Undocumented Cisco Commands

Sucessfull call: wg1r1#csim start 089150 csim: called number = 089150, loop count = 1 ping count = 0 csim err
csimDisconnected recvd DISC cid(21) csim: loop = 1, failed = 1 csim: call attempted = 1, setup failed = 1, tone failed = 0 Call to a not defined number: wg1r1#csim start 089151 csim: called number = 089151, loop count = 1 ping count = 0 csim err:csim_do_test Error peer not found With show interface switching you can see in detail, which protocols are process, fast or elsewhere switched. Its helpfull for traffic engineering: wg1r1#sh interfaces switching Ethernet0/0 Throttle count 0 Drops RP 0 SPD Flushes Fast 0 SPD Aggress Fast 0 SPD Priority Inputs 5700 Protocol Path Other Process Cache misses Fast Auton/SSE IP Process Cache misses Fast Auton/SSE DEC MOP Process Cache misses Fast Auton/SSE ARP Process Cache misses Fast Auton/SSE CDP Process Cache misses Fast Auton/SSE
SP SSE Drops
0 0 0
Pkts In Chars In Pkts Out Chars Out 8821 983982 7806 468360 0 0 0 0 0 0 0 0 0 32228 3339712 5786 611402 0 92667 8980418 133414 189720295 0 0 0 0 0 0 130 10010 0 0 0 0 0 0 0 0 0 6440 386380 195 11700 0 0 0 0 0 0 0 0 0 0 0 1302 404922 0 0 0 0 0 0 0 0 0
With show ip ospf statistics you get detail informations about OSPF SPF. You can see the reasons for SPF and the calculation times:
London#show ip ospf statistic Area 0: SPF algorithm executed 15 times
SPF calculation time Delta T Intra D-Intra Summ 00:45:02 32 0 0 00:41:00 28 0 0 00:40:50 28 0 0 00:38:13 28 0 0 00:34:18 24 0 0 00:07:37 24 0 0 00:05:18 308 0 4 00:04:05 24 0 0 00:01:31 24 0 4 00:01:21 24 0 0
0 0 0 0 0 0 0 0 0 4
D-Summ Ext 0 0 0 4 4 0 28 4 0 0
D-Ext 0 0 0 0 0 0 0 0 0 0
Total 36 28 28 32 32 36 356 28 36 36
Reason R, R, N, R, R, X R, N,SN,SA,X R, R, R, R, R,
With debug ip ospf monitor you can monitor the OSPF SPF.
London#deb ip ospf monitor OSPF spf monitoring debugging is on 2d04h: OSPF: 192.168.181.2 address 192.168.181.193 on TokenRing0 is dead, state DOWN 2d04h: OSPF: Schedule SPF in area 0 Change in LS ID 0.0.0.0, LSA type R, 2d04h: OSPF: schedule SPF: spf_time 0ms wait_interval 187489656s 2d04h: %SYS-5-CONFIG_I: Configured from console by console 2d04h: OSPF: Start redist-scanning 2d04h: OSPF: Scan for redistribution 2d04h: OSPF: End scanning, Elapsed time 0ms 2d04h: %LINK-5-CHANGED: Interface TokenRing0, changed state to administratively down 2d04h: OSPF: Begin SPF at 0xB2CF100ms, process time 360ms 2d04h: spf_time 0ms, wait_interval 187489656s 2d04h: OSPF: End SPF at 0xB2CF120ms, Total elapsed time 32ms 2d04h: Intra: 24ms, Inter: 0ms, External: 0ms
I found that in 12.0(20) Enterprise that show ip os monitor is not available but show ip os m is. Show ip os events is the undocumented command: tr-Albany-2#sh ip os monitor ^ % Invalid input detected at '^' marker. Rtr-Albany-2# sh ip os m AS System 1 Maxage delete timer due in NEVER Rtr-Albany-2#sh ip os events 1 17844 Timer Exp: if_ack_delayed 0x616DDE08 2 40152 Generic: ospf_redist_callback 0x61735760 3 59800 Timer Exp: if_ack_delayed 0x616DD3C8 4 88664 Timer Exp: if_ack_delayed 0x616DDE08 5 88672 Timer Exp: if_ack_delayed 0x616DD3C8 6 100184 Generic: ospf_redist_callback 0x61735760 7 126576 Timer Exp: if_ack_delayed 0x619621AC 8 160216 Generic: ospf_redist_callback 0x61735760
9 10 .... 90 91 92
164976 189256 534184 534184 534188
Timer Exp: Timer Exp: Timer Exp: Timer Exp: Timer Exp:
if_ack_delayed if_ack_delayed nbr_retrans_lsa nbr_retrans_lsa nbr_retrans_lsa
0x616DDE08 0x616DD3C8 0xC0A8E425 0xC0A8FC13 0xC0A8FC04
Rtr-Albany-2# Many thanks for this command goes to Paul. Disable Password Recovery or ROM Monitor Access: #sh run Building configuration... Current configuration: ! Version 12.1 ! no service password-recovery
!
#rel Proceed with reload? [confirm]
.Feb 9 12:57:24.013: %SYS-5-RELOAD: Reload requested System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1) Copyright (c) 1999 by cisco Systems, Inc. TAC:Home:SW:IOS:Specials for info <Break Key> pressed: PC = 0xfff0bba8, Vector = 0x500, SP = 0x680127c8 C2600 platform with 49152 Kbytes of main memory
PASSWORD RECOVERY FUNCTIONALITY IS DISABLED PC = 0xfff14dfc, Vector = 0x500, SP = 0x80004864 PC = 0xfff14e08, Vector = 0x500, SP = 0x80004864 PC = 0xfff14df8, Vector = 0x500, SP = 0x80004374 program load complete, entry point: 0x80008000, size: 0x8b9c04 ... Cisco Internetwork Operating System Software IOS (tm) C2600 Software (C2600-IS-M), Version 12.1(3a)T4, RELEASE SOFTWARE (fc1)
Start a TCP data server/receiver for TCP performance testing between two Cisco 7500 router: sh ver Cisco Internetwork Operating System Software
IOS (tm) RSP Software (RSP-JSV-M), Version 12.0(7), RELEASE SOFTWARE (fc1) Router#ttcp transmit or receive [receive]: transmit Target IP address: 1.1.1.1 perform tcp half close [n]: send buflen [8192]: send nbuf [2048]: bufalign [16384]: bufoffset [0]: port [5001]: sinkmode [y]: buffering on writes [y]: show tcp information at end [n]: ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 tcp -> 1.1.1.1 %Connect failed: Destination unreachable; gateway or host down Router#ttcp transmit or receive [receive]: perform tcp half close [n]: receive buflen [8192]: bufalign [16384]: bufoffset [0]: port [5001]: sinkmode [y]: rcvwndsize [4128]: delayed ACK [y]: show tcp information at end [n]: ttcp-r: buflen=8192, align=16384/0, port=5001 rcvwndsize=4128, delayedack=yes tcp Many thanks for this command goes to Thomas Moyses. On Cisco 7500 you can connect you to the VIP boards for VIP commands (memory, cpu, etc.) Router#if-con 2 con Entering CONSOLE for VIP2 2 Type "^C^C^C" or "if-quit" to end this session VIP-Slot2> VIP-Slot2>? Exec commands: clear disable disconnect enable exit help lock login logout name-connection
Reset functions Turn off privileged commands Disconnect an existing network connection Turn on privileged commands Exit from the EXEC Description of the interactive help system Lock the terminal Log in as a particular user Exit from the EXEC Name an existing network connection
ping resume set show systat terminal traceroute where
Send echo messages Resume an active network connection Set system parameter (not config) Show running system information Display information about terminal lines Set terminal line parameters Trace route to destination List active connections
VIP-Slot2>en VIP-Slot2#sh ver Cisco Internetwork Operating System Software IOS (tm) VIP Software (SVIP-DW-M), Version 12.0(7), RELEASE SOFTWARE (fc1) Copyright (c) 1986-1999 by cisco Systems, Inc. Compiled Wed 13-Oct-99 22:05 by phanguye Image text-base: 0x60010920, data-base: 0x60224000 ROM: System Bootstrap, Version 11.1(11368) [pgreenfi 17], INTERIM SOFTWARE VIP-Slot2 uptime is 10 minutes System restarted by power-on Running default software cisco VIP2 (R4700) processor (revision 0x02) with 8192K bytes of memory. Processor board ID 00000000 R4700 processor, Implementation 33, Revision 1.0 (512KB Level 2 Cache) 4 Ethernet/IEEE 802.3 interface(s) 1 FastEthernet/IEEE 802.3 interface(s) Configuration register is 0x0 VIP-Slot2#? Exec commands: cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mode copy Copy from one file to another debug Debugging functions (see also 'undebug') delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lock Lock the terminal login Log in as a particular user logout Exit from the EXEC more Display the contents of a file name-connection Name an existing network connection no Disable debugging functions ping Send echo messages pwd Display current working directory reload Halt and perform a cold restart resume Resume an active network connection
