forked from heyglen/network_tech
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsyntax_test_cisco_ios.cisco-ios
1262 lines (1151 loc) · 37.9 KB
/
syntax_test_cisco_ios.cisco-ios
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#
# cisco ios
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mcl/allreleasemcl/all-book/all-01.html
! Testing for RIR Resolving
! google.com 216.58.212.142
! google.com 2a00:1450:400e:800::200e
! europa.eu 147.67.210.45
! europa.eu 2a01:7080:24:100::666:45
write
show running-config | include something ! Inline comment
show running-config | include something ! Inline comment
show run interface | exclude something
enable password secret_password
enable secret 5 $1$SpMm$eALjeyED.WSZs0naLNv22/
enable password 7 0822455D0A16
!
username user password 0 secret_password
username user password secret 5 invalid
username user password secret 5 $1$SpMm$eALjeyED.WSZs0naLNv22/
username user password secret 5 $1$hetw$SaZIk0NtOZFJzduXR1IwX1
username user password secret 5 $1$feb0$a104Qd9UZ./Ak00KTggPD0
username [ACCOUNT] privilege 15 secret [ACCOUNT_PASSWORD]
banner login ^C
******************
LOGIN MESSAGE
******************
^C
! On router01
# device router02
ip classless
copy tftp://192.0.2.1/path startup-config ! Inline comment
show vlan
show vlan id 42
show interface
show interface gigabitethernet 0
show run interface
show run interface tengigabitethernet 0
show ip route vrf NAME 192.0.2.1
show ip route 192.0.2.1
show ip route
show ipv6 route vrf NAME 2a00:1450:400e:800::200e
show ipv6 route 1::1
show ipv6 route
show ip bgp
show ip bgp vpnv4 unicast
show ip bgp vpnv6 unicast
show ip bgp vpnv4 unicast vrf NAME 192.0.2.1
show ip bgp vpnv4 unicast vrf NAME 192.0.2.1/32
show ip bgp vpnv6 unicast vrf NAME ::
show ip bgp vpnv6 unicast vrf NAME ::/64
show ip interface brief vlan 0
show standby vlan1 brief
show running-config
show startup-config
logging 192.0.2.1
logging facility local5
logging source-interface gi1/2
logging host 192.0.2.1
logging host ::1
logging buffered
logging buffered discriminator NAME
logging buffered discriminator NAME
logging buffered discriminator NAME 2147483647
logging buffered discriminator NAME 4096
logging buffered discriminator NAME 4096 0
logging buffered discriminator NAME 4096 7
logging buffered discriminator NAME 4096 emergencies
logging buffered discriminator NAME 4096 alerts
logging buffered discriminator NAME 4096 critical
logging buffered discriminator NAME 4096 errors
logging buffered discriminator NAME 4096 warnings
logging buffered discriminator NAME 4096 notifications
logging buffered discriminator NAME 4096 informational
logging buffered discriminator NAME 4096 debugging
logging buffered emergencies
logging buffered alerts
logging buffered critical
logging buffered errors
logging buffered warnings
logging buffered notifications
logging buffered informational
logging buffered debugging
logging discriminator NAME includes (.*[1-90]+)?
logging discriminator NAME drops (.*[1-90]+)?
