C H A PT E R 6

IP Commands
This chapter describes the commands used to configure Internet Protocol (IP) routing, such
as IP static routes, Routing Information Protocol (RIP), and IP filters.
RIP sends information about your router to other routers. Each entry in a RIP routing table
provides a variety of information, including the ultimate destination, the next hop on the
way to that destination, and a metric.
You can use filters in data collection, display, and analysis.

IP Commands 6-1
reset dhcp address

reset dhcp address

To reset a Dynamic Host Configuration Protocol (DHCP) address, use the reset dhcp
address command.
REset DHcp ADdress [ipaddress | ALl]

Syntax Description
ipaddress Clears the leased time with this IP address, which was assigned by the
router when the DHCP client requested it. The database mapping table
is reset. However, the client can ask for the same IP address. The same
IP address is assigned if it is not already assigned to another device.

ALl All lease lines are cleared.

Default
None

Command Mode
System mode or profile mode

Examples
The following example resets a specific DHCP address:
Host:2503> reset dhcp address 10.0.0.3

The following example resets all DHCP addresses:

Host:2503> reset dhcp address all

6-2 Cisco700 Series Router Command Reference

 reset dhcp address

Related Commands
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp netmask
set dhcp wins
show dhcp config

IP Commands 6-3
reset ip filter

reset ip filter
To delete an IP filter entered with the set ip filter command, use the reset ip filter
command.
REset IP FIlter filterid | ALl

Syntax Description
filterid Clears the IP filter with this identification number, which was assigned by the
router when the filter was created.

ALl Clears all IP filters.

Default
None

Command Mode
Profile mode

Examples
The following example deletes an IP filter with identification number 8 for profile 2503:
Host:2503> reset ip filter 8

The following example deletes all IP filters for profile 2503:

Host:2503> reset ip filter all

Related Command
set ip filter

6-4 Cisco700 Series Router Command Reference

 reset ip route

reset ip route
To delete an IP static route, use the reset ip route command.
REset IP ROUTE ALl | DEstination | network [/bits] [GAteway nexthop]

Syntax Description
ALl Deletes all static routes.

DEstination IP address in four-part dotted decimal format of the network or host to

which the packet is being sent.

/bits Number of network bits in the destination network IP address, counting

from the left.

GAteway IP address of the static route default gateway in four-part dotted decimal
nexthop format.

Default
None

Command Mode
Profile mode

Example
The following example deletes a static route for profile 2503:
Host:2503> reset ip route destination 250.250.250.1 gateway
150.150.150.1

Related Command
set ip route

IP Commands 6-5
reset ip pat porthandler

reset ip pat porthandler

To disable a Port Address Translation (PAT) porthandler, use the reset ip pat porthandler
command.
REset IP PAt POrthandler port_number | ALl

Syntax Description
port_number A decimal port number.

ALl Disables all assigned porthandlers.

Default
None

Command Mode
System mode

Usage Guidelines
Use this command to remove a specific porthandler or all porthandlers.

Example
The following example disables all PAT porthandlers:
Host:2503> reset ip pat po all

Related Command
set ip pat porthandler

6-6 Cisco700 Series Router Command Reference

 set dhcp

set dhcp
To enable the Dynamic Host Configuration Protocol (DHCP) server or DHCP relay agent,
use the set dhcp command.
SEt DHcp [SErver | RElay ipaddress | OFf]

Syntax Description
SErver Serves the DHCP requests from the client directly.

RElay Relays the DHCP request to the specified DHCP server.

ipaddress IP address of a DHCP server, where Cisco 700 series routers relay
sending and receiving packets.

OFf Disables the DHCP server and relay agent.

Default
Off

Command Mode
System mode

Usage Guidelines
A limited DHCP server implementation is provided. When this server function is enabled
and configured, it assigns and manages IP addresses from a specified address pool to DHCP
clients. The options supported by this server are sufficient for Windows 95 clients. If more
IP addresses or options are required, a commercial DHCP server (such as Windows NT)
should be used.
The router relays DHCP requests and responses between DHCP clients and a specified
DHCP server. Use the set dhcp relay ipaddress command, where the IP address is the
address of the server to which DHCP requests are forwarded.

IP Commands 6-7
set dhcp

The set dhcp server command enables the DHCP server with the following options:

set dhcp address The range of address to be assigned to DHCP clients,

start_addr count where start_addr is the starting IP address and count is
the number of addresses (from 1 to 256) to be assigned.
(The default starting address is 10.0.0.2, with 10.0.0.1
assigned to the router.)

set dhcp netmask The subnet mask of the DHCP clients.

nnn.nnn.nnn.nnn

set dhcp gateway primary | The default gateway for the DHCP clients.
secondary ip_address

set dhcp dns primary | The Domain Name System (DNS) for the DHCP clients.
secondary ip_address

set dhcp wins primary | The WINS servers for the DHCP clients.
secondary ip_address

reset dhcp domain string The domain string for the DHCP clients.

set dhcp address ip_address | Removes the lease of an IP address. If all is specified, all
all the leases are cleared.

show dhcp config The current DHCP Server or Relay Agent configuration
details.

If the DHCP server is enabled and there are no DHCP parameters configured, a default IP
address x is chosen. This is the LAN or Internal profile IP address if the default IP address
is not zero, or 10.0.0.1 if it is zero.
The following parameters are set:
• DHCP primary gateway = x
• DHCP netmask = native mask from x
• DHCP address pool: start-addr = x+1, count = 128 or a value limited by subnet mask
and x

6-8 Cisco700 Series Router Command Reference

 set dhcp

IP routing is turned on for the LAN profile.

Example
The following example turns on the DHCP server:
Host> set dhcp server

Related Commands
reset dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp netmask
set dhcp wins
show dhcp config

IP Commands 6-9
set dhcp address

set dhcp address

To set the range of addresses (or address pool) to be used by the DHCP server for DHCP
clients, use the set dhcp address command.
SEt DHcp ADdress ipaddress count | ALl

Syntax Description
ipaddress The starting address of the pool. To delete the address pool, use
0.0.0.0. for the ipaddress.

count The number of IP addresses in the pool. The maximum number of IP

addresses is 254 or the number of hosts available in the specified
subnet. If the subnet exceeds 254, the table ranges from the start
address to the first 254 addresses on the subnet.

ALl Removes all the leases of the IP addresses.

Default
Dependent on the DHCP parameters configured.

Command Mode
System mode

Usage Guidelines
If the DHCP server is enabled and there are no DHCP parameters configured, a default
address pool with starting ipaddress as the LAN or Internal profile’s IP (if not zero) + 1 or
10.0.0.2. will be set. The count will be the minimum of 128 or the value limited by the IP
and netmask.
To reset this value to the default value, enter:
Host> set dhcp address 0.0.0.0 128

6-10 Cisco700 Series Router Command Reference

 set dhcp address

Example
The following is an example of a DHCP address pool. The DHCP address is 192.165.2.1.
The count is 10.
Host> set dhcp address 192.165.2.1 10

Related Commands
reset dhcp
set dhcp
set dhcp dns
set dhcp gateway
set dhcp netmask
set dhcp wins
show dhcp config

IP Commands 6-11
set dhcp dns

set dhcp dns

To set the Domain Name System (DNS) server address for DHCP clients, use the set dhcp
dns command.
SEt DHcp DNs PRimary | SEcondary serveraddrress

Syntax Description
PRimary Primary DNS server address.

