port]
no {deny | permit} {icmp | ip | tcp | udp} { network wildcard-mask | any | host {ip-address |
hostname}} { network wildcard-mask | any | host {ip-address | hostname}}
description LINE
no description
dns-server address
no dns-server
domain-name domain
no domain-name
duplex {auto | full | half}
no duplex
enable password password
no enable password
enable secret password
no enable secret
encapsulation {frame-relay [ietf] | hdlc | ppp}
no encapsulation [frame-relay [ietf] | hdlc | ppp]
end
exit
frame-relay interface-dlci dlci-number [ietf]
no frame-relay interface-dlci dlci-number [ietf]
frame-relay lmi-type {ansi | q933a | cisco}
no frame-relay lmi-type {ansi | q933a | cisco}
frame-relay map ip ip-address dlci-number {[broadcast] | [ietf | cisco]}
no frame-relay map ip ip-address
history size <0-256>
hostname hostname
no hostname
interface interface
no interface interface
ip access-group {<1-199> | name} {in | out}
no ip access-group {<1-199> | name} {in | out}
ip access-list {standard | extended} name
ip address {{ip-address netmask} [secondary] | dhcp}
no ip address {{ip-address netmask} [secondary] | dhcp}
ip authentication key-chain eigrp asn chain-name
no ip authentication key-chain eigrp asn chain-name
ip authentication mode eigrp asn md5
no ip authentication mode eigrp asn md5
Page 3

CONFIGURE (Router)
ip classless
no ip classless
ip default-network ip-address
no ip default-network ip-address
ip dhcp excluded-address low-address [high-address]
no ip dhcp excluded-address low-address [high-address]
ip dhcp pool name
no ip dhcp pool name
ip domain-lookup
no ip domain-lookup
ip domain-name domain-name
no ip domain-name
ip hello-interval eigrp asn timer-value
no ip hello-interval eigrp asn timer-value
ip helper-address address
ip hold-time eigrp asn timer-value
no ip hold-time eigrp asn timer-value
ip host hostname ip-address
no ip host hostname
ip name-server address
ip nat {inside | outside}
no ip nat {inside | outside}
ip nat inside source {list {access-list-number | access-list-name}} {interface interface | pool pool-
name} [overload]
no ip nat inside source {list {access-list-number | access-list-name}} {interface interface |
pool pool-name} [overload]
ip nat inside source static source-local-ip-address inside-global-ip-address
no ip nat inside source static source-local-ip-address inside-global-ip-address
ip nat pool pool-name start-ip end-ip {netmask netmask | prefix-length prefix-length}
no ip nat pool pool-name start-ip end-ip {netmask netmask | prefix-length prefix-length}
no ip nat pool pool-name
ip ospf authentication [message-digest | null]
no ip ospf authentication
ip ospf authentication-key key-value
no ip ospf authentication-key key-value
ip ospf cost interface-cost
no ip ospf cost
ip ospf dead-interval interval-number
no ip ospf dead-interval
ip ospf hello-interval interval-number
Page 4

CONFIGURE (Router)
no ip ospf hello-interval
ip ospf message-digest-key key md5 key-value
no ip ospf message-digest-key key md5 key-value
ip ospf priority [0 - 255]
no ip ospf priority
ip route network network-mask {next-hop| next-hop-interface} [distance] [permanent]
no ip route network network-mask [next-hop] [distance] [permanent]
ip subnet-zero
no ip subnet-zero
ip summary-address eigrp as-number ipv4-prefix ipv4-mask
ipv6 enable
no ipv6 enable
ipv6 ospf cost cost
no ipv6 ospf cost
ipv6 ospf dead-interval seconds
no ipv6 ospf dead-interval
ipv6 ospf hello-interval seconds
no ipv6 ospf hello-interval
ipv6 ospf priority priority
no ipv6 ospf priority
ipv6 address {ipv6-link-local-address link-local | ipv6-prefix/prefix-length [eui-64] | autoconfig}
no ipv6 address {ipv6-link-local-address link-local | ipv6-prefix/prefix-length [eui-64] |
autoconfig}
ipv6 host hostname ipv6-address1 [ipv6-address2...ipv6-address4]
no ipv6 host hostname ipv6-address1 [ipv6-address2...ipv6-address4]
ipv6 rip name enable
no ipv6 rip name enable
ipv6 route destination-prefix/prefix-length {next-hop-address|next-hop-interface next-hop-link-
local-address} [distance]
no ipv6 route destination-prefix/prefix-length {next-hop-address|next-hop-interface next-
hop-link-local-address} [distance]
ipv6 router rip name
no ipv6 router rip name
ipv6 router ospf process-id
no ipv6 router ospf process-id
ipv6 unicast-routing
no ipv6 unicast-routing
keepalive <0-32767>
no keepalive
key <0-2147483647>
Page 5