logging discriminator NAME drops (.*[1-90]+)? severity drops 1
logging discriminator NAME drops (.*[1-90]+)? severity includes 7
logging discriminator NAME includes (.*[1-90]+)? rate-limit 10000
logging discriminator NAME drops (.*[1-90]+)? rate-limit 10000
logging discriminator NAME drops (.*[1-90]+)? severity drops 1 rate-limit 10000
logging discriminator NAME drops (.*[1-90]+)? severity includes 7 rate-limit 10000
conf t
configure terminal
! Line comment
do show ipv6 route vrf NAME 1::1
tacacs-server host 192.0.2.1
tacacs-server directed-request
tacacs-server key ******* 1234567890ABCDEF
ip prefix-list NAME seq 10 permit 192.0.2.0/24
ip prefix-list NAME seq 10 permit 192.0.2.0/24 ge 1
ip prefix-list NAME seq 10 permit 192.0.2.0/24 le 1
ip prefix-list NAME seq 10 permit 192.0.2.0/24 ge 2 le 1
ip prefix-list NAME seq 10 deny 0.0.0.0/0
ipv6 prefix-list NAME seq 10 permit ::/64
ipv6 route vrf NAME ::/64 vlan1 ::1
ip route vrf NAME 192.0.2.0 255.255.255.0 vlan1 192.0.2.1 name NAME permanent
ip route vrf NAME 192.0.2.0 255.255.255.0 vlan1 192.0.2.1 track 2
ip route vrf NAME 192.0.2.0 255.255.255.0 vlan1 192.0.2.1 tag 2
ip route 192.0.2.0 255.255.255.0 192.0.2.1 name NAME
ipv6 unicast-routing
default interface Vlan0
vlan 1
name VLAN-1
vlan 2
name VLAN-1
exit
hostname example
vrf upgrade-cli multi-af-mode common-policies vrf NAME
vrf upgrade-cli multi-af-mode non-common-policies force
vrf upgrade-cli multi-af-mode common-policies force
vrf upgrade-cli multi-af-mode common-policies
errdisable detect cause all
errdisable detect cause arp-inspection
errdisable detect cause bpduguard shutdown vlan
errdisable detect cause dhcp-rate-limit
errdisable detect cause dtp-flap
errdisable detect cause gbic-invalid
errdisable detect cause inline-power
errdisable detect cause link-flap
errdisable detect cause loopback
errdisable detect cause pagp-flap
errdisable detect cause pppoe-ia-rate-limit
errdisable detect cause psp shutdown vlan
errdisable detect cause security-violation shutdown vlan
errdisable detect cause sfp-config-mismatch
errdisable recovery cause all
errdisable recovery cause arp-inspection
errdisable recovery cause bpduguard
errdisable recovery cause channel-misconfig
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause dtp-flap
errdisable recovery cause gbic-invalid
errdisable recovery cause inline-power
errdisable recovery cause link-flap
errdisable recovery cause loopback
errdisable recovery cause mac-limit
errdisable recovery cause pagp-flap
errdisable recovery cause port-mode-failure
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause psecure-violation
errdisable recovery cause psp
errdisable recovery cause security-violation
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause storm-control
errdisable recovery cause udld
errdisable recovery cause vmp
ipv6 general-prefix WHATEVER ::/0
! Line comment
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-m2.html#wp4104485390
object-group network my-network-object-group
description test
host sjc.eng.ftp
host 192.0.2.1
192.0.2.0 255.255.0.0
group-object sjc-eng-ftp-servers
any
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a2.html#wp1330542825
access-list compiled
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-m2.html#wp3228486646
object-group security name
description test
security-group tag-id 1
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-m2.html#wp2628981827
object-group service name
description test
group-object serv-object1
tcp 200
ip
! OGACL
ip access-list extended OGACL ! This is a comment
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-p1.html#wp1459792010
permit tcp 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255
permit udp 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255
permit ip 192.0.2.0 0.0.0.255 any
permit ip any 192.0.2.0 0.0.0.255
permit ip host 192.0.2.0 host 192.0.2.0
permit ip host abc host a.b.c
permit ip object-group abc object-group a.b.c
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp 0
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp default
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp 63
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af11
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af12
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af13
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af21
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af22
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af23
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af31
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af32
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af33
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af41
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af42
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp af43
