book

Cisco IOS in a Nutshell, 2nd Edition

Name: Cisco IOS in a Nutshell, 2nd Edition
Author: James Boney
ISBN: 9780596008697

by James Boney

August 2005

Intermediate to advanced

798 pages

31h 12m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Preface
OrganizationWhat’s New in This EditionConventionsSafari EnabledWe’d Like to Hear from YouAcknowledgments
1. Getting Started
1.1. IOS User Modes1.2. Command-Line Completion1.3. Get to Know the Question Mark1.4. Command-Line Editing Keys1.5. Pausing Output1.6. show Commands
2. IOS Images and Configuration Files
2.1. IOS Image Filenames2.1.1. Platform Identifier2.1.2. Feature Set2.1.3. Image Execution Location2.2. The New Cisco IOS Packaging Model2.2.1. Example of New Image Name2.2.2. Status of the Release2.2.3. Finding the Release on Cisco’s Web Site2.3. Loading Image Files Through the Network2.3.1. Using TFTP to Download Files2.3.2. Using RCP to Download Files2.3.3. Using SCP to Download Files2.4. Using the IOS Filesystem for Images2.4.1. Upgrading Flash Memory Using the Filesystem Commands2.5. The Router’s Configuration2.6. Loading Configuration Files2.6.1. Loading the running-config2.6.2. Loading the startup-config2.6.3. Saving running-config to startup-config2.6.4. Viewing a Configuration2.6.4.1. Options for the show config command2.6.4.2. Stopping the —More— prompt2.6.5. Erasing a Stored Configuration2.6.6. Saving a Configuration to a Network Server
3. Basic Router Configuration
3.1. Setting the Router Name3.2. Setting the System Prompt3.3. Configuration Comments3.4. The Enable Password3.5. Mapping Hostnames to IP Addresses3.5.1. IP Host Tables3.5.2. Enabling DNS3.6. Setting the Router’s Time3.6.1. The Calendar Versus the Clock3.6.2. Configuring NTP3.7. Enabling SNMP3.8. Cisco Discovery Protocol3.9. System Banners3.9.1. Creating Banners3.9.2. Disabling Banners
4. Line Commands
4.1. The line Command4.1.1. Absolute and Relative Line Numbering4.2. The Console Port4.3. Virtual Terminals (VTYs)4.4. Asynchronous Ports (TTYs)4.5. The Auxiliary (AUX) Port4.6. show line4.7. Reverse Telnet4.8. Common Configuration Items4.8.1. Communication Parameters4.8.2. Transport Type4.8.3. Session Limits and Timeouts4.8.4. Special Characters and Key Sequences
5. Interface Commands
5.1. Naming and Numbering Interfaces5.1.1. Subinterfaces5.2. Basic Interface Configuration Commands5.2.1. shutdown5.2.2. Interface Descriptions5.2.3. Setting the IP Address and Subnet Mask5.2.3.1. Secondary IP address(es)5.2.4. Other Common Interface Commands5.3. The Loopback Interface5.4. The Null Interface5.5. Ethernet, Fast Ethernet, and Gigabit Ethernet Interfaces5.6. Token Ring Interfaces5.7. ISDN Interfaces5.7.1. A Simple ISDN Configuration5.8. Serial Interfaces5.8.1. Serial Encapsulation5.8.2. Serial T1 Connection5.8.3. T1 Configuration on a 2524 with a CSU/DSU Card5.8.4. Channelized T15.9. Asynchronous Interfaces5.9.1. Using the group-async Command5.9.2. Specifying an IP Address Pool5.9.3. Using BOOTP Configuration Items for Dial-in Connections5.9.4. Using DHCP for IP Addresses and Dial-in Configuration Items5.10. Interface show Commands5.10.1. Clearing the show Command Counters5.10.2. Listing All Interfaces5.10.3. Using the show interface Commands5.10.3.1. show interface accounting5.10.3.2. show ip interface
6. Networking Technologies
6.1. Frame Relay6.1.1. Important Frame Relay Terminology6.1.2. Frame Relay Configuration6.1.3. Mapping IP Addresses to DLCIs6.1.3.1. Explicitly mapping DLCIs6.1.3.2. Configuring a multipoint connection6.1.4. Frame Relay Traffic Shaping6.1.4.1. Enabling traffic-shaping on a frame relay link6.1.4.2. Adaptive shaping6.1.5. Frame Relay show Commands6.2. ATM6.2.1. ATM Terminology6.2.2. Configuring Permanent Virtual Circuits6.2.2.1. Configuring an ATM interface with static IP mapping6.2.2.2. Configuring an ATM interface with dynamic IP mapping6.2.3. Configuring Switched Virtual Circuits6.2.3.1. ATM ARP server6.2.4. Configuring with DXI6.2.5. ATM show Commands6.2.6. LAN Emulation (LANE)6.2.6.1. LANE configuration notes6.2.6.2. Configuring the LECS6.2.6.3. Configuring the LES/BUS6.2.6.4. Configuring the LEC6.2.6.5. LANE show commands6.3. DSL6.3.1. Configuring Our DSL Client Router6.3.2. Troubleshooting a DSL Connection6.4. Cable6.5. VoIP6.5.1. VoIP Protocols6.5.1.1. H.3236.5.1.2. MGCP6.5.1.3. SIP6.5.2. VoIP Terminology6.5.3. Examples6.5.3.1. FXO Gateway to PSTN6.5.3.2. H.323 call routing6.5.3.3. MGCP call routing6.5.3.4. SIP Configuration for VoIP
