# Cisco Networking/CCENT/IOS Basics

This lesson covers basic router and switch configuration using IOS commands.

## Objectives and Skills

Objectives and skills for the IOS basics portion of Cisco CCENT certification include:
* Configure and verify utilizing the CLI to set basic Router configuration
** Hostname
** banner
** motd
** Local user & password
** Enable secret password
** Console logins
** exec-timeout
** service password encryption
** copy run start

## Readings

* Wikipedia: Cisco IOS
* Cisco: IOS and Configuration Basics
* Cisco: Using the Command-Line Interface in Cisco IOS Software
* Cisco: Telnet, Console and AUX Port Passwords on Cisco Routers Configuration Example

## Multimedia

* YouTube: Cisco IOS CLI for Beginners - Part 1
* YouTube: Cisco IOS CLI for Beginners - Part 2
* YouTube: Cisco IOS CLI for Beginners - Part 3
* YouTube: Cisco IOS CLI for Beginners - Part 4
* YouTube: Cisco Router IOS - Command Line basics

## Examples
### Global Configuration
#### enable

To enter privileged EXEC mode, or any other security level set by a system administrator, use the enable EXEC command.

#### disable

To exit privileged EXEC mode and return to user EXEC mode, or to exit to a lower privilege level, enter the disable EXEC command.

#### configure terminal

To enter global configuration mode, use the configure terminal command in privileged EXEC mode.

#### exit

To exit any configuration mode to the next highest mode in the CLI mode hierarchy, use the exit command in any configuration mode. To close an active terminal session by logging off the router, use the exit command in EXEC mode.

#### hostname

To specify or modify the hostname for the network server, use the hostname command in global configuration mode.

#### ip domain-name

To configure the domain name server (DNS) domain name, use the ip domain-name command in global configuration mode.

#### banner login

To define and enable a customized banner to be displayed before the username and password login prompts, use the banner login global configuration command.

#### banner motd

To define and enable a message-of-the-day (MOTD) banner, use the banner motd global configuration command.

#### Command Sequence

A global configuration command sequence to enable privileged EXEC mode, enter global configuration mode, specify a hostname and banner messages, exit global configuration mode, disable privileged EXEC mode, and log off the router is:

### Password Configuration
#### line

To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.

#### password

To specify a password on a line, use the password command in line configuration mode.

#### login

To enable password checking at login, use the login command in line configuration mode.

#### username

To establish a username-based authentication system, use the username command in global configuration mode.

#### login local

To enable username and password checking at login, use the login local command in line configuration mode.

#### exec-timeout

To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-timeout line configuration command.

#### enable password

To set a local clear-text password to control access to various privilege levels, use the enable password command in global configuration mode.

#### enable secret

To specify an additional layer of security over the enable password command, use the enable secret command in global configuration mode.

#### service password-encryption

To encrypt passwords, use the service password-encryption command in global configuration mode.

#### Command Sequence

A command sequence to configure passwords might be similar to the following.
A command sequence to configure usernames and passwords might be similar to the following.

### Configuration Management
#### show running-config

To display the contents of the current running configuration file or the configuration for a specific module, Layer 2 VLAN, class map, interface, map class, policy map, or virtual circuit (VC) class, use the show running-config command in privileged EXEC mode.

#### show startup-config

The show startup-config command displays the startup configuration file contained in NVRAM or specified by the CONFIG_FILE environment variable.

#### copy

To copy any file from a source to a destination, use the copy command in privileged EXEC or diagnostic mode.

#### erase

To erase a file system or all files available on a file system, use the erase command in privileged EXEC or diagnostic mode.

#### reload

To reload the operating system, use the reload command in privileged EXEC or diagnostic mode.

#### Command Sequence

A command sequence to manage device configuration might be similar to the following.

## Activities

* Connect to a Cisco router and practice using IOS commands.
** Review TechRepublic: 10 Commands You Should Master When Working with the Cisco IOS.
** Add a router to a new GNS3 project and start the device.
** Open the console for the router and practice using the following commands.
*** show running-config
*** show interface
*** show ip interface
*** show ip interface brief
*** show ip route
*** show version
* Configure a router hostname, banner login, and banner motd messages.
** Add a router to a new GNS3 project and start the device.
** Open the console for the router and practice using the following commands.
*** enable
*** configure terminal
*** hostname
*** banner login
*** banner motd
*** exit
** Exit the router console session and open the console again to test the configuration.
* Configure router console password security.
** Add a router to a new GNS3 project and start the device.
** Open the console for the router and practice using the following commands.
*** enable
*** configure terminal
*** line console 0
*** password
*** login
*** exec-timeout
*** enable secret
*** service password-encryption
*** exit
** Verify the configuration using the following command.
*** show running-config
** Exit the router console session and open the console again to test the configuration.
* Configure router console username and password security.
** Add a router to a new GNS3 project and start the device.
** Open the console for the router and practice using the following commands.
*** enable
*** configure terminal
*** username
*** line console 0
*** login local
*** exec-timeout
*** enable secret
*** service password-encryption
*** exit
** Verify the configuration using the following command.
*** show running-config
** Exit the router console session and open the console again to test the configuration.
* Manage router configuration.
** Use one or more of the router configurations above and manage the configuration using the following commands.
*** enable
*** show running-config
*** copy running-config startup-config
*** show startup-config
*** reload
** After restarting the router, verify the configuration using the following command.
*** show running-config
** Clear the router configuration using the following commands.
*** erase startup-config
*** reload
** After restarting the router, verify the configuration using the following command.
*** show running-config