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs1
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs2
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs3
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs4
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs5
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs6
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp cs7
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 dscp ef
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence 0
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence 7
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence flash
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence flash-override
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence immediate
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence internet
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence network
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence priority
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 precedence routine
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 fragments
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option 0
permit ip 192.0.2.0 0.0.0.0 192.0.2.0 0.0.0.255 option 255
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option 255
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option add-ext
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option any-options
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option com-security
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option dps
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option encode
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option eool
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option ext-ip
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option ext-security
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option finn
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option imitd
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option lsr
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option match-all
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option match-any
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option mtup
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option mtur
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option no-op
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option psh
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option nsapa
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option reflect
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option record-route
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option rst
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option router-alert
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option sdb
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option security
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option ssr
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option stream-id
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option syn
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option timestamp
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option traceroute
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option ump
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option visa
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 option zsu
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 reflect ANOTHER_ACL_NAME
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 time-range TIME_RANGE_NAME
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 ttl eq 1
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 ttl gt 1
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 ttl lt 1
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 ttl neq 1
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 ttl range 10 20
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos 0
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos max-reliability
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos max-throughput
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos min-delay
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos min-monetary-cost
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 tos normal
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 log
permit ip 192.0.2.0 0.0.0.255 192.0.2.0 0.0.0.255 log name
ip access-list extended NAME ! This is a comment
remark blah blah
2 permit tcp any any eq bgp
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 eq 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 neq 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 ge 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 gt 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 lt 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 le 1234
