Welcome the my online journal

This page is from http://www.cciesecrets.net/downloads/commands.htm

Undocumented Cisco Commands
 

Undocumented Commands in Cisco IOS

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[A]
aaa accounting delay-start 
[12.1] [hidden] global configuration command aaa accounting delay-start 
delays creation of the PPP Network start record until the peer IP 
address is known. 
aaa authorization address-authorization-exec 
[12.1] [hidden] configuration command forces address authorzation for 
PPP when started from an exec. 
aaa group server {radius | tacacs+} server-group-name 
server ip-address-1 [auth-port port-number] [acct-port port-number] 
server ip-address-2 [auth-port port-number] [acct-port port-number] 
deadtime minutes pick-method [next | load-balanced | round-robin] 
[hidden] pick-method server-group configuration command is used to specify 
an alternate 
method of selecting servers when one is not responding. As of 12.0(3)T 
the load-balanced and round-robin alternatives may be specified but 
may not be implemented. The Load-balanced keyword indicates that the 
initial host is selected load-balanced. The Round-robin keyword 
indicates that the initial host is selected in a round-robin method 
with all servers being retried before starting from the beginnng of 
the list of servers. The Next keyword indicates that the list of 
servers is stepped through sequentially with each request always 
starting with the first server in the list. This last option is the 
default method of operation. 
aaa nas port description text 
[hidden] global configuration command causes the specified text to 
appear in TACACS+ accounting records with the attribute nas-description 
and the value of the text specified in the command. 
This command is useful during debugging allowing one to specify 
information about the environment or configuration in which the 
accounting record was generated. 
access-list number remark comment 
and 
ip access-list extended name 
remark comment 
[12.1]To add comments about the access list. This keyword is documented 
under Bug Id CSCdk14543. 
atm allow-max-vci 
interface command, will allow the cisco 7000 use VCI's above 1023. 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[B] 
bgp common-administration 
bgp dynamic-med-interval 
bgp process-dpa 
boot system rom 
CONFIG 
boot module 
CONFIG 
bundle-enable command 
800-series 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[C] 
call-history-mib retain-timer (value) 
[global] effects the size of the isdn history table 
carrier delay value 
[12.1] Modifies the carrier delay time. A value of 0 disables the carrier delay 
clear crashdump 1 
to cleanup an old crashdump 
clear ip eigrp [as] event 
Clear IP-EIGRP event logs 
clear ip eigrp [as] logging 
Stop IP-EIGRP event logging 
clear profile 
Clears CPU profiling 
clear startup-config 
same as erase startup-config) 
clear vtemplate 
reset virtual templates 
clock rate { 1200 | [...]| 2015232 } 
[hidden] There is an anomaly between what is documented, what is 
displayed and what is entered for this command. The documentation 
indicates the command is clock rate and this is what IOS shows as 
the valid command in configuration mode. However, a configuration 
display shows the command as clockrate as this is how is is saved in 
nvram. In addition, older rom monitors do not understand the newer 
clock rate command which would cause problems. What actually happens 
here is that clockrate is implemented as a hidden command and is not 
completed by pressing tab and nor is there any help generated for it. 
But both clockrate and clock rate are accepted and there should 
be no problem in cutting and pasting the configurations. 
config overwrite 
copy core ? 
Does a full core dump, as write core but with more options 
csim start <number> 
Emulate a voice call 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[D] 
debug buffer 
Additional buffer debugging 
debug buffer failure 
Buffer Allocation failures debugging 
debug crypto isakmp detail 
Crypto ISAKMP internals debugging 
debug crypto isakmp packet 
Crypto ISAKMP packet debugging 
debug dialer detailed 
debug dialer holdq 
[11.2(12)P] [undocumented/hidden] gives some help on dialing. 
debug eigrp neighbor [ sia-timer ] 
this will print debug information about the operation of the 
sia timers. Generally not very useful (unless you are testing 
the timers) 
debug eigrp transmit [ sia ] 
the will print debug information about SIA packets being 
sent. Most of the information found in this debug is part of 
the event log. 
debug eigrp sia { fast | reply [addr] | query [addr] | siareply [addr] | siaquery [addr] } 
This command has been left in to assist testing with creating sia 
events and will CAUSE sia events. 
fast sia timer will fire in 1ms on next route to go active 