## Lesson Summary

* Cisco IOS (originally Internetwork Operating System) is software used on most Cisco Systems routers and network switches.
* IOS is a package of routing, switching, internetworking and telecommunications functions integrated into a multitasking operating system.
* Cisco IOS command modes determine the commands and privilege level of the current user.
* User EXEC mode allows connection to remote devices, changing terminal settings on a temporary basis, performing basic tests, and listing system information. User EXEC mode is indicated by a Router> prompt.
* Privileged EXEC mode allows all EXEC commands available on the system. Privileged EXEC mode is indicated by a Router# prompt.
* Global Configuration mode commands allow configuration of the system as a whole, and access to specific configuration modes and submodes. Global Configuration mode is indicated by a Router(config)# prompt.
* ROM Monitor mode is used for system diagnostics or when a valid system image is not found. ROM Monitor mode is indicated by a rommon1> prompt.
* Setup mode is an interactive sequence that allows first-time configuration of devices.
* More than 100 detail configuration modes and submodes are available for different interfaces and protocols.
* Almost every configuration command also has a no form used to disable the feature or function.
* Context-sensitive help is available by entering ? in any command mode.
* To enter privileged EXEC mode, or any other security level set by a system administrator, use the enable EXEC command.
* To exit privileged EXEC mode and return to user EXEC mode, or to exit to a lower privilege level, enter the disable EXEC command.
* To enter global configuration mode, use the configure terminal command in privileged EXEC mode.
* To exit any configuration mode to the next highest mode in the CLI mode hierarchy, use the exit command in any configuration mode.
* To close an active terminal session by logging off the router, use the exit command in EXEC mode.
* To specify or modify the hostname for the network server, use the hostname command in global configuration mode.
* To configure the domain name server (DNS) domain name, use the ip domain-name command in global configuration mode.
* To define and enable a customized banner to be displayed before the username and password login prompts, use the banner login global configuration command.
* To define and enable a message-of-the-day (MOTD) banner, use the banner motd global configuration command.
* To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.
* To specify a password on a line, use the password command in line configuration mode.
* To enable password checking at login, use the login command in line configuration mode.
* To establish a username-based authentication system, use the username command in global configuration mode.
* To enable username and password checking at login, use the login local command in line configuration mode.
* To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-timeout line configuration command.
* To set a local clear-text password to control access to various privilege levels, use the enable password command in global configuration mode.
* To specify an additional layer of security over the enable password command, use the enable secret command in global configuration mode.
* To encrypt passwords, use the service password-encryption command in global configuration mode.
* To display the contents of the current running configuration file or the configuration for a specific module, Layer 2 VLAN, class map, interface, map class, policy map, or virtual circuit (VC) class, use the show running-config command in privileged EXEC mode.
* The show startup-config command displays the startup configuration file contained in NVRAM or specified by the CONFIG_FILE environment variable.
* To copy any file from a source to a destination, use the copy command in privileged EXEC or diagnostic mode.
* To erase a file system or all files available on a file system, use the erase command in privileged EXEC or diagnostic mode.
* To reload the operating system, use the reload command in privileged EXEC or diagnostic mode.

## Key Terms
### command-line interface (CLI)

    A means of interacting with a computer program where the user issues commands to the program in the form of successive lines of text.

### configuration mode

    Allows commands that apply to the system as a whole, accessed using the configure command.

### console

    The text entry and display interface for system administration messages.

### enable mode

    Privileged EXEC mode, accessed using the enable command.

### host name

    A label assigned to a device connected to a computer network and used to identify the device in various forms of electronic communication.

### IOS image

    A Cisco system software file used to run Cisco routers and switches.

### local username

    Usernames and passwords stored on the local device using the login local and username commands.

### running config file

    The current system configuration, stored in RAM.

### startup config file

    The current system boot configuration, stored in NVRAM.

### user mode

    User EXEC mode, accessed by logging into a device.