SEcondary Secondary DNS server address.

serveraddress DNS server address in four-part dotted decimal format.

Default
None

Command Mode
System mode

Usage Guidelines
To delete the DHCP DNS address, use 0.0.0.0 as the server address. The primary or
secondary DNS can be set using the set dhcp dns command.

Example
The following example configures the DHCP DNS server address:
Host> set dhcp DNS primary 150.150.10.47
Host> set dhcp DNS secondary 150.150.10.17

6-12 Cisco700 Series Router Command Reference

 set dhcp dns

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp netmask
set dhcp wins
show dhcp config

IP Commands 6-13
set dhcp domain

set dhcp domain

To specify the domain string for DHCP clients, use the set dhcp domain command.
SEt DHcp DOmain [string]

Syntax Description
string Domain string. To delete the domain name, use the null string () or leave the
field blank.

Default
None

Command Mode
System mode

Example
The following is an example of a DHCP domain string:
Host> set dhcp domain cisco.com

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp netmask
set dhcp wins
show dhcp config

6-14 Cisco700 Series Router Command Reference

 set dhcp gateway

set dhcp gateway

To specify the default gateway address for DHCP clients, use the set dhcp gateway
command.
SEt DHcp GAteway PRimary | SEcondary ipaddress

Syntax Description
PRimary Primary DNS server address.

SEcondary Secondary DNS server address.

ipaddress Primary or secondary gateway address. To delete the gateway, use

0.0.0.0. for the IP address.

Default
If the DHCP server is enabled and there are no DHCP parameters configured, a default
value of the LAN or Internal profile’s IP (if non-zero) or 10.0.0.1 will be set.

Command Mode
System mode

Usage Guidelines
Make sure the primary gateway address matches with the IP address of the LAN or Internal
profile (whichever is configured) for proper operation.

Example
The following example configures a DHCP gateway:
Host> set dhcp gateway primary 140.140.11.17
Host> set dhcp gateway secondary 140.140.11.18

IP Commands 6-15
set dhcp gateway

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp netmask
set dhcp wins
show dhcp config

6-16 Cisco700 Series Router Command Reference

 set dhcp leasetime

set dhcp leasetime

To set the IP address lease time, use the set dhcp leasetime command.
SEt DHcp LEasetime minutes

Syntax Description
minutes A range from 60 to 71000 minutes (approximately 50 days) or 0 (infinite).

Default
0 minutes (a lease time of infinity)

Command Mode
System mode

Usage Guidelines
With software Release 4.2(2), the lease-time value can be set to 0 or from 60 to 71000
minutes. When the least time is set to 0, the lease time is infinite (the default value). (The
system time must be set accurately for the lease time feature to function properly.)
When a DHCP client needs an IP address, it sends a DHCP request packet to the network.
The request packet can include the duration (lease time) during which the client would use
the IP address. The router, acting as a DHCP server, allocates IP addresses from its pool
(depending on availability). The lease time allocated to the client in the response packet
depends on the lease time set on the router.
For example, a router with a lease time set to infinite (default) responds to a DHCP client
request as follows:
• Requests for lease time of 50 minutes get a lease time of infinity.
• Requests for a lease time of 75000 minutes get a lease time of infinity.

IP Commands 6-17
set dhcp leasetime

• Requests for a lease time of 1000 minutes get a lease time of 1000 minutes.
• Requests without a specified lease time get a lease time of infinity.
A router with a lease time set to a value of 100 minutes responds to a DHCP client request
as follows:
• Requests for a lease time of 50 get a lease time of 100 minutes.
• Requests for a lease time of 75000 minutes gets a lease time of 100 minutes.
• Requests for a lease time of 1000 get a lease time of 1000 minutes.
• Requests without a specified lease time get a lease time of 100 minutes.

Example
The following example sets the lease time to 60 minutes:
Host> set dhcp leasetime 60

Related Command
show dhcp config

6-18 Cisco700 Series Router Command Reference

 set dhcp netbiosscope

set dhcp netbiosscope

To add a character string value to the NetBIOS name, use the set dhcp netbios_scope
command.
SEt DHcp NETBIOS_Scope [scopeid]

Syntax Description
scopeid A character string to be appended to the NetBIOS name.

Default
None

Command Mode
System mode

Usage Guidelines
NetBIOS Scope, also known as TCP/IP Scope, adds a second element to the single-element
NetBIOS computer name. The scope ID is a character string value appended to the
NetBIOS name and is used for all NBT (NetBIOS over TCP/IP) communications from that
computer. The character string can be multipart, and it is a limited method of creating
isolated subnets based on NetBIOS names, using an extension to the name.

Example
The following example adds a character string to the NetBIOS computer name:
Host> set dhcp netbios_scope cntrl

Related Command
show dhcp config

IP Commands 6-19
set dhcp netmask

set dhcp netmask

To set the subnet mask for DHCP clients, use the set dhcp netmask command.
SEt DHcp NEtmask nnn.nnn.nnn.nnn

Syntax Description
nnn.nnn.nnn.nnn Subnet mask for the DHCP clients. Use a 32-bit quantity in
four-part dotted decimal format.

Default
If the DHCP server is enabled and there are no DHCP parameters configured, a default
value of the LAN or Internal profile’s netmask or 255.0.0.0 is set.

Command Mode
System mode

Usage Guidelines
Make sure the DHCP subnet mask matches the LAN or Internal profiles (whichever is
configured) for proper operation.

Example
The following example configures a DHCP subnet mask:
Host> set dhcp netmask 255.255.255.0

6-20 Cisco700 Series Router Command Reference

 set dhcp netmask

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp wins
show dhcp config

IP Commands 6-21
set dhcp wins

set dhcp wins

To specify the WINS server for DHCP clients, use the set dhcp wins command.
SEt DHcp WIns PRimary | SEcondary serveraddress

Syntax Description
PRimary Primary DHCP WINS server address.

SEcondary Secondary DHCP WINS server address.

serveraddress IP address of the primary or secondary WINS server. To delete the

WINS server, use 0.0.0.0 for the IP address.

Default
None

Command Mode
System mode

Example
The following example specifies a WINS server for a DHCP client:
host> set dhcp wins primary 140.10.6.5
host> set dhcp wins secondary 140.10.6.6

6-22 Cisco700 Series Router Command Reference

 set dhcp wins

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp netmask
show dhcp config

IP Commands 6-23
set gateway

set gateway
To set a static default route pointing at the router profile’s connection interface, use the set
gateway command.
SEt GAteway ipaddress

Syntax Description
ipaddress IP address of the profile’s interface in four-part dotted decimal format.

Default
0.0.0.0

Command Mode
System mode

Example
The following example configures a default static route to the Internal profile’s connection:
Host> set gateway 150.150.10.10

6-24 Cisco700 Series Router Command Reference

 set ip address

set ip address
To set the IP address for any interface, use the set ip address command.
SEt IP ADdress ipaddress

Syntax Description
ipaddress IP address for the interface in four-part dotted decimal format. To delete the
IP address of an interface, use this command with 0.0.0.0 as the IP address.