query next query from peer will be ignored 
reply next reply from peer will be ignored 
siaquery next reply from peer will be ignored 
siareply next reply from peer will be ignored 
debug ip ospf monitor 
Debug command which show opsf database sync 
debug ip packet ... dump 
Outputs a hex & ASCII dump of the packet's contents 
debug ipx private 
debug isdn code 
debug isdn q931 l3 
[12.0(13)] will show additional information on ISDN, i.e. 
the corresponding call reference number in all ISDN messages. 
debug oir 
Debug online insertion and removal 
debug parser alias 
debug parser help 
debug parser http 
debug parser mode 
debug parser privilege 
debug sanity 
debug subsys 
Debug discrete subsystems 
dialer mult-map-same-name 
useful if you have dialup clients using the same chap/pap username 
dhcp-server import all 
take all DHCP client info from the "ip address dhcp" client 
and assume that info for our DHCP server. 
debug snmp {bag | dll | io | mib { all | by-mib-name } | packets | 
sysdb | timers} 
debug x25 switch 
debug x25 encapsulation 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[E] 
exception-slave dump X.X.X.X 
CONFIG 
exception-slave protocol tftp 
CONFIG 
exception-slave corefile 
CONFIG 
execption memory fragment <amount> 
CONFIG: Will reload router when no more fragment mem is avail 
DOCUMENTED: in Version 12.1(2)E 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[G] 
gdb kernel 
gdb examine pid 
gdb debug pid 
(ciscos comment: gdb commands are for debugging, only useful to cisco 
engineers who have a symbol table for the IOS image in question.) 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[H] 
hangup 
alias for "quit" 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[I] 
ip cache-ager 
Needs service internal 
ip cef accounting per-prefix non-recursive prefix-length 
if-con <n> 
Attach to a vip console; if-quit (gets out of if-con mode) 
ip address dhcp 
On eth[x], for cablemodems? 
ip forwarding accounting adjacency-update 
ip forwarding accounting non-recursive 
ip forwarding accounting per-prefix 
ip forwarding accounting prefix-length 
ip forwarding switch 
ip forwarding traffic-statistics 
ip forwarding traffic-statistics load-interval 
ip forwarding traffic-statistics update-rate 
[no] ip gratuitous-arps 
This disables unsolicited ARP replies that are useful to signal to 
a second (redundant) router on the same LAN segment that a remote 
gateway is present or has changed. 
ip igmp 
ip igmp immediate-leave 
ip igmp immediate-leave group-list 
ip local-pool 
Legacy form of ip local pool, for backwards compatability 
ip ospf interface-retry [x] 
Retry for ospf process 
ip ospf-name-lookup 
ip route profile 
This configuration command will turn on IP routing table statistics 
collection. Information like number of changes, number of prefix 
added etc will be collected. 
ip slow-converge 
ip spd 
ip spd mode 
ip spd mode aggressive 
ip spd queue 
ip spd queue max-threshold 
ip spd queue min-threshold 
ip tftp boot-interface 
CONFIG 
ip tmstats bin internal | external 
CONFIG, when ip cef accounting non-recursive is configured 
isdn network 
tell router to be the "master" on T1-CCS link using isdn switch-type 
primary-ni 
ipx flooding-unthrottled 
[12.1] global configuratiom command specifies that NLSP flooding should 
be unthrottled. 
ipx netbios-socket-input-checks 
[12.1] global configuratiom command limits the input of non-type 20 
netbios bc packets 
ipx potential-pseudonode 
[12.1] global configuration command specifies to keep backup route and 
service data for NLSP potential pseudocode. 
ipx sap follow-route-path 
[12.1] An undocumented global configuration command. See Bug Id 
SCdm12190 for details. 
ipx server-split-horizon-on-server-paths 
[12.1] global configuratiom command specifies that split horizon SAP 
occurs on server, not route, paths. This command is documented in Bug Id 
CSCdm12190. 
ipx update interval {rip | sap} {seconds | passive | changes-only} 
[12.1] The undocumented passive keyword specifies to listen but does not 
send normal periodic SAP updates nor flashes/changes updates. Queries 
will still be replied to. The update interval is set to the same 
interval as changes-only. The passive keyword is documented under Bug 
Id CSCdj59918. 
isdn {n200 | t200 | t203} number 
[hidden] commands change the value of various layer 2 ISDN timer 
settings. The number parameter is milliseconds for t200 and t203 and 
the maximum number of retransmits for the keyword n200. The current 
value of ISDN timers can be displayed using the show isdn 
timers EXEC command.The values of the timer settings depend on the 
switch type and typically are used only for homologation purposes. 
The typical value for t200 is 1 second, for t203 is 10 seconds and 
for n200 is 3 retransmits. 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