## Review Questions

* Cisco IOS (originally _____) is _____. Cisco IOS (originally Internetwork Operating System) is software used on most Cisco Systems routers and network switches.
* IOS is _____. IOS is a package of routing, switching, internetworking and telecommunications functions integrated into a multitasking operating system.
* Cisco IOS command modes _____. Cisco IOS command modes determine the commands and privilege level of the current user.
* User EXEC mode _____. User EXEC mode allows connection to remote devices, changing terminal settings on a temporary basis, performing basic tests, and listing system information.
* User EXEC mode is indicated by _____. User EXEC mode is indicated by a Router> prompt.
* Privileged EXEC mode _____. Privileged EXEC mode allows all EXEC commands available on the system.
* Privileged EXEC mode is indicated by _____. Privileged EXEC mode is indicated by a Router# prompt.
* Global Configuration mode commands _____. Global Configuration mode commands allow configuration of the system as a whole, and access to specific configuration modes and submodes.
* Global Configuration mode is indicated by _____. Global Configuration mode is indicated by a Router(config)# prompt.
* ROM Monitor mode is used for _____. ROM Monitor mode is used for system diagnostics or when a valid system image is not found.
* ROM Monitor mode is indicated by _____. ROM Monitor mode is indicated by a rommon1> prompt.
* Setup mode is _____. Setup mode is an interactive sequence that allows first-time configuration of devices.
* More than 100 detail configuration modes and submodes are available for _____. More than 100 detail configuration modes and submodes are available for different interfaces and protocols.
* Almost every configuration command also has _____ used to disable the feature or function. Almost every configuration command also has a no form used to disable the feature or function.
* Context-sensitive help is available by _____. Context-sensitive help is available by entering ? in any command mode.
* To enter privileged EXEC mode, or any other security level set by a system administrator, use _____. To enter privileged EXEC mode, or any other security level set by a system administrator, use the enable EXEC command.
* To exit privileged EXEC mode and return to user EXEC mode, or to exit to a lower privilege level, use _____. To exit privileged EXEC mode and return to user EXEC mode, or to exit to a lower privilege level, use the disable EXEC command.
* To enter global configuration mode, use _____. To enter global configuration mode, use the configure terminal command in privileged EXEC mode.
* To exit any configuration mode to the next highest mode in the CLI mode hierarchy, use _____. To exit any configuration mode to the next highest mode in the CLI mode hierarchy, use the exit command in any configuration mode.
* To close an active terminal session by logging off the router, use _____. To close an active terminal session by logging off the router, use the exit command in EXEC mode.
* To specify or modify the hostname for the network server, use _____. To specify or modify the hostname for the network server, use the hostname command in global configuration mode.
* To configure the domain name server (DNS) domain name, use _____. To configure the domain name server (DNS) domain name, use the ip domain-name command in global configuration mode.
* To define and enable a customized banner to be displayed before the username and password login prompts, use _____. To define and enable a customized banner to be displayed before the username and password login prompts, use the banner login global configuration command.
* To define and enable a message-of-the-day (MOTD) banner, use _____. To define and enable a message-of-the-day (MOTD) banner, use the banner motd global configuration command.
* To identify a specific line for configuration and enter line configuration collection mode, use _____. To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.
* To specify a password on a line, use _____. To specify a password on a line, use the password command in line configuration mode.
* To enable password checking at login, use _____. To enable password checking at login, use the login command in line configuration mode.
* To establish a username-based authentication system, use _____. To establish a username-based authentication system, use the username command in global configuration mode.
* To enable username and password checking at login, use _____. To enable username and password checking at login, use the login local command in line configuration mode.
* To set the interval that the EXEC command interpreter waits until user input is detected, use _____. To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-timeout line configuration command.
* To set a local clear-text password to control access to various privilege levels, use _____. To set a local clear-text password to control access to various privilege levels, use the enable password command in global configuration mode.
* To specify an additional layer of security over the enable password command, use _____. To specify an additional layer of security over the enable password command, use the enable secret command in global configuration mode.
* To encrypt passwords, use _____. To encrypt passwords, use the service password-encryption command in global configuration mode.
* To display the contents of the current running configuration file or the configuration for a specific module, Layer 2 VLAN, class map, interface, map class, policy map, or virtual circuit (VC) class, use _____. To display the contents of the current running configuration file or the configuration for a specific module, Layer 2 VLAN, class map, interface, map class, policy map, or virtual circuit (VC) class, use the show running-config command in privileged EXEC mode.
* The show startup-config command _____. The show startup-config command displays the startup configuration file contained in NVRAM or specified by the CONFIG_FILE environment variable.
* To copy any file from a source to a destination, use _____. To copy any file from a source to a destination, use the copy command in privileged EXEC or diagnostic mode.
* To erase a file system or all files available on a file system, use _____. To erase a file system or all files available on a file system, use the erase command in privileged EXEC or diagnostic mode.
* To reload the operating system, use _____. To reload the operating system, use the reload command in privileged EXEC or diagnostic mode.

## Assessments

* Flashcards: Quizlet: CCENT - IOS Basics
* Quiz: Quizlet: CCENT - Lab Setup

## See Also

* HowToNetwork: Cisco IOS Command Summary
* CiscoPoint: How to Configure a Cisco Router