Default
0.0.0.0

Command Mode
Profile mode

Example
The following example configures the user-defined profile 2503 connection with an IP
address:
Host:2503> set ip address 150.150.10.17

IP Commands 6-25
set ip cost

set ip cost
To set the cost metric to the next destination, use the set ip cost command.
SEt IP COst value

Syntax Description
value Number of routers between this router and the destination network.

Default
The default cost value is 1.

Command Mode
System or profile mode

Usage Guidelines
Entering this command while in profile mode applies the cost to that profile connection.
Entering this command in system mode applies the cost to the Internal profile.

Example
The following example configures profile 2503 with a cost parameter of 2:
Host:2503> set ip cost 2

6-26 Cisco700 Series Router Command Reference

 set ip filter

set ip filter
To create an IP filter, use the set ip filter command.
SEt IP FIlter [[type] IN | OUt [SOurce = [NOT] address] [DEstination= [NOT]
address]] | [IN | OUt [patternname]^8] [BLock | ACcept | DEmand | IGnore]

Syntax Description
type One of the following keywords corresponding to an IP packet type:
icmp—Internet Control Message Protocol (ICMP) packets.
icmpxrd—ICMP packets, except redirect packets.
icmprd—ICMP redirect packets.
tcp—Transmission Control Protocol (TCP) packets.
tcpsyn—TCP SYN (connection establishment) packets.
tcpxsyn—TCP packets, except SYN.
udp—User Datagram Packets.
If no packet type is specified, the filter is applied to all IP packets.

IN Filters on incoming packets to a profile.

OUt Filters on outgoing packets to a profile.

SOurce Applies filters only to packets sourced from this address.

address
Using the source not address keyword applies the filter to any packet
that is not from the IP address specified in the command.

DEstination Applies filters to all packets destined for this address.

address
Using the destination not address keyword applies the filter to any
packet that is not destined for the IP address specified in the command.

IP Commands 6-27
set ip filter

address IP address is entered in the following format:

ipaddress [/bits] [:loport] [+ | –] [hiport]
ipaddress—The source or destination IP address. Use a 32-bit quantity in
four-part dotted decimal format, for example 10.1.1.0.
/bits—The number of significant bits in the IP address, counting from the
left, for example, Class C = 24 bits or 255.255.255.0.
low-port—The lowest port number matched by the filter.
If followed by a plus sign (+), all ports greater than this port are matched
by the filter.
If followed by a minus (–), all ports between this port and the high port
are matched by the filter.
hiport—The highest port number matched by the filter.
Low port and high port arguments can only be used if the packet type is
set to tcp or udp.

patternname The pattern value is 6 bytes, a maximum of 8 patterns are allowed, and
the patterns should be set by the set pattern command before using this
command. When defining a pattern filter with the set pattern command,
the reference points of each pattern should be iphdr, tcphdr, udphdr,
tcpdata, or udpdata. Using this field excludes the source and destination
fields.

BLock Prevents the packets defined in the filter from being sent on to the
connection.

ACcept Allows the packets defined in the filter to be sent on to the connection.

DEmand Packets that match the filter are counted in the threshold values that keep
the WAN connected or bring it up if it is down.

IGnore Packets matching the filter are not counted in the threshold values that
keep the WAN connected. If the WAN is not up when the ignored packet
is received, the packet is dropped; otherwise the packet is forwarded.

6-28 Cisco700 Series Router Command Reference

 set ip filter

Default
No IP filters are configured.

Command Mode
Profile mode

Usage Guidelines
IP filters can be created based on the source address, destination address, or existing byte
patterns set by the set pattern command. Entering this command while in profile mode
applies the IP filter to that profile connection. Entering this command in system mode
applies the IP filter to the Internal profile.
When IP filter is set with type TCP and port 21 (FTP), the FTP session fails because any
TCP packet with a destination port other than 21 is filtered.
To ensure the FTP session is successful, do not specify the FTP port; for example:
host> set ip filter TCP out destination a.b.c.d/32:21 accept

Refer to the “Port Assignments and NetBIOS Names” appendix for further information.
The maximum offset a byte pattern can have is 255 bytes from the reference point.
The maximum number of patterns that can be specified is 20.
Packets that do not match any filters are processed as follows:
• If any one of the filters is set to accept, a packet that does not match at least one of the
filters is blocked.
• If all the filters are set to block, a packet that does not match any filter is accepted.
• If any one of the filters is set to demand, a packet that does not match a demand filter
is ignored.
• If any one of the filters is set to ignore, a packet that does not match an ignore filter is
treated as demand.

IP Commands 6-29
set ip filter

Examples
An incoming packet addressed to TCP port 25 is accepted:
Host:2503> set ip filter tcp in source=198.95.216.125:25 accept

An incoming TCP packet, where the TCP data portion is the start width of the pattern
defined by tcppat1, is blocked:
Host:2503> set ip filter in tcppat1 block

An outgoing TCP packet addressed to port 23 is blocked:

Host:2503> set pat1 pattern 00 17 offset 2 from TCPHDR
Host:2503> set ip filter out pat1 block

The following example demonstrates the packet filtering process. A packet is compared
with filter statements until it matches a filter or until all the filters have been tested.
system:2503> set ip filter out tcppat1 accept
system:2503> set ip filter out udppat1 block
system:2503> set ip filter out udppat2 accept

If the packet matches the first filter, it is accepted and forwarded (bringing up the WAN if
necessary). If it matches the second filter, the packet is blocked. If it matches the third filter,
it is accepted and forwarded. If the packet does not match any of the filters, it is blocked.
In the following example, if an outgoing packet matches the first filter, it is counted in the
threshold values and forwarded (bringing up the WAN if necessary). If it matches the
second filter, the packet is ignored with regards to the threshold values. If a packet matches
the third filter, it is demanded, the WAN is brought up, the packet is forwarded, and the
threshold value increments. If the packet does not match any of the filters, it is ignored.
system:2503> set ip filter out tcppat1 demand
system:2503> set ip filter out udppat1 ignore
system:2503> set ip filter out udppat2 demand

6-30 Cisco700 Series Router Command Reference

 set ip filter

In the following example, an outgoing packet is compared with each filter. If the packet
does not match any of the filters, it is blocked and ignored because an accept filter is
defined.
system:2503> set ip filter out tcppat1 accept
system:2503> set ip filter out udppat1 block
system:2503> set ip filter out udppat2 demand
system:2503> set ip filter out tcppat2 ignore

In the following example, an outgoing packet that does not match any of the filters is
accepted and ignored because there is one demand filter defined.
system:2503> set ip filter out tcppat1 block
system:2503> set ip filter out udppat1 demand
system:2503> set ip filter out udppat2 ignore

Related Commands
reset ip filter
set pattern
show filter
show pattern

IP Commands 6-31
set ip framing

set ip framing
To set the type of encapsulation used for IP packets, use the set ip framing command.
SEt IP FRaming EThernet_II | NOne

Default
Ethernet_II for 3.x
None for 4.x user-defined profiles
Ethernet_II for 4.x LAN and Internal profiles

Command Mode
Profile mode

Syntax Description
EThernet_II Sets packet framing to the standard IEEE Ethernet_II frame
encapsulation.

