电脑技术学习

CISCO交换机命令全集加说明2

dn001

  
  Default
  180 seconds
  Command Mode
  Global configuration
  Example
  This example shows how to set the CDP holdtime to 15 seconds.
  hostname(config)# cdp holdtime 15
  Related Commands
  cdp (advertise-v2)
  cdp (enable)
  cdp (timer)
  show cdp (interface)
  show cdp (neighbors)
  cdp (timer)
  Use the cdp timer global configuration command to specify the rate at which Cisco Discovery Protocol (CDP) packets are sent. Use the no cdp timer command to reset the CDP rate to the default value.
  cdp timer timer
  no cdp timer
  Syntax Description
  timer Number between 5 and 900 seconds.
  
  Default
  60 seconds
  Command Mode
  Global configuration
  Example
  This example shows how to set the CDP packet rate to once in 5 seconds.
  hostname(config)# cdp timer 5
  Related Commands
  cdp (advertise-v2)
  cdp (enable)
  cdp (holdtime)
  show cdp (interface)
  show cdp (neighbors)
  cgmp
  Use the cgmp global configuration command to enable Cisco Group Management Protocol (CGMP) functionality on a switch. Use the no cgmp command to disable CGMP.
  cgmp
  no cgmp
  Syntax Description
  This command has no arguments or keyWords.
  Default
  CGMP is enabled.
  Command Mode
  Global configuration
  Example
  This example shows how to enable CGMP on a switch.
  hostname(config)# cgmp
  Related Commands
  cgmp (hold-time)
  cgmp (leave-processing)
  cgmp (remove)
  clear (cgmp)
  show (cgmp)
  cgmp (hold-time)
  Use the cgmp hold-time global configuration command to set the Cisco Group Management Protocol (CGMP) hold time. Use the no cgmp hold-time command to reset the default hold time.
  cgmp hold-time hold_time
  no cgmp hold-time
  Syntax Description
  holdtime Number between 5 and 900 seconds.
  
  Defaults
  Default hold time is 600 seconds.
  Command Mode
  Global configuration
  Example
  This example shows how to set the CGMP hold time to 40 seconds.
  hostname(config)# cgmp hold-time 40
  
  This example shows how to reset the CGMP hold time to its default value.
  hostname(config)# no cgmp hold-time
  Related Commands
  cgmp
  cgmp (leave-processing)
  cgmp (remove)
  clear (cgmp)
  show (cgmp)
  cgmp (leave-processing)
  Use the cgmp (leave-processing) global configuration command to enable Cisco Group Management Protocol (CGMP) Fast Leave processing. The no form of the command disables CGMP Fast Leave processing.
  cgmp leave-processing
  no cgmp leave-processing
  Syntax Description
  This command has no arguments or keywords.
  Default
  The default configuration is disabled.
  Command Mode
  Global configuration
  Usage Guidelines

  Fast Leave processing optimizes the use of network bandwidth by redUCing the delay between members of a multicast group leaving the group and the actual pruning of multicast traffic to that segment.
  This command is available only if CGMP is enabled. Otherwise, the command is not recognized.
  Example
  This command enables CGMP Fast Leave processing.
  hostname(config)# cgmp leave-processing
  Related Commands
  cgmp
  cgmp (hold-time)
  cgmp (remove)
  clear (cgmp)
  show (cgmp)
  cgmp (remove)
  Use the cgmp remove global configuration command to remove an address that has been added to the system by Cisco Group Management Protocol (CGMP) activity.
  cgmp remove mac-address
  Syntax Description
  mac-address MAC address.
  
  Default
  None
  Command Mode
  Global configuration
  Example
  This example shows how to remove the address 0100.5e00.0203 from the system.
  hostname(config)# cgmp remove 0100.5e00.0203
  Related Commands
  cgmp
  cgmp (hold-time)
  cgmp (leave-processing)
  clear (cgmp)
  show (cgmp)
  cgmp (reserved)
  Use the cgmp reserved global configuration command to permit Cisco Group Management Protocol (CGMP) reserved addresses (from 0100.5E00.0000 to 0100.5E00.00FF) to join as Group Destination Addresses. The no form of the command excludes these reserved addresses.
  cgmp reserved
  no cgmp reserved
  Syntax Description
  This command has no arguments or keywords.
  Default
  Permitted
  Command Mode
 

Global configuration
  Example
  This command shows how to exclude reserved addresses from the Group Destination Address for compatibility with Catalyst 5000 series switches.
  hostname# no cgmp reserved
  Related Commands
  cgmp
  cgmp (hold-time)
  cgmp (remove)
  cgmp (leave-processing)
  clear (cgmp)
  show (cgmp)
  clear (cgmp)
  Use the clear cgmp privileged Exec command to remove the specified multicast group or router.
  clear cgmp [vlan vlan-id] [group [address] router [address]]
  Syntax Description
  vlan vlan-id A VLAN ID number from 1 to 1005.
  group One or more multicast groups.
  router One or more routers.
  address MAC address of specific multicast group or router.
  