send set setup show systat terminal test traceroute undebug where write VIP-Slot2#
Send a message to other tty lines Set system parameter (not config) Run the SETUP command facility Show running system information Display information about terminal lines Set terminal line parameters Test subsystems, memory, and interfaces Trace route to destination Disable debugging functions (see also 'debug') List active connections Write running configuration to memory, network, or terminal
Many thanks for this command goes to Thomas Moyses. Router(config)# no snmp-server sparse-tables Get the complete SNMP MIB table. On controller interface you get without this command e.g. no out bytes counter. With this commands you get every object with SNMP get-next. who is a alias for show user. Router#who Line * 0 con 0 1 aux 0
User
Host(s) idle idle
Idle Location 00:00:00 00:01:19
Get more detail IOS informations: Router#sh region Region Manager: Start End Size(b) Class Media Name
0x02700000 0x60000000 0x80000000 0x80008088 0x8071A2A4 0x8097FD94 0x80A4E0D0
0x02FFFFFF 0x60FFFFFF 0x826FFFFF 0x8071A2A3 0x8097FD93 0x80A4E0CF 0x826FFFFF
9437184 Iomem R/W 16777216 Flash R/O 40894464 Local R/W 7414300 IText R/O 2513648 IData R/W 844604 IBss R/W 30089008 Local R/W
iomem flash main main:text main:data main:bss main:heap
Many thanks for this command goes to Thomas Moyses.
router> ps -c
Will list the process on the router in a "better" way then show process.
Many thanks for this command goes to Thomas Surber.
leaving a telnet session: normally with "exit" or "ex". do this very fast with "q" (quit) Many thanks for this command goes to Peter Schmid.
test aaa group radius toto titi To test radius on one router. CISCO AS5800: This command allow to connect directly to the DSC IOS card from the router Shelf of the AS5800 dsip con slave "Slot # of the DSC" ex: dsip con slave 12 Many thanks for this commands goes to Serge Baikoff.
These commands have been found in a Cisco 3640 router using the version 12.1(6). It's very posible that some of these commands are not avalaible in older versions.
-- show ip ftp-username
Show the name of the user configured with the comand "ip ftp username". --show ip ftp-password
Display the password configured with the command "ip ftp passwword" -- show ip spd I don't know the function of this command, but it looks as folow: sh ip spd Current mode: normal. Queue min/max thresholds: 73/74, Headroom: 100 IP normal queue: 0, priority queue: 0. SPD special drop mode: none
-- show ip ospf timers lsa Show the ospf lsa timers and its output is: sh ip ospf timers lsa
OSPF Router with ID (215.224.32.13) (Process ID
1)
Group size 5, Head 0, Search Index 4, Interval 240 sec Next update due in 00:00:15 Current time 64496 Index 0 Timestamp 64511 Index 1 Timestamp 64768 Index 2 Timestamp 65014 Index 3 Timestamp 65258 Index 4 Timestamp 65509 Failure Head 0, Last 0 LSA group failure logged
-- show ip eigrp sia-statistics I don't know the meaning of this command. When it's typed shows no useful information: sh ip eigrp sia-statistic
Many thanks for this command goes to Atreides. Here's some additional hidden cisco IOS command for debugging ATM on a PA-A3. You need to connect to the VIP first and be in enable mode: (I guess this one is double hidden, first the if-con and then the test atmdx) syntax: test atmdx PAslotnr (0 or 1) 7507#if-con 0 Console or Debug [C]: c Entering CONSOLE for VIP2 R5K 0 Type "^C^C^C" or "if-quit" to end this VIP-Slot0>enable VIP-Slot0#test atmdx 0 Main: 1 - VC test 2 - Rx SAR 3 - Tx SAR q - Quit Select option : 1 Test VC Section: 1 - Show vc 2 - Show vc statistics 3 - Change vc q - Quit Select option : 2 Enter vc number or -1 for all : -1 vcd 1: in_pkts 4, in_drops 0, out_pkts 4, out_drops 0 crc32 0, timeout 0, oversized 0 vcd 2: in_pkts 1, in_drops 0, out_pkts 1, out_drops 0
session
crc32 vcd 3: crc32 vcd 4: crc32
0, timeout 0, oversized in_pkts 28, in_drops 0, 0, timeout 0, oversized in_pkts 1, in_drops 0, 0, timeout 0, oversized
0 out_pkts 21, out_drops 0 0 out_pkts 1, out_drops 0 0
Many thanks for this commands goes to Rogger Schobben. Tested on 12.22T: sh snmp host sh snmp notif test aaa group test aaa group test aaa group test aaa group
policy accounting WORD policy authorization WORD policy authentication WORD priviliges authentication WORD
(same for accounting and auth)
In fact there's a bunch of other stuff you can do behind test aaa group. If you type "a" behind this f.ex., you will also see incomplete command. Many thanks for this commands goes to Filip Waeytens. If you are overrunning the buffers on ports, at a Cat6500 enable (global) mode, we can enable flow control between the two ASICs on the 6348 card (HW MSFC2) using the command set option flowcontrol enable This should help with the out-discards. It may clear it up and it may not. If it doesn't, you will need more to either create an etherchannel to the router or move to a higher bandwidth connection. The command set option flowcontrol enable allows the COIL ASIC to pass traffic to the Pinnacle ASIC for buffering assistance when the COIL ASIC is overloaded with traffic.
Many thanks for this commands goes to Renato Vilela de Magalhes. bgp common-administration bgp dynamic-med-interval bgp process-dpa clear ip eigrp [as] event clear ip eigrp [as] logging config overwrite debug dialer detailed debug ip packet ... dump the packet's contents Outputs a hex & ASCII dump of Clear IP-EIGRP event logs Stop IP-EIGRP event logging
debug isdn code debug sanity if-con if-cons ip forwarding ip forwarding accounting ip forwarding accounting adjacency-update ip forwarding accounting non-recursive ip forwarding accounting per-prefix ip forwarding accounting prefix-length ip forwarding switch ip forwarding traffic-statistics ip forwarding traffic-statistics load-interval ip forwarding traffic-statistics update-rate ip igmp ip igmp immediate-leave ip igmp immediate-leave group-list ip local-pool ip ospf-name-lookup ip slow-converge ip spd ip spd mode ip spd mode aggressive ip spd queue ip spd queue max-threshold attach to a vip console
ip spd queue min-threshold memory scan modem-mgmt csm debug-rbs no service password-recovery service internal set destination-preference show alignment show asp show caller show caller ip show chunk show chunk summary show controller vip show controller vip show fib show fib drop show fib interface show fib interface detail show fib interface loopback show fib interface null show fib interface statistics show fib interface vlan show fib linecard show fib linecard detail show fib not-cef-switched log tech Parity check for 7500 RSPs