 

[L] 
llc attach [interface] 
llc close aaaa 
llc offset aaaa 
llc open [interface] 
llc send aaaa 
logging event {link-status | subif-link-status} 
The no form of the undocumented logging event link-status interface 
commmand is used to turn off sending up, down and change messages for an 
interface to the syslog. This is very useful on live systems since 
these systems generate so many of these messages that other important 
messages are often hard to see. This is a companion command to the 
documented command no snmp trap link-status which prevents sending the 
associated snmp trap. 
loopback diag 
CONFIG 
loopback dec 
CONFIG: at dec chip 
loopback test 
CONFIG 
loopback micro-linear 
CONFIG 
loopback motorola 
CONFIG 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[M] 
memory scan 
Parity check for 7500 RSPs 
modem log {cts | dcd | dsr | dtr | ri | rs232 | rts | tst} 
[12.1] configuration command is used to specify which rs232 log events 
are to be saved for display by the show modem log command. When 
performing log analysis, various RS232 events fill the log within 
seconds rendering it useless for analysis (see Bug Id CSCdk86001). 
This command helps to filter out unwanted entries in the log. 
modem-mgmt csm debug-rbs 
[12.1] turns on debugging for Channelized T1 links in the AS5x00 
series, providing info about ABCD bits in phone call supervision. 
Documented, here. Debug cas replaced this 'broken' command. 
INTERNAL privileged EXEC command enables robbed bit signaling debugging 
within CSM. Issuing the command once turns on rbs debugging. Issueing 
the command a second time turns on special rbs debugging. Issuing 
the command using the no-debug-rbs keyword turns off all degugging. 
This command is useful in looking at modem pooling and channelized 
T1s. To make this command available, the service internal global 
configuration command must be issued first. 
multilink bundle-name {authenticated | both | endpoint} 
[12.1] This undocumented global configuration command selects the method 
for naming multilink bundles. "authenticated" specifies using the 
peer's authenticated name, "endpoint" specifies using the peer's 
endpoint discriminator and "both" specifies using both the peer's 
authenticated name and endpoint discriminator. 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[N] 
[no] environment-monitor 
Disable environment monitoring 
[no] ppp chap ignoreous 
For router with same hostname 
[no] service auto-reset 
On linecards 
[no] service password-recovery 
For the daring people, it can be undone but *please* only specify this if you know what you are doing. and since this is undocumented, you probably don't! :-) 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[P] 
ppp direction {callin | callout | dedicated} 
[12.1] [hidden] identify the direction of ppp activity. PPP attempts to 
determine if a call is callin or a callout or a dedicated line. This is 
how it detects spoofed CHAP challenges. When an async interface is 
added to a dialer interface, ppp cannot detect the difference between 
a dedicated line and a callin. So it assumes that it is a callin. 
Adding the ppp direction dedicated overcomes this. 
ppp ipcp accept-address 
[hidden] interface command specifies that IOS is to revert to the 
previous operation regarding the acceptance of ip addresses from 
users. When enabled, the peer IP address will be accepted but is still 
subject to AAA verification, it will have precedence 
over any local address pool however. In IOS releases after 11.0(11), 
PPP IPCP negotiation was changed to accepts a remote peer's 
"Her" proposed address regardless, and the "Her" address is 
subsequently added to the IP routing table as a host route. 
With IOS Releases later than 11.0(11) the software checks the 
"Her" address against the corresponding dialer map and if the address 
is different than the IP address detailed within the dialer map, 
a NAK will be sent and the dialer map IP address will be added as 
a host route in the IP routing table. 
ppp ipcp ignore-map 
ppp lcp fast-start 
[12.1] interface configuration command specifies to ignore the carrier 
timer and start PPP when an LCP packet arrives. 
ppp restart-timer msec 
[hidden] interface configuration command modifies the default value 
(2 seconds) for the restart timer. The translate command also has a 
similar keyword, restart. 
ppp timeout absolute <sec> 
Determines how long PPP link can be up [default is infinity, configurable as 0] used under virtual-template interfaces. 
ppp timeout idle <sec> inbound 
ppp timeout idle <sec> either 
Determines how long PPP can wait until bringing the link down if there 
is no traffic. [default is infinity, configurable as 0] used under 
virtual-template interfaces. 
profile <start> <stop> <granularity> 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[R] 
radius-server attribute 44 on-for-access-req 
[hiden] global configuration command sends attribute 44 in all access 
request packets. The command may be present in IOS 11.3(9+)AA 
(reference BugID CSCdk74429). This command is replaced by the 
