Cisco IOS in a Nutshell, 2nd Edition by Boney, James -- Read -- Imperial Library of Trantor

Index

Cisco IOS in a Nutshell, 2nd Edition

Preface

Organization What's New in This Edition Conventions Safari Enabled We'd Like to Hear from You Acknowledgments

1. Getting Started

1.1. IOS User Modes 1.2. Command-Line Completion 1.3. Get to Know the Question Mark 1.4. Command-Line Editing Keys 1.5. Pausing Output 1.6. show Commands

2. IOS Images and Configuration Files

2.1. IOS Image Filenames

2.1.1. Platform Identifier 2.1.2. Feature Set 2.1.3. Image Execution Location

2.2. The New Cisco IOS Packaging Model

2.2.1. Example of New Image Name 2.2.2. Status of the Release 2.2.3. Finding the Release on Cisco's Web Site

2.3. Loading Image Files Through the Network

2.3.1. Using TFTP to Download Files 2.3.2. Using RCP to Download Files 2.3.3. Using SCP to Download Files

2.4. Using the IOS Filesystem for Images

2.4.1. Upgrading Flash Memory Using the Filesystem Commands

2.5. The Router's Configuration 2.6. Loading Configuration Files

2.6.1. Loading the running-config 2.6.2. Loading the startup-config 2.6.3. Saving running-config to startup-config 2.6.4. Viewing a Configuration

2.6.4.1. Options for the show config command 2.6.4.2. Stopping the —More— prompt

2.6.5. Erasing a Stored Configuration 2.6.6. Saving a Configuration to a Network Server

3. Basic Router Configuration

3.1. Setting the Router Name 3.2. Setting the System Prompt 3.3. Configuration Comments 3.4. The Enable Password 3.5. Mapping Hostnames to IP Addresses

3.5.1. IP Host Tables 3.5.2. Enabling DNS

3.6. Setting the Router's Time

3.6.1. The Calendar Versus the Clock 3.6.2. Configuring NTP

3.7. Enabling SNMP 3.8. Cisco Discovery Protocol 3.9. System Banners

3.9.1. Creating Banners 3.9.2. Disabling Banners

4. Line Commands

4.1. The line Command

4.1.1. Absolute and Relative Line Numbering

4.2. The Console Port 4.3. Virtual Terminals (VTYs) 4.4. Asynchronous Ports (TTYs) 4.5. The Auxiliary (AUX) Port 4.6. show line 4.7. Reverse Telnet 4.8. Common Configuration Items

4.8.1. Communication Parameters 4.8.2. Transport Type 4.8.3. Session Limits and Timeouts 4.8.4. Special Characters and Key Sequences

5. Interface Commands

5.1. Naming and Numbering Interfaces

5.1.1. Subinterfaces

5.2. Basic Interface Configuration Commands

5.2.1. shutdown 5.2.2. Interface Descriptions 5.2.3. Setting the IP Address and Subnet Mask

5.2.3.1. Secondary IP address(es)

5.2.4. Other Common Interface Commands

5.3. The Loopback Interface 5.4. The Null Interface 5.5. Ethernet, Fast Ethernet, and Gigabit Ethernet Interfaces 5.6. Token Ring Interfaces 5.7. ISDN Interfaces

5.7.1. A Simple ISDN Configuration

5.8. Serial Interfaces

5.8.1. Serial Encapsulation 5.8.2. Serial T1 Connection 5.8.3. T1 Configuration on a 2524 with a CSU/DSU Card 5.8.4. Channelized T1

5.9. Asynchronous Interfaces

5.9.1. Using the group-async Command 5.9.2. Specifying an IP Address Pool 5.9.3. Using BOOTP Configuration Items for Dial-in Connections 5.9.4. Using DHCP for IP Addresses and Dial-in Configuration Items

5.10. Interface show Commands

5.10.1. Clearing the show Command Counters 5.10.2. Listing All Interfaces 5.10.3. Using the show interface Commands

5.10.3.1. show interface accounting 5.10.3.2. show ip interface

6. Networking Technologies

6.1. Frame Relay

6.1.1. Important Frame Relay Terminology 6.1.2. Frame Relay Configuration 6.1.3. Mapping IP Addresses to DLCIs

6.1.3.1. Explicitly mapping DLCIs 6.1.3.2. Configuring a multipoint connection

6.1.4. Frame Relay Traffic Shaping

6.1.4.1. Enabling traffic-shaping on a frame relay link 6.1.4.2. Adaptive shaping

6.1.5. Frame Relay show Commands

6.2. ATM

6.2.1. ATM Terminology 6.2.2. Configuring Permanent Virtual Circuits

6.2.2.1. Configuring an ATM interface with static IP mapping 6.2.2.2. Configuring an ATM interface with dynamic IP mapping