7. Access Lists
7.1. How Packets Match a List Entry7.1.1. Address/Mask Pairs (Wildcards)7.1.2. Computing a Wildcard for a Given Subnet Mask7.1.3. Access List Processing7.1.4. Implicit Deny7.1.5. Access Lists Are Additive7.1.6. Outbound Access Lists Are More Efficient Than Inbound7.2. Types of Access Lists7.2.1. Extended Access Lists7.2.1.1. Specifying ports7.2.1.2. Established connections7.2.1.3. ICMP protocol entries7.2.1.4. Applying an access list to an interface or line7.2.2. Named Access Lists7.2.2.1. Entering noncontiguous ports7.2.3. Reflexive Access Lists7.2.3.1. Creating the outbound reflexive list7.2.3.2. Creating the inbound reflexive list7.2.3.3. Applying the inbound and outbound reflexive lists to an interface7.2.3.4. Setting the reflexive timeout7.2.3.5. Reflexive list notes7.3. Specific Topics7.3.1. Adding Comments to an Access List7.3.2. Timed Access Lists7.3.3. Building a Gateway Router7.3.3.1. IP address spoofing7.3.3.2. Permitting FTP through an access list7.3.3.3. Passive FTP7.3.3.4. The actual access list7.3.4. Optimizing Your Access Lists7.3.5. Emulating a Packet Sniffer7.3.6. Logging Access List Violations7.3.7. Securely Updating Access Lists7.3.8. Getting the List to a Router with TFTP, RCP, or SCP
8. IP Routing Topics
8.1. Autonomous System (AS) Numbers8.2. Interior and Exterior Gateway Protocols8.3. Distance-Vector and Link-State Routing Protocols8.3.1. Distance-Vector Protocols8.3.2. Link-State Routing Protocols8.3.3. Administrative Distance8.3.4. Variable-Length Subnet Masks (VLSM) and Classless Routing8.3.5. Protocol Comparison8.4. Static Routes8.4.1. Default Static Routes8.4.2. A Static Route to the Null Interface8.4.3. Backup Static Routes8.5. Split Horizon8.6. Passive Interfaces8.6.1. Route Redistribution8.6.2. Filtering Routes8.6.2.1. Filtering incoming routes8.6.2.2. Filtering outgoing routes8.6.2.3. Filtering updates during redistribution8.6.2.4. Revisiting the example8.6.3. Route Maps8.6.3.1. Enforcing routing policy with route maps8.6.3.2. Enforcing routing policy with the ip policy command8.7. Fast Switching and Process Switching8.7.1. Fast Switching8.7.2. Process Switching8.7.3. Useful show Commands8.7.3.1. show ip route summary8.7.3.2. clear ip route8.7.3.3. show ip protocols
9. Interior Routing Protocols
9.1. RIP9.1.1. Basic RIP Configuration9.1.2. Enabling RIPv2 on the Network9.1.3. Redistributing Other Routing Protocols into RIP9.1.4. RIPv2 Authentication9.2. IGRP9.2.1. Basic IGRP Configuration9.2.1.1. IGRP’s metric9.2.1.2. Packet size9.2.1.3. Modifying the range of the network9.2.1.4. IGRP’s load balancing9.2.2. Redistributing Other Protocols into IGRP9.3. EIGRP9.3.1. Enabling EIGRP on the Network9.3.2. EIGRP and Route Summarization9.3.2.1. Enabling route summarization on a specific interface9.3.3. EIGRP Authentication9.3.4. EIGRP Metrics9.3.5. Tuning EIGRP9.3.6. EIGRP show Commands9.3.6.1. show ip eigrp neighbors9.3.6.2. show ip eigrp topology9.3.6.3. show ip eigrp traffic9.3.7. EIGRP Redistribution9.3.7.1. RIP9.3.7.2. IGRP9.3.8. Converting an IGRP Network to EIGRP9.4. OSPF9.4.1. OSPF Concepts9.4.1.1. Areas9.4.1.2. Router types9.4.1.3. Link-state advertisements (LSAs)9.4.1.4. Area types9.4.1.5. Router ID9.4.1.6. Designated router (DR)9.4.2. Enabling OSPF on the Network9.4.3. Sample OSPF Configurations9.4.4. Route Summarization in OSPF9.4.4.1. Inter-area summarization9.4.4.2. External summarization9.4.5. Virtual Backbone Links9.4.6. Interoperability with Other Vendors9.4.7. Default Routes in OSPF9.4.8. NSSAs (Not-So-Stubby Areas)9.4.9. OSPF Configuration Example9.4.9.1. Putting route summarization to use9.4.10. Redistributing Other Protocols into OSPF9.4.11. OSPF show Commands9.4.11.1. show ip ospf border routers9.4.11.2. show ip ospf neighbor9.4.11.3. show ip ospf database9.4.11.4. show ip ospf interface9.5. IS-IS9.5.1. IS-IS Concepts9.5.1.1. Level 1 and level 29.5.1.2. NSAP addressing9.5.1.3. Enabling an interface for IS-IS9.5.2. IS-IS configuration example9.5.3. Show Commands9.5.4. Authentication9.5.5. Metric Tuning9.5.6. Injecting a Default Route9.5.7. IS-IS Route Leaking