show fib not-fib-switched show hardware show idb show interface statis show interface switching show interfaces stat show interface stat show interfaces switching show int switching show ip eigrp event [as] [start# end#] show ip eigrp sia-event [as] [start# end#] show ip eigrp timers [as] show ip ospf bad-checksum show ip ospf delete show ip ospf delete-list show ip ospf ev show ip ospf events show ip ospf maxage show ip ospf maxage show ip ospf statistics show isdn active show isdn history show list show list nonempty show llc IP-EIGRP Events IP-EIGRP SIA event IP-EIGRP Timers
show media show media access-lists show modem mapping show parity show parser show parser links show parser modes show parser unresolved show profile show profile detail show profile terse show refuse-message show region show region address show rsh show rsh-disable-commands show rsp show slip show slot show snmp mib show sum show timers snmp-server priority low test crash test ipc misc makes the router crash
test mbus power ttcp
router bgp ... bgp redistribute-internal Usage: Redistributing BGP into another protocol only redistributes E-BGP routes. Using this command in the BGP configuration will also redistribute I-BGP routes in the other routing-protocol.
Many thanks goes to Sanjeewa Alahakoon for this list of undocumented IOS commands.
aaa accounting delay-start [12.1] [hidden] global configuration command aaa accounting delay-start delays creation of the PPP Network start record until the peer IP address is known. aaa authorization address-authorization-exec [12.1] [hidden] configuration command forces address authorzation for PPP when started from an exec. aaa group server {radius | tacacs+} server-group-name server ip-address-1 [auth-port port-number] [acct-port port-number] server ip-address-2 [auth-port port-number] [acct-port port-number] deadtime minutes pick-method [next | load-balanced | round-robin] [hidden] pick-method server-group configuration command is used to specify an alternate method of selecting servers when one is not responding. As of 12.0(3)T the load-balanced and round-robin alternatives may be specified but may not be implemented. The Load-balanced keyword indicates that the initial host is selected load-balanced. The Round-robin keyword indicates that the initial host is selected in a round-robin method with all servers being retried before starting from the beginnng of the list of servers. The Next keyword indicates that the list of servers is stepped through sequentially with each request always starting with the first server in the list. This last option is the default method of operation. aaa nas port description text [hidden] global configuration command causes the specified text to appear in TACACS+ accounting records with the attribute nas-description and the value of the text specified in the command. This command is useful during debugging allowing one to specify
information about the environment or configuration in which the accounting record was generated. access-list number remark comment and ip access-list extended name remark comment [12.1]To add comments about the access list. This keyword is documented under Bug Id CSCdk14543. atm allow-max-vci interface command, will allow the cisco 7000 use VCI's above 1023.
[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]
[B] bgp common-administration bgp dynamic-med-interval bgp process-dpa boot system rom CONFIG boot module CONFIG bundle-enable command 800-series
[C] call-history-mib retain-timer (value) [global] effects the size of the isdn history table carrier delay value [12.1] Modifies the carrier delay time. A value of 0 disables the carrier delay clear crashdump 1 to cleanup an old crashdump clear ip eigrp [as] event Clear IP-EIGRP event logs clear ip eigrp [as] logging Stop IP-EIGRP event logging clear profile Clears CPU profiling clear startup-config same as erase startup-config) clear vtemplate reset virtual templates clock rate { 1200 | [...]| 2015232 } [hidden] There is an anomaly between what is documented, what is displayed and what is entered for this command. The documentation indicates the command is clock rate and this is what IOS shows as the valid command in configuration mode. However, a configuration display shows the command as clockrate as this is how is is saved in nvram. In addition, older rom monitors do not understand the newer clock rate command which would cause problems. What actually happens here is that clockrate is implemented as a hidden command and is not completed by pressing tab and nor is there any help generated for it.
But both clockrate and clock rate are accepted and there should be no problem in cutting and pasting the configurations. config overwrite copy core ? Does a full core dump, as write core but with more options csim start <number> Emulate a voice call
[D] debug buffer Additional buffer debugging debug buffer failure Buffer Allocation failures debugging debug crypto isakmp detail Crypto ISAKMP internals debugging debug crypto isakmp packet Crypto ISAKMP packet debugging debug dialer detailed debug dialer holdq [11.2(12)P] [undocumented/hidden] gives some help on dialing. debug eigrp neighbor [ sia-timer ] this will print debug information about the operation of the sia timers. Generally not very useful (unless you are testing the timers) debug eigrp transmit [ sia ] the will print debug information about SIA packets being sent. Most of the information found in this debug is part of the event log. debug eigrp sia { fast | reply [addr] | query [addr] | siareply [addr] | siaquery [addr] } This command has been left in to assist testing with creating sia events and will CAUSE sia events. fast sia timer will fire in 1ms on next route to go active query next query from peer will be ignored reply next reply from peer will be ignored siaquery next reply from peer will be ignored siareply next reply from peer will be ignored debug ip ospf monitor Debug command which show opsf database sync debug ip packet ... dump Outputs a hex & ASCII dump of the packet's contents debug ipx private debug isdn code debug isdn q931 l3 [12.0(13)] will show additional information on ISDN, i.e. the corresponding call reference number in all ISDN messages. debug oir Debug online insertion and removal debug parser alias debug parser help debug parser http debug parser mode
debug parser privilege debug sanity debug subsys Debug discrete subsystems dialer mult-map-same-name useful if you have dialup clients using the same chap/pap username dhcp-server import all take all DHCP client info from the "ip address dhcp" client and assume that info for our DHCP server. debug snmp {bag | dll | io | mib { all | by-mib-name } | packets | sysdb | timers} debug x25 switch debug x25 encapsulation
[E] exception-slave dump X.X.X.X CONFIG exception-slave protocol tftp CONFIG exception-slave corefile CONFIG execption memory fragment <amount> CONFIG: Will reload router when no more fragment mem is avail DOCUMENTED: in Version 12.1(2)E
[F]
[G] gdb kernel gdb examine pid gdb debug pid (ciscos comment: gdb commands are for debugging, only useful to cisco engineers who have a symbol table for the IOS image in question.)
[H] hangup alias for "quit"