permit tcp 192.0.2.0 0.0.0.63 192.0.2.0 0.0.0.255 established
permit tcp host 192.0.2.1 192.0.2.0 0.0.0.255 established
permit tcp object-group source_network object-group destination_network eq 1234
permit tcp object-group source_network object-group source_service object-group destination_network object-group destination_service
! Official Cisco Command Reference:
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-p1.html#wp1459792010
!
! This references a "port-match-criteria" which is never explained, so will go off of a bloggers post and hope for the best:
! https://routing-bits.com/2008/10/29/acl-object-groups-now-on-cisco-ios/
permit object-group service_group object-group source_network object-group destination_network
permit object-group service_group object-group source_network object-group destination_network
permit tcp host 192.0.2.1 host 192.0.2.0
deny ip any any
permit icmp any any
ip vrf NAME
description management
rd 192.0.2.1:5
route-target export 192.0.2.1:5
route-target import 192.0.2.1:5
vrf definition NAME
description management
rd 192.0.2.1:5
route-target export 192.0.2.1:5
route-target import 192.0.2.1:5
address-family ipv4
export map name
! A comment
address-family ipv6
exit
exit
ip access-list standard NAME
ip access-list standard NAME
10 permit 192.0.2.0 0.0.0.255
permit 192.0.2.0 0.0.0.127
20 deny 192.0.2.0 0.0.0.0
deny any
exit
router ospf 1
log-adjacency-changes
auto-cost reference-bandwidth 40000
area 2 authentication message-digest
area 2 nssa
passive-interface Vlan1
network 192.0.2.1 0.0.0.0 area 2
router bgp 123
address-family ipv4
network 192.0.2.0
exit
address-family ipv4 vrf NAME
exit-address-family
address-family ipv4 vrf NAME
network 192.0.2.0
network 192.0.2.0 mask 255.255.255.0
neighbor 192.0.2.1 activate
neighbor 192.0.2.1 shutdown
neighbor 192.0.2.1 next-hop-self
neighbor 192.0.2.1 soft-reconfiguration inbound
neighbor 192.0.2.1 soft-reconfiguration outbound
neighbor 192.0.2.1 password 1 secret
neighbor 192.0.2.1 password 5 $1$kPhVPvwe$1yLHh4Pa9WWv4Ys7omKV80
neighbor 192.0.2.1 password 7 1511021F0725
neighbor 192.0.2.1 prefix-list prefix_list in
neighbor 192.0.2.1 prefix-list prefix_list out
neighbor 192.0.2.1 route-map route_map in
neighbor 192.0.2.1 route-map route_map out
neighbor 192.0.2.1 inherit peer-policy policy
neighbor 192.0.2.1 send-community
neighbor 192.0.2.1 remote-as 20
neighbor 192.0.2.1 remote-as 20 shutdown
neighbor 192.0.2.1 timers 1 2
neighbor 192.0.2.1 ttl-security hops 1
neighbor 192.0.2.1 description description
neighbor 192.0.2.1 version 4
neighbor 192.0.2.1 transport path-mtu-discovery
exit
address-family ipv6 vrf NAME
exit
address-family ipv6 vrf NAME
network ::/0
neighbor ::1 activate
neighbor ::1 shutdown
neighbor ::1 remote-as 1
neighbor ::1 remote-as 1 shutdown
neighbor ::1 send-community
neighbor ::1 send-community both
neighbor ::1 send-community extended
neighbor ::1 ttl-security hops 1
neighbor ::1 version 4
neighbor ::1 timers 1 2
neighbor ::1 route-map NAME in
neighbor ::1 route-map NAME out
neighbor ::1 inherit peer-policy POLICY
neighbor ::1 soft-reconfiguration inbound
neighbor ::1 soft-reconfiguration outbound
neighbor ::1 transport path-mtu-discovery
router bgp 12
ip route 192.0.2.0 255.255.255.0 192.0.2.1
interface FortyGigE0/1
interface FortyGigabitEthernet0/1
exit
interface HundredGigE1/2/3
exit
interface vlan123
exit
interface vlan123
exit
interface Ethernet0
exit
interface FastEthernet0
exit
interface GigabitEthernet0
exit
interface TenGigabitEthernet0
exit
interface FortyGigabitEthernet0
exit
interface loopback0
exit
interface tunnel0
exit
interface port-channel0
exit
interface serial0
exit
interface vlan1
exit
interface Ethernet0
exit
! https://community.cisco.com/t5/switching/shortname-for-a-twentyfivegige-on-the-show-interface-status/td-p/3828548
! Issue #24 new interfaces
interface TwoGigabitEthernet1/0/1
exit
interface TwentyFiveGigabitEthernet0/1/2
exit
interface FiveGigabitEthernet1/0/2.200
exit
interface SVI0
exit
interface ISM0/1/2
exit
interface Embedded-Service-Engine0/0/0
exit
interface TwoGigabitEthernet1/0/1
description example
switchport access vlan 1000
switchport mode access
switchport voice vlan 3000
speed auto
speed auto 10 100 1000
speed 10
speed 100
speed 1000
speed nonegotiate
trust device cisco-phone
trust device cts
trust device ip-camera
trust device media-player
auto qos voip cisco-phone
auto qos voip cisco-softphone
auto qos voip trust
spanning-tree portfast
service-policy input name
service-policy output name
interface range GigabitEthernet0
exit
interface range GigabitEthernet1/1-2
description Hello
vrf forwarding RED
switchport mode access
switchport mode trunk
port-channel standalone-disable
switchport trunk encapsulation dot1q
encapsulation dot1q 123
bandwidth 10240
ip pim sparse-mode