CONFIGURE (Router)
no key <0-2147483647>
key chain name
no key chain name
key-string keystring
no key-string
lease {days [hours [minutes]]}
no lease
line console <0-0>
line vty <0-4>
login [local]
no login [local]
maximum-paths <1-16>
no maximum-paths <1-16>
network network-number {netmask | prefix-length} [secondary]
no network network-number {netmask | prefix-length} [secondary]
network network wildcard-mask area <0-4294967295>
no network network wildcard-mask area <0-4294967295>
network network [wildcard-mask]
no network network [wildcard-mask]
passive-interface {default | interface-type interface-number}
no passive-interface {default | interface-type interface-number}
password password
no password
ppp authentication chap
no ppp authentication
ntp master
ntp peer {ip-address | ipv6-address}
ntp server {ip-address | ipv6-address}
remark text
router eigrp autonomous-system
no router eigrp autonomous-system
router-id rid
router-id router-id
no router-id router-id
router ospf process id
no router ospf process-id
router rip
no router rip
router-id router-id
send-lifetime hh:mm:ss <1-31> MONTH <1993-2035> infinite
Page 6

CONFIGURE (Router)
send-lifetime hh:mm:ss MONTH <1-31> <1993-2035> infinite
no send-lifetime
no service timestamps
shutdown
no shutdown
speed {auto | speed}
no speed
transport input {ssh | telnet} [ssh | telnet]
no transport input
username username password password
no username username
variance <1-128>
no variance
version <1-2>
no version <1-2>

EXEC (Router)
clear ip dhcp [pool name] binding {* | ip-address}
clear ip dhcp conflict {* | ip-address}
clock set hh:mm:ss date month year
configure
configure terminal
copy running-config startup-config
copy startup-config running-config
copy tftp flash
debug frame-relay lmi
no debug frame-relay lmi
debug ip rip
no debug ip rip
debug ppp authentication
no debug ppp authentication
no debug all
disable
disconnect [WORD]
enable
erase startup-config
exit
ping { ip-address | hostname }
reload
Page 7

EXEC (Router)
resume [session-number]
setup
ssh -l username {ip-address | hostname}
telnet {ip-address | hostname}
terminal history size <0-256>
terminal ip netmask-format bitcount
terminal ip netmask-format decimal
terminal ip netmask-format hexadecimal
terminal monitor
terminal no monitor
traceroute {ip-address | hostname}
undebug all
write erase

SHOW (Router)
show access-lists [access-list-number | access-list-name]
show arp
show cdp
show cdp entry entry-name
show cdp interface
show cdp neighbors
show cdp neighbors detail
show cdp neighbors interface
show cdp traffic
show clock
show controllers [serial 0/0/0]
show flash
show frame-relay lmi [interface interface]
show frame-relay map
show frame-relay pvc [interface interface][dlci]
show history
show hosts
show interfaces interface
show interfaces [interface] [description]
show interfaces description
show ip access-list
show ip access-lists [access-list-number | access-list-name]
show ip arp
show ip dhcp binding
Page 8

SHOW (Router)
show ip dhcp binding [ip-address]
show ip dhcp conflict
show ip dhcp pool
show ip dns view
show ip interface
show ip interface <interface>
show ip interface [interface]
show ip interface brief
show ip nat statistics
show ip nat translations
show ip ospf
show ip ospf database
show ip ospf interface brief
show ip ospf neighbor [neighbor-RID]
show ip protocols
show ip route
show ip route [rip | static | connected | eigrp | ospf]
show ip route network [netmask]
show ip route ospf [process-id]
show ipv6 interface
show ipv6 interface [interface]
show ipv6 interface brief
show ipv6 neighbors
show ipv6 neighbors [interface-type interface-number | ipv6-address | ipv6-hostname]
show ipv6 route {ipv6-hostname | ipv6-address | ipv6-prefix}
show ipv6 route {[prefix/prefix-length] | [ipv6-address]}
show ipv6 route [static | connected | eigrp | ospf]
show ipv6 ospf [process-id] [area-id]
show ipv6 ospf [process-id] [area-id] database
show ipv6 ospf [process-id] [area-id] interface[interface-type interface-number] [brief]
show ipv6 ospf [process-id] [area-id] neighbor
show ipv6 ospf [process-id] [area-id] neighbor neighbor-RID
show ipv6 protocols
show ntp associations
show ntp status
show process
show running-config
show sessions
show startup-config
show users
Page 9

SHOW (Router)
show version
show vlans
Page 10

SWITCH COMMANDS (Configure, Exec, Show)

CONFIGURE (Switch)
bandwidth <1-10000000>
no bandwidth
cdp enable
no cdp enable
cdp run
no cdp run
channel-group <1-6> mode on
no channel-group <1-6> mode on
login
no login
login local
no login local
name vlan-name
no name vlan-name
password password
no password
shutdown
no shutdown
spanning-tree [vlan vlan-number] cost <cost>
no spanning-tree [vlan vlan-number] cost <cost>
spanning-tree vlan vlan-number root {primary | secondary}
spanning-tree portfast
no spanning-tree portfast
spanning-tree vlan vlan-id
no spanning-tree vlan vlan-id
spanning-tree vlan vlan-id priority priority
no spanning-tree vlan vlan-id priority priority
speed {10 | 100 | 1000 | auto}
no speed
switchport access vlan vlan-id
no switchport access vlan
switchport mode {access | trunk | dynamic {auto | desirable}}
no switchport mode
switchport nonegotiate
no switchport nonegotiate
switchport port-security
no switchport port-security
Page 11

CONFIGURE (Switch)
switchport port-security mac-address mac-address
no switchport port-security mac-address mac-address
switchport port-security mac-address sticky
no switchport port-security mac-address sticky
switchport port-security maximum <1-8192>
switchport port-security violation {protect | restrict | shutdown}
switchport trunk allowed vlan {all | add | except | remove} vlan-ids
no switchport trunk allowed vlan
switchport voice vlan vlan-id
no switchport voice vlan
transport input {telnet |ssh} [telnet |ssh]
no transport input
username username password password
no username username
vlan vlan-id
no vlan vlan-id
vtp domain domain-name
vtp mode {off | server | client | transparent}
no vtp mode [off | server | client | transparent]
vtp password password
no vtp password
vtp pruning
no vtp pruning

EXEC (Switch)
configure
configure terminal
copy running-config startup-config
copy startup-config running-config
disable
disconnect
enable
erase startup-config
exit
ping ip-address
reload
resume
ssh -l username {ip-address | hostname}
telnet {ip-address | hostname}
Page 12

EXEC (Switch)
write erase

SHOW (Switch)
show dtp interface
show ip arp
show ip default-gateway
show ipv6 neighbors
show ipv6 neighbors [interface-type interface-number | ipv6-address | ipv6-hostname]
show ipv6 route [static | connected | eigrp | ospf]
show ipv6 route {ipv6-hostname | ipv6-address | ipv6-prefix}
show mac address-table [static | dynamic] [address mac-address | interface interface | vlan
vlan-id] [address mac-address | interface interface | vlan vlan-id] [address mac-address |
interface interface | vlan vlan-id]
show port-security [address | interface interface]
show running-config
show sessions
show spanning-tree
show spanning-tree interface portfast
show spanning-tree [vlan vlan-id] bridge
show spanning-tree vlan vlan-id
show startup-config
show users
show version
show vlan
show vlan brief
show vlan id vlan-id
show vlan name vlan-name
show vlan summary
show vtp status

PC COMMANDS
CONFIGURE (PC)
gateway ip-address
ip address ip-address netmask
ipconfig /release
ipconfig /renew
ipv6 address autoconfig
Page 13

ipv6 address ipv6-prefix/prefix-length
ipv6 gateway ipv6-prefix

SHOW (PC)
arp -a
arp -d *
arp -d ip-address
ipconfig /all
ndp -an
ping ip-address
tracert ip-address