radius-server attribute 44 include-in-access-req command. 
radius-server attribute 6 on-for-login-auth 
[hidden] global configuration command sends attribute 6 in all 
authentication packets (e.g., access requests). This command may be 
present in IOS 11.3(9+)T and 12.0(3+)T (reference 
BugID CSCdk81561). 
radius-server attribute 6 support-multiple 
[hidden] global configuration command specifies that IOS is to support 
multiple Service-Type values per Radius profile in violation of the 
RFC for Radius. This command was added in IOS 
12.1(2.3)T2 and 12.1(3.3)T (reference BugID CSCdr60306). 
radius-server authorization default framed-protocol ppp 
[hidden] used to specify the default framed-protocol as PPP when this 
RADIUS attribute is missing. 
radius-server authorization permit missing service-type 
[hidden] global command is used to specify that a RADIUS entry without 
service-type information is permitted. It is used when RADIUS is being 
used as a database without regard to service-type. 
radius-server attribute nas-port extended 
[hidden?] command is replaced by the radius-server attribute nas-port 
format b command in some releases of IOS. For this reason it may be 
hidden in the IOS configuration mode but documented. In these 
versions of IOS, the command will be accepted but ignored. 
radius-server challenge-noecho 
[12.1] global configuration command specifies that data echoing to the 
screen is disabled during Access-Challenge. 
radius-server directed-request [restricted] [right-to-left] 
[hidden] right-to-left keyword, which first appeared in IOS 12/0(7)T, 
enables right-to-left parsing of the user information (reference 
Bugid CSCdm77820). 
radius-server extended-portnames 
[hidden] global configuration command, which displays expanded interface 
information in the NAS-Port-Type attribute, has been replaced by the 
radius-server attribute nas-port extended command. 
This command configures RADIUS to expand the size of the NAS-Port 
attribute field to 32 bits. 
The upper 16 bits of the NAS-Port attribute display the type and number 
of the controlling interface; the lower 16 bits indicate the 
interface undergoing authentication. 
This command first appeared in IOS Release 11.1. It has been hidden in 
IOS 11.3+ and IOS 12.0+ since the command has been replaced 
(reference Bugid CSCdj06817). 
radius-server host {hostname | ip-address} [auth-port port-number] 
[acct-port port-number] [timeout seconds] [retransmit retries] 
[key string] [ignore-acct-authenticator] 
[hidden] ignore-acct-authenticator keyword specifies to ignore 
accounting authenticator errors and warn only (11.3(+)AA). 
radius-server ipc-limit done limit 
[hidden] 
radius-server retry method round-robin 
[hidden] global configuration command is used to specify an alternate 
method of selecting servers when one is not responding. As of 12.0(3)T 
alternates may not be defined and the round-robin alternative may not 
be implemented. 
radius-server secret string 
[hidden] global configuration command is used to specify the key shared 
with the RADIUS server. This command is hidden because it has been 
replaced with the radius-server key command (reference 
BugID CSCdi44081). This command first appeared in IOS Release 11.1. 
radius-server unique-ident value 
[hidden] global configuration command is used to set high order bits for 
the accounting identifier. The identifier field is a one octet field 
included in all RADIUS accounting packets which aids in matching 
requests and replies. 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[S] 
scheduler max-task-time 200 
CONFIG: last val in milliseconds 
scheduler heapcheck process 
CONFIG: memory validation, after proc 
scheduler heapcheck poll 
CONFIG: memory valid after some poll 
scheduler run-degraded 
CONFIG: in a failure mode? 
service internal 
CONFIG: additional debugs that are not normally available 
service slave-coredump 
CONFIG 
service log backtrace 
CONFIG: provides traceback with every logging instance 
set destination-preference 
show alignment 
show asciireg 
On switches 
show asp 
show async bootp 
No extended data will be sent in BOOTP responses 
show biga 
GLOBAL: catalyst 5000 release 5.5(1) 
show bridge group verbose 
shows additional information on each port that the bridge group is enabled 
show caller 
show chunk 
show chunk summary 
show counters [slot/port] 
Shows all port counters 
show compress hardware 
show controller buffer fa# # (note, not the more common "fa#/#) 
Catalyst 2900XL family 12.0(5.2)XU 
show controller coronado # 
Catalyst 2900XL family 12.0(5.2)XU 
show controller delmar # 
Catalyst 2900XL family 12.0(5.2)XU 
show controller frank 
Catalyst 2900XL family 12.0(5.2)XU 
show controller razor 
Catalyst 2900XL family 12.0(5.2)XU 
show controller switch 
Catalyst 2900XL family 12.0(5.2)XU, see also ciscosite. 
show controller vip <slotno> log 
show controller vip <slotno> tech 
show fib drop 
show fib interface 
show fib interface detail 
show fib interface loopback 
show fib interface null 