[I] ip cache-ager Needs service internal
ip cef accounting per-prefix non-recursive prefix-length if-con <n> Attach to a vip console; if-quit (gets out of if-con mode) ip address dhcp On eth[x], for cablemodems? ip forwarding accounting adjacency-update ip forwarding accounting non-recursive ip forwarding accounting per-prefix ip forwarding accounting prefix-length ip forwarding switch ip forwarding traffic-statistics ip forwarding traffic-statistics load-interval ip forwarding traffic-statistics update-rate [no] ip gratuitous-arps This disables unsolicited ARP replies that are useful to signal to a second (redundant) router on the same LAN segment that a remote gateway is present or has changed. ip igmp ip igmp immediate-leave ip igmp immediate-leave group-list ip local-pool Legacy form of ip local pool, for backwards compatability ip ospf interface-retry [x] Retry for ospf process ip ospf-name-lookup ip route profile This configuration command will turn on IP routing table statistics collection. Information like number of changes, number of prefix added etc will be collected. ip slow-converge ip spd ip spd mode ip spd mode aggressive ip spd queue ip spd queue max-threshold ip spd queue min-threshold ip tftp boot-interface CONFIG ip tmstats bin internal | external CONFIG, when ip cef accounting non-recursive is configured isdn network tell router to be the "master" on T1-CCS link using isdn switch-type primary-ni ipx flooding-unthrottled [12.1] global configuratiom command specifies that NLSP flooding should be unthrottled. ipx netbios-socket-input-checks [12.1] global configuratiom command limits the input of non-type 20 netbios bc packets ipx potential-pseudonode [12.1] global configuration command specifies to keep backup route and service data for NLSP potential pseudocode. ipx sap follow-route-path [12.1] An undocumented global configuration command. See Bug Id SCdm12190 for details.
ipx server-split-horizon-on-server-paths [12.1] global configuratiom command specifies that split horizon SAP occurs on server, not route, paths. This command is documented in Bug Id CSCdm12190. ipx update interval {rip | sap} {seconds | passive | changes-only} [12.1] The undocumented passive keyword specifies to listen but does not send normal periodic SAP updates nor flashes/changes updates. Queries will still be replied to. The update interval is set to the same interval as changes-only. The passive keyword is documented under Bug Id CSCdj59918. isdn {n200 | t200 | t203} number [hidden] commands change the value of various layer 2 ISDN timer settings. The number parameter is milliseconds for t200 and t203 and the maximum number of retransmits for the keyword n200. The current value of ISDN timers can be displayed using the show isdn timers EXEC command.The values of the timer settings depend on the switch type and typically are used only for homologation purposes. The typical value for t200 is 1 second, for t203 is 10 seconds and for n200 is 3 retransmits.
[J]
[K]
[L] llc attach [interface] llc close aaaa llc offset aaaa llc open [interface] llc send aaaa logging event {link-status | subif-link-status} The no form of the undocumented logging event link-status interface commmand is used to turn off sending up, down and change messages for an interface to the syslog. This is very useful on live systems since these systems generate so many of these messages that other important messages are often hard to see. This is a companion command to the documented command no snmp trap link-status which prevents sending the associated snmp trap. loopback diag CONFIG loopback dec CONFIG: at dec chip loopback test CONFIG loopback micro-linear CONFIG
loopback motorola CONFIG