10. Border Gateway Protocol
10.1. Introduction to BGP10.1.1. How BGP Selects Routes10.1.2. Basic Configuration Commands10.1.2.1. The router and network commands10.1.2.2. The neighbor command10.1.2.3. Local-AS numbers10.1.2.4. Synchronization10.1.2.5. Automatic summary10.1.2.6. default-originate10.1.2.7. next-hop-self10.1.2.8. BGP route dampening10.1.2.9. iBGP checklist10.2. A Simple BGP Configuration10.3. Route Filtering10.3.1. AS Path Filters10.3.2. Community Filters10.3.3. Aggregate Filters10.4. An Advanced BGP Configuration10.4.1. Adding a Preference10.5. Neighbor Authentication10.6. Peer Groups10.7. Route Reflectors10.8. BGP Confederacies10.9. BGP TTL Security
11. Quality of Service
11.1. Marking11.1.1. Different Types of ToS11.1.1.1. IPv4 ToS Byte11.1.1.2. Differentiated Services Codepoint (DSCP)11.1.1.3. Assured Forwarding11.1.1.4. Expedited Forwarding11.1.1.5. DSCP example11.2. Older Queuing Methods11.2.1. FIFO11.2.2. Priority Queuing11.2.2.1. Monitoring priority queueing11.2.3. Custom Queuing11.2.3.1. Setting the queue size11.2.3.2. Applying a queue to an interface11.2.3.3. Assigning packets to queues by protocol type11.2.4. Weighted Fair Queuing (WFQ)11.2.4.1. Monitoring WFQ11.3. Modern IOS QoS Tools11.3.1. Network-Based Application Recognition (NBAR)11.3.1.1. NBAR in action11.3.1.2. NBAR protocol discovery11.3.2. Modular QoS CLI (MQC)11.3.2.1. Step One: Defining the class maps11.3.2.2. Step Two: Defining the QoS policy11.3.2.3. Step 3: Defining where to apply the service policy11.3.3. Implementing Class-Based Weighted Fair Queuing with MQC11.3.4. Low-Latency Queuing (LLQ)11.4. Congestion Avoidance11.4.1. Weighted Random Early Detection (WRED)11.4.1.1. Configuring WRED on an interface11.4.1.2. Using WRED instead of Tail-drop in CBWFQ11.5. Traffic Policing11.5.1. MQC Policing11.5.2. Committed Access Rate (CAR)11.5.2.1. Rate-limit example11.6. Traffic Shaping11.6.1. Traffic Shaping Example11.6.2. Frame-Relay Shaping11.7. AutoQoS11.7.1. What Does AutoQoS Enable?11.7.2. AutoQoS Command Usage11.7.2.1. Command syntax11.7.2.2. AutoQoS discovery11.7.2.3. AutoQoS show command11.8. QoS Device Manager
12. Dial-on-Demand Routing
12.1. Configuring a Simple DDR Connection12.2. Sample Legacy DDR Configurations12.2.1. DDR Backup Links12.2.1.1. Backup interface commands12.2.1.2. DDR bandwidth on demand with backup interface commands12.2.1.3. DDR backup with floating static routes12.2.2. Dialer Maps12.2.2.1. The most basic form of this command12.2.2.2. A more complicated use of dialer maps12.3. Dialer Interfaces (Dialer Profiles)12.3.1. Rotary Groups12.3.2. Dialer Pools12.4. Multilink PPP12.5. Snapshot DDR12.5.1. Useful show Commands12.5.1.1. show dialer12.5.1.2. show dialer map12.5.1.3. show isdn active12.5.1.4. show snapshot
13. Specialized Networking Topics
13.1. Bridging13.1.1. Concurrent Routing and Bridging (CRB)13.1.2. Integrated Routing and Bridging (IRB)13.1.3. Bridging show Commands13.1.3.1. show bridge13.1.3.2. show bridge group13.1.4. DLSw+13.2. Hot Standby Routing Protocol (HSRP)13.2.1. Tracking Another Interface13.2.2. Naming Our HSRP Configuration13.2.3. Multiple-Group Hot Standby Routing13.2.4. Load Sharing with Hot Standby13.2.5. HSRP show Commands13.3. Network Address Translation (NAT)13.3.1. Overloading NAT Address Space13.3.1.1. Mapping incoming ports to different NAT addresses13.3.2. NAT show Commands13.3.3. Stateful NAT (SNAT)13.3.3.1. Configuring SNAT with HSRP13.3.3.2. Configuring SNAT without HSRP13.4. Tunnels13.4.1. show Commands for Tunnels13.5. Encrypted Tunnels13.5.1. Tunnel Encryption with DSS and DES13.5.1.1. Generating keys13.5.1.2. Configuring encryption on the tunnel13.5.2. DES Tunnel show Commands13.5.2.1. show crypto engine connections active13.5.2.2. show crypto engine configuration13.5.3. IPSec Tunneling13.5.4. Dynamic Multipoint VPN13.5.4.1. Configuring DMVPN13.5.4.1.1. Configuring an IPSec profile13.5.4.1.2. Configuring the hub for DMVPN13.5.4.1.3. Configuring a spoke router for DMVPN13.5.4.1.4. Verifying DMVPN configuration13.6. Multicast Routing13.6.1. IGMP13.6.2. Reverse Path Forwarding13.6.3. Dense Mode13.6.3.1. Configuring multicast for dense mode13.6.4. Sparse Mode13.6.4.1. Configuring multicast for sparse mode13.6.4.2. Auto-RP configuration and sparse-dense mode13.6.4.3. BSR13.6.5. Cisco Group Management Protocol (CGMP)13.7. Multiprotocol Label Switching (MPLS)13.7.1. MPLS Terminology13.7.2. How Does It Work?13.7.3. Configuring MPLS13.7.3.1. Incrementally deploying MPLS13.7.3.2. Verifying the MPLS configuration13.7.4. MPLS VPN
14. Switches and VLANs
14.1. Switch Terminology14.1.1. Layer-2 and Layer-3 Switching14.1.2. Learning MAC Addresses14.1.3. VLAN14.1.4. Broadcast Domain14.1.5. Collision Domain14.1.6. Spanning Tree Protocol14.1.6.1. Spanning Tree Port States14.1.6.2. Bridge Protocol Data Units14.1.6.3. STP selects the root bridge14.1.6.4. Selecting a root port and a designated port14.1.6.5. Convergence in STP14.1.6.6. Speeding up STP convergence14.1.6.7. show spanning-tree14.2. IOS on Switches14.3. Basic Switch Configuration14.3.1. Configuring the Management Port (VLAN 1)14.3.2. Simple Switch Configuration14.3.3. Auto Detection14.3.4. Sample VLAN Configuration14.3.5. VLAN Interface Commands14.4. Trunking14.4.1. Restricting VLANs on a Trunk14.4.2. Finishing Our Previous Network14.4.3. Added Port Security14.4.4. VLAN Trunking Protocol14.4.5. VTP Modes14.4.6. VLAN Database14.4.7. Configuring VTP14.4.7.1. Setting the VTP mode14.4.7.2. Setting the VTP domain14.4.7.3. Setting the VTP password14.4.7.4. Creating a VLAN14.4.7.5. Configuration example14.4.8. Backing Up the VLAN Database14.5. Switch Monitor Port for IDS or Sniffers14.6. Troubleshooting Switches
15. Router Security
15.1. Securing Enable Mode Access15.1.1. Setting the Enable Password15.1.2. The More Secure enable secret Command15.1.3. Privilege Levels for enable access15.2. Routine Security Measures15.2.1. Features to Disable15.2.2. Features to Enable15.2.2.1. Deny local IP addresses coming from outside15.2.2.2. Use a warning banner15.2.3. AutoSecure: Letting the Router Do the Work15.3. Restricting Access to Your Router15.3.1. Virtual Terminal Access15.3.1.1. Protecting VTY with an access list15.3.1.2. Allowing SSH connections to the router15.3.1.3. Enabling SSH15.3.2. Users and Authentication15.3.2.1. Adding users with the user command15.3.2.2. Using the AAA framework15.3.2.3. User management with AAA15.3.2.4. Restricting dial-in user access with AAA
16. Troubleshooting and Logging
