CLI Command Reference

CISCO / BushNET CLI Command Reference

Complete CLI command reference for CISCO / BushNET running Cisco IOS XE.

Table of Contents

  1. Command Modes
  2. System Commands
  3. Interface Commands
  4. VLAN Commands
  5. Spanning Tree Commands
  6. Routing Commands
  7. Security Commands
  8. Monitoring Commands
  9. Configuration Management

Command Modes

User EXEC Mode

Switch>

Limited monitoring commands. Enter enable to access Privileged EXEC mode.

Privileged EXEC Mode

Switch#

Full monitoring and configuration access. Enter configure terminal for configuration mode.

Global Configuration Mode

Switch(config)#

System-wide configuration commands.

Interface Configuration Mode

Switch(config-if)#

Interface-specific configuration.

VLAN Configuration Mode

Switch(config-vlan)#

VLAN-specific configuration.

Line Configuration Mode

Switch(config-line)#

Console and VTY line configuration.

System Commands

Show Commands

show version

Display system hardware and software status.

Switch# show version

Output includes:

  • IOS XE version
  • Uptime
  • Hardware model
  • Memory and flash size
  • MAC address
  • License information

show running-config

Display current running configuration.

Switch# show running-config
Switch# show running-config | include <pattern>
Switch# show running-config | section <section>
Switch# show running-config interface <interface>

show startup-config

Display saved startup configuration.

Switch# show startup-config

show inventory

Display hardware inventory (modules, SFPs).

Switch# show inventory

show environment

Display environmental status (temperature, power).

Switch# show environment all
Switch# show environment temperature
Switch# show environment power

show processes cpu

Display CPU utilization.

Switch# show processes cpu
Switch# show processes cpu history

show memory

Display memory utilization.

Switch# show memory statistics

show logging

Display system log messages.

Switch# show logging
Switch# show logging | include <pattern>

show clock

Display system time.

Switch# show clock

show users

Display connected users.

Switch# show users

Configuration Commands

hostname

Set system hostname.

Switch(config)# hostname IE3300-SW1

enable secret

Set encrypted enable password.

Switch(config)# enable secret <password>

Configure login banners.

Switch(config)# banner motd # Authorized access only #
Switch(config)# banner login # Login Banner #

clock set

Set system time.

Switch# clock set HH:MM:SS DAY MONTH YEAR
Switch# clock set 14:30:00 27 Feb 2026

ntp server

Configure NTP server.

Switch(config)# ntp server <ip-address>
Switch(config)# ntp server 10.0.0.1 prefer

logging

Configure logging.

Switch(config)# logging buffered 16384
Switch(config)# logging host <ip-address>
Switch(config)# logging trap informational

Interface Commands

Show Commands

show interfaces

Display interface statistics.

Switch# show interfaces
Switch# show interfaces GigabitEthernet1/1
Switch# show interfaces status
Switch# show interfaces description
Switch# show interfaces trunk
Switch# show interfaces counters

show ip interface brief

Display IP interface summary.

Switch# show ip interface brief

show interfaces switchport

Display switchport configuration.

Switch# show interfaces GigabitEthernet1/1 switchport

Configuration Commands

interface

Enter interface configuration mode.

Switch(config)# interface GigabitEthernet1/1
Switch(config)# interface range GigabitEthernet1/1-8
Switch(config)# interface Vlan10

description

Set interface description.

Switch(config-if)# description Uplink to Core Switch

shutdown / no shutdown

Disable/enable interface.

Switch(config-if)# shutdown
Switch(config-if)# no shutdown

speed

Set interface speed.

Switch(config-if)# speed auto
Switch(config-if)# speed 100
Switch(config-if)# speed 1000

duplex

Set interface duplex mode.

Switch(config-if)# duplex auto
Switch(config-if)# duplex full
Switch(config-if)# duplex half

switchport mode

Set switchport mode.

Switch(config-if)# switchport mode access
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport mode dynamic auto
Switch(config-if)# switchport mode dynamic desirable

switchport access vlan

Assign access VLAN.

Switch(config-if)# switchport access vlan 10

switchport trunk

Configure trunk settings.

Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport trunk native vlan 99
Switch(config-if)# switchport trunk allowed vlan 10,20,30
Switch(config-if)# switchport trunk allowed vlan add 40
Switch(config-if)# switchport trunk allowed vlan remove 30

switchport voice vlan

Configure voice VLAN.

Switch(config-if)# switchport voice vlan 100

ip address

Configure IP address (SVI or routed port).

Switch(config-if)# ip address 192.168.1.1 255.255.255.0
Switch(config-if)# ip address dhcp

no switchport

Convert to routed port.

Switch(config-if)# no switchport
Switch(config-if)# ip address 10.0.0.1 255.255.255.252

VLAN Commands

Show Commands

show vlan

Display VLAN information.

Switch# show vlan
Switch# show vlan brief
Switch# show vlan id 10
Switch# show vlan summary

Configuration Commands

vlan

Create and configure VLANs.

Switch(config)# vlan 10
Switch(config-vlan)# name Engineering
Switch(config-vlan)# exit

vlan (range)

Create multiple VLANs.

Switch(config)# vlan 10,20,30,40
Switch(config)# vlan 100-110

no vlan

Delete VLAN.

Switch(config)# no vlan 10

Spanning Tree Commands

Show Commands

show spanning-tree

Display spanning tree information.

Switch# show spanning-tree
Switch# show spanning-tree vlan 10
Switch# show spanning-tree summary
Switch# show spanning-tree interface GigabitEthernet1/1
Switch# show spanning-tree root
Switch# show spanning-tree bridge

Configuration Commands

spanning-tree mode

Set spanning tree mode.

Switch(config)# spanning-tree mode rapid-pvst
Switch(config)# spanning-tree mode mst
Switch(config)# spanning-tree mode pvst

spanning-tree vlan priority

Set bridge priority.

Switch(config)# spanning-tree vlan 10 priority 4096
Switch(config)# spanning-tree vlan 10 root primary
Switch(config)# spanning-tree vlan 10 root secondary

spanning-tree portfast

Enable PortFast on access ports.

Switch(config-if)# spanning-tree portfast
Switch(config)# spanning-tree portfast default

spanning-tree bpduguard

Enable BPDU Guard.

Switch(config-if)# spanning-tree bpduguard enable
Switch(config)# spanning-tree portfast bpduguard default

Routing Commands

Show Commands

show ip route

Display routing table.

Switch# show ip route
Switch# show ip route static
Switch# show ip route connected
Switch# show ip route ospf
Switch# show ip route <ip-address>

show ip protocols

Display routing protocol information.

Switch# show ip protocols

show ip ospf

Display OSPF information.

Switch# show ip ospf
Switch# show ip ospf neighbor
Switch# show ip ospf interface
Switch# show ip ospf database

Configuration Commands

ip routing

Enable IP routing.

Switch(config)# ip routing

ip route

Configure static route.

Switch(config)# ip route 0.0.0.0 0.0.0.0 192.168.1.254
Switch(config)# ip route 10.0.0.0 255.0.0.0 192.168.1.2

ip default-gateway

Set default gateway (for non-routing mode).

Switch(config)# ip default-gateway 192.168.1.254

router ospf

Configure OSPF.

Switch(config)# router ospf 1
Switch(config-router)# router-id 1.1.1.1
Switch(config-router)# network 192.168.1.0 0.0.0.255 area 0
Switch(config-router)# passive-interface default
Switch(config-router)# no passive-interface GigabitEthernet1/1

Security Commands

Show Commands

show mac address-table

Display MAC address table.

Switch# show mac address-table
Switch# show mac address-table vlan 10
Switch# show mac address-table interface GigabitEthernet1/1
Switch# show mac address-table address <mac-address>
Switch# show mac address-table count

show port-security

Display port security status.

Switch# show port-security
Switch# show port-security interface GigabitEthernet1/1
Switch# show port-security address

show access-lists

Display access control lists.

Switch# show access-lists
Switch# show ip access-lists

show aaa

Display AAA configuration.

Switch# show aaa servers
Switch# show aaa sessions

Configuration Commands

username

Create local user account.

Switch(config)# username admin privilege 15 secret <password>
Switch(config)# username operator privilege 7 secret <password>

line console

Configure console line.