show fib interface statistics 
show fib interface vlan 
show fib linecard 
show fib linecard detail 
show fib not-cef-switched 
show fib not-fib-switched 
show idb 
show inband 
GLOBAL: catalyst 5000 release 5.5(1) 
show interfaces cable <cable card> modem 0 
Shows CPES attached to a cable modems. 
show interface statis 
show interface switching 
show interfaces stat 
show interface <int> stat 
show interfaces switching 
show int <int> switching 
Shows switching path information for the interface 
show ip cef internal 
show ip eigrp event [as] [start# end#] 
IP-EIGRP Events 
show ip eigrp sia-event [as] [start# end#] 
IP-EIGRP SIA event 
show ip eigrp timers [as] 
IP-EIGRP Timers 
show ip ospf bad-checksum 
show ip ospf delete 
show ip ospf delete-list 
show ip ospf ev 
show ip ospf events 
show ip ospf maxage-list 
show ip ospf statistics 
show ip route profile 
Use this command to view the IP routing table profile. 
show ipx backup [network] 
show ipx cache cbus 
show ipx cache hash 
show ipx eigrp event [event-number] 
shows past eigrp events 
show ipx eigrp sia-event 
shows past eigrp stuck in actives 
show ipx private cache-history aaa 
show ipx urd [0-fffffffe] 
show isdn {active | history | memory | services | status [dsl | serial 
number] | timers} 
active: Displays current call information, including called number, the 
time until the call is disconnected, AOC charging units used during the 
call, and whether the AOC information is provided during calls or at end 
of calls. 
history: Displays historic and current call information, including the 
called number, the time until the call is disconnected, AOC charging 
time units used during the call, and whether the AOC information is 
provided during calls or at the end of calls. 
status serial number: Displays the status of a specific ISDN PRI 
interface created and configured as a serial interface. 
show isis timers 
show isis tree 
IS-IS link state database AVL tree 
show isis tree level-2 
show isis private 
show list 
show list nonempty 
show llc 
show mbuf 
Catalyst 5000, The main issue to observe with this command is whether 
the switch is being starved for memory. Within the display, "clusters" 
is the number of buffers that are available for NMP to process 
incoming packets, which include any broadcast/multicast, management 
traffic. "clfree" is the number of buffers that are available for the 
NMP at any given time. 
If this is zero then this means that NMP has no buffers to process any 
incoming frames. "lowest clfree" determines the lowest watermark that 
NMP has hit at any time. If this value is zero but clfree is nonzero, 
then this means that at one instance NMP ran out of buffers. This 
can be because of a broadcast of a multicast storm in the management 
vlan. 
show media 
show media access-lists 
show memory big 
show modem mapping 
show parity 
show parser 
show parser links 
show parser modes 
show parser unresolved 
show portreg 
On switches 
show proc all-events 
Shows all process events 
show profile 
Shows cpu profiling 
show profile detail 
Shows cpu profiling 
show profile terse 
Shows cpu profiling 
show refuse-message 
show region <address> 
Shows image layout <at give address] 
show registry <cr> | brief | statistics | registry-name 
memory management 
show rsh 
show rsh-disable-commands 
show rsp 
show slip 
show smrp private | request |response 
show snapshot private 
show snmp chassis 
show snmp contact 
show snmp community 
show snmp location 
show snmp mib [detailed | dll ] 
show snmp newcom 
show snmp view 
show sum 
Show current stored image checksum 
show timers 
Show timers for timer command in config mode 
show traffic 
Shows the current backplane utilization and peak 
utilization for all three busses 
show queueing interface [interface] 
gives queueing information on a per interface basis 
snmp-server priority {low | normal | high} 
[hidden] global configuration command can be used to change the 
priority of SNMP processes. To avoid extensive polling, use the 
priority should be set to low . All SNMP queries sent to a router 
are prioritized as either low or medium priority, depending on the 
version of code run by the route processor. This means that processes 
with a higher priority than the SNMP process will be serviced before 
SNMP. So, regardless of SNMP polling intensity, routing processes will 
generally be processed before SNMP requests because route processes 
are "high" priority. You can view the priorities of each of the 
router's processes by doing a show process and looking in the Q column 
(L == Low, M == Medium, H == High). See 
http://www.cisco.com/warp/public/490/9.html for documentation. 
This command has no impact on the priority of the snmp trap process. 
[no] snmp-server sparse-tables 
Get the complete SNMP MIB table. On controller interface 
you get without this command e.g. no out bytes counter. 
With this commands you get every object with SNMP get-next. 
[no] sscop quick-poll 
Suppose to help recover if sscop has problems, global 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |


[T] 
tclsh 
[very interesting, you can program with loop control, 
expressions, etc from the IOS CLI. works on 3640-IS-M, Version 12.1(5)XM, 
EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)) 
test aaa group {group name} {username} {password} 
[12.0(5)T] used to test the authentication of a username/password 
without having to use an extraneous process such as telnet or dialin 
to initiate it 
test appletalk 
[11.2.x] The test appletalk command will enter appletalk test mode. The 
sub-commands available in this mode are: 
. arp interface-type number at-aarp-addr arp-mac-address 
. eigrp neighbor-states cablestart-cableend 
. nbp confirm <net>.<node>[:<skt>] <object>:<type>@<zone> 
. nbp lookup <object>:<type>@<zone> 
. nbp parmameters max-retrans max-replies interval 
. nbp poll end 
test align 
test cable [atp | berr | bpimcast | brk | dhcp-inq | hop | minimum-poll | nobrk | stack-pro | ucc ] 
[12.1] 
atp acceptance test procedure 
berr Bus Error 
bpimcast Privacy Multicast test commands 
brk Break 
dhcp-inq Send DHCP inquiry 
hop Initiate frequency hop 
minimum-poll Toggle 1 second minimum polling 
nobrk No Break 
stack-prot Stack Protect 
ucc Send UCC command 
test call fallback 
[12.1] VoIP Fallback 
test cbus 
For old AGS+ and 7000. Lets you prod stuff right into cbus memory. 
*very* dangerous if you don't know what you are doing. 
test cch323 
command performs cch323 tests. 
test crash 
Makes the router crash anyway you want :) 
test crypto [dns-query] [engine] [initiate-session] [pki] 
[12.1] 
dns-query DNSSEC query 
engine Crypto Engine 
initiate-session Send a CIM connection message 
pki PKI Client Test 
test dhcp [allocate xxx.xxx.xxx.xxx] | [release] | [renew] 
test dsp memory 
[12.1] Test DSP memory 
test eigrp as-number {ack | neighbor-states ipx-address ipx-mask} 
[12.1] as-number id from 1 to 65535. neighbor-states is one of 1local 
(Neighbor states 1), 1successor (Neighbor states 3), 2local (Neighbor 
states 1 - 2), 2successor (Neighbor states 3 - 2), 3local (Neighbor 
states 1 - 0), 4local (Neighbor states 1 - 0 - 2), 5local (Neighbor 
states 1 - 0 - FC fail - 1), 6local (Neighbor states 1 - 2 - FC fail - 
3), and delete (Delete a phoney entry in the topology table). The 
keyword ack toggles EIGRP fast acking. 
test ifs appn {read | write}{hostname | ip-address} 
The test ifs appn command reads or writes an appn file. 
test ifs boot boot-command-line 
The test ifs boot command parses the bootstrap 'boot' command line. 
test ifs defaults 
The test ifs defaults command shows the default boot files. 
test ifs show hidden 
The test ifs show hidden command toggles the display of hidden file systems and files. 
test ifs slot slot url 
The test ifs slot command will produce a core dump of slots on 
crashes. 
test interfaces 
test ip local-pool alloc (interface) 
needs service-internal 
test ip local-pool alloc user 
needs service-internal 
test ip local-pool chown (interface) 
needs service-internal 
test ip local-pool free (interface) 
needs service-internal 
test ip local-pool pool 
needs service-internal 
test ipc misc 
test ipx capacity x y z 
Generated IPX RIP and SAPs. Enterprise feature set (11.2+). 
where x is the network address to begin at. 
where y is the number of advertisements 
where z is the interface IPX address that is reachable from 
test ipx debug [0-ffffffff] [0-ffffffff] [0-ffffffff] 
test ipx echo router-address [times-sent] [interval] 
sends 1447 RIP requests for 1 – 182 random networks – remote end sends 
echo repl back (ipx ping works the same way, but it always requests 