16.1. ping16.1.1. Ping the Broadcast Address16.1.2. Extended ping16.1.2.1. What can we test with the source address?16.2. trace16.3. Debugging16.3.1. Using Debugging in Practice16.3.1.1. The debug list command16.4. Logging16.4.1. Configuring Logging16.4.2. Severity Levels16.4.3. Buffering Logging and Debug Output16.4.4. XML Output of Logging Messages
17. Quick Reference
aaa accounting — global
aaa accounting delay-start — global
aaa accounting gigawords — global
aaa accounting nested — global
aaa accounting resource — global
aaa accounting send stop-record authentication failure — global
aaa accounting session-duration ntp-adjusted — global
aaa accounting suppress null-username — global
aaa accounting update — global
aaa authentication attempts login — global
aaa authentication banner — global
aaa authentication enable default — global
aaa authentication fail-message — global
aaa authentication local-override — global
aaa authentication login — global
aaa authentication password-prompt — global
aaa authentication ppp — global
aaa authentication username-prompt — global
aaa authorization — global
aaa authorization config-commands — global
aaa authorization reverse-access — global
aaa authorization template — global
aaa configuration route — global
aaa group server radius — global
aaa group server tacacs+ — global
aaa new-model — global
absolute-timeout — line
access-class — line
access-enable — command
access-list — global
access-list rate-limit — global
access-template — command
activation-character — line
aggregate-address — router, BGP
alias — global
area authentication — router, OSPF
area default-cost — router, OSPF
area nssa — router, OSPF
area-password — router, IS-IS
area range — router, OSPF
area stub — router, OSPF
area virtual-link — router, OSPF
arp (global) — global
arp (interface) — interface
arp timeout — interface
async-bootp — global
async default ip address — interface
async default routing — interface
async dynamic address — interface
async dynamic routing — interface
async mode — interface
atm address — global
atm arp-server — interface
atm esi-address — interface
atm lecs-address — interface
atm lecs-address-default — global
atm nsap-address — interface
atm pvc — interface
atm-vc — map-list
autobaud — line
autocommand — line
autodetect encapsulation — interface
autohangup — line
auto discovery qos — QoS
auto qos voip — interface
auto secure — EXEC command
autoselect — line
auto-summary — router
backup — interface
bandwidth (interface) — interface
bandwidth (policy-map) — policy-map
banner exec — global
banner incoming — global
banner login — global
banner motd — global
bgp always-compare-med — router, BGP
bgp bestpath as-path ignore — router, BGP
bgp bestpath med-confed — router, BGP
bgp bestpath missing-as-worst — router, BGP
bgp client-to-client reflection — router, BGP
bgp cluster-id — router, BGP
bgp confederation identifier — router, BGP
bgp confederation peers — router, BGP
bgp dampening — global
bgp default local-preference — router, BGP
bgp default route-target filter — router, BGP
bgp deterministic med — router, BGP
bgp fast-external-fallover — router, BGP
bgp log-neighbor-changes — router, BGP
bgp-policy — interface
bridge acquire — global
bridge address — global
bridge cmf — global
bridge crb — global
bridge forward-time — global
bridge-group — interface
bridge-group aging-time — global
bridge-group circuit-group — interface
bridge-group input-address-list — interface
bridge-group input-lsap-list — interface
bridge-group input-pattern — interface
bridge-group input-type-list — interface
bridge-group output-address-list — interface
bridge-group output-lsap-list — interface
bridge-group output-pattern — interface
bridge-group output-type-list — interface
bridge-group path-cost — interface
bridge-group priority — interface
bridge-group spanning-disabled — interface
bridge hello-time — global
bridge irb — global
bridge max-age — global
bridge multicast-source — global
bridge priority — global
bridge protocol — global
bridge route — global
busy-message — global
cable helper-address — interface
calendar set — command
callback forced-wait — global
cd — command
cdp advertise-v2 — global
cdp enable — interface
cdp holdtime — global
cdp run — global
cdp timer — global
channel-group (controller) — controller
channel-group (interface) — interface
chat-script — global
class (frame-relay) — frame-relay
class (MPLS) — CoS map, MPLS
class (policy-map) — policy-map
class-map — global
clear — command
client-atm-address name — LANE database
clock calendar-valid — global
clock rate — interface
clock read-calendar — command
clock set — command
clock summer-time — global
clock timezone — global
clock update-calendar — command
compress — interface
config-register — global
configure — command
controller — global
copy — command
crc — interface
custom-queue-list — interface
databits — line
data-character-bits — line
dce-terminal-timing enable — interface
debug — global
default-information — router, EIGRP, IGRP
default-information originate — router, BGP, OSPF
default-metric — router
default-name — LANE database
delay — interface
delete — command
description — interface
dialer aaa — interface
dialer callback-secure — interface
dialer callback-server — interface
dialer caller — interface
dialer dtr — interface
dialer enable-timeout — interface
dialer fast-idle — interface, map-class
dialer-group — interface
dialer hold-queue — interface
dialer idle-timeout — interface, map-class
dialer in-band — interface
dialer isdn — map-class, dialer
dialer-list — global
dialer load-threshold — interface
dialer map — interface
dialer map snapshot — interface
dialer max-link — interface
dialer pool — interface
dialer pool-member — interface
dialer priority — interface
dialer remote-name — interface
dialer rotary-group — interface
dialer rotor — interface
dialer string — interface
dialer wait-for-carrier-time — interface, map-class
dialer watch-disable — interface
dialer watch-group — interface
dialer watch-list — global
dir — command
disable — command
disconnect — command
disconnect-character — line
disconnect ssh — command
dispatch-character — line
distance — router
distance bgp — router, BGP
distance eigrp — router, EIGRP
distribute-list in — router
distribute-list out — router
domain-password — router, IS-IS
downward-compatible-config — global
down-when-looped — interface
drop — policy-map
dte-invert-txc — interface
early-token-release — interface
editing — line
eigrp log-neighbor-changes — router, EIGRP
enable — command
enable last-resort — global
enable password — global
enable secret — global
enable use-tacacs — global
encapsulation (ATM/MPLS) — ATM/MPLS
encapsulation (interface) — interface
end — any configuration mode
erase — command
escape-character — line
exception core-file — global