Switch(config)# line console 0
Switch(config-line)# password <password>
Switch(config-line)# login
Switch(config-line)# exec-timeout 10 0
Switch(config-line)# logging synchronous

line vty

Configure VTY lines (SSH/Telnet).

Switch(config)# line vty 0 15
Switch(config-line)# transport input ssh
Switch(config-line)# login local
Switch(config-line)# exec-timeout 15 0

ip ssh

Configure SSH.

Switch(config)# ip domain-name example.com
Switch(config)# crypto key generate rsa modulus 2048
Switch(config)# ip ssh version 2
Switch(config)# ip ssh time-out 60
Switch(config)# ip ssh authentication-retries 3

switchport port-security

Configure port security.

Switch(config-if)# switchport port-security
Switch(config-if)# switchport port-security maximum 2
Switch(config-if)# switchport port-security violation restrict
Switch(config-if)# switchport port-security mac-address sticky

access-list

Configure access control lists.

! Standard ACL
Switch(config)# access-list 10 permit 192.168.1.0 0.0.0.255
Switch(config)# access-list 10 deny any

! Extended ACL
Switch(config)# ip access-list extended BLOCK_TELNET
Switch(config-ext-nacl)# deny tcp any any eq 23
Switch(config-ext-nacl)# permit ip any any

ip access-group

Apply ACL to interface.

Switch(config-if)# ip access-group BLOCK_TELNET in

aaa

Configure AAA authentication.

Switch(config)# aaa new-model
Switch(config)# aaa authentication login default local
Switch(config)# aaa authorization exec default local

Monitoring Commands

show cdp

Display CDP information.

Switch# show cdp
Switch# show cdp neighbors
Switch# show cdp neighbors detail
Switch# show cdp entry *
Switch# show cdp interface

show lldp

Display LLDP information.

Switch# show lldp
Switch# show lldp neighbors
Switch# show lldp neighbors detail

show power inline

Display PoE status (if equipped).

Switch# show power inline
Switch# show power inline GigabitEthernet1/1

debug

Enable debugging (use with caution).

Switch# debug ip packet
Switch# debug spanning-tree events
Switch# undebug all

show tech-support

Generate technical support output.

Switch# show tech-support

Configuration Management

copy

Copy configuration files.

Switch# copy running-config startup-config
Switch# copy startup-config tftp://10.0.0.100/backup.cfg
Switch# copy tftp://10.0.0.100/config.cfg running-config
Switch# copy flash:config.bak running-config

write memory

Save running configuration.

Switch# write memory
Switch# wr

erase startup-config

Erase startup configuration.

Switch# erase startup-config

reload

Reload the switch.

Switch# reload
Switch# reload in 5
Switch# reload cancel

terminal length

Set terminal page length.

Switch# terminal length 0
Switch# terminal length 24

show flash

Display flash contents.

Switch# show flash:
Switch# dir flash:

archive

Configuration archive and rollback.

Switch(config)# archive
Switch(config-archive)# path flash:archive
Switch(config-archive)# maximum 10
Switch(config-archive)# write-memory

Switch# configure replace flash:archive-1 force

CISCO / BushNET Specific Commands

Industrial Protocol Commands

show cip

Display CIP (Common Industrial Protocol) status.

Switch# show cip security
Switch# show cip connections

show modbus

Display Modbus TCP status.

Switch# show modbus tcp connections

Alarm Relay Commands

alarm facility

Configure alarm relay.

Switch(config)# alarm facility power-supply relay major
Switch(config)# alarm facility temperature relay minor

REP (Resilient Ethernet Protocol)

Switch(config-if)# rep segment 1 edge primary
Switch(config-if)# rep segment 1 edge
Switch# show rep topology

PRP/HSR (Parallel Redundancy Protocol)

Switch(config)# prp-channel 1
Switch(config-prp-channel)# interface GigabitEthernet1/1-2
Switch# show prp channel

Command Shortcuts

Full Command Shortcut
configure terminal conf t
show running-config sh run
show interfaces sh int
show ip interface brief sh ip int br
show vlan brief sh vlan br
write memory wr
copy running-config startup-config copy run start
no shutdown no sh

References

Edit this page on GitHub