CCENT CLI Commands

Global command that changes the context to console configuration mode

Global command that changes the context to vty configuration mode for the range of vty lines listed in the command

Line (console and vty) configuration mode. Tells IOS to prompt for a password (no username)

Line (console and vty) configuration mode. Lists the password required if the {login} command (with no other parameters) is configured

Global command that changes the context to interface mode–for example, interface Fastethernet 0/1

Interface subcommand that disables or enables the interface, respectively

Global command that sets this switch's hostname, which is also used as the first part of the switch's command prompt

Global command that sets the automatically encrypted enable secret password. The password is used for any user to reach enable mode

Global command that sets the clear-text enable password, which is used only when the enable secret password is not configured

Moves back to the next higher mode in configuration mode

Exits configuration mode and goes back to enable mode from any of the configuration submodes

This is not a command, but rather a two-key combination that together do the same thing as the end command

Enable mode EXEC command to disable all currently enabled debugs

EXEC command that lists statistics about CPU utilization

EXEC command that tells Cisco IOS to send a copy of all syslog messages, including debug messages, to the Telnet or SSH user who issues this command

Enable mode EXEC command that reboots the switch or router

Enable mode EXEC command that copies files from one file location to another. Locations include the startup-config and running-config files, files on TFTP and RPC servers, and flash memory

Enable mode EXEC command that saves the active config, replacing the startup-config file used when the switch initializes

Enable mode EXEC command that merges the startup config file with the currently active config file in the RAM

Lists the contents of the running-config file or the startup-config file, respectively

All three enable mode EXEC commands erase the startup-config file

Enable mode EXEC file that places the user in setup mode, in which Cisco OPS asks the user for input on simple switch configurations

EXEC command that disconnects the user from the CLI session

Moves the user from the user mode to enable (privileged) mode and prompts for an enable password if configured

Moves the user from enable mode to user mode

Enable mode command that moves the user into configuration mode

• line console 0 - for console access
• line vty {1st-vty 2nd-vty} - for telnet or SSH access
• login
• password

• login local - tells IOS to prompt for a un and pw
• username {name} password {pass-value} - defines one of multiple possible un/pw
• crypto key generate rsa - creates and stores the keys required by SSH
• transport input {telnet | ssh} - defines whether Telnet and/or SSH access is allowed

• interface vlan {number} - changes context to VLAN interface mode
• ip address {ip-address subnet-mask} - for static IP configuration
• ip address dhcp - for dynamic IP configuration
• ip default-gateway {address} - not required with dhcp

• interface {type port-number} - for example: {Fastethernet 0/1}
• interface range {type port-range} - for example: {Fastethernet 0/4 - 13}
• shutdown :: no shutdown
• speed {10 | 100 | 1000 | auto}
• duplex {auto | full | half}
• description {text} - engineer generated text

Global command. Sets this switch's hostname, which is also used as the first part of the switch's command prompt

Line config mode. Defines the number of commands held in the history buffer, for later recall, for users of those lines

Interface configuration mode command that statically adds a specific MAC address as an allowed MAC address on the interface

Interface subcommand that tells the switch to learn MAC addresses on the interface and add them to the configuration for the interface as secure MAC addresses

Interface subcommand that sets the maximum number of static secure MAC addresses that can be assigned to a single interface

Interface command that tells the switch what to do if an inappropriate MAC address tries to access the network through a secure switch port

Lists the dynamically learned entries in the switch's address (forwarding) table

Lists any information the switch acquires as a dhcp client. This includes ip address, subnet mask, and default gateway information

Lists the public and shared key created for use with SSH using the crypto key generate rsa global configuration command

Lists one output line per interface, noting the description, operating state, and settings for duplex and speed on each interface

Lists the interface status, the switch's IP address and mask, and much more

Lists an interface's port security configuration settings and security operational status

Lists one summary line of information about each neighbor, or just the neighbor found on a specific interface if an interface was listed

lists one large set (approximately 15 lines) of information, one set for every neighbor

Lists the same information as the "show cdp neighbors detail" command, but only for the named neighbor (case-sensitive)

States whether CDP is enabled globally, and lists the default update and holdtime timers

States whether CDP is enabled on each interface, or a single interface if the interface is listed, and states update and holdtime timers on those interfaces

Lists global statistics for the number of CDP advertisements sent and received

Displays the MAC address table. The security option displays information about the restricted or static settings.

Displays information about security options configured on an interface

Lists one summary line of information about each neighbor, or just the neighbor found on a specific interface if an interface was listed

Lists one large set of information (approx. 15 lines) for every neighbor

Displays the same information as the "show cdp neighbors detail" command, but only for the named neighbor

States whether CDP is enabled globally, and lists the default update and holdtime timers

States whether CDP is enabled on each interface, or a single interface if the interface is listed, and states update and holdtime timers on those interfaces

Displays global statistics for the number of CDP advertisements sent and received

Displays detailed information about interface status, settings, and counters

Displays summary information about interface status and settings, including actual speed and duplex, and whether the interface was autonegotiated