6.2.3. Configuring Switched Virtual Circuits

6.2.3.1. ATM ARP server

6.2.4. Configuring with DXI 6.2.5. ATM show Commands 6.2.6. LAN Emulation (LANE)

6.2.6.1. LANE configuration notes 6.2.6.2. Configuring the LECS 6.2.6.3. Configuring the LES/BUS 6.2.6.4. Configuring the LEC 6.2.6.5. LANE show commands

6.3. DSL

6.3.1. Configuring Our DSL Client Router 6.3.2. Troubleshooting a DSL Connection

6.4. Cable 6.5. VoIP

6.5.1. VoIP Protocols

6.5.1.1. H.323 6.5.1.2. MGCP 6.5.1.3. SIP

6.5.2. VoIP Terminology 6.5.3. Examples

6.5.3.1. FXO Gateway to PSTN 6.5.3.2. H.323 call routing 6.5.3.3. MGCP call routing 6.5.3.4. SIP Configuration for VoIP

7. Access Lists

7.1. How Packets Match a List Entry

7.1.1. Address/Mask Pairs (Wildcards) 7.1.2. Computing a Wildcard for a Given Subnet Mask 7.1.3. Access List Processing 7.1.4. Implicit Deny 7.1.5. Access Lists Are Additive 7.1.6. Outbound Access Lists Are More Efficient Than Inbound

7.2. Types of Access Lists

7.2.1. Extended Access Lists

7.2.1.1. Specifying ports 7.2.1.2. Established connections 7.2.1.3. ICMP protocol entries 7.2.1.4. Applying an access list to an interface or line

7.2.2. Named Access Lists

7.2.2.1. Entering noncontiguous ports

7.2.3. Reflexive Access Lists

7.2.3.1. Creating the outbound reflexive list 7.2.3.2. Creating the inbound reflexive list 7.2.3.3. Applying the inbound and outbound reflexive lists to an interface 7.2.3.4. Setting the reflexive timeout 7.2.3.5. Reflexive list notes

7.3. Specific Topics

7.3.1. Adding Comments to an Access List 7.3.2. Timed Access Lists 7.3.3. Building a Gateway Router

7.3.3.1. IP address spoofing 7.3.3.2. Permitting FTP through an access list 7.3.3.3. Passive FTP 7.3.3.4. The actual access list

7.3.4. Optimizing Your Access Lists 7.3.5. Emulating a Packet Sniffer 7.3.6. Logging Access List Violations 7.3.7. Securely Updating Access Lists 7.3.8. Getting the List to a Router with TFTP, RCP, or SCP

8. IP Routing Topics

8.1. Autonomous System (AS) Numbers 8.2. Interior and Exterior Gateway Protocols 8.3. Distance-Vector and Link-State Routing Protocols

8.3.1. Distance-Vector Protocols 8.3.2. Link-State Routing Protocols 8.3.3. Administrative Distance 8.3.4. Variable-Length Subnet Masks (VLSM) and Classless Routing 8.3.5. Protocol Comparison

8.4. Static Routes

8.4.1. Default Static Routes 8.4.2. A Static Route to the Null Interface 8.4.3. Backup Static Routes

8.5. Split Horizon 8.6. Passive Interfaces

8.6.1. Route Redistribution 8.6.2. Filtering Routes

8.6.2.1. Filtering incoming routes 8.6.2.2. Filtering outgoing routes 8.6.2.3. Filtering updates during redistribution 8.6.2.4. Revisiting the example

8.6.3. Route Maps

8.6.3.1. Enforcing routing policy with route maps 8.6.3.2. Enforcing routing policy with the ip policy command

8.7. Fast Switching and Process Switching

8.7.1. Fast Switching 8.7.2. Process Switching 8.7.3. Useful show Commands

8.7.3.1. show ip route summary 8.7.3.2. clear ip route 8.7.3.3. show ip protocols

9. Interior Routing Protocols

9.1. RIP

9.1.1. Basic RIP Configuration 9.1.2. Enabling RIPv2 on the Network 9.1.3. Redistributing Other Routing Protocols into RIP 9.1.4. RIPv2 Authentication