[M] memory scan Parity check for 7500 RSPs modem log {cts | dcd | dsr | dtr | ri | rs232 | rts | tst} [12.1] configuration command is used to specify which rs232 log events are to be saved for display by the show modem log command. When performing log analysis, various RS232 events fill the log within seconds rendering it useless for analysis (see Bug Id CSCdk86001). This command helps to filter out unwanted entries in the log. modem-mgmt csm debug-rbs [12.1] turns on debugging for Channelized T1 links in the AS5x00 series, providing info about ABCD bits in phone call supervision. Documented, here. Debug cas replaced this 'broken' command. INTERNAL privileged EXEC command enables robbed bit signaling debugging within CSM. Issuing the command once turns on rbs debugging. Issueing the command a second time turns on special rbs debugging. Issuing the command using the no-debug-rbs keyword turns off all degugging. This command is useful in looking at modem pooling and channelized T1s. To make this command available, the service internal global configuration command must be issued first. multilink bundle-name {authenticated | both | endpoint} [12.1] This undocumented global configuration command selects the method for naming multilink bundles. "authenticated" specifies using the peer's authenticated name, "endpoint" specifies using the peer's endpoint discriminator and "both" specifies using both the peer's authenticated name and endpoint discriminator.
[N] [no] environment-monitor Disable environment monitoring [no] ppp chap ignoreous For router with same hostname [no] service auto-reset On linecards [no] service password-recovery For the daring people, it can be undone but *please* only specify this if you know what you are doing. and since this is undocumented, you probably don't! :-)
[O]
[P] ppp direction {callin | callout | dedicated} [12.1] [hidden] identify the direction of ppp activity. PPP attempts to determine if a call is callin or a callout or a dedicated line. This is how it detects spoofed CHAP challenges. When an async interface is added to a dialer interface, ppp cannot detect the difference between a dedicated line and a callin. So it assumes that it is a callin. Adding the ppp direction dedicated overcomes this. ppp ipcp accept-address [hidden] interface command specifies that IOS is to revert to the previous operation regarding the acceptance of ip addresses from users. When enabled, the peer IP address will be accepted but is still subject to AAA verification, it will have precedence over any local address pool however. In IOS releases after 11.0(11), PPP IPCP negotiation was changed to accepts a remote peer's "Her" proposed address regardless, and the "Her" address is subsequently added to the IP routing table as a host route. With IOS Releases later than 11.0(11) the software checks the "Her" address against the corresponding dialer map and if the address is different than the IP address detailed within the dialer map, a NAK will be sent and the dialer map IP address will be added as a host route in the IP routing table. ppp ipcp ignore-map ppp lcp fast-start [12.1] interface configuration command specifies to ignore the carrier timer and start PPP when an LCP packet arrives. ppp restart-timer msec [hidden] interface configuration command modifies the default value (2 seconds) for the restart timer. The translate command also has a similar keyword, restart. ppp timeout absolute <sec> Determines how long PPP link can be up [default is infinity, configurable as 0] used under virtual-template interfaces. ppp timeout idle <sec> inbound ppp timeout idle <sec> either Determines how long PPP can wait until bringing the link down if there is no traffic. [default is infinity, configurable as 0] used under virtual-template interfaces. profile <start> <stop> <granularity>
[Q]
[R] radius-server attribute 44 on-for-access-req [hiden] global configuration command sends attribute 44 in all access request packets. The command may be present in IOS 11.3(9+)AA (reference BugID CSCdk74429). This command is replaced by the radius-server attribute 44 include-in-access-req command. radius-server attribute 6 on-for-login-auth
[hidden] global configuration command sends attribute 6 in all authentication packets (e.g., access requests). This command may be present in IOS 11.3(9+)T and 12.0(3+)T (reference BugID CSCdk81561). radius-server attribute 6 support-multiple [hidden] global configuration command specifies that IOS is to support multiple Service-Type values per Radius profile in violation of the RFC for Radius. This command was added in IOS 12.1(2.3)T2 and 12.1(3.3)T (reference BugID CSCdr60306). radius-server authorization default framed-protocol ppp [hidden] used to specify the default framed-protocol as PPP when this RADIUS attribute is missing. radius-server authorization permit missing service-type [hidden] global command is used to specify that a RADIUS entry without service-type information is permitted. It is used when RADIUS is being used as a database without regard to service-type. radius-server attribute nas-port extended [hidden?] command is replaced by the radius-server attribute nas-port format b command in some releases of IOS. For this reason it may be hidden in the IOS configuration mode but documented. In these versions of IOS, the command will be accepted but ignored. radius-server challenge-noecho [12.1] global configuration command specifies that data echoing to the screen is disabled during Access-Challenge. radius-server directed-request [restricted] [right-to-left] [hidden] right-to-left keyword, which first appeared in IOS 12/0(7)T, enables right-to-left parsing of the user information (reference Bugid CSCdm77820). radius-server extended-portnames [hidden] global configuration command, which displays expanded interface information in the NAS-Port-Type attribute, has been replaced by the radius-server attribute nas-port extended command. This command configures RADIUS to expand the size of the NAS-Port attribute field to 32 bits. The upper 16 bits of the NAS-Port attribute display the type and number of the controlling interface; the lower 16 bits indicate the interface undergoing authentication. This command first appeared in IOS Release 11.1. It has been hidden in IOS 11.3+ and IOS 12.0+ since the command has been replaced (reference Bugid CSCdj06817). radius-server host {hostname | ip-address} [auth-port port-number] [acct-port port-number] [timeout seconds] [retransmit retries] [key string] [ignore-acct-authenticator] [hidden] ignore-acct-authenticator keyword specifies to ignore accounting authenticator errors and warn only (11.3(+)AA). radius-server ipc-limit done limit [hidden] radius-server retry method round-robin [hidden] global configuration command is used to specify an alternate method of selecting servers when one is not responding. As of 12.0(3)T alternates may not be defined and the round-robin alternative may not be implemented. radius-server secret string [hidden] global configuration command is used to specify the key shared with the RADIUS server. This command is hidden because it has been
replaced with the radius-server key command (reference BugID CSCdi44081). This command first appeared in IOS Release 11.1. radius-server unique-ident value [hidden] global configuration command is used to set high order bits for the accounting identifier. The identifier field is a one octet field included in all RADIUS accounting packets which aids in matching requests and replies.
[S] scheduler max-task-time 200 CONFIG: last val in milliseconds scheduler heapcheck process CONFIG: memory validation, after proc scheduler heapcheck poll CONFIG: memory valid after some poll scheduler run-degraded CONFIG: in a failure mode? service internal CONFIG: additional debugs that are not normally available service slave-coredump CONFIG service log backtrace CONFIG: provides traceback with every logging instance set destination-preference show alignment show asciireg On switches show asp show async bootp No extended data will be sent in BOOTP responses show biga GLOBAL: catalyst 5000 release 5.5(1) show bridge group verbose shows additional information on each port that the bridge group is enabled show caller show chunk show chunk summary show counters [slot/port] Shows all port counters show compress hardware show controller buffer fa# # (note, not the more common "fa#/#) Catalyst 2900XL family 12.0(5.2)XU show controller coronado # Catalyst 2900XL family 12.0(5.2)XU show controller delmar # Catalyst 2900XL family 12.0(5.2)XU show controller frank Catalyst 2900XL family 12.0(5.2)XU show controller razor Catalyst 2900XL family 12.0(5.2)XU show controller switch Catalyst 2900XL family 12.0(5.2)XU, see also ciscosite.