network 00000000)) 
test ipx gns [type] [numb-tries] [timeout] [network-to-send-request-on] 
types: 
1 – User, 
2 – User Group, 
3 – Print Queue, 
4 – File Server, 
5 – Job Server, 
6 – Gateway, 
7 – Print Server, 
8 – Archive Queue, 
9 – Archive Server, 
a – Job Queue, 
b – Administration Object, 
f – Novell TI-RPC, 
ff – Wild, 
ffff – Request Response 
test ipx netbios find [name] [numb-tries] [timeout] [network-to-send-request-on] 
sends out un-interpreted packets 
test ipx query [sending-SAP-type] [type] [server-name] [network] [maskf] 
[numb-tries] [timeout] 
sending-sap-types: 
2 – Response (in), 
4 – Nearest Server type, 
C – General Name Query, 
D – General Name Response, 
E – Nearest Name Query, 
F – Nearest Name Response 
test ipx ripreq network 
sends rip request for network specified 
test ipx watchdog host-address 
sends watchdog (IPX Keep-alive) packet to specified host) 
test leds test network interfaces. 
test mbus power [slot] [on off] 
[no]Shut a line card 
test memory 
test pas [bus watcher] [counter] [eeprom] 
[12.1] 
bus watcher Bus Watcher 
counter Cycle Counter 
eeprom Test eeprom functionality 
test playout [adaptive] [fixed] [nots] 
[12.1] 
adaptive use adaptive playout buffer 
fixed use fixed playout buffer 
nots use fixed playout buffer with no timestamps 
test port <2147483647-0> 
[12.1] Voice interface slot # 
test pppoe [stop] [ip] <1-8000> [FastEthernet] 
[12.1] 
<1-8000> Number of PPPoE sessions to be opened 
FastEthernet FastEthernet IEEE 802.3 
test rsp cach memd-fastswitch uncached 
The processor in the router has its own Cache. There were bugs 
in working with this cache. With this exec-command you can 
disable the use of this cache. Because this is a exec-command you 
have to type it again after a reboot. 
test ssl [open-conn] [open-session] [read] [write] 
[12.1] 
open-conn Open connection 
open-session Open a SSL Session 
read Read data from a selected socket 
write Write data to the selected socket 
test tcp [delay|drop|line|random] 
needs service-internal 
test tone locale 
[12.1] 
locale 2 letter ISO-3166 country code 
test translation-rule <1-2147483647> 
[12.1] 
<1-2147483647> The unique Tag for this translation table 
test transmit 
test spanning-tree [get] [process-stats] [switch-count] 
[12.1] 
get get configuration 
process-stats Spanning tree process / queue statistics 
switch-count Spanning tree packet counters 
test modem back-to-back first-slot/port second-slot/port 
performs modem testing. Test the transmission of L2 frames 
test vines 
enter VINES test mode. The Sub-commands available in this mode are: 
. build [Build tables] 
. checksum [Checksum test] 
. data [Set data values used in various places] 
. end [Exit VINES test mode] 
. flush [Flush tables] 
. generate [generate information] 
. send [Send a VINES packet] 
. set [Send a VINES value] 
. ss [Do Server Service things] 
. st [Send a vines streettalk packet] 
test voice [echo] [playout] [port] [tone] 
[12.1] 
echo Test echo canceller 
playout set playout delay configuration 
port Diagnose voice ports by forcing conditions 
tone TONE 
test voip scripts 
allow to run self-created IVR (Interactive Voice Response) scripts. 
Cisco included 7 IVR scripts in IOS. Self-created scripts must be 
specially signed. Issuing this command in priviliged mode before loading 
self-created script you turn off the signature checking procedure. The 
only problem is that the command must be issued every each router 
reboot. Cisco promises to remove totally the signature checking 
procedure in future IOS releases. 
test vpdn 