ip pim dense-mode
ip ospf message-digest-key 1 md5 5 secret_password
ip ospf message-digest-key 1 md5 7 0822455D0A16
ip ospf cost 20000
speed 1000
full-duplex
load-interval 30
load-interval 300
ip dhcp snooping trust
switchport
switchport nonegotiate
switchport trunk encapsulation Dot1q
switchport trunk allowed vlan 123
switchport trunk allowed vlan add 123,456
switchport trunk allowed vlan remove 123-124,125
switchport mode access
switchport access vlan 123
ip address 192.0.2.0 255.255.255.0
ip helper-address 192.0.2.1
ip access-group NAME in
ip access-group NAME out
ip igmp query-interval 123
switchport voice vlan 123
ip redirects
channel-group 1 mode active
channel-group 1 mode on
ipv6 redirects
ip proxy-arp
ip vrf forwarding NAME
storm-control broadcast pps 1
storm-control multicast pps 160000
storm-control unknown-unicast kbps 64
storm-control broadcast kbps 1280000
storm-control action shutdown
storm-control action trap
ipv6 address PREFIX_NAME 0:0:0:1::/64 eui-64
ipv6 address PREFIX_NAME 0:0:0:1::/64
ipv6 address general-prefix 0:0:0:1::/64 eui-64
ipv6 nd prefix ff02::/64
ipv6 address fe80::5074:f2ff:feb1:a87f/64 link-local
ipv6 address fe80::5074:f2ff:feb1:a87f/64 link-local cga
standby version 2
standby 1 ip 192.0.2.1
standby 1 priority 200
standby 1 preempt
standby 1 preempt delay minimum 300 reload 300
standby 2 ipv6 autoconfig
standby 2 ipv6 ::1/64
standby 1 track 1 decrement 10
ipv6 enable
logging event link-status
logging event trunk-status
spanning-tree portfast
spanning-tree portfast edge
spanning-tree portfast trunk
shut
no switchport
no shutdown
shutdown
switchport port-security
switchport port-security aging static
switchport port-security aging time 1440
switchport port-security aging type absolute
switchport port-security aging type inactivity
switchport port-security mac-address 1024
switchport port-security mac-address sticky
switchport port-security mac-address sticky 0.0.1
switchport port-security mac-address vlan 4095
switchport port-security mac-address vlan 1,2-3
switchport port-security mac-address vlan 4095 voice
switchport port-security mac-address 0.0.1 vlan voice
switchport port-security maximum 4097
switchport port-security maximum 4097 vlan 4095
switchport port-security maximum 4097 vlan 1-4095
switchport port-security maximum 4097 vlan 1-2,4-4095
switchport port-security violation shutdown
switchport port-security violation restrict
switchport port-security violation protect
snmp trap link-status
snmp trap link-status permit duplicates
snmp trap if-monitor
spanning-tree bpduguard enable
spanning-tree bpduguard disable
service-policy output SOMETHING
service-policy input SOMETHING
exit
conf t
route-map ROUTE_MAP_NAME permit 10
match ip address prefix-list PREFIX-LIST
set extcommunity rt 12345:123
set extcommunity rt 12345:123 additive
route-map ROUTE_MAP_NAME permit 20
match ip address prefix-list PREFIX-LIST
set extcommunity rt 12345:123
set extcommunity rt 12345:123 additive
!
route-map ROUTE_MAP_NAME permit 30
match ip address ACL_NAME
set local-preference 123
snmp-server community TEST RO 1
snmp-server host 192.0.2.1 version 2c TEST
snmp-server host 192.0.2.1 version 3 auth TEST
snmp-server host 192.0.2.1 version 3 noauth TEST
snmp-server host 192.0.2.1 version 1 TEST udp-port 123 aaa server
snmp-server host 192.0.2.1 version 1 TEST cef
snmp-server host 192.0.2.1 version 1 TEST aaa server
snmp-server engineID local engineid-string
snmp-server file-transfer access-group NAME
snmp-server file-transfer access-group NAME protocol ftp
snmp-server file-transfer access-group NAME protocol scp
snmp-server file-transfer access-group NAME protocol rcp
snmp-server file-transfer access-group NAME protocol sftp
snmp-server file-transfer access-group NAME protocol tftp
snmp-server group NAME v1
snmp-server group NAME v2c
snmp-server group NAME v3 noauth
snmp-server group NAME v3 auth
snmp-server group NAME v3 priv
snmp-server group NAME v2c context NAME
snmp-server group NAME v2c context NAME read NAME
snmp-server group NAME v2c context NAME read NAME write NAME
snmp-server group NAME v2c context NAME read NAME write NAME notify NAME
snmp-server group NAME v2c context NAME read NAME write NAME notify NAME access ipv6 name
snmp-server group NAME v2c context NAME read NAME write NAME notify NAME access 99
snmp-server group NAME v2c context NAME read NAME write NAME notify NAME access name
snmp-server inform pending 25 retries 3 timeout 15
snmp-server inform pending 4294967295
snmp-server inform retries 100
snmp-server inform timeout 42949671
snmp-server ip dscp 63
snmp-server ip precedence 0
snmp-server contact ME
snmp-server location HERE
snmp-server manager
snmp-server manager session-timeout 600
snmp-server packetsize 484
snmp-server queue-length 10
snmp-server queue-limit dispatcher 100
snmp-server queue-limit engine 100
snmp-server queue-limit notification-host 10
snmp-server source-interface traps vlan10
snmp-server system-shutdown
snmp-server tftp-server-list ACL_NAME
snmp-server tftp-server-list 10
snmp-server trap authentication unknown-context
snmp-server trap authentication vrf
snmp-server trap link ietf
snmp-server trap link switchover
snmp-server trap retry 10
snmp-server trap timeout 30
snmp-server trap-source vlan10
snmp-server trap-timeout 30
snmp-server trap-authentication
snmp-server usm cisco
line con 0
stopbits 1
password secret_password
modem enable
transport preferred all
transport output all
exit
line aux 0
transport preferred all
transport output all
exit
line vty 0 4
access-class 42 in vrf-also
access-class ssh_access in vrf-also
transport input ssh telnet
transport input telnet ssh
transport input telnet
transport input ssh
logging synchronous
transport input ssh
exit
end
monitor session 1 source interface Te1/1 - 2
monitor session 1 destination analysis-module 1 data-port 1
ntp source GigabitEthernet1/2
ntp clock-period 123456
ntp server 192.0.2.1
logout
! https://www.cisco.com/c/en/us/td/docs/routers/access/1800/1801/software/configuration/guide/scg/sampconf.html
Current configuration : 3781 bytes
!
version 12.3
no service pad
service password-encryption
service sequence-numbers
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec
service timestamps log datetime msec localtime show-timezone
no service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
aaa new-model
!
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a1.html#wp3188257209
aaa authentication dot1x default enable
aaa authentication dot1x default group radius
aaa authentication dot1x default line
aaa authentication dot1x default local
aaa authentication dot1x default local-case
aaa authentication dot1x default none
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a1.html#wp3330656416
aaa accounting auth-proxy default none group name
aaa accounting system default none group name
aaa accounting commands 1 default none group name
aaa accounting commands 15 default none group name
aaa accounting network default none group name
aaa accounting exec default none group name
aaa accounting connection default none group name
aaa accounting dot1x default none group name
aaa accounting dot1x guarantee-first none group name
aaa accounting dot1x name vrf name start-stop group name
aaa accounting dot1x name vrf name stop-only group name
aaa accounting dot1x name vrf name none broadcast group name
aaa accounting dot1x name vrf name none broadcast radius
aaa group server radius rad_eap
server 192.0.2.1 auth-port 1812 acct-port 1813
!
aaa authentication login default local
aaa authentication login default auth-guest
aaa authentication login default enable
aaa authentication login default guest
aaa authentication login default if-authenticated
aaa authentication login default if-needed
aaa authentication login default krb5
aaa authentication login default krb-instance
aaa authentication login default krb-telnet
aaa authentication login default line
aaa authentication login default local
aaa authentication login default none
aaa authentication login default radius
aaa authentication login default rcmd
aaa authentication login default tacacs
aaa authentication login default tacacsplus
aaa authentication login LIST_NAME group GROUP_NAME enable none
aaa authentication login default group GROUP_NAME enable none
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a1.html#wp1598045725
aaa authorization auth-proxy default
aaa authorization auth-proxy list-name
aaa authorization cache list-name
aaa authorization config-commands list-name
aaa authorization configuration list-name
aaa authorization console list-name
aaa authorization exec list-name
aaa authorization ipmobile list-name
aaa authorization multicast list-name
aaa authorization network list-name
aaa authorization policy-if list-name
aaa authorization prepaid list-name
aaa authorization radius-proxy list-name
aaa authorization reverse-access list-name
aaa authorization subscriber-service list-name
aaa authorization template list-name
aaa authorization exec default cache group-name
aaa authorization exec default if-authenticated
aaa authorization exec default local
aaa authorization exec default none
aaa authorization exec default group ldap
aaa authorization exec default group radius
aaa authorization exec default group tacacs+
aaa authorization exec default group group-name
aaa authorization exec default group group-name cache group-name if-authenticated local none group ldap group radius group tacacs+ group group-name
aaa authorization auth-proxy default
! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a2.html#wp2385098032
aaa session-id unique
aaa session-id common
ip subnet-zero
ip cef
ip ssh version 2
ip scp server enable
!