9.2. IGRP

9.2.1. Basic IGRP Configuration

9.2.1.1. IGRP's metric 9.2.1.2. Packet size 9.2.1.3. Modifying the range of the network 9.2.1.4. IGRP's load balancing

9.2.2. Redistributing Other Protocols into IGRP

9.3. EIGRP

9.3.1. Enabling EIGRP on the Network 9.3.2. EIGRP and Route Summarization

9.3.2.1. Enabling route summarization on a specific interface

9.3.3. EIGRP Authentication 9.3.4. EIGRP Metrics 9.3.5. Tuning EIGRP 9.3.6. EIGRP show Commands

9.3.6.1. show ip eigrp neighbors 9.3.6.2. show ip eigrp topology 9.3.6.3. show ip eigrp traffic

9.3.7. EIGRP Redistribution

9.3.7.1. RIP 9.3.7.2. IGRP

9.3.8. Converting an IGRP Network to EIGRP

9.4. OSPF

9.4.1. OSPF Concepts

9.4.1.1. Areas 9.4.1.2. Router types 9.4.1.3. Link-state advertisements (LSAs) 9.4.1.4. Area types 9.4.1.5. Router ID 9.4.1.6. Designated router (DR)

9.4.2. Enabling OSPF on the Network 9.4.3. Sample OSPF Configurations 9.4.4. Route Summarization in OSPF

9.4.4.1. Inter-area summarization 9.4.4.2. External summarization

9.4.5. Virtual Backbone Links 9.4.6. Interoperability with Other Vendors 9.4.7. Default Routes in OSPF 9.4.8. NSSAs (Not-So-Stubby Areas) 9.4.9. OSPF Configuration Example

9.4.9.1. Putting route summarization to use

9.4.10. Redistributing Other Protocols into OSPF 9.4.11. OSPF show Commands

9.4.11.1. show ip ospf border routers 9.4.11.2. show ip ospf neighbor 9.4.11.3. show ip ospf database 9.4.11.4. show ip ospf interface

9.5. IS-IS

9.5.1. IS-IS Concepts

9.5.1.1. Level 1 and level 2 9.5.1.2. NSAP addressing 9.5.1.3. Enabling an interface for IS-IS

9.5.2. IS-IS configuration example 9.5.3. Show Commands 9.5.4. Authentication 9.5.5. Metric Tuning 9.5.6. Injecting a Default Route 9.5.7. IS-IS Route Leaking

10. Border Gateway Protocol

10.1. Introduction to BGP

10.1.1. How BGP Selects Routes 10.1.2. Basic Configuration Commands

10.1.2.1. The router and network commands 10.1.2.2. The neighbor command 10.1.2.3. Local-AS numbers 10.1.2.4. Synchronization 10.1.2.5. Automatic summary 10.1.2.6. default-originate 10.1.2.7. next-hop-self 10.1.2.8. BGP route dampening 10.1.2.9. iBGP checklist

10.2. A Simple BGP Configuration 10.3. Route Filtering

10.3.1. AS Path Filters 10.3.2. Community Filters 10.3.3. Aggregate Filters

10.4. An Advanced BGP Configuration

10.4.1. Adding a Preference

10.5. Neighbor Authentication 10.6. Peer Groups 10.7. Route Reflectors 10.8. BGP Confederacies 10.9. BGP TTL Security

11. Quality of Service

11.1. Marking

11.1.1. Different Types of ToS

11.1.1.1. IPv4 ToS Byte 11.1.1.2. Differentiated Services Codepoint (DSCP) 11.1.1.3. Assured Forwarding 11.1.1.4. Expedited Forwarding 11.1.1.5. DSCP example

11.2. Older Queuing Methods

11.2.1. FIFO 11.2.2. Priority Queuing

11.2.2.1. Monitoring priority queueing

11.2.3. Custom Queuing

11.2.3.1. Setting the queue size 11.2.3.2. Applying a queue to an interface 11.2.3.3. Assigning packets to queues by protocol type

11.2.4. Weighted Fair Queuing (WFQ)

11.2.4.1. Monitoring WFQ

11.3. Modern IOS QoS Tools

11.3.1. Network-Based Application Recognition (NBAR)

11.3.1.1. NBAR in action 11.3.1.2. NBAR protocol discovery

11.3.2. Modular QoS CLI (MQC)

11.3.2.1. Step One: Defining the class maps 11.3.2.2. Step Two: Defining the QoS policy 11.3.2.3. Step 3: Defining where to apply the service policy