<cisco Systems on the test command> 
"The undocumented and soon to be hidden 'test' privileged command is 
used to test subsystems, memory and interfaces. The features of the 
test command are box and IOS dependent and are intended for Cisco 
technical support only." 
<cisco Systems on the test command> 

timeout absolute minutes [seconds] 
[12.1] command is available to enforce timeouts on an interface. 
trace display 
Displays the trace buffer when connected with if-con 0 c 
ttcp 
Like the unix ttcp, to generate traffic 
tunnel carry-security 
CONFIG 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[V] 
vpdn aaa override-server {hostname | ip-address} 
[12.1] global configuration command specifies the name or ip address of a 
designate AAA server to be used for VPDN authorization. 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[W] 
who 
Alias for show users 
write core 
Does a full core dump, reboots router 

 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

[X] 
x29 inviteclear-time none 
The router will not send out a x29 invite-to-clear but a x25 clear 
(disconnect)to the X.25 host. This is necessary, if your X.25 host 
has problems receiving X.29 invite-to-clear. 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Cat   |  router bgp ASN  |  router eigrp X  |  router isis  |  Filesystem  |

Cat

[Catalyst 5000 and 6000] 
enable engineer 
this prompts for a password, which has the form: 
passwordHWFWSWenablepass 
password, enablepass: whatever passwords are on the box 
HW, FW, SW: first two digits of the hardware, firmware, software 
versions running on the Supervisor, shown by show version. 
Example: password and enablepass are cisco, show version says HW: 3.2, 
FW: 5.3(1), SW: 5.4(4) 
The enable engineer password would be cisco325354cisco 
[5000] 
set trace 
If you enter set trace ?, nothing appears however if you enter 
set trace followed by anything else you will see the command 
options. Be careful with this command, make a backup of the 
configuration FIRST. You can saturate the processor if it is 
used inappropriately the Catalyst may reboot constantly or 
become non responsive upon boot! In this case you have to break 
in and wipe the config very quickly. 

[router bgp ASN
neighbor ctalkb-out filter-as 100 d 
Filter-as is an obsolete subcommand 
use filter-list instead 
neighbor <customer-router> translate-update [nlri multicast unicast] 
Redistribute between BGP and MBGP 
bgp redistribute-internal 
Redistribute I-BGP routes in the other routing-protocol 

[router eigrp X
eigrp event-log-size xxx 
sets the event log size when used with "show ip eigrp event" 
Default is 500 on 12.0.11 
[no] eigrp event-logging 
controls logging of eigrp events on a per bases 
[no] eigrp event-log-size 
Set event log sixe to events; 0 deletes event log buffers 
[no] command resets event log and SIA log size to 500 events 
[no] eigrp log-event-type [dual] [xmit] [transport] 
Configure the set of event types to log 
[no] eigrp kill-everyone 
Kill all adjacencies on an SIA event or a neighbor down event 
[no] eigrp log-neighbor-changes 
log changes in peer status of neighbors 

[router isis
partition-avoidance 

[Filesystem
cd system:/vfiles and 'dir' and there are three files available: 
tmasinfo 
tmstats_ascii 
tmstast_binary 
File format tmstats.ascii: 
Header - version, address, aggreg, sysuptime, UTC, NTP, duration 
Per-prefix entry format - prefix type, dest/mask, sysuptime, pkts in, 
bytes in, pkts out, bytes out Per-tunnel entry format - tunnel type, 
tunnel id 

[A] | [B] | [C] | [D] | [E] | [F] | [G] | [H] | [I] | [J] | [K] | [L] | [M] | [N] | [O] | [P] | [Q] | [R] | [S] | [T] | [U] | [V] | [W] | [X] | [Y] | [Z]

Site Sponsors: Spielautomaten Online Casino

copyright (c) 2006,Slimjim100's Blog. all right reserved (Design by www.MiddleGeorgia.Info)

home page  ::  Links  :: contact