vpdn enable
vpdn-group 1
request-dialin
protocol pppoe
!
interface dialer 1
ip address negotiated
ppp authentication chap
dialer pool 1
dialer-group 1
!
dialer-list 1 protocol ip permit
ip nat inside source list 1 interface dialer 0 overload
ip classless (default)
ip route 192.0.2.0 0.255.255.255 dialer 0
!
ip dhcp snooping
ip dhcp snooping vlan 123
ip dhcp excluded-address 192.0.2.1 192.0.2.10
!
ip dhcp pool vlan1
network 192.0.2.0 255.255.255.0
default-router 192.0.2.1
!
ip dhcp pool vlan2
network 192.0.2.0 255.255.255.0
default-router 192.0.2.1
!
ip dhcp pool vlan3
network 10.0.3.0 255.255.255.0
default-router 192.0.2.1
!
ip ips po max-events 100
no ftp-server write-enable
!
bridge irb
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
!
interface FastEthernet5
no ip address
!
interface FastEthernet6
no ip address
!
interface FastEthernet7
no ip address
!
interface FastEthernet8
no ip address
!
interface FastEthernet9
switchport mode trunk
no ip address
!
interface FastEthernet0
ip address 192.0.2.1 255.255.255.0
no ip directed-broadcast
ip nat outside
ip access-group 103 in
no cdp enable
crypto ipsec client ezvpn ezvpnclient outside
crypto map static-map
duplex auto
speed auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
!
interface Dot11Radio0
no ip address
!
broadcast-key vlan 1 change 45
!
encryption vlan 1 mode ciphers tkip
!
ssid cisco
vlan 1
authentication open
authentication network-eap eap_methods
authentication key-management wpa optional
!
ssid ciscowep
vlan 2
authentication open
!
ssid ciscowpa
vlan 3
authentication open
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
rts threshold 2312
power local cck 50
power local ofdm 30
channel 2462
station-role root
!
interface Dot11Radio0.1
description Cisco Open
encapsulation dot1Q 1 native
no cdp enable
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.2
encapsulation dot1Q 2
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 spanning-disabled
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
!
interface Dot11Radio0.3
encapsulation dot1Q 3
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 spanning-disabled
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
!
interface Vlan1
ip address 192.0.2.1 255.255.255.0
no ip directed-broadcast (default)
crypto ipsec client ezvpn ezvpnclient inside
ip inspect firewall in
no cdp enable
bridge-group 1
bridge-group 1 spanning-disabled
!
interface Vlan2
no ip address
bridge-group 2
bridge-group 2 spanning-disabled
!
interface Vlan3
no ip address
bridge-group 3
bridge-group 3 spanning-disabled
!
interface BVI1
ip address 192.0.2.1 255.255.255.0
ip nat inside
!
interface BVI2
ip address 192.0.2.1 255.255.255.0
!
interface BVI3
ip address 192.0.2.1 255.255.255.0
!
ip classless
!
ip http server
no ip http secure-server
!
radius-server local
nas 192.0.2.1 key 0 secret_password
group rad_eap
!
user jsomeone nthash 7 0123456789ABCDEF492143375828267C7A760E1113734624452725707C010B065B
user DOMAIN\someone nthash 7 0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF01
!