11.3.3. Implementing Class-Based Weighted Fair Queuing with MQC 11.3.4. Low-Latency Queuing (LLQ)

11.4. Congestion Avoidance

11.4.1. Weighted Random Early Detection (WRED)

11.4.1.1. Configuring WRED on an interface 11.4.1.2. Using WRED instead of Tail-drop in CBWFQ

11.5. Traffic Policing

11.5.1. MQC Policing 11.5.2. Committed Access Rate (CAR)

11.5.2.1. Rate-limit example

11.6. Traffic Shaping

11.6.1. Traffic Shaping Example 11.6.2. Frame-Relay Shaping

11.7. AutoQoS

11.7.1. What Does AutoQoS Enable? 11.7.2. AutoQoS Command Usage

11.7.2.1. Command syntax 11.7.2.2. AutoQoS discovery 11.7.2.3. AutoQoS show command

11.8. QoS Device Manager

12. Dial-on-Demand Routing

12.1. Configuring a Simple DDR Connection 12.2. Sample Legacy DDR Configurations

12.2.1. DDR Backup Links

12.2.1.1. Backup interface commands 12.2.1.2. DDR bandwidth on demand with backup interface commands 12.2.1.3. DDR backup with floating static routes

12.2.2. Dialer Maps

12.2.2.1. The most basic form of this command 12.2.2.2. A more complicated use of dialer maps

12.3. Dialer Interfaces (Dialer Profiles)

12.3.1. Rotary Groups 12.3.2. Dialer Pools

12.4. Multilink PPP 12.5. Snapshot DDR

12.5.1. Useful show Commands

12.5.1.1. show dialer 12.5.1.2. show dialer map 12.5.1.3. show isdn active 12.5.1.4. show snapshot

13. Specialized Networking Topics

13.1. Bridging

13.1.1. Concurrent Routing and Bridging (CRB) 13.1.2. Integrated Routing and Bridging (IRB) 13.1.3. Bridging show Commands

13.1.3.1. show bridge 13.1.3.2. show bridge group

13.1.4. DLSw+

13.2. Hot Standby Routing Protocol (HSRP)

13.2.1. Tracking Another Interface 13.2.2. Naming Our HSRP Configuration 13.2.3. Multiple-Group Hot Standby Routing 13.2.4. Load Sharing with Hot Standby 13.2.5. HSRP show Commands

13.3. Network Address Translation (NAT)

13.3.1. Overloading NAT Address Space

13.3.1.1. Mapping incoming ports to different NAT addresses

13.3.2. NAT show Commands 13.3.3. Stateful NAT (SNAT)

13.3.3.1. Configuring SNAT with HSRP 13.3.3.2. Configuring SNAT without HSRP

13.4. Tunnels

13.4.1. show Commands for Tunnels

13.5. Encrypted Tunnels

13.5.1. Tunnel Encryption with DSS and DES

13.5.1.1. Generating keys 13.5.1.2. Configuring encryption on the tunnel

13.5.2. DES Tunnel show Commands

13.5.2.1. show crypto engine connections active 13.5.2.2. show crypto engine configuration

13.5.3. IPSec Tunneling 13.5.4. Dynamic Multipoint VPN

13.5.4.1. Configuring DMVPN

13.5.4.1.1. Configuring an IPSec profile 13.5.4.1.2. Configuring the hub for DMVPN 13.5.4.1.3. Configuring a spoke router for DMVPN 13.5.4.1.4. Verifying DMVPN configuration

13.6. Multicast Routing

13.6.1. IGMP 13.6.2. Reverse Path Forwarding 13.6.3. Dense Mode

13.6.3.1. Configuring multicast for dense mode

13.6.4. Sparse Mode

13.6.4.1. Configuring multicast for sparse mode 13.6.4.2. Auto-RP configuration and sparse-dense mode 13.6.4.3. BSR

13.6.5. Cisco Group Management Protocol (CGMP)

13.7. Multiprotocol Label Switching (MPLS)

13.7.1. MPLS Terminology 13.7.2. How Does It Work? 13.7.3. Configuring MPLS

13.7.3.1. Incrementally deploying MPLS 13.7.3.2. Verifying the MPLS configuration

13.7.4. MPLS VPN

14. Switches and VLANs

14.1. Switch Terminology

14.1.1. Layer-2 and Layer-3 Switching 14.1.2. Learning MAC Addresses 14.1.3. VLAN 14.1.4. Broadcast Domain 14.1.5. Collision Domain 14.1.6. Spanning Tree Protocol

14.1.6.1. Spanning Tree Port States 14.1.6.2. Bridge Protocol Data Units 14.1.6.3. STP selects the root bridge 14.1.6.4. Selecting a root port and a designated port 14.1.6.5. Convergence in STP 14.1.6.6. Speeding up STP convergence 14.1.6.7. show spanning-tree

14.2. IOS on Switches 14.3. Basic Switch Configuration

14.3.1. Configuring the Management Port (VLAN 1) 14.3.2. Simple Switch Configuration 14.3.3. Auto Detection 14.3.4. Sample VLAN Configuration 14.3.5. VLAN Interface Commands

14.4. Trunking

14.4.1. Restricting VLANs on a Trunk 14.4.2. Finishing Our Previous Network 14.4.3. Added Port Security 14.4.4. VLAN Trunking Protocol 14.4.5. VTP Modes 14.4.6. VLAN Database 14.4.7. Configuring VTP

14.4.7.1. Setting the VTP mode 14.4.7.2. Setting the VTP domain 14.4.7.3. Setting the VTP password 14.4.7.4. Creating a VLAN 14.4.7.5. Configuration example

14.4.8. Backing Up the VLAN Database

14.5. Switch Monitor Port for IDS or Sniffers 14.6. Troubleshooting Switches

15. Router Security

15.1. Securing Enable Mode Access

15.1.1. Setting the Enable Password 15.1.2. The More Secure enable secret Command 15.1.3. Privilege Levels for enable access

15.2. Routine Security Measures

15.2.1. Features to Disable 15.2.2. Features to Enable

15.2.2.1. Deny local IP addresses coming from outside 15.2.2.2. Use a warning banner

15.2.3. AutoSecure: Letting the Router Do the Work

15.3. Restricting Access to Your Router

15.3.1. Virtual Terminal Access

15.3.1.1. Protecting VTY with an access list 15.3.1.2. Allowing SSH connections to the router 15.3.1.3. Enabling SSH

15.3.2. Users and Authentication

15.3.2.1. Adding users with the user command 15.3.2.2. Using the AAA framework 15.3.2.3. User management with AAA 15.3.2.4. Restricting dial-in user access with AAA

16. Troubleshooting and Logging

16.1. ping

16.1.1. Ping the Broadcast Address 16.1.2. Extended ping

16.1.2.1. What can we test with the source address?

16.2. trace 16.3. Debugging

16.3.1. Using Debugging in Practice

16.3.1.1. The debug list command

16.4. Logging

16.4.1. Configuring Logging 16.4.2. Severity Levels 16.4.3. Buffering Logging and Debug Output 16.4.4. XML Output of Logging Messages

17. Quick Reference

aaa accounting aaa accounting delay-start aaa accounting gigawords aaa accounting nested aaa accounting resource aaa accounting send stop-record authentication failure aaa accounting session-duration ntp-adjusted aaa accounting suppress null-username aaa accounting update aaa authentication attempts login aaa authentication banner aaa authentication enable default aaa authentication fail-message aaa authentication local -override aaa authentication login aaa authentication password-prompt aaa authentication ppp aaa authentication username-prompt aaa authorization aaa authorization config-commands aaa authorization reverse-access aaa authorization template aaa configuration route aaa group server radius aaa group server tacacs+ aaa new-model absolute-timeout access-class access-enable access-list access-list rate-limit access-template activation-character aggregate-address alias area authentication area default-cost area nssa area-password area range area stub area virtual-link arp (global) arp (interface) arp timeout async-bootp async default ip address async default routing async dynamic address async dynamic routing async mode atm address atm arp-server atm esi-address atm lecs-address atm lecs-address-default atm nsap-address atm pvc atm-vc autobaud autocommand autodetect encapsulation autohangup auto discovery qos auto qos voip auto secure autoselect auto-summary backup bandwidth (interface) bandwidth (policy-map) banner exec banner incoming banner login banner motd bgp always-compare-med bgp bestpath as-path ignore bgp bestpath med-confed bgp bestpath missing-as-worst bgp client-to-client reflection bgp cluster-id bgp confederation identifier bgp confederation peers bgp dampening bgp default local-preference bgp default route-target filter bgp deterministic med bgp fast-external-fallover bgp log-neighbor-changes bgp-policy bridge acquire bridge address bridge cmf bridge crb bridge forward-time bridge-group bridge-group aging-time bridge-group circuit-group bridge-group input-address-list bridge-group input-lsap-list bridge-group input-pattern bridge-group input-type-list bridge-group output-address-list bridge-group output-lsap-list bridge-group output-pattern bridge-group output-type-list bridge-group path-cost bridge-group priority bridge-group spanning-disabled bridge hello-time bridge irb bridge max-age bridge multicast-source bridge priority bridge protocol bridge route busy-message cable helper-address calendar set callback forced-wait cd cdp advertise-v2 cdp enable cdp holdtime cdp run cdp timer channel-group (controller) channel-group (interface) chat-script class (frame-relay) class (MPLS) class (policy-map) class-map clear client-atm-address name clock calendar-valid clock rate clock read-calendar clock set clock summer-time clock timezone clock update-calendar compress config-register configure controller copy crc custom-queue-list databits data-character-bits dce-terminal-timing enable debug default-information default-information originate default-metric default-name delay delete description dialer aaa dialer callback-secure dialer callback-server dialer caller dialer dtr dialer enable-timeout dialer fast-idle dialer-group dialer hold-queue dialer idle-timeout dialer in-band dialer isdn dialer-list dialer load-threshold dialer map dialer map snapshot dialer max-link dialer pool dialer pool-member dialer priority dialer remote-name dialer rotary-group dialer rotor dialer string dialer wait-for-carrier-time dialer watch-disable dialer watch-group dialer watch-list dir disable disconnect disconnect-character disconnect ssh dispatch-character distance distance bgp distance eigrp distribute-list in distribute-list out domain-password downward-compatible-config down-when-looped drop dte-invert-txc early-token-release editing eigrp log-neighbor-changes enable enable last-resort enable password enable secret enable use-tacacs encapsulation (ATM/MPLS) encapsulation (interface) end erase escape-character exception core-file exception dump exception memory exception protocol exception spurious-interrupt exec exec-timeout exit fair-queue (policy-map class) fair-queue (interface) fair-queue aggregate-limit fair-queue individual-limit fair-queue limit fair-queue qos-group fair-queue tos fair-queue weight fddi burst-count fddi c-min fddi cmt-signal-bits fddi duplicate-address-check fddi encapsulate fddi frames-per-token fddi smt-frames fddi tb-min fddi tl-min-time fddi token-rotation-time fddi t-out fddi valid-transmission-time flowcontrol format frame-relay adaptive-shaping frame-relay [ bc | be] frame-relay becn-response-enable frame-relay broadcast-queue frame-relay cir frame-relay class frame-relay custom-queue-list frame-relay de-group frame-relay de-list frame-relay idle-timer frame-relay interface-dlci frame-relay intf-type frame-relay inverse-arp frame-relay ip rtp header-compression frame-relay ip tcp header-compression frame-relay lmi-type frame-relay local-dlci frame-relay map frame-relay map bridge frame-relay map clns frame-relay map ip compress frame-relay map ip rtp header-compression frame-relay map ip tcp header-compression frame-relay mincir frame-relay multicast-dlci frame-relay payload-compress packet-by-packet frame-relay priority-dlci-group frame-relay priority-group frame-relay route frame-relay svc frame-relay switching frame-relay traffic-rate frame-relay traffic-shaping fsck ftp-server enable ftp-server topdir full-duplex full-help group-range half-duplex half-duplex controlled-carrier