exception dump — global
exception memory — global
exception protocol — global
exception spurious-interrupt — global
exec — line
exec-timeout — line
exit — command
fair-queue (policy-map class) — policy-map
fair-queue (interface) — interface
fair-queue aggregate-limit — interface
fair-queue individual-limit — interface
fair-queue limit — interface
fair-queue qos-group — interface
fair-queue tos — interface
fair-queue weight — interface
fddi burst-count — interface
fddi c-min — interface
fddi cmt-signal-bits — interface
fddi duplicate-address-check — interface
fddi encapsulate — interface
fddi frames-per-token — interface
fddi smt-frames — interface
fddi tb-min — interface
fddi tl-min-time — interface
fddi token-rotation-time — interface
fddi t-out — interface
fddi valid-transmission-time — interface
flowcontrol — line
format — command
frame-relay adaptive-shaping — map-class
frame-relay [ bc | be] — map-class
frame-relay becn-response-enable — map-class
frame-relay broadcast-queue — interface
frame-relay cir — map-class
frame-relay class — interface
frame-relay custom-queue-list — map-class
frame-relay de-group — interface
frame-relay de-list — global
frame-relay idle-timer — map-class
frame-relay interface-dlci — interface
frame-relay intf-type — interface
frame-relay inverse-arp — interface
frame-relay ip rtp header-compression — interface
frame-relay ip tcp header-compression — interface
frame-relay lmi-type — interface
frame-relay local-dlci — interface
frame-relay map — interface
frame-relay map bridge — interface
frame-relay map clns — interface
frame-relay map ip compress — interface
frame-relay map ip rtp header-compression — interface
frame-relay map ip tcp header-compression — interface
frame-relay mincir — interface
frame-relay multicast-dlci — interface
frame-relay payload-compress packet-by-packet — interface
frame-relay priority-dlci-group — interface
frame-relay priority-group — interface
frame-relay route — interface
frame-relay svc — interface
frame-relay switching — global
frame-relay traffic-rate — map-class
frame-relay traffic-shaping — interface
fsck — command
ftp-server enable — global
ftp-server topdir — global
full-duplex — interface
full-help — line configuration
group-range — interface
half-duplex — interface
half-duplex controlled-carrier — interface
help — command
history — global
hold-character — line
hold-queue — interface
hostname — global
hssi external-loop-request — interface
hssi internal-clock — interface
hub — global
ignore-dcd — interface
interface — global
interface bvi — global
interface dialer — global
interface group-async — global
ip access-group — interface
ip access-list — global
ip accounting — interface
ip accounting-list — global
ip accounting-threshold — global
ip accounting-transits — global
ip address — interface
ip address negotiated — interface
ip address-pool — global
ip alias — global
ip as-path access-list — global
ip authentication — interface
ip bandwidth-percent eigrp — interface, EIGRP
ip bgp-community new-format — global
ip bootp server — global
ip broadcast-address — interface
ip cef — global
ip cef traffic-statistics — global
ip cgmp — interface
ip classless — global
ip community-list — global
ip default-gateway — global
ip default-network — global
ip dhcp-server — global
ip directed-broadcast — interface
ip domain-list — global
ip domain-lookup — global
ip domain-name — global
ip dvmrp accept-filter — interface
ip dvmrp auto-summary — interface
ip dvmrp default-information — interface
ip dvmrp metric — interface
ip dvmrp metric-offset — interface
ip dvmrp output-report-delay — interface
ip dvmrp reject-non-pruners — interface
ip dvmrp routehog-notification — global
ip dvmrp route-limit — global
ip dvmrp summary-address — interface
ip dvmrp unicast-routing — interface
ip forward-protocol — global
ip ftp passive — global
ip ftp password — global
ip ftp source-interface — global
ip ftp username — global
ip hello-interval eigrp — interface
ip helper-address — interface
ip hold-time eigrp — interface
ip host — global
ip http — global
ip identd — global
ip igmp access-group — interface
ip igmp explicit-tracking — interface
ip igmp helper-address — interface
ip igmp join-group — interface
ip igmp query-interval — interface
ip igmp query-max-response-time — interface
ip igmp query-timeout — interface
ip igmp static-group — interface
ip igmp version — interface
ip irdp — interface
ip load-sharing — interface
ip local policy route-map — global
ip local pool — global
ip mask-reply — interface
ip mroute — global
ip mroute-cache — interface
ip mtu — interface
ip multicast boundary — interface
ip multicast cache-headers — global
ip multicast helper-map — interface
ip multicast rate-limit — interface
ip multicast-routing — global
ip multicast ttl-threshold — interface
ip name-server — global
ip nat — interface
ip nat inside destination — global
ip nat inside source — global
ip nat outside source — global
ip nat pool — global
ip nat stateful id — global
ip nat translation — global
ip nbar pdlm — global
ip nbar port-map — global
ip nbar protocol-discovery — interface
ip netmask-format — line
ip nhrp authentication — interface
ip nhrp holdtime — interface
ip nhrp interest — interface
ip nhrp map — interface
ip nhrp map multicast — interface
ip nhrp max-send — interface
ip nhrp network-id — interface
ip nhrp nhs — interface
ip nhrp record — interface
ip nhrp responder — interface
ip nhrp server-only — interface
ip nhrp trigger-svc — interface
ip nhrp use — interface
ip ospf authentication — interface
ip ospf authentication-key — interface
ip ospf cost — interface
ip ospf dead-interval — interface
ip ospf demand-circuit — interface
ip ospf hello-interval — interface
ip ospf message-digest-key — interface
ip ospf name-lookup — global
ip ospf network — interface
ip ospf priority — interface
ip ospf retransmit-interval — interface
ip ospf transmit-delay — interface
ip pim — interface
ip pim accept-rp — global
ip pim message-interval — global
ip pim minimum-vc-rate — interface
ip pim multipoint-signalling — interface
ip pim nbma-mode — interface
ip pim neighbor-filter — interface
ip pim query-interval — interface
ip pim rp-address — global
ip pim rp-announce-filter — global
ip pim send-rp-announce — global
ip pim send-rp-discovery — global
ip pim vc-count — interface
ip pim version — interface
ip policy-list — policy map mode
ip policy route-map — interface
ip proxy-arp — interface
ip radius source-interface — global
ip rarp-server — interface
ip rcmd rcp-enable — global
ip rcmd remote-host — global
ip rcmd remote-username — global
ip rcmd rsh-enable — global
ip redirects — interface
