1、CISCO ROUTER 中的隐含命令-1CISCO ROUTER 中的隐含命令-1 2003-5-10 16:42:33 A aaa accounting delay-start 12.1 hidden global configuration command aaa accounting delay-start delays creation of the PPP Network start record until the peer IP address is known. aaa authorization address-authorization-exec 12.1 hidden
2、configuration command forces address authorzation for PPP when started from an exec. aaa group server radius | tacacs+ server-group-name server ip-address-1 auth-port port-number acct-port port-number server ip-address-2 auth-port port-number acct-port port-number deadtime minutes pick-method next |
3、 load-balanced | round-robin hidden pick-method server-group configuration command is used to specify an alternate method of selecting servers when one is not responding. As of 12.0(3)T the load-balanced and round-robin alternatives may be specified but may not be implemented. The Load-balanced keyw
4、ord indicates that the initial host is selected load-balanced. The Round-robin keyword indicates that the initial host is selected in a round-robin method with all servers being retried before starting from the beginnng of the list of servers. The Next keyword indicates that the list of servers is s
5、tepped through sequentially with each request always starting with the first server in the list. This last option is the default method of operation. aaa nas port description text hidden global configuration command causes the specified text to appear in TACACS+ accounting records with the attribute
6、 nas-description and the value of the text specified in the command. This command is useful during debugging allowing one to specify information about the environment or configuration in which the accounting record was generated. access-list number remark comment and ip access-list extended name rem
7、ark comment 12.1To add comments about the access list. This keyword is documented under Bug Id CSCdk14543. atm allow-max-vci interface command, will allow the cisco 7000 use VCIs above 1023. B boot system rom CONFIG boot module CONFIG bgp common-administration bgp dynamic-med-interval bgp process-dp
8、a C carrier delay value 12.1 Modifies the carrier delay time. A value of 0 disables the carrier delay clear ip eigrp as event Clear IP-EIGRP event logs clear ip eigrp as logging Stop IP-EIGRP event logging clear profile Clears CPU profiling clear startup-config same as erase startup-config) clear vt
9、emplate reset virtual templates clock rate 1200 | .| 2015232 hidden There is an anomaly between what is documented, what is displayed and what is entered for this command. The documentation indicates the command is clock rate and this is what IOS shows as the valid command in configuration mode. How
10、ever, a configuration display shows the command as clockrate as this is how is is saved in nvram. In addition, older rom monitors do not understand the newer clock rate command which would cause problems. What actually happens here is that clockrate is implemented as a hidden command and is not comp
11、leted by pressing tab and nor is there any help generated for it. But both clockrate and clock rate are accepted and there should be no problem in cutting and pasting the configurations. config overwrite copy core ? Does a full core dump, as write core but with more options csim start Emulate a voic
12、e call D debug buffer Additional buffer debugging debug crypto isakmp detail Crypto ISAKMP internals debugging debug crypto isakmp packet Crypto ISAKMP packet debugging debug dialer detailed debug ip ospf monitor Debug command which show opsf database sync debug ip packet . dump Outputs a hex if-qui
13、t (gets out of if-con mode) ip address dhcp On ethx, for cablemodems? ip forwarding accounting adjacency-update ip forwarding accounting non-recursive ip forwarding accounting per-prefix ip forwarding accounting prefix-length ip forwarding switch ip forwarding traffic-statistics ip forwarding traffi
14、c-statistics load-interval ip forwarding traffic-statistics update-rate no ip gratuitous-arps This disables unsolicited ARP replies that are useful to signal to a second (redundant) router on the same LAN segment that a remote gateway is present or has changed. ip igmp ip igmp immediate-leave ip igm
15、p immediate-leave group-list ip local-pool Legacy form of ip local pool, for backwards compatability ip ospf interface-retry x Retry for ospf process ip ospf-name-lookup ip slow-converge ip spd ip spd mode ip spd mode aggressive ip spd queue ip spd queue max-threshold ip spd queue min-threshold ip t
16、ftp boot-interface CONFIG ip tmstats bin internal | external CONFIG, when ip cef accounting non-recursive is configured isdn network tell router to be the “master“ on T1-CCS link using isdn switch-type primary-ni ipx flooding-unthrottled 12.1 global configuratiom command specifies that NLSP flooding
17、 should be unthrottled. ipx netbios-socket-input-checks 12.1 global configuratiom command limits the input of non-type 20 netbios bc packets ipx potential-pseudonode 12.1 global configuration command specifies to keep backup route and service data for NLSP potential pseudocode. ipx saps follow-route
18、-paths 12.1 An undocumented global configuration command. See Bug Id SCdm12190 for details. ipx server-split-horizon-on-server-paths 12.1 global configuratiom command specifies that split horizon SAP occurs on server, not route, paths. This command is documented in Bug Id CSCdm12190. ipx update inte
19、rval rip | sap seconds | passive | changes-only 12.1 The undocumented passive keyword specifies to listen but does not send normal periodic SAP updates nor flashes/changes updates. Queries will still be replied to. The update interval is set to the same interval as changes-only. The passive keyword
20、is documented under Bug Id CSCdj59918. isdn n200 | t200 | t203 number hidden commands change the value of various layer 2 ISDN timer settings. The number parameter is milliseconds for t200 and t203 and the maximum number of retransmits for the keyword n200. The current value of ISDN timers can be di
21、splayed using the show isdn timers EXEC command.The values of the timer settings depend on the switch type and typically are used only for homologation purposes. The typical value for t200 is 1 second, for t203 is 10 seconds and for n200 is 3 retransmits. J K L llc attach interface llc close aaaa ll
22、c offset aaaa llc open interface llc send aaaa logging event link-status | subif-link-status The no form of the undocumented logging event link-status interface commmand is used to turn off sending up, down and change messages for an interface to the syslog. This is very useful on live systems since
23、 these systems generate so many of these messages that other important messages are often hard to see. This is a companion command to the documented command no snmp trap link-status which prevents sending the associated snmp trap. loopback diag CONFIG loopback dec CONFIG: at dec chip loopback test C
24、ONFIG loopback micro-linear CONFIG loopback motorola CONFIG M memory scan Parity check for 7500 RSPs modem log cts | dcd | dsr | dtr | ri | rs232 | rts | tst 12.1 configuration command is used to specify which rs232 log events are to be saved for display by the show modem log command. When performin
25、g log analysis, various RS232 events fill the log within seconds rendering it useless for analysis (see Bug Id CSCdk86001). This command helps to filter out unwanted entries in the log. modem-mgmt csm debug-rbs 12.1 turns on debugging for Channelized T1 links in the AS5x00 series, providing info abo
26、ut ABCD bits in phone call supervision. Documented, here. Debug cas replaced this broken command. INTERNAL privileged EXEC command enables robbed bit signaling debugging within CSM. Issuing the command once turns on rbs debugging. Issueing the command a second time turns on special rbs debugging. Is
27、suing the command using the no-debug-rbs keyword turns off all degugging. This command is useful in looking at modem pooling and channelized T1s. To make this command available, the service internal global configuration command must be issued first. multilink bundle-name authenticated | both | endpo
28、int 12.1 This undocumented global configuration command selects the method for naming multilink bundles. “authenticated“ specifies using the peers authenticated name, “endpoint“ specifies using the peers endpoint discriminator and “both“ specifies using both the peers authenticated name and endpoint
29、 discriminator. N no environment-monitor Disable environment monitoring no ppp chap ignoreous For router with same hostname no service auto-reset On linecards no service password-recovery For the daring people :-) O P ppp direction callin | callout | dedicated 12.1 hidden identify the direction of p
30、pp activity. PPP attempts to determine if a call is callin or a callout or a dedicated line. This is how it detects spoofed CHAP challenges. When an async interface is added to a dialer interface, ppp cannot detect the difference between a dedicated line and a callin. So it assumes that it is a call
31、in. Adding the ppp direction dedicated overcomes this. ppp ipcp accept-address hidden interface command specifies that IOS is to revert to the previous operation regarding the acceptance of ip addresses from users. When enabled, the peer IP address will be accepted but is still subject to AAA verifi
32、cation, it will have precedence over any local address pool however. In IOS releases after 11.0(11), PPP IPCP negotiation was changed to accepts a remote peers “Her“ proposed address regardless, and the “Her“ address is subsequently added to the IP routing table as a host route. With IOS Releases la
33、ter than 11.0(11) the software checks the “Her“ address against the corresponding dialer map and if the address is different than the IP address detailed within the dialer map, a NAK will be sent and the dialer map IP address will be added as a host route in the IP routing table. ppp ipcp ignore-map
34、 ppp lcp fast-start 12.1 interface configuration command specifies to ignore the carrier timer and start PPP when an LCP packet arrives. ppp restart-timer msec hidden interface configuration command modifies the default value (2 seconds) for the restart timer. The translate command also has a simila
35、r keyword, restart. ppp timeout absolute Determines how long PPP link can be up default is infinity, configurable as 0 used under virtual-template interfaces. ppp timeout idle inbound ppp timeout idle either Determines how long PPP can wait until bringing the link down if there is no traffic. defaul
36、t is infinity, configurable as 0 used under virtual-template interfaces. profile Q R radius-server attribute 44 on-for-access-req hiden global configuration command sends attribute 44 in all access request packets. The command may be present in IOS 11.3(9+)AA (reference BugID CSCdk74429). This comma
37、nd is replaced by the radius-server attribute 44 include-in-access-req command. radius-server attribute 6 on-for-login-auth hidden global configuration command sends attribute 6 in all authentication packets (e.g., access requests). This command may be present in IOS 11.3(9+)T and 12.0(3+)T (referen
38、ce BugID CSCdk81561). radius-server attribute 6 support-multiple hidden global configuration command specifies that IOS is to support multiple Service-Type values per Radius profile in violation of the RFC for Radius. This command was added in IOS 12.1(2.3)T2 and 12.1(3.3)T (reference BugID CSCdr603
39、06). radius-server authorization default framed-protocol ppp hidden used to specify the default framed-protocol as PPP when this RADIUS attribute is missing. radius-server authorization permit missing service-type hidden global command is used to specify that a RADIUS entry without service-type info
40、rmation is permitted. It is used when RADIUS is being used as a database without regard to service-type. radius-server attribute nas-port extended hidden? command is replaced by the radius-server attribute nas-port format b command in some releases of IOS. For this reason it may be hidden in the IOS
41、 configuration mode but documented. In these versions of IOS, the command will be accepted but ignored. radius-server challenge-noecho 12.1 global configuration command specifies that data echoing to the screen is disabled during Access-Challenge. radius-server directed-request restricted right-to-l
42、eft hidden right-to-left keyword, which first appeared in IOS 12/0(7)T, enables right-to-left parsing of the user information (reference Bugid CSCdm77820). radius-server extended-portnames hidden global configuration command, which displays expanded interface information in the NAS-Port-Type attribu
43、te, has been replaced by the radius-server attribute nas-port extended command. This command configures RADIUS to expand the size of the NAS-Port attribute field to 32 bits. The upper 16 bits of the NAS-Port attribute display the type and number of the controlling interface; the lower 16 bits indica
44、te the interface undergoing authentication. This command first appeared in IOS Release 11.1. It has been hidden in IOS 11.3+ and IOS 12.0+ since the command has been replaced (reference Bugid CSCdj06817). radius-server host hostname | ip-address auth-port port-number acct-port port-number timeout se
45、conds retransmit retries key string ignore-acct-authenticator hidden ignore-acct-authenticator keyword specifies to ignore accounting authenticator errors and warn only (11.3(+)AA). radius-server ipc-limit done limit hidden radius-server retry method round-robin hidden global configuration command i
46、s used to specify an alternate method of selecting servers when one is not responding. As of 12.0(3)T alternates may not be defined and the round-robin alternative may not be implemented. radius-server secret string hidden global configuration command is used to specify the key shared with the RADIU
47、S server. This command is hidden because it has been replaced with the radius-server key command (reference BugID CSCdi44081). This command first appeared in IOS Release 11.1. radius-server unique-ident value hidden global configuration command is used to set high order bits for the accounting ident
48、ifier. The identifier field is a one octet field included in all RADIUS accounting packets which aids in matching requests and replies.CISCO ROUTER 中的隐含命令-2CISCO ROUTER 中的隐含命令-2 2003-5-10 16:43:18 S scheduler max-task-time 200 CONFIG: last val in milliseconds scheduler heapcheck process CONFIG: memo
49、ry validation, after proc scheduler heapcheck poll CONFIG: memory valid after some poll scheduler run-degraded CONFIG: in a failure mode? service internal CONFIG: additional debugs that are not normally available service slave-coredump CONFIG service log backtrace CONFIG: provides traceback with every logging instance set destination-preference show alignment show asciireg On switches show asp show async boot