NOne Sets packet framing to Internet Protocol Control Protocol (IPCP). Use
this keyword when using Point-to-Point Protocol (PPP).

Usage Guidelines
The router can be assigned an IP address from the remote device using Internet Protocol
Control Protocol (IPCP) address negotiation. It supports IPCP options 1 and 3. (It does not
support option 2, TCP/IP Header Compression.) IP unnumbered is supported. IPCP address
negotiation is on by default in any profile configured for IP routing. This feature does not
support assigning addresses to remote devices.

Example
The following example configures profile 2503 for Ethernet II packet framing:
Host:2503> set ip framing ethernet

6-32 Cisco700 Series Router Command Reference

 set ip multicast

set ip multicast
To enable IP multicast forwarding, use the set ip multicast command.
SEt IP MUlticast ON | OFf

Syntax Description
ON Enable multicast.

OFf Disable multicast.

Default
Multicast forwarding will be turned off.

Command Mode
Profile mode

Usage Guidelines
Entering this command while in a particular profile enables the forwarding of multicast
packets received from that interface to all the other interfaces that have IP multicast turned
on.
For IP multicast, the Cisco IOS-700 software does not support IGMP (Internet Group
Membership Protocol), PIM (Protocol Independence Multicast), or DVMRP (Distance
Vector Multicast Routing Protocol) protocols. It recognizes only the multicast packets and
forwards them to all active interfaces. However, as a router, the Cisco IOS-700 software
decrements the TTL (time to live) of multicast packets. Most IP multicast packets have a
TTL of 1, which results in dropping these packets before they are forwarded to other active
interfaces.
To overcome this limitation, it is recommended that the Multicast application generate
packets with TTL values greater than 1. When the Cisco IOS-700 software decrements the
TTL, it remains a positive value to be forwarded to other interfaces.

IP Commands 6-33
set netbios name spoofing

set netbios name spoofing

To enable or disable spoofing for NetBIOS, use the set netbios name spoofing command.
Spoofing prevents unnecessary NetBIOS name query request packets from being
transmitted across the ISDN line.
SEt NETBIos Name Spoofing minutes | OFf

Syntax Description
minutes Sets NetBIOS name spoofing for an ISDN connection for a specified number
of minutes. The range is 1 to 32,000 minutes. For an idle ISDN connection, if
spoofing is already turned on, the spoofing time is reset to the number of
minutes specified. If spoofing is turned off, spoofing does not start until the
ISDN line is brought up.

OFf Disables NetBIOS name spoofing.

Default
Off

Command Mode
Profile mode

Usage Guidelines
When a user turns on NetBIOS name spoofing on the outgoing user profile for the WINS
server, and a local WINS client sends a NetBIOS name query request packet, if the router
has the answer to the query, it replies by sending a response packet. If the router does not
have the answer to the query, the request is forwarded to the remote WINS server. When
the answer comes back from the WINS server, it forwards the response to the local WINS
client.
The router keeps a database of up to 100 NetBIOS name entries and has an aging scheme
for out-of-date name entries. The aging timeout is 4 hours for each entry.

6-34 Cisco700 Series Router Command Reference

 set netbios name spoofing

Example
The following example enables NetBIOS name spoofing for 1 hour on the profile 2503:
Host:2503> set netbios name spoofing 60

Related Commands
set ip config
show netbios name spoofing

IP Commands 6-35
set ip netmask

set ip netmask
To set the subnet mask for an interface, use the set ip netmask command. To delete the
subnet mask for an interface, enter this command with 0.0.0.0 as the subnet node.
SEt IP NEtmask mask

Syntax Description
mask Subnet mask for the profile interface. Use a 32-bit quantity in four-part dotted
decimal format.

Default
0.0.0.0

Command Mode
System or profile mode

Usage Guidelines
Entering this command while in profile mode applies the IP netmask to the connection
created for that user. Entering this command in system mode applies the IP netmask to the
Internal profile.

Example
The following example configures the subnet mask for profile 2503:
Host:2503> set ip netmask 255.255.255.0

Related Command
set subnet mask

6-36 Cisco700 Series Router Command Reference

 set ip pat

set ip pat
To enable or disable IP Port Address Translation (PAT), use the set ip pat command.
SEt IP PAt ON | OFf

Syntax Description
ON PAT is enabled and will reset and flush the PAT internal tables.

OFf PAT is disabled.

Default
Off

Command Mode
Profile mode

Usage Guidelines
The set ip pat command turns IP update off and propagate on. PAT cannot be turned on at
an internal, standard, or LAN profile for software Release 4.0(1). When PAT is turned on,
the maximum number of user profiles is two.

Example
The following example disables PAT:
Host:2503> set ip pat off

Related Command
show ip pat

IP Commands 6-37
set ip pat porthandler

set ip pat porthandler

To set up the PAT port handler for a decimal port number, use the set ip pat porthandler
command.
SEt IP PAt POrthandler DEfault | TElnet | FTp | SMtp | WIns | HTtp | portnumber
ipaddress | OFf

Syntax Description
DEfault The IP addresses specified are the default handlers for all ports, except
ports specifically assigned a handler. Use the show ip pat command to
show the current assignments.

TElnet Telnet protocol port 23.

FTp File Transport Protocol (FTP) protocol port 21.

SMtp Simple Mail Transfer Protocol (SMTP) protocol port 25.

WIns NetBIOS session service port 139.

HTtp World Wide Web - HTTP and secure HTTP port 80,443.

portnumber The TCP/UDP port numbers in decimal.

ipaddress Local unregistered IP address.

Default
None

Command Mode
System mode

6-38 Cisco700 Series Router Command Reference

 set ip pat porthandler

Usage Guidelines
The port handler maps a public port to a private IP address. When a packet is received from
the outside, Port Address Translation (PAT) compares the port number with an internally
configured port handler list (15 entries, maximum), and if there is a port handler defined for
this port, it routes the packet to the appropriate port handler. If there is a default port handler
defined, it routes the packet there. If it fails to find entries for the above two cases, the router
itself handles the packet.
The PAT feature enables local hosts with designated private IP addresses to communicate
with the outside world. The router translates the source address of the IP header with a
single, global, unique IP address before the packet is forwarded to the outside world.
Likewise, IP packets on the return path go through address translations to the designated
private IP addresses. When PAT is enabled, the transmission of RIP packets is
automatically disabled to prevent leaking private IP addresses to the outside world.
This system mode command sets up a port handler for one of the IP applications defined by
the mnemonics or for a decimal port number defined by port_number. For example, to
define the port 21 (decimal) service handler (for private IP address 10.1.3.1), use
set ip pat porthandler 21 10.1.3.1.
To undefine the port handler, use set ip pat porthandler 10.1.3.1 off.
There is a limit of 15 entries for this command.
Since PAT takes away the end-to-end significance of an IP address, there are limitations
when PAT is enabled:
• PING from an outside host to a host in the private network ends at the router and is not
forwarded to the inside host.
• Telnet from an outside host to a host in the private network also ends at the router if there
is no telnet port handler defined.
• Only one inside or private WWW server is supported. WWW linkages with other inside
hosts or servers are not translated.
• Only one FTP server, Telnet server and so forth is supported in the inside network.
• Packets destined for the router itself, such as DHCP, SNMP, PING, and TFTP, are not
subject to the PAT.