ip rip authentication — interface
ip rip receive version — interface
ip rip send version — interface
ip rip triggered — interface
ip rip v2-broadcast — interface
ip route — global
ip route-cache — interface
ip route-cache policy — interface
ip route priority high — router
ip route profile — global
ip router isis — interface
ip routing — global
ip rtp compression-connections — interface
ip rtp header-compression — interface
ip rtp priority — interface
ip scp server enable — global
ip source-route — global
ip split-horizon — interface
ip ssh — global
ip subnet-zero — global
ip summary-address eigrp — interface
ip summary-address rip — interface
ip tcp chunk-size — global
ip tcp compression-connections — interface
ip tcp header-compression — interface
ip tcp mtu-path-discovery — interface
ip tcp queuemax — global
ip tcp synwait-time — global
ip tcp window-size — global
ip telnet source-interface — global
ip tftp source-interface — global
ip unnumbered — interface
ip unreachables — interface
isdn answer1, isdn answer2 — interface
isdn autodetect — interface
isdn bchan-number-order — interface
isdn busy — interface
isdn caller — interface
isdn call interface — command
isdn calling-number — interface
isdn conference-code — interface
isdn disconnect interface — command
isdn fast-rollover-delay — interface
isdn incoming-voice — interface
isdn leased-line bri 128 — global
isdn not-end-to-end — interface
isdn nsf-service — interface
isdn outgoing-voice — interface
isdn overlap-receiving — interface
isdn send-alerting — interface
isdn sending-complete — interface
isdn service — interface
isdn spid1 (spid2) — interface
isdn switch-type — global
isdn tei — global
isdn tei-negotiation — global, interface
isdn transfer-code — interface
isdn twait-disable — interface
isdn voice-priority — interface
isis advertise-prefix — interface
isis authentication key-chain — interface
isis authentication mode — interface
isis authentication send-only — interface
isis circuit-type — interface
isis csnp-interval — interface
isis hello-interval — interface
isis hello-multiplier — interface
isis lsp-interval — interface
isis metric — interface
isis password — interface
isis priority — interface
isis retransmit-interval — interface
isis retransmit-throttle-interval — interface
is-type — router
keepalive — interface
key — key chain configuration mode
key chain — global
key config-key — global
key-string — key chain configuration mode
lane auto-config-atm-address — interface
lane bus-atm-address — interface
lane client — interface
lane client-atm-address — interface
lane config-atm-address — interface
lane config database — interface (major only; no subinterface)
lane database — global
lane fixed-config-atm-address — interface
lane global-lecs-address — interface
lane le-arp — interface
lane server-atm-address — interface
lane server-bus — interface
line — global
linecode — controller
link-test — interface (hub)
location — line
logging — global
logging buffered — global
logging buffered xml — global
logging console — global
logging console xml — global
logging count — global
logging facility — global
logging history — global
logging history size — global
logging host — global
logging monitor — global
logging on — global
logging source-interface — global
logging synchronous — line
logging trap — global
login — line
login authentication — line
logout-warning — line
loopback — interface
mac-address-table aging-time — global
mac-address-table dynamic — global
mac-address-table secure — global
mac-address-table static — global
map-class dialer — global
map-class frame-relay — global
map-group — interface
map-list — global
match access-group — class-map
match any — class-map
match as-path — route-map
match class-map — class-map
match community-list — route-map
match cos — class-map
match destination-address mac — class-map
match discard-class — class-map
match dscp — class-map
match fr-dlci — class-map
match input-interface — class-map
match interface — route-map
match ip address — route-map
match ip dscp — class-map
match ip next-hop — route-map
match ip precedence — class-map
match ip route-source — route-map
match ip rtp — class-map
match length — route-map
match metric — route-map
match mpls experimental — class-map
match mpls-label — route-map
match not — class-map
match packet length — class-map
match precedence — class-map
match protocol — class-map
match qos-group — class-map
match route-type — route-map
match source-address mac — class-map
match tag — route-map
maximum-paths — router
max-reserved-bandwidth — interface
media-type — interface
member — interface
menu — global
menu command — global
menu text — global
menu title — global
metric holddown — router, IGRP
metric maximum-hops — router, IGRP, EIGRP
metric weights — router
mkdir — command
modem
monitor session — global
more — EXEC
motd-banner — line
mpls atm control-vc — interface
mpls atm cos — global
mpls atm disable-headend-vc — global
mpls atm multi-vc — ATM subinterface
mpls atm vpi — interface
mpls atm vp-tunnel — interface
mpls cos-map — global
mpls ip — interface, global
mpls ip default-route — global
mpls ip encapsulate explicit-null — interface
mpls ip ttl-expiration pop — global
mpls label protocol — global, interface
mpls label range — global
mpls mtu — interface
mpls prefix-map — interface
mpls request-labels for — global
mrinfo — command
mstat — command
mtrace — command
mtu — interface
name elan-id — LANE database configuration (ATM)
name local-seg-id — LANE database
name preempt — LANE database configuration (ATM)
name server-atm-address — LANE database
neighbor — router
neighbor advertisement-interval — router, BGP
neighbor database-filter — router, OSPF
neighbor default-originate — router, BGP
neighbor description — router, BGP
neighbor distribute-list — router, BGP
neighbor filter-list — router, BGP
neighbor maximum-prefix — router, BGP
neighbor next-hop-self — router, BGP
neighbor password — router, BGP
neighbor peer-group — router, BGP
neighbor prefix-list — router, BGP
neighbor remote-as — router, BGP
neighbor route-map — router, BGP
neighbor route-reflector-client — router, BGP
neighbor send-community — router, BGP
neighbor send-label — router, BGP
neighbor shutdown — router, BGP
neighbor soft-reconfiguration inbound — router, BGP
neighbor ttl-security — · BGP
neighbor timers — router, BGP
neighbor ttl-security — BGP
neighbor update-source — router, BGP
neighbor version — router, BGP
neighbor weight — router, BGP
net — router, IS-IS
network — router
network backdoor — router, BGP
network weight — router, BGP
nrzi-encoding — interface
ntp access-group — global