show controller vip <slotno> log show controller vip <slotno> tech show fib drop show fib interface show fib interface detail show fib interface loopback show fib interface null show fib interface statistics show fib interface vlan show fib linecard show fib linecard detail show fib not-cef-switched show fib not-fib-switched show idb show inband GLOBAL: catalyst 5000 release 5.5(1) show interfaces cable <cable card> modem 0 Shows CPES attached to a cable modems. show interface statis show interface switching show interfaces stat show interface <int> stat show interfaces switching show int <int> switching Shows switching path information for the interface show ip cef internal show ip eigrp event [as] [start# end#] IP-EIGRP Events show ip eigrp sia-event [as] [start# end#] IP-EIGRP SIA event show ip eigrp timers [as] IP-EIGRP Timers show ip ospf bad-checksum show ip ospf delete show ip ospf delete-list show ip ospf ev show ip ospf events show ip ospf maxage-list show ip ospf statistics show ip route profile Use this command to view the IP routing table profile. show ipx backup [network] show ipx cache cbus show ipx cache hash show ipx eigrp event [event-number] shows past eigrp events show ipx eigrp sia-event shows past eigrp stuck in actives show ipx private cache-history aaa show ipx urd [0-fffffffe] show isdn {active | history | memory | services | status [dsl | serial number] | timers} active: Displays current call information, including called number, the time until the call is disconnected, AOC charging units used during the call, and whether the AOC information is provided during calls or at end
of calls. history: Displays historic and current call information, including the called number, the time until the call is disconnected, AOC charging time units used during the call, and whether the AOC information is provided during calls or at the end of calls. status serial number: Displays the status of a specific ISDN PRI interface created and configured as a serial interface. show isis timers show isis tree IS-IS link state database AVL tree show isis tree level-2 show isis private show list show list nonempty show llc show mbuf Catalyst 5000, The main issue to observe with this command is whether the switch is being starved for memory. Within the display, "clusters" is the number of buffers that are available for NMP to process incoming packets, which include any broadcast/multicast, management traffic. "clfree" is the number of buffers that are available for the NMP at any given time. If this is zero then this means that NMP has no buffers to process any incoming frames. "lowest clfree" determines the lowest watermark that NMP has hit at any time. If this value is zero but clfree is nonzero, then this means that at one instance NMP ran out of buffers. This can be because of a broadcast of a multicast storm in the management vlan. show media show media access-lists show memory big show modem mapping show parity show parser show parser links show parser modes show parser unresolved show portreg On switches show proc all-events Shows all process events show profile Shows cpu profiling show profile detail Shows cpu profiling show profile terse Shows cpu profiling show refuse-message show region <address> Shows image layout <at give address] show registry <cr> | brief | statistics | registry-name memory management show rsh show rsh-disable-commands show rsp
show slip show smrp private | request |response show snapshot private show snmp chassis show snmp contact show snmp community show snmp location show snmp mib [detailed | dll ] show snmp newcom show snmp view show sum Show current stored image checksum show timers Show timers for timer command in config mode show traffic Shows the current backplane utilization and peak utilization for all three busses show queueing interface [interface] gives queueing information on a per interface basis snmp-server priority {low | normal | high} [hidden] global configuration command can be used to change the priority of SNMP processes. To avoid extensive polling, use the priority should be set to low . All SNMP queries sent to a router are prioritized as either low or medium priority, depending on the version of code run by the route processor. This means that processes with a higher priority than the SNMP process will be serviced before SNMP. So, regardless of SNMP polling intensity, routing processes will generally be processed before SNMP requests because route processes are "high" priority. You can view the priorities of each of the router's processes by doing a show process and looking in the Q column (L == Low, M == Medium, H == High). See http://www.cisco.com/warp/public/490/9.html for documentation. This command has no impact on the priority of the snmp trap process. [no] snmp-server sparse-tables Get the complete SNMP MIB table. On controller interface you get without this command e.g. no out bytes counter. With this commands you get every object with SNMP get-next. [no] sscop quick-poll Suppose to help recover if sscop has problems, global
[T] tclsh [very interesting, you can program with loop control, expressions, etc from the IOS CLI. works on 3640-IS-M, Version 12.1(5)XM, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)) test aaa group {group name} {username} {password} [12.0(5)T] used to test the authentication of a username/password without having to use an extraneous process such as telnet or dialin to initiate it test appletalk [11.2.x] The test appletalk command will enter appletalk test mode. The sub-commands available in this mode are:
. arp interface-type number at-aarp-addr arp-mac-address . eigrp neighbor-states cablestart-cableend . nbp confirm <net>.<node>[:<skt>] <object>:<type>@<zone> . nbp lookup <object>:<type>@<zone> . nbp parmameters max-retrans max-replies interval . nbp poll end test align test cable [atp | berr | bpimcast | brk | dhcp-inq | hop | minimum-poll | nobrk | stack-pro | ucc ] [12.1] atp acceptance test procedure berr Bus Error bpimcast Privacy Multicast test commands brk Break dhcp-inq Send DHCP inquiry hop Initiate frequency hop minimum-poll Toggle 1 second minimum polling nobrk No Break stack-prot Stack Protect ucc Send UCC command test call fallback [12.1] VoIP Fallback test cbus For old AGS+ and 7000. Lets you prod stuff right into cbus memory. *very* dangerous if you don't know what you are doing. test cch323 command performs cch323 tests. test crash Makes the router crash anyway you want :) test crypto [dns-query] [engine] [initiate-session] [pki] [12.1] dns-query DNSSEC query engine Crypto Engine initiate-session Send a CIM connection message pki PKI Client Test test dhcp [allocate xxx.xxx.xxx.xxx] | [release] | [renew] test dsp memory [12.1] Test DSP memory test eigrp as-number {ack | neighbor-states ipx-address ipx-mask} [12.1] as-number id from 1 to 65535. neighbor-states is one of 1local (Neighbor states 1), 1successor (Neighbor states 3), 2local (Neighbor states 1 - 2), 2successor (Neighbor states 3 - 2), 3local (Neighbor states 1 - 0), 4local (Neighbor states 1 - 0 - 2), 5local (Neighbor states 1 - 0 - FC fail - 1), 6local (Neighbor states 1 - 2 - FC fail 3), and delete (Delete a phoney entry in the topology table). The keyword ack toggles EIGRP fast acking. test ifs appn {read | write}{hostname | ip-address} The test ifs appn command reads or writes an appn file. test ifs boot boot-command-line The test ifs boot command parses the bootstrap 'boot' command line. test ifs defaults The test ifs defaults command shows the default boot files. test ifs show hidden The test ifs show hidden command toggles the display of hidden file systems and files.
test ifs slot slot url The test ifs slot command will produce a core dump of slots on crashes. test interfaces test ip local-pool alloc (interface) needs service-internal test ip local-pool alloc user needs service-internal test ip local-pool chown (interface) needs service-internal test ip local-pool free (interface) needs service-internal test ip local-pool pool needs service-internal test ipc misc test ipx capacity x y z Generated IPX RIP and SAPs. Enterprise feature set (11.2+). where x is the network address to begin at. where y is the number of advertisements where z is the interface IPX address that is reachable from test ipx debug [0-ffffffff] [0-ffffffff] [0-ffffffff] test ipx echo router-address [times-sent] [interval] sends 1447 RIP requests for 1 182 random networks remote end sends echo repl back (ipx ping works the same way, but it always requests network 00000000)) test ipx gns [type] [numb-tries] [timeout] [network-to-send-request-on] types: 1 User, 2 User Group, 3 Print Queue, 4 File Server, 5 Job Server, 6 Gateway, 7 Print Server, 8 Archive Queue, 9 Archive Server, a Job Queue, b Administration Object, f Novell TI-RPC, ff Wild, ffff Request Response test ipx netbios find [name] [numb-tries] [timeout] [network-to-send-request-on] sends out un-interpreted packets test ipx query [sending-SAP-type] [type] [server-name] [network] [maskf] [numb-tries] [timeout] sending-sap-types: 2 Response (in), 4 Nearest Server type, C General Name Query, D General Name Response, E Nearest Name Query, F Nearest Name Response test ipx ripreq network sends rip request for network specified test ipx watchdog host-address
sends watchdog (IPX Keep-alive) packet to specified host) test leds test network interfaces. test mbus power [slot] [on off] [no]Shut a line card test memory test pas [bus watcher] [counter] [eeprom] [12.1] bus watcher Bus Watcher counter Cycle Counter eeprom Test eeprom functionality test playout [adaptive] [fixed] [nots] [12.1] adaptive use adaptive playout buffer fixed use fixed playout buffer nots use fixed playout buffer with no timestamps test port <2147483647-0> [12.1] Voice interface slot # test pppoe [stop] [ip] <1-8000> [FastEthernet] [12.1] <1-8000> Number of PPPoE sessions to be opened FastEthernet FastEthernet IEEE 802.3 test rsp cach memd-fastswitch uncached The processor in the router has its own Cache. There were bugs in working with this cache. With this exec-command you can disable the use of this cache. Because this is a exec-command you have to type it again after a reboot. test ssl [open-conn] [open-session] [read] [write] [12.1] open-conn Open connection open-session Open a SSL Session read Read data from a selected socket write Write data to the selected socket test tcp [delay|drop|line|random] needs service-internal test tone locale [12.1] locale 2 letter ISO-3166 country code test translation-rule <1-2147483647> [12.1] <1-2147483647> The unique Tag for this translation table test transmit test spanning-tree [get] [process-stats] [switch-count] [12.1] get get configuration process-stats Spanning tree process / queue statistics switch-count Spanning tree packet counters test modem back-to-back first-slot/port second-slot/port performs modem testing. Test the transmission of L2 frames test vines enter VINES test mode. The Sub-commands available in this mode are: . build [Build tables] . checksum [Checksum test] . data [Set data values used in various places] . end [Exit VINES test mode] . flush [Flush tables]
. generate [generate information] . send [Send a VINES packet] . set [Send a VINES value] . ss [Do Server Service things] . st [Send a vines streettalk packet] test voice [echo] [playout] [port] [tone] [12.1] echo Test echo canceller playout set playout delay configuration port Diagnose voice ports by forcing conditions tone TONE test voip scripts allow to run self-created IVR (Interactive Voice Response) scripts. Cisco included 7 IVR scripts in IOS. Self-created scripts must be specially signed. Issuing this command in priviliged mode before loading self-created script you turn off the signature checking procedure. The only problem is that the command must be issued every each router reboot. Cisco promises to remove totally the signature checking procedure in future IOS releases. test vpdn <cisco Systems on the test command> "The undocumented and soon to be hidden 'test' privileged command is used to test subsystems, memory and interfaces. The features of the test command are box and IOS dependent and are intended for Cisco technical support only." <cisco Systems on the test command> timeout absolute minutes [seconds] [12.1] command is available to enforce timeouts on an interface. trace display Displays the trace buffer when connected with if-con 0 c ttcp Like the unix ttcp, to generate traffic tunnel carry-security CONFIG
[U]
[V] vpdn aaa override-server {hostname | ip-address} [12.1] global configuration command specifies the name or ip address of a designate AAA server to be used for VPDN authorization.
[W] who
Alias for show users write core Does a full core dump, reboots router
[X] x29 inviteclear-time none The router will not send out a x29 invite-to-clear but a x25 clear (disconnect)to the X.25 host. This is necessary, if your X.25 host has problems receiving X.29 invite-to-clear.
[Y]
[Z] [Catalyst 5000 and 6000] enable engineer this prompts for a password, which has the form: passwordHWFWSWenablepass password, enablepass: whatever passwords are on the box HW, FW, SW: first two digits of the hardware, firmware, software versions running on the Supervisor, shown by show version. Example: password and enablepass are cisco, show version says HW: 3.2, FW: 5.3(1), SW: 5.4(4) The enable engineer password would be cisco325354cisco [5000] set trace If you enter set trace ?, nothing appears however if you enter set trace followed by anything else you will see the command options. Be careful with this command, make a backup of the configuration FIRST. You can saturate the processor if it is used inappropriately the Catalyst may reboot constantly or become non responsive upon boot! In this case you have to break in and wipe the config very quickly. [router bgp ASN] neighbor ctalkb-out filter-as 100 d Filter-as is an obsolete subcommand use filter-list instead neighbor <customer-router> translate-update [nlri multicast unicast] Redistribute between BGP and MBGP bgp redistribute-internal Redistribute I-BGP routes in the other routing-protocol [router eigrp X] eigrp event-log-size xxx sets the event log size when used with "show ip eigrp event"
Default is 500 on 12.0.11 [no] eigrp event-logging controls logging of eigrp events on a per bases [no] eigrp event-log-size Set event log sixe to events; 0 deletes event log buffers [no] command resets event log and SIA log size to 500 events [no] eigrp log-event-type [dual] [xmit] [transport] Configure the set of event types to log [no] eigrp kill-everyone Kill all adjacencies on an SIA event or a neighbor down event [no] eigrp log-neighbor-changes log changes in peer status of neighbors [router isis] partition-avoidance [Filesystem] cd system:/vfiles and 'dir' and there are three files available: tmasinfo tmstats_ascii tmstast_binary File format tmstats.ascii: Header - version, address, aggreg, sysuptime, UTC, NTP, duration Per-prefix entry format - prefix type, dest/mask, sysuptime, pkts in, bytes in, pkts out, bytes out Per-tunnel entry format - tunnel type, tunnel id
Obviously, not all undocumented commands work on all platforms or IOS versions. That's why they're undocumented, eh?
bgp maxas-limit [number] within 'router bgp', limits the AS path length to N. See CSCdr54230 sho int [interface] stat give overview of switching breakdown for an interface. packets and bytes handled by the differing switching methods. details the packets and bytes for different protocols, how they were switched and how many were misses Show if there are any memory alignment errors. Show details for DCLs, etc Connect to a VIP2 cards IOS terminal interface which allows you to view/configre the card itself + attached PA's. use "test tcp" traffic generator Get chassis serial number, manufacture
sho int [interface] switch
sho align sho rsp if-con [slot #] c
ttcp show rsp chassis-info
date, etc other things. match community BLAH BLAH2 exact-match <-- AND match match community BLAH BLAH2 <--- OR match

Undocumented Cisco Commands

Caricato da

Informazioni sul documento

Descrizione originale:

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Undocumented Cisco Commands

Caricato da

Copyright:

Formati disponibili

Sucessfull call: wg1r1#csim start 089150 csim: called number = 089150, loop count = 1 ping count = 0 csim err

164976 189256 534184 534184 534188

if_ack_delayed if_ack_delayed nbr_retrans_lsa nbr_retrans_lsa nbr_retrans_lsa

0x616DDE08 0x616DD3C8 0xC0A8E425 0xC0A8FC13 0xC0A8FC04

ping resume set show systat terminal traceroute where

Host(s) idle idle

Idle Location 00:00:00 00:01:19

0x02700000 0x60000000 0x80000000 0x80008088 0x8071A2A4 0x8097FD94 0x80A4E0D0

0x02FFFFFF 0x60FFFFFF 0x826FFFFF 0x8071A2A3 0x8097FD93 0x80A4E0CF 0x826FFFFF

iomem flash main main:text main:data main:bss main:heap

Many thanks for this command goes to Thomas Moyses.

Many thanks for this command goes to Thomas Surber.

OSPF Router with ID (215.224.32.13) (Process ID

crc32 vcd 3: crc32 vcd 4: crc32

0 out_pkts 21, out_drops 0 0 out_pkts 1, out_drops 0 0

(same for accounting and auth)

test mbus power ttcp

[H] hangup alias for "quit"

[I] ip cache-ager Needs service internal

loopback motorola CONFIG

sho int [interface] switch

sho align sho rsp if-con [slot #] c

ttcp show rsp chassis-info

Potrebbero piacerti anche