help history hold-character hold-queue hostname hssi external-loop-request hssi internal-clock hub ignore-dcd interface interface bvi interface dialer interface group-async ip access-group ip access-list ip accounting ip accounting-list ip accounting-threshold ip accounting-transits ip address ip address negotiated ip address-pool ip alias ip as-path access-list ip authentication ip bandwidth -percent eigrp ip bgp-community new-format ip bootp server ip broadcast-address ip cef ip cef traffic-statistics ip cgmp ip classless ip community-list ip default-gateway ip default-network ip dhcp-server ip directed-broadcast ip domain-list ip domain-lookup ip domain-name ip dvmrp accept-filter ip dvmrp auto-summary ip dvmrp default-information ip dvmrp metric ip dvmrp metric-offset ip dvmrp output-report-delay ip dvmrp reject-non-pruners ip dvmrp routehog-notification ip dvmrp route-limit ip dvmrp summary-address ip dvmrp unicast-routing ip forward-protocol ip ftp passive ip ftp password ip ftp source-interface ip ftp username ip hello-interval eigrp ip helper-address ip hold-time eigrp ip host ip http ip identd ip igmp access-group ip igmp explicit-tracking ip igmp helper-address ip igmp join-group ip igmp query-interval ip igmp query-max-response-time ip igmp query-timeout ip igmp static-group ip igmp version ip irdp ip load-sharing ip local policy route-map ip local pool ip mask-reply ip mroute ip mroute-cache ip mtu ip multicast boundary ip multicast cache-headers ip multicast helper-map ip multicast rate-limit ip multicast-routing ip multicast ttl-threshold ip name-server ip nat ip nat inside destination ip nat inside source ip nat outside source ip nat pool ip nat stateful id ip nat translation ip nbar pdlm ip nbar port-map ip nbar protocol-discovery ip netmask-format ip nhrp authentication ip nhrp holdtime ip nhrp interest ip nhrp map ip nhrp map multicast ip nhrp max-send ip nhrp network-id ip nhrp nhs ip nhrp record ip nhrp responder ip nhrp server-only ip nhrp trigger-svc ip nhrp use ip ospf authentication ip ospf authentication-key ip ospf cost ip ospf dead-interval ip ospf demand-circuit ip ospf hello-interval ip ospf message-digest-key ip ospf name-lookup ip ospf network ip ospf priority ip ospf retransmit-interval ip ospf transmit-delay ip pim ip pim accept-rp ip pim message-interval ip pim minimum-vc-rate ip pim multipoint-signalling ip pim nbma-mode ip pim neighbor-filter ip pim query-interval ip pim rp-address ip pim rp-announce-filter ip pim send-rp-announce ip pim send-rp-discovery ip pim vc-count ip pim version ip policy-list ip policy route-map ip proxy-arp ip radius source-interface ip rarp-server ip rcmd rcp-enable ip rcmd remote-host ip rcmd remote-username ip rcmd rsh-enable ip redirects ip rip authentication ip rip receive version ip rip send version ip rip triggered ip rip v2-broadcast ip route ip route-cache ip route-cache policy ip route priority high ip route profile ip router isis ip routing ip rtp compression-connections ip rtp header-compression ip rtp priority ip scp server enable ip source-route ip split-horizon ip ssh ip subnet-zero ip summary-address eigrp ip summary-address rip ip tcp chunk-size ip tcp compression-connections ip tcp header-compression ip tcp mtu-path-discovery ip tcp queuemax ip tcp synwait-time ip tcp window-size ip telnet source-interface ip tftp source-interface ip unnumbered ip unreachables isdn answer1, isdn answer2 isdn autodetect isdn bchan-number-order isdn busy isdn caller isdn call interface isdn calling-number isdn conference-code isdn disconnect interface isdn fast-rollover-delay isdn incoming-voice isdn leased-line bri 128 isdn not-end-to-end isdn nsf-service isdn outgoing-voice isdn overlap-receiving isdn send-alerting isdn sending-complete isdn service isdn spid1 (spid2) isdn switch-type isdn tei isdn tei-negotiation isdn transfer-code isdn twait-disable isdn voice-priority isis advertise-prefix isis authentication key-chain isis authentication mode isis authentication send-only isis circuit-type isis csnp-interval isis hello-interval isis hello-multiplier isis lsp-interval isis metric isis password isis priority isis retransmit-interval isis retransmit-throttle-interval is-type keepalive key key chain key config-key key-string lane auto-config-atm-address lane bus-atm-address lane client lane client-atm-address lane config-atm-address lane config database lane database lane fixed-config-atm-address lane global-lecs-address lane le-arp lane server-atm-address lane server-bus line linecode link-test location logging logging buffered logging buffered xml logging console logging console xml logging count logging facility logging history logging history size logging host logging monitor logging on logging source-interface logging synchronous logging trap login login authentication logout-warning loopback mac-address-table aging-time mac-address-table dynamic mac-address-table secure mac-address-table static map-class dialer map-class frame-relay map-group map-list match access-group match any match as-path match class-map match community-list match cos match destination-address mac match discard-class match dscp match fr-dlci match input-interface match interface match ip address match ip dscp match ip next-hop match ip precedence match ip route-source match ip rtp match length match metric match mpls experimental match mpls-label match not match packet length match precedence match protocol match qos-group match route-type match source-address mac match tag maximum-paths max-reserved-bandwidth media-type member menu menu command menu text menu title metric holddown metric maximum-hops metric weights mkdir modem monitor session more motd-banner mpls atm control-vc mpls atm cos mpls atm disable-headend-vc mpls atm multi-vc mpls atm vpi mpls atm vp-tunnel mpls cos-map mpls ip mpls ip default-route mpls ip encapsulate explicit-null mpls ip ttl-expiration pop mpls label protocol mpls label range mpls mtu mpls prefix-map mpls request-labels for mrinfo mstat mtrace mtu name elan-id name local-seg-id name preempt name server-atm-address neighbor neighbor advertisement-interval neighbor database-filter neighbor default-originate neighbor description neighbor distribute-list neighbor filter-list neighbor maximum-prefix neighbor next-hop-self neighbor password neighbor peer-group neighbor prefix-list neighbor remote-as neighbor route-map neighbor route-reflector-client neighbor send-community neighbor send-label neighbor shutdown neighbor soft-reconfiguration inbound neighbor ttl-security neighbor timers neighbor ttl-security neighbor update-source neighbor version neighbor weight net network network backdoor network weight nrzi-encoding ntp access-group ntp authenticate ntp authentication-key ntp broadcast ntp broadcast client ntp broadcastdelay ntp disable ntp master ntp peer ntp server ntp source ntp trusted-key ntp update-calendar offset-list ospf auto-cost reference-bandwidth ospf log-adj-changes output-delay padding parity passive-interface password peer default ip address peer neighbor-route physical-layer ping police policy-map ppp ppp authentication ppp bridge ip ppp chap ppp compress ppp multilink ppp quality ppp reliable-link ppp use-tacacs priority-group priority-list privilege level (global) privilege level (line) prompt pulse-time pvc qos pre-classify queue-limit queue-list radius-server random-detect random-detect discard-class random-detect discard-class-based random-detect dscp random-detect ecn random-detect exponential-weighting-constant random-detect flow rate-limit redistribute refuse-message reload rename ring-speed rlogin rmdir route-map router rsh rxspeed send service service compress-config service linenumber service-module 56k service-module t1 service-policy (interface) service-policy (policy-map) service timestamps session-limit session-timeout set as-path set atm-clp set automatic-tag set community set cos set default interface set discard-class set dscp set fr-de set interface set ip default next-hop set ip next-hop set ip precedence set ip tos set level set local-preference set metric set metric-type set metric-type internal set mpls-label set origin set ospf router-id set-overload-bit set precedence set qos-group set tag setup set weight shape show shutdown smt-queue-threshold snapshot snmp-server snmp-server chassis-id snmp-server community snmp-server contact snmp-server enable traps snmp-server engine-id snmp-server group snmp-server host snmp-server location snmp-server packetsize snmp-server queue-length snmp-server system-shutdown snmp-server tftp-server-list snmp-server trap-source snmp-server trap-timeout snmp-server user snmp-server view snmp trap link-status source-address spanning-tree backbonefast spanning-tree cost spanning-tree port-priority spanning-tree vlan speed squeeze squelch sscop cc-timer sscop keepalive-timer sscop max-cc sscop poll-timer sscop rcv-window sscop send-window standby authentication standby ip standby preempt standby priority standby timers standby track stopbits summary-address synchronization table-map tacacs-server attempts tacacs-server authenticate tacacs-server directed-request tacacs-server extended tacacs-server host tacacs-server key tacacs-server last-resort tacacs-server notify tacacs-server optional-passwords tacacs-server retransmit tacacs-server timeout tag-switching terminal editing terminal escape-character terminal history terminal length terminal monitor tftp-server timers basic timers bgp timers spf trace, traceroute traffic-shape adaptive traffic-shape fecn-adapt traffic-shape group traffic-shape rate traffic-share transport tunnel checksum tunnel destination tunnel key tunnel mode tunnel sequence-datagrams tunnel source txspeed undebug undelete username vacant-message validate-update-source variance verify version vlan vlan database vtp client vtp domain vtp password vtp server vtp transparent vtp v2-mode vty-async vty-async dynamic-routing vty-async header-compression vty-async keepalive vty-async mtu vty-async ppp authentication vty-async ppp use-tacacs width write

A. Appendix: Network Basics

A.1. IPv4 Subnetting

A.1.1. Classless Inter-Domain Routing

A.1.1.1. CIDR notation

A.1.2. Subnet Math

A.1.2.1. Subnet zero reminder A.1.2.2. Calculating a network address from a host address A.1.2.3. Calculating the broadcast address of a subnet A.1.2.4. Calculating available subnets A.1.2.5. Calculating the number of hosts per subnet

A.1.3. More about Subnets

A.1.3.1. Private address space A.1.3.2. Changing the way the router displays subnet information A.1.3.3. Variable Length Subnet Masks (VLSM)

A.2. OSI Reference Model

A.2.1. Application Layer A.2.2. Presentation Layer A.2.3. Session Layer A.2.4. Transport Layer A.2.5. Network Layer A.2.6. Data Link Layer A.2.7. Physical Layer

A.3. IPv6

A.3.1. IPv6 Notation

A.3.1.1. Shorthand rule one A.3.1.2. Shorthand rule two

A.3.2. Important IPv6 Addresses A.3.3. Enabling IPv6 on a Router A.3.4. Using an IPv6 Address in a URL

18. About the Author Colophon

← Prev
Back
Next →

← Prev
Back
Next →