ntp authenticate — global
ntp authentication-key — global
ntp broadcast — interface
ntp broadcast client — interface
ntp broadcastdelay — global
ntp disable — interface
ntp master — global
ntp peer — global
ntp server — global
ntp source — global
ntp trusted-key — global
ntp update-calendar — global
offset-list — router
ospf auto-cost reference-bandwidth — router
ospf log-adj-changes — router
output-delay — router
padding — line
parity — line
passive-interface — router
password — line
peer default ip address — interface
peer neighbor-route — interface
physical-layer — interface
ping — command
police — policy-map
policy-map — global
ppp — command
ppp authentication — interface
ppp bridge ip — interface
ppp chap — interface
ppp compress — interface
ppp multilink — interface
ppp quality — interface
ppp reliable-link — interface
ppp use-tacacs — interface
priority-group — interface
priority-list — global
privilege level (global) — global
privilege level (line) — line
prompt — global
pulse-time — interface
pvc — interface
qos pre-classify — interface
queue-limit — policy-map class
queue-list — global
radius-server — global
random-detect — interface
random-detect discard-class — policy-map
random-detect discard-class-based — policy-map
random-detect dscp — policy-map
random-detect ecn — policy-map
random-detect exponential-weighting-constant — interface
random-detect flow — interface
rate-limit — interface
redistribute — router
refuse-message — line
reload — command
rename — command
ring-speed — interface
rlogin — command
rmdir — command
route-map — global
router — global
rsh — command
rxspeed — line
send — command
service — global
service compress-config — global
service linenumber — line
service-module 56k — interface
service-module t1 — interface
service-policy (interface) — interface
service-policy (policy-map) — policy-map
service timestamps — global
session-limit — line
session-timeout — line
set as-path — route-map
set atm-clp — policy-map
set automatic-tag — route-map
set community — route-map
set cos — policy-map
set default interface — route-map
set discard-class — policy-map
set dscp — policy-map
set fr-de — policy-map
set interface — route-map
set ip default next-hop — route-map
set ip next-hop — route-map
set ip precedence — route-map
set ip tos — route-map
set level — route-map
set local-preference — route-map
set metric — route-map
set metric-type — route-map
set metric-type internal — route-map
set mpls-label — route-map
set origin — route-map
set ospf router-id — route-map
set-overload-bit — router, IS-IS
set precedence — policy-map
set qos-group — policy-map
set tag — route-map
setup — command
set weight — route-map
shape — policy-map
show — command
shutdown — interface
smt-queue-threshold — global
snapshot — interface
snmp-server — command
snmp-server chassis-id — global
snmp-server community — global
snmp-server contact — global
snmp-server enable traps — global
snmp-server engine-id — global
snmp-server group — global
snmp-server host — global
snmp-server location — global
snmp-server packetsize — global
snmp-server queue-length — global
snmp-server system-shutdown — global
snmp-server tftp-server-list — global
snmp-server trap-source — global
snmp-server trap-timeout — global
snmp-server user — global
snmp-server view — global
snmp trap link-status — interface
source-address — interface (hub)
spanning-tree backbonefast — global
spanning-tree cost — interface
spanning-tree port-priority — interface
spanning-tree vlan — global
speed — line
squeeze — command
squelch — interface
sscop cc-timer — interface
sscop keepalive-timer — interface
sscop max-cc — interface
sscop poll-timer — interface
sscop rcv-window — interface
sscop send-window — interface
standby authentication — interface
standby ip — interface
standby preempt — interface
standby priority — interface
standby timers — interface
standby track — interface
stopbits — line
summary-address — router, OSPF, IS-IS, BGP
synchronization — BGP
table-map — router, BGP
tacacs-server attempts — global
tacacs-server authenticate — global
tacacs-server directed-request — global
tacacs-server extended — global
tacacs-server host — global
tacacs-server key — global
tacacs-server last-resort — global
tacacs-server notify — global
tacacs-server optional-passwords — global
tacacs-server retransmit — global
tacacs-server timeout — global
tag-switching — global
terminal editing — command
terminal escape-character — command
terminal history — command
terminal length — command
terminal monitor — command
tftp-server — global
timers basic — router
timers bgp — router, BGP
timers spf — router
trace, traceroute — command
traffic-shape adaptive — interface
traffic-shape fecn-adapt — interface
traffic-shape group — interface
traffic-shape rate — interface
traffic-share — router, IGRP, EIGRP
transport — line
tunnel checksum — interface
tunnel destination — interface
tunnel key — interface
tunnel mode — interface
tunnel sequence-datagrams — interface
tunnel source — interface
txspeed — line
undebug — command
undelete — command
username — global
vacant-message — line
validate-update-source — router
variance — EIGRP, IGRP
verify — command
version — router (RIP)
vlan — vlan config mode
vlan database — EXEC
vtp client — vlan configuration mode
vtp domain — vlan configuration mode
vtp password — vlan configuration mode
vtp server — vlan configuration mode
vtp transparent — vlan configuration mode
vtp v2-mode — vlan configuration mode
vty-async — global
vty-async dynamic-routing — global
vty-async header-compression — global
vty-async keepalive — global
vty-async mtu — global
vty-async ppp authentication — global
vty-async ppp use-tacacs — global
width — line
write — command
A. Appendix: Network Basics
A.1. IPv4 SubnettingA.1.1. Classless Inter-Domain RoutingA.1.1.1. CIDR notationA.1.2. Subnet MathA.1.2.1. Subnet zero reminderA.1.2.2. Calculating a network address from a host addressA.1.2.3. Calculating the broadcast address of a subnetA.1.2.4. Calculating available subnetsA.1.2.5. Calculating the number of hosts per subnetA.1.3. More about SubnetsA.1.3.1. Private address spaceA.1.3.2. Changing the way the router displays subnet informationA.1.3.3. Variable Length Subnet Masks (VLSM)A.2. OSI Reference ModelA.2.1. Application LayerA.2.2. Presentation LayerA.2.3. Session LayerA.2.4. Transport LayerA.2.5. Network LayerA.2.6. Data Link LayerA.2.7. Physical LayerA.3. IPv6A.3.1. IPv6 NotationA.3.1.1. Shorthand rule oneA.3.1.2. Shorthand rule twoA.3.2. Important IPv6 AddressesA.3.3. Enabling IPv6 on a RouterA.3.4. Using an IPv6 Address in a URL
18. About the Author
Index
About the Author
Colophon
Copyright