IP Commands 6-39
set ip pat porthandler

• A maximum of 12 PCs can simultaneously boot in the inside network. If more than 12
PCs try to boot up simultaneously, one or more can get the error message about not
being able to access the server.
• 400 PAT entries are allocated for sharing among the inside machines. If TCP
connections are set up, and TCP timeouts are set to keep alive, no more than 400
machines can get to the outside world.
• The Cisco 700 PAT feature does not handle fragmented FTP packets.
• Multidestination with unnumbered links does not work for PAT and is not
recommended.
• Some well-known ports cannot have port handlers defined. They include the DHCP
client port, used by the router in getting DHCP server responses, and the WINS netbios
ports, used by Inside Windows 95 PCs to get WINS information.

Example
The following example is the PAT configuration used to translate traffic to and from an FTP
server with IP address 10.0.0.3 and a Web server with IP address 10.0.0.5 that reside on the
private LAN:
(System Level)
Host> set system 760
Host> set user remote

(User Profile)
760:remote> set active remote
760:remote> set ip routing on
760:remote> set ip pat on
760:remote> cd

(System Level)
Host> set ip pat porthandler ftp 10.0.0.3
Host> set ip pat porthandler http 10.0.0.5

Related Commands
show ip pat
set ip pat

6-40 Cisco700 Series Router Command Reference

 set ip pat tcptimeout

set ip pat tcptimeout

To set the timeout value for port usage over Transmission Control Protocol (TCP), use the
set ip pat tcptimeout command.
SEt IP PAt TCptimeout minutes

Syntax Description
minutes Timeout value for TCP port usage. If the port is idle for the time selected, the
connection is terminated. If there is activity on the port before the end of the
timeout, the clock is reset to zero and restarts.

Default
30 minutes

Command Mode
System mode

Example
The following example sets the TCP timeout for 60 minutes:
Host:2503> set ip pat tcptimeout 60

Related Command
show ip pat

IP Commands 6-41
set ip pat udptimeout

set ip pat udptimeout

To set the timeout value for the port usage over User Datagram Protocol (UDP), use the set
ip pat udptimeout command.
SEt IP PAt UDPTimeout minutes

Syntax Description
minutes The timeout value for the UDP port usage. If the port is idle for the time
selected, the connection is terminated. If there is activity on the port before
the end of the timeout, the clock is reset to zero and restarts.

Default
5 minutes

Command Mode
System mode

Example
The following example sets the UDP timeout for 10 minutes:
Host:2503> set ip pat udptimeout 10

Related Command
show ip pat

6-42 Cisco700 Series Router Command Reference

 set ip propagate

set ip propagate
To set whether a route over the Ethernet interface is propagated in Routing Information
Protocol (RIP) broadcast messages, use the set ip propagate command.
SEt IP PROpagate ON | OFf

Syntax Description
ON Routes over the profile interface are propagated in RIP broadcast messages
whenever the connection is active.

OFf Routes over the profile interface are not be propagated in RIP broadcast
messages.

Default
On

Command Mode
System or profile mode

Usage Guidelines
Entering this command in profile mode applies the IP propagate parameters to that profile’s
connection. Entering this command in system mode applies the IP propagate parameters to
the Internal profile.

Example
The following example configures any route over the profile 2503 connection to be
propagated in RIP broadcast messages:
Host:2503> set ip propagate on

IP Commands 6-43
set ip rip receive

set ip rip receive

To set whether Routing Information Protocol (RIP) packets are received, use the set ip rip
receive command.
SEt IP RIp REceive BOth | V1 | V2 | OFf

Syntax Description
BOth Both versions 1 and 2 packets will be received.

V1 RIP version 1 packet will be received.

V2 RIP version 2 packet will be received.

OFf RIP packets will not be received on the profile’s interface.

Default
Off

Command Mode
System or profile mode

Usage Guidelines
Entering this command in profile mode applies the RIP receive parameters to that profile’s
connection. Entering this command in system mode applies the RIP receive parameters to
the Internal profile.

Example
The following example configures the connection for profile 2503 to block RIP packets:
Host:2503> set ip rip receive off

6-44 Cisco700 Series Router Command Reference

 set ip rip snapshot client

set ip rip snapshot client

To set up the snapshot client parameters for a given profile, use the set ip rip snapshot
client command.
SEt IP RIp SNapshot Client ACtive minutes QUiet minutes UPdate
ON | OFf

Syntax Description
ACtive minutes The duration in minutes for the active period when routing information
is exchanged or the quiet period when no routing information is
exchanged. Range is from 1 to 70,000 minutes.

UPdate ON Configures the client to send routing information as soon as it enters

the active period.

UPdate OFf Configures the client to wait for the periodic update to send the routing
information after it enters the active period.

Default
None

Command Mode
Profile mode

Usage Guidelines
Entering this command sets the client snapshot parameters for a given profile. These values
are used when the set ip rip update command is set to snapshot.
To set up IP or IPX to use snapshot routing, configure one device as a client and the other
as a server, and the two devices can communicate through the ISDN WAN. To configure
the router as an IP snapshot client, use the set ip rip snapshot client active x quiet y
update on command (x is the active time in minutes and y is the quiet time in minutes).

IP Commands 6-45
set ip rip snapshot client

If update is turned on, the router sends an IP RIP packet as soon as the client enters active
state and without waiting for the 30-second clock.
To configure a router as an IP snapshot server, use the set ip rip snapshot server active z
update on command (z is the active time in minutes). Normally, you set z equal to x so that
the client and server have the same active time.
Once both devices are configured and you reboot them, the client enters a pre-active state
after 3 minutes. The 3-minute delay allows the WAN data stack to be initialized.
During the pre-active time, if update is on the client sends a RIP packet immediately.
Otherwise, it sends a RIP packet at the regular 30-second interval. The router waits up to
1 minute for a RIP packet from the server. If no rip packet is received, it repeats this
send-RIP-packet-and-wait procedure three times, for a total of 3 minutes. Then it enters the
active state. If a RIP packet is received from the server, it enters the active state
immediately. This is done to synchronize the start of active time for both the client and the
server. So it is better to configure both with the same active time and update on.
During the active time, both the client and server behave as if the command is set to
periodic. RIP packets are exchanged every 30 seconds and aging of routes takes place.
After the active time expires, both the client and server enter a post-active state and stay in
this state for 3 minutes. During post-active state, no RIP packets are sent and no routes are
aged. After the 3 minutes, the client and server enter the quiet state, and the same behavior
as in the post-active state occurs: no RIP packet and no aging.
At the end of quiet time, the client enters pre-active time and the cycle is repeated; the client
goes through pre-active, active, post-active, quiet process. The server is passive; it goes
through active, post-active, and stays in quiet until it receives a RIP packet from the client,
and then it enters the active state.
Remember that there is an initial 3-minute delay before the client enters the pre-active state.
If you set the active time to x minutes, the active time used is x+1 minutes, to synchronize
with Cisco IOS.
You can use the show ip rip snapshot command to show your snapshot configuration and
monitor the state of the client or server.

6-46 Cisco700 Series Router Command Reference

 set ip rip snapshot client

Example
The following example shows the configuration of the profile user 1 as a snapshot client
that has an active period of 10 minutes, a quiet period of 60 minutes, and sends routing
information as soon as it enters the active period.
Host> cd user1
Host:user1> set ip rip snapshot client act 10 quiet 60 update on

Related Command
set ip rip update

IP Commands 6-47
set ip rip snapshot server

set ip rip snapshot server

To set the snapshot server parameters for a given profile, use the set ip rip snapshot server
command.
SEt IP RIp SNapshot SErver ACtive minutes UPdate ON | OFf

Syntax Description
ACtive minutes Number of minutes for the active period when routing information is
exchanged. Range is from 1 to 70,000 minutes.

UPdate ON Configures the server to send routing information as soon as it enters

the active period.

UPdate OFf Configures the server to wait for the periodic update to send the
routing information after it enters the active period.

Default
None

Command Mode
Profile mode

Usage Guidelines
Entering this command sets the server snapshot parameters for a given profile. These values
will be used when the set ip rip update command is set to snapshot.

6-48 Cisco700 Series Router Command Reference

 set ip rip snapshot server

Example
The following example shows the configuration of the profile user 1 as a snapshot server
that has an active period of 10 minutes and a quiet period of 60 minutes, and that sends
routing information as soon as it enters the active period:
Host> cd user1
Host:user1> set ip rip snapshot server active 10 update on

Related Command
set ip rip update

IP Commands 6-49
set ip rip summarization

set ip rip summarization

To enable IP RIP route summarization, use the set ip rip summarization command.
SEt IP RIp SUmmarization AUto | OFf

Syntax Description
AUto Routes across classful boundaries will be summarization to a single route based
on the classful boundary.

OFf Disables router summarization. The router will use the normal RIP version 2
routes with Variable Length Subnet Mask (VLSM).

Default
Off

Command Mode
Profile mode

Usage Guidelines
Route summarization is provided on IP RIP Version 2 (only Version 2 provides the required
subnet mask information).

Example
The following example shows route summarization set to be across classful boundaries to
a single route based on the classful boundary:
Host> cd user1
Host> cd user1 set ip rip summarization auto

6-50 Cisco700 Series Router Command Reference

 set ip rip time

set ip rip time

To change the IP RIP time, use the set ip rip time command.
SEt IP RIP TIme seconds

Syntax Description
seconds Any value between 1 and 4294967 seconds.

Default
30 seconds

Command Mode
System mode

Usage Guidelines
If two RIP timers are on, updates are sent at alternate intervals with a period of half the
interval between them. The remaining RIP timers (timeout, hold-down, and flush) are
calculated relative to the RIP update timer.

Example
The following example sets the interval to 120 seconds:
Host> set ip rip time 120

Related Command
show ip rip time

IP Commands 6-51
set ip rip update

set ip rip update

To specify that Routing Information Protocol (RIP) packets will be sent at 5-minute
intervals, use the set ip rip update command.
SEt IP RIp UPdate PEriodic | DEmand | SNapshot | LInkup | TRiggered | OFf

Syntax Description
PEriodic RIP packets are sent both periodically and whenever there is a change in the
RIP table. Use this keyword in the LAN profile to pass RIP information to
the LAN at regular intervals.

DEmand RIP packets are sent both when the ISDN line first connects and when a
change occurs in the RIP table. Use this keyword for WAN connections to
avoid bringing up the Integrated Services Digital Network (ISDN) line
unnecessarily.

SNapshot The two periods for routing updates are quiet and active. During the active
period routing updates or exchanges are in a normal process, over a
particular interface. Once the active period expires, the quiet period begins,
and the routing table is frozen in that state. There is no activity until the
quiet period expires.

LInkup RIP packets are sent if the link is up. Use this for WAN connections to
avoid bringing up the ISDN line unnecessarily. The RIP packets are sent
when a connection is established and every 30 seconds as long as the
connection exists. If the connection does not exist, no RIP data is sent. This
prevents the line from being brought up by RIP packets sent in periodic
updates.

TRiggered RIP packets are sent when the link is brought up and when a change occurs
in the RIP table.

OFf RIP packets are not sent.

6-52 Cisco700 Series Router Command Reference

 set ip rip update

Default
Off

Command Mode
System or profile mode

Usage Guidelines
Entering this command while in profile mode applies the IP update parameters to that
profile’s connection. Entering this command in system mode applies the IP update
parameters to the Internal profile.
The IP RIP Update Linkup option for IP RIP enables better interoperability between the
router and Cisco IOS. If the IP RIP update is set to link up for a WAN profile, the IP RIP
data is sent as soon as a connection is established and again every 30 seconds for as long as
the connection exists. If the connection does not exist, no RIP data is sent. This prevents the
line from being brought up by RIP packets where the update is periodic.
The set ip rip command includes a triggered option, for triggered updates. Prior to
software Release 4.3(1), RIP updates contained the entire routing table and were sent
periodically using a large amount of bandwidth over low-speed lines, such as dial-up
interfaces and connection-oriented, packet-switched networks such as X.25. Using the
Triggered extension to RIP, the router exchanges only the changed information through an
incremental update, saving both bandwidth and CPU time. For triggered RIP to work
properly, the peer router must also be configured for triggered RIP. (Refer to RFC 2091,
Triggered Extension to RIP to Support Demand Circuits for additional information.)
This feature does not support Netware RIP or Netware service access point (SAP).
The neighboring router must also support Triggered extensions to IP RIP on its interface.
When Triggered RIP is enabled and the neighboring router does not respond to the packet,
the router stops sending triggered updates.
If Triggered RIP is enabled at the system level, it is applied to the Internal profile.
The show ip conf all command shows the current routing table with Triggered RIP as an
entry under the TX heading. Routes learned through Triggered RIP do not age out and
display an age value of 0 in the output of the show ip route all command.

IP Commands 6-53
set ip rip update

Example
The following example configures profile 2503 for sending RIP packets on demand:
Host:2503> set ip rip update demand

Related Commands
show ip conf
show ip route

6-54 Cisco700 Series Router Command Reference

 set ip rip version

set ip rip version

To specify which version of IP RIP (1 or 2) packets is used, use the set ip rip version
command.
SEt IP RIp VErsion 1 | 2 | BOth

Syntax Description
1 Sends RIP Version 1 packets.

2 Sends RIP Version 2 packets.

BOth Sends both Version 1 and 2 packets.

Default
RIP version 1 packets

Command Mode
Profile mode

Example
The following example configures profile 2503 to send RIP Version 2 packets:
Host:2503> set ip rip version 2

Related Command
set ip route

IP Commands 6-55
set ip route

set ip route
To define a static IP route, use the command set ip route.
SEt IP ROUTE DEstination network [/bits] GAteway nexthop [PRopagate ON |
OFf] [COst value]

Syntax Description
DEstination network Static route destination network address.

bits Number of network bits in the destination address, counting

from the left. This information will be propagated only if RIP
Version 2 is being used for RIP broadcasts.

GAteway nexthop IP address of the router that receives the packet for this network
or host.

PRopagate ON | OFf Whether or not the static route defined by this command will be
propagated in RIP packets.

COst value Cost metric for the route.

Default
No static routes are defined.

Command Mode
Profile mode

Example
The following example configures a static IP route for profile 2503:
Host:2503> set ip route destination 198.95.217.0/24 gateway 198.95.217.1
propagate on cost 2

6-56 Cisco700 Series Router Command Reference

 set ip route

Related Command
reset ip route

IP Commands 6-57
set ip routing

set ip routing
To enable or disable IP routing, use the set ip routing command.
SEt IP ROuting ON | OFf

Syntax Description
ON Enables IP routing on the profile interface.

OFf Disables IP routing on the profile interface.

Default
Off

Command Mode
Profile mode

Usage Guidelines
Any profile that has IP routing enabled must have a network address assigned using the set
ip address command.

Example
The following example enables IP routing for profile 2503:
Host:2503> set ip routing on

Related Command
set ip address

6-58 Cisco700 Series Router Command Reference

 set subnet

set subnet
To set the subnet mask for an interface, use the set subnet command. To delete the subnet
mask for an interface, use this command with 0.0.0.0 as the IP address mask.
SEt SUBnet ipaddressmask

Syntax Description
ipaddressmask Subnet mask for the profile interface. Use a 32-bit quantity in
four-part dotted decimal format.

Default
0.0.0.0

Command Mode
System or profile mode

Usage Guidelines
Entering this command in profile mode applies the subnet mask to that profile interface.
Entering this command in system mode applies the subnet mask to the Internal profile.

Example
The following example configures the subnet mask for profile 2503:
Host:2503> set subnet 255.255.255.0

Related Command
set ip netmask

IP Commands 6-59
show dhcp config

show dhcp config

To display the Dynamic Host Configuration Protocol (DHCP) configuration settings, use
the show dhcp config command.
SHow DHcp COnfig

Default
None

Command Mode
System mode

Example
The following example shows the DHCP configuration with an infinite (0) lease time:
Host> show dhcp config
Environment
DHCP Server ON
DHCP Relay OFF
IP Address Pool
Start IP Address 10.0.0.2
Count 128
Lease Time (minutes) Infinite
Subnet Mask 255.0.0.0
DNS Configuration
Primary DNS Server NONE
Secondary DNS Server NONE
Domain ""
Gateways
Primary Gateway 10.0.0.1
Secondary Gateway NONE
WINS Configuration
Primary WINS Server NONE
Secondary WINS Server NONE
NetBios ScopeId ""

6-60 Cisco700 Series Router Command Reference

 show dhcp config

Address In Use
IP Address Mac Address Lease Expiration
10.0.0.2 00a0c9931954 Infinite
10.0.0.3 00a0c993191f Infinite
2 IP addresses allocated, 126 free

The following example shows the DHCP configuration with 60-minute lease time:
Host> show dhcp config
Environment
DHCP Server ON
DHCP Relay OFF
IP Address Pool
Start IP Address 10.0.0.2
Count 128
Lease Time (minutes) 60
Subnet Mask 255.0.0.0
DNS Configuration
Primary DNS Server NONE
Secondary DNS Server NONE
Domain ""
Gateways
Primary Gateway 10.0.0.1
Secondary Gateway NONE
WINS Configuration
Primary WINS Server NONE
Secondary WINS Server NONE
NetBios ScopeId ""
Address In Use
IP Address Mac Address Lease Expiration
10.0.0.2 00a0c9931954 04/20/1998 15:27:01
10.0.0.3 00a0c993191f 04/20/1998 15:26:00
2 IP addresses allocated, 126 free

IP Commands 6-61
show dhcp config

Related Commands
reset dhcp
set dhcp
set dhcp address
set dhcp dns
set dhcp gateway
set dhcp leasetime
set dhcp netmask
set dhcp wins

6-62 Cisco700 Series Router Command Reference

 show ip configuration

show ip configuration
To display the IP configuration for one or all profiles, use the show ip configuration
command.
SHow IP COnfiguration [ALl]

Syntax Description
ALl Displays the IP configuration for all profiles.

Command Mode
System or profile mode

Usage Guidelines
Use this command while in profile mode to display the IP configuration for that profile. Use
this command in system mode or with the keyword all to display the IP configurations for
all profiles.

Example
The following example shows the output of the show ip configuration command for profile
2503:
Host:2503> show ip config all
Profile Routing Frame IP Address Netmask RIP TX RX Prop Co
------------------------------------------------------------------------
LAN ON ETH2 153.50.6.27 255.255.255.128 V2 PER V2 ON 1
3274 ON IPCP 1.1.1.2 255.0.0.0 V2 PER V2 ON 1
gold ON IPCP 128.16.32.13 255.255.255.252 V2 DEM V2 ON 1
silver ON IPCP 15.16.193.6 255.255.248.0 V2 DEM V2 ON 1
copper ON IPCP 144.254.4.1 255.255.252.0 V2 DEM V2 ON 1
brass ON IPCP 131.108.2.160 255.255.255.0 V2 DEM V2 ON 1

IP Commands 6-63
show ip configuration

Profile PAT Multicast Summarization Netbios Spoofing/Left(min)

-------------------------------------------------------------------
LAN OFF OFF AUTO OFF /0
3274 OFF OFF AUTO 30 /0
gold OFF OFF AUTO 150 /0
silver OFF OFF AUTO 10 /0
copper OFF OFF AUTO 20 /0
brass OFF OFF AUTO OFF /0

Table 6-1 describes the fields shown in the display.

Table 6-1 Show IP Configuration Field Descriptions

Field Description
Profile Profile that is displayed. In profile mode, this field displays the name of
the profile.
Routing Indicates if IP routing is enabled for the profile.
Frame IP framing type used for the profile.
IP Address IP address for the connection.
Netmask IP netmask (subnet mask) used for the connection.
RIP RIP version packets used for the profile.
TX RIP update used for the profile—Off, Demand, Periodic, linkup, or
triggered.
RX RIP receive configuration for the profile.
Prop RIP propagate configuration for the profile—On or Off.
Cost Cost metric of the route.
PAT IP port address translation—On or Off.
Multicast Status of the multicast feature—On or Off.
Summarization Status of the summarization feature.
NetBIOS Length of spoofing period.
Spoofing/Left Minutes remaining in the spoofing period.

6-64 Cisco700 Series Router Command Reference

 show ip configuration

Related Commands
set user
set ip routing
set ip framing
set ip address
set ip netmask
set subnet mask
set ip rip version
set ip rip update
set ip rip receive
set ip propagate
set ip cost
set netbios name

IP Commands 6-65
show ip filter

show ip filter
To display the IP filters for one or all profiles, use the show ip filter command.
SHow IP FIlter [ALl]

Syntax Description
ALl Displays IP filters for all profiles.

Command Mode
System or profile mode

Usage Guidelines
Use this command in profile mode to display IP filters for that profile. Use this command
in system mode or with the keyword all to display IP filters for all profiles.

Example
The following is a example of the show ip filter command for profile 2503:
Host:2503> show ip filter all
IP Type Filter
Profile ID Dir Type Action Addresses
---------------------------------------------------
ios1 1 IN TCP BLOCK SRC 150.150.150.1/24
IOS700 1 OUT UDP BLOCK SRC 171.69.2.91/32
DST 172.22.17.215/32

IP Generic Filter
Profile ID Dir Type Action Patterns
-------------------------------------------------------
IOS700 2 OUT TCPDATA BLOCK SRC 150.150.150.1/24
ios2 1 IN UDPHDR ACCEPT SRC 172.22.17.215/32

Table 6-2 describes the fields shown in the display.

6-66 Cisco700 Series Router Command Reference

 show ip filter

Table 6-2 Show IP Filter Field Descriptions

Field Description
Profile Profile that is displayed. In profile mode, this field displays the name of the
profile.
ID The identification number assigned by the router when the filter is created.
Type Packet type to which the filter applies. If no packet type is specified in the
filter, IP is displayed.
Action Indicates the action to be taken for packets that match the filter (block or
accept).
Addresses Destination and/or source addresses of the packets to which the filter applies.
Patterns Pattern name to which the IP generic filter refers.

Related Command
set ip filter

IP Commands 6-67
show ip pat

show ip pat
To display the IP Port Address Translation (PAT) statistics and the currently active
translated sessions, use the show ip pat command.
SHow IP PAt

Syntax Description
This command has no keywords or arguments.

Command Mode
System mode

Example
The following is a example of the show ip pat command:
Host> show ip pat

Port Handler Service

-------------------------------------
0 10.1.1.1 DEFAULT
23 Router TELNET
67 Router DHCP Server
68 Router DHCP Client
69 Router TFTP
80 Router HTTP
161 Router SNMP
162 Router SNMP-TRAP
520 Router RIP

6-68 Cisco700 Series Router Command Reference

 show ip rip snapshot

show ip rip snapshot

To display the current snapshot parameters, use the show ip rip snapshot command.
SHow IP RIp SNapshot [ALl]

Syntax Description
ALl Displays current snapshot parameters for all profiles.

Command Mode
System or profile mode

Example
The following example shows the output from the show ip rip snapshot command:
Host> show ip rip snapshot

Profile Snapshot Active Quiet Update State

-------------------------------------------------------------------
LAN NONE 0 0 OFF
3274 SERVER 5 0 ON ACTIVE
gold CLIENT 5 3 ON QUIET
silver NONE 0 0 OFF
copper NONE 0 0 OFF
brass NONE 0 0 OFF

Table 6-3 describes snapshot parameters field descriptions.

Table 6-3 Snapshot Parameters Field Descriptions

Field Description
Profile The profile to which the parameters apply.
Snapshot Specifies whether snapshot is Off (none) or is acting as a client or a server for
this connection.
Active The active period in minutes.

IP Commands 6-69
show ip rip snapshot

Table 6-3 Snapshot Parameters Field Descriptions (continued)

Field Description
Quiet The quiet period in minutes.
Update Can be On or Off. Update On configures the client or server to send routing
information as soon as it enters the active period. Update Off configures the
client or server to wait for the periodic update to send the routing information
after it enters the active period.
State There are four states: pre-active, active, post-active, and quiet.

6-70 Cisco700 Series Router Command Reference

 show ip rip time

show ip rip time

To display the current IP RIP time value, use the show ip rip time command.
SHow IP RIP TIme

Command Mode
System mode

Example
The following example shows the RIP time in seconds:
Host> show ip rip time
Rip Time Limit 120 secs.

Related Command
set ip rip time

IP Commands 6-71
show ip route

show ip route
To display IP routes for one or all profiles, use the show ip route command.
SHow IP ROute [ALl]

Syntax Description
ALl Displays IP routes for all profiles.

Command Mode
System or profile mode

Usage Guidelines
Use this command in profile mode to display IP routes for that profile. Use this command
in system mode or with the keyword all to display IP routes for all profiles.

Example
The following is a example of the show ip route all command:
Host> show ip route all

Profile Type Destination Bits Gateway Prop Cost Source Age

-----------------------------------------------------------
JohnS NET 150.150.217.0 24 1.1.1.5 ON 3 RIP 0
JohnS NET 150.150.219.0 24 1.1.1.5 ON 3 RIP 0
JohnS NET 150.150.216.0 24 1.1.1.5 ON 2 RIP 0
JohnS NET 177.3.0.016.0 1.1.1.5 ON 3 RIP 0
Internal NET 149.7.0.0 16 DIRECT ON 1 DIRECT 0

Table 6-4 describes the fields shown in the display.

6-72 Cisco700 Series Router Command Reference

 show ip route

Table 6-4 Show IP Route Field Descriptions

Field Description
Profile Profile that is displayed. In profile mode, this field displays the name of the
profile.
Type Interface for the route (either NET or WAN).
Destination Destination network address.
Bits Number of bits in the destination address.
Gateway Local-network gateway for the route.
Propagate Indicates if the route is propagated in RIP packets.
Cost Cost value for the route destination address.
Source Source of information about this route.
Age Number of minutes the route remains in the table without being updated.

Related Command
set ip route

IP Commands 6-73
show netbios name

show netbios name

To display all the NetBIOS names in the router database, use the show netbios name
command.
SHow NETBIos NAme

Command Mode
System mode

Usage Guidelines
Spoofing prevents unnecessary packets from being transmitted across the ISDN line. When
a local WINS client sends a NetBIOS name query request packet, if the router has the
answer to the query, the router replies by sending out a response packet in place of the
server. If the router does not have an answer to the query, it forwards the query packets to
the WINS server. When the answer to the query comes back, the router forwards the
response to the client and saves a copy in its local database. The router keeps a local
database of up to 100 WINS name entries and has an aging scheme for the out-of-date name
entries. The entry is aged out of the database after four hours. When NetBIOS name
spoofing expires on one profile, the local database is cleared, if no other spoofing activity
is detected.

Example
The following example shows the output from the show netbios name command:
Host> show netbios name
Name IP Address Group/Unique
--------------------------------------------------
user1-pc 0x20 171.69.91.47 U
user2-pc 0x20 171.69.91.46 U
department 1 0x1c 172.88.77.66 G
171.11.22.33
171.44.55.66
system1c 0x00 192.22.87.65 U

Total Name: 4

6-74 Cisco700 Series Router Command Reference

 show netbios name

Table 6-5 describes the fields shown in the display.

Table 6-5 Show NetBIOS Name Command

Field Description
Name NetBIOS name. The end of the name includes the 16th byte of the name
printed as a hex number.
IP Address IP address of the systems that have registered this name.
Group/Unique A unique name or group name.

Related Commands
set ipx spoofing
set netbios name spoofing

IP Commands 6-75
show netbios name

6-76 Cisco700 Series Router Command Reference