  Default
  None
  Command Mode
  Privileged Exec
  Usage Guidelines
  If the vlan option is specified with the group or router option, only multicast groups or routers in the specified VLAN are removed. If the vlan option is specified without group or router option, all multicast groups and routers are removed from the specified VLAN.
  Example
  This command removes all multicast groups and routers from VLAN 1.
  hostname# clear cgmp vlan 1
  
  This command removes all multicast groups.

  hostname# clear cgmp group
  
  This command removes all multicast routers.
  hostname# clear cgmp router
  
  This command removes the multicast group with the MAC address 0100.5e00.0128.
  hostname# clear cgmp group 0100.5e00.0128
  
  This command removes the multicast router with the MAC address 00e0.1e68.7751.
  hostname# clear cgmp router 00e0.1e68.7751
  Related Commands
  cgmp
  cgmp (hold-time)
  cgmp (leave-processing)
  cgmp (remove)
  show (cgmp)
  clear (dns-cache)
  Use the clear dns-cache privileged Exec command to remove all cached Domain Name System (DNS) entries from the switch.
  clear dns-cache
  Syntax Description
  This command has no arguments or keywords.
  Command Mode
  Privileged Exec
  Example
  This example shows how to clear all DNS entries for the switch.
  hostname# clear dns-cache
  Related Commands
  ip (domain-name)
  ip (name-server)
  clear (counters)
  Use the clear counters privileged Exec command to reset the interface counters for a switched port interface to zero.
  clear counters [type module/port]
  Syntax Description
  type Interface type: ethernet, fastethernet, fddi, atm, or port-channel.
  module Module interface number:0 for fixed1 or A for module A2 or B for module B
  port Port identification number or name:1 to 25 Ethernet (fixed)26, 27 Fast Ethernet (fixed)Port channel
  
  Command Mode
  Privileged Exec
  Usage Guidelines
  If you do not specify type module/port, the switch clears the counters for all interfaces.
  Example
  This example shows how to clear counters for the Ethernet port 1.
  hostname# clear counters ethernet 0/1
  Related Commands
  interface
  show (interfaces)
  clear (mac-address-table)
  Use the clear mac-address-table privileged Exec command to remove a specified address (or set of addresses) from the MAC address table.
  clear mac-address-table [dynamic restricted static permanent] [address mac-address]
  [interface type module/port]
  Syntax Description
  dynamic Clears only dynamic addresses.
  restricted static Clears only restricted static addresses.
  permanent Clears only permanent addresses.
  address Clears only a specified address.
  mac-address Target MAC address.
  interface Clears all addresses for an interface.
  type Interface type: ethernet, fastethernet, fddi, atm, or port channel.
  module The module interface number.0 for fixed1 or A for module A2 or B for module B
  port Port interface number ranging from 1 to 28:1 to 25 Ethernet (fixed)26, 27 Fast Ethernet (fixed)Port channel
  
  Default
  The dynamic addresses are cleared.
  Command Mode
  Privileged Exec
  Usage Guidelines
  If clear mac-address-table is invoked with no options, all dynamic addresses are removed. If you specify an address but do not specify an interface, the address is deleted from all interfaces. If you specify an interface but do not specify an address, all addresses on the specified interface are removed.

  If a targeted address is not present in the MAC forwarding table, the following error message appears:
  MAC address not found
  Example
  This example shows how to clear all dynamic addresses in the MAC forwarding table.
  hostname# clear mac-address-table
  
  This command clears the permanent address 0040.C80A.2F07 on Ethernet port 1.
  hostname# clear mac-address-table permanent address 0040.C80A.2F07 interface ether 0/1
  Related Commands
  mac-address-table (aging-time)
  mac-address-table (permanent)
  mac-address-table (restricted static)
  show (mac-address-table)
  show (mac-address-table security)
  clear (uplink-fast statistics)
  Use the clear uplink-fast statistics privileged Exec command to reset all Uplink Fast counter statistics to zero.
  clear uplink-fast statistics
  Syntax Description
  This command has no additional arguments or keywords.
  Command Mode
  Privileged Exec
  Usage Guidelines
  This command is not functional when bridge groups are enabled.
  Example
  This example shows how to reset all Uplink Fast counters to zero:
  hostname# clear uplink-fast statistics
  Related Commands
  uplink-fast
  show (uplink-fast)
  show (uplink-fast statistics)
  clear (vtp statistics)
  Use the clear vtp statistics privileged Exec command to reset all VLAN Trunk Protocol (VTP) statistics counters to zero.
  clear vtp statistics
  Syntax Description
  This command has no additional arguments or keywords.
  Command Mode
  Privileged Exec
  Usage Guidelines
  This command is not functional when bridge groups are enabled.
  Example
  This example shows how to reset all VTP statistics counters to zero.
  hostname# clear vtp statistics
  Related Commands
  delete (vtp)
  show (vtp)
  show (vtp statistics)
  vtp
  vtp trunk pruning-disable
  cluster
  The cluster global configuration command is used under certain conditions to add the switch back into a cluster. The no cluster command removes the switch from its cluster.
  cluster commander-address
  no cluster commander-address
  Syntax Description
  commander_address MAC address of commander switch.
  
  Command Mode
  Global configuration
  Usage Guidelines
  Caution We strongly recommend that you use a command switch management interface to add or remove Catalyst 1900 series or Catalyst 2820 series switches from a cluster. The cluster commander-address command is primarily for debugging and recovery purposes.If you use the no cluster command to remove a Catalyst 1900 series or Catalyst 2820 series switch, you cannot add the switch back into the cluster until you use one of the command switch management interfaces to remove, and then add the switch.
  To learn more about member switches in a cluster, refer to the Catalyst 1900 Series Installation and Configuration Guide or the Catalyst 2820 Series Installation and Configuration Guide.

  Example
  This example shows how to remove the switch from a cluster.
  hostname(config)# no cluster commander-address
  
  This example shows how to add the switch back into the cluster managed by command switch 00D0.5868.F580 after it has been removed and added again using one of the command switch management interfaces.
  hostname(config)# cluster 00D0.5868.F580
  Related Commands
  show cluster
  configure
  Use the configure privileged Exec command to enter the global configuration mode. Use the optional terminal keyword to specify a specific terminal.
  config [terminal]
  Syntax Description
  terminal Name of target terminal.
  
  Command Mode
  Privileged Exec
  Example
  This example shows how to enter global configuration mode.
  hostname# configure
  hostname(config)#
  
  This example shows how to enter global configuration mode from terminal t.
  hostname# configure t
  Related Commands
  disable
  enable
  end
  exit
  interface
  line console
  copy (nvram tFTP)
  Use the copy (nvram tftp) privileged Exec command to upload the running nondefault configuration to a Trivial File Transfer Protocol (TFTP) server host and the destination file dst_file.
  copy nvram tftp://host/dst_file
  Syntax Description
  //host/dst_file Target host and destination file where host is an IP address or a hostname.
  
  Command Mode
  Privileged Exec
  Usage Guidelines
  Error messages appear in the following situations:
  ?The host is unreachable (using existing time-out implementation).
  ?The host terminates the TFTP session.
  ?The host specified cannot be resolved through DNS.
  If other download or upload operations (firmware, configuration, web pages) are in progress, the following error message appears:
  Other downloads or uploads in progress. Please wait until existing download or upload is completed.
  Example
  This example shows how to use TFTP to upload the switch NVRAM configuration to the host spaniel using destination file matilda.cfg.
  hostname# copy nvram tftp://spaniel/matilda.cfg
  
  Configuration upload is successfully completed
  
  If the upload fails, the following message displays:
  Error: Configuration upload operation failed
  Related Commands
  copy (tftp)
  service (config)
  show (running-config)
  show (version)
  tftp (accept)
  tftp (server)
  copy (tftp)
  Use the copy tftp privileged Exec command to download a configuration or operation code file from the Trivial File Transfer Protocol (TFTP) server.
  copy tftp://host/src_file {opcode [type module] nvram}
  Syntax Description
  //host/src_file Host and source file where host is an IP address or hostname. Source filename can be up to 80 characters.

  opcode Download new operation code.
  type Interface type. The valid values are fddi and atm.
  module Interface number: 1 or A for module A, and 2 or B for module B.
  nvram Download a configuration file into NVRAM.
  
  Command Mode
  Privileged Exec
  Usage Guidelines
  You must specify type and module if the download is for a module.
  Downloaded configuration files are executed immediately. If the switch is connected to a console, any errors during execution will generate an error message. The switch attempts to execute all commands, irrespective of failures.
  When downloading an operation code file, the entire system (including other CLI sessions) is inactive for about 30 seconds after the file is retrieved.
  Error messages appear in the following situations:
  ?The operation code file is not in the correct format.
  ?The host is unreachable (using existing time-out implementation).
  ?The host aborts the TFTP session.
  ?The host specified cannot be resolved through DNS.
  ?The module specified does not have firmware or a configuration that can be downloaded.
  If other download or upload operations (firmware, configuration, web pages) are in progress, the following message appears:
  Other downloads or uploads in progress. Please wait until existing download or upload is completed.
  Examples
  This example shows how to download new system operational code op.bin from host spaniel.
  hostname# copy tftp://spaniel/op.bin opcode
  
  This example shows how to download new FDDI operational code fddi.bin from host spaniel to the FDDI module in slot A.
  hostname# copy tftp://spaniel/fddi.bin opcode fddi A
  
  TFTP successfully downloaded operational code
  
  This example shows how to download configuration file matilda.cfg to NVRAM from host spaniel.
  hostname# copy tftp://spaniel/matilda.cfg nvram
  
  TFTP successfully downloaded configuration file
  
  If the download fails, the following message displays:
  Error: TFTP failed to download the configuration file
  Related Commands
  copy (nvram tftp)
  service (config)
  show (running-config)
  show (version)
  tftp (accept)
  tftp (server)
  copy (xmodem)
  Use the copy xmodem privileged Exec command to download an operation code or firmware file by using the XMODEM protocol.
  copy xmodem: src_file opcode [type module]
  Syntax Description
  src_file Firmware filename.
  opcode Download new operation code.
  type Interface type. Valid values are fddi and atm.
  module Interface number: 1 or A for module 1, 2 or B for module 2.
  
  Default
  If you specify type and module, the file copies the code or file to the specified module. When type and module are not specified, the file copies them to the switch firmware.
  Command Mode
  Privileged Exec
  Usage Guidelines
  You cannot enter any new information or commands until the download is completed. After downloading operation code file, the entire system (including other CLI sessions) is inactive for about 30 seconds.

  Example
  This example shows how to download the operational code file.
  hostname# copy xmodemp_code.bin opcode
  
  This shows how to download new FDDI operational code fddi.bin to module slot A.
  hostname# copy xmodem:fddi.bin opcode fddi A
  Related Commands
  copy (tftp)
  copy (xmodem)
  show (running-config)
  show (version)
  databits
  Use the databits line-configuration command to set the data bits per character for a port.
  databits [7 8]
  Syntax Description
  7 or 8 Number of data bits per character.
  
  Default
  8 data bits per character.
  Command Mode
  Line configuration
  Example
  This example shows how to set the number of data bits per character to 7.
  hostname(config-line)# databits 7
  Related Commands
  autobaud
  line console
  modem (dialin)
  parity
  show (line)
  show (terminal)
  speed
  stopbits
  terminal
  delete (nvram)
  Use the delete nvram privileged Exec command to reset the system or module configuration to factory defaults.
  delete nvram [type module]
  Syntax Description
  type Interface type. Valid values are fddi and atm.
  module Module interface number: 1 or A for module A, and 2 or B for module B.
  
  Default
  The system or module is reset to factory defaults.
  Command Mode
  Privileged Exec
  Usage Guidelines
  
  Note If you reset a Catalyst 2820 switch by using the delete nvram command, you reset both the system and the module. However, resetting the switch to factory defaults does not reset module arguments stored in the module NVRAM.
  
  Examples
  This example shows how to reset system configuration to factory defaults.
  hostname(config)# delete nvram
  
  This command resets the switch with factory defaults. All parameters will revert to their default factory settings. All static system and dynamic addresses will be removed.
  Reset system with factory defaults, [y]es or [n]o?
  
  Press Y or N to proceed.
  This example shows how to reset the ATM module in slot A to factory defaults.
  hostname(config)# delete nvram atm 1
  
  This command resets the module and restores all settings to factory defaults.
  The module is deinstalled until it successfully completes its self tests.
  
  Reset module with factory defaults, [Y]es or [N]o?
  
  Press Y or N to proceed.
  Related Commands
  copy (tftp)
  reload
  delete (vtp)
  Use the delete vtp privileged Exec command to set the system VLAN Trunk Protocol (VTP) configuration back to factory defaults.
  delete vtp
  Syntax Description
  This command has no additional arguments or keywords.
  Command Mode
  Privileged Exec
  Usage Guidelines
  Resetting the system VTP configuration also resets the system. This command first prompts the user to confirm:

  This command resets the switch VTP arguments to factory defaults. All other arguments will be unchanged.
  Reset system VTP arguments to factory defaults, [y]es or [n]o?
  
  Press Y or N to proceed.
  Example
  This example shows how to reset system VTP configuration to factory defaults.
  hostname# delete vtp
  Related Commands
  clear (vtp statistics)
  show (vtp)
  show (vtp statistics)
  vtp
  vtp trunk pruning-disable
  description
  Use the description interface configuration command to describe or name an interface. Use the no description command to remove a description from an interface.
  description name-string
  no description
  Syntax Description
  name-string A text description between 1 and 80 alphanumeric characters.
  
  Default
  This command has no default value.
  Command Mode
  Interface configuration
  Usage Guidelines
  To use the description command, you must first identify the interface you want while working in global configuration mode. Enter the interface command with an interface identifier to enter interface configuration mode, where you can then enter a description.
  If you want to enter a description with spaces between characters, you must enclose the string in quotation marks (see "Paul's machine" example, below)
  Example
  This example shows how to give the name Hal to Ethernet port 1.
  hostname(config)# interface ether 0/1
  hostname(config-if)# description Hal
  
  This example shows how to give the name Paul's machine to ATM module 1.
  hostname(config)# interface atm A
  hostname(config-if)# description "Paul's machine"
  
  This example shows how to give the description server1 to port 1 on ATM module 1.
  hostname(config)# interface atm A
  hostname(config-if)# description server1
  Related Commands
  interface
  show cdp (interface)
  show (interfaces)
  disable
  Use the disable privileged Exec command to exit the privileged Access level and enter user levels.
  disable
  Syntax Description
  This command has no arguments or keywords.
  Command Mode
  Privileged Exec
  Example
  This example shows how to exit privileged Exec mode and change to user Exec mode.
  hostname# disable
  Related Command
  configure
  enable
  end
  exit
  interface
  line console
  duplex
  Use the duplex interface configuration command to enable duplex mode for an interface.
  duplex {auto full full-flow-control half}
  Syntax Description
  auto Auto-negotiation of duplex mode.
  full Full-duplex mode.
  full-flow-control Force full-duplex mode with flow control.
  half Half-duplex mode.
  
  Defaults
  For 100-Mbps TX ports: duplex auto.
  For all other ports that support half- and full-duplex: duplex half.

  Command Mode
  Interface configuration
  Usage Guidelines
  Use the auto argument only for fixed Fast Ethernet TX ports. In auto-negotiation mode, the switch attempts to negotiate full-duplex connectivity with the connecting device. If negotiation is successful, the port operates in full-duplex mode. If the connecting device is unable to operate in full-duplex, the port operates in half-duplex. This process is repeated whenever there is a change in link status.
  Example
  This example shows how to set the port to full-duplex mode.
  hostname(config-if)# duplex full
  Related Commands
  interface
  show (interfaces)
  back-pressure
  ecc
  Use the ecc global configuration command to enable Enhanced Congestion Control (ECC). This command allows frames to be discarded early when a port becomes congested, which limits the number of frames queued on a port. Use the no ecc command to disable congestion control.
  ecc {10M A B} {adaptive moderate-aggressive aggressive}
  no ecc [10M A B]
  Syntax Description
  10M Congestion control for 10-Mbps ports.
  A Congestion control for port A. For single Fast Ethernet fixed and modular ports only.
  B Congestion control for port B. For single Fast Ethernet fixed and modular ports only.
  adaptive Adaptive congestion control.
  moderate-aggressive Moderately aggressive congestion control.
  aggressive Aggressive congestion control.
  
  Default
  Enhanced congestion control is disabled.
  Command Mode
  Global configuration
  Examples
  This example shows how to set enhanced congestion control for the 10-Mbps Ethernet ports to adaptive.
  hostname(config)# ecc 10m adaptive
  
  This example shows how to set enhanced congestion control for Fast Ethernet port A to aggressive.
  hostname(config)# ecc A aggressive
  Related Command
  show (port system)
  enable
  Use the enable Exec command to enter privileged Exec mode.
  enable [access-level]
  Syntax Description
  access-level 1 through 14 (user Exec level) or 15 (privileged Exec level).
  
  Default
  The access-level default for initial login is 1. The default access level after login is 15.
  Command Mode
  User and privileged Exec
  Usage Guidelines
  If a password is configured, you are prompted for the password:
  Password:
  
  You are allowed three attempts to provide the correct password. The same prompt is repeated until you enter the correct password or you exceed the maximum number of attempts. If the password fails after the maximum attempts, the following error message appears:
  Bad password.
  Example
  This example shows you how to move from user Exec mode access to privileged Exec mode access.
  hostname> enable
  hostname#
  Related Command
  configure
  disable
  end
  exit
  interface
  line console
  enable (password)

  Use the enable password global configuration command to set unencrypted user Exec or privileged Exec passwords. Use the no enable password command to clear the password.
  enable password level <1-15>
  no enable password level level
  Syntax Description
  level <1-15> Level for which the password applies:1-14 user Exec privileges.15 privileged Exec privileges.
  password A noncase-sensitive string of between 4 and 8 characters, spaces, and punctuation (except double quotes). Password strings with blank spaces must be enclosed in double quotes.
  
  Default
  No default password.
  Command Mode
  Global configuration
  Usage Guidelines
  The level argument must be specified.
  For more information about assigning passwords of various levels and encryption modes, see "Understanding Command Modes" in "Overview."
  Examples
  This example shows how to set an unencrypted privileged Exec password to WILLOW 6.
  hostname(config)# enable password level 15 "WiLLoW 6"
  
  Both of these examples show how to set an unencrypted user Exec password to MAY DAY.
  hostname(config)# enable password level 1 "May Day"
  hostname(config)# enable password level 8 "may day"
  Related Commands
  enable (secret)
  enable (use-tacacs)
  enable (secret)
  Use the enable secret global configuration command to set encrypted user Exec or privileged Exec passwords. Use the no enable secret command to clear the password.
  enable secret [level <1-15>] [0 5 ]
  no enable secret [level <1-15>]
  Syntax Description
  level <1-15> Level for which the password applies:1-14 user Exec privileges.15 privileged Exec privileges.
  0 Specifies an unencrypted password follows.
  5 Specifies an encrypted password follows.
  password A case-sensitive string of between 1 and 25 characters, spaces, and punctuation.
  
  Default
  Privilege level 15, unencrypted.
  No default password.
  Command Mode
  Global configuration
  Usage Guidelines
  
  Note Encrypted passwords are typically used only in configuration files generated by the switch.
  
  The level argument must be used to specify any level 1 through 14 encrypted password. The level argument is optional when specifying a default level 15 encrypted password.
  Although levels 2 to 14 are accepted, levels 1 to 14 map to user-level password (level 1). For more information about assigning passwords of various levels and encryption modes, see "Understanding Command Modes" in the "Overview" chapter.
  If you enter a password that begins with a number followed by a space, an error message appears:
  hostname(config)# enable secret level 1 9 lives
  Invalid encryption type: 9
  Examples
  The following examples show different ways to set an unencrypted privileged Exec password to Pass&WoRd-87.
  hostname(config)# enable secret Pass&WoRd-87

  hostname(config)# enable secret 0 Pass&WoRd-87
  hostname(config)# enable secret level 15 Pass&WoRd-87
  hostname(config)# enable secret level 15 0 Pass&WoRd-87
  
  The following examples show two ways to set an encrypted privileged Exec password to grandkey.
  hostname(config)# enable secret 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
  hostname(config)# enable secret level 15 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
  
  The following examples show two ways to set an unencrypted user Exec password to Forescore & 7 years ago.
  hostname(config)# enable secret level 1 Forescore & 7 years ago
  hostname(config)# enable secret level 12 0 Forescore & 7 years ago
  