Content preview from Cisco IOS in a Nutshell, 2nd Edition

Name

ip nat translation — global

Synopsis

ip nat translation [max-entries number] {timeout | udp-timeout | dns-timeout |
tcp-timeout | finrst-timeout | icmp-timeout | pptp-timeout | syn-timeout |
port-timeout} seconds
no ip nat translation [max-entries number] {timeout | udp-timeout | dns-timeout |
tcp-timeout | finrst-timeout | icmp-timeout | pptp-timeout | syn-timeout |
port-timeout} seconds

Configures

None

Default

See description

Description

This command specifies different timeouts for NAT translations.

max-entries number: Optional. Specifies the maximum number of NAT entries. Default is unlimited.
timeout seconds: The timeout on all translations except overloads. Default is 86,400 seconds.
udp-timeout seconds: The timeout on UDP port translations. Default is 300 seconds.
dns-timeout seconds: The timeout on DNS (Domain Name Service). Default is 60 seconds.
tcp-timeout seconds: The timeout on TCP ports. Default is 86400 seconds.
finrst-timeout seconds: The timeout on Finish and Reset TCP packets. Default is 60 seconds.
icmp-timeout seconds: The timeout for ICMP flows. Default is 60 seconds.
pptp-timeout seconds: The timeout for NAT Point-to-Point Protocol flows. Default is 86,400 seconds.
syn-timeout seconds: The timeout for TCP flows immediately after a SYN (synchronous transmission) message. The default is 60 seconds.
port-timeout seconds: The timeout that applies to TCP/UDP ports. The default is 0 (never).

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 0596008694Errata

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills