IOS Navigation
Video – IOS CLI Primary Command Modes
This video will cover the following:
• User EXEC mode
• Privilege EXEC mode
• Global Config mode
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1
IOS Navigation
Navigation Between IOS Modes
Privileged EXEC Mode:
• To move from user EXEC mode to privilege
EXEC mode, use the enabled command.
Global Configuration Mode:
• To move in and out of global configuration
mode, use the configure terminal
command. To return to privilege EXEC
mode, use the exit command.
Line Configuration Mode:
• To move in and out of line configuration
mode, use the line command followed by
the management line type. To return to
global configuration mode, use the exit
command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
IOS Navigation
Navigation Between IOS Modes (Cont.)
Subconfiguration Modes:
• To move out of any subconfiguration mode to
get back to global configuration mode, use
the exit command. To return to privilege
EXEC mode, use the end command or key
combination Ctrl +Z.
• To move directly from one subconfiguration
mode to another, type in the desired
subconfiguration mode command. In the
example, the command prompt changes from
(config-line)# to (config-if)#.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
IOS Navigation
Video – Navigation Between IOS Modes
This video will cover the following:
• enable
• disable
• configure terminal
• exit
• end
• Control + Z on keyboard
• Other commands to enter sub configuration modes
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
2.3 The Command Structure
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
The Command Structure
Basic IOS Command Structure
• Keyword – This is a specific parameter defined in the operating system (in the figure, ip
protocols).
• Argument - This is not predefined; it is a value or variable defined by the user (in the
figure, [Link]).
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
The Command Structure
IOS Command Syntax Check
A command might require one or more arguments. To determine the keywords
and arguments required for a command, refer to the command syntax.
• Boldface text indicates commands and keywords that are entered as shown.
• Italic text indicates an argument for which the user provides the value.
Convention Description
Boldface text indicates commands and keywords that you enter literally as
boldface
shown.
italics Italic text indicates arguments for which you supply values.
[x] Square brackets indicate an optional element (keyword or argument).
{x} Braces indicate a required element (keyword or argument).
Braces and vertical lines within square brackets indicate a required choice
[x {y | z }] within an optional element. Spaces are used to clearly delineate parts of the
command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
The Command Structure
IOS Command Syntax Check (Cont.)
The command syntax provides the pattern, or format, that must be used when
entering a command.
The command is ping and the user-
defined argument is the ip-address of the
destination device. For example, ping
[Link].
The command is traceroute and the
user-defined argument is the ip-
address of the destination device. For
example, traceroute [Link].
If a command is complex with multiple arguments, you may see it represented like this:
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
The Command Structure
IOS Help Features
The IOS has two forms of help available: context-sensitive help and command
syntax check.
• Context-sensitive help enables you to • Command syntax check verifies that
quickly find answers to these questions: a valid command was entered by
• Which commands are available in each command the user.
mode? • If the interpreter cannot understand the
• Which commands start with specific characters or command being entered, it will provide
group of characters? feedback describing what is wrong with
the command.
• Which arguments and keywords are available to
particular commands?
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
The Command Structure
Video – Context Sensitive Help and Command Syntax Checker
This video will cover the following:
• Use the help command in user EXEC, privileged EXEC, and global config mode
• Finish commands and arguments with the help command
• Use the command syntax checker to fix syntax errors and incomplete commands
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
The Command Structure
Hot Keys and Shortcuts
• The IOS CLI provides hot keys and shortcuts that make configuring, monitoring, and
troubleshooting easier.
• Commands and keywords can be shortened to the minimum number of characters
that identify a unique selection. For example, the configure command can be
shortened to conf because configure is the only command that begins with conf.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
The Command Structure
Hot Keys and Shortcuts (Cont.)
The table below is a brief list of keystrokes to enhance command line editing .
Keystroke Description
Tab Completes a partial command name entry.
Backspace Erases the character to the left of the cursor.
Left Arrow or Ctrl+B Moves the cursor one character to the left.
Right Arrow or Ctrl+F Moves the cursor one character to the right.
Recalls the commands in the history buffer, beginning with the most recent
Up Arrow or Ctrl+P
commands. © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
The Command Structure
Hot Keys and Shortcuts (Cont.)
• When a command output produces more text
than can be displayed in a terminal window, • The table below lists commands that can
the IOS will display a “--More--” prompt. The be used to exit out of an operation.
table below describes the keystrokes that
can be used when this prompt is displayed.
Keystroke Description Keystroke Description
When in any configuration mode, ends the
Enter Key Displays the next line. Ctrl-C configuration mode and returns to privileged EXEC
mode.
When in any configuration mode, ends the
Space Bar Displays the next screen. Ctrl-Z configuration mode and returns to privileged EXEC
mode.
Ends the display string, returning to All-purpose break sequence used to abort DNS
Any other key Ctrl-Shift-6
privileged EXEC mode. lookups, traceroutes, pings, etc.
Note: To see more hot keys and shortcuts refer to 2.3.5.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
The Command Structure
Video – Hot Keys and Shortcuts
This video will cover the following:
• Tab key (tab completion)
• Command shortening
• Up and down arrow key
• CTRL + C
• CTRL + Z
• CTRL + Shift + 6
• CTRL + R
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
The Command Structure
Packet Tracer – Navigate the IOS
In this Packet Tracer, you will do the following:
• Establish Basic Connections, Access the CLI, and Explore Help
• Explore EXEC Modes
• Set the Clock
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
The Command Structure
Lab – Navigate the IOS by Using Tera Term for Console
Connectivity
In this lab, you complete the following objectives:
• Access a Cisco Switch through the Serial Console Port
• Display and Configure Basic Device Settings
• (Optional) Access a Cisco Router Using a Mini-USB Console Cable
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
2.4 Basic Device Configuration
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
Basic Device Configuration
Device Names
• The first configuration command on any device should be to
give it a unique hostname.
• By default, all devices are assigned a factory default name.
For example, a Cisco IOS switch is "Switch.”
• Guideline for naming devices:
• Start with a letter
• Contain no spaces
• End with a letter or digit
Note: To return the switch to the default
• Use only letters, digits, and dashes
prompt, use the no hostname global
• Be less than 64 characters in length config command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
Basic Device Configuration
Password Guidelines
• The use of weak or easily guessed passwords are a security concern.
• All networking devices should limit administrative access by securing privileged EXEC,
user EXEC, and remote Telnet access with passwords. In addition, all passwords should
be encrypted and legal notifications provided.
• Password Guidelines:
• Use passwords that are more than eight
characters in length.
• Use a combination of upper and lowercase
letters, numbers, special characters, and/or
numeric sequences. Note: Most of the labs in this course use
simple passwords such as cisco or class.
• Avoid using the same password for all devices. These passwords are considered weak and
• Do not use common words because they are easily guessable and should be avoided in
easily guessed. production environments.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
Basic Device Configuration
Configure Passwords
Securing user EXEC mode access:
• First enter line console configuration mode
using the line console 0 command in global
configuration mode.
• Next, specify the user EXEC mode password
using the password password command.
• Finally, enable user EXEC access using
the login command.
Securing privileged EXEC mode access:
• First enter global configuration mode.
• Next, use the enable secret password command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20
Basic Device Configuration
Configure Passwords (Cont.)
Securing VTY line access:
• First enter line VTY configuration mode
using the line vty 0 15 command in
global configuration mode.
• Next, specify the VTY password using
the password password command.
• Finally, enable VTY access using
the login command.
Note: VTY lines enable remote access using Telnet or SSH to the device. Many Cisco
switches support up to 16 VTY lines that are numbered 0 to 15.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
Basic Device Configuration
Encrypt Passwords
The startup-config and running-config files Use the show running-config command
display most passwords in plaintext. to verify that the passwords on the device
are now encrypted.
To encrypt all plaintext passwords, use
the service password-encryption global config
command.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22
Basic Device Configuration
Banner Messages
A banner message is important to warn
unauthorized personnel from attempting
to access the device.
To create a banner message of the day
on a network device, use the banner The banner will be displayed on attempts to access the device.
motd # the message of the day # global
config command.
Note: The “#” in the command syntax is called
the delimiting character. It is entered before
and after the message.
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23
Basic Device Configuration
Video – Secure Administrative Access to a Switch
This video will cover the following:
• Access the command line to secure the switch
• Secure access to the console port
• Secure virtual terminal access for remote access
• Encrypt passwords on the switch
• Configure the banner message
• Verify security changes
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24