  The following example shows how to set an encrypted user Exec password to grandkey.
  hostname(config)# enable secret level 14 5 $1$8KiD$mmxIOicclo6PgXTq97Rfb/
  Related Commands
  enable (password)
  enable (use-tacacs)
  enable (use-tacacs)
  Use the enable use-tacacs global configuration command to use the Cisco Terminal Access Controller Access Control System Plus (TACACS+) for authentication of all switch passwords from a central authentication server. Use the no enable use-tacacs command to disable central authentication of switch passwords.
  enable use-tacacs
  no enable use-tacacs
  Syntax Description
  This command has no additional arguments or keywords.
  Default
  Disabled.
  Command Mode
  Global configuration
  Usage Guidelines
  If you do not use TACACS+ to authenticate passwords, local authentication is enabled.
  Example
  This example shows how to use TACACS+ for central authentication of switch passwords.
  hostname(config)# enable use-tacacs
  Related Commands
  enable (password)
  enable (secret)
  login (tacacs)
  show (tacacs)
  tacacs-server (last-resort)
  end
  Use the end command from global configuration mode (config), interface configuration mode (config-if), and line configuration mode (config-line) to exit the current mode and enter privileged Exec mode.
  end
  Syntax Description
  This command has no arguments or keywords.
  Default
  None
  Command Mode
  All configuration modes.
  Usage Guidelines
  To exit the system and terminate the console or telnet session, use the exit command.
  Example
  This example shows how to exit the global configuration mode and enter privileged Exec mode.
  hostname(config)# end
  hostname#
  Related Commands
  configure
  disable
  enable
  exit
  interface
  line console
  exit
  Use the exit configuration command to exit the system or current configuration mode.
  exit
  Syntax Description
  This command has no arguments or keywords.
  Command Mode
  All configuration and Exec modes.
  Usage Guidelines
  If the current mode is privileged or user Exec, this command exits the system and terminates the console or Telnet session. If the current mode is global configuration, this commands sets the mode to privileged Exec. If the current mode is other than global configuration, this command sets the mode to global configuration.

  Example
  This example shows how to exit from global configuration mode and enter privileged Exec mode:
  hostname(config)# exit
  hostname#
  
  This example shows how to exit from interface configuration mode and enter global configuration mode:
  hostname(config-if)# exit
  hostname(config)#
  Related Commands
  configure
  disable
  enable
  end
  interface
  line console
  fddi (authorization)
  Use the fddi authorization interface configuration command to enable authorization checking for the station management (SMT) entity. Use the no fddi authorization command to disable authorization checking.
  fddi authorization
  no fddi authorization
  Syntax Description
  This command has no additional arguments or keywords.
  Default
  FDDI authorization is disabled.
  Command Mode
  Interface configuration
  Usage Guidelines
  When authorization string checking is enabled, the FDDI module uses the current authorization string to verify SMT requests from remote stations. This command is only valid within FDDI module interface-configuration mode.
  Example
  This example shows how to enable authorization string checking.
  hostname(config-if)# fddi authorization
  
  This example shows how to disable authorization string checking.
  hostname(config-if)# no fddi authorization
  Related Commands
  fddi (auth-string)
  fddi (notify-timer)
  fddi (novell-snap-translation)
  fddi (unmatched-snap-translation)
  interface
  show (interfaces)
  fddi (auth-string)
  Use the fddi auth-string interface configuration command to assign a new authorization string value used in the verification of station management (SMT) requests. Use the no fddi auth-string command to clear the existing authorization string.
  fddi auth-string string
  no fddi auth-string
  Syntax Description
  string A string of 4 to 80 alphanumeric characters entered in multiples of 4 characters.
  
  Default
  No FDDI authorization string is set.
  Command Mode
  Interface configuration
  Usage Guidelines
  This command is only valid within FDDI module interface-configuration mode.
  
  Note You must enter an authorization string with a number of characters (including punctuation and numbers) that is divisible by 4.
  
  Example
  This example shows how to assign the authorization string value check_it (8 characters).
  hostname(config-if)# fddi auth-string check_it
  Related Commands
  fddi (authorization)
  fddi (notify-timer)
  fddi (novell-snap-translation)
  fddi (unmatched-snap-translation)
  interface
  show (interfaces)
  fddi (notify-timer)
  Use the fddi notify-timer interface configuration command to assign a new timer value for the Neighbor Notification Protocol. Use the no fddi notify-timer command to set the timer value to module defaults.

  fddi notify-timer seconds
  no fddi notify-timer
  Syntax Description
  seconds A number between 